From c96f913d078a870f146eaa9f707c732a5535487b Mon Sep 17 00:00:00 2001 From: Peter Haag Date: Sat, 1 Jun 2024 13:11:12 +0200 Subject: [PATCH] Add multithreading filter processing Merge nfdump-devel multithreading code in nfdump.c. Introduces pipeline processing and multithreading filtering to improf performance with complex filters. --- .DS_Store | Bin 0 -> 6148 bytes m4/libtool.m4 | 8415 ++++++++++++++++++++++++++++++++ m4/ltoptions.m4 | 437 ++ m4/ltsugar.m4 | 124 + m4/ltversion.m4 | 24 + m4/lt~obsolete.m4 | 99 + out1 | 5975 +++++++++++++++++++++++ src/libnfdump/filter/grammar.c | 4225 ++++++++++++++++ src/libnfdump/filter/grammar.h | 199 + src/libnfdump/filter/scanner.c | 2553 ++++++++++ src/libnffile/vcs_track.h | 7 + src/tor/torlookup | Bin 0 -> 146072 bytes test.sh | 13 + test1.txt | 5975 +++++++++++++++++++++++ tmp/bidir | Bin 0 -> 1061 bytes tmp/v4 | Bin 0 -> 1493 bytes tmp/v6 | Bin 0 -> 1917 bytes 17 files changed, 28046 insertions(+) create mode 100644 .DS_Store create mode 100644 m4/libtool.m4 create mode 100644 m4/ltoptions.m4 create mode 100644 m4/ltsugar.m4 create mode 100644 m4/ltversion.m4 create mode 100644 m4/lt~obsolete.m4 create mode 100644 out1 create mode 100644 src/libnfdump/filter/grammar.c create mode 100644 src/libnfdump/filter/grammar.h create mode 100644 src/libnfdump/filter/scanner.c create mode 100644 src/libnffile/vcs_track.h create mode 100755 src/tor/torlookup create mode 100644 test.sh create mode 100644 test1.txt create mode 100644 tmp/bidir create mode 100644 tmp/v4 create mode 100644 tmp/v6 diff --git a/.DS_Store b/.DS_Store new file mode 100644 index 0000000000000000000000000000000000000000..5008ddfcf53c02e82d7eee2e57c38e5672ef89f6 GIT binary patch literal 6148 zcmeH~Jr2S!425mzP>H1@V-^m;4Wg<&0T*E43hX&L&p$$qDprKhvt+--jT7}7np#A3 zem<@ulZcFPQ@L2!n>{z**++&mCkOWA81W14cNZlEfg7;MkzE(HCqgga^y>{tEnwC%0;vJ&^%eQ zLs35+`xjp>T0. +]) + +# serial 59 LT_INIT + + +# LT_PREREQ(VERSION) +# ------------------ +# Complain and exit if this libtool version is less that VERSION. +m4_defun([LT_PREREQ], +[m4_if(m4_version_compare(m4_defn([LT_PACKAGE_VERSION]), [$1]), -1, + [m4_default([$3], + [m4_fatal([Libtool version $1 or higher is required], + 63)])], + [$2])]) + + +# _LT_CHECK_BUILDDIR +# ------------------ +# Complain if the absolute build directory name contains unusual characters +m4_defun([_LT_CHECK_BUILDDIR], +[case `pwd` in + *\ * | *\ *) + AC_MSG_WARN([Libtool does not cope well with whitespace in `pwd`]) ;; +esac +]) + + +# LT_INIT([OPTIONS]) +# ------------------ +AC_DEFUN([LT_INIT], +[AC_PREREQ([2.62])dnl We use AC_PATH_PROGS_FEATURE_CHECK +AC_REQUIRE([AC_CONFIG_AUX_DIR_DEFAULT])dnl +AC_BEFORE([$0], [LT_LANG])dnl +AC_BEFORE([$0], [LT_OUTPUT])dnl +AC_BEFORE([$0], [LTDL_INIT])dnl +m4_require([_LT_CHECK_BUILDDIR])dnl + +dnl Autoconf doesn't catch unexpanded LT_ macros by default: +m4_pattern_forbid([^_?LT_[A-Z_]+$])dnl +m4_pattern_allow([^(_LT_EOF|LT_DLGLOBAL|LT_DLLAZY_OR_NOW|LT_MULTI_MODULE)$])dnl +dnl aclocal doesn't pull ltoptions.m4, ltsugar.m4, or ltversion.m4 +dnl unless we require an AC_DEFUNed macro: +AC_REQUIRE([LTOPTIONS_VERSION])dnl +AC_REQUIRE([LTSUGAR_VERSION])dnl +AC_REQUIRE([LTVERSION_VERSION])dnl +AC_REQUIRE([LTOBSOLETE_VERSION])dnl +m4_require([_LT_PROG_LTMAIN])dnl + +_LT_SHELL_INIT([SHELL=${CONFIG_SHELL-/bin/sh}]) + +dnl Parse OPTIONS +_LT_SET_OPTIONS([$0], [$1]) + +# This can be used to rebuild libtool when needed +LIBTOOL_DEPS=$ltmain + +# Always use our own libtool. +LIBTOOL='$(SHELL) $(top_builddir)/libtool' +AC_SUBST(LIBTOOL)dnl + +_LT_SETUP + +# Only expand once: +m4_define([LT_INIT]) +])# LT_INIT + +# Old names: +AU_ALIAS([AC_PROG_LIBTOOL], [LT_INIT]) +AU_ALIAS([AM_PROG_LIBTOOL], [LT_INIT]) +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([AC_PROG_LIBTOOL], []) +dnl AC_DEFUN([AM_PROG_LIBTOOL], []) + + +# _LT_PREPARE_CC_BASENAME +# ----------------------- +m4_defun([_LT_PREPARE_CC_BASENAME], [ +# Calculate cc_basename. Skip known compiler wrappers and cross-prefix. +func_cc_basename () +{ + for cc_temp in @S|@*""; do + case $cc_temp in + compile | *[[\\/]]compile | ccache | *[[\\/]]ccache ) ;; + distcc | *[[\\/]]distcc | purify | *[[\\/]]purify ) ;; + \-*) ;; + *) break;; + esac + done + func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"` +} +])# _LT_PREPARE_CC_BASENAME + + +# _LT_CC_BASENAME(CC) +# ------------------- +# It would be clearer to call AC_REQUIREs from _LT_PREPARE_CC_BASENAME, +# but that macro is also expanded into generated libtool script, which +# arranges for $SED and $ECHO to be set by different means. +m4_defun([_LT_CC_BASENAME], +[m4_require([_LT_PREPARE_CC_BASENAME])dnl +AC_REQUIRE([_LT_DECL_SED])dnl +AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH])dnl +func_cc_basename $1 +cc_basename=$func_cc_basename_result +]) + + +# _LT_FILEUTILS_DEFAULTS +# ---------------------- +# It is okay to use these file commands and assume they have been set +# sensibly after 'm4_require([_LT_FILEUTILS_DEFAULTS])'. +m4_defun([_LT_FILEUTILS_DEFAULTS], +[: ${CP="cp -f"} +: ${MV="mv -f"} +: ${RM="rm -f"} +])# _LT_FILEUTILS_DEFAULTS + + +# _LT_SETUP +# --------- +m4_defun([_LT_SETUP], +[AC_REQUIRE([AC_CANONICAL_HOST])dnl +AC_REQUIRE([AC_CANONICAL_BUILD])dnl +AC_REQUIRE([_LT_PREPARE_SED_QUOTE_VARS])dnl +AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH])dnl + +_LT_DECL([], [PATH_SEPARATOR], [1], [The PATH separator for the build system])dnl +dnl +_LT_DECL([], [host_alias], [0], [The host system])dnl +_LT_DECL([], [host], [0])dnl +_LT_DECL([], [host_os], [0])dnl +dnl +_LT_DECL([], [build_alias], [0], [The build system])dnl +_LT_DECL([], [build], [0])dnl +_LT_DECL([], [build_os], [0])dnl +dnl +AC_REQUIRE([AC_PROG_CC])dnl +AC_REQUIRE([LT_PATH_LD])dnl +AC_REQUIRE([LT_PATH_NM])dnl +dnl +AC_REQUIRE([AC_PROG_LN_S])dnl +test -z "$LN_S" && LN_S="ln -s" +_LT_DECL([], [LN_S], [1], [Whether we need soft or hard links])dnl +dnl +AC_REQUIRE([LT_CMD_MAX_LEN])dnl +_LT_DECL([objext], [ac_objext], [0], [Object file suffix (normally "o")])dnl +_LT_DECL([], [exeext], [0], [Executable file suffix (normally "")])dnl +dnl +m4_require([_LT_FILEUTILS_DEFAULTS])dnl +m4_require([_LT_CHECK_SHELL_FEATURES])dnl +m4_require([_LT_PATH_CONVERSION_FUNCTIONS])dnl +m4_require([_LT_CMD_RELOAD])dnl +m4_require([_LT_DECL_FILECMD])dnl +m4_require([_LT_CHECK_MAGIC_METHOD])dnl +m4_require([_LT_CHECK_SHAREDLIB_FROM_LINKLIB])dnl +m4_require([_LT_CMD_OLD_ARCHIVE])dnl +m4_require([_LT_CMD_GLOBAL_SYMBOLS])dnl +m4_require([_LT_WITH_SYSROOT])dnl +m4_require([_LT_CMD_TRUNCATE])dnl + +_LT_CONFIG_LIBTOOL_INIT([ +# See if we are running on zsh, and set the options that allow our +# commands through without removal of \ escapes INIT. +if test -n "\${ZSH_VERSION+set}"; then + setopt NO_GLOB_SUBST +fi +]) +if test -n "${ZSH_VERSION+set}"; then + setopt NO_GLOB_SUBST +fi + +_LT_CHECK_OBJDIR + +m4_require([_LT_TAG_COMPILER])dnl + +case $host_os in +aix3*) + # AIX sometimes has problems with the GCC collect2 program. For some + # reason, if we set the COLLECT_NAMES environment variable, the problems + # vanish in a puff of smoke. + if test set != "${COLLECT_NAMES+set}"; then + COLLECT_NAMES= + export COLLECT_NAMES + fi + ;; +esac + +# Global variables: +ofile=libtool +can_build_shared=yes + +# All known linkers require a '.a' archive for static linking (except MSVC and +# ICC, which need '.lib'). +libext=a + +with_gnu_ld=$lt_cv_prog_gnu_ld + +old_CC=$CC +old_CFLAGS=$CFLAGS + +# Set sane defaults for various variables +test -z "$CC" && CC=cc +test -z "$LTCC" && LTCC=$CC +test -z "$LTCFLAGS" && LTCFLAGS=$CFLAGS +test -z "$LD" && LD=ld +test -z "$ac_objext" && ac_objext=o + +_LT_CC_BASENAME([$compiler]) + +# Only perform the check for file, if the check method requires it +test -z "$MAGIC_CMD" && MAGIC_CMD=file +case $deplibs_check_method in +file_magic*) + if test "$file_magic_cmd" = '$MAGIC_CMD'; then + _LT_PATH_MAGIC + fi + ;; +esac + +# Use C for the default configuration in the libtool script +LT_SUPPORTED_TAG([CC]) +_LT_LANG_C_CONFIG +_LT_LANG_DEFAULT_CONFIG +_LT_CONFIG_COMMANDS +])# _LT_SETUP + + +# _LT_PREPARE_SED_QUOTE_VARS +# -------------------------- +# Define a few sed substitution that help us do robust quoting. +m4_defun([_LT_PREPARE_SED_QUOTE_VARS], +[# Backslashify metacharacters that are still active within +# double-quoted strings. +sed_quote_subst='s/\([["`$\\]]\)/\\\1/g' + +# Same as above, but do not quote variable references. +double_quote_subst='s/\([["`\\]]\)/\\\1/g' + +# Sed substitution to delay expansion of an escaped shell variable in a +# double_quote_subst'ed string. +delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g' + +# Sed substitution to delay expansion of an escaped single quote. +delay_single_quote_subst='s/'\''/'\'\\\\\\\'\''/g' + +# Sed substitution to avoid accidental globbing in evaled expressions +no_glob_subst='s/\*/\\\*/g' +]) + +# _LT_PROG_LTMAIN +# --------------- +# Note that this code is called both from 'configure', and 'config.status' +# now that we use AC_CONFIG_COMMANDS to generate libtool. Notably, +# 'config.status' has no value for ac_aux_dir unless we are using Automake, +# so we pass a copy along to make sure it has a sensible value anyway. +m4_defun([_LT_PROG_LTMAIN], +[m4_ifdef([AC_REQUIRE_AUX_FILE], [AC_REQUIRE_AUX_FILE([ltmain.sh])])dnl +_LT_CONFIG_LIBTOOL_INIT([ac_aux_dir='$ac_aux_dir']) +ltmain=$ac_aux_dir/ltmain.sh +])# _LT_PROG_LTMAIN + + +## ------------------------------------- ## +## Accumulate code for creating libtool. ## +## ------------------------------------- ## + +# So that we can recreate a full libtool script including additional +# tags, we accumulate the chunks of code to send to AC_CONFIG_COMMANDS +# in macros and then make a single call at the end using the 'libtool' +# label. + + +# _LT_CONFIG_LIBTOOL_INIT([INIT-COMMANDS]) +# ---------------------------------------- +# Register INIT-COMMANDS to be passed to AC_CONFIG_COMMANDS later. +m4_define([_LT_CONFIG_LIBTOOL_INIT], +[m4_ifval([$1], + [m4_append([_LT_OUTPUT_LIBTOOL_INIT], + [$1 +])])]) + +# Initialize. +m4_define([_LT_OUTPUT_LIBTOOL_INIT]) + + +# _LT_CONFIG_LIBTOOL([COMMANDS]) +# ------------------------------ +# Register COMMANDS to be passed to AC_CONFIG_COMMANDS later. +m4_define([_LT_CONFIG_LIBTOOL], +[m4_ifval([$1], + [m4_append([_LT_OUTPUT_LIBTOOL_COMMANDS], + [$1 +])])]) + +# Initialize. +m4_define([_LT_OUTPUT_LIBTOOL_COMMANDS]) + + +# _LT_CONFIG_SAVE_COMMANDS([COMMANDS], [INIT_COMMANDS]) +# ----------------------------------------------------- +m4_defun([_LT_CONFIG_SAVE_COMMANDS], +[_LT_CONFIG_LIBTOOL([$1]) +_LT_CONFIG_LIBTOOL_INIT([$2]) +]) + + +# _LT_FORMAT_COMMENT([COMMENT]) +# ----------------------------- +# Add leading comment marks to the start of each line, and a trailing +# full-stop to the whole comment if one is not present already. +m4_define([_LT_FORMAT_COMMENT], +[m4_ifval([$1], [ +m4_bpatsubst([m4_bpatsubst([$1], [^ *], [# ])], + [['`$\]], [\\\&])]m4_bmatch([$1], [[!?.]$], [], [.]) +)]) + + + +## ------------------------ ## +## FIXME: Eliminate VARNAME ## +## ------------------------ ## + + +# _LT_DECL([CONFIGNAME], VARNAME, VALUE, [DESCRIPTION], [IS-TAGGED?]) +# ------------------------------------------------------------------- +# CONFIGNAME is the name given to the value in the libtool script. +# VARNAME is the (base) name used in the configure script. +# VALUE may be 0, 1 or 2 for a computed quote escaped value based on +# VARNAME. Any other value will be used directly. +m4_define([_LT_DECL], +[lt_if_append_uniq([lt_decl_varnames], [$2], [, ], + [lt_dict_add_subkey([lt_decl_dict], [$2], [libtool_name], + [m4_ifval([$1], [$1], [$2])]) + lt_dict_add_subkey([lt_decl_dict], [$2], [value], [$3]) + m4_ifval([$4], + [lt_dict_add_subkey([lt_decl_dict], [$2], [description], [$4])]) + lt_dict_add_subkey([lt_decl_dict], [$2], + [tagged?], [m4_ifval([$5], [yes], [no])])]) +]) + + +# _LT_TAGDECL([CONFIGNAME], VARNAME, VALUE, [DESCRIPTION]) +# -------------------------------------------------------- +m4_define([_LT_TAGDECL], [_LT_DECL([$1], [$2], [$3], [$4], [yes])]) + + +# lt_decl_tag_varnames([SEPARATOR], [VARNAME1...]) +# ------------------------------------------------ +m4_define([lt_decl_tag_varnames], +[_lt_decl_filter([tagged?], [yes], $@)]) + + +# _lt_decl_filter(SUBKEY, VALUE, [SEPARATOR], [VARNAME1..]) +# --------------------------------------------------------- +m4_define([_lt_decl_filter], +[m4_case([$#], + [0], [m4_fatal([$0: too few arguments: $#])], + [1], [m4_fatal([$0: too few arguments: $#: $1])], + [2], [lt_dict_filter([lt_decl_dict], [$1], [$2], [], lt_decl_varnames)], + [3], [lt_dict_filter([lt_decl_dict], [$1], [$2], [$3], lt_decl_varnames)], + [lt_dict_filter([lt_decl_dict], $@)])[]dnl +]) + + +# lt_decl_quote_varnames([SEPARATOR], [VARNAME1...]) +# -------------------------------------------------- +m4_define([lt_decl_quote_varnames], +[_lt_decl_filter([value], [1], $@)]) + + +# lt_decl_dquote_varnames([SEPARATOR], [VARNAME1...]) +# --------------------------------------------------- +m4_define([lt_decl_dquote_varnames], +[_lt_decl_filter([value], [2], $@)]) + + +# lt_decl_varnames_tagged([SEPARATOR], [VARNAME1...]) +# --------------------------------------------------- +m4_define([lt_decl_varnames_tagged], +[m4_assert([$# <= 2])dnl +_$0(m4_quote(m4_default([$1], [[, ]])), + m4_ifval([$2], [[$2]], [m4_dquote(lt_decl_tag_varnames)]), + m4_split(m4_normalize(m4_quote(_LT_TAGS)), [ ]))]) +m4_define([_lt_decl_varnames_tagged], +[m4_ifval([$3], [lt_combine([$1], [$2], [_], $3)])]) + + +# lt_decl_all_varnames([SEPARATOR], [VARNAME1...]) +# ------------------------------------------------ +m4_define([lt_decl_all_varnames], +[_$0(m4_quote(m4_default([$1], [[, ]])), + m4_if([$2], [], + m4_quote(lt_decl_varnames), + m4_quote(m4_shift($@))))[]dnl +]) +m4_define([_lt_decl_all_varnames], +[lt_join($@, lt_decl_varnames_tagged([$1], + lt_decl_tag_varnames([[, ]], m4_shift($@))))dnl +]) + + +# _LT_CONFIG_STATUS_DECLARE([VARNAME]) +# ------------------------------------ +# Quote a variable value, and forward it to 'config.status' so that its +# declaration there will have the same value as in 'configure'. VARNAME +# must have a single quote delimited value for this to work. +m4_define([_LT_CONFIG_STATUS_DECLARE], +[$1='`$ECHO "$][$1" | $SED "$delay_single_quote_subst"`']) + + +# _LT_CONFIG_STATUS_DECLARATIONS +# ------------------------------ +# We delimit libtool config variables with single quotes, so when +# we write them to config.status, we have to be sure to quote all +# embedded single quotes properly. In configure, this macro expands +# each variable declared with _LT_DECL (and _LT_TAGDECL) into: +# +# ='`$ECHO "$" | $SED "$delay_single_quote_subst"`' +m4_defun([_LT_CONFIG_STATUS_DECLARATIONS], +[m4_foreach([_lt_var], m4_quote(lt_decl_all_varnames), + [m4_n([_LT_CONFIG_STATUS_DECLARE(_lt_var)])])]) + + +# _LT_LIBTOOL_TAGS +# ---------------- +# Output comment and list of tags supported by the script +m4_defun([_LT_LIBTOOL_TAGS], +[_LT_FORMAT_COMMENT([The names of the tagged configurations supported by this script])dnl +available_tags='_LT_TAGS'dnl +]) + + +# _LT_LIBTOOL_DECLARE(VARNAME, [TAG]) +# ----------------------------------- +# Extract the dictionary values for VARNAME (optionally with TAG) and +# expand to a commented shell variable setting: +# +# # Some comment about what VAR is for. +# visible_name=$lt_internal_name +m4_define([_LT_LIBTOOL_DECLARE], +[_LT_FORMAT_COMMENT(m4_quote(lt_dict_fetch([lt_decl_dict], [$1], + [description])))[]dnl +m4_pushdef([_libtool_name], + m4_quote(lt_dict_fetch([lt_decl_dict], [$1], [libtool_name])))[]dnl +m4_case(m4_quote(lt_dict_fetch([lt_decl_dict], [$1], [value])), + [0], [_libtool_name=[$]$1], + [1], [_libtool_name=$lt_[]$1], + [2], [_libtool_name=$lt_[]$1], + [_libtool_name=lt_dict_fetch([lt_decl_dict], [$1], [value])])[]dnl +m4_ifval([$2], [_$2])[]m4_popdef([_libtool_name])[]dnl +]) + + +# _LT_LIBTOOL_CONFIG_VARS +# ----------------------- +# Produce commented declarations of non-tagged libtool config variables +# suitable for insertion in the LIBTOOL CONFIG section of the 'libtool' +# script. Tagged libtool config variables (even for the LIBTOOL CONFIG +# section) are produced by _LT_LIBTOOL_TAG_VARS. +m4_defun([_LT_LIBTOOL_CONFIG_VARS], +[m4_foreach([_lt_var], + m4_quote(_lt_decl_filter([tagged?], [no], [], lt_decl_varnames)), + [m4_n([_LT_LIBTOOL_DECLARE(_lt_var)])])]) + + +# _LT_LIBTOOL_TAG_VARS(TAG) +# ------------------------- +m4_define([_LT_LIBTOOL_TAG_VARS], +[m4_foreach([_lt_var], m4_quote(lt_decl_tag_varnames), + [m4_n([_LT_LIBTOOL_DECLARE(_lt_var, [$1])])])]) + + +# _LT_TAGVAR(VARNAME, [TAGNAME]) +# ------------------------------ +m4_define([_LT_TAGVAR], [m4_ifval([$2], [$1_$2], [$1])]) + + +# _LT_CONFIG_COMMANDS +# ------------------- +# Send accumulated output to $CONFIG_STATUS. Thanks to the lists of +# variables for single and double quote escaping we saved from calls +# to _LT_DECL, we can put quote escaped variables declarations +# into 'config.status', and then the shell code to quote escape them in +# for loops in 'config.status'. Finally, any additional code accumulated +# from calls to _LT_CONFIG_LIBTOOL_INIT is expanded. +m4_defun([_LT_CONFIG_COMMANDS], +[AC_PROVIDE_IFELSE([LT_OUTPUT], + dnl If the libtool generation code has been placed in $CONFIG_LT, + dnl instead of duplicating it all over again into config.status, + dnl then we will have config.status run $CONFIG_LT later, so it + dnl needs to know what name is stored there: + [AC_CONFIG_COMMANDS([libtool], + [$SHELL $CONFIG_LT || AS_EXIT(1)], [CONFIG_LT='$CONFIG_LT'])], + dnl If the libtool generation code is destined for config.status, + dnl expand the accumulated commands and init code now: + [AC_CONFIG_COMMANDS([libtool], + [_LT_OUTPUT_LIBTOOL_COMMANDS], [_LT_OUTPUT_LIBTOOL_COMMANDS_INIT])]) +])#_LT_CONFIG_COMMANDS + + +# Initialize. +m4_define([_LT_OUTPUT_LIBTOOL_COMMANDS_INIT], +[ + +# The HP-UX ksh and POSIX shell print the target directory to stdout +# if CDPATH is set. +(unset CDPATH) >/dev/null 2>&1 && unset CDPATH + +sed_quote_subst='$sed_quote_subst' +double_quote_subst='$double_quote_subst' +delay_variable_subst='$delay_variable_subst' +_LT_CONFIG_STATUS_DECLARATIONS +LTCC='$LTCC' +LTCFLAGS='$LTCFLAGS' +compiler='$compiler_DEFAULT' + +# A function that is used when there is no print builtin or printf. +func_fallback_echo () +{ + eval 'cat <<_LTECHO_EOF +\$[]1 +_LTECHO_EOF' +} + +# Quote evaled strings. +for var in lt_decl_all_varnames([[ \ +]], lt_decl_quote_varnames); do + case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in + *[[\\\\\\\`\\"\\\$]]*) + eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED \\"\\\$sed_quote_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes + ;; + *) + eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\"" + ;; + esac +done + +# Double-quote double-evaled strings. +for var in lt_decl_all_varnames([[ \ +]], lt_decl_dquote_varnames); do + case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in + *[[\\\\\\\`\\"\\\$]]*) + eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED -e \\"\\\$double_quote_subst\\" -e \\"\\\$sed_quote_subst\\" -e \\"\\\$delay_variable_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes + ;; + *) + eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\"" + ;; + esac +done + +_LT_OUTPUT_LIBTOOL_INIT +]) + +# _LT_GENERATED_FILE_INIT(FILE, [COMMENT]) +# ------------------------------------ +# Generate a child script FILE with all initialization necessary to +# reuse the environment learned by the parent script, and make the +# file executable. If COMMENT is supplied, it is inserted after the +# '#!' sequence but before initialization text begins. After this +# macro, additional text can be appended to FILE to form the body of +# the child script. The macro ends with non-zero status if the +# file could not be fully written (such as if the disk is full). +m4_ifdef([AS_INIT_GENERATED], +[m4_defun([_LT_GENERATED_FILE_INIT],[AS_INIT_GENERATED($@)])], +[m4_defun([_LT_GENERATED_FILE_INIT], +[m4_require([AS_PREPARE])]dnl +[m4_pushdef([AS_MESSAGE_LOG_FD])]dnl +[lt_write_fail=0 +cat >$1 <<_ASEOF || lt_write_fail=1 +#! $SHELL +# Generated by $as_me. +$2 +SHELL=\${CONFIG_SHELL-$SHELL} +export SHELL +_ASEOF +cat >>$1 <<\_ASEOF || lt_write_fail=1 +AS_SHELL_SANITIZE +_AS_PREPARE +exec AS_MESSAGE_FD>&1 +_ASEOF +test 0 = "$lt_write_fail" && chmod +x $1[]dnl +m4_popdef([AS_MESSAGE_LOG_FD])])])# _LT_GENERATED_FILE_INIT + +# LT_OUTPUT +# --------- +# This macro allows early generation of the libtool script (before +# AC_OUTPUT is called), incase it is used in configure for compilation +# tests. +AC_DEFUN([LT_OUTPUT], +[: ${CONFIG_LT=./config.lt} +AC_MSG_NOTICE([creating $CONFIG_LT]) +_LT_GENERATED_FILE_INIT(["$CONFIG_LT"], +[# Run this file to recreate a libtool stub with the current configuration.]) + +cat >>"$CONFIG_LT" <<\_LTEOF +lt_cl_silent=false +exec AS_MESSAGE_LOG_FD>>config.log +{ + echo + AS_BOX([Running $as_me.]) +} >&AS_MESSAGE_LOG_FD + +lt_cl_help="\ +'$as_me' creates a local libtool stub from the current configuration, +for use in further configure time tests before the real libtool is +generated. + +Usage: $[0] [[OPTIONS]] + + -h, --help print this help, then exit + -V, --version print version number, then exit + -q, --quiet do not print progress messages + -d, --debug don't remove temporary files + +Report bugs to ." + +lt_cl_version="\ +m4_ifset([AC_PACKAGE_NAME], [AC_PACKAGE_NAME ])config.lt[]dnl +m4_ifset([AC_PACKAGE_VERSION], [ AC_PACKAGE_VERSION]) +configured by $[0], generated by m4_PACKAGE_STRING. + +Copyright (C) 2011 Free Software Foundation, Inc. +This config.lt script is free software; the Free Software Foundation +gives unlimited permision to copy, distribute and modify it." + +while test 0 != $[#] +do + case $[1] in + --version | --v* | -V ) + echo "$lt_cl_version"; exit 0 ;; + --help | --h* | -h ) + echo "$lt_cl_help"; exit 0 ;; + --debug | --d* | -d ) + debug=: ;; + --quiet | --q* | --silent | --s* | -q ) + lt_cl_silent=: ;; + + -*) AC_MSG_ERROR([unrecognized option: $[1] +Try '$[0] --help' for more information.]) ;; + + *) AC_MSG_ERROR([unrecognized argument: $[1] +Try '$[0] --help' for more information.]) ;; + esac + shift +done + +if $lt_cl_silent; then + exec AS_MESSAGE_FD>/dev/null +fi +_LTEOF + +cat >>"$CONFIG_LT" <<_LTEOF +_LT_OUTPUT_LIBTOOL_COMMANDS_INIT +_LTEOF + +cat >>"$CONFIG_LT" <<\_LTEOF +AC_MSG_NOTICE([creating $ofile]) +_LT_OUTPUT_LIBTOOL_COMMANDS +AS_EXIT(0) +_LTEOF +chmod +x "$CONFIG_LT" + +# configure is writing to config.log, but config.lt does its own redirection, +# appending to config.log, which fails on DOS, as config.log is still kept +# open by configure. Here we exec the FD to /dev/null, effectively closing +# config.log, so it can be properly (re)opened and appended to by config.lt. +lt_cl_success=: +test yes = "$silent" && + lt_config_lt_args="$lt_config_lt_args --quiet" +exec AS_MESSAGE_LOG_FD>/dev/null +$SHELL "$CONFIG_LT" $lt_config_lt_args || lt_cl_success=false +exec AS_MESSAGE_LOG_FD>>config.log +$lt_cl_success || AS_EXIT(1) +])# LT_OUTPUT + + +# _LT_CONFIG(TAG) +# --------------- +# If TAG is the built-in tag, create an initial libtool script with a +# default configuration from the untagged config vars. Otherwise add code +# to config.status for appending the configuration named by TAG from the +# matching tagged config vars. +m4_defun([_LT_CONFIG], +[m4_require([_LT_FILEUTILS_DEFAULTS])dnl +_LT_CONFIG_SAVE_COMMANDS([ + m4_define([_LT_TAG], m4_if([$1], [], [C], [$1]))dnl + m4_if(_LT_TAG, [C], [ + # See if we are running on zsh, and set the options that allow our + # commands through without removal of \ escapes. + if test -n "${ZSH_VERSION+set}"; then + setopt NO_GLOB_SUBST + fi + + cfgfile=${ofile}T + trap "$RM \"$cfgfile\"; exit 1" 1 2 15 + $RM "$cfgfile" + + cat <<_LT_EOF >> "$cfgfile" +#! $SHELL +# Generated automatically by $as_me ($PACKAGE) $VERSION +# Libtool was configured on host `(hostname || uname -n) 2>/dev/null | sed 1q`: +# NOTE: Changes made to this file will be lost: look at ltmain.sh. + +# Provide generalized library-building support services. +# Written by Gordon Matzigkeit, 1996 + +_LT_COPYING +_LT_LIBTOOL_TAGS + +# Configured defaults for sys_lib_dlsearch_path munging. +: \${LT_SYS_LIBRARY_PATH="$configure_time_lt_sys_library_path"} + +# ### BEGIN LIBTOOL CONFIG +_LT_LIBTOOL_CONFIG_VARS +_LT_LIBTOOL_TAG_VARS +# ### END LIBTOOL CONFIG + +_LT_EOF + + cat <<'_LT_EOF' >> "$cfgfile" + +# ### BEGIN FUNCTIONS SHARED WITH CONFIGURE + +_LT_PREPARE_MUNGE_PATH_LIST +_LT_PREPARE_CC_BASENAME + +# ### END FUNCTIONS SHARED WITH CONFIGURE + +_LT_EOF + + case $host_os in + aix3*) + cat <<\_LT_EOF >> "$cfgfile" +# AIX sometimes has problems with the GCC collect2 program. For some +# reason, if we set the COLLECT_NAMES environment variable, the problems +# vanish in a puff of smoke. +if test set != "${COLLECT_NAMES+set}"; then + COLLECT_NAMES= + export COLLECT_NAMES +fi +_LT_EOF + ;; + esac + + _LT_PROG_LTMAIN + + # We use sed instead of cat because bash on DJGPP gets confused if + # if finds mixed CR/LF and LF-only lines. Since sed operates in + # text mode, it properly converts lines to CR/LF. This bash problem + # is reportedly fixed, but why not run on old versions too? + $SED '$q' "$ltmain" >> "$cfgfile" \ + || (rm -f "$cfgfile"; exit 1) + + mv -f "$cfgfile" "$ofile" || + (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile") + chmod +x "$ofile" +], +[cat <<_LT_EOF >> "$ofile" + +dnl Unfortunately we have to use $1 here, since _LT_TAG is not expanded +dnl in a comment (ie after a #). +# ### BEGIN LIBTOOL TAG CONFIG: $1 +_LT_LIBTOOL_TAG_VARS(_LT_TAG) +# ### END LIBTOOL TAG CONFIG: $1 +_LT_EOF +])dnl /m4_if +], +[m4_if([$1], [], [ + PACKAGE='$PACKAGE' + VERSION='$VERSION' + RM='$RM' + ofile='$ofile'], []) +])dnl /_LT_CONFIG_SAVE_COMMANDS +])# _LT_CONFIG + + +# LT_SUPPORTED_TAG(TAG) +# --------------------- +# Trace this macro to discover what tags are supported by the libtool +# --tag option, using: +# autoconf --trace 'LT_SUPPORTED_TAG:$1' +AC_DEFUN([LT_SUPPORTED_TAG], []) + + +# C support is built-in for now +m4_define([_LT_LANG_C_enabled], []) +m4_define([_LT_TAGS], []) + + +# LT_LANG(LANG) +# ------------- +# Enable libtool support for the given language if not already enabled. +AC_DEFUN([LT_LANG], +[AC_BEFORE([$0], [LT_OUTPUT])dnl +m4_case([$1], + [C], [_LT_LANG(C)], + [C++], [_LT_LANG(CXX)], + [Go], [_LT_LANG(GO)], + [Java], [_LT_LANG(GCJ)], + [Fortran 77], [_LT_LANG(F77)], + [Fortran], [_LT_LANG(FC)], + [Windows Resource], [_LT_LANG(RC)], + [m4_ifdef([_LT_LANG_]$1[_CONFIG], + [_LT_LANG($1)], + [m4_fatal([$0: unsupported language: "$1"])])])dnl +])# LT_LANG + + +# _LT_LANG(LANGNAME) +# ------------------ +m4_defun([_LT_LANG], +[m4_ifdef([_LT_LANG_]$1[_enabled], [], + [LT_SUPPORTED_TAG([$1])dnl + m4_append([_LT_TAGS], [$1 ])dnl + m4_define([_LT_LANG_]$1[_enabled], [])dnl + _LT_LANG_$1_CONFIG($1)])dnl +])# _LT_LANG + + +m4_ifndef([AC_PROG_GO], [ +############################################################ +# NOTE: This macro has been submitted for inclusion into # +# GNU Autoconf as AC_PROG_GO. When it is available in # +# a released version of Autoconf we should remove this # +# macro and use it instead. # +############################################################ +m4_defun([AC_PROG_GO], +[AC_LANG_PUSH(Go)dnl +AC_ARG_VAR([GOC], [Go compiler command])dnl +AC_ARG_VAR([GOFLAGS], [Go compiler flags])dnl +_AC_ARG_VAR_LDFLAGS()dnl +AC_CHECK_TOOL(GOC, gccgo) +if test -z "$GOC"; then + if test -n "$ac_tool_prefix"; then + AC_CHECK_PROG(GOC, [${ac_tool_prefix}gccgo], [${ac_tool_prefix}gccgo]) + fi +fi +if test -z "$GOC"; then + AC_CHECK_PROG(GOC, gccgo, gccgo, false) +fi +])#m4_defun +])#m4_ifndef + + +# _LT_LANG_DEFAULT_CONFIG +# ----------------------- +m4_defun([_LT_LANG_DEFAULT_CONFIG], +[AC_PROVIDE_IFELSE([AC_PROG_CXX], + [LT_LANG(CXX)], + [m4_define([AC_PROG_CXX], defn([AC_PROG_CXX])[LT_LANG(CXX)])]) + +AC_PROVIDE_IFELSE([AC_PROG_F77], + [LT_LANG(F77)], + [m4_define([AC_PROG_F77], defn([AC_PROG_F77])[LT_LANG(F77)])]) + +AC_PROVIDE_IFELSE([AC_PROG_FC], + [LT_LANG(FC)], + [m4_define([AC_PROG_FC], defn([AC_PROG_FC])[LT_LANG(FC)])]) + +dnl The call to [A][M_PROG_GCJ] is quoted like that to stop aclocal +dnl pulling things in needlessly. +AC_PROVIDE_IFELSE([AC_PROG_GCJ], + [LT_LANG(GCJ)], + [AC_PROVIDE_IFELSE([A][M_PROG_GCJ], + [LT_LANG(GCJ)], + [AC_PROVIDE_IFELSE([LT_PROG_GCJ], + [LT_LANG(GCJ)], + [m4_ifdef([AC_PROG_GCJ], + [m4_define([AC_PROG_GCJ], defn([AC_PROG_GCJ])[LT_LANG(GCJ)])]) + m4_ifdef([A][M_PROG_GCJ], + [m4_define([A][M_PROG_GCJ], defn([A][M_PROG_GCJ])[LT_LANG(GCJ)])]) + m4_ifdef([LT_PROG_GCJ], + [m4_define([LT_PROG_GCJ], defn([LT_PROG_GCJ])[LT_LANG(GCJ)])])])])]) + +AC_PROVIDE_IFELSE([AC_PROG_GO], + [LT_LANG(GO)], + [m4_define([AC_PROG_GO], defn([AC_PROG_GO])[LT_LANG(GO)])]) + +AC_PROVIDE_IFELSE([LT_PROG_RC], + [LT_LANG(RC)], + [m4_define([LT_PROG_RC], defn([LT_PROG_RC])[LT_LANG(RC)])]) +])# _LT_LANG_DEFAULT_CONFIG + +# Obsolete macros: +AU_DEFUN([AC_LIBTOOL_CXX], [LT_LANG(C++)]) +AU_DEFUN([AC_LIBTOOL_F77], [LT_LANG(Fortran 77)]) +AU_DEFUN([AC_LIBTOOL_FC], [LT_LANG(Fortran)]) +AU_DEFUN([AC_LIBTOOL_GCJ], [LT_LANG(Java)]) +AU_DEFUN([AC_LIBTOOL_RC], [LT_LANG(Windows Resource)]) +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([AC_LIBTOOL_CXX], []) +dnl AC_DEFUN([AC_LIBTOOL_F77], []) +dnl AC_DEFUN([AC_LIBTOOL_FC], []) +dnl AC_DEFUN([AC_LIBTOOL_GCJ], []) +dnl AC_DEFUN([AC_LIBTOOL_RC], []) + + +# _LT_TAG_COMPILER +# ---------------- +m4_defun([_LT_TAG_COMPILER], +[AC_REQUIRE([AC_PROG_CC])dnl + +_LT_DECL([LTCC], [CC], [1], [A C compiler])dnl +_LT_DECL([LTCFLAGS], [CFLAGS], [1], [LTCC compiler flags])dnl +_LT_TAGDECL([CC], [compiler], [1], [A language specific compiler])dnl +_LT_TAGDECL([with_gcc], [GCC], [0], [Is the compiler the GNU compiler?])dnl + +# If no C compiler was specified, use CC. +LTCC=${LTCC-"$CC"} + +# If no C compiler flags were specified, use CFLAGS. +LTCFLAGS=${LTCFLAGS-"$CFLAGS"} + +# Allow CC to be a program name with arguments. +compiler=$CC +])# _LT_TAG_COMPILER + + +# _LT_COMPILER_BOILERPLATE +# ------------------------ +# Check for compiler boilerplate output or warnings with +# the simple compiler test code. +m4_defun([_LT_COMPILER_BOILERPLATE], +[m4_require([_LT_DECL_SED])dnl +ac_outfile=conftest.$ac_objext +echo "$lt_simple_compile_test_code" >conftest.$ac_ext +eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err +_lt_compiler_boilerplate=`cat conftest.err` +$RM conftest* +])# _LT_COMPILER_BOILERPLATE + + +# _LT_LINKER_BOILERPLATE +# ---------------------- +# Check for linker boilerplate output or warnings with +# the simple link test code. +m4_defun([_LT_LINKER_BOILERPLATE], +[m4_require([_LT_DECL_SED])dnl +ac_outfile=conftest.$ac_objext +echo "$lt_simple_link_test_code" >conftest.$ac_ext +eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err +_lt_linker_boilerplate=`cat conftest.err` +$RM -r conftest* +])# _LT_LINKER_BOILERPLATE + +# _LT_REQUIRED_DARWIN_CHECKS +# ------------------------- +m4_defun_once([_LT_REQUIRED_DARWIN_CHECKS],[ + case $host_os in + rhapsody* | darwin*) + AC_CHECK_TOOL([DSYMUTIL], [dsymutil], [:]) + AC_CHECK_TOOL([NMEDIT], [nmedit], [:]) + AC_CHECK_TOOL([LIPO], [lipo], [:]) + AC_CHECK_TOOL([OTOOL], [otool], [:]) + AC_CHECK_TOOL([OTOOL64], [otool64], [:]) + _LT_DECL([], [DSYMUTIL], [1], + [Tool to manipulate archived DWARF debug symbol files on Mac OS X]) + _LT_DECL([], [NMEDIT], [1], + [Tool to change global to local symbols on Mac OS X]) + _LT_DECL([], [LIPO], [1], + [Tool to manipulate fat objects and archives on Mac OS X]) + _LT_DECL([], [OTOOL], [1], + [ldd/readelf like tool for Mach-O binaries on Mac OS X]) + _LT_DECL([], [OTOOL64], [1], + [ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4]) + + AC_CACHE_CHECK([for -single_module linker flag],[lt_cv_apple_cc_single_mod], + [lt_cv_apple_cc_single_mod=no + if test -z "$LT_MULTI_MODULE"; then + # By default we will add the -single_module flag. You can override + # by either setting the environment variable LT_MULTI_MODULE + # non-empty at configure time, or by adding -multi_module to the + # link flags. + rm -rf libconftest.dylib* + echo "int foo(void){return 1;}" > conftest.c + echo "$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \ +-dynamiclib -Wl,-single_module conftest.c" >&AS_MESSAGE_LOG_FD + $LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \ + -dynamiclib -Wl,-single_module conftest.c 2>conftest.err + _lt_result=$? + # If there is a non-empty error log, and "single_module" + # appears in it, assume the flag caused a linker warning + if test -s conftest.err && $GREP single_module conftest.err; then + cat conftest.err >&AS_MESSAGE_LOG_FD + # Otherwise, if the output was created with a 0 exit code from + # the compiler, it worked. + elif test -f libconftest.dylib && test 0 = "$_lt_result"; then + lt_cv_apple_cc_single_mod=yes + else + cat conftest.err >&AS_MESSAGE_LOG_FD + fi + rm -rf libconftest.dylib* + rm -f conftest.* + fi]) + + AC_CACHE_CHECK([for -exported_symbols_list linker flag], + [lt_cv_ld_exported_symbols_list], + [lt_cv_ld_exported_symbols_list=no + save_LDFLAGS=$LDFLAGS + echo "_main" > conftest.sym + LDFLAGS="$LDFLAGS -Wl,-exported_symbols_list,conftest.sym" + AC_LINK_IFELSE([AC_LANG_PROGRAM([],[])], + [lt_cv_ld_exported_symbols_list=yes], + [lt_cv_ld_exported_symbols_list=no]) + LDFLAGS=$save_LDFLAGS + ]) + + AC_CACHE_CHECK([for -force_load linker flag],[lt_cv_ld_force_load], + [lt_cv_ld_force_load=no + cat > conftest.c << _LT_EOF +int forced_loaded() { return 2;} +_LT_EOF + echo "$LTCC $LTCFLAGS -c -o conftest.o conftest.c" >&AS_MESSAGE_LOG_FD + $LTCC $LTCFLAGS -c -o conftest.o conftest.c 2>&AS_MESSAGE_LOG_FD + echo "$AR $AR_FLAGS libconftest.a conftest.o" >&AS_MESSAGE_LOG_FD + $AR $AR_FLAGS libconftest.a conftest.o 2>&AS_MESSAGE_LOG_FD + echo "$RANLIB libconftest.a" >&AS_MESSAGE_LOG_FD + $RANLIB libconftest.a 2>&AS_MESSAGE_LOG_FD + cat > conftest.c << _LT_EOF +int main() { return 0;} +_LT_EOF + echo "$LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a" >&AS_MESSAGE_LOG_FD + $LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a 2>conftest.err + _lt_result=$? + if test -s conftest.err && $GREP force_load conftest.err; then + cat conftest.err >&AS_MESSAGE_LOG_FD + elif test -f conftest && test 0 = "$_lt_result" && $GREP forced_load conftest >/dev/null 2>&1; then + lt_cv_ld_force_load=yes + else + cat conftest.err >&AS_MESSAGE_LOG_FD + fi + rm -f conftest.err libconftest.a conftest conftest.c + rm -rf conftest.dSYM + ]) + case $host_os in + rhapsody* | darwin1.[[012]]) + _lt_dar_allow_undefined='$wl-undefined ${wl}suppress' ;; + darwin1.*) + _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;; + darwin*) + case $MACOSX_DEPLOYMENT_TARGET,$host in + 10.[[012]],*|,*powerpc*-darwin[[5-8]]*) + _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;; + *) + _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup' ;; + esac + ;; + esac + if test yes = "$lt_cv_apple_cc_single_mod"; then + _lt_dar_single_mod='$single_module' + fi + _lt_dar_needs_single_mod=no + case $host_os in + rhapsody* | darwin1.*) + _lt_dar_needs_single_mod=yes ;; + darwin*) + # When targeting Mac OS X 10.4 (darwin 8) or later, + # -single_module is the default and -multi_module is unsupported. + # The toolchain on macOS 10.14 (darwin 18) and later cannot + # target any OS version that needs -single_module. + case ${MACOSX_DEPLOYMENT_TARGET-10.0},$host in + 10.0,*-darwin[[567]].*|10.[[0-3]],*-darwin[[5-9]].*|10.[[0-3]],*-darwin1[[0-7]].*) + _lt_dar_needs_single_mod=yes ;; + esac + ;; + esac + if test yes = "$lt_cv_ld_exported_symbols_list"; then + _lt_dar_export_syms=' $wl-exported_symbols_list,$output_objdir/$libname-symbols.expsym' + else + _lt_dar_export_syms='~$NMEDIT -s $output_objdir/$libname-symbols.expsym $lib' + fi + if test : != "$DSYMUTIL" && test no = "$lt_cv_ld_force_load"; then + _lt_dsymutil='~$DSYMUTIL $lib || :' + else + _lt_dsymutil= + fi + ;; + esac +]) + + +# _LT_DARWIN_LINKER_FEATURES([TAG]) +# --------------------------------- +# Checks for linker and compiler features on darwin +m4_defun([_LT_DARWIN_LINKER_FEATURES], +[ + m4_require([_LT_REQUIRED_DARWIN_CHECKS]) + _LT_TAGVAR(archive_cmds_need_lc, $1)=no + _LT_TAGVAR(hardcode_direct, $1)=no + _LT_TAGVAR(hardcode_automatic, $1)=yes + _LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported + if test yes = "$lt_cv_ld_force_load"; then + _LT_TAGVAR(whole_archive_flag_spec, $1)='`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience $wl-force_load,$conv\"; done; func_echo_all \"$new_convenience\"`' + m4_case([$1], [F77], [_LT_TAGVAR(compiler_needs_object, $1)=yes], + [FC], [_LT_TAGVAR(compiler_needs_object, $1)=yes]) + else + _LT_TAGVAR(whole_archive_flag_spec, $1)='' + fi + _LT_TAGVAR(link_all_deplibs, $1)=yes + _LT_TAGVAR(allow_undefined_flag, $1)=$_lt_dar_allow_undefined + case $cc_basename in + ifort*|nagfor*) _lt_dar_can_shared=yes ;; + *) _lt_dar_can_shared=$GCC ;; + esac + if test yes = "$_lt_dar_can_shared"; then + output_verbose_link_cmd=func_echo_all + _LT_TAGVAR(archive_cmds, $1)="\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dsymutil" + _LT_TAGVAR(module_cmds, $1)="\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dsymutil" + _LT_TAGVAR(archive_expsym_cmds, $1)="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dar_export_syms$_lt_dsymutil" + _LT_TAGVAR(module_expsym_cmds, $1)="$SED -e 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dar_export_syms$_lt_dsymutil" + m4_if([$1], [CXX], +[ if test yes = "$_lt_dar_needs_single_mod" -a yes != "$lt_cv_apple_cc_single_mod"; then + _LT_TAGVAR(archive_cmds, $1)="\$CC -r -keep_private_externs -nostdlib -o \$lib-master.o \$libobjs~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$lib-master.o \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring$_lt_dsymutil" + _LT_TAGVAR(archive_expsym_cmds, $1)="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -r -keep_private_externs -nostdlib -o \$lib-master.o \$libobjs~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$lib-master.o \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring$_lt_dar_export_syms$_lt_dsymutil" + fi +],[]) + else + _LT_TAGVAR(ld_shlibs, $1)=no + fi +]) + +# _LT_SYS_MODULE_PATH_AIX([TAGNAME]) +# ---------------------------------- +# Links a minimal program and checks the executable +# for the system default hardcoded library path. In most cases, +# this is /usr/lib:/lib, but when the MPI compilers are used +# the location of the communication and MPI libs are included too. +# If we don't find anything, use the default library path according +# to the aix ld manual. +# Store the results from the different compilers for each TAGNAME. +# Allow to override them for all tags through lt_cv_aix_libpath. +m4_defun([_LT_SYS_MODULE_PATH_AIX], +[m4_require([_LT_DECL_SED])dnl +if test set = "${lt_cv_aix_libpath+set}"; then + aix_libpath=$lt_cv_aix_libpath +else + AC_CACHE_VAL([_LT_TAGVAR([lt_cv_aix_libpath_], [$1])], + [AC_LINK_IFELSE([AC_LANG_PROGRAM],[ + lt_aix_libpath_sed='[ + /Import File Strings/,/^$/ { + /^0/ { + s/^0 *\([^ ]*\) *$/\1/ + p + } + }]' + _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"` + # Check for a 64-bit object if we didn't find anything. + if test -z "$_LT_TAGVAR([lt_cv_aix_libpath_], [$1])"; then + _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"` + fi],[]) + if test -z "$_LT_TAGVAR([lt_cv_aix_libpath_], [$1])"; then + _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=/usr/lib:/lib + fi + ]) + aix_libpath=$_LT_TAGVAR([lt_cv_aix_libpath_], [$1]) +fi +])# _LT_SYS_MODULE_PATH_AIX + + +# _LT_SHELL_INIT(ARG) +# ------------------- +m4_define([_LT_SHELL_INIT], +[m4_divert_text([M4SH-INIT], [$1 +])])# _LT_SHELL_INIT + + + +# _LT_PROG_ECHO_BACKSLASH +# ----------------------- +# Find how we can fake an echo command that does not interpret backslash. +# In particular, with Autoconf 2.60 or later we add some code to the start +# of the generated configure script that will find a shell with a builtin +# printf (that we can use as an echo command). +m4_defun([_LT_PROG_ECHO_BACKSLASH], +[ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' +ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO +ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO + +AC_MSG_CHECKING([how to print strings]) +# Test print first, because it will be a builtin if present. +if test "X`( print -r -- -n ) 2>/dev/null`" = X-n && \ + test "X`print -r -- $ECHO 2>/dev/null`" = "X$ECHO"; then + ECHO='print -r --' +elif test "X`printf %s $ECHO 2>/dev/null`" = "X$ECHO"; then + ECHO='printf %s\n' +else + # Use this function as a fallback that always works. + func_fallback_echo () + { + eval 'cat <<_LTECHO_EOF +$[]1 +_LTECHO_EOF' + } + ECHO='func_fallback_echo' +fi + +# func_echo_all arg... +# Invoke $ECHO with all args, space-separated. +func_echo_all () +{ + $ECHO "$*" +} + +case $ECHO in + printf*) AC_MSG_RESULT([printf]) ;; + print*) AC_MSG_RESULT([print -r]) ;; + *) AC_MSG_RESULT([cat]) ;; +esac + +m4_ifdef([_AS_DETECT_SUGGESTED], +[_AS_DETECT_SUGGESTED([ + test -n "${ZSH_VERSION+set}${BASH_VERSION+set}" || ( + ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' + ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO + ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO + PATH=/empty FPATH=/empty; export PATH FPATH + test "X`printf %s $ECHO`" = "X$ECHO" \ + || test "X`print -r -- $ECHO`" = "X$ECHO" )])]) + +_LT_DECL([], [SHELL], [1], [Shell to use when invoking shell scripts]) +_LT_DECL([], [ECHO], [1], [An echo program that protects backslashes]) +])# _LT_PROG_ECHO_BACKSLASH + + +# _LT_WITH_SYSROOT +# ---------------- +AC_DEFUN([_LT_WITH_SYSROOT], +[m4_require([_LT_DECL_SED])dnl +AC_MSG_CHECKING([for sysroot]) +AC_ARG_WITH([sysroot], +[AS_HELP_STRING([--with-sysroot@<:@=DIR@:>@], + [Search for dependent libraries within DIR (or the compiler's sysroot + if not specified).])], +[], [with_sysroot=no]) + +dnl lt_sysroot will always be passed unquoted. We quote it here +dnl in case the user passed a directory name. +lt_sysroot= +case $with_sysroot in #( + yes) + if test yes = "$GCC"; then + lt_sysroot=`$CC --print-sysroot 2>/dev/null` + fi + ;; #( + /*) + lt_sysroot=`echo "$with_sysroot" | $SED -e "$sed_quote_subst"` + ;; #( + no|'') + ;; #( + *) + AC_MSG_RESULT([$with_sysroot]) + AC_MSG_ERROR([The sysroot must be an absolute path.]) + ;; +esac + + AC_MSG_RESULT([${lt_sysroot:-no}]) +_LT_DECL([], [lt_sysroot], [0], [The root where to search for ]dnl +[dependent libraries, and where our libraries should be installed.])]) + +# _LT_ENABLE_LOCK +# --------------- +m4_defun([_LT_ENABLE_LOCK], +[AC_ARG_ENABLE([libtool-lock], + [AS_HELP_STRING([--disable-libtool-lock], + [avoid locking (might break parallel builds)])]) +test no = "$enable_libtool_lock" || enable_libtool_lock=yes + +# Some flags need to be propagated to the compiler or linker for good +# libtool support. +case $host in +ia64-*-hpux*) + # Find out what ABI is being produced by ac_compile, and set mode + # options accordingly. + echo 'int i;' > conftest.$ac_ext + if AC_TRY_EVAL(ac_compile); then + case `$FILECMD conftest.$ac_objext` in + *ELF-32*) + HPUX_IA64_MODE=32 + ;; + *ELF-64*) + HPUX_IA64_MODE=64 + ;; + esac + fi + rm -rf conftest* + ;; +*-*-irix6*) + # Find out what ABI is being produced by ac_compile, and set linker + # options accordingly. + echo '[#]line '$LINENO' "configure"' > conftest.$ac_ext + if AC_TRY_EVAL(ac_compile); then + if test yes = "$lt_cv_prog_gnu_ld"; then + case `$FILECMD conftest.$ac_objext` in + *32-bit*) + LD="${LD-ld} -melf32bsmip" + ;; + *N32*) + LD="${LD-ld} -melf32bmipn32" + ;; + *64-bit*) + LD="${LD-ld} -melf64bmip" + ;; + esac + else + case `$FILECMD conftest.$ac_objext` in + *32-bit*) + LD="${LD-ld} -32" + ;; + *N32*) + LD="${LD-ld} -n32" + ;; + *64-bit*) + LD="${LD-ld} -64" + ;; + esac + fi + fi + rm -rf conftest* + ;; + +mips64*-*linux*) + # Find out what ABI is being produced by ac_compile, and set linker + # options accordingly. + echo '[#]line '$LINENO' "configure"' > conftest.$ac_ext + if AC_TRY_EVAL(ac_compile); then + emul=elf + case `$FILECMD conftest.$ac_objext` in + *32-bit*) + emul="${emul}32" + ;; + *64-bit*) + emul="${emul}64" + ;; + esac + case `$FILECMD conftest.$ac_objext` in + *MSB*) + emul="${emul}btsmip" + ;; + *LSB*) + emul="${emul}ltsmip" + ;; + esac + case `$FILECMD conftest.$ac_objext` in + *N32*) + emul="${emul}n32" + ;; + esac + LD="${LD-ld} -m $emul" + fi + rm -rf conftest* + ;; + +x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \ +s390*-*linux*|s390*-*tpf*|sparc*-*linux*) + # Find out what ABI is being produced by ac_compile, and set linker + # options accordingly. Note that the listed cases only cover the + # situations where additional linker options are needed (such as when + # doing 32-bit compilation for a host where ld defaults to 64-bit, or + # vice versa); the common cases where no linker options are needed do + # not appear in the list. + echo 'int i;' > conftest.$ac_ext + if AC_TRY_EVAL(ac_compile); then + case `$FILECMD conftest.o` in + *32-bit*) + case $host in + x86_64-*kfreebsd*-gnu) + LD="${LD-ld} -m elf_i386_fbsd" + ;; + x86_64-*linux*) + case `$FILECMD conftest.o` in + *x86-64*) + LD="${LD-ld} -m elf32_x86_64" + ;; + *) + LD="${LD-ld} -m elf_i386" + ;; + esac + ;; + powerpc64le-*linux*) + LD="${LD-ld} -m elf32lppclinux" + ;; + powerpc64-*linux*) + LD="${LD-ld} -m elf32ppclinux" + ;; + s390x-*linux*) + LD="${LD-ld} -m elf_s390" + ;; + sparc64-*linux*) + LD="${LD-ld} -m elf32_sparc" + ;; + esac + ;; + *64-bit*) + case $host in + x86_64-*kfreebsd*-gnu) + LD="${LD-ld} -m elf_x86_64_fbsd" + ;; + x86_64-*linux*) + LD="${LD-ld} -m elf_x86_64" + ;; + powerpcle-*linux*) + LD="${LD-ld} -m elf64lppc" + ;; + powerpc-*linux*) + LD="${LD-ld} -m elf64ppc" + ;; + s390*-*linux*|s390*-*tpf*) + LD="${LD-ld} -m elf64_s390" + ;; + sparc*-*linux*) + LD="${LD-ld} -m elf64_sparc" + ;; + esac + ;; + esac + fi + rm -rf conftest* + ;; + +*-*-sco3.2v5*) + # On SCO OpenServer 5, we need -belf to get full-featured binaries. + SAVE_CFLAGS=$CFLAGS + CFLAGS="$CFLAGS -belf" + AC_CACHE_CHECK([whether the C compiler needs -belf], lt_cv_cc_needs_belf, + [AC_LANG_PUSH(C) + AC_LINK_IFELSE([AC_LANG_PROGRAM([[]],[[]])],[lt_cv_cc_needs_belf=yes],[lt_cv_cc_needs_belf=no]) + AC_LANG_POP]) + if test yes != "$lt_cv_cc_needs_belf"; then + # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf + CFLAGS=$SAVE_CFLAGS + fi + ;; +*-*solaris*) + # Find out what ABI is being produced by ac_compile, and set linker + # options accordingly. + echo 'int i;' > conftest.$ac_ext + if AC_TRY_EVAL(ac_compile); then + case `$FILECMD conftest.o` in + *64-bit*) + case $lt_cv_prog_gnu_ld in + yes*) + case $host in + i?86-*-solaris*|x86_64-*-solaris*) + LD="${LD-ld} -m elf_x86_64" + ;; + sparc*-*-solaris*) + LD="${LD-ld} -m elf64_sparc" + ;; + esac + # GNU ld 2.21 introduced _sol2 emulations. Use them if available. + if ${LD-ld} -V | grep _sol2 >/dev/null 2>&1; then + LD=${LD-ld}_sol2 + fi + ;; + *) + if ${LD-ld} -64 -r -o conftest2.o conftest.o >/dev/null 2>&1; then + LD="${LD-ld} -64" + fi + ;; + esac + ;; + esac + fi + rm -rf conftest* + ;; +esac + +need_locks=$enable_libtool_lock +])# _LT_ENABLE_LOCK + + +# _LT_PROG_AR +# ----------- +m4_defun([_LT_PROG_AR], +[AC_CHECK_TOOLS(AR, [ar], false) +: ${AR=ar} +_LT_DECL([], [AR], [1], [The archiver]) + +# Use ARFLAGS variable as AR's operation code to sync the variable naming with +# Automake. If both AR_FLAGS and ARFLAGS are specified, AR_FLAGS should have +# higher priority because thats what people were doing historically (setting +# ARFLAGS for automake and AR_FLAGS for libtool). FIXME: Make the AR_FLAGS +# variable obsoleted/removed. + +test ${AR_FLAGS+y} || AR_FLAGS=${ARFLAGS-cr} +lt_ar_flags=$AR_FLAGS +_LT_DECL([], [lt_ar_flags], [0], [Flags to create an archive (by configure)]) + +# Make AR_FLAGS overridable by 'make ARFLAGS='. Don't try to run-time override +# by AR_FLAGS because that was never working and AR_FLAGS is about to die. +_LT_DECL([], [AR_FLAGS], [\@S|@{ARFLAGS-"\@S|@lt_ar_flags"}], + [Flags to create an archive]) + +AC_CACHE_CHECK([for archiver @FILE support], [lt_cv_ar_at_file], + [lt_cv_ar_at_file=no + AC_COMPILE_IFELSE([AC_LANG_PROGRAM], + [echo conftest.$ac_objext > conftest.lst + lt_ar_try='$AR $AR_FLAGS libconftest.a @conftest.lst >&AS_MESSAGE_LOG_FD' + AC_TRY_EVAL([lt_ar_try]) + if test 0 -eq "$ac_status"; then + # Ensure the archiver fails upon bogus file names. + rm -f conftest.$ac_objext libconftest.a + AC_TRY_EVAL([lt_ar_try]) + if test 0 -ne "$ac_status"; then + lt_cv_ar_at_file=@ + fi + fi + rm -f conftest.* libconftest.a + ]) + ]) + +if test no = "$lt_cv_ar_at_file"; then + archiver_list_spec= +else + archiver_list_spec=$lt_cv_ar_at_file +fi +_LT_DECL([], [archiver_list_spec], [1], + [How to feed a file listing to the archiver]) +])# _LT_PROG_AR + + +# _LT_CMD_OLD_ARCHIVE +# ------------------- +m4_defun([_LT_CMD_OLD_ARCHIVE], +[_LT_PROG_AR + +AC_CHECK_TOOL(STRIP, strip, :) +test -z "$STRIP" && STRIP=: +_LT_DECL([], [STRIP], [1], [A symbol stripping program]) + +AC_CHECK_TOOL(RANLIB, ranlib, :) +test -z "$RANLIB" && RANLIB=: +_LT_DECL([], [RANLIB], [1], + [Commands used to install an old-style archive]) + +# Determine commands to create old-style static archives. +old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs' +old_postinstall_cmds='chmod 644 $oldlib' +old_postuninstall_cmds= + +if test -n "$RANLIB"; then + case $host_os in + bitrig* | openbsd*) + old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB -t \$tool_oldlib" + ;; + *) + old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB \$tool_oldlib" + ;; + esac + old_archive_cmds="$old_archive_cmds~\$RANLIB \$tool_oldlib" +fi + +case $host_os in + darwin*) + lock_old_archive_extraction=yes ;; + *) + lock_old_archive_extraction=no ;; +esac +_LT_DECL([], [old_postinstall_cmds], [2]) +_LT_DECL([], [old_postuninstall_cmds], [2]) +_LT_TAGDECL([], [old_archive_cmds], [2], + [Commands used to build an old-style archive]) +_LT_DECL([], [lock_old_archive_extraction], [0], + [Whether to use a lock for old archive extraction]) +])# _LT_CMD_OLD_ARCHIVE + + +# _LT_COMPILER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS, +# [OUTPUT-FILE], [ACTION-SUCCESS], [ACTION-FAILURE]) +# ---------------------------------------------------------------- +# Check whether the given compiler option works +AC_DEFUN([_LT_COMPILER_OPTION], +[m4_require([_LT_FILEUTILS_DEFAULTS])dnl +m4_require([_LT_DECL_SED])dnl +AC_CACHE_CHECK([$1], [$2], + [$2=no + m4_if([$4], , [ac_outfile=conftest.$ac_objext], [ac_outfile=$4]) + echo "$lt_simple_compile_test_code" > conftest.$ac_ext + lt_compiler_flag="$3" ## exclude from sc_useless_quotes_in_assignment + # Insert the option either (1) after the last *FLAGS variable, or + # (2) before a word containing "conftest.", or (3) at the end. + # Note that $ac_compile itself does not contain backslashes and begins + # with a dollar sign (not a hyphen), so the echo should work correctly. + # The option is referenced via a variable to avoid confusing sed. + lt_compile=`echo "$ac_compile" | $SED \ + -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ + -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \ + -e 's:$: $lt_compiler_flag:'` + (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&AS_MESSAGE_LOG_FD) + (eval "$lt_compile" 2>conftest.err) + ac_status=$? + cat conftest.err >&AS_MESSAGE_LOG_FD + echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD + if (exit $ac_status) && test -s "$ac_outfile"; then + # The compiler can only warn and ignore the option if not recognized + # So say no if there are warnings other than the usual output. + $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp + $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 + if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then + $2=yes + fi + fi + $RM conftest* +]) + +if test yes = "[$]$2"; then + m4_if([$5], , :, [$5]) +else + m4_if([$6], , :, [$6]) +fi +])# _LT_COMPILER_OPTION + +# Old name: +AU_ALIAS([AC_LIBTOOL_COMPILER_OPTION], [_LT_COMPILER_OPTION]) +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([AC_LIBTOOL_COMPILER_OPTION], []) + + +# _LT_LINKER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS, +# [ACTION-SUCCESS], [ACTION-FAILURE]) +# ---------------------------------------------------- +# Check whether the given linker option works +AC_DEFUN([_LT_LINKER_OPTION], +[m4_require([_LT_FILEUTILS_DEFAULTS])dnl +m4_require([_LT_DECL_SED])dnl +AC_CACHE_CHECK([$1], [$2], + [$2=no + save_LDFLAGS=$LDFLAGS + LDFLAGS="$LDFLAGS $3" + echo "$lt_simple_link_test_code" > conftest.$ac_ext + if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then + # The linker can only warn and ignore the option if not recognized + # So say no if there are warnings + if test -s conftest.err; then + # Append any errors to the config.log. + cat conftest.err 1>&AS_MESSAGE_LOG_FD + $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp + $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 + if diff conftest.exp conftest.er2 >/dev/null; then + $2=yes + fi + else + $2=yes + fi + fi + $RM -r conftest* + LDFLAGS=$save_LDFLAGS +]) + +if test yes = "[$]$2"; then + m4_if([$4], , :, [$4]) +else + m4_if([$5], , :, [$5]) +fi +])# _LT_LINKER_OPTION + +# Old name: +AU_ALIAS([AC_LIBTOOL_LINKER_OPTION], [_LT_LINKER_OPTION]) +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([AC_LIBTOOL_LINKER_OPTION], []) + + +# LT_CMD_MAX_LEN +#--------------- +AC_DEFUN([LT_CMD_MAX_LEN], +[AC_REQUIRE([AC_CANONICAL_HOST])dnl +# find the maximum length of command line arguments +AC_MSG_CHECKING([the maximum length of command line arguments]) +AC_CACHE_VAL([lt_cv_sys_max_cmd_len], [dnl + i=0 + teststring=ABCD + + case $build_os in + msdosdjgpp*) + # On DJGPP, this test can blow up pretty badly due to problems in libc + # (any single argument exceeding 2000 bytes causes a buffer overrun + # during glob expansion). Even if it were fixed, the result of this + # check would be larger than it should be. + lt_cv_sys_max_cmd_len=12288; # 12K is about right + ;; + + gnu*) + # Under GNU Hurd, this test is not required because there is + # no limit to the length of command line arguments. + # Libtool will interpret -1 as no limit whatsoever + lt_cv_sys_max_cmd_len=-1; + ;; + + cygwin* | mingw* | cegcc*) + # On Win9x/ME, this test blows up -- it succeeds, but takes + # about 5 minutes as the teststring grows exponentially. + # Worse, since 9x/ME are not pre-emptively multitasking, + # you end up with a "frozen" computer, even though with patience + # the test eventually succeeds (with a max line length of 256k). + # Instead, let's just punt: use the minimum linelength reported by + # all of the supported platforms: 8192 (on NT/2K/XP). + lt_cv_sys_max_cmd_len=8192; + ;; + + mint*) + # On MiNT this can take a long time and run out of memory. + lt_cv_sys_max_cmd_len=8192; + ;; + + amigaos*) + # On AmigaOS with pdksh, this test takes hours, literally. + # So we just punt and use a minimum line length of 8192. + lt_cv_sys_max_cmd_len=8192; + ;; + + bitrig* | darwin* | dragonfly* | freebsd* | midnightbsd* | netbsd* | openbsd*) + # This has been around since 386BSD, at least. Likely further. + if test -x /sbin/sysctl; then + lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax` + elif test -x /usr/sbin/sysctl; then + lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax` + else + lt_cv_sys_max_cmd_len=65536 # usable default for all BSDs + fi + # And add a safety zone + lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4` + lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3` + ;; + + interix*) + # We know the value 262144 and hardcode it with a safety zone (like BSD) + lt_cv_sys_max_cmd_len=196608 + ;; + + os2*) + # The test takes a long time on OS/2. + lt_cv_sys_max_cmd_len=8192 + ;; + + osf*) + # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure + # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not + # nice to cause kernel panics so lets avoid the loop below. + # First set a reasonable default. + lt_cv_sys_max_cmd_len=16384 + # + if test -x /sbin/sysconfig; then + case `/sbin/sysconfig -q proc exec_disable_arg_limit` in + *1*) lt_cv_sys_max_cmd_len=-1 ;; + esac + fi + ;; + sco3.2v5*) + lt_cv_sys_max_cmd_len=102400 + ;; + sysv5* | sco5v6* | sysv4.2uw2*) + kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null` + if test -n "$kargmax"; then + lt_cv_sys_max_cmd_len=`echo $kargmax | $SED 's/.*[[ ]]//'` + else + lt_cv_sys_max_cmd_len=32768 + fi + ;; + *) + lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null` + if test -n "$lt_cv_sys_max_cmd_len" && \ + test undefined != "$lt_cv_sys_max_cmd_len"; then + lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4` + lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3` + else + # Make teststring a little bigger before we do anything with it. + # a 1K string should be a reasonable start. + for i in 1 2 3 4 5 6 7 8; do + teststring=$teststring$teststring + done + SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}} + # If test is not a shell built-in, we'll probably end up computing a + # maximum length that is only half of the actual maximum length, but + # we can't tell. + while { test X`env echo "$teststring$teststring" 2>/dev/null` \ + = "X$teststring$teststring"; } >/dev/null 2>&1 && + test 17 != "$i" # 1/2 MB should be enough + do + i=`expr $i + 1` + teststring=$teststring$teststring + done + # Only check the string length outside the loop. + lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1` + teststring= + # Add a significant safety factor because C++ compilers can tack on + # massive amounts of additional arguments before passing them to the + # linker. It appears as though 1/2 is a usable value. + lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2` + fi + ;; + esac +]) +if test -n "$lt_cv_sys_max_cmd_len"; then + AC_MSG_RESULT($lt_cv_sys_max_cmd_len) +else + AC_MSG_RESULT(none) +fi +max_cmd_len=$lt_cv_sys_max_cmd_len +_LT_DECL([], [max_cmd_len], [0], + [What is the maximum length of a command?]) +])# LT_CMD_MAX_LEN + +# Old name: +AU_ALIAS([AC_LIBTOOL_SYS_MAX_CMD_LEN], [LT_CMD_MAX_LEN]) +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([AC_LIBTOOL_SYS_MAX_CMD_LEN], []) + + +# _LT_HEADER_DLFCN +# ---------------- +m4_defun([_LT_HEADER_DLFCN], +[AC_CHECK_HEADERS([dlfcn.h], [], [], [AC_INCLUDES_DEFAULT])dnl +])# _LT_HEADER_DLFCN + + +# _LT_TRY_DLOPEN_SELF (ACTION-IF-TRUE, ACTION-IF-TRUE-W-USCORE, +# ACTION-IF-FALSE, ACTION-IF-CROSS-COMPILING) +# ---------------------------------------------------------------- +m4_defun([_LT_TRY_DLOPEN_SELF], +[m4_require([_LT_HEADER_DLFCN])dnl +if test yes = "$cross_compiling"; then : + [$4] +else + lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2 + lt_status=$lt_dlunknown + cat > conftest.$ac_ext <<_LT_EOF +[#line $LINENO "configure" +#include "confdefs.h" + +#if HAVE_DLFCN_H +#include +#endif + +#include + +#ifdef RTLD_GLOBAL +# define LT_DLGLOBAL RTLD_GLOBAL +#else +# ifdef DL_GLOBAL +# define LT_DLGLOBAL DL_GLOBAL +# else +# define LT_DLGLOBAL 0 +# endif +#endif + +/* We may have to define LT_DLLAZY_OR_NOW in the command line if we + find out it does not work in some platform. */ +#ifndef LT_DLLAZY_OR_NOW +# ifdef RTLD_LAZY +# define LT_DLLAZY_OR_NOW RTLD_LAZY +# else +# ifdef DL_LAZY +# define LT_DLLAZY_OR_NOW DL_LAZY +# else +# ifdef RTLD_NOW +# define LT_DLLAZY_OR_NOW RTLD_NOW +# else +# ifdef DL_NOW +# define LT_DLLAZY_OR_NOW DL_NOW +# else +# define LT_DLLAZY_OR_NOW 0 +# endif +# endif +# endif +# endif +#endif + +/* When -fvisibility=hidden is used, assume the code has been annotated + correspondingly for the symbols needed. */ +#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3)) +int fnord () __attribute__((visibility("default"))); +#endif + +int fnord () { return 42; } +int main () +{ + void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW); + int status = $lt_dlunknown; + + if (self) + { + if (dlsym (self,"fnord")) status = $lt_dlno_uscore; + else + { + if (dlsym( self,"_fnord")) status = $lt_dlneed_uscore; + else puts (dlerror ()); + } + /* dlclose (self); */ + } + else + puts (dlerror ()); + + return status; +}] +_LT_EOF + if AC_TRY_EVAL(ac_link) && test -s "conftest$ac_exeext" 2>/dev/null; then + (./conftest; exit; ) >&AS_MESSAGE_LOG_FD 2>/dev/null + lt_status=$? + case x$lt_status in + x$lt_dlno_uscore) $1 ;; + x$lt_dlneed_uscore) $2 ;; + x$lt_dlunknown|x*) $3 ;; + esac + else : + # compilation failed + $3 + fi +fi +rm -fr conftest* +])# _LT_TRY_DLOPEN_SELF + + +# LT_SYS_DLOPEN_SELF +# ------------------ +AC_DEFUN([LT_SYS_DLOPEN_SELF], +[m4_require([_LT_HEADER_DLFCN])dnl +if test yes != "$enable_dlopen"; then + enable_dlopen=unknown + enable_dlopen_self=unknown + enable_dlopen_self_static=unknown +else + lt_cv_dlopen=no + lt_cv_dlopen_libs= + + case $host_os in + beos*) + lt_cv_dlopen=load_add_on + lt_cv_dlopen_libs= + lt_cv_dlopen_self=yes + ;; + + mingw* | pw32* | cegcc*) + lt_cv_dlopen=LoadLibrary + lt_cv_dlopen_libs= + ;; + + cygwin*) + lt_cv_dlopen=dlopen + lt_cv_dlopen_libs= + ;; + + darwin*) + # if libdl is installed we need to link against it + AC_CHECK_LIB([dl], [dlopen], + [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl],[ + lt_cv_dlopen=dyld + lt_cv_dlopen_libs= + lt_cv_dlopen_self=yes + ]) + ;; + + tpf*) + # Don't try to run any link tests for TPF. We know it's impossible + # because TPF is a cross-compiler, and we know how we open DSOs. + lt_cv_dlopen=dlopen + lt_cv_dlopen_libs= + lt_cv_dlopen_self=no + ;; + + *) + AC_CHECK_FUNC([shl_load], + [lt_cv_dlopen=shl_load], + [AC_CHECK_LIB([dld], [shl_load], + [lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld], + [AC_CHECK_FUNC([dlopen], + [lt_cv_dlopen=dlopen], + [AC_CHECK_LIB([dl], [dlopen], + [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl], + [AC_CHECK_LIB([svld], [dlopen], + [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld], + [AC_CHECK_LIB([dld], [dld_link], + [lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld]) + ]) + ]) + ]) + ]) + ]) + ;; + esac + + if test no = "$lt_cv_dlopen"; then + enable_dlopen=no + else + enable_dlopen=yes + fi + + case $lt_cv_dlopen in + dlopen) + save_CPPFLAGS=$CPPFLAGS + test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H" + + save_LDFLAGS=$LDFLAGS + wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\" + + save_LIBS=$LIBS + LIBS="$lt_cv_dlopen_libs $LIBS" + + AC_CACHE_CHECK([whether a program can dlopen itself], + lt_cv_dlopen_self, [dnl + _LT_TRY_DLOPEN_SELF( + lt_cv_dlopen_self=yes, lt_cv_dlopen_self=yes, + lt_cv_dlopen_self=no, lt_cv_dlopen_self=cross) + ]) + + if test yes = "$lt_cv_dlopen_self"; then + wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\" + AC_CACHE_CHECK([whether a statically linked program can dlopen itself], + lt_cv_dlopen_self_static, [dnl + _LT_TRY_DLOPEN_SELF( + lt_cv_dlopen_self_static=yes, lt_cv_dlopen_self_static=yes, + lt_cv_dlopen_self_static=no, lt_cv_dlopen_self_static=cross) + ]) + fi + + CPPFLAGS=$save_CPPFLAGS + LDFLAGS=$save_LDFLAGS + LIBS=$save_LIBS + ;; + esac + + case $lt_cv_dlopen_self in + yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;; + *) enable_dlopen_self=unknown ;; + esac + + case $lt_cv_dlopen_self_static in + yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;; + *) enable_dlopen_self_static=unknown ;; + esac +fi +_LT_DECL([dlopen_support], [enable_dlopen], [0], + [Whether dlopen is supported]) +_LT_DECL([dlopen_self], [enable_dlopen_self], [0], + [Whether dlopen of programs is supported]) +_LT_DECL([dlopen_self_static], [enable_dlopen_self_static], [0], + [Whether dlopen of statically linked programs is supported]) +])# LT_SYS_DLOPEN_SELF + +# Old name: +AU_ALIAS([AC_LIBTOOL_DLOPEN_SELF], [LT_SYS_DLOPEN_SELF]) +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([AC_LIBTOOL_DLOPEN_SELF], []) + + +# _LT_COMPILER_C_O([TAGNAME]) +# --------------------------- +# Check to see if options -c and -o are simultaneously supported by compiler. +# This macro does not hard code the compiler like AC_PROG_CC_C_O. +m4_defun([_LT_COMPILER_C_O], +[m4_require([_LT_DECL_SED])dnl +m4_require([_LT_FILEUTILS_DEFAULTS])dnl +m4_require([_LT_TAG_COMPILER])dnl +AC_CACHE_CHECK([if $compiler supports -c -o file.$ac_objext], + [_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)], + [_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=no + $RM -r conftest 2>/dev/null + mkdir conftest + cd conftest + mkdir out + echo "$lt_simple_compile_test_code" > conftest.$ac_ext + + lt_compiler_flag="-o out/conftest2.$ac_objext" + # Insert the option either (1) after the last *FLAGS variable, or + # (2) before a word containing "conftest.", or (3) at the end. + # Note that $ac_compile itself does not contain backslashes and begins + # with a dollar sign (not a hyphen), so the echo should work correctly. + lt_compile=`echo "$ac_compile" | $SED \ + -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ + -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \ + -e 's:$: $lt_compiler_flag:'` + (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&AS_MESSAGE_LOG_FD) + (eval "$lt_compile" 2>out/conftest.err) + ac_status=$? + cat out/conftest.err >&AS_MESSAGE_LOG_FD + echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD + if (exit $ac_status) && test -s out/conftest2.$ac_objext + then + # The compiler can only warn and ignore the option if not recognized + # So say no if there are warnings + $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp + $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2 + if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then + _LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=yes + fi + fi + chmod u+w . 2>&AS_MESSAGE_LOG_FD + $RM conftest* + # SGI C++ compiler will create directory out/ii_files/ for + # template instantiation + test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files + $RM out/* && rmdir out + cd .. + $RM -r conftest + $RM conftest* +]) +_LT_TAGDECL([compiler_c_o], [lt_cv_prog_compiler_c_o], [1], + [Does compiler simultaneously support -c and -o options?]) +])# _LT_COMPILER_C_O + + +# _LT_COMPILER_FILE_LOCKS([TAGNAME]) +# ---------------------------------- +# Check to see if we can do hard links to lock some files if needed +m4_defun([_LT_COMPILER_FILE_LOCKS], +[m4_require([_LT_ENABLE_LOCK])dnl +m4_require([_LT_FILEUTILS_DEFAULTS])dnl +_LT_COMPILER_C_O([$1]) + +hard_links=nottested +if test no = "$_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)" && test no != "$need_locks"; then + # do not overwrite the value of need_locks provided by the user + AC_MSG_CHECKING([if we can lock with hard links]) + hard_links=yes + $RM conftest* + ln conftest.a conftest.b 2>/dev/null && hard_links=no + touch conftest.a + ln conftest.a conftest.b 2>&5 || hard_links=no + ln conftest.a conftest.b 2>/dev/null && hard_links=no + AC_MSG_RESULT([$hard_links]) + if test no = "$hard_links"; then + AC_MSG_WARN(['$CC' does not support '-c -o', so 'make -j' may be unsafe]) + need_locks=warn + fi +else + need_locks=no +fi +_LT_DECL([], [need_locks], [1], [Must we lock files when doing compilation?]) +])# _LT_COMPILER_FILE_LOCKS + + +# _LT_CHECK_OBJDIR +# ---------------- +m4_defun([_LT_CHECK_OBJDIR], +[AC_CACHE_CHECK([for objdir], [lt_cv_objdir], +[rm -f .libs 2>/dev/null +mkdir .libs 2>/dev/null +if test -d .libs; then + lt_cv_objdir=.libs +else + # MS-DOS does not allow filenames that begin with a dot. + lt_cv_objdir=_libs +fi +rmdir .libs 2>/dev/null]) +objdir=$lt_cv_objdir +_LT_DECL([], [objdir], [0], + [The name of the directory that contains temporary libtool files])dnl +m4_pattern_allow([LT_OBJDIR])dnl +AC_DEFINE_UNQUOTED([LT_OBJDIR], "$lt_cv_objdir/", + [Define to the sub-directory where libtool stores uninstalled libraries.]) +])# _LT_CHECK_OBJDIR + + +# _LT_LINKER_HARDCODE_LIBPATH([TAGNAME]) +# -------------------------------------- +# Check hardcoding attributes. +m4_defun([_LT_LINKER_HARDCODE_LIBPATH], +[AC_MSG_CHECKING([how to hardcode library paths into programs]) +_LT_TAGVAR(hardcode_action, $1)= +if test -n "$_LT_TAGVAR(hardcode_libdir_flag_spec, $1)" || + test -n "$_LT_TAGVAR(runpath_var, $1)" || + test yes = "$_LT_TAGVAR(hardcode_automatic, $1)"; then + + # We can hardcode non-existent directories. + if test no != "$_LT_TAGVAR(hardcode_direct, $1)" && + # If the only mechanism to avoid hardcoding is shlibpath_var, we + # have to relink, otherwise we might link with an installed library + # when we should be linking with a yet-to-be-installed one + ## test no != "$_LT_TAGVAR(hardcode_shlibpath_var, $1)" && + test no != "$_LT_TAGVAR(hardcode_minus_L, $1)"; then + # Linking always hardcodes the temporary library directory. + _LT_TAGVAR(hardcode_action, $1)=relink + else + # We can link without hardcoding, and we can hardcode nonexisting dirs. + _LT_TAGVAR(hardcode_action, $1)=immediate + fi +else + # We cannot hardcode anything, or else we can only hardcode existing + # directories. + _LT_TAGVAR(hardcode_action, $1)=unsupported +fi +AC_MSG_RESULT([$_LT_TAGVAR(hardcode_action, $1)]) + +if test relink = "$_LT_TAGVAR(hardcode_action, $1)" || + test yes = "$_LT_TAGVAR(inherit_rpath, $1)"; then + # Fast installation is not supported + enable_fast_install=no +elif test yes = "$shlibpath_overrides_runpath" || + test no = "$enable_shared"; then + # Fast installation is not necessary + enable_fast_install=needless +fi +_LT_TAGDECL([], [hardcode_action], [0], + [How to hardcode a shared library path into an executable]) +])# _LT_LINKER_HARDCODE_LIBPATH + + +# _LT_CMD_STRIPLIB +# ---------------- +m4_defun([_LT_CMD_STRIPLIB], +[m4_require([_LT_DECL_EGREP]) +striplib= +old_striplib= +AC_MSG_CHECKING([whether stripping libraries is possible]) +if test -z "$STRIP"; then + AC_MSG_RESULT([no]) +else + if $STRIP -V 2>&1 | $GREP "GNU strip" >/dev/null; then + old_striplib="$STRIP --strip-debug" + striplib="$STRIP --strip-unneeded" + AC_MSG_RESULT([yes]) + else + case $host_os in + darwin*) + # FIXME - insert some real tests, host_os isn't really good enough + striplib="$STRIP -x" + old_striplib="$STRIP -S" + AC_MSG_RESULT([yes]) + ;; + freebsd*) + if $STRIP -V 2>&1 | $GREP "elftoolchain" >/dev/null; then + old_striplib="$STRIP --strip-debug" + striplib="$STRIP --strip-unneeded" + AC_MSG_RESULT([yes]) + else + AC_MSG_RESULT([no]) + fi + ;; + *) + AC_MSG_RESULT([no]) + ;; + esac + fi +fi +_LT_DECL([], [old_striplib], [1], [Commands to strip libraries]) +_LT_DECL([], [striplib], [1]) +])# _LT_CMD_STRIPLIB + + +# _LT_PREPARE_MUNGE_PATH_LIST +# --------------------------- +# Make sure func_munge_path_list() is defined correctly. +m4_defun([_LT_PREPARE_MUNGE_PATH_LIST], +[[# func_munge_path_list VARIABLE PATH +# ----------------------------------- +# VARIABLE is name of variable containing _space_ separated list of +# directories to be munged by the contents of PATH, which is string +# having a format: +# "DIR[:DIR]:" +# string "DIR[ DIR]" will be prepended to VARIABLE +# ":DIR[:DIR]" +# string "DIR[ DIR]" will be appended to VARIABLE +# "DIRP[:DIRP]::[DIRA:]DIRA" +# string "DIRP[ DIRP]" will be prepended to VARIABLE and string +# "DIRA[ DIRA]" will be appended to VARIABLE +# "DIR[:DIR]" +# VARIABLE will be replaced by "DIR[ DIR]" +func_munge_path_list () +{ + case x@S|@2 in + x) + ;; + *:) + eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'` \@S|@@S|@1\" + ;; + x:*) + eval @S|@1=\"\@S|@@S|@1 `$ECHO @S|@2 | $SED 's/:/ /g'`\" + ;; + *::*) + eval @S|@1=\"\@S|@@S|@1\ `$ECHO @S|@2 | $SED -e 's/.*:://' -e 's/:/ /g'`\" + eval @S|@1=\"`$ECHO @S|@2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \@S|@@S|@1\" + ;; + *) + eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'`\" + ;; + esac +} +]])# _LT_PREPARE_PATH_LIST + + +# _LT_SYS_DYNAMIC_LINKER([TAG]) +# ----------------------------- +# PORTME Fill in your ld.so characteristics +m4_defun([_LT_SYS_DYNAMIC_LINKER], +[AC_REQUIRE([AC_CANONICAL_HOST])dnl +m4_require([_LT_DECL_EGREP])dnl +m4_require([_LT_FILEUTILS_DEFAULTS])dnl +m4_require([_LT_DECL_OBJDUMP])dnl +m4_require([_LT_DECL_SED])dnl +m4_require([_LT_CHECK_SHELL_FEATURES])dnl +m4_require([_LT_PREPARE_MUNGE_PATH_LIST])dnl +AC_MSG_CHECKING([dynamic linker characteristics]) +m4_if([$1], + [], [ +if test yes = "$GCC"; then + case $host_os in + darwin*) lt_awk_arg='/^libraries:/,/LR/' ;; + *) lt_awk_arg='/^libraries:/' ;; + esac + case $host_os in + mingw* | cegcc*) lt_sed_strip_eq='s|=\([[A-Za-z]]:\)|\1|g' ;; + *) lt_sed_strip_eq='s|=/|/|g' ;; + esac + lt_search_path_spec=`$CC -print-search-dirs | awk $lt_awk_arg | $SED -e "s/^libraries://" -e $lt_sed_strip_eq` + case $lt_search_path_spec in + *\;*) + # if the path contains ";" then we assume it to be the separator + # otherwise default to the standard path separator (i.e. ":") - it is + # assumed that no part of a normal pathname contains ";" but that should + # okay in the real world where ";" in dirpaths is itself problematic. + lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED 's/;/ /g'` + ;; + *) + lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED "s/$PATH_SEPARATOR/ /g"` + ;; + esac + # Ok, now we have the path, separated by spaces, we can step through it + # and add multilib dir if necessary... + lt_tmp_lt_search_path_spec= + lt_multi_os_dir=/`$CC $CPPFLAGS $CFLAGS $LDFLAGS -print-multi-os-directory 2>/dev/null` + # ...but if some path component already ends with the multilib dir we assume + # that all is fine and trust -print-search-dirs as is (GCC 4.2? or newer). + case "$lt_multi_os_dir; $lt_search_path_spec " in + "/; "* | "/.; "* | "/./; "* | *"$lt_multi_os_dir "* | *"$lt_multi_os_dir/ "*) + lt_multi_os_dir= + ;; + esac + for lt_sys_path in $lt_search_path_spec; do + if test -d "$lt_sys_path$lt_multi_os_dir"; then + lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path$lt_multi_os_dir" + elif test -n "$lt_multi_os_dir"; then + test -d "$lt_sys_path" && \ + lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path" + fi + done + lt_search_path_spec=`$ECHO "$lt_tmp_lt_search_path_spec" | awk ' +BEGIN {RS = " "; FS = "/|\n";} { + lt_foo = ""; + lt_count = 0; + for (lt_i = NF; lt_i > 0; lt_i--) { + if ($lt_i != "" && $lt_i != ".") { + if ($lt_i == "..") { + lt_count++; + } else { + if (lt_count == 0) { + lt_foo = "/" $lt_i lt_foo; + } else { + lt_count--; + } + } + } + } + if (lt_foo != "") { lt_freq[[lt_foo]]++; } + if (lt_freq[[lt_foo]] == 1) { print lt_foo; } +}'` + # AWK program above erroneously prepends '/' to C:/dos/paths + # for these hosts. + case $host_os in + mingw* | cegcc*) lt_search_path_spec=`$ECHO "$lt_search_path_spec" |\ + $SED 's|/\([[A-Za-z]]:\)|\1|g'` ;; + esac + sys_lib_search_path_spec=`$ECHO "$lt_search_path_spec" | $lt_NL2SP` +else + sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib" +fi]) +library_names_spec= +libname_spec='lib$name' +soname_spec= +shrext_cmds=.so +postinstall_cmds= +postuninstall_cmds= +finish_cmds= +finish_eval= +shlibpath_var= +shlibpath_overrides_runpath=unknown +version_type=none +dynamic_linker="$host_os ld.so" +sys_lib_dlsearch_path_spec="/lib /usr/lib" +need_lib_prefix=unknown +hardcode_into_libs=no + +# when you set need_version to no, make sure it does not cause -set_version +# flags to be left without arguments +need_version=unknown + +AC_ARG_VAR([LT_SYS_LIBRARY_PATH], +[User-defined run-time library search path.]) + +case $host_os in +aix3*) + version_type=linux # correct to gnu/linux during the next big refactor + library_names_spec='$libname$release$shared_ext$versuffix $libname.a' + shlibpath_var=LIBPATH + + # AIX 3 has no versioning support, so we append a major version to the name. + soname_spec='$libname$release$shared_ext$major' + ;; + +aix[[4-9]]*) + version_type=linux # correct to gnu/linux during the next big refactor + need_lib_prefix=no + need_version=no + hardcode_into_libs=yes + if test ia64 = "$host_cpu"; then + # AIX 5 supports IA64 + library_names_spec='$libname$release$shared_ext$major $libname$release$shared_ext$versuffix $libname$shared_ext' + shlibpath_var=LD_LIBRARY_PATH + else + # With GCC up to 2.95.x, collect2 would create an import file + # for dependence libraries. The import file would start with + # the line '#! .'. This would cause the generated library to + # depend on '.', always an invalid library. This was fixed in + # development snapshots of GCC prior to 3.0. + case $host_os in + aix4 | aix4.[[01]] | aix4.[[01]].*) + if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)' + echo ' yes ' + echo '#endif'; } | $CC -E - | $GREP yes > /dev/null; then + : + else + can_build_shared=no + fi + ;; + esac + # Using Import Files as archive members, it is possible to support + # filename-based versioning of shared library archives on AIX. While + # this would work for both with and without runtime linking, it will + # prevent static linking of such archives. So we do filename-based + # shared library versioning with .so extension only, which is used + # when both runtime linking and shared linking is enabled. + # Unfortunately, runtime linking may impact performance, so we do + # not want this to be the default eventually. Also, we use the + # versioned .so libs for executables only if there is the -brtl + # linker flag in LDFLAGS as well, or --with-aix-soname=svr4 only. + # To allow for filename-based versioning support, we need to create + # libNAME.so.V as an archive file, containing: + # *) an Import File, referring to the versioned filename of the + # archive as well as the shared archive member, telling the + # bitwidth (32 or 64) of that shared object, and providing the + # list of exported symbols of that shared object, eventually + # decorated with the 'weak' keyword + # *) the shared object with the F_LOADONLY flag set, to really avoid + # it being seen by the linker. + # At run time we better use the real file rather than another symlink, + # but for link time we create the symlink libNAME.so -> libNAME.so.V + + case $with_aix_soname,$aix_use_runtimelinking in + # AIX (on Power*) has no versioning support, so currently we cannot hardcode correct + # soname into executable. Probably we can add versioning support to + # collect2, so additional links can be useful in future. + aix,yes) # traditional libtool + dynamic_linker='AIX unversionable lib.so' + # If using run time linking (on AIX 4.2 or later) use lib.so + # instead of lib.a to let people know that these are not + # typical AIX shared libraries. + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + ;; + aix,no) # traditional AIX only + dynamic_linker='AIX lib.a[(]lib.so.V[)]' + # We preserve .a as extension for shared libraries through AIX4.2 + # and later when we are not doing run time linking. + library_names_spec='$libname$release.a $libname.a' + soname_spec='$libname$release$shared_ext$major' + ;; + svr4,*) # full svr4 only + dynamic_linker="AIX lib.so.V[(]$shared_archive_member_spec.o[)]" + library_names_spec='$libname$release$shared_ext$major $libname$shared_ext' + # We do not specify a path in Import Files, so LIBPATH fires. + shlibpath_overrides_runpath=yes + ;; + *,yes) # both, prefer svr4 + dynamic_linker="AIX lib.so.V[(]$shared_archive_member_spec.o[)], lib.a[(]lib.so.V[)]" + library_names_spec='$libname$release$shared_ext$major $libname$shared_ext' + # unpreferred sharedlib libNAME.a needs extra handling + postinstall_cmds='test -n "$linkname" || linkname="$realname"~func_stripname "" ".so" "$linkname"~$install_shared_prog "$dir/$func_stripname_result.$libext" "$destdir/$func_stripname_result.$libext"~test -z "$tstripme" || test -z "$striplib" || $striplib "$destdir/$func_stripname_result.$libext"' + postuninstall_cmds='for n in $library_names $old_library; do :; done~func_stripname "" ".so" "$n"~test "$func_stripname_result" = "$n" || func_append rmfiles " $odir/$func_stripname_result.$libext"' + # We do not specify a path in Import Files, so LIBPATH fires. + shlibpath_overrides_runpath=yes + ;; + *,no) # both, prefer aix + dynamic_linker="AIX lib.a[(]lib.so.V[)], lib.so.V[(]$shared_archive_member_spec.o[)]" + library_names_spec='$libname$release.a $libname.a' + soname_spec='$libname$release$shared_ext$major' + # unpreferred sharedlib libNAME.so.V and symlink libNAME.so need extra handling + postinstall_cmds='test -z "$dlname" || $install_shared_prog $dir/$dlname $destdir/$dlname~test -z "$tstripme" || test -z "$striplib" || $striplib $destdir/$dlname~test -n "$linkname" || linkname=$realname~func_stripname "" ".a" "$linkname"~(cd "$destdir" && $LN_S -f $dlname $func_stripname_result.so)' + postuninstall_cmds='test -z "$dlname" || func_append rmfiles " $odir/$dlname"~for n in $old_library $library_names; do :; done~func_stripname "" ".a" "$n"~func_append rmfiles " $odir/$func_stripname_result.so"' + ;; + esac + shlibpath_var=LIBPATH + fi + ;; + +amigaos*) + case $host_cpu in + powerpc) + # Since July 2007 AmigaOS4 officially supports .so libraries. + # When compiling the executable, add -use-dynld -Lsobjs: to the compileline. + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + ;; + m68k) + library_names_spec='$libname.ixlibrary $libname.a' + # Create ${libname}_ixlibrary.a entries in /sys/libs. + finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`func_echo_all "$lib" | $SED '\''s%^.*/\([[^/]]*\)\.ixlibrary$%\1%'\''`; $RM /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done' + ;; + esac + ;; + +beos*) + library_names_spec='$libname$shared_ext' + dynamic_linker="$host_os ld.so" + shlibpath_var=LIBRARY_PATH + ;; + +bsdi[[45]]*) + version_type=linux # correct to gnu/linux during the next big refactor + need_version=no + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + soname_spec='$libname$release$shared_ext$major' + finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir' + shlibpath_var=LD_LIBRARY_PATH + sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib" + sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib" + # the default ld.so.conf also contains /usr/contrib/lib and + # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow + # libtool to hard-code these into programs + ;; + +cygwin* | mingw* | pw32* | cegcc*) + version_type=windows + shrext_cmds=.dll + need_version=no + need_lib_prefix=no + + case $GCC,$cc_basename in + yes,*) + # gcc + library_names_spec='$libname.dll.a' + # DLL is installed to $(libdir)/../bin by postinstall_cmds + postinstall_cmds='base_file=`basename \$file`~ + dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~ + dldir=$destdir/`dirname \$dlpath`~ + test -d \$dldir || mkdir -p \$dldir~ + $install_prog $dir/$dlname \$dldir/$dlname~ + chmod a+x \$dldir/$dlname~ + if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then + eval '\''$striplib \$dldir/$dlname'\'' || exit \$?; + fi' + postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~ + dlpath=$dir/\$dldll~ + $RM \$dlpath' + shlibpath_overrides_runpath=yes + + case $host_os in + cygwin*) + # Cygwin DLLs use 'cyg' prefix rather than 'lib' + soname_spec='`echo $libname | $SED -e 's/^lib/cyg/'``echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext' +m4_if([$1], [],[ + sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/lib/w32api"]) + ;; + mingw* | cegcc*) + # MinGW DLLs use traditional 'lib' prefix + soname_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext' + ;; + pw32*) + # pw32 DLLs use 'pw' prefix rather than 'lib' + library_names_spec='`echo $libname | $SED -e 's/^lib/pw/'``echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext' + ;; + esac + dynamic_linker='Win32 ld.exe' + ;; + + *,cl* | *,icl*) + # Native MSVC or ICC + libname_spec='$name' + soname_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext' + library_names_spec='$libname.dll.lib' + + case $build_os in + mingw*) + sys_lib_search_path_spec= + lt_save_ifs=$IFS + IFS=';' + for lt_path in $LIB + do + IFS=$lt_save_ifs + # Let DOS variable expansion print the short 8.3 style file name. + lt_path=`cd "$lt_path" 2>/dev/null && cmd //C "for %i in (".") do @echo %~si"` + sys_lib_search_path_spec="$sys_lib_search_path_spec $lt_path" + done + IFS=$lt_save_ifs + # Convert to MSYS style. + sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's|\\\\|/|g' -e 's| \\([[a-zA-Z]]\\):| /\\1|g' -e 's|^ ||'` + ;; + cygwin*) + # Convert to unix form, then to dos form, then back to unix form + # but this time dos style (no spaces!) so that the unix form looks + # like /cygdrive/c/PROGRA~1:/cygdr... + sys_lib_search_path_spec=`cygpath --path --unix "$LIB"` + sys_lib_search_path_spec=`cygpath --path --dos "$sys_lib_search_path_spec" 2>/dev/null` + sys_lib_search_path_spec=`cygpath --path --unix "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"` + ;; + *) + sys_lib_search_path_spec=$LIB + if $ECHO "$sys_lib_search_path_spec" | [$GREP ';[c-zC-Z]:/' >/dev/null]; then + # It is most probably a Windows format PATH. + sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'` + else + sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"` + fi + # FIXME: find the short name or the path components, as spaces are + # common. (e.g. "Program Files" -> "PROGRA~1") + ;; + esac + + # DLL is installed to $(libdir)/../bin by postinstall_cmds + postinstall_cmds='base_file=`basename \$file`~ + dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~ + dldir=$destdir/`dirname \$dlpath`~ + test -d \$dldir || mkdir -p \$dldir~ + $install_prog $dir/$dlname \$dldir/$dlname' + postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~ + dlpath=$dir/\$dldll~ + $RM \$dlpath' + shlibpath_overrides_runpath=yes + dynamic_linker='Win32 link.exe' + ;; + + *) + # Assume MSVC and ICC wrapper + library_names_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext $libname.lib' + dynamic_linker='Win32 ld.exe' + ;; + esac + # FIXME: first we should search . and the directory the executable is in + shlibpath_var=PATH + ;; + +darwin* | rhapsody*) + dynamic_linker="$host_os dyld" + version_type=darwin + need_lib_prefix=no + need_version=no + library_names_spec='$libname$release$major$shared_ext $libname$shared_ext' + soname_spec='$libname$release$major$shared_ext' + shlibpath_overrides_runpath=yes + shlibpath_var=DYLD_LIBRARY_PATH + shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`' +m4_if([$1], [],[ + sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/local/lib"]) + sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib' + ;; + +dgux*) + version_type=linux # correct to gnu/linux during the next big refactor + need_lib_prefix=no + need_version=no + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + soname_spec='$libname$release$shared_ext$major' + shlibpath_var=LD_LIBRARY_PATH + ;; + +freebsd* | dragonfly* | midnightbsd*) + # DragonFly does not have aout. When/if they implement a new + # versioning mechanism, adjust this. + if test -x /usr/bin/objformat; then + objformat=`/usr/bin/objformat` + else + case $host_os in + freebsd[[23]].*) objformat=aout ;; + *) objformat=elf ;; + esac + fi + version_type=freebsd-$objformat + case $version_type in + freebsd-elf*) + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + soname_spec='$libname$release$shared_ext$major' + need_version=no + need_lib_prefix=no + ;; + freebsd-*) + library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' + need_version=yes + ;; + esac + shlibpath_var=LD_LIBRARY_PATH + case $host_os in + freebsd2.*) + shlibpath_overrides_runpath=yes + ;; + freebsd3.[[01]]* | freebsdelf3.[[01]]*) + shlibpath_overrides_runpath=yes + hardcode_into_libs=yes + ;; + freebsd3.[[2-9]]* | freebsdelf3.[[2-9]]* | \ + freebsd4.[[0-5]] | freebsdelf4.[[0-5]] | freebsd4.1.1 | freebsdelf4.1.1) + shlibpath_overrides_runpath=no + hardcode_into_libs=yes + ;; + *) # from 4.6 on, and DragonFly + shlibpath_overrides_runpath=yes + hardcode_into_libs=yes + ;; + esac + ;; + +haiku*) + version_type=linux # correct to gnu/linux during the next big refactor + need_lib_prefix=no + need_version=no + dynamic_linker="$host_os runtime_loader" + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + soname_spec='$libname$release$shared_ext$major' + shlibpath_var=LIBRARY_PATH + shlibpath_overrides_runpath=no + sys_lib_dlsearch_path_spec='/boot/home/config/lib /boot/common/lib /boot/system/lib' + hardcode_into_libs=yes + ;; + +hpux9* | hpux10* | hpux11*) + # Give a soname corresponding to the major version so that dld.sl refuses to + # link against other versions. + version_type=sunos + need_lib_prefix=no + need_version=no + case $host_cpu in + ia64*) + shrext_cmds='.so' + hardcode_into_libs=yes + dynamic_linker="$host_os dld.so" + shlibpath_var=LD_LIBRARY_PATH + shlibpath_overrides_runpath=yes # Unless +noenvvar is specified. + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + soname_spec='$libname$release$shared_ext$major' + if test 32 = "$HPUX_IA64_MODE"; then + sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib" + sys_lib_dlsearch_path_spec=/usr/lib/hpux32 + else + sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64" + sys_lib_dlsearch_path_spec=/usr/lib/hpux64 + fi + ;; + hppa*64*) + shrext_cmds='.sl' + hardcode_into_libs=yes + dynamic_linker="$host_os dld.sl" + shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH + shlibpath_overrides_runpath=yes # Unless +noenvvar is specified. + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + soname_spec='$libname$release$shared_ext$major' + sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64" + sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec + ;; + *) + shrext_cmds='.sl' + dynamic_linker="$host_os dld.sl" + shlibpath_var=SHLIB_PATH + shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + soname_spec='$libname$release$shared_ext$major' + ;; + esac + # HP-UX runs *really* slowly unless shared libraries are mode 555, ... + postinstall_cmds='chmod 555 $lib' + # or fails outright, so override atomically: + install_override_mode=555 + ;; + +interix[[3-9]]*) + version_type=linux # correct to gnu/linux during the next big refactor + need_lib_prefix=no + need_version=no + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + soname_spec='$libname$release$shared_ext$major' + dynamic_linker='Interix 3.x ld.so.1 (PE, like ELF)' + shlibpath_var=LD_LIBRARY_PATH + shlibpath_overrides_runpath=no + hardcode_into_libs=yes + ;; + +irix5* | irix6* | nonstopux*) + case $host_os in + nonstopux*) version_type=nonstopux ;; + *) + if test yes = "$lt_cv_prog_gnu_ld"; then + version_type=linux # correct to gnu/linux during the next big refactor + else + version_type=irix + fi ;; + esac + need_lib_prefix=no + need_version=no + soname_spec='$libname$release$shared_ext$major' + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$release$shared_ext $libname$shared_ext' + case $host_os in + irix5* | nonstopux*) + libsuff= shlibsuff= + ;; + *) + case $LD in # libtool.m4 will add one of these switches to LD + *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ") + libsuff= shlibsuff= libmagic=32-bit;; + *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ") + libsuff=32 shlibsuff=N32 libmagic=N32;; + *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ") + libsuff=64 shlibsuff=64 libmagic=64-bit;; + *) libsuff= shlibsuff= libmagic=never-match;; + esac + ;; + esac + shlibpath_var=LD_LIBRARY${shlibsuff}_PATH + shlibpath_overrides_runpath=no + sys_lib_search_path_spec="/usr/lib$libsuff /lib$libsuff /usr/local/lib$libsuff" + sys_lib_dlsearch_path_spec="/usr/lib$libsuff /lib$libsuff" + hardcode_into_libs=yes + ;; + +# No shared lib support for Linux oldld, aout, or coff. +linux*oldld* | linux*aout* | linux*coff*) + dynamic_linker=no + ;; + +linux*android*) + version_type=none # Android doesn't support versioned libraries. + need_lib_prefix=no + need_version=no + library_names_spec='$libname$release$shared_ext' + soname_spec='$libname$release$shared_ext' + finish_cmds= + shlibpath_var=LD_LIBRARY_PATH + shlibpath_overrides_runpath=yes + + # This implies no fast_install, which is unacceptable. + # Some rework will be needed to allow for fast_install + # before this can be enabled. + hardcode_into_libs=yes + + dynamic_linker='Android linker' + # Don't embed -rpath directories since the linker doesn't support them. + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' + ;; + +# This must be glibc/ELF. +linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) + version_type=linux # correct to gnu/linux during the next big refactor + need_lib_prefix=no + need_version=no + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + soname_spec='$libname$release$shared_ext$major' + finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir' + shlibpath_var=LD_LIBRARY_PATH + shlibpath_overrides_runpath=no + + # Some binutils ld are patched to set DT_RUNPATH + AC_CACHE_VAL([lt_cv_shlibpath_overrides_runpath], + [lt_cv_shlibpath_overrides_runpath=no + save_LDFLAGS=$LDFLAGS + save_libdir=$libdir + eval "libdir=/foo; wl=\"$_LT_TAGVAR(lt_prog_compiler_wl, $1)\"; \ + LDFLAGS=\"\$LDFLAGS $_LT_TAGVAR(hardcode_libdir_flag_spec, $1)\"" + AC_LINK_IFELSE([AC_LANG_PROGRAM([],[])], + [AS_IF([ ($OBJDUMP -p conftest$ac_exeext) 2>/dev/null | grep "RUNPATH.*$libdir" >/dev/null], + [lt_cv_shlibpath_overrides_runpath=yes])]) + LDFLAGS=$save_LDFLAGS + libdir=$save_libdir + ]) + shlibpath_overrides_runpath=$lt_cv_shlibpath_overrides_runpath + + # This implies no fast_install, which is unacceptable. + # Some rework will be needed to allow for fast_install + # before this can be enabled. + hardcode_into_libs=yes + + # Ideally, we could use ldconfig to report *all* directores which are + # searched for libraries, however this is still not possible. Aside from not + # being certain /sbin/ldconfig is available, command + # 'ldconfig -N -X -v | grep ^/' on 64bit Fedora does not report /usr/lib64, + # even though it is searched at run-time. Try to do the best guess by + # appending ld.so.conf contents (and includes) to the search path. + if test -f /etc/ld.so.conf; then + lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s 2>/dev/null", \[$]2)); skip = 1; } { if (!skip) print \[$]0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;/^[ ]*hwcap[ ]/d;s/[:, ]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;s/"//g;/^$/d' | tr '\n' ' '` + sys_lib_dlsearch_path_spec="/lib /usr/lib $lt_ld_extra" + fi + + # We used to test for /lib/ld.so.1 and disable shared libraries on + # powerpc, because MkLinux only supported shared libraries with the + # GNU dynamic linker. Since this was broken with cross compilers, + # most powerpc-linux boxes support dynamic linking these days and + # people can always --disable-shared, the test was removed, and we + # assume the GNU/Linux dynamic linker is in use. + dynamic_linker='GNU/Linux ld.so' + ;; + +netbsd*) + version_type=sunos + need_lib_prefix=no + need_version=no + if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then + library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' + finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir' + dynamic_linker='NetBSD (a.out) ld.so' + else + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + soname_spec='$libname$release$shared_ext$major' + dynamic_linker='NetBSD ld.elf_so' + fi + shlibpath_var=LD_LIBRARY_PATH + shlibpath_overrides_runpath=yes + hardcode_into_libs=yes + ;; + +newsos6) + version_type=linux # correct to gnu/linux during the next big refactor + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + shlibpath_var=LD_LIBRARY_PATH + shlibpath_overrides_runpath=yes + ;; + +*nto* | *qnx*) + version_type=qnx + need_lib_prefix=no + need_version=no + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + soname_spec='$libname$release$shared_ext$major' + shlibpath_var=LD_LIBRARY_PATH + shlibpath_overrides_runpath=no + hardcode_into_libs=yes + dynamic_linker='ldqnx.so' + ;; + +openbsd* | bitrig*) + version_type=sunos + sys_lib_dlsearch_path_spec=/usr/lib + need_lib_prefix=no + if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then + need_version=no + else + need_version=yes + fi + library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' + finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir' + shlibpath_var=LD_LIBRARY_PATH + shlibpath_overrides_runpath=yes + ;; + +os2*) + libname_spec='$name' + version_type=windows + shrext_cmds=.dll + need_version=no + need_lib_prefix=no + # OS/2 can only load a DLL with a base name of 8 characters or less. + soname_spec='`test -n "$os2dllname" && libname="$os2dllname"; + v=$($ECHO $release$versuffix | tr -d .-); + n=$($ECHO $libname | cut -b -$((8 - ${#v})) | tr . _); + $ECHO $n$v`$shared_ext' + library_names_spec='${libname}_dll.$libext' + dynamic_linker='OS/2 ld.exe' + shlibpath_var=BEGINLIBPATH + sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib" + sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec + postinstall_cmds='base_file=`basename \$file`~ + dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; $ECHO \$dlname'\''`~ + dldir=$destdir/`dirname \$dlpath`~ + test -d \$dldir || mkdir -p \$dldir~ + $install_prog $dir/$dlname \$dldir/$dlname~ + chmod a+x \$dldir/$dlname~ + if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then + eval '\''$striplib \$dldir/$dlname'\'' || exit \$?; + fi' + postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; $ECHO \$dlname'\''`~ + dlpath=$dir/\$dldll~ + $RM \$dlpath' + ;; + +osf3* | osf4* | osf5*) + version_type=osf + need_lib_prefix=no + need_version=no + soname_spec='$libname$release$shared_ext$major' + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + shlibpath_var=LD_LIBRARY_PATH + sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib" + sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec + ;; + +rdos*) + dynamic_linker=no + ;; + +solaris*) + version_type=linux # correct to gnu/linux during the next big refactor + need_lib_prefix=no + need_version=no + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + soname_spec='$libname$release$shared_ext$major' + shlibpath_var=LD_LIBRARY_PATH + shlibpath_overrides_runpath=yes + hardcode_into_libs=yes + # ldd complains unless libraries are executable + postinstall_cmds='chmod +x $lib' + ;; + +sunos4*) + version_type=sunos + library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' + finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir' + shlibpath_var=LD_LIBRARY_PATH + shlibpath_overrides_runpath=yes + if test yes = "$with_gnu_ld"; then + need_lib_prefix=no + fi + need_version=yes + ;; + +sysv4 | sysv4.3*) + version_type=linux # correct to gnu/linux during the next big refactor + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + soname_spec='$libname$release$shared_ext$major' + shlibpath_var=LD_LIBRARY_PATH + case $host_vendor in + sni) + shlibpath_overrides_runpath=no + need_lib_prefix=no + runpath_var=LD_RUN_PATH + ;; + siemens) + need_lib_prefix=no + ;; + motorola) + need_lib_prefix=no + need_version=no + shlibpath_overrides_runpath=no + sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib' + ;; + esac + ;; + +sysv4*MP*) + if test -d /usr/nec; then + version_type=linux # correct to gnu/linux during the next big refactor + library_names_spec='$libname$shared_ext.$versuffix $libname$shared_ext.$major $libname$shared_ext' + soname_spec='$libname$shared_ext.$major' + shlibpath_var=LD_LIBRARY_PATH + fi + ;; + +sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*) + version_type=sco + need_lib_prefix=no + need_version=no + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext $libname$shared_ext' + soname_spec='$libname$release$shared_ext$major' + shlibpath_var=LD_LIBRARY_PATH + shlibpath_overrides_runpath=yes + hardcode_into_libs=yes + if test yes = "$with_gnu_ld"; then + sys_lib_search_path_spec='/usr/local/lib /usr/gnu/lib /usr/ccs/lib /usr/lib /lib' + else + sys_lib_search_path_spec='/usr/ccs/lib /usr/lib' + case $host_os in + sco3.2v5*) + sys_lib_search_path_spec="$sys_lib_search_path_spec /lib" + ;; + esac + fi + sys_lib_dlsearch_path_spec='/usr/lib' + ;; + +tpf*) + # TPF is a cross-target only. Preferred cross-host = GNU/Linux. + version_type=linux # correct to gnu/linux during the next big refactor + need_lib_prefix=no + need_version=no + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + shlibpath_var=LD_LIBRARY_PATH + shlibpath_overrides_runpath=no + hardcode_into_libs=yes + ;; + +uts4*) + version_type=linux # correct to gnu/linux during the next big refactor + library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' + soname_spec='$libname$release$shared_ext$major' + shlibpath_var=LD_LIBRARY_PATH + ;; + +*) + dynamic_linker=no + ;; +esac +AC_MSG_RESULT([$dynamic_linker]) +test no = "$dynamic_linker" && can_build_shared=no + +variables_saved_for_relink="PATH $shlibpath_var $runpath_var" +if test yes = "$GCC"; then + variables_saved_for_relink="$variables_saved_for_relink GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH" +fi + +if test set = "${lt_cv_sys_lib_search_path_spec+set}"; then + sys_lib_search_path_spec=$lt_cv_sys_lib_search_path_spec +fi + +if test set = "${lt_cv_sys_lib_dlsearch_path_spec+set}"; then + sys_lib_dlsearch_path_spec=$lt_cv_sys_lib_dlsearch_path_spec +fi + +# remember unaugmented sys_lib_dlsearch_path content for libtool script decls... +configure_time_dlsearch_path=$sys_lib_dlsearch_path_spec + +# ... but it needs LT_SYS_LIBRARY_PATH munging for other configure-time code +func_munge_path_list sys_lib_dlsearch_path_spec "$LT_SYS_LIBRARY_PATH" + +# to be used as default LT_SYS_LIBRARY_PATH value in generated libtool +configure_time_lt_sys_library_path=$LT_SYS_LIBRARY_PATH + +_LT_DECL([], [variables_saved_for_relink], [1], + [Variables whose values should be saved in libtool wrapper scripts and + restored at link time]) +_LT_DECL([], [need_lib_prefix], [0], + [Do we need the "lib" prefix for modules?]) +_LT_DECL([], [need_version], [0], [Do we need a version for libraries?]) +_LT_DECL([], [version_type], [0], [Library versioning type]) +_LT_DECL([], [runpath_var], [0], [Shared library runtime path variable]) +_LT_DECL([], [shlibpath_var], [0],[Shared library path variable]) +_LT_DECL([], [shlibpath_overrides_runpath], [0], + [Is shlibpath searched before the hard-coded library search path?]) +_LT_DECL([], [libname_spec], [1], [Format of library name prefix]) +_LT_DECL([], [library_names_spec], [1], + [[List of archive names. First name is the real one, the rest are links. + The last name is the one that the linker finds with -lNAME]]) +_LT_DECL([], [soname_spec], [1], + [[The coded name of the library, if different from the real name]]) +_LT_DECL([], [install_override_mode], [1], + [Permission mode override for installation of shared libraries]) +_LT_DECL([], [postinstall_cmds], [2], + [Command to use after installation of a shared archive]) +_LT_DECL([], [postuninstall_cmds], [2], + [Command to use after uninstallation of a shared archive]) +_LT_DECL([], [finish_cmds], [2], + [Commands used to finish a libtool library installation in a directory]) +_LT_DECL([], [finish_eval], [1], + [[As "finish_cmds", except a single script fragment to be evaled but + not shown]]) +_LT_DECL([], [hardcode_into_libs], [0], + [Whether we should hardcode library paths into libraries]) +_LT_DECL([], [sys_lib_search_path_spec], [2], + [Compile-time system search path for libraries]) +_LT_DECL([sys_lib_dlsearch_path_spec], [configure_time_dlsearch_path], [2], + [Detected run-time system search path for libraries]) +_LT_DECL([], [configure_time_lt_sys_library_path], [2], + [Explicit LT_SYS_LIBRARY_PATH set during ./configure time]) +])# _LT_SYS_DYNAMIC_LINKER + + +# _LT_PATH_TOOL_PREFIX(TOOL) +# -------------------------- +# find a file program that can recognize shared library +AC_DEFUN([_LT_PATH_TOOL_PREFIX], +[m4_require([_LT_DECL_EGREP])dnl +AC_MSG_CHECKING([for $1]) +AC_CACHE_VAL(lt_cv_path_MAGIC_CMD, +[case $MAGIC_CMD in +[[\\/*] | ?:[\\/]*]) + lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path. + ;; +*) + lt_save_MAGIC_CMD=$MAGIC_CMD + lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR +dnl $ac_dummy forces splitting on constant user-supplied paths. +dnl POSIX.2 word splitting is done only on the output of word expansions, +dnl not every word. This closes a longstanding sh security hole. + ac_dummy="m4_if([$2], , $PATH, [$2])" + for ac_dir in $ac_dummy; do + IFS=$lt_save_ifs + test -z "$ac_dir" && ac_dir=. + if test -f "$ac_dir/$1"; then + lt_cv_path_MAGIC_CMD=$ac_dir/"$1" + if test -n "$file_magic_test_file"; then + case $deplibs_check_method in + "file_magic "*) + file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"` + MAGIC_CMD=$lt_cv_path_MAGIC_CMD + if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null | + $EGREP "$file_magic_regex" > /dev/null; then + : + else + cat <<_LT_EOF 1>&2 + +*** Warning: the command libtool uses to detect shared libraries, +*** $file_magic_cmd, produces output that libtool cannot recognize. +*** The result is that libtool may fail to recognize shared libraries +*** as such. This will affect the creation of libtool libraries that +*** depend on shared libraries, but programs linked with such libtool +*** libraries will work regardless of this problem. Nevertheless, you +*** may want to report the problem to your system manager and/or to +*** bug-libtool@gnu.org + +_LT_EOF + fi ;; + esac + fi + break + fi + done + IFS=$lt_save_ifs + MAGIC_CMD=$lt_save_MAGIC_CMD + ;; +esac]) +MAGIC_CMD=$lt_cv_path_MAGIC_CMD +if test -n "$MAGIC_CMD"; then + AC_MSG_RESULT($MAGIC_CMD) +else + AC_MSG_RESULT(no) +fi +_LT_DECL([], [MAGIC_CMD], [0], + [Used to examine libraries when file_magic_cmd begins with "file"])dnl +])# _LT_PATH_TOOL_PREFIX + +# Old name: +AU_ALIAS([AC_PATH_TOOL_PREFIX], [_LT_PATH_TOOL_PREFIX]) +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([AC_PATH_TOOL_PREFIX], []) + + +# _LT_PATH_MAGIC +# -------------- +# find a file program that can recognize a shared library +m4_defun([_LT_PATH_MAGIC], +[_LT_PATH_TOOL_PREFIX(${ac_tool_prefix}file, /usr/bin$PATH_SEPARATOR$PATH) +if test -z "$lt_cv_path_MAGIC_CMD"; then + if test -n "$ac_tool_prefix"; then + _LT_PATH_TOOL_PREFIX(file, /usr/bin$PATH_SEPARATOR$PATH) + else + MAGIC_CMD=: + fi +fi +])# _LT_PATH_MAGIC + + +# LT_PATH_LD +# ---------- +# find the pathname to the GNU or non-GNU linker +AC_DEFUN([LT_PATH_LD], +[AC_REQUIRE([AC_PROG_CC])dnl +AC_REQUIRE([AC_CANONICAL_HOST])dnl +AC_REQUIRE([AC_CANONICAL_BUILD])dnl +m4_require([_LT_DECL_SED])dnl +m4_require([_LT_DECL_EGREP])dnl +m4_require([_LT_PROG_ECHO_BACKSLASH])dnl + +AC_ARG_WITH([gnu-ld], + [AS_HELP_STRING([--with-gnu-ld], + [assume the C compiler uses GNU ld @<:@default=no@:>@])], + [test no = "$withval" || with_gnu_ld=yes], + [with_gnu_ld=no])dnl + +ac_prog=ld +if test yes = "$GCC"; then + # Check if gcc -print-prog-name=ld gives a path. + AC_MSG_CHECKING([for ld used by $CC]) + case $host in + *-*-mingw*) + # gcc leaves a trailing carriage return, which upsets mingw + ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;; + *) + ac_prog=`($CC -print-prog-name=ld) 2>&5` ;; + esac + case $ac_prog in + # Accept absolute paths. + [[\\/]]* | ?:[[\\/]]*) + re_direlt='/[[^/]][[^/]]*/\.\./' + # Canonicalize the pathname of ld + ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'` + while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do + ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"` + done + test -z "$LD" && LD=$ac_prog + ;; + "") + # If it fails, then pretend we aren't using GCC. + ac_prog=ld + ;; + *) + # If it is relative, then search for the first ld in PATH. + with_gnu_ld=unknown + ;; + esac +elif test yes = "$with_gnu_ld"; then + AC_MSG_CHECKING([for GNU ld]) +else + AC_MSG_CHECKING([for non-GNU ld]) +fi +AC_CACHE_VAL(lt_cv_path_LD, +[if test -z "$LD"; then + lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR + for ac_dir in $PATH; do + IFS=$lt_save_ifs + test -z "$ac_dir" && ac_dir=. + if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then + lt_cv_path_LD=$ac_dir/$ac_prog + # Check to see if the program is GNU ld. I'd rather use --version, + # but apparently some variants of GNU ld only accept -v. + # Break only if it was the GNU/non-GNU ld that we prefer. + case `"$lt_cv_path_LD" -v 2>&1 &1 conftest.i +cat conftest.i conftest.i >conftest2.i +: ${lt_DD:=$DD} +AC_PATH_PROGS_FEATURE_CHECK([lt_DD], [dd], +[if "$ac_path_lt_DD" bs=32 count=1 conftest.out 2>/dev/null; then + cmp -s conftest.i conftest.out \ + && ac_cv_path_lt_DD="$ac_path_lt_DD" ac_path_lt_DD_found=: +fi]) +rm -f conftest.i conftest2.i conftest.out]) +])# _LT_PATH_DD + + +# _LT_CMD_TRUNCATE +# ---------------- +# find command to truncate a binary pipe +m4_defun([_LT_CMD_TRUNCATE], +[m4_require([_LT_PATH_DD]) +AC_CACHE_CHECK([how to truncate binary pipes], [lt_cv_truncate_bin], +[printf 0123456789abcdef0123456789abcdef >conftest.i +cat conftest.i conftest.i >conftest2.i +lt_cv_truncate_bin= +if "$ac_cv_path_lt_DD" bs=32 count=1 conftest.out 2>/dev/null; then + cmp -s conftest.i conftest.out \ + && lt_cv_truncate_bin="$ac_cv_path_lt_DD bs=4096 count=1" +fi +rm -f conftest.i conftest2.i conftest.out +test -z "$lt_cv_truncate_bin" && lt_cv_truncate_bin="$SED -e 4q"]) +_LT_DECL([lt_truncate_bin], [lt_cv_truncate_bin], [1], + [Command to truncate a binary pipe]) +])# _LT_CMD_TRUNCATE + + +# _LT_CHECK_MAGIC_METHOD +# ---------------------- +# how to check for library dependencies +# -- PORTME fill in with the dynamic library characteristics +m4_defun([_LT_CHECK_MAGIC_METHOD], +[m4_require([_LT_DECL_EGREP]) +m4_require([_LT_DECL_OBJDUMP]) +AC_CACHE_CHECK([how to recognize dependent libraries], +lt_cv_deplibs_check_method, +[lt_cv_file_magic_cmd='$MAGIC_CMD' +lt_cv_file_magic_test_file= +lt_cv_deplibs_check_method='unknown' +# Need to set the preceding variable on all platforms that support +# interlibrary dependencies. +# 'none' -- dependencies not supported. +# 'unknown' -- same as none, but documents that we really don't know. +# 'pass_all' -- all dependencies passed with no checks. +# 'test_compile' -- check by making test program. +# 'file_magic [[regex]]' -- check by looking for files in library path +# that responds to the $file_magic_cmd with a given extended regex. +# If you have 'file' or equivalent on your system and you're not sure +# whether 'pass_all' will *always* work, you probably want this one. + +case $host_os in +aix[[4-9]]*) + lt_cv_deplibs_check_method=pass_all + ;; + +beos*) + lt_cv_deplibs_check_method=pass_all + ;; + +bsdi[[45]]*) + lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (shared object|dynamic lib)' + lt_cv_file_magic_cmd='$FILECMD -L' + lt_cv_file_magic_test_file=/shlib/libc.so + ;; + +cygwin*) + # func_win32_libid is a shell function defined in ltmain.sh + lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL' + lt_cv_file_magic_cmd='func_win32_libid' + ;; + +mingw* | pw32*) + # Base MSYS/MinGW do not provide the 'file' command needed by + # func_win32_libid shell function, so use a weaker test based on 'objdump', + # unless we find 'file', for example because we are cross-compiling. + if ( file / ) >/dev/null 2>&1; then + lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL' + lt_cv_file_magic_cmd='func_win32_libid' + else + # Keep this pattern in sync with the one in func_win32_libid. + lt_cv_deplibs_check_method='file_magic file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64)' + lt_cv_file_magic_cmd='$OBJDUMP -f' + fi + ;; + +cegcc*) + # use the weaker test based on 'objdump'. See mingw*. + lt_cv_deplibs_check_method='file_magic file format pe-arm-.*little(.*architecture: arm)?' + lt_cv_file_magic_cmd='$OBJDUMP -f' + ;; + +darwin* | rhapsody*) + lt_cv_deplibs_check_method=pass_all + ;; + +freebsd* | dragonfly* | midnightbsd*) + if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then + case $host_cpu in + i*86 ) + # Not sure whether the presence of OpenBSD here was a mistake. + # Let's accept both of them until this is cleared up. + lt_cv_deplibs_check_method='file_magic (FreeBSD|OpenBSD|DragonFly)/i[[3-9]]86 (compact )?demand paged shared library' + lt_cv_file_magic_cmd=$FILECMD + lt_cv_file_magic_test_file=`echo /usr/lib/libc.so.*` + ;; + esac + else + lt_cv_deplibs_check_method=pass_all + fi + ;; + +haiku*) + lt_cv_deplibs_check_method=pass_all + ;; + +hpux10.20* | hpux11*) + lt_cv_file_magic_cmd=$FILECMD + case $host_cpu in + ia64*) + lt_cv_deplibs_check_method='file_magic (s[[0-9]][[0-9]][[0-9]]|ELF-[[0-9]][[0-9]]) shared object file - IA64' + lt_cv_file_magic_test_file=/usr/lib/hpux32/libc.so + ;; + hppa*64*) + [lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF[ -][0-9][0-9])(-bit)?( [LM]SB)? shared object( file)?[, -]* PA-RISC [0-9]\.[0-9]'] + lt_cv_file_magic_test_file=/usr/lib/pa20_64/libc.sl + ;; + *) + lt_cv_deplibs_check_method='file_magic (s[[0-9]][[0-9]][[0-9]]|PA-RISC[[0-9]]\.[[0-9]]) shared library' + lt_cv_file_magic_test_file=/usr/lib/libc.sl + ;; + esac + ;; + +interix[[3-9]]*) + # PIC code is broken on Interix 3.x, that's why |\.a not |_pic\.a here + lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so|\.a)$' + ;; + +irix5* | irix6* | nonstopux*) + case $LD in + *-32|*"-32 ") libmagic=32-bit;; + *-n32|*"-n32 ") libmagic=N32;; + *-64|*"-64 ") libmagic=64-bit;; + *) libmagic=never-match;; + esac + lt_cv_deplibs_check_method=pass_all + ;; + +# This must be glibc/ELF. +linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) + lt_cv_deplibs_check_method=pass_all + ;; + +netbsd*) + if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then + lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|_pic\.a)$' + else + lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so|_pic\.a)$' + fi + ;; + +newos6*) + lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (executable|dynamic lib)' + lt_cv_file_magic_cmd=$FILECMD + lt_cv_file_magic_test_file=/usr/lib/libnls.so + ;; + +*nto* | *qnx*) + lt_cv_deplibs_check_method=pass_all + ;; + +openbsd* | bitrig*) + if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then + lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|\.so|_pic\.a)$' + else + lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|_pic\.a)$' + fi + ;; + +osf3* | osf4* | osf5*) + lt_cv_deplibs_check_method=pass_all + ;; + +rdos*) + lt_cv_deplibs_check_method=pass_all + ;; + +solaris*) + lt_cv_deplibs_check_method=pass_all + ;; + +sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*) + lt_cv_deplibs_check_method=pass_all + ;; + +sysv4 | sysv4.3*) + case $host_vendor in + motorola) + lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (shared object|dynamic lib) M[[0-9]][[0-9]]* Version [[0-9]]' + lt_cv_file_magic_test_file=`echo /usr/lib/libc.so*` + ;; + ncr) + lt_cv_deplibs_check_method=pass_all + ;; + sequent) + lt_cv_file_magic_cmd='/bin/file' + lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[LM]]SB (shared object|dynamic lib )' + ;; + sni) + lt_cv_file_magic_cmd='/bin/file' + lt_cv_deplibs_check_method="file_magic ELF [[0-9]][[0-9]]*-bit [[LM]]SB dynamic lib" + lt_cv_file_magic_test_file=/lib/libc.so + ;; + siemens) + lt_cv_deplibs_check_method=pass_all + ;; + pc) + lt_cv_deplibs_check_method=pass_all + ;; + esac + ;; + +tpf*) + lt_cv_deplibs_check_method=pass_all + ;; +os2*) + lt_cv_deplibs_check_method=pass_all + ;; +esac +]) + +file_magic_glob= +want_nocaseglob=no +if test "$build" = "$host"; then + case $host_os in + mingw* | pw32*) + if ( shopt | grep nocaseglob ) >/dev/null 2>&1; then + want_nocaseglob=yes + else + file_magic_glob=`echo aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ | $SED -e "s/\(..\)/s\/[[\1]]\/[[\1]]\/g;/g"` + fi + ;; + esac +fi + +file_magic_cmd=$lt_cv_file_magic_cmd +deplibs_check_method=$lt_cv_deplibs_check_method +test -z "$deplibs_check_method" && deplibs_check_method=unknown + +_LT_DECL([], [deplibs_check_method], [1], + [Method to check whether dependent libraries are shared objects]) +_LT_DECL([], [file_magic_cmd], [1], + [Command to use when deplibs_check_method = "file_magic"]) +_LT_DECL([], [file_magic_glob], [1], + [How to find potential files when deplibs_check_method = "file_magic"]) +_LT_DECL([], [want_nocaseglob], [1], + [Find potential files using nocaseglob when deplibs_check_method = "file_magic"]) +])# _LT_CHECK_MAGIC_METHOD + + +# LT_PATH_NM +# ---------- +# find the pathname to a BSD- or MS-compatible name lister +AC_DEFUN([LT_PATH_NM], +[AC_REQUIRE([AC_PROG_CC])dnl +AC_CACHE_CHECK([for BSD- or MS-compatible name lister (nm)], lt_cv_path_NM, +[if test -n "$NM"; then + # Let the user override the test. + lt_cv_path_NM=$NM +else + lt_nm_to_check=${ac_tool_prefix}nm + if test -n "$ac_tool_prefix" && test "$build" = "$host"; then + lt_nm_to_check="$lt_nm_to_check nm" + fi + for lt_tmp_nm in $lt_nm_to_check; do + lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR + for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do + IFS=$lt_save_ifs + test -z "$ac_dir" && ac_dir=. + tmp_nm=$ac_dir/$lt_tmp_nm + if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then + # Check to see if the nm accepts a BSD-compat flag. + # Adding the 'sed 1q' prevents false positives on HP-UX, which says: + # nm: unknown option "B" ignored + # Tru64's nm complains that /dev/null is an invalid object file + # MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty + case $build_os in + mingw*) lt_bad_file=conftest.nm/nofile ;; + *) lt_bad_file=/dev/null ;; + esac + case `"$tmp_nm" -B $lt_bad_file 2>&1 | $SED '1q'` in + *$lt_bad_file* | *'Invalid file or object type'*) + lt_cv_path_NM="$tmp_nm -B" + break 2 + ;; + *) + case `"$tmp_nm" -p /dev/null 2>&1 | $SED '1q'` in + */dev/null*) + lt_cv_path_NM="$tmp_nm -p" + break 2 + ;; + *) + lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but + continue # so that we can try to find one that supports BSD flags + ;; + esac + ;; + esac + fi + done + IFS=$lt_save_ifs + done + : ${lt_cv_path_NM=no} +fi]) +if test no != "$lt_cv_path_NM"; then + NM=$lt_cv_path_NM +else + # Didn't find any BSD compatible name lister, look for dumpbin. + if test -n "$DUMPBIN"; then : + # Let the user override the test. + else + AC_CHECK_TOOLS(DUMPBIN, [dumpbin "link -dump"], :) + case `$DUMPBIN -symbols -headers /dev/null 2>&1 | $SED '1q'` in + *COFF*) + DUMPBIN="$DUMPBIN -symbols -headers" + ;; + *) + DUMPBIN=: + ;; + esac + fi + AC_SUBST([DUMPBIN]) + if test : != "$DUMPBIN"; then + NM=$DUMPBIN + fi +fi +test -z "$NM" && NM=nm +AC_SUBST([NM]) +_LT_DECL([], [NM], [1], [A BSD- or MS-compatible name lister])dnl + +AC_CACHE_CHECK([the name lister ($NM) interface], [lt_cv_nm_interface], + [lt_cv_nm_interface="BSD nm" + echo "int some_variable = 0;" > conftest.$ac_ext + (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&AS_MESSAGE_LOG_FD) + (eval "$ac_compile" 2>conftest.err) + cat conftest.err >&AS_MESSAGE_LOG_FD + (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&AS_MESSAGE_LOG_FD) + (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out) + cat conftest.err >&AS_MESSAGE_LOG_FD + (eval echo "\"\$as_me:$LINENO: output\"" >&AS_MESSAGE_LOG_FD) + cat conftest.out >&AS_MESSAGE_LOG_FD + if $GREP 'External.*some_variable' conftest.out > /dev/null; then + lt_cv_nm_interface="MS dumpbin" + fi + rm -f conftest*]) +])# LT_PATH_NM + +# Old names: +AU_ALIAS([AM_PROG_NM], [LT_PATH_NM]) +AU_ALIAS([AC_PROG_NM], [LT_PATH_NM]) +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([AM_PROG_NM], []) +dnl AC_DEFUN([AC_PROG_NM], []) + +# _LT_CHECK_SHAREDLIB_FROM_LINKLIB +# -------------------------------- +# how to determine the name of the shared library +# associated with a specific link library. +# -- PORTME fill in with the dynamic library characteristics +m4_defun([_LT_CHECK_SHAREDLIB_FROM_LINKLIB], +[m4_require([_LT_DECL_EGREP]) +m4_require([_LT_DECL_OBJDUMP]) +m4_require([_LT_DECL_DLLTOOL]) +AC_CACHE_CHECK([how to associate runtime and link libraries], +lt_cv_sharedlib_from_linklib_cmd, +[lt_cv_sharedlib_from_linklib_cmd='unknown' + +case $host_os in +cygwin* | mingw* | pw32* | cegcc*) + # two different shell functions defined in ltmain.sh; + # decide which one to use based on capabilities of $DLLTOOL + case `$DLLTOOL --help 2>&1` in + *--identify-strict*) + lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib + ;; + *) + lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib_fallback + ;; + esac + ;; +*) + # fallback: assume linklib IS sharedlib + lt_cv_sharedlib_from_linklib_cmd=$ECHO + ;; +esac +]) +sharedlib_from_linklib_cmd=$lt_cv_sharedlib_from_linklib_cmd +test -z "$sharedlib_from_linklib_cmd" && sharedlib_from_linklib_cmd=$ECHO + +_LT_DECL([], [sharedlib_from_linklib_cmd], [1], + [Command to associate shared and link libraries]) +])# _LT_CHECK_SHAREDLIB_FROM_LINKLIB + + +# _LT_PATH_MANIFEST_TOOL +# ---------------------- +# locate the manifest tool +m4_defun([_LT_PATH_MANIFEST_TOOL], +[AC_CHECK_TOOL(MANIFEST_TOOL, mt, :) +test -z "$MANIFEST_TOOL" && MANIFEST_TOOL=mt +AC_CACHE_CHECK([if $MANIFEST_TOOL is a manifest tool], [lt_cv_path_mainfest_tool], + [lt_cv_path_mainfest_tool=no + echo "$as_me:$LINENO: $MANIFEST_TOOL '-?'" >&AS_MESSAGE_LOG_FD + $MANIFEST_TOOL '-?' 2>conftest.err > conftest.out + cat conftest.err >&AS_MESSAGE_LOG_FD + if $GREP 'Manifest Tool' conftest.out > /dev/null; then + lt_cv_path_mainfest_tool=yes + fi + rm -f conftest*]) +if test yes != "$lt_cv_path_mainfest_tool"; then + MANIFEST_TOOL=: +fi +_LT_DECL([], [MANIFEST_TOOL], [1], [Manifest tool])dnl +])# _LT_PATH_MANIFEST_TOOL + + +# _LT_DLL_DEF_P([FILE]) +# --------------------- +# True iff FILE is a Windows DLL '.def' file. +# Keep in sync with func_dll_def_p in the libtool script +AC_DEFUN([_LT_DLL_DEF_P], +[dnl + test DEF = "`$SED -n dnl + -e '\''s/^[[ ]]*//'\'' dnl Strip leading whitespace + -e '\''/^\(;.*\)*$/d'\'' dnl Delete empty lines and comments + -e '\''s/^\(EXPORTS\|LIBRARY\)\([[ ]].*\)*$/DEF/p'\'' dnl + -e q dnl Only consider the first "real" line + $1`" dnl +])# _LT_DLL_DEF_P + + +# LT_LIB_M +# -------- +# check for math library +AC_DEFUN([LT_LIB_M], +[AC_REQUIRE([AC_CANONICAL_HOST])dnl +LIBM= +case $host in +*-*-beos* | *-*-cegcc* | *-*-cygwin* | *-*-haiku* | *-*-pw32* | *-*-darwin*) + # These system don't have libm, or don't need it + ;; +*-ncr-sysv4.3*) + AC_CHECK_LIB(mw, _mwvalidcheckl, LIBM=-lmw) + AC_CHECK_LIB(m, cos, LIBM="$LIBM -lm") + ;; +*) + AC_CHECK_LIB(m, cos, LIBM=-lm) + ;; +esac +AC_SUBST([LIBM]) +])# LT_LIB_M + +# Old name: +AU_ALIAS([AC_CHECK_LIBM], [LT_LIB_M]) +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([AC_CHECK_LIBM], []) + + +# _LT_COMPILER_NO_RTTI([TAGNAME]) +# ------------------------------- +m4_defun([_LT_COMPILER_NO_RTTI], +[m4_require([_LT_TAG_COMPILER])dnl + +_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)= + +if test yes = "$GCC"; then + case $cc_basename in + nvcc*) + _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -Xcompiler -fno-builtin' ;; + *) + _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -fno-builtin' ;; + esac + + _LT_COMPILER_OPTION([if $compiler supports -fno-rtti -fno-exceptions], + lt_cv_prog_compiler_rtti_exceptions, + [-fno-rtti -fno-exceptions], [], + [_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)="$_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1) -fno-rtti -fno-exceptions"]) +fi +_LT_TAGDECL([no_builtin_flag], [lt_prog_compiler_no_builtin_flag], [1], + [Compiler flag to turn off builtin functions]) +])# _LT_COMPILER_NO_RTTI + + +# _LT_CMD_GLOBAL_SYMBOLS +# ---------------------- +m4_defun([_LT_CMD_GLOBAL_SYMBOLS], +[AC_REQUIRE([AC_CANONICAL_HOST])dnl +AC_REQUIRE([AC_PROG_CC])dnl +AC_REQUIRE([AC_PROG_AWK])dnl +AC_REQUIRE([LT_PATH_NM])dnl +AC_REQUIRE([LT_PATH_LD])dnl +m4_require([_LT_DECL_SED])dnl +m4_require([_LT_DECL_EGREP])dnl +m4_require([_LT_TAG_COMPILER])dnl + +# Check for command to grab the raw symbol name followed by C symbol from nm. +AC_MSG_CHECKING([command to parse $NM output from $compiler object]) +AC_CACHE_VAL([lt_cv_sys_global_symbol_pipe], +[ +# These are sane defaults that work on at least a few old systems. +# [They come from Ultrix. What could be older than Ultrix?!! ;)] + +# Character class describing NM global symbol codes. +symcode='[[BCDEGRST]]' + +# Regexp to match symbols that can be accessed directly from C. +sympat='\([[_A-Za-z]][[_A-Za-z0-9]]*\)' + +# Define system-specific variables. +case $host_os in +aix*) + symcode='[[BCDT]]' + ;; +cygwin* | mingw* | pw32* | cegcc*) + symcode='[[ABCDGISTW]]' + ;; +hpux*) + if test ia64 = "$host_cpu"; then + symcode='[[ABCDEGRST]]' + fi + ;; +irix* | nonstopux*) + symcode='[[BCDEGRST]]' + ;; +osf*) + symcode='[[BCDEGQRST]]' + ;; +solaris*) + symcode='[[BDRT]]' + ;; +sco3.2v5*) + symcode='[[DT]]' + ;; +sysv4.2uw2*) + symcode='[[DT]]' + ;; +sysv5* | sco5v6* | unixware* | OpenUNIX*) + symcode='[[ABDT]]' + ;; +sysv4) + symcode='[[DFNSTU]]' + ;; +esac + +# If we're using GNU nm, then use its standard symbol codes. +case `$NM -V 2>&1` in +*GNU* | *'with BFD'*) + symcode='[[ABCDGIRSTW]]' ;; +esac + +if test "$lt_cv_nm_interface" = "MS dumpbin"; then + # Gets list of data symbols to import. + lt_cv_sys_global_symbol_to_import="$SED -n -e 's/^I .* \(.*\)$/\1/p'" + # Adjust the below global symbol transforms to fixup imported variables. + lt_cdecl_hook=" -e 's/^I .* \(.*\)$/extern __declspec(dllimport) char \1;/p'" + lt_c_name_hook=" -e 's/^I .* \(.*\)$/ {\"\1\", (void *) 0},/p'" + lt_c_name_lib_hook="\ + -e 's/^I .* \(lib.*\)$/ {\"\1\", (void *) 0},/p'\ + -e 's/^I .* \(.*\)$/ {\"lib\1\", (void *) 0},/p'" +else + # Disable hooks by default. + lt_cv_sys_global_symbol_to_import= + lt_cdecl_hook= + lt_c_name_hook= + lt_c_name_lib_hook= +fi + +# Transform an extracted symbol line into a proper C declaration. +# Some systems (esp. on ia64) link data and code symbols differently, +# so use this general approach. +lt_cv_sys_global_symbol_to_cdecl="$SED -n"\ +$lt_cdecl_hook\ +" -e 's/^T .* \(.*\)$/extern int \1();/p'"\ +" -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'" + +# Transform an extracted symbol line into symbol name and symbol address +lt_cv_sys_global_symbol_to_c_name_address="$SED -n"\ +$lt_c_name_hook\ +" -e 's/^: \(.*\) .*$/ {\"\1\", (void *) 0},/p'"\ +" -e 's/^$symcode$symcode* .* \(.*\)$/ {\"\1\", (void *) \&\1},/p'" + +# Transform an extracted symbol line into symbol name with lib prefix and +# symbol address. +lt_cv_sys_global_symbol_to_c_name_address_lib_prefix="$SED -n"\ +$lt_c_name_lib_hook\ +" -e 's/^: \(.*\) .*$/ {\"\1\", (void *) 0},/p'"\ +" -e 's/^$symcode$symcode* .* \(lib.*\)$/ {\"\1\", (void *) \&\1},/p'"\ +" -e 's/^$symcode$symcode* .* \(.*\)$/ {\"lib\1\", (void *) \&\1},/p'" + +# Handle CRLF in mingw tool chain +opt_cr= +case $build_os in +mingw*) + opt_cr=`$ECHO 'x\{0,1\}' | tr x '\015'` # option cr in regexp + ;; +esac + +# Try without a prefix underscore, then with it. +for ac_symprfx in "" "_"; do + + # Transform symcode, sympat, and symprfx into a raw symbol and a C symbol. + symxfrm="\\1 $ac_symprfx\\2 \\2" + + # Write the raw and C identifiers. + if test "$lt_cv_nm_interface" = "MS dumpbin"; then + # Fake it for dumpbin and say T for any non-static function, + # D for any global variable and I for any imported variable. + # Also find C++ and __fastcall symbols from MSVC++ or ICC, + # which start with @ or ?. + lt_cv_sys_global_symbol_pipe="$AWK ['"\ +" {last_section=section; section=\$ 3};"\ +" /^COFF SYMBOL TABLE/{for(i in hide) delete hide[i]};"\ +" /Section length .*#relocs.*(pick any)/{hide[last_section]=1};"\ +" /^ *Symbol name *: /{split(\$ 0,sn,\":\"); si=substr(sn[2],2)};"\ +" /^ *Type *: code/{print \"T\",si,substr(si,length(prfx))};"\ +" /^ *Type *: data/{print \"I\",si,substr(si,length(prfx))};"\ +" \$ 0!~/External *\|/{next};"\ +" / 0+ UNDEF /{next}; / UNDEF \([^|]\)*()/{next};"\ +" {if(hide[section]) next};"\ +" {f=\"D\"}; \$ 0~/\(\).*\|/{f=\"T\"};"\ +" {split(\$ 0,a,/\||\r/); split(a[2],s)};"\ +" s[1]~/^[@?]/{print f,s[1],s[1]; next};"\ +" s[1]~prfx {split(s[1],t,\"@\"); print f,t[1],substr(t[1],length(prfx))}"\ +" ' prfx=^$ac_symprfx]" + else + lt_cv_sys_global_symbol_pipe="$SED -n -e 's/^.*[[ ]]\($symcode$symcode*\)[[ ]][[ ]]*$ac_symprfx$sympat$opt_cr$/$symxfrm/p'" + fi + lt_cv_sys_global_symbol_pipe="$lt_cv_sys_global_symbol_pipe | $SED '/ __gnu_lto/d'" + + # Check to see that the pipe works correctly. + pipe_works=no + + rm -f conftest* + cat > conftest.$ac_ext <<_LT_EOF +#ifdef __cplusplus +extern "C" { +#endif +char nm_test_var; +void nm_test_func(void); +void nm_test_func(void){} +#ifdef __cplusplus +} +#endif +int main(){nm_test_var='a';nm_test_func();return(0);} +_LT_EOF + + if AC_TRY_EVAL(ac_compile); then + # Now try to grab the symbols. + nlist=conftest.nm + if AC_TRY_EVAL(NM conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist) && test -s "$nlist"; then + # Try sorting and uniquifying the output. + if sort "$nlist" | uniq > "$nlist"T; then + mv -f "$nlist"T "$nlist" + else + rm -f "$nlist"T + fi + + # Make sure that we snagged all the symbols we need. + if $GREP ' nm_test_var$' "$nlist" >/dev/null; then + if $GREP ' nm_test_func$' "$nlist" >/dev/null; then + cat <<_LT_EOF > conftest.$ac_ext +/* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests. */ +#if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE +/* DATA imports from DLLs on WIN32 can't be const, because runtime + relocations are performed -- see ld's documentation on pseudo-relocs. */ +# define LT@&t@_DLSYM_CONST +#elif defined __osf__ +/* This system does not cope well with relocations in const data. */ +# define LT@&t@_DLSYM_CONST +#else +# define LT@&t@_DLSYM_CONST const +#endif + +#ifdef __cplusplus +extern "C" { +#endif + +_LT_EOF + # Now generate the symbol file. + eval "$lt_cv_sys_global_symbol_to_cdecl"' < "$nlist" | $GREP -v main >> conftest.$ac_ext' + + cat <<_LT_EOF >> conftest.$ac_ext + +/* The mapping between symbol names and symbols. */ +LT@&t@_DLSYM_CONST struct { + const char *name; + void *address; +} +lt__PROGRAM__LTX_preloaded_symbols[[]] = +{ + { "@PROGRAM@", (void *) 0 }, +_LT_EOF + $SED "s/^$symcode$symcode* .* \(.*\)$/ {\"\1\", (void *) \&\1},/" < "$nlist" | $GREP -v main >> conftest.$ac_ext + cat <<\_LT_EOF >> conftest.$ac_ext + {0, (void *) 0} +}; + +/* This works around a problem in FreeBSD linker */ +#ifdef FREEBSD_WORKAROUND +static const void *lt_preloaded_setup() { + return lt__PROGRAM__LTX_preloaded_symbols; +} +#endif + +#ifdef __cplusplus +} +#endif +_LT_EOF + # Now try linking the two files. + mv conftest.$ac_objext conftstm.$ac_objext + lt_globsym_save_LIBS=$LIBS + lt_globsym_save_CFLAGS=$CFLAGS + LIBS=conftstm.$ac_objext + CFLAGS="$CFLAGS$_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)" + if AC_TRY_EVAL(ac_link) && test -s conftest$ac_exeext; then + pipe_works=yes + fi + LIBS=$lt_globsym_save_LIBS + CFLAGS=$lt_globsym_save_CFLAGS + else + echo "cannot find nm_test_func in $nlist" >&AS_MESSAGE_LOG_FD + fi + else + echo "cannot find nm_test_var in $nlist" >&AS_MESSAGE_LOG_FD + fi + else + echo "cannot run $lt_cv_sys_global_symbol_pipe" >&AS_MESSAGE_LOG_FD + fi + else + echo "$progname: failed program was:" >&AS_MESSAGE_LOG_FD + cat conftest.$ac_ext >&5 + fi + rm -rf conftest* conftst* + + # Do not use the global_symbol_pipe unless it works. + if test yes = "$pipe_works"; then + break + else + lt_cv_sys_global_symbol_pipe= + fi +done +]) +if test -z "$lt_cv_sys_global_symbol_pipe"; then + lt_cv_sys_global_symbol_to_cdecl= +fi +if test -z "$lt_cv_sys_global_symbol_pipe$lt_cv_sys_global_symbol_to_cdecl"; then + AC_MSG_RESULT(failed) +else + AC_MSG_RESULT(ok) +fi + +# Response file support. +if test "$lt_cv_nm_interface" = "MS dumpbin"; then + nm_file_list_spec='@' +elif $NM --help 2>/dev/null | grep '[[@]]FILE' >/dev/null; then + nm_file_list_spec='@' +fi + +_LT_DECL([global_symbol_pipe], [lt_cv_sys_global_symbol_pipe], [1], + [Take the output of nm and produce a listing of raw symbols and C names]) +_LT_DECL([global_symbol_to_cdecl], [lt_cv_sys_global_symbol_to_cdecl], [1], + [Transform the output of nm in a proper C declaration]) +_LT_DECL([global_symbol_to_import], [lt_cv_sys_global_symbol_to_import], [1], + [Transform the output of nm into a list of symbols to manually relocate]) +_LT_DECL([global_symbol_to_c_name_address], + [lt_cv_sys_global_symbol_to_c_name_address], [1], + [Transform the output of nm in a C name address pair]) +_LT_DECL([global_symbol_to_c_name_address_lib_prefix], + [lt_cv_sys_global_symbol_to_c_name_address_lib_prefix], [1], + [Transform the output of nm in a C name address pair when lib prefix is needed]) +_LT_DECL([nm_interface], [lt_cv_nm_interface], [1], + [The name lister interface]) +_LT_DECL([], [nm_file_list_spec], [1], + [Specify filename containing input files for $NM]) +]) # _LT_CMD_GLOBAL_SYMBOLS + + +# _LT_COMPILER_PIC([TAGNAME]) +# --------------------------- +m4_defun([_LT_COMPILER_PIC], +[m4_require([_LT_TAG_COMPILER])dnl +_LT_TAGVAR(lt_prog_compiler_wl, $1)= +_LT_TAGVAR(lt_prog_compiler_pic, $1)= +_LT_TAGVAR(lt_prog_compiler_static, $1)= + +m4_if([$1], [CXX], [ + # C++ specific cases for pic, static, wl, etc. + if test yes = "$GXX"; then + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' + + case $host_os in + aix*) + # All AIX code is PIC. + if test ia64 = "$host_cpu"; then + # AIX 5 now supports IA64 processor + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + fi + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' + ;; + + amigaos*) + case $host_cpu in + powerpc) + # see comment about AmigaOS4 .so support + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' + ;; + m68k) + # FIXME: we need at least 68020 code to build shared libraries, but + # adding the '-m68020' flag to GCC prevents building anything better, + # like '-m68040'. + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-m68020 -resident32 -malways-restore-a4' + ;; + esac + ;; + + beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*) + # PIC is the default for these OSes. + ;; + mingw* | cygwin* | os2* | pw32* | cegcc*) + # This hack is so that the source file can tell whether it is being + # built for inclusion in a dll (and should export symbols for example). + # Although the cygwin gcc ignores -fPIC, still need this for old-style + # (--disable-auto-import) libraries + m4_if([$1], [GCJ], [], + [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT']) + case $host_os in + os2*) + _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static' + ;; + esac + ;; + darwin* | rhapsody*) + # PIC is the default on this platform + # Common symbols not allowed in MH_DYLIB files + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common' + ;; + *djgpp*) + # DJGPP does not support shared libraries at all + _LT_TAGVAR(lt_prog_compiler_pic, $1)= + ;; + haiku*) + # PIC is the default for Haiku. + # The "-static" flag exists, but is broken. + _LT_TAGVAR(lt_prog_compiler_static, $1)= + ;; + interix[[3-9]]*) + # Interix 3.x gcc -fpic/-fPIC options generate broken code. + # Instead, we relocate shared libraries at runtime. + ;; + sysv4*MP*) + if test -d /usr/nec; then + _LT_TAGVAR(lt_prog_compiler_pic, $1)=-Kconform_pic + fi + ;; + hpux*) + # PIC is the default for 64-bit PA HP-UX, but not for 32-bit + # PA HP-UX. On IA64 HP-UX, PIC is the default but the pic flag + # sets the default TLS model and affects inlining. + case $host_cpu in + hppa*64*) + ;; + *) + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' + ;; + esac + ;; + *qnx* | *nto*) + # QNX uses GNU C++, but need to define -shared option too, otherwise + # it will coredump. + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared' + ;; + *) + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' + ;; + esac + else + case $host_os in + aix[[4-9]]*) + # All AIX code is PIC. + if test ia64 = "$host_cpu"; then + # AIX 5 now supports IA64 processor + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + else + _LT_TAGVAR(lt_prog_compiler_static, $1)='-bnso -bI:/lib/syscalls.exp' + fi + ;; + chorus*) + case $cc_basename in + cxch68*) + # Green Hills C++ Compiler + # _LT_TAGVAR(lt_prog_compiler_static, $1)="--no_auto_instantiation -u __main -u __premain -u _abort -r $COOL_DIR/lib/libOrb.a $MVME_DIR/lib/CC/libC.a $MVME_DIR/lib/classix/libcx.s.a" + ;; + esac + ;; + mingw* | cygwin* | os2* | pw32* | cegcc*) + # This hack is so that the source file can tell whether it is being + # built for inclusion in a dll (and should export symbols for example). + m4_if([$1], [GCJ], [], + [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT']) + ;; + dgux*) + case $cc_basename in + ec++*) + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' + ;; + ghcx*) + # Green Hills C++ Compiler + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic' + ;; + *) + ;; + esac + ;; + freebsd* | dragonfly* | midnightbsd*) + # FreeBSD uses GNU C++ + ;; + hpux9* | hpux10* | hpux11*) + case $cc_basename in + CC*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive' + if test ia64 != "$host_cpu"; then + _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z' + fi + ;; + aCC*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive' + case $host_cpu in + hppa*64*|ia64*) + # +Z the default + ;; + *) + _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z' + ;; + esac + ;; + *) + ;; + esac + ;; + interix*) + # This is c89, which is MS Visual C++ (no shared libs) + # Anyone wants to do a port? + ;; + irix5* | irix6* | nonstopux*) + case $cc_basename in + CC*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' + # CC pic flag -KPIC is the default. + ;; + *) + ;; + esac + ;; + linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) + case $cc_basename in + KCC*) + # KAI C++ Compiler + _LT_TAGVAR(lt_prog_compiler_wl, $1)='--backend -Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' + ;; + ecpc* ) + # old Intel C++ for x86_64, which still supported -KPIC. + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' + ;; + icpc* ) + # Intel C++, used to be incompatible with GCC. + # ICC 10 doesn't accept -KPIC any more. + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' + ;; + pgCC* | pgcpp*) + # Portland Group C++ compiler + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + ;; + cxx*) + # Compaq C++ + # Make sure the PIC flag is empty. It appears that all Alpha + # Linux and Compaq Tru64 Unix objects are PIC. + _LT_TAGVAR(lt_prog_compiler_pic, $1)= + _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' + ;; + xlc* | xlC* | bgxl[[cC]]* | mpixl[[cC]]*) + # IBM XL 8.0, 9.0 on PPC and BlueGene + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-qpic' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-qstaticlink' + ;; + *) + case `$CC -V 2>&1 | $SED 5q` in + *Sun\ C*) + # Sun C++ 5.9 + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ' + ;; + esac + ;; + esac + ;; + lynxos*) + ;; + m88k*) + ;; + mvs*) + case $cc_basename in + cxx*) + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-W c,exportall' + ;; + *) + ;; + esac + ;; + netbsd*) + ;; + *qnx* | *nto*) + # QNX uses GNU C++, but need to define -shared option too, otherwise + # it will coredump. + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared' + ;; + osf3* | osf4* | osf5*) + case $cc_basename in + KCC*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='--backend -Wl,' + ;; + RCC*) + # Rational C++ 2.4.1 + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic' + ;; + cxx*) + # Digital/Compaq C++ + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + # Make sure the PIC flag is empty. It appears that all Alpha + # Linux and Compaq Tru64 Unix objects are PIC. + _LT_TAGVAR(lt_prog_compiler_pic, $1)= + _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' + ;; + *) + ;; + esac + ;; + psos*) + ;; + solaris*) + case $cc_basename in + CC* | sunCC*) + # Sun C++ 4.2, 5.x and Centerline C++ + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ' + ;; + gcx*) + # Green Hills C++ Compiler + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC' + ;; + *) + ;; + esac + ;; + sunos4*) + case $cc_basename in + CC*) + # Sun C++ 4.x + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + ;; + lcc*) + # Lucid + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic' + ;; + *) + ;; + esac + ;; + sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*) + case $cc_basename in + CC*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + ;; + esac + ;; + tandem*) + case $cc_basename in + NCC*) + # NonStop-UX NCC 3.20 + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' + ;; + *) + ;; + esac + ;; + vxworks*) + ;; + *) + _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no + ;; + esac + fi +], +[ + if test yes = "$GCC"; then + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' + + case $host_os in + aix*) + # All AIX code is PIC. + if test ia64 = "$host_cpu"; then + # AIX 5 now supports IA64 processor + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + fi + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' + ;; + + amigaos*) + case $host_cpu in + powerpc) + # see comment about AmigaOS4 .so support + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' + ;; + m68k) + # FIXME: we need at least 68020 code to build shared libraries, but + # adding the '-m68020' flag to GCC prevents building anything better, + # like '-m68040'. + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-m68020 -resident32 -malways-restore-a4' + ;; + esac + ;; + + beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*) + # PIC is the default for these OSes. + ;; + + mingw* | cygwin* | pw32* | os2* | cegcc*) + # This hack is so that the source file can tell whether it is being + # built for inclusion in a dll (and should export symbols for example). + # Although the cygwin gcc ignores -fPIC, still need this for old-style + # (--disable-auto-import) libraries + m4_if([$1], [GCJ], [], + [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT']) + case $host_os in + os2*) + _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static' + ;; + esac + ;; + + darwin* | rhapsody*) + # PIC is the default on this platform + # Common symbols not allowed in MH_DYLIB files + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common' + ;; + + haiku*) + # PIC is the default for Haiku. + # The "-static" flag exists, but is broken. + _LT_TAGVAR(lt_prog_compiler_static, $1)= + ;; + + hpux*) + # PIC is the default for 64-bit PA HP-UX, but not for 32-bit + # PA HP-UX. On IA64 HP-UX, PIC is the default but the pic flag + # sets the default TLS model and affects inlining. + case $host_cpu in + hppa*64*) + # +Z the default + ;; + *) + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' + ;; + esac + ;; + + interix[[3-9]]*) + # Interix 3.x gcc -fpic/-fPIC options generate broken code. + # Instead, we relocate shared libraries at runtime. + ;; + + msdosdjgpp*) + # Just because we use GCC doesn't mean we suddenly get shared libraries + # on systems that don't support them. + _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no + enable_shared=no + ;; + + *nto* | *qnx*) + # QNX uses GNU C++, but need to define -shared option too, otherwise + # it will coredump. + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared' + ;; + + sysv4*MP*) + if test -d /usr/nec; then + _LT_TAGVAR(lt_prog_compiler_pic, $1)=-Kconform_pic + fi + ;; + + *) + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' + ;; + esac + + case $cc_basename in + nvcc*) # Cuda Compiler Driver 2.2 + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Xlinker ' + if test -n "$_LT_TAGVAR(lt_prog_compiler_pic, $1)"; then + _LT_TAGVAR(lt_prog_compiler_pic, $1)="-Xcompiler $_LT_TAGVAR(lt_prog_compiler_pic, $1)" + fi + ;; + esac + else + # PORTME Check for flag to pass linker flags through the system compiler. + case $host_os in + aix*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + if test ia64 = "$host_cpu"; then + # AIX 5 now supports IA64 processor + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + else + _LT_TAGVAR(lt_prog_compiler_static, $1)='-bnso -bI:/lib/syscalls.exp' + fi + ;; + + darwin* | rhapsody*) + # PIC is the default on this platform + # Common symbols not allowed in MH_DYLIB files + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common' + case $cc_basename in + nagfor*) + # NAG Fortran compiler + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,-Wl,,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + ;; + esac + ;; + + mingw* | cygwin* | pw32* | os2* | cegcc*) + # This hack is so that the source file can tell whether it is being + # built for inclusion in a dll (and should export symbols for example). + m4_if([$1], [GCJ], [], + [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT']) + case $host_os in + os2*) + _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static' + ;; + esac + ;; + + hpux9* | hpux10* | hpux11*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but + # not for PA HP-UX. + case $host_cpu in + hppa*64*|ia64*) + # +Z the default + ;; + *) + _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z' + ;; + esac + # Is there a better lt_prog_compiler_static that works with the bundled CC? + _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive' + ;; + + irix5* | irix6* | nonstopux*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + # PIC (with -KPIC) is the default. + _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' + ;; + + linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) + case $cc_basename in + # old Intel for x86_64, which still supported -KPIC. + ecc*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' + ;; + # icc used to be incompatible with GCC. + # ICC 10 doesn't accept -KPIC any more. + icc* | ifort*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' + ;; + # Lahey Fortran 8.1. + lf95*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='--shared' + _LT_TAGVAR(lt_prog_compiler_static, $1)='--static' + ;; + nagfor*) + # NAG Fortran compiler + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,-Wl,,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + ;; + tcc*) + # Fabrice Bellard et al's Tiny C Compiler + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' + ;; + pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*) + # Portland Group compilers (*not* the Pentium gcc compiler, + # which looks to be a dead project) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + ;; + ccc*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + # All Alpha code is PIC. + _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' + ;; + xl* | bgxl* | bgf* | mpixl*) + # IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-qpic' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-qstaticlink' + ;; + *) + case `$CC -V 2>&1 | $SED 5q` in + *Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [[1-7]].* | *Sun*Fortran*\ 8.[[0-3]]*) + # Sun Fortran 8.3 passes all unrecognized flags to the linker + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + _LT_TAGVAR(lt_prog_compiler_wl, $1)='' + ;; + *Sun\ F* | *Sun*Fortran*) + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ' + ;; + *Sun\ C*) + # Sun C 5.9 + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + ;; + *Intel*\ [[CF]]*Compiler*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' + ;; + *Portland\ Group*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + ;; + esac + ;; + esac + ;; + + newsos6) + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + ;; + + *nto* | *qnx*) + # QNX uses GNU C++, but need to define -shared option too, otherwise + # it will coredump. + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared' + ;; + + osf3* | osf4* | osf5*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + # All OSF/1 code is PIC. + _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' + ;; + + rdos*) + _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' + ;; + + solaris*) + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + case $cc_basename in + f77* | f90* | f95* | sunf77* | sunf90* | sunf95*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ';; + *) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,';; + esac + ;; + + sunos4*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + ;; + + sysv4 | sysv4.2uw2* | sysv4.3*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + ;; + + sysv4*MP*) + if test -d /usr/nec; then + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-Kconform_pic' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + fi + ;; + + sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + ;; + + unicos*) + _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' + _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no + ;; + + uts4*) + _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic' + _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' + ;; + + *) + _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no + ;; + esac + fi +]) +case $host_os in + # For platforms that do not support PIC, -DPIC is meaningless: + *djgpp*) + _LT_TAGVAR(lt_prog_compiler_pic, $1)= + ;; + *) + _LT_TAGVAR(lt_prog_compiler_pic, $1)="$_LT_TAGVAR(lt_prog_compiler_pic, $1)@&t@m4_if([$1],[],[ -DPIC],[m4_if([$1],[CXX],[ -DPIC],[])])" + ;; +esac + +AC_CACHE_CHECK([for $compiler option to produce PIC], + [_LT_TAGVAR(lt_cv_prog_compiler_pic, $1)], + [_LT_TAGVAR(lt_cv_prog_compiler_pic, $1)=$_LT_TAGVAR(lt_prog_compiler_pic, $1)]) +_LT_TAGVAR(lt_prog_compiler_pic, $1)=$_LT_TAGVAR(lt_cv_prog_compiler_pic, $1) + +# +# Check to make sure the PIC flag actually works. +# +if test -n "$_LT_TAGVAR(lt_prog_compiler_pic, $1)"; then + _LT_COMPILER_OPTION([if $compiler PIC flag $_LT_TAGVAR(lt_prog_compiler_pic, $1) works], + [_LT_TAGVAR(lt_cv_prog_compiler_pic_works, $1)], + [$_LT_TAGVAR(lt_prog_compiler_pic, $1)@&t@m4_if([$1],[],[ -DPIC],[m4_if([$1],[CXX],[ -DPIC],[])])], [], + [case $_LT_TAGVAR(lt_prog_compiler_pic, $1) in + "" | " "*) ;; + *) _LT_TAGVAR(lt_prog_compiler_pic, $1)=" $_LT_TAGVAR(lt_prog_compiler_pic, $1)" ;; + esac], + [_LT_TAGVAR(lt_prog_compiler_pic, $1)= + _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no]) +fi +_LT_TAGDECL([pic_flag], [lt_prog_compiler_pic], [1], + [Additional compiler flags for building library objects]) + +_LT_TAGDECL([wl], [lt_prog_compiler_wl], [1], + [How to pass a linker flag through the compiler]) +# +# Check to make sure the static flag actually works. +# +wl=$_LT_TAGVAR(lt_prog_compiler_wl, $1) eval lt_tmp_static_flag=\"$_LT_TAGVAR(lt_prog_compiler_static, $1)\" +_LT_LINKER_OPTION([if $compiler static flag $lt_tmp_static_flag works], + _LT_TAGVAR(lt_cv_prog_compiler_static_works, $1), + $lt_tmp_static_flag, + [], + [_LT_TAGVAR(lt_prog_compiler_static, $1)=]) +_LT_TAGDECL([link_static_flag], [lt_prog_compiler_static], [1], + [Compiler flag to prevent dynamic linking]) +])# _LT_COMPILER_PIC + + +# _LT_LINKER_SHLIBS([TAGNAME]) +# ---------------------------- +# See if the linker supports building shared libraries. +m4_defun([_LT_LINKER_SHLIBS], +[AC_REQUIRE([LT_PATH_LD])dnl +AC_REQUIRE([LT_PATH_NM])dnl +m4_require([_LT_PATH_MANIFEST_TOOL])dnl +m4_require([_LT_FILEUTILS_DEFAULTS])dnl +m4_require([_LT_DECL_EGREP])dnl +m4_require([_LT_DECL_SED])dnl +m4_require([_LT_CMD_GLOBAL_SYMBOLS])dnl +m4_require([_LT_TAG_COMPILER])dnl +AC_MSG_CHECKING([whether the $compiler linker ($LD) supports shared libraries]) +m4_if([$1], [CXX], [ + _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols' + _LT_TAGVAR(exclude_expsyms, $1)=['_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*'] + case $host_os in + aix[[4-9]]*) + # If we're using GNU nm, then we don't want the "-C" option. + # -C means demangle to GNU nm, but means don't demangle to AIX nm. + # Without the "-l" option, or with the "-B" option, AIX nm treats + # weak defined symbols like other global defined symbols, whereas + # GNU nm marks them as "W". + # While the 'weak' keyword is ignored in the Export File, we need + # it in the Import File for the 'aix-soname' feature, so we have + # to replace the "-B" option with "-P" for AIX nm. + if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then + _LT_TAGVAR(export_symbols_cmds, $1)='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && ([substr](\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols' + else + _LT_TAGVAR(export_symbols_cmds, $1)='`func_echo_all $NM | $SED -e '\''s/B\([[^B]]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && ([substr](\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols' + fi + ;; + pw32*) + _LT_TAGVAR(export_symbols_cmds, $1)=$ltdll_cmds + ;; + cygwin* | mingw* | cegcc*) + case $cc_basename in + cl* | icl*) + _LT_TAGVAR(exclude_expsyms, $1)='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*' + ;; + *) + _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1 DATA/;s/^.*[[ ]]__nm__\([[^ ]]*\)[[ ]][[^ ]]*/\1 DATA/;/^I[[ ]]/d;/^[[AITW]][[ ]]/s/.* //'\'' | sort | uniq > $export_symbols' + _LT_TAGVAR(exclude_expsyms, $1)=['[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname'] + ;; + esac + ;; + *) + _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols' + ;; + esac +], [ + runpath_var= + _LT_TAGVAR(allow_undefined_flag, $1)= + _LT_TAGVAR(always_export_symbols, $1)=no + _LT_TAGVAR(archive_cmds, $1)= + _LT_TAGVAR(archive_expsym_cmds, $1)= + _LT_TAGVAR(compiler_needs_object, $1)=no + _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no + _LT_TAGVAR(export_dynamic_flag_spec, $1)= + _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols' + _LT_TAGVAR(hardcode_automatic, $1)=no + _LT_TAGVAR(hardcode_direct, $1)=no + _LT_TAGVAR(hardcode_direct_absolute, $1)=no + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)= + _LT_TAGVAR(hardcode_libdir_separator, $1)= + _LT_TAGVAR(hardcode_minus_L, $1)=no + _LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported + _LT_TAGVAR(inherit_rpath, $1)=no + _LT_TAGVAR(link_all_deplibs, $1)=unknown + _LT_TAGVAR(module_cmds, $1)= + _LT_TAGVAR(module_expsym_cmds, $1)= + _LT_TAGVAR(old_archive_from_new_cmds, $1)= + _LT_TAGVAR(old_archive_from_expsyms_cmds, $1)= + _LT_TAGVAR(thread_safe_flag_spec, $1)= + _LT_TAGVAR(whole_archive_flag_spec, $1)= + # include_expsyms should be a list of space-separated symbols to be *always* + # included in the symbol list + _LT_TAGVAR(include_expsyms, $1)= + # exclude_expsyms can be an extended regexp of symbols to exclude + # it will be wrapped by ' (' and ')$', so one must not match beginning or + # end of line. Example: 'a|bc|.*d.*' will exclude the symbols 'a' and 'bc', + # as well as any symbol that contains 'd'. + _LT_TAGVAR(exclude_expsyms, $1)=['_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*'] + # Although _GLOBAL_OFFSET_TABLE_ is a valid symbol C name, most a.out + # platforms (ab)use it in PIC code, but their linkers get confused if + # the symbol is explicitly referenced. Since portable code cannot + # rely on this symbol name, it's probably fine to never include it in + # preloaded symbol tables. + # Exclude shared library initialization/finalization symbols. +dnl Note also adjust exclude_expsyms for C++ above. + extract_expsyms_cmds= + + case $host_os in + cygwin* | mingw* | pw32* | cegcc*) + # FIXME: the MSVC++ and ICC port hasn't been tested in a loooong time + # When not using gcc, we currently assume that we are using + # Microsoft Visual C++ or Intel C++ Compiler. + if test yes != "$GCC"; then + with_gnu_ld=no + fi + ;; + interix*) + # we just hope/assume this is gcc and not c89 (= MSVC++ or ICC) + with_gnu_ld=yes + ;; + openbsd* | bitrig*) + with_gnu_ld=no + ;; + esac + + _LT_TAGVAR(ld_shlibs, $1)=yes + + # On some targets, GNU ld is compatible enough with the native linker + # that we're better off using the native interface for both. + lt_use_gnu_ld_interface=no + if test yes = "$with_gnu_ld"; then + case $host_os in + aix*) + # The AIX port of GNU ld has always aspired to compatibility + # with the native linker. However, as the warning in the GNU ld + # block says, versions before 2.19.5* couldn't really create working + # shared libraries, regardless of the interface used. + case `$LD -v 2>&1` in + *\ \(GNU\ Binutils\)\ 2.19.5*) ;; + *\ \(GNU\ Binutils\)\ 2.[[2-9]]*) ;; + *\ \(GNU\ Binutils\)\ [[3-9]]*) ;; + *) + lt_use_gnu_ld_interface=yes + ;; + esac + ;; + *) + lt_use_gnu_ld_interface=yes + ;; + esac + fi + + if test yes = "$lt_use_gnu_ld_interface"; then + # If archive_cmds runs LD, not CC, wlarc should be empty + wlarc='$wl' + + # Set some defaults for GNU ld with shared library support. These + # are reset later if shared libraries are not supported. Putting them + # here allows them to be overridden if necessary. + runpath_var=LD_RUN_PATH + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' + # ancient GNU ld didn't support --whole-archive et. al. + if $LD --help 2>&1 | $GREP 'no-whole-archive' > /dev/null; then + _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive' + else + _LT_TAGVAR(whole_archive_flag_spec, $1)= + fi + supports_anon_versioning=no + case `$LD -v | $SED -e 's/([[^)]]\+)\s\+//' 2>&1` in + *GNU\ gold*) supports_anon_versioning=yes ;; + *\ [[01]].* | *\ 2.[[0-9]].* | *\ 2.10.*) ;; # catch versions < 2.11 + *\ 2.11.93.0.2\ *) supports_anon_versioning=yes ;; # RH7.3 ... + *\ 2.11.92.0.12\ *) supports_anon_versioning=yes ;; # Mandrake 8.2 ... + *\ 2.11.*) ;; # other 2.11 versions + *) supports_anon_versioning=yes ;; + esac + + # See if GNU ld supports shared libraries. + case $host_os in + aix[[3-9]]*) + # On AIX/PPC, the GNU linker is very broken + if test ia64 != "$host_cpu"; then + _LT_TAGVAR(ld_shlibs, $1)=no + cat <<_LT_EOF 1>&2 + +*** Warning: the GNU linker, at least up to release 2.19, is reported +*** to be unable to reliably create shared libraries on AIX. +*** Therefore, libtool is disabling shared libraries support. If you +*** really care for shared libraries, you may want to install binutils +*** 2.20 or above, or modify your PATH so that a non-GNU linker is found. +*** You will then need to restart the configuration process. + +_LT_EOF + fi + ;; + + amigaos*) + case $host_cpu in + powerpc) + # see comment about AmigaOS4 .so support + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='' + ;; + m68k) + _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' + _LT_TAGVAR(hardcode_minus_L, $1)=yes + ;; + esac + ;; + + beos*) + if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then + _LT_TAGVAR(allow_undefined_flag, $1)=unsupported + # Joseph Beckenbach says some releases of gcc + # support --undefined. This deserves some investigation. FIXME + _LT_TAGVAR(archive_cmds, $1)='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' + else + _LT_TAGVAR(ld_shlibs, $1)=no + fi + ;; + + cygwin* | mingw* | pw32* | cegcc*) + # _LT_TAGVAR(hardcode_libdir_flag_spec, $1) is actually meaningless, + # as there is no search path for DLLs. + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-all-symbols' + _LT_TAGVAR(allow_undefined_flag, $1)=unsupported + _LT_TAGVAR(always_export_symbols, $1)=no + _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes + _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1 DATA/;s/^.*[[ ]]__nm__\([[^ ]]*\)[[ ]][[^ ]]*/\1 DATA/;/^I[[ ]]/d;/^[[AITW]][[ ]]/s/.* //'\'' | sort | uniq > $export_symbols' + _LT_TAGVAR(exclude_expsyms, $1)=['[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname'] + + if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' + # If the export-symbols file already is a .def file, use it as + # is; otherwise, prepend EXPORTS... + _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then + cp $export_symbols $output_objdir/$soname.def; + else + echo EXPORTS > $output_objdir/$soname.def; + cat $export_symbols >> $output_objdir/$soname.def; + fi~ + $CC -shared $output_objdir/$soname.def $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' + else + _LT_TAGVAR(ld_shlibs, $1)=no + fi + ;; + + haiku*) + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' + _LT_TAGVAR(link_all_deplibs, $1)=yes + ;; + + os2*) + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' + _LT_TAGVAR(hardcode_minus_L, $1)=yes + _LT_TAGVAR(allow_undefined_flag, $1)=unsupported + shrext_cmds=.dll + _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ + $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ + $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ + $ECHO EXPORTS >> $output_objdir/$libname.def~ + emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~ + $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ + emximp -o $lib $output_objdir/$libname.def' + _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ + $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ + $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ + $ECHO EXPORTS >> $output_objdir/$libname.def~ + prefix_cmds="$SED"~ + if test EXPORTS = "`$SED 1q $export_symbols`"; then + prefix_cmds="$prefix_cmds -e 1d"; + fi~ + prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~ + cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~ + $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ + emximp -o $lib $output_objdir/$libname.def' + _LT_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def' + _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes + _LT_TAGVAR(file_list_spec, $1)='@' + ;; + + interix[[3-9]]*) + _LT_TAGVAR(hardcode_direct, $1)=no + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' + # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc. + # Instead, shared libraries are loaded at an image base (0x10000000 by + # default) and relocated if they conflict, which is a slow very memory + # consuming and fragmenting process. To avoid this, we pick a random, + # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link + # time. Moving up from 0x10000000 also allows more sbrk(2) space. + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' + ;; + + gnu* | linux* | tpf* | k*bsd*-gnu | kopensolaris*-gnu) + tmp_diet=no + if test linux-dietlibc = "$host_os"; then + case $cc_basename in + diet\ *) tmp_diet=yes;; # linux-dietlibc with static linking (!diet-dyn) + esac + fi + if $LD --help 2>&1 | $EGREP ': supported targets:.* elf' > /dev/null \ + && test no = "$tmp_diet" + then + tmp_addflag=' $pic_flag' + tmp_sharedflag='-shared' + case $cc_basename,$host_cpu in + pgcc*) # Portland Group C compiler + _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' + tmp_addflag=' $pic_flag' + ;; + pgf77* | pgf90* | pgf95* | pgfortran*) + # Portland Group f77 and f90 compilers + _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' + tmp_addflag=' $pic_flag -Mnomain' ;; + ecc*,ia64* | icc*,ia64*) # Intel C compiler on ia64 + tmp_addflag=' -i_dynamic' ;; + efc*,ia64* | ifort*,ia64*) # Intel Fortran compiler on ia64 + tmp_addflag=' -i_dynamic -nofor_main' ;; + ifc* | ifort*) # Intel Fortran compiler + tmp_addflag=' -nofor_main' ;; + lf95*) # Lahey Fortran 8.1 + _LT_TAGVAR(whole_archive_flag_spec, $1)= + tmp_sharedflag='--shared' ;; + nagfor*) # NAGFOR 5.3 + tmp_sharedflag='-Wl,-shared' ;; + xl[[cC]]* | bgxl[[cC]]* | mpixl[[cC]]*) # IBM XL C 8.0 on PPC (deal with xlf below) + tmp_sharedflag='-qmkshrobj' + tmp_addflag= ;; + nvcc*) # Cuda Compiler Driver 2.2 + _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' + _LT_TAGVAR(compiler_needs_object, $1)=yes + ;; + esac + case `$CC -V 2>&1 | $SED 5q` in + *Sun\ C*) # Sun C 5.9 + _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' + _LT_TAGVAR(compiler_needs_object, $1)=yes + tmp_sharedflag='-G' ;; + *Sun\ F*) # Sun Fortran 8.3 + tmp_sharedflag='-G' ;; + esac + _LT_TAGVAR(archive_cmds, $1)='$CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' + + if test yes = "$supports_anon_versioning"; then + _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~ + cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~ + echo "local: *; };" >> $output_objdir/$libname.ver~ + $CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib' + fi + + case $cc_basename in + tcc*) + _LT_TAGVAR(export_dynamic_flag_spec, $1)='-rdynamic' + ;; + xlf* | bgf* | bgxlf* | mpixlf*) + # IBM XL Fortran 10.1 on PPC cannot create shared libs itself + _LT_TAGVAR(whole_archive_flag_spec, $1)='--whole-archive$convenience --no-whole-archive' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' + _LT_TAGVAR(archive_cmds, $1)='$LD -shared $libobjs $deplibs $linker_flags -soname $soname -o $lib' + if test yes = "$supports_anon_versioning"; then + _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~ + cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~ + echo "local: *; };" >> $output_objdir/$libname.ver~ + $LD -shared $libobjs $deplibs $linker_flags -soname $soname -version-script $output_objdir/$libname.ver -o $lib' + fi + ;; + esac + else + _LT_TAGVAR(ld_shlibs, $1)=no + fi + ;; + + netbsd*) + if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then + _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib' + wlarc= + else + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' + fi + ;; + + solaris*) + if $LD -v 2>&1 | $GREP 'BFD 2\.8' > /dev/null; then + _LT_TAGVAR(ld_shlibs, $1)=no + cat <<_LT_EOF 1>&2 + +*** Warning: The releases 2.8.* of the GNU linker cannot reliably +*** create shared libraries on Solaris systems. Therefore, libtool +*** is disabling shared libraries support. We urge you to upgrade GNU +*** binutils to release 2.9.1 or newer. Another option is to modify +*** your PATH or compiler configuration so that the native linker is +*** used, and then restart. + +_LT_EOF + elif $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' + else + _LT_TAGVAR(ld_shlibs, $1)=no + fi + ;; + + sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX*) + case `$LD -v 2>&1` in + *\ [[01]].* | *\ 2.[[0-9]].* | *\ 2.1[[0-5]].*) + _LT_TAGVAR(ld_shlibs, $1)=no + cat <<_LT_EOF 1>&2 + +*** Warning: Releases of the GNU linker prior to 2.16.91.0.3 cannot +*** reliably create shared libraries on SCO systems. Therefore, libtool +*** is disabling shared libraries support. We urge you to upgrade GNU +*** binutils to release 2.16.91.0.3 or newer. Another option is to modify +*** your PATH or compiler configuration so that the native linker is +*** used, and then restart. + +_LT_EOF + ;; + *) + # For security reasons, it is highly recommended that you always + # use absolute paths for naming shared libraries, and exclude the + # DT_RUNPATH tag from executables and libraries. But doing so + # requires that you compile everything twice, which is a pain. + if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' + else + _LT_TAGVAR(ld_shlibs, $1)=no + fi + ;; + esac + ;; + + sunos4*) + _LT_TAGVAR(archive_cmds, $1)='$LD -assert pure-text -Bshareable -o $lib $libobjs $deplibs $linker_flags' + wlarc= + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + ;; + + *) + if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' + else + _LT_TAGVAR(ld_shlibs, $1)=no + fi + ;; + esac + + if test no = "$_LT_TAGVAR(ld_shlibs, $1)"; then + runpath_var= + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)= + _LT_TAGVAR(export_dynamic_flag_spec, $1)= + _LT_TAGVAR(whole_archive_flag_spec, $1)= + fi + else + # PORTME fill in a description of your system's linker (not GNU ld) + case $host_os in + aix3*) + _LT_TAGVAR(allow_undefined_flag, $1)=unsupported + _LT_TAGVAR(always_export_symbols, $1)=yes + _LT_TAGVAR(archive_expsym_cmds, $1)='$LD -o $output_objdir/$soname $libobjs $deplibs $linker_flags -bE:$export_symbols -T512 -H512 -bM:SRE~$AR $AR_FLAGS $lib $output_objdir/$soname' + # Note: this linker hardcodes the directories in LIBPATH if there + # are no directories specified by -L. + _LT_TAGVAR(hardcode_minus_L, $1)=yes + if test yes = "$GCC" && test -z "$lt_prog_compiler_static"; then + # Neither direct hardcoding nor static linking is supported with a + # broken collect2. + _LT_TAGVAR(hardcode_direct, $1)=unsupported + fi + ;; + + aix[[4-9]]*) + if test ia64 = "$host_cpu"; then + # On IA64, the linker does run time linking by default, so we don't + # have to do anything special. + aix_use_runtimelinking=no + exp_sym_flag='-Bexport' + no_entry_flag= + else + # If we're using GNU nm, then we don't want the "-C" option. + # -C means demangle to GNU nm, but means don't demangle to AIX nm. + # Without the "-l" option, or with the "-B" option, AIX nm treats + # weak defined symbols like other global defined symbols, whereas + # GNU nm marks them as "W". + # While the 'weak' keyword is ignored in the Export File, we need + # it in the Import File for the 'aix-soname' feature, so we have + # to replace the "-B" option with "-P" for AIX nm. + if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then + _LT_TAGVAR(export_symbols_cmds, $1)='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && ([substr](\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols' + else + _LT_TAGVAR(export_symbols_cmds, $1)='`func_echo_all $NM | $SED -e '\''s/B\([[^B]]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && ([substr](\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols' + fi + aix_use_runtimelinking=no + + # Test if we are trying to use run time linking or normal + # AIX style linking. If -brtl is somewhere in LDFLAGS, we + # have runtime linking enabled, and use it for executables. + # For shared libraries, we enable/disable runtime linking + # depending on the kind of the shared library created - + # when "with_aix_soname,aix_use_runtimelinking" is: + # "aix,no" lib.a(lib.so.V) shared, rtl:no, for executables + # "aix,yes" lib.so shared, rtl:yes, for executables + # lib.a static archive + # "both,no" lib.so.V(shr.o) shared, rtl:yes + # lib.a(lib.so.V) shared, rtl:no, for executables + # "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables + # lib.a(lib.so.V) shared, rtl:no + # "svr4,*" lib.so.V(shr.o) shared, rtl:yes, for executables + # lib.a static archive + case $host_os in aix4.[[23]]|aix4.[[23]].*|aix[[5-9]]*) + for ld_flag in $LDFLAGS; do + if (test x-brtl = "x$ld_flag" || test x-Wl,-brtl = "x$ld_flag"); then + aix_use_runtimelinking=yes + break + fi + done + if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then + # With aix-soname=svr4, we create the lib.so.V shared archives only, + # so we don't have lib.a shared libs to link our executables. + # We have to force runtime linking in this case. + aix_use_runtimelinking=yes + LDFLAGS="$LDFLAGS -Wl,-brtl" + fi + ;; + esac + + exp_sym_flag='-bexport' + no_entry_flag='-bnoentry' + fi + + # When large executables or shared objects are built, AIX ld can + # have problems creating the table of contents. If linking a library + # or program results in "error TOC overflow" add -mminimal-toc to + # CXXFLAGS/CFLAGS for g++/gcc. In the cases where that is not + # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS. + + _LT_TAGVAR(archive_cmds, $1)='' + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_direct_absolute, $1)=yes + _LT_TAGVAR(hardcode_libdir_separator, $1)=':' + _LT_TAGVAR(link_all_deplibs, $1)=yes + _LT_TAGVAR(file_list_spec, $1)='$wl-f,' + case $with_aix_soname,$aix_use_runtimelinking in + aix,*) ;; # traditional, no import file + svr4,* | *,yes) # use import file + # The Import File defines what to hardcode. + _LT_TAGVAR(hardcode_direct, $1)=no + _LT_TAGVAR(hardcode_direct_absolute, $1)=no + ;; + esac + + if test yes = "$GCC"; then + case $host_os in aix4.[[012]]|aix4.[[012]].*) + # We only want to do this on AIX 4.2 and lower, the check + # below for broken collect2 doesn't work under 4.3+ + collect2name=`$CC -print-prog-name=collect2` + if test -f "$collect2name" && + strings "$collect2name" | $GREP resolve_lib_name >/dev/null + then + # We have reworked collect2 + : + else + # We have old collect2 + _LT_TAGVAR(hardcode_direct, $1)=unsupported + # It fails to find uninstalled libraries when the uninstalled + # path is not listed in the libpath. Setting hardcode_minus_L + # to unsupported forces relinking + _LT_TAGVAR(hardcode_minus_L, $1)=yes + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)= + fi + ;; + esac + shared_flag='-shared' + if test yes = "$aix_use_runtimelinking"; then + shared_flag="$shared_flag "'$wl-G' + fi + # Need to ensure runtime linking is disabled for the traditional + # shared library, or the linker may eventually find shared libraries + # /with/ Import File - we do not want to mix them. + shared_flag_aix='-shared' + shared_flag_svr4='-shared $wl-G' + else + # not using gcc + if test ia64 = "$host_cpu"; then + # VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release + # chokes on -Wl,-G. The following line is correct: + shared_flag='-G' + else + if test yes = "$aix_use_runtimelinking"; then + shared_flag='$wl-G' + else + shared_flag='$wl-bM:SRE' + fi + shared_flag_aix='$wl-bM:SRE' + shared_flag_svr4='$wl-G' + fi + fi + + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-bexpall' + # It seems that -bexpall does not export symbols beginning with + # underscore (_), so it is better to generate a list of symbols to export. + _LT_TAGVAR(always_export_symbols, $1)=yes + if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then + # Warning - without using the other runtime loading flags (-brtl), + # -berok will link without error, but may produce a broken library. + _LT_TAGVAR(allow_undefined_flag, $1)='-berok' + # Determine the default libpath from the value encoded in an + # empty executable. + _LT_SYS_MODULE_PATH_AIX([$1]) + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath" + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag + else + if test ia64 = "$host_cpu"; then + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $libdir:/usr/lib:/lib' + _LT_TAGVAR(allow_undefined_flag, $1)="-z nodefs" + _LT_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols" + else + # Determine the default libpath from the value encoded in an + # empty executable. + _LT_SYS_MODULE_PATH_AIX([$1]) + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath" + # Warning - without using the other run time loading flags, + # -berok will link without error, but may produce a broken library. + _LT_TAGVAR(no_undefined_flag, $1)=' $wl-bernotok' + _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-berok' + if test yes = "$with_gnu_ld"; then + # We only use this code for GNU lds that support --whole-archive. + _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive' + else + # Exported symbols can be pulled into shared objects from archives + _LT_TAGVAR(whole_archive_flag_spec, $1)='$convenience' + fi + _LT_TAGVAR(archive_cmds_need_lc, $1)=yes + _LT_TAGVAR(archive_expsym_cmds, $1)='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d' + # -brtl affects multiple linker settings, -berok does not and is overridden later + compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([[, ]]\\)%-berok\\1%g"`' + if test svr4 != "$with_aix_soname"; then + # This is similar to how AIX traditionally builds its shared libraries. + _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname' + fi + if test aix != "$with_aix_soname"; then + _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp' + else + # used by -dlpreopen to get the symbols + _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$MV $output_objdir/$realname.d/$soname $output_objdir' + fi + _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$RM -r $output_objdir/$realname.d' + fi + fi + ;; + + amigaos*) + case $host_cpu in + powerpc) + # see comment about AmigaOS4 .so support + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='' + ;; + m68k) + _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' + _LT_TAGVAR(hardcode_minus_L, $1)=yes + ;; + esac + ;; + + bsdi[[45]]*) + _LT_TAGVAR(export_dynamic_flag_spec, $1)=-rdynamic + ;; + + cygwin* | mingw* | pw32* | cegcc*) + # When not using gcc, we currently assume that we are using + # Microsoft Visual C++ or Intel C++ Compiler. + # hardcode_libdir_flag_spec is actually meaningless, as there is + # no search path for DLLs. + case $cc_basename in + cl* | icl*) + # Native MSVC or ICC + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' ' + _LT_TAGVAR(allow_undefined_flag, $1)=unsupported + _LT_TAGVAR(always_export_symbols, $1)=yes + _LT_TAGVAR(file_list_spec, $1)='@' + # Tell ltmain to make .lib files, not .a files. + libext=lib + # Tell ltmain to make .dll files, not .so files. + shrext_cmds=.dll + # FIXME: Setting linknames here is a bad hack. + _LT_TAGVAR(archive_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames=' + _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then + cp "$export_symbols" "$output_objdir/$soname.def"; + echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp"; + else + $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp; + fi~ + $CC -o $tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~ + linknames=' + # The linker will not automatically build a static lib if we build a DLL. + # _LT_TAGVAR(old_archive_from_new_cmds, $1)='true' + _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes + _LT_TAGVAR(exclude_expsyms, $1)='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*' + _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1,DATA/'\'' | $SED -e '\''/^[[AITW]][[ ]]/s/.*[[ ]]//'\'' | sort | uniq > $export_symbols' + # Don't use ranlib + _LT_TAGVAR(old_postinstall_cmds, $1)='chmod 644 $oldlib' + _LT_TAGVAR(postlink_cmds, $1)='lt_outputfile="@OUTPUT@"~ + lt_tool_outputfile="@TOOL_OUTPUT@"~ + case $lt_outputfile in + *.exe|*.EXE) ;; + *) + lt_outputfile=$lt_outputfile.exe + lt_tool_outputfile=$lt_tool_outputfile.exe + ;; + esac~ + if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then + $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1; + $RM "$lt_outputfile.manifest"; + fi' + ;; + *) + # Assume MSVC and ICC wrapper + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' ' + _LT_TAGVAR(allow_undefined_flag, $1)=unsupported + # Tell ltmain to make .lib files, not .a files. + libext=lib + # Tell ltmain to make .dll files, not .so files. + shrext_cmds=.dll + # FIXME: Setting linknames here is a bad hack. + _LT_TAGVAR(archive_cmds, $1)='$CC -o $lib $libobjs $compiler_flags `func_echo_all "$deplibs" | $SED '\''s/ -lc$//'\''` -link -dll~linknames=' + # The linker will automatically build a .lib file if we build a DLL. + _LT_TAGVAR(old_archive_from_new_cmds, $1)='true' + # FIXME: Should let the user specify the lib program. + _LT_TAGVAR(old_archive_cmds, $1)='lib -OUT:$oldlib$oldobjs$old_deplibs' + _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes + ;; + esac + ;; + + darwin* | rhapsody*) + _LT_DARWIN_LINKER_FEATURES($1) + ;; + + dgux*) + _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + ;; + + # FreeBSD 2.2.[012] allows us to include c++rt0.o to get C++ constructor + # support. Future versions do this automatically, but an explicit c++rt0.o + # does not break anything, and helps significantly (at the cost of a little + # extra space). + freebsd2.2*) + _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags /usr/lib/c++rt0.o' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + ;; + + # Unfortunately, older versions of FreeBSD 2 do not have this feature. + freebsd2.*) + _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_minus_L, $1)=yes + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + ;; + + # FreeBSD 3 and greater uses gcc -shared to do shared libraries. + freebsd* | dragonfly* | midnightbsd*) + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + ;; + + hpux9*) + if test yes = "$GCC"; then + _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -shared $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $libobjs $deplibs $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' + else + _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$LD -b +b $install_libdir -o $output_objdir/$soname $libobjs $deplibs $linker_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' + fi + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)=: + _LT_TAGVAR(hardcode_direct, $1)=yes + + # hardcode_minus_L: Not really in the search PATH, + # but as the default location of the library. + _LT_TAGVAR(hardcode_minus_L, $1)=yes + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' + ;; + + hpux10*) + if test yes,no = "$GCC,$with_gnu_ld"; then + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags' + else + _LT_TAGVAR(archive_cmds, $1)='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags' + fi + if test no = "$with_gnu_ld"; then + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)=: + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_direct_absolute, $1)=yes + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' + # hardcode_minus_L: Not really in the search PATH, + # but as the default location of the library. + _LT_TAGVAR(hardcode_minus_L, $1)=yes + fi + ;; + + hpux11*) + if test yes,no = "$GCC,$with_gnu_ld"; then + case $host_cpu in + hppa*64*) + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags' + ;; + ia64*) + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags' + ;; + *) + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags' + ;; + esac + else + case $host_cpu in + hppa*64*) + _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags' + ;; + ia64*) + _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags' + ;; + *) + m4_if($1, [], [ + # Older versions of the 11.00 compiler do not understand -b yet + # (HP92453-01 A.11.01.20 doesn't, HP92453-01 B.11.X.35175-35176.GP does) + _LT_LINKER_OPTION([if $CC understands -b], + _LT_TAGVAR(lt_cv_prog_compiler__b, $1), [-b], + [_LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'], + [_LT_TAGVAR(archive_cmds, $1)='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'])], + [_LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags']) + ;; + esac + fi + if test no = "$with_gnu_ld"; then + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)=: + + case $host_cpu in + hppa*64*|ia64*) + _LT_TAGVAR(hardcode_direct, $1)=no + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + ;; + *) + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_direct_absolute, $1)=yes + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' + + # hardcode_minus_L: Not really in the search PATH, + # but as the default location of the library. + _LT_TAGVAR(hardcode_minus_L, $1)=yes + ;; + esac + fi + ;; + + irix5* | irix6* | nonstopux*) + if test yes = "$GCC"; then + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' + # Try to use the -exported_symbol ld option, if it does not + # work, assume that -exports_file does not work either and + # implicitly export all symbols. + # This should be the same for all languages, so no per-tag cache variable. + AC_CACHE_CHECK([whether the $host_os linker accepts -exported_symbol], + [lt_cv_irix_exported_symbol], + [save_LDFLAGS=$LDFLAGS + LDFLAGS="$LDFLAGS -shared $wl-exported_symbol ${wl}foo $wl-update_registry $wl/dev/null" + AC_LINK_IFELSE( + [AC_LANG_SOURCE( + [AC_LANG_CASE([C], [[int foo (void) { return 0; }]], + [C++], [[int foo (void) { return 0; }]], + [Fortran 77], [[ + subroutine foo + end]], + [Fortran], [[ + subroutine foo + end]])])], + [lt_cv_irix_exported_symbol=yes], + [lt_cv_irix_exported_symbol=no]) + LDFLAGS=$save_LDFLAGS]) + if test yes = "$lt_cv_irix_exported_symbol"; then + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib' + fi + else + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib' + fi + _LT_TAGVAR(archive_cmds_need_lc, $1)='no' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)=: + _LT_TAGVAR(inherit_rpath, $1)=yes + _LT_TAGVAR(link_all_deplibs, $1)=yes + ;; + + linux*) + case $cc_basename in + tcc*) + # Fabrice Bellard et al's Tiny C Compiler + _LT_TAGVAR(ld_shlibs, $1)=yes + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' + ;; + esac + ;; + + netbsd*) + if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then + _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' # a.out + else + _LT_TAGVAR(archive_cmds, $1)='$LD -shared -o $lib $libobjs $deplibs $linker_flags' # ELF + fi + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + ;; + + newsos6) + _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)=: + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + ;; + + *nto* | *qnx*) + ;; + + openbsd* | bitrig*) + if test -f /usr/libexec/ld.so; then + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + _LT_TAGVAR(hardcode_direct_absolute, $1)=yes + if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags $wl-retain-symbols-file,$export_symbols' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' + else + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' + fi + else + _LT_TAGVAR(ld_shlibs, $1)=no + fi + ;; + + os2*) + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' + _LT_TAGVAR(hardcode_minus_L, $1)=yes + _LT_TAGVAR(allow_undefined_flag, $1)=unsupported + shrext_cmds=.dll + _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ + $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ + $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ + $ECHO EXPORTS >> $output_objdir/$libname.def~ + emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~ + $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ + emximp -o $lib $output_objdir/$libname.def' + _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ + $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ + $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ + $ECHO EXPORTS >> $output_objdir/$libname.def~ + prefix_cmds="$SED"~ + if test EXPORTS = "`$SED 1q $export_symbols`"; then + prefix_cmds="$prefix_cmds -e 1d"; + fi~ + prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~ + cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~ + $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ + emximp -o $lib $output_objdir/$libname.def' + _LT_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def' + _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes + _LT_TAGVAR(file_list_spec, $1)='@' + ;; + + osf3*) + if test yes = "$GCC"; then + _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*' + _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' + else + _LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*' + _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' + fi + _LT_TAGVAR(archive_cmds_need_lc, $1)='no' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)=: + ;; + + osf4* | osf5*) # as osf3* with the addition of -msym flag + if test yes = "$GCC"; then + _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*' + _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $pic_flag $libobjs $deplibs $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' + else + _LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*' + _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done; printf "%s\\n" "-hidden">> $lib.exp~ + $CC -shared$allow_undefined_flag $wl-input $wl$lib.exp $compiler_flags $libobjs $deplibs -soname $soname `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~$RM $lib.exp' + + # Both c and cxx compiler support -rpath directly + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir' + fi + _LT_TAGVAR(archive_cmds_need_lc, $1)='no' + _LT_TAGVAR(hardcode_libdir_separator, $1)=: + ;; + + solaris*) + _LT_TAGVAR(no_undefined_flag, $1)=' -z defs' + if test yes = "$GCC"; then + wlarc='$wl' + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl-z ${wl}text $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags' + _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ + $CC -shared $pic_flag $wl-z ${wl}text $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp' + else + case `$CC -V 2>&1` in + *"Compilers 5.0"*) + wlarc='' + _LT_TAGVAR(archive_cmds, $1)='$LD -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $linker_flags' + _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ + $LD -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $linker_flags~$RM $lib.exp' + ;; + *) + wlarc='$wl' + _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $compiler_flags' + _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ + $CC -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp' + ;; + esac + fi + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + case $host_os in + solaris2.[[0-5]] | solaris2.[[0-5]].*) ;; + *) + # The compiler driver will combine and reorder linker options, + # but understands '-z linker_flag'. GCC discards it without '$wl', + # but is careful enough not to reorder. + # Supported since Solaris 2.6 (maybe 2.5.1?) + if test yes = "$GCC"; then + _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract' + else + _LT_TAGVAR(whole_archive_flag_spec, $1)='-z allextract$convenience -z defaultextract' + fi + ;; + esac + _LT_TAGVAR(link_all_deplibs, $1)=yes + ;; + + sunos4*) + if test sequent = "$host_vendor"; then + # Use $CC to link under sequent, because it throws in some extra .o + # files that make .init and .fini sections work. + _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h $soname -o $lib $libobjs $deplibs $compiler_flags' + else + _LT_TAGVAR(archive_cmds, $1)='$LD -assert pure-text -Bstatic -o $lib $libobjs $deplibs $linker_flags' + fi + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_minus_L, $1)=yes + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + ;; + + sysv4) + case $host_vendor in + sni) + _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' + _LT_TAGVAR(hardcode_direct, $1)=yes # is this really true??? + ;; + siemens) + ## LD is ld it makes a PLAMLIB + ## CC just makes a GrossModule. + _LT_TAGVAR(archive_cmds, $1)='$LD -G -o $lib $libobjs $deplibs $linker_flags' + _LT_TAGVAR(reload_cmds, $1)='$CC -r -o $output$reload_objs' + _LT_TAGVAR(hardcode_direct, $1)=no + ;; + motorola) + _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' + _LT_TAGVAR(hardcode_direct, $1)=no #Motorola manual says yes, but my tests say they lie + ;; + esac + runpath_var='LD_RUN_PATH' + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + ;; + + sysv4.3*) + _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + _LT_TAGVAR(export_dynamic_flag_spec, $1)='-Bexport' + ;; + + sysv4*MP*) + if test -d /usr/nec; then + _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + runpath_var=LD_RUN_PATH + hardcode_runpath_var=yes + _LT_TAGVAR(ld_shlibs, $1)=yes + fi + ;; + + sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[[01]].[[10]]* | unixware7* | sco3.2v5.0.[[024]]*) + _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text' + _LT_TAGVAR(archive_cmds_need_lc, $1)=no + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + runpath_var='LD_RUN_PATH' + + if test yes = "$GCC"; then + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + else + _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + fi + ;; + + sysv5* | sco3.2v5* | sco5v6*) + # Note: We CANNOT use -z defs as we might desire, because we do not + # link with -lc, and that would cause any symbols used from libc to + # always be unresolved, which means just about no library would + # ever link correctly. If we're not using GNU ld we use -z text + # though, which does catch some bad symbols but isn't as heavy-handed + # as -z defs. + _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text' + _LT_TAGVAR(allow_undefined_flag, $1)='$wl-z,nodefs' + _LT_TAGVAR(archive_cmds_need_lc, $1)=no + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R,$libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)=':' + _LT_TAGVAR(link_all_deplibs, $1)=yes + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Bexport' + runpath_var='LD_RUN_PATH' + + if test yes = "$GCC"; then + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + else + _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + fi + ;; + + uts4*) + _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + ;; + + *) + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + esac + + if test sni = "$host_vendor"; then + case $host in + sysv4 | sysv4.2uw2* | sysv4.3* | sysv5*) + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Blargedynsym' + ;; + esac + fi + fi +]) +AC_MSG_RESULT([$_LT_TAGVAR(ld_shlibs, $1)]) +test no = "$_LT_TAGVAR(ld_shlibs, $1)" && can_build_shared=no + +_LT_TAGVAR(with_gnu_ld, $1)=$with_gnu_ld + +_LT_DECL([], [libext], [0], [Old archive suffix (normally "a")])dnl +_LT_DECL([], [shrext_cmds], [1], [Shared library suffix (normally ".so")])dnl +_LT_DECL([], [extract_expsyms_cmds], [2], + [The commands to extract the exported symbol list from a shared archive]) + +# +# Do we need to explicitly link libc? +# +case "x$_LT_TAGVAR(archive_cmds_need_lc, $1)" in +x|xyes) + # Assume -lc should be added + _LT_TAGVAR(archive_cmds_need_lc, $1)=yes + + if test yes,yes = "$GCC,$enable_shared"; then + case $_LT_TAGVAR(archive_cmds, $1) in + *'~'*) + # FIXME: we may have to deal with multi-command sequences. + ;; + '$CC '*) + # Test whether the compiler implicitly links with -lc since on some + # systems, -lgcc has to come before -lc. If gcc already passes -lc + # to ld, don't add -lc before -lgcc. + AC_CACHE_CHECK([whether -lc should be explicitly linked in], + [lt_cv_]_LT_TAGVAR(archive_cmds_need_lc, $1), + [$RM conftest* + echo "$lt_simple_compile_test_code" > conftest.$ac_ext + + if AC_TRY_EVAL(ac_compile) 2>conftest.err; then + soname=conftest + lib=conftest + libobjs=conftest.$ac_objext + deplibs= + wl=$_LT_TAGVAR(lt_prog_compiler_wl, $1) + pic_flag=$_LT_TAGVAR(lt_prog_compiler_pic, $1) + compiler_flags=-v + linker_flags=-v + verstring= + output_objdir=. + libname=conftest + lt_save_allow_undefined_flag=$_LT_TAGVAR(allow_undefined_flag, $1) + _LT_TAGVAR(allow_undefined_flag, $1)= + if AC_TRY_EVAL(_LT_TAGVAR(archive_cmds, $1) 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1) + then + lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1)=no + else + lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1)=yes + fi + _LT_TAGVAR(allow_undefined_flag, $1)=$lt_save_allow_undefined_flag + else + cat conftest.err 1>&5 + fi + $RM conftest* + ]) + _LT_TAGVAR(archive_cmds_need_lc, $1)=$lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1) + ;; + esac + fi + ;; +esac + +_LT_TAGDECL([build_libtool_need_lc], [archive_cmds_need_lc], [0], + [Whether or not to add -lc for building shared libraries]) +_LT_TAGDECL([allow_libtool_libs_with_static_runtimes], + [enable_shared_with_static_runtimes], [0], + [Whether or not to disallow shared libs when runtime libs are static]) +_LT_TAGDECL([], [export_dynamic_flag_spec], [1], + [Compiler flag to allow reflexive dlopens]) +_LT_TAGDECL([], [whole_archive_flag_spec], [1], + [Compiler flag to generate shared objects directly from archives]) +_LT_TAGDECL([], [compiler_needs_object], [1], + [Whether the compiler copes with passing no objects directly]) +_LT_TAGDECL([], [old_archive_from_new_cmds], [2], + [Create an old-style archive from a shared archive]) +_LT_TAGDECL([], [old_archive_from_expsyms_cmds], [2], + [Create a temporary old-style archive to link instead of a shared archive]) +_LT_TAGDECL([], [archive_cmds], [2], [Commands used to build a shared archive]) +_LT_TAGDECL([], [archive_expsym_cmds], [2]) +_LT_TAGDECL([], [module_cmds], [2], + [Commands used to build a loadable module if different from building + a shared archive.]) +_LT_TAGDECL([], [module_expsym_cmds], [2]) +_LT_TAGDECL([], [with_gnu_ld], [1], + [Whether we are building with GNU ld or not]) +_LT_TAGDECL([], [allow_undefined_flag], [1], + [Flag that allows shared libraries with undefined symbols to be built]) +_LT_TAGDECL([], [no_undefined_flag], [1], + [Flag that enforces no undefined symbols]) +_LT_TAGDECL([], [hardcode_libdir_flag_spec], [1], + [Flag to hardcode $libdir into a binary during linking. + This must work even if $libdir does not exist]) +_LT_TAGDECL([], [hardcode_libdir_separator], [1], + [Whether we need a single "-rpath" flag with a separated argument]) +_LT_TAGDECL([], [hardcode_direct], [0], + [Set to "yes" if using DIR/libNAME$shared_ext during linking hardcodes + DIR into the resulting binary]) +_LT_TAGDECL([], [hardcode_direct_absolute], [0], + [Set to "yes" if using DIR/libNAME$shared_ext during linking hardcodes + DIR into the resulting binary and the resulting library dependency is + "absolute", i.e impossible to change by setting $shlibpath_var if the + library is relocated]) +_LT_TAGDECL([], [hardcode_minus_L], [0], + [Set to "yes" if using the -LDIR flag during linking hardcodes DIR + into the resulting binary]) +_LT_TAGDECL([], [hardcode_shlibpath_var], [0], + [Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR + into the resulting binary]) +_LT_TAGDECL([], [hardcode_automatic], [0], + [Set to "yes" if building a shared library automatically hardcodes DIR + into the library and all subsequent libraries and executables linked + against it]) +_LT_TAGDECL([], [inherit_rpath], [0], + [Set to yes if linker adds runtime paths of dependent libraries + to runtime path list]) +_LT_TAGDECL([], [link_all_deplibs], [0], + [Whether libtool must link a program against all its dependency libraries]) +_LT_TAGDECL([], [always_export_symbols], [0], + [Set to "yes" if exported symbols are required]) +_LT_TAGDECL([], [export_symbols_cmds], [2], + [The commands to list exported symbols]) +_LT_TAGDECL([], [exclude_expsyms], [1], + [Symbols that should not be listed in the preloaded symbols]) +_LT_TAGDECL([], [include_expsyms], [1], + [Symbols that must always be exported]) +_LT_TAGDECL([], [prelink_cmds], [2], + [Commands necessary for linking programs (against libraries) with templates]) +_LT_TAGDECL([], [postlink_cmds], [2], + [Commands necessary for finishing linking programs]) +_LT_TAGDECL([], [file_list_spec], [1], + [Specify filename containing input files]) +dnl FIXME: Not yet implemented +dnl _LT_TAGDECL([], [thread_safe_flag_spec], [1], +dnl [Compiler flag to generate thread safe objects]) +])# _LT_LINKER_SHLIBS + + +# _LT_LANG_C_CONFIG([TAG]) +# ------------------------ +# Ensure that the configuration variables for a C compiler are suitably +# defined. These variables are subsequently used by _LT_CONFIG to write +# the compiler configuration to 'libtool'. +m4_defun([_LT_LANG_C_CONFIG], +[m4_require([_LT_DECL_EGREP])dnl +lt_save_CC=$CC +AC_LANG_PUSH(C) + +# Source file extension for C test sources. +ac_ext=c + +# Object file extension for compiled C test sources. +objext=o +_LT_TAGVAR(objext, $1)=$objext + +# Code to be used in simple compile tests +lt_simple_compile_test_code="int some_variable = 0;" + +# Code to be used in simple link tests +lt_simple_link_test_code='int main(){return(0);}' + +_LT_TAG_COMPILER +# Save the default compiler, since it gets overwritten when the other +# tags are being tested, and _LT_TAGVAR(compiler, []) is a NOP. +compiler_DEFAULT=$CC + +# save warnings/boilerplate of simple test code +_LT_COMPILER_BOILERPLATE +_LT_LINKER_BOILERPLATE + +## CAVEAT EMPTOR: +## There is no encapsulation within the following macros, do not change +## the running order or otherwise move them around unless you know exactly +## what you are doing... +if test -n "$compiler"; then + _LT_COMPILER_NO_RTTI($1) + _LT_COMPILER_PIC($1) + _LT_COMPILER_C_O($1) + _LT_COMPILER_FILE_LOCKS($1) + _LT_LINKER_SHLIBS($1) + _LT_SYS_DYNAMIC_LINKER($1) + _LT_LINKER_HARDCODE_LIBPATH($1) + LT_SYS_DLOPEN_SELF + _LT_CMD_STRIPLIB + + # Report what library types will actually be built + AC_MSG_CHECKING([if libtool supports shared libraries]) + AC_MSG_RESULT([$can_build_shared]) + + AC_MSG_CHECKING([whether to build shared libraries]) + test no = "$can_build_shared" && enable_shared=no + + # On AIX, shared libraries and static libraries use the same namespace, and + # are all built from PIC. + case $host_os in + aix3*) + test yes = "$enable_shared" && enable_static=no + if test -n "$RANLIB"; then + archive_cmds="$archive_cmds~\$RANLIB \$lib" + postinstall_cmds='$RANLIB $lib' + fi + ;; + + aix[[4-9]]*) + if test ia64 != "$host_cpu"; then + case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in + yes,aix,yes) ;; # shared object as lib.so file only + yes,svr4,*) ;; # shared object as lib.so archive member only + yes,*) enable_static=no ;; # shared object in lib.a archive as well + esac + fi + ;; + esac + AC_MSG_RESULT([$enable_shared]) + + AC_MSG_CHECKING([whether to build static libraries]) + # Make sure either enable_shared or enable_static is yes. + test yes = "$enable_shared" || enable_static=yes + AC_MSG_RESULT([$enable_static]) + + _LT_CONFIG($1) +fi +AC_LANG_POP +CC=$lt_save_CC +])# _LT_LANG_C_CONFIG + + +# _LT_LANG_CXX_CONFIG([TAG]) +# -------------------------- +# Ensure that the configuration variables for a C++ compiler are suitably +# defined. These variables are subsequently used by _LT_CONFIG to write +# the compiler configuration to 'libtool'. +m4_defun([_LT_LANG_CXX_CONFIG], +[m4_require([_LT_FILEUTILS_DEFAULTS])dnl +m4_require([_LT_DECL_EGREP])dnl +m4_require([_LT_PATH_MANIFEST_TOOL])dnl +if test -n "$CXX" && ( test no != "$CXX" && + ( (test g++ = "$CXX" && `g++ -v >/dev/null 2>&1` ) || + (test g++ != "$CXX"))); then + AC_PROG_CXXCPP +else + _lt_caught_CXX_error=yes +fi + +AC_LANG_PUSH(C++) +_LT_TAGVAR(archive_cmds_need_lc, $1)=no +_LT_TAGVAR(allow_undefined_flag, $1)= +_LT_TAGVAR(always_export_symbols, $1)=no +_LT_TAGVAR(archive_expsym_cmds, $1)= +_LT_TAGVAR(compiler_needs_object, $1)=no +_LT_TAGVAR(export_dynamic_flag_spec, $1)= +_LT_TAGVAR(hardcode_direct, $1)=no +_LT_TAGVAR(hardcode_direct_absolute, $1)=no +_LT_TAGVAR(hardcode_libdir_flag_spec, $1)= +_LT_TAGVAR(hardcode_libdir_separator, $1)= +_LT_TAGVAR(hardcode_minus_L, $1)=no +_LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported +_LT_TAGVAR(hardcode_automatic, $1)=no +_LT_TAGVAR(inherit_rpath, $1)=no +_LT_TAGVAR(module_cmds, $1)= +_LT_TAGVAR(module_expsym_cmds, $1)= +_LT_TAGVAR(link_all_deplibs, $1)=unknown +_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds +_LT_TAGVAR(reload_flag, $1)=$reload_flag +_LT_TAGVAR(reload_cmds, $1)=$reload_cmds +_LT_TAGVAR(no_undefined_flag, $1)= +_LT_TAGVAR(whole_archive_flag_spec, $1)= +_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no + +# Source file extension for C++ test sources. +ac_ext=cpp + +# Object file extension for compiled C++ test sources. +objext=o +_LT_TAGVAR(objext, $1)=$objext + +# No sense in running all these tests if we already determined that +# the CXX compiler isn't working. Some variables (like enable_shared) +# are currently assumed to apply to all compilers on this platform, +# and will be corrupted by setting them based on a non-working compiler. +if test yes != "$_lt_caught_CXX_error"; then + # Code to be used in simple compile tests + lt_simple_compile_test_code="int some_variable = 0;" + + # Code to be used in simple link tests + lt_simple_link_test_code='int main(int, char *[[]]) { return(0); }' + + # ltmain only uses $CC for tagged configurations so make sure $CC is set. + _LT_TAG_COMPILER + + # save warnings/boilerplate of simple test code + _LT_COMPILER_BOILERPLATE + _LT_LINKER_BOILERPLATE + + # Allow CC to be a program name with arguments. + lt_save_CC=$CC + lt_save_CFLAGS=$CFLAGS + lt_save_LD=$LD + lt_save_GCC=$GCC + GCC=$GXX + lt_save_with_gnu_ld=$with_gnu_ld + lt_save_path_LD=$lt_cv_path_LD + if test -n "${lt_cv_prog_gnu_ldcxx+set}"; then + lt_cv_prog_gnu_ld=$lt_cv_prog_gnu_ldcxx + else + $as_unset lt_cv_prog_gnu_ld + fi + if test -n "${lt_cv_path_LDCXX+set}"; then + lt_cv_path_LD=$lt_cv_path_LDCXX + else + $as_unset lt_cv_path_LD + fi + test -z "${LDCXX+set}" || LD=$LDCXX + CC=${CXX-"c++"} + CFLAGS=$CXXFLAGS + compiler=$CC + _LT_TAGVAR(compiler, $1)=$CC + _LT_CC_BASENAME([$compiler]) + + if test -n "$compiler"; then + # We don't want -fno-exception when compiling C++ code, so set the + # no_builtin_flag separately + if test yes = "$GXX"; then + _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -fno-builtin' + else + _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)= + fi + + if test yes = "$GXX"; then + # Set up default GNU C++ configuration + + LT_PATH_LD + + # Check if GNU C++ uses GNU ld as the underlying linker, since the + # archiving commands below assume that GNU ld is being used. + if test yes = "$with_gnu_ld"; then + _LT_TAGVAR(archive_cmds, $1)='$CC $pic_flag -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC $pic_flag -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' + + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' + + # If archive_cmds runs LD, not CC, wlarc should be empty + # XXX I think wlarc can be eliminated in ltcf-cxx, but I need to + # investigate it a little bit more. (MM) + wlarc='$wl' + + # ancient GNU ld didn't support --whole-archive et. al. + if eval "`$CC -print-prog-name=ld` --help 2>&1" | + $GREP 'no-whole-archive' > /dev/null; then + _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive' + else + _LT_TAGVAR(whole_archive_flag_spec, $1)= + fi + else + with_gnu_ld=no + wlarc= + + # A generic and very simple default shared library creation + # command for GNU C++ for the case where it uses the native + # linker, instead of GNU ld. If possible, this setting should + # overridden to take advantage of the native linker features on + # the platform it is being used on. + _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $lib' + fi + + # Commands to make compiler produce verbose output that lists + # what "hidden" libraries, object files and flags are used when + # linking a shared library. + output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"' + + else + GXX=no + with_gnu_ld=no + wlarc= + fi + + # PORTME: fill in a description of your system's C++ link characteristics + AC_MSG_CHECKING([whether the $compiler linker ($LD) supports shared libraries]) + _LT_TAGVAR(ld_shlibs, $1)=yes + case $host_os in + aix3*) + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + aix[[4-9]]*) + if test ia64 = "$host_cpu"; then + # On IA64, the linker does run time linking by default, so we don't + # have to do anything special. + aix_use_runtimelinking=no + exp_sym_flag='-Bexport' + no_entry_flag= + else + aix_use_runtimelinking=no + + # Test if we are trying to use run time linking or normal + # AIX style linking. If -brtl is somewhere in LDFLAGS, we + # have runtime linking enabled, and use it for executables. + # For shared libraries, we enable/disable runtime linking + # depending on the kind of the shared library created - + # when "with_aix_soname,aix_use_runtimelinking" is: + # "aix,no" lib.a(lib.so.V) shared, rtl:no, for executables + # "aix,yes" lib.so shared, rtl:yes, for executables + # lib.a static archive + # "both,no" lib.so.V(shr.o) shared, rtl:yes + # lib.a(lib.so.V) shared, rtl:no, for executables + # "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables + # lib.a(lib.so.V) shared, rtl:no + # "svr4,*" lib.so.V(shr.o) shared, rtl:yes, for executables + # lib.a static archive + case $host_os in aix4.[[23]]|aix4.[[23]].*|aix[[5-9]]*) + for ld_flag in $LDFLAGS; do + case $ld_flag in + *-brtl*) + aix_use_runtimelinking=yes + break + ;; + esac + done + if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then + # With aix-soname=svr4, we create the lib.so.V shared archives only, + # so we don't have lib.a shared libs to link our executables. + # We have to force runtime linking in this case. + aix_use_runtimelinking=yes + LDFLAGS="$LDFLAGS -Wl,-brtl" + fi + ;; + esac + + exp_sym_flag='-bexport' + no_entry_flag='-bnoentry' + fi + + # When large executables or shared objects are built, AIX ld can + # have problems creating the table of contents. If linking a library + # or program results in "error TOC overflow" add -mminimal-toc to + # CXXFLAGS/CFLAGS for g++/gcc. In the cases where that is not + # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS. + + _LT_TAGVAR(archive_cmds, $1)='' + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_direct_absolute, $1)=yes + _LT_TAGVAR(hardcode_libdir_separator, $1)=':' + _LT_TAGVAR(link_all_deplibs, $1)=yes + _LT_TAGVAR(file_list_spec, $1)='$wl-f,' + case $with_aix_soname,$aix_use_runtimelinking in + aix,*) ;; # no import file + svr4,* | *,yes) # use import file + # The Import File defines what to hardcode. + _LT_TAGVAR(hardcode_direct, $1)=no + _LT_TAGVAR(hardcode_direct_absolute, $1)=no + ;; + esac + + if test yes = "$GXX"; then + case $host_os in aix4.[[012]]|aix4.[[012]].*) + # We only want to do this on AIX 4.2 and lower, the check + # below for broken collect2 doesn't work under 4.3+ + collect2name=`$CC -print-prog-name=collect2` + if test -f "$collect2name" && + strings "$collect2name" | $GREP resolve_lib_name >/dev/null + then + # We have reworked collect2 + : + else + # We have old collect2 + _LT_TAGVAR(hardcode_direct, $1)=unsupported + # It fails to find uninstalled libraries when the uninstalled + # path is not listed in the libpath. Setting hardcode_minus_L + # to unsupported forces relinking + _LT_TAGVAR(hardcode_minus_L, $1)=yes + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)= + fi + esac + shared_flag='-shared' + if test yes = "$aix_use_runtimelinking"; then + shared_flag=$shared_flag' $wl-G' + fi + # Need to ensure runtime linking is disabled for the traditional + # shared library, or the linker may eventually find shared libraries + # /with/ Import File - we do not want to mix them. + shared_flag_aix='-shared' + shared_flag_svr4='-shared $wl-G' + else + # not using gcc + if test ia64 = "$host_cpu"; then + # VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release + # chokes on -Wl,-G. The following line is correct: + shared_flag='-G' + else + if test yes = "$aix_use_runtimelinking"; then + shared_flag='$wl-G' + else + shared_flag='$wl-bM:SRE' + fi + shared_flag_aix='$wl-bM:SRE' + shared_flag_svr4='$wl-G' + fi + fi + + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-bexpall' + # It seems that -bexpall does not export symbols beginning with + # underscore (_), so it is better to generate a list of symbols to + # export. + _LT_TAGVAR(always_export_symbols, $1)=yes + if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then + # Warning - without using the other runtime loading flags (-brtl), + # -berok will link without error, but may produce a broken library. + # The "-G" linker flag allows undefined symbols. + _LT_TAGVAR(no_undefined_flag, $1)='-bernotok' + # Determine the default libpath from the value encoded in an empty + # executable. + _LT_SYS_MODULE_PATH_AIX([$1]) + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath" + + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag + else + if test ia64 = "$host_cpu"; then + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $libdir:/usr/lib:/lib' + _LT_TAGVAR(allow_undefined_flag, $1)="-z nodefs" + _LT_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols" + else + # Determine the default libpath from the value encoded in an + # empty executable. + _LT_SYS_MODULE_PATH_AIX([$1]) + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath" + # Warning - without using the other run time loading flags, + # -berok will link without error, but may produce a broken library. + _LT_TAGVAR(no_undefined_flag, $1)=' $wl-bernotok' + _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-berok' + if test yes = "$with_gnu_ld"; then + # We only use this code for GNU lds that support --whole-archive. + _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive' + else + # Exported symbols can be pulled into shared objects from archives + _LT_TAGVAR(whole_archive_flag_spec, $1)='$convenience' + fi + _LT_TAGVAR(archive_cmds_need_lc, $1)=yes + _LT_TAGVAR(archive_expsym_cmds, $1)='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d' + # -brtl affects multiple linker settings, -berok does not and is overridden later + compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([[, ]]\\)%-berok\\1%g"`' + if test svr4 != "$with_aix_soname"; then + # This is similar to how AIX traditionally builds its shared + # libraries. Need -bnortl late, we may have -brtl in LDFLAGS. + _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname' + fi + if test aix != "$with_aix_soname"; then + _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp' + else + # used by -dlpreopen to get the symbols + _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$MV $output_objdir/$realname.d/$soname $output_objdir' + fi + _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$RM -r $output_objdir/$realname.d' + fi + fi + ;; + + beos*) + if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then + _LT_TAGVAR(allow_undefined_flag, $1)=unsupported + # Joseph Beckenbach says some releases of gcc + # support --undefined. This deserves some investigation. FIXME + _LT_TAGVAR(archive_cmds, $1)='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' + else + _LT_TAGVAR(ld_shlibs, $1)=no + fi + ;; + + chorus*) + case $cc_basename in + *) + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + esac + ;; + + cygwin* | mingw* | pw32* | cegcc*) + case $GXX,$cc_basename in + ,cl* | no,cl* | ,icl* | no,icl*) + # Native MSVC or ICC + # hardcode_libdir_flag_spec is actually meaningless, as there is + # no search path for DLLs. + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' ' + _LT_TAGVAR(allow_undefined_flag, $1)=unsupported + _LT_TAGVAR(always_export_symbols, $1)=yes + _LT_TAGVAR(file_list_spec, $1)='@' + # Tell ltmain to make .lib files, not .a files. + libext=lib + # Tell ltmain to make .dll files, not .so files. + shrext_cmds=.dll + # FIXME: Setting linknames here is a bad hack. + _LT_TAGVAR(archive_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames=' + _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then + cp "$export_symbols" "$output_objdir/$soname.def"; + echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp"; + else + $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp; + fi~ + $CC -o $tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~ + linknames=' + # The linker will not automatically build a static lib if we build a DLL. + # _LT_TAGVAR(old_archive_from_new_cmds, $1)='true' + _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes + # Don't use ranlib + _LT_TAGVAR(old_postinstall_cmds, $1)='chmod 644 $oldlib' + _LT_TAGVAR(postlink_cmds, $1)='lt_outputfile="@OUTPUT@"~ + lt_tool_outputfile="@TOOL_OUTPUT@"~ + case $lt_outputfile in + *.exe|*.EXE) ;; + *) + lt_outputfile=$lt_outputfile.exe + lt_tool_outputfile=$lt_tool_outputfile.exe + ;; + esac~ + func_to_tool_file "$lt_outputfile"~ + if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then + $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1; + $RM "$lt_outputfile.manifest"; + fi' + ;; + *) + # g++ + # _LT_TAGVAR(hardcode_libdir_flag_spec, $1) is actually meaningless, + # as there is no search path for DLLs. + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-all-symbols' + _LT_TAGVAR(allow_undefined_flag, $1)=unsupported + _LT_TAGVAR(always_export_symbols, $1)=no + _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes + + if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then + _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' + # If the export-symbols file already is a .def file, use it as + # is; otherwise, prepend EXPORTS... + _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then + cp $export_symbols $output_objdir/$soname.def; + else + echo EXPORTS > $output_objdir/$soname.def; + cat $export_symbols >> $output_objdir/$soname.def; + fi~ + $CC -shared -nostdlib $output_objdir/$soname.def $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' + else + _LT_TAGVAR(ld_shlibs, $1)=no + fi + ;; + esac + ;; + darwin* | rhapsody*) + _LT_DARWIN_LINKER_FEATURES($1) + ;; + + os2*) + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' + _LT_TAGVAR(hardcode_minus_L, $1)=yes + _LT_TAGVAR(allow_undefined_flag, $1)=unsupported + shrext_cmds=.dll + _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ + $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ + $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ + $ECHO EXPORTS >> $output_objdir/$libname.def~ + emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~ + $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ + emximp -o $lib $output_objdir/$libname.def' + _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ + $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ + $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ + $ECHO EXPORTS >> $output_objdir/$libname.def~ + prefix_cmds="$SED"~ + if test EXPORTS = "`$SED 1q $export_symbols`"; then + prefix_cmds="$prefix_cmds -e 1d"; + fi~ + prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~ + cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~ + $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ + emximp -o $lib $output_objdir/$libname.def' + _LT_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def' + _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes + _LT_TAGVAR(file_list_spec, $1)='@' + ;; + + dgux*) + case $cc_basename in + ec++*) + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + ghcx*) + # Green Hills C++ Compiler + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + *) + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + esac + ;; + + freebsd2.*) + # C++ shared libraries reported to be fairly broken before + # switch to ELF + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + + freebsd-elf*) + _LT_TAGVAR(archive_cmds_need_lc, $1)=no + ;; + + freebsd* | dragonfly* | midnightbsd*) + # FreeBSD 3 and later use GNU C++ and GNU ld with standard ELF + # conventions + _LT_TAGVAR(ld_shlibs, $1)=yes + ;; + + haiku*) + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' + _LT_TAGVAR(link_all_deplibs, $1)=yes + ;; + + hpux9*) + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)=: + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_minus_L, $1)=yes # Not in the search PATH, + # but as the default + # location of the library. + + case $cc_basename in + CC*) + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + aCC*) + _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -b $wl+b $wl$install_libdir -o $output_objdir/$soname $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' + # Commands to make compiler produce verbose output that lists + # what "hidden" libraries, object files and flags are used when + # linking a shared library. + # + # There doesn't appear to be a way to prevent this compiler from + # explicitly linking system object files so we need to strip them + # from the output so that they don't get included in the library + # dependencies. + output_verbose_link_cmd='templist=`($CC -b $CFLAGS -v conftest.$objext 2>&1) | $EGREP "\-L"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"' + ;; + *) + if test yes = "$GXX"; then + _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -shared -nostdlib $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' + else + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + fi + ;; + esac + ;; + + hpux10*|hpux11*) + if test no = "$with_gnu_ld"; then + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)=: + + case $host_cpu in + hppa*64*|ia64*) + ;; + *) + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' + ;; + esac + fi + case $host_cpu in + hppa*64*|ia64*) + _LT_TAGVAR(hardcode_direct, $1)=no + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + ;; + *) + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_direct_absolute, $1)=yes + _LT_TAGVAR(hardcode_minus_L, $1)=yes # Not in the search PATH, + # but as the default + # location of the library. + ;; + esac + + case $cc_basename in + CC*) + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + aCC*) + case $host_cpu in + hppa*64*) + _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' + ;; + ia64*) + _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' + ;; + *) + _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' + ;; + esac + # Commands to make compiler produce verbose output that lists + # what "hidden" libraries, object files and flags are used when + # linking a shared library. + # + # There doesn't appear to be a way to prevent this compiler from + # explicitly linking system object files so we need to strip them + # from the output so that they don't get included in the library + # dependencies. + output_verbose_link_cmd='templist=`($CC -b $CFLAGS -v conftest.$objext 2>&1) | $GREP "\-L"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"' + ;; + *) + if test yes = "$GXX"; then + if test no = "$with_gnu_ld"; then + case $host_cpu in + hppa*64*) + _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib -fPIC $wl+h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' + ;; + ia64*) + _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' + ;; + *) + _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' + ;; + esac + fi + else + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + fi + ;; + esac + ;; + + interix[[3-9]]*) + _LT_TAGVAR(hardcode_direct, $1)=no + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' + # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc. + # Instead, shared libraries are loaded at an image base (0x10000000 by + # default) and relocated if they conflict, which is a slow very memory + # consuming and fragmenting process. To avoid this, we pick a random, + # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link + # time. Moving up from 0x10000000 also allows more sbrk(2) space. + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' + ;; + irix5* | irix6*) + case $cc_basename in + CC*) + # SGI C++ + _LT_TAGVAR(archive_cmds, $1)='$CC -shared -all -multigot $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' + + # Archives containing C++ object files must be created using + # "CC -ar", where "CC" is the IRIX C++ compiler. This is + # necessary to make sure instantiated templates are included + # in the archive. + _LT_TAGVAR(old_archive_cmds, $1)='$CC -ar -WR,-u -o $oldlib $oldobjs' + ;; + *) + if test yes = "$GXX"; then + if test no = "$with_gnu_ld"; then + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' + else + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` -o $lib' + fi + fi + _LT_TAGVAR(link_all_deplibs, $1)=yes + ;; + esac + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)=: + _LT_TAGVAR(inherit_rpath, $1)=yes + ;; + + linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) + case $cc_basename in + KCC*) + # Kuck and Associates, Inc. (KAI) C++ Compiler + + # KCC will only create a shared library if the output file + # ends with ".so" (or ".sl" for HP-UX), so rename the library + # to its proper name (with version) after linking. + _LT_TAGVAR(archive_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib; mv \$templib $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib $wl-retain-symbols-file,$export_symbols; mv \$templib $lib' + # Commands to make compiler produce verbose output that lists + # what "hidden" libraries, object files and flags are used when + # linking a shared library. + # + # There doesn't appear to be a way to prevent this compiler from + # explicitly linking system object files so we need to strip them + # from the output so that they don't get included in the library + # dependencies. + output_verbose_link_cmd='templist=`$CC $CFLAGS -v conftest.$objext -o libconftest$shared_ext 2>&1 | $GREP "ld"`; rm -f libconftest$shared_ext; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"' + + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' + + # Archives containing C++ object files must be created using + # "CC -Bstatic", where "CC" is the KAI C++ compiler. + _LT_TAGVAR(old_archive_cmds, $1)='$CC -Bstatic -o $oldlib $oldobjs' + ;; + icpc* | ecpc* ) + # Intel C++ + with_gnu_ld=yes + # version 8.0 and above of icpc choke on multiply defined symbols + # if we add $predep_objects and $postdep_objects, however 7.1 and + # earlier do not add the objects themselves. + case `$CC -V 2>&1` in + *"Version 7."*) + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' + ;; + *) # Version 8.0 or newer + tmp_idyn= + case $host_cpu in + ia64*) tmp_idyn=' -i_dynamic';; + esac + _LT_TAGVAR(archive_cmds, $1)='$CC -shared'"$tmp_idyn"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared'"$tmp_idyn"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' + ;; + esac + _LT_TAGVAR(archive_cmds_need_lc, $1)=no + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' + _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive' + ;; + pgCC* | pgcpp*) + # Portland Group C++ compiler + case `$CC -V` in + *pgCC\ [[1-5]].* | *pgcpp\ [[1-5]].*) + _LT_TAGVAR(prelink_cmds, $1)='tpldir=Template.dir~ + rm -rf $tpldir~ + $CC --prelink_objects --instantiation_dir $tpldir $objs $libobjs $compile_deplibs~ + compile_command="$compile_command `find $tpldir -name \*.o | sort | $NL2SP`"' + _LT_TAGVAR(old_archive_cmds, $1)='tpldir=Template.dir~ + rm -rf $tpldir~ + $CC --prelink_objects --instantiation_dir $tpldir $oldobjs$old_deplibs~ + $AR $AR_FLAGS $oldlib$oldobjs$old_deplibs `find $tpldir -name \*.o | sort | $NL2SP`~ + $RANLIB $oldlib' + _LT_TAGVAR(archive_cmds, $1)='tpldir=Template.dir~ + rm -rf $tpldir~ + $CC --prelink_objects --instantiation_dir $tpldir $predep_objects $libobjs $deplibs $convenience $postdep_objects~ + $CC -shared $pic_flag $predep_objects $libobjs $deplibs `find $tpldir -name \*.o | sort | $NL2SP` $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='tpldir=Template.dir~ + rm -rf $tpldir~ + $CC --prelink_objects --instantiation_dir $tpldir $predep_objects $libobjs $deplibs $convenience $postdep_objects~ + $CC -shared $pic_flag $predep_objects $libobjs $deplibs `find $tpldir -name \*.o | sort | $NL2SP` $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' + ;; + *) # Version 6 and above use weak symbols + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' + ;; + esac + + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl--rpath $wl$libdir' + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' + _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' + ;; + cxx*) + # Compaq C++ + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib $wl-retain-symbols-file $wl$export_symbols' + + runpath_var=LD_RUN_PATH + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)=: + + # Commands to make compiler produce verbose output that lists + # what "hidden" libraries, object files and flags are used when + # linking a shared library. + # + # There doesn't appear to be a way to prevent this compiler from + # explicitly linking system object files so we need to strip them + # from the output so that they don't get included in the library + # dependencies. + output_verbose_link_cmd='templist=`$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP "ld"`; templist=`func_echo_all "$templist" | $SED "s/\(^.*ld.*\)\( .*ld .*$\)/\1/"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "X$list" | $Xsed' + ;; + xl* | mpixl* | bgxl*) + # IBM XL 8.0 on PPC, with GNU ld + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' + _LT_TAGVAR(archive_cmds, $1)='$CC -qmkshrobj $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' + if test yes = "$supports_anon_versioning"; then + _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~ + cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~ + echo "local: *; };" >> $output_objdir/$libname.ver~ + $CC -qmkshrobj $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib' + fi + ;; + *) + case `$CC -V 2>&1 | $SED 5q` in + *Sun\ C*) + # Sun C++ 5.9 + _LT_TAGVAR(no_undefined_flag, $1)=' -zdefs' + _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-retain-symbols-file $wl$export_symbols' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' + _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' + _LT_TAGVAR(compiler_needs_object, $1)=yes + + # Not sure whether something based on + # $CC $CFLAGS -v conftest.$objext -o libconftest$shared_ext 2>&1 + # would be better. + output_verbose_link_cmd='func_echo_all' + + # Archives containing C++ object files must be created using + # "CC -xar", where "CC" is the Sun C++ compiler. This is + # necessary to make sure instantiated templates are included + # in the archive. + _LT_TAGVAR(old_archive_cmds, $1)='$CC -xar -o $oldlib $oldobjs' + ;; + esac + ;; + esac + ;; + + lynxos*) + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + + m88k*) + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + + mvs*) + case $cc_basename in + cxx*) + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + *) + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + esac + ;; + + netbsd*) + if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then + _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $predep_objects $libobjs $deplibs $postdep_objects $linker_flags' + wlarc= + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + fi + # Workaround some broken pre-1.5 toolchains + output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP conftest.$objext | $SED -e "s:-lgcc -lc -lgcc::"' + ;; + + *nto* | *qnx*) + _LT_TAGVAR(ld_shlibs, $1)=yes + ;; + + openbsd* | bitrig*) + if test -f /usr/libexec/ld.so; then + _LT_TAGVAR(hardcode_direct, $1)=yes + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + _LT_TAGVAR(hardcode_direct_absolute, $1)=yes + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $lib' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' + if test -z "`echo __ELF__ | $CC -E - | grep __ELF__`"; then + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-retain-symbols-file,$export_symbols -o $lib' + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' + _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive' + fi + output_verbose_link_cmd=func_echo_all + else + _LT_TAGVAR(ld_shlibs, $1)=no + fi + ;; + + osf3* | osf4* | osf5*) + case $cc_basename in + KCC*) + # Kuck and Associates, Inc. (KAI) C++ Compiler + + # KCC will only create a shared library if the output file + # ends with ".so" (or ".sl" for HP-UX), so rename the library + # to its proper name (with version) after linking. + _LT_TAGVAR(archive_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo "$lib" | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib; mv \$templib $lib' + + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)=: + + # Archives containing C++ object files must be created using + # the KAI C++ compiler. + case $host in + osf3*) _LT_TAGVAR(old_archive_cmds, $1)='$CC -Bstatic -o $oldlib $oldobjs' ;; + *) _LT_TAGVAR(old_archive_cmds, $1)='$CC -o $oldlib $oldobjs' ;; + esac + ;; + RCC*) + # Rational C++ 2.4.1 + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + cxx*) + case $host in + osf3*) + _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*' + _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $soname `test -n "$verstring" && func_echo_all "$wl-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' + ;; + *) + _LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*' + _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done~ + echo "-hidden">> $lib.exp~ + $CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -msym -soname $soname $wl-input $wl$lib.exp `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~ + $RM $lib.exp' + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir' + ;; + esac + + _LT_TAGVAR(hardcode_libdir_separator, $1)=: + + # Commands to make compiler produce verbose output that lists + # what "hidden" libraries, object files and flags are used when + # linking a shared library. + # + # There doesn't appear to be a way to prevent this compiler from + # explicitly linking system object files so we need to strip them + # from the output so that they don't get included in the library + # dependencies. + output_verbose_link_cmd='templist=`$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP "ld" | $GREP -v "ld:"`; templist=`func_echo_all "$templist" | $SED "s/\(^.*ld.*\)\( .*ld.*$\)/\1/"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"' + ;; + *) + if test yes,no = "$GXX,$with_gnu_ld"; then + _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*' + case $host in + osf3*) + _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' + ;; + *) + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' + ;; + esac + + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)=: + + # Commands to make compiler produce verbose output that lists + # what "hidden" libraries, object files and flags are used when + # linking a shared library. + output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"' + + else + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + fi + ;; + esac + ;; + + psos*) + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + + sunos4*) + case $cc_basename in + CC*) + # Sun C++ 4.x + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + lcc*) + # Lucid + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + *) + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + esac + ;; + + solaris*) + case $cc_basename in + CC* | sunCC*) + # Sun C++ 4.2, 5.x and Centerline C++ + _LT_TAGVAR(archive_cmds_need_lc,$1)=yes + _LT_TAGVAR(no_undefined_flag, $1)=' -zdefs' + _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' + _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ + $CC -G$allow_undefined_flag $wl-M $wl$lib.exp -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp' + + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + case $host_os in + solaris2.[[0-5]] | solaris2.[[0-5]].*) ;; + *) + # The compiler driver will combine and reorder linker options, + # but understands '-z linker_flag'. + # Supported since Solaris 2.6 (maybe 2.5.1?) + _LT_TAGVAR(whole_archive_flag_spec, $1)='-z allextract$convenience -z defaultextract' + ;; + esac + _LT_TAGVAR(link_all_deplibs, $1)=yes + + output_verbose_link_cmd='func_echo_all' + + # Archives containing C++ object files must be created using + # "CC -xar", where "CC" is the Sun C++ compiler. This is + # necessary to make sure instantiated templates are included + # in the archive. + _LT_TAGVAR(old_archive_cmds, $1)='$CC -xar -o $oldlib $oldobjs' + ;; + gcx*) + # Green Hills C++ Compiler + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib' + + # The C++ compiler must be used to create the archive. + _LT_TAGVAR(old_archive_cmds, $1)='$CC $LDFLAGS -archive -o $oldlib $oldobjs' + ;; + *) + # GNU C++ compiler with Solaris linker + if test yes,no = "$GXX,$with_gnu_ld"; then + _LT_TAGVAR(no_undefined_flag, $1)=' $wl-z ${wl}defs' + if $CC --version | $GREP -v '^2\.7' > /dev/null; then + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ + $CC -shared $pic_flag -nostdlib $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp' + + # Commands to make compiler produce verbose output that lists + # what "hidden" libraries, object files and flags are used when + # linking a shared library. + output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"' + else + # g++ 2.7 appears to require '-G' NOT '-shared' on this + # platform. + _LT_TAGVAR(archive_cmds, $1)='$CC -G -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib' + _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ + $CC -G -nostdlib $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp' + + # Commands to make compiler produce verbose output that lists + # what "hidden" libraries, object files and flags are used when + # linking a shared library. + output_verbose_link_cmd='$CC -G $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"' + fi + + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $wl$libdir' + case $host_os in + solaris2.[[0-5]] | solaris2.[[0-5]].*) ;; + *) + _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract' + ;; + esac + fi + ;; + esac + ;; + + sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[[01]].[[10]]* | unixware7* | sco3.2v5.0.[[024]]*) + _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text' + _LT_TAGVAR(archive_cmds_need_lc, $1)=no + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + runpath_var='LD_RUN_PATH' + + case $cc_basename in + CC*) + _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + ;; + *) + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + ;; + esac + ;; + + sysv5* | sco3.2v5* | sco5v6*) + # Note: We CANNOT use -z defs as we might desire, because we do not + # link with -lc, and that would cause any symbols used from libc to + # always be unresolved, which means just about no library would + # ever link correctly. If we're not using GNU ld we use -z text + # though, which does catch some bad symbols but isn't as heavy-handed + # as -z defs. + _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text' + _LT_TAGVAR(allow_undefined_flag, $1)='$wl-z,nodefs' + _LT_TAGVAR(archive_cmds_need_lc, $1)=no + _LT_TAGVAR(hardcode_shlibpath_var, $1)=no + _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R,$libdir' + _LT_TAGVAR(hardcode_libdir_separator, $1)=':' + _LT_TAGVAR(link_all_deplibs, $1)=yes + _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Bexport' + runpath_var='LD_RUN_PATH' + + case $cc_basename in + CC*) + _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + _LT_TAGVAR(old_archive_cmds, $1)='$CC -Tprelink_objects $oldobjs~ + '"$_LT_TAGVAR(old_archive_cmds, $1)" + _LT_TAGVAR(reload_cmds, $1)='$CC -Tprelink_objects $reload_objs~ + '"$_LT_TAGVAR(reload_cmds, $1)" + ;; + *) + _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' + ;; + esac + ;; + + tandem*) + case $cc_basename in + NCC*) + # NonStop-UX NCC 3.20 + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + *) + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + esac + ;; + + vxworks*) + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + + *) + # FIXME: insert proper C++ library support + _LT_TAGVAR(ld_shlibs, $1)=no + ;; + esac + + AC_MSG_RESULT([$_LT_TAGVAR(ld_shlibs, $1)]) + test no = "$_LT_TAGVAR(ld_shlibs, $1)" && can_build_shared=no + + _LT_TAGVAR(GCC, $1)=$GXX + _LT_TAGVAR(LD, $1)=$LD + + ## CAVEAT EMPTOR: + ## There is no encapsulation within the following macros, do not change + ## the running order or otherwise move them around unless you know exactly + ## what you are doing... + _LT_SYS_HIDDEN_LIBDEPS($1) + _LT_COMPILER_PIC($1) + _LT_COMPILER_C_O($1) + _LT_COMPILER_FILE_LOCKS($1) + _LT_LINKER_SHLIBS($1) + _LT_SYS_DYNAMIC_LINKER($1) + _LT_LINKER_HARDCODE_LIBPATH($1) + + _LT_CONFIG($1) + fi # test -n "$compiler" + + CC=$lt_save_CC + CFLAGS=$lt_save_CFLAGS + LDCXX=$LD + LD=$lt_save_LD + GCC=$lt_save_GCC + with_gnu_ld=$lt_save_with_gnu_ld + lt_cv_path_LDCXX=$lt_cv_path_LD + lt_cv_path_LD=$lt_save_path_LD + lt_cv_prog_gnu_ldcxx=$lt_cv_prog_gnu_ld + lt_cv_prog_gnu_ld=$lt_save_with_gnu_ld +fi # test yes != "$_lt_caught_CXX_error" + +AC_LANG_POP +])# _LT_LANG_CXX_CONFIG + + +# _LT_FUNC_STRIPNAME_CNF +# ---------------------- +# func_stripname_cnf prefix suffix name +# strip PREFIX and SUFFIX off of NAME. +# PREFIX and SUFFIX must not contain globbing or regex special +# characters, hashes, percent signs, but SUFFIX may contain a leading +# dot (in which case that matches only a dot). +# +# This function is identical to the (non-XSI) version of func_stripname, +# except this one can be used by m4 code that may be executed by configure, +# rather than the libtool script. +m4_defun([_LT_FUNC_STRIPNAME_CNF],[dnl +AC_REQUIRE([_LT_DECL_SED]) +AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH]) +func_stripname_cnf () +{ + case @S|@2 in + .*) func_stripname_result=`$ECHO "@S|@3" | $SED "s%^@S|@1%%; s%\\\\@S|@2\$%%"`;; + *) func_stripname_result=`$ECHO "@S|@3" | $SED "s%^@S|@1%%; s%@S|@2\$%%"`;; + esac +} # func_stripname_cnf +])# _LT_FUNC_STRIPNAME_CNF + + +# _LT_SYS_HIDDEN_LIBDEPS([TAGNAME]) +# --------------------------------- +# Figure out "hidden" library dependencies from verbose +# compiler output when linking a shared library. +# Parse the compiler output and extract the necessary +# objects, libraries and library flags. +m4_defun([_LT_SYS_HIDDEN_LIBDEPS], +[m4_require([_LT_FILEUTILS_DEFAULTS])dnl +AC_REQUIRE([_LT_FUNC_STRIPNAME_CNF])dnl +# Dependencies to place before and after the object being linked: +_LT_TAGVAR(predep_objects, $1)= +_LT_TAGVAR(postdep_objects, $1)= +_LT_TAGVAR(predeps, $1)= +_LT_TAGVAR(postdeps, $1)= +_LT_TAGVAR(compiler_lib_search_path, $1)= + +dnl we can't use the lt_simple_compile_test_code here, +dnl because it contains code intended for an executable, +dnl not a library. It's possible we should let each +dnl tag define a new lt_????_link_test_code variable, +dnl but it's only used here... +m4_if([$1], [], [cat > conftest.$ac_ext <<_LT_EOF +int a; +void foo (void) { a = 0; } +_LT_EOF +], [$1], [CXX], [cat > conftest.$ac_ext <<_LT_EOF +class Foo +{ +public: + Foo (void) { a = 0; } +private: + int a; +}; +_LT_EOF +], [$1], [F77], [cat > conftest.$ac_ext <<_LT_EOF + subroutine foo + implicit none + integer*4 a + a=0 + return + end +_LT_EOF +], [$1], [FC], [cat > conftest.$ac_ext <<_LT_EOF + subroutine foo + implicit none + integer a + a=0 + return + end +_LT_EOF +], [$1], [GCJ], [cat > conftest.$ac_ext <<_LT_EOF +public class foo { + private int a; + public void bar (void) { + a = 0; + } +}; +_LT_EOF +], [$1], [GO], [cat > conftest.$ac_ext <<_LT_EOF +package foo +func foo() { +} +_LT_EOF +]) + +_lt_libdeps_save_CFLAGS=$CFLAGS +case "$CC $CFLAGS " in #( +*\ -flto*\ *) CFLAGS="$CFLAGS -fno-lto" ;; +*\ -fwhopr*\ *) CFLAGS="$CFLAGS -fno-whopr" ;; +*\ -fuse-linker-plugin*\ *) CFLAGS="$CFLAGS -fno-use-linker-plugin" ;; +esac + +dnl Parse the compiler output and extract the necessary +dnl objects, libraries and library flags. +if AC_TRY_EVAL(ac_compile); then + # Parse the compiler output and extract the necessary + # objects, libraries and library flags. + + # Sentinel used to keep track of whether or not we are before + # the conftest object file. + pre_test_object_deps_done=no + + for p in `eval "$output_verbose_link_cmd"`; do + case $prev$p in + + -L* | -R* | -l*) + # Some compilers place space between "-{L,R}" and the path. + # Remove the space. + if test x-L = "$p" || + test x-R = "$p"; then + prev=$p + continue + fi + + # Expand the sysroot to ease extracting the directories later. + if test -z "$prev"; then + case $p in + -L*) func_stripname_cnf '-L' '' "$p"; prev=-L; p=$func_stripname_result ;; + -R*) func_stripname_cnf '-R' '' "$p"; prev=-R; p=$func_stripname_result ;; + -l*) func_stripname_cnf '-l' '' "$p"; prev=-l; p=$func_stripname_result ;; + esac + fi + case $p in + =*) func_stripname_cnf '=' '' "$p"; p=$lt_sysroot$func_stripname_result ;; + esac + if test no = "$pre_test_object_deps_done"; then + case $prev in + -L | -R) + # Internal compiler library paths should come after those + # provided the user. The postdeps already come after the + # user supplied libs so there is no need to process them. + if test -z "$_LT_TAGVAR(compiler_lib_search_path, $1)"; then + _LT_TAGVAR(compiler_lib_search_path, $1)=$prev$p + else + _LT_TAGVAR(compiler_lib_search_path, $1)="${_LT_TAGVAR(compiler_lib_search_path, $1)} $prev$p" + fi + ;; + # The "-l" case would never come before the object being + # linked, so don't bother handling this case. + esac + else + if test -z "$_LT_TAGVAR(postdeps, $1)"; then + _LT_TAGVAR(postdeps, $1)=$prev$p + else + _LT_TAGVAR(postdeps, $1)="${_LT_TAGVAR(postdeps, $1)} $prev$p" + fi + fi + prev= + ;; + + *.lto.$objext) ;; # Ignore GCC LTO objects + *.$objext) + # This assumes that the test object file only shows up + # once in the compiler output. + if test "$p" = "conftest.$objext"; then + pre_test_object_deps_done=yes + continue + fi + + if test no = "$pre_test_object_deps_done"; then + if test -z "$_LT_TAGVAR(predep_objects, $1)"; then + _LT_TAGVAR(predep_objects, $1)=$p + else + _LT_TAGVAR(predep_objects, $1)="$_LT_TAGVAR(predep_objects, $1) $p" + fi + else + if test -z "$_LT_TAGVAR(postdep_objects, $1)"; then + _LT_TAGVAR(postdep_objects, $1)=$p + else + _LT_TAGVAR(postdep_objects, $1)="$_LT_TAGVAR(postdep_objects, $1) $p" + fi + fi + ;; + + *) ;; # Ignore the rest. + + esac + done + + # Clean up. + rm -f a.out a.exe +else + echo "libtool.m4: error: problem compiling $1 test program" +fi + +$RM -f confest.$objext +CFLAGS=$_lt_libdeps_save_CFLAGS + +# PORTME: override above test on systems where it is broken +m4_if([$1], [CXX], +[case $host_os in +interix[[3-9]]*) + # Interix 3.5 installs completely hosed .la files for C++, so rather than + # hack all around it, let's just trust "g++" to DTRT. + _LT_TAGVAR(predep_objects,$1)= + _LT_TAGVAR(postdep_objects,$1)= + _LT_TAGVAR(postdeps,$1)= + ;; +esac +]) + +case " $_LT_TAGVAR(postdeps, $1) " in +*" -lc "*) _LT_TAGVAR(archive_cmds_need_lc, $1)=no ;; +esac + _LT_TAGVAR(compiler_lib_search_dirs, $1)= +if test -n "${_LT_TAGVAR(compiler_lib_search_path, $1)}"; then + _LT_TAGVAR(compiler_lib_search_dirs, $1)=`echo " ${_LT_TAGVAR(compiler_lib_search_path, $1)}" | $SED -e 's! -L! !g' -e 's!^ !!'` +fi +_LT_TAGDECL([], [compiler_lib_search_dirs], [1], + [The directories searched by this compiler when creating a shared library]) +_LT_TAGDECL([], [predep_objects], [1], + [Dependencies to place before and after the objects being linked to + create a shared library]) +_LT_TAGDECL([], [postdep_objects], [1]) +_LT_TAGDECL([], [predeps], [1]) +_LT_TAGDECL([], [postdeps], [1]) +_LT_TAGDECL([], [compiler_lib_search_path], [1], + [The library search path used internally by the compiler when linking + a shared library]) +])# _LT_SYS_HIDDEN_LIBDEPS + + +# _LT_LANG_F77_CONFIG([TAG]) +# -------------------------- +# Ensure that the configuration variables for a Fortran 77 compiler are +# suitably defined. These variables are subsequently used by _LT_CONFIG +# to write the compiler configuration to 'libtool'. +m4_defun([_LT_LANG_F77_CONFIG], +[AC_LANG_PUSH(Fortran 77) +if test -z "$F77" || test no = "$F77"; then + _lt_disable_F77=yes +fi + +_LT_TAGVAR(archive_cmds_need_lc, $1)=no +_LT_TAGVAR(allow_undefined_flag, $1)= +_LT_TAGVAR(always_export_symbols, $1)=no +_LT_TAGVAR(archive_expsym_cmds, $1)= +_LT_TAGVAR(export_dynamic_flag_spec, $1)= +_LT_TAGVAR(hardcode_direct, $1)=no +_LT_TAGVAR(hardcode_direct_absolute, $1)=no +_LT_TAGVAR(hardcode_libdir_flag_spec, $1)= +_LT_TAGVAR(hardcode_libdir_separator, $1)= +_LT_TAGVAR(hardcode_minus_L, $1)=no +_LT_TAGVAR(hardcode_automatic, $1)=no +_LT_TAGVAR(inherit_rpath, $1)=no +_LT_TAGVAR(module_cmds, $1)= +_LT_TAGVAR(module_expsym_cmds, $1)= +_LT_TAGVAR(link_all_deplibs, $1)=unknown +_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds +_LT_TAGVAR(reload_flag, $1)=$reload_flag +_LT_TAGVAR(reload_cmds, $1)=$reload_cmds +_LT_TAGVAR(no_undefined_flag, $1)= +_LT_TAGVAR(whole_archive_flag_spec, $1)= +_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no + +# Source file extension for f77 test sources. +ac_ext=f + +# Object file extension for compiled f77 test sources. +objext=o +_LT_TAGVAR(objext, $1)=$objext + +# No sense in running all these tests if we already determined that +# the F77 compiler isn't working. Some variables (like enable_shared) +# are currently assumed to apply to all compilers on this platform, +# and will be corrupted by setting them based on a non-working compiler. +if test yes != "$_lt_disable_F77"; then + # Code to be used in simple compile tests + lt_simple_compile_test_code="\ + subroutine t + return + end +" + + # Code to be used in simple link tests + lt_simple_link_test_code="\ + program t + end +" + + # ltmain only uses $CC for tagged configurations so make sure $CC is set. + _LT_TAG_COMPILER + + # save warnings/boilerplate of simple test code + _LT_COMPILER_BOILERPLATE + _LT_LINKER_BOILERPLATE + + # Allow CC to be a program name with arguments. + lt_save_CC=$CC + lt_save_GCC=$GCC + lt_save_CFLAGS=$CFLAGS + CC=${F77-"f77"} + CFLAGS=$FFLAGS + compiler=$CC + _LT_TAGVAR(compiler, $1)=$CC + _LT_CC_BASENAME([$compiler]) + GCC=$G77 + if test -n "$compiler"; then + AC_MSG_CHECKING([if libtool supports shared libraries]) + AC_MSG_RESULT([$can_build_shared]) + + AC_MSG_CHECKING([whether to build shared libraries]) + test no = "$can_build_shared" && enable_shared=no + + # On AIX, shared libraries and static libraries use the same namespace, and + # are all built from PIC. + case $host_os in + aix3*) + test yes = "$enable_shared" && enable_static=no + if test -n "$RANLIB"; then + archive_cmds="$archive_cmds~\$RANLIB \$lib" + postinstall_cmds='$RANLIB $lib' + fi + ;; + aix[[4-9]]*) + if test ia64 != "$host_cpu"; then + case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in + yes,aix,yes) ;; # shared object as lib.so file only + yes,svr4,*) ;; # shared object as lib.so archive member only + yes,*) enable_static=no ;; # shared object in lib.a archive as well + esac + fi + ;; + esac + AC_MSG_RESULT([$enable_shared]) + + AC_MSG_CHECKING([whether to build static libraries]) + # Make sure either enable_shared or enable_static is yes. + test yes = "$enable_shared" || enable_static=yes + AC_MSG_RESULT([$enable_static]) + + _LT_TAGVAR(GCC, $1)=$G77 + _LT_TAGVAR(LD, $1)=$LD + + ## CAVEAT EMPTOR: + ## There is no encapsulation within the following macros, do not change + ## the running order or otherwise move them around unless you know exactly + ## what you are doing... + _LT_COMPILER_PIC($1) + _LT_COMPILER_C_O($1) + _LT_COMPILER_FILE_LOCKS($1) + _LT_LINKER_SHLIBS($1) + _LT_SYS_DYNAMIC_LINKER($1) + _LT_LINKER_HARDCODE_LIBPATH($1) + + _LT_CONFIG($1) + fi # test -n "$compiler" + + GCC=$lt_save_GCC + CC=$lt_save_CC + CFLAGS=$lt_save_CFLAGS +fi # test yes != "$_lt_disable_F77" + +AC_LANG_POP +])# _LT_LANG_F77_CONFIG + + +# _LT_LANG_FC_CONFIG([TAG]) +# ------------------------- +# Ensure that the configuration variables for a Fortran compiler are +# suitably defined. These variables are subsequently used by _LT_CONFIG +# to write the compiler configuration to 'libtool'. +m4_defun([_LT_LANG_FC_CONFIG], +[AC_LANG_PUSH(Fortran) + +if test -z "$FC" || test no = "$FC"; then + _lt_disable_FC=yes +fi + +_LT_TAGVAR(archive_cmds_need_lc, $1)=no +_LT_TAGVAR(allow_undefined_flag, $1)= +_LT_TAGVAR(always_export_symbols, $1)=no +_LT_TAGVAR(archive_expsym_cmds, $1)= +_LT_TAGVAR(export_dynamic_flag_spec, $1)= +_LT_TAGVAR(hardcode_direct, $1)=no +_LT_TAGVAR(hardcode_direct_absolute, $1)=no +_LT_TAGVAR(hardcode_libdir_flag_spec, $1)= +_LT_TAGVAR(hardcode_libdir_separator, $1)= +_LT_TAGVAR(hardcode_minus_L, $1)=no +_LT_TAGVAR(hardcode_automatic, $1)=no +_LT_TAGVAR(inherit_rpath, $1)=no +_LT_TAGVAR(module_cmds, $1)= +_LT_TAGVAR(module_expsym_cmds, $1)= +_LT_TAGVAR(link_all_deplibs, $1)=unknown +_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds +_LT_TAGVAR(reload_flag, $1)=$reload_flag +_LT_TAGVAR(reload_cmds, $1)=$reload_cmds +_LT_TAGVAR(no_undefined_flag, $1)= +_LT_TAGVAR(whole_archive_flag_spec, $1)= +_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no + +# Source file extension for fc test sources. +ac_ext=${ac_fc_srcext-f} + +# Object file extension for compiled fc test sources. +objext=o +_LT_TAGVAR(objext, $1)=$objext + +# No sense in running all these tests if we already determined that +# the FC compiler isn't working. Some variables (like enable_shared) +# are currently assumed to apply to all compilers on this platform, +# and will be corrupted by setting them based on a non-working compiler. +if test yes != "$_lt_disable_FC"; then + # Code to be used in simple compile tests + lt_simple_compile_test_code="\ + subroutine t + return + end +" + + # Code to be used in simple link tests + lt_simple_link_test_code="\ + program t + end +" + + # ltmain only uses $CC for tagged configurations so make sure $CC is set. + _LT_TAG_COMPILER + + # save warnings/boilerplate of simple test code + _LT_COMPILER_BOILERPLATE + _LT_LINKER_BOILERPLATE + + # Allow CC to be a program name with arguments. + lt_save_CC=$CC + lt_save_GCC=$GCC + lt_save_CFLAGS=$CFLAGS + CC=${FC-"f95"} + CFLAGS=$FCFLAGS + compiler=$CC + GCC=$ac_cv_fc_compiler_gnu + + _LT_TAGVAR(compiler, $1)=$CC + _LT_CC_BASENAME([$compiler]) + + if test -n "$compiler"; then + AC_MSG_CHECKING([if libtool supports shared libraries]) + AC_MSG_RESULT([$can_build_shared]) + + AC_MSG_CHECKING([whether to build shared libraries]) + test no = "$can_build_shared" && enable_shared=no + + # On AIX, shared libraries and static libraries use the same namespace, and + # are all built from PIC. + case $host_os in + aix3*) + test yes = "$enable_shared" && enable_static=no + if test -n "$RANLIB"; then + archive_cmds="$archive_cmds~\$RANLIB \$lib" + postinstall_cmds='$RANLIB $lib' + fi + ;; + aix[[4-9]]*) + if test ia64 != "$host_cpu"; then + case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in + yes,aix,yes) ;; # shared object as lib.so file only + yes,svr4,*) ;; # shared object as lib.so archive member only + yes,*) enable_static=no ;; # shared object in lib.a archive as well + esac + fi + ;; + esac + AC_MSG_RESULT([$enable_shared]) + + AC_MSG_CHECKING([whether to build static libraries]) + # Make sure either enable_shared or enable_static is yes. + test yes = "$enable_shared" || enable_static=yes + AC_MSG_RESULT([$enable_static]) + + _LT_TAGVAR(GCC, $1)=$ac_cv_fc_compiler_gnu + _LT_TAGVAR(LD, $1)=$LD + + ## CAVEAT EMPTOR: + ## There is no encapsulation within the following macros, do not change + ## the running order or otherwise move them around unless you know exactly + ## what you are doing... + _LT_SYS_HIDDEN_LIBDEPS($1) + _LT_COMPILER_PIC($1) + _LT_COMPILER_C_O($1) + _LT_COMPILER_FILE_LOCKS($1) + _LT_LINKER_SHLIBS($1) + _LT_SYS_DYNAMIC_LINKER($1) + _LT_LINKER_HARDCODE_LIBPATH($1) + + _LT_CONFIG($1) + fi # test -n "$compiler" + + GCC=$lt_save_GCC + CC=$lt_save_CC + CFLAGS=$lt_save_CFLAGS +fi # test yes != "$_lt_disable_FC" + +AC_LANG_POP +])# _LT_LANG_FC_CONFIG + + +# _LT_LANG_GCJ_CONFIG([TAG]) +# -------------------------- +# Ensure that the configuration variables for the GNU Java Compiler compiler +# are suitably defined. These variables are subsequently used by _LT_CONFIG +# to write the compiler configuration to 'libtool'. +m4_defun([_LT_LANG_GCJ_CONFIG], +[AC_REQUIRE([LT_PROG_GCJ])dnl +AC_LANG_SAVE + +# Source file extension for Java test sources. +ac_ext=java + +# Object file extension for compiled Java test sources. +objext=o +_LT_TAGVAR(objext, $1)=$objext + +# Code to be used in simple compile tests +lt_simple_compile_test_code="class foo {}" + +# Code to be used in simple link tests +lt_simple_link_test_code='public class conftest { public static void main(String[[]] argv) {}; }' + +# ltmain only uses $CC for tagged configurations so make sure $CC is set. +_LT_TAG_COMPILER + +# save warnings/boilerplate of simple test code +_LT_COMPILER_BOILERPLATE +_LT_LINKER_BOILERPLATE + +# Allow CC to be a program name with arguments. +lt_save_CC=$CC +lt_save_CFLAGS=$CFLAGS +lt_save_GCC=$GCC +GCC=yes +CC=${GCJ-"gcj"} +CFLAGS=$GCJFLAGS +compiler=$CC +_LT_TAGVAR(compiler, $1)=$CC +_LT_TAGVAR(LD, $1)=$LD +_LT_CC_BASENAME([$compiler]) + +# GCJ did not exist at the time GCC didn't implicitly link libc in. +_LT_TAGVAR(archive_cmds_need_lc, $1)=no + +_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds +_LT_TAGVAR(reload_flag, $1)=$reload_flag +_LT_TAGVAR(reload_cmds, $1)=$reload_cmds + +## CAVEAT EMPTOR: +## There is no encapsulation within the following macros, do not change +## the running order or otherwise move them around unless you know exactly +## what you are doing... +if test -n "$compiler"; then + _LT_COMPILER_NO_RTTI($1) + _LT_COMPILER_PIC($1) + _LT_COMPILER_C_O($1) + _LT_COMPILER_FILE_LOCKS($1) + _LT_LINKER_SHLIBS($1) + _LT_LINKER_HARDCODE_LIBPATH($1) + + _LT_CONFIG($1) +fi + +AC_LANG_RESTORE + +GCC=$lt_save_GCC +CC=$lt_save_CC +CFLAGS=$lt_save_CFLAGS +])# _LT_LANG_GCJ_CONFIG + + +# _LT_LANG_GO_CONFIG([TAG]) +# -------------------------- +# Ensure that the configuration variables for the GNU Go compiler +# are suitably defined. These variables are subsequently used by _LT_CONFIG +# to write the compiler configuration to 'libtool'. +m4_defun([_LT_LANG_GO_CONFIG], +[AC_REQUIRE([LT_PROG_GO])dnl +AC_LANG_SAVE + +# Source file extension for Go test sources. +ac_ext=go + +# Object file extension for compiled Go test sources. +objext=o +_LT_TAGVAR(objext, $1)=$objext + +# Code to be used in simple compile tests +lt_simple_compile_test_code="package main; func main() { }" + +# Code to be used in simple link tests +lt_simple_link_test_code='package main; func main() { }' + +# ltmain only uses $CC for tagged configurations so make sure $CC is set. +_LT_TAG_COMPILER + +# save warnings/boilerplate of simple test code +_LT_COMPILER_BOILERPLATE +_LT_LINKER_BOILERPLATE + +# Allow CC to be a program name with arguments. +lt_save_CC=$CC +lt_save_CFLAGS=$CFLAGS +lt_save_GCC=$GCC +GCC=yes +CC=${GOC-"gccgo"} +CFLAGS=$GOFLAGS +compiler=$CC +_LT_TAGVAR(compiler, $1)=$CC +_LT_TAGVAR(LD, $1)=$LD +_LT_CC_BASENAME([$compiler]) + +# Go did not exist at the time GCC didn't implicitly link libc in. +_LT_TAGVAR(archive_cmds_need_lc, $1)=no + +_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds +_LT_TAGVAR(reload_flag, $1)=$reload_flag +_LT_TAGVAR(reload_cmds, $1)=$reload_cmds + +## CAVEAT EMPTOR: +## There is no encapsulation within the following macros, do not change +## the running order or otherwise move them around unless you know exactly +## what you are doing... +if test -n "$compiler"; then + _LT_COMPILER_NO_RTTI($1) + _LT_COMPILER_PIC($1) + _LT_COMPILER_C_O($1) + _LT_COMPILER_FILE_LOCKS($1) + _LT_LINKER_SHLIBS($1) + _LT_LINKER_HARDCODE_LIBPATH($1) + + _LT_CONFIG($1) +fi + +AC_LANG_RESTORE + +GCC=$lt_save_GCC +CC=$lt_save_CC +CFLAGS=$lt_save_CFLAGS +])# _LT_LANG_GO_CONFIG + + +# _LT_LANG_RC_CONFIG([TAG]) +# ------------------------- +# Ensure that the configuration variables for the Windows resource compiler +# are suitably defined. These variables are subsequently used by _LT_CONFIG +# to write the compiler configuration to 'libtool'. +m4_defun([_LT_LANG_RC_CONFIG], +[AC_REQUIRE([LT_PROG_RC])dnl +AC_LANG_SAVE + +# Source file extension for RC test sources. +ac_ext=rc + +# Object file extension for compiled RC test sources. +objext=o +_LT_TAGVAR(objext, $1)=$objext + +# Code to be used in simple compile tests +lt_simple_compile_test_code='sample MENU { MENUITEM "&Soup", 100, CHECKED }' + +# Code to be used in simple link tests +lt_simple_link_test_code=$lt_simple_compile_test_code + +# ltmain only uses $CC for tagged configurations so make sure $CC is set. +_LT_TAG_COMPILER + +# save warnings/boilerplate of simple test code +_LT_COMPILER_BOILERPLATE +_LT_LINKER_BOILERPLATE + +# Allow CC to be a program name with arguments. +lt_save_CC=$CC +lt_save_CFLAGS=$CFLAGS +lt_save_GCC=$GCC +GCC= +CC=${RC-"windres"} +CFLAGS= +compiler=$CC +_LT_TAGVAR(compiler, $1)=$CC +_LT_CC_BASENAME([$compiler]) +_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=yes + +if test -n "$compiler"; then + : + _LT_CONFIG($1) +fi + +GCC=$lt_save_GCC +AC_LANG_RESTORE +CC=$lt_save_CC +CFLAGS=$lt_save_CFLAGS +])# _LT_LANG_RC_CONFIG + + +# LT_PROG_GCJ +# ----------- +AC_DEFUN([LT_PROG_GCJ], +[m4_ifdef([AC_PROG_GCJ], [AC_PROG_GCJ], + [m4_ifdef([A][M_PROG_GCJ], [A][M_PROG_GCJ], + [AC_CHECK_TOOL(GCJ, gcj,) + test set = "${GCJFLAGS+set}" || GCJFLAGS="-g -O2" + AC_SUBST(GCJFLAGS)])])[]dnl +]) + +# Old name: +AU_ALIAS([LT_AC_PROG_GCJ], [LT_PROG_GCJ]) +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([LT_AC_PROG_GCJ], []) + + +# LT_PROG_GO +# ---------- +AC_DEFUN([LT_PROG_GO], +[AC_CHECK_TOOL(GOC, gccgo,) +]) + + +# LT_PROG_RC +# ---------- +AC_DEFUN([LT_PROG_RC], +[AC_CHECK_TOOL(RC, windres,) +]) + +# Old name: +AU_ALIAS([LT_AC_PROG_RC], [LT_PROG_RC]) +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([LT_AC_PROG_RC], []) + + +# _LT_DECL_EGREP +# -------------- +# If we don't have a new enough Autoconf to choose the best grep +# available, choose the one first in the user's PATH. +m4_defun([_LT_DECL_EGREP], +[AC_REQUIRE([AC_PROG_EGREP])dnl +AC_REQUIRE([AC_PROG_FGREP])dnl +test -z "$GREP" && GREP=grep +_LT_DECL([], [GREP], [1], [A grep program that handles long lines]) +_LT_DECL([], [EGREP], [1], [An ERE matcher]) +_LT_DECL([], [FGREP], [1], [A literal string matcher]) +dnl Non-bleeding-edge autoconf doesn't subst GREP, so do it here too +AC_SUBST([GREP]) +]) + + +# _LT_DECL_OBJDUMP +# -------------- +# If we don't have a new enough Autoconf to choose the best objdump +# available, choose the one first in the user's PATH. +m4_defun([_LT_DECL_OBJDUMP], +[AC_CHECK_TOOL(OBJDUMP, objdump, false) +test -z "$OBJDUMP" && OBJDUMP=objdump +_LT_DECL([], [OBJDUMP], [1], [An object symbol dumper]) +AC_SUBST([OBJDUMP]) +]) + +# _LT_DECL_DLLTOOL +# ---------------- +# Ensure DLLTOOL variable is set. +m4_defun([_LT_DECL_DLLTOOL], +[AC_CHECK_TOOL(DLLTOOL, dlltool, false) +test -z "$DLLTOOL" && DLLTOOL=dlltool +_LT_DECL([], [DLLTOOL], [1], [DLL creation program]) +AC_SUBST([DLLTOOL]) +]) + +# _LT_DECL_FILECMD +# ---------------- +# Check for a file(cmd) program that can be used to detect file type and magic +m4_defun([_LT_DECL_FILECMD], +[AC_CHECK_TOOL([FILECMD], [file], [:]) +_LT_DECL([], [FILECMD], [1], [A file(cmd) program that detects file types]) +])# _LD_DECL_FILECMD + +# _LT_DECL_SED +# ------------ +# Check for a fully-functional sed program, that truncates +# as few characters as possible. Prefer GNU sed if found. +m4_defun([_LT_DECL_SED], +[AC_PROG_SED +test -z "$SED" && SED=sed +Xsed="$SED -e 1s/^X//" +_LT_DECL([], [SED], [1], [A sed program that does not truncate output]) +_LT_DECL([], [Xsed], ["\$SED -e 1s/^X//"], + [Sed that helps us avoid accidentally triggering echo(1) options like -n]) +])# _LT_DECL_SED + +m4_ifndef([AC_PROG_SED], [ +############################################################ +# NOTE: This macro has been submitted for inclusion into # +# GNU Autoconf as AC_PROG_SED. When it is available in # +# a released version of Autoconf we should remove this # +# macro and use it instead. # +############################################################ + +m4_defun([AC_PROG_SED], +[AC_MSG_CHECKING([for a sed that does not truncate output]) +AC_CACHE_VAL(lt_cv_path_SED, +[# Loop through the user's path and test for sed and gsed. +# Then use that list of sed's as ones to test for truncation. +as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for lt_ac_prog in sed gsed; do + for ac_exec_ext in '' $ac_executable_extensions; do + if $as_executable_p "$as_dir/$lt_ac_prog$ac_exec_ext"; then + lt_ac_sed_list="$lt_ac_sed_list $as_dir/$lt_ac_prog$ac_exec_ext" + fi + done + done +done +IFS=$as_save_IFS +lt_ac_max=0 +lt_ac_count=0 +# Add /usr/xpg4/bin/sed as it is typically found on Solaris +# along with /bin/sed that truncates output. +for lt_ac_sed in $lt_ac_sed_list /usr/xpg4/bin/sed; do + test ! -f "$lt_ac_sed" && continue + cat /dev/null > conftest.in + lt_ac_count=0 + echo $ECHO_N "0123456789$ECHO_C" >conftest.in + # Check for GNU sed and select it if it is found. + if "$lt_ac_sed" --version 2>&1 < /dev/null | grep 'GNU' > /dev/null; then + lt_cv_path_SED=$lt_ac_sed + break + fi + while true; do + cat conftest.in conftest.in >conftest.tmp + mv conftest.tmp conftest.in + cp conftest.in conftest.nl + echo >>conftest.nl + $lt_ac_sed -e 's/a$//' < conftest.nl >conftest.out || break + cmp -s conftest.out conftest.nl || break + # 10000 chars as input seems more than enough + test 10 -lt "$lt_ac_count" && break + lt_ac_count=`expr $lt_ac_count + 1` + if test "$lt_ac_count" -gt "$lt_ac_max"; then + lt_ac_max=$lt_ac_count + lt_cv_path_SED=$lt_ac_sed + fi + done +done +]) +SED=$lt_cv_path_SED +AC_SUBST([SED]) +AC_MSG_RESULT([$SED]) +])#AC_PROG_SED +])#m4_ifndef + +# Old name: +AU_ALIAS([LT_AC_PROG_SED], [AC_PROG_SED]) +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([LT_AC_PROG_SED], []) + + +# _LT_CHECK_SHELL_FEATURES +# ------------------------ +# Find out whether the shell is Bourne or XSI compatible, +# or has some other useful features. +m4_defun([_LT_CHECK_SHELL_FEATURES], +[if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then + lt_unset=unset +else + lt_unset=false +fi +_LT_DECL([], [lt_unset], [0], [whether the shell understands "unset"])dnl + +# test EBCDIC or ASCII +case `echo X|tr X '\101'` in + A) # ASCII based system + # \n is not interpreted correctly by Solaris 8 /usr/ucb/tr + lt_SP2NL='tr \040 \012' + lt_NL2SP='tr \015\012 \040\040' + ;; + *) # EBCDIC based system + lt_SP2NL='tr \100 \n' + lt_NL2SP='tr \r\n \100\100' + ;; +esac +_LT_DECL([SP2NL], [lt_SP2NL], [1], [turn spaces into newlines])dnl +_LT_DECL([NL2SP], [lt_NL2SP], [1], [turn newlines into spaces])dnl +])# _LT_CHECK_SHELL_FEATURES + + +# _LT_PATH_CONVERSION_FUNCTIONS +# ----------------------------- +# Determine what file name conversion functions should be used by +# func_to_host_file (and, implicitly, by func_to_host_path). These are needed +# for certain cross-compile configurations and native mingw. +m4_defun([_LT_PATH_CONVERSION_FUNCTIONS], +[AC_REQUIRE([AC_CANONICAL_HOST])dnl +AC_REQUIRE([AC_CANONICAL_BUILD])dnl +AC_MSG_CHECKING([how to convert $build file names to $host format]) +AC_CACHE_VAL(lt_cv_to_host_file_cmd, +[case $host in + *-*-mingw* ) + case $build in + *-*-mingw* ) # actually msys + lt_cv_to_host_file_cmd=func_convert_file_msys_to_w32 + ;; + *-*-cygwin* ) + lt_cv_to_host_file_cmd=func_convert_file_cygwin_to_w32 + ;; + * ) # otherwise, assume *nix + lt_cv_to_host_file_cmd=func_convert_file_nix_to_w32 + ;; + esac + ;; + *-*-cygwin* ) + case $build in + *-*-mingw* ) # actually msys + lt_cv_to_host_file_cmd=func_convert_file_msys_to_cygwin + ;; + *-*-cygwin* ) + lt_cv_to_host_file_cmd=func_convert_file_noop + ;; + * ) # otherwise, assume *nix + lt_cv_to_host_file_cmd=func_convert_file_nix_to_cygwin + ;; + esac + ;; + * ) # unhandled hosts (and "normal" native builds) + lt_cv_to_host_file_cmd=func_convert_file_noop + ;; +esac +]) +to_host_file_cmd=$lt_cv_to_host_file_cmd +AC_MSG_RESULT([$lt_cv_to_host_file_cmd]) +_LT_DECL([to_host_file_cmd], [lt_cv_to_host_file_cmd], + [0], [convert $build file names to $host format])dnl + +AC_MSG_CHECKING([how to convert $build file names to toolchain format]) +AC_CACHE_VAL(lt_cv_to_tool_file_cmd, +[#assume ordinary cross tools, or native build. +lt_cv_to_tool_file_cmd=func_convert_file_noop +case $host in + *-*-mingw* ) + case $build in + *-*-mingw* ) # actually msys + lt_cv_to_tool_file_cmd=func_convert_file_msys_to_w32 + ;; + esac + ;; +esac +]) +to_tool_file_cmd=$lt_cv_to_tool_file_cmd +AC_MSG_RESULT([$lt_cv_to_tool_file_cmd]) +_LT_DECL([to_tool_file_cmd], [lt_cv_to_tool_file_cmd], + [0], [convert $build files to toolchain format])dnl +])# _LT_PATH_CONVERSION_FUNCTIONS diff --git a/m4/ltoptions.m4 b/m4/ltoptions.m4 new file mode 100644 index 00000000..b0b5e9c2 --- /dev/null +++ b/m4/ltoptions.m4 @@ -0,0 +1,437 @@ +# Helper functions for option handling. -*- Autoconf -*- +# +# Copyright (C) 2004-2005, 2007-2009, 2011-2019, 2021-2022 Free +# Software Foundation, Inc. +# Written by Gary V. Vaughan, 2004 +# +# This file is free software; the Free Software Foundation gives +# unlimited permission to copy and/or distribute it, with or without +# modifications, as long as this notice is preserved. + +# serial 8 ltoptions.m4 + +# This is to help aclocal find these macros, as it can't see m4_define. +AC_DEFUN([LTOPTIONS_VERSION], [m4_if([1])]) + + +# _LT_MANGLE_OPTION(MACRO-NAME, OPTION-NAME) +# ------------------------------------------ +m4_define([_LT_MANGLE_OPTION], +[[_LT_OPTION_]m4_bpatsubst($1__$2, [[^a-zA-Z0-9_]], [_])]) + + +# _LT_SET_OPTION(MACRO-NAME, OPTION-NAME) +# --------------------------------------- +# Set option OPTION-NAME for macro MACRO-NAME, and if there is a +# matching handler defined, dispatch to it. Other OPTION-NAMEs are +# saved as a flag. +m4_define([_LT_SET_OPTION], +[m4_define(_LT_MANGLE_OPTION([$1], [$2]))dnl +m4_ifdef(_LT_MANGLE_DEFUN([$1], [$2]), + _LT_MANGLE_DEFUN([$1], [$2]), + [m4_warning([Unknown $1 option '$2'])])[]dnl +]) + + +# _LT_IF_OPTION(MACRO-NAME, OPTION-NAME, IF-SET, [IF-NOT-SET]) +# ------------------------------------------------------------ +# Execute IF-SET if OPTION is set, IF-NOT-SET otherwise. +m4_define([_LT_IF_OPTION], +[m4_ifdef(_LT_MANGLE_OPTION([$1], [$2]), [$3], [$4])]) + + +# _LT_UNLESS_OPTIONS(MACRO-NAME, OPTION-LIST, IF-NOT-SET) +# ------------------------------------------------------- +# Execute IF-NOT-SET unless all options in OPTION-LIST for MACRO-NAME +# are set. +m4_define([_LT_UNLESS_OPTIONS], +[m4_foreach([_LT_Option], m4_split(m4_normalize([$2])), + [m4_ifdef(_LT_MANGLE_OPTION([$1], _LT_Option), + [m4_define([$0_found])])])[]dnl +m4_ifdef([$0_found], [m4_undefine([$0_found])], [$3 +])[]dnl +]) + + +# _LT_SET_OPTIONS(MACRO-NAME, OPTION-LIST) +# ---------------------------------------- +# OPTION-LIST is a space-separated list of Libtool options associated +# with MACRO-NAME. If any OPTION has a matching handler declared with +# LT_OPTION_DEFINE, dispatch to that macro; otherwise complain about +# the unknown option and exit. +m4_defun([_LT_SET_OPTIONS], +[# Set options +m4_foreach([_LT_Option], m4_split(m4_normalize([$2])), + [_LT_SET_OPTION([$1], _LT_Option)]) + +m4_if([$1],[LT_INIT],[ + dnl + dnl Simply set some default values (i.e off) if boolean options were not + dnl specified: + _LT_UNLESS_OPTIONS([LT_INIT], [dlopen], [enable_dlopen=no + ]) + _LT_UNLESS_OPTIONS([LT_INIT], [win32-dll], [enable_win32_dll=no + ]) + dnl + dnl If no reference was made to various pairs of opposing options, then + dnl we run the default mode handler for the pair. For example, if neither + dnl 'shared' nor 'disable-shared' was passed, we enable building of shared + dnl archives by default: + _LT_UNLESS_OPTIONS([LT_INIT], [shared disable-shared], [_LT_ENABLE_SHARED]) + _LT_UNLESS_OPTIONS([LT_INIT], [static disable-static], [_LT_ENABLE_STATIC]) + _LT_UNLESS_OPTIONS([LT_INIT], [pic-only no-pic], [_LT_WITH_PIC]) + _LT_UNLESS_OPTIONS([LT_INIT], [fast-install disable-fast-install], + [_LT_ENABLE_FAST_INSTALL]) + _LT_UNLESS_OPTIONS([LT_INIT], [aix-soname=aix aix-soname=both aix-soname=svr4], + [_LT_WITH_AIX_SONAME([aix])]) + ]) +])# _LT_SET_OPTIONS + + +## --------------------------------- ## +## Macros to handle LT_INIT options. ## +## --------------------------------- ## + +# _LT_MANGLE_DEFUN(MACRO-NAME, OPTION-NAME) +# ----------------------------------------- +m4_define([_LT_MANGLE_DEFUN], +[[_LT_OPTION_DEFUN_]m4_bpatsubst(m4_toupper([$1__$2]), [[^A-Z0-9_]], [_])]) + + +# LT_OPTION_DEFINE(MACRO-NAME, OPTION-NAME, CODE) +# ----------------------------------------------- +m4_define([LT_OPTION_DEFINE], +[m4_define(_LT_MANGLE_DEFUN([$1], [$2]), [$3])[]dnl +])# LT_OPTION_DEFINE + + +# dlopen +# ------ +LT_OPTION_DEFINE([LT_INIT], [dlopen], [enable_dlopen=yes +]) + +AU_DEFUN([AC_LIBTOOL_DLOPEN], +[_LT_SET_OPTION([LT_INIT], [dlopen]) +AC_DIAGNOSE([obsolete], +[$0: Remove this warning and the call to _LT_SET_OPTION when you +put the 'dlopen' option into LT_INIT's first parameter.]) +]) + +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([AC_LIBTOOL_DLOPEN], []) + + +# win32-dll +# --------- +# Declare package support for building win32 dll's. +LT_OPTION_DEFINE([LT_INIT], [win32-dll], +[enable_win32_dll=yes + +case $host in +*-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-cegcc*) + AC_CHECK_TOOL(AS, as, false) + AC_CHECK_TOOL(DLLTOOL, dlltool, false) + AC_CHECK_TOOL(OBJDUMP, objdump, false) + ;; +esac + +test -z "$AS" && AS=as +_LT_DECL([], [AS], [1], [Assembler program])dnl + +test -z "$DLLTOOL" && DLLTOOL=dlltool +_LT_DECL([], [DLLTOOL], [1], [DLL creation program])dnl + +test -z "$OBJDUMP" && OBJDUMP=objdump +_LT_DECL([], [OBJDUMP], [1], [Object dumper program])dnl +])# win32-dll + +AU_DEFUN([AC_LIBTOOL_WIN32_DLL], +[AC_REQUIRE([AC_CANONICAL_HOST])dnl +_LT_SET_OPTION([LT_INIT], [win32-dll]) +AC_DIAGNOSE([obsolete], +[$0: Remove this warning and the call to _LT_SET_OPTION when you +put the 'win32-dll' option into LT_INIT's first parameter.]) +]) + +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([AC_LIBTOOL_WIN32_DLL], []) + + +# _LT_ENABLE_SHARED([DEFAULT]) +# ---------------------------- +# implement the --enable-shared flag, and supports the 'shared' and +# 'disable-shared' LT_INIT options. +# DEFAULT is either 'yes' or 'no'. If omitted, it defaults to 'yes'. +m4_define([_LT_ENABLE_SHARED], +[m4_define([_LT_ENABLE_SHARED_DEFAULT], [m4_if($1, no, no, yes)])dnl +AC_ARG_ENABLE([shared], + [AS_HELP_STRING([--enable-shared@<:@=PKGS@:>@], + [build shared libraries @<:@default=]_LT_ENABLE_SHARED_DEFAULT[@:>@])], + [p=${PACKAGE-default} + case $enableval in + yes) enable_shared=yes ;; + no) enable_shared=no ;; + *) + enable_shared=no + # Look at the argument we got. We use all the common list separators. + lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, + for pkg in $enableval; do + IFS=$lt_save_ifs + if test "X$pkg" = "X$p"; then + enable_shared=yes + fi + done + IFS=$lt_save_ifs + ;; + esac], + [enable_shared=]_LT_ENABLE_SHARED_DEFAULT) + + _LT_DECL([build_libtool_libs], [enable_shared], [0], + [Whether or not to build shared libraries]) +])# _LT_ENABLE_SHARED + +LT_OPTION_DEFINE([LT_INIT], [shared], [_LT_ENABLE_SHARED([yes])]) +LT_OPTION_DEFINE([LT_INIT], [disable-shared], [_LT_ENABLE_SHARED([no])]) + +# Old names: +AC_DEFUN([AC_ENABLE_SHARED], +[_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[shared]) +]) + +AC_DEFUN([AC_DISABLE_SHARED], +[_LT_SET_OPTION([LT_INIT], [disable-shared]) +]) + +AU_DEFUN([AM_ENABLE_SHARED], [AC_ENABLE_SHARED($@)]) +AU_DEFUN([AM_DISABLE_SHARED], [AC_DISABLE_SHARED($@)]) + +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([AM_ENABLE_SHARED], []) +dnl AC_DEFUN([AM_DISABLE_SHARED], []) + + + +# _LT_ENABLE_STATIC([DEFAULT]) +# ---------------------------- +# implement the --enable-static flag, and support the 'static' and +# 'disable-static' LT_INIT options. +# DEFAULT is either 'yes' or 'no'. If omitted, it defaults to 'yes'. +m4_define([_LT_ENABLE_STATIC], +[m4_define([_LT_ENABLE_STATIC_DEFAULT], [m4_if($1, no, no, yes)])dnl +AC_ARG_ENABLE([static], + [AS_HELP_STRING([--enable-static@<:@=PKGS@:>@], + [build static libraries @<:@default=]_LT_ENABLE_STATIC_DEFAULT[@:>@])], + [p=${PACKAGE-default} + case $enableval in + yes) enable_static=yes ;; + no) enable_static=no ;; + *) + enable_static=no + # Look at the argument we got. We use all the common list separators. + lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, + for pkg in $enableval; do + IFS=$lt_save_ifs + if test "X$pkg" = "X$p"; then + enable_static=yes + fi + done + IFS=$lt_save_ifs + ;; + esac], + [enable_static=]_LT_ENABLE_STATIC_DEFAULT) + + _LT_DECL([build_old_libs], [enable_static], [0], + [Whether or not to build static libraries]) +])# _LT_ENABLE_STATIC + +LT_OPTION_DEFINE([LT_INIT], [static], [_LT_ENABLE_STATIC([yes])]) +LT_OPTION_DEFINE([LT_INIT], [disable-static], [_LT_ENABLE_STATIC([no])]) + +# Old names: +AC_DEFUN([AC_ENABLE_STATIC], +[_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[static]) +]) + +AC_DEFUN([AC_DISABLE_STATIC], +[_LT_SET_OPTION([LT_INIT], [disable-static]) +]) + +AU_DEFUN([AM_ENABLE_STATIC], [AC_ENABLE_STATIC($@)]) +AU_DEFUN([AM_DISABLE_STATIC], [AC_DISABLE_STATIC($@)]) + +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([AM_ENABLE_STATIC], []) +dnl AC_DEFUN([AM_DISABLE_STATIC], []) + + + +# _LT_ENABLE_FAST_INSTALL([DEFAULT]) +# ---------------------------------- +# implement the --enable-fast-install flag, and support the 'fast-install' +# and 'disable-fast-install' LT_INIT options. +# DEFAULT is either 'yes' or 'no'. If omitted, it defaults to 'yes'. +m4_define([_LT_ENABLE_FAST_INSTALL], +[m4_define([_LT_ENABLE_FAST_INSTALL_DEFAULT], [m4_if($1, no, no, yes)])dnl +AC_ARG_ENABLE([fast-install], + [AS_HELP_STRING([--enable-fast-install@<:@=PKGS@:>@], + [optimize for fast installation @<:@default=]_LT_ENABLE_FAST_INSTALL_DEFAULT[@:>@])], + [p=${PACKAGE-default} + case $enableval in + yes) enable_fast_install=yes ;; + no) enable_fast_install=no ;; + *) + enable_fast_install=no + # Look at the argument we got. We use all the common list separators. + lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, + for pkg in $enableval; do + IFS=$lt_save_ifs + if test "X$pkg" = "X$p"; then + enable_fast_install=yes + fi + done + IFS=$lt_save_ifs + ;; + esac], + [enable_fast_install=]_LT_ENABLE_FAST_INSTALL_DEFAULT) + +_LT_DECL([fast_install], [enable_fast_install], [0], + [Whether or not to optimize for fast installation])dnl +])# _LT_ENABLE_FAST_INSTALL + +LT_OPTION_DEFINE([LT_INIT], [fast-install], [_LT_ENABLE_FAST_INSTALL([yes])]) +LT_OPTION_DEFINE([LT_INIT], [disable-fast-install], [_LT_ENABLE_FAST_INSTALL([no])]) + +# Old names: +AU_DEFUN([AC_ENABLE_FAST_INSTALL], +[_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[fast-install]) +AC_DIAGNOSE([obsolete], +[$0: Remove this warning and the call to _LT_SET_OPTION when you put +the 'fast-install' option into LT_INIT's first parameter.]) +]) + +AU_DEFUN([AC_DISABLE_FAST_INSTALL], +[_LT_SET_OPTION([LT_INIT], [disable-fast-install]) +AC_DIAGNOSE([obsolete], +[$0: Remove this warning and the call to _LT_SET_OPTION when you put +the 'disable-fast-install' option into LT_INIT's first parameter.]) +]) + +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([AC_ENABLE_FAST_INSTALL], []) +dnl AC_DEFUN([AM_DISABLE_FAST_INSTALL], []) + + +# _LT_WITH_AIX_SONAME([DEFAULT]) +# ---------------------------------- +# implement the --with-aix-soname flag, and support the `aix-soname=aix' +# and `aix-soname=both' and `aix-soname=svr4' LT_INIT options. DEFAULT +# is either `aix', `both' or `svr4'. If omitted, it defaults to `aix'. +m4_define([_LT_WITH_AIX_SONAME], +[m4_define([_LT_WITH_AIX_SONAME_DEFAULT], [m4_if($1, svr4, svr4, m4_if($1, both, both, aix))])dnl +shared_archive_member_spec= +case $host,$enable_shared in +power*-*-aix[[5-9]]*,yes) + AC_MSG_CHECKING([which variant of shared library versioning to provide]) + AC_ARG_WITH([aix-soname], + [AS_HELP_STRING([--with-aix-soname=aix|svr4|both], + [shared library versioning (aka "SONAME") variant to provide on AIX, @<:@default=]_LT_WITH_AIX_SONAME_DEFAULT[@:>@.])], + [case $withval in + aix|svr4|both) + ;; + *) + AC_MSG_ERROR([Unknown argument to --with-aix-soname]) + ;; + esac + lt_cv_with_aix_soname=$with_aix_soname], + [AC_CACHE_VAL([lt_cv_with_aix_soname], + [lt_cv_with_aix_soname=]_LT_WITH_AIX_SONAME_DEFAULT) + with_aix_soname=$lt_cv_with_aix_soname]) + AC_MSG_RESULT([$with_aix_soname]) + if test aix != "$with_aix_soname"; then + # For the AIX way of multilib, we name the shared archive member + # based on the bitwidth used, traditionally 'shr.o' or 'shr_64.o', + # and 'shr.imp' or 'shr_64.imp', respectively, for the Import File. + # Even when GNU compilers ignore OBJECT_MODE but need '-maix64' flag, + # the AIX toolchain works better with OBJECT_MODE set (default 32). + if test 64 = "${OBJECT_MODE-32}"; then + shared_archive_member_spec=shr_64 + else + shared_archive_member_spec=shr + fi + fi + ;; +*) + with_aix_soname=aix + ;; +esac + +_LT_DECL([], [shared_archive_member_spec], [0], + [Shared archive member basename, for filename based shared library versioning on AIX])dnl +])# _LT_WITH_AIX_SONAME + +LT_OPTION_DEFINE([LT_INIT], [aix-soname=aix], [_LT_WITH_AIX_SONAME([aix])]) +LT_OPTION_DEFINE([LT_INIT], [aix-soname=both], [_LT_WITH_AIX_SONAME([both])]) +LT_OPTION_DEFINE([LT_INIT], [aix-soname=svr4], [_LT_WITH_AIX_SONAME([svr4])]) + + +# _LT_WITH_PIC([MODE]) +# -------------------- +# implement the --with-pic flag, and support the 'pic-only' and 'no-pic' +# LT_INIT options. +# MODE is either 'yes' or 'no'. If omitted, it defaults to 'both'. +m4_define([_LT_WITH_PIC], +[AC_ARG_WITH([pic], + [AS_HELP_STRING([--with-pic@<:@=PKGS@:>@], + [try to use only PIC/non-PIC objects @<:@default=use both@:>@])], + [lt_p=${PACKAGE-default} + case $withval in + yes|no) pic_mode=$withval ;; + *) + pic_mode=default + # Look at the argument we got. We use all the common list separators. + lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, + for lt_pkg in $withval; do + IFS=$lt_save_ifs + if test "X$lt_pkg" = "X$lt_p"; then + pic_mode=yes + fi + done + IFS=$lt_save_ifs + ;; + esac], + [pic_mode=m4_default([$1], [default])]) + +_LT_DECL([], [pic_mode], [0], [What type of objects to build])dnl +])# _LT_WITH_PIC + +LT_OPTION_DEFINE([LT_INIT], [pic-only], [_LT_WITH_PIC([yes])]) +LT_OPTION_DEFINE([LT_INIT], [no-pic], [_LT_WITH_PIC([no])]) + +# Old name: +AU_DEFUN([AC_LIBTOOL_PICMODE], +[_LT_SET_OPTION([LT_INIT], [pic-only]) +AC_DIAGNOSE([obsolete], +[$0: Remove this warning and the call to _LT_SET_OPTION when you +put the 'pic-only' option into LT_INIT's first parameter.]) +]) + +dnl aclocal-1.4 backwards compatibility: +dnl AC_DEFUN([AC_LIBTOOL_PICMODE], []) + +## ----------------- ## +## LTDL_INIT Options ## +## ----------------- ## + +m4_define([_LTDL_MODE], []) +LT_OPTION_DEFINE([LTDL_INIT], [nonrecursive], + [m4_define([_LTDL_MODE], [nonrecursive])]) +LT_OPTION_DEFINE([LTDL_INIT], [recursive], + [m4_define([_LTDL_MODE], [recursive])]) +LT_OPTION_DEFINE([LTDL_INIT], [subproject], + [m4_define([_LTDL_MODE], [subproject])]) + +m4_define([_LTDL_TYPE], []) +LT_OPTION_DEFINE([LTDL_INIT], [installable], + [m4_define([_LTDL_TYPE], [installable])]) +LT_OPTION_DEFINE([LTDL_INIT], [convenience], + [m4_define([_LTDL_TYPE], [convenience])]) diff --git a/m4/ltsugar.m4 b/m4/ltsugar.m4 new file mode 100644 index 00000000..902508bd --- /dev/null +++ b/m4/ltsugar.m4 @@ -0,0 +1,124 @@ +# ltsugar.m4 -- libtool m4 base layer. -*-Autoconf-*- +# +# Copyright (C) 2004-2005, 2007-2008, 2011-2019, 2021-2022 Free Software +# Foundation, Inc. +# Written by Gary V. Vaughan, 2004 +# +# This file is free software; the Free Software Foundation gives +# unlimited permission to copy and/or distribute it, with or without +# modifications, as long as this notice is preserved. + +# serial 6 ltsugar.m4 + +# This is to help aclocal find these macros, as it can't see m4_define. +AC_DEFUN([LTSUGAR_VERSION], [m4_if([0.1])]) + + +# lt_join(SEP, ARG1, [ARG2...]) +# ----------------------------- +# Produce ARG1SEPARG2...SEPARGn, omitting [] arguments and their +# associated separator. +# Needed until we can rely on m4_join from Autoconf 2.62, since all earlier +# versions in m4sugar had bugs. +m4_define([lt_join], +[m4_if([$#], [1], [], + [$#], [2], [[$2]], + [m4_if([$2], [], [], [[$2]_])$0([$1], m4_shift(m4_shift($@)))])]) +m4_define([_lt_join], +[m4_if([$#$2], [2], [], + [m4_if([$2], [], [], [[$1$2]])$0([$1], m4_shift(m4_shift($@)))])]) + + +# lt_car(LIST) +# lt_cdr(LIST) +# ------------ +# Manipulate m4 lists. +# These macros are necessary as long as will still need to support +# Autoconf-2.59, which quotes differently. +m4_define([lt_car], [[$1]]) +m4_define([lt_cdr], +[m4_if([$#], 0, [m4_fatal([$0: cannot be called without arguments])], + [$#], 1, [], + [m4_dquote(m4_shift($@))])]) +m4_define([lt_unquote], $1) + + +# lt_append(MACRO-NAME, STRING, [SEPARATOR]) +# ------------------------------------------ +# Redefine MACRO-NAME to hold its former content plus 'SEPARATOR''STRING'. +# Note that neither SEPARATOR nor STRING are expanded; they are appended +# to MACRO-NAME as is (leaving the expansion for when MACRO-NAME is invoked). +# No SEPARATOR is output if MACRO-NAME was previously undefined (different +# than defined and empty). +# +# This macro is needed until we can rely on Autoconf 2.62, since earlier +# versions of m4sugar mistakenly expanded SEPARATOR but not STRING. +m4_define([lt_append], +[m4_define([$1], + m4_ifdef([$1], [m4_defn([$1])[$3]])[$2])]) + + + +# lt_combine(SEP, PREFIX-LIST, INFIX, SUFFIX1, [SUFFIX2...]) +# ---------------------------------------------------------- +# Produce a SEP delimited list of all paired combinations of elements of +# PREFIX-LIST with SUFFIX1 through SUFFIXn. Each element of the list +# has the form PREFIXmINFIXSUFFIXn. +# Needed until we can rely on m4_combine added in Autoconf 2.62. +m4_define([lt_combine], +[m4_if(m4_eval([$# > 3]), [1], + [m4_pushdef([_Lt_sep], [m4_define([_Lt_sep], m4_defn([lt_car]))])]]dnl +[[m4_foreach([_Lt_prefix], [$2], + [m4_foreach([_Lt_suffix], + ]m4_dquote(m4_dquote(m4_shift(m4_shift(m4_shift($@)))))[, + [_Lt_sep([$1])[]m4_defn([_Lt_prefix])[$3]m4_defn([_Lt_suffix])])])])]) + + +# lt_if_append_uniq(MACRO-NAME, VARNAME, [SEPARATOR], [UNIQ], [NOT-UNIQ]) +# ----------------------------------------------------------------------- +# Iff MACRO-NAME does not yet contain VARNAME, then append it (delimited +# by SEPARATOR if supplied) and expand UNIQ, else NOT-UNIQ. +m4_define([lt_if_append_uniq], +[m4_ifdef([$1], + [m4_if(m4_index([$3]m4_defn([$1])[$3], [$3$2$3]), [-1], + [lt_append([$1], [$2], [$3])$4], + [$5])], + [lt_append([$1], [$2], [$3])$4])]) + + +# lt_dict_add(DICT, KEY, VALUE) +# ----------------------------- +m4_define([lt_dict_add], +[m4_define([$1($2)], [$3])]) + + +# lt_dict_add_subkey(DICT, KEY, SUBKEY, VALUE) +# -------------------------------------------- +m4_define([lt_dict_add_subkey], +[m4_define([$1($2:$3)], [$4])]) + + +# lt_dict_fetch(DICT, KEY, [SUBKEY]) +# ---------------------------------- +m4_define([lt_dict_fetch], +[m4_ifval([$3], + m4_ifdef([$1($2:$3)], [m4_defn([$1($2:$3)])]), + m4_ifdef([$1($2)], [m4_defn([$1($2)])]))]) + + +# lt_if_dict_fetch(DICT, KEY, [SUBKEY], VALUE, IF-TRUE, [IF-FALSE]) +# ----------------------------------------------------------------- +m4_define([lt_if_dict_fetch], +[m4_if(lt_dict_fetch([$1], [$2], [$3]), [$4], + [$5], + [$6])]) + + +# lt_dict_filter(DICT, [SUBKEY], VALUE, [SEPARATOR], KEY, [...]) +# -------------------------------------------------------------- +m4_define([lt_dict_filter], +[m4_if([$5], [], [], + [lt_join(m4_quote(m4_default([$4], [[, ]])), + lt_unquote(m4_split(m4_normalize(m4_foreach(_Lt_key, lt_car([m4_shiftn(4, $@)]), + [lt_if_dict_fetch([$1], _Lt_key, [$2], [$3], [_Lt_key ])])))))])[]dnl +]) diff --git a/m4/ltversion.m4 b/m4/ltversion.m4 new file mode 100644 index 00000000..b155d0ac --- /dev/null +++ b/m4/ltversion.m4 @@ -0,0 +1,24 @@ +# ltversion.m4 -- version numbers -*- Autoconf -*- +# +# Copyright (C) 2004, 2011-2019, 2021-2022 Free Software Foundation, +# Inc. +# Written by Scott James Remnant, 2004 +# +# This file is free software; the Free Software Foundation gives +# unlimited permission to copy and/or distribute it, with or without +# modifications, as long as this notice is preserved. + +# @configure_input@ + +# serial 4245 ltversion.m4 +# This file is part of GNU Libtool + +m4_define([LT_PACKAGE_VERSION], [2.4.7]) +m4_define([LT_PACKAGE_REVISION], [2.4.7]) + +AC_DEFUN([LTVERSION_VERSION], +[macro_version='2.4.7' +macro_revision='2.4.7' +_LT_DECL(, macro_version, 0, [Which release of libtool.m4 was used?]) +_LT_DECL(, macro_revision, 0) +]) diff --git a/m4/lt~obsolete.m4 b/m4/lt~obsolete.m4 new file mode 100644 index 00000000..0f7a8759 --- /dev/null +++ b/m4/lt~obsolete.m4 @@ -0,0 +1,99 @@ +# lt~obsolete.m4 -- aclocal satisfying obsolete definitions. -*-Autoconf-*- +# +# Copyright (C) 2004-2005, 2007, 2009, 2011-2019, 2021-2022 Free +# Software Foundation, Inc. +# Written by Scott James Remnant, 2004. +# +# This file is free software; the Free Software Foundation gives +# unlimited permission to copy and/or distribute it, with or without +# modifications, as long as this notice is preserved. + +# serial 5 lt~obsolete.m4 + +# These exist entirely to fool aclocal when bootstrapping libtool. +# +# In the past libtool.m4 has provided macros via AC_DEFUN (or AU_DEFUN), +# which have later been changed to m4_define as they aren't part of the +# exported API, or moved to Autoconf or Automake where they belong. +# +# The trouble is, aclocal is a bit thick. It'll see the old AC_DEFUN +# in /usr/share/aclocal/libtool.m4 and remember it, then when it sees us +# using a macro with the same name in our local m4/libtool.m4 it'll +# pull the old libtool.m4 in (it doesn't see our shiny new m4_define +# and doesn't know about Autoconf macros at all.) +# +# So we provide this file, which has a silly filename so it's always +# included after everything else. This provides aclocal with the +# AC_DEFUNs it wants, but when m4 processes it, it doesn't do anything +# because those macros already exist, or will be overwritten later. +# We use AC_DEFUN over AU_DEFUN for compatibility with aclocal-1.6. +# +# Anytime we withdraw an AC_DEFUN or AU_DEFUN, remember to add it here. +# Yes, that means every name once taken will need to remain here until +# we give up compatibility with versions before 1.7, at which point +# we need to keep only those names which we still refer to. + +# This is to help aclocal find these macros, as it can't see m4_define. +AC_DEFUN([LTOBSOLETE_VERSION], [m4_if([1])]) + +m4_ifndef([AC_LIBTOOL_LINKER_OPTION], [AC_DEFUN([AC_LIBTOOL_LINKER_OPTION])]) +m4_ifndef([AC_PROG_EGREP], [AC_DEFUN([AC_PROG_EGREP])]) +m4_ifndef([_LT_AC_PROG_ECHO_BACKSLASH], [AC_DEFUN([_LT_AC_PROG_ECHO_BACKSLASH])]) +m4_ifndef([_LT_AC_SHELL_INIT], [AC_DEFUN([_LT_AC_SHELL_INIT])]) +m4_ifndef([_LT_AC_SYS_LIBPATH_AIX], [AC_DEFUN([_LT_AC_SYS_LIBPATH_AIX])]) +m4_ifndef([_LT_PROG_LTMAIN], [AC_DEFUN([_LT_PROG_LTMAIN])]) +m4_ifndef([_LT_AC_TAGVAR], [AC_DEFUN([_LT_AC_TAGVAR])]) +m4_ifndef([AC_LTDL_ENABLE_INSTALL], [AC_DEFUN([AC_LTDL_ENABLE_INSTALL])]) +m4_ifndef([AC_LTDL_PREOPEN], [AC_DEFUN([AC_LTDL_PREOPEN])]) +m4_ifndef([_LT_AC_SYS_COMPILER], [AC_DEFUN([_LT_AC_SYS_COMPILER])]) +m4_ifndef([_LT_AC_LOCK], [AC_DEFUN([_LT_AC_LOCK])]) +m4_ifndef([AC_LIBTOOL_SYS_OLD_ARCHIVE], [AC_DEFUN([AC_LIBTOOL_SYS_OLD_ARCHIVE])]) +m4_ifndef([_LT_AC_TRY_DLOPEN_SELF], [AC_DEFUN([_LT_AC_TRY_DLOPEN_SELF])]) +m4_ifndef([AC_LIBTOOL_PROG_CC_C_O], [AC_DEFUN([AC_LIBTOOL_PROG_CC_C_O])]) +m4_ifndef([AC_LIBTOOL_SYS_HARD_LINK_LOCKS], [AC_DEFUN([AC_LIBTOOL_SYS_HARD_LINK_LOCKS])]) +m4_ifndef([AC_LIBTOOL_OBJDIR], [AC_DEFUN([AC_LIBTOOL_OBJDIR])]) +m4_ifndef([AC_LTDL_OBJDIR], [AC_DEFUN([AC_LTDL_OBJDIR])]) +m4_ifndef([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH], [AC_DEFUN([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH])]) +m4_ifndef([AC_LIBTOOL_SYS_LIB_STRIP], [AC_DEFUN([AC_LIBTOOL_SYS_LIB_STRIP])]) +m4_ifndef([AC_PATH_MAGIC], [AC_DEFUN([AC_PATH_MAGIC])]) +m4_ifndef([AC_PROG_LD_GNU], [AC_DEFUN([AC_PROG_LD_GNU])]) +m4_ifndef([AC_PROG_LD_RELOAD_FLAG], [AC_DEFUN([AC_PROG_LD_RELOAD_FLAG])]) +m4_ifndef([AC_DEPLIBS_CHECK_METHOD], [AC_DEFUN([AC_DEPLIBS_CHECK_METHOD])]) +m4_ifndef([AC_LIBTOOL_PROG_COMPILER_NO_RTTI], [AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_NO_RTTI])]) +m4_ifndef([AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE], [AC_DEFUN([AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE])]) +m4_ifndef([AC_LIBTOOL_PROG_COMPILER_PIC], [AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_PIC])]) +m4_ifndef([AC_LIBTOOL_PROG_LD_SHLIBS], [AC_DEFUN([AC_LIBTOOL_PROG_LD_SHLIBS])]) +m4_ifndef([AC_LIBTOOL_POSTDEP_PREDEP], [AC_DEFUN([AC_LIBTOOL_POSTDEP_PREDEP])]) +m4_ifndef([LT_AC_PROG_EGREP], [AC_DEFUN([LT_AC_PROG_EGREP])]) +m4_ifndef([LT_AC_PROG_SED], [AC_DEFUN([LT_AC_PROG_SED])]) +m4_ifndef([_LT_CC_BASENAME], [AC_DEFUN([_LT_CC_BASENAME])]) +m4_ifndef([_LT_COMPILER_BOILERPLATE], [AC_DEFUN([_LT_COMPILER_BOILERPLATE])]) +m4_ifndef([_LT_LINKER_BOILERPLATE], [AC_DEFUN([_LT_LINKER_BOILERPLATE])]) +m4_ifndef([_AC_PROG_LIBTOOL], [AC_DEFUN([_AC_PROG_LIBTOOL])]) +m4_ifndef([AC_LIBTOOL_SETUP], [AC_DEFUN([AC_LIBTOOL_SETUP])]) +m4_ifndef([_LT_AC_CHECK_DLFCN], [AC_DEFUN([_LT_AC_CHECK_DLFCN])]) +m4_ifndef([AC_LIBTOOL_SYS_DYNAMIC_LINKER], [AC_DEFUN([AC_LIBTOOL_SYS_DYNAMIC_LINKER])]) +m4_ifndef([_LT_AC_TAGCONFIG], [AC_DEFUN([_LT_AC_TAGCONFIG])]) +m4_ifndef([AC_DISABLE_FAST_INSTALL], [AC_DEFUN([AC_DISABLE_FAST_INSTALL])]) +m4_ifndef([_LT_AC_LANG_CXX], [AC_DEFUN([_LT_AC_LANG_CXX])]) +m4_ifndef([_LT_AC_LANG_F77], [AC_DEFUN([_LT_AC_LANG_F77])]) +m4_ifndef([_LT_AC_LANG_GCJ], [AC_DEFUN([_LT_AC_LANG_GCJ])]) +m4_ifndef([AC_LIBTOOL_LANG_C_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_C_CONFIG])]) +m4_ifndef([_LT_AC_LANG_C_CONFIG], [AC_DEFUN([_LT_AC_LANG_C_CONFIG])]) +m4_ifndef([AC_LIBTOOL_LANG_CXX_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_CXX_CONFIG])]) +m4_ifndef([_LT_AC_LANG_CXX_CONFIG], [AC_DEFUN([_LT_AC_LANG_CXX_CONFIG])]) +m4_ifndef([AC_LIBTOOL_LANG_F77_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_F77_CONFIG])]) +m4_ifndef([_LT_AC_LANG_F77_CONFIG], [AC_DEFUN([_LT_AC_LANG_F77_CONFIG])]) +m4_ifndef([AC_LIBTOOL_LANG_GCJ_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_GCJ_CONFIG])]) +m4_ifndef([_LT_AC_LANG_GCJ_CONFIG], [AC_DEFUN([_LT_AC_LANG_GCJ_CONFIG])]) +m4_ifndef([AC_LIBTOOL_LANG_RC_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_RC_CONFIG])]) +m4_ifndef([_LT_AC_LANG_RC_CONFIG], [AC_DEFUN([_LT_AC_LANG_RC_CONFIG])]) +m4_ifndef([AC_LIBTOOL_CONFIG], [AC_DEFUN([AC_LIBTOOL_CONFIG])]) +m4_ifndef([_LT_AC_FILE_LTDLL_C], [AC_DEFUN([_LT_AC_FILE_LTDLL_C])]) +m4_ifndef([_LT_REQUIRED_DARWIN_CHECKS], [AC_DEFUN([_LT_REQUIRED_DARWIN_CHECKS])]) +m4_ifndef([_LT_AC_PROG_CXXCPP], [AC_DEFUN([_LT_AC_PROG_CXXCPP])]) +m4_ifndef([_LT_PREPARE_SED_QUOTE_VARS], [AC_DEFUN([_LT_PREPARE_SED_QUOTE_VARS])]) +m4_ifndef([_LT_PROG_ECHO_BACKSLASH], [AC_DEFUN([_LT_PROG_ECHO_BACKSLASH])]) +m4_ifndef([_LT_PROG_F77], [AC_DEFUN([_LT_PROG_F77])]) +m4_ifndef([_LT_PROG_FC], [AC_DEFUN([_LT_PROG_FC])]) +m4_ifndef([_LT_PROG_CXX], [AC_DEFUN([_LT_PROG_CXX])]) diff --git a/out1 b/out1 new file mode 100644 index 00000000..ddb5344a --- /dev/null +++ b/out1 @@ -0,0 +1,5975 @@ +2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:53384 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 -> 157.143.34.100:62096 29 18600 2 +2024-04-14 23:59:28.123 00:01:00.032 ICMP 8.8.8.8:0 -> 157.143.34.100:0.0 4 304 4 +2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:59579 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:59:29.049 00:00:00.000 TCP 79.110.62.11:44573 -> 157.143.34.100:6190 1 40 1 +2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:61842 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 -> 2.21.22.179:443 12 2107 2 +2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61828 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:59:16.238 00:00:00.000 TCP 193.3.53.7:59081 -> 157.143.34.100:789 1 40 1 +2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:56791 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:56069 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:55209 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:57:57.204 00:00:35.020 TCP 157.143.34.100:59650 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:58:57.901 00:00:35.008 TCP 157.143.34.100:63413 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:54:33.630 00:04:00.115 TCP 157.143.34.100:58186 -> 172.217.218.188:5228 10 840 2 +2024-04-14 23:58:14.287 00:00:00.020 UDP 216.239.35.4:123 -> 157.143.34.100:59726 1 76 2 +2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:54526 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:59:30.701 00:00:00.000 ICMP 129.82.138.31:0 -> 157.143.34.100:8.0 1 32 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:64041 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:65304 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:57459 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:58:41.598 00:00:00.010 UDP 83.150.25.25:123 -> 157.143.34.100:59868 1 76 2 +2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:64775 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:54:27.599 00:04:15.118 TCP 172.217.168.3:80 -> 157.143.34.100:59696 10 1155 2 +2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 -> 157.143.34.100:51638 13 6591 2 +2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:56896 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 -> 157.143.34.100:62151 11 4264 2 +2024-04-14 23:59:14.576 00:00:00.011 UDP 193.33.30.39:123 -> 157.143.34.100:46408 1 76 2 +2024-04-14 23:59:03.154 00:00:00.000 TCP 157.143.34.100:51943 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:59:08.059 00:00:00.000 TCP 185.165.191.27:26312 -> 157.143.34.100:1433 1 44 1 +2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 -> 157.143.34.100:59739 13 4154 2 +2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:64043 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 -> 213.144.148.130:28919 77363 4.4 M 2 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:53717 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:54:46.461 00:04:00.298 TCP 172.217.168.3:80 -> 157.143.34.100:57657 5 895 2 +2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:56559 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61573 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:54:38.798 00:04:29.864 TCP 157.143.34.100:51134 -> 142.251.31.188:5228 11 653 2 +2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:55160 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:59:22.598 00:00:00.010 UDP 77.109.132.50:123 -> 157.143.34.100:64169 1 76 2 +2024-04-14 23:59:34.639 00:00:00.000 TCP 79.110.62.75:56012 -> 157.143.34.100:5293 1 40 1 +2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 -> 157.143.34.100:59352 29 18602 2 +2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:54666 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:59:03.423 00:00:00.000 TCP 157.143.34.100:50809 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:58:41.389 00:00:00.000 TCP 162.216.149.113:51980 -> 157.143.34.100:9581 1 44 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:52026 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:62900 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:57:56.606 00:00:35.017 TCP 157.143.34.100:63078 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:59:14.683 00:00:00.000 UDP 43.163.240.155:59998 -> 157.143.34.100:11211 1 99 1 +2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:55135 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:58:28.871 00:00:00.020 UDP 216.239.35.0:123 -> 157.143.34.100:55198 1 76 2 +2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:64298 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:57:56.403 00:00:35.019 TCP 157.143.34.100:51720 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:59:14.065 00:00:00.000 TCP 95.214.27.8:48358 -> 157.143.34.100:8767 1 44 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:60801 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:57319 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:64995 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:61063 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:57:57.205 00:00:35.019 TCP 157.143.34.100:56945 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:59:20.746 00:00:00.021 UDP 157.143.34.100:2711 -> 216.239.32.10:53 1 75 2 +2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:51080 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:59:03.626 00:00:00.000 TCP 157.143.34.100:65294 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:59:03.042 00:00:00.000 TCP 157.143.34.100:53859 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:64330 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:59653 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:57:56.129 00:00:35.021 TCP 157.143.34.100:64367 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:58:48.803 00:00:00.000 TCP 35.203.210.92:51820 -> 157.143.34.100:17547 1 44 1 +2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:60616 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:57366 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:58:57.900 00:00:35.009 TCP 157.143.34.100:52333 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:59307 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:54845 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:58369 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:57:56.026 00:00:35.013 TCP 157.143.34.100:59696 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:58:55.834 00:00:35.020 TCP 157.143.34.100:51823 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:59:28.116 00:01:00.031 ICMP 157.143.34.100:0 -> 8.8.8.8:8.0 4 304 4 +2024-04-14 23:59:20.765 00:00:00.000 UDP 216.239.36.10:53 -> 157.143.34.100:43966 1 187 1 +2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:53384 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 -> 157.143.34.100:62096 ...AP.SF 0 29 18600 2 +2024-04-14 23:59:28.123 00:01:00.032 ICMP 8.8.8.8:0 -> 157.143.34.100:0.0 ........ 0 4 304 4 +2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:59579 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:59:29.049 00:00:00.000 TCP 79.110.62.11:44573 -> 157.143.34.100:6190 ......S. 0 1 40 1 +2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:61842 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 -> 2.21.22.179:443 CE.APRSF 0 12 2107 2 +2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61828 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:59:16.238 00:00:00.000 TCP 193.3.53.7:59081 -> 157.143.34.100:789 ......S. 0 1 40 1 +2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:56791 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:56069 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:55209 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:57:57.204 00:00:35.020 TCP 157.143.34.100:59650 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:58:57.901 00:00:35.008 TCP 157.143.34.100:63413 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:54:33.630 00:04:00.115 TCP 157.143.34.100:58186 -> 172.217.218.188:5228 ...AP... 0 10 840 2 +2024-04-14 23:58:14.287 00:00:00.020 UDP 216.239.35.4:123 -> 157.143.34.100:59726 ........ 0 1 76 2 +2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:54526 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:59:30.701 00:00:00.000 ICMP 129.82.138.31:0 -> 157.143.34.100:8.0 ........ 0 1 32 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:64041 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:65304 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:57459 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:58:41.598 00:00:00.010 UDP 83.150.25.25:123 -> 157.143.34.100:59868 ........ 0 1 76 2 +2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:64775 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:54:27.599 00:04:15.118 TCP 172.217.168.3:80 -> 157.143.34.100:59696 ...AP... 0 10 1155 2 +2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 -> 157.143.34.100:51638 ...AP.S. 0 13 6591 2 +2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:56896 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 -> 157.143.34.100:62151 ...AP.SF 0 11 4264 2 +2024-04-14 23:59:14.576 00:00:00.011 UDP 193.33.30.39:123 -> 157.143.34.100:46408 ........ 0 1 76 2 +2024-04-14 23:59:03.154 00:00:00.000 TCP 157.143.34.100:51943 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:59:08.059 00:00:00.000 TCP 185.165.191.27:26312 -> 157.143.34.100:1433 ......S. 0 1 44 1 +2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 -> 157.143.34.100:59739 ........ 0 13 4154 2 +2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:64043 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 -> 213.144.148.130:28919 ...AP..F 0 77363 4.4 M 2 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:53717 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:54:46.461 00:04:00.298 TCP 172.217.168.3:80 -> 157.143.34.100:57657 ...AP... 0 5 895 2 +2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:56559 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61573 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:54:38.798 00:04:29.864 TCP 157.143.34.100:51134 -> 142.251.31.188:5228 ...AP... 0 11 653 2 +2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:55160 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:59:22.598 00:00:00.010 UDP 77.109.132.50:123 -> 157.143.34.100:64169 ........ 0 1 76 2 +2024-04-14 23:59:34.639 00:00:00.000 TCP 79.110.62.75:56012 -> 157.143.34.100:5293 ......S. 0 1 40 1 +2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 -> 157.143.34.100:59352 ...AP.SF 0 29 18602 2 +2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:54666 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:59:03.423 00:00:00.000 TCP 157.143.34.100:50809 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:58:41.389 00:00:00.000 TCP 162.216.149.113:51980 -> 157.143.34.100:9581 ......S. 0 1 44 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:52026 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:62900 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:57:56.606 00:00:35.017 TCP 157.143.34.100:63078 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:59:14.683 00:00:00.000 UDP 43.163.240.155:59998 -> 157.143.34.100:11211 ........ 0 1 99 1 +2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:55135 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:58:28.871 00:00:00.020 UDP 216.239.35.0:123 -> 157.143.34.100:55198 ........ 0 1 76 2 +2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:64298 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:57:56.403 00:00:35.019 TCP 157.143.34.100:51720 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:59:14.065 00:00:00.000 TCP 95.214.27.8:48358 -> 157.143.34.100:8767 ......S. 0 1 44 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:60801 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:57319 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:64995 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:61063 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:57:57.205 00:00:35.019 TCP 157.143.34.100:56945 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:59:20.746 00:00:00.021 UDP 157.143.34.100:2711 -> 216.239.32.10:53 ........ 0 1 75 2 +2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:51080 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:59:03.626 00:00:00.000 TCP 157.143.34.100:65294 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:59:03.042 00:00:00.000 TCP 157.143.34.100:53859 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:64330 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:59653 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:57:56.129 00:00:35.021 TCP 157.143.34.100:64367 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:58:48.803 00:00:00.000 TCP 35.203.210.92:51820 -> 157.143.34.100:17547 ......S. 0 1 44 1 +2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:60616 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:57366 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:58:57.900 00:00:35.009 TCP 157.143.34.100:52333 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:59307 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:54845 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:58369 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:57:56.026 00:00:35.013 TCP 157.143.34.100:59696 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:58:55.834 00:00:35.020 TCP 157.143.34.100:51823 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:59:28.116 00:01:00.031 ICMP 157.143.34.100:0 -> 8.8.8.8:8.0 ........ 0 4 304 4 +2024-04-14 23:59:20.765 00:00:00.000 UDP 216.239.36.10:53 -> 157.143.34.100:43966 ........ 0 1 187 1 +2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:53384 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 -> 157.143.34.100:62096 ...AP.SF 0 29 18600 0 4804 641 2 +2024-04-14 23:59:28.123 00:01:00.032 ICMP 8.8.8.8:0 -> 157.143.34.100:0.0 ........ 0 4 304 0 40 76 4 +2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:59579 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:29.049 00:00:00.000 TCP 79.110.62.11:44573 -> 157.143.34.100:6190 ......S. 0 1 40 0 0 40 1 +2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:61842 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 -> 2.21.22.179:443 CE.APRSF 0 12 2107 23 32793 175 2 +2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61828 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:16.238 00:00:00.000 TCP 193.3.53.7:59081 -> 157.143.34.100:789 ......S. 0 1 40 0 0 40 1 +2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:56791 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:56069 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:55209 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:57:57.204 00:00:35.020 TCP 157.143.34.100:59650 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:57.901 00:00:35.008 TCP 157.143.34.100:63413 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:54:33.630 00:04:00.115 TCP 157.143.34.100:58186 -> 172.217.218.188:5228 ...AP... 0 10 840 0 27 84 2 +2024-04-14 23:58:14.287 00:00:00.020 UDP 216.239.35.4:123 -> 157.143.34.100:59726 ........ 0 1 76 50 30400 76 2 +2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:54526 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:30.701 00:00:00.000 ICMP 129.82.138.31:0 -> 157.143.34.100:8.0 ........ 0 1 32 0 0 32 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:64041 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:65304 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:57459 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:58:41.598 00:00:00.010 UDP 83.150.25.25:123 -> 157.143.34.100:59868 ........ 0 1 76 100 60800 76 2 +2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:64775 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:54:27.599 00:04:15.118 TCP 172.217.168.3:80 -> 157.143.34.100:59696 ...AP... 0 10 1155 0 36 115 2 +2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 -> 157.143.34.100:51638 ...AP.S. 0 13 6591 90 368727 507 2 +2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:56896 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 -> 157.143.34.100:62151 ...AP.SF 0 11 4264 4 14552 387 2 +2024-04-14 23:59:14.576 00:00:00.011 UDP 193.33.30.39:123 -> 157.143.34.100:46408 ........ 0 1 76 90 55272 76 2 +2024-04-14 23:59:03.154 00:00:00.000 TCP 157.143.34.100:51943 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:08.059 00:00:00.000 TCP 185.165.191.27:26312 -> 157.143.34.100:1433 ......S. 0 1 44 0 0 44 1 +2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 -> 157.143.34.100:59739 ........ 0 13 4154 114 291508 319 2 +2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:64043 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 -> 213.144.148.130:28919 ...AP..F 0 77363 4.4 M 408 183950 56 2 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:53717 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:54:46.461 00:04:00.298 TCP 172.217.168.3:80 -> 157.143.34.100:57657 ...AP... 0 5 895 0 29 179 2 +2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:56559 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61573 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:54:38.798 00:04:29.864 TCP 157.143.34.100:51134 -> 142.251.31.188:5228 ...AP... 0 11 653 0 19 59 2 +2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:55160 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:22.598 00:00:00.010 UDP 77.109.132.50:123 -> 157.143.34.100:64169 ........ 0 1 76 100 60800 76 2 +2024-04-14 23:59:34.639 00:00:00.000 TCP 79.110.62.75:56012 -> 157.143.34.100:5293 ......S. 0 1 40 0 0 40 1 +2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 -> 157.143.34.100:59352 ...AP.SF 0 29 18602 0 4803 641 2 +2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:54666 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:03.423 00:00:00.000 TCP 157.143.34.100:50809 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:58:41.389 00:00:00.000 TCP 162.216.149.113:51980 -> 157.143.34.100:9581 ......S. 0 1 44 0 0 44 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:52026 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:62900 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:57:56.606 00:00:35.017 TCP 157.143.34.100:63078 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:14.683 00:00:00.000 UDP 43.163.240.155:59998 -> 157.143.34.100:11211 ........ 0 1 99 0 0 99 1 +2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:55135 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:28.871 00:00:00.020 UDP 216.239.35.0:123 -> 157.143.34.100:55198 ........ 0 1 76 50 30400 76 2 +2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:64298 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:57:56.403 00:00:35.019 TCP 157.143.34.100:51720 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:14.065 00:00:00.000 TCP 95.214.27.8:48358 -> 157.143.34.100:8767 ......S. 0 1 44 0 0 44 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:60801 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:57319 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:64995 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:61063 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:57:57.205 00:00:35.019 TCP 157.143.34.100:56945 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:20.746 00:00:00.021 UDP 157.143.34.100:2711 -> 216.239.32.10:53 ........ 0 1 75 47 28571 75 2 +2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:51080 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:03.626 00:00:00.000 TCP 157.143.34.100:65294 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:03.042 00:00:00.000 TCP 157.143.34.100:53859 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:64330 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:59653 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:57:56.129 00:00:35.021 TCP 157.143.34.100:64367 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:48.803 00:00:00.000 TCP 35.203.210.92:51820 -> 157.143.34.100:17547 ......S. 0 1 44 0 0 44 1 +2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:60616 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:57366 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:58:57.900 00:00:35.009 TCP 157.143.34.100:52333 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:59307 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:54845 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:58369 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:57:56.026 00:00:35.013 TCP 157.143.34.100:59696 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:55.834 00:00:35.020 TCP 157.143.34.100:51823 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:28.116 00:01:00.031 ICMP 157.143.34.100:0 -> 8.8.8.8:8.0 ........ 0 4 304 0 40 76 4 +2024-04-14 23:59:20.765 00:00:00.000 UDP 216.239.36.10:53 -> 157.143.34.100:43966 ........ 0 1 187 0 0 187 1 +2024-04-15 00:03:25.950 00:00:00.235 TCP 157.143.34.100:56142 <-> 54.78.190.126:443 12 12 6732 1369 2 +2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 <-> 157.143.34.100:62096 31 29 6893 18600 2 +2024-04-15 00:03:01.359 00:00:00.235 TCP 104.22.15.70:443 <-> 157.143.34.100:58020 12 10 2982 5716 2 +2024-04-15 00:06:22.130 00:00:00.104 UDP 172.217.168.42:443 <-> 157.143.34.100:59255 11 11 4134 4142 2 +2024-04-15 00:05:44.685 00:00:30.997 TCP 17.248.209.68:443 <-> 157.143.34.100:58880 32 29 6945 18601 2 +2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 <-> 2.21.22.179:443 14 12 11839 2107 2 +2024-04-15 00:03:25.444 00:00:00.461 TCP 104.22.15.70:443 <-> 157.143.34.100:61719 12 14 1547 8683 2 +2024-04-15 00:06:24.093 00:00:00.150 TCP 172.217.168.42:443 <-> 157.143.34.100:51654 0 16 0 8224 1 +2024-04-15 00:05:43.067 00:00:31.027 TCP 13.224.103.88:443 <-> 157.143.34.100:60765 13 11 1562 7425 2 +2024-04-15 00:02:30.187 00:00:31.035 TCP 17.248.209.70:443 <-> 157.143.34.100:50515 35 31 7113 18713 2 +2024-04-15 00:06:22.740 00:00:00.127 TCP 172.217.168.42:443 <-> 157.143.34.100:54951 0 9 0 6256 1 +2024-04-15 00:06:21.134 00:00:00.091 TCP 172.217.168.42:443 <-> 157.143.34.100:65089 8 7 1069 6187 2 +2024-04-15 00:04:40.006 00:00:31.014 TCP 17.248.209.68:443 <-> 157.143.34.100:53757 34 30 7061 18660 2 +2024-04-15 00:03:37.356 00:00:00.180 TCP 13.224.103.47:443 <-> 157.143.34.100:63066 13 12 1676 7012 2 +2024-04-15 00:06:23.422 00:00:00.260 TCP 172.217.168.3:443 <-> 157.143.34.100:51203 0 10 0 5830 1 +2024-04-15 00:06:21.097 00:00:00.494 UDP 172.217.168.42:443 <-> 157.143.34.100:53011 32 29 10776 9134 2 +2024-04-14 23:59:33.733 00:05:00.280 TCP 157.143.34.100:58186 <-> 172.217.218.188:5228 18 12 1098 1008 2 +2024-04-15 00:06:23.212 00:00:00.043 TCP 172.217.168.42:443 <-> 157.143.34.100:59891 0 7 0 6183 1 +2024-04-14 23:59:48.800 00:00:30.957 TCP 17.248.209.66:443 <-> 157.143.34.100:56527 32 29 6945 18599 2 +2024-04-15 00:01:10.411 00:04:00.118 TCP 172.217.168.46:443 <-> 157.143.34.100:61354 22 20 6831 2568 2 +2024-04-15 00:06:22.291 00:00:00.082 UDP 172.217.168.42:443 <-> 157.143.34.100:61593 0 12 0 4310 1 +2024-04-15 00:04:21.362 00:00:01.427 TCP 157.143.34.100:61426 <-> 2.21.22.179:443 14 12 11736 2093 2 +2024-04-15 00:06:13.946 00:00:00.163 TCP 172.217.168.46:443 <-> 157.143.34.100:62402 14 13 2093 9207 2 +2024-04-14 23:54:27.599 00:10:00.268 TCP 172.217.168.3:80 <-> 157.143.34.100:59696 31 21 4672 2362 4 +2024-04-15 00:03:02.757 00:00:31.032 TCP 17.248.209.70:443 <-> 157.143.34.100:56357 32 29 6945 18599 2 +2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 <-> 157.143.34.100:62151 11 11 1934 4264 2 +2024-04-15 00:06:23.300 00:00:00.068 UDP 172.217.168.46:443 <-> 157.143.34.100:65143 0 10 0 4065 1 +2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 <-> 157.143.34.100:51638 10 13 2112 6591 2 +2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 <-> 157.143.34.100:59739 13 13 4781 4154 2 +2024-04-15 00:04:37.438 00:00:30.643 TCP 17.171.47.23:443 <-> 157.143.34.100:61655 15 20 3579 16585 2 +2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 <-> 213.144.148.130:28919 114757 77363 160.9 M 4.4 M 2 +2024-04-15 00:06:22.149 00:00:00.101 UDP 172.217.168.42:443 <-> 157.143.34.100:51648 0 13 0 7924 1 +2024-04-15 00:06:22.156 00:00:00.080 UDP 172.217.168.42:443 <-> 157.143.34.100:62094 0 11 0 4235 1 +2024-04-15 00:03:35.178 00:00:30.994 TCP 17.248.209.70:443 <-> 157.143.34.100:58109 32 31 7510 18717 2 +2024-04-15 00:04:07.739 00:00:30.996 TCP 17.248.209.68:443 <-> 157.143.34.100:54177 33 29 6997 18600 2 +2024-04-14 23:54:46.461 00:09:00.639 TCP 157.143.34.100:57657 <-> 172.217.168.3:80 0 20 0 4330 2 +2024-04-15 00:03:37.183 00:00:00.181 TCP 13.224.103.47:443 <-> 157.143.34.100:62379 12 12 1574 7405 2 +2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 <-> 157.143.34.100:59352 33 29 7661 18602 2 +2024-04-15 00:00:21.008 00:00:31.018 TCP 17.248.209.66:443 <-> 157.143.34.100:62570 31 29 6893 18601 2 +2024-04-15 00:01:25.509 00:00:30.947 TCP 17.248.209.70:443 <-> 157.143.34.100:50258 33 29 6997 18599 2 +2024-04-15 00:04:37.481 00:00:01.097 TCP 157.143.34.100:58134 <-> 17.253.15.204:443 13 12 6168 1668 2 +2024-04-15 00:06:21.236 00:00:00.995 UDP 172.217.168.42:443 <-> 157.143.34.100:61866 0 20 0 5794 1 +2024-04-15 00:01:09.800 00:00:00.348 TCP 157.143.34.100:61318 <-> 142.250.203.115:443 11 12 5919 1657 2 +2024-04-15 00:00:53.217 00:00:30.938 TCP 17.248.209.66:443 <-> 157.143.34.100:57665 31 28 6893 18476 2 +2024-04-15 00:01:57.818 00:00:30.998 TCP 17.248.209.70:443 <-> 157.143.34.100:53916 33 29 7009 18601 2 +2024-04-15 00:02:44.996 00:00:06.716 TCP 52.48.41.28:443 <-> 157.143.34.100:59373 20 18 2131 4295 2 +2024-04-14 23:59:16.526 00:00:31.011 TCP 17.248.209.66:443 <-> 157.143.34.100:62179 32 29 6945 18600 2 +2024-04-15 00:03:26.152 00:00:00.227 TCP 157.143.34.100:53018 <-> 54.78.190.126:443 11 12 7222 1355 2 +2024-04-15 00:06:21.700 00:00:00.521 UDP 172.217.168.42:443 <-> 157.143.34.100:59480 21 26 5602 14779 2 +2024-04-15 00:03:37.356 00:00:00.173 TCP 13.224.103.47:443 <-> 157.143.34.100:60460 12 12 1634 7012 2 +2024-04-15 00:05:12.425 00:00:30.973 TCP 17.248.209.68:443 <-> 157.143.34.100:53730 32 29 6945 18529 2 +2024-04-15 00:03:26.344 00:00:00.233 TCP 157.143.34.100:54916 <-> 54.78.190.126:443 12 13 6786 1409 2 +2024-04-15 00:06:23.187 00:00:00.447 UDP 172.217.168.42:443 <-> 157.143.34.100:63665 0 20 0 7353 1 +2024-04-15 00:03:10.588 00:00:37.586 TCP 157.143.34.100:51573 <-> 35.231.208.158:443 8 10 3814 1602 2 +2024-04-15 00:03:25.950 00:00:00.235 TCP 157.143.34.100:56142 <-> 54.78.190.126:443 ...AP.SF 0 12 12 6732 1369 2 +2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 <-> 157.143.34.100:62096 ...AP.SF 0 31 29 6893 18600 2 +2024-04-15 00:03:01.359 00:00:00.235 TCP 104.22.15.70:443 <-> 157.143.34.100:58020 ...AP.SF 0 12 10 2982 5716 2 +2024-04-15 00:06:22.130 00:00:00.104 UDP 172.217.168.42:443 <-> 157.143.34.100:59255 ........ 0 11 11 4134 4142 2 +2024-04-15 00:05:44.685 00:00:30.997 TCP 17.248.209.68:443 <-> 157.143.34.100:58880 ...AP.SF 0 32 29 6945 18601 2 +2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 <-> 2.21.22.179:443 CE.APRSF 0 14 12 11839 2107 2 +2024-04-15 00:03:25.444 00:00:00.461 TCP 104.22.15.70:443 <-> 157.143.34.100:61719 ...AP.SF 0 12 14 1547 8683 2 +2024-04-15 00:06:24.093 00:00:00.150 TCP 172.217.168.42:443 <-> 157.143.34.100:51654 ...AP.S. 0 0 16 0 8224 1 +2024-04-15 00:05:43.067 00:00:31.027 TCP 13.224.103.88:443 <-> 157.143.34.100:60765 ...AP.SF 0 13 11 1562 7425 2 +2024-04-15 00:02:30.187 00:00:31.035 TCP 17.248.209.70:443 <-> 157.143.34.100:50515 ...AP.SF 0 35 31 7113 18713 2 +2024-04-15 00:06:22.740 00:00:00.127 TCP 172.217.168.42:443 <-> 157.143.34.100:54951 ...AP.S. 0 0 9 0 6256 1 +2024-04-15 00:06:21.134 00:00:00.091 TCP 172.217.168.42:443 <-> 157.143.34.100:65089 ...AP.S. 0 8 7 1069 6187 2 +2024-04-15 00:04:40.006 00:00:31.014 TCP 17.248.209.68:443 <-> 157.143.34.100:53757 ...AP.SF 0 34 30 7061 18660 2 +2024-04-15 00:03:37.356 00:00:00.180 TCP 13.224.103.47:443 <-> 157.143.34.100:63066 ...AP.SF 0 13 12 1676 7012 2 +2024-04-15 00:06:23.422 00:00:00.260 TCP 172.217.168.3:443 <-> 157.143.34.100:51203 ...AP.S. 0 0 10 0 5830 1 +2024-04-15 00:06:21.097 00:00:00.494 UDP 172.217.168.42:443 <-> 157.143.34.100:53011 ........ 0 32 29 10776 9134 2 +2024-04-14 23:59:33.733 00:05:00.280 TCP 157.143.34.100:58186 <-> 172.217.218.188:5228 ...AP... 0 18 12 1098 1008 2 +2024-04-15 00:06:23.212 00:00:00.043 TCP 172.217.168.42:443 <-> 157.143.34.100:59891 ...AP.S. 0 0 7 0 6183 1 +2024-04-14 23:59:48.800 00:00:30.957 TCP 17.248.209.66:443 <-> 157.143.34.100:56527 ...AP.SF 0 32 29 6945 18599 2 +2024-04-15 00:01:10.411 00:04:00.118 TCP 172.217.168.46:443 <-> 157.143.34.100:61354 ...AP.SF 0 22 20 6831 2568 2 +2024-04-15 00:06:22.291 00:00:00.082 UDP 172.217.168.42:443 <-> 157.143.34.100:61593 ........ 0 0 12 0 4310 1 +2024-04-15 00:04:21.362 00:00:01.427 TCP 157.143.34.100:61426 <-> 2.21.22.179:443 CE.APRSF 0 14 12 11736 2093 2 +2024-04-15 00:06:13.946 00:00:00.163 TCP 172.217.168.46:443 <-> 157.143.34.100:62402 ...AP.SF 0 14 13 2093 9207 2 +2024-04-14 23:54:27.599 00:10:00.268 TCP 172.217.168.3:80 <-> 157.143.34.100:59696 ...AP... 0 31 21 4672 2362 4 +2024-04-15 00:03:02.757 00:00:31.032 TCP 17.248.209.70:443 <-> 157.143.34.100:56357 ...AP.SF 0 32 29 6945 18599 2 +2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 <-> 157.143.34.100:62151 ...AP.SF 0 11 11 1934 4264 2 +2024-04-15 00:06:23.300 00:00:00.068 UDP 172.217.168.46:443 <-> 157.143.34.100:65143 ........ 0 0 10 0 4065 1 +2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 <-> 157.143.34.100:51638 ...AP.S. 0 10 13 2112 6591 2 +2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 <-> 157.143.34.100:59739 ........ 0 13 13 4781 4154 2 +2024-04-15 00:04:37.438 00:00:30.643 TCP 17.171.47.23:443 <-> 157.143.34.100:61655 .E.APRSF 0 15 20 3579 16585 2 +2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 <-> 213.144.148.130:28919 ...AP..F 0 114757 77363 160.9 M 4.4 M 2 +2024-04-15 00:06:22.149 00:00:00.101 UDP 172.217.168.42:443 <-> 157.143.34.100:51648 ........ 0 0 13 0 7924 1 +2024-04-15 00:06:22.156 00:00:00.080 UDP 172.217.168.42:443 <-> 157.143.34.100:62094 ........ 0 0 11 0 4235 1 +2024-04-15 00:03:35.178 00:00:30.994 TCP 17.248.209.70:443 <-> 157.143.34.100:58109 ...AP.SF 0 32 31 7510 18717 2 +2024-04-15 00:04:07.739 00:00:30.996 TCP 17.248.209.68:443 <-> 157.143.34.100:54177 ...AP.SF 0 33 29 6997 18600 2 +2024-04-14 23:54:46.461 00:09:00.639 TCP 157.143.34.100:57657 <-> 172.217.168.3:80 ...AP... 0 0 20 0 4330 2 +2024-04-15 00:03:37.183 00:00:00.181 TCP 13.224.103.47:443 <-> 157.143.34.100:62379 ...AP.SF 0 12 12 1574 7405 2 +2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 <-> 157.143.34.100:59352 ...AP.SF 0 33 29 7661 18602 2 +2024-04-15 00:00:21.008 00:00:31.018 TCP 17.248.209.66:443 <-> 157.143.34.100:62570 ...AP.SF 0 31 29 6893 18601 2 +2024-04-15 00:01:25.509 00:00:30.947 TCP 17.248.209.70:443 <-> 157.143.34.100:50258 ...AP.SF 0 33 29 6997 18599 2 +2024-04-15 00:04:37.481 00:00:01.097 TCP 157.143.34.100:58134 <-> 17.253.15.204:443 CE.APRSF 0 13 12 6168 1668 2 +2024-04-15 00:06:21.236 00:00:00.995 UDP 172.217.168.42:443 <-> 157.143.34.100:61866 ........ 0 0 20 0 5794 1 +2024-04-15 00:01:09.800 00:00:00.348 TCP 157.143.34.100:61318 <-> 142.250.203.115:443 ...AP.SF 0 11 12 5919 1657 2 +2024-04-15 00:00:53.217 00:00:30.938 TCP 17.248.209.66:443 <-> 157.143.34.100:57665 ...AP.SF 0 31 28 6893 18476 2 +2024-04-15 00:01:57.818 00:00:30.998 TCP 17.248.209.70:443 <-> 157.143.34.100:53916 ...AP.SF 0 33 29 7009 18601 2 +2024-04-15 00:02:44.996 00:00:06.716 TCP 52.48.41.28:443 <-> 157.143.34.100:59373 ...AP.SF 0 20 18 2131 4295 2 +2024-04-14 23:59:16.526 00:00:31.011 TCP 17.248.209.66:443 <-> 157.143.34.100:62179 ...AP.SF 0 32 29 6945 18600 2 +2024-04-15 00:03:26.152 00:00:00.227 TCP 157.143.34.100:53018 <-> 54.78.190.126:443 ...AP.SF 0 11 12 7222 1355 2 +2024-04-15 00:06:21.700 00:00:00.521 UDP 172.217.168.42:443 <-> 157.143.34.100:59480 ........ 0 21 26 5602 14779 2 +2024-04-15 00:03:37.356 00:00:00.173 TCP 13.224.103.47:443 <-> 157.143.34.100:60460 ...AP.SF 0 12 12 1634 7012 2 +2024-04-15 00:05:12.425 00:00:30.973 TCP 17.248.209.68:443 <-> 157.143.34.100:53730 ...AP.SF 0 32 29 6945 18529 2 +2024-04-15 00:03:26.344 00:00:00.233 TCP 157.143.34.100:54916 <-> 54.78.190.126:443 ...AP.SF 0 12 13 6786 1409 2 +2024-04-15 00:06:23.187 00:00:00.447 UDP 172.217.168.42:443 <-> 157.143.34.100:63665 ........ 0 0 20 0 7353 1 +2024-04-15 00:03:10.588 00:00:37.586 TCP 157.143.34.100:51573 <-> 35.231.208.158:443 ...AP.SF 0 8 10 3814 1602 2 + +Flow Record: + RecordCount = 1 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 353 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132205950 [2024-04-15 00:03:25.950] + last = 1713132206185 [2024-04-15 00:03:26.185] + received at = 1713132277673 [2024-04-15 00:04:37.673] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 56142 + dst port = 443 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 1369 + src addr = 157.143.34.100 + dst addr = 54.78.190.126 + out packets = 12 + out bytes = 6732 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 33.772 ms + srv latency = 0.000 ms + app latency = 0.192 ms + in payload = 173 + TLS version = TLS 1.2 + sni name = www.qobuz.com + ja3 hash = e4d448cdfe06dc1243c1eb026c74ac9a + ja4 hash = t12d220700_0d4ca5d4ec72_3304d8368043 +16 03 03 00 A8 01 00 00 A4 03 03 66 1C 52 AD 5A | ...........f.R.Z +BC 09 1D B4 3F 77 22 C0 76 9B 66 08 AC 30 E0 84 | ....?w".v.f..0.. +8D FA D9 E8 DE 46 3E 36 85 38 C2 00 00 2C 00 FF | .....F>6.8...,.. +C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0 +C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'.......... +00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 4F 00 00 | .=.<.5./.....O.. +00 12 00 10 00 00 0D 77 77 77 2E 71 6F 62 75 7A | .......www.qobuz +2E 63 6F 6D 00 0A 00 08 00 06 00 17 00 18 00 19 | .com............ +00 0B 00 02 01 00 00 0D 00 12 00 10 04 01 02 01 | ................ +05 01 06 01 04 03 02 03 05 03 06 03 00 05 00 05 | ................ +01 00 00 00 00 00 12 00 00 00 17 00 00 | ............. + +Flow Record: + RecordCount = 2 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131924315 [2024-04-14 23:58:44.315] + last = 1713131955289 [2024-04-14 23:59:15.289] + received at = 1713132056973 [2024-04-15 00:00:56.973] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 62096 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18600 + src addr = 17.248.209.71 + dst addr = 157.143.34.100 + out packets = 31 + out bytes = 6893 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 20.436 ms + srv latency = 0.000 ms + app latency = 0.511 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 49 BA 87 66 52 | ....z...v..I..fR +4C C5 4D 23 B4 8F 17 EC 17 67 CE 2D 85 2A 3C 0B | L.M#.....g.-.*<. +74 6A FF D8 6B 20 CD DD 52 17 08 20 09 40 D6 50 | tj..k ..R.. .@.P +CA B4 ED E7 95 E3 79 7A A7 F5 8D 69 87 C5 D1 2F | ......yz...i.../ +DE F0 4E 7D 59 4B B2 E2 25 00 7A 7C 13 02 00 00 | ..N}YK..%.z|.... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 31 | ..+.....3.$... 1 +AA E8 62 9E AD 02 D2 0C 46 E2 E1 07 4B 5F DA 99 | ..b.....F...K_.. +72 42 F3 E1 89 E0 A4 C9 06 CA D4 D9 5D 19 3C 14 | rB..........].<. +03 03 00 01 01 17 03 03 00 2A 6F 9E 45 C3 4E 87 | .........*o.E.N. +6C 98 B1 8D 44 F1 9F 33 EF 92 F6 EA 08 48 96 FE | l...D..3.....H.. +30 81 44 12 6E 90 45 67 86 02 E7 FD 35 A4 B8 B5 | 0.D.n.Eg....5... +91 28 7A 46 17 03 03 11 25 82 A9 6B DB 38 8B DB | .(zF....%..k.8.. +00 69 94 CC 41 FC FA 18 FD 43 DC D5 93 27 47 13 | .i..A....C...'G. +7E 9A 79 16 26 19 2F CE 51 CD 31 FB C2 56 9C 15 | ~.y.&./.Q.1..V.. +F8 8C 06 8E D5 A2 2D 03 89 6E C2 4F 55 A2 70 0D | ......-..n.OU.p. +A1 B6 3D 8A 82 49 15 57 54 A2 67 64 FB 13 A8 9A | ..=..I.WT.gd.... +AE A8 89 E4 66 87 16 05 C7 A3 10 5B DC 26 1B B2 | ....f......[.&.. +6F 01 72 7F 4D 19 BE 21 E0 43 C5 DA 23 35 E0 EB | o.r.M..!.C..#5.. +3E 70 C7 66 7E C3 B4 D4 34 F6 F1 FE 26 5F B6 D5 | >p.f~...4...&_.. +E6 26 B9 0E 16 00 B2 1C 42 41 F3 4E 8C E1 64 8D | .&......BA.N..d. +9A 2D 47 52 B9 11 17 8E 36 9B 78 EF 55 91 BB 3D | .-GR....6.x.U..= +B7 58 5D F0 BB FA 24 53 94 C3 A1 ED C1 C8 ED 72 | .X]...$S.......r +C0 85 ED F3 C9 35 C1 D4 56 7D 0A 91 B0 41 5E 21 | .....5..V}...A^! +19 BE 80 04 BF E7 D7 AB 14 D7 CD 83 56 3A BE 9B | ............V:.. +F7 29 69 15 92 30 25 46 6C 9B FF 0B 15 16 E5 8E | .)i..0%Fl....... +22 F9 AC 33 AA BD 8A BA 1D E3 BB 4A 9D E5 31 5B | "..3.......J..1[ +57 5A 6A E2 86 3F 24 91 D0 0B DD 76 7A 7B 69 33 | WZj..?$....vz{i3 +74 48 81 07 65 AD 07 EB 74 00 2E 58 D2 7B A6 FA | tH..e...t..X.{.. +04 DD D6 7A F4 EE 41 06 A5 9C CF 89 B1 36 A5 0C | ...z..A......6.. +C1 A6 91 D5 DE 3B 0C A3 A5 27 11 66 0C A5 D8 FB | .....;...'.f.... +E4 D0 52 28 4A 20 84 AB 4E 85 D4 3B A1 71 36 92 | ..R(J ..N..;.q6. +3D A0 C1 71 F8 A5 E1 73 66 BE 42 76 57 D5 89 48 | =..q...sf.BvW..H +76 EB 09 3C 24 ED F4 23 93 38 CF 2B BE F1 54 6E | v..<$..#.8.+..Tn +11 39 6E 51 7B 86 B8 9D 7A E4 61 58 FF F7 0D 9A | .9nQ{...z.aX.... +90 BA A0 E2 E8 99 1E 5E 2C 34 56 C5 37 A4 8F E5 | .......^,4V.7... +B6 05 76 E3 E0 F3 2A 3E FD FF D2 C2 04 5B 63 10 | ..v...*>.....[c. +A5 1B C7 9A D5 07 A2 CB 0E C2 34 D3 C1 F3 BB 4F | ..........4....O +45 AB C0 98 AF A0 23 34 46 47 29 DD D4 87 91 04 | E.....#4FG)..... +24 EB 44 CD 86 EB 1F D5 6F D1 28 37 03 B1 58 ED | $.D.....o.(7..X. +C4 2D 34 0A 2F A3 28 B3 68 B5 CB 0F 54 F3 9A 75 | .-4./.(.h...T..u +BB C3 D3 E6 CA A4 D0 73 D0 8B F1 78 EC CB BE F7 | .......s...x.... +97 44 5C B1 30 03 22 4C CF 0D E1 26 35 ED 95 15 | .D\.0."L...&5... +46 9D FF 9C AB CD 32 6E 51 A2 F5 51 C6 C0 E3 D5 | F.....2nQ..Q.... +8D F8 65 B8 10 BA F7 3A 9A 3A 62 1D F1 6C C5 80 | ..e....:.:b..l.. +44 C7 02 47 70 65 FA 38 2C 7F AB FF 7A 51 A2 73 | D..Gpe.8,...zQ.s +A2 B0 32 CA BF 14 18 AA 51 71 43 4A 1E 36 D4 9A | ..2.....QqCJ.6.. +DD 52 E8 F0 D1 1D 03 14 F5 CA EC F1 05 92 25 78 | .R............%x +79 9D 90 F3 EC 7E A4 12 9C 04 29 05 55 D7 9B C5 | y....~....).U... +60 CA 3D 82 C5 D4 CF C5 89 F6 F0 22 60 BE A9 BB | `.=........"`... +56 47 1D 32 90 B3 31 D3 49 17 4C DC 55 DB 74 31 | VG.2..1.I.L.U.t1 +D6 88 CA 28 D6 CB 87 F0 95 C8 C9 D6 B4 F7 FC 8D | ...(............ +0B 49 1E 2E 44 1E 04 FC 07 82 30 49 AB 75 8E 22 | .I..D.....0I.u." +AF C8 1F B8 D4 2B 1A ED 28 07 B5 F7 24 1F 41 9F | .....+..(...$.A. +A1 B2 A5 32 4A D5 42 5C A4 52 6A 52 D7 7B 07 CA | ...2J.B\.RjR.{.. +4A 06 11 7C 32 3F 54 06 9C C5 8B B5 3E 9A AE 3E | J..|2?T.....>..> +BD A4 17 22 15 68 69 29 F6 46 B1 B1 92 70 35 88 | ...".hi).F...p5. +1F FE E9 2D 58 13 AA 84 0B C3 53 39 17 C8 52 38 | ...-X.....S9..R8 +7F 42 EF 10 20 09 98 B5 A1 0A 50 CF C4 0B 0D E0 | .B.. .....P..... +9A F6 2E 5C 18 C2 9D F8 CB 30 BD 35 28 76 A5 F8 | ...\.....0.5(v.. +93 2C A0 F9 5A E5 1F 2C 37 42 BF D3 42 72 61 E9 | .,..Z..,7B..Bra. +06 26 71 61 07 BE 99 78 58 CB 30 9A 0B 78 81 71 | .&qa...xX.0..x.q +74 EF 2C 03 34 CD 1F E3 A1 55 45 38 70 5F 0B F9 | t.,.4....UE8p_.. +B6 9E 20 4A 13 21 DD 50 91 2B 57 16 96 7A 50 62 | .. J.!.P.+W..zPb +9E 55 58 54 18 24 82 9E 0D D7 DE 91 C8 22 B5 DD | .UXT.$.......".. +20 8B 36 47 DF D2 7C 50 3C CF ED 97 08 50 31 A4 | .6G..|P<....P1. +76 F2 BD ED 34 26 32 70 A2 A3 F4 EC C9 1C C7 55 | v...4&2p.......U +9C 17 99 35 90 B5 36 27 76 B9 01 31 D5 35 69 B0 | ...5..6'v..1.5i. +C6 4D 5A FC 90 A4 52 2E 67 F9 7A 06 6C B7 3E A8 | .MZ...R.g.z.l.>. +99 A3 43 1A FF C1 77 16 0B 42 B7 87 CC C7 67 A0 | ..C...w..B....g. +A9 80 83 DB 2C 7C 57 79 DE 2F FC ED FC F0 C5 AB | ....,|Wy./...... +6D 61 DE 5F 1B FB 5E C8 FC C0 26 14 1B 0B 98 42 | ma._..^...&....B +22 66 61 04 3A 8C E7 93 61 27 34 D8 2E 37 CB F5 | "fa.:...a'4..7.. +F4 5A D7 75 9E C1 DE 3E CD 7C 36 31 1D 69 27 D8 | .Z.u...>.|61.i'. +38 0A A0 B0 C5 72 26 8C 6E 9A D5 21 5F EE 18 10 | 8....r&.n..!_... +4E B3 BE EC 75 74 B8 17 EE 92 D9 C0 F0 4D 82 10 | N...ut.......M.. +49 D4 54 25 C3 BE 6D F9 21 A6 19 3A 3F 22 88 97 | I.T%..m.!..:?".. +AF 5C B9 23 88 C6 06 DA F7 63 38 D3 75 D8 39 E9 | .\.#.....c8.u.9. +C2 DA 1A B2 AC 86 87 82 84 0C 5C 12 F0 F4 96 55 | ..........\....U +A6 22 49 61 23 79 2C B1 41 5F A3 A6 9D C5 72 5E | ."Ia#y,.A_....r^ +CA 3B A3 87 EB 51 50 59 EF 9E C7 2E FD 8E C6 E5 | .;...QPY........ +E4 28 78 F8 BC 57 23 EC 68 C8 36 BF A7 74 A2 8D | .(x..W#.h.6..t.. +4D 08 18 7C 0B EE 94 FF 3A AD 08 1E 1A B9 51 3E | M..|....:.....Q> +A5 1F C9 69 60 09 6D 30 33 0E A1 97 1D 74 68 EC | ...i`.m03....th. +4B 8D 3D 75 54 65 55 98 A7 56 A2 7F C4 74 AD 82 | K.=uTeU..V...t.. +65 14 01 AE 2C F1 C0 28 30 D7 E1 52 EA 9E 85 3C | e...,..(0..R...< +E7 9B 4C CC 2F 06 32 ED 39 44 ED 98 7B 42 30 BA | ..L./.2.9D..{B0. +43 97 3F D2 21 FC 23 68 F0 DA DB 54 A8 AB B1 2A | C.?.!.#h...T...* +B4 55 D4 46 61 63 F2 84 53 F0 8E 48 37 CF B4 42 | .U.Fac..S..H7..B +AB 71 22 4A B0 3B 85 52 52 65 1F 54 3F FF DB D9 | .q"J.;.RRe.T?... +6F A0 AB 75 52 5E B5 69 0B A6 0B 83 3E 43 E6 49 | o..uR^.i....>C.I +A2 5F 22 40 57 2A 7B A3 | ._"@W*{. + +Flow Record: + RecordCount = 3 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132181359 [2024-04-15 00:03:01.359] + last = 1713132181594 [2024-04-15 00:03:01.594] + received at = 1713132277671 [2024-04-15 00:04:37.671] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 58020 + src tos = 0 + fwd status = 0 + in packets = 10 + in bytes = 5716 + src addr = 104.22.15.70 + dst addr = 157.143.34.100 + out packets = 12 + out bytes = 2982 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 20.021 ms + srv latency = 0.000 ms + app latency = 2.690 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 22a29273c84f24c87ea605eb553e276c + ja4s hash = t130500_c02b_926e7c93a85d +16 03 03 00 63 02 00 00 5F 03 03 66 1C 52 95 D7 | ....c..._..f.R.. +7D 9A A6 14 66 72 15 EE D8 CD 5A B5 8C C2 59 A9 | }...fr....Z...Y. +C1 BE 8B 44 4F 57 4E 47 52 44 01 20 41 EB 3F 41 | ...DOWNGRD. A.?A +3F 9A 01 89 2E FB 2E 77 FA 6C CF 71 72 88 C9 77 | ?......w.l.qr..w +62 18 07 A8 8F 8F 63 B2 FF E6 E6 FC C0 2B 00 00 | b.....c......+.. +17 00 00 00 00 00 17 00 00 FF 01 00 01 00 00 0B | ................ +00 02 01 00 00 05 00 00 16 03 03 10 2A 0B 00 10 | ............*... +26 00 10 23 00 03 85 30 82 03 81 30 82 03 07 A0 | &..#...0...0.... +03 02 01 02 02 12 04 83 EA 68 06 B1 AD EA 76 77 | .........h....vw +39 76 37 6B A8 36 09 DB 30 0A 06 08 2A 86 48 CE | 9v7k.6..0...*.H. +3D 04 03 03 30 32 31 0B 30 09 06 03 55 04 06 13 | =...021.0...U... +02 55 53 31 16 30 14 06 03 55 04 0A 13 0D 4C 65 | .US1.0...U....Le +74 27 73 20 45 6E 63 72 79 70 74 31 0B 30 09 06 | t's Encrypt1.0.. +03 55 04 03 13 02 45 31 30 1E 17 0D 32 34 30 34 | .U....E10...2404 +31 34 30 30 31 39 31 30 5A 17 0D 32 34 30 37 31 | 14001910Z..24071 +33 30 30 31 39 30 39 5A 30 1B 31 19 30 17 06 03 | 3001909Z0.1.0... +55 04 03 13 10 61 70 69 2E 72 6F 6F 6E 6C 61 62 | U....api.roonlab +73 2E 6E 65 74 30 59 30 13 06 07 2A 86 48 CE 3D | s.net0Y0...*.H.= +02 01 06 08 2A 86 48 CE 3D 03 01 07 03 42 00 04 | ....*.H.=....B.. +03 24 E9 47 62 77 D9 B4 96 C5 B3 C4 89 CE 0C 90 | .$.Gbw.......... +20 5F E8 D8 AB 0E E0 42 26 48 8D DE A1 16 8F 3A | _.....B&H.....: +B9 59 C4 D4 ED 39 D3 C0 2A B0 86 2A 97 25 0F 1F | .Y...9..*..*.%.. +35 B4 B8 23 8B 28 0F 27 D2 A2 7E 6A 39 C5 C4 AB | 5..#.(.'..~j9... +A3 82 02 12 30 82 02 0E 30 0E 06 03 55 1D 0F 01 | ....0...0...U... +01 FF 04 04 03 02 07 80 30 1D 06 03 55 1D 25 04 | ........0...U.%. +16 30 14 06 08 2B 06 01 05 05 07 03 01 06 08 2B | .0...+.........+ +06 01 05 05 07 03 02 30 0C 06 03 55 1D 13 01 01 | .......0...U.... +FF 04 02 30 00 30 1D 06 03 55 1D 0E 04 16 04 14 | ...0.0...U...... +0A A2 9D 1D D2 00 85 F6 3D 30 A7 DD 5E 2F 7E 5E | ........=0..^/~^ +78 20 ED 2D 30 1F 06 03 55 1D 23 04 18 30 16 80 | x .-0...U.#..0.. +14 5A F3 ED 2B FC 36 C2 37 79 B9 52 30 EA 54 6F | .Z..+.6.7y.R0.To +CF 55 CB 2E AC 30 55 06 08 2B 06 01 05 05 07 01 | .U...0U..+...... +01 04 49 30 47 30 21 06 08 2B 06 01 05 05 07 30 | ..I0G0!..+.....0 +01 86 15 68 74 74 70 3A 2F 2F 65 31 2E 6F 2E 6C | ...http://e1.o.l +65 6E 63 72 2E 6F 72 67 30 22 06 08 2B 06 01 05 | encr.org0"..+... +05 07 30 02 86 16 68 74 74 70 3A 2F 2F 65 31 2E | ..0...http://e1. +69 2E 6C 65 6E 63 72 2E 6F 72 67 2F 30 1B 06 03 | i.lencr.org/0... +55 1D 11 04 14 30 12 82 10 61 70 69 2E 72 6F 6F | U....0...api.roo +6E 6C 61 62 73 2E 6E 65 74 30 13 06 03 55 1D 20 | nlabs.net0...U. +04 0C 30 0A 30 08 06 06 67 81 0C 01 02 01 30 82 | ..0.0...g.....0. +01 04 06 0A 2B 06 01 04 01 D6 79 02 04 02 04 81 | ....+.....y..... +F5 04 81 F2 00 F0 00 76 00 3B 53 77 75 3E 2D B9 | .......v.;Swu>-. +80 4E 8B 30 5B 06 FE 40 3B 67 D8 4F C3 F4 C7 BD | .N.0[..@;g.O.... +00 0D 2D 72 6F E1 FA D4 17 00 00 01 8E DA 2F D2 | ..-ro........./. +59 00 00 04 03 00 47 30 45 02 20 6F E8 1F A9 FF | Y.....G0E. o.... +36 DA 08 EC F7 36 0B 23 53 C5 A7 03 8F 7D F4 7E | 6....6.#S....}.~ +4C 36 EE 8F C2 18 C1 A1 29 3C 0C 02 21 00 BD 20 | L6......)<..!.. +9B F4 BF 57 40 FD C9 4C BB 99 C3 97 10 4A D1 A0 | ...W@..L.....J.. +BF 15 0F F8 F7 09 29 4B 92 1B 26 71 DE 38 00 76 | ......)K..&q.8.v +00 76 FF 88 3F 0A B6 FB 95 51 C2 61 CC F5 87 BA | .v..?....Q.a.... +34 B4 A4 CD BB 29 DC 68 42 0A 9F E6 67 4C 5A 3A | 4....).hB...gLZ: +74 00 00 01 8E DA 2F D2 86 00 00 04 03 00 47 30 | t...../.......G0 +45 02 20 16 94 7C D4 B6 9E B1 48 6C C9 1A DF 74 | E. ..|....Hl...t +FB D1 68 4B F2 63 29 C5 38 28 41 55 9B 68 55 A7 | ..hK.c).8(AU.hU. +02 B0 44 02 21 00 F5 3D C0 DA B0 F4 EC 78 14 3B | ..D.!..=.....x.; +9B F5 60 22 AC 71 CD CD E4 8F E7 DB 33 68 9C 38 | ..`".q......3h.8 +E0 76 22 EE CF 94 30 0A 06 08 2A 86 48 CE 3D 04 | .v"...0...*.H.=. +03 03 03 68 00 30 65 02 31 00 99 37 0F 43 15 73 | ...h.0e.1..7.C.s +E5 F6 E2 32 68 10 DC 15 4D 34 F2 B9 28 B3 77 CA | ...2h...M4..(.w. +D5 77 0C 98 08 7A 2C 62 FC 9D E7 DE 6A 46 00 52 | .w...z,b....jF.R +6E 92 0D 49 D2 67 BE CD C0 72 02 30 0D 29 D9 D1 | n..I.g...r.0.).. +E4 F5 CF FF 43 83 D1 25 7A 79 9B 4E 7D 53 EE 37 | ....C..%zy.N}S.7 +8C 33 00 6E DE F6 25 2A 68 49 B0 C1 7E FE 82 06 | .3.n..%*hI..~... +53 0B C0 FD 4A EA 99 1F A9 D1 D4 44 00 02 CA 30 | S...J......D...0 +82 02 C6 30 82 02 4D A0 03 02 01 02 02 11 00 B3 | ...0..M......... +BD DF F8 A7 84 5B BC E9 03 A0 41 35 B3 4A 45 30 | .....[....A5.JE0 +0A 06 08 2A 86 48 CE 3D 04 03 03 30 4F 31 0B 30 | ...*.H.=...0O1.0 +09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 | ...U....US1)0'.. +55 04 0A 13 20 49 6E 74 65 72 6E 65 74 20 53 65 | U... Internet Se +63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 | curity Research +47 72 6F 75 70 31 15 30 13 06 03 55 04 03 13 0C | Group1.0...U.... +49 53 52 47 20 52 6F 6F 74 20 58 32 30 1E 17 0D | ISRG Root X20... +32 30 30 39 30 34 30 30 30 30 30 30 5A 17 0D 32 | 200904000000Z..2 +35 30 39 31 35 31 36 30 30 30 30 5A 30 32 31 0B | 50915160000Z021. +30 09 06 03 55 04 06 13 02 55 53 31 16 30 14 06 | 0...U....US1.0.. +03 55 04 0A 13 0D 4C 65 74 27 73 20 45 6E 63 72 | .U....Let's Encr +79 70 74 31 0B 30 09 06 03 55 04 03 13 02 45 31 | ypt1.0...U....E1 +30 76 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B | 0v0...*.H.=....+ +81 04 00 22 03 62 00 04 24 5C 2D A2 2A FD 1C 4B | ...".b..$\-.*..K +A6 5D 97 73 27 31 AC B2 A0 69 62 EF 65 E8 A6 B0 | .].s'1...ib.e... +F0 AC 4B 9F FF 1C 0B 70 0F D3 98 2F 4D FC 0F 00 | ..K....p.../M... +9B 37 F0 74 05 57 32 97 2E 05 EF 2A 43 25 A3 FB | .7.t.W2....*C%.. +6E 34 27 13 F6 4F 7E 69 D3 02 99 5E EB 24 47 92 | n4'..O~i...^.$G. +C1 24 9B E6 B1 21 8F C1 24 81 FC 68 CC 1F 69 BA | .$...!..$..h..i. +58 F5 19 22 F7 74 C6 16 A3 82 01 08 30 82 01 04 | X..".t......0... +30 0E 06 03 55 1D 0F 01 01 FF 04 04 03 02 01 86 | 0...U........... +30 1D 06 03 55 1D 25 04 16 30 14 06 08 2B 06 01 | 0...U.%..0...+.. +05 05 07 03 02 06 08 2B 06 01 05 05 07 03 01 30 | .......+.......0 +12 06 03 55 1D 13 01 01 FF 04 08 30 06 01 01 FF | ...U.......0.... +02 01 00 30 1D 06 03 55 1D 0E 04 16 04 14 5A F3 | ...0...U......Z. +ED 2B FC 36 C2 37 79 B9 | .+.6.7y. + +Flow Record: + RecordCount = 4 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 5 12 15 29 + size = 1402 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132382130 [2024-04-15 00:06:22.130] + last = 1713132382234 [2024-04-15 00:06:22.234] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 59255 + src tos = 0 + fwd status = 0 + in packets = 11 + in bytes = 4142 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + out packets = 11 + out bytes = 4134 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +CA 00 00 00 01 00 08 E5 8A 24 A1 F6 A1 CD 6B 00 | .........$....k. +43 9E DA A3 8B B8 17 5B 5D AA C2 B6 EA 30 50 6F | C......[]....0Po +60 A3 30 DC 21 98 BB DE 84 13 45 CA AE E6 39 DF | `.0.!.....E...9. +5D 8F 92 B6 D0 06 A3 96 D9 CC 00 A8 2C F5 AE E5 | ]...........,... +29 4C 8B 6C 98 E1 45 8F C0 1E 82 14 FC 59 2D 4F | )L.l..E......Y-O +FA F2 14 8C D8 D7 41 8F DB 1D 97 B9 60 EE 3A A6 | ......A.....`.:. +D9 6A EB 92 5A 86 01 5C 49 76 24 52 8C 12 00 B6 | .j..Z..\Iv$R.... +F0 07 C6 8D 6A 4C BA 2B CC 75 1E 6F 5B D7 B9 FA | ....jL.+.u.o[... +78 E5 28 06 96 50 34 07 23 94 9B FA 83 CB 4C AC | x.(..P4.#.....L. +1C 17 2F C1 31 55 33 D8 3B DA 3D F3 2D 6A 01 44 | ../.1U3.;.=.-j.D +A9 D7 5E 34 19 43 E3 3C 61 81 F0 07 82 27 48 16 | ..^4.C.M.M......+ +2C 7F 7B FA E1 41 43 1A 55 C6 F9 6E 83 4B 86 35 | ,.{..AC.U..n.K.5 +ED 84 B9 B4 4F 79 2B 90 6B 3F AA C7 DD CF 56 7E | ....Oy+.k?....V~ +DD DC E7 FE 95 A0 2D EA DB 89 5F 6A E5 0F D1 40 | ......-..._j...@ +8D 5F 4F 67 A5 AC EA 1D 01 2C 4B E4 01 4F 76 CE | ._Og.....,K..Ov. +DA 78 68 CF 00 F3 83 D0 24 88 88 35 94 BF E3 44 | .xh.....$..5...D +FF E3 CB 5B 47 F9 89 91 2A 69 15 E2 48 B2 35 2A | ...[G...*i..H.5* +3E 47 E6 FD 10 FE D2 14 00 19 9A D9 21 A2 7C 7E | >G..........!.|~ +BA 21 A1 A4 34 5C 58 C4 BF 5C 0E 05 B8 34 8C 75 | .!..4\X..\...4.u +5B 38 2A 82 3C 8B EF 3D 09 40 D1 9C E5 1B 99 64 | [8*.<..=.@.....d +A7 2F 66 7C 8C AF 51 61 AD F4 74 EF 4A 15 7E 76 | ./f|..Qa..t.J.~v +0C 14 11 68 E5 5A 09 E3 98 A2 E1 2B 79 38 2E 84 | ...h.Z.....+y8.. +FD D0 F9 62 4F A5 04 A8 78 B3 9E 56 28 48 3B C9 | ...bO...x..V(H;. +B3 41 DB 89 FA 88 86 29 56 3C F0 95 F0 A0 1D 0A | .A.....)V<...... +DC C1 62 31 AC 3A 3C 7A 02 A3 7C 0E CF 62 9C 67 | ..b1.:w.F..o]..o:. +C4 CF 59 19 AE 88 FE 6A 64 9B B3 18 78 43 7D C7 | ..Y....jd...xC}. +3F 36 20 50 B8 2C BE AE 10 28 2E A8 76 65 B4 07 | ?6 P.,...(..ve.. +13 E1 81 E9 A1 58 52 1B 32 4B 31 23 D7 94 F5 B1 | .....XR.2K1#.... +7E 71 5F DF 5B 0A A8 27 D3 44 7C 22 19 98 DC 30 | ~q_.[..'.D|"...0 +7C 1A 49 CF 45 C9 36 85 79 0E 97 22 FF 21 99 0E | |.I.E.6.y..".!.. +CE 2A 62 70 69 9A 9E 23 52 A9 A0 CB 28 EF CC A5 | .*bpi..#R...(... +E5 00 00 00 01 00 08 E5 8A 24 A1 F6 A1 CD 6B 40 | .........$....k@ +DD 9D B6 50 9A 8F FC 48 7E 97 F2 8C B0 EA 2C E2 | ...P...H~.....,. +3C 2D 1B E3 18 B7 D8 90 75 C3 56 18 3F 2C 49 3F | <-......u.V.?,I? +ED FA FE 35 16 20 E0 6D B2 2E F8 64 75 2E F0 F7 | ...5. .m...du... +CF 4A 3B 7D C3 CF 52 3A 85 88 CA 19 83 03 B7 EA | .J;}..R:........ +70 00 5A EC C1 ED 9C 99 B9 AB 1F B2 61 40 48 10 | p.Z.........a@H. +57 2B 2B 50 2A B9 D0 79 81 07 86 9F AE 8C 52 A1 | W++P*..y......R. +4F 82 03 4D 70 59 65 01 BB 95 34 77 56 53 24 B4 | O..MpYe...4wVS$. +6B 28 B2 9E 0F 34 96 F7 36 1B 5F F4 D3 65 C2 A6 | k(...4..6._..e.. +17 16 74 58 2E 1A 44 88 A8 75 90 BE 70 FB 70 DD | ..tX..D..u..p.p. +29 B9 4D 7F 71 33 18 94 5F D6 50 11 60 A9 00 D5 | ).M.q3.._.P.`... +C8 07 59 60 7D 89 45 6A 45 AF 64 19 F9 02 99 99 | ..Y`}.EjE.d..... +81 36 50 D7 D4 05 4D 94 7F 7C 98 62 59 D7 31 FE | .6P...M..|.bY.1. +FF D9 A5 D2 DE C4 3B A1 95 51 F7 95 4E 54 9E 1A | ......;..Q..NT.. +C8 E0 2D 47 BF E8 BA 4E 5D 55 30 BD 00 1F 40 FB | ..-G...N]U0...@. +E0 5F F6 76 52 1A C0 5B 2B F1 E1 87 27 DC 6F A8 | ._.vR..[+...'.o. +CD B7 FE CD 27 36 B3 38 83 E9 F4 D0 BE A0 CE 5F | ....'6.8......._ +33 FF 43 66 EC FD 9A 37 8F F6 31 35 2B A3 6B 13 | 3.Cf...7..15+.k. +49 9A 7E 67 5B 39 8B 2E 50 5F 49 62 C2 98 22 2E | I.~g[9..P_Ib..". +C5 60 | .` + +Flow Record: + RecordCount = 5 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132344685 [2024-04-15 00:05:44.685] + last = 1713132375682 [2024-04-15 00:06:15.682] + received at = 1713132441667 [2024-04-15 00:07:21.667] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 58880 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18601 + src addr = 17.248.209.68 + dst addr = 157.143.34.100 + out packets = 32 + out bytes = 6945 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 15.901 ms + srv latency = 0.000 ms + app latency = 0.477 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 06 5F 5B 5F C9 | ....z...v..._[_. +89 D3 54 BD 52 AF D1 91 4D 77 E2 33 02 79 79 80 | ..T.R...Mw.3.yy. +8A E6 A6 74 F8 2E 54 EB 99 7B 22 20 B3 98 93 D3 | ...t..T..{" .... +FD EB 7B 82 1C 6D CE 5F 4D FC 85 2E 08 13 D8 57 | ..{..m._M......W +7A D0 B5 AA 1D A0 FB B9 06 38 CF 1B 13 02 00 00 | z........8...... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 5A | ..+.....3.$... Z +4D 34 B9 06 BA C1 3B 67 FD 4A 78 18 7A 0E 7F DE | M4....;g.Jx.z... +FA F0 75 D1 54 99 D5 BE FC CA 58 52 B2 B8 06 14 | ..u.T.....XR.... +03 03 00 01 01 17 03 03 00 2A 1C FE 79 61 CA BB | .........*..ya.. +00 74 16 64 A1 C4 A8 89 A4 71 4D 5B 6E 4B C8 F8 | .t.d.....qM[nK.. +D5 5A 79 CA FA 80 F6 59 DE 71 61 E3 97 A9 B3 24 | .Zy....Y.qa....$ +7E AA 09 E7 17 03 03 11 25 98 E8 13 7E 0E C0 6F | ~.......%...~..o +F4 D7 20 62 54 8F AE C2 BA 65 DB 64 8F 9C FB 9A | .. bT....e.d.... +61 11 BB EE 1E B3 40 3F 69 13 F3 DD D3 87 AB 54 | a.....@?i......T +7A E2 63 0A 58 D2 80 85 A3 9D 28 8C A4 EA C3 7C | z.c.X.....(....| +81 5B 05 76 B5 B5 7F 8F 81 CA 1A F4 85 65 CD 0E | .[.v.........e.. +B1 C0 11 66 38 58 79 E9 0E E4 9D 49 2A 23 B8 92 | ...f8Xy....I*#.. +BA 65 8D 86 C9 56 A8 D5 5D 62 52 B0 08 2E F1 B8 | .e...V..]bR..... +CB 37 82 FE 9E FD 25 AF 4C B5 E5 70 D6 61 98 1D | .7....%.L..p.a.. +26 D0 B9 02 9A 59 0A 92 AB 17 3E 30 3D E2 5B BD | &....Y....>0=.[. +62 BF E7 3D 5C 74 D6 CE A2 5D CE 99 0C 3F 19 42 | b..=\t...]...?.B +DC 0C E6 2F 5F 32 59 F2 3C 8A DF 4F E2 14 8E 7B | .../_2Y.<..O...{ +84 6D 19 4B E3 05 EE 17 D7 0B DB AF D3 AA 92 B4 | .m.K............ +6A AF DC DE 5A A1 D2 50 34 C9 9C D6 9E 7E D4 37 | j...Z..P4....~.7 +EA DF C5 2B 13 B9 E4 3C 57 97 45 78 31 7A 1C CF | ...+... +20 F3 65 C5 1B 03 68 7E 0A 13 DB EB BB 37 A3 E6 | .e...h~.....7.. +2C 7B 2E E6 9B 2C BD 73 EC A1 D2 7F 56 02 B2 A2 | ,{...,.s....V... +EE 48 A1 FE 4F 6D A8 EF 09 0C FA F0 C1 C7 39 68 | .H..Om........9h +D2 EE 4B 3B 3C 32 36 85 35 F3 91 51 0A 24 86 73 | ..K;<26.5..Q.$.s +65 20 D7 3F 6B 8D E4 29 EA FD 7F 19 17 42 4D 53 | e .?k..).....BMS +BB 98 1B EB C8 29 A2 BB 4B DA 22 C8 EA 25 0A 52 | .....)..K."..%.R +BA 1E D9 DC AF 82 67 7A FE FD 78 7D 59 A0 8D 47 | ......gz..x}Y..G +9D B2 36 71 23 DA 5B 3E 8E 8E 6B FC D2 E2 E2 4E | ..6q#.[>..k....N +A2 18 DB AF B8 77 C8 A9 4B D9 D9 7A 49 D8 73 56 | .....w..K..zI.sV +4B CE DA 4B 56 22 FE CE DB 4E B7 51 BF 71 1E CF | K..KV"...N.Q.q.. +45 EB 36 AC 25 8D CE 55 61 7A C4 51 15 29 FC 52 | E.6.%..Uaz.Q.).R +4B 51 BA 03 B5 FB AD 24 C3 56 72 19 2A 07 51 1B | KQ.....$.Vr.*.Q. +62 9C 45 19 31 AC F2 9E 6C 44 A6 C9 35 EA 0B 67 | b.E.1...lD..5..g +13 25 1A 88 FC E4 35 D2 87 58 E5 3B AF 0D 4C 56 | .%....5..X.;..LV +C8 F5 B3 22 D6 D9 34 1D CE 76 15 FB BF 79 47 7A | ..."..4..v...yGz +80 E1 0E B5 E4 BA 92 DC 35 35 99 AD 55 4A 25 F0 | ........55..UJ%. +5F 04 B3 A5 70 F5 EE 6E 67 D2 7C E6 3C 14 ED AB | _...p..ng.|.<... +00 BF 33 5E AE F3 6D 61 84 40 48 51 CD B1 71 B4 | ..3^..ma.@HQ..q. +20 5C A2 B2 18 26 9D A6 38 3D 44 FB 55 44 AD CA | \...&..8=D.UD.. +88 71 AE 7B 3D 02 11 B6 DA 49 AF DC 7E 32 32 2E | .q.{=....I..~22. +5A CD C2 FD 5E 07 69 AC 48 33 86 2F EE CE E9 8A | Z...^.i.H3./.... +5E 0D C1 25 52 4A 8A 85 5B E8 4B 70 D9 18 75 D8 | ^..%RJ..[.Kp..u. +EF 27 46 3D 5E 61 F6 E6 64 EA 72 6B 18 B2 EE 65 | .'F=^a..d.rk...e +F9 BB 47 0D 7E 6C 60 29 A8 C4 EA 68 99 16 98 7C | ..G.~l`)...h...| +86 B2 40 92 36 E7 22 54 40 F7 46 91 CD FD 22 99 | ..@.6."T@.F...". +53 9E 83 64 2E CE C7 D4 90 93 A4 22 CE 2F 40 91 | S..d......."./@. +90 62 A7 2C 7C 09 FD F7 38 6D BB 33 AC F3 D7 2B | .b.,|...8m.3...+ +7A 48 A7 18 9B F1 FC F8 19 DF B8 05 B7 C2 B1 10 | zH.............. +CD 5A 92 F5 D6 C9 01 5B 5B A0 4C 98 96 30 0D 55 | .Z.....[[.L..0.U +C8 5D BE B1 CA 5D 26 CF 54 4E 3A 0C 47 33 DB 23 | .]...]&.TN:.G3.# +84 09 60 39 8F EB A9 49 58 87 D5 C2 B6 63 94 72 | ..`9...IX....c.r +AF A7 8D A2 AE B6 C8 B7 CA 4C 20 14 B5 54 F6 0E | .........L ..T.. +86 98 53 62 04 FA D5 FC 3E F2 3C 36 77 C6 0A 55 | ..Sb....>.<6w..U +4E 17 7C F7 09 F1 0D 9D 5E 27 5D 9B 6F 89 75 B0 | N.|.....^'].o.u. +54 28 C0 0E 30 38 6B 54 7B 6F BB 6C BF B4 98 D3 | T(..08kT{o.l.... +4D 9E 8D 5D 67 2E E2 32 17 BC AC 35 65 61 52 34 | M..]g..2...5eaR4 +D9 40 5C 63 CD F0 09 47 BF 47 EB 78 03 1E 12 C4 | .@\c...G.G.x.... +12 D8 24 35 EC 23 B8 CD 14 FC 43 17 C0 FE 79 21 | ..$5.#....C...y! +82 03 DB CF B7 E8 09 8B B4 41 95 D5 82 7D AE 20 | .........A...}. +09 83 EE F4 03 E7 1E 30 | .......0 + +Flow Record: + RecordCount = 6 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 697 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131941133 [2024-04-14 23:59:01.133] + last = 1713131941647 [2024-04-14 23:59:01.647] + received at = 1713132015760 [2024-04-15 00:00:15.760] + proto = 6 TCP + tcp flags = 0xdf CE.APRSF + src port = 57373 + dst port = 443 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 2107 + src addr = 157.143.34.100 + dst addr = 2.21.22.179 + out packets = 14 + out bytes = 11839 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 8.922 ms + srv latency = 0.000 ms + app latency = 0.281 ms + in payload = 517 + TLS version = TLS 1.2 + sni name = weather-data.apple.com + ja3 hash = e252913a211e4a33817d5ac1775d8e55 + ja4 hash = t12d2014h1_a09f3c656075_14788d8d241b +16 03 01 02 00 01 00 01 FC 03 03 32 C8 C9 9C F0 | ...........2.... +AD CA 63 94 02 3F 00 86 B2 D3 DF 74 42 A5 8D 6F | ..c..?.....tB..o +C3 17 5F C5 80 FC 3A 60 37 73 8C 20 0E 6F 59 04 | .._...:`7s. .oY. +DD D8 EB A3 7F 07 F1 ED 5D A9 36 CB BE 5D AF A6 | ........].6..].. +D3 48 65 9E 23 C8 C1 26 35 74 43 CA 00 2A 4A 4A | .He.#..&5tC..*JJ +13 01 13 02 13 03 C0 2C C0 2B CC A9 C0 30 C0 2F | .......,.+...0./ +CC A8 C0 0A C0 09 C0 14 C0 13 00 9D 00 9C 00 35 | ...............5 +00 2F C0 08 C0 12 00 0A 01 00 01 89 7A 7A 00 00 | ./..........zz.. +00 00 00 1B 00 19 00 00 16 77 65 61 74 68 65 72 | .........weather +2D 64 61 74 61 2E 61 70 70 6C 65 2E 63 6F 6D 00 | -data.apple.com. +17 00 00 FF 01 00 01 00 00 0A 00 0C 00 0A 0A 0A | ................ +00 1D 00 17 00 18 00 19 00 0B 00 02 01 00 00 10 | ................ +00 0B 00 09 08 68 74 74 70 2F 31 2E 31 00 05 00 | .....http/1.1... +05 01 00 00 00 00 00 0D 00 18 00 16 04 03 08 04 | ................ +04 01 05 03 02 03 08 05 08 05 05 01 08 06 06 01 | ................ +02 01 00 12 00 00 00 33 00 2B 00 29 0A 0A 00 01 | .......3.+.).... +00 00 1D 00 20 CD D6 86 28 3D 9D 85 AA E0 F6 AD | .... ...(=...... +E1 77 C0 9F A7 4C 94 5F EE A2 51 21 50 F6 24 77 | .w...L._..Q!P.$w +1A B9 3A 7A 05 00 2D 00 02 01 01 00 2B 00 0B 0A | ..:z..-.....+... +3A 3A 03 04 03 03 03 02 03 01 00 1B 00 03 02 00 | ::.............. +01 4A 4A 00 01 00 00 15 00 BB 00 00 00 00 00 00 | .JJ............. +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 | ..... + +Flow Record: + RecordCount = 7 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132205444 [2024-04-15 00:03:25.444] + last = 1713132205905 [2024-04-15 00:03:25.905] + received at = 1713132277672 [2024-04-15 00:04:37.672] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 61719 + src tos = 0 + fwd status = 0 + in packets = 14 + in bytes = 8683 + src addr = 104.22.15.70 + dst addr = 157.143.34.100 + out packets = 12 + out bytes = 1547 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 20.237 ms + srv latency = 0.000 ms + app latency = 0.872 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 22a29273c84f24c87ea605eb553e276c + ja4s hash = t130500_c02b_926e7c93a85d +16 03 03 00 63 02 00 00 5F 03 03 66 1C 52 AD 8D | ....c..._..f.R.. +9B 43 7C 13 66 ED 60 9B C2 29 29 7C C7 4E BE F9 | .C|.f.`..))|.N.. +F6 C0 F8 44 4F 57 4E 47 52 44 01 20 2F A0 46 C8 | ...DOWNGRD. /.F. +DA 94 A0 79 8B 05 C1 B8 C1 C2 5F C5 CF 34 CB 03 | ...y......_..4.. +42 12 2B 03 3B 48 BF 23 C5 A2 E2 32 C0 2B 00 00 | B.+.;H.#...2.+.. +17 00 00 00 00 00 17 00 00 FF 01 00 01 00 00 0B | ................ +00 02 01 00 00 05 00 00 16 03 03 10 2A 0B 00 10 | ............*... +26 00 10 23 00 03 85 30 82 03 81 30 82 03 07 A0 | &..#...0...0.... +03 02 01 02 02 12 04 83 EA 68 06 B1 AD EA 76 77 | .........h....vw +39 76 37 6B A8 36 09 DB 30 0A 06 08 2A 86 48 CE | 9v7k.6..0...*.H. +3D 04 03 03 30 32 31 0B 30 09 06 03 55 04 06 13 | =...021.0...U... +02 55 53 31 16 30 14 06 03 55 04 0A 13 0D 4C 65 | .US1.0...U....Le +74 27 73 20 45 6E 63 72 79 70 74 31 0B 30 09 06 | t's Encrypt1.0.. +03 55 04 03 13 02 45 31 30 1E 17 0D 32 34 30 34 | .U....E10...2404 +31 34 30 30 31 39 31 30 5A 17 0D 32 34 30 37 31 | 14001910Z..24071 +33 30 30 31 39 30 39 5A 30 1B 31 19 30 17 06 03 | 3001909Z0.1.0... +55 04 03 13 10 61 70 69 2E 72 6F 6F 6E 6C 61 62 | U....api.roonlab +73 2E 6E 65 74 30 59 30 13 06 07 2A 86 48 CE 3D | s.net0Y0...*.H.= +02 01 06 08 2A 86 48 CE 3D 03 01 07 03 42 00 04 | ....*.H.=....B.. +03 24 E9 47 62 77 D9 B4 96 C5 B3 C4 89 CE 0C 90 | .$.Gbw.......... +20 5F E8 D8 AB 0E E0 42 26 48 8D DE A1 16 8F 3A | _.....B&H.....: +B9 59 C4 D4 ED 39 D3 C0 2A B0 86 2A 97 25 0F 1F | .Y...9..*..*.%.. +35 B4 B8 23 8B 28 0F 27 D2 A2 7E 6A 39 C5 C4 AB | 5..#.(.'..~j9... +A3 82 02 12 30 82 02 0E 30 0E 06 03 55 1D 0F 01 | ....0...0...U... +01 FF 04 04 03 02 07 80 30 1D 06 03 55 1D 25 04 | ........0...U.%. +16 30 14 06 08 2B 06 01 05 05 07 03 01 06 08 2B | .0...+.........+ +06 01 05 05 07 03 02 30 0C 06 03 55 1D 13 01 01 | .......0...U.... +FF 04 02 30 00 30 1D 06 03 55 1D 0E 04 16 04 14 | ...0.0...U...... +0A A2 9D 1D D2 00 85 F6 3D 30 A7 DD 5E 2F 7E 5E | ........=0..^/~^ +78 20 ED 2D 30 1F 06 03 55 1D 23 04 18 30 16 80 | x .-0...U.#..0.. +14 5A F3 ED 2B FC 36 C2 37 79 B9 52 30 EA 54 6F | .Z..+.6.7y.R0.To +CF 55 CB 2E AC 30 55 06 08 2B 06 01 05 05 07 01 | .U...0U..+...... +01 04 49 30 47 30 21 06 08 2B 06 01 05 05 07 30 | ..I0G0!..+.....0 +01 86 15 68 74 74 70 3A 2F 2F 65 31 2E 6F 2E 6C | ...http://e1.o.l +65 6E 63 72 2E 6F 72 67 30 22 06 08 2B 06 01 05 | encr.org0"..+... +05 07 30 02 86 16 68 74 74 70 3A 2F 2F 65 31 2E | ..0...http://e1. +69 2E 6C 65 6E 63 72 2E 6F 72 67 2F 30 1B 06 03 | i.lencr.org/0... +55 1D 11 04 14 30 12 82 10 61 70 69 2E 72 6F 6F | U....0...api.roo +6E 6C 61 62 73 2E 6E 65 74 30 13 06 03 55 1D 20 | nlabs.net0...U. +04 0C 30 0A 30 08 06 06 67 81 0C 01 02 01 30 82 | ..0.0...g.....0. +01 04 06 0A 2B 06 01 04 01 D6 79 02 04 02 04 81 | ....+.....y..... +F5 04 81 F2 00 F0 00 76 00 3B 53 77 75 3E 2D B9 | .......v.;Swu>-. +80 4E 8B 30 5B 06 FE 40 3B 67 D8 4F C3 F4 C7 BD | .N.0[..@;g.O.... +00 0D 2D 72 6F E1 FA D4 17 00 00 01 8E DA 2F D2 | ..-ro........./. +59 00 00 04 03 00 47 30 45 02 20 6F E8 1F A9 FF | Y.....G0E. o.... +36 DA 08 EC F7 36 0B 23 53 C5 A7 03 8F 7D F4 7E | 6....6.#S....}.~ +4C 36 EE 8F C2 18 C1 A1 29 3C 0C 02 21 00 BD 20 | L6......)<..!.. +9B F4 BF 57 40 FD C9 4C BB 99 C3 97 10 4A D1 A0 | ...W@..L.....J.. +BF 15 0F F8 F7 09 29 4B 92 1B 26 71 DE 38 00 76 | ......)K..&q.8.v +00 76 FF 88 3F 0A B6 FB 95 51 C2 61 CC F5 87 BA | .v..?....Q.a.... +34 B4 A4 CD BB 29 DC 68 42 0A 9F E6 67 4C 5A 3A | 4....).hB...gLZ: +74 00 00 01 8E DA 2F D2 86 00 00 04 03 00 47 30 | t...../.......G0 +45 02 20 16 94 7C D4 B6 9E B1 48 6C C9 1A DF 74 | E. ..|....Hl...t +FB D1 68 4B F2 63 29 C5 38 28 41 55 9B 68 55 A7 | ..hK.c).8(AU.hU. +02 B0 44 02 21 00 F5 3D C0 DA B0 F4 EC 78 14 3B | ..D.!..=.....x.; +9B F5 60 22 AC 71 CD CD E4 8F E7 DB 33 68 9C 38 | ..`".q......3h.8 +E0 76 22 EE CF 94 30 0A 06 08 2A 86 48 CE 3D 04 | .v"...0...*.H.=. +03 03 03 68 00 30 65 02 31 00 99 37 0F 43 15 73 | ...h.0e.1..7.C.s +E5 F6 E2 32 68 10 DC 15 4D 34 F2 B9 28 B3 77 CA | ...2h...M4..(.w. +D5 77 0C 98 08 7A 2C 62 FC 9D E7 DE 6A 46 00 52 | .w...z,b....jF.R +6E 92 0D 49 D2 67 BE CD C0 72 02 30 0D 29 D9 D1 | n..I.g...r.0.).. +E4 F5 CF FF 43 83 D1 25 7A 79 9B 4E 7D 53 EE 37 | ....C..%zy.N}S.7 +8C 33 00 6E DE F6 25 2A 68 49 B0 C1 7E FE 82 06 | .3.n..%*hI..~... +53 0B C0 FD 4A EA 99 1F A9 D1 D4 44 00 02 CA 30 | S...J......D...0 +82 02 C6 30 82 02 4D A0 03 02 01 02 02 11 00 B3 | ...0..M......... +BD DF F8 A7 84 5B BC E9 03 A0 41 35 B3 4A 45 30 | .....[....A5.JE0 +0A 06 08 2A 86 48 CE 3D 04 03 03 30 4F 31 0B 30 | ...*.H.=...0O1.0 +09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 | ...U....US1)0'.. +55 04 0A 13 20 49 6E 74 65 72 6E 65 74 20 53 65 | U... Internet Se +63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 | curity Research +47 72 6F 75 70 31 15 30 13 06 03 55 04 03 13 0C | Group1.0...U.... +49 53 52 47 20 52 6F 6F 74 20 58 32 30 1E 17 0D | ISRG Root X20... +32 30 30 39 30 34 30 30 30 30 30 30 5A 17 0D 32 | 200904000000Z..2 +35 30 39 31 35 31 36 30 30 30 30 5A 30 32 31 0B | 50915160000Z021. +30 09 06 03 55 04 06 13 02 55 53 31 16 30 14 06 | 0...U....US1.0.. +03 55 04 0A 13 0D 4C 65 74 27 73 20 45 6E 63 72 | .U....Let's Encr +79 70 74 31 0B 30 09 06 03 55 04 03 13 02 45 31 | ypt1.0...U....E1 +30 76 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B | 0v0...*.H.=....+ +81 04 00 22 03 62 00 04 24 5C 2D A2 2A FD 1C 4B | ...".b..$\-.*..K +A6 5D 97 73 27 31 AC B2 A0 69 62 EF 65 E8 A6 B0 | .].s'1...ib.e... +F0 AC 4B 9F FF 1C 0B 70 0F D3 98 2F 4D FC 0F 00 | ..K....p.../M... +9B 37 F0 74 05 57 32 97 2E 05 EF 2A 43 25 A3 FB | .7.t.W2....*C%.. +6E 34 27 13 F6 4F 7E 69 D3 02 99 5E EB 24 47 92 | n4'..O~i...^.$G. +C1 24 9B E6 B1 21 8F C1 24 81 FC 68 CC 1F 69 BA | .$...!..$..h..i. +58 F5 19 22 F7 74 C6 16 A3 82 01 08 30 82 01 04 | X..".t......0... +30 0E 06 03 55 1D 0F 01 01 FF 04 04 03 02 01 86 | 0...U........... +30 1D 06 03 55 1D 25 04 16 30 14 06 08 2B 06 01 | 0...U.%..0...+.. +05 05 07 03 02 06 08 2B 06 01 05 05 07 03 01 30 | .......+.......0 +12 06 03 55 1D 13 01 01 FF 04 08 30 06 01 01 FF | ...U.......0.... +02 01 00 30 1D 06 03 55 1D 0E 04 16 04 14 5A F3 | ...0...U......Z. +ED 2B FC 36 C2 37 79 B9 | .+.6.7y. + +Flow Record: + RecordCount = 8 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 12 15 17 29 + size = 1552 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132384093 [2024-04-15 00:06:24.093] + last = 1713132384243 [2024-04-15 00:06:24.243] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 6 TCP + tcp flags = 0x1a ...AP.S. + src port = 443 + dst port = 51654 + src tos = 0 + fwd status = 0 + in packets = 16 + in bytes = 8224 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 17.256 ms + srv latency = 0.000 ms + app latency = 12.277 ms + in payload = 1400 + TLS version = TLS 1.3 + ja3s hash = eb1d94daa7e0344597e756a1fb6e7054 + ja4s hash = t130200_1301_234ea6891581 +16 03 03 00 7A 02 00 00 76 03 03 F7 31 6E 76 5D | ....z...v...1nv] +50 18 9E C7 FF A0 81 7E 43 7E 54 B2 83 88 37 32 | P......~C~T...72 +B0 9C 34 D8 FE 71 30 8A 5E 1C C0 20 19 5E C2 96 | ..4..q0.^.. .^.. +F9 4D 3C 3C FB B9 52 E5 8C D5 FB BE 2E 7B BF 04 | .M<<..R......{.. +D4 08 5A F9 AC 46 9C AA 9E 96 2C D8 13 01 00 00 | ..Z..F....,..... +2E 00 33 00 24 00 1D 00 20 64 27 97 8D 8E EF 2D | ..3.$... d'....- +72 2F 70 A2 DE 5A 25 3D DF 40 6D 9B D8 29 58 9D | r/p..Z%=.@m..)X. +1B 72 87 40 73 31 C4 B1 28 00 2B 00 02 03 04 14 | .r.@s1..(.+..... +03 03 00 01 01 17 03 03 11 C6 BF EE 88 59 20 60 | .............Y ` +98 65 7A 6A 1C 1A 96 58 6F CC 5A B0 8A 54 5D B7 | .ezj...Xo.Z..T]. +64 B5 39 FE 09 53 AF F9 77 F4 A7 BF AD CF 95 1D | d.9..S..w....... +68 90 C6 38 68 25 4A A3 A4 AE 4E D5 EF C1 37 15 | h..8h%J...N...7. +67 49 B6 04 42 83 78 59 23 8F 2C 64 B8 6E B4 0A | gI..B.xY#.,d.n.. +E4 14 0C DC DB 15 19 BD A4 61 C6 12 D7 B7 20 7A | .........a.... z +24 C8 FF 63 0D FA FF 6B E2 C0 D3 B0 C8 1E 69 62 | $..c...k......ib +43 F7 05 72 64 AE 5A 82 F4 BE 80 8E A0 BE 70 75 | C..rd.Z.......pu +F0 E3 04 91 4E 76 9A 10 BB 4D CA D4 CB 1D D0 08 | ....Nv...M...... +3E 30 AB 2D 83 EE 59 97 AF 3A 91 4D 49 B3 64 1A | >0.-..Y..:.MI.d. +F9 16 FC 27 A2 67 61 23 B5 40 BA D8 89 78 92 6C | ...'.ga#.@...x.l +6D 77 0C 44 F4 F0 23 0E F9 F0 ED 65 60 0E 19 36 | mw.D..#....e`..6 +3A 96 29 3F 0C BB AD 76 92 34 8C 99 7E 20 4D 57 | :.)?...v.4..~ MW +78 F1 81 17 17 B5 F7 8F 8A 04 E7 95 7B 2E 51 29 | x...........{.Q) +00 66 D8 8D 40 CD A5 3A 8B 1B 55 99 7C 1E 56 6B | .f..@..:..U.|.Vk +B8 BC BE BA 30 87 EE 31 25 2D 63 9F F2 62 45 21 | ....0..1%-c..bE! +11 DE BD 34 3D DC E7 6F 53 4C 85 E3 C4 40 CB 48 | ...4=..oSL...@.H +64 6A E9 01 B5 CA AF 39 41 32 E5 A7 B1 F0 D3 36 | dj.....9A2.....6 +F2 9F FB 9E 87 6C 56 FA 67 AA 72 74 E7 D4 83 D3 | .....lV.g.rt.... +12 EF 6A 98 44 79 42 E6 21 85 AE 83 F3 7F 86 04 | ..j.DyB.!....... +A3 11 53 51 88 7D C2 04 C5 19 97 B1 EC 06 DD 3D | ..SQ.}.........= +70 B9 D9 37 29 A2 DA 81 1A AC 0E 63 5D C4 98 9E | p..7)......c]... +6A 85 FB 6E 94 98 F1 62 9D 02 8C F9 27 4D 61 DB | j..n...b....'Ma. +AB 7B 5D EE 4A 37 72 85 D8 62 8B 8C 57 C9 03 44 | .{].J7r..b..W..D +4F 90 B5 C8 3A ED 2A E5 39 08 E3 65 9C 5E 9D 20 | O...:.*.9..e.^. +74 02 ED EF C8 1F 34 87 28 58 4D DB B6 CD 9D 94 | t.....4.(XM..... +FE 9C 19 13 79 1F 65 00 EB DC BE 01 00 FE 8A 33 | ....y.e........3 +00 FA AB BC FE D3 81 E1 1F D0 EE 3B 51 67 B3 27 | ...........;Qg.' +48 BA 17 48 5D 92 B8 6F 09 25 36 E4 63 42 B6 84 | H..H]..o.%6.cB.. +F3 B8 09 16 1C 20 F2 04 0D 29 03 3B 40 C6 FF 80 | ..... ...).;@... +BB BA B6 D3 1A 9B 72 E6 16 C8 B6 48 C1 63 93 29 | ......r....H.c.) +5F 2F B5 8D 40 23 44 82 C1 40 57 B0 9C 2E 2A E2 | _/..@#D..@W...*. +83 C7 88 DE 6E 66 1A FF 68 3B 17 C8 20 AC 36 45 | ....nf..h;.. .6E +CD 10 FD 11 C6 0F 4A D1 E3 24 A2 16 0F 29 B4 96 | ......J..$...).. +CE 9F 85 D3 0C 8D 61 FD 66 74 27 8E 96 F4 A3 CD | ......a.ft'..... +E0 A6 69 BB 36 3F F6 F5 6D D8 B4 33 E8 44 AA F4 | ..i.6?..m..3.D.. +DF 1B 80 A6 C0 3D 1D 33 EF C2 44 EB F6 8C 1E 7E | .....=.3..D....~ +25 DE B4 83 52 37 5F 04 6D F9 C3 8B 43 8A 52 B3 | %...R7_.m...C.R. +75 0E B3 5F A0 EE 93 CC 2F 64 C7 13 02 94 CE FD | u.._..../d...... +FA 9B CE 80 8F C8 11 DC FB 20 77 90 2C 87 F7 B9 | ......... w.,... +4C 99 8B A9 2C 06 02 FE A6 D5 E3 A7 D6 A6 08 8A | L...,........... +C3 73 47 14 97 DB 20 2D 95 08 9D 05 5A E5 15 52 | .sG... -....Z..R +C3 F3 EF 92 DD 98 A9 D6 4D 50 2C 20 97 4A DE A2 | ........MP, .J.. +44 68 7F 6C 77 0C 18 2C 31 99 7C 59 0B 9D A4 25 | Dh.lw..,1.|Y...% +45 A0 D1 B1 3A 4A 7F F0 3B EB 59 C3 AC FC E4 ED | E...:J..;.Y..... +98 07 5C 70 A1 67 D2 B2 E2 32 F0 A0 B9 5A 12 D6 | ..\p.g...2...Z.. +AD 71 51 CE B1 5B 55 8D B5 26 99 77 32 BC 22 0E | .qQ..[U..&.w2.". +1D F1 8E 34 4F B1 B8 44 69 4D 86 CF 52 1F 8E 69 | ...4O..DiM..R..i +FB 7A 25 C9 53 45 B1 EA A3 E2 29 D3 8A B6 90 EB | .z%.SE....)..... +D5 B8 E6 86 AC EF 44 1E 10 E2 D5 73 A3 89 EA C4 | ......D....s.... +A7 BE 05 CC 27 07 6A 40 38 5A A2 E9 A4 C8 8C 01 | ....'.j@8Z...... +04 CD 16 C8 75 F8 D8 EC A3 CC F1 85 8B 9A 51 49 | ....u.........QI +53 9A 77 40 C2 B9 71 0D 75 CF A8 33 E8 41 4F 28 | S.w@..q.u..3.AO( +07 F2 F7 27 7B 56 05 54 C1 3C 0F 64 F1 CB 19 CA | ...'{V.T.<.d.... +2F 0C BE AD 1C 1B 37 AD 44 7C 67 03 0A 52 82 1A | /.....7.D|g..R.. +CA 8B C7 16 B1 45 F4 D4 E0 BB F2 17 1A 0B 73 57 | .....E........sW +67 F9 90 99 DE BD CD 0D 1F F6 67 B5 47 9D A5 2F | g.........g.G../ +E8 07 88 19 5A 93 76 AE D1 6A 8A 6A 43 B5 50 02 | ....Z.v..j.jC.P. +6F 7D E8 86 75 5E 7C 27 13 58 BD FA EA 5D 3B 73 | o}..u^|'.X...];s +62 C6 F0 8A 48 59 1B 28 C5 19 8D 27 65 06 79 A6 | b...HY.(...'e.y. +06 A3 A5 A2 A9 8B 31 C5 50 13 68 F8 0E 74 2A CA | ......1.P.h..t*. +B8 CE 16 D3 72 C2 65 6B 84 02 5B 04 5E 99 BE CC | ....r.ek..[.^... +96 55 D7 28 F0 1D 30 13 69 0C 8E 22 11 7D C7 A9 | .U.(..0.i..".}.. +38 3D A1 70 63 BF E9 62 86 A6 3E 7C A2 F5 04 A3 | 8=.pc..b..>|.... +51 81 C2 84 52 70 0C C3 DC 7B D5 94 C1 FB A9 EA | Q...Rp...{...... +86 94 77 DC 3C 7D 02 21 E2 74 CE D5 D2 0C 24 EE | ..w.<}.!.t....$. +5E FF 2F 0F 59 C8 E6 17 1A 4B 28 E3 81 74 EE 15 | ^./.Y....K(..t.. +F7 20 32 94 5B 83 89 E4 4D DF 97 22 E2 2E 38 C8 | . 2.[...M.."..8. +82 90 DD D1 57 8A 1F 67 23 55 13 69 D8 58 89 A3 | ....W..g#U.i.X.. +9D CE 9D BE 36 7C 60 42 CC FE B2 FE A5 6B B5 04 | ....6|`B.....k.. +A7 9E 4B 65 EB FE BF 8B 53 28 EA 91 F8 84 30 38 | ..Ke....S(....08 +A5 ED 04 34 D0 80 B2 2A 29 98 66 11 DF 7A E0 80 | ...4...*).f..z.. +67 99 51 95 10 2D 19 0E BB E6 65 1C B8 2C E1 82 | g.Q..-....e..,.. +20 7D B7 62 0D 43 10 16 3A 86 A4 09 86 FB 8D B8 | }.b.C..:....... +8C BE 35 E4 C1 81 11 67 F5 71 74 27 51 83 5F 1C | ..5....g.qt'Q._. +E7 30 A0 01 A4 BA 7A D0 5A C0 A9 EB A7 27 E0 3D | .0....z.Z....'.= +EC 32 5C 42 70 5E BC 8E 3B 80 38 6D 50 01 3E FF | .2\Bp^..;.8mP.>. +62 66 10 DA CC 15 8A 58 51 D7 F4 12 A9 96 6A 73 | bf.....XQ.....js +B6 7B ED 7A 5B 47 4C D6 B2 98 EB C2 1B A4 34 0C | .{.z[GL.......4. +80 7D A0 C3 0A D5 E6 BD | .}...... + +Flow Record: + RecordCount = 9 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1608 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132343067 [2024-04-15 00:05:43.067] + last = 1713132374094 [2024-04-15 00:06:14.094] + received at = 1713132441667 [2024-04-15 00:07:21.667] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 60765 + src tos = 0 + fwd status = 0 + in packets = 11 + in bytes = 7425 + src addr = 13.224.103.88 + dst addr = 157.143.34.100 + out packets = 13 + out bytes = 1562 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 9.079 ms + srv latency = 0.000 ms + app latency = 0.953 ms + in payload = 1428 + TLS version = TLS 1.3 + ja3s hash = f4febc55ea12b31ae17cfb7e614afda8 + ja4s hash = t130200_1301_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 4E 99 6A 88 F4 | ....z...v..N.j.. +23 FB 72 E0 A5 0D 5B 9A 68 F9 7F C4 41 FF DA 79 | #.r...[.h...A..y +A1 1F 14 D3 13 17 D7 20 5C DF 00 20 CB 27 55 C5 | ....... \.. .'U. +74 05 0D 63 D6 AD 4C 2D 37 FE EB 9E 6D 5E 91 48 | t..c..L-7...m^.H +4D 54 F4 AF BB D6 4A FF AA 7D 28 29 13 01 00 00 | MT....J..}().... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 7B | ..+.....3.$... { +61 25 DF 97 AE 9F F0 8D C4 09 5D 24 B6 6E CA 47 | a%........]$.n.G +98 28 27 FD 62 02 F2 D2 00 50 B5 6B DB 70 04 14 | .('.b....P.k.p.. +03 03 00 01 01 17 03 03 00 1B 24 CA D3 A8 2F 54 | ..........$.../T +E9 82 40 F6 D7 93 C8 9C 28 2E CC E3 7F 1F CA 9C | ..@.....(....... +F1 6C 24 76 C6 17 03 03 15 4E 60 B7 D9 3D 86 7E | .l$v.....N`..=.~ +1B A9 15 76 E6 36 69 AB 13 B6 69 84 A7 E1 2C 79 | ...v.6i...i...,y +06 76 FC 38 4E D7 B4 E0 E7 C1 1A 63 A4 53 88 44 | .v.8N......c.S.D +9A 97 5E A8 96 CD 6D EA E2 B1 C2 06 14 E4 55 81 | ..^...m.......U. +95 70 0C 1E 9D 68 77 23 44 90 92 D8 B3 5F C7 E4 | .p...hw#D...._.. +9D 3C 27 F5 7D 4F 16 7F 10 2D B4 36 A4 4E FB 1D | .<'.}O...-.6.N.. +73 42 03 2B 20 23 24 26 D5 5D 60 4A 02 58 7B F7 | sB.+ #$&.]`J.X{. +63 16 8C 6C A5 DF 5C B9 C2 74 43 88 F9 8B BF 71 | c..l..\..tC....q +26 B6 36 67 8C 72 44 66 4B 09 B1 DA 66 0F 7D D0 | &.6g.rDfK...f.}. +99 E1 4F 55 6A 11 E0 96 0F 91 15 BC 3B 27 F5 BF | ..OUj.......;'.. +54 30 F5 D6 AB ED B0 F9 92 14 53 CE 4C 42 97 AF | T0........S.LB.. +AE 0A BA 6A 37 18 A0 06 81 91 97 0E 34 F9 A9 F8 | ...j7.......4... +F9 77 F5 79 4C 54 29 05 7A 0A B2 84 3E CA 98 D2 | .w.yLT).z...>... +EA 87 6C E1 1F 65 E0 0B D8 91 CF 29 C0 FB D4 0C | ..l..e.....).... +CE 79 DB 29 B9 FF F8 66 50 A5 AD C3 EB 35 14 B6 | .y.)...fP....5.. +55 E6 99 C2 4C C0 15 4E 1E 67 FA 67 31 25 6A EA | U...L..N.g.g1%j. +E5 78 F0 19 6D 7B D8 5C D6 86 81 81 CC F9 2B FA | .x..m{.\......+. +C1 A2 CF F7 07 84 FE D4 51 A8 4F 00 8E 1C 26 53 | ........Q.O...&S +74 55 46 F4 22 DC 90 D8 83 16 5B C1 DC B7 17 01 | tUF.".....[..... +CD 20 84 8E 01 79 03 A6 B5 49 75 91 90 44 B4 DC | . ...y...Iu..D.. +47 99 F3 83 3A 41 1B AD 2A AA 93 A8 92 23 97 F1 | G...:A..*....#.. +F8 7B CB 35 58 74 81 75 FC 16 14 0F E4 EE FB 89 | .{.5Xt.u........ +26 EE 25 B0 DD D4 87 B0 C6 B7 D8 EE 80 C9 0E E2 | &.%............. +06 02 61 86 6F AB F8 82 7B A1 C5 C7 B8 A5 D6 4C | ..a.o...{......L +B7 BE F9 2E 6E 12 33 96 F1 DB D4 61 A9 B4 ED FE | ....n.3....a.... +47 8B 30 62 C6 DB 0F 1C 59 86 4C BB ED 1A 67 63 | G.0b....Y.L...gc +55 F9 BD 4C 1B 6F 65 B8 B3 BF 02 7A 72 55 83 3B | U..L.oe....zrU.; +CA B7 16 DE 8C 0E 89 EC FC E7 D2 19 9B 6C D6 91 | .............l.. +BA 97 77 3C 0C BF 06 58 6B 8E 2A AC 1C 95 E0 99 | ..w<...Xk.*..... +23 28 C5 0A 66 B9 0E 69 51 9E 47 ED 02 52 14 DA | #(..f..iQ.G..R.. +34 F3 8B 98 A7 A3 36 07 F1 94 7E EE 81 6A BF 55 | 4.....6...~..j.U +94 F7 E4 0A 07 CC C9 EA 40 F9 52 AB 79 C1 DC A6 | ........@.R.y... +9A 63 C8 4C 95 70 40 D4 89 6F 73 6C 11 8D 06 34 | .c.L.p@..osl...4 +99 B0 FF 96 B0 26 DF D6 96 B3 BF 92 15 00 FB C7 | .....&.......... +8D 26 7F 72 9B 1F 84 C9 A5 3D AD 10 ED E8 75 6C | .&.r.....=....ul +E7 67 EB B3 50 26 6A F8 08 02 0E 0E 0A 83 CC 84 | .g..P&j......... +50 D6 25 DD B4 BE 87 07 B1 7D 77 D1 98 27 D9 30 | P.%......}w..'.0 +71 22 51 BF C8 FB 14 0D A7 AA DC 3C 2B 46 13 64 | q"Q........<+F.d +51 B7 FD 8E F8 59 0C 47 91 52 9A 43 9B 29 6D 2B | Q....Y.G.R.C.)m+ +17 23 F7 30 AF 7C C7 7D 02 B6 A4 74 A6 8E 45 07 | .#.0.|.}...t..E. +6F EA 3C EE 59 2F 22 26 7C DC 03 AB 9F BD 94 38 | o.<.Y/"&|......8 +30 A5 DC B5 E9 16 A4 59 DB 41 19 99 02 7A B9 47 | 0......Y.A...z.G +DA F6 90 EA 19 C0 A8 10 F9 AC 9D 92 17 71 52 F7 | .............qR. +AB E2 20 09 F3 AA 8A 34 6D 46 66 86 33 10 0F D7 | .. ....4mFf.3... +9B 0B 7E 65 C2 EA 96 31 07 79 D0 40 EC A2 F7 69 | ..~e...1.y.@...i +AE 39 B9 7B 25 1D BE 77 8E 8D F5 A6 4C 84 CD 65 | .9.{%..w....L..e +BD 10 9D 35 5A 4D FF DA 45 C7 D5 A0 51 5B B8 34 | ...5ZM..E...Q[.4 +60 D9 98 67 AC 5A F1 A9 AF F5 69 B8 AA A3 4B FC | `..g.Z....i...K. +C5 F3 BC C5 5A F8 2C 1B 11 C5 89 CE 1A F9 12 BC | ....Z.,......... +BC A4 84 65 72 12 B5 F1 55 92 E1 70 82 8E C8 D2 | ...er...U..p.... +16 EA 23 FF A5 3E 2B ED A9 9D 53 60 68 98 7A 22 | ..#..>+...S`h.z" +17 30 B2 B8 BB 46 5A 9D 9F F5 15 8E D3 E7 4D 0F | .0...FZ.......M. +8F DF 63 D2 63 03 AF D0 47 76 03 FF A2 6A 2C D0 | ..c.c...Gv...j,. +C3 22 9B 42 C3 D1 4E FD 7C F1 15 23 67 0D EF 22 | .".B..N.|..#g.." +D7 AF 36 91 38 17 09 4F B4 CE 23 DB 04 5B 1D 63 | ..6.8..O..#..[.c +A4 64 71 5E 94 68 3D D6 6B 6A 8A 37 36 D4 58 5C | .dq^.h=.kj.76.X\ +7F B5 EE 97 00 D7 99 B1 4B F9 06 60 7E 16 9F B8 | ........K..`~... +9B D2 A9 10 1D CB E6 52 7A 09 04 D2 A3 2E 02 83 | .......Rz....... +87 08 24 C0 5F 7D C7 78 9C 3E 9C CD A0 E9 A5 F7 | ..$._}.x.>...... +8C D7 E6 5E C8 55 73 36 54 EF AA A7 82 D5 B9 C3 | ...^.Us6T....... +14 64 9C 79 4C EF 76 0F C1 30 85 50 F6 71 8C A7 | .d.yL.v..0.P.q.. +22 1E AD 9B 64 FA 40 DC 55 60 28 F3 0E D1 FA 4F | "...d.@.U`(....O +DE 43 EB 62 20 E5 97 5C 3E 9C A9 F4 7B 25 31 4B | .C.b ..\>...{%1K +22 C5 CC 46 A6 1C 41 FC 6D 4C DD 0F 34 8B 07 59 | "..F..A.mL..4..Y +50 C5 5B A9 77 15 02 E3 3E C1 EE 26 74 0F 7C 62 | P.[.w...>..&t.|b +D9 41 09 E8 FD B5 18 CD 51 1B 29 D5 FD C8 8F 22 | .A......Q.)...." +DF 34 90 FB 75 5F F9 16 EF 73 FC 27 E7 69 BB 06 | .4..u_...s.'.i.. +DB 02 F0 C5 1B F5 DE FD 05 23 8D 72 64 8A 5D EF | .........#.rd.]. +F6 AF DE 70 0C 5C FF 78 46 FD E3 79 ED 62 50 16 | ...p.\.xF..y.bP. +AD F6 47 EF BD 0B A6 9B 0A 63 39 91 F3 AB 33 09 | ..G......c9...3. +BE 9B CC E5 3F 1F 0C 12 C6 13 D8 D7 31 B1 AB 30 | ....?.......1..0 +2B 84 6B A3 FC D6 A2 D3 2A 7F B6 A5 B6 B1 0A 0C | +.k.....*....... +32 50 5F 96 9A 16 45 89 B9 EB 65 26 D9 75 31 17 | 2P_...E...e&.u1. +73 4C E9 54 15 A3 6B 15 01 1D 04 AA D4 4B 96 D6 | sL.T..k......K.. +27 60 B0 ED 32 DB 02 40 00 CA 3D 38 88 D3 73 32 | '`..2..@..=8..s2 +D4 BA 08 FE 9E 48 1A C2 E5 64 99 94 1D A0 48 57 | .....H...d....HW +C3 F2 CB 10 BD 8F ED B9 28 7F BE BC 7C AD C0 E4 | ........(...|... +2A D4 96 26 04 34 DD 4F 7E D6 A5 A3 46 3C 02 56 | *..&.4.O~...F<.V +2D 47 EC 83 26 59 F2 8C 38 1C 6F DD C7 10 D4 17 | -G..&Y..8.o..... +89 70 D9 36 | .p.6 + +Flow Record: + RecordCount = 10 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132150187 [2024-04-15 00:02:30.187] + last = 1713132181222 [2024-04-15 00:03:01.222] + received at = 1713132277671 [2024-04-15 00:04:37.671] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 50515 + src tos = 0 + fwd status = 0 + in packets = 31 + in bytes = 18713 + src addr = 17.248.209.70 + dst addr = 157.143.34.100 + out packets = 35 + out bytes = 7113 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 37.394 ms + srv latency = 0.000 ms + app latency = 1.532 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 39 14 3D 1E 9C | ....z...v..9.=.. +45 09 BE 33 D6 49 D4 17 64 7E 84 8F ED 84 60 36 | E..3.I..d~....`6 +EB 28 62 14 5D D0 C8 7E A5 C8 A0 20 98 24 EA 27 | .(b.]..~... .$.' +E5 C5 CD 5C 65 13 BD 0B 19 25 70 91 8B 00 9D 34 | ...\e....%p....4 +A0 10 A4 DE 86 D9 75 65 83 14 39 97 13 02 00 00 | ......ue..9..... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 89 | ..+.....3.$... . +42 59 93 D8 D4 39 F1 F1 21 30 F1 89 54 21 60 F6 | BY...9..!0..T!`. +E7 D2 E0 55 12 1A 1C D4 08 4A 88 30 44 43 72 14 | ...U.....J.0DCr. +03 03 00 01 01 17 03 03 00 2A 22 E0 87 DF 32 A3 | .........*"...2. +FF B9 44 76 82 95 5A 33 E3 47 77 5D A5 80 02 29 | ..Dv..Z3.Gw]...) +09 3E 60 15 B9 02 BA 2A 11 D2 26 77 34 BD 33 45 | .>`....*..&w4.3E +7F 01 1C 39 17 03 03 11 25 1B 4A 8E DB E3 E9 C4 | ...9....%.J..... +AF F7 DC 8F 08 65 BA 45 EA 47 6E DB 0E DD E0 EB | .....e.E.Gn..... +42 43 DF AF 11 BB FB BE 07 EC 90 E8 56 04 D0 C5 | BC..........V... +98 04 42 67 EF 03 D3 33 08 55 75 09 1B 8D D0 D8 | ..Bg...3.Uu..... +B3 83 80 3F 1A A7 27 93 BD 10 B9 2E 98 80 03 E2 | ...?..'......... +7D 14 3E 35 0E 24 22 04 3E 88 19 25 D6 5A 99 FF | }.>5.$".>..%.Z.. +33 ED DB 46 16 AD 41 43 38 46 79 05 8C 91 14 01 | 3..F..AC8Fy..... +1C 89 BB 1F 79 FB 8D 82 CA 48 90 AE 56 AC 6B 38 | ....y....H..V.k8 +63 67 4E 4C B5 B1 CD 3B 48 60 EA 11 7C 94 FB BC | cgNL...;H`..|... +E3 3F B5 19 D3 AE F5 9C 80 EB 29 37 40 65 8E 8B | .?........)7@e.. +51 1B FA 63 62 F0 CE 8E E8 35 CB B0 CC D0 6E C8 | Q..cb....5....n. +0F 66 68 05 1A 6A 96 AE 73 5C 19 1A CC 95 1B 41 | .fh..j..s\.....A +BB BC C0 4A 6E CD CD 97 D3 DD F0 67 E7 B6 D3 40 | ...Jn......g...@ +9E 6A 19 73 FF B8 2F 52 7D 3A 35 14 CF 4C 1A F4 | .j.s../R}:5..L.. +7E 73 57 7C B3 0F 8C EC B2 2F 27 CC 7C A8 90 1C | ~sW|...../'.|... +52 D9 3F 6A E3 F3 EC 50 70 E7 CB 7A 82 A9 9E BD | R.?j...Pp..z.... +6C 5F 52 51 AE 58 D5 50 BF AF 3B 92 55 98 30 4D | l_RQ.X.P..;.U.0M +50 AA 04 BF 42 13 3F 39 C0 FB 56 74 E4 17 58 6B | P...B.?9..Vt..Xk +55 5A AC ED AB 6A 2A D1 FA E5 DA 1B 96 4E 8A B0 | UZ...j*......N.. +49 30 9B D8 6C 72 F3 31 13 2D 32 C7 6B FB F5 56 | I0..lr.1.-2.k..V +39 B7 C9 6D 02 03 69 54 32 04 15 78 C0 4E B1 E2 | 9..m..iT2..x.N.. +07 13 42 3F 09 E1 1C AE 29 5A CE 37 96 18 EA 12 | ..B?....)Z.7.... +64 A1 ED 71 AB 08 34 DD 46 11 F7 FB 93 F9 E1 AE | d..q..4.F....... +B7 91 7B D4 CD 89 B5 72 5E 32 85 B9 61 DA 39 31 | ..{....r^2..a.91 +00 5E FF 56 0D F5 84 7D C9 A7 94 39 8F 80 3A 7C | .^.V...}...9..:| +02 8E 43 F2 88 C7 E1 D8 81 84 26 8C 47 0D 31 F5 | ..C.......&.G.1. +4F B5 A3 C9 90 26 87 3D 0C 39 A8 6D A8 11 A3 E7 | O....&.=.9.m.... +1E F6 A5 E6 27 C8 16 25 73 F9 63 9E A9 03 C4 EF | ....'..%s.c..... +7E 48 8E F0 B0 C9 F6 89 D1 7B 2F 3B C7 D7 DB 52 | ~H.......{/;...R +27 7A A8 E4 41 95 51 72 31 9F 59 7F B4 9B AD 7E | 'z..A.Qr1.Y....~ +CA 03 A9 DA DE 07 FA 3B CF E1 73 86 B5 06 16 86 | .......;..s..... +CF C1 9F D6 BE 47 9C 2C AB F1 31 ED 1D 60 20 28 | .....G.,..1..` ( +B5 5A B3 BE BF D1 4D AA E0 05 02 54 97 6C 90 14 | .Z....M....T.l.. +7B 43 B5 C8 80 7A DE 53 1C D2 EC 32 72 61 7C E1 | {C...z.S...2ra|. +F9 6D EA F6 54 28 6A 58 D8 1C B8 C1 5B 24 CD 3A | .m..T(jX....[$.: +3C 85 6C 93 79 87 7C 48 D8 4B C0 51 26 8F 04 7B | <.l.y.|H.K.Q&..{ +54 1D BD F9 E8 DA C8 D8 1E 3F 35 1D FF EE 81 4E | T........?5....N +40 26 5D 54 5F B0 51 16 22 4A FD CB 8E DD 91 F3 | @&]T_.Q."J...... +E2 37 75 5D EE 95 72 3A 54 C1 21 05 0F 65 13 E4 | .7u]..r:T.!..e.. +CC 4F F9 1B 05 CE 5F 24 A8 51 4E 48 AF 71 0A 2C | .O...._$.QNH.q., +18 03 BF 29 36 2F 93 5E 92 CB 46 B3 FE 59 4B 69 | ...)6/.^..F..YKi +D8 F2 5B 2E 16 CA 3A 2C 1A 20 76 E3 60 06 97 2D | ..[...:,. v.`..- +FC 3D 52 3D 9C 52 65 F5 C7 65 1F A2 87 68 79 1D | .=R=.Re..e...hy. +DB BF C0 CA A2 A2 2C 59 EE 7E D1 C6 6E 52 84 2D | ......,Y.~..nR.- +F1 9A 67 EB 9C D7 AB D4 B8 A9 23 60 58 B5 2D 00 | ..g.......#`X.-. +50 B5 12 34 46 55 3E E5 F6 69 1A B5 59 0C 83 E2 | P..4FU>..i..Y... +68 FE 0D 6A E2 75 7E A6 0F 52 81 C0 0B DB B2 0E | h..j.u~..R...... +0D 24 D7 17 7D 6E BC 78 5E 4A 36 4E D2 85 CD 97 | .$..}n.x^J6N.... +84 7F CE 64 21 76 7C B2 66 28 E7 12 87 96 6D 80 | ...d!v|.f(....m. +15 BB 79 36 F7 D8 75 D4 59 3A 72 67 66 30 9F A4 | ..y6..u.Y:rgf0.. +39 A0 7C 36 A5 1D 80 E5 9C B9 B2 E7 04 9A 04 42 | 9.|6...........B +71 81 46 63 E7 5E 4D E8 6B 51 E9 D3 FE 98 FA A0 | q.Fc.^M.kQ...... +9D 03 D8 6A 8E B8 A6 CB 34 25 10 9D C3 BF B2 1F | ...j....4%...... +E9 1A FB 08 E6 97 B5 3F 47 75 5B 0B 2F F8 FF 3A | .......?Gu[./..: +2C E6 72 F2 34 BC 4F 22 99 C8 35 B9 95 25 89 4C | ,.r.4.O"..5..%.L +11 1D 67 E1 04 4A 21 7D A7 CA 00 FC 10 9E 37 A2 | ..g..J!}......7. +13 63 F6 E2 30 E7 6E 35 DD 76 B0 05 3E 15 F6 0C | .c..0.n5.v..>... +0B C1 65 74 41 C4 1E 16 12 C8 D5 4D 0E 76 1C 24 | ..etA......M.v.$ +DF 52 3A AF 18 E8 01 CC 93 58 D9 01 72 7C 23 8F | .R:......X..r|#. +74 8F 4F 3F EE F9 04 E7 8F DC 0C 73 A6 BF 8E C0 | t.O?.......s.... +F2 4F 7B 9D 8C FF 19 FD A9 A4 6C D9 DB 60 F6 D0 | .O{.......l..`.. +D2 B2 0C 50 1A D7 8E CA C9 CA FC AC EC 6E 64 8B | ...P.........nd. +98 DA 0F 52 3D CC C3 8A 67 63 96 0F AB 6A 4C 52 | ...R=...gc...jLR +CF AA F3 5B D3 75 1E D7 1A 22 F3 78 4D 9D 1F E8 | ...[.u...".xM... +2A D0 08 56 DA 56 F2 F8 B0 37 5C F2 74 56 90 55 | *..V.V...7\.tV.U +77 5D 3F 4A B2 6D 1C A7 C7 5D 26 66 8A F2 D1 A6 | w]?J.m...]&f.... +AB 51 57 A9 61 55 05 D7 74 BA 25 C5 FF 1A F8 48 | .QW.aU..t.%....H +C6 31 08 AC 29 77 23 A2 AE DB E7 F2 A0 62 45 65 | .1..)w#......bEe +DC AC 22 CE 75 B1 7B 16 1D 07 A4 F2 D9 02 6E 7E | ..".u.{.......n~ +D2 54 A5 07 3C 82 FF C0 43 CD 2C 7E A4 26 B9 40 | .T..<...C.,~.&.@ +D1 4E 74 9A 8A 9D DA C1 3C 62 1D D2 E1 FB 37 89 | .Nt...... +0E 69 60 DA 0E CB 66 D3 5B 3F A5 43 4F F1 17 D0 | .i`...f.[?.CO... +0D B7 CC 67 6D 66 0C 99 13 CE E1 0F 89 44 76 E1 | ...gmf.......Dv. +A5 B7 BC 4C 16 F3 28 26 10 05 E6 FD 19 A5 52 DC | ...L..(&......R. +74 CA 69 B8 65 D2 0D 6E | t.i.e..n + +Flow Record: + RecordCount = 11 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 12 15 17 29 + size = 1552 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132382740 [2024-04-15 00:06:22.740] + last = 1713132382867 [2024-04-15 00:06:22.867] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 6 TCP + tcp flags = 0x1a ...AP.S. + src port = 443 + dst port = 54951 + src tos = 0 + fwd status = 0 + in packets = 9 + in bytes = 6256 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 14.387 ms + srv latency = 0.000 ms + app latency = 12.303 ms + in payload = 1400 + TLS version = TLS 1.3 + ja3s hash = eb1d94daa7e0344597e756a1fb6e7054 + ja4s hash = t130200_1301_234ea6891581 +16 03 03 00 7A 02 00 00 76 03 03 A4 CC 9F 4C 12 | ....z...v.....L. +9C 28 15 46 13 5D 29 86 5C 70 66 AC 5C C8 6E FF | .(.F.]).\pf.\.n. +C6 D4 3C 2B E3 29 50 4C DB A9 81 20 FB 70 A6 90 | ..<+.)PL... .p.. +D9 69 76 6A 45 CC 1C 07 0D CA E7 09 68 5D 45 7A | .ivjE.......h]Ez +AD 08 D7 4E DF 65 71 4E 9C 42 A1 E5 13 01 00 00 | ...N.eqN.B...... +2E 00 33 00 24 00 1D 00 20 71 C1 B8 99 D6 4F C0 | ..3.$... q....O. +0F 91 75 29 DC C6 0D B9 0C 09 02 FD B4 4B E0 F8 | ..u).........K.. +8A C2 3E DD 40 2F C2 4A 10 00 2B 00 02 03 04 14 | ..>.@/.J..+..... +03 03 00 01 01 17 03 03 11 B7 51 EC AC 23 28 01 | ..........Q..#(. +F1 04 0B 82 DD 8B 76 FC D8 10 E6 70 50 C1 58 10 | ......v....pP.X. +D9 7E 69 4F A9 CC 47 3C BB AF 74 00 E6 9D 3C EE | .~iO..G<..t...<. +3A 29 D5 98 EC A7 DF 57 F1 50 57 C1 BA A3 42 17 | :).....W.PW...B. +EC 74 34 DC 44 27 C8 14 64 38 AC AA E4 E8 95 FD | .t4.D'..d8...... +77 39 E6 DF 84 6B 49 21 06 E1 22 99 1C 47 64 F0 | w9...kI!.."..Gd. +10 CC 3F 63 A8 1C 0C 31 C2 51 31 14 D4 58 D5 E8 | ..?c...1.Q1..X.. +6C 68 17 98 D4 03 F9 F7 A8 27 3B E4 8F 34 24 5F | lh.......';..4$_ +ED 68 7E 1F 5E C2 18 87 33 12 D6 CE A4 23 88 8D | .h~.^...3....#.. +45 EB 8A C1 1B 47 C1 A9 35 DF 44 0D F6 62 66 9B | E....G..5.D..bf. +56 83 1A 34 2A 74 34 56 49 CF 09 3E 8E 5A 39 AF | V..4*t4VI..>.Z9. +97 CE 76 1F FC 8E CE 05 96 7C 96 89 A4 A6 4C 90 | ..v......|....L. +2E D4 79 9E 6A 4D 5E 27 BD CB 99 87 A6 95 3A F2 | ..y.jM^'......:. +B7 89 8E 40 B7 E2 E2 B8 41 08 8B 57 B5 AB E3 4D | ...@....A..W...M +EE 1A 69 AC DC 3B 5D E3 95 0D A2 75 CA 4A 7F 6E | ..i..;]....u.J.n +61 8A 03 68 D2 CF DB C3 52 30 8E D5 30 F4 90 1B | a..h....R0..0... +BA F9 A3 FF B4 7F 50 3B 22 37 C4 4C D6 9E 21 1B | ......P;"7.L..!. +B4 A5 EB 0E 1E 83 2B BE 99 B0 98 6F 3B 73 12 28 | ......+....o;s.( +8E 71 68 29 F8 4F BE 31 B7 4C FB 39 CB 47 9D BC | .qh).O.1.L.9.G.. +0D 8C 21 FA 4F DB A9 11 6B 74 F2 A2 54 D9 18 04 | ..!.O...kt..T... +3A 0E E5 DA 0D D8 8B 88 83 41 37 C6 66 88 FB 36 | :........A7.f..6 +7C A7 C5 3B AA 99 64 8F E3 83 CC AE CF 68 20 39 | |..;..d......h 9 +33 79 B1 9A F4 C9 EE 91 03 40 0C 18 C7 90 A4 7F | 3y.......@...... +68 92 66 E5 55 01 A7 3F 0A 12 62 33 D6 D5 A1 D0 | h.f.U..?..b3.... +9B E8 08 03 3F 57 1B 34 01 C8 B5 32 F9 58 FE B9 | ....?W.4...2.X.. +90 7F 44 4F 34 1D F4 10 49 DC 6E C5 7E 06 0A 89 | ..DO4...I.n.~... +DA 1C C7 73 D8 30 58 F0 FD 75 F2 09 61 AE 65 51 | ...s.0X..u..a.eQ +70 F1 63 18 1A FC 0C 64 71 36 D0 2F 8D F4 9E 8D | p.c....dq6./.... +49 9A 59 9A 03 5F 90 FC B9 E3 72 90 D2 14 E7 90 | I.Y.._....r..... +27 45 40 65 05 11 1D DF 3C 76 8C C5 24 D3 ED D0 | 'E@e......%.y. +3D D4 E0 E3 25 89 AF 1E 7C 8B 14 3E 8A 28 AC CC | =...%...|..>.(.. +98 74 58 76 5C FE 1B 3B 58 22 E1 C5 35 46 FF DE | .tXv\..;X"..5F.. +47 17 C1 7C 57 90 8A 30 20 56 66 59 A2 D0 C7 82 | G..|W..0 VfY.... +3B 40 B9 4D 1E 00 2A 5C 0D 85 FE 06 40 01 1D C6 | ;@.M..*\....@... +44 98 62 84 99 21 ED FF 53 CB 6F 4C F2 D6 55 8E | D.b..!..S.oL..U. +9C 4D 5B F7 57 DA 03 60 50 B6 EE 7C A0 32 6D 3D | .M[.W..`P..|.2m= +76 F1 8E BE 90 A5 59 18 53 BD FC 4D 20 FB 81 C5 | v.....Y.S..M ... +40 FC 1E D5 6C 74 3D 4B F7 19 05 53 27 A5 98 BF | @...lt=K...S'... +47 1A B9 70 12 C0 19 15 48 3B FB 45 67 37 75 87 | G..p....H;.Eg7u. +04 5C 80 FC B4 4E EA 98 79 EB 88 A1 33 BC C8 40 | .\...N..y...3..@ +2B 70 C4 3B 60 69 DD D9 | +p.;`i.. + +Flow Record: + RecordCount = 12 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1580 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132381134 [2024-04-15 00:06:21.134] + last = 1713132381225 [2024-04-15 00:06:21.225] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 6 TCP + tcp flags = 0x1a ...AP.S. + src port = 443 + dst port = 65089 + src tos = 0 + fwd status = 0 + in packets = 7 + in bytes = 6187 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + out packets = 8 + out bytes = 1069 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 12.155 ms + srv latency = 0.000 ms + app latency = 12.660 ms + in payload = 1400 + TLS version = TLS 1.3 + ja3s hash = eb1d94daa7e0344597e756a1fb6e7054 + ja4s hash = t130200_1301_234ea6891581 +16 03 03 00 7A 02 00 00 76 03 03 2F 41 00 E8 EC | ....z...v../A... +7C 12 29 B4 6C 17 29 76 2E AD 84 68 C3 91 E2 37 | |.).l.)v...h...7 +90 B3 83 B7 B3 E4 92 1D BE BA 40 20 AB 9A 15 7A | ..........@ ...z +9C 5B 06 39 E0 F6 E6 8C 85 2D 1D 8F 2B A8 D3 B0 | .[.9.....-..+... +5F B5 53 E4 FC 17 74 D2 AD 29 9A 40 13 01 00 00 | _.S...t..).@.... +2E 00 33 00 24 00 1D 00 20 8E 52 6C 3A FC F0 C2 | ..3.$... .Rl:... +1E B0 9C EC 44 84 24 9B 07 E5 C2 DE 37 E3 C0 7D | ....D.$.....7..} +1D D8 54 FD 0C 05 B4 55 63 00 2B 00 02 03 04 14 | ..T....Uc.+..... +03 03 00 01 01 17 03 03 12 67 0B 5D 1F 1B C8 36 | .........g.]...6 +12 84 0A A5 4C AD B7 03 79 09 29 46 82 B1 7C 59 | ....L...y.)F..|Y +CB FD CF 33 64 44 D9 A8 EC E0 85 15 C6 3C BE 8C | ...3dD.......<.. +B8 9D B2 EF 8E 90 FD A5 BC 69 0A 67 03 C9 18 FF | .........i.g.... +08 08 BC 84 0B 26 5B 8B D2 EE 9E 0E 07 E4 AC 1B | .....&[......... +E0 F5 4B BE 26 DC 09 C9 88 C2 DF A3 A0 84 42 7D | ..K.&.........B} +E1 25 34 EB DC 4F CC BE DA 2F 01 A2 6A B9 CC 5F | .%4..O.../..j.._ +E2 38 1F A5 1B 19 E7 23 01 D8 93 D9 54 D8 72 EA | .8.....#....T.r. +06 4C 4E 54 A3 BB F6 3E 7F 37 AD D7 FD 3B 21 F9 | .LNT...>.7...;!. +1F DB 7F B7 28 5C CA 7A C6 01 55 9F 10 66 58 53 | ....(\.z..U..fXS +B7 D2 C1 9F 66 25 7D FB 21 D2 DA 6C D5 0F 1F 17 | ....f%}.!..l.... +A2 31 CF F1 A3 17 62 B4 67 3C 34 0B C2 46 E4 80 | .1....b.g<4..F.. +B5 39 D2 5D 45 84 5B 23 F2 A8 89 39 D0 E7 B4 C9 | .9.]E.[#...9.... +9C 70 36 29 9C 8E 86 C8 0D DF C9 10 F3 FE 25 04 | .p6)..........%. +35 BB 6B FC 01 57 3F 99 A6 6B 16 B2 CB 75 2C 73 | 5.k..W?..k...u,s +E8 5C 6C A5 18 3B 2D 0C E9 E6 E5 C1 79 81 FC 32 | .\l..;-.....y..2 +E4 17 A4 6A D3 89 6E 4A 81 4E DB 6F 42 34 22 E3 | ...j..nJ.N.oB4". +11 3C 40 76 E2 6B 24 08 65 9E EA A0 43 55 AA 40 | .<@v.k$.e...CU.@ +B4 F9 37 4E 51 1B 7A 30 87 B6 61 84 A8 C8 BC 78 | ..7NQ.z0..a....x +71 C9 DB 30 4A 01 F4 F5 62 53 38 B3 A7 8D 29 5B | q..0J...bS8...)[ +68 5C 7F 30 F2 A7 5C 20 4F 64 33 83 D1 7F 3D 81 | h\.0..\ Od3...=. +0F AE 1E 0E ED B1 A9 48 33 21 78 31 39 4B AF A1 | .......H3!x19K.. +00 30 B6 22 D1 DF 35 C4 E0 05 D7 4F CA 9B 94 66 | .0."..5....O...f +05 4B F7 4C F5 F2 90 AE 61 E6 B8 7B 60 C3 9D 2C | .K.L....a..{`.., +32 ED 55 DB DB 9D 92 0F 13 9C 5A 9B 78 D9 22 A5 | 2.U.......Z.x.". +D5 F5 79 B5 57 07 8A 5B 5C 01 97 30 89 44 A5 C5 | ..y.W..[\..0.D.. +68 52 86 60 4A 85 C7 11 18 DF 3D 0D 37 32 D1 5B | hR.`J.....=.72.[ +C7 0A 83 F7 CD 9E E1 7B D2 D1 81 3C F3 4C 3E C6 | .......{...<.L>. +FC 6D 6A 75 10 88 4C 78 54 DC 1C 59 83 31 D9 1E | .mju..LxT..Y.1.. +A9 4D 85 92 EF AF 2A 85 DA 05 88 F6 59 20 DE 5D | .M....*.....Y .] +1B 92 0D D7 32 79 1C B0 0D 4A BA 8D E4 04 59 5C | ....2y...J....Y\ +CE B3 EB 76 74 38 A1 2B F0 51 27 AE E4 80 CE 6E | ...vt8.+.Q'....n +94 65 06 07 77 97 71 A5 22 42 EF E5 BD 82 62 9C | .e..w.q."B....b. +55 86 DF 8C 76 9A 19 9A AB 75 BD E5 77 74 D2 2D | U...v....u..wt.- +4B A1 45 1E F3 38 48 51 80 CD BD A1 75 D5 5E FC | K.E..8HQ....u.^. +97 D2 70 DB 63 79 57 21 15 1A 9A 8D 46 CB EA 92 | ..p.cyW!....F... +AC 67 9A 41 13 A8 A5 EA 02 79 B4 16 CE 38 58 95 | .g.A.....y...8X. +71 D6 62 3A D9 10 FE 09 F8 4D 70 C3 F4 3A 95 F1 | q.b:.....Mp..:.. +03 5D E4 B8 F4 87 CE 7E 40 CD 1A E1 37 EE 7E F3 | .].....~@...7.~. +53 09 32 12 8D C9 7B 4C 57 30 91 E2 6C B5 53 3D | S.2...{LW0..l.S= +96 B7 D5 4E 09 0F 54 05 83 06 6D EF 54 A9 50 A4 | ...N..T...m.T.P. +9D FF F5 AF FE 86 64 5B 55 84 59 4B 5B C1 1D FD | ......d[U.YK[... +8A 3E 91 C1 32 4A A9 A4 05 F5 D7 61 55 CA 42 9D | .>..2J.....aU.B. +45 31 A4 1F F5 79 00 94 AB 94 21 DE 1D 59 AF 06 | E1...y....!..Y.. +B4 5F EA AA 2D D3 FE 8E 1E F9 3C 91 C9 77 08 16 | ._..-.....<..w.. +E8 89 12 21 76 A0 70 A6 EA 44 FB D7 C1 B2 31 BF | ...!v.p..D....1. +5B 6E 47 EF 93 C2 09 03 77 50 0C C6 BC 62 BD CC | [nG.....wP...b.. +0E 7B 83 08 C4 07 1B 12 28 88 DF 5B 1F BE 14 CC | .{......(..[.... +CE B6 3C 0A FA 6A 22 1D EC 90 62 B2 17 E9 04 FB | ..<..j"...b..... +BC 52 AD 31 BC 04 59 37 39 E8 D2 22 6C 9A 41 F9 | .R.1..Y79.."l.A. +FB 5F 60 71 92 03 A6 2E C1 37 F7 02 BE 19 F8 52 | ._`q.....7.....R +F8 13 DD DD B3 AC 36 8B C3 D3 FA 90 C7 4A E8 23 | ......6......J.# +63 17 C6 1B D6 57 65 3C 5D 1D 69 7B 71 09 DC 00 | c....We<].i{q... +4B EA 33 62 9D FE B5 A3 D9 00 5C 74 D4 93 1A B7 | K.3b......\t.... +F1 B3 2C DC 4D 98 04 C3 0B 84 1D D5 44 FA 35 4E | ..,.M.......D.5N +79 A7 13 7A 74 5C E5 5B C7 5B D9 32 10 84 85 F1 | y..zt\.[.[.2.... +7D 9B 84 B1 A1 BB 30 F6 CB 53 B4 72 1C 44 D5 E1 | }.....0..S.r.D.. +A3 55 5F F3 6F F0 E4 7F 25 E8 F2 70 75 C7 93 18 | .U_.o...%..pu... +49 D4 79 38 30 00 9F 03 A2 53 A7 46 74 AD C1 A3 | I.y80....S.Ft... +CE 18 00 78 4C BE 9D 45 42 AB 65 92 19 C5 3B 23 | ...xL..EB.e...;# +60 58 88 5A B9 BF C0 4E 02 9F 06 98 41 93 37 98 | `X.Z...N....A.7. +CA D4 FA F9 92 9D BA A6 C3 25 C9 CF 41 DA FD 1A | .........%..A... +80 BA D8 A5 5B AF 71 F0 B9 6A 2C 8F 90 86 16 A5 | ....[.q..j,..... +37 05 5A C0 FE D3 60 E5 6F 51 70 2D 1D 43 15 43 | 7.Z...`.oQp-.C.C +98 24 19 92 4B 1D 3B 13 79 65 D9 95 BE 1B 89 A7 | .$..K.;.ye...... +BE 0D 07 D8 16 2A 36 78 03 FD AF FE 84 20 FD 88 | .....*6x..... .. +AF 01 EA 54 36 97 A0 A4 12 99 F6 15 67 E6 49 6D | ...T6.......g.Im +F9 3E DB 2D 03 A8 CB CE FC C5 CA F9 AD 35 61 A8 | .>.-.........5a. +79 E8 2C A3 BF 8A 6A 8F AB 04 0E CE 21 05 53 67 | y.,...j.....!.Sg +2B 80 49 F7 EB 1F 56 8C F5 5E 61 94 57 00 D3 48 | +.I...V..^a.W..H +84 0F 36 64 24 DB 93 C0 B3 71 26 7E B6 D5 F5 C0 | ..6d$....q&~.... +50 C5 C8 D3 85 48 20 9F 27 E6 AF 68 B7 95 8C 9A | P....H .'..h.... +56 8E 1F AD 54 36 89 3E 88 B1 61 68 82 1F 7D FD | V...T6.>..ah..}. +18 56 01 02 9C 7E 5D E1 23 EB 62 AC 6C 84 43 E6 | .V...~].#.b.l.C. +35 8B 5A 87 59 48 CC 48 95 35 C6 96 65 6F 40 C2 | 5.Z.YH.H.5..eo@. +B9 D5 15 5F 8E B5 59 42 05 6D F3 3F F5 19 DE 8F | ..._..YB.m.?.... +43 69 12 00 E1 6A 17 6E 2C F8 CB FA F2 2F 3C 3C | Ci...j.n,..../<< +18 E0 68 5F 04 3A CD 49 E7 4D 49 B8 0A 21 F7 41 | ..h_.:.I.MI..!.A +16 C5 2A 80 7A C2 3E 3E DD EB C7 28 BA B2 2A C0 | ..*.z.>>...(..*. +19 FD 20 FA D6 86 C5 08 | .. ..... + +Flow Record: + RecordCount = 13 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132280006 [2024-04-15 00:04:40.006] + last = 1713132311020 [2024-04-15 00:05:11.020] + received at = 1713132377066 [2024-04-15 00:06:17.066] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 53757 + src tos = 0 + fwd status = 0 + in packets = 30 + in bytes = 18660 + src addr = 17.248.209.68 + dst addr = 157.143.34.100 + out packets = 34 + out bytes = 7061 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 37.432 ms + srv latency = 0.000 ms + app latency = 5.568 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 D8 57 62 FC 39 | ....z...v...Wb.9 +3D 06 8F DF CA 43 25 60 4F 32 6C 2A E1 06 C5 C6 | =....C%`O2l*.... +FC 5C F8 B3 F6 41 57 FE 6A 46 02 20 7B 77 E2 C0 | .\...AW.jF. {w.. +38 A7 17 3F E3 40 C1 CA 68 76 BA 94 9F 1C D4 93 | 8..?.@..hv...... +8C 47 94 8E 87 54 5A DE C2 F4 3B F8 13 02 00 00 | .G...TZ...;..... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 69 | ..+.....3.$... i +23 3D 95 74 AC 97 89 95 95 B2 E2 93 CD 2D C9 B0 | #=.t.........-.. +90 98 6C A5 7C 8D 95 07 8E 4F 2E 88 D8 2C 50 14 | ..l.|....O...,P. +03 03 00 01 01 17 03 03 00 2A 87 9D AE BC 0A EE | .........*...... +FF 8E F6 3D 66 AD B9 7F 8C 96 8E 6F 59 BC 24 E4 | ...=f......oY.$. +DF 2D 4B 94 57 AE DF E7 7F 03 C1 E4 AC E2 04 02 | .-K.W........... +7E AB FA AE 17 03 03 11 25 D3 31 8F EB 4A EC 7D | ~.......%.1..J.} +A2 6A C9 AB C2 BA 4F 24 62 F8 18 96 62 E1 6D C5 | .j....O$b...b.m. +4A 2F D3 1E 73 B3 5C C1 99 68 8B 02 85 DE 0E 97 | J/..s.\..h...... +20 10 E2 1B C9 DF 47 39 DA DB 9F 93 DE F8 03 6D | .....G9.......m +6C 96 56 7D 48 1E 76 6E 56 90 3C 38 58 A8 31 00 | l.V}H.vnV.<8X.1. +2F 7E 06 84 D8 FF E0 79 6F 94 67 F2 AD 87 F3 83 | /~.....yo.g..... +49 0B FE D8 33 2C 87 8A 92 FC A7 E4 10 68 AC 31 | I...3,.......h.1 +B9 2E ED E2 48 D8 95 D8 5B 40 79 F7 94 28 D6 A9 | ....H...[@y..(.. +CD A8 9A 9B BD E5 7A 56 9D 55 0D 21 C1 C7 67 53 | ......zV.U.!..gS +4B 3C 77 9C 04 C6 8F 16 01 64 B7 93 C5 FC AD 67 | K...\B...:e +F3 4C B1 4E D2 F5 9F 3B D6 A9 47 86 FE E0 FA 45 | .L.N...;..G....E +72 B1 BA 9A 87 64 F7 48 06 DA 45 35 AD 87 68 94 | r....d.H..E5..h. +DB 9E FA F8 28 45 50 E5 67 91 53 A1 50 35 CF 31 | ....(EP.g.S.P5.1 +DD B4 5E 04 71 53 23 13 5F F4 AF 69 F3 DE 8B 16 | ..^.qS#._..i.... +99 DD DD 17 6D 1A E7 90 82 AB C9 E6 1A ED 39 00 | ....m.........9. +64 51 97 82 C3 24 DD 5F 91 B4 15 27 F5 30 5F 79 | dQ...$._...'.0_y +7B 46 E3 8A 8C 6D E6 0A 8A 7E EF 8B 32 90 4C BB | {F...m...~..2.L. +AE 71 7F 22 69 C4 40 68 98 B1 D9 C3 21 4C CC FE | .q."i.@h....!L.. +A9 0F FB 9A 93 06 95 ED D1 36 52 A8 A0 D0 E7 ED | .........6R..... +77 6A E1 E8 71 1E BD E6 C3 04 F0 D0 85 51 B0 D5 | wj..q........Q.. +36 9F 39 19 58 9F 6B 68 77 61 4B 6A 48 F0 DA 92 | 6.9.X.khwaKjH... +02 8F FA 10 2F 56 9A 29 00 E1 77 2A 79 2C FE 76 | ..../V.)..w*y,.v +C9 29 E8 74 A0 95 10 02 B9 59 0E 3C 9F 12 D2 27 | .).t.....Y.<...' +0A BE CB 8D D4 E2 25 CD EE EF E6 80 67 B9 07 A2 | ......%.....g... +64 9E 36 C8 8F D3 A8 A7 32 93 19 33 CF 8D AD CC | d.6.....2..3.... +CE C9 7A 9F 27 AB F5 95 68 8A 32 E6 BE D7 DA AE | ..z.'...h.2..... +88 65 5D 12 B1 FD E5 DB 0D F9 D2 BA D7 B3 E0 76 | .e]............v +34 BB 2A 5D 4C 24 80 F1 4E A7 57 99 33 14 66 2F | 4.*]L$..N.W.3.f/ +9B 55 AB 0E 70 E9 24 7B 7E 32 E8 C6 75 50 F3 9A | .U..p.${~2..uP.. +CB B9 40 CC A1 D4 77 4E 24 23 61 EB 64 7E 5B 08 | ..@...wN$#a.d~[. +0D 4C 9B 2D 1E 15 75 91 4D 65 AF 80 8E 5B 2F A5 | .L.-..u.Me...[/. +1A C8 11 72 14 7D A3 F7 62 77 24 1B 87 AD 01 8B | ...r.}..bw$..... +2C 67 09 1C 0B AC 83 C9 ED A3 31 17 D3 8C 5C FC | ,g........1...\. +7A 39 E5 48 A1 F0 51 51 44 73 F7 35 63 04 4A FA | z9.H..QQDs.5c.J. +C2 D4 09 8D 5E 08 6C 75 B6 11 CF 5D 06 B1 2C 03 | ....^.lu...]..,. +BD 6F 6E F8 8D 0E 47 AF FE 56 B7 A6 C2 D0 81 F9 | .on...G..V...... +F9 80 A6 C2 3C D4 BA DA 2B 9D FB DA 69 A4 B8 C5 | ....<...+...i... +0C 52 5B 25 26 E8 2D EA 26 08 80 52 1F 6B CF E3 | .R[%&.-.&..R.k.. +97 79 E7 EF 31 37 A4 D8 48 14 50 43 65 E1 AF 77 | .y..17..H.PCe..w +87 0F 0A 20 AF E8 B8 48 F5 78 E2 FB B4 71 C6 62 | ... ...H.x...q.b +43 EA C9 74 CE 3E D2 27 73 80 81 03 CE 21 F5 DA | C..t.>.'s....!.. +34 6E E2 C4 88 4E CE 73 41 23 CD 32 9A A4 90 43 | 4n...N.sA#.2...C +2C 6B FE 5E B1 40 B2 B0 87 30 12 EE 09 21 4D 04 | ,k.^.@...0...!M. +F2 52 C7 A8 7E D2 AE 84 A1 7D D6 7B 11 88 38 5C | .R..~....}.{..8\ +E8 55 1D 51 C3 D7 EA E4 DA DE C6 97 E8 69 AF 77 | .U.Q.........i.w +AB 45 5B 18 3B 14 1E A9 C7 98 96 44 7A 0A EC 29 | .E[.;......Dz..) +C2 F9 D5 3C 74 10 BC A3 5A 0A 87 93 E4 51 8F 86 | .....Xf|........ +F3 67 1B 86 4C 51 06 7D 6D DA 45 18 2B FC 1E 44 | .g..LQ.}m.E.+..D +A6 B9 5C C0 59 A4 6D 05 36 8A B2 E3 3A 80 EA 02 | ..\.Y.m.6...:... +8D 62 DF 56 FD 38 02 ED 2F B8 D0 8B 9B 9A F2 61 | .b.V.8../......a +64 65 35 53 96 7A F0 6C 31 C7 7E 5E A1 54 E7 C3 | de5S.z.l1.~^.T.. +BA 43 70 41 B1 3E C3 3A 52 4E 1F 60 76 A2 B0 C2 | .CpA.>.:RN.`v... +D1 4C 9A F6 77 EC F1 27 91 26 A9 CD 2A DE 32 44 | .L..w..'.&..*.2D +3F 36 E0 CD C1 D7 44 35 97 09 08 C6 2D 7F 77 08 | ?6....D5....-.w. +DF B3 74 CB 2F 40 8D 19 2D 22 3D F6 34 B8 AF 4C | ..t./@..-"=.4..L +C0 9A CF 57 74 80 70 DA 8E 5F 31 EB BB 33 1E BA | ...Wt.p.._1..3.. +B3 6C CA FD 79 23 35 7F 6A B8 45 7C 99 B4 51 F9 | .l..y#5.j.E|..Q. +09 59 21 FC EA B0 63 7B DB B7 0A 72 A2 B5 2D DD | .Y!...c{...r..-. +AF F4 46 63 D1 AE 3A 9F | ..Fc..:. + +Flow Record: + RecordCount = 14 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1608 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132217356 [2024-04-15 00:03:37.356] + last = 1713132217536 [2024-04-15 00:03:37.536] + received at = 1713132302717 [2024-04-15 00:05:02.717] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 63066 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 7012 + src addr = 13.224.103.47 + dst addr = 157.143.34.100 + out packets = 13 + out bytes = 1676 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 8.294 ms + srv latency = 0.000 ms + app latency = 0.126 ms + in payload = 1428 + TLS version = TLS 1.3 + ja3s hash = 16a232c6047ab4c7f493b826d419a8be + ja4s hash = t130500_c02f_a241d087c239 +16 03 03 00 63 02 00 00 5F 03 03 B6 34 33 F2 88 | ....c..._...43.. +78 52 42 1B 23 B5 25 06 E1 C5 F1 43 8E EA 02 12 | xRB.#.%....C.... +E8 BD 2C 44 4F 57 4E 47 52 44 01 20 A8 D8 47 33 | ..,DOWNGRD. ..G3 +1B CD 04 21 EC 56 BD B4 92 B7 03 50 6D 06 8A 40 | ...!.V.....Pm..@ +19 F1 9D 9C 44 0A 13 97 69 C2 4A 8A C0 2F 00 00 | ....D...i.J../.. +17 00 00 00 00 00 0B 00 02 01 00 FF 01 00 01 00 | ................ +00 05 00 00 00 17 00 00 16 03 03 13 93 0B 00 13 | ................ +8F 00 13 8C 00 06 0F 30 82 06 0B 30 82 04 F3 A0 | .......0...0.... +03 02 01 02 02 10 0A 28 52 01 F0 E0 3A 67 F4 F8 | .......(R...:g.. +C7 A1 48 40 12 B8 30 0D 06 09 2A 86 48 86 F7 0D | ..H@..0...*.H... +01 01 0B 05 00 30 3C 31 0B 30 09 06 03 55 04 06 | .....0<1.0...U.. +13 02 55 53 31 0F 30 0D 06 03 55 04 0A 13 06 41 | ..US1.0...U....A +6D 61 7A 6F 6E 31 1C 30 1A 06 03 55 04 03 13 13 | mazon1.0...U.... +41 6D 61 7A 6F 6E 20 52 53 41 20 32 30 34 38 20 | Amazon RSA 2048 +4D 30 31 30 1E 17 0D 32 33 30 37 31 30 30 30 30 | M010...230710000 +30 30 30 5A 17 0D 32 34 30 38 30 37 32 33 35 39 | 000Z..2408072359 +35 39 5A 30 14 31 12 30 10 06 03 55 04 03 13 09 | 59Z0.1.0...U.... +74 69 64 61 6C 2E 63 6F 6D 30 82 01 22 30 0D 06 | tidal.com0.."0.. +09 2A 86 48 86 F7 0D 01 01 01 05 00 03 82 01 0F | .*.H............ +00 30 82 01 0A 02 82 01 01 00 D8 DB 24 28 FF 06 | .0..........$(.. +62 F6 20 6C E1 1D 3C 09 F1 AF 3E 26 6B F1 90 4E | b. l..<...>&k..N +E7 D5 28 7C BD 18 AA E2 8F 06 66 64 65 35 62 25 | ..(|......fde5b% +4A 9D 59 73 C3 BD 0A 64 C0 29 6C AA CC F5 3F A4 | J.Ys...d.)l...?. +47 33 26 D1 13 96 93 01 DE 8A B0 B1 52 A7 20 F9 | G3&.........R. . +49 B9 F9 B0 04 D8 27 BF A0 52 55 7C 5F B5 9F EF | I.....'..RU|_... +CE 8E F0 EA 98 8D 49 2A FE 0B 65 E2 C5 29 06 33 | ......I*..e..).3 +91 C0 28 73 69 1E AB 09 06 E2 71 A2 0C 5F 50 A3 | ..(si.....q.._P. +82 7D BE F5 A2 B6 FC BE E2 55 FD BB 3E E3 7F 2B | .}.......U..>..+ +B8 6E D9 5D E0 75 49 6A CD DC 49 52 0B 58 C2 0B | .n.].uIj..IR.X.. +B4 35 31 C6 35 8C F2 90 AC 29 FA 74 EA EF 5F AD | .51.5....).t.._. +C3 2F B5 D0 04 4A CB 98 A8 8B 4B AE 22 86 58 EB | ./...J....K.".X. +E1 9E E0 B1 4F F4 F3 07 14 B5 14 62 99 33 85 5E | ....O......b.3.^ +60 B9 01 6A 6A 26 FE 78 0B 00 DF D9 B5 BA 39 A4 | `..jj&.x......9. +51 6F E1 88 1D 08 AE 05 B5 BD A9 50 BD 10 EC 45 | Qo.........P...E +16 89 84 41 35 8B 69 2E DC 52 07 44 E8 28 B3 4C | ...A5.i..R.D.(.L +0D A5 5F D9 8B 75 86 89 3C 93 02 03 01 00 01 A3 | .._..u..<....... +82 03 2F 30 82 03 2B 30 1F 06 03 55 1D 23 04 18 | ../0..+0...U.#.. +30 16 80 14 81 B8 0E 63 8A 89 12 18 E5 FA 3B 3B | 0......c......;; +50 95 9F E6 E5 90 13 85 30 1D 06 03 55 1D 0E 04 | P.......0...U... +16 04 14 A6 52 40 27 FC 32 CD 1D D0 81 EC 6B 98 | ....R@'.2.....k. +04 D6 8B FB 00 1D 81 30 61 06 03 55 1D 11 04 5A | .......0a..U...Z +30 58 82 09 74 69 64 61 6C 2E 63 6F 6D 82 0F 2A | 0X..tidal.com..* +2E 77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D | .wimpmusic.com.. +77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D 74 | wimpmusic.com..t +69 64 61 6C 68 69 66 69 2E 63 6F 6D 82 0B 2A 2E | idalhifi.com..*. +74 69 64 61 6C 2E 63 6F 6D 82 0F 2A 2E 74 69 64 | tidal.com..*.tid +61 6C 68 69 66 69 2E 63 6F 6D 30 0E 06 03 55 1D | alhifi.com0...U. +0F 01 01 FF 04 04 03 02 05 A0 30 1D 06 03 55 1D | ..........0...U. +25 04 16 30 14 06 08 2B 06 01 05 05 07 03 01 06 | %..0...+........ +08 2B 06 01 05 05 07 03 02 30 3B 06 03 55 1D 1F | .+.......0;..U.. +04 34 30 32 30 30 A0 2E A0 2C 86 2A 68 74 74 70 | .40200...,.*http +3A 2F 2F 63 72 6C 2E 72 32 6D 30 31 2E 61 6D 61 | ://crl.r2m01.ama +7A 6F 6E 74 72 75 73 74 2E 63 6F 6D 2F 72 32 6D | zontrust.com/r2m +30 31 2E 63 72 6C 30 13 06 03 55 1D 20 04 0C 30 | 01.crl0...U. ..0 +0A 30 08 06 06 67 81 0C 01 02 01 30 75 06 08 2B | .0...g.....0u..+ +06 01 05 05 07 01 01 04 69 30 67 30 2D 06 08 2B | ........i0g0-..+ +06 01 05 05 07 30 01 86 21 68 74 74 70 3A 2F 2F | .....0..!http:// +6F 63 73 70 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F | ocsp.r2m01.amazo +6E 74 72 75 73 74 2E 63 6F 6D 30 36 06 08 2B 06 | ntrust.com06..+. +01 05 05 07 30 02 86 2A 68 74 74 70 3A 2F 2F 63 | ....0..*http://c +72 74 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F 6E 74 | rt.r2m01.amazont +72 75 73 74 2E 63 6F 6D 2F 72 32 6D 30 31 2E 63 | rust.com/r2m01.c +65 72 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 | er0...U.......0. +30 82 01 7E 06 0A 2B 06 01 04 01 D6 79 02 04 02 | 0..~..+.....y... +04 82 01 6E 04 82 01 6A 01 68 00 76 00 EE CD D0 | ...n...j.h.v.... +64 D5 DB 1A CE C5 5C B7 9D B4 CD 13 A2 32 87 46 | d.....\......2.F +7C BC EC DE C3 51 48 59 46 71 1F B5 9B 00 00 01 | |....QHYFq...... +89 3E 21 77 27 00 00 04 03 00 47 30 45 02 21 00 | .>!w'.....G0E.!. +C3 53 34 AF 43 03 C8 C1 11 23 3E C1 40 EF 06 27 | .S4.C....#>.@..' +CD E1 7A 49 8B DD 92 84 2B 16 63 6C 2A B5 A2 E2 | ..zI....+.cl*... +02 20 0F C9 0F B9 45 4D E3 88 94 3D 75 78 15 CC | . ....EM...=ux.. +7F 6B 35 8B 00 3B 7B 0E 8A 1C 2D 27 86 24 17 F5 | .k5..;{...-'.$.. +63 B7 00 76 00 48 B0 E3 6B DA A6 47 34 0F E5 6A | c..v.H..k..G4..j +02 FA 9D 30 EB 1C 52 01 CB 56 DD 2C 81 D9 BB BF | ...0..R..V.,.... +AB 39 D8 84 73 00 00 01 89 3E 21 77 04 00 00 04 | .9..s....>!w.... +03 00 47 30 45 02 21 00 AC F0 89 AA C4 1F 25 10 | ..G0E.!.......%. +2E 63 EB 9F 51 F8 34 FC B8 E9 87 80 67 CF FE 12 | .c..Q.4.....g... +46 67 8D 9C ED 23 25 A6 02 20 0D 0C 2F 87 19 F4 | Fg...#%.. ../... +EF 94 64 B0 F4 2D 7D 3C 5E 33 52 8D 7B D4 E0 FB | ..d..-}<^3R.{... +4D 9A 14 C8 E1 65 89 5E C6 C4 00 76 00 DA B6 BF | M....e.^...v.... +6B 3F B5 B6 22 9F 9B C2 BB 5C 6B E8 70 91 71 6C | k?.."....\k.p.ql +BB 51 84 85 34 BD A4 3D 30 48 D7 FB AB 00 00 01 | .Q..4..=0H...... +89 3E 21 76 E0 00 00 04 03 00 47 30 45 02 21 00 | .>!v......G0E.!. +86 79 F0 C1 4E 93 9C 55 56 DF 1B 18 DC AF 80 B5 | .y..N..UV....... +DB 29 68 19 86 6B B1 AF A0 E3 0D A5 91 42 42 37 | .)h..k.......BB7 +02 20 53 72 52 08 2E 09 7A E8 B8 10 1E AA C5 7D | . SrR...z......} +0F D0 25 D2 EE 1D EC F5 E1 09 2D F5 B4 12 3A 83 | ..%.......-...:. +59 A7 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 | Y.0...*.H....... +00 03 82 01 01 00 4F E5 AC 91 4E 4A 44 05 5D 5D | ......O...NJD.]] +D3 9D AC B4 | .... + +Flow Record: + RecordCount = 15 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 12 15 17 29 + size = 1552 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132383422 [2024-04-15 00:06:23.422] + last = 1713132383682 [2024-04-15 00:06:23.682] + received at = 1713132487351 [2024-04-15 00:08:07.351] + proto = 6 TCP + tcp flags = 0x1a ...AP.S. + src port = 443 + dst port = 51203 + src tos = 0 + fwd status = 0 + in packets = 10 + in bytes = 5830 + src addr = 172.217.168.3 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 11.892 ms + srv latency = 0.000 ms + app latency = 12.273 ms + in payload = 1400 + TLS version = TLS 1.3 + ja3s hash = eb1d94daa7e0344597e756a1fb6e7054 + ja4s hash = t130200_1301_234ea6891581 +16 03 03 00 7A 02 00 00 76 03 03 8B 6A FF 3D D8 | ....z...v...j.=. +80 07 13 E3 58 50 71 3F 59 82 6D E4 84 79 91 A6 | ....XPq?Y.m..y.. +4F 49 70 98 49 76 7F 09 6B 17 B9 20 82 74 02 0F | OIp.Iv..k.. .t.. +67 B4 15 96 F5 76 60 19 36 1A 59 CC 40 18 6C 70 | g....v`.6.Y.@.lp +CF D5 A6 5F CE 26 99 60 E0 00 F9 3F 13 01 00 00 | ..._.&.`...?.... +2E 00 33 00 24 00 1D 00 20 30 B0 9E DB 3B 2C BE | ..3.$... 0...;,. +E9 EB C1 01 12 54 BD 2D 6D 7C DC 91 C8 10 3E 50 | .....T.-m|....>P +21 38 B3 BF 0D 17 B3 23 2E 00 2B 00 02 03 04 14 | !8.....#..+..... +03 03 00 01 01 17 03 03 10 5C 1B 1C E6 64 5E F0 | .........\...d^. +BC 23 4E CE 2F 95 23 32 32 F0 D1 C5 ED 6F 22 B2 | .#N./.#22....o". +61 F3 E0 FD 3D 9A B1 EB 4E 0C 84 31 67 3D 12 24 | a...=...N..1g=.$ +3A 60 85 48 30 FF 7C 88 15 33 F6 4E F7 61 69 8E | :`.H0.|..3.N.ai. +3B 30 A8 13 DE 16 39 58 16 2E E0 3B 83 1F 8B D6 | ;0....9X...;.... +D8 4E 0A 3C 51 EF D5 AB 44 CE 79 0D 9D 24 FB 9C | .N. +AD D5 BB E6 86 80 3A 13 19 AB EA 8B E0 C3 9F 56 | ......:........V +EC 27 56 2B 98 40 10 71 D1 5E C9 59 11 B4 93 53 | .'V+.@.q.^.Y...S +A5 F5 CE A3 65 77 54 07 35 AC 0D 66 04 DF 75 7E | ....ewT.5..f..u~ +4B 98 BD 6A 8E AB 02 C7 EB AA 0C 07 5B 13 B7 7D | K..j........[..} +25 7B 62 D2 BD 07 09 D2 7C 7B 25 23 7D 46 BE 4E | %{b.....|{%#}F.N +3C A0 DE 29 29 00 4A 09 68 A8 01 C9 DF 8C ED 0E | <..)).J.h....... +AE 80 6E 39 37 D2 B0 30 97 72 A0 3F 1F 69 E6 03 | ..n97..0.r.?.i.. +DA F7 C4 2F 9F 38 1E 1F 26 63 7B EE E5 A0 48 30 | .../.8..&c{...H0 +AF 8B E5 53 69 49 6D 6C 25 B6 67 43 56 8F 6A 97 | ...SiIml%.gCV.j. +03 33 68 7A 3C 2C 00 7E 0C 3D 85 20 76 FC E0 9D | .3hz<,.~.=. v... +4E 64 1B 0F 78 31 F7 B5 81 C7 FB 29 0E F2 A5 24 | Nd..x1.....)...$ +37 FD BF A2 3D 53 A7 BE 23 4A 38 3F 55 97 E3 27 | 7...=S..#J8?U..' +90 0D 67 84 F7 26 7D 50 9F E6 4B 28 0D 5F BE 65 | ..g..&}P..K(._.e +70 3E 32 3B C0 E9 CB 56 DD 0D 3D E9 C0 AA F8 0F | p>2;...V..=..... +6E CF 57 A6 40 CE D9 D8 1C D9 2D 03 E1 C9 E0 C0 | n.W.@.....-..... +9E 9F 70 14 07 19 5C 94 7B CF 57 48 7C C0 53 C7 | ..p...\.{.WH|.S. +93 C3 F3 CE BE 95 1E 8C 91 DF 20 4E E8 EE 9F 0B | .......... N.... +CC 5A 8D F0 73 88 64 E6 8F E1 3F E9 A8 F1 90 7E | .Z..s.d...?....~ +FB C0 2D 64 70 63 9B 1C 79 3F 48 00 8D B5 9B 40 | ..-dpc..y?H....@ +5F 56 6B 6F C0 15 B9 6C 70 22 3E C8 8C DB BC D5 | _Vko...lp">..... +AC 93 7D 61 26 2E C4 7F 84 2F F1 91 9D 19 64 17 | ..}a&..../....d. +6E 63 E0 3B 31 E7 09 B2 5F E2 B8 12 E1 0E DC DF | nc.;1..._....... +D8 39 E7 42 5F FD E7 DE BC C3 12 B3 40 C3 47 C2 | .9.B_.......@.G. +8D 56 57 98 A0 E1 F3 80 23 C5 40 F2 0C A7 12 94 | .VW.....#.@..... +F1 2E EF B0 CD 47 60 FF 0E C0 F4 0E 1E 0C E4 BD | .....G`......... +BF C5 4F 95 D9 5C 57 C0 42 C1 2F 5D 92 BB 89 BF | ..O..\W.B./].... +68 13 46 27 E3 C1 2F 79 AB F4 77 F0 DF 42 9B 38 | h.F'../y..w..B.8 +28 6D 5B FE 17 BC AB F8 36 44 75 73 CF 54 2A E2 | (m[.....6Dus.T*. +F3 00 A0 57 7C 80 2F D7 6A 45 D1 C0 80 D4 B9 86 | ...W|./.jE...... +09 EF D7 50 06 EB 3C 04 E3 B1 02 53 9F 7E ED 82 | ...P..<....S.~.. +32 87 23 39 5A C3 06 58 33 F4 DB E3 4C EE 32 0B | 2.#9Z..X3...L.2. +9A 30 DC D5 E3 E3 50 1B 41 76 2C E3 CD 95 97 1F | .0....P.Av,..... +5E BA 6F 14 72 BB 07 1A B0 A2 DA B7 EC C2 0A 97 | ^.o.r........... +44 51 D1 19 BB A4 77 29 8C D2 2B AD 68 DA C5 D9 | DQ....w)..+.h... +7B 07 A8 09 8D FA A7 CC E0 1C F9 13 6D 56 EC 88 | {...........mV.. +AD 45 C7 76 0E 5D 19 44 74 82 CD B3 23 68 96 71 | .E.v.].Dt...#h.q +2C 89 02 CA C1 0C 3C 81 70 51 A3 97 94 76 42 29 | ,.....<.pQ...vB) +58 54 9D 04 C3 41 7C FC A5 0B 5D 50 2E EF 1C 3B | XT...A|...]P...; +AD 61 1A 9C 0B 84 D2 01 D1 DC 79 E8 98 94 9C 81 | .a........y..... +F2 81 DA FC 31 A7 62 21 E9 06 EA 95 01 A9 32 A2 | ....1.b!......2. +71 F9 0A CF C4 20 AA 27 15 BA 63 9C DE 77 00 C9 | q.... .'..c..w.. +46 F6 FC 6D E0 DE 8F 80 DD FC 52 90 5B FD F4 72 | F..m......R.[..r +8C 8F DE EF 9F 9F FD 9B 16 1D B3 01 CD 7E D6 5B | .............~.[ +D0 1A 56 B1 6D 05 B1 B3 7A FE 16 F8 CB A6 2B 7B | ..V.m...z.....+{ +12 89 93 A9 FF 8A 6B CF 0B 93 F3 6F 18 CE C7 EF | ......k....o.... +8F AF 96 8F DA F0 4F DC 07 35 F3 83 F8 C6 04 57 | ......O..5.....W +A2 05 74 9C C0 AD 12 9D 7C 84 84 E5 84 52 33 0C | ..t.....|....R3. +52 DB 74 C2 3E E8 5A A8 40 73 D4 26 C2 F4 67 5E | R.t.>.Z.@s.&..g^ +42 F4 F9 11 73 DD B8 47 18 06 B9 C5 10 A7 1F BE | B...s..G........ +DD 6E BF 9B 0F 1A 25 1C 97 37 6D 8B FD 34 C4 1C | .n....%..7m..4.. +1D D8 EA A2 B0 CE B1 EA 19 A1 CC 80 B8 54 4C B3 | .............TL. +3A 61 DD CC 71 A5 19 56 D2 19 5C 31 03 5F 45 70 | :a..q..V..\1._Ep +4D 19 E0 F6 10 AA F4 62 07 CB F4 23 13 09 4C 8E | M......b...#..L. +00 02 00 3E A0 E5 01 07 1D 85 C9 2B 14 18 C7 34 | ...>.......+...4 +24 3F 76 2E 45 0A 49 3F BC 0C 3C 5D 95 9F FE F7 | $?v.E.I?..<].... +61 25 43 C9 83 25 BB 6B D8 C3 EF AE 0C 44 0F F4 | a%C..%.k.....D.. +40 0C F5 0C 5F CE 4D DF 07 95 DE B9 C3 BC 51 A8 | @..._.M.......Q. +C7 0F 55 50 46 41 64 FB 6B 8D 48 3F 49 75 1B DE | ..UPFAd.k.H?Iu.. +37 0F F5 86 6F 90 48 4D 46 B6 30 D2 9F 0F 24 76 | 7...o.HMF.0...$v +93 A8 93 62 0E A0 F1 7A CC 5F 3D 10 DB B9 C6 EA | ...b...z._=..... +F4 29 82 A5 9B 97 9C AC 3B 9D 90 4E 4A 64 1B 06 | .)......;..NJd.. +E4 F0 C0 E7 A0 E4 5B B2 FF 40 DA A4 4E 95 80 43 | ......[..@..N..C +5C E7 F7 37 32 6B F7 AB ED 11 CE 49 21 B8 F0 F4 | \..72k.....I!... +40 21 57 19 F1 CF 88 A2 A9 A5 13 C4 5D A7 4B 88 | @!W.........].K. +80 C7 A6 85 52 A4 F6 1F 39 50 DB 40 E2 E4 E4 DF | ....R...9P.@.... +22 5F 0F B8 66 D5 6A 43 D3 27 E6 D3 CA A0 4A A6 | "_..f.jC.'....J. +25 38 34 4F CC C6 7D 67 03 24 0C 40 3D 5C C6 24 | %84O..}g.$.@=\.$ +FC 9B 32 35 C3 C5 6C 02 | ..25..l. + +Flow Record: + RecordCount = 16 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 5 12 15 29 + size = 1402 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132381097 [2024-04-15 00:06:21.097] + last = 1713132381591 [2024-04-15 00:06:21.591] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 53011 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 9134 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + out packets = 32 + out bytes = 10776 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +C3 00 00 00 01 00 08 E7 13 B0 C5 BD EF F7 C0 00 | ................ +44 D0 75 F6 A3 03 41 C8 A0 F9 02 4C E7 10 86 9D | D.u...A....L.... +67 D6 F8 F6 AA E1 21 76 FD 84 3B 22 B6 F3 FE 11 | g.....!v..;".... +76 6F D5 9C 0B EA 10 C1 5F EC D6 60 D0 BD 73 EE | vo......_..`..s. +7F 77 0F D6 82 1A 86 91 15 BC 80 A7 71 05 D6 9D | .w..........q... +7C 24 CD E6 F4 3B 7D 09 7F C2 EE 8F 6D 7C 3D 83 | |$...;}.....m|=. +B6 57 6E 02 94 7B AF 1C 00 A2 00 90 24 03 10 BB | .Wn..{......$... +3C 02 4F BF 36 CE 45 1E 48 D3 8E 42 5D 17 53 C9 | <.O.6.E.H..B].S. +FB 54 B9 FD AF 01 0D 9D 6D 94 7A B7 7B 6E 32 22 | .T......m.z.{n2" +C6 FB 4F C3 0F AC F0 8F 74 6C B3 FF E8 FB 19 B9 | ..O.....tl...... +8D C3 44 F9 A3 76 37 DD C0 BB 17 C2 24 34 A8 3E | ..D..v7.....$4.> +70 27 1B CC 83 3A F0 18 77 70 A5 03 BB 0B 2F 11 | p'...:..wp..../. +1A E1 D0 F8 7B A7 AF 78 AF DC 4F 92 31 B7 13 38 | ....{..x..O.1..8 +CB A7 87 6C F5 00 39 43 2F 44 AC BB 06 50 0E EA | ...l..9C/D...P.. +1E D2 0C 96 C8 08 76 C5 7C D9 78 94 AB 24 AA 13 | ......v.|.x..$.. +23 4C A3 10 F4 2C FB 27 46 A1 7F 07 F7 54 72 36 | #L...,.'F....Tr6 +4F 09 9E A2 5F 78 78 91 83 F0 4D 43 B9 48 AB 43 | O..._xx...MC.H.C +0B EA C0 F8 74 49 BA C3 ED 78 EC 99 EC C3 22 F7 | ....tI...x....". +DF FD 57 09 D2 3D ED D8 A6 A5 51 7F B2 2D 1F 56 | ..W..=....Q..-.V +7A 43 38 9A 97 7F C2 66 D3 D3 EA 67 1A 4D 19 52 | zC8....f...g.M.R +98 69 0D 86 D1 93 6F 70 45 15 44 6A 73 64 96 59 | .i....opE.Djsd.Y +91 31 6A 4E 2A EB F8 ED 51 3B 73 31 31 77 97 2B | .1jN*...Q;s11w.+ +C5 D4 C3 CA 8D C0 FC E4 6B 13 FC 22 8F 65 A6 FC | ........k..".e.. +B1 C1 F7 87 8E 88 FB D2 F8 65 BA 7F 9D 30 D1 4D | .........e...0.M +0A CE FD 0A A4 A4 88 D1 2C 2A 05 FF 9C 5B 9E 20 | ........,*...[. +4F D4 6F 56 DA D5 3C AA C9 A7 B2 CE B5 B3 27 43 | O.oV..<.......'C +EF BB BF 8F 1A 2E A5 71 1D 08 AA A2 53 2A D8 41 | .......q....S*.A +E0 6D 43 49 47 09 07 D3 64 EE 29 60 24 63 6A B3 | .mCIG...d.)`$cj. +39 87 10 DC 5E AA E7 5A 50 8B 4F 96 AE 14 35 8D | 9...^..ZP.O...5. +4A 30 88 03 DE 99 86 A4 FE B4 07 CC C8 9C 4A 3D | J0............J= +96 54 33 36 61 12 C8 87 3B A4 D3 72 75 E0 5F 4E | .T36a...;..ru._N +A9 8A 22 C8 C9 04 5A 64 73 3B 90 96 8D BA 66 3C | .."...Zds;....f< +C9 B0 86 43 3B A2 F9 FF BF 2B 79 12 65 36 6C 3B | ...C;....+y.e6l; +95 00 C6 9C 8D B8 5F 9D 5B FE BF 5F C6 92 C4 A5 | ......_.[.._.... +19 A7 DB 60 F7 DE 55 51 95 90 26 84 BD 2B 98 D9 | ...`..UQ..&..+.. +6E 1C 83 BC 12 DC 11 30 88 E5 64 F5 E4 D5 A2 0E | n......0..d..... +62 54 2E 53 4C DC 36 7F 83 8C A9 F7 BA 31 3B F4 | bT.SL.6......1;. +DD 39 E4 55 C4 32 AD D0 6C F9 91 55 52 B4 0D DF | .9.U.2..l..UR... +12 3A 38 1B B4 E5 76 80 FB 6D 54 89 00 63 D0 9E | .:8...v..mT..c.. +0C 39 E4 95 E3 31 82 3F 8D CF 52 C6 58 D3 B0 8E | .9...1.?..R.X... +65 57 EE C9 A6 54 8A E9 D3 66 4F 44 3F 10 3F 09 | eW...T...fOD?.?. +84 3A 69 91 3C D5 6B 7F 71 E5 3E AC AE 7D 1A 27 | .:i.<.k.q.>..}.' +D5 06 72 CC 7D 8B 1C E1 2F 57 56 FD 17 62 27 E2 | ..r.}.../WV..b'. +B5 9D AB 2B C1 ED 19 2A CF A3 76 C3 D5 0A 45 F0 | ...+...*..v...E. +89 2C 96 E0 57 20 09 37 4F ED 4E 86 EE 5B 16 9B | .,..W .7O.N..[.. +34 DB 86 27 1A 5B 94 EE 46 1C BA AF 84 61 87 79 | 4..'.[..F....a.y +AB BC 1B 99 25 ED 02 EF F1 A7 D4 EB F9 DC C0 BC | ....%........... +6D 2B 9B D0 E3 19 31 67 CD 25 C9 A9 87 36 A5 1C | m+....1g.%...6.. +23 43 29 72 3E 5D 54 3C 06 CF 0D 7E 9C 9E 36 5C | #C)r>]T<...~..6\ +9A 7E 0A 3B 7C CC 87 A2 B7 0D 62 D1 B3 AB B3 38 | .~.;|.....b....8 +7A 2B 3F 9C 06 DB 58 90 9B F2 B9 B1 24 3F 50 B2 | z+?...X.....$?P. +09 AA CA 7D C2 6C B1 66 A2 C8 9C 2A 8A 87 3C 61 | ...}.l.f...*.. +69 2D 2D D5 A9 EC 6B 78 F4 A6 1C 9D 2E 6D 48 A5 | i--...kx.....mH. +7F F3 70 E0 3F 0E 63 CA 43 FD FE B4 62 DD BD 0A | ..p.?.c.C...b... +18 F9 A0 F4 AD A5 8B 2A 68 ED 80 BE 9D 5C 8A 57 | .......*h....\.W +CB 97 FD D6 F7 57 D1 FE BF 73 2D 9B FC CF 29 3E | .....W...s-...)> +E7 07 03 8F D2 BD 77 40 F7 BE CA 13 C7 9F 78 A2 | ......w@......x. +95 87 5C 8F 98 F0 40 47 88 F7 2E 82 C1 2C 73 5A | ..\...@G.....,sZ +A5 4D B8 3F A9 4A 02 F6 F7 AB A8 A8 92 0B 39 67 | .M.?.J........9g +5B CE 54 72 E3 B6 95 F8 9E 9F EC 13 5D B4 54 1D | [.Tr........].T. +87 05 0E DC D2 68 2D 1D 61 6B FD 4E 71 1E 54 98 | .....h-.ak.Nq.T. +13 1E C1 3C 60 13 B0 56 7F 83 65 84 BA D8 EE 25 | ...<`..V..e....% +71 87 91 AD FC 3E BB 5A 17 DA BD C9 2A 4A 88 D4 | q....>.Z....*J.. +0B 7E 5F 07 F1 E1 B3 B1 C2 34 93 A0 2F 36 8D BF | .~_......4../6.. +5E 52 D5 C0 A9 F3 04 97 96 43 53 28 0B 0F 99 6D | ^R.......CS(...m +AC F7 | .. + +Flow Record: + RecordCount = 17 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 207 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131973733 [2024-04-14 23:59:33.733] + last = 1713132274013 [2024-04-15 00:04:34.013] + received at = 1713132302717 [2024-04-15 00:05:02.717] + proto = 6 TCP + tcp flags = 0x18 ...AP... + src port = 58186 + dst port = 5228 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 1008 + src addr = 157.143.34.100 + dst addr = 172.217.218.188 + out packets = 18 + out bytes = 1098 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 22.592 ms + srv latency = 0.000 ms + app latency = 60021.633 ms + in payload = 27 +17 03 03 00 16 9B DC 11 55 10 BF F9 A3 22 CC 05 | ........U....".. +48 4B 8D F8 CE 75 87 33 C8 94 5A | HK...u.3..Z + +Flow Record: + RecordCount = 18 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 12 15 17 29 + size = 1552 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132383212 [2024-04-15 00:06:23.212] + last = 1713132383255 [2024-04-15 00:06:23.255] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 6 TCP + tcp flags = 0x1a ...AP.S. + src port = 443 + dst port = 59891 + src tos = 0 + fwd status = 0 + in packets = 7 + in bytes = 6183 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 14.087 ms + srv latency = 0.000 ms + app latency = 12.190 ms + in payload = 1400 + TLS version = TLS 1.3 + ja3s hash = eb1d94daa7e0344597e756a1fb6e7054 + ja4s hash = t130200_1301_234ea6891581 +16 03 03 00 7A 02 00 00 76 03 03 13 E1 DC 7D B5 | ....z...v.....}. +69 92 B1 0C A0 2C 7C C4 38 37 56 94 C6 C2 3B 83 | i....,|.87V...;. +45 89 8F EA BD C8 39 28 08 49 68 20 30 9B C6 11 | E.....9(.Ih 0... +6E 0B CF DF 1C 95 F8 BC F5 22 4D 40 FF 75 57 F7 | n........"M@.uW. +07 93 99 A5 47 45 E0 7D 8D 54 B7 EE 13 01 00 00 | ....GE.}.T...... +2E 00 33 00 24 00 1D 00 20 97 D6 73 BB 08 FC B3 | ..3.$... ..s.... +28 4B 73 E5 F1 82 7D A0 71 92 4F 55 EE 63 2C 20 | (Ks...}.q.OU.c, +22 F2 2B 12 10 DA 4F D0 43 00 2B 00 02 03 04 14 | ".+...O.C.+..... +03 03 00 01 01 17 03 03 12 65 79 4A E7 22 BA 6E | .........eyJ.".n +28 C0 53 AB 67 D1 8C 12 DA 7B 3F 13 4A 0A C6 BC | (.S.g....{?.J... +B7 47 EC E7 9F 83 D9 90 65 80 BD C9 6C B7 C9 DF | .G......e...l... +2B BF 9F 34 52 0F 61 28 79 A7 BF 68 D0 47 27 24 | +..4R.a(y..h.G'$ +3A 87 A9 F4 85 ED 88 A5 65 D8 2D E6 D6 59 F9 41 | :.......e.-..Y.A +91 3D 23 E9 21 DC 44 04 61 39 72 2B 39 B5 55 89 | .=#.!.D.a9r+9.U. +4C A6 C8 A8 F9 D0 06 E8 CC A5 FD A6 80 40 77 0D | L............@w. +27 24 BD 8C C3 6D 1E 57 FC 63 3C 79 9D 39 A2 56 | '$...m.W.c +91 25 C1 3E 20 6F 8F 6D 87 FA CF BE C4 3F 3F B1 | .%.> o.m.....??. +B9 11 BC F1 3E 74 67 CD 3A F3 F2 B5 68 6D 0A E9 | ....>tg.:...hm.. +45 1A 96 FA B7 82 CC 26 88 42 40 F3 05 DB 81 89 | E......&.B@..... +2C 63 41 E4 D7 F4 58 9C 29 CF D6 D1 78 0B 59 63 | ,cA...X.)...x.Yc +EA CD DB AA 45 0D BE 18 14 40 39 12 BE B1 A5 BE | ....E....@9..... +80 FD 87 14 C5 10 40 8D 72 D1 9D E0 DE 69 1E 28 | ......@.r....i.( +4D 0C 7C 89 65 44 F3 D3 C8 1F 68 07 A8 DF EF 63 | M.|.eD....h....c +14 6E 9C 54 5C 53 F4 FF B4 03 14 F6 72 C6 8F A9 | .n.T\S......r... +89 08 1F 58 44 E2 CA EB 26 CA 1C 57 C6 CB 3C 4E | ...XD...&..W........w#...A... +20 68 86 2D 02 DA 28 3B CF 4D 62 12 5F 2D 6C 6A | h.-..(;.Mb._-lj +AB 1C DA 4D 8F 98 AD 10 B5 02 45 64 94 AC 2A 99 | ...M......Ed..*. +66 12 AC DB B2 8F 14 D1 FB 0B 43 1D BF 07 AA 84 | f.........C..... +27 93 B2 B0 10 B0 39 06 07 EA 73 CE 1F E8 84 8C | '.....9...s..... +7C A1 26 B8 B2 43 11 BA C9 19 2F 9C 52 9A DF 17 | |.&..C..../.R... +2C 37 28 37 8B 3E 73 04 84 76 25 8F E2 A9 56 58 | ,7(7.>s..v%...VX +31 9E 77 27 2E 17 21 55 EA 58 52 05 FC C9 CB 18 | 1.w'..!U.XR..... +58 46 07 0E DA CA 4B 62 FA D1 78 F2 DA 07 77 84 | XF....Kb..x...w. +FE 75 84 85 17 09 E9 E5 B2 26 D8 73 26 36 FA F0 | .u.......&.s&6.. +C5 DF 91 49 9B F9 E2 74 25 40 B8 A1 15 41 00 F6 | ...I...t%@...A.. +FD B1 F1 CE 40 3F 2A 3A | ....@?*: + +Flow Record: + RecordCount = 19 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131988800 [2024-04-14 23:59:48.800] + last = 1713132019757 [2024-04-15 00:00:19.757] + received at = 1713132148815 [2024-04-15 00:02:28.815] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 56527 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18599 + src addr = 17.248.209.66 + dst addr = 157.143.34.100 + out packets = 32 + out bytes = 6945 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 20.998 ms + srv latency = 0.000 ms + app latency = 0.754 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 1C 7E C7 0C FC | ....z...v...~... +6D A3 32 54 9E A2 B0 09 49 4D 8A F1 75 55 F9 72 | m.2T....IM..uU.r +68 5B 28 B5 1D 19 4B 5B F7 A7 85 20 07 EB D9 DB | h[(...K[... .... +4D D5 2E 83 B5 12 E1 49 AA 70 13 F8 1B 5D 10 87 | M......I.p...].. +43 3F 20 B8 CA 28 6E 56 CD C8 C0 91 13 02 00 00 | C? ..(nV........ +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 E6 | ..+.....3.$... . +08 A1 60 FE 02 68 AA 96 43 AD 3A 49 56 70 BF DC | ..`..h..C.:IVp.. +66 F1 43 D2 84 9F 34 2D 6C 4F 9D EE DD 96 32 14 | f.C...4-lO....2. +03 03 00 01 01 17 03 03 00 2A 11 82 49 70 11 B5 | .........*..Ip.. +13 81 E2 1A 42 4B 6C 40 BB 91 D7 86 47 34 A2 1B | ....BKl@....G4.. +A6 46 C9 2A AE 5C 5F E5 BC 66 F7 AE 03 13 DA 0F | .F.*.\_..f...... +A6 F6 24 78 17 03 03 11 25 06 2E 11 AB 37 AD AA | ..$x....%....7.. +E1 B7 13 26 29 8F AB 4E A7 42 2C 8C F2 F2 6E E3 | ...&)..N.B,...n. +8B 40 E0 F5 6F 18 58 52 64 B4 FF 7A 41 D0 81 11 | .@..o.XRd..zA... +35 2C 6E 8A 4B 9F DC 71 A7 0B E8 5F EC C2 9D BD | 5,n.K..q..._.... +90 75 AA 44 F5 7C 56 68 60 A9 D8 66 20 1C DD 1D | .u.D.|Vh`..f ... +01 81 6C CC 7B A9 E3 0A FE 71 85 4C 83 43 06 4D | ..l.{....q.L.C.M +AF DA 96 03 F2 EF E4 78 49 7B 13 37 5F 8B 77 89 | .......xI{.7_.w. +6E B8 D5 80 85 8A C2 12 EE C2 E5 93 5C 22 EC 42 | n...........\".B +E6 FA EC 39 EA 33 9F 94 7F 82 C6 D1 EB 77 22 4B | ...9.3.......w"K +EA FF 80 1B 75 73 84 34 63 EF FD 9F 8C 65 14 61 | ....us.4c....e.a +6C 54 59 54 44 78 8B 0B C1 2F 7B E7 EB 89 E4 5D | lTYTDx.../{....] +B6 4A 1B FF E0 97 03 2E DC F9 01 F4 89 D7 4A B8 | .J............J. +8A 52 11 DB B7 07 8A 18 A1 B6 7C 52 30 55 14 9A | .R........|R0U.. +1F DF 4C E8 E6 A5 C4 CB F8 DE 13 67 E2 59 9E 93 | ..L........g.Y.. +35 62 46 F0 D4 E2 8A 29 07 65 96 FB 8E E1 F9 27 | 5bF....).e.....' +C6 CE 8E F3 01 57 79 A5 E5 88 C2 05 7F 64 55 74 | .....Wy......dUt +BB F6 9D 0F F7 3D F2 3C 7E 80 F9 03 B4 FB 4D D1 | .....=.<~.....M. +5E 09 FB 55 F9 0D 98 35 24 0E 4C 09 CD C3 02 A8 | ^..U...5$.L..... +B4 10 51 F3 29 24 68 F6 C0 53 EC 4D 83 BD 29 BE | ..Q.)$h..S.M..). +E5 F6 21 3C D1 96 91 6C D5 A9 56 42 F5 2B 2D F1 | ..!<...l..VB.+-. +AF 20 B5 E1 9E 3A 15 BA 44 55 BC 3F 99 72 72 EB | . ...:..DU.?.rr. +9B 5A 9B 84 CC 57 FE 3A 34 73 2D F7 F3 2E FD 3E | .Z...W.:4s-....> +46 92 39 71 B6 3A FC 55 BF B2 25 1C E6 3E BE 1B | F.9q.:.U..%..>.. +08 0F 08 FD 8D E8 85 D2 71 6F E0 19 7D 31 28 BF | ........qo..}1(. +8C 2A 5D 7F 20 94 E5 00 86 7D 3F 0B AA 44 27 81 | .*]. ....}?..D'. +78 A7 29 FC FA 5D F1 AD B6 25 D1 1D DF 01 BA 83 | x.)..]...%...... +7D A7 1E 23 E2 56 0F 25 51 97 AE 33 ED A3 FD A0 | }..#.V.%Q..3.... +02 C0 EA CD 07 AE 6A F1 B5 43 AC E7 FE A5 54 01 | ......j..C....T. +BD 1E BA A9 C7 A5 61 43 0B 3B 4A B8 00 CA 26 EB | ......aC.;J...&. +5D 91 F2 CD 55 91 E3 10 30 54 FD 51 C5 7F 5D 73 | ]...U...0T.Q..]s +93 32 7A A7 8E 6E B7 A9 24 AB DD D8 33 8D F0 E3 | .2z..n..$...3... +83 48 FB 94 30 25 27 73 A5 F2 C0 A1 5C 34 9F 03 | .H..0%'s....\4.. +8B 9E C4 DB D2 D9 C0 AA 50 41 27 06 A6 C8 C1 64 | ........PA'....d +E7 CF 05 FB FB A9 30 09 4A 19 8C 0D 80 81 59 15 | ......0.J.....Y. +98 CD 44 33 95 9B E8 48 FA F2 BD 2F 98 B5 79 6A | ..D3...H.../..yj +D7 61 FD 0A 4E 68 CE 5C CA FC 14 D0 C5 84 FD 06 | .a..Nh.\........ +B7 85 E8 1A 76 92 27 9F C7 F7 68 F8 78 BC 59 E6 | ....v.'...h.x.Y. +DE 27 99 D4 7D F8 42 5D 29 52 FA 61 34 3E DE C0 | .'..}.B])R.a4>.. +08 F5 D2 D1 B6 70 6B A7 04 F9 44 F2 54 AB F0 47 | .....pk...D.T..G +44 41 26 29 B4 8C 32 6F C4 2F 21 82 1D B4 D1 0B | DA&)..2o./!..... +BB DE 69 66 BD D8 8C 60 8D C6 19 35 1E 26 C1 DD | ..if...`...5.&.. +28 48 12 38 1E 60 B8 17 84 94 B2 76 26 37 52 CE | (H.8.`.....v&7R. +EB FD 05 EF 53 9F 3E 12 2B 8A 18 AF 2A AC B2 5D | ....S.>.+...*..] +C8 E1 07 3C 46 14 72 F1 B6 99 CF 4D 33 5D DD 1C | ...... +2A 86 4C 35 C1 FD 02 FD 46 F5 AD F5 D5 84 E5 AF | *.L5....F....... +04 9A 33 96 A7 39 5D B9 B5 CB 2C 3D A2 73 FB 82 | ..3..9]...,=.s.. +CA 69 71 3A 4C 37 64 EF E6 43 2E AE F9 94 8A 99 | .iq:L7d..C...... +0C 7B C9 B1 AF 72 FB 35 70 44 5F 68 F9 AA 27 1C | .{...r.5pD_h..'. +66 26 3C 6E 66 08 2B D9 87 4C CF 0E 60 EE 38 D2 | f&].. .(..... +CD EC 83 28 8D 6D 05 2A 1F 7E 80 80 35 EA 6E 48 | ...(.m.*.~..5.nH +5B A2 02 32 8C 1D 40 1F 31 9C 13 35 9E 2E 8B 97 | [..2..@.1..5.... +CC 2C F3 5B C9 70 0B FE C7 AE B7 8D FE D2 A5 A7 | .,.[.p.......... +33 2D 28 54 C3 CE 3D 3F 7B E3 93 51 E2 30 4F CC | 3-(T..=?{..Q.0O. +07 08 14 C0 CE 87 BA A8 02 46 57 73 D7 5A D7 E4 | .........FWs.Z.. +04 F7 5D 21 7A F9 01 D5 36 B2 5F 74 4F 59 BE 6E | ..]!z...6._tOY.n +71 F3 2D E2 FA AD 66 8B A5 AA 5F 3B DE 92 24 5A | q.-...f..._;..$Z +DB 80 39 86 E3 05 24 A5 FA D4 65 F6 B2 A2 05 47 | ..9...$...e....G +F9 0F 44 07 E8 5F 93 2D 8F EB CE 4E AF 41 34 7E | ..D.._.-...N.A4~ +07 66 4E 08 E6 EE C0 11 E9 84 3F 8C 0D A1 44 39 | .fN.......?...D9 +47 2D 06 A8 FC 56 44 DB FE C1 CE 7A BB F2 D4 6B | G-...VD....z...k +D4 59 47 1B 9F B4 A3 D1 2B 20 80 7C DD 53 03 13 | .YG.....+ .|.S.. +CE 45 03 E8 BF 27 4F 4E 19 2B 1E 6B 77 86 43 B1 | .E...'ON.+.kw.C. +CE E3 04 8F 7D 39 B9 1E 07 38 43 FE 97 97 89 D9 | ....}9...8C..... +F2 B0 C2 0B 63 B3 3E 72 62 B3 39 07 77 88 30 BF | ....c.>rb.9.w.0. +A9 15 FF C8 45 2D 85 39 35 0A 92 8F 7B 36 70 7F | ....E-.95...{6p. +D4 90 1D 48 19 9A 94 9D F1 D0 84 90 DF A5 23 7A | ...H..........#z +51 53 B2 A6 9C D7 FB 39 C0 17 CC 2D 7D 91 1E 14 | QS.....9...-}... +A1 6F 07 5C 99 86 97 8C 48 5B 79 55 10 2D 60 3C | .o.\....H[yU.-`< +F9 20 83 DD 67 5D 55 E7 55 59 59 C3 DC E1 B0 D0 | . ..g]U.UYY..... +B5 A2 43 E2 72 D0 CC 69 20 92 D3 5C 03 DA AF 3D | ..C.r..i ..\...= +DF 60 BC 86 10 F3 A4 0F 63 7F B4 52 2F FE 7C 76 | .`......c..R/.|v +3A 3D 75 65 F3 9B 07 8F C4 AF B2 95 AA 72 F0 15 | :=ue.........r.. +CE A8 85 D6 B3 16 10 A4 22 77 54 61 13 BB A8 A1 | ........"wTa.... +57 4C DE 92 81 E9 39 2C DF 97 78 F5 DB AB C6 26 | WL....9,..x....& +7C FB 02 49 A4 91 16 9B 40 83 10 E5 C5 BA 48 D5 | |..I....@.....H. +C3 83 90 65 EE 34 1B AD 85 6C E8 9B 95 4D 7C 6E | ...e.4...l...M|n +46 1C E9 B3 C5 FA B3 80 AF DB 46 81 95 91 B9 7F | F.........F..... +85 01 00 96 A9 8D AF 79 82 82 F3 4E B3 F9 16 C0 | .......y...N.... +64 CF 15 B4 80 A1 5F AF 7F 13 76 20 A2 25 B8 F8 | d....._...v .%.. +89 9C 8C 6B 54 53 9C E0 41 47 AA FC 58 20 E7 6F | ...kTS..AG..X .o +77 47 A0 E0 00 00 00 01 00 08 F5 2F 5E B8 7A 96 | wG........./^.z. +2F 0C 40 DC A5 62 B8 43 14 9B 03 D9 9D AC FD 15 | /.@..b.C........ +18 C8 37 F8 36 48 2B 23 95 87 69 A0 EF C0 FB F7 | ..7.6H+#..i..... +72 F4 5A BD 20 92 D4 A5 7D 71 5F 2E 94 4B FA 82 | r.Z. ...}q_..K.. +50 F2 9A C4 E2 4B 8D E0 B7 3E E1 21 34 EF 5F 83 | P....K...>.!4._. +DF 78 BF 09 8F 55 FC 0F 00 EB 2E 5F D8 6C 07 79 | .x...U....._.l.y +88 53 1D FC DE F9 4A BE 7A E3 3F 2B 75 01 97 78 | .S....J.z.?+u..x +66 8E E6 C0 30 D7 8F 53 0C 9D 2F 39 3A 27 56 20 | f...0..S../9:'V +56 A6 1B E4 87 DE F8 AC 1B 32 5D 85 7A B5 AA 35 | V........2].z..5 +89 39 8B C0 40 60 D2 00 58 69 AE ED 16 52 23 E3 | .9..@`..Xi...R#. +D2 4E 0B EE 1C 4C FE 8B A1 55 2D 41 E7 9E 0B 89 | .N...L...U-A.... +C6 D2 86 68 E7 D9 24 8A B3 C4 BD 15 82 56 8B F0 | ...h..$......V.. +2D 6D 9C 35 CC 4A 2C 10 EB 76 94 A5 10 FB 59 68 | -m.5.J,..v....Yh +C4 A4 7D 5B 0D FC 1E E3 BE 64 A9 AF D6 DA DE 81 | ..}[.....d...... +EA 99 92 3F 4E BE 74 61 0F FC 9D 85 46 01 05 8F | ...?N.ta....F... +45 25 EF 18 E8 76 47 39 48 99 AA 13 A0 7E 7D B7 | E%...vG9H....~}. +E3 FF AE F4 17 45 8D 26 8A D2 AC 6D C7 3B 7D 97 | .....E.&...m.;}. +39 6F 8A 28 C8 BB 6D 2B CD 74 4B 14 CD 2B C7 B1 | 9o.(..m+.tK..+.. +B1 78 8E C5 6C A7 2D 98 88 BD 08 9D 2D 74 58 F8 | .x..l.-.....-tX. +6F C0 | o. + +Flow Record: + RecordCount = 22 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 697 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132261362 [2024-04-15 00:04:21.362] + last = 1713132262789 [2024-04-15 00:04:22.789] + received at = 1713132344717 [2024-04-15 00:05:44.717] + proto = 6 TCP + tcp flags = 0xdf CE.APRSF + src port = 61426 + dst port = 443 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 2093 + src addr = 157.143.34.100 + dst addr = 2.21.22.179 + out packets = 14 + out bytes = 11736 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 8.926 ms + srv latency = 0.000 ms + app latency = 0.376 ms + in payload = 517 + TLS version = TLS 1.2 + sni name = weather-data.apple.com + ja3 hash = 5d5dfdf4aa8c9df35f686abcc6af682b + ja4 hash = t12d2014h1_a09f3c656075_14788d8d241b +16 03 01 02 00 01 00 01 FC 03 03 7D 64 24 23 B0 | ...........}d$#. +E7 C4 36 01 A0 3D 33 4A BC FE 74 FD 4E B6 7A 8E | ..6..=3J..t.N.z. +8E B3 5F 1F B3 D9 FD 8F 20 B6 D0 20 07 D2 65 9F | .._..... .. ..e. +8D 6D 56 BB 2D 2D 89 D1 22 8F 59 6F B1 25 1D 5D | .mV.--..".Yo.%.] +1F 68 C6 AF 0F 78 8D F1 52 58 85 C6 00 2A DA DA | .h...x..RX...*.. +13 01 13 02 13 03 C0 2C C0 2B CC A9 C0 30 C0 2F | .......,.+...0./ +CC A8 C0 0A C0 09 C0 14 C0 13 00 9D 00 9C 00 35 | ...............5 +00 2F C0 08 C0 12 00 0A 01 00 01 89 7A 7A 00 00 | ./..........zz.. +00 00 00 1B 00 19 00 00 16 77 65 61 74 68 65 72 | .........weather +2D 64 61 74 61 2E 61 70 70 6C 65 2E 63 6F 6D 00 | -data.apple.com. +17 00 00 FF 01 00 01 00 00 0A 00 0C 00 0A BA BA | ................ +00 1D 00 17 00 18 00 19 00 0B 00 02 01 00 00 10 | ................ +00 0B 00 09 08 68 74 74 70 2F 31 2E 31 00 05 00 | .....http/1.1... +05 01 00 00 00 00 00 0D 00 18 00 16 04 03 08 04 | ................ +04 01 05 03 02 03 08 05 08 05 05 01 08 06 06 01 | ................ +02 01 00 12 00 00 00 33 00 2B 00 29 BA BA 00 01 | .......3.+.).... +00 00 1D 00 20 4C F5 50 53 0E 60 45 CA 05 46 91 | .... L.PS.`E..F. +5F 2E 88 C2 12 9D B0 26 0B 41 D6 42 64 14 74 8E | _......&.A.Bd.t. +0C 5D 1E 7D 53 00 2D 00 02 01 01 00 2B 00 0B 0A | .].}S.-.....+... +9A 9A 03 04 03 03 03 02 03 01 00 1B 00 03 02 00 | ................ +01 1A 1A 00 01 00 00 15 00 BB 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 | ..... + +Flow Record: + RecordCount = 23 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1580 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132373946 [2024-04-15 00:06:13.946] + last = 1713132374109 [2024-04-15 00:06:14.109] + received at = 1713132441667 [2024-04-15 00:07:21.667] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 62402 + src tos = 0 + fwd status = 0 + in packets = 13 + in bytes = 9207 + src addr = 172.217.168.46 + dst addr = 157.143.34.100 + out packets = 14 + out bytes = 2093 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 77.332 ms + srv latency = 0.000 ms + app latency = 12.450 ms + in payload = 1400 + TLS version = TLS 1.3 + ja3s hash = 907bf3ecef1c987c889946b737b43de8 + ja4s hash = t130200_1302_234ea6891581 +16 03 03 00 7A 02 00 00 76 03 03 D5 71 BB B1 1A | ....z...v...q... +95 66 F2 88 85 6C F4 36 A9 82 04 93 1B 8F B1 9A | .f...l.6........ +0A 0D BA 3A BA 0F A7 24 71 07 5F 20 66 D7 B6 F8 | ...:...$q._ f... +AA AB 07 E8 E6 60 09 15 05 4D D8 2B 5B B8 7E 1F | .....`...M.+[.~. +1F 55 20 C5 CF B6 48 CF 77 B4 DD 8A 13 02 00 00 | .U ...H.w....... +2E 00 33 00 24 00 1D 00 20 61 8D 3B 33 BC 4C C7 | ..3.$... a.;3.L. +6C D4 C0 38 D7 48 73 09 48 FB F9 5E BE E9 FD BB | l..8.Hs.H..^.... +56 71 77 42 70 3F 63 38 21 00 2B 00 02 03 04 14 | VqwBp?c8!.+..... +03 03 00 01 01 17 03 03 1A 22 F1 BA 35 AF F6 99 | ........."..5... +A6 19 1C 08 09 BD EC 85 39 91 44 9A 56 06 02 10 | ........9.D.V... +A7 8E 6A 7E 06 03 7C 50 F7 DB 4D 49 F8 3B 9C 74 | ..j~..|P..MI.;.t +62 0C EA B7 24 C3 F5 11 09 B0 7B D6 BB 2D 88 BC | b...$.....{..-.. +3E 63 42 58 2A 33 DA 1F 90 C9 35 C4 A5 61 C6 92 | >cBX*3....5..a.. +FA 88 A4 C6 FF A5 FB AB 7D E5 C1 DC 1B 73 EA F8 | ........}....s.. +DF 10 21 D8 E6 B3 64 7B 6B B9 E1 77 6F AF 31 1A | ..!...d{k..wo.1. +87 AF 31 EA D7 8B 2B 67 CF 87 C3 C8 A1 43 D9 DA | ..1...+g.....C.. +39 7C 24 0E 29 87 92 4B ED D0 3F 74 DC 21 44 15 | 9|$.)..K..?t.!D. +47 9C 30 8A 22 33 6A 21 69 8B 7C 24 6E 49 3D D2 | G.0."3j!i.|$nI=. +E3 42 CF A8 3F AC F1 A3 97 B0 82 78 19 56 5E 3E | .B..?......x.V^> +17 91 A1 30 3A E9 4C 4D 5A 05 B0 51 E8 48 58 77 | ...0:.LMZ..Q.HXw +9C CF 0D 10 43 8E B6 22 C2 9A 95 10 F1 14 8C B0 | ....C.."........ +E3 DA 29 F0 91 41 A7 59 CD 45 A5 FB B9 73 9E 4A | ..)..A.Y.E...s.J +D3 DB D6 5C 32 C5 D9 EC 71 AF 67 CE FD C6 3A 0E | ...\2...q.g...:. +17 B6 FE E8 98 22 F3 73 81 47 32 05 39 3B FF BD | .....".s.G2.9;.. +00 3B F3 93 00 D8 45 C3 7F 7E C5 BE CD 96 58 08 | .;....E..~....X. +43 C9 30 86 91 22 03 8F F8 8A 6D 54 62 C9 59 74 | C.0.."....mTb.Yt +F4 DF 0C 7D D7 FE 9A 51 85 AB D8 EA 59 DF ED DD | ...}...Q....Y... +17 C8 B0 F7 6C 53 AB 80 BC 1C 3A CB E7 DE 9E D5 | ....lS....:..... +4C E1 0A F5 30 D5 31 0F 87 C5 C5 5B 7F 90 81 D7 | L...0.1....[.... +03 7F 35 39 F6 B1 15 A2 09 F3 11 34 F8 69 35 A3 | ..59.......4.i5. +E7 BB 74 48 6C A6 97 38 65 0A AB 65 A3 AC 6F 03 | ..tHl..8e..e..o. +D8 11 2C 54 7E 2B D8 17 90 1A 1A 44 FC FA C7 1D | ..,T~+.....D.... +0C 15 C5 89 1E EB C5 B1 8A 4B 68 A4 E5 DD 17 DB | .........Kh..... +9D 04 01 66 4E 91 8D 7E FD FE 2D 8A 7D 29 CB 85 | ...fN..~..-.}).. +38 81 40 85 AB 0D 7F 90 65 C0 EF 06 98 F0 23 8D | 8.@.....e.....#. +5E 0E DB 56 4A E7 67 5A 5A 09 4C 91 94 6A 55 01 | ^..VJ.gZZ.L..jU. +6D 39 72 3E F4 47 E6 3E 7C F7 BC C4 47 5D 53 9A | m9r>.G.>|...G]S. +8B 37 58 F8 BC 6A B6 41 42 85 86 FE 48 B7 38 3B | .7X..j.AB...H.8; +D2 90 A8 C0 74 5A 83 FF 20 4C 89 AD DE 53 DC 7E | ....tZ.. L...S.~ +63 2F 6B 4A 00 A8 F8 28 87 26 03 52 4F A9 2D 28 | c/kJ...(.&.RO.-( +C8 20 89 D5 65 A7 E7 1E D8 09 EB FF 5F AB E7 B7 | . ..e......._... +DD 79 5D 16 84 EC FC 9C 70 8C DE 53 CD CA 2C 11 | .y].....p..S..,. +05 EC 60 65 2B F4 91 D0 87 DA 61 F2 D5 E3 4C FF | ..`e+.....a...L. +1D 9B C2 FB C8 B6 1C 43 05 3F 88 48 74 FE 46 4B | .......C.?.Ht.FK +A9 6F A1 43 0E F7 09 4C 73 A5 2D 38 7F DF E6 79 | .o.C...Ls.-8...y +8E 4B 07 10 58 6F E9 16 C0 57 25 B9 D6 8A 0E 18 | .K..Xo...W%..... +85 F6 FE A8 DB 38 9A 86 D2 73 36 40 B4 49 D5 61 | .....8...s6@.I.a +CC F8 B3 FB E1 B1 A8 A9 E1 2A 23 E2 6D C8 30 7B | .........*#.m.0{ +96 94 55 E5 5D 04 88 B9 E6 53 AC C3 66 45 F5 E2 | ..U.]....S..fE.. +0F 6A 79 8F A6 2A EA 7D 2D 07 A2 AA 18 C3 C3 DC | .jy..*.}-....... +12 16 32 DA 36 27 00 DD F5 18 9C C1 2D CA C6 D2 | ..2.6'......-... +9D 7F D8 1B 2F 48 67 53 43 F2 51 D2 2C 6E 02 C6 | ..../HgSC.Q.,n.. +B5 C0 3C 13 59 FE 1F 23 D5 99 50 73 20 54 F8 D1 | ..<.Y..#..Ps T.. +8D 84 91 A3 1D 9B 9E 57 74 5A 62 9E B4 46 7D 1B | .......WtZb..F}. +E7 15 11 A1 96 BE B8 34 A2 7F F2 03 10 FF BB 5F | .......4......._ +49 11 C7 C9 63 A7 1B C6 92 D6 2D 02 8A 75 B5 85 | I...c.....-..u.. +57 01 3C 56 9E 35 D2 44 7F B1 A7 86 55 24 21 6B | W. +61 BB 7E CF 0E F3 C9 6F FE BD 4F 22 A6 C9 7D 78 | a.~....o..O"..}x +8A 0D 31 94 04 83 A5 15 89 B1 5C A9 B8 A4 59 CF | ..1.......\...Y. +F0 B0 C1 B9 3C 45 CC D1 A9 59 2B 32 88 EE 3E 79 | ....y +38 35 B6 D7 E8 00 F8 84 A6 47 64 0E 8B B3 F0 31 | 85.......Gd....1 +FD 27 C5 33 11 4C D0 F6 57 28 BA DF 1D 4C BA 36 | .'.3.L..W(...L.6 +4C C0 72 B5 B1 3A 18 04 93 69 4D 53 63 84 36 78 | L.r..:...iMSc.6x +27 C9 C0 CB 0D 1E DD 71 28 86 DA 24 79 83 73 21 | '......q(..$y.s! +5B 7B 4C 0B 80 C1 33 CA 7D 70 B8 C8 BC 41 3A CD | [{L...3.}p...A:. +29 3C BB 9C 90 64 54 6A F5 3F 3C 24 72 81 64 88 | )<...dTj.?<$r.d. +9A D9 A0 60 9C 7E 27 D3 DC 60 F9 96 AC 39 1F F4 | ...`.~'..`...9.. +69 C6 4B 8B 64 64 DD B7 1B FD 6C 8F BB 86 AF 3A | i.K.dd....l....: +4A ED 3F 08 1C 5D 54 F0 1F DE 50 B3 CE 0E 51 AD | J.?..]T...P...Q. +56 3D 0F DE 4D 7B 21 39 FA 38 8A C1 3A D0 B3 B6 | V=..M{!9.8..:... +19 CE F8 73 FD 4E 02 1D 23 46 67 C7 51 C9 97 21 | ...s.N..#Fg.Q..! +97 74 C1 26 33 6D 6A 58 4C 90 C1 0D 88 B1 91 78 | .t.&3mjXL......x +C8 DD 9A 54 CE 62 66 AD 28 36 3D 00 2A 5A A7 0B | ...T.bf.(6=.*Z.. +F8 46 FD E6 E7 6B ED A1 67 64 D8 F6 C0 C9 D6 22 | .F...k..gd....." +07 90 FD 2C 1B FB 4D E9 F6 FE 8D 2C A0 67 86 A7 | ...,..M....,.g.. +08 01 00 1A 7E 80 7D AB 37 01 D1 3C BA DD E0 15 | ....~.}.7..<.... +3B F9 F4 FF 9E 08 08 5F 46 4A 38 29 B8 DC 0C 36 | ;......_FJ8)...6 +5F EA 76 F9 BB 94 27 A4 C3 E6 BA 36 5F 1B 7C AC | _.v...'....6_.|. +51 0B BB 41 CD 16 D2 32 3C 1C E7 1F 4A D6 79 77 | Q..A...2<...J.yw +4E E3 51 E6 04 D5 32 A2 06 DD 33 6B 35 0B AF 28 | N.Q...2...3k5..( +0E 39 CC CE 66 0D 37 BD C7 19 43 A3 39 85 68 55 | .9..f.7...C.9.hU +71 58 9F 07 C3 B7 90 38 BD D8 D5 C7 D5 D8 C5 AA | qX.....8........ +C1 9E DD ED B9 A6 91 50 C8 21 60 46 B8 31 0D AA | .......P.!`F.1.. +98 FE B4 B9 85 6D 97 4A | .....m.J + +Flow Record: + RecordCount = 24 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 307 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131667599 [2024-04-14 23:54:27.599] + last = 1713132267867 [2024-04-15 00:04:27.867] + received at = 1713132000886 [2024-04-15 00:00:00.886] + proto = 6 TCP + tcp flags = 0x18 ...AP... + src port = 80 + dst port = 59696 + src tos = 0 + fwd status = 0 + in packets = 21 + in bytes = 2362 + src addr = 172.217.168.3 + dst addr = 157.143.34.100 + out packets = 31 + out bytes = 4672 + aggr flows = 4 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 14994.852 ms + srv latency = 0.000 ms + app latency = 45038.849 ms + in payload = 127 +HTTP/1.1 204 No Content +Content-Length: 0 +Cross-Origin-Resource-Policy: cross-origin +Date: Sun, 14 Apr 2024 21:54:42 GMT + + +48 54 54 50 2F 31 2E 31 20 32 30 34 20 4E 6F 20 | HTTP/1.1 204 No +43 6F 6E 74 65 6E 74 0D 0A 43 6F 6E 74 65 6E 74 | Content..Content +2D 4C 65 6E 67 74 68 3A 20 30 0D 0A 43 72 6F 73 | -Length: 0..Cros +73 2D 4F 72 69 67 69 6E 2D 52 65 73 6F 75 72 63 | s-Origin-Resourc +65 2D 50 6F 6C 69 63 79 3A 20 63 72 6F 73 73 2D | e-Policy: cross- +6F 72 69 67 69 6E 0D 0A 44 61 74 65 3A 20 53 75 | origin..Date: Su +6E 2C 20 31 34 20 41 70 72 20 32 30 32 34 20 32 | n, 14 Apr 2024 2 +31 3A 35 34 3A 34 32 20 47 4D 54 0D 0A 0D 0A | 1:54:42 GMT.... + +Flow Record: + RecordCount = 25 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132182757 [2024-04-15 00:03:02.757] + last = 1713132213789 [2024-04-15 00:03:33.789] + received at = 1713132302717 [2024-04-15 00:05:02.717] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 56357 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18599 + src addr = 17.248.209.70 + dst addr = 157.143.34.100 + out packets = 32 + out bytes = 6945 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 45.236 ms + srv latency = 0.000 ms + app latency = 0.455 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 11 32 B9 C4 F1 | ....z...v...2... +D7 F2 4F 62 6E FE 1E F7 E4 80 EC DC EA BC 41 49 | ..Obn.........AI +D8 0D 60 9B 98 44 09 BB FE 4F 38 20 22 C8 0F F6 | ..`..D...O8 "... +0D 5B AA 86 CB B7 69 10 A3 6D EC 3B 66 85 AE 3E | .[....i..m.;f..> +22 D2 50 50 5B 44 74 C8 84 04 96 59 13 02 00 00 | ".PP[Dt....Y.... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 8E | ..+.....3.$... . +DD 42 50 BD EF C9 5B D0 70 F8 4A 24 25 30 70 F8 | .BP...[.p.J$%0p. +D1 D7 98 38 30 EC D4 6B 15 8D AE AC 87 EC 3C 14 | ...80..k......<. +03 03 00 01 01 17 03 03 00 2A 18 A2 9F E9 8F 57 | .........*.....W +DF 8D 59 A0 DF 8D F4 FA E3 95 30 2C 59 40 EB 4F | ..Y.......0,Y@.O +48 1F 56 C6 AA 07 7C 83 55 02 5A 21 10 37 76 E4 | H.V...|.U.Z!.7v. +BF D0 21 E0 17 03 03 11 25 08 0F D1 EF 46 ED 7C | ..!.....%....F.| +EB 37 35 57 15 B6 51 AA D2 3D F0 07 EF 2D F1 06 | .75W..Q..=...-.. +41 17 F1 14 A4 E0 07 F5 02 97 F4 C9 1E 66 F9 13 | A............f.. +B6 BD 54 D3 E8 9C 85 C3 4E 64 4E 53 B9 F6 17 8B | ..T.....NdNS.... +70 13 DD A8 C2 C7 82 B0 2C FE D1 FA 76 6A 4F C7 | p.......,...vjO. +49 C9 AF 23 55 8C F4 54 F7 A0 94 6B BA DF 36 C0 | I..#U..T...k..6. +EA 5F 43 73 4A 68 C2 16 55 AA EC 10 87 05 23 9F | ._CsJh..U.....#. +FA 9C 70 69 22 8D 7A 8A FA AD 67 32 AC 7B ED B1 | ..pi".z...g2.{.. +13 8F E4 31 17 BD 00 0B 82 A2 AB E3 97 79 78 AB | ...1.........yx. +8A 63 AB EC 10 FA F4 0F AF 54 F0 88 60 4C C7 91 | .c.......T..`L.. +8E 3D 0C 08 4F 8D 76 15 54 85 6D FD 0F FF CF A8 | .=..O.v.T.m..... +C6 77 F2 A1 4C 27 80 F0 0F 1C D6 53 5A E0 01 38 | .w..L'.....SZ..8 +DE 34 98 4E 78 E1 4B F0 40 74 1F FA 58 79 A6 EA | .4.Nx.K.@t..Xy.. +AE 76 84 26 EE C1 F2 03 64 EB 61 62 9E 16 76 25 | .v.&....d.ab..v% +30 2A 7D 0B CB 0D 8A 1E C4 09 38 28 3E F3 4F FF | 0*}.......8(>.O. +00 72 9E 80 95 6B F3 8B 72 CF 47 DD FA 70 04 AF | .r...k..r.G..p.. +BD 87 2C 6D DD E5 36 00 B4 6F 98 04 BE F6 00 DA | ..,m..6..o...... +D1 D9 49 16 69 CE E8 7F F9 F2 EE 4F C9 4A EC F8 | ..I.i......O.J.. +65 87 6E 96 F9 70 87 78 31 64 18 B1 BB F3 E5 C3 | e.n..p.x1d...... +01 C1 E3 93 41 DF 33 CC 77 8E 81 F1 50 24 07 F1 | ....A.3.w...P$.. +3D D8 22 42 E5 C0 C5 6A C5 8B 67 D9 0A F3 B6 F5 | =."B...j..g..... +DC A9 CF 23 FB D9 8B 60 37 FF 88 3C 0A 0F F5 EE | ...#...`7..<.... +D6 15 0D 3A 45 99 8A FA 30 D5 1F E2 54 52 5F 58 | ...:E...0...TR_X +55 D8 A0 C3 F6 11 9B 56 6F 14 F4 24 38 9F 75 9E | U......Vo..$8.u. +68 9E 16 36 B2 C0 C5 C1 2E D9 36 9A D6 84 AC 0C | h..6......6..... +A4 76 BC 3E 1B A5 A1 0E 0F 59 96 4A D6 95 85 AF | .v.>.....Y.J.... +BE B5 BB 01 E2 A6 14 5B 5C 60 78 FB E0 41 3B 70 | .......[\`x..A;p +8D B4 38 17 9F C2 1C 49 FB 49 3A 12 D2 BE D6 9A | ..8....I.I:..... +CB A8 82 70 49 69 26 01 D6 9A F1 DF 61 5C E4 E5 | ...pIi&.....a\.. +6D 2B 1C E7 22 16 E2 FD D8 9B E6 E9 81 37 EA 87 | m+.."........7.. +72 1C 2D 55 3C E9 69 DB 4A D6 1E 41 27 6B 02 51 | r.-U<.i.J..A'k.Q +46 05 30 1D 4E AD 54 49 40 5E 88 5E E9 70 2A 33 | F.0.N.TI@^.^.p*3 +69 D8 1D A9 56 EB B9 E4 75 15 DC CF B5 DE 94 0B | i...V...u....... +99 6D 59 7F 74 D3 19 B1 0B 59 EF 56 9B 31 C5 1C | .mY.t....Y.V.1.. +E9 CB 09 08 49 CC 24 AA 85 46 A5 B6 75 15 1F 62 | ....I.$..F..u..b +12 1E 33 37 BB 90 3A EC 92 66 67 AC B6 2D 20 FC | ..37..:..fg..- . +E8 74 0B D8 ED 4B FF B1 D5 F8 F1 38 A4 36 C6 33 | .t...K.....8.6.3 +2E 7E 48 59 BB BF 42 CE 66 02 DB E1 EB 95 62 3A | .~HY..B.f.....b: +17 2B D5 76 2D 50 01 73 27 17 61 DF DA DE 20 A4 | .+.v-P.s'.a... . +5F 7B BA 2C E6 16 8C 47 68 EF C1 01 7D 08 9C BD | _{.,...Gh...}... +7A 15 C7 D9 18 E9 D5 CD EF 6F 43 9B 76 58 6B E4 | z........oC.vXk. +AD 19 33 13 C5 59 B0 CE 8D CA E7 D1 90 9D 77 78 | ..3..Y........wx +E2 5C 46 3D 89 19 BC 45 07 8E 15 DB FE DF 7E 6D | .\F=...E......~m +1C 35 79 FD 29 E3 B0 E4 7F AC 5D 82 0D B6 C8 2C | .5y.).....]...., +4A 83 41 BA 4A 72 E6 89 5D 8F B7 04 28 9F 87 4A | J.A.Jr..]...(..J +C6 76 AB F9 76 87 3E 58 51 BA F6 1A 67 8A 61 11 | .v..v.>XQ...g.a. +BD A1 35 F5 54 21 D0 61 28 B9 29 BF FE 2E CA 22 | ..5.T!.a(.)...." +26 53 9E 4C DF A8 88 96 04 67 FF DF BF 2C 89 27 | &S.L.....g...,.' +F0 BD A8 D3 C6 FA 6F 67 16 18 78 EE EE 9A 0C 4F | ......og..x....O +BA C6 F3 E7 C2 DD 6F 64 21 1C 28 0C 62 5A 54 96 | ......od!.(.bZT. +94 56 4B 4E 44 EF C2 E3 51 8E 1A 8A 08 54 90 FE | .VKND...Q....T.. +58 72 87 18 97 C7 A3 74 D4 52 EE CF 15 A8 4E 77 | Xr.....t.R....Nw +96 4D 5F 0B 7D 77 1A 1D 4B 45 7B B6 84 91 C7 3F | .M_.}w..KE{....? +C4 1D F0 D1 F9 46 45 BC 6A 32 AF 42 15 4A 1C 39 | .....FE.j2.B.J.9 +DE 99 81 98 F4 66 26 E1 1F 2A 76 FB D1 C8 26 1A | .....f&..*v...&. +EF 99 30 AF 36 EC 7E 1D 81 8E 1D 07 3D D2 44 A5 | ..0.6.~.....=.D. +09 AF 5D E2 F0 D6 AA 3E 74 54 F4 8D 72 96 04 DF | ..]....>tT..r... +FB B2 E9 E9 61 7F DA 74 BE E6 48 8D A7 37 2C D0 | ....a..t..H..7,. +A1 DB 2F AE 5B 52 C9 A9 F5 26 7C 30 53 71 38 62 | ../.[R...&|0Sq8b +C7 44 11 79 AC B5 87 84 C0 43 67 0D 38 2B F6 C1 | .D.y.....Cg.8+.. +1C 46 B1 C9 E7 08 CC 3B D3 35 99 F3 A9 AA 84 13 | .F.....;.5...... +13 B2 E7 86 91 69 DE 46 0E D6 35 B0 EB 65 FE DA | .....i.F..5..e.. +4E 0C C7 DF BC B1 EA F4 C8 2B 3D 6C DB DC 4B BD | N........+=l..K. +F9 AB 98 7F 7D 1A 69 B6 91 75 70 BE 69 93 72 7E | ....}.i..up.i.r~ +1C E9 F9 DF BB 6D 77 3E 1B F4 E9 41 AE F9 90 B6 | .....mw>...A.... +5C 6E 1B 84 BC 10 6A 07 E2 29 95 6C BE 52 9C 1E | \n....j..).l.R.. +E6 DB 05 B4 B0 5D 92 6E 57 97 BF 7D 43 47 1C FE | .....].nW..}CG.. +A8 86 C5 8E C0 D1 F8 02 A9 61 8F EA 3D E8 6A B7 | .........a..=.j. +AB 1E 64 45 7D 2B 12 23 8F 6B 3E F6 33 D9 B2 DB | ..dE}+.#.k>.3... +B2 E3 78 91 93 42 00 F2 CD 56 3E 95 BC E9 75 E4 | ..x..B...V>...u. +1C F4 E6 F9 68 22 1F 55 37 FA 42 60 F2 E9 44 89 | ....h".U7.B`..D. +DE B8 28 2C 3C DB 2D BF ED 23 08 9C 41 09 44 04 | ..(,<.-..#..A.D. +98 16 DF 29 44 67 8D 82 2B B7 E9 B2 C2 24 57 51 | ...)Dg..+....$WQ +B3 25 3E F0 CD 4F 04 4A 00 0A 0D BE ED 08 D8 C5 | .%>..O.J........ +15 30 EF 48 DA ED 7E 8B 8B 96 8E 3B DE 21 A6 4A | .0.H..~....;.!.J +DF A9 87 CC 7B 2D AF 50 4D A5 8D 0C 1E 76 97 54 | ....{-.PM....v.T +AE 4D 0A 93 70 9A 64 F2 B2 25 09 9D 05 92 37 83 | .M..p.d..%....7. +53 7D CA 07 D3 0F 91 BC C7 5E FA 13 2A AF C3 A2 | S}.......^..*... +72 DC B7 8C E4 BD 68 CA 7A F8 64 30 17 B7 57 80 | r.....h.z.d0..W. +F7 05 FE 0C 20 CE 2E 0E | .... ... + +Flow Record: + RecordCount = 26 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131929021 [2024-04-14 23:58:49.021] + last = 1713131931365 [2024-04-14 23:58:51.365] + received at = 1713132000887 [2024-04-15 00:00:00.887] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 62151 + src tos = 0 + fwd status = 0 + in packets = 11 + in bytes = 4264 + src addr = 17.167.200.72 + dst addr = 157.143.34.100 + out packets = 11 + out bytes = 1934 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 115.449 ms + srv latency = 0.000 ms + app latency = 0.451 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 00 51 45 C8 28 | ....z...v...QE.( +61 9C 48 BB 3E 53 E2 C9 1B 3B C0 74 4D 6F 75 75 | a.H.>S...;.tMouu +0B 03 44 2F 32 4C 1D FF DB 66 F6 20 A7 31 2D EC | ..D/2L...f. .1-. +54 26 7F DA FF BF 48 CC CF 4A AE 02 62 C5 9D AE | T&....H..J..b... +8A EF C1 51 C1 76 A6 9C B2 EF E1 2A 13 02 00 00 | ...Q.v.....*.... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 0C | ..+.....3.$... . +78 79 B7 37 F8 07 9A 3A E0 21 6F 50 A6 A9 7F 38 | xy.7...:.!oP...8 +8A CE E4 17 AC 80 6E 19 44 47 5E 19 49 5E 26 14 | ......n.DG^.I^&. +03 03 00 01 01 17 03 03 00 2A 6E 3C 9E 92 4F AB | .........*n<..O. +98 A8 DF E3 DF C8 69 0B 9F E2 0B 6F 60 4B 5A F1 | ......i....o`KZ. +F6 7D 6A E7 CC 50 FF 9B 6F A2 36 EE EF DD 58 08 | .}j..P..o.6...X. +5D 3A 17 AA 17 03 03 09 7C 13 9F FF 12 8E 31 58 | ]:......|.....1X +73 C1 79 47 C9 38 1C 01 2A 52 22 46 8F BC 8D 65 | s.yG.8..*R"F...e +30 31 E4 F6 E2 74 39 55 8D E0 79 46 F6 51 4D 7D | 01...t9U..yF.QM} +05 E5 2C 02 56 6A 5B 69 55 1F 7A 67 70 AA 98 B1 | ..,.Vj[iU.zgp... +F9 34 DF 56 EB 99 C4 3C EA 32 48 37 5B 26 A7 15 | .4.V...<.2H7[&.. +3B 82 8B 56 4C D6 CB 3A DF 36 7B E0 46 03 52 13 | ;..VL..:.6{.F.R. +5B ED 15 6E 77 D1 CC AD 99 D4 51 15 61 89 A7 43 | [..nw.....Q.a..C +63 26 08 BD BA 68 E1 C0 9B 77 CC 36 B5 78 AF B1 | c&...h...w.6.x.. +A1 1D 7C 29 1A 5C 21 CD E2 9A D5 2D 01 38 B0 18 | ..|).\!....-.8.. +F6 FD D5 85 E3 EF 2A A4 4B F5 AF 57 5A 2D E1 57 | ......*.K..WZ-.W +B2 9D D2 86 77 3A 04 8F 49 B1 30 DB ED ED 6B 4D | ....w:..I.0...kM +34 46 30 33 6C 3F 1C 05 8F 82 E3 50 04 06 15 A5 | 4F03l?.....P.... +37 67 A5 B5 BF A9 D6 43 85 81 18 8E CB 4B CC F2 | 7g.....C.....K.. +85 89 B4 75 39 72 8A 25 5E 14 23 9B C9 3E 66 08 | ...u9r.%^.#..>f. +DC 23 53 F9 E1 77 E0 94 94 86 19 A9 C1 09 CD 34 | .#S..w.........4 +AF 86 2C 84 18 DB F8 3A C9 96 B4 42 03 0C B0 56 | ..,....:...B...V +26 BC 76 8D 09 2C 86 B8 D0 6A B0 5C BF 8B 61 25 | &.v..,...j.\..a% +7B 26 77 BA CD D0 52 8A E6 25 5B 70 4A 2F 88 C0 | {&w...R..%[pJ/.. +45 E0 39 20 1A 19 73 B0 F4 3F 6B B2 34 1F C0 FA | E.9 ..s..?k.4... +26 55 5D 5E 8C 3D F1 5A D7 A1 21 B7 8C 3E 63 54 | &U]^.=.Z..!..>cT +89 8B 69 10 8A 7D E4 2E C4 83 90 28 63 9B B2 3E | ..i..}.....(c..> +74 FA BA 23 BD 38 38 7E 39 14 B2 88 9F 9E 47 71 | t..#.88~9.....Gq +4D 8D C2 A6 51 17 A2 4E 39 78 BC 8D BF 5F 99 8E | M...Q..N9x..._.. +82 D5 20 5A 3E FF D2 35 67 3A 07 24 47 75 9F 9E | .. Z>..5g:.$Gu.. +AC BC EE 16 AF C5 29 28 BA ED C8 7B 8B A3 00 D7 | ......)(...{.... +96 61 FA 23 8D 3D 85 8D 50 A1 E7 BD 73 11 8D ED | .a.#.=..P...s... +2C 4B 5E A7 0B FC 92 7B B8 3B 9A BC 62 51 D5 60 | ,K^....{.;..bQ.` +1C CD EA 0F 9A 32 86 E0 87 C4 C8 57 1D 3B 05 13 | .....2.....W.;.. +61 F1 D8 96 70 44 05 17 7B 18 2F DA 26 6C AB 67 | a...pD..{./.&l.g +23 C8 EE 3F C1 CC CA 23 39 9D FA A4 B2 46 34 30 | #..?...#9....F40 +F9 3E D3 AD 7C AE 68 97 28 A0 BF 50 9F 42 12 E2 | .>..|.h.(..P.B.. +A1 40 66 2C DF C8 6E E5 9D D5 57 71 AE 7C A5 27 | .@f,..n...Wq.|.' +69 74 DE 65 0E DF 18 35 D6 1A 59 AB 11 86 1D 88 | it.e...5..Y..... +DB DB 64 3F 40 AE 40 10 47 83 7C 4B A1 47 B7 AD | ..d?@.@.G.|K.G.. +6F BE 62 BB 54 5C 53 2E 44 BB 12 23 D1 83 77 F3 | o.b.T\S.D..#..w. +7B BF D8 A8 7F 5F 75 16 E7 E0 FB CC 0F E8 70 75 | {...._u.......pu +36 29 C4 95 98 15 D5 C6 E6 32 3E EB 24 BA 14 C5 | 6).......2>.$... +A8 A4 01 90 33 D4 66 93 92 6A DB C9 9E 2A 61 3B | ....3.f..j...*a; +9B 36 4E 37 D3 5B 0C 3D D9 F0 1E 10 84 50 80 9A | .6N7.[.=.....P.. +66 AA 3D F5 1B B7 5E FD 1B ED 24 E3 DE 5E 65 C6 | f.=...^...$..^e. +AA A5 AB 78 A4 D4 94 EB 2D DC 03 0B 95 D6 D4 F9 | ...x....-....... +A9 AE 43 A8 69 70 77 47 E4 55 1D BE EC 88 D0 32 | ..C.ipwG.U.....2 +EB F5 AC 41 D4 FD E4 EE 49 F4 3A 33 9F 32 BE 02 | ...A....I.:3.2.. +FC 54 C8 34 40 C7 9B 96 6C 58 0E EA 05 6A 96 8F | .T.4@...lX...j.. +04 87 A5 C4 F2 6C C6 1C 30 91 E4 EA 80 91 7A 2E | .....l..0.....z. +DE 5F 5F B7 DC 2C 59 EA 51 E8 95 E1 16 1A 7C F2 | .__..,Y.Q.....|. +F8 A5 CE 60 8B 19 BF 7F BE 32 56 CD 0E 7C 64 FF | ...`.....2V..|d. +70 D4 B6 A0 91 E4 F5 E6 18 72 70 63 10 27 2A 7B | p........rpc.'*{ +45 17 C4 AA DB 24 45 13 2A 20 85 E3 20 F3 42 AC | E....$E.* .. .B. +E7 11 11 B6 21 78 72 35 CB 41 F0 02 26 38 52 85 | ....!xr5.A..&8R. +78 B2 09 5F C9 C4 EC F0 CD B9 58 9F 59 20 03 31 | x.._......X.Y .1 +DF C2 C3 B8 B5 20 1B 5D 7A B6 0A A0 7C E3 A5 25 | ..... .]z...|..% +EA 10 DC 8F 09 E6 02 DD 1B C9 0A 25 F2 03 3A 4C | ...........%..:L +E8 06 EB 47 7D 9C 02 6E 20 C0 E5 72 0B 94 07 77 | ...G}..n ..r...w +D4 55 4A DC 6A 96 4F 97 0C 1E 6E 53 01 76 B0 D2 | .UJ.j.O...nS.v.. +3F 1B 40 14 8A 2E 43 C3 B8 CC 72 BB F8 ED 16 2F | ?.@...C...r..../ +EB BD 18 BA 1F 46 BA 57 70 A5 6A 59 5D 79 58 FE | .....F.Wp.jY]yX. +BA 44 67 E9 38 B1 77 15 21 B7 0A 8D 26 7D 19 DB | .Dg.8.w.!...&}.. +5B D4 F6 E7 8E C3 5E 91 AF F1 2A A3 E6 8C FA 2B | [.....^...*....+ +55 3F B7 30 F4 29 48 2C D0 3B 82 6A E0 3D 28 07 | U?.0.)H,.;.j.=(. +29 9E 64 BE B4 20 DC A2 B4 E2 E1 5E 15 CC 28 51 | ).d.. .....^..(Q +FC 0C 19 A1 54 9E BD A5 88 5A C8 61 66 02 5F 73 | ....T....Z.af._s +CF EC D9 35 4D 75 2B 93 B1 14 C4 A1 C7 24 15 66 | ...5Mu+......$.f +EB 69 5B 87 B4 92 AA DD 8A 61 FE 88 B2 EF 75 14 | .i[......a....u. +4F 45 A7 DE AC BF 81 63 2E 60 17 A2 22 26 10 0D | OE.....c.`.."&.. +5A 50 D1 BA 0B 96 13 A1 5D 8B 5E 93 14 8B 11 68 | ZP......].^....h +A6 0F C0 EC B7 AE 12 49 1C CE 79 14 33 D1 D7 BE | .......I..y.3... +E2 7C C5 B2 72 3F 22 02 E7 E6 B3 88 8C A9 99 1A | .|..r?"......... +A8 65 03 E9 7B 37 61 12 94 40 89 DF A1 D9 10 48 | .e..{7a..@.....H +14 98 BA 18 04 54 C3 8C AC E9 1A 5F 01 A2 7D 57 | .....T....._..}W +21 7A 7E F5 B6 CB 4E D4 8B DF 4E 3F C6 FA FA 4A | !z~...N...N?...J +C5 E9 7E 5F A5 3B 9A 9D EC F1 88 D0 DE 90 AE F0 | ..~_.;.......... +95 25 10 16 D0 8E A9 0C 0D 32 7A 43 D7 BF BA 8D | .%.......2zC.... +DD 60 66 10 4D 69 94 C9 F2 CF AD EE D8 5B DA FE | .`f.Mi.......[.. +6C 7C A2 5B 5E 9B CC 24 ED 03 14 7D 42 DD F5 1E | l|.[^..$...}B... +94 A1 47 8E A2 A6 52 B1 29 49 71 4B 22 94 10 FE | ..G...R.)IqK"... +42 5A F5 78 58 58 A1 DD 2E E6 BA 16 1D DD 75 61 | BZ.xXX........ua +B4 CB DF A6 31 1F F0 0D 9C 8A AE 5B 9D 51 A8 4E | ....1......[.Q.N +C8 32 49 C6 AC DB 83 4B 21 23 89 C7 FE 05 70 F7 | .2I....K!#....p. +CD F5 09 64 03 D4 1E 0D | ...d.... + +Flow Record: + RecordCount = 27 + Flags = 0x00 PCAP v1, Unsampled + Elements = 5: 1 2 12 15 29 + size = 1374 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132383300 [2024-04-15 00:06:23.300] + last = 1713132383368 [2024-04-15 00:06:23.368] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 65143 + src tos = 0 + fwd status = 0 + in packets = 10 + in bytes = 4065 + src addr = 172.217.168.46 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +C8 00 00 00 01 00 08 FB 35 76 79 08 37 B0 41 00 | ........5vy.7.A. +43 9F E3 60 AA A3 C7 E4 66 E3 57 8A 01 2A F2 C9 | C..`....f.W..*.. +CE DA C1 45 56 47 08 C3 98 0A C2 3C AC DC EF F7 | ...EVG.....<.... +09 09 1A E5 20 F5 7E 1A F2 17 3C BA 59 9C 3D BE | .... .~...<.Y.=. +B9 A6 65 84 82 F1 7E F0 05 49 04 C1 A6 B9 F9 51 | ..e...~..I.....Q +24 A1 1B 3C B9 A8 8B A6 FF AD 99 CE CC D0 FF D1 | $..<............ +30 7A 1C 63 45 8D A1 92 C3 53 1C C2 E7 66 8C D1 | 0z.cE....S...f.. +7B 5B 30 5E 8E E7 2F 5E F9 7F 0A 04 7D 72 C2 2A | {[0^../^....}r.* +7D 15 0A 3B CA E5 5E 28 DC 37 47 43 59 A7 52 C3 | }..;..^(.7GCY.R. +20 D2 C3 F7 B5 81 98 1E 99 57 EC 67 C1 47 FC 4F | ........W.g.G.O +D5 53 5C 7A 9C 5D 02 0C B6 AC D1 12 EC FB CD 85 | .S\z.].......... +BE 23 65 B3 35 4E 1F 19 B4 58 23 EA 8D 73 A5 71 | .#e.5N...X#..s.q +72 92 41 80 D9 BA CA 53 F4 C5 01 EC CA 3F 08 26 | r.A....S.....?.& +87 1E 5D 3A E4 FB F1 33 78 6A 2A 54 2D 29 E1 27 | ..]:...3xj*T-).' +E2 43 11 59 2A 67 63 8C 7B 10 58 CC 47 56 D0 43 | .C.Y*gc.{.X.GV.C +46 CC 97 84 7A 1E 71 EC 7C 12 3D 2B 59 44 AC C3 | F...z.q.|.=+YD.. +FA D2 F6 73 F9 78 62 5A C8 6C 5A ED 82 BA 54 32 | ...s.xbZ.lZ...T2 +71 F7 A6 04 6E 93 B2 A5 EE 73 D4 CF 79 E9 D2 00 | q...n....s..y... +16 AB 26 85 AA F8 92 C4 33 3C 8A 21 96 AF A4 84 | ..&.....3<.!.... +10 CE 27 6D 67 DD D5 73 72 71 9A 51 1B 82 59 BF | ..'mg..srq.Q..Y. +98 D1 D9 D6 ED 43 4C 7E 88 4A A8 31 75 1F BC 10 | .....CL~.J.1u... +9A 12 1C 47 30 24 94 A7 9D 3A 08 E7 28 E9 55 C2 | ...G0$...:..(.U. +B7 77 DE 1D 3D 55 66 CF 87 06 6D 6C CF 12 81 C3 | .w..=Uf...ml.... +D1 B2 71 75 A8 08 79 4D AA 0F 57 8E 9F 2E 75 A5 | ..qu..yM..W...u. +45 DE B2 B3 83 C2 43 46 94 4D 9C 60 DB 1B 77 00 | E.....CF.M.`..w. +90 18 2B 1C 79 6D 23 EC 3D C5 6A E8 C1 4A 18 FC | ..+.ym#.=.j..J.. +3E 32 FC 81 53 95 5E 2E A7 B0 13 04 37 B2 70 20 | >2..S.^.....7.p +A5 B4 25 BA 50 B1 96 07 05 2F 73 F9 C1 77 56 9C | ..%.P..../s..wV. +E0 79 88 5A FB E0 6B D8 4D C3 32 7B CE 67 68 7B | .y.Z..k.M.2{.gh{ +BC 70 D4 78 E4 76 3A 84 16 7C 91 0A A8 67 40 7B | .p.x.v:..|...g@{ +32 F5 D1 4E 26 C8 EA 8E C8 7C 96 36 5A 7A 98 2C | 2..N&....|.6Zz., +7A 9C 34 34 BB 7F 9A 87 51 D6 57 4F 57 B4 FB 23 | z.44....Q.WOW..# +AF FF E7 15 DF 36 EC 0C A5 0E CF 89 1B 27 81 0A | .....6.......'.. +29 48 BA 6A 78 80 B3 8D D6 60 96 BB EB 97 15 A6 | )H.jx....`...... +3F A1 D8 D2 0A 00 11 75 99 6A 97 F5 35 61 E1 48 | ?......u.j..5a.H +06 73 33 17 AE FE 3E A1 09 9E 6B E0 4B EF 83 21 | .s3...>...k.K..! +CE 8A 54 7B E7 B2 F8 33 C2 90 4B B2 42 64 B5 F7 | ..T{...3..K.Bd.. +AE B8 88 8C 73 04 EF 56 69 5D 12 50 D1 D3 C5 D2 | ....s..Vi].P.... +14 97 80 6B CD 0B EA B5 10 81 29 DB 51 FA 1B 7F | ...k......).Q... +04 07 95 8F 01 05 E0 29 DB 3B F4 9E 6C EF D6 4E | .......).;..l..N +60 2D 5D 47 AF 94 65 DA 16 63 F4 48 04 AF F3 9B | `-]G..e..c.H.... +89 A8 71 5D 5A 46 20 8F 48 BE 83 A1 9C C0 88 A2 | ..q]ZF .H....... +7E 9A 85 4C 2F 74 DA 2E C1 4D 09 72 A1 FE 97 E1 | ~..L/t...M.r.... +77 9E C9 8C 91 37 AF 1A 62 65 1B 49 71 52 A1 63 | w....7..be.IqR.c +81 25 46 E1 AF EF 91 9A EE 9C 0F 2D 3D F6 90 CA | .%F........-=... +E8 64 20 A9 9F F6 AE 19 CD 0D 71 1F 72 9A B1 11 | .d .......q.r... +1D 2F 59 E3 48 11 7D 33 31 68 75 C4 42 1C 97 BF | ./Y.H.}31hu.B... +0B C2 FF 43 D1 BE 65 94 EC CD 83 01 97 15 19 73 | ...C..e........s +40 96 25 AD D9 1E 01 AE 65 FE AB FE 97 94 7B 77 | @.%.....e.....{w +10 73 66 B8 28 32 D8 CC 23 6E 2A 78 F6 B5 3D F1 | .sf.(2..#n*x..=. +DF 24 86 52 1C 8C 3F EA 27 67 EA 18 94 A0 25 29 | .$.R..?.'g....%) +67 84 C4 65 72 4B E6 92 E3 D7 38 59 61 53 80 1F | g..erK....8YaS.. +92 4E A7 5F C5 CF 46 87 5C BC 20 F9 09 75 20 08 | .N._..F.\. ..u . +39 35 D4 27 3E 39 87 88 6D 99 98 B0 31 7C C7 14 | 95.'>9..m...1|.. +AD 27 83 7A 48 DF 46 96 30 AB B0 0A 59 31 15 58 | .'.zH.F.0...Y1.X +1A F3 00 3F 31 39 DE 49 AD F8 1F 0F D2 7E 87 12 | ...?19.I.....~.. +65 C1 2A 1A F6 A4 D7 5A 62 FB 7F D8 81 1A CC 35 | e.*....Zb......5 +D9 7E BA DF 94 36 13 E9 E7 4F C6 DF EE B4 97 BA | .~...6...O...... +04 9A 40 A2 CF FF 51 BE D4 5C 2A F6 44 5B 4D 10 | ..@...Q..\*.D[M. +17 E9 00 00 00 01 00 08 FB 35 76 79 08 37 B0 41 | .........5vy.7.A +40 E1 A9 5F DA BA 7F D0 47 13 03 C1 B6 A1 EE 7C | @.._....G......| +67 E1 9E 9C 3B CF 26 9F E0 33 8E 8B DA 54 B5 00 | g...;.&..3...T.. +15 F5 EC 3D A7 1C D5 7D 14 46 3E BD A7 B8 75 27 | ...=...}.F>...u' +44 51 95 5E A9 AA 7B AC CE 17 F2 14 EC 9D 7C FA | DQ.^..{.......|. +3F BE A6 2A CC 8E 79 0B CF E9 D8 16 DB D4 5F 28 | ?..*..y......._( +63 B6 9D 6F 1C B3 3D 05 CB 7B DB 57 63 81 CB 4E | c..o..=..{.Wc..N +F1 6B D9 F3 52 81 FC 78 1C FB 78 6D 9E 66 2E 7F | .k..R..x..xm.f.. +4C 31 82 19 7E F1 20 51 B2 E7 71 E1 A0 28 6A 12 | L1..~. Q..q..(j. +CE E9 85 DB 10 F0 27 38 A1 AD FC 71 35 DC 57 B0 | ......'8...q5.W. +FD 1B 52 F9 F1 60 17 BB AF 85 D0 86 F3 F3 C3 8C | ..R..`.......... +8D C8 C8 91 1D 39 07 4C 96 4A 0D 4E 0C 41 46 9B | .....9.L.J.N.AF. +26 E2 D2 F3 B9 D4 E9 CD 7F F7 B4 64 B6 A6 A3 4E | &..........d...N +73 BA 34 07 EC 27 D4 15 D7 4E 00 25 38 5E 77 B9 | s.4..'...N.%8^w. +0B 8F 34 AB 21 B3 1F 6B 55 9D A4 53 14 04 23 84 | ..4.!..kU..S..#. +A1 DB BB 5F D1 C7 80 FB 5E 17 80 A1 25 53 DA 83 | ..._....^...%S.. +33 85 65 18 9D BF 6E 56 14 A9 91 92 6B 98 2B 89 | 3.e...nV....k.+. +40 2A 5D B7 21 64 5B 16 0C 24 36 98 30 2B 71 BA | @*].!d[..$6.0+q. +75 F6 B5 F9 5D 08 B4 43 05 9F B7 B9 B5 AC 84 78 | u...]..C.......x +89 F9 | .. + +Flow Record: + RecordCount = 28 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1580 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131960775 [2024-04-14 23:59:20.775] + last = 1713131960918 [2024-04-14 23:59:20.918] + received at = 1713132056973 [2024-04-15 00:00:56.973] + proto = 6 TCP + tcp flags = 0x1a ...AP.S. + src port = 443 + dst port = 51638 + src tos = 0 + fwd status = 0 + in packets = 13 + in bytes = 6591 + src addr = 216.239.38.57 + dst addr = 157.143.34.100 + out packets = 10 + out bytes = 2112 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 10.664 ms + srv latency = 0.000 ms + app latency = 12.179 ms + in payload = 1400 + TLS version = TLS 1.3 + ja3s hash = eb1d94daa7e0344597e756a1fb6e7054 + ja4s hash = t130200_1301_234ea6891581 +16 03 03 00 7A 02 00 00 76 03 03 A7 FE FC 65 C2 | ....z...v.....e. +D4 EC A5 5B 0F 3B D6 ED 7B EA 1B B6 69 00 01 87 | ...[.;..{...i... +EF 46 59 9E 49 03 98 31 D1 6E 29 20 66 A7 15 FB | .FY.I..1.n) f... +32 59 A6 6A D1 EA 6A 52 2E 78 D8 6D 5B 5D 1C 54 | 2Y.j..jR.x.m[].T +66 0D 9A 23 BF CF 20 31 90 CC E4 72 13 01 00 00 | f..#.. 1...r.... +2E 00 33 00 24 00 1D 00 20 A6 15 46 AA B9 60 60 | ..3.$... ..F..`` +0D A7 6B 67 87 07 E5 73 0F 5B 52 EB 29 EE B8 63 | ..kg...s.[R.)..c +3B B8 18 4D 4E CE 3E E0 05 00 2B 00 02 03 04 14 | ;..MN.>...+..... +03 03 00 01 01 17 03 03 12 08 17 C6 B3 4B BE 36 | .............K.6 +8E 05 AB 3D CA B2 CD 38 98 09 F4 9C 5B 5D FF 98 | ...=...8....[].. +CE 16 BD A2 84 FC 66 75 7B F2 21 39 0D B5 FF 9C | ......fu{.!9.... +C7 99 3A C5 7A 5B D5 CD D3 42 79 DF 00 E7 7B 05 | ..:.z[...By...{. +6F B7 82 86 00 76 8B DF 2B 8A 60 5D E2 C4 4B C6 | o....v..+.`]..K. +68 18 B4 B2 E5 8A 88 75 5C 77 21 EB 0E 14 A2 1F | h......u\w!..... +83 AC 2F 7F F4 90 E3 B6 B3 5F 8D 01 CD BE 5D F9 | ../......_....]. +39 C0 78 2A A5 36 8B B1 72 AF 29 DD E1 DE 4F AB | 9.x*.6..r.)...O. +F3 BC 9D 1B 3F F8 05 83 D6 DF 6C 45 2A 88 99 68 | ....?.....lE*..h +62 D6 8C C2 4F 23 C3 36 42 AC 2F 5A 54 B3 0C 19 | b...O#.6B./ZT... +F6 EB AB FE 7B D6 37 F5 FE FD 05 D2 73 29 5A CC | ....{.7.....s)Z. +0D F9 14 64 9A 6E 10 37 64 84 87 8B C9 34 26 0A | ...d.n.7d....4&. +A2 DE AF 6E CB 25 EC 79 63 77 38 F3 1A E7 90 23 | ...n.%.ycw8....# +4A 9C 00 5C 8C F6 91 68 9A 0F E9 65 92 FB A6 F7 | J..\...h...e.... +95 48 1C F7 78 F6 2B 7C FB 5C 70 72 FD 18 58 97 | .H..x.+|.\pr..X. +D8 92 21 39 A3 53 AB 43 B2 ED E5 96 20 47 5A 88 | ..!9.S.C.... GZ. +4B 32 BF 77 FA 10 00 66 06 DA 01 9F DB 4E B4 E3 | K2.w...f.....N.. +2C 0A 27 D3 40 1A 52 25 CC B2 AA E4 43 4F 2D D2 | ,.'.@.R%....CO-. +EF 1A D1 5E 8B D9 27 A0 D8 76 CD 3C 19 7F 6F BA | ...^..'..v.<..o. +53 58 91 8A DB 99 8B 72 56 1A 18 1E BF 57 A3 5C | SX.....rV....W.\ +44 EC 18 46 32 17 C5 45 6F DB EA ED 4A 4F E3 10 | D..F2..Eo...JO.. +49 9D 92 5B 6E 93 7A 48 14 91 11 10 B3 17 FD 97 | I..[n.zH........ +40 59 35 59 AA 99 EC 3A 2E BD A9 73 36 C1 F3 89 | @Y5Y...:...s6... +CF 46 1E 9E F4 80 BA 51 11 A3 12 1C 07 9D 7E 4D | .F.....Q......~M +D1 A4 C3 96 37 72 D9 1B AE 16 19 C1 3F FC 9A 57 | ....7r......?..W +3A CA 0B B5 C9 6C 42 87 41 3D 83 A4 A7 32 E4 A7 | :....lB.A=...2.. +33 18 41 4F C3 C7 94 BC 9A 92 85 CF 03 EE 55 07 | 3.AO..........U. +81 69 6E B7 18 5B 68 77 05 51 C9 C6 EB BF 44 5E | .in..[hw.Q....D^ +8D D2 A9 D9 82 97 EB C5 78 F5 55 82 0F 68 1B A3 | ........x.U..h.. +C9 3B 72 44 43 EE 60 30 C3 6D A4 77 0A 53 53 A6 | .;rDC.`0.m.w.SS. +84 2C 6A 48 D0 D4 D1 33 5B 4A 1B 43 7F 1F 50 5B | .,jH...3[J.C..P[ +81 75 92 C6 2B 72 BE 24 43 43 8E D8 3E 00 98 4C | .u..+r.$CC..>..L +30 46 BD 5C 78 E3 EC 2E DB 25 8F 12 BA 24 90 DB | 0F.\x....%...$.. +9D 1C 25 07 AC 40 0A 6A DE E2 49 95 69 5E 2C 3B | ..%..@.j..I.i^,; +C3 A3 C1 94 44 6C 7C 2B F0 1A 2B E1 DE 45 EE 91 | ....Dl|+..+..E.. +43 FB ED 60 3C 20 FD 25 84 11 74 A5 D7 3C 8D C3 | C..`< .%..t..<.. +58 48 A8 40 DE 4A 31 A0 D3 18 57 75 0E 75 5D E7 | XH.@.J1...Wu.u]. +2C BC FF 78 34 9C A6 EB 21 ED BB B1 AE BB E1 C6 | ,..x4...!....... +4A AC 6D 3E 31 F4 C8 AA ED 92 A0 86 CE DE 0A 9A | J.m>1........... +F6 DF 07 18 CF 47 7A 26 49 92 D9 80 8C 5C EB 4C | .....Gz&I....\.L +05 D2 93 43 39 29 29 C8 03 A0 2B 7C 5B 13 B8 50 | ...C9))...+|[..P +33 82 C0 D5 17 59 5D 6D 0B 39 30 73 2E 9B 05 F2 | 3....Y]m.90s.... +0F B4 FE 2F 2D B8 AA 0F 13 57 11 14 26 10 72 B6 | .../-....W..&.r. +F4 83 3D E8 54 FB BF 14 69 A6 06 69 5A A9 49 CB | ..=.T...i..iZ.I. +86 92 A3 30 DB BF D9 6F 87 19 24 2D AF CB 07 58 | ...0...o..$-...X +1E 69 3B 35 D1 F4 6B C7 70 F1 57 4D 86 A8 BD 01 | .i;5..k.p.WM.... +DA 47 55 F9 0F 27 B6 CE 7C FA C9 D4 C5 C8 A8 12 | .GU..'..|....... +27 8C EE 4A CE 63 1E DA 62 35 A5 8F 5E DC 88 F1 | '..J.c..b5..^... +EC 3D 76 8A 20 CA 7A B9 88 DC E9 D1 66 2C 01 1E | .=v. .z.....f,.. +AC 95 79 96 90 E5 83 10 F9 07 35 87 5E 4E 2F B6 | ..y.......5.^N/. +7F 90 99 53 1C A2 42 FF 32 5C 9B FF DC 2F DA FA | ...S..B.2\.../.. +7E 32 38 2F 29 2B 78 B2 FF A1 E8 1C A1 5C 71 10 | ~28/)+x......\q. +C5 E5 1E 6B 2A 47 60 9C 0A 4F 0A 3F 21 43 B4 8C | ...k*G`..O.?!C.. +E4 DF 9C 75 FA 7E 5A 8D 39 81 DE 8D 79 B4 41 B6 | ...u.~Z.9...y.A. +2A 67 F8 01 E4 C8 AC 3A 1C 44 1B B9 1E E0 55 E0 | *g.....:.D....U. +0C D3 90 55 40 DA 08 1F 3C 14 B7 F1 C9 E7 2C BA | ...U@...<.....,. +15 5F 9A AD EC 1B 76 CB A0 E2 74 13 38 13 60 76 | ._....v...t.8.`v +80 47 59 09 12 22 30 B8 B1 78 3B 1F A8 B9 EB AD | .GY.."0..x;..... +5D 19 C2 6D 8C 41 DB 7C 4F 68 CE BC E3 65 4E 15 | ]..m.A.|Oh...eN. +16 57 D1 52 55 0F 5D A1 A9 5E 4D 23 92 DF FB 8C | .W.RU.]..^M#.... +15 2F 36 8A 69 41 3D 7D 92 EF AB 0C 30 63 6E 7C | ./6.iA=}....0cn| +1F 2E 74 70 F7 13 95 0D 8D 24 2E 13 3D 8C 63 E5 | ..tp.....$..=.c. +30 36 9F 9F 71 B5 1D 83 58 C4 8F A8 9E 21 98 12 | 06..q...X....!.. +98 C3 78 AF 5D B6 C2 B9 16 5A 0D 3C D6 9D E6 97 | ..x.]....Z.<.... +35 A7 B4 79 03 49 EA 91 A4 5C 13 B2 B6 DC 72 B4 | 5..y.I...\....r. +F9 9F 55 60 7C 46 51 7E 9A 79 85 F3 45 E4 96 5B | ..U`|FQ~.y..E..[ +3B D5 25 FD 52 15 1A 2A C7 A5 95 45 83 19 75 23 | ;.%.R..*...E..u# +03 E3 66 C0 24 50 3D CA 74 1D C0 92 8F 62 56 06 | ..f.$P=.t....bV. +99 B8 C3 53 FA 2B 20 98 D0 0D 97 E7 82 EC 60 EA | ...S.+ .......`. +A9 59 C5 50 A1 ED 81 CD CF 2D E5 A8 E5 EB D2 55 | .Y.P.....-.....U +B1 DF 7F AD FB 65 A2 55 AC 50 93 38 A4 99 7C 5D | .....e.U.P.8..|] +DC 7F F1 0C 85 BF 2D 8E C9 CF 4B 8B 35 D7 75 16 | ......-...K.5.u. +51 BB 39 B2 55 7A 7F 33 28 57 16 0C 59 06 47 31 | Q.9.Uz.3(W..Y.G1 +84 22 69 38 CD 46 32 77 EB 14 C3 7E BE AE 5B 23 | ."i8.F2w...~..[# +73 E3 CC 2D CB 4E F7 26 6A 66 AA 52 58 96 20 25 | s..-.N.&jf.RX. % +D1 5F 83 7B EE A4 95 9E 41 78 99 23 17 7C C2 73 | ._.{....Ax.#.|.s +EE 49 D7 EB 7B FA B2 4F B5 54 13 0D 89 23 3B EB | .I..{..O.T...#;. +DB 56 A8 10 4B B4 80 0C 74 43 F5 C8 52 47 8A 7E | .V..K...tC..RG.~ +CD 8E F0 00 59 0C 06 C1 D3 C0 C3 22 49 79 46 FB | ....Y......"IyF. +0D 86 FA F3 67 12 C0 B5 | ....g... + +Flow Record: + RecordCount = 29 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 5 12 15 29 + size = 1402 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131960512 [2024-04-14 23:59:20.512] + last = 1713131960626 [2024-04-14 23:59:20.626] + received at = 1713132056972 [2024-04-15 00:00:56.972] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 59739 + src tos = 0 + fwd status = 0 + in packets = 13 + in bytes = 4154 + src addr = 172.217.168.10 + dst addr = 157.143.34.100 + out packets = 13 + out bytes = 4781 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +C1 00 00 00 01 00 08 E2 4A D5 5D 68 47 4A 30 00 | ........J.]hGJ0. +43 A1 6D B0 33 2E 3F EC 20 2F 13 6E 05 3A 95 A3 | C.m.3.?. /.n.:.. +68 80 F2 D3 25 F7 D2 32 EA 33 9F 90 04 EF 48 54 | h...%..2.3....HT +54 19 1F 4E E7 DB C9 E6 D2 49 97 EB 76 4C 4C 38 | T..N.....I..vLL8 +56 35 8F 44 B2 E8 6F 76 6D 71 2B F6 12 EE 0B 14 | V5.D..ovmq+..... +B3 54 8E E7 08 79 0F E5 C5 8A 26 C2 36 95 34 48 | .T...y....&.6.4H +F3 77 95 DD AF B5 65 E5 0C 1E 39 FA 2B 66 E7 FA | .w....e...9.+f.. +41 D1 F7 1B E0 DE 51 46 63 3B 82 0C 19 69 16 6F | A.....QFc;...i.o +C1 37 56 B8 FB 9B EB BF 94 18 96 DD AB AA EC CE | .7V............. +0E D3 5C 4F 1B EB F7 EA 7C 2E 7D CF C2 CE 05 A7 | ..\O....|.}..... +5B 21 86 12 80 2E A7 01 04 55 F5 9A B3 81 65 61 | [!.......U....ea +10 86 F6 4F 23 9B 77 F7 CB 7A 50 80 7A 45 64 6A | ...O#.w..zP.zEdj +D9 40 3E AB 93 69 66 C3 E6 44 3F 36 15 DC 1A 98 | .@>..if..D?6.... +03 86 BF 71 15 96 D4 74 16 87 AC 60 B5 58 69 3B | ...q...t...`.Xi; +FE 77 E1 F3 CE 68 CF E1 AB 87 8C 7D 1C 21 E9 CF | .w...h.....}.!.. +16 4B 6A B3 1F 50 94 6B 26 3B C2 66 23 82 AD 8D | .Kj..P.k&;.f#... +0B 47 60 20 8A BD 91 F5 3C F0 65 57 F6 A4 B8 48 | .G` ....<.eW...H +57 DD 93 2D A1 73 4A A3 64 C5 B9 A6 4E 41 BC 8C | W..-.sJ.d...NA.. +98 47 9D 17 DA 43 DF 47 28 FF B8 FF 8C 05 44 CB | .G...C.G(.....D. +46 7F 86 BD 64 8C 65 65 96 DA 72 DF 1A E9 61 A4 | F...d.ee..r...a. +38 26 F2 F4 E5 CE 24 83 B6 3B 4E F6 27 DC C3 96 | 8&....$..;N.'... +37 4F 3D 06 C5 0E 13 1E A0 FE C2 83 CC A8 C3 D1 | 7O=............. +7D 18 A6 69 61 BC E4 18 E8 E7 92 96 36 09 2A B1 | }..ia.......6.*. +B6 BB F3 F1 67 A7 D2 41 2A 29 8E B9 39 54 AA 89 | ....g..A*)..9T.. +01 BF 20 DB 36 A3 7A CB AE 68 BE 14 21 69 AD 3C | .. .6.z..h..!i.< +6D 73 E9 82 A1 15 B8 FF DF F4 52 BA 30 40 65 3D | ms........R.0@e= +AF 37 CD 60 5B 4D 49 2E 23 7D 7F 6A FD EF 7A 46 | .7.`[MI.#}.j..zF +E3 5A 53 66 D7 6E B0 36 68 97 72 3D E1 D9 A6 D5 | .ZSf.n.6h.r=.... +93 E3 A1 D2 2F 9F 74 90 74 EB 30 F7 A2 C2 7B DA | ..../.t.t.0...{. +30 8A BD FE 95 58 40 98 E8 D8 00 3F 58 53 D9 FE | 0....X@....?XS.. +68 44 F7 9A C8 CB 2A 8C AE 2D 7B E6 0E FD E4 E4 | hD....*..-{..... +F2 3D 4E 89 61 99 2A D7 B8 B0 79 22 16 A1 6C 75 | .=N.a.*...y"..lu +07 36 9C DE 9A 3D 8C 3C EB 6D F1 C7 93 C5 F4 BD | .6...=.<.m...... +0E C0 B0 5D 57 CB 41 E4 E9 EA 95 08 4A 47 AA 9F | ...]W.A.....JG.. +22 3E B1 22 7F 0A DD 4E EE 73 93 25 BD 5A BE 2F | ">."...N.s.%.Z./ +94 0A DE 15 C4 62 F1 11 93 50 84 A3 ED 98 FF 06 | .....b...P...... +A3 4F 3D 6D 34 FA 46 46 9A 71 5D 56 16 F2 FE EA | .O=m4.FF.q]V.... +A0 6B 72 C4 94 89 B5 C3 AC 25 86 E9 BC F1 00 B3 | .kr......%...... +71 7E 45 43 11 A3 E7 6B C9 2B A9 14 D1 62 97 0F | q~EC...k.+...b.. +9F FB F2 B6 64 F0 A1 11 FA 02 7D 13 CD D1 75 D0 | ....d.....}...u. +76 59 CB E5 F5 80 2D 29 C4 79 58 B0 BA BD 27 BB | vY....-).yX...'. +82 8F E3 F5 2F 4B EC 3E D7 F1 9B B7 A9 5F 4D 89 | ..../K.>....._M. +90 30 30 F8 2C 86 AF C9 47 D0 D7 8F 88 55 52 79 | .00.,...G....URy +DB B1 10 B5 62 D4 BC A0 71 6F DD A2 74 A2 C1 5F | ....b...qo..t.._ +AB 37 F3 5F 36 E1 1D CB 0E 54 44 B9 30 69 AA B2 | .7._6....TD.0i.. +32 DF 01 CA 77 24 1A 27 67 C6 E0 69 B5 7F 3D 56 | 2...w$.'g..i..=V +9A 9C 3D 71 74 AF 18 8E 1C 2E BD 41 4C 70 33 FC | ..=qt......ALp3. +B6 B3 2A D2 6D 91 02 EA D1 CE 40 D7 C0 44 A4 45 | ..*.m.....@..D.E +0F FB 14 9D AF DD CD 64 AE 3B A2 28 BD A8 62 AF | .......d.;.(..b. +F1 C7 31 5E 86 32 D4 D3 F8 4E 41 A9 5D 24 85 69 | ..1^.2...NA.]$.i +E9 E5 A0 F6 06 49 DD 60 7B F9 D6 2A 2E 55 C6 83 | .....I.`{..*.U.. +C1 D7 70 CF EF 9D 9B 73 F4 50 0F 72 64 3B C5 E2 | ..p....s.P.rd;.. +4A 76 03 37 EF 82 B2 4D E2 02 50 30 61 1F E2 63 | Jv.7...M..P0a..c +97 E3 7E 7D 86 C8 0C 44 73 32 F7 D3 2E 6D 09 A5 | ..~}...Ds2...m.. +86 AF 04 52 8B 0A CB B5 6E 6F 0B EB C8 C9 5F 36 | ...R....no...._6 +0C EE 1C CE BB 10 E7 DE F6 6B 7B E2 B4 2C BA 5A | .........k{..,.Z +A8 B7 34 04 E5 BF 77 EE 63 15 D8 5B 90 18 BC 20 | ..4...w.c..[... +4B 9D 9F 0A 4B C6 AE 77 10 8B 8D DC 01 91 38 A4 | K...K..w......8. +67 96 82 0E BE 11 34 AB 22 44 96 C2 1C 36 FE 65 | g.....4."D...6.e +9E B0 BA E4 00 00 00 01 00 08 E2 4A D5 5D 68 47 | ...........J.]hG +4A 30 40 DA FA C4 3A 2A 2F 11 32 67 87 91 9A 31 | J0@...:*/.2g...1 +E3 DF 1B 5A 37 DF CA 72 49 B2 24 1C 17 DB 86 0C | ...Z7..rI.$..... +0B B1 90 D3 EE 70 37 BC 2D 40 5A 82 74 F0 B6 B1 | .....p7.-@Z.t... +5C BD F6 DF 0E 8B FA 08 14 F3 EA 7C EA CA 98 87 | \..........|.... +2B 5B 72 61 84 B8 7D A7 05 14 20 AE A3 80 D4 2F | +[ra..}... ..../ +58 C6 1C FA ED A9 25 08 C0 97 78 EB C6 A3 A0 34 | X.....%...x....4 +D5 4D FF FD F7 81 6B 40 44 7F 22 14 84 3D D0 C3 | .M....k@D."..=.. +35 D8 62 CF 20 1C E0 5F 69 1D 68 ED 01 95 1B 71 | 5.b. .._i.h....q +79 72 AC 76 BD 86 D6 1A 4B 3A 9C 61 69 51 20 04 | yr.v....K:.aiQ . +B6 2B 74 B0 C5 16 E8 77 A9 F9 C9 FF 0C AF 03 2F | .+t....w......./ +54 99 A7 E6 88 3D A5 BC 39 E1 A4 30 3E 82 06 69 | T....=..9..0>..i +D1 8A 5D 82 72 8D 1D 86 DD CF 28 E2 3A D0 C1 1D | ..].r.....(.:... +6E 3E 88 C1 B4 7F 58 F7 C9 BA 27 BC 10 9D 0E 5F | n>....X...'...._ +BF FD E8 34 E2 96 D5 E1 2D AB FB 04 A3 C3 4A 29 | ...4....-.....J) +92 CD 7E 65 E0 EF A4 59 B7 E6 F5 94 98 FD 13 D2 | ..~e...Y........ +7E 36 57 73 5A C1 67 8B D1 AB 3B B9 94 4B 23 BC | ~6WsZ.g...;..K#. +F2 A4 3C 2D 46 F2 E5 F0 97 4D 3A 65 43 61 71 57 | ..<-F....M:eCaqW +1B 9E FA 84 DE 77 9B 89 72 55 05 3B 60 6B 32 D1 | .....w..rU.;`k2. +88 DA | .. + +Flow Record: + RecordCount = 30 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132277438 [2024-04-15 00:04:37.438] + last = 1713132308081 [2024-04-15 00:05:08.081] + received at = 1713132377066 [2024-04-15 00:06:17.066] + proto = 6 TCP + tcp flags = 0x5f .E.APRSF + src port = 443 + dst port = 61655 + src tos = 0 + fwd status = 0 + in packets = 20 + in bytes = 16585 + src addr = 17.171.47.23 + dst addr = 157.143.34.100 + out packets = 15 + out bytes = 3579 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 115.517 ms + srv latency = 0.000 ms + app latency = 2.904 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 5d79edf64e03689ff559a54e9d9487bc + ja4s hash = t130500_c02f_8763c20bf469 +16 03 03 00 70 02 00 00 6C 03 03 2B 8C B3 98 F0 | ....p...l..+.... +55 62 49 37 D3 80 56 50 51 6D E9 6B DF B1 58 8A | UbI7..VPQm.k..X. +B3 11 BC 56 2F 13 25 77 71 FD 72 20 DC 64 15 78 | ...V/.%wq.r .d.x +F4 1F A0 B9 B4 CB A6 01 29 4D 0A AB A7 00 00 F7 | ........)M...... +23 F9 D1 BE A4 14 72 D7 5E 4D A2 63 C0 2F 00 00 | #.....r.^M.c./.. +24 FF 01 00 01 00 00 00 00 00 00 0B 00 04 03 00 | $............... +01 02 00 10 00 0B 00 09 08 68 74 74 70 2F 31 2E | .........http/1. +31 00 17 00 00 16 03 03 0D 46 0B 00 0D 42 00 0D | 1........F...B.. +3F 00 04 7B 30 82 04 77 30 82 03 5F A0 03 02 01 | ?..{0..w0.._.... +02 02 10 1F 8A 57 19 C7 FB 1A 8B 00 EC 11 F7 D8 | .....W.......... +4E 86 86 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B | N..0...*.H...... +05 00 30 6D 31 27 30 25 06 03 55 04 03 0C 1E 41 | ..0m1'0%..U....A +70 70 6C 65 20 53 65 72 76 65 72 20 41 75 74 68 | pple Server Auth +65 6E 74 69 63 61 74 69 6F 6E 20 43 41 31 20 30 | entication CA1 0 +1E 06 03 55 04 0B 0C 17 43 65 72 74 69 66 69 63 | ...U....Certific +61 74 69 6F 6E 20 41 75 74 68 6F 72 69 74 79 31 | ation Authority1 +13 30 11 06 03 55 04 0A 0C 0A 41 70 70 6C 65 20 | .0...U....Apple +49 6E 63 2E 31 0B 30 09 06 03 55 04 06 13 02 55 | Inc.1.0...U....U +53 30 1E 17 0D 32 33 30 39 31 34 32 32 35 30 34 | S0...23091422504 +35 5A 17 0D 32 34 31 30 31 33 32 32 35 30 34 34 | 5Z..241013225044 +5A 30 50 31 17 30 15 06 03 55 04 03 0C 0E 67 64 | Z0P1.0...U....gd +6D 66 2E 61 70 70 6C 65 2E 63 6F 6D 31 13 30 11 | mf.apple.com1.0. +06 03 55 04 0A 0C 0A 41 70 70 6C 65 20 49 6E 63 | ..U....Apple Inc +2E 31 13 30 11 06 03 55 04 08 0C 0A 43 61 6C 69 | .1.0...U....Cali +66 6F 72 6E 69 61 31 0B 30 09 06 03 55 04 06 13 | fornia1.0...U... +02 55 53 30 82 01 22 30 0D 06 09 2A 86 48 86 F7 | .US0.."0...*.H.. +0D 01 01 01 05 00 03 82 01 0F 00 30 82 01 0A 02 | ...........0.... +82 01 01 00 D6 1D EE 94 DD 1F BD A5 B9 50 0B C1 | .............P.. +7D 65 07 B0 65 A8 46 3D 20 5D DB 39 BE F8 4F 23 | }e..e.F= ].9..O# +30 C9 15 55 DD BA 4B 21 53 BD 58 65 ED BF 57 00 | 0..U..K!S.Xe..W. +D6 06 99 86 AC 7A 6A 7B F3 73 25 BC B0 86 2B A2 | .....zj{.s%...+. +C7 9D D0 18 72 50 9D 79 77 82 D6 E1 12 04 54 3E | ....rP.yw.....T> +06 57 EE 60 2C AC 13 D0 8E A6 A5 4E CC 44 B1 6D | .W.`,......N.D.m +9F 59 43 57 C4 75 3B 1A 32 4C 17 1D A2 DD 65 3A | .YCW.u;.2L....e: +3E 69 E3 F8 9E E6 D7 57 9E 75 8F 0B 98 84 C3 F6 | >i.....W.u...... +71 6F 63 5C AE 7E 21 5A 6E 87 B1 69 AE 8F E9 5D | qoc\.~!Zn..i...] +E8 10 4E E2 81 0D 8E 30 33 E1 FD 27 BC BA 11 1B | ..N....03..'.... +F4 2E 19 94 01 E6 41 34 AD 82 42 8D 8E 0C 34 11 | ......A4..B...4. +49 62 67 4B A9 03 49 B1 EA 36 FA A3 84 C0 E7 9F | IbgK..I..6...... +E2 04 59 17 9F 81 2A 6A D7 88 23 02 0D C4 A3 7A | ..Y...*j..#....z +50 6C 69 D2 5A 7E 5C 80 51 63 A8 EF 5B C4 8D C4 | Pli.Z~\.Qc..[... +27 5A 79 F7 60 61 80 6E BA 6A 67 1D D5 6F 3B D1 | 'Zy.`a.n.jg..o;. +89 6E 5A DB 30 89 8F CB 57 B5 87 5E F3 11 DC E0 | .nZ.0...W..^.... +56 70 A2 B7 02 03 01 00 01 A3 82 01 2E 30 82 01 | Vp...........0.. +2A 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 30 | *0...U.......0.0 +1F 06 03 55 1D 23 04 18 30 16 80 14 2C C5 6D 52 | ...U.#..0...,.mR +DD 31 EF 8C EC 08 81 ED DF DC CA 43 00 45 01 D0 | .1.........C.E.. +30 4A 06 08 2B 06 01 05 05 07 01 01 04 3E 30 3C | 0J..+........>0< +30 3A 06 08 2B 06 01 05 05 07 30 01 86 2E 68 74 | 0:..+.....0...ht +74 70 3A 2F 2F 6F 63 73 70 2E 61 70 70 6C 65 2E | tp://ocsp.apple. +63 6F 6D 2F 6F 63 73 70 30 33 2D 61 70 70 6C 65 | com/ocsp03-apple +73 65 72 76 65 72 61 75 74 68 31 32 30 19 06 03 | serverauth120... +55 1D 11 04 12 30 10 82 0E 67 64 6D 66 2E 61 70 | U....0...gdmf.ap +70 6C 65 2E 63 6F 6D 30 13 06 03 55 1D 25 04 0C | ple.com0...U.%.. +30 0A 06 08 2B 06 01 05 05 07 03 01 30 3C 06 03 | 0...+.......0<.. +55 1D 1F 04 35 30 33 30 31 A0 2F A0 2D 86 2B 68 | U...50301./.-.+h +74 74 70 3A 2F 2F 63 72 6C 2E 61 70 70 6C 65 2E | ttp://crl.apple. +63 6F 6D 2F 61 70 70 6C 65 73 65 72 76 65 72 61 | com/appleservera +75 74 68 63 61 31 2E 63 72 6C 30 1D 06 03 55 1D | uthca1.crl0...U. +0E 04 16 04 14 20 4F CC B0 7C 3F 01 EE 1B 7F 56 | ..... O..|?....V +F1 56 D1 59 87 9B EF 49 F6 30 0E 06 03 55 1D 0F | .V.Y...I.0...U.. +01 01 FF 04 04 03 02 05 A0 30 10 06 0A 2A 86 48 | .........0...*.H +86 F7 63 64 06 1B 10 04 02 05 00 30 0D 06 09 2A | ..cd.......0...* +86 48 86 F7 0D 01 01 0B 05 00 03 82 01 01 00 28 | .H.............( +B1 4E E7 5B 95 BC 2A F1 18 22 AA 80 2E B7 B7 B4 | .N.[..*.."...... +18 44 F5 8C 37 7D 5D 04 D5 C8 8C 77 C6 17 1E 00 | .D..7}]....w.... +95 DE 8D D5 8F 6B EB E2 58 39 93 8A B9 EC F7 20 | .....k..X9..... +91 99 C9 F6 84 36 1C 13 2B C7 DB 1B 1A EB 75 D2 | .....6..+.....u. +CF A2 3C 28 43 71 41 1F 53 38 30 96 54 E0 89 C5 | ..<(CqA.S80.T... +0D D4 D0 7D B3 37 DC 09 2E 9A 47 1F 1C B5 51 F4 | ...}.7....G...Q. +BB F5 A4 1A 1F 3B 09 07 FB 5E B6 CB 18 78 0D 8E | .....;...^...x.. +5E EE 9E 24 9B 94 4A DE C7 D8 59 0A 24 B2 2E 06 | ^..$..J...Y.$... +FF DB 26 A3 EF AE 56 FC 32 54 60 6A 0B F5 EC 5A | ..&...V.2T`j...Z +58 44 65 3B 05 F6 9C B2 0B 62 82 4B 09 A7 CC 1B | XDe;.....b.K.... +EA 1B 9B 6F 55 0A 30 CE B6 D4 68 02 78 33 05 3C | ...oU.0...h.x3.< +FB 47 88 96 E8 0D 87 D1 73 78 B0 4E 40 B5 0F 0C | .G......sx.N@... +B1 D4 51 B9 25 1D 55 3C D3 71 73 72 F5 FB 81 D4 | ..Q.%.U<.qsr.... +20 AA C0 6F 91 07 9C 67 22 57 FB 2A FD F7 A5 F4 | ..o...g"W.*.... +C2 C9 8D FF 02 8B 45 EA 3E AD 4F EC 83 A5 F2 F4 | ......E.>.O..... +F7 18 3D 3E 27 5C 6B 9C B7 3E 90 7E 2D F1 1D 00 | ..=>'\k..>.~-... +03 FC 30 82 03 F8 30 82 02 E0 A0 03 02 01 02 02 | ..0...0......... +08 23 69 74 04 AD CB 83 14 30 0D 06 09 2A 86 48 | .#it.....0...*.H +86 F7 0D 01 01 0B 05 00 30 62 31 0B 30 09 06 03 | ........0b1.0... +55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 0A | U....US1.0...U.. +13 0A 41 70 70 6C 65 20 49 6E 63 2E 31 26 30 24 | ..Apple Inc.1&0$ +06 03 55 04 0B 13 1D 41 70 70 6C 65 20 43 65 72 | ..U....Apple Cer +74 69 66 69 63 61 74 69 6F 6E 20 41 75 74 68 6F | tification Autho +72 69 74 79 31 16 30 14 06 03 55 04 03 13 0D 41 | rity1.0...U....A +70 70 6C 65 20 52 6F 6F 74 20 43 41 30 1E 17 0D | pple Root CA0... +31 34 30 33 30 38 30 31 35 33 30 34 5A 17 0D 32 | 140308015304Z..2 +39 30 33 30 38 30 31 35 | 90308015 + +Flow Record: + RecordCount = 31 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 215 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131712553 [2024-04-14 23:55:12.553] + last = 1713131901997 [2024-04-14 23:58:21.997] + received at = 1713132000887 [2024-04-15 00:00:00.887] + proto = 6 TCP + tcp flags = 0x19 ...AP..F + src port = 8822 + dst port = 28919 + src tos = 0 + fwd status = 0 + in packets = 77363 + in bytes = 4356041 + src addr = 157.143.34.100 + dst addr = 213.144.148.130 + out packets = 114757 + out bytes = 160882567 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 8.939 ms + srv latency = 0.000 ms + app latency = 6.125 ms + in payload = 35 +17 03 03 00 1E 26 63 BD 98 5C E1 DD 35 E9 83 17 | .....&c..\..5... +5A A1 96 8E 7D 2D 03 A5 84 00 67 16 BF A6 85 D3 | Z...}-....g..... +B5 F7 3F | ..? + +Flow Record: + RecordCount = 32 + Flags = 0x00 PCAP v1, Unsampled + Elements = 5: 1 2 12 15 29 + size = 1374 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132382149 [2024-04-15 00:06:22.149] + last = 1713132382250 [2024-04-15 00:06:22.250] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 51648 + src tos = 0 + fwd status = 0 + in packets = 13 + in bytes = 7924 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +CD 00 00 00 01 00 08 F8 66 9D D0 4F F4 18 10 00 | ........f..O.... +44 D0 54 94 A0 D1 83 4F 1A DE 52 00 F1 E6 1A 7E | D.T....O..R....~ +69 D7 B5 FE 82 DA 34 17 90 B4 FD 85 43 19 97 A1 | i.....4.....C... +B3 B6 F7 77 44 FF A4 AA F8 5A 45 5D C4 B3 EE 4B | ...wD....ZE]...K +78 6B 76 7E 29 62 C3 33 26 6D E6 52 A7 78 2B 92 | xkv~)b.3&m.R.x+. +B9 17 97 8A A0 B4 C5 04 8E E7 B1 CB A7 20 E3 82 | ............. .. +9C 9B 67 6D B8 CC DA F5 C4 C9 D5 91 8E 12 AE 55 | ..gm...........U +B0 ED 73 AA 14 A1 5D 4A CB 7B A2 06 3D 1A 33 80 | ..s...]J.{..=.3. +A0 30 7C 08 DA 21 25 E4 21 54 D7 9F 00 FD 19 2F | .0|..!%.!T...../ +C6 71 C3 6F 50 B4 0E 02 64 11 A6 67 E7 71 94 01 | .q.oP...d..g.q.. +A9 41 96 D7 F0 F1 D2 EA D5 6B 68 A2 99 BC BD 7C | .A.......kh....| +4B 24 C2 A8 0B 81 B6 99 6F 41 D7 78 16 AE 46 F3 | K$......oA.x..F. +AC 6D 73 07 DD 49 CF 01 DB C7 DD CE 6E 2F 74 81 | .ms..I......n/t. +83 08 69 D1 06 3E B4 05 6B E0 65 15 30 C9 5B F1 | ..i..>..k.e.0.[. +92 40 45 E1 79 3D 00 46 60 67 41 1E D6 6F AC D5 | .@E.y=.F`gA..o.. +99 24 C5 9A F0 C9 26 ED 40 D4 8A 2C 9C 9B 21 A7 | .$....&.@..,..!. +DA 49 EB 31 80 3D 5D F8 B0 1B AA 47 4A 41 D6 EC | .I.1.=]....GJA.. +F4 7F D6 C4 D5 BD BB 12 68 BA C3 54 04 56 8B 3A | ........h..T.V.: +8B 40 B1 7F DA C2 78 CE 4E 35 FE C3 F5 F8 A0 C4 | .@....x.N5...... +23 55 4C 05 6C 66 A1 27 10 32 A0 A1 66 2C BF B2 | #UL.lf.'.2..f,.. +C8 46 3D 76 0F 28 1D B1 77 E9 8E C9 46 33 3C 9B | .F=v.(..w...F3<. +16 F3 85 0F 87 21 05 55 05 2C E4 EA 47 6D 73 81 | .....!.U.,..Gms. +5D F1 F3 59 DF 48 49 CE 5F 14 89 D7 9F A2 11 93 | ]..Y.HI._....... +49 8C 62 F4 FB F0 42 10 A4 79 C4 0D DC 65 F4 0A | I.b...B..y...e.. +BC 2F B0 5F 51 1E D1 02 C2 43 54 87 E2 AB F1 E0 | ./._Q....CT..... +84 E2 78 2C 5C 1A 50 5A 93 50 B2 F2 1C 78 92 E4 | ..x,\.PZ.P...x.. +59 C2 63 64 BA E8 BD 93 2D 16 C3 62 BB 77 E5 C4 | Y.cd....-..b.w.. +88 5F B1 77 8C DE 7E 98 F0 48 D0 ED 01 D3 52 90 | ._.w..~..H....R. +2E 5E DA AD 6F 4A 4E EB 99 9B DB 7B AB BB C0 EF | .^..oJN....{.... +A6 66 6A D7 C9 7C 44 D3 8D 6F 94 87 38 11 FA 0A | .fj..|D..o..8... +46 69 05 3F 25 C1 D8 4F 55 BA 32 8C B0 B2 D2 EB | Fi.?%..OU.2..... +E6 A6 7D 94 3A 10 96 8A EB 5B 5A 05 3E 04 C0 F5 | ..}.:....[Z.>... +72 75 74 BD D1 A3 68 2C 0C 65 A9 39 2E 8A 18 D5 | rut...h,.e.9.... +30 B1 9E F0 25 AB 4F C1 B3 75 1A 0B DE 7C 2B 0F | 0...%.O..u...|+. +66 66 4A 59 B1 4C 84 1D 56 B2 82 42 37 4B B5 33 | ffJY.L..V..B7K.3 +76 44 62 86 3D 3D 9C 6B 48 A8 0B 2E BB 72 DB 53 | vDb.==.kH....r.S +09 1D DB 34 21 5A 47 51 5F 65 94 3E E3 A3 BB 84 | ...4!ZGQ_e.>.... +57 23 67 EF 87 49 CD 3B 64 92 51 D1 04 68 CD AF | W#g..I.;d.Q..h.. +A8 85 D2 10 A9 24 52 AE 00 1E F8 AD BF DD 38 2C | .....$R.......8, +56 F1 6A A3 AA 33 0F AA 09 8D 51 56 7A 43 E1 F3 | V.j..3....QVzC.. +E5 BA 57 46 D6 50 A0 E1 71 E2 9A EE EF B7 A4 BD | ..WF.P..q....... +93 DD FE 49 F2 DE BF AE A4 B1 FD F8 20 B7 B6 67 | ...I........ ..g +24 27 DB 0E FD 20 6A 2E 9A CA E9 C4 C1 50 DE D8 | $'... j......P.. +96 72 5A AF 9A D3 B4 A3 D5 BF 3E 99 E0 19 96 B4 | .rZ.......>..... +A2 CA BB 67 ED B6 B5 E7 32 F2 FD F8 1A 69 F3 24 | ...g....2....i.$ +60 45 E3 D0 0F 40 AC E7 6A 9D EE AF 4D C0 92 85 | `E...@..j...M... +10 76 44 EC 0F 61 B9 8A C6 65 C3 AA 13 64 B9 B4 | .vD..a...e...d.. +80 63 67 A8 AD 00 81 60 2F 85 63 75 BD 4F 93 23 | .cg....`/.cu.O.# +8A EC B5 CD 0D BB 0B 1D 46 D2 A0 44 DF 5D 0F C7 | ........F..D.].. +59 A1 D8 A6 5C B9 AB 1E FC F9 C3 5A 20 47 C9 1D | Y...\......Z G.. +7C 25 25 9D FF 00 9A 50 55 B0 A6 13 2C EF 13 DF | |%%....PU...,... +13 1F 19 9F B6 22 DB 51 CB 35 7F D9 FA 61 55 B3 | .....".Q.5...aU. +60 88 F1 47 00 91 80 5F E1 50 43 4A 97 0B 5B E4 | `..G..._.PCJ..[. +F0 73 2D 48 B9 49 3D C6 BF 7D A1 49 8F F7 C1 7E | .s-H.I=..}.I...~ +4C 2E B8 D1 0D 5C 3F B5 FD CD AA 70 55 22 9B AA | L....\?....pU".. +43 C5 3C DB 82 DB D1 61 90 CD 15 7C AE 99 00 9A | C.<....a...|.... +E7 33 91 D0 22 92 DB 97 FE 12 86 78 4A E3 6E B9 | .3.."......xJ.n. +4C 11 33 CD 3C EC 22 4A AB 4E A3 01 F6 8F 6A 6D | L.3.<."J.N....jm +B6 25 62 7D E5 56 0A 60 F3 E6 F2 74 CC E3 32 13 | .%b}.V.`...t..2. +31 85 51 4E E8 4E 56 91 34 D6 EA 8B 89 32 16 1E | 1.QN.NV.4....2.. +21 5E DA FC 8E F0 CF 60 7E CA 3C 90 93 32 32 C9 | !^.....`~.<..22. +94 61 3F B4 F5 15 9B C2 50 23 FB 7C AD 61 E3 C7 | .a?.....P#.|.a.. +CA 7C 39 AC 41 8B 3D 40 44 8B F6 74 21 C3 76 61 | .|9.A.=@D..t!.va +83 2C 0A F0 45 E7 65 A9 35 D2 C2 1E 4C A9 3E 04 | .,..E.e.5...L.>. +D1 DE A1 55 EE 84 9A 95 F7 27 54 FB D6 33 F7 09 | ...U.....'T..3.. +7C F4 78 83 BE 33 B2 0D F8 DE EA 91 5A A7 F4 0B | |.x..3......Z... +EB FD 26 7B 4F A8 8D 08 AA 47 B6 94 F7 A3 13 EA | ..&{O....G...... +51 4F 84 66 68 9A F8 A4 F2 84 2B A8 94 25 CC B9 | QO.fh.....+..%.. +DA 8E 1E B2 7A 96 B5 3F EC 20 6C 97 55 C9 12 9C | ....z..?. l.U... +8A D4 10 9B 12 6B 50 AD 84 5E 0F A8 D9 0D 6A C1 | .....kP..^....j. +8A 59 22 AB BB 89 88 0D 4B EC 06 80 2A CA 96 8A | .Y".....K...*... +B8 28 3D 68 34 9E 44 EA 8D 03 FA 17 A4 77 4F 5A | .(=h4.D......wOZ +C0 2B 03 40 43 58 4D 25 E5 07 6D 11 37 42 9A 67 | .+.@CXM%..m.7B.g +5F AF 09 6D 6A 7B 26 10 53 91 54 EF 75 E5 C6 CE | _..mj{&.S.T.u... +57 9F 2D 77 87 17 21 12 76 45 26 4A ED 9A D6 46 | W.-w..!.vE&J...F +96 8F 4E DB 8D A3 91 53 AA DD 42 10 B2 32 5F 30 | ..N....S..B..2_0 +A6 7A 8B 3E 89 F7 99 21 53 D3 B1 C4 89 51 A8 21 | .z.>...!S....Q.! +2D 4C 4E B9 DF 25 41 F0 28 AD 18 C2 67 82 84 A4 | -LN..%A.(...g... +7F 91 | .. + +Flow Record: + RecordCount = 33 + Flags = 0x00 PCAP v1, Unsampled + Elements = 5: 1 2 12 15 29 + size = 1374 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132382156 [2024-04-15 00:06:22.156] + last = 1713132382236 [2024-04-15 00:06:22.236] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 62094 + src tos = 0 + fwd status = 0 + in packets = 11 + in bytes = 4235 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +CF 00 00 00 01 00 08 F7 3F ED 54 B4 25 50 4F 00 | ........?.T.%PO. +43 9E B2 C8 9C D7 1F 54 E4 35 8A 0A 3F 98 2C 17 | C......T.5..?.,. +86 05 50 C3 82 14 9B 6C 75 F3 F8 CC 32 7B BB 2C | ..P....lu...2{., +0F 78 72 56 AA E1 9C FC 99 04 50 2D 06 B6 21 32 | .xrV......P-..!2 +44 C4 23 8E A0 C6 35 CB C8 EB AC E8 99 DB 60 FE | D.#...5.......`. +A1 43 B5 61 DD 52 F9 C5 2C C5 74 8F CA 04 34 B6 | .C.a.R..,.t...4. +41 82 F9 5E 47 FF DB 57 C2 D4 AC 00 76 26 02 7E | A..^G..W....v&.~ +C6 56 40 67 35 CD 46 27 0C 37 A0 A3 D6 E7 20 A9 | .V@g5.F'.7.... . +22 82 0E 15 49 C5 D6 1D A2 1E D5 FC B9 07 F6 DF | "...I........... +25 9A 41 7B 36 CE 7A EC D1 82 E1 61 17 16 63 7C | %.A{6.z....a..c| +6F 37 11 7A 7C A1 C9 FC 80 DC 70 60 E7 90 36 E6 | o7.z|.....p`..6. +CF 0A 1D 46 BF 2E 7B 78 4F 35 7D 8E CC 6C 09 71 | ...F..{xO5}..l.q +93 0D F7 E4 C0 89 24 FF 6E 29 02 D5 89 45 E5 42 | ......$.n)...E.B +F2 E5 18 8D 27 42 75 7A BD C2 D2 AF F4 F4 79 B2 | ....'Buz......y. +43 1F 6C F0 B6 0A 88 6F 96 93 1D 4E F1 6A 42 04 | C.l....o...N.jB. +63 F6 FF 69 73 03 75 15 44 26 98 CD 75 8F 99 89 | c..is.u.D&..u... +78 85 06 F4 70 78 B8 24 A9 A8 D7 6D 06 63 E5 BC | x...px.$...m.c.. +CA 39 E9 F9 DB 5C 30 DC E6 A4 C3 60 18 4B 1F 4A | .9...\0....`.K.J +C6 A8 02 DD 46 90 CB 6C A9 28 A4 ED 25 15 56 81 | ....F..l.(..%.V. +65 C3 F6 64 84 E9 FA 36 1E F3 72 25 99 BD 27 92 | e..d...6..r%..'. +AF 9C 3B 1F 26 F3 5F 3A 48 CE D5 8A 9E 54 91 B0 | ..;.&._:H....T.. +88 1F 74 08 F9 EA 0D 67 58 D5 1F B1 FD 1B 55 2D | ..t....gX.....U- +35 5B 40 A4 8E C5 9D B3 1E 6D BA 15 77 71 8B 50 | 5[@......m..wq.P +72 82 56 67 26 7E 38 72 21 DF F9 C4 AF BC 84 DC | r.Vg&~8r!....... +61 88 84 6F 21 37 4A 23 86 48 C6 E5 85 5D C8 90 | a..o!7J#.H...].. +FD 9B E1 98 8E A8 0B A6 73 C2 BF 5A 2B 60 B7 DF | ........s..Z+`.. +29 01 F8 3B 7A 11 A6 AE 89 D1 F7 9B 35 27 D3 2E | )..;z.......5'.. +DD 18 13 7E 57 FF CC 5F 0D 8D B5 70 BB AF E5 24 | ...~W.._...p...$ +81 69 72 9B 4A 64 1E 48 CE F1 62 7A F1 9B 9D 80 | .ir.Jd.H..bz.... +10 1F 50 FE 23 1B 56 0F 78 E4 7F 21 9D 82 55 94 | ..P.#.V.x..!..U. +35 CF CA 72 39 31 69 CA 79 71 3E 32 7E B1 6A 89 | 5..r91i.yq>2~.j. +EC 90 3D 04 1D 14 D8 6F 7B 6B DB 91 00 7C A3 64 | ..=....o{k...|.d +7C 63 12 15 9D 54 6F B4 F3 7F 7E C2 0E 9D 13 16 | |c...To...~..... +58 B9 D2 6C 2D 24 92 0C FC 4A 86 AA 4F 10 D1 3E | X..l-$...J..O..> +2E 59 A0 C7 51 9A 13 78 02 80 06 7F E1 C4 ED 7A | .Y..Q..x.......z +F7 21 27 A8 97 67 A6 B3 83 51 04 8D 59 15 76 D4 | .!'..g...Q..Y.v. +38 A8 A2 60 B6 A1 5A F1 D9 80 93 B9 C6 AE 67 F1 | 8..`..Z.......g. +B1 FC 81 DC A8 65 9A D3 62 D9 8F A9 F7 9C 3D 38 | .....e..b.....=8 +F0 B4 A2 4E 2E 89 26 A6 9F D9 13 E7 7E 6D 27 DD | ...N..&.....~m'. +D5 F0 07 2C B6 E2 90 27 14 D8 CC 95 74 75 20 A0 | ...,...'....tu . +77 AD 92 9B A1 9B DF 1C 00 E1 C1 2C EF F0 13 CB | w..........,.... +C0 92 F5 2E 35 8E 59 23 7F 6C B0 53 9C 50 FB DA | ....5.Y#.l.S.P.. +0F 4B 69 B7 43 D6 9D 8A ED 03 25 3C E1 23 E1 3E | .Ki.C.....%<.#.> +97 AD AD 23 68 37 94 BB 76 54 63 55 B2 D9 A2 59 | ...#h7..vTcU...Y +A6 FC 1E 40 4A C9 38 B5 ED 04 F8 CC 72 15 6D A9 | ...@J.8.....r.m. +6B ED D3 87 6C 19 5C 81 D1 6F DB 9A 3E 11 FF F8 | k...l.\..o..>... +B3 B1 D7 E5 0B 83 76 EA 2C 7E 17 51 0F 72 0A 60 | ......v.,~.Q.r.` +D2 61 F8 A1 32 48 7F 9F F0 2B E2 5C 7B 92 87 64 | .a..2H...+.\{..d +A2 10 CA 14 A9 B1 DE 11 F2 ED A1 7F E1 61 A9 DF | .............a.. +55 1A 7B 14 6D EC A3 96 85 02 CE 9F 7D EA 4C B5 | U.{.m.......}.L. +75 F4 88 AA AA 1A 1D 05 93 73 44 4B C9 32 53 23 | u........sDK.2S# +F3 2D F6 C8 91 74 AF 75 EB 25 97 3B 73 30 FC 0F | .-...t.u.%.;s0.. +8D CE EB 59 0E CB E5 9D BC 2E 96 56 13 8F 23 9C | ...Y.......V..#. +F7 5D 99 61 13 8C 3A FE CD F7 61 F7 AC 8B 03 03 | .].a..:...a..... +A1 F8 37 D3 7A 4B 31 43 A8 0C 30 B3 0F 8B 38 5C | ..7.zK1C..0...8\ +54 4E 0D C1 5C 90 FA B0 61 51 76 B2 61 2B F2 8C | TN..\...aQv.a+.. +FB 35 FE FA D0 E4 6D 6C 2B B5 ED 29 A8 4B 94 87 | .5....ml+..).K.. +CE B4 AB 95 A4 5F 4D 66 68 96 0B 4F AD D7 B8 78 | ....._Mfh..O...x +E8 9F B9 A2 33 E1 28 66 90 B9 6D AD CD CA 13 EB | ....3.(f..m..... +EA 00 00 00 01 00 08 F7 3F ED 54 B4 25 50 4F 40 | ........?.T.%PO@ +DD 7C 19 06 61 91 7B 50 62 B3 63 73 49 A5 C5 11 | .|..a.{Pb.csI... +BB CC C1 EA 7F 4A 68 1D E1 75 D8 8E 7E CF E8 77 | .....Jh..u..~..w +67 B3 48 7E B3 5B 69 A9 B4 96 1C BD 48 8E 97 47 | g.H~.[i.....H..G +69 9D AF ED CD 27 58 97 A9 61 A0 C7 1A 03 D9 D6 | i....'X..a...... +37 61 86 09 0A 1B 09 45 10 2C DF 51 4C BA E5 26 | 7a.....E.,.QL..& +6C BD 4A BF 98 DF F3 88 F7 B6 45 C3 28 A3 77 E3 | l.J.......E.(.w. +CB 35 89 A2 8A 80 B0 F8 58 60 B4 87 E5 74 47 61 | .5......X`...tGa +18 5B A5 69 C3 EA FE 9C 59 58 65 BB 91 D8 7A 14 | .[.i....YXe...z. +64 FC 91 60 16 A4 B7 8B 01 65 0C 83 77 19 CB EC | d..`.....e..w... +DB AC 74 0B 33 82 BA 24 E4 F2 CC 5C B0 F1 5A 6B | ..t.3..$...\..Zk +7B 75 9D BE C2 09 0B 2D C1 29 47 36 42 30 FD 5D | {u.....-.)G6B0.] +BA 86 8F AF 06 DD C1 5A E5 04 03 CF 2A 86 33 BE | .......Z....*.3. +34 50 59 BA F1 2C A0 56 AC 48 8F 8B 35 38 56 8B | 4PY..,.V.H..58V. +A7 9D 1E E8 05 FB E9 7B EF 23 0F A4 C3 46 4E 86 | .......{.#...FN. +8E FF 56 9F B2 EF F0 03 02 D9 F3 57 F6 46 84 00 | ..V........W.F.. +7B CB F6 CC 91 FA B8 E6 89 B6 3B E0 E6 73 23 02 | {.........;..s#. +92 90 75 B4 AA 4B 87 EC 06 03 6A D5 BC 19 3B 5B | ..u..K....j...;[ +9A 8F FC 66 28 BE 44 3B 9C 27 45 A5 4D 21 23 41 | ...f(.D;.'E.M!#A +D9 A8 | .. + +Flow Record: + RecordCount = 34 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132215178 [2024-04-15 00:03:35.178] + last = 1713132246172 [2024-04-15 00:04:06.172] + received at = 1713132344716 [2024-04-15 00:05:44.716] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 58109 + src tos = 0 + fwd status = 0 + in packets = 31 + in bytes = 18717 + src addr = 17.248.209.70 + dst addr = 157.143.34.100 + out packets = 32 + out bytes = 7510 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 35.872 ms + srv latency = 0.000 ms + app latency = 0.137 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 5F 95 36 4B 3B | ....z...v.._.6K; +A8 68 F4 A5 B1 0D F8 D4 1C 96 CF 01 51 38 5B F5 | .h..........Q8[. +2E B9 47 59 3B AC 5C E4 04 2F BC 20 AC D5 26 82 | ..GY;.\../. ..&. +E0 3C 9C 98 F0 83 B9 FE 54 75 7C 9A EC AC 91 B0 | .<......Tu|..... +0F 42 99 B1 52 A0 25 B4 79 E6 84 DE 13 02 00 00 | .B..R.%.y....... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 25 | ..+.....3.$... % +D5 67 AD 8A 9D AA 38 7C C2 B5 85 5F A4 BE B6 FC | .g....8|..._.... +2C 1A 8F 28 87 93 EC 18 25 ED 62 CC CC FE 01 14 | ,..(....%.b..... +03 03 00 01 01 17 03 03 00 2A 06 20 73 A3 20 EB | .........*. s. . +41 9C EC B4 9C 12 6D FA 16 9E 91 E4 FD 79 3E 1A | A.....m......y>. +AD 53 38 A8 90 90 98 21 EB 04 31 7A 07 E8 7D 0C | .S8....!..1z..}. +E1 3D E1 8C 17 03 03 11 25 C5 1C 21 48 1D A3 6E | .=......%..!H..n +31 E9 DF 43 7B 3B DC 7A AF 65 D3 92 CF 45 20 07 | 1..C{;.z.e...E . +57 16 EF 76 9C FB 5C 9E 07 8F 18 CC 60 79 33 EB | W..v..\.....`y3. +8E 10 A1 EF B9 3A 14 86 57 8B 89 76 2C E4 EC 33 | .....:..W..v,..3 +62 18 6C D2 08 6D 1F 9C 0B AE 26 CF B8 08 16 9E | b.l..m....&..... +B2 C2 3C F5 13 A4 CF 61 DC 8D 68 66 23 0D DD B6 | ..<....a..hf#... +AE CF A6 23 4D 90 D2 46 47 D1 40 81 7B 74 14 A6 | ...#M..FG.@.{t.. +9C B9 45 A5 8A 3A 4C 06 52 57 8F 5C 1D AD B0 55 | ..E..:L.RW.\...U +DA 8A AA 09 6C AB E5 5A 0F 05 FB 6C 7B 4A F1 2F | ....l..Z...l{J./ +36 A1 69 21 C7 DE D1 E6 36 46 EF C9 09 8A 90 81 | 6.i!....6F...... +9A C0 F7 46 F5 11 C5 89 15 04 0E 84 38 1C 3A D2 | ...F........8.:. +07 62 E9 D2 6D 8A 7E 1B 13 A3 73 47 1E 78 B8 F8 | .b..m.~...sG.x.. +8C 29 93 D3 F5 B9 82 D2 05 08 DD 0D 3D 35 4C 00 | .)..........=5L. +41 BD 26 31 AB 75 91 63 A8 22 81 1A 56 01 87 4B | A.&1.u.c."..V..K +F8 4C FB A2 22 A3 DF E9 FD B0 E6 89 EA D8 41 9A | .L..".........A. +80 8C F0 00 AD 23 F6 BC B3 26 34 D0 BE 37 02 11 | .....#...&4..7.. +95 FD DF F7 C2 09 F7 58 6E 40 11 B2 52 CD DC 4E | .......Xn@..R..N +6C DE BB 83 AE F3 25 BF 92 6A 32 FD 64 5C E4 23 | l.....%..j2.d\.# +89 9F 34 C1 24 14 40 4C 1D 18 78 86 A5 A6 D9 8C | ..4.$.@L..x..... +E4 CD C2 FB BB 27 8C 89 E6 A5 C3 8D 5E F2 4D DC | .....'......^.M. +E3 CB 67 A0 6B 18 98 56 1B 53 2D 15 BF FC CD 01 | ..g.k..V.S-..... +8F A3 6F 33 36 55 16 B2 AF 04 14 4A 1D B4 8C F1 | ..o36U.....J.... +89 3E 79 08 17 30 CE 6A BF 2F 56 71 3E 6B 07 27 | .>y..0.j./Vq>k.' +13 99 F2 2C C8 84 16 36 2F CC 01 CB C2 D1 D0 EF | ...,...6/....... +31 F3 BF 9A 24 85 7D CD 52 F0 66 D0 86 B1 A4 C0 | 1...$.}.R.f..... +11 6E 96 D2 DF 47 FF F5 63 D6 D6 DB F5 D3 BA CB | .n...G..c....... +69 BF A2 74 D4 22 41 AD B6 81 28 05 3C 2C 33 C5 | i..t."A...(.<,3. +C7 93 50 84 55 77 E8 22 09 31 20 82 58 7E C5 F5 | ..P.Uw.".1 .X~.. +C8 C2 78 E7 27 D9 4C 3B 71 6C 5C 34 65 25 EE 63 | ..x.'.L;ql\4e%.c +4D 8C 85 00 5F 70 B9 9C D2 EB D9 3C 86 F3 A4 A8 | M..._p.....<.... +02 7C FC A8 55 C7 54 42 03 56 2C 49 99 77 80 E5 | .|..U.TB.V,I.w.. +AB B3 C9 98 2E 71 32 2A D0 A9 1B 25 BD 7C 65 30 | .....q2*...%.|e0 +4B C0 3E 0B C3 F5 E2 6F 5F E9 86 AE 61 09 38 8E | K.>....o_...a.8. +B6 CD FF 35 31 78 42 F6 3A 84 CF 32 3E 10 A6 12 | ...51xB.:..2>... +70 BD D3 72 3D 2F 0A A9 64 B1 04 9E 98 1F D5 3E | p..r=/..d......> +8B 8A FB 79 E8 36 93 FC DB E2 56 74 9C 5E DB FF | ...y.6....Vt.^.. +A1 A2 46 BC 2C 70 8C D3 E7 27 2C 43 C7 A3 31 FA | ..F.,p...',C..1. +C6 9C B8 02 78 82 F2 F7 BE 27 1B 9B A8 8D B0 DA | ....x....'...... +79 62 3A 61 83 29 E9 C4 E5 5E 4D EC 0F 2E C7 72 | yb:a.)...^M....r +5A FF F0 03 AC D6 3C FC 50 83 10 91 7B E3 43 81 | Z.....<.P...{.C. +58 C8 0B 96 73 8B F8 CC 81 8C F0 1F 7B 23 F5 11 | X...s.......{#.. +BE 63 88 84 DF F6 51 9E B6 E7 89 48 BA C2 65 A8 | .c....Q....H..e. +07 4D 58 45 6B 9F 45 7F F5 D1 0E BE 2F 30 3F E7 | .MXEk.E...../0?. +60 32 5E 46 23 8C 8F F6 3D 54 54 82 C2 41 D5 30 | `2^F#...=TT..A.0 +BD 2C 7F 45 EE 29 EC EC ED CB 98 7C 3D DD 4D C7 | .,.E.).....|=.M. +B9 B0 E8 5A 7F 41 0D 76 0A 7F 1F 16 42 34 1C BF | ...Z.A.v....B4.. +32 D7 CF 8D 73 D9 31 AD 52 5F 47 C3 9F 08 CE 40 | 2...s.1.R_G....@ +5B 7A D8 37 7B 22 A4 0C 5B 7F 4B 6C 82 5C B7 F8 | [z.7{"..[.Kl.\.. +9B 84 AF 00 13 9D 35 D9 0E 44 16 41 0B 55 06 BF | ......5..D.A.U.. +60 BD 6A 28 31 44 23 E8 78 72 3C 56 06 07 BD C0 | `.j(1D#.xr..xO.yM... +9E 34 F3 4C 95 8A 35 86 0E 46 CA 56 5A B8 78 97 | .4.L..5..F.VZ.x. +A9 19 16 1A 39 50 97 98 7F EF CE 50 E5 03 2D 8B | ....9P.....P..-. +41 7C FC 44 E3 B2 A7 2E 61 53 AD 4B A5 82 A8 32 | A|.D....aS.K...2 +7D 0D 94 CA 8B 94 56 3E D7 F1 42 3C DE BC 0A 6B | }.....V>..B<...k +6A DC E4 49 6E 75 50 09 23 CE B1 7F 36 19 AE 4B | j..InuP.#...6..K +18 87 09 6C 7B 75 A8 9C 32 72 4D 66 FE 0B 17 B5 | ...l{u..2rMf.... +AD 4B 21 5E A1 FD 7E 50 E8 EB 38 86 6E F1 29 37 | .K!^..~P..8.n.)7 +FC D7 99 B5 E6 A8 EA 25 8F 02 C0 A4 90 55 0E 59 | .......%.....U.Y +04 05 D7 E0 39 F0 B0 AA 19 43 E0 FC 2B FB BC 94 | ....9....C..+... +4C 21 64 27 A7 E8 BA 99 8A F0 4F 9F A0 A3 70 24 | L!d'......O...p$ +5B FC 09 A4 FE AF 75 57 29 16 D7 B7 B3 9E AD 04 | [.....uW)....... +A4 E3 FF 53 7A D9 3C 80 25 2E D3 2D 21 C9 99 E4 | ...Sz.<.%..-!... +03 FF C8 4D 59 E3 1B 29 40 5D D1 8E 3F 6A B3 FC | ...MY..)@]..?j.. +EC 12 DB 9A 89 8F 64 D3 | ......d. + +Flow Record: + RecordCount = 35 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132247739 [2024-04-15 00:04:07.739] + last = 1713132278735 [2024-04-15 00:04:38.735] + received at = 1713132344717 [2024-04-15 00:05:44.717] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 54177 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18600 + src addr = 17.248.209.68 + dst addr = 157.143.34.100 + out packets = 33 + out bytes = 6997 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 20.248 ms + srv latency = 0.000 ms + app latency = 0.646 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 DE 4B 54 CE 60 | ....z...v...KT.` +EA F7 8D F7 0E A1 04 9C BE 26 AA 77 72 7B 8A 3D | .........&.wr{.= +53 88 D2 A2 AD 13 6D FA 01 70 8F 20 5D 8D 40 36 | S.....m..p. ].@6 +E1 AD 53 AA 9B 5F AF AA 31 57 AC F2 BA 2E C1 30 | ..S.._..1W.....0 +B1 1D CE 76 08 77 04 66 CA 51 BC E9 13 02 00 00 | ...v.w.f.Q...... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 E3 | ..+.....3.$... . +AE 33 17 B0 0F 6F 0E 59 D0 FE D4 65 F4 FA 4E 5B | .3...o.Y...e..N[ +9E 9E FE 48 66 B8 93 9A F8 4A 3F 41 11 41 0C 14 | ...Hf....J?A.A.. +03 03 00 01 01 17 03 03 00 2A F4 6E 08 19 4A EF | .........*.n..J. +73 ED D6 F3 5F BC F8 18 07 AA 67 52 1E 2D 2B A3 | s..._.....gR.-+. +2A E4 C3 31 C1 7D 48 85 CE 38 71 36 A9 B6 1E 8B | *..1.}H..8q6.... +D9 D5 30 19 17 03 03 11 25 56 DA 20 19 6E 15 CF | ..0.....%V. .n.. +D5 C3 2E FA 2A 91 88 E0 0E 9A 55 F7 55 FD 2C F4 | ....*.....U.U.,. +1F 6B C0 BE 70 EA D0 31 43 74 C3 9F 8D A7 D5 8E | .k..p..1Ct...... +E7 4D 1A 8D 17 31 38 AB BD C3 A5 B6 1E E1 B8 69 | .M...18........i +0F 70 B5 C7 B8 2E 48 33 19 38 09 EC 16 10 5E B6 | .p....H3.8....^. +21 49 44 89 4E BA 21 B8 61 F4 B2 0A E1 5A C6 45 | !ID.N.!.a....Z.E +19 9A C1 9F 6E D4 C7 1D 8F 13 A5 CC 57 22 75 BB | ....n.......W"u. +AE F1 F6 98 B1 AB 36 1A 03 25 C4 2D 99 29 4C 0F | ......6..%.-.)L. +90 09 7F FE 2D 8D 1E E8 0A EB E5 FE 77 CB 57 0C | ....-.......w.W. +FF 71 D2 B7 8E AD 7D 7C 5A 6C 3A B8 C7 89 BE 6A | .q....}|Zl:....j +41 C9 C9 5B 40 C3 74 22 26 83 CE A0 02 6E 3F 1C | A..[@.t"&....n?. +22 9F CB 30 07 24 A3 A2 EB 6F 2C 51 E1 38 4C 67 | "..0.$...o,Q.8Lg +D9 1C BB F3 F2 5E 7A 0D 1B D3 E8 D2 00 F0 25 BA | .....^z.......%. +CE 18 64 95 51 D3 2A 48 08 F7 57 96 20 5C 82 81 | ..d.Q.*H..W. \.. +86 A8 D0 E9 B5 01 BD 99 2D F3 31 E6 65 06 F2 09 | ........-.1.e... +17 58 F1 E5 42 DA AB A5 4B 99 49 08 41 91 C7 9E | .X..B...K.I.A... +D6 EA C0 66 6D C8 F7 E1 DE B0 9E D1 A0 B8 A8 B7 | ...fm........... +5C 2B F3 A4 76 D0 E8 13 35 5C 12 31 9C F2 05 20 | \+..v...5\.1... +2F 99 F8 18 DA C3 AA A4 C0 76 7D E8 E0 65 E3 6F | /........v}..e.o +6D E2 8F B2 85 2B A1 41 7D 42 AB 0F 01 8A F2 46 | m....+.A}B.....F +E3 90 B0 FE 62 81 9B DA BD F7 DD FC 3C F4 2D E2 | ....b.......<.-. +FC 51 B8 81 13 1F 63 67 56 FC 23 C4 32 FF DF 50 | .Q....cgV.#.2..P +40 88 8B C8 02 B1 61 7B 93 19 79 47 DB 82 56 34 | @.....a{..yG..V4 +7E CB 87 2D 60 33 37 53 79 22 EE 84 20 0D 58 2F | ~..-`37Sy".. .X/ +7C B5 54 E9 97 C3 C6 EA EE 0F 2A BC 0D 46 B2 73 | |.T.......*..F.s +82 C5 E5 24 80 5B 92 3A DF E2 EE A0 07 30 72 D7 | ...$.[.:.....0r. +F7 E6 19 49 74 3F 24 04 72 69 61 D4 19 37 A7 1C | ...It?$.ria..7.. +D4 3A CB D2 69 83 2A 29 C0 0D 56 E3 9B 9F 18 43 | .:..i.*)..V....C +07 A6 EF 37 65 87 B6 E2 5D 05 FC 27 44 46 EE 04 | ...7e...]..'DF.. +9D FF BD 1C 95 2D D2 AA 3F E0 D7 A7 BF 56 41 1E | .....-..?....VA. +F2 01 94 B2 81 39 6E 10 63 68 7A B0 51 F1 94 C0 | .....9n.chz.Q... +D5 08 7C 85 D2 20 43 3C 0B F1 87 00 C5 27 B1 F0 | ..|.. C<.....'.. +39 A0 E4 AD B0 FD 9A 69 8F 34 56 4B 74 C0 B3 07 | 9......i.4VKt... +82 89 13 E4 14 CC 0A D7 CC 0D DE 11 61 7C D3 30 | ............a|.0 +4E 08 25 4A A4 69 1C 51 30 A2 37 17 8C DE 13 B8 | N.%J.i.Q0.7..... +CC F6 6B 46 88 B8 DD 87 70 DC 70 AD 5B C5 4C 3C | ..kF....p.p.[.L< +04 4F F6 DB EA 18 98 A6 70 61 EC 1D 2E 11 C2 70 | .O......pa.....p +F3 25 81 79 B1 C1 64 6A B2 27 07 1E 93 8C 5E 4A | .%.y..dj.'....^J +03 4F 55 49 32 87 20 90 5D 6A CE A1 2B 6C 9E AF | .OUI2. .]j..+l.. +8C 32 24 2E 85 06 EB C9 C4 E5 05 D1 E0 D9 9F 93 | .2$............. +F0 E4 FF 54 CA 20 56 1E DC 01 CA 2D 84 54 22 4C | ...T. V....-.T"L +59 DB B0 FF AF 26 5F 1F 08 EB 19 01 A2 A2 F5 37 | Y....&_........7 +CD 99 AA AF 30 7B 0A 33 1E 33 A7 C0 63 35 0A 3F | ....0{.3.3..c5.? +43 CE 09 BC F1 63 A3 89 9C A1 63 D0 F2 50 D0 FE | C....c....c..P.. +E3 D1 EC 0E 91 E0 F2 0E 2A 23 B7 39 30 C7 C6 8B | ........*#.90... +44 12 9A 10 69 C6 40 93 8B F3 E8 FB 83 7B 2E DB | D...i.@......{.. +61 30 D8 97 8E 5E 47 AA A9 BB 49 2F DE 9D 1F 63 | a0...^G...I/...c +A2 4D 31 CC 8C 7B 39 13 A9 82 CE 25 2A 7E 42 26 | .M1..{9....%*~B& +3F D9 F0 85 80 EC D7 B9 97 75 A2 3C E2 03 B8 31 | ?........u.<...1 +7C 7C 96 B6 CA 90 7D 40 DD 2A EE 71 A2 C5 9A 0A | ||....}@.*.q.... +1A 3B DC 98 F5 7B 3B 1F 46 8E 5D 7C AE 6F 99 EA | .;...{;.F.]|.o.. +EF A2 D4 2B 7F 32 10 05 88 20 57 46 EF 00 ED E8 | ...+.2... WF.... +7E 4C B2 F4 55 58 89 1D 27 74 98 D6 BA 0C 13 15 | ~L..UX..'t...... +71 AD 2F 27 DF 79 8A 80 44 39 32 87 CF 0F 51 D7 | q./'.y..D92...Q. +EA 4B AE A1 AF FD 0C B6 23 B3 D2 5C F3 A4 02 98 | .K......#..\.... +95 6A 0C 5E CE 61 AD 79 46 A3 CF 0B 5F 11 C1 FF | .j.^.a.yF..._... +F8 B6 AD 92 98 CE AA F4 90 B8 C4 B6 53 0C 3C 46 | ............S..0X..5..6... +9B 9E BA 4D 0F 3E E7 18 50 17 14 4C 9F B1 78 01 | ...M.>..P..L..x. +AF 3B F4 BC 43 EE 9F 47 E0 B6 02 3A 93 4A 61 D4 | .;..C..G...:.Ja. +14 FF D0 D8 B3 69 9F 48 F3 EE 6F D2 4C CB 51 D3 | .....i.H..o.L.Q. +85 07 7D 1F 92 94 81 95 09 BB D7 5A AB 59 5A DF | ..}........Z.YZ. +51 69 CB 73 0B 2B 6A FA 3E CF 5A 87 6A F0 5B 3A | Qi.s.+j.>.Z.j.[: +CC C6 A2 5C FC EE 80 65 30 D1 B5 EE 09 6E 6E C3 | ...\...e0....nn. +6A 02 90 7A 99 F0 06 6B 76 10 C8 3D 34 33 DA D6 | j..z...kv..=43.. +C5 8B 6E F2 06 AD 65 4D 6C 50 0E 20 8D BD 1C 0A | ..n...eMlP. .... +2C 8C 32 E6 B3 7D C7 30 F5 6E 21 FD 95 B9 8C 11 | ,.2..}.0.n!..... +81 FB 67 23 78 50 B5 F9 54 24 21 D6 A3 1C 6E 9E | ..g#xP..T$!...n. +65 5D D0 23 15 AA 08 AA 6A CF 6A 34 D1 C4 3B 5C | e].#....j.j4..;\ +2D 21 FD E8 53 4D 43 1A 1C 69 EC 2B 17 F4 00 54 | -!..SMC..i.+...T +A4 E3 D0 24 49 F6 7E 55 1C 74 1F AE B5 A0 FB D5 | ...$I.~U.t...... +85 D7 CA E8 69 6E 38 63 0F 3D 69 C3 CF C7 52 5D | ....in8c.=i...R] +C1 2C 8F CF DF 5E 10 24 | .,...^.$ + +Flow Record: + RecordCount = 36 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 509 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131686461 [2024-04-14 23:54:46.461] + last = 1713132227100 [2024-04-15 00:03:47.100] + received at = 1713132000887 [2024-04-15 00:00:00.887] + proto = 6 TCP + tcp flags = 0x18 ...AP... + src port = 57657 + dst port = 80 + src tos = 0 + fwd status = 0 + in packets = 20 + in bytes = 4330 + src addr = 157.143.34.100 + dst addr = 172.217.168.3 + out packets = 0 + out bytes = 0 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 9.655 ms + srv latency = 0.000 ms + app latency = 60041.739 ms + in payload = 329 +HEAD /generate_204 HTTP/1.1 +Host: connectivitycheck.gstatic.com +Connection: keep-alive +User-Agent: Mozilla/5.0 (Linux; Android 12.0; Build/STTC.220815.001) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.0 Safari/537.36 CrKey/1.56.500000 DeviceType/AndroidTV +Accept-Encoding: gzip, deflate +Accept-Language: de-DE + + +48 45 41 44 20 2F 67 65 6E 65 72 61 74 65 5F 32 | HEAD /generate_2 +30 34 20 48 54 54 50 2F 31 2E 31 0D 0A 48 6F 73 | 04 HTTP/1.1..Hos +74 3A 20 63 6F 6E 6E 65 63 74 69 76 69 74 79 63 | t: connectivityc +68 65 63 6B 2E 67 73 74 61 74 69 63 2E 63 6F 6D | heck.gstatic.com +0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 6B 65 | ..Connection: ke +65 70 2D 61 6C 69 76 65 0D 0A 55 73 65 72 2D 41 | ep-alive..User-A +67 65 6E 74 3A 20 4D 6F 7A 69 6C 6C 61 2F 35 2E | gent: Mozilla/5. +30 20 28 4C 69 6E 75 78 3B 20 41 6E 64 72 6F 69 | 0 (Linux; Androi +64 20 31 32 2E 30 3B 20 42 75 69 6C 64 2F 53 54 | d 12.0; Build/ST +54 43 2E 32 32 30 38 31 35 2E 30 30 31 29 20 41 | TC.220815.001) A +70 70 6C 65 57 65 62 4B 69 74 2F 35 33 37 2E 33 | ppleWebKit/537.3 +36 20 28 4B 48 54 4D 4C 2C 20 6C 69 6B 65 20 47 | 6 (KHTML, like G +65 63 6B 6F 29 20 43 68 72 6F 6D 65 2F 39 32 2E | ecko) Chrome/92. +30 2E 34 35 31 35 2E 30 20 53 61 66 61 72 69 2F | 0.4515.0 Safari/ +35 33 37 2E 33 36 20 43 72 4B 65 79 2F 31 2E 35 | 537.36 CrKey/1.5 +36 2E 35 30 30 30 30 30 20 44 65 76 69 63 65 54 | 6.500000 DeviceT +79 70 65 2F 41 6E 64 72 6F 69 64 54 56 0D 0A 41 | ype/AndroidTV..A +63 63 65 70 74 2D 45 6E 63 6F 64 69 6E 67 3A 20 | ccept-Encoding: +67 7A 69 70 2C 20 64 65 66 6C 61 74 65 0D 0A 41 | gzip, deflate..A +63 63 65 70 74 2D 4C 61 6E 67 75 61 67 65 3A 20 | ccept-Language: +64 65 2D 44 45 0D 0A 0D 0A | de-DE.... + +Flow Record: + RecordCount = 37 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1608 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132217183 [2024-04-15 00:03:37.183] + last = 1713132217364 [2024-04-15 00:03:37.364] + received at = 1713132302717 [2024-04-15 00:05:02.717] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 62379 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 7405 + src addr = 13.224.103.47 + dst addr = 157.143.34.100 + out packets = 12 + out bytes = 1574 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 8.987 ms + srv latency = 0.000 ms + app latency = 0.175 ms + in payload = 1428 + TLS version = TLS 1.3 + ja3s hash = 16a232c6047ab4c7f493b826d419a8be + ja4s hash = t130500_c02f_a241d087c239 +16 03 03 00 63 02 00 00 5F 03 03 9D AE A3 BB B0 | ....c..._....... +31 98 E2 AA 7E 8E 4C CE 03 2E CA 4B A9 52 EB 7F | 1...~.L....K.R.. +50 A6 22 44 4F 57 4E 47 52 44 01 20 C0 BA F8 8A | P."DOWNGRD. .... +F5 3D C6 35 94 30 22 CF B9 46 BE 54 0B FF 9B 16 | .=.5.0"..F.T.... +2A CB E5 DF CB E4 81 97 6A 2B A6 4F C0 2F 00 00 | *.......j+.O./.. +17 00 00 00 00 00 0B 00 02 01 00 FF 01 00 01 00 | ................ +00 05 00 00 00 17 00 00 16 03 03 13 93 0B 00 13 | ................ +8F 00 13 8C 00 06 0F 30 82 06 0B 30 82 04 F3 A0 | .......0...0.... +03 02 01 02 02 10 0A 28 52 01 F0 E0 3A 67 F4 F8 | .......(R...:g.. +C7 A1 48 40 12 B8 30 0D 06 09 2A 86 48 86 F7 0D | ..H@..0...*.H... +01 01 0B 05 00 30 3C 31 0B 30 09 06 03 55 04 06 | .....0<1.0...U.. +13 02 55 53 31 0F 30 0D 06 03 55 04 0A 13 06 41 | ..US1.0...U....A +6D 61 7A 6F 6E 31 1C 30 1A 06 03 55 04 03 13 13 | mazon1.0...U.... +41 6D 61 7A 6F 6E 20 52 53 41 20 32 30 34 38 20 | Amazon RSA 2048 +4D 30 31 30 1E 17 0D 32 33 30 37 31 30 30 30 30 | M010...230710000 +30 30 30 5A 17 0D 32 34 30 38 30 37 32 33 35 39 | 000Z..2408072359 +35 39 5A 30 14 31 12 30 10 06 03 55 04 03 13 09 | 59Z0.1.0...U.... +74 69 64 61 6C 2E 63 6F 6D 30 82 01 22 30 0D 06 | tidal.com0.."0.. +09 2A 86 48 86 F7 0D 01 01 01 05 00 03 82 01 0F | .*.H............ +00 30 82 01 0A 02 82 01 01 00 D8 DB 24 28 FF 06 | .0..........$(.. +62 F6 20 6C E1 1D 3C 09 F1 AF 3E 26 6B F1 90 4E | b. l..<...>&k..N +E7 D5 28 7C BD 18 AA E2 8F 06 66 64 65 35 62 25 | ..(|......fde5b% +4A 9D 59 73 C3 BD 0A 64 C0 29 6C AA CC F5 3F A4 | J.Ys...d.)l...?. +47 33 26 D1 13 96 93 01 DE 8A B0 B1 52 A7 20 F9 | G3&.........R. . +49 B9 F9 B0 04 D8 27 BF A0 52 55 7C 5F B5 9F EF | I.....'..RU|_... +CE 8E F0 EA 98 8D 49 2A FE 0B 65 E2 C5 29 06 33 | ......I*..e..).3 +91 C0 28 73 69 1E AB 09 06 E2 71 A2 0C 5F 50 A3 | ..(si.....q.._P. +82 7D BE F5 A2 B6 FC BE E2 55 FD BB 3E E3 7F 2B | .}.......U..>..+ +B8 6E D9 5D E0 75 49 6A CD DC 49 52 0B 58 C2 0B | .n.].uIj..IR.X.. +B4 35 31 C6 35 8C F2 90 AC 29 FA 74 EA EF 5F AD | .51.5....).t.._. +C3 2F B5 D0 04 4A CB 98 A8 8B 4B AE 22 86 58 EB | ./...J....K.".X. +E1 9E E0 B1 4F F4 F3 07 14 B5 14 62 99 33 85 5E | ....O......b.3.^ +60 B9 01 6A 6A 26 FE 78 0B 00 DF D9 B5 BA 39 A4 | `..jj&.x......9. +51 6F E1 88 1D 08 AE 05 B5 BD A9 50 BD 10 EC 45 | Qo.........P...E +16 89 84 41 35 8B 69 2E DC 52 07 44 E8 28 B3 4C | ...A5.i..R.D.(.L +0D A5 5F D9 8B 75 86 89 3C 93 02 03 01 00 01 A3 | .._..u..<....... +82 03 2F 30 82 03 2B 30 1F 06 03 55 1D 23 04 18 | ../0..+0...U.#.. +30 16 80 14 81 B8 0E 63 8A 89 12 18 E5 FA 3B 3B | 0......c......;; +50 95 9F E6 E5 90 13 85 30 1D 06 03 55 1D 0E 04 | P.......0...U... +16 04 14 A6 52 40 27 FC 32 CD 1D D0 81 EC 6B 98 | ....R@'.2.....k. +04 D6 8B FB 00 1D 81 30 61 06 03 55 1D 11 04 5A | .......0a..U...Z +30 58 82 09 74 69 64 61 6C 2E 63 6F 6D 82 0F 2A | 0X..tidal.com..* +2E 77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D | .wimpmusic.com.. +77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D 74 | wimpmusic.com..t +69 64 61 6C 68 69 66 69 2E 63 6F 6D 82 0B 2A 2E | idalhifi.com..*. +74 69 64 61 6C 2E 63 6F 6D 82 0F 2A 2E 74 69 64 | tidal.com..*.tid +61 6C 68 69 66 69 2E 63 6F 6D 30 0E 06 03 55 1D | alhifi.com0...U. +0F 01 01 FF 04 04 03 02 05 A0 30 1D 06 03 55 1D | ..........0...U. +25 04 16 30 14 06 08 2B 06 01 05 05 07 03 01 06 | %..0...+........ +08 2B 06 01 05 05 07 03 02 30 3B 06 03 55 1D 1F | .+.......0;..U.. +04 34 30 32 30 30 A0 2E A0 2C 86 2A 68 74 74 70 | .40200...,.*http +3A 2F 2F 63 72 6C 2E 72 32 6D 30 31 2E 61 6D 61 | ://crl.r2m01.ama +7A 6F 6E 74 72 75 73 74 2E 63 6F 6D 2F 72 32 6D | zontrust.com/r2m +30 31 2E 63 72 6C 30 13 06 03 55 1D 20 04 0C 30 | 01.crl0...U. ..0 +0A 30 08 06 06 67 81 0C 01 02 01 30 75 06 08 2B | .0...g.....0u..+ +06 01 05 05 07 01 01 04 69 30 67 30 2D 06 08 2B | ........i0g0-..+ +06 01 05 05 07 30 01 86 21 68 74 74 70 3A 2F 2F | .....0..!http:// +6F 63 73 70 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F | ocsp.r2m01.amazo +6E 74 72 75 73 74 2E 63 6F 6D 30 36 06 08 2B 06 | ntrust.com06..+. +01 05 05 07 30 02 86 2A 68 74 74 70 3A 2F 2F 63 | ....0..*http://c +72 74 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F 6E 74 | rt.r2m01.amazont +72 75 73 74 2E 63 6F 6D 2F 72 32 6D 30 31 2E 63 | rust.com/r2m01.c +65 72 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 | er0...U.......0. +30 82 01 7E 06 0A 2B 06 01 04 01 D6 79 02 04 02 | 0..~..+.....y... +04 82 01 6E 04 82 01 6A 01 68 00 76 00 EE CD D0 | ...n...j.h.v.... +64 D5 DB 1A CE C5 5C B7 9D B4 CD 13 A2 32 87 46 | d.....\......2.F +7C BC EC DE C3 51 48 59 46 71 1F B5 9B 00 00 01 | |....QHYFq...... +89 3E 21 77 27 00 00 04 03 00 47 30 45 02 21 00 | .>!w'.....G0E.!. +C3 53 34 AF 43 03 C8 C1 11 23 3E C1 40 EF 06 27 | .S4.C....#>.@..' +CD E1 7A 49 8B DD 92 84 2B 16 63 6C 2A B5 A2 E2 | ..zI....+.cl*... +02 20 0F C9 0F B9 45 4D E3 88 94 3D 75 78 15 CC | . ....EM...=ux.. +7F 6B 35 8B 00 3B 7B 0E 8A 1C 2D 27 86 24 17 F5 | .k5..;{...-'.$.. +63 B7 00 76 00 48 B0 E3 6B DA A6 47 34 0F E5 6A | c..v.H..k..G4..j +02 FA 9D 30 EB 1C 52 01 CB 56 DD 2C 81 D9 BB BF | ...0..R..V.,.... +AB 39 D8 84 73 00 00 01 89 3E 21 77 04 00 00 04 | .9..s....>!w.... +03 00 47 30 45 02 21 00 AC F0 89 AA C4 1F 25 10 | ..G0E.!.......%. +2E 63 EB 9F 51 F8 34 FC B8 E9 87 80 67 CF FE 12 | .c..Q.4.....g... +46 67 8D 9C ED 23 25 A6 02 20 0D 0C 2F 87 19 F4 | Fg...#%.. ../... +EF 94 64 B0 F4 2D 7D 3C 5E 33 52 8D 7B D4 E0 FB | ..d..-}<^3R.{... +4D 9A 14 C8 E1 65 89 5E C6 C4 00 76 00 DA B6 BF | M....e.^...v.... +6B 3F B5 B6 22 9F 9B C2 BB 5C 6B E8 70 91 71 6C | k?.."....\k.p.ql +BB 51 84 85 34 BD A4 3D 30 48 D7 FB AB 00 00 01 | .Q..4..=0H...... +89 3E 21 76 E0 00 00 04 03 00 47 30 45 02 21 00 | .>!v......G0E.!. +86 79 F0 C1 4E 93 9C 55 56 DF 1B 18 DC AF 80 B5 | .y..N..UV....... +DB 29 68 19 86 6B B1 AF A0 E3 0D A5 91 42 42 37 | .)h..k.......BB7 +02 20 53 72 52 08 2E 09 7A E8 B8 10 1E AA C5 7D | . SrR...z......} +0F D0 25 D2 EE 1D EC F5 E1 09 2D F5 B4 12 3A 83 | ..%.......-...:. +59 A7 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 | Y.0...*.H....... +00 03 82 01 01 00 4F E5 AC 91 4E 4A 44 05 5D 5D | ......O...NJD.]] +D3 9D AC B4 | .... + +Flow Record: + RecordCount = 38 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131891886 [2024-04-14 23:58:11.886] + last = 1713131922866 [2024-04-14 23:58:42.866] + received at = 1713132000887 [2024-04-15 00:00:00.887] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 59352 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18602 + src addr = 17.248.209.64 + dst addr = 157.143.34.100 + out packets = 33 + out bytes = 7661 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 37.772 ms + srv latency = 0.000 ms + app latency = 0.399 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 D1 32 AE 40 32 | ....z...v...2.@2 +FA 5A 43 DA E8 35 18 BF CE 43 38 C1 21 28 49 E1 | .ZC..5...C8.!(I. +0E 8F 79 82 7E 79 B4 D2 71 FF 62 20 A4 9E D2 77 | ..y.~y..q.b ...w +03 38 6A 7C 91 64 F0 89 B5 94 14 43 21 F7 CF 0C | .8j|.d.....C!... +5B F1 28 E3 AC 7B BC 69 6A 5A 91 D5 13 02 00 00 | [.(..{.ijZ...... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 34 | ..+.....3.$... 4 +0A C4 F7 9C 16 6A D7 3B C7 B1 74 BA 2A 8E 29 19 | .....j.;..t.*.). +37 5D 26 C4 17 39 18 16 4C 90 72 3F 4C 01 32 14 | 7]&..9..L.r?L.2. +03 03 00 01 01 17 03 03 00 2A 2C FA B6 58 12 8F | .........*,..X.. +60 B6 9E CB CD 16 B9 C2 5C 65 9E 8B E9 2C B7 04 | `.......\e...,.. +C2 B6 05 4B 63 A3 31 A1 35 61 1C F1 38 7F CB 6F | ...Kc.1.5a..8..o +6D 96 75 11 17 03 03 11 25 FF 5A D2 A9 86 4A 2A | m.u.....%.Z...J* +DB F3 B1 D0 02 0A E2 B7 10 B1 8B E8 E3 03 CE E2 | ................ +7D BE 31 25 8B 0F F2 4A 10 58 E4 2F 47 C4 8D F8 | }.1%...J.X./G... +AA 48 88 87 A7 4F 56 DD ED CA 48 96 F6 3E 82 63 | .H...OV...H..>.c +00 56 78 6A 45 B6 A7 BB E7 66 AB D9 4D 32 9F 53 | .VxjE....f..M2.S +57 40 5D 22 8D 68 71 58 40 45 62 1A 88 4A 76 81 | W@]".hqX@Eb..Jv. +C0 50 93 2E 2E 68 BA E9 0D D0 18 FB BF FE D8 61 | .P...h.........a +E7 A0 63 3A 0B 05 A1 BC 3C 61 EC 01 3D 05 47 EE | ..c:....U..&!.;.a.{. +DF 3F F4 AE 09 78 1A AB 1A 8F 30 01 7E 7E 56 E4 | .?...x....0.~~V. +29 04 7D DA BC A1 B7 FC 5A 29 04 94 66 16 BC 11 | ).}.....Z)..f... +5F DB D3 1B 31 45 13 14 FB 79 AE 13 C6 46 B2 35 | _...1E...y...F.5 +D8 19 DF D3 4E 39 0F D5 80 8D CB 38 85 84 1B 5E | ....N9.....8...^ +06 8A AD 3F 60 AA DE B9 7F 37 D4 AA F9 95 DD 13 | ...?`....7...... +4F B8 AA 9F 72 85 30 B1 1D ED 39 3A 9F 6D 3F 3A | O...r.0...9:.m?: +8E CA 5B 74 50 45 CC 8D 31 62 EE 26 67 0E B3 61 | ..[tPE..1b.&g..a +40 9B 38 35 AA EF F9 A0 15 0F F9 CF F5 06 EE 4F | @.85...........O +FE F6 D4 8F 56 30 81 FF 7C F7 B3 F0 6C 08 5B FB | ....V0..|...l.[. +18 D5 9D 7B 25 11 CF 42 B1 38 5C 80 25 E1 E2 5D | ...{%..B.8\.%..] +92 91 B3 28 9C 56 52 DC B7 2E 53 E7 B3 D0 0D 5A | ...(.VR...S....Z +B1 5A 07 B8 4B 19 6D 3D 81 B8 8F 11 8D 44 0B 52 | .Z..K.m=.....D.R +00 44 FE 96 DE A0 F9 44 CA E2 9F 7C 86 A5 F3 A2 | .D.....D...|.... +E3 51 42 95 A3 A2 37 9D 46 37 6C 5A E6 91 E2 E0 | .QB...7.F7lZ.... +D7 F2 03 4A 7B 7F 19 E4 54 2A D1 0B 2D 99 61 A4 | ...J{...T*..-.a. +A7 69 86 0B 65 63 FE AE 8E 07 CF 80 4D 81 A9 42 | .i..ec......M..B +2F 4C B2 2A 3F 06 20 B1 4F E8 10 7F 49 4B 07 49 | /L.*?. .O...IK.I +05 77 5D FA 80 24 DD 39 F8 29 F2 B5 8F 24 85 E3 | .w]..$.9.)...$.. +2C FA 87 5C 96 02 DF C6 EA A4 36 FD 94 D2 4F 42 | ,..\......6...OB +E0 79 FD 26 B1 02 77 F0 9B 32 BC 8A 80 EE 41 E4 | .y.&..w..2....A. +36 3E A5 0B 14 CF 03 AB 00 14 F2 A6 9D 9F F9 65 | 6>.............e +A7 27 E3 4A F5 D6 1F E4 7E 37 7D 6A 90 DE 7C 09 | .'.J....~7}j..|. +78 DF 98 59 59 15 E7 20 FF 71 86 D5 F0 E3 1D D0 | x..YY.. .q...... +61 4D 83 CF 2A C7 29 2D 4E 72 09 12 11 DE 49 8B | aM..*.)-Nr....I. +C3 88 6B D1 5B 0F 58 DD 9A A3 8C 84 A0 B4 87 06 | ..k.[.X......... +1E C7 E8 9A AE FA BF 7E 02 D8 40 37 75 81 9B 6B | .......~..@7u..k +81 B7 25 6A 95 4B C1 9A 22 04 D9 73 BA F1 E4 64 | ..%j.K.."..s...d +CE 1C 97 A2 B5 92 01 AB D9 E0 82 66 37 1E 40 06 | ...........f7.@. +68 39 2B BA FB 95 8B D5 49 8E 37 FA BE 8C 17 9F | h9+.....I.7..... +59 32 B6 59 20 02 36 B3 BB 7E 79 A9 F5 4D 51 21 | Y2.Y .6..~y..MQ! +34 36 1D 6C D4 A7 FB BF A5 F0 12 CA E0 DE EB F8 | 46.l............ +D1 7B 56 16 FD 74 6C 3D 71 03 4F C3 7B C6 3C 12 | .{V..tl=q.O.{.<. +AA CF E3 B6 61 75 97 3B B0 AE 8A 9B C5 69 C7 BC | ....au.;.....i.. +D8 30 E7 D8 AB 42 CD 55 66 1F DB 1A 20 99 82 36 | .0...B.Uf... ..6 +88 70 02 43 B7 48 AA 15 03 D8 32 1A 6D 39 38 55 | .p.C.H....2.m98U +A8 81 C1 7A B9 7D C9 55 C8 D1 34 C3 1E 3A 9C FE | ...z.}.U..4..:.. +81 FA 8F 5D AB 29 71 C7 9A 71 24 23 8A 77 C8 C3 | ...].)q..q$#.w.. +EC 32 F2 B7 78 86 28 8C 23 53 EF 7E AE 77 B1 D3 | .2..x.(.#S.~.w.. +3C D9 BB 6D BA C0 B1 D8 9C CC C0 BD E3 64 69 CF | <..m.........di. +06 BA E3 F2 8F 07 84 CB 96 CB 92 B2 BD B5 13 DE | ................ +C8 FA 78 B1 3E C7 F5 6B 1E EC 85 75 55 AD 29 DE | ..x.>..k...uU.). +9D 50 4E D3 10 7A C2 2F 96 E5 66 92 4D 7D 6B 0C | .PN..z./..f.M}k. +06 12 5C D6 F7 27 F9 66 16 4D 50 9B BF B1 11 8C | ..\..'.f.MP..... +5E A3 3C C5 89 FA 64 3B 90 24 0F 02 09 86 E3 83 | ^.<...d;.$...... +A7 92 D3 C1 6D 78 69 A2 69 6B 0A EC 6E 5E 9D 21 | ....mxi.ik..n^.! +A0 B7 94 9F 80 27 43 7E 79 D3 4B BC B2 41 32 D8 | .....'C~y.K..A2. +45 74 8B 48 D8 0F D3 C4 B2 54 B7 98 5E A7 4E 10 | Et.H.....T..^.N. +57 37 08 29 32 12 D4 56 52 E4 66 80 CA AE B4 D6 | W7.)2..VR.f..... +82 51 85 FE AB 9D 5C D7 19 04 7A B5 79 84 30 DB | .Q....\...z.y.0. +9C 13 48 EA 7B 0B 27 4A 41 26 AB 3C D1 87 CA 22 | ..H.{.'JA&.<..." +B1 EE 36 4E B9 B5 EF D7 24 E1 00 68 73 66 CB D8 | ..6N....$..hsf.. +65 20 98 D6 9E 14 FA 1D C2 5B 38 3C DD 98 1A B1 | e .......[8<.... +DA 6D 2D B9 D9 98 57 A9 E3 1E D3 92 AD AA 95 1B | .m-...W......... +AD 7F F3 C5 42 A1 C0 28 5D EB 97 82 DC 81 BA 7D | ....B..(]......} +C1 1D D3 5C B9 9F 48 C1 38 06 EC 7C 2D 0C AD 4E | ...\..H.8..|-..N +B7 BE 45 BF 87 A8 F3 E8 47 5D 15 1F B7 83 1D DA | ..E.....G]...... +D3 5A E3 74 2D A2 24 3B B2 DE 7B 91 AA AD 57 65 | .Z.t-.$;..{...We +C2 4F 36 2E 5F 7D 2F E3 C3 56 36 72 00 1A B6 56 | .O6._}/..V6r...V +12 F7 B3 E9 53 7D 03 AD | ....S}.. + +Flow Record: + RecordCount = 39 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132021008 [2024-04-15 00:00:21.008] + last = 1713132052026 [2024-04-15 00:00:52.026] + received at = 1713132148816 [2024-04-15 00:02:28.816] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 62570 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18601 + src addr = 17.248.209.66 + dst addr = 157.143.34.100 + out packets = 31 + out bytes = 6893 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 20.982 ms + srv latency = 0.000 ms + app latency = 0.659 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 97 31 ED 4A FD | ....z...v...1.J. +10 DC 67 8C 63 98 B6 DF BE 8B 69 CD 83 50 56 63 | ..g.c.....i..PVc +9E DB B6 30 5E C8 08 61 17 94 80 20 57 AD A0 84 | ...0^..a... W... +F0 8D 06 FE 36 3D 5B FE AD 33 AF 7C 19 B6 25 11 | ....6=[..3.|..%. +D0 C1 3C AD 56 A5 0C D2 3E EE B5 4F 13 02 00 00 | ..<.V...>..O.... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 D2 | ..+.....3.$... . +28 C3 36 14 8A FE 72 74 14 8D 77 23 60 0E 5A AF | (.6...rt..w#`.Z. +42 96 24 81 12 F4 41 55 85 38 D0 2F CB 1C 38 14 | B.$...AU.8./..8. +03 03 00 01 01 17 03 03 00 2A C0 0C 2C 4D D1 4C | .........*..,M.L +6B B6 74 A0 CD B3 CD A1 D6 8B E4 90 80 C2 D2 FD | k.t............. +2F 33 1C 77 4F 97 27 5E 46 1A 2B C4 C3 0C 6C 9A | /3.wO.'^F.+...l. +E9 04 BA 1E 17 03 03 11 25 FC 09 88 6D 62 A8 7C | ........%...mb.| +81 C3 54 13 F5 28 77 49 B2 E0 E1 33 91 EB 17 C7 | ..T..(wI...3.... +DE 18 4E 45 EC CB 31 A1 2E 95 48 CD 01 B5 0A 8F | ..NE..1...H..... +F2 D1 57 67 51 CC F1 A2 41 E5 3A DD CE 8F 2C 75 | ..WgQ...A.:...,u +D2 D1 5D 56 F4 97 C2 90 90 CD C2 3D EE A6 E2 19 | ..]V.......=.... +84 EA EB D1 3C 7B F2 71 70 0E C1 F2 61 E4 01 81 | ....<{.qp...a... +F2 4F 71 73 8C 59 CE D5 9B C7 E7 B3 7E 23 04 3E | .Oqs.Y......~#.> +DF 05 9A 31 8F 82 C2 EA 66 0F 67 4A 41 CA 97 C3 | ...1....f.gJA... +28 B4 03 DE 4A B4 A9 4E 30 C0 F2 FE 5A 87 D2 FA | (...J..N0...Z... +E9 C2 84 2D 77 26 3B CC EB BC CB 05 27 F6 84 42 | ...-w&;.....'..B +68 A0 95 B4 66 01 A6 0F EC 76 23 13 4E DD AE BF | h...f....v#.N... +A9 6F EF 6D 30 C7 D7 AF 39 36 54 FC B8 EF 96 BB | .o.m0...96T..... +44 D8 55 8E 33 9B B2 C1 D3 98 68 1A 6B 52 F3 70 | D.U.3.....h.kR.p +F5 30 23 76 DD 63 61 28 A4 96 D1 BA 63 95 E4 83 | .0#v.ca(....c... +AC 51 7F 72 1F A6 77 7F C6 2C 14 3C E5 1D C2 31 | .Q.r..w..,.<...1 +C3 54 4D 8C 7F 85 19 3B AA 72 C4 3F F2 59 A0 EC | .TM....;.r.?.Y.. +65 18 08 CE 78 24 0B 51 54 89 6D 3C E5 69 07 06 | e...x$.QT.m<.i.. +20 A7 89 CA 0A 0B D6 44 A4 8B D7 B6 07 DC AF CE | ......D........ +BD 72 59 EA 17 D0 38 9C BD 05 24 13 7D 10 BF F8 | .rY...8...$.}... +BF 9A 8D 97 51 1F 16 6E 55 9F 71 9B 9D 77 53 2E | ....Q..nU.q..wS. +D3 F6 01 C8 4E 99 98 90 20 C0 79 98 A0 4D D7 95 | ....N... .y..M.. +1D 16 9D 5F F3 A7 DC DF 97 90 37 F2 AD AA 94 88 | ..._......7..... +C1 51 68 6F 58 80 CD EB 94 DB 22 E5 83 A0 23 1B | .QhoX....."...#. +03 88 89 31 4A 92 17 0B BD 08 CD C9 49 CB AB 5C | ...1J.......I..\ +86 94 09 81 5E 23 DE D8 95 CA A5 EE A6 EA 84 AF | ....^#.......... +1C E6 82 AD 01 56 B2 F7 24 48 1D D2 16 D3 28 0A | .....V..$H....(. +FB E0 69 79 78 89 AA B0 7A 9D 07 50 81 F2 01 2E | ..iyx...z..P.... +ED 4B D2 65 DA F6 72 4F 00 DB A3 D6 9B 51 67 40 | .K.e..rO.....Qg@ +D3 EA F8 D7 95 03 D6 85 B7 3D 60 DA EB A1 35 57 | .........=`...5W +C3 2C A2 FC B3 DC FE 46 0F B9 DC F5 30 4B DE 09 | .,.....F....0K.. +B4 7A AF CB FE 1E 1C AC 48 DE B3 5C DE 92 89 EE | .z......H..\.... +24 7A 9A 95 05 3B B4 5C 56 68 1D CE 7F B3 EC 77 | $z...;.\Vh.....w +4F 07 61 2E 97 4C 5A EF 90 98 CB DB 44 11 82 B5 | O.a..LZ.....D... +AA 85 C0 46 DC 6A 24 33 2F B2 7F C1 BB 4A BA 98 | ...F.j$3/....J.. +0E E2 4C AF C6 DF 3C A2 A7 0B 4D AF B1 9C 25 B2 | ..L...<...M...%. +81 DC E1 66 D6 1D 92 F5 60 7E 4D 82 13 A9 81 13 | ...f....`~M..... +A2 EA 64 0A 6E 33 27 A1 40 26 16 5A E2 16 F8 C9 | ..d.n3'.@&.Z.... +0C DE C1 5F B0 1B 9E AF 3E 10 B4 9E 7F BA CC F9 | ..._....>....... +7D EA DB 2E 76 F2 82 53 D9 F8 D3 4F 23 D9 C5 5D | }...v..S...O#..] +B7 5F 1A 02 FA A9 D6 99 0F 48 67 98 C1 A3 BF 51 | ._.......Hg....Q +83 45 F4 97 AA 73 7A 8B 0E 70 35 F9 C7 94 74 7B | .E...sz..p5...t{ +08 15 83 93 AD 20 4E C0 14 A4 93 66 CD B5 68 BF | ..... N....f..h. +14 E9 13 35 27 56 A3 5A BA C1 95 99 E8 74 8A 3C | ...5'V.Z.....t.< +D5 14 11 BC 77 D2 1A 24 C3 12 79 1E CA F0 56 A9 | ....w..$..y...V. +A7 2D E1 DD E7 F4 7E 53 4E 9A 51 D0 97 51 F0 D1 | .-....~SN.Q..Q.. +44 14 9E 4C 34 FE 04 9A 48 6E BD 2E FC 46 E5 7A | D..L4...Hn...F.z +F4 E5 F7 9A 34 AE C5 D9 98 DC BF 7C C6 0B 50 64 | ....4......|..Pd +45 FC 1F B4 72 2C 25 90 B1 49 34 22 EB 38 A8 FE | E...r,%..I4".8.. +4B A6 15 7F 07 2B 33 11 D4 C6 D6 EB 22 7C 32 C2 | K....+3....."|2. +F8 0A 55 AF 96 BC 5E 37 CA D0 D8 B4 3A A8 29 A6 | ..U...^7....:.). +0A FF F7 BA 9C 5A 30 CB 7E 34 FB 08 9B E6 E5 55 | .....Z0.~4.....U +92 A3 5A 2C 1B C4 66 A8 12 89 4C 18 BD 7D 78 E8 | ..Z,..f...L..}x. +42 75 4F F3 3E F9 81 52 F3 8C A6 62 E4 BB EA 61 | BuO.>..R...b...a +D1 48 8A 17 73 E3 8F 3A 5B F8 C3 FA 6B B5 3E 9A | .H..s..:[...k.>. +91 05 CD CF 72 3F DB E4 D0 A7 E9 F8 EA AB 91 FB | ....r?.......... +50 6A 1A D0 9F 96 6A 7C 60 C6 24 6F E1 BF 85 0A | Pj....j|`.$o.... +8E B5 1F 0B 7E 07 DD DE 4F 83 6E AB B7 CF DC D0 | ....~...O.n..... +48 31 E1 3E 8B 26 85 81 79 D1 59 61 09 5F A1 DC | H1.>.&..y.Ya._.. +88 68 FA 36 74 61 CB FC D9 E7 A5 BB 93 10 54 D1 | .h.6ta........T. +FC 9D 31 ED D3 09 BC 1C CD 45 95 3F 80 AE E5 6E | ..1......E.?...n +2C 00 A9 CB BB 3A 3E 5B A0 64 25 86 B2 AD 1D 19 | ,....:>[.d%..... +38 A5 85 A8 92 E2 AB AB 63 44 E0 62 9F A1 41 41 | 8.......cD.b..AA +78 D9 B9 9C FE 5B AE 83 F1 29 DB 18 15 04 87 C2 | x....[...)...... +7D 40 BD 7F 5E 98 CE 28 1A 73 E7 1E 4B 09 8C AF | }@..^..(.s..K... +39 51 51 3B D7 4C 55 0D A8 A5 FB 7F 9F 64 FB E7 | 9QQ;.LU......d.. +BA C7 35 BB 4B BD 4C 4E C7 0E 07 E5 AC CE CF FC | ..5.K.LN........ +EF AF 36 10 8A F1 B5 4A 07 7B 52 F3 D0 A3 5E BE | ..6....J.{R...^. +25 43 1B BF 2A 11 2B B2 6F 3D F3 AB 2B 17 1C EB | %C..*.+.o=..+... +AA 32 7A EB E3 D7 57 04 FA 5C E2 F2 3E 44 1D A4 | .2z...W..\..>D.. +99 55 C5 31 AC 44 9D CF 36 AD C6 D1 B4 BF 48 06 | .U.1.D..6.....H. +57 DF 7E 05 08 D0 F9 B3 9B F9 B2 EA 79 AB A4 58 | W.~.........y..X +38 1B BB EE 0A D4 50 20 E3 6A 8D A3 F7 39 29 70 | 8.....P .j...9)p +46 4F 90 1E E2 A4 90 41 A0 71 64 D0 E2 9B 4F 92 | FO.....A.qd...O. +CC 75 26 00 48 A1 3C 21 8A 40 95 26 12 42 7C E4 | .u&.H..+..i. +66 74 FE F3 13 98 7D C3 0F 85 E2 E4 86 E0 C5 50 | ft....}........P +6D EC 88 46 39 9A 29 D2 | m..F9.). + +Flow Record: + RecordCount = 40 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132085509 [2024-04-15 00:01:25.509] + last = 1713132116456 [2024-04-15 00:01:56.456] + received at = 1713132206017 [2024-04-15 00:03:26.017] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 50258 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18599 + src addr = 17.248.209.70 + dst addr = 157.143.34.100 + out packets = 33 + out bytes = 6997 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 15.118 ms + srv latency = 0.000 ms + app latency = 0.281 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 51 F7 9E 89 EF | ....z...v..Q.... +56 2A 52 60 11 28 0E E9 55 AC 50 3E 74 23 8E 82 | V*R`.(..U.P>t#.. +22 DA 63 D3 27 E6 36 EE 88 21 56 20 B5 BD 9E 75 | ".c.'.6..!V ...u +60 02 71 70 F8 90 BD A9 94 99 18 BE 11 DF BB F9 | `.qp............ +B1 46 8A F7 44 97 BA C2 99 86 22 0C 13 02 00 00 | .F..D....."..... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 DD | ..+.....3.$... . +A7 C8 04 22 21 A7 CE DE 72 00 81 C8 A2 FB 0F 17 | ..."!...r....... +F0 D9 12 06 3F 9A FE 05 2E 4E A2 AA 59 FD 0D 14 | ....?....N..Y... +03 03 00 01 01 17 03 03 00 2A 58 A5 07 0E C9 D3 | .........*X..... +1D 28 9C 41 CC 67 47 F9 EE 99 5B 1C 9C 1E B1 C8 | .(.A.gG...[..... +FD 0A 30 C1 33 85 AF 15 21 A0 FE 4D A1 CC 20 39 | ..0.3...!..M.. 9 +0F E9 3F 52 17 03 03 11 25 BE 48 BC 30 5C 88 13 | ..?R....%.H.0\.. +E1 4F DD CB 5F 00 67 93 02 C0 53 9D 77 A1 E7 D6 | .O.._.g...S.w... +A1 82 11 47 ED 9E 38 E4 82 29 64 57 8C 62 F2 5A | ...G..8..)dW.b.Z +A8 BC 72 09 55 22 FF 99 D4 C4 1F 22 2E 38 35 04 | ..r.U".....".85. +51 C1 7B FB ED A0 DF 6F F2 9A 9B 5A 15 A4 D9 22 | Q.{....o...Z..." +A3 F5 62 68 A3 CD 1B DB A7 0C D6 0C BC 8C 5C 57 | ..bh..........\W +1A B4 49 47 F1 FE 80 AA AE 99 BA 7F 54 2D 05 A5 | ..IG........T-.. +07 2F 55 F9 7E 95 8E 67 44 A0 FD 63 AA E5 B0 A1 | ./U.~..gD..c.... +A5 53 3E 2D 49 6E D2 61 CE 45 2A A3 94 55 48 37 | .S>-In.a.E*..UH7 +86 14 34 F1 63 F2 44 4F 64 D9 0B E2 FB 1B 5B 00 | ..4.c.DOd.....[. +47 2E F2 09 91 20 98 98 D7 2D F9 36 7A 3D 59 03 | G.... ...-.6z=Y. +8C EE FD B5 C5 B1 A9 D1 7C 2E A9 66 1B E3 1B EA | ........|..f.... +D6 69 8A 51 F2 8C 05 70 F3 AA 8B C5 BE 12 D8 35 | .i.Q...p.......5 +8E E8 DF 4F 13 51 BE 05 E5 93 0A 74 42 EB CB 83 | ...O.Q.....tB... +13 8C 16 0B BF AF C8 E5 4C 38 92 29 7E 89 91 6D | ........L8.)~..m +FB 40 F8 AE 93 A9 44 1E 01 D6 A9 06 4F E8 E1 C5 | .@....D.....O... +9C 1F 95 A0 07 AE 17 1C E3 17 1F C6 67 AD 0A 42 | ............g..B +AD 5F AB 3F 34 14 DD DE DA 4D 94 08 D7 7F E1 17 | ._.?4....M...... +1D 7F B4 87 08 EA 39 D8 B8 4B ED BA 74 D6 3C 84 | ......9..K..t.<. +33 76 0A 1A EA 51 D8 0C D0 68 65 D0 EB E8 6A F8 | 3v...Q...he...j. +1F B6 D2 69 45 1D 0D 60 0D 2C 77 1F 26 AB FD 39 | ...iE..`.,w.&..9 +7C 05 57 5F 33 31 81 F6 77 06 87 AC B5 0A 2D 9A | |.W_31..w.....-. +B5 60 1A 0D F0 14 77 78 1E BB 8E 35 52 81 86 C4 | .`....wx...5R... +09 A5 A1 AE D7 D0 C4 1F 1E AA 3E 86 59 E4 75 EC | ..........>.Y.u. +E3 A9 94 F4 EC AF 24 49 01 74 58 B2 3D 47 D8 5A | ......$I.tX.=G.Z +15 6E 1C 00 9F AB 87 79 ED 52 E7 53 7B 5B C5 A6 | .n.....y.R.S{[.. +CF BA 99 DA 87 9D B9 F5 D1 E0 3E 58 3C 48 26 DD | ..........>XD....6i..=. +1F B4 5B 61 31 2E 01 97 E5 98 B3 7E 4B 7B 47 A1 | ..[a1......~K{G. +1D 97 F6 59 62 C5 96 07 2F C3 23 B7 92 A2 79 48 | ...Yb.../.#...yH +8E AF B3 33 40 0F 64 55 96 A6 26 84 D8 C8 47 B4 | ...3@.dU..&...G. +BE 37 1C A5 7C A5 6F 49 64 ED C3 5E 08 08 1E 0D | .7..|.oId..^.... +4F A4 B3 6E DD E8 B5 41 3F BA C5 2A DD 23 C7 BF | O..n...A?..*.#.. +FF 94 16 D7 FB B5 46 BF 4B 72 E6 59 CF 08 27 D0 | ......F.Kr.Y..'. +1F 01 E2 80 E0 B9 88 88 D2 57 07 2E 92 7D 0B FF | .........W...}.. +E4 C3 F9 6D 3E D3 9E 0E BF CC D4 32 60 05 65 7C | ...m>......2`.e| +5A 3C 2B 35 04 37 02 91 9B A4 E0 1E 2D 0F 70 DF | Z<+5.7......-.p. +8E 7A 69 43 EB 84 3E 72 09 72 2D DA 1A 47 47 41 | .ziC..>r.r-..GGA +81 FE F2 7F E6 DC 56 F8 6F 95 9B F8 5B 74 EF 38 | ......V.o...[t.8 +88 DC BD 50 18 B2 0E A6 88 81 C3 42 46 DA EA 65 | ...P.......BF..e +7B 4E 18 86 EB 64 0C 3A F7 25 0E 00 6C 5E BB 55 | {N...d.:.%..l^.U +DA 1D 85 FC 2A BB 1C 9A 9B B8 FC C6 94 D7 3B 28 | ....*.........;( +F2 55 83 B5 E9 D3 F3 60 1E A9 47 BD 10 84 AD 2D | .U.....`..G....- +0C E7 DF 27 E4 E5 9D 4B 5E E5 45 6A 6F 88 A4 C3 | ...'...K^.Ejo... +EC 53 AC E0 2C 0A 20 22 C0 5A B1 37 69 99 31 E1 | .S..,. ".Z.7i.1. +C2 D5 6B 16 3A 18 B6 A5 A6 5D 6C F7 31 CA 3F EB | ..k.:....]l.1.?. +1B 41 9B EF 33 F3 53 F6 0D 76 8D AC CE 0A 31 95 | .A..3.S..v....1. +6B 45 26 A4 8E 6B 22 84 68 69 60 F5 19 55 EC 4D | kE&..k".hi`..U.M +82 97 A5 38 15 4E E8 69 2B CC B8 23 8E 64 D1 C5 | ...8.N.i+..#.d.. +25 78 BB D5 59 27 58 D3 C7 E9 9C 4D 85 C7 6C E7 | %x..Y'X....M..l. +4E 2C 92 63 8E A1 28 77 B1 30 B6 74 92 98 0C 0E | N,.c..(w.0.t.... +2F 12 E3 97 64 B6 05 A0 AA 3B 78 A5 DA 89 1F 30 | /...d....;x....0 +25 44 4F 8F FE 61 49 67 BD 83 58 C5 6D A9 48 A1 | %DO..aIg..X.m.H. +6A CE 33 C6 79 6C 80 2C B9 63 44 98 A3 40 1D 99 | j.3.yl.,.cD..@.. +6E 09 7C AC EA 03 01 2E 81 A7 57 70 33 A2 2D CD | n.|.......Wp3.-. +17 C2 B9 0E 85 89 97 12 85 2A A2 FF 61 E6 87 43 | .........*..a..C +87 F8 FF 65 DA 46 EF 9D 1D 7F 87 58 E7 64 C9 24 | ...e.F.....X.d.$ +F7 FD E2 EC 0E 5B 70 D2 D6 61 73 C4 A3 95 2C 86 | .....[p..as...,. +D3 6D 3F BA A0 86 12 C2 F8 67 26 E0 8B 31 3A 79 | .m?......g&..1:y +C6 DF 14 21 68 F3 87 C8 72 10 90 C2 1B 74 D2 E7 | ...!h...r....t.. +01 07 AF 74 34 D6 BC 06 CD 47 7D 27 D4 9B C8 B5 | ...t4....G}'.... +17 FB 30 B6 C9 D5 28 2F 6D DC AB 28 75 AB B0 96 | ..0...(/m..(u... +6A 15 B0 14 DF 2B 3E 7D 60 72 5A 78 90 83 E5 E2 | j....+>}`rZx.... +70 92 E9 66 5D D8 47 15 46 5D 93 C0 B7 22 6B 1E | p..f].G.F]..."k. +74 56 19 73 D4 23 A5 55 33 98 9B D7 9D C9 F3 62 | tV.s.#.U3......b +C5 46 1D DA 36 55 8F 3D D5 CE 8C 68 6A CE 5C 6F | .F..6U.=...hj.\o +3A 06 15 F4 70 19 5E 39 D1 B8 A8 99 85 71 0F 05 | :...p.^9.....q.. +52 FC 2E FF AD AF 32 69 BF D4 5D 45 5B 7E 58 7E | R.....2i..]E[~X~ +87 14 38 0E E7 4F 27 97 64 2B B3 8F F4 61 C8 68 | ..8..O'.d+...a.h +BA E1 73 08 D5 C7 CF 03 AD 29 AF 10 2E 22 E0 44 | ..s......)...".D +3B D9 B9 2B 31 E3 99 00 39 19 2A 10 C1 BC 33 C6 | ;..+1...9.*...3. +1F 18 AE 7B 2C 92 DE A9 40 B4 3D 2B 9D B1 35 BC | ...{,...@.=+..5. +81 DB 35 46 7D 06 1D B8 95 6B 1D 6D A2 5C 91 A3 | ..5F}....k.m.\.. +79 A3 D1 78 82 13 7F 06 | y..x.... + +Flow Record: + RecordCount = 41 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 697 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132277481 [2024-04-15 00:04:37.481] + last = 1713132278578 [2024-04-15 00:04:38.578] + received at = 1713132344717 [2024-04-15 00:05:44.717] + proto = 6 TCP + tcp flags = 0xdf CE.APRSF + src port = 58134 + dst port = 443 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 1668 + src addr = 157.143.34.100 + dst addr = 17.253.15.204 + out packets = 13 + out bytes = 6168 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 14.757 ms + srv latency = 0.000 ms + app latency = 1.106 ms + in payload = 517 + TLS version = TLS 1.2 + sni name = mesu.apple.com + ja3 hash = 201976c7f7ca335fd8e2b45260f666fa + ja4 hash = t12d2014h2_a09f3c656075_14788d8d241b +16 03 01 02 00 01 00 01 FC 03 03 34 28 A0 76 84 | ...........4(.v. +84 5D EC BC 34 9C AD 77 F6 AB A1 D7 53 04 E9 E6 | .]..4..w....S... +7E F8 C4 49 9E 3A 36 17 F5 94 FE 20 9D CA 84 52 | ~..I.:6.... ...R +7B 00 CE 4D 73 F3 1F 26 60 C9 CC 91 F3 97 DE F4 | {..Ms..&`....... +69 A1 01 EC 83 B7 9A C5 CA B5 94 A5 00 2A 2A 2A | i............*** +13 01 13 02 13 03 C0 2C C0 2B CC A9 C0 30 C0 2F | .......,.+...0./ +CC A8 C0 0A C0 09 C0 14 C0 13 00 9D 00 9C 00 35 | ...............5 +00 2F C0 08 C0 12 00 0A 01 00 01 89 0A 0A 00 00 | ./.............. +00 00 00 13 00 11 00 00 0E 6D 65 73 75 2E 61 70 | .........mesu.ap +70 6C 65 2E 63 6F 6D 00 17 00 00 FF 01 00 01 00 | ple.com......... +00 0A 00 0C 00 0A EA EA 00 1D 00 17 00 18 00 19 | ................ +00 0B 00 02 01 00 00 10 00 0E 00 0C 02 68 32 08 | .............h2. +68 74 74 70 2F 31 2E 31 00 05 00 05 01 00 00 00 | http/1.1........ +00 00 0D 00 18 00 16 04 03 08 04 04 01 05 03 02 | ................ +03 08 05 08 05 05 01 08 06 06 01 02 01 00 12 00 | ................ +00 00 33 00 2B 00 29 EA EA 00 01 00 00 1D 00 20 | ..3.+.)........ +A7 C9 F3 1D 0F 6A A2 EF 2D 13 2B F6 09 3A 40 26 | .....j..-.+..:@& +62 46 1E 85 9D 70 D4 57 64 83 8B 36 29 F7 98 12 | bF...p.Wd..6)... +00 2D 00 02 01 01 00 2B 00 0B 0A 1A 1A 03 04 03 | .-.....+........ +03 03 02 03 01 00 1B 00 03 02 00 01 6A 6A 00 01 | ............jj.. +00 00 15 00 C0 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 | ..... + +Flow Record: + RecordCount = 42 + Flags = 0x00 PCAP v1, Unsampled + Elements = 5: 1 2 12 15 29 + size = 1374 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132381236 [2024-04-15 00:06:21.236] + last = 1713132382231 [2024-04-15 00:06:22.231] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 61866 + src tos = 0 + fwd status = 0 + in packets = 20 + in bytes = 5794 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +CD 00 00 00 01 00 08 F4 50 1D 41 A2 D1 A7 84 00 | ........P.A..... +43 9F C7 1F ED 58 42 AF D3 1F D6 9C F4 15 5B B0 | C....XB.......[. +2A F5 23 EE 4E CE 8A 44 AC DD 3E 54 01 24 C9 C4 | *.#.N..D..>T.$.. +2C DD 15 8B 73 78 5E 2E 69 4D E9 F6 7F B1 36 32 | ,...sx^.iM....62 +2E E3 BF D7 A6 CF A2 F3 A1 8B 6F 1A F9 75 73 3F | ..........o..us? +2E 56 02 9F 30 62 80 F9 1E E5 58 3D 9A 26 6F 65 | .V..0b....X=.&oe +46 8D 2A 77 D2 6A B1 E6 03 C4 D5 30 38 08 1E AE | F.*w.j.....08... +5B F8 4F 77 17 92 98 3F 34 79 96 6C 29 46 10 AD | [.Ow...?4y.l)F.. +E3 16 31 36 4D 15 FC DE 8B F9 C3 27 BE 8F 8B EA | ..16M......'.... +C8 E2 7C C4 D6 EF 31 18 26 E7 AD 5E 8A 8A C9 BB | ..|...1.&..^.... +E3 A4 0D F1 94 59 34 E9 8C C4 BD F7 75 EA 04 6F | .....Y4.....u..o +71 FA D7 7F 56 9E 04 43 78 2B 00 DF 84 33 BF 16 | q...V..Cx+...3.. +69 77 E8 B9 1E 1B 91 9C 98 A7 39 6D 82 E6 8E 18 | iw........9m.... +64 0C 4B 25 3F 42 F4 65 FA 53 D1 99 C6 66 01 AE | d.K%?B.e.S...f.. +B4 49 4C 11 38 20 08 5B 48 73 26 BC 6F 0D 24 98 | .IL.8 .[Hs&.o.$. +3A CD 38 DF E1 1C 62 40 81 C9 22 B5 61 73 FB 0B | :.8...b@..".as.. +1A 50 B1 FA 1B 41 C5 A5 DF 41 FC 7F CB 8C BC 01 | .P...A...A...... +7A 73 8D BB 9B 8B 4D 48 6F CD 42 FA 87 A4 2C E0 | zs....MHo.B...,. +AC 30 DA D6 CC DE C3 99 A2 2A BD DE 29 C7 98 A4 | .0.......*..)... +D4 DE CD 4D 4B 5E 68 56 AB 6C CC 39 12 7A 38 14 | ...MK^hV.l.9.z8. +35 89 27 9C 11 63 24 72 3C B9 AC 1B 39 E3 C2 D2 | 5.'..c$r<...9... +E0 4F 74 9B C8 C9 B2 AA 39 13 D8 C7 E1 43 64 59 | .Ot.....9....CdY +17 F5 BB DB 01 CD 8F 3C 23 25 65 03 48 9C 6E 85 | .......<#%e.H.n. +7F 90 68 F9 9A C5 B0 9E 7E F2 85 15 29 CC 1B 36 | ..h.....~...)..6 +1D 9B 4B 6C 76 2E 83 ED 94 5D 8B FC AD 0C 3B B3 | ..Klv....]....;. +5F 71 C8 F4 F5 82 72 84 5C 62 F9 8E 04 98 6E EE | _q....r.\b....n. +28 D8 A6 A7 DA 09 92 9F C9 7C C4 BA DD 52 84 59 | (........|...R.Y +EA F8 18 DB 18 D7 9B 68 AC F9 0C C8 B1 3B 9F 18 | .......h.....;.. +15 75 09 FC 60 1D 25 DD 66 54 11 98 3E 1D C8 35 | .u..`.%.fT..>..5 +67 40 84 ED 2B EB 00 5B 6C C6 96 B4 B3 9D 52 45 | g@..+..[l.....RE +EF 30 DD 9E 27 F9 88 7B 20 8C 70 2E FB 4E C9 7E | .0..'..{ .p..N.~ +AE D1 F3 A6 A3 31 FA 8C 9A DA 39 2B 6C 90 D5 3F | .....1....9+l..? +BC BA FE 25 EF 46 4C 9A 46 A4 42 D3 AA 8E A8 1B | ...%.FL.F.B..... +06 4F DB 38 91 9D 44 C8 4C 1D 29 CB 70 34 36 EE | .O.8..D.L.).p46. +42 51 6F 50 91 02 CB F2 04 33 DF BC 45 2F 52 24 | BQoP.....3..E/R$ +D0 8B 76 F3 D4 C3 77 32 19 41 E5 49 D0 2F 7E 81 | ..v...w2.A.I./~. +59 F0 B1 61 68 4A 69 CC 8B D0 98 B9 2A 22 67 22 | Y..ahJi.....*"g" +5D D2 73 6E 28 02 6A D1 70 C9 07 01 C5 96 DC BD | ].sn(.j.p....... +4A 49 7B 5D 47 59 3D 13 3F FE CE 0B CA E2 16 24 | JI{]GY=.?......$ +FE 2E 5B B1 FF 76 97 5B A2 93 37 23 37 8B 5C 6A | ..[..v.[..7#7.\j +D5 EA 1D BA 4D 4E D7 74 27 3B 82 C5 F5 9E BB D4 | ....MN.t';...... +C0 69 C9 EC 3C 20 92 32 61 1A 59 42 56 DC CB AE | .i..< .2a.YBV... +51 AC 88 CD 9B D2 42 2A 56 CF 89 9C FF A0 97 AD | Q.....B*V....... +45 90 B3 AC F1 3C 5E EB 45 18 90 D5 7C 7F BD 90 | E....<^.E...|... +17 C8 B8 61 F9 2B E3 75 F4 60 45 DB 51 41 7F 16 | ...a.+.u.`E.QA.. +61 8C 7C 02 C5 A3 FC 66 61 5F 5E 3A 36 9A 94 79 | a.|....fa_^:6..y +37 37 9F 5B 78 A6 A2 B9 14 2C 3F BC A0 10 58 19 | 77.[x....,?...X. +1A 15 9F 76 71 D2 41 0C 07 90 49 6C 39 65 CA DA | ...vq.A...Il9e.. +17 65 1B 7D FF 76 53 70 6E AF 10 1F B4 00 4A 51 | .e.}.vSpn.....JQ +AF DA 1B 4A 8A 4D 15 E5 EC 59 A5 0D F8 C6 B2 FA | ...J.M...Y...... +85 4E C1 E3 EA BE AE CC EC BC 69 BD 53 D1 D6 52 | .N........i.S..R +AA B3 57 21 47 7F 99 19 7A D4 97 66 FF 69 38 8E | ..W!G...z..f.i8. +2A 2D BD 99 EE 0C E8 86 CD 48 77 DA A9 61 9A 90 | *-.......Hw..a.. +66 0D E0 78 CF AE B0 06 DF 84 F7 C7 8F B0 B8 B0 | f..x............ +6E 57 99 49 17 91 F9 E0 21 15 92 D0 E8 EE 36 65 | nW.I....!.....6e +7B 5D 2E 46 A6 0F E9 FE 3C AF 19 82 C8 50 BE D4 | {].F....<....P.. +10 E8 9E EE D6 07 10 D2 41 43 70 8F B1 F5 BA DE | ........ACp..... +1C 1A 7A F8 B8 6B 3F 0F C4 39 59 71 93 86 A2 0E | ..z..k?..9Yq.... +9E 79 75 B4 FC 17 D9 50 38 14 27 AC B0 ED 6A 19 | .yu....P8.'...j. +AD EC 00 00 00 01 00 08 F4 50 1D 41 A2 D1 A7 84 | .........P.A.... +40 E0 8B 6C 3D FC 69 FB B5 56 28 68 AD 17 D5 B4 | @..l=.i..V(h.... +A0 2B EE 4F 19 E2 BD FB 8A A9 A9 25 B5 9E 0E F7 | .+.O.......%.... +2D 38 13 4C 20 02 4F 51 9A B3 D9 36 D7 03 A7 F6 | -8.L .OQ...6.... +E7 7F 76 E3 CF 78 46 9F 2A F0 A8 B7 3F 87 33 A5 | ..v..xF.*...?.3. +E7 F2 55 E6 8D CA 9C 75 8B 3B 78 4C DE BF ED 50 | ..U....u.;xL...P +AF 43 37 34 10 F6 9D 84 EA 67 AB 9D 6B C0 28 5B | .C74.....g..k.([ +9A 31 07 B4 AF ED 89 B2 28 BD E6 68 8E 97 99 D7 | .1......(..h.... +73 90 0B 1A E8 62 8E 2D BB F9 E9 2F F1 31 E6 D1 | s....b.-.../.1.. +C0 44 0E EA 02 39 AF EE 68 D0 2F 6B 0C AB 0E D4 | .D...9..h./k.... +CF E6 44 23 AE 85 0E BD 60 A7 44 82 4D D7 1C BB | ..D#....`.D.M... +0A 53 68 64 EA E2 24 BF 95 90 6E 1A B8 FA 24 79 | .Shd..$...n...$y +67 48 9C 35 F3 BE 78 08 6C B6 91 AB CF 66 A6 78 | gH.5..x.l....f.x +5B E1 BF 9F 0C 45 ED 54 FB 27 C8 6C 01 3A 22 2A | [....E.T.'.l.:"* +EB E7 50 A9 17 B9 8C C5 C7 93 D6 3F DE E6 AD C0 | ..P........?.... +AD 52 5C AD 91 03 AD C0 96 3A 3E 42 6F A4 1D 2A | .R\......:>Bo..* +FF 8B 51 59 A9 07 A1 9D 34 D1 6B B6 00 ED 04 FD | ..QY....4.k..... +39 44 F6 F2 4D CF 9A 92 16 A1 4E BE 0C 97 9A 22 | 9D..M.....N...." +D5 30 6B 1D B4 E0 E4 9C 78 C9 40 99 84 69 DD 01 | .0k.....x.@..i.. +CA BB | .. + +Flow Record: + RecordCount = 43 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 697 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132069800 [2024-04-15 00:01:09.800] + last = 1713132070148 [2024-04-15 00:01:10.148] + received at = 1713132148817 [2024-04-15 00:02:28.817] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 61318 + dst port = 443 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 1657 + src addr = 157.143.34.100 + dst addr = 142.250.203.115 + out packets = 11 + out bytes = 5919 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 10.143 ms + srv latency = 0.000 ms + app latency = 64.929 ms + in payload = 517 + TLS version = TLS 1.2 + sni name = live.cast4.audio + ja3 hash = f436b9416f37d134cadd04886327d3e8 + ja4 hash = t12d3113h1_e8f1e7e78f70_1b3407e2c936 +16 03 01 02 00 01 00 01 FC 03 03 8D E4 2D FF D2 | .............-.. +3F DE 98 1E 84 D7 12 88 63 72 80 E6 02 63 8A BD | ?.......cr...c.. +02 09 D5 8D C4 1C 9B 09 F8 72 11 20 55 71 3A DB | .........r. Uq:. +A1 BF C9 6A C2 65 7A B4 4C 1D 02 EA 5D 1C AD CE | ...j.ez.L...]... +86 3C E9 B0 BA B1 99 FD 0E 42 88 8B 00 3E 13 02 | .<.......B...>.. +13 03 13 01 C0 2C C0 30 00 9F CC A9 CC A8 CC AA | .....,.0........ +C0 2B C0 2F 00 9E C0 24 C0 28 00 6B C0 23 C0 27 | .+./...$.(.k.#.' +00 67 C0 0A C0 14 00 39 C0 09 C0 13 00 33 00 9D | .g.....9.....3.. +00 9C 00 3D 00 3C 00 35 00 2F 00 FF 01 00 01 75 | ...=.<.5./.....u +00 00 00 15 00 13 00 00 10 6C 69 76 65 2E 63 61 | .........live.ca +73 74 34 2E 61 75 64 69 6F 00 0B 00 04 03 00 01 | st4.audio....... +02 00 0A 00 0C 00 0A 00 1D 00 17 00 1E 00 19 00 | ................ +18 33 74 00 00 00 10 00 0B 00 09 08 68 74 74 70 | .3t.........http +2F 31 2E 31 00 16 00 00 00 17 00 00 00 31 00 00 | /1.1.........1.. +00 0D 00 30 00 2E 04 03 05 03 06 03 08 07 08 08 | ...0............ +08 09 08 0A 08 0B 08 04 08 05 08 06 04 01 05 01 | ................ +06 01 03 03 02 03 03 01 02 01 03 02 02 02 04 02 | ................ +05 02 06 02 00 2B 00 09 08 03 04 03 03 03 02 03 | .....+.......... +01 00 2D 00 02 01 01 00 33 00 26 00 24 00 1D 00 | ..-.....3.&.$... +20 54 05 CF AA 99 70 B9 66 FE B1 28 85 C3 FD D7 | T....p.f..(.... +F5 D8 D5 53 E4 A9 64 5E 10 2E 11 03 4D 0E AF 01 | ...S..d^....M... +01 00 15 00 B0 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 | ..... + +Flow Record: + RecordCount = 44 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132053217 [2024-04-15 00:00:53.217] + last = 1713132084155 [2024-04-15 00:01:24.155] + received at = 1713132148817 [2024-04-15 00:02:28.817] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 57665 + src tos = 0 + fwd status = 0 + in packets = 28 + in bytes = 18476 + src addr = 17.248.209.66 + dst addr = 157.143.34.100 + out packets = 31 + out bytes = 6893 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 15.616 ms + srv latency = 0.000 ms + app latency = 0.366 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 BE AC 7B A5 70 | ....z...v....{.p +C6 14 FB 55 57 7D F7 9B 3B 21 E6 64 85 38 E0 78 | ...UW}..;!.d.8.x +7F B7 57 27 54 1A 89 25 FB 92 4E 20 A9 E1 BF 80 | ..W'T..%..N .... +95 64 A5 A3 2B BA 8A C8 8D 92 32 AC 36 EE 42 E2 | .d..+.....2.6.B. +34 75 9D 32 A3 8A 42 72 72 5B BA ED 13 02 00 00 | 4u.2..Brr[...... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 C0 | ..+.....3.$... . +73 73 29 17 46 C8 24 A0 88 CF 00 65 82 DB 99 81 | ss).F.$....e.... +A1 97 45 7A 95 AA 5D 59 67 25 D9 C7 39 CD 0B 14 | ..Ez..]Yg%..9... +03 03 00 01 01 17 03 03 00 2A 32 DB E1 2B 9D AD | .........*2..+.. +1E CE 8B 06 31 09 35 0D 51 43 78 10 6C CB DF A9 | ....1.5.QCx.l... +0C 95 84 D7 11 13 E9 D3 D1 C4 29 65 5B 1D C9 CD | ..........)e[... +A3 54 CB 46 17 03 03 11 25 D3 26 96 3C ED CF 17 | .T.F....%.&.<... +37 91 37 69 42 79 4D B4 3C B1 E2 D3 E3 AA 46 4C | 7.7iByM.<.....FL +6D 17 C5 60 34 51 79 BB 88 11 3A B5 E9 44 4A 55 | m..`4Qy...:..DJU +47 C7 AD 22 B2 12 4D C0 B1 4B 7F 15 BD 5E CD 6C | G.."..M..K...^.l +05 76 4A BF 1A 6F 31 4F 09 69 39 F6 C8 F2 E0 F8 | .vJ..o1O.i9..... +F8 3C 15 26 5A 15 03 B4 C1 2A DF AF 7B 22 1B A1 | .<.&Z....*..{".. +EB 78 0C 5C 7B B2 51 2A 29 A5 8B 93 17 C1 23 D4 | .x.\{.Q*).....#. +67 D5 EF 12 8E CB 77 1F 27 89 37 5B 76 AB 1F A4 | g.....w.'.7[v... +A2 8E 4E FD 8F 04 16 B9 DB FB DB C1 32 3F D0 53 | ..N.........2?.S +E8 41 CE 29 AA 6E 83 31 FC BB 16 4D 0F 63 06 75 | .A.).n.1...M.c.u +52 CC 84 49 AD 0D 3A 84 1E B2 2B 43 AF 3B 23 74 | R..I..:...+C.;#t +ED 31 FF E8 45 6E AC D6 65 C3 74 30 87 0A 7D 77 | .1..En..e.t0..}w +CE FA 34 FB 4D FC 94 74 54 9E 89 56 D7 B7 66 17 | ..4.M..tT..V..f. +39 45 F6 E7 13 4A FA D5 9C 13 83 5B 74 3C 5F FE | 9E...J.....[t<_. +B2 6B 81 27 2E 7F 7D 06 A7 CC DA 2A 35 55 11 AE | .k.'..}....*5U.. +C2 F4 E4 95 DE 37 CD 4C 8C 0A C4 43 57 7F C1 F6 | .....7.L...CW... +DD 92 66 05 C1 41 26 E8 14 B7 EB AF 86 0F C3 B7 | ..f..A&......... +37 F3 44 16 7C BB D7 86 8A DA 89 8C 86 0B A1 6A | 7.D.|..........j +8A 24 25 A6 D1 71 23 62 02 FD 79 9F 00 37 97 AA | .$%..q#b..y..7.. +0E 9F FE C8 7E FB 3A 59 AC E1 69 2A F5 A4 C3 B8 | ....~.:Y..i*.... +68 BA 4C D4 45 E7 7A B9 FD 46 1B 55 CE FF C5 45 | h.L.E.z..F.U...E +18 AD C3 9B 84 C7 FE A7 C6 92 9D BF 4B C3 E6 4A | ............K..J +05 34 7C 21 5C 83 7C 96 C7 5A D7 6E A1 69 45 2F | .4|!\.|..Z.n.iE/ +3C 46 EA 00 30 A5 D5 35 F7 92 38 4F A3 5B 03 09 | ..OJ.... +8C 46 BF 90 96 3E 36 BF 12 FA 1E B5 FD 3D 51 CA | .F...>6......=Q. +1D A0 B2 95 A7 44 97 3D 85 7A 7F 26 AC 61 C6 CA | .....D.=.z.&.a.. +11 93 C3 2F B9 5E 05 79 A9 96 14 8F 50 33 A2 63 | .../.^.y....P3.c +DA 89 2A D1 FE 8A 40 AA F3 24 15 BD EB 63 F7 2A | ..*...@..$...c.* +79 5E 1A 4D 56 14 13 48 F6 B7 8C 52 3F 10 BC 07 | y^.MV..H...R?... +6F E8 53 5D 2B 5F 24 EB E1 79 E6 02 43 A8 89 93 | o.S]+_$..y..C... +AA 06 A7 5A 87 2E 8E 01 A0 06 95 EB 7D DD CF BB | ...Z........}... +6A 6F 70 0D 89 AE CB 14 2A 7D 0F 61 1C 5E C0 B9 | jop.....*}.a.^.. +20 C2 4E 4E 53 87 10 7B 50 D2 BA 8D 37 CD D7 27 | .NNS..{P...7..' +9D 7A 62 2A 23 45 96 7C EF D5 FA 8B CA 04 4F C6 | .zb*#E.|......O. +9F 6E EC 3A 8B 10 FA 63 34 22 CC FE 09 0B 1B 23 | .n.:...c4".....# +9B 29 52 08 13 E8 84 72 8F EE AA A1 34 CD EA F5 | .)R....r....4... +48 3E 57 5F 3C 78 8C A3 C6 82 41 9F 2D CF 19 C3 | H>W_.k(.. +75 11 D0 B8 FD B1 20 B0 99 8B 3E B9 54 DB EF C4 | u..... ...>.T... +DD C0 8E B8 1D EF 91 AB E2 91 19 C1 D1 B7 B6 AD | ................ +EA 98 8F 67 FD 7F 52 89 21 01 51 04 9C 05 35 35 | ...g..R.!.Q...55 +4C 66 66 0A 72 A8 50 46 34 D1 D6 FE 11 90 F5 CA | Lff.r.PF4....... +9E 3E B7 71 89 96 AA DC 6F E5 1C 48 52 9A ED 99 | .>.q....o..HR... +E1 B1 6A 30 F0 3F 88 60 46 2E 91 ED E3 8F 40 9C | ..j0.?.`F.....@. +45 A1 DB 7B E1 99 19 C9 40 3C 6B 7C 25 F5 EC 93 | E..{....@S. +93 F8 0E 25 27 F9 C8 51 75 54 38 B6 04 6A 9C 4C | ...%'..QuT8..j.L +EE 7C E8 05 D6 5B 15 60 FD 85 40 C3 92 F8 8E B4 | .|...[.`..@..... +15 6C 25 6E 50 13 CE 68 70 EC 5A 94 7E 72 2D F4 | .l%nP..hp.Z.~r-. +4F FA 5E B0 61 20 63 55 00 DA F6 16 DB 56 41 81 | O.^.a cU.....VA. +B4 1E 2F B8 4F 6F 51 FA E7 E6 44 98 31 DA 2C D4 | ../.OoQ...D.1.,. +46 68 AE 04 AC E8 CB 78 DC 70 84 6D 03 66 82 F1 | Fh.....x.p.m.f.. +22 6C 78 8B 15 90 19 A6 C6 3B 9D D2 EE 85 75 06 | "lx......;....u. +E6 84 E4 E8 65 09 2F C8 4E A8 14 D1 4D 63 C4 F2 | ....e./.N...Mc.. +5D 34 6B ED 6E 13 AD 12 0F 50 2B D4 AA D2 AE D9 | ]4k.n....P+..... +13 BE 1F 91 9E 3F 55 E2 61 21 D5 D2 BE 45 FE 89 | .....?U.a!...E.. +4F E4 41 AE F2 5F 6F 29 82 BB EE AA 9C 12 08 72 | O.A.._o).......r +75 F2 86 C0 B8 3E D2 BC 89 51 35 DE 0E 29 80 37 | u....>...Q5..).7 +04 0B 03 4A B4 28 6D 29 C6 13 1F 53 EE B5 D5 4E | ...J.(m)...S...N +5C 3C 9C 0E 97 F4 7D 3C 63 69 69 0D 61 8C D7 CD | \<....}........{..@. +CA AF 56 EE 75 0D DC 54 8F 95 07 21 EB 00 8E E9 | ..V.u..T...!.... +C0 F6 A2 09 17 03 03 11 25 0B 3C 28 76 22 1E 2F | ........%.<(v"./ +7E 43 BF E5 18 1F C4 28 04 1D 02 29 85 E3 7E 6F | ~C.....(...)..~o +4B 6C 32 FF 65 13 6C C2 2A B2 62 C6 6E 76 FB 96 | Kl2.e.l.*.b.nv.. +1D A3 BB A5 02 B4 F9 D1 C0 53 AF CA 89 99 44 ED | .........S....D. +38 20 5B B8 D3 0F EC FF 4A FA 58 91 7D 05 5F A8 | 8 [.....J.X.}._. +E6 71 1D F4 BD 27 CC 90 EB 99 8B 05 09 91 92 84 | .q...'.......... +2A D2 3F D9 16 68 2A EC 42 E6 BE 1C 6E 9A D3 0E | *.?..h*.B...n... +13 4A 1D 1F EB 30 A0 86 39 4D 7E 60 6A 3F 66 71 | .J...0..9M~`j?fq +95 9A F0 7C D4 72 3F 64 4F 86 60 55 C4 15 D4 29 | ...|.r?dO.`U...) +B0 16 33 19 39 47 66 94 3F 16 61 7C CC D2 5A A3 | ..3.9Gf.?.a|..Z. +F2 27 0D 9E 35 51 B3 89 0A 85 1E 41 6F BA 1A 77 | .'..5Q.....Ao..w +26 81 01 97 CF 54 F9 2C 78 77 05 D3 31 30 B0 E7 | &....T.,xw..10.. +24 FB E3 30 7D DB DD 93 19 F6 D4 24 22 E3 DA 41 | $..0}......$"..A +9D 59 7D 86 42 D6 0D 05 8B D8 16 C3 DA FB 38 0C | .Y}.B.........8. +13 71 BC 74 3E F1 BB 16 7C 89 FA E6 B8 8C 5E 28 | .q.t>...|.....^( +C1 BD C2 EE C4 D4 91 D6 D7 8B 70 57 B1 ED 47 72 | ..........pW..Gr +57 2F CC B2 62 E8 2E F4 8C 9D 45 E3 F2 7A C7 75 | W/..b.....E..z.u +89 34 B2 5C 20 0E FA 3D 2B 0D AD E9 B7 B2 7C D3 | .4.\ ..=+.....|. +B9 0F 12 F1 88 19 0F 1A 89 4A 1A 12 E5 42 3D 61 | .........J...B=a +F5 01 6B 56 5D 45 CB 3C 11 D9 F7 E3 02 3B F2 5A | ..kV]E.<.....;.Z +72 A1 88 F1 5A C1 39 96 94 90 14 03 7C 9E A5 2E | r...Z.9.....|... +73 04 DB AD D7 22 17 13 82 51 EE 78 77 63 F9 26 | s...."...Q.xwc.& +78 1A DC 80 D7 C3 23 94 5C 15 D8 0F E2 9D FC 20 | x.....#.\...... +40 49 53 36 3B F7 5A 48 3C D2 3B 5F F1 87 87 0F | @IS6;.ZH<.;_.... +00 DB A9 E8 27 FF 3B A1 05 93 EC A6 CC 8A 64 62 | ....'.;.......db +A3 E3 6E 52 02 84 EC A1 12 97 E6 F2 C0 54 E1 9C | ..nR.........T.. +74 EF 0B 93 D0 82 C2 6F 33 BD D1 F1 EB 48 6F BA | t......o3....Ho. +74 31 E0 98 23 11 CF 8C 0E C1 27 11 4E 91 65 E6 | t1..#.....'.N.e. +5C DF 7B 6E 5D 92 B3 3E C9 9F 1C 84 13 1E 5B E2 | \.{n]..>......[. +1D 14 F4 03 A3 5B 7D BC 30 F3 6C 00 F1 25 5B F0 | .....[}.0.l..%[. +94 80 11 B5 75 A3 16 59 C6 70 D1 53 6E 62 96 77 | ....u..Y.p.Snb.w +01 1D B1 3F 12 41 F5 93 F1 7D 58 E8 2A 60 43 1C | ...?.A...}X.*`C. +8E 9D 60 3F 1D 1E CC 58 EE 61 B7 1B D1 5B 4C 0E | ..`?...X.a...[L. +39 40 C0 50 2C 8A 2E 28 D8 BA AD FF 29 64 F1 6D | 9@.P,..(....)d.m +94 E4 E4 3E E9 19 1F 9E 0D 02 39 68 A7 EE 58 5A | ...>......9h..XZ +B8 24 F5 80 D3 70 2A 7A DB E0 62 8A C4 47 8A E6 | .$...p*z..b..G.. +67 D0 28 1D 31 32 5D 23 61 0D 64 04 69 75 3D 08 | g.(.12]#a.d.iu=. +DA 01 FC 1C 93 CF 16 24 4E AA 68 D6 8E 52 4F 91 | .......$N.h..RO. +A0 C5 6C 5F 71 1D D1 FE 4C F3 88 FA 3E 74 E9 90 | ..l_q...L...>t.. +B6 BD 9D AE DC 47 1C 4B 63 39 A3 6E D8 5E 76 72 | .....G.Kc9.n.^vr +9B B0 DC FB 6E 09 F7 EB 13 A2 DE B6 D1 06 3E 8B | ....n.........>. +0F 03 E0 2C 4E B9 03 94 5B E2 1F 56 0B DA CF 3B | ...,N...[..V...; +42 B9 69 8E 51 90 8D 88 D5 13 6E B9 F7 A3 8F DD | B.i.Q.....n..... +2D 23 D5 89 07 3C FA 01 40 D0 D6 99 B6 17 1B 58 | -#...<..@......X +33 76 D4 5B 9F A0 BC C1 4D 5A 1D AF 38 23 1C F7 | 3v.[....MZ..8#.. +A1 AC 63 AA 65 8E FB 64 62 CD 22 5C 0D 44 4A 34 | ..c.e..db."\.DJ4 +A3 6F 94 16 6A 4F 3A 90 1B 75 C6 56 AC C8 90 D8 | .o..jO:..u.V.... +2F EF 0F E9 30 94 43 57 F5 D8 F3 16 F1 56 EF 1F | /...0.CW.....V.. +06 00 00 40 28 C4 02 4C F7 2F 69 ED BE 9B 06 A1 | ...@(..L./i..... +7F C0 6B D9 BF 68 3B 7B 0E 63 3B 58 88 A8 DD A4 | ..k..h;{.c;X.... +E0 BB 3D D1 5B 8E 55 BC AD E4 E8 71 55 A4 E3 38 | ..=.[.U....qU..8 +D1 8A 53 9A 00 7B 23 63 A6 F7 0F BF FA AF E1 E4 | ..S..{#c........ +97 65 9F 3D BF 90 E2 72 48 8A A3 15 BF 74 91 79 | .e.=...rH....t.y +E1 34 53 6D 16 FD 83 04 C8 F9 68 20 31 B1 CA 81 | .4Sm......h 1... +9B BC 06 66 B3 7B B3 00 95 63 36 4F 5F 54 62 55 | ...f.{...c6O_TbU +40 7C 05 F6 62 A3 E1 80 0B F0 12 38 30 AE 91 1C | @|..b......80... +8B D8 75 82 D7 F7 6C 64 5F EB FD 6A 4E EC 77 F6 | ..u...ld_..jN.w. +70 04 F6 7D 97 31 6D 9D BB AA 8B F7 84 ED 63 78 | p..}.1m.......cx +EE EA CD F5 69 E1 16 5D 5B 57 F4 EF 7B C1 36 A6 | ....i..][W..{.6. +E4 44 DE B1 E8 82 C1 B3 25 B1 3E 9A 2D 8E 20 0E | .D......%.>.-. . +C9 2F 9E 79 7B FA 16 3D 2E AB 96 96 84 F4 0D B9 | ./.y{..=........ +76 86 E5 28 1C 41 45 F6 33 B0 B4 1E 74 C0 63 C0 | v..(.AE.3...t.c. +10 15 FD B9 99 F3 F0 C8 84 33 28 B9 2F 81 99 A8 | .........3(./... +F2 A3 40 6F 7E BE B1 8A A7 87 BE A2 4B 47 42 37 | ..@o~.......KGB7 +7D 48 F9 36 20 04 D7 1E BA 0E 74 7B 16 83 92 45 | }H.6 .....t{...E +FF 02 C9 68 09 8B 1C AF 29 29 84 19 EC 62 0E 4E | ...h....))...b.N +B3 A2 3E D1 52 50 CF 52 63 AB 04 20 49 6E A4 D4 | ..>.RP.Rc.. In.. +02 DB D2 6D 3C F1 2E 14 9F 70 D4 CE F7 19 36 74 | ...m<....p....6t +6A F5 7B 0D 16 BC 0B F3 F0 05 5A B2 7C EC 05 FD | j.{.......Z.|... +A4 39 D2 8A AB 04 C3 04 56 1C ED A8 3F 1A 29 1A | .9......V...?.). +55 2B BB CA C2 2B 66 38 61 DE 95 3F 1E 58 3B 59 | U+...+f8a..?.X;Y +98 1F 77 60 A8 6C 12 DA 80 01 7E 99 D6 AB 44 02 | ..w`.l....~...D. +36 14 35 E9 29 9D E0 BB 65 26 79 2F 3C 47 6C 7B | 6.5.)...e&y/.xj#M.. N..P +F9 84 7F E6 5B 99 A3 72 D1 8C CC 00 00 2C 00 FF | ....[..r.....,.. +C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0 +C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'.......... +00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 4F 00 00 | .=.<.5./.....O.. +00 12 00 10 00 00 0D 77 77 77 2E 71 6F 62 75 7A | .......www.qobuz +2E 63 6F 6D 00 0A 00 08 00 06 00 17 00 18 00 19 | .com............ +00 0B 00 02 01 00 00 0D 00 12 00 10 04 01 02 01 | ................ +05 01 06 01 04 03 02 03 05 03 06 03 00 05 00 05 | ................ +01 00 00 00 00 00 12 00 00 00 17 00 00 | ............. + +Flow Record: + RecordCount = 49 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 5 12 15 29 + size = 1402 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132381700 [2024-04-15 00:06:21.700] + last = 1713132382221 [2024-04-15 00:06:22.221] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 59480 + src tos = 0 + fwd status = 0 + in packets = 26 + in bytes = 14779 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + out packets = 21 + out bytes = 5602 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +C5 00 00 00 01 00 08 E4 11 02 B6 A6 93 80 E0 00 | ................ +43 A5 76 A7 10 E4 E7 8E 3B DC 64 72 07 2D A6 F0 | C.v.....;.dr.-.. +D7 5C 9B 5E A7 74 1B D8 A0 BA A7 B8 5B 65 77 39 | .\.^.t......[ew9 +4B 94 62 37 9A A6 50 4A F0 EE 2C 95 D7 97 82 7B | K.b7..PJ..,....{ +95 06 6D FC 1A 5F B0 DD 21 72 49 74 12 B2 99 D5 | ..m.._..!rIt.... +6F 39 CD A8 10 25 42 8E BB 06 0F 28 93 43 57 E7 | o9...%B....(.CW. +23 FC 1B E7 77 83 05 8D 59 E7 6F 82 1B A1 0B 62 | #...w...Y.o....b +89 63 84 04 38 FB D2 B7 1F 57 37 D8 07 A2 79 C1 | .c..8....W7...y. +90 38 BC DF 3F A8 0A 64 23 19 ED C1 C4 AD FB D9 | .8..?..d#....... +69 E0 E9 16 0F 2E 03 C0 F7 F5 16 A2 E9 1B DF 00 | i............... +D7 7E 87 96 8A CC 83 2F EE 38 18 39 CC D9 FC 46 | .~...../.8.9...F +0A 94 F9 70 E4 0D 3B A3 73 41 CD 0D C1 88 88 1F | ...p..;.sA...... +88 2E 1F BB B7 97 33 93 B5 66 E0 61 5B 00 21 4A | ......3..f.a[.!J +40 2F 4D 8D 37 82 13 30 9A 5C 8F 54 98 38 8D 9D | @/M.7..0.\.T.8.. +3E B0 F4 53 6F 51 81 0B DD 5C 79 5A 33 7E 95 99 | >..SoQ...\yZ3~.. +9E 11 6A 7B B9 8F AA E5 39 86 FF EA 45 8E 6D 85 | ..j{....9...E.m. +C3 50 B9 E7 04 7D 66 18 4F 5E 2A 99 AA 90 92 AC | .P...}f.O^*..... +08 00 A8 68 1D 39 25 A3 75 03 B6 FB 5A 3C D8 5D | ...h.9%.u...Z<.] +63 FA 55 56 5B CB 90 05 3D 33 27 6C AD 9F 83 A0 | c.UV[...=3'l.... +B1 2F 57 48 29 D8 73 28 F3 01 EF 9D 78 54 9D 4A | ./WH).s(....xT.J +83 3E FF BB 80 FC EA 03 40 2F 51 75 7A 46 BA E2 | .>......@/QuzF.. +20 DB 71 9A A9 A1 66 27 EA 5C 21 B8 FF 43 52 16 | .q...f'.\!..CR. +B1 DF 2F 1F E2 83 95 F6 2D 99 3B 3E DF 12 FE 15 | ../.....-.;>.... +26 EB 90 B9 1C A8 AC 10 6D 64 CC 16 54 0F 2F 79 | &.......md..T./y +9D 4F DA 66 B2 C4 E9 0A FF 65 06 28 5C 94 4E 00 | .O.f.....e.(\.N. +01 07 48 4F 2B 47 91 C1 8C 50 01 FD B5 1D 71 81 | ..HO+G...P....q. +A2 82 10 F4 27 9C A5 19 32 35 4E 8A 6C 37 55 5E | ....'...25N.l7U^ +68 DA E2 9A 72 86 09 17 3F 29 38 7C 4C D4 2E 81 | h...r...?)8|L... +E2 39 4B 54 6F 89 ED 25 1B 11 22 9B 35 42 81 C5 | .9KTo..%..".5B.. +C1 14 73 C0 05 44 64 50 12 AD 28 5F 7D 4F 6D 87 | ..s..DdP..(_}Om. +B9 96 DF 78 DA D3 1B 73 31 81 02 A6 98 51 A6 9E | ...x...s1....Q.. +F1 27 23 D1 03 DE 4A D0 5E 21 FE 90 C5 33 0D F2 | .'#...J.^!...3.. +83 67 68 AA A0 84 F7 06 FD B1 28 53 0A E6 D1 DF | .gh.......(S.... +67 0B 56 12 6E D0 B1 2D E3 08 13 F3 B6 AF 42 A3 | g.V.n..-......B. +78 74 B3 2F 8D 8B 8A 81 B8 32 54 95 BD 13 42 48 | xt./.....2T...BH +9D 29 2F AA 44 9B 02 0F FE 6C F6 93 F6 AF AB C0 | .)/.D....l...... +A3 94 9C 8F C0 80 86 C5 8A 07 D5 CC 50 9A 88 53 | ............P..S +DF 18 EC CF 06 F6 F7 B6 A8 E4 AE 42 97 A1 A4 66 | ...........B...f +41 CA CE E4 90 FD 46 BD 29 BC C7 35 89 C7 3E FA | A.....F.)..5..>. +55 A6 45 32 49 8C 46 F6 E3 1A 71 83 CA D1 6F CE | U.E2I.F...q...o. +84 C2 8D DD E4 97 D1 C4 72 41 86 52 C9 46 9F DA | ........rA.R.F.. +22 C9 A4 34 F7 C5 47 19 CA 6A 8E B4 BB 98 88 26 | "..4..G..j.....& +07 D7 9E EE AD 2C 52 6A 94 79 02 B2 43 60 A5 9F | .....,Rj.y..C`.. +7E A7 EC 07 8C E8 70 2C 0B 53 BF 90 D2 54 A8 06 | ~.....p,.S...T.. +81 5E ED 6D BA 02 AD B2 33 35 BB FF 8D E1 EF FB | .^.m....35...... +A0 74 40 1F 69 B3 1C 7B FB 80 99 CF 1C 5D 06 9B | .t@.i..{.....].. +71 F5 59 CE 6B C5 6E 2A C8 4A 31 9D 1E 33 28 65 | q.Y.k.n*.J1..3(e +76 8B 03 06 47 75 24 83 1B FD 50 5C 2C 8E 4B 1C | v...Gu$...P\,.K. +3D 1D DA 81 8B 9E 5A 29 92 0E 4C 63 1F 8C 3B DF | =.....Z)..Lc..;. +33 83 A5 79 75 BC 39 AA 3A 33 A8 3C 8E FA F0 39 | 3..yu.9.:3.<...9 +E3 9A 90 BE A7 09 4D BE 58 08 89 03 45 AE 64 52 | ......M.X...E.dR +63 14 01 DC A4 32 15 63 4A 0E B0 EC 38 F5 1E 1F | c....2.cJ...8... +86 B9 5D 93 71 55 A6 C7 C0 1E 1A D4 10 1B 9A CF | ..].qU.......... +FF 9D FC D2 64 EB 09 B3 5B 29 53 90 40 09 E7 5F | ....d...[)S.@.._ +59 89 8E 1C 45 2E A2 A5 A1 6C 60 88 EC D7 DE 3D | Y...E....l`....= +47 D6 D1 69 49 16 E7 AA 40 A2 2E 9F 46 55 38 D0 | G..iI...@...FU8. +C4 40 EA 11 76 E9 79 0C 27 B1 79 0C A2 45 EE B5 | .@..v.y.'.y..E.. +A5 F9 E0 A2 D9 60 C1 FC 9E 9D 5F 73 75 77 A1 C3 | .....`...._suw.. +89 D8 B1 4A 69 8D FC 32 F1 B4 50 31 57 B2 0D A7 | ...Ji..2..P1W... +26 D7 2E F9 A8 71 C1 EB 00 00 00 01 00 08 E4 11 | &....q.......... +02 B6 A6 93 80 E0 40 DB 3A AC 96 84 01 55 A5 34 | ......@.:....U.4 +23 AF 67 E4 1B 7C 94 59 B1 DB 49 DA 5B AA 48 A0 | #.g..|.Y..I.[.H. +7B 37 EC 84 44 BF AB C4 68 1E BB 91 50 44 CA 8E | {7..D...h...PD.. +88 BA 2B 8F F1 C6 7F A3 19 39 4E 74 3C 64 92 BE | ..+......9Nt.....1M...../U. +C1 52 63 49 50 11 2D CE 3A 7A 83 2D 4F 83 75 18 | .RcIP.-.:z.-O.u. +21 3C 12 D2 59 47 1D 4C BE 21 24 A0 C6 C4 30 58 | !<..YG.L.!$...0X +39 5A AD 30 A8 FE ED 4B 33 13 C9 30 E9 9A 47 E3 | 9Z.0...K3..0..G. +FB 19 52 41 AB A4 F6 4E 9A 50 BB 8C A8 BD 67 F8 | ..RA...N.P....g. +13 49 | .I + +Flow Record: + RecordCount = 50 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1608 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132217356 [2024-04-15 00:03:37.356] + last = 1713132217529 [2024-04-15 00:03:37.529] + received at = 1713132302716 [2024-04-15 00:05:02.716] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 60460 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 7012 + src addr = 13.224.103.47 + dst addr = 157.143.34.100 + out packets = 12 + out bytes = 1634 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 8.405 ms + srv latency = 0.000 ms + app latency = 0.262 ms + in payload = 1428 + TLS version = TLS 1.3 + ja3s hash = 16a232c6047ab4c7f493b826d419a8be + ja4s hash = t130500_c02f_a241d087c239 +16 03 03 00 63 02 00 00 5F 03 03 26 A5 A3 FF 2E | ....c..._..&.... +BB 06 A5 05 5B 55 50 AB DA F5 FE 10 52 07 5F 75 | ....[UP.....R._u +F6 5D A5 44 4F 57 4E 47 52 44 01 20 34 AB F1 B6 | .].DOWNGRD. 4... +B8 5E 91 27 7C F7 F7 51 A4 EC 3B 5C BD 90 7E 88 | .^.'|..Q..;\..~. +B7 B2 71 2B 3D F6 53 9F 31 E6 FF E5 C0 2F 00 00 | ..q+=.S.1..../.. +17 00 00 00 00 00 0B 00 02 01 00 FF 01 00 01 00 | ................ +00 05 00 00 00 17 00 00 16 03 03 13 93 0B 00 13 | ................ +8F 00 13 8C 00 06 0F 30 82 06 0B 30 82 04 F3 A0 | .......0...0.... +03 02 01 02 02 10 0A 28 52 01 F0 E0 3A 67 F4 F8 | .......(R...:g.. +C7 A1 48 40 12 B8 30 0D 06 09 2A 86 48 86 F7 0D | ..H@..0...*.H... +01 01 0B 05 00 30 3C 31 0B 30 09 06 03 55 04 06 | .....0<1.0...U.. +13 02 55 53 31 0F 30 0D 06 03 55 04 0A 13 06 41 | ..US1.0...U....A +6D 61 7A 6F 6E 31 1C 30 1A 06 03 55 04 03 13 13 | mazon1.0...U.... +41 6D 61 7A 6F 6E 20 52 53 41 20 32 30 34 38 20 | Amazon RSA 2048 +4D 30 31 30 1E 17 0D 32 33 30 37 31 30 30 30 30 | M010...230710000 +30 30 30 5A 17 0D 32 34 30 38 30 37 32 33 35 39 | 000Z..2408072359 +35 39 5A 30 14 31 12 30 10 06 03 55 04 03 13 09 | 59Z0.1.0...U.... +74 69 64 61 6C 2E 63 6F 6D 30 82 01 22 30 0D 06 | tidal.com0.."0.. +09 2A 86 48 86 F7 0D 01 01 01 05 00 03 82 01 0F | .*.H............ +00 30 82 01 0A 02 82 01 01 00 D8 DB 24 28 FF 06 | .0..........$(.. +62 F6 20 6C E1 1D 3C 09 F1 AF 3E 26 6B F1 90 4E | b. l..<...>&k..N +E7 D5 28 7C BD 18 AA E2 8F 06 66 64 65 35 62 25 | ..(|......fde5b% +4A 9D 59 73 C3 BD 0A 64 C0 29 6C AA CC F5 3F A4 | J.Ys...d.)l...?. +47 33 26 D1 13 96 93 01 DE 8A B0 B1 52 A7 20 F9 | G3&.........R. . +49 B9 F9 B0 04 D8 27 BF A0 52 55 7C 5F B5 9F EF | I.....'..RU|_... +CE 8E F0 EA 98 8D 49 2A FE 0B 65 E2 C5 29 06 33 | ......I*..e..).3 +91 C0 28 73 69 1E AB 09 06 E2 71 A2 0C 5F 50 A3 | ..(si.....q.._P. +82 7D BE F5 A2 B6 FC BE E2 55 FD BB 3E E3 7F 2B | .}.......U..>..+ +B8 6E D9 5D E0 75 49 6A CD DC 49 52 0B 58 C2 0B | .n.].uIj..IR.X.. +B4 35 31 C6 35 8C F2 90 AC 29 FA 74 EA EF 5F AD | .51.5....).t.._. +C3 2F B5 D0 04 4A CB 98 A8 8B 4B AE 22 86 58 EB | ./...J....K.".X. +E1 9E E0 B1 4F F4 F3 07 14 B5 14 62 99 33 85 5E | ....O......b.3.^ +60 B9 01 6A 6A 26 FE 78 0B 00 DF D9 B5 BA 39 A4 | `..jj&.x......9. +51 6F E1 88 1D 08 AE 05 B5 BD A9 50 BD 10 EC 45 | Qo.........P...E +16 89 84 41 35 8B 69 2E DC 52 07 44 E8 28 B3 4C | ...A5.i..R.D.(.L +0D A5 5F D9 8B 75 86 89 3C 93 02 03 01 00 01 A3 | .._..u..<....... +82 03 2F 30 82 03 2B 30 1F 06 03 55 1D 23 04 18 | ../0..+0...U.#.. +30 16 80 14 81 B8 0E 63 8A 89 12 18 E5 FA 3B 3B | 0......c......;; +50 95 9F E6 E5 90 13 85 30 1D 06 03 55 1D 0E 04 | P.......0...U... +16 04 14 A6 52 40 27 FC 32 CD 1D D0 81 EC 6B 98 | ....R@'.2.....k. +04 D6 8B FB 00 1D 81 30 61 06 03 55 1D 11 04 5A | .......0a..U...Z +30 58 82 09 74 69 64 61 6C 2E 63 6F 6D 82 0F 2A | 0X..tidal.com..* +2E 77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D | .wimpmusic.com.. +77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D 74 | wimpmusic.com..t +69 64 61 6C 68 69 66 69 2E 63 6F 6D 82 0B 2A 2E | idalhifi.com..*. +74 69 64 61 6C 2E 63 6F 6D 82 0F 2A 2E 74 69 64 | tidal.com..*.tid +61 6C 68 69 66 69 2E 63 6F 6D 30 0E 06 03 55 1D | alhifi.com0...U. +0F 01 01 FF 04 04 03 02 05 A0 30 1D 06 03 55 1D | ..........0...U. +25 04 16 30 14 06 08 2B 06 01 05 05 07 03 01 06 | %..0...+........ +08 2B 06 01 05 05 07 03 02 30 3B 06 03 55 1D 1F | .+.......0;..U.. +04 34 30 32 30 30 A0 2E A0 2C 86 2A 68 74 74 70 | .40200...,.*http +3A 2F 2F 63 72 6C 2E 72 32 6D 30 31 2E 61 6D 61 | ://crl.r2m01.ama +7A 6F 6E 74 72 75 73 74 2E 63 6F 6D 2F 72 32 6D | zontrust.com/r2m +30 31 2E 63 72 6C 30 13 06 03 55 1D 20 04 0C 30 | 01.crl0...U. ..0 +0A 30 08 06 06 67 81 0C 01 02 01 30 75 06 08 2B | .0...g.....0u..+ +06 01 05 05 07 01 01 04 69 30 67 30 2D 06 08 2B | ........i0g0-..+ +06 01 05 05 07 30 01 86 21 68 74 74 70 3A 2F 2F | .....0..!http:// +6F 63 73 70 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F | ocsp.r2m01.amazo +6E 74 72 75 73 74 2E 63 6F 6D 30 36 06 08 2B 06 | ntrust.com06..+. +01 05 05 07 30 02 86 2A 68 74 74 70 3A 2F 2F 63 | ....0..*http://c +72 74 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F 6E 74 | rt.r2m01.amazont +72 75 73 74 2E 63 6F 6D 2F 72 32 6D 30 31 2E 63 | rust.com/r2m01.c +65 72 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 | er0...U.......0. +30 82 01 7E 06 0A 2B 06 01 04 01 D6 79 02 04 02 | 0..~..+.....y... +04 82 01 6E 04 82 01 6A 01 68 00 76 00 EE CD D0 | ...n...j.h.v.... +64 D5 DB 1A CE C5 5C B7 9D B4 CD 13 A2 32 87 46 | d.....\......2.F +7C BC EC DE C3 51 48 59 46 71 1F B5 9B 00 00 01 | |....QHYFq...... +89 3E 21 77 27 00 00 04 03 00 47 30 45 02 21 00 | .>!w'.....G0E.!. +C3 53 34 AF 43 03 C8 C1 11 23 3E C1 40 EF 06 27 | .S4.C....#>.@..' +CD E1 7A 49 8B DD 92 84 2B 16 63 6C 2A B5 A2 E2 | ..zI....+.cl*... +02 20 0F C9 0F B9 45 4D E3 88 94 3D 75 78 15 CC | . ....EM...=ux.. +7F 6B 35 8B 00 3B 7B 0E 8A 1C 2D 27 86 24 17 F5 | .k5..;{...-'.$.. +63 B7 00 76 00 48 B0 E3 6B DA A6 47 34 0F E5 6A | c..v.H..k..G4..j +02 FA 9D 30 EB 1C 52 01 CB 56 DD 2C 81 D9 BB BF | ...0..R..V.,.... +AB 39 D8 84 73 00 00 01 89 3E 21 77 04 00 00 04 | .9..s....>!w.... +03 00 47 30 45 02 21 00 AC F0 89 AA C4 1F 25 10 | ..G0E.!.......%. +2E 63 EB 9F 51 F8 34 FC B8 E9 87 80 67 CF FE 12 | .c..Q.4.....g... +46 67 8D 9C ED 23 25 A6 02 20 0D 0C 2F 87 19 F4 | Fg...#%.. ../... +EF 94 64 B0 F4 2D 7D 3C 5E 33 52 8D 7B D4 E0 FB | ..d..-}<^3R.{... +4D 9A 14 C8 E1 65 89 5E C6 C4 00 76 00 DA B6 BF | M....e.^...v.... +6B 3F B5 B6 22 9F 9B C2 BB 5C 6B E8 70 91 71 6C | k?.."....\k.p.ql +BB 51 84 85 34 BD A4 3D 30 48 D7 FB AB 00 00 01 | .Q..4..=0H...... +89 3E 21 76 E0 00 00 04 03 00 47 30 45 02 21 00 | .>!v......G0E.!. +86 79 F0 C1 4E 93 9C 55 56 DF 1B 18 DC AF 80 B5 | .y..N..UV....... +DB 29 68 19 86 6B B1 AF A0 E3 0D A5 91 42 42 37 | .)h..k.......BB7 +02 20 53 72 52 08 2E 09 7A E8 B8 10 1E AA C5 7D | . SrR...z......} +0F D0 25 D2 EE 1D EC F5 E1 09 2D F5 B4 12 3A 83 | ..%.......-...:. +59 A7 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 | Y.0...*.H....... +00 03 82 01 01 00 4F E5 AC 91 4E 4A 44 05 5D 5D | ......O...NJD.]] +D3 9D AC B4 | .... + +Flow Record: + RecordCount = 51 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132312425 [2024-04-15 00:05:12.425] + last = 1713132343398 [2024-04-15 00:05:43.398] + received at = 1713132441666 [2024-04-15 00:07:21.666] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 53730 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18529 + src addr = 17.248.209.68 + dst addr = 157.143.34.100 + out packets = 32 + out bytes = 6945 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 14.995 ms + srv latency = 0.000 ms + app latency = 0.552 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 BA 07 CE 30 B6 | ....z...v.....0. +38 80 A7 FA BB F3 72 03 0E D3 3A DB A0 09 A2 32 | 8.....r...:....2 +3F 62 21 32 7F 97 D2 60 4E 8A 14 20 C4 DD 6E AC | ?b!2...`N.. ..n. +FE 8D B5 9A 86 C2 18 8B E6 AD 1D 0E 16 6F 29 59 | .............o)Y +BE 9F 65 72 F1 40 A4 36 30 40 75 00 13 02 00 00 | ..er.@.60@u..... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 D4 | ..+.....3.$... . +B1 07 2D 73 84 95 82 57 76 60 00 7C A0 69 FE 16 | ..-s...Wv`.|.i.. +09 86 B8 7F D3 AD 8D 4C 0D 2D 80 81 9E 4A 64 14 | .......L.-...Jd. +03 03 00 01 01 17 03 03 00 2A 68 7C DD 01 66 6A | .........*h|..fj +65 00 01 CD 30 FB E6 6D 04 1F BA BD 7C 0F A2 66 | e...0..m....|..f +3B 4F 36 DD 98 A6 08 4C 1B 59 B5 5C A9 61 D3 36 | ;O6....L.Y.\.a.6 +D9 2D 3E 84 17 03 03 11 25 7A F3 01 9C 4C C3 2F | .->.....%z...L./ +38 70 C5 24 22 E9 B0 2A B7 42 59 52 FE E1 9E ED | 8p.$"..*.BYR.... +E4 C7 D7 D5 D7 A1 77 5B 9B 56 CF 4A 6F 91 53 5E | ......w[.V.Jo.S^ +BA E9 58 20 6E 2E A1 D6 CA 4E D3 53 FB E9 0D 91 | ..X n....N.S.... +6B 2C FC B4 89 8A D0 C6 F1 1D 0E 0F 7E E4 74 16 | k,..........~.t. +AA B0 58 62 71 50 39 54 89 FA E6 BB 13 48 A4 AC | ..XbqP9T.....H.. +D4 71 D8 EC C0 3C 9F 7B E3 7E C8 38 5C 52 BE 8E | .q...<.{.~.8\R.. +79 29 F8 9B 62 1D 96 5B 90 FC D9 2D A3 35 BE 0A | y)..b..[...-.5.. +E7 4F 06 E2 1C 43 7C CD 25 C1 E7 8B EF 89 78 D3 | .O...C|.%.....x. +89 D6 1C 47 1D 61 1B DB 15 EC 78 D0 A8 C8 34 23 | ...G.a....x...4# +42 7D 5E EE FC 93 55 50 FB 85 07 40 1B DC 5A 59 | B}^...UP...@..ZY +5F 63 E9 E1 23 60 BA 38 85 52 55 AB 2D B0 41 AA | _c..#`.8.RU.-.A. +70 E0 B5 EB 50 1A 21 E5 FC C2 3D AE 9F 13 1A 96 | p...P.!...=..... +B5 D0 E8 0F A8 C9 A6 FB CC 29 0C 85 29 8D 3A 83 | .........)..).:. +F8 77 6B 04 E5 67 A9 CE EB DF A6 F0 2B 2E EB 33 | .wk..g......+..3 +AD B7 CC F6 26 D0 A6 DF 5B 28 68 49 32 59 20 D5 | ....&...[(hI2Y . +CF 0D 35 61 90 4D 42 D0 79 2B 73 B0 A3 3D 6C C2 | ..5a.MB.y+s..=l. +08 00 3C 98 3A CB 76 DB C7 04 1B C7 22 15 BF 5B | ..<.:.v....."..[ +43 CE 13 BC C5 7C EE 4D 68 BB 4F 93 08 8C E9 D0 | C....|.Mh.O..... +5F 55 A1 E0 54 6D 6A 2C 1C 0A C0 90 59 12 17 6F | _U..Tmj,....Y..o +55 5A 6E A8 28 3B 2C 39 49 5F 8E 65 B9 8E 89 40 | UZn.(;,9I_.e...@ +63 91 F0 03 E0 1B A3 E2 A6 4F 21 F0 5E EB E4 28 | c........O!.^..( +A8 B5 B2 5E 72 36 08 66 E9 55 A7 E6 4A 5F 69 CF | ...^r6.f.U..J_i. +8C 2F 5D 7B EF BB 53 9B A7 AC F2 92 EE 83 1B BA | ./]{..S......... +F0 55 E6 AC 49 9E 05 77 3D E9 DA 03 82 74 E0 E1 | .U..I..w=....t.. +AE F7 F1 D5 B8 C1 5B ED 61 9C 90 F2 F9 1C 44 0D | ......[.a.....D. +1A BD A5 5D 45 A5 D1 45 5E 00 52 EC A3 93 5B D2 | ...]E..E^.R...[. +CF 84 56 D8 6C 34 62 BA CB 11 85 13 11 4B CF 97 | ..V.l4b......K.. +00 F4 4E C0 22 8C F1 72 EB B3 9E EF C9 B9 AC 24 | ..N."..r.......$ +C6 77 DB 5F 12 8D FE D2 D3 AA DB 87 6F 98 F8 06 | .w._........o... +C3 31 CE C2 D4 9D 36 54 F4 4D 75 C4 A0 17 99 DF | .1....6T.Mu..... +DB 59 A8 75 4D FD F3 A8 FC 0F EF E1 A5 32 CC 2B | .Y.uM........2.+ +E2 3B 9F 5C 9C 25 F5 A0 B4 CA 20 90 CE 78 49 34 | .;.\.%.... ..xI4 +33 DB AF F8 17 FF 79 42 36 DE 0B F0 97 0F 5E A1 | 3.....yB6.....^. +41 62 3F 6D 86 77 77 E9 E9 92 1C 27 24 8A 74 D1 | Ab?m.ww....'$.t. +B5 1E 7D 1D 52 2F F9 C5 36 81 F2 77 63 71 B4 90 | ..}.R/..6..wcq.. +98 28 5C E8 15 EB B2 DD 05 C8 44 13 AA 8A 57 1A | .(\.......D...W. +97 38 61 D1 C4 5C 30 37 B0 43 D5 50 05 9F 68 9E | .8a..\07.C.P..h. +6C E2 79 D0 74 F4 CD EA 7C C9 84 10 9D 82 68 6C | l.y.t...|.....hl +FC 52 C8 A7 03 77 B0 8D 30 BB BF 95 9A B9 B2 D2 | .R...w..0....... +21 A4 78 FA DB BE 89 54 BF F0 FF 9D 40 75 5F 3A | !.x....T....@u_: +CA EF 49 9A 91 48 41 42 01 15 CF 02 1F 0F BD 47 | ..I..HAB.......G +17 7A 5D 5D 3F 77 37 0F EF 75 BD B9 E3 37 73 5B | .z]]?w7..u...7s[ +75 1B 6B 2F 05 6F BF 38 DB 27 D0 B5 BD 04 47 BD | u.k/.o.8.'....G. +15 E0 8B 3A 2B 2A 15 10 55 9D 7F B6 21 2F C9 75 | ...:+*..U...!/.u +65 03 28 C2 DE 2A 7A 95 9B 84 F0 39 B2 FF FE 73 | e.(..*z....9...s +6E B7 4A AF 25 07 D8 C0 B4 37 7E C7 8A 49 AA A3 | n.J.%....7~..I.. +44 F1 D9 4B 15 4C 1A 3D 44 05 75 4A 48 C0 CA 5F | D..K.L.=D.uJH.._ +EC 35 1C 59 10 52 51 D4 F6 F2 92 A2 F0 42 51 0D | .5.Y.RQ......BQ. +E0 EE E1 A2 3C 34 21 E1 BA A9 39 0F 63 74 74 E7 | ....<4!...9.ctt. +C7 72 FF 52 C6 23 39 B0 FA 31 9D 7C 45 EF C7 2E | .r.R.#9..1.|E... +D5 F5 CD 87 0A CE 6D 9B 8A E9 CE FF E5 24 C9 A2 | ......m......$.. +C0 B8 63 E8 CC 8B 10 6F FE 3C 03 94 C4 DC 28 50 | ..c....o.<....(P +54 00 2D F2 FB BF 8B 15 B8 83 A6 67 0B 18 1A 47 | T.-........g...G +60 C3 4E B2 2E 3D 75 B8 C9 B8 3A 5F B1 61 2B A8 | `.N..=u...:_.a+. +05 A0 B1 28 D5 EF D0 CC E6 5C A8 BB 36 28 12 EF | ...(.....\..6(.. +51 E5 2D 22 AF FF 04 04 2E 64 D0 0F 53 62 37 E2 | Q.-".....d..Sb7. +25 A0 52 27 D4 AC 8F 7E FB 20 77 36 DC 3A 9C 9A | %.R'...~. w6.:.. +81 98 EA 1B 77 86 7A 45 67 95 2C F4 B5 5A F6 6F | ....w.zEg.,..Z.o +43 96 79 6C 57 FA 38 D7 5B AB C2 DE 12 CE D6 CA | C.ylW.8.[....... +54 E0 04 2F 2D 73 55 09 78 88 52 C3 61 68 F5 EB | T../-sU.x.R.ah.. +13 9C AF DE 0B 08 9C F0 67 54 FD AF FF 29 8E 23 | ........gT...).# +83 C7 F5 20 6A 1A 63 EB E8 AD 7C 10 CF 55 2F 8B | ... j.c...|..U/. +1B 0F 79 19 DD EA 4B BD 80 30 09 13 D8 FF D9 2A | ..y...K..0.....* +5C 7C 28 A5 8A 2C 4B 3C 98 7F F8 58 71 7C E8 44 | \|(..,K<...Xq|.D +19 6D 2A 29 71 CD 91 53 FF 0C BF 15 5D 44 35 DE | .m*)q..S....]D5. +3C 96 81 28 48 BD 59 7B A1 CD 38 4D D3 B0 F7 E6 | <..(H.Y{..8M.... +AC F2 03 2D 30 14 93 3B E9 47 69 8B 8E 61 09 93 | ...-0..;.Gi..a.. +E3 5D DD 70 42 38 08 39 B9 86 81 CD 91 AA BC 49 | .].pB8.9.......I +70 B0 38 04 5F 4D 9F 8E 4A 26 A6 72 2B 49 B7 00 | p.8._M..J&.r+I.. +9A 70 F3 65 DB 91 9D 6C 27 FB B2 E3 AB 03 80 2C | .p.e...l'......, +79 05 2F FA A0 C3 B3 0B 06 93 1E 56 EB 7E FB D7 | y./........V.~.. +27 20 DD B8 43 59 91 9D 35 0C C3 69 70 96 E4 66 | ' ..CY..5..ip..f +A5 FE 26 46 84 B8 3C AE 7C 72 D1 A1 CB C5 DC 2A | ..&F..<.|r.....* +B8 D3 2A 89 FC C9 19 00 8F 3F 9D 57 B1 D1 B9 35 | ..*......?.W...5 +B0 ED C3 5D 8A A6 D4 6D 5D FB 5D 6B 26 59 27 F4 | ...]...m].]k&Y'. +9C 87 FB A3 47 E6 91 B1 FF 51 5E 3E 1E 69 7F CD | ....G....Q^>.i.. +CC D2 F5 C8 8D 83 32 B3 B3 5E 66 61 1E F4 7D 58 | ......2..^fa..}X +E9 06 30 86 26 1E B6 73 55 E1 C8 6A B7 FA 9C A4 | ..0.&..sU..j.... +B1 4A A4 7A E9 C5 6F C8 | .J.z..o. + +Flow Record: + RecordCount = 52 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 353 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132206344 [2024-04-15 00:03:26.344] + last = 1713132206577 [2024-04-15 00:03:26.577] + received at = 1713132277673 [2024-04-15 00:04:37.673] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 54916 + dst port = 443 + src tos = 0 + fwd status = 0 + in packets = 13 + in bytes = 1409 + src addr = 157.143.34.100 + dst addr = 54.78.190.126 + out packets = 12 + out bytes = 6786 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 35.198 ms + srv latency = 0.000 ms + app latency = 0.237 ms + in payload = 173 + TLS version = TLS 1.2 + sni name = www.qobuz.com + ja3 hash = e4d448cdfe06dc1243c1eb026c74ac9a + ja4 hash = t12d220700_0d4ca5d4ec72_3304d8368043 +16 03 03 00 A8 01 00 00 A4 03 03 66 1C 52 AE 75 | ...........f.R.u +E6 5A 53 F3 ED F5 7B 78 DC B6 C7 28 DF DD 89 AC | .ZS...{x...(.... +C7 3D 97 1B 21 70 B8 32 FD 81 65 00 00 2C 00 FF | .=..!p.2..e..,.. +C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0 +C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'.......... +00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 4F 00 00 | .=.<.5./.....O.. +00 12 00 10 00 00 0D 77 77 77 2E 71 6F 62 75 7A | .......www.qobuz +2E 63 6F 6D 00 0A 00 08 00 06 00 17 00 18 00 19 | .com............ +00 0B 00 02 01 00 00 0D 00 12 00 10 04 01 02 01 | ................ +05 01 06 01 04 03 02 03 05 03 06 03 00 05 00 05 | ................ +01 00 00 00 00 00 12 00 00 00 17 00 00 | ............. + +Flow Record: + RecordCount = 53 + Flags = 0x00 PCAP v1, Unsampled + Elements = 5: 1 2 12 15 29 + size = 1374 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132383187 [2024-04-15 00:06:23.187] + last = 1713132383634 [2024-04-15 00:06:23.634] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 63665 + src tos = 0 + fwd status = 0 + in packets = 20 + in bytes = 7353 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +C2 00 00 00 01 00 08 FC 08 64 CD 41 6A C8 CC 00 | .........d.Aj... +44 D0 D9 63 FA BA 01 0A C7 9D 2B BE A1 36 63 8F | D..c......+..6c. +77 1F 0A DA BE 57 45 8B D4 11 4F 3A CA AD F6 26 | w....WE...O:...& +41 33 91 C2 56 64 8E 78 0A F7 DB 8A 1D 6B B8 61 | A3..Vd.x.....k.a +31 09 EE D2 C7 56 FB 76 D8 E6 B0 6E AA 66 FB DF | 1....V.v...n.f.. +47 83 C3 BD 63 28 CC 57 66 AF 03 40 42 9E 26 5B | G...c(.Wf..@B.&[ +6A B3 1F F4 CC 23 BF DC 3A 77 D7 17 1B 60 FC 84 | j....#..:w...`.. +F8 52 30 A7 02 0E 34 F8 D0 DE 3C 1D 29 07 82 1B | .R0...4...<.)... +89 37 33 8A A2 AD 64 A9 10 10 ED 28 B1 F8 7C 53 | .73...d....(..|S +61 CA 61 E4 90 85 A3 EC 44 A1 B9 F7 B9 06 62 A3 | a.a.....D.....b. +5E 8A 13 1D D5 46 C7 4F E8 98 50 96 D1 9B 3C 8F | ^....F.O..P...<. +36 F2 02 B5 8B CC 75 3C 24 F5 BC 08 F7 20 EF 55 | 6.....u<$.... .U +28 BE 32 6B 4E 6F 12 4C F5 F7 41 E8 36 C9 11 85 | (.2kNo.L..A.6... +F9 19 F6 9D 04 3D 53 E4 44 8A 69 CD 40 4B 70 0F | .....=S.D.i.@Kp. +F3 78 AB 37 56 09 F2 0C 25 8A 83 E4 36 1B F8 97 | .x.7V...%...6... +5A 70 8F 6F D0 F6 29 EA 85 3B 02 BE 88 C8 F3 31 | Zp.o..)..;.....1 +B8 A6 24 84 08 41 1D 79 2D 69 B9 AB 1C C6 41 F1 | ..$..A.y-i....A. +0C 57 A3 92 93 A2 1C E8 01 25 68 E9 DF 06 CB 88 | .W.......%h..... +7B 29 B1 D7 FD 0E CB A5 23 06 F3 59 64 7E 08 2B | {)......#..Yd~.+ +AD F8 08 83 0C E0 19 0C C6 C4 46 E9 F9 BC F7 1A | ..........F..... +52 DC 1C 0F DB E5 A2 11 61 A9 4A 6F E6 EA 6D A0 | R.......a.Jo..m. +E7 A8 E3 7D 02 62 DB 79 A1 FD A3 99 54 09 00 0A | ...}.b.y....T... +03 C5 83 2B 5C 3B E8 79 1A 2A C9 F8 C6 A1 33 CA | ...+\;.y.*....3. +0D 1C E9 BC 22 D6 18 26 92 C7 C2 50 51 A8 AE 72 | ...."..&...PQ..r +BB 1D 81 0A 02 C5 29 7E 82 C3 D3 1F 8B 7B 5D 45 | ......)~.....{]E +72 DB A8 C7 B7 E5 FA A7 8D 31 18 0A FF D9 2D C7 | r........1....-. +6E 27 97 FC 3B B6 2D CE D5 DD C3 A3 5F C7 92 67 | n'..;.-....._..g +84 EF C1 D4 E1 11 5B 71 57 98 47 F0 A8 B5 4F 4C | ......[qW.G...OL +75 89 3D 1D 3C 0A 15 C1 65 FE 6B 02 78 02 45 79 | u.=.<...e.k.x.Ey +59 FB 7C FA FA 5A 9F 83 2A AF 3B A8 59 3B 27 24 | Y.|..Z..*.;.Y;'$ +57 AA 60 63 F7 E5 DF 4E 98 82 5B E1 E7 65 D5 FF | W.`c...N..[..e.. +6F 0D 45 25 02 74 08 23 D3 89 DE EC 15 17 5C 4D | o.E%.t.#......\M +3C 8F BA D0 4B 02 C0 8B B7 41 82 F9 B0 03 D5 3C | <...K....A.....< +10 1D 2B 5E FE C4 C0 88 88 D0 81 22 F8 75 2F D0 | ..+^.......".u/. +EE 03 83 CC 62 FF 31 5A 33 1B 1E B7 22 FD AD AF | ....b.1Z3..."... +CC 32 4B 0F A7 4A AE 41 B2 AE 5A 7A 37 61 46 5B | .2K..J.A..Zz7aF[ +91 9B D6 D4 26 72 8C 05 B5 7E 52 40 3C 76 CA C1 | ....&r...~R@.8....Y.S... +2A F9 D3 DD 5D 1B 14 69 0E A0 76 E4 52 60 31 B1 | *...]..i..v.R`1. +B2 3C 74 85 59 4D 02 6F 93 92 D1 8A F0 71 C8 3C | .Z....}3..... +6F 5A 57 8A 52 DE 42 36 A8 52 DA 25 8D 27 72 99 | oZW.R.B6.R.%.'r. +6C 1A 5C 5C 30 04 80 FA 8E 38 4E 4F 78 1C 20 7E | l.\\0....8NOx. ~ +FB 77 1C 89 8F 9B 75 0F DE 26 D4 B7 95 4E D9 25 | .w....u..&...N.% +AB F1 25 07 9C 6E 43 80 70 16 27 C3 28 15 0F 06 | ..%..nC.p.'.(... +1E D1 82 46 CA 68 2A E7 E8 75 BA C2 23 B6 58 7A | ...F.h*..u..#.Xz +8A 2B 6E 82 C1 3F 62 BF 27 AE D9 66 8C 48 76 C2 | .+n..?b.'..f.Hv. +A4 B7 12 AD 41 51 D8 1C 02 C2 6C 12 43 31 3E 7F | ....AQ....l.C1>. +88 8A 8B AE BC 93 95 94 C9 66 08 5E 90 98 C6 2D | .........f.^...- +B1 C3 66 EF BF AC FF 2C 79 6D 3E 9E 5F 6D 63 DC | ..f....,ym>._mc. +28 69 C2 2B 8B A3 85 77 03 AD E7 22 11 F5 2F AB | (i.+...w..."../. +F4 E9 2F 20 11 BF CE AD 0C AE D9 AF 91 5F C4 8A | ../ ........._.. +97 72 E7 A4 CC F3 B3 49 CB F8 34 F0 81 16 C2 BE | .r.....I..4..... +35 33 61 62 F5 E6 D0 2A 95 AA 45 38 B8 27 8D 42 | 53ab...*..E8.'.B +FA 0C 26 81 6A 14 6C 9D 29 8F 8B E8 C1 32 8B 3F | ..&.j.l.)....2.? +4A C6 4F 78 56 B2 F5 79 45 89 55 CF A1 B9 E8 CD | J.OxV..yE.U..... +EB 64 1C 19 9D 3C B1 7D 35 7D 61 49 60 42 FC 7E | .d...<.}5}aI`B.~ +3D 5F | =_ + +Flow Record: + RecordCount = 54 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 362 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132190588 [2024-04-15 00:03:10.588] + last = 1713132228174 [2024-04-15 00:03:48.174] + received at = 1713132302717 [2024-04-15 00:05:02.717] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 51573 + dst port = 443 + src tos = 0 + fwd status = 0 + in packets = 10 + in bytes = 1602 + src addr = 157.143.34.100 + dst addr = 35.231.208.158 + out packets = 8 + out bytes = 3814 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 112.082 ms + srv latency = 0.000 ms + app latency = 0.006 ms + in payload = 182 + TLS version = TLS 1.2 + sni name = discovery.roonlabs.net + ja3 hash = e4d448cdfe06dc1243c1eb026c74ac9a + ja4 hash = t12d220700_0d4ca5d4ec72_3304d8368043 +16 03 01 00 B1 01 00 00 AD 03 03 66 1C 52 9E 01 | ...........f.R.. +F0 56 F8 48 43 57 15 76 7B BF E9 B7 80 0C 89 2E | .V.HCW.v{....... +FB 77 A8 F2 0C 2C 46 7A CB 4D 02 00 00 2C 00 FF | .w...,Fz.M...,.. +C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0 +C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'.......... +00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 58 00 00 | .=.<.5./.....X.. +00 1B 00 19 00 00 16 64 69 73 63 6F 76 65 72 79 | .......discovery +2E 72 6F 6F 6E 6C 61 62 73 2E 6E 65 74 00 0A 00 | .roonlabs.net... +08 00 06 00 17 00 18 00 19 00 0B 00 02 01 00 00 | ................ +0D 00 12 00 10 04 01 02 01 05 01 06 01 04 03 02 | ................ +03 05 03 06 03 00 05 00 05 01 00 00 00 00 00 12 | ................ +00 00 00 17 00 00 | ...... diff --git a/src/libnfdump/filter/grammar.c b/src/libnfdump/filter/grammar.c new file mode 100644 index 00000000..24ba47be --- /dev/null +++ b/src/libnfdump/filter/grammar.c @@ -0,0 +1,4225 @@ +/* A Bison parser, made by GNU Bison 2.3. */ + +/* Skeleton implementation for Bison's Yacc-like parsers in C + + Copyright (C) 1984, 1989, 1990, 2000, 2001, 2002, 2003, 2004, 2005, 2006 + Free Software Foundation, Inc. + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2, or (at your option) + any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program; if not, write to the Free Software + Foundation, Inc., 51 Franklin Street, Fifth Floor, + Boston, MA 02110-1301, USA. */ + +/* As a special exception, you may create a larger work that contains + part or all of the Bison parser skeleton and distribute that work + under terms of your choice, so long as that work isn't itself a + parser generator using the skeleton or a modified version thereof + as a parser skeleton. Alternatively, if you modify or redistribute + the parser skeleton itself, you may (at your option) remove this + special exception, which will cause the skeleton and the resulting + Bison output files to be licensed under the GNU General Public + License without this special exception. + + This special exception was added by the Free Software Foundation in + version 2.2 of Bison. */ + +/* C LALR(1) parser skeleton written by Richard Stallman, by + simplifying the original so-called "semantic" parser. */ + +/* All symbols defined below should begin with yy or YY, to avoid + infringing on user name space. This should be done even for local + variables, as they might otherwise be expanded by user macros. + There are some unavoidable exceptions within include files to + define necessary library symbols; they are noted "INFRINGES ON + USER NAME SPACE" below. */ + +/* Identify Bison output. */ +#define YYBISON 1 + +/* Bison version. */ +#define YYBISON_VERSION "2.3" + +/* Skeleton name. */ +#define YYSKELETON_NAME "yacc.c" + +/* Pure parsers. */ +#define YYPURE 0 + +/* Using locations. */ +#define YYLSP_NEEDED 0 + + + +/* Tokens. */ +#ifndef YYTOKENTYPE +# define YYTOKENTYPE + /* Put the tokens into the symbol table, so that GDB and other debuggers + know about them. */ + enum yytokentype { + EQ = 258, + LT = 259, + GT = 260, + LE = 261, + GE = 262, + ANY = 263, + NOT = 264, + IDENT = 265, + COUNT = 266, + IP = 267, + IPV4 = 268, + IPV6 = 269, + NET = 270, + SRC = 271, + DST = 272, + IN = 273, + OUT = 274, + PREV = 275, + NEXT = 276, + BGP = 277, + ROUTER = 278, + INGRESS = 279, + EGRESS = 280, + NAT = 281, + XLATE = 282, + TUN = 283, + ENGINE = 284, + ENGINETYPE = 285, + ENGINEID = 286, + EXPORTER = 287, + DURATION = 288, + PPS = 289, + BPS = 290, + BPP = 291, + FLAGS = 292, + PROTO = 293, + PORT = 294, + AS = 295, + IF = 296, + VLAN = 297, + MPLS = 298, + MAC = 299, + ICMP = 300, + ICMPTYPE = 301, + ICMPCODE = 302, + PACKETS = 303, + BYTES = 304, + FLOWS = 305, + ETHERTYPE = 306, + MASK = 307, + FLOWDIR = 308, + TOS = 309, + FWDSTAT = 310, + LATENCY = 311, + ASA = 312, + ACL = 313, + PAYLOAD = 314, + GEO = 315, + VRF = 316, + OBSERVATION = 317, + PF = 318, + STRING = 319, + NUMBER = 320, + OR = 321, + AND = 322, + NEGATE = 323 + }; +#endif +/* Tokens. */ +#define EQ 258 +#define LT 259 +#define GT 260 +#define LE 261 +#define GE 262 +#define ANY 263 +#define NOT 264 +#define IDENT 265 +#define COUNT 266 +#define IP 267 +#define IPV4 268 +#define IPV6 269 +#define NET 270 +#define SRC 271 +#define DST 272 +#define IN 273 +#define OUT 274 +#define PREV 275 +#define NEXT 276 +#define BGP 277 +#define ROUTER 278 +#define INGRESS 279 +#define EGRESS 280 +#define NAT 281 +#define XLATE 282 +#define TUN 283 +#define ENGINE 284 +#define ENGINETYPE 285 +#define ENGINEID 286 +#define EXPORTER 287 +#define DURATION 288 +#define PPS 289 +#define BPS 290 +#define BPP 291 +#define FLAGS 292 +#define PROTO 293 +#define PORT 294 +#define AS 295 +#define IF 296 +#define VLAN 297 +#define MPLS 298 +#define MAC 299 +#define ICMP 300 +#define ICMPTYPE 301 +#define ICMPCODE 302 +#define PACKETS 303 +#define BYTES 304 +#define FLOWS 305 +#define ETHERTYPE 306 +#define MASK 307 +#define FLOWDIR 308 +#define TOS 309 +#define FWDSTAT 310 +#define LATENCY 311 +#define ASA 312 +#define ACL 313 +#define PAYLOAD 314 +#define GEO 315 +#define VRF 316 +#define OBSERVATION 317 +#define PF 318 +#define STRING 319 +#define NUMBER 320 +#define OR 321 +#define AND 322 +#define NEGATE 323 + + + + +/* Copy the first part of user declarations. */ +#line 31 "filter/grammar.y" + + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include "filter.h" +#include "userio.h" +#include "nfxV3.h" +#include "ipconv.h" +#include "sgregex.h" +#include "ja3/ja3.h" +#include "ja4/ja4.h" +#include "nfdump.h" + +#define AnyMask 0xffffffffffffffffLL + +const data_t NULLPtr = {NULL}; + +/* + * function prototypes + */ +static void yyerror(char *msg, ...); + +/* var defs */ +extern int lineno; +extern char *yytext; +extern uint32_t StartNode; +extern char *FilterFilename; + +static ipStack_t ipStack[MAXHOSTS]; + +static uint32_t ChainHosts(ipStack_t *ipStack, int numIP, int direction); + +static int AddIdent(char *ident); + +static int AddEngineNum(char *type, uint16_t comp, uint64_t num); + +static int AddExporterNum(char *type, uint16_t comp, uint64_t num); + +static int AddProto(direction_t direction, char *protoStr, uint64_t protoNum); + +static int AddPortNumber(direction_t direction, uint16_t comp, uint64_t port); + +static int AddICMP(char *type, uint16_t comp, uint64_t number); + +static int AddAsNumber(direction_t direction, uint16_t comp, uint64_t as); + +static int AddFlagsNumber(direction_t direction, uint16_t comp, uint64_t flags); + +static int AddFlagsString(direction_t direction, char *flags); + +static int AddTosNumber(direction_t direction, uint16_t comp, uint64_t tos); + +static int AddPackets(direction_t direction, uint16_t comp, uint64_t packets); + +static int AddBytes(direction_t direction, uint16_t comp, uint64_t bytes); + +static int AddFwdStatNum(uint16_t comp, uint64_t num); + +static int AddFwdStatString(char *string); + +static int AddIP(direction_t direction, char *IPstr); + +static int AddIPlist(direction_t direction, void *IPstr); + +static int AddNet(direction_t direction, char *IPstr, char *maskStr); + +static int AddNetPrefix(direction_t direction, char *IPstr, uint64_t mask); + +static int AddInterfaceNumber(direction_t direction, uint64_t num); + +static int AddVlanNumber(direction_t direction, uint64_t num); + +static int AddMaskNumber(direction_t direction, uint64_t num); + +static int AddFlowDir(direction_t direction, int64_t dirNum); + +static int AddMPLS(char *type, uint16_t comp, uint64_t value); + +static int AddMAC(direction_t direction, char *macString); + +static int AddEthertype(uint64_t etherType); + +static int AddLatency(char *type, uint16_t comp, uint64_t number); + +static int AddASAString(char *event, char *asaStr); + +static int AddASA(char *event, uint16_t comp, uint64_t number); + +static int AddASApblock(direction_t direction, char *arg); + +static int AddNATString(char *event, char *asaStr); + +static int AddNAT(char *event, uint16_t comp, uint64_t number); + +static int AddNatPortBlocks(char *type, char *subtype, uint16_t comp, uint64_t number); + +static int AddACL(direction_t direction, uint16_t comp, uint64_t number); + +static int AddPayload(char *type, char *arg, char *opt); + +static int AddGeo(direction_t direction, char *geo); + +static int AddObservation(char *type, char *subType, uint16_t comp, uint64_t number); + +static int AddVRF(direction_t direction, uint16_t comp, uint64_t number); + +static int AddPFString(char *type, char *arg); + +static int AddPFNumber(char *type, uint16_t comp, uint64_t number); + +static void *NewIplist(char *IPstr, int prefix); + +static void *NewU64list(uint64_t num); + +static int InsertIPlist(void *IPlist, char *IPstr, int64_t prefix); + +static int InsertU64list(void *U64list, uint64_t num); + +static int AddPortList(direction_t direction, void *U64List); + +static int AddASList(direction_t direction, void *U64List); + + + +/* Enabling traces. */ +#ifndef YYDEBUG +# define YYDEBUG 0 +#endif + +/* Enabling verbose error messages. */ +#ifdef YYERROR_VERBOSE +# undef YYERROR_VERBOSE +# define YYERROR_VERBOSE 1 +#else +# define YYERROR_VERBOSE 0 +#endif + +/* Enabling the token table. */ +#ifndef YYTOKEN_TABLE +# define YYTOKEN_TABLE 0 +#endif + +#if ! defined YYSTYPE && ! defined YYSTYPE_IS_DECLARED +typedef union YYSTYPE +#line 166 "filter/grammar.y" +{ + uint64_t value; + char *s; + FilterParam_t param; + void *list; +} +/* Line 193 of yacc.c. */ +#line 374 "filter/grammar.c" + YYSTYPE; +# define yystype YYSTYPE /* obsolescent; will be withdrawn */ +# define YYSTYPE_IS_DECLARED 1 +# define YYSTYPE_IS_TRIVIAL 1 +#endif + + + +/* Copy the second part of user declarations. */ + + +/* Line 216 of yacc.c. */ +#line 387 "filter/grammar.c" + +#ifdef short +# undef short +#endif + +#ifdef YYTYPE_UINT8 +typedef YYTYPE_UINT8 yytype_uint8; +#else +typedef unsigned char yytype_uint8; +#endif + +#ifdef YYTYPE_INT8 +typedef YYTYPE_INT8 yytype_int8; +#elif (defined __STDC__ || defined __C99__FUNC__ \ + || defined __cplusplus || defined _MSC_VER) +typedef signed char yytype_int8; +#else +typedef short int yytype_int8; +#endif + +#ifdef YYTYPE_UINT16 +typedef YYTYPE_UINT16 yytype_uint16; +#else +typedef unsigned short int yytype_uint16; +#endif + +#ifdef YYTYPE_INT16 +typedef YYTYPE_INT16 yytype_int16; +#else +typedef short int yytype_int16; +#endif + +#ifndef YYSIZE_T +# ifdef __SIZE_TYPE__ +# define YYSIZE_T __SIZE_TYPE__ +# elif defined size_t +# define YYSIZE_T size_t +# elif ! defined YYSIZE_T && (defined __STDC__ || defined __C99__FUNC__ \ + || defined __cplusplus || defined _MSC_VER) +# include /* INFRINGES ON USER NAME SPACE */ +# define YYSIZE_T size_t +# else +# define YYSIZE_T unsigned int +# endif +#endif + +#define YYSIZE_MAXIMUM ((YYSIZE_T) -1) + +#ifndef YY_ +# if defined YYENABLE_NLS && YYENABLE_NLS +# if ENABLE_NLS +# include /* INFRINGES ON USER NAME SPACE */ +# define YY_(msgid) dgettext ("bison-runtime", msgid) +# endif +# endif +# ifndef YY_ +# define YY_(msgid) msgid +# endif +#endif + +/* Suppress unused-variable warnings by "using" E. */ +#if ! defined lint || defined __GNUC__ +# define YYUSE(e) ((void) (e)) +#else +# define YYUSE(e) /* empty */ +#endif + +/* Identity function, used to suppress warnings about constant conditions. */ +#ifndef lint +# define YYID(n) (n) +#else +#if (defined __STDC__ || defined __C99__FUNC__ \ + || defined __cplusplus || defined _MSC_VER) +static int +YYID (int i) +#else +static int +YYID (i) + int i; +#endif +{ + return i; +} +#endif + +#if ! defined yyoverflow || YYERROR_VERBOSE + +/* The parser invokes alloca or malloc; define the necessary symbols. */ + +# ifdef YYSTACK_USE_ALLOCA +# if YYSTACK_USE_ALLOCA +# ifdef __GNUC__ +# define YYSTACK_ALLOC __builtin_alloca +# elif defined __BUILTIN_VA_ARG_INCR +# include /* INFRINGES ON USER NAME SPACE */ +# elif defined _AIX +# define YYSTACK_ALLOC __alloca +# elif defined _MSC_VER +# include /* INFRINGES ON USER NAME SPACE */ +# define alloca _alloca +# else +# define YYSTACK_ALLOC alloca +# if ! defined _ALLOCA_H && ! defined _STDLIB_H && (defined __STDC__ || defined __C99__FUNC__ \ + || defined __cplusplus || defined _MSC_VER) +# include /* INFRINGES ON USER NAME SPACE */ +# ifndef _STDLIB_H +# define _STDLIB_H 1 +# endif +# endif +# endif +# endif +# endif + +# ifdef YYSTACK_ALLOC + /* Pacify GCC's `empty if-body' warning. */ +# define YYSTACK_FREE(Ptr) do { /* empty */; } while (YYID (0)) +# ifndef YYSTACK_ALLOC_MAXIMUM + /* The OS might guarantee only one guard page at the bottom of the stack, + and a page size can be as small as 4096 bytes. So we cannot safely + invoke alloca (N) if N exceeds 4096. Use a slightly smaller number + to allow for a few compiler-allocated temporary stack slots. */ +# define YYSTACK_ALLOC_MAXIMUM 4032 /* reasonable circa 2006 */ +# endif +# else +# define YYSTACK_ALLOC YYMALLOC +# define YYSTACK_FREE YYFREE +# ifndef YYSTACK_ALLOC_MAXIMUM +# define YYSTACK_ALLOC_MAXIMUM YYSIZE_MAXIMUM +# endif +# if (defined __cplusplus && ! defined _STDLIB_H \ + && ! ((defined YYMALLOC || defined malloc) \ + && (defined YYFREE || defined free))) +# include /* INFRINGES ON USER NAME SPACE */ +# ifndef _STDLIB_H +# define _STDLIB_H 1 +# endif +# endif +# ifndef YYMALLOC +# define YYMALLOC malloc +# if ! defined malloc && ! defined _STDLIB_H && (defined __STDC__ || defined __C99__FUNC__ \ + || defined __cplusplus || defined _MSC_VER) +void *malloc (YYSIZE_T); /* INFRINGES ON USER NAME SPACE */ +# endif +# endif +# ifndef YYFREE +# define YYFREE free +# if ! defined free && ! defined _STDLIB_H && (defined __STDC__ || defined __C99__FUNC__ \ + || defined __cplusplus || defined _MSC_VER) +void free (void *); /* INFRINGES ON USER NAME SPACE */ +# endif +# endif +# endif +#endif /* ! defined yyoverflow || YYERROR_VERBOSE */ + + +#if (! defined yyoverflow \ + && (! defined __cplusplus \ + || (defined YYSTYPE_IS_TRIVIAL && YYSTYPE_IS_TRIVIAL))) + +/* A type that is properly aligned for any stack member. */ +union yyalloc +{ + yytype_int16 yyss; + YYSTYPE yyvs; + }; + +/* The size of the maximum gap between one aligned stack and the next. */ +# define YYSTACK_GAP_MAXIMUM (sizeof (union yyalloc) - 1) + +/* The size of an array large to enough to hold all stacks, each with + N elements. */ +# define YYSTACK_BYTES(N) \ + ((N) * (sizeof (yytype_int16) + sizeof (YYSTYPE)) \ + + YYSTACK_GAP_MAXIMUM) + +/* Copy COUNT objects from FROM to TO. The source and destination do + not overlap. */ +# ifndef YYCOPY +# if defined __GNUC__ && 1 < __GNUC__ +# define YYCOPY(To, From, Count) \ + __builtin_memcpy (To, From, (Count) * sizeof (*(From))) +# else +# define YYCOPY(To, From, Count) \ + do \ + { \ + YYSIZE_T yyi; \ + for (yyi = 0; yyi < (Count); yyi++) \ + (To)[yyi] = (From)[yyi]; \ + } \ + while (YYID (0)) +# endif +# endif + +/* Relocate STACK from its old location to the new one. The + local variables YYSIZE and YYSTACKSIZE give the old and new number of + elements in the stack, and YYPTR gives the new location of the + stack. Advance YYPTR to a properly aligned location for the next + stack. */ +# define YYSTACK_RELOCATE(Stack) \ + do \ + { \ + YYSIZE_T yynewbytes; \ + YYCOPY (&yyptr->Stack, Stack, yysize); \ + Stack = &yyptr->Stack; \ + yynewbytes = yystacksize * sizeof (*Stack) + YYSTACK_GAP_MAXIMUM; \ + yyptr += yynewbytes / sizeof (*yyptr); \ + } \ + while (YYID (0)) + +#endif + +/* YYFINAL -- State number of the termination state. */ +#define YYFINAL 90 +/* YYLAST -- Last index in YYTABLE. */ +#define YYLAST 341 + +/* YYNTOKENS -- Number of terminals. */ +#define YYNTOKENS 77 +/* YYNNTS -- Number of nonterminals. */ +#define YYNNTS 8 +/* YYNRULES -- Number of rules. */ +#define YYNRULES 105 +/* YYNRULES -- Number of states. */ +#define YYNSTATES 209 + +/* YYTRANSLATE(YYLEX) -- Bison symbol number corresponding to YYLEX. */ +#define YYUNDEFTOK 2 +#define YYMAXUTOK 323 + +#define YYTRANSLATE(YYX) \ + ((unsigned int) (YYX) <= YYMAXUTOK ? yytranslate[YYX] : YYUNDEFTOK) + +/* YYTRANSLATE[YYLEX] -- Bison symbol number corresponding to YYLEX. */ +static const yytype_uint8 yytranslate[] = +{ + 0, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 75, 76, 68, 66, 74, 2, 2, 71, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 72, 2, 73, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, + 2, 2, 2, 2, 2, 2, 1, 2, 3, 4, + 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, + 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, + 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, + 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, + 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, + 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, + 65, 67, 69, 70 +}; + +#if YYDEBUG +/* YYPRHS[YYN] -- Index of the first RHS symbol of rule number YYN in + YYRHS. */ +static const yytype_uint16 yyprhs[] = +{ + 0, 0, 3, 4, 6, 8, 10, 12, 15, 19, + 23, 27, 32, 37, 41, 45, 49, 54, 58, 62, + 67, 72, 76, 81, 85, 88, 92, 96, 100, 104, + 109, 113, 118, 122, 127, 133, 137, 141, 146, 150, + 153, 156, 159, 164, 169, 173, 178, 182, 186, 191, + 197, 202, 206, 212, 217, 221, 226, 230, 236, 241, + 245, 250, 254, 261, 268, 275, 277, 281, 284, 288, + 293, 295, 298, 302, 303, 305, 307, 309, 311, 313, + 314, 316, 318, 321, 324, 327, 330, 332, 334, 336, + 338, 341, 344, 347, 350, 352, 354, 356, 358, 361, + 363, 365, 367, 371, 375, 378 +}; + +/* YYRHS -- A `-1'-separated list of the rules' RHS. */ +static const yytype_int8 yyrhs[] = +{ + 78, 0, -1, -1, 84, -1, 8, -1, 13, -1, + 14, -1, 10, 64, -1, 11, 82, 65, -1, 30, + 82, 65, -1, 31, 82, 65, -1, 29, 64, 82, + 65, -1, 32, 64, 82, 65, -1, 83, 38, 65, + -1, 83, 38, 64, -1, 83, 38, 45, -1, 83, + 39, 82, 65, -1, 46, 82, 65, -1, 47, 82, + 65, -1, 45, 64, 82, 65, -1, 83, 37, 82, + 65, -1, 83, 37, 64, -1, 83, 54, 82, 65, + -1, 55, 82, 65, -1, 55, 64, -1, 33, 82, + 65, -1, 34, 82, 65, -1, 35, 82, 65, -1, + 36, 82, 65, -1, 83, 48, 82, 65, -1, 50, + 82, 65, -1, 83, 49, 82, 65, -1, 83, 12, + 64, -1, 83, 15, 64, 64, -1, 83, 15, 64, + 71, 65, -1, 83, 41, 65, -1, 83, 42, 65, + -1, 83, 40, 82, 65, -1, 83, 52, 65, -1, + 51, 65, -1, 53, 65, -1, 53, 83, -1, 43, + 64, 82, 65, -1, 43, 8, 82, 65, -1, 83, + 44, 64, -1, 64, 56, 82, 65, -1, 57, 64, + 64, -1, 57, 64, 83, -1, 57, 64, 82, 65, + -1, 83, 39, 18, 26, 64, -1, 83, 58, 82, + 65, -1, 26, 64, 64, -1, 26, 64, 64, 82, + 65, -1, 26, 64, 82, 65, -1, 59, 64, 64, + -1, 59, 64, 64, 64, -1, 83, 60, 64, -1, + 62, 64, 64, 82, 65, -1, 83, 61, 82, 65, + -1, 63, 64, 64, -1, 63, 64, 82, 65, -1, + 63, 64, 83, -1, 83, 12, 18, 72, 80, 73, + -1, 83, 39, 18, 72, 81, 73, -1, 83, 40, + 18, 72, 81, 73, -1, 64, -1, 64, 71, 65, + -1, 80, 64, -1, 80, 74, 64, -1, 80, 64, + 71, 65, -1, 65, -1, 81, 65, -1, 81, 74, + 65, -1, -1, 3, -1, 4, -1, 5, -1, 6, + -1, 7, -1, -1, 16, -1, 17, -1, 16, 26, + -1, 17, 26, -1, 16, 28, -1, 17, 28, -1, + 26, -1, 28, -1, 18, -1, 19, -1, 18, 16, + -1, 18, 17, -1, 19, 16, -1, 19, 17, -1, + 24, -1, 25, -1, 20, -1, 21, -1, 22, 21, + -1, 23, -1, 32, -1, 79, -1, 84, 67, 84, + -1, 84, 69, 84, -1, 9, 84, -1, 75, 84, + 76, -1 +}; + +/* YYRLINE[YYN] -- source line where rule number YYN was defined. */ +static const yytype_uint16 yyrline[] = +{ + 0, 195, 195, 196, 201, 206, 210, 214, 218, 222, + 226, 230, 234, 238, 242, 246, 250, 254, 258, 262, + 266, 270, 274, 278, 282, 286, 290, 294, 298, 302, + 306, 310, 314, 318, 322, 326, 330, 334, 338, 342, + 346, 350, 354, 358, 362, 366, 370, 374, 389, 393, + 397, 401, 405, 409, 413, 417, 421, 425, 429, 433, + 437, 441, 459, 463, 467, 473, 477, 481, 485, 489, + 494, 498, 502, 508, 509, 510, 511, 512, 513, 517, + 518, 519, 520, 521, 522, 523, 524, 525, 526, 527, + 528, 529, 530, 531, 532, 533, 534, 535, 536, 537, + 538, 541, 542, 543, 544, 545 +}; +#endif + +#if YYDEBUG || YYERROR_VERBOSE || YYTOKEN_TABLE +/* YYTNAME[SYMBOL-NUM] -- String name of the symbol SYMBOL-NUM. + First, the terminals, then, starting at YYNTOKENS, nonterminals. */ +static const char *const yytname[] = +{ + "$end", "error", "$undefined", "EQ", "LT", "GT", "LE", "GE", "ANY", + "NOT", "IDENT", "COUNT", "IP", "IPV4", "IPV6", "NET", "SRC", "DST", "IN", + "OUT", "PREV", "NEXT", "BGP", "ROUTER", "INGRESS", "EGRESS", "NAT", + "XLATE", "TUN", "ENGINE", "ENGINETYPE", "ENGINEID", "EXPORTER", + "DURATION", "PPS", "BPS", "BPP", "FLAGS", "PROTO", "PORT", "AS", "IF", + "VLAN", "MPLS", "MAC", "ICMP", "ICMPTYPE", "ICMPCODE", "PACKETS", + "BYTES", "FLOWS", "ETHERTYPE", "MASK", "FLOWDIR", "TOS", "FWDSTAT", + "LATENCY", "ASA", "ACL", "PAYLOAD", "GEO", "VRF", "OBSERVATION", "PF", + "STRING", "NUMBER", "'+'", "OR", "'*'", "AND", "NEGATE", "'/'", "'['", + "']'", "','", "'('", "')'", "$accept", "prog", "term", "iplist", + "u64list", "comp", "dqual", "expr", 0 +}; +#endif + +# ifdef YYPRINT +/* YYTOKNUM[YYLEX-NUM] -- Internal token number corresponding to + token YYLEX-NUM. */ +static const yytype_uint16 yytoknum[] = +{ + 0, 256, 257, 258, 259, 260, 261, 262, 263, 264, + 265, 266, 267, 268, 269, 270, 271, 272, 273, 274, + 275, 276, 277, 278, 279, 280, 281, 282, 283, 284, + 285, 286, 287, 288, 289, 290, 291, 292, 293, 294, + 295, 296, 297, 298, 299, 300, 301, 302, 303, 304, + 305, 306, 307, 308, 309, 310, 311, 312, 313, 314, + 315, 316, 317, 318, 319, 320, 43, 321, 42, 322, + 323, 47, 91, 93, 44, 40, 41 +}; +# endif + +/* YYR1[YYN] -- Symbol number of symbol that rule YYN derives. */ +static const yytype_uint8 yyr1[] = +{ + 0, 77, 78, 78, 79, 79, 79, 79, 79, 79, + 79, 79, 79, 79, 79, 79, 79, 79, 79, 79, + 79, 79, 79, 79, 79, 79, 79, 79, 79, 79, + 79, 79, 79, 79, 79, 79, 79, 79, 79, 79, + 79, 79, 79, 79, 79, 79, 79, 79, 79, 79, + 79, 79, 79, 79, 79, 79, 79, 79, 79, 79, + 79, 79, 79, 79, 79, 80, 80, 80, 80, 80, + 81, 81, 81, 82, 82, 82, 82, 82, 82, 83, + 83, 83, 83, 83, 83, 83, 83, 83, 83, 83, + 83, 83, 83, 83, 83, 83, 83, 83, 83, 83, + 83, 84, 84, 84, 84, 84 +}; + +/* YYR2[YYN] -- Number of symbols composing right hand side of rule YYN. */ +static const yytype_uint8 yyr2[] = +{ + 0, 2, 0, 1, 1, 1, 1, 2, 3, 3, + 3, 4, 4, 3, 3, 3, 4, 3, 3, 4, + 4, 3, 4, 3, 2, 3, 3, 3, 3, 4, + 3, 4, 3, 4, 5, 3, 3, 4, 3, 2, + 2, 2, 4, 4, 3, 4, 3, 3, 4, 5, + 4, 3, 5, 4, 3, 4, 3, 5, 4, 3, + 4, 3, 6, 6, 6, 1, 3, 2, 3, 4, + 1, 2, 3, 0, 1, 1, 1, 1, 1, 0, + 1, 1, 2, 2, 2, 2, 1, 1, 1, 1, + 2, 2, 2, 2, 1, 1, 1, 1, 2, 1, + 1, 1, 3, 3, 2, 3 +}; + +/* YYDEFACT[STATE-NAME] -- Default rule to reduce with in state + STATE-NUM when YYTABLE doesn't specify something else to do. Zero + means the default is an error. */ +static const yytype_uint8 yydefact[] = +{ + 79, 4, 79, 0, 73, 5, 6, 80, 81, 88, + 89, 96, 97, 0, 99, 94, 95, 86, 87, 0, + 73, 73, 100, 73, 73, 73, 73, 0, 0, 73, + 73, 73, 0, 79, 73, 0, 0, 0, 0, 0, + 79, 0, 101, 0, 3, 104, 7, 74, 75, 76, + 77, 78, 0, 82, 84, 83, 85, 90, 91, 92, + 93, 98, 73, 73, 0, 0, 73, 0, 0, 0, + 0, 73, 73, 73, 0, 0, 0, 39, 86, 100, + 40, 41, 24, 0, 79, 0, 0, 79, 73, 0, + 1, 0, 0, 73, 0, 73, 73, 0, 0, 0, + 73, 73, 0, 73, 73, 0, 73, 79, 79, 8, + 51, 0, 0, 9, 10, 0, 25, 26, 27, 28, + 0, 0, 0, 17, 18, 30, 23, 46, 0, 47, + 54, 73, 59, 0, 61, 0, 105, 0, 32, 0, + 21, 0, 15, 14, 13, 0, 0, 0, 0, 35, + 36, 44, 0, 0, 38, 0, 0, 56, 0, 102, + 103, 0, 53, 11, 12, 43, 42, 19, 48, 55, + 0, 60, 45, 0, 33, 0, 20, 0, 0, 16, + 0, 37, 29, 31, 22, 50, 58, 52, 57, 65, + 0, 34, 49, 70, 0, 0, 0, 67, 62, 0, + 71, 63, 0, 64, 66, 0, 68, 72, 69 +}; + +/* YYDEFGOTO[NTERM-NUM]. */ +static const yytype_int16 yydefgoto[] = +{ + -1, 41, 42, 190, 194, 52, 43, 44 +}; + +/* YYPACT[STATE-NUM] -- Index in YYTABLE of the portion describing + STATE-NUM. */ +#define YYPACT_NINF -53 +static const yytype_int16 yypact[] = +{ + 104, -53, 164, -51, 281, -53, -53, 21, 22, 71, + 86, -53, -53, 23, -53, -53, -53, -3, -53, 1, + 281, 281, 7, 281, 281, 281, 281, -1, 32, 281, + 281, 281, 40, 276, 52, 42, 45, 46, 55, 75, + 164, 141, -53, 222, -7, -53, -53, -53, -53, -53, + -53, -53, 77, -53, -53, -53, -53, -53, -53, -53, + -53, -53, 88, 281, 78, 79, 281, 81, 83, 91, + 95, 281, 281, 281, 111, 126, 143, -53, -53, -53, + -53, -53, -53, 147, 13, 89, 105, 226, 281, 3, + -53, -10, 142, 94, 100, 198, 306, 148, 153, 156, + 281, 281, 157, 281, 281, 160, 281, 164, 164, -53, + 20, 170, 171, -53, -53, 173, -53, -53, -53, -53, + 175, 176, 188, -53, -53, -53, -53, -53, 190, -53, + 161, 281, -53, 191, -53, 192, -53, 193, -53, 18, + -53, 202, -53, -53, -53, 2, 203, 200, 208, -53, + -53, -53, 210, 214, -53, 216, 224, -53, 238, 236, + -53, 241, -53, -53, -53, -53, -53, -53, -53, -53, + 242, -53, -53, 250, -53, 251, -53, 253, 254, -53, + 254, -53, -53, -53, -53, -53, -53, -53, -53, 244, + -52, -53, -53, -53, 97, 204, 255, 247, -53, 257, + -53, -53, 258, -53, -53, 260, -53, -53, -53 +}; + +/* YYPGOTO[NTERM-NUM]. */ +static const yytype_int16 yypgoto[] = +{ + -53, -53, -53, -53, 146, -20, -18, 0 +}; + +/* YYTABLE[YYPACT[STATE-NUM]]. What to do in state STATE-NUM. If + positive, shift that token. If negative, reduce the rule which + number is the opposite. If zero, do what YYDEFACT says. + If YYTABLE_NINF, syntax error. */ +#define YYTABLE_NINF -74 +static const yytype_int16 yytable[] = +{ + 64, 65, 45, 67, 68, 69, 70, 71, 137, 74, + 75, 76, 197, 46, 83, 81, 47, 48, 49, 50, + 51, 198, 199, 47, 48, 49, 50, 51, 177, 7, + 8, 9, 10, 11, 12, 13, 14, 15, 16, 78, + 89, 18, 111, 112, 61, 79, 115, 53, 55, 54, + 56, 120, 121, 122, 138, 47, 48, 49, 50, 51, + 107, 62, 108, 72, 128, 63, 129, 133, 135, 134, + 107, 66, 108, 141, 178, 146, 148, 127, -73, 136, + 152, 153, 174, 155, 156, -73, 158, 57, 58, 175, + 161, 47, 48, 49, 50, 51, 73, 47, 48, 49, + 50, 51, 59, 60, -2, 77, 84, 159, 160, 85, + 86, 170, 1, 2, 3, 4, 82, 5, 6, 87, + 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, + 17, 88, 18, 19, 20, 21, 22, 23, 24, 25, + 26, 90, 109, 113, 114, 142, 116, 27, 117, 28, + 29, 30, 110, 130, 31, 32, 118, 33, 140, 34, + 119, 35, 200, 36, 143, 144, 37, 38, 39, 131, + 201, 202, 1, 2, 3, 4, 123, 5, 6, 40, + 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, + 17, 124, 18, 19, 20, 21, 22, 23, 24, 25, + 26, 47, 48, 49, 50, 51, 139, 27, 125, 28, + 29, 30, 126, 149, 31, 32, 145, 33, 150, 34, + 151, 35, 154, 36, 157, 169, 37, 38, 39, 47, + 48, 49, 50, 51, 91, 162, 163, 92, 164, 40, + 165, 166, 7, 8, 9, 10, 11, 12, 13, 14, + 15, 16, 78, 167, 18, 168, 171, 172, 79, 93, + 94, 95, 96, 97, 98, 173, 99, 176, 179, 200, + 100, 101, 180, 181, 102, 182, 103, 203, 202, 183, + 104, 184, 105, 106, 47, 48, 49, 50, 51, 185, + 132, -73, 7, 8, 9, 10, 11, 12, 13, 14, + 15, 16, 78, 186, 18, 108, 187, 188, 79, 47, + 48, 49, 50, 51, 189, 196, 191, 192, 205, 193, + 204, 206, 0, 207, 147, 208, 195, 0, 0, 0, + 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, + 0, 80 +}; + +static const yytype_int16 yycheck[] = +{ + 20, 21, 2, 23, 24, 25, 26, 8, 18, 29, + 30, 31, 64, 64, 34, 33, 3, 4, 5, 6, + 7, 73, 74, 3, 4, 5, 6, 7, 26, 16, + 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, + 40, 28, 62, 63, 21, 32, 66, 26, 26, 28, + 28, 71, 72, 73, 64, 3, 4, 5, 6, 7, + 67, 64, 69, 64, 84, 64, 84, 87, 88, 87, + 67, 64, 69, 93, 72, 95, 96, 64, 65, 76, + 100, 101, 64, 103, 104, 65, 106, 16, 17, 71, + 110, 3, 4, 5, 6, 7, 64, 3, 4, 5, + 6, 7, 16, 17, 0, 65, 64, 107, 108, 64, + 64, 131, 8, 9, 10, 11, 64, 13, 14, 64, + 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, + 26, 56, 28, 29, 30, 31, 32, 33, 34, 35, + 36, 0, 65, 65, 65, 45, 65, 43, 65, 45, + 46, 47, 64, 64, 50, 51, 65, 53, 64, 55, + 65, 57, 65, 59, 64, 65, 62, 63, 64, 64, + 73, 74, 8, 9, 10, 11, 65, 13, 14, 75, + 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, + 26, 65, 28, 29, 30, 31, 32, 33, 34, 35, + 36, 3, 4, 5, 6, 7, 64, 43, 65, 45, + 46, 47, 65, 65, 50, 51, 18, 53, 65, 55, + 64, 57, 65, 59, 64, 64, 62, 63, 64, 3, + 4, 5, 6, 7, 12, 65, 65, 15, 65, 75, + 65, 65, 16, 17, 18, 19, 20, 21, 22, 23, + 24, 25, 26, 65, 28, 65, 65, 65, 32, 37, + 38, 39, 40, 41, 42, 72, 44, 65, 65, 65, + 48, 49, 72, 65, 52, 65, 54, 73, 74, 65, + 58, 65, 60, 61, 3, 4, 5, 6, 7, 65, + 64, 65, 16, 17, 18, 19, 20, 21, 22, 23, + 24, 25, 26, 65, 28, 69, 65, 65, 32, 3, + 4, 5, 6, 7, 64, 71, 65, 64, 71, 65, + 65, 64, -1, 65, 18, 65, 180, -1, -1, -1, + -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, + -1, 65 +}; + +/* YYSTOS[STATE-NUM] -- The (internal number of the) accessing + symbol of state STATE-NUM. */ +static const yytype_uint8 yystos[] = +{ + 0, 8, 9, 10, 11, 13, 14, 16, 17, 18, + 19, 20, 21, 22, 23, 24, 25, 26, 28, 29, + 30, 31, 32, 33, 34, 35, 36, 43, 45, 46, + 47, 50, 51, 53, 55, 57, 59, 62, 63, 64, + 75, 78, 79, 83, 84, 84, 64, 3, 4, 5, + 6, 7, 82, 26, 28, 26, 28, 16, 17, 16, + 17, 21, 64, 64, 82, 82, 64, 82, 82, 82, + 82, 8, 64, 64, 82, 82, 82, 65, 26, 32, + 65, 83, 64, 82, 64, 64, 64, 64, 56, 84, + 0, 12, 15, 37, 38, 39, 40, 41, 42, 44, + 48, 49, 52, 54, 58, 60, 61, 67, 69, 65, + 64, 82, 82, 65, 65, 82, 65, 65, 65, 65, + 82, 82, 82, 65, 65, 65, 65, 64, 82, 83, + 64, 64, 64, 82, 83, 82, 76, 18, 64, 64, + 64, 82, 45, 64, 65, 18, 82, 18, 82, 65, + 65, 64, 82, 82, 65, 82, 82, 64, 82, 84, + 84, 82, 65, 65, 65, 65, 65, 65, 65, 64, + 82, 65, 65, 72, 64, 71, 65, 26, 72, 65, + 72, 65, 65, 65, 65, 65, 65, 65, 65, 64, + 80, 65, 64, 65, 81, 81, 71, 64, 73, 74, + 65, 73, 74, 73, 65, 71, 64, 65, 65 +}; + +#define yyerrok (yyerrstatus = 0) +#define yyclearin (yychar = YYEMPTY) +#define YYEMPTY (-2) +#define YYEOF 0 + +#define YYACCEPT goto yyacceptlab +#define YYABORT goto yyabortlab +#define YYERROR goto yyerrorlab + + +/* Like YYERROR except do call yyerror. This remains here temporarily + to ease the transition to the new meaning of YYERROR, for GCC. + Once GCC version 2 has supplanted version 1, this can go. */ + +#define YYFAIL goto yyerrlab + +#define YYRECOVERING() (!!yyerrstatus) + +#define YYBACKUP(Token, Value) \ +do \ + if (yychar == YYEMPTY && yylen == 1) \ + { \ + yychar = (Token); \ + yylval = (Value); \ + yytoken = YYTRANSLATE (yychar); \ + YYPOPSTACK (1); \ + goto yybackup; \ + } \ + else \ + { \ + yyerror (YY_("syntax error: cannot back up")); \ + YYERROR; \ + } \ +while (YYID (0)) + + +#define YYTERROR 1 +#define YYERRCODE 256 + + +/* YYLLOC_DEFAULT -- Set CURRENT to span from RHS[1] to RHS[N]. + If N is 0, then set CURRENT to the empty location which ends + the previous symbol: RHS[0] (always defined). */ + +#define YYRHSLOC(Rhs, K) ((Rhs)[K]) +#ifndef YYLLOC_DEFAULT +# define YYLLOC_DEFAULT(Current, Rhs, N) \ + do \ + if (YYID (N)) \ + { \ + (Current).first_line = YYRHSLOC (Rhs, 1).first_line; \ + (Current).first_column = YYRHSLOC (Rhs, 1).first_column; \ + (Current).last_line = YYRHSLOC (Rhs, N).last_line; \ + (Current).last_column = YYRHSLOC (Rhs, N).last_column; \ + } \ + else \ + { \ + (Current).first_line = (Current).last_line = \ + YYRHSLOC (Rhs, 0).last_line; \ + (Current).first_column = (Current).last_column = \ + YYRHSLOC (Rhs, 0).last_column; \ + } \ + while (YYID (0)) +#endif + + +/* YY_LOCATION_PRINT -- Print the location on the stream. + This macro was not mandated originally: define only if we know + we won't break user code: when these are the locations we know. */ + +#ifndef YY_LOCATION_PRINT +# if defined YYLTYPE_IS_TRIVIAL && YYLTYPE_IS_TRIVIAL +# define YY_LOCATION_PRINT(File, Loc) \ + fprintf (File, "%d.%d-%d.%d", \ + (Loc).first_line, (Loc).first_column, \ + (Loc).last_line, (Loc).last_column) +# else +# define YY_LOCATION_PRINT(File, Loc) ((void) 0) +# endif +#endif + + +/* YYLEX -- calling `yylex' with the right arguments. */ + +#ifdef YYLEX_PARAM +# define YYLEX yylex (YYLEX_PARAM) +#else +# define YYLEX yylex () +#endif + +/* Enable debugging if requested. */ +#if YYDEBUG + +# ifndef YYFPRINTF +# include /* INFRINGES ON USER NAME SPACE */ +# define YYFPRINTF fprintf +# endif + +# define YYDPRINTF(Args) \ +do { \ + if (yydebug) \ + YYFPRINTF Args; \ +} while (YYID (0)) + +# define YY_SYMBOL_PRINT(Title, Type, Value, Location) \ +do { \ + if (yydebug) \ + { \ + YYFPRINTF (stderr, "%s ", Title); \ + yy_symbol_print (stderr, \ + Type, Value); \ + YYFPRINTF (stderr, "\n"); \ + } \ +} while (YYID (0)) + + +/*--------------------------------. +| Print this symbol on YYOUTPUT. | +`--------------------------------*/ + +/*ARGSUSED*/ +#if (defined __STDC__ || defined __C99__FUNC__ \ + || defined __cplusplus || defined _MSC_VER) +static void +yy_symbol_value_print (FILE *yyoutput, int yytype, YYSTYPE const * const yyvaluep) +#else +static void +yy_symbol_value_print (yyoutput, yytype, yyvaluep) + FILE *yyoutput; + int yytype; + YYSTYPE const * const yyvaluep; +#endif +{ + if (!yyvaluep) + return; +# ifdef YYPRINT + if (yytype < YYNTOKENS) + YYPRINT (yyoutput, yytoknum[yytype], *yyvaluep); +# else + YYUSE (yyoutput); +# endif + switch (yytype) + { + default: + break; + } +} + + +/*--------------------------------. +| Print this symbol on YYOUTPUT. | +`--------------------------------*/ + +#if (defined __STDC__ || defined __C99__FUNC__ \ + || defined __cplusplus || defined _MSC_VER) +static void +yy_symbol_print (FILE *yyoutput, int yytype, YYSTYPE const * const yyvaluep) +#else +static void +yy_symbol_print (yyoutput, yytype, yyvaluep) + FILE *yyoutput; + int yytype; + YYSTYPE const * const yyvaluep; +#endif +{ + if (yytype < YYNTOKENS) + YYFPRINTF (yyoutput, "token %s (", yytname[yytype]); + else + YYFPRINTF (yyoutput, "nterm %s (", yytname[yytype]); + + yy_symbol_value_print (yyoutput, yytype, yyvaluep); + YYFPRINTF (yyoutput, ")"); +} + +/*------------------------------------------------------------------. +| yy_stack_print -- Print the state stack from its BOTTOM up to its | +| TOP (included). | +`------------------------------------------------------------------*/ + +#if (defined __STDC__ || defined __C99__FUNC__ \ + || defined __cplusplus || defined _MSC_VER) +static void +yy_stack_print (yytype_int16 *bottom, yytype_int16 *top) +#else +static void +yy_stack_print (bottom, top) + yytype_int16 *bottom; + yytype_int16 *top; +#endif +{ + YYFPRINTF (stderr, "Stack now"); + for (; bottom <= top; ++bottom) + YYFPRINTF (stderr, " %d", *bottom); + YYFPRINTF (stderr, "\n"); +} + +# define YY_STACK_PRINT(Bottom, Top) \ +do { \ + if (yydebug) \ + yy_stack_print ((Bottom), (Top)); \ +} while (YYID (0)) + + +/*------------------------------------------------. +| Report that the YYRULE is going to be reduced. | +`------------------------------------------------*/ + +#if (defined __STDC__ || defined __C99__FUNC__ \ + || defined __cplusplus || defined _MSC_VER) +static void +yy_reduce_print (YYSTYPE *yyvsp, int yyrule) +#else +static void +yy_reduce_print (yyvsp, yyrule) + YYSTYPE *yyvsp; + int yyrule; +#endif +{ + int yynrhs = yyr2[yyrule]; + int yyi; + unsigned long int yylno = yyrline[yyrule]; + YYFPRINTF (stderr, "Reducing stack by rule %d (line %lu):\n", + yyrule - 1, yylno); + /* The symbols being reduced. */ + for (yyi = 0; yyi < yynrhs; yyi++) + { + fprintf (stderr, " $%d = ", yyi + 1); + yy_symbol_print (stderr, yyrhs[yyprhs[yyrule] + yyi], + &(yyvsp[(yyi + 1) - (yynrhs)]) + ); + fprintf (stderr, "\n"); + } +} + +# define YY_REDUCE_PRINT(Rule) \ +do { \ + if (yydebug) \ + yy_reduce_print (yyvsp, Rule); \ +} while (YYID (0)) + +/* Nonzero means print parse trace. It is left uninitialized so that + multiple parsers can coexist. */ +int yydebug; +#else /* !YYDEBUG */ +# define YYDPRINTF(Args) +# define YY_SYMBOL_PRINT(Title, Type, Value, Location) +# define YY_STACK_PRINT(Bottom, Top) +# define YY_REDUCE_PRINT(Rule) +#endif /* !YYDEBUG */ + + +/* YYINITDEPTH -- initial size of the parser's stacks. */ +#ifndef YYINITDEPTH +# define YYINITDEPTH 200 +#endif + +/* YYMAXDEPTH -- maximum size the stacks can grow to (effective only + if the built-in stack extension method is used). + + Do not make this value too large; the results are undefined if + YYSTACK_ALLOC_MAXIMUM < YYSTACK_BYTES (YYMAXDEPTH) + evaluated with infinite-precision integer arithmetic. */ + +#ifndef YYMAXDEPTH +# define YYMAXDEPTH 10000 +#endif + + + +#if YYERROR_VERBOSE + +# ifndef yystrlen +# if defined __GLIBC__ && defined _STRING_H +# define yystrlen strlen +# else +/* Return the length of YYSTR. */ +#if (defined __STDC__ || defined __C99__FUNC__ \ + || defined __cplusplus || defined _MSC_VER) +static YYSIZE_T +yystrlen (const char *yystr) +#else +static YYSIZE_T +yystrlen (yystr) + const char *yystr; +#endif +{ + YYSIZE_T yylen; + for (yylen = 0; yystr[yylen]; yylen++) + continue; + return yylen; +} +# endif +# endif + +# ifndef yystpcpy +# if defined __GLIBC__ && defined _STRING_H && defined _GNU_SOURCE +# define yystpcpy stpcpy +# else +/* Copy YYSRC to YYDEST, returning the address of the terminating '\0' in + YYDEST. */ +#if (defined __STDC__ || defined __C99__FUNC__ \ + || defined __cplusplus || defined _MSC_VER) +static char * +yystpcpy (char *yydest, const char *yysrc) +#else +static char * +yystpcpy (yydest, yysrc) + char *yydest; + const char *yysrc; +#endif +{ + char *yyd = yydest; + const char *yys = yysrc; + + while ((*yyd++ = *yys++) != '\0') + continue; + + return yyd - 1; +} +# endif +# endif + +# ifndef yytnamerr +/* Copy to YYRES the contents of YYSTR after stripping away unnecessary + quotes and backslashes, so that it's suitable for yyerror. The + heuristic is that double-quoting is unnecessary unless the string + contains an apostrophe, a comma, or backslash (other than + backslash-backslash). YYSTR is taken from yytname. If YYRES is + null, do not copy; instead, return the length of what the result + would have been. */ +static YYSIZE_T +yytnamerr (char *yyres, const char *yystr) +{ + if (*yystr == '"') + { + YYSIZE_T yyn = 0; + char const *yyp = yystr; + + for (;;) + switch (*++yyp) + { + case '\'': + case ',': + goto do_not_strip_quotes; + + case '\\': + if (*++yyp != '\\') + goto do_not_strip_quotes; + /* Fall through. */ + default: + if (yyres) + yyres[yyn] = *yyp; + yyn++; + break; + + case '"': + if (yyres) + yyres[yyn] = '\0'; + return yyn; + } + do_not_strip_quotes: ; + } + + if (! yyres) + return yystrlen (yystr); + + return yystpcpy (yyres, yystr) - yyres; +} +# endif + +/* Copy into YYRESULT an error message about the unexpected token + YYCHAR while in state YYSTATE. Return the number of bytes copied, + including the terminating null byte. If YYRESULT is null, do not + copy anything; just return the number of bytes that would be + copied. As a special case, return 0 if an ordinary "syntax error" + message will do. Return YYSIZE_MAXIMUM if overflow occurs during + size calculation. */ +static YYSIZE_T +yysyntax_error (char *yyresult, int yystate, int yychar) +{ + int yyn = yypact[yystate]; + + if (! (YYPACT_NINF < yyn && yyn <= YYLAST)) + return 0; + else + { + int yytype = YYTRANSLATE (yychar); + YYSIZE_T yysize0 = yytnamerr (0, yytname[yytype]); + YYSIZE_T yysize = yysize0; + YYSIZE_T yysize1; + int yysize_overflow = 0; + enum { YYERROR_VERBOSE_ARGS_MAXIMUM = 5 }; + char const *yyarg[YYERROR_VERBOSE_ARGS_MAXIMUM]; + int yyx; + +# if 0 + /* This is so xgettext sees the translatable formats that are + constructed on the fly. */ + YY_("syntax error, unexpected %s"); + YY_("syntax error, unexpected %s, expecting %s"); + YY_("syntax error, unexpected %s, expecting %s or %s"); + YY_("syntax error, unexpected %s, expecting %s or %s or %s"); + YY_("syntax error, unexpected %s, expecting %s or %s or %s or %s"); +# endif + char *yyfmt; + char const *yyf; + static char const yyunexpected[] = "syntax error, unexpected %s"; + static char const yyexpecting[] = ", expecting %s"; + static char const yyor[] = " or %s"; + char yyformat[sizeof yyunexpected + + sizeof yyexpecting - 1 + + ((YYERROR_VERBOSE_ARGS_MAXIMUM - 2) + * (sizeof yyor - 1))]; + char const *yyprefix = yyexpecting; + + /* Start YYX at -YYN if negative to avoid negative indexes in + YYCHECK. */ + int yyxbegin = yyn < 0 ? -yyn : 0; + + /* Stay within bounds of both yycheck and yytname. */ + int yychecklim = YYLAST - yyn + 1; + int yyxend = yychecklim < YYNTOKENS ? yychecklim : YYNTOKENS; + int yycount = 1; + + yyarg[0] = yytname[yytype]; + yyfmt = yystpcpy (yyformat, yyunexpected); + + for (yyx = yyxbegin; yyx < yyxend; ++yyx) + if (yycheck[yyx + yyn] == yyx && yyx != YYTERROR) + { + if (yycount == YYERROR_VERBOSE_ARGS_MAXIMUM) + { + yycount = 1; + yysize = yysize0; + yyformat[sizeof yyunexpected - 1] = '\0'; + break; + } + yyarg[yycount++] = yytname[yyx]; + yysize1 = yysize + yytnamerr (0, yytname[yyx]); + yysize_overflow |= (yysize1 < yysize); + yysize = yysize1; + yyfmt = yystpcpy (yyfmt, yyprefix); + yyprefix = yyor; + } + + yyf = YY_(yyformat); + yysize1 = yysize + yystrlen (yyf); + yysize_overflow |= (yysize1 < yysize); + yysize = yysize1; + + if (yysize_overflow) + return YYSIZE_MAXIMUM; + + if (yyresult) + { + /* Avoid sprintf, as that infringes on the user's name space. + Don't have undefined behavior even if the translation + produced a string with the wrong number of "%s"s. */ + char *yyp = yyresult; + int yyi = 0; + while ((*yyp = *yyf) != '\0') + { + if (*yyp == '%' && yyf[1] == 's' && yyi < yycount) + { + yyp += yytnamerr (yyp, yyarg[yyi++]); + yyf += 2; + } + else + { + yyp++; + yyf++; + } + } + } + return yysize; + } +} +#endif /* YYERROR_VERBOSE */ + + +/*-----------------------------------------------. +| Release the memory associated to this symbol. | +`-----------------------------------------------*/ + +/*ARGSUSED*/ +#if (defined __STDC__ || defined __C99__FUNC__ \ + || defined __cplusplus || defined _MSC_VER) +static void +yydestruct (const char *yymsg, int yytype, YYSTYPE *yyvaluep) +#else +static void +yydestruct (yymsg, yytype, yyvaluep) + const char *yymsg; + int yytype; + YYSTYPE *yyvaluep; +#endif +{ + YYUSE (yyvaluep); + + if (!yymsg) + yymsg = "Deleting"; + YY_SYMBOL_PRINT (yymsg, yytype, yyvaluep, yylocationp); + + switch (yytype) + { + + default: + break; + } +} + + +/* Prevent warnings from -Wmissing-prototypes. */ + +#ifdef YYPARSE_PARAM +#if defined __STDC__ || defined __cplusplus +int yyparse (void *YYPARSE_PARAM); +#else +int yyparse (); +#endif +#else /* ! YYPARSE_PARAM */ +#if defined __STDC__ || defined __cplusplus +int yyparse (void); +#else +int yyparse (); +#endif +#endif /* ! YYPARSE_PARAM */ + + + +/* The look-ahead symbol. */ +int yychar; + +/* The semantic value of the look-ahead symbol. */ +YYSTYPE yylval; + +/* Number of syntax errors so far. */ +int yynerrs; + + + +/*----------. +| yyparse. | +`----------*/ + +#ifdef YYPARSE_PARAM +#if (defined __STDC__ || defined __C99__FUNC__ \ + || defined __cplusplus || defined _MSC_VER) +int +yyparse (void *YYPARSE_PARAM) +#else +int +yyparse (YYPARSE_PARAM) + void *YYPARSE_PARAM; +#endif +#else /* ! YYPARSE_PARAM */ +#if (defined __STDC__ || defined __C99__FUNC__ \ + || defined __cplusplus || defined _MSC_VER) +int +yyparse (void) +#else +int +yyparse () + +#endif +#endif +{ + + int yystate; + int yyn; + int yyresult; + /* Number of tokens to shift before error messages enabled. */ + int yyerrstatus; + /* Look-ahead token as an internal (translated) token number. */ + int yytoken = 0; +#if YYERROR_VERBOSE + /* Buffer for error messages, and its allocated size. */ + char yymsgbuf[128]; + char *yymsg = yymsgbuf; + YYSIZE_T yymsg_alloc = sizeof yymsgbuf; +#endif + + /* Three stacks and their tools: + `yyss': related to states, + `yyvs': related to semantic values, + `yyls': related to locations. + + Refer to the stacks thru separate pointers, to allow yyoverflow + to reallocate them elsewhere. */ + + /* The state stack. */ + yytype_int16 yyssa[YYINITDEPTH]; + yytype_int16 *yyss = yyssa; + yytype_int16 *yyssp; + + /* The semantic value stack. */ + YYSTYPE yyvsa[YYINITDEPTH]; + YYSTYPE *yyvs = yyvsa; + YYSTYPE *yyvsp; + + + +#define YYPOPSTACK(N) (yyvsp -= (N), yyssp -= (N)) + + YYSIZE_T yystacksize = YYINITDEPTH; + + /* The variables used to return semantic value and location from the + action routines. */ + YYSTYPE yyval; + + + /* The number of symbols on the RHS of the reduced rule. + Keep to zero when no symbol should be popped. */ + int yylen = 0; + + YYDPRINTF ((stderr, "Starting parse\n")); + + yystate = 0; + yyerrstatus = 0; + yynerrs = 0; + yychar = YYEMPTY; /* Cause a token to be read. */ + + /* Initialize stack pointers. + Waste one element of value and location stack + so that they stay on the same level as the state stack. + The wasted elements are never initialized. */ + + yyssp = yyss; + yyvsp = yyvs; + + goto yysetstate; + +/*------------------------------------------------------------. +| yynewstate -- Push a new state, which is found in yystate. | +`------------------------------------------------------------*/ + yynewstate: + /* In all cases, when you get here, the value and location stacks + have just been pushed. So pushing a state here evens the stacks. */ + yyssp++; + + yysetstate: + *yyssp = yystate; + + if (yyss + yystacksize - 1 <= yyssp) + { + /* Get the current used size of the three stacks, in elements. */ + YYSIZE_T yysize = yyssp - yyss + 1; + +#ifdef yyoverflow + { + /* Give user a chance to reallocate the stack. Use copies of + these so that the &'s don't force the real ones into + memory. */ + YYSTYPE *yyvs1 = yyvs; + yytype_int16 *yyss1 = yyss; + + + /* Each stack pointer address is followed by the size of the + data in use in that stack, in bytes. This used to be a + conditional around just the two extra args, but that might + be undefined if yyoverflow is a macro. */ + yyoverflow (YY_("memory exhausted"), + &yyss1, yysize * sizeof (*yyssp), + &yyvs1, yysize * sizeof (*yyvsp), + + &yystacksize); + + yyss = yyss1; + yyvs = yyvs1; + } +#else /* no yyoverflow */ +# ifndef YYSTACK_RELOCATE + goto yyexhaustedlab; +# else + /* Extend the stack our own way. */ + if (YYMAXDEPTH <= yystacksize) + goto yyexhaustedlab; + yystacksize *= 2; + if (YYMAXDEPTH < yystacksize) + yystacksize = YYMAXDEPTH; + + { + yytype_int16 *yyss1 = yyss; + union yyalloc *yyptr = + (union yyalloc *) YYSTACK_ALLOC (YYSTACK_BYTES (yystacksize)); + if (! yyptr) + goto yyexhaustedlab; + YYSTACK_RELOCATE (yyss); + YYSTACK_RELOCATE (yyvs); + +# undef YYSTACK_RELOCATE + if (yyss1 != yyssa) + YYSTACK_FREE (yyss1); + } +# endif +#endif /* no yyoverflow */ + + yyssp = yyss + yysize - 1; + yyvsp = yyvs + yysize - 1; + + + YYDPRINTF ((stderr, "Stack size increased to %lu\n", + (unsigned long int) yystacksize)); + + if (yyss + yystacksize - 1 <= yyssp) + YYABORT; + } + + YYDPRINTF ((stderr, "Entering state %d\n", yystate)); + + goto yybackup; + +/*-----------. +| yybackup. | +`-----------*/ +yybackup: + + /* Do appropriate processing given the current state. Read a + look-ahead token if we need one and don't already have one. */ + + /* First try to decide what to do without reference to look-ahead token. */ + yyn = yypact[yystate]; + if (yyn == YYPACT_NINF) + goto yydefault; + + /* Not known => get a look-ahead token if don't already have one. */ + + /* YYCHAR is either YYEMPTY or YYEOF or a valid look-ahead symbol. */ + if (yychar == YYEMPTY) + { + YYDPRINTF ((stderr, "Reading a token: ")); + yychar = YYLEX; + } + + if (yychar <= YYEOF) + { + yychar = yytoken = YYEOF; + YYDPRINTF ((stderr, "Now at end of input.\n")); + } + else + { + yytoken = YYTRANSLATE (yychar); + YY_SYMBOL_PRINT ("Next token is", yytoken, &yylval, &yylloc); + } + + /* If the proper action on seeing token YYTOKEN is to reduce or to + detect an error, take that action. */ + yyn += yytoken; + if (yyn < 0 || YYLAST < yyn || yycheck[yyn] != yytoken) + goto yydefault; + yyn = yytable[yyn]; + if (yyn <= 0) + { + if (yyn == 0 || yyn == YYTABLE_NINF) + goto yyerrlab; + yyn = -yyn; + goto yyreduce; + } + + if (yyn == YYFINAL) + YYACCEPT; + + /* Count tokens shifted since error; after three, turn off error + status. */ + if (yyerrstatus) + yyerrstatus--; + + /* Shift the look-ahead token. */ + YY_SYMBOL_PRINT ("Shifting", yytoken, &yylval, &yylloc); + + /* Discard the shifted token unless it is eof. */ + if (yychar != YYEOF) + yychar = YYEMPTY; + + yystate = yyn; + *++yyvsp = yylval; + + goto yynewstate; + + +/*-----------------------------------------------------------. +| yydefault -- do the default action for the current state. | +`-----------------------------------------------------------*/ +yydefault: + yyn = yydefact[yystate]; + if (yyn == 0) + goto yyerrlab; + goto yyreduce; + + +/*-----------------------------. +| yyreduce -- Do a reduction. | +`-----------------------------*/ +yyreduce: + /* yyn is the number of a rule to reduce with. */ + yylen = yyr2[yyn]; + + /* If YYLEN is nonzero, implement the default value of the action: + `$$ = $1'. + + Otherwise, the following line sets YYVAL to garbage. + This behavior is undocumented and Bison + users should not rely upon it. Assigning to YYVAL + unconditionally makes the parser a bit smaller, and it avoids a + GCC warning that YYVAL may be used uninitialized. */ + yyval = yyvsp[1-yylen]; + + + YY_REDUCE_PRINT (yyn); + switch (yyn) + { + case 3: +#line 196 "filter/grammar.y" + { + StartNode = (yyvsp[(1) - (1)].value); + } + break; + + case 4: +#line 201 "filter/grammar.y" + { /* this is an unconditionally true expression, as a filter applies in any case */ + data_t data = {.dataVal=1}; + (yyval.param).self = NewElement(EXnull, 0, 0, 0, CMP_EQ, FUNC_NONE, data); + } + break; + + case 5: +#line 206 "filter/grammar.y" + { + (yyval.param).self = NewElement(EXipv4FlowID, OFFsrc4Addr, 0, 0, CMP_EQ, FUNC_NONE, NULLPtr); + } + break; + + case 6: +#line 210 "filter/grammar.y" + { + (yyval.param).self = NewElement(EXipv6FlowID, OFFsrc6Addr, 0, 0, CMP_EQ, FUNC_NONE, NULLPtr); + } + break; + + case 7: +#line 214 "filter/grammar.y" + { + (yyval.param).self = AddIdent((yyvsp[(2) - (2)].s)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 8: +#line 218 "filter/grammar.y" + { + (yyval.param).self = NewElement(EXlocal, OFFflowCount, SIZEflowCount, (yyvsp[(3) - (3)].value), (yyvsp[(2) - (3)].param).comp, FUNC_NONE, NULLPtr); + } + break; + + case 9: +#line 222 "filter/grammar.y" + { + (yyval.param).self = AddEngineNum("type", (yyvsp[(2) - (3)].param).comp, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 10: +#line 226 "filter/grammar.y" + { + (yyval.param).self = AddEngineNum("id", (yyvsp[(2) - (3)].param).comp, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 11: +#line 230 "filter/grammar.y" + { + (yyval.param).self = AddEngineNum((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 12: +#line 234 "filter/grammar.y" + { + (yyval.param).self = AddExporterNum((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 13: +#line 238 "filter/grammar.y" + { + (yyval.param).self = AddProto((yyvsp[(1) - (3)].param).direction, NULL, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 14: +#line 242 "filter/grammar.y" + { + (yyval.param).self = AddProto((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].s), 0); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 15: +#line 246 "filter/grammar.y" + { + (yyval.param).self = AddProto((yyvsp[(1) - (3)].param).direction, "icmp", 0); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 16: +#line 250 "filter/grammar.y" + { + (yyval.param).self = AddPortNumber((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 17: +#line 254 "filter/grammar.y" + { + (yyval.param).self = AddICMP("type", (yyvsp[(2) - (3)].param).comp, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 18: +#line 258 "filter/grammar.y" + { + (yyval.param).self = AddICMP("code", (yyvsp[(2) - (3)].param).comp, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 19: +#line 262 "filter/grammar.y" + { + (yyval.param).self = AddICMP((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 20: +#line 266 "filter/grammar.y" + { + (yyval.param).self = AddFlagsNumber((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 21: +#line 270 "filter/grammar.y" + { + (yyval.param).self = AddFlagsString((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].s)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 22: +#line 274 "filter/grammar.y" + { + (yyval.param).self = AddTosNumber((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 23: +#line 278 "filter/grammar.y" + { + (yyval.param).self = AddFwdStatNum((yyvsp[(2) - (3)].param).comp, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 24: +#line 282 "filter/grammar.y" + { + (yyval.param).self = AddFwdStatString((yyvsp[(2) - (2)].s)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 25: +#line 286 "filter/grammar.y" + { + (yyval.param).self = NewElement(EXgenericFlowID, 0, SIZEmsecLast, (yyvsp[(3) - (3)].value), (yyvsp[(2) - (3)].param).comp, FUNC_DURATION, NULLPtr); + } + break; + + case 26: +#line 290 "filter/grammar.y" + { + (yyval.param).self = NewElement(EXgenericFlowID, 0, SIZEmsecLast, (yyvsp[(3) - (3)].value), (yyvsp[(2) - (3)].param).comp, FUNC_PPS, NULLPtr); + } + break; + + case 27: +#line 294 "filter/grammar.y" + { + (yyval.param).self = NewElement(EXgenericFlowID, 0, SIZEmsecLast, (yyvsp[(3) - (3)].value), (yyvsp[(2) - (3)].param).comp, FUNC_BPS, NULLPtr); + } + break; + + case 28: +#line 298 "filter/grammar.y" + { + (yyval.param).self = NewElement(EXgenericFlowID, 0, SIZEmsecLast, (yyvsp[(3) - (3)].value), (yyvsp[(2) - (3)].param).comp, FUNC_BPP, NULLPtr); + } + break; + + case 29: +#line 302 "filter/grammar.y" + { + (yyval.param).self = AddPackets((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 30: +#line 306 "filter/grammar.y" + { + (yyval.param).self = NewElement(EXcntFlowID, OFFflows, SIZEflows, (yyvsp[(3) - (3)].value), (yyvsp[(2) - (3)].param).comp, FUNC_NONE, NULLPtr); + } + break; + + case 31: +#line 310 "filter/grammar.y" + { + (yyval.param).self = AddBytes((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 32: +#line 314 "filter/grammar.y" + { + (yyval.param).self = AddIP((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].s)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 33: +#line 318 "filter/grammar.y" + { + (yyval.param).self = AddNet((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].s), (yyvsp[(4) - (4)].s)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 34: +#line 322 "filter/grammar.y" + { + (yyval.param).self = AddNetPrefix((yyvsp[(1) - (5)].param).direction, (yyvsp[(3) - (5)].s), (yyvsp[(5) - (5)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 35: +#line 326 "filter/grammar.y" + { + (yyval.param).self = AddInterfaceNumber((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 36: +#line 330 "filter/grammar.y" + { + (yyval.param).self = AddVlanNumber((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 37: +#line 334 "filter/grammar.y" + { + (yyval.param).self = AddAsNumber((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 38: +#line 338 "filter/grammar.y" + { + (yyval.param).self = AddMaskNumber((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 39: +#line 342 "filter/grammar.y" + { + (yyval.param).self = AddEthertype((yyvsp[(2) - (2)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 40: +#line 346 "filter/grammar.y" + { + (yyval.param).self = AddFlowDir(DIR_UNSPEC, (yyvsp[(2) - (2)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 41: +#line 350 "filter/grammar.y" + { + (yyval.param).self = AddFlowDir((yyvsp[(2) - (2)].param).direction, -1); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 42: +#line 354 "filter/grammar.y" + { + (yyval.param).self = AddMPLS((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 43: +#line 358 "filter/grammar.y" + { + (yyval.param).self = AddMPLS("any", (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 44: +#line 362 "filter/grammar.y" + { + (yyval.param).self = AddMAC((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].s)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 45: +#line 366 "filter/grammar.y" + { + (yyval.param).self = AddLatency((yyvsp[(1) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 46: +#line 370 "filter/grammar.y" + { + (yyval.param).self = AddASAString((yyvsp[(2) - (3)].s), (yyvsp[(3) - (3)].s)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 47: +#line 374 "filter/grammar.y" + { + switch ((yyvsp[(3) - (3)].param).direction) { + case DIR_INGRESS: + (yyval.param).self = AddASAString((yyvsp[(2) - (3)].s), "ingress"); + break; + case DIR_EGRESS: + (yyval.param).self = AddASAString((yyvsp[(2) - (3)].s), "egress"); + break; + default: + (yyval.param).self = -1; + yyerror("Unknown direction specifier"); + } + if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 48: +#line 389 "filter/grammar.y" + { + (yyval.param).self = AddASA((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 49: +#line 393 "filter/grammar.y" + { + (yyval.param).self = AddASApblock((yyvsp[(1) - (5)].param).direction, (yyvsp[(5) - (5)].s)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 50: +#line 397 "filter/grammar.y" + { + (yyval.param).self = AddACL((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 51: +#line 401 "filter/grammar.y" + { + (yyval.param).self = AddNATString((yyvsp[(2) - (3)].s), (yyvsp[(3) - (3)].s)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 52: +#line 405 "filter/grammar.y" + { + (yyval.param).self = AddNatPortBlocks((yyvsp[(2) - (5)].s), (yyvsp[(3) - (5)].s), (yyvsp[(4) - (5)].param).comp, (yyvsp[(5) - (5)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 53: +#line 409 "filter/grammar.y" + { + (yyval.param).self = AddNAT((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 54: +#line 413 "filter/grammar.y" + { + (yyval.param).self = AddPayload((yyvsp[(2) - (3)].s), (yyvsp[(3) - (3)].s), NULL); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 55: +#line 417 "filter/grammar.y" + { + (yyval.param).self = AddPayload((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].s), (yyvsp[(4) - (4)].s)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 56: +#line 421 "filter/grammar.y" + { + (yyval.param).self = AddGeo((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].s)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 57: +#line 425 "filter/grammar.y" + { + (yyval.param).self = AddObservation((yyvsp[(2) - (5)].s), (yyvsp[(3) - (5)].s), (yyvsp[(4) - (5)].param).comp, (yyvsp[(5) - (5)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 58: +#line 429 "filter/grammar.y" + { + (yyval.param).self = AddVRF((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 59: +#line 433 "filter/grammar.y" + { + (yyval.param).self = AddPFString((yyvsp[(2) - (3)].s), (yyvsp[(3) - (3)].s)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 60: +#line 437 "filter/grammar.y" + { + (yyval.param).self = AddPFNumber((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 61: +#line 441 "filter/grammar.y" + { + switch ((yyvsp[(3) - (3)].param).direction) { + case DIR_IN: + (yyval.param).self = AddPFString((yyvsp[(2) - (3)].s), "in"); + break; + case DIR_OUT: + (yyval.param).self = AddPFString((yyvsp[(2) - (3)].s), "out"); + break; + case DIR_UNSPEC_NAT: + (yyval.param).self = AddPFString((yyvsp[(2) - (3)].s), "nat"); + break; + default: + (yyval.param).self = -1; + yyerror("Unknown direction specifier"); + } + if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 62: +#line 459 "filter/grammar.y" + { + (yyval.param).self = AddIPlist((yyvsp[(1) - (6)].param).direction, (yyvsp[(5) - (6)].list)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 63: +#line 463 "filter/grammar.y" + { + (yyval.param).self = AddPortList((yyvsp[(1) - (6)].param).direction, (yyvsp[(5) - (6)].list)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 64: +#line 467 "filter/grammar.y" + { + (yyval.param).self = AddASList((yyvsp[(1) - (6)].param).direction, (yyvsp[(5) - (6)].list)); if ( (yyval.param).self < 0 ) YYABORT; + } + break; + + case 65: +#line 473 "filter/grammar.y" + { + (yyval.list) = NewIplist((yyvsp[(1) - (1)].s), -1); if ( (yyval.list) == NULL ) YYABORT; + } + break; + + case 66: +#line 477 "filter/grammar.y" + { + (yyval.list) = NewIplist((yyvsp[(1) - (3)].s), (yyvsp[(3) - (3)].value)); if ( (yyval.list) == NULL ) YYABORT; + } + break; + + case 67: +#line 481 "filter/grammar.y" + { + if (InsertIPlist((yyvsp[(1) - (2)].list), (yyvsp[(2) - (2)].s), -1) == 0 ) YYABORT; + } + break; + + case 68: +#line 485 "filter/grammar.y" + { + if (InsertIPlist((yyvsp[(1) - (3)].list), (yyvsp[(3) - (3)].s), -1) == 0 ) YYABORT; + } + break; + + case 69: +#line 489 "filter/grammar.y" + { + if (InsertIPlist((yyvsp[(1) - (4)].list), (yyvsp[(2) - (4)].s), (yyvsp[(4) - (4)].value)) == 0 ) YYABORT; + } + break; + + case 70: +#line 494 "filter/grammar.y" + { + (yyval.list) = NewU64list((yyvsp[(1) - (1)].value)); if ( (yyval.list) == NULL ) YYABORT; + } + break; + + case 71: +#line 498 "filter/grammar.y" + { + if (InsertU64list((yyvsp[(1) - (2)].list), (yyvsp[(2) - (2)].value)) == 0 ) YYABORT; + } + break; + + case 72: +#line 502 "filter/grammar.y" + { + if (InsertU64list((yyvsp[(1) - (3)].list), (yyvsp[(3) - (3)].value)) == 0 ) YYABORT; + } + break; + + case 73: +#line 508 "filter/grammar.y" + { (yyval.param).comp = CMP_EQ; } + break; + + case 74: +#line 509 "filter/grammar.y" + { (yyval.param).comp = CMP_EQ; } + break; + + case 75: +#line 510 "filter/grammar.y" + { (yyval.param).comp = CMP_LT; } + break; + + case 76: +#line 511 "filter/grammar.y" + { (yyval.param).comp = CMP_GT; } + break; + + case 77: +#line 512 "filter/grammar.y" + { (yyval.param).comp = CMP_LE; } + break; + + case 78: +#line 513 "filter/grammar.y" + { (yyval.param).comp = CMP_GE; } + break; + + case 79: +#line 517 "filter/grammar.y" + { (yyval.param).direction = DIR_UNSPEC; } + break; + + case 80: +#line 518 "filter/grammar.y" + { (yyval.param).direction = DIR_SRC; } + break; + + case 81: +#line 519 "filter/grammar.y" + { (yyval.param).direction = DIR_DST; } + break; + + case 82: +#line 520 "filter/grammar.y" + { (yyval.param).direction = DIR_SRC_NAT; } + break; + + case 83: +#line 521 "filter/grammar.y" + { (yyval.param).direction = DIR_DST_NAT; } + break; + + case 84: +#line 522 "filter/grammar.y" + { (yyval.param).direction = DIR_SRC_TUN; } + break; + + case 85: +#line 523 "filter/grammar.y" + { (yyval.param).direction = DIR_DST_TUN; } + break; + + case 86: +#line 524 "filter/grammar.y" + { (yyval.param).direction = DIR_UNSPEC_NAT; } + break; + + case 87: +#line 525 "filter/grammar.y" + { (yyval.param).direction = DIR_UNSPEC_TUN; } + break; + + case 88: +#line 526 "filter/grammar.y" + { (yyval.param).direction = DIR_IN; } + break; + + case 89: +#line 527 "filter/grammar.y" + { (yyval.param).direction = DIR_OUT; } + break; + + case 90: +#line 528 "filter/grammar.y" + { (yyval.param).direction = DIR_IN_SRC; } + break; + + case 91: +#line 529 "filter/grammar.y" + { (yyval.param).direction = DIR_IN_DST; } + break; + + case 92: +#line 530 "filter/grammar.y" + { (yyval.param).direction = DIR_OUT_SRC; } + break; + + case 93: +#line 531 "filter/grammar.y" + { (yyval.param).direction = DIR_OUT_DST; } + break; + + case 94: +#line 532 "filter/grammar.y" + { (yyval.param).direction = DIR_INGRESS; } + break; + + case 95: +#line 533 "filter/grammar.y" + { (yyval.param).direction = DIR_EGRESS; } + break; + + case 96: +#line 534 "filter/grammar.y" + { (yyval.param).direction = DIR_PREV; } + break; + + case 97: +#line 535 "filter/grammar.y" + { (yyval.param).direction = DIR_NEXT; } + break; + + case 98: +#line 536 "filter/grammar.y" + { (yyval.param).direction = BGP_NEXT; } + break; + + case 99: +#line 537 "filter/grammar.y" + { (yyval.param).direction = SRC_ROUTER; } + break; + + case 100: +#line 538 "filter/grammar.y" + { (yyval.param).direction = SRC_ROUTER; } + break; + + case 101: +#line 541 "filter/grammar.y" + { (yyval.value) = (yyvsp[(1) - (1)].param).self; } + break; + + case 102: +#line 542 "filter/grammar.y" + { (yyval.value) = Connect_OR((yyvsp[(1) - (3)].value), (yyvsp[(3) - (3)].value)); } + break; + + case 103: +#line 543 "filter/grammar.y" + { (yyval.value) = Connect_AND((yyvsp[(1) - (3)].value), (yyvsp[(3) - (3)].value)); } + break; + + case 104: +#line 544 "filter/grammar.y" + { (yyval.value) = Invert((yyvsp[(2) - (2)].value)); } + break; + + case 105: +#line 545 "filter/grammar.y" + { (yyval.value) = (yyvsp[(2) - (3)].value); } + break; + + +/* Line 1267 of yacc.c. */ +#line 2476 "filter/grammar.c" + default: break; + } + YY_SYMBOL_PRINT ("-> $$ =", yyr1[yyn], &yyval, &yyloc); + + YYPOPSTACK (yylen); + yylen = 0; + YY_STACK_PRINT (yyss, yyssp); + + *++yyvsp = yyval; + + + /* Now `shift' the result of the reduction. Determine what state + that goes to, based on the state we popped back to and the rule + number reduced by. */ + + yyn = yyr1[yyn]; + + yystate = yypgoto[yyn - YYNTOKENS] + *yyssp; + if (0 <= yystate && yystate <= YYLAST && yycheck[yystate] == *yyssp) + yystate = yytable[yystate]; + else + yystate = yydefgoto[yyn - YYNTOKENS]; + + goto yynewstate; + + +/*------------------------------------. +| yyerrlab -- here on detecting error | +`------------------------------------*/ +yyerrlab: + /* If not already recovering from an error, report this error. */ + if (!yyerrstatus) + { + ++yynerrs; +#if ! YYERROR_VERBOSE + yyerror (YY_("syntax error")); +#else + { + YYSIZE_T yysize = yysyntax_error (0, yystate, yychar); + if (yymsg_alloc < yysize && yymsg_alloc < YYSTACK_ALLOC_MAXIMUM) + { + YYSIZE_T yyalloc = 2 * yysize; + if (! (yysize <= yyalloc && yyalloc <= YYSTACK_ALLOC_MAXIMUM)) + yyalloc = YYSTACK_ALLOC_MAXIMUM; + if (yymsg != yymsgbuf) + YYSTACK_FREE (yymsg); + yymsg = (char *) YYSTACK_ALLOC (yyalloc); + if (yymsg) + yymsg_alloc = yyalloc; + else + { + yymsg = yymsgbuf; + yymsg_alloc = sizeof yymsgbuf; + } + } + + if (0 < yysize && yysize <= yymsg_alloc) + { + (void) yysyntax_error (yymsg, yystate, yychar); + yyerror (yymsg); + } + else + { + yyerror (YY_("syntax error")); + if (yysize != 0) + goto yyexhaustedlab; + } + } +#endif + } + + + + if (yyerrstatus == 3) + { + /* If just tried and failed to reuse look-ahead token after an + error, discard it. */ + + if (yychar <= YYEOF) + { + /* Return failure if at end of input. */ + if (yychar == YYEOF) + YYABORT; + } + else + { + yydestruct ("Error: discarding", + yytoken, &yylval); + yychar = YYEMPTY; + } + } + + /* Else will try to reuse look-ahead token after shifting the error + token. */ + goto yyerrlab1; + + +/*---------------------------------------------------. +| yyerrorlab -- error raised explicitly by YYERROR. | +`---------------------------------------------------*/ +yyerrorlab: + + /* Pacify compilers like GCC when the user code never invokes + YYERROR and the label yyerrorlab therefore never appears in user + code. */ + if (/*CONSTCOND*/ 0) + goto yyerrorlab; + + /* Do not reclaim the symbols of the rule which action triggered + this YYERROR. */ + YYPOPSTACK (yylen); + yylen = 0; + YY_STACK_PRINT (yyss, yyssp); + yystate = *yyssp; + goto yyerrlab1; + + +/*-------------------------------------------------------------. +| yyerrlab1 -- common code for both syntax error and YYERROR. | +`-------------------------------------------------------------*/ +yyerrlab1: + yyerrstatus = 3; /* Each real token shifted decrements this. */ + + for (;;) + { + yyn = yypact[yystate]; + if (yyn != YYPACT_NINF) + { + yyn += YYTERROR; + if (0 <= yyn && yyn <= YYLAST && yycheck[yyn] == YYTERROR) + { + yyn = yytable[yyn]; + if (0 < yyn) + break; + } + } + + /* Pop the current state because it cannot handle the error token. */ + if (yyssp == yyss) + YYABORT; + + + yydestruct ("Error: popping", + yystos[yystate], yyvsp); + YYPOPSTACK (1); + yystate = *yyssp; + YY_STACK_PRINT (yyss, yyssp); + } + + if (yyn == YYFINAL) + YYACCEPT; + + *++yyvsp = yylval; + + + /* Shift the error token. */ + YY_SYMBOL_PRINT ("Shifting", yystos[yyn], yyvsp, yylsp); + + yystate = yyn; + goto yynewstate; + + +/*-------------------------------------. +| yyacceptlab -- YYACCEPT comes here. | +`-------------------------------------*/ +yyacceptlab: + yyresult = 0; + goto yyreturn; + +/*-----------------------------------. +| yyabortlab -- YYABORT comes here. | +`-----------------------------------*/ +yyabortlab: + yyresult = 1; + goto yyreturn; + +#ifndef yyoverflow +/*-------------------------------------------------. +| yyexhaustedlab -- memory exhaustion comes here. | +`-------------------------------------------------*/ +yyexhaustedlab: + yyerror (YY_("memory exhausted")); + yyresult = 2; + /* Fall through. */ +#endif + +yyreturn: + if (yychar != YYEOF && yychar != YYEMPTY) + yydestruct ("Cleanup: discarding lookahead", + yytoken, &yylval); + /* Do not reclaim the symbols of the rule which action triggered + this YYABORT or YYACCEPT. */ + YYPOPSTACK (yylen); + YY_STACK_PRINT (yyss, yyssp); + while (yyssp != yyss) + { + yydestruct ("Cleanup: popping", + yystos[*yyssp], yyvsp); + YYPOPSTACK (1); + } +#ifndef yyoverflow + if (yyss != yyssa) + YYSTACK_FREE (yyss); +#endif +#if YYERROR_VERBOSE + if (yymsg != yymsgbuf) + YYSTACK_FREE (yymsg); +#endif + /* Make sure YYID is used. */ + return YYID (yyresult); +} + + +#line 548 "filter/grammar.y" + + +static void yyerror(char *msg, ...) { + char msgStr[128]; + + va_list var_args; + va_start(var_args, msg); + vsnprintf(msgStr, 127, msg, var_args); + va_end(var_args); + msgStr[127] = '\0'; + + if ( FilterFilename ) { + printf("File '%s' line %d: %s at '%s'\n", FilterFilename, lineno, msgStr, yytext); + } else { + printf("Line %d: %s at '%s'\n", lineno, msgStr, yytext); + } +} /* End of yyerror */ + +static uint32_t NewIPElement(ipStack_t *ipStack, int direction, int comp, data_t *data) { + + int block = -1; + + if ( ipStack->af == PF_INET ) { + // handle IPv4 addr element + switch ( direction ) { + case DIR_SRC: + block = NewElement(EXipv4FlowID, OFFsrc4Addr, SIZEsrc4Addr, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]); + break; + case DIR_DST: + block = NewElement(EXipv4FlowID, OFFdst4Addr, SIZEdst4Addr, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]); + break; + case DIR_SRC_NAT: + block = NewElement(EXnatXlateIPv4ID, OFFxlateSrc4Addr, SIZExlateSrc4Addr, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]); + break; + case DIR_DST_NAT: + block = NewElement(EXnatXlateIPv4ID, OFFxlateDst4Addr, SIZExlateDst4Addr, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]); + break; + case DIR_SRC_TUN: + block = NewElement(EXtunIPv4ID, OFFtunSrc4Addr, SIZEtunSrc4Addr, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]); + break; + case DIR_DST_TUN: + block = NewElement(EXtunIPv4ID, OFFtunDst4Addr, SIZEtunDst4Addr, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]); + break; + case DIR_NEXT: + block = NewElement(EXipNextHopV4ID, OFFNextHopV4IP, SIZENextHopV4IP, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]); + break; + case BGP_NEXT: + block = NewElement(EXbgpNextHopV4ID, OFFbgp4NextIP, SIZEbgp4NextIP, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]); + break; + case SRC_ROUTER: + block = NewElement(EXipReceivedV4ID, OFFReceived4IP, SIZEReceived4IP, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]); + break; + } // End of switch + + } else { + // handle IPv6 addr element + int v6_1, v6_2 = 0; + switch ( direction ) { + case DIR_SRC: + v6_1 = NewElement(EXipv6FlowID, OFFsrc6Addr, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]); + v6_2 = NewElement(EXipv6FlowID, OFFsrc6Addr + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]); + break; + case DIR_DST: + v6_1 = NewElement(EXipv6FlowID, OFFdst6Addr, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]); + v6_2 = NewElement(EXipv6FlowID, OFFdst6Addr + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]); + break; + case DIR_SRC_NAT: + v6_1 = NewElement(EXnatXlateIPv6ID, OFFxlateSrc6Addr, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]); + v6_2 = NewElement(EXnatXlateIPv6ID, OFFxlateSrc6Addr + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]); + break; + case DIR_DST_NAT: + v6_1 = NewElement(EXnatXlateIPv6ID, OFFxlateDst6Addr, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]); + v6_2 = NewElement(EXnatXlateIPv6ID, OFFxlateDst6Addr + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]); + break; + case DIR_SRC_TUN: + v6_1 = NewElement(EXtunIPv6ID, OFFtunSrc6Addr, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]); + v6_2 = NewElement(EXtunIPv6ID, OFFtunSrc6Addr + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]); + break; + case DIR_DST_TUN: + v6_1 = NewElement(EXtunIPv6ID, OFFtunDst6Addr, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]); + v6_2 = NewElement(EXtunIPv6ID, OFFtunDst6Addr + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]); + break; + case DIR_NEXT: + v6_1 = NewElement(EXipNextHopV6ID, OFFNextHopV6IP, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]); + v6_2 = NewElement(EXipNextHopV6ID, OFFNextHopV6IP + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]); + break; + case BGP_NEXT: + v6_1 = NewElement(EXbgpNextHopV6ID, OFFbgp6NextIP, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]); + v6_2 = NewElement(EXbgpNextHopV6ID, OFFbgp6NextIP + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]); + break; + case SRC_ROUTER: + v6_1 = NewElement(EXipReceivedV6ID, OFFReceived6IP, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]); + v6_2 = NewElement(EXipReceivedV6ID, OFFReceived6IP + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]); + break; + } // End of switch + + // IPv6 + if ( v6_1 && v6_2 ) + block = Connect_AND(v6_1, v6_2); + + } + + return block; +} // NewIPElement + +static uint32_t ChainHosts(ipStack_t *ipStack, int numIP, int direction) { + + data_t data[2] = { NULLPtr, NULLPtr }; + + uint32_t final = 0; + int i = 0; + do { + // chain multiple IPs + int block = NewIPElement(&ipStack[i], direction, CMP_EQ, data); + final = final == 0 ? block : Connect_OR(final, block); + + } while (++i < numIP); + + return final; +} // End of ChainHosts + +static int AddIdent(char *ident) { + char *c; + + // ident[a-zA-Z0-9_\-]+ { + size_t len = strlen(ident); + if ( len == 0 || len > 255 ) { + yyerror("Invalid ident string: %s", ident); + return -1; + } + + c = &ident[0]; + while ( *c ) { + if ( *c != '_' && *c != '-' && !isalnum(*c) ) { + yyerror("Invalid char in ident string: %s: %c", ident, *c); + return 0; + } + c++; + } + + data_t data = {.dataPtr = strdup(ident)}; + return NewElement(EXnull, 0, 0, 0, CMP_IDENT, FUNC_NONE, data); + +} // End of AddIdent + +static int AddProto(direction_t direction, char *protoStr, uint64_t protoNum) { + + if ( protoNum > 255 ) { + yyerror("Protocol %d out of range", protoNum); + return -1; + } + + if ( protoStr != NULL ) { + protoNum = ProtoNum(protoStr); + if ( protoNum == -1 ) { + yyerror("Unknown protocol: %s", protoStr); + Protoinfo(protoStr); + return -1; + } + } + + if ( direction == DIR_UNSPEC ) { + return NewElement(EXgenericFlowID, OFFproto, SIZEproto, protoNum, CMP_EQ, FUNC_NONE, NULLPtr); + } else if ( direction == DIR_UNSPEC_TUN ) { + return Connect_OR( + NewElement(EXtunIPv4ID, OFFtunProtoV4, SIZEtunProtoV4, protoNum, CMP_EQ, FUNC_NONE, NULLPtr), + NewElement(EXtunIPv6ID, OFFtunProtoV6, SIZEtunProtoV6, protoNum, CMP_EQ, FUNC_NONE, NULLPtr) + ); + } else { + yyerror("Unknown protocol specifier"); + return -1; + } +} // End of AddProtoString + +static int AddEngineNum(char *type, uint16_t comp, uint64_t num) { + if ( num > 255 ) { + yyerror("Engine argument %d of range 0..255", num); + return -1; + } + + int ret = -1; + if ( strcasecmp(type, "type") == 0 ) { + ret = NewElement(EXnull, OFFengineType, SIZEengineType, num, comp, FUNC_NONE, NULLPtr); + } else if ( strcasecmp(type, "id") == 0 ) { + ret = NewElement(EXnull, OFFengineID, SIZEengineID, num, comp, FUNC_NONE, NULLPtr); + } + + return ret; +} // End of AddEngineNum + +static int AddExporterNum(char *type, uint16_t comp, uint64_t num) { + if ( num > 65535 ) { + yyerror("Exporter argument %d of range 0..65535", num); + return -1; + } + + int ret = -1; + if ((strcasecmp(type, "id") == 0 ) || (strcasecmp(type, "sysid") == 0)) { + ret = NewElement(EXnull, OFFexporterID, SIZEexporterID, num, comp, FUNC_NONE, NULLPtr); + } else { + yyerror("Unknown exporter argument: %s", type); + } + + return ret; +} // End of AddExporterNum + +static int AddPortNumber(direction_t direction, uint16_t comp, uint64_t port) { + if ( port > 65535 ) { + yyerror("Port number: %d out of range", port); + return -1; + } + + int ret = -1; + switch ( direction ) { + case DIR_SRC: + ret = NewElement(EXgenericFlowID, OFFsrcPort, SIZEsrcPort, port, comp, FUNC_NONE, NULLPtr); + break; + case DIR_DST: + ret = NewElement(EXgenericFlowID, OFFdstPort, SIZEdstPort, port, comp, FUNC_NONE, NULLPtr); + break; + case DIR_SRC_NAT: + ret = NewElement(EXnatXlatePortID, OFFxlateSrcPort, SIZExlateSrcPort, port, comp, FUNC_NONE, NULLPtr); + break; + case DIR_DST_NAT: + ret = NewElement(EXnatXlatePortID, OFFxlateDstPort, SIZExlateDstPort, port, comp, FUNC_NONE, NULLPtr); + break; + case DIR_UNSPEC: + ret = Connect_OR( + NewElement(EXgenericFlowID, OFFsrcPort, SIZEsrcPort, port, comp, FUNC_NONE, NULLPtr), + NewElement(EXgenericFlowID, OFFdstPort, SIZEdstPort, port, comp, FUNC_NONE, NULLPtr) + ); + break; + case DIR_UNSPEC_NAT: + ret = Connect_OR( + NewElement(EXnatXlatePortID, OFFxlateSrcPort, SIZExlateSrcPort, port, comp, FUNC_NONE, NULLPtr), + NewElement(EXnatXlatePortID, OFFxlateDstPort, SIZExlateDstPort, port, comp, FUNC_NONE, NULLPtr) + ); + break; + default: + yyerror("Unknown direction"); + } // End switch + + return ret; +} // End of AddPortNumber + +static int AddICMP(char *type, uint16_t comp, uint64_t number) { + if ( number > 255 ) { + yyerror("ICMP argument of range 0..255"); + return -1; + } + + int ret = -1; + // imply ICMP-TYPE with a proto ICMP block + int protoICMP = Connect_OR ( + NewElement(EXgenericFlowID, OFFproto, SIZEproto, IPPROTO_ICMP, CMP_EQ, FUNC_NONE, NULLPtr), + NewElement(EXgenericFlowID, OFFproto, SIZEproto, IPPROTO_ICMPV6, CMP_EQ, FUNC_NONE, NULLPtr) + ); + if ( strcasecmp(type, "type") == 0 ) { + ret = Connect_AND( + protoICMP, + NewElement(EXgenericFlowID, OFFicmpType, SIZEicmpType, number, comp, FUNC_NONE, NULLPtr) + ); + } else if ( strcasecmp(type, "code") == 0 ) { + ret = Connect_AND( + protoICMP, + NewElement(EXgenericFlowID, OFFicmpCode, SIZEicmpCode, number, comp, FUNC_NONE, NULLPtr) + ); + } + + return ret; +} // End of AddICMP + +static int AddFlagsNumber(direction_t direction, uint16_t comp, uint64_t flags) { + if ( flags > 255 ) { + yyerror("flags number > 255"); + return -1; + } + + // direction ignored + + return Connect_AND( + // imply flags with proto TCP + NewElement(EXgenericFlowID, OFFproto, SIZEproto, IPPROTO_TCP, CMP_EQ, FUNC_NONE, NULLPtr), + NewElement(EXgenericFlowID, OFFtcpFlags, SIZEtcpFlags, flags, comp, FUNC_NONE, NULLPtr) + ); +} // End of AddFlagsNumber + +static int AddFlagsString(direction_t direction, char *flags) { + size_t len = strlen(flags); + if ( len > 10 ) { + yyerror("Flags string error"); + return -1; + } + + int strict = 0; + if ( flags[0] == '=') { + strict = 1; + len--; + } + + int cnt = 0; + uint64_t fl = 0; + if ( strchr(flags, 'F') ) { fl |= 1; cnt++; } + if ( strchr(flags, 'S') ) { fl |= 2; cnt++; } + if ( strchr(flags, 'R') ) { fl |= 4; cnt++; } + if ( strchr(flags, 'P') ) { fl |= 8; cnt++; } + if ( strchr(flags, 'A') ) { fl |= 16; cnt++; } + if ( strchr(flags, 'U') ) { fl |= 32; cnt++; } + if ( strchr(flags, 'E') ) { fl |= 64; cnt++; } + if ( strchr(flags, 'C') ) { fl |= 128; cnt++; } + if ( strchr(flags, 'X') ) { fl = 63; cnt++; } + + if ( cnt != len ) { + yyerror("Unknown flags"); + return -1; + } + + if (strict) { + return AddFlagsNumber(direction, CMP_EQ, fl); + } else { + return AddFlagsNumber(direction, CMP_FLAGS, fl); + } + + // unreached +} // End of AddFlagsString + +static int AddTosNumber(direction_t direction, uint16_t comp, uint64_t tos) { + if ( tos > 255 ) { + yyerror("Tos number out of range"); + return -1; + } + + int ret = -1; + switch (direction) { + case DIR_UNSPEC: + case DIR_SRC: + ret = NewElement(EXgenericFlowID, OFFsrcTos, SIZEsrcTos, tos, comp, FUNC_NONE, NULLPtr); + break; + case DIR_DST: + ret = NewElement(EXflowMiscID, OFFdstTos, SIZEdstTos, tos, comp, FUNC_NONE, NULLPtr); + break; + default: + yyerror("syntax error"); + } // End of switch + + return ret; +} // End of AddTosNumber + +static int AddPackets(direction_t direction, uint16_t comp, uint64_t packets) { + + int ret = -1; + switch ( direction ) { + case DIR_UNSPEC: + case DIR_IN: + ret = NewElement(EXgenericFlowID, OFFinPackets, SIZEinPackets, packets, comp, FUNC_NONE, NULLPtr); + break; + case DIR_OUT: + ret = NewElement(EXgenericFlowID, OFFoutPackets, SIZEoutPackets, packets, comp, FUNC_NONE, NULLPtr); + break; + default: + yyerror("Invalid direction for packets"); + } // End of switch + return ret; +} // End of AddPackets + +static int AddBytes(direction_t direction, uint16_t comp, uint64_t bytes) { + int ret = -1; + switch ( direction ) { + case DIR_UNSPEC: + case DIR_IN: + ret = NewElement(EXgenericFlowID, OFFinBytes, SIZEinBytes, bytes, comp, FUNC_NONE, NULLPtr); + break; + case DIR_OUT: + ret = NewElement(EXgenericFlowID, OFFoutBytes, SIZEoutBytes, bytes, comp, FUNC_NONE, NULLPtr); + break; + default: + yyerror("Invalid direction for bytes"); + } // End of switch + return ret; +} // End of AddBytes + +static int AddFwdStatNum(uint16_t comp, uint64_t num) { + if ( num > 255 ) { + yyerror("Forwarding status: %d our of range", num); + return -1; + } + + return NewElement(EXgenericFlowID, OFFfwdStatus, SIZEfwdStatus, num, comp, FUNC_NONE, NULLPtr); +} // End of AddFwdStatNum + +static int AddFwdStatString(char *string) { + int fwdStatus = fwdStatusNum(string); + if ( fwdStatus < 0 ) { + fwdStatusInfo(); + yyerror("Unkown forwarding status: %s", string); + return -1; + } + + return NewElement(EXgenericFlowID, OFFfwdStatus, SIZEfwdStatus, fwdStatus, CMP_EQ, FUNC_NONE, NULLPtr); +} // End of AddFwdStatString + +static int AddMPLS(char *type, uint16_t comp, uint64_t value) { + if ( strncasecmp(type, "label", 5) == 0 ) { + char *s = type + 5; + if ( *s == '\0' ) { + yyerror("Missing mpls stack number for label"); + return -1; + } + int lnum = (int)strtol(s, (char **)NULL, 10); + data_t labelIndex = { .dataVal = lnum}; + return NewElement(EXmplsLabelID, 0, 0, value, comp, FUNC_MPLS_LABEL, labelIndex); + } else if ( strcasecmp(type, "any") == 0 ) { + data_t labelValue = { .dataVal = value}; + return NewElement(EXmplsLabelID, 0, 0, value, comp, FUNC_MPLS_ANY, labelValue); + } else if ( strcasecmp(type, "eos") == 0 ) { + // match End of Stack label + return NewElement(EXmplsLabelID, 0, 0, value, comp, FUNC_MPLS_EOS, NULLPtr); + } else if ( strncasecmp(type, "exp", 3) == 0 ) { + char *s = type + 3; + if ( *s == '\0' ) { + yyerror("Missing mpls stack number for exp value"); + return -1; + } + int lnum = (int)strtol(s, (char **)NULL, 10); + data_t data = {.dataVal = lnum}; + return NewElement(EXmplsLabelID, 0, 0, value, comp, FUNC_MPLS_EXP, data); + } else { + yyerror("Unknown mpls argument: %s", type); + return -1; + } + + // unreached + return -1; +} // End of AddMPLS + +static int AddEthertype(uint64_t etherType) { + return NewElement(EXlayer2ID, OFFetherType, SIZEetherType, etherType, CMP_EQ, FUNC_NONE, NULLPtr); +} // End of AddMAC + +static int AddMAC(direction_t direction, char *macString) { + + uint64_t macVal = Str2Mac(macString); + if ( macVal == 0 ) return -1; + + switch (direction) { + case DIR_IN_SRC: + return NewElement(EXmacAddrID, OFFinSrcMac, SIZEinSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr); + break; + case DIR_IN_DST: + return NewElement(EXmacAddrID, OFFinDstMac, SIZEinDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr); + break; + case DIR_OUT_SRC: + return NewElement(EXmacAddrID, OFFoutSrcMac, SIZEoutSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr); + break; + case DIR_OUT_DST: + return NewElement(EXmacAddrID, OFFoutDstMac, SIZEoutDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr); + break; + case DIR_SRC: + return Connect_OR ( + NewElement(EXmacAddrID, OFFinSrcMac, SIZEinSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr), + NewElement(EXmacAddrID, OFFoutSrcMac, SIZEoutSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr) + ); + break; + case DIR_DST: + return Connect_OR ( + NewElement(EXmacAddrID, OFFinDstMac, SIZEinDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr), + NewElement(EXmacAddrID, OFFoutDstMac, SIZEoutDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr) + ); + break; + case DIR_IN: + return Connect_OR ( + NewElement(EXmacAddrID, OFFinSrcMac, SIZEinSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr), + NewElement(EXmacAddrID, OFFinDstMac, SIZEinDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr) + ); + break; + case DIR_OUT: + return Connect_OR ( + NewElement(EXmacAddrID, OFFoutSrcMac, SIZEoutSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr), + NewElement(EXmacAddrID, OFFoutDstMac, SIZEoutDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr) + ); + break; + case DIR_UNSPEC: { + int in = Connect_OR ( + NewElement(EXmacAddrID, OFFinSrcMac, SIZEinSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr), + NewElement(EXmacAddrID, OFFinDstMac, SIZEinDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr) + ); + int out = Connect_OR ( + NewElement(EXmacAddrID, OFFoutSrcMac, SIZEoutSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr), + NewElement(EXmacAddrID, OFFoutDstMac, SIZEoutDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr) + ); + return Connect_OR(in, out); + } break; + default: + yyerror("Unknown mac argument"); + return -1; + } + + // unreached + return -1; +} // End of AddMAC + +static int AddLatency(char *type, uint16_t comp, uint64_t number) { + + int ret = -1; + if ( strcasecmp(type, "client") == 0 ) { + ret = NewElement(EXlatencyID, OFFusecClientNwDelay, SIZEusecClientNwDelay, number, comp, FUNC_NONE, NULLPtr); + } if ( strcasecmp(type, "server") == 0 ) { + ret = NewElement(EXlatencyID, OFFusecServerNwDelay, SIZEusecServerNwDelay, number, comp, FUNC_NONE, NULLPtr); + } if ( strcasecmp(type, "app") == 0 ) { + ret = NewElement(EXlatencyID, OFFusecApplLatency, SIZEusecApplLatency, number, comp, FUNC_NONE, NULLPtr); + } + + return ret; +} // End of AddLatency + +static int AddASAString(char *event, char *asaStr) { + + if (strcasecmp(event, "event") == 0) { + int eventNum = fwEventID(asaStr); + if ( eventNum < 0 ) { + yyerror("Invalid ASA event type: %s", asaStr); + return -1; + } + return NewElement(EXnselCommonID, OFFfwEvent, SIZEfwEvent, eventNum, CMP_EQ, FUNC_NONE, NULLPtr); + } else if (strcasecmp(event, "denied") == 0) { + int eventNum = fwXEventID(asaStr); + if ( eventNum < 0 ) { + yyerror("Invalid ASA Xevent type: %s", asaStr); + return -1; + } + return NewElement(EXnselCommonID, OFFfwXevent, SIZEfwXevent, eventNum, CMP_EQ, FUNC_NONE, NULLPtr); + } else if (strcasecmp(event, "user") == 0) { + if ( strlen(asaStr) > 65 ) { + yyerror("Length of ASA user name: %s > 65 chars", asaStr); + return -1; + } + data_t data = {.dataPtr = strdup(asaStr)}; + return NewElement(EXnselUserID, OFFusername, 0, 0, CMP_STRING, FUNC_NONE, data); + } + + yyerror("Invalid ASA type: %s", event); + return -1; + +} // End of AddASAString + +static int AddASA(char *event, uint16_t comp, uint64_t number) { + + if ( strcasecmp(event, "event") == 0 ) { + if ( number > 5 ) { + yyerror("Invalid event number %llu. Expected 0..5", number); + return -1; + } + return NewElement(EXnselCommonID, OFFfwEvent, SIZEfwEvent, number, comp, FUNC_NONE, NULLPtr); + } else if ( strcasecmp(event, "xevent") == 0 ) { + return NewElement(EXnselCommonID, OFFfwXevent, SIZEfwXevent, number, comp, FUNC_NONE, NULLPtr); + } + + yyerror("Invalid ASA type: %s", event); + return -1; + +} // End of AddASA + +static int AddACL(direction_t direction, uint16_t comp, uint64_t number) { + + uint32_t offset = 0; + switch (direction) { + case DIR_INGRESS: + offset = OFFingressAcl; + break; + case DIR_EGRESS: + offset = OFFegressAcl; + break; + default: + yyerror("Invalid ACL direction"); + return -1; + } + + uint32_t acl[3]; + acl[0] = NewElement(EXnselAclID, offset, sizeof(uint32_t), number, comp, FUNC_NONE, NULLPtr); + acl[1] = NewElement(EXnselAclID, offset + sizeof(uint32_t), sizeof(uint32_t), number, comp, FUNC_NONE, NULLPtr); + acl[2] = NewElement(EXnselAclID, offset + 2*sizeof(uint32_t), sizeof(uint32_t), number, comp, FUNC_NONE, NULLPtr); + return Connect_OR ( + Connect_OR(acl[0], acl[1]), acl[2] + ); + return -1; + +} // End of AddASA + +static int AddASApblock(direction_t direction, char *arg) { + + if (strcasecmp(arg, "pblock") != 0) { + yyerror("Invalid port block: %s", arg); + return -1; + } + + int ret = -1; + switch (direction) { + case DIR_SRC: + ret = NewElement(EXgenericFlowID, OFFsrcPort, SIZEsrcPort, 1, CMP_EQ, FUNC_PBLOCK, NULLPtr); + break; + case DIR_DST: + ret = NewElement(EXgenericFlowID, OFFdstPort, SIZEdstPort, 1, CMP_EQ, FUNC_PBLOCK, NULLPtr); + break; + case DIR_UNSPEC: + ret = Connect_OR( + NewElement(EXgenericFlowID, OFFsrcPort, SIZEsrcPort, 1, CMP_EQ, FUNC_PBLOCK, NULLPtr), + NewElement(EXgenericFlowID, OFFdstPort, SIZEdstPort, 1, CMP_EQ, FUNC_PBLOCK, NULLPtr) + ); + break; + default: + yyerror("Invalid port direction"); + } + + return ret; +} // End of AddASApblock + +static int AddNATString(char *event, char *natStr) { + + if (strcasecmp(event, "event") == 0) { + int eventNum = natEventNum(natStr); + if ( eventNum < 0 ) { + yyerror("Invalid NAT event type: %s", natStr); + natEventInfo(); + return -1; + } + return NewElement(EXnelCommonID, OFFnatEvent, SIZEnatEvent, eventNum, CMP_EQ, FUNC_NONE, NULLPtr); + } + + yyerror("Invalid NAT type: %s", event); + return -1; + +} // End of AddNATString + +static int AddNAT(char *event, uint16_t comp, uint64_t number) { + + if (strcasecmp(event, "event") == 0) { + if ( number > MAX_NAT_EVENTS ) { + yyerror("NAT event: %llu out of range\n", number); + return -1; + } + return NewElement(EXnelCommonID, OFFnatEvent, SIZEnatEvent, number, comp, FUNC_NONE, NULLPtr); + } + + return -1; +} // End of AddNAT + +static int AddNatPortBlocks(char *type, char *subtype, uint16_t comp, uint64_t number) { + + uint32_t offset = 0; + if (strcasecmp(type, "pblock") == 0) { + if (strcasecmp(subtype, "start") == 0) { + offset = OFFnelblockStart; + } else if (strcasecmp(subtype, "end") == 0) { + offset = OFFnelblockEnd; + } else if (strcasecmp(subtype, "step") == 0) { + offset = OFFnelblockStep; + } else if (strcasecmp(subtype, "size") == 0) { + offset = OFFnelblockSize; + } else { + yyerror("Unknown port block argument: %s\n", subtype); + return -1; + } + } else { + yyerror("Unknown NAT argument: %s\n", type); + return -1; + } + + return NewElement(EXnatPortBlockID, offset, SIZEnelblockStart, number, comp, FUNC_NONE, NULLPtr); + return -1; +} // End of AddNatPortBlocks + +static int AddPayloadSSL(char *type, char *arg, char *opt) { + if (strcasecmp(arg, "defined") == 0) { + return NewElement(SSLindex, 0, 0, 0, CMP_EQ, FUNC_NONE, NULLPtr); + } else if (strcasecmp(arg, "version") == 0) { + if ( opt == NULL ){ + yyerror("String %s is not a valid SSL/TLS version", arg); + return -1; + } + unsigned int major, minor; + if (sscanf(opt, "%1u.%1u", &major, &minor) != 2 || major > 3 || minor > 3 ) { + yyerror("String %s is not a valid SSL/TLS version", opt); + return -1; + } + // if old SSL 1.0, 2.0 or 3.0 + if (major > 1 && minor > 0){ + yyerror("String %s is not a valid SSL/TLS version", opt); + return -1; + } + uint16_t version = 0; + if ( strcasecmp(type, "tls") == 0 ) { + if (major > 1){ + yyerror("String %s is not a valid TLS version", opt); + return -1; + } + // TLS + version = (0x03 << 8) | (minor + 1); + } else { + if (minor > 0){ + yyerror("String %s is not a valid SSL version", opt); + return -1; + } + // SSL + version = major << 8; + } + return NewElement(SSLindex, OFFsslVersion, SIZEsslVersion, version, CMP_EQ, FUNC_NONE, NULLPtr); + } else if (strcasecmp(arg, "sni") == 0) { + if ( opt == NULL || strlen(opt) > 64 ) { + yyerror("Invalid string %s for SSL/TLS sni name", opt != NULL ? opt : ""); + return -1; + } + data_t data = {.dataPtr=strdup(opt)}; + return NewElement(SSLindex, OFFsslSNI, SIZEsslSNI, 0, CMP_SUBSTRING, FUNC_NONE, data); + } + yyerror("String %s is not a valid SSL/TLS filter", arg); + return -1; +} // End of AddPayloadSSL + +static int AddPayloadJA3(char *type, char *arg, char *opt) { + if (strcasecmp(arg, "defined") == 0) { + return NewElement(JA3index, OFFja3String, SIZEja3String, 0, CMP_EQ, FUNC_NONE, NULLPtr); + } else if (IsMD5(arg) == 0) { + yyerror("String %s is not a valid ja3 string", arg); + return -1; + } + data_t data = {.dataPtr=strdup(arg)}; + return NewElement(JA3index, OFFja3String, SIZEja3String, 0, CMP_STRING, FUNC_NONE, data); +} // End of AddPayloadJA3 + +static int AddPayloadJA4(char *type, char *arg, char *opt) { + if (strcasecmp(arg, "defined") == 0) { + return NewElement(JA4index, OFFja4String, SIZEja3String, 0, CMP_EQ, FUNC_NONE, NULLPtr); + } else if ( ja4Check(arg) == 0 ){ + yyerror("String %s is not a valid ja4 string", arg); + return -1; + } + data_t data = {.dataPtr=strdup(arg)}; + return NewElement(JA4index, OFFja4String, SIZEja4String, 0, CMP_STRING, FUNC_NONE, data); +} // End of AddPayloadJA4 + +static int AddPayload(char *type, char *arg, char *opt) { + + if (strcasecmp(type, "content") == 0) { + data_t data = {.dataPtr = arg}; + return NewElement(EXinPayloadID, 0, 0, 0, CMP_PAYLOAD, FUNC_NONE, data); + } else if (strcasecmp(type, "regex") == 0) { + int err[2]; + char *regexArg = opt ? opt : ""; + srx_Context *program = srx_CreateExt(arg, strlen(arg), regexArg, err, NULL, NULL); + if ( !program ) { + yyerror("failed to compile regex: %s", arg); + return -1; + } + data_t data = {.dataPtr = program}; + return NewElement(EXinPayloadID, 0, 0, 0, CMP_REGEX, FUNC_NONE, data); + } else if (strcasecmp(type, "ssl") == 0 || strcasecmp(type, "tls") == 0) { + return AddPayloadSSL(type, arg, opt); + } else if (strcasecmp(type, "ja3") == 0) { + return AddPayloadJA3(type, arg, opt); + } else if (strcasecmp(type, "ja4") == 0) { + return AddPayloadJA4(type, arg, opt); + } else if (strcasecmp(type, "ja4s") == 0) { +#ifdef BUILDJA4 + if ( ja4sCheck(arg) == 0 ){ + yyerror("String %s is not a valid ja4s string", arg); + return -1; + } + data_t data = {.dataPtr=strdup(arg)}; + return NewElement(JA4index, OFFja4String, SIZEja4sString, 0, CMP_STRING, FUNC_NONE, data); +#else + yyerror("ja4s code not enabled", arg); + return -1; +#endif + } else { + yyerror("Unknown PAYLOAD argument: %s\n", type); + return -1; + } + + return -1; +} // End of AddPayload + +static int AddGeo(direction_t direction, char *geo) { + + if ( strlen(geo) != 2 ) { + yyerror("Unknown Geo country: %s. Need a two letter country code.", geo); + return -1; + } + + data_t data = {.dataVal = direction}; + int ret = -1; + uint64_t geoVal = toupper(geo[0]) + (toupper(geo[1]) << 8); + switch (direction) { + case DIR_SRC: + ret = NewElement(EXlocal, OFFgeoSrcIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, data); + break; + case DIR_DST: + ret = NewElement(EXlocal, OFFgeoDstIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, data); + break; + case DIR_SRC_NAT: + ret = NewElement(EXlocal, OFFgeoSrcNatIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, data); + break; + case DIR_DST_NAT: + ret = NewElement(EXlocal, OFFgeoDstNatIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, data); + break; + case DIR_SRC_TUN: + ret = NewElement(EXlocal, OFFgeoSrcTunIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, data); + break; + case DIR_DST_TUN: + ret = NewElement(EXlocal, OFFgeoDstTunIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, data); + break; + case DIR_UNSPEC: { + data_t srcData = {.dataVal = DIR_SRC}; + data_t dstData = {.dataVal = DIR_DST}; + ret = Connect_OR( + NewElement(EXlocal, OFFgeoSrcIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, srcData), + NewElement(EXlocal, OFFgeoDstIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, dstData) + ); + } break; + case DIR_UNSPEC_NAT: { + data_t srcData = {.dataVal = DIR_SRC_NAT}; + data_t dstData = {.dataVal = DIR_DST_NAT}; + ret = Connect_OR( + NewElement(EXlocal, OFFgeoSrcNatIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, srcData), + NewElement(EXlocal, OFFgeoDstNatIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, dstData) + ); + } break; + case DIR_UNSPEC_TUN: { + data_t srcData = {.dataVal = DIR_SRC_TUN}; + data_t dstData = {.dataVal = DIR_DST_TUN}; + ret = Connect_OR( + NewElement(EXlocal, OFFgeoSrcTunIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, srcData), + NewElement(EXlocal, OFFgeoDstTunIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, dstData) + ); + } break; + default: + yyerror("Unknown Geo specifier"); + } + + return ret; +} // End of AddGeo + +static int AddObservation(char *type, char *subType, uint16_t comp, uint64_t number) { + + if (strcasecmp(subType, "id") != 0) { + yyerror("Unknown observation specifier: %s", subType); + return -1; + } + int ret = -1; + if (strcasecmp(type, "domain") == 0) { + ret = NewElement(EXobservationID, OFFdomainID, SIZEdomainID, number, comp, FUNC_NONE, NULLPtr); + } else if (strcasecmp(type, "point") == 0) { + ret = NewElement(EXobservationID, OFFpointID, SIZEpointID, number, comp, FUNC_NONE, NULLPtr); + } else { + yyerror("Unknown observation specifier: %s", type); + } + + return ret; +} // End of AddObservation + +static int AddVRF(direction_t direction, uint16_t comp, uint64_t number) { + + int ret = -1; + switch(direction) { + case DIR_INGRESS: + ret = NewElement(EXvrfID, OFFingressVrf, SIZEingressVrf, number, comp, FUNC_NONE, NULLPtr); + break; + case DIR_EGRESS: + ret = NewElement(EXvrfID, OFFegressVrf, SIZEegressVrf, number, comp, FUNC_NONE, NULLPtr); + break; + default: + yyerror("Unknown vrf specifier"); + } + + return ret; +} // End of AddVRF + +static int AddPFString(char *type, char *arg) { + + int ret = -1; + if (strcasecmp(type, "action") == 0) { + int pfAction = pfActionNr(arg); + if ( pfAction < 0 ) { + yyerror("Invalid pf action: %s", arg); + printf("Possible pf action values: "); + pfListActions(); + } else { + ret = NewElement(EXpfinfoID, OFFpfAction, SIZEpfAction, pfAction, CMP_EQ, FUNC_NONE, NULLPtr); + } + } else if (strcasecmp(type, "reason") == 0) { + int pfReason = pfReasonNr(arg); + if ( pfReason < 0 ) { + yyerror("Invalid pf reason: %s", arg); + printf("Possible pf reason values: "); + pfListReasons(); + } else { + ret = NewElement(EXpfinfoID, OFFpfReason, SIZEpfReason, pfReason, CMP_EQ, FUNC_NONE, NULLPtr); + } + } else if (strcasecmp(type, "dir") == 0) { + int pfDir = strcasecmp(arg, "in") == 0 ? 1: 0; + ret = NewElement(EXpfinfoID, OFFpfDir, SIZEpfDir, pfDir, CMP_EQ, FUNC_NONE, NULLPtr); + } else if (strcasecmp(type, "interface") == 0) { + data_t data = {.dataPtr=strdup(arg)}; + ret = NewElement(EXpfinfoID, OFFpfIfName, SIZEpfIfName, 0, CMP_STRING, FUNC_NONE, data); + } else { + yyerror("Invalid pf argument: %s", type); + } + return ret; +} // End of AddPFString + +static int AddPFNumber(char *type, uint16_t comp, uint64_t number) { + + int ret = -1; + if (strcasecmp(type, "rule") == 0) { + ret = NewElement(EXpfinfoID, OFFpfRuleNr, SIZEpfRuleNr, number, comp, FUNC_NONE, NULLPtr); + } else { + yyerror("Invalid pf argument: %s", type); + } + + return ret; +} // End of AddPFNumber + +static int AddIP(direction_t direction, char *IPstr) { + + int lookupMode = STRICT_IP; + switch ( direction ) { + case DIR_SRC: + case DIR_DST: + case DIR_UNSPEC: + lookupMode = ALLOW_LOOKUP; + break; + default: + lookupMode = STRICT_IP; + } // End of switch + + int numIP = parseIP(IPstr, ipStack, lookupMode); + if ( numIP <= 0) { + yyerror("Can not parse/lookup %s to an IP address", IPstr); + return -1; + } + + int ret = -1; + switch ( direction ) { + case DIR_SRC: + case DIR_DST: + case DIR_SRC_NAT: + case DIR_DST_NAT: + case DIR_SRC_TUN: + case DIR_DST_TUN: + case DIR_NEXT: + case BGP_NEXT: + case SRC_ROUTER: + ret = ChainHosts(ipStack, numIP, direction); + break; + case DIR_UNSPEC: { + uint32_t src = ChainHosts(ipStack, numIP, DIR_SRC); + uint32_t dst = ChainHosts(ipStack, numIP, DIR_DST); + ret = Connect_OR(src, dst); + } break; + case DIR_UNSPEC_NAT: { + uint32_t src = ChainHosts(ipStack, numIP, DIR_SRC_NAT); + uint32_t dst = ChainHosts(ipStack, numIP, DIR_DST_NAT); + ret = Connect_OR(src, dst); + } break; + case DIR_UNSPEC_TUN: { + uint32_t src = ChainHosts(ipStack, numIP, DIR_SRC_TUN); + uint32_t dst = ChainHosts(ipStack, numIP, DIR_DST_TUN); + ret = Connect_OR(src, dst); + } break; + default: + yyerror("Unknown direction for IP address"); + } // End of switch + + return ret; +} // End of AddIP + +static int AddNet(direction_t direction, char *IPstr, char *maskStr) { + + int numIP = parseIP(IPstr, ipStack, STRICT_IP); + if (numIP <= 0) { + yyerror("Can not parse/lookup %s to an IP address", IPstr); + return -1; + } + + ipStack_t mask; + numIP = parseIP(maskStr, &mask, STRICT_IP); + if (numIP <= 0) { + yyerror("Can not parse %s as IP mask", maskStr); + return -1; + } + + if (ipStack[0].af != PF_INET || mask.af != PF_INET) { + yyerror("Net address %s and netmask: %s must be IPv4", IPstr, maskStr); + return -1; + } + + data_t data = {.dataVal = mask.ipaddr[1]}; + + int ret = -1; + switch ( direction ) { + case DIR_SRC: + case DIR_DST: + case DIR_SRC_NAT: + case DIR_DST_NAT: + case DIR_SRC_TUN: + case DIR_DST_TUN: + case DIR_NEXT: + case BGP_NEXT: + case SRC_ROUTER: + ret = NewIPElement(&ipStack[0], direction, CMP_NET, &data); + break; + case DIR_UNSPEC: { + uint32_t src = NewIPElement(&ipStack[0], DIR_SRC, CMP_NET, &data); + uint32_t dst = NewIPElement(&ipStack[0], DIR_DST, CMP_NET, &data); + ret = Connect_OR(src, dst); + } break; + case DIR_UNSPEC_NAT: { + uint32_t src = NewIPElement(&ipStack[0], DIR_SRC_NAT, CMP_NET, &data); + uint32_t dst = NewIPElement(&ipStack[0], DIR_DST_NAT, CMP_NET, &data); + ret = Connect_OR(src, dst); + } break; + case DIR_UNSPEC_TUN: { + uint32_t src = NewIPElement(&ipStack[0], DIR_SRC_TUN, CMP_NET, &data); + uint32_t dst = NewIPElement(&ipStack[0], DIR_DST_TUN, CMP_NET, &data); + ret = Connect_OR(src, dst); + } break; + default: + yyerror("Unknown direction for IP address"); + } // End of switch + + return ret; +} // End of AddNet + +static int AddNetPrefix(direction_t direction, char *IPstr, uint64_t prefix) { + int numIP = parseIP(IPstr, ipStack, STRICT_IP); + if (numIP <= 0) { + yyerror("Can not parse/lookup %s to an IP address", IPstr); + return -1; + } + + data_t data[2]; + if (ipStack[0].af == PF_INET) { + // IPv4 + if (prefix >32 ) { + yyerror("Prefix %llu out of range for IPv4 address", prefix); + return -1; + } + data[0].dataVal = 0xffffffffffffffffLL << (32 - prefix); + } else { + // IPv6 + if (prefix >128 ) { + yyerror("Prefix %llu out of range for IPv6 address", prefix); + return -1; + } + if ( prefix > 64 ) { + data[0].dataVal = 0xffffffffffffffffLL; + data[1].dataVal = 0xffffffffffffffffLL << (128 - prefix); + } else { + data[0].dataVal = 0xffffffffffffffffLL << (64 - prefix); + data[1].dataVal = 0; + } + } + + int ret = -1; + switch (direction) { + case DIR_SRC: + case DIR_DST: + case DIR_SRC_NAT: + case DIR_DST_NAT: + case DIR_SRC_TUN: + case DIR_DST_TUN: + case DIR_NEXT: + case BGP_NEXT: + case SRC_ROUTER: + ret = NewIPElement(&ipStack[0], direction, CMP_NET, data); + break; + case DIR_UNSPEC: { + uint32_t src = NewIPElement(&ipStack[0], DIR_SRC, CMP_NET, data); + uint32_t dst = NewIPElement(&ipStack[0], DIR_DST, CMP_NET, data); + ret = Connect_OR(src, dst); + } break; + case DIR_UNSPEC_NAT: { + uint32_t src = NewIPElement(&ipStack[0], DIR_SRC_NAT, CMP_NET, data); + uint32_t dst = NewIPElement(&ipStack[0], DIR_DST_NAT, CMP_NET, data); + ret = Connect_OR(src, dst); + } break; + case DIR_UNSPEC_TUN: { + uint32_t src = NewIPElement(&ipStack[0], DIR_SRC_TUN, CMP_NET, data); + uint32_t dst = NewIPElement(&ipStack[0], DIR_DST_TUN, CMP_NET, data); + ret = Connect_OR(src, dst); + } break; + default: + yyerror("Unknown direction for IP address"); + } // End of switch + + return ret; +} // End of AddNetPrefix + +static int AddIPlist(direction_t direction, void *IPlist) { + int ret = -1; + data_t IPlistData = {IPlist}; + switch ( direction ) { + case DIR_SRC: + ret = Connect_OR( + NewElement(EXipv4FlowID, OFFsrc4Addr, SIZEsrc4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData), + NewElement(EXipv6FlowID, OFFsrc6Addr, SIZEsrc6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData) + ); + break; + case DIR_DST: + ret = Connect_OR( + NewElement(EXipv4FlowID, OFFdst4Addr, SIZEdst4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData), + NewElement(EXipv6FlowID, OFFdst6Addr, SIZEdst6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData) + ); + break; + case DIR_SRC_NAT: + ret = Connect_OR( + NewElement(EXnatXlateIPv4ID, OFFxlateSrc4Addr, SIZExlateSrc4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData), + NewElement(EXnatXlateIPv6ID, OFFxlateSrc6Addr, SIZExlateSrc6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData) + ); + break; + case DIR_DST_NAT: + ret = Connect_OR( + NewElement(EXnatXlateIPv4ID, OFFxlateDst4Addr, SIZExlateDst4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData), + NewElement(EXnatXlateIPv6ID, OFFxlateDst6Addr, SIZExlateDst6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData) + ); + break; + case DIR_SRC_TUN: + ret = Connect_OR( + NewElement(EXtunIPv4ID, OFFtunSrc4Addr, SIZEtunSrc4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData), + NewElement(EXtunIPv6ID, OFFtunSrc6Addr, SIZEtunSrc6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData) + ); + break; + case DIR_DST_TUN: + ret = Connect_OR( + NewElement(EXtunIPv4ID, OFFtunDst4Addr, SIZEtunDst4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData), + NewElement(EXtunIPv6ID, OFFtunDst6Addr, SIZEtunDst6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData) + ); + break; + case DIR_NEXT: + ret = Connect_OR( + NewElement(EXipNextHopV4ID, OFFNextHopV4IP, SIZENextHopV4IP, 0, CMP_IPLIST, FUNC_NONE, IPlistData), + NewElement(EXipNextHopV6ID, OFFNextHopV6IP, SIZENextHopV6IP, 0, CMP_IPLIST, FUNC_NONE, IPlistData) + ); + break; + case DIR_UNSPEC: { + int v4 = Connect_OR( + NewElement(EXipv4FlowID, OFFsrc4Addr, SIZEsrc4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData), + NewElement(EXipv4FlowID, OFFdst4Addr, SIZEdst4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData) + ); + int v6 = Connect_OR( + NewElement(EXipv6FlowID, OFFsrc6Addr, SIZEsrc6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData), + NewElement(EXipv6FlowID, OFFdst6Addr, SIZEdst6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData) + ); + ret = Connect_OR(v4, v6); + } break; + case DIR_UNSPEC_NAT: { + int v4 = Connect_OR( + NewElement(EXnatXlateIPv4ID, OFFxlateSrc4Addr, SIZExlateSrc4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData), + NewElement(EXnatXlateIPv4ID, OFFxlateDst4Addr, SIZExlateDst4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData) + ); + int v6 = Connect_OR( + NewElement(EXnatXlateIPv6ID, OFFxlateSrc6Addr, SIZExlateSrc6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData), + NewElement(EXnatXlateIPv6ID, OFFxlateDst6Addr, SIZExlateDst6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData) + ); + ret = Connect_OR(v4, v6); + } break; + case DIR_UNSPEC_TUN: { + int v4 = Connect_OR( + NewElement(EXtunIPv4ID, OFFtunSrc4Addr, SIZEtunSrc4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData), + NewElement(EXtunIPv4ID, OFFtunDst4Addr, SIZEtunDst4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData) + ); + int v6 = Connect_OR( + NewElement(EXtunIPv6ID, OFFtunSrc6Addr, SIZEtunSrc6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData), + NewElement(EXtunIPv6ID, OFFtunDst6Addr, SIZEtunDst6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData) + ); + ret = Connect_OR(v4, v6); + } break; + default: + yyerror("Unknown direction for IP list"); + } + + return ret; +} // AddIPlist + +static struct IPListNode *mkNode(ipStack_t ipStack, int64_t prefix) { + + struct IPListNode *node = malloc(sizeof(struct IPListNode)); + if (node == NULL) { + yyerror("malloc() error in %s line %d: %s", __FILE__, __LINE__, strerror(errno)); + return NULL; + } + + node->ip[0] = ipStack.ipaddr[0]; + node->ip[1] = ipStack.ipaddr[1]; + node->mask[0] = 0xffffffffffffffffLL; + node->mask[1] = 0xffffffffffffffffLL; + + if ( prefix > 0 ) { + if (ipStack.af == PF_INET) { + // IPv4 + if (prefix >32 ) { + yyerror("Prefix %llu out of range for IPv4 address", prefix); + return NULL; + } + node->mask[0] = 0; + node->mask[1] = 0xffffffffffffffffLL << (32 - prefix); + } else { + // IPv6 + if (prefix >128 ) { + yyerror("Prefix %llu out of range for IPv6 address", prefix); + return NULL; + } + if ( prefix > 64 ) { + node->mask[0] = 0xffffffffffffffffLL; + node->mask[1] = 0xffffffffffffffffLL << (128 - prefix); + } else { + node->mask[0] = 0xffffffffffffffffLL << (64 - prefix); + node->mask[1] = 0; + } + } + } + return node; +} + +static void *NewIplist(char *IPstr, int prefix) { + IPlist_t *root = malloc(sizeof(IPlist_t)); + if (root == NULL) { + yyerror("malloc() error in %s line %d: %s", __FILE__, __LINE__, strerror(errno)); + return NULL; + } + RB_INIT(root); + + int numIP = parseIP(IPstr, ipStack, ALLOW_LOOKUP); + if ( numIP <= 0 ) { + yyerror("Can not parse/resolve %s to an IP address", IPstr); + free(root); + return NULL; + } + + for (int i=0; ivalue = num; + RB_INSERT(U64tree, root, node); + + return root; +} // End of NewU64list + +static int InsertU64list(void *U64list, uint64_t num) { + + struct U64ListNode *node; + if ((node = malloc(sizeof(struct U64ListNode))) == NULL) { + yyerror("malloc() error in %s line %d: %s", __FILE__, __LINE__, strerror(errno)); + return 0; + } + node->value = num; + RB_INSERT(U64tree, U64list, node); + + return 1; +} // End of InsertU64list + +static int AddPortList(direction_t direction, void *U64List) { + + // check, that each element is a valid port number + struct U64ListNode *node; + RB_FOREACH(node, U64tree, (U64List_t *)U64List) { + if ( node->value > 65535 ) { + yyerror("Port: %llu outside of range 0..65535", node->value); + return -1; + } + } + + data_t U64ListPtr = {U64List}; + int ret = -1; + switch ( direction ) { + case DIR_SRC: + ret = NewElement(EXgenericFlowID, OFFsrcPort, SIZEsrcPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr); + break; + case DIR_DST: + ret = NewElement(EXgenericFlowID, OFFdstPort, SIZEdstPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr); + break; + case DIR_UNSPEC: + ret = Connect_OR( + NewElement(EXgenericFlowID, OFFsrcPort, SIZEsrcPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr), + NewElement(EXgenericFlowID, OFFdstPort, SIZEdstPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr) + ); + break; + case DIR_SRC_NAT: + ret = NewElement(EXnatXlatePortID, OFFxlateSrcPort, SIZExlateSrcPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr); + break; + case DIR_DST_NAT: + ret = NewElement(EXnatXlatePortID, OFFxlateDstPort, SIZExlateDstPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr); + break; + case DIR_UNSPEC_NAT: + ret = Connect_OR( + NewElement(EXnatXlatePortID, OFFxlateSrcPort, SIZExlateSrcPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr), + NewElement(EXnatXlatePortID, OFFxlateDstPort, SIZExlateDstPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr ) + ); + break; + default: + yyerror("Unknown direction"); + } // End switch + + return ret; +} // AddPortList + +static int AddASList(direction_t direction, void *U64List) { + + // check, that each element is a valid AS number + struct U64ListNode *node; + RB_FOREACH(node, U64tree, (U64List_t *)U64List) { + if ( node->value > 0xFFFFFFFFLL ) { + yyerror("AS: %llu outside of range 32bit", node->value); + return -1; + } + } + + data_t U64ListPtr = {U64List}; + int ret = -1; + switch ( direction ) { + case DIR_SRC: + ret = NewElement(EXasRoutingID, OFFsrcAS, SIZEsrcAS, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr); + break; + case DIR_DST: + ret = NewElement(EXasRoutingID, OFFdstAS, SIZEdstAS, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr); + break; + case DIR_UNSPEC: + ret = Connect_OR( + NewElement(EXasRoutingID, OFFsrcAS, SIZEsrcAS, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr), + NewElement(EXasRoutingID, OFFdstAS, SIZEdstAS, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr) + ); + break; + case DIR_NEXT: + ret = NewElement(EXasAdjacentID, OFFnextAdjacentAS, SIZEnextAdjacentAS, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr); + break; + case DIR_PREV: + ret = NewElement(EXasAdjacentID, OFFprevAdjacentAS, SIZEprevAdjacentAS, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr); + break; + default: + yyerror("Unknown direction"); + } // End of switch + + return ret; +} // AddASList + +static int AddInterfaceNumber(direction_t direction, uint64_t num) { + if ( num > 0xffffffffLL ) { + yyerror("Interface number out of range 0..2^32"); + return -1; + } + + int ret = -1; + switch ( direction ) { + case DIR_UNSPEC: + ret = Connect_OR( + NewElement(EXflowMiscID, OFFinput, SIZEinput, num, CMP_EQ, FUNC_NONE, NULLPtr), + NewElement(EXflowMiscID, OFFoutput, SIZEoutput, num, CMP_EQ, FUNC_NONE, NULLPtr) + ); + break; + case DIR_IN: + ret = NewElement(EXflowMiscID, OFFinput, SIZEinput, num, CMP_EQ, FUNC_NONE, NULLPtr); + break; + case DIR_OUT: + ret = NewElement(EXflowMiscID, OFFoutput, SIZEoutput, num, CMP_EQ, FUNC_NONE, NULLPtr); + break; + default: + yyerror("Unknown interface direction"); + } // End of switch + + return ret; +} // End of AddInterfaceNumber + +static int AddVlanNumber(direction_t direction, uint64_t num) { + if ( num > 0xffffffffLL ) { + yyerror("Vlan number out of range 32bit"); + return -1; + } + + int ret = -1; + switch ( direction ) { + case DIR_UNSPEC: { + int src = Connect_OR( + NewElement(EXvLanID, OFFsrcVlan, SIZEsrcVlan, num, CMP_EQ, FUNC_NONE, NULLPtr), + NewElement(EXlayer2ID, OFFvlanID, SIZEvlanID, num, CMP_EQ, FUNC_NONE, NULLPtr) + ); + int dst = Connect_OR( + NewElement(EXvLanID, OFFdstVlan, SIZEdstVlan, num, CMP_EQ, FUNC_NONE, NULLPtr), + NewElement(EXlayer2ID, OFFpostVlanID, SIZEpostVlanID, num, CMP_EQ, FUNC_NONE, NULLPtr) + ); + ret = Connect_OR(src,dst); + } break; + case DIR_SRC: + ret = Connect_OR( + NewElement(EXvLanID, OFFsrcVlan, SIZEsrcVlan, num, CMP_EQ, FUNC_NONE, NULLPtr), + NewElement(EXlayer2ID, OFFvlanID, SIZEvlanID, num, CMP_EQ, FUNC_NONE, NULLPtr) + ); + break; + case DIR_DST: + ret = Connect_OR( + NewElement(EXvLanID, OFFdstVlan, SIZEdstVlan, num, CMP_EQ, FUNC_NONE, NULLPtr), + NewElement(EXlayer2ID, OFFpostVlanID, SIZEpostVlanID, num, CMP_EQ, FUNC_NONE, NULLPtr) + ); + break; + default: + yyerror("Unknown vlan direction"); + } // End of switch + + return ret; +} // End of AddVlanNumber + +static int AddAsNumber(direction_t direction, uint16_t comp, uint64_t as) { + if (as > UINT32_MAX ) { + yyerror("AS number of range"); + return -1; + } + + int ret = -1; + switch ( direction ) { + case DIR_SRC: + ret = NewElement(EXasRoutingID, OFFsrcAS, SIZEsrcAS, as, comp, FUNC_MMAS_LOOKUP, (data_t){.dataVal = OFFsrcAS}); + break; + case DIR_DST: + ret = NewElement(EXasRoutingID, OFFdstAS, SIZEdstAS, as, comp, FUNC_MMAS_LOOKUP , (data_t){.dataVal = OFFdstAS}); + break; + case DIR_UNSPEC: + ret = Connect_OR( + NewElement(EXasRoutingID, OFFsrcAS, SIZEsrcAS, as, comp, FUNC_MMAS_LOOKUP, (data_t){.dataVal = OFFsrcAS}), + NewElement(EXasRoutingID, OFFdstAS, SIZEdstAS, as, comp, FUNC_MMAS_LOOKUP ,(data_t){.dataVal = OFFdstAS} ) + ); + break; + case DIR_NEXT: + ret = NewElement(EXasAdjacentID, OFFnextAdjacentAS, SIZEnextAdjacentAS, as, comp, FUNC_MMAS_LOOKUP, NULLPtr); + break; + case DIR_PREV: + ret = NewElement(EXasAdjacentID, OFFprevAdjacentAS, SIZEprevAdjacentAS, as, comp, FUNC_MMAS_LOOKUP, NULLPtr); + break; + default: + yyerror("Unknown direction"); + } // End of switch + + return ret; +} // End of AddAsNumber + +static int AddMaskNumber(direction_t direction, uint64_t num) { + if ( num > 255 ) { + yyerror("Mas %d out of range 0..255", num); + return -1; + } + + int ret = -1; + switch ( direction ) { + case DIR_UNSPEC: + ret = Connect_OR( + NewElement(EXflowMiscID, OFFsrcMask, SIZEsrcMask, num, CMP_EQ, FUNC_NONE, NULLPtr), + NewElement(EXflowMiscID, OFFdstMask, SIZEdstMask, num, CMP_EQ, FUNC_NONE, NULLPtr) + ); + break; + case DIR_SRC: + ret = NewElement(EXflowMiscID, OFFsrcMask, SIZEsrcMask, num, CMP_EQ, FUNC_NONE, NULLPtr); + break; + case DIR_DST: + ret = NewElement(EXflowMiscID, OFFdstMask, SIZEdstMask, num, CMP_EQ, FUNC_NONE, NULLPtr); + break; + default: + yyerror("Invalid direction for mask"); + } // End of switch + + return ret; +} // End of AddMaskNumber + +static int AddFlowDir(direction_t direction, int64_t dirNum) { + + int ret = -1; + switch (direction) { + case DIR_INGRESS: + ret = NewElement(EXflowMiscID, OFFdir, SIZEdir, 0, CMP_EQ, FUNC_NONE, NULLPtr); + break; + case DIR_EGRESS: + ret = NewElement(EXflowMiscID, OFFdir, SIZEdir, 1, CMP_EQ, FUNC_NONE, NULLPtr); + break; + case DIR_UNSPEC: + if (dirNum != 0 && dirNum != 1) { + yyerror("Unknown flowdir: %d", dirNum); + } else { + ret = NewElement(EXflowMiscID, OFFdir, SIZEdir, dirNum, CMP_EQ, FUNC_NONE, NULLPtr); + } + break; + default: + yyerror("Unknown flowdir"); + } + + return ret; +} // End of AddFlowDirString + diff --git a/src/libnfdump/filter/grammar.h b/src/libnfdump/filter/grammar.h new file mode 100644 index 00000000..2e86bfd8 --- /dev/null +++ b/src/libnfdump/filter/grammar.h @@ -0,0 +1,199 @@ +/* A Bison parser, made by GNU Bison 2.3. */ + +/* Skeleton interface for Bison's Yacc-like parsers in C + + Copyright (C) 1984, 1989, 1990, 2000, 2001, 2002, 2003, 2004, 2005, 2006 + Free Software Foundation, Inc. + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2, or (at your option) + any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program; if not, write to the Free Software + Foundation, Inc., 51 Franklin Street, Fifth Floor, + Boston, MA 02110-1301, USA. */ + +/* As a special exception, you may create a larger work that contains + part or all of the Bison parser skeleton and distribute that work + under terms of your choice, so long as that work isn't itself a + parser generator using the skeleton or a modified version thereof + as a parser skeleton. Alternatively, if you modify or redistribute + the parser skeleton itself, you may (at your option) remove this + special exception, which will cause the skeleton and the resulting + Bison output files to be licensed under the GNU General Public + License without this special exception. + + This special exception was added by the Free Software Foundation in + version 2.2 of Bison. */ + +/* Tokens. */ +#ifndef YYTOKENTYPE +# define YYTOKENTYPE + /* Put the tokens into the symbol table, so that GDB and other debuggers + know about them. */ + enum yytokentype { + EQ = 258, + LT = 259, + GT = 260, + LE = 261, + GE = 262, + ANY = 263, + NOT = 264, + IDENT = 265, + COUNT = 266, + IP = 267, + IPV4 = 268, + IPV6 = 269, + NET = 270, + SRC = 271, + DST = 272, + IN = 273, + OUT = 274, + PREV = 275, + NEXT = 276, + BGP = 277, + ROUTER = 278, + INGRESS = 279, + EGRESS = 280, + NAT = 281, + XLATE = 282, + TUN = 283, + ENGINE = 284, + ENGINETYPE = 285, + ENGINEID = 286, + EXPORTER = 287, + DURATION = 288, + PPS = 289, + BPS = 290, + BPP = 291, + FLAGS = 292, + PROTO = 293, + PORT = 294, + AS = 295, + IF = 296, + VLAN = 297, + MPLS = 298, + MAC = 299, + ICMP = 300, + ICMPTYPE = 301, + ICMPCODE = 302, + PACKETS = 303, + BYTES = 304, + FLOWS = 305, + ETHERTYPE = 306, + MASK = 307, + FLOWDIR = 308, + TOS = 309, + FWDSTAT = 310, + LATENCY = 311, + ASA = 312, + ACL = 313, + PAYLOAD = 314, + GEO = 315, + VRF = 316, + OBSERVATION = 317, + PF = 318, + STRING = 319, + NUMBER = 320, + OR = 321, + AND = 322, + NEGATE = 323 + }; +#endif +/* Tokens. */ +#define EQ 258 +#define LT 259 +#define GT 260 +#define LE 261 +#define GE 262 +#define ANY 263 +#define NOT 264 +#define IDENT 265 +#define COUNT 266 +#define IP 267 +#define IPV4 268 +#define IPV6 269 +#define NET 270 +#define SRC 271 +#define DST 272 +#define IN 273 +#define OUT 274 +#define PREV 275 +#define NEXT 276 +#define BGP 277 +#define ROUTER 278 +#define INGRESS 279 +#define EGRESS 280 +#define NAT 281 +#define XLATE 282 +#define TUN 283 +#define ENGINE 284 +#define ENGINETYPE 285 +#define ENGINEID 286 +#define EXPORTER 287 +#define DURATION 288 +#define PPS 289 +#define BPS 290 +#define BPP 291 +#define FLAGS 292 +#define PROTO 293 +#define PORT 294 +#define AS 295 +#define IF 296 +#define VLAN 297 +#define MPLS 298 +#define MAC 299 +#define ICMP 300 +#define ICMPTYPE 301 +#define ICMPCODE 302 +#define PACKETS 303 +#define BYTES 304 +#define FLOWS 305 +#define ETHERTYPE 306 +#define MASK 307 +#define FLOWDIR 308 +#define TOS 309 +#define FWDSTAT 310 +#define LATENCY 311 +#define ASA 312 +#define ACL 313 +#define PAYLOAD 314 +#define GEO 315 +#define VRF 316 +#define OBSERVATION 317 +#define PF 318 +#define STRING 319 +#define NUMBER 320 +#define OR 321 +#define AND 322 +#define NEGATE 323 + + + + +#if ! defined YYSTYPE && ! defined YYSTYPE_IS_DECLARED +typedef union YYSTYPE +#line 166 "filter/grammar.y" +{ + uint64_t value; + char *s; + FilterParam_t param; + void *list; +} +/* Line 1529 of yacc.c. */ +#line 192 "filter/grammar.h" + YYSTYPE; +# define yystype YYSTYPE /* obsolescent; will be withdrawn */ +# define YYSTYPE_IS_DECLARED 1 +# define YYSTYPE_IS_TRIVIAL 1 +#endif + +extern YYSTYPE yylval; + diff --git a/src/libnfdump/filter/scanner.c b/src/libnfdump/filter/scanner.c new file mode 100644 index 00000000..8f251f06 --- /dev/null +++ b/src/libnfdump/filter/scanner.c @@ -0,0 +1,2553 @@ + +#line 2 "filter/scanner.c" + +#define YY_INT_ALIGNED short int + +/* A lexical scanner generated by flex */ + +#define FLEX_SCANNER +#define YY_FLEX_MAJOR_VERSION 2 +#define YY_FLEX_MINOR_VERSION 6 +#define YY_FLEX_SUBMINOR_VERSION 4 +#if YY_FLEX_SUBMINOR_VERSION > 0 +#define FLEX_BETA +#endif + +/* First, we deal with platform-specific or compiler-specific issues. */ + +/* begin standard C headers. */ +#include +#include +#include +#include + +/* end standard C headers. */ + +/* flex integer type definitions */ + +#ifndef FLEXINT_H +#define FLEXINT_H + +/* C99 systems have . Non-C99 systems may or may not. */ + +#if defined (__STDC_VERSION__) && __STDC_VERSION__ >= 199901L + +/* C99 says to define __STDC_LIMIT_MACROS before including stdint.h, + * if you want the limit (max/min) macros for int types. + */ +#ifndef __STDC_LIMIT_MACROS +#define __STDC_LIMIT_MACROS 1 +#endif + +#include +typedef int8_t flex_int8_t; +typedef uint8_t flex_uint8_t; +typedef int16_t flex_int16_t; +typedef uint16_t flex_uint16_t; +typedef int32_t flex_int32_t; +typedef uint32_t flex_uint32_t; +typedef uint64_t flex_uint64_t; +#else +typedef signed char flex_int8_t; +typedef short int flex_int16_t; +typedef int flex_int32_t; +typedef unsigned char flex_uint8_t; +typedef unsigned short int flex_uint16_t; +typedef unsigned int flex_uint32_t; + +/* Limits of integral types. */ +#ifndef INT8_MIN +#define INT8_MIN (-128) +#endif +#ifndef INT16_MIN +#define INT16_MIN (-32767-1) +#endif +#ifndef INT32_MIN +#define INT32_MIN (-2147483647-1) +#endif +#ifndef INT8_MAX +#define INT8_MAX (127) +#endif +#ifndef INT16_MAX +#define INT16_MAX (32767) +#endif +#ifndef INT32_MAX +#define INT32_MAX (2147483647) +#endif +#ifndef UINT8_MAX +#define UINT8_MAX (255U) +#endif +#ifndef UINT16_MAX +#define UINT16_MAX (65535U) +#endif +#ifndef UINT32_MAX +#define UINT32_MAX (4294967295U) +#endif + +#ifndef SIZE_MAX +#define SIZE_MAX (~(size_t)0) +#endif + +#endif /* ! C99 */ + +#endif /* ! FLEXINT_H */ + +/* begin standard C++ headers. */ + +/* TODO: this is always defined, so inline it */ +#define yyconst const + +#if defined(__GNUC__) && __GNUC__ >= 3 +#define yynoreturn __attribute__((__noreturn__)) +#else +#define yynoreturn +#endif + +/* Returned upon end-of-file. */ +#define YY_NULL 0 + +/* Promotes a possibly negative, possibly signed char to an + * integer in range [0..255] for use as an array index. + */ +#define YY_SC_TO_UI(c) ((YY_CHAR) (c)) + +/* Enter a start condition. This macro really ought to take a parameter, + * but we do it the disgusting crufty way forced on us by the ()-less + * definition of BEGIN. + */ +#define BEGIN (yy_start) = 1 + 2 * +/* Translate the current start state into a value that can be later handed + * to BEGIN to return to the state. The YYSTATE alias is for lex + * compatibility. + */ +#define YY_START (((yy_start) - 1) / 2) +#define YYSTATE YY_START +/* Action number for EOF rule of a given start state. */ +#define YY_STATE_EOF(state) (YY_END_OF_BUFFER + state + 1) +/* Special action meaning "start processing a new file". */ +#define YY_NEW_FILE yyrestart( yyin ) +#define YY_END_OF_BUFFER_CHAR 0 + +/* Size of default input buffer. */ +#ifndef YY_BUF_SIZE +#ifdef __ia64__ +/* On IA-64, the buffer size is 16k, not 8k. + * Moreover, YY_BUF_SIZE is 2*YY_READ_BUF_SIZE in the general case. + * Ditto for the __ia64__ case accordingly. + */ +#define YY_BUF_SIZE 32768 +#else +#define YY_BUF_SIZE 16384 +#endif /* __ia64__ */ +#endif + +/* The state buf must be large enough to hold one state per character in the main buffer. + */ +#define YY_STATE_BUF_SIZE ((YY_BUF_SIZE + 2) * sizeof(yy_state_type)) + +#ifndef YY_TYPEDEF_YY_BUFFER_STATE +#define YY_TYPEDEF_YY_BUFFER_STATE +typedef struct yy_buffer_state *YY_BUFFER_STATE; +#endif + +#ifndef YY_TYPEDEF_YY_SIZE_T +#define YY_TYPEDEF_YY_SIZE_T +typedef size_t yy_size_t; +#endif + +extern yy_size_t yyleng; + +extern FILE *yyin, *yyout; + +#define EOB_ACT_CONTINUE_SCAN 0 +#define EOB_ACT_END_OF_FILE 1 +#define EOB_ACT_LAST_MATCH 2 + + #define YY_LESS_LINENO(n) + #define YY_LINENO_REWIND_TO(ptr) + +/* Return all but the first "n" matched characters back to the input stream. */ +#define yyless(n) \ + do \ + { \ + /* Undo effects of setting up yytext. */ \ + int yyless_macro_arg = (n); \ + YY_LESS_LINENO(yyless_macro_arg);\ + *yy_cp = (yy_hold_char); \ + YY_RESTORE_YY_MORE_OFFSET \ + (yy_c_buf_p) = yy_cp = yy_bp + yyless_macro_arg - YY_MORE_ADJ; \ + YY_DO_BEFORE_ACTION; /* set up yytext again */ \ + } \ + while ( 0 ) +#define unput(c) yyunput( c, (yytext_ptr) ) + +#ifndef YY_STRUCT_YY_BUFFER_STATE +#define YY_STRUCT_YY_BUFFER_STATE +struct yy_buffer_state + { + FILE *yy_input_file; + + char *yy_ch_buf; /* input buffer */ + char *yy_buf_pos; /* current position in input buffer */ + + /* Size of input buffer in bytes, not including room for EOB + * characters. + */ + int yy_buf_size; + + /* Number of characters read into yy_ch_buf, not including EOB + * characters. + */ + yy_size_t yy_n_chars; + + /* Whether we "own" the buffer - i.e., we know we created it, + * and can realloc() it to grow it, and should free() it to + * delete it. + */ + int yy_is_our_buffer; + + /* Whether this is an "interactive" input source; if so, and + * if we're using stdio for input, then we want to use getc() + * instead of fread(), to make sure we stop fetching input after + * each newline. + */ + int yy_is_interactive; + + /* Whether we're considered to be at the beginning of a line. + * If so, '^' rules will be active on the next match, otherwise + * not. + */ + int yy_at_bol; + + int yy_bs_lineno; /**< The line count. */ + int yy_bs_column; /**< The column count. */ + + /* Whether to try to fill the input buffer when we reach the + * end of it. + */ + int yy_fill_buffer; + + int yy_buffer_status; + +#define YY_BUFFER_NEW 0 +#define YY_BUFFER_NORMAL 1 + /* When an EOF's been seen but there's still some text to process + * then we mark the buffer as YY_EOF_PENDING, to indicate that we + * shouldn't try reading from the input source any more. We might + * still have a bunch of tokens to match, though, because of + * possible backing-up. + * + * When we actually see the EOF, we change the status to "new" + * (via yyrestart()), so that the user can continue scanning by + * just pointing yyin at a new input file. + */ +#define YY_BUFFER_EOF_PENDING 2 + + }; +#endif /* !YY_STRUCT_YY_BUFFER_STATE */ + +/* Stack of input buffers. */ +static size_t yy_buffer_stack_top = 0; /**< index of top of stack. */ +static size_t yy_buffer_stack_max = 0; /**< capacity of stack. */ +static YY_BUFFER_STATE * yy_buffer_stack = NULL; /**< Stack as an array. */ + +/* We provide macros for accessing buffer states in case in the + * future we want to put the buffer states in a more general + * "scanner state". + * + * Returns the top of the stack, or NULL. + */ +#define YY_CURRENT_BUFFER ( (yy_buffer_stack) \ + ? (yy_buffer_stack)[(yy_buffer_stack_top)] \ + : NULL) +/* Same as previous macro, but useful when we know that the buffer stack is not + * NULL or when we need an lvalue. For internal use only. + */ +#define YY_CURRENT_BUFFER_LVALUE (yy_buffer_stack)[(yy_buffer_stack_top)] + +/* yy_hold_char holds the character lost when yytext is formed. */ +static char yy_hold_char; +static yy_size_t yy_n_chars; /* number of characters read into yy_ch_buf */ +yy_size_t yyleng; + +/* Points to current character in buffer. */ +static char *yy_c_buf_p = NULL; +static int yy_init = 0; /* whether we need to initialize */ +static int yy_start = 0; /* start state number */ + +/* Flag which is used to allow yywrap()'s to do buffer switches + * instead of setting up a fresh yyin. A bit of a hack ... + */ +static int yy_did_buffer_switch_on_eof; + +void yyrestart ( FILE *input_file ); +void yy_switch_to_buffer ( YY_BUFFER_STATE new_buffer ); +YY_BUFFER_STATE yy_create_buffer ( FILE *file, int size ); +void yy_delete_buffer ( YY_BUFFER_STATE b ); +void yy_flush_buffer ( YY_BUFFER_STATE b ); +void yypush_buffer_state ( YY_BUFFER_STATE new_buffer ); +void yypop_buffer_state ( void ); + +static void yyensure_buffer_stack ( void ); +static void yy_load_buffer_state ( void ); +static void yy_init_buffer ( YY_BUFFER_STATE b, FILE *file ); +#define YY_FLUSH_BUFFER yy_flush_buffer( YY_CURRENT_BUFFER ) + +YY_BUFFER_STATE yy_scan_buffer ( char *base, yy_size_t size ); +YY_BUFFER_STATE yy_scan_string ( const char *yy_str ); +YY_BUFFER_STATE yy_scan_bytes ( const char *bytes, yy_size_t len ); + +void *yyalloc ( yy_size_t ); +void *yyrealloc ( void *, yy_size_t ); +void yyfree ( void * ); + +#define yy_new_buffer yy_create_buffer +#define yy_set_interactive(is_interactive) \ + { \ + if ( ! YY_CURRENT_BUFFER ){ \ + yyensure_buffer_stack (); \ + YY_CURRENT_BUFFER_LVALUE = \ + yy_create_buffer( yyin, YY_BUF_SIZE ); \ + } \ + YY_CURRENT_BUFFER_LVALUE->yy_is_interactive = is_interactive; \ + } +#define yy_set_bol(at_bol) \ + { \ + if ( ! YY_CURRENT_BUFFER ){\ + yyensure_buffer_stack (); \ + YY_CURRENT_BUFFER_LVALUE = \ + yy_create_buffer( yyin, YY_BUF_SIZE ); \ + } \ + YY_CURRENT_BUFFER_LVALUE->yy_at_bol = at_bol; \ + } +#define YY_AT_BOL() (YY_CURRENT_BUFFER_LVALUE->yy_at_bol) + +/* Begin user sect3 */ +typedef flex_uint8_t YY_CHAR; + +FILE *yyin = NULL, *yyout = NULL; + +typedef int yy_state_type; + +extern int yylineno; +int yylineno = 1; + +extern char *yytext; +#ifdef yytext_ptr +#undef yytext_ptr +#endif +#define yytext_ptr yytext + +static yy_state_type yy_get_previous_state ( void ); +static yy_state_type yy_try_NUL_trans ( yy_state_type current_state ); +static int yy_get_next_buffer ( void ); +static void yynoreturn yy_fatal_error ( const char* msg ); + +/* Done after the current pattern has been matched and before the + * corresponding action - sets up yytext. + */ +#define YY_DO_BEFORE_ACTION \ + (yytext_ptr) = yy_bp; \ + yyleng = (yy_size_t) (yy_cp - yy_bp); \ + (yy_hold_char) = *yy_cp; \ + *yy_cp = '\0'; \ + (yy_c_buf_p) = yy_cp; +#define YY_NUM_RULES 83 +#define YY_END_OF_BUFFER 84 +/* This struct is not used in this scanner, + but its presence is necessary. */ +struct yy_trans_info + { + flex_int32_t yy_verify; + flex_int32_t yy_nxt; + }; +static const flex_int16_t yy_accept[257] = + { 0, + 0, 0, 81, 81, 84, 80, 75, 79, 28, 80, + 74, 80, 76, 2, 2, 31, 29, 30, 80, 76, + 76, 76, 76, 76, 76, 76, 76, 76, 76, 76, + 76, 76, 76, 76, 76, 76, 76, 76, 82, 81, + 83, 0, 78, 74, 0, 77, 76, 2, 4, 76, + 33, 29, 32, 0, 76, 76, 52, 76, 76, 76, + 76, 76, 76, 76, 76, 76, 34, 76, 76, 76, + 76, 37, 35, 76, 76, 76, 61, 15, 11, 76, + 38, 36, 76, 76, 76, 76, 76, 76, 27, 76, + 76, 70, 76, 76, 76, 76, 76, 76, 76, 76, + + 76, 76, 82, 81, 3, 0, 66, 26, 5, 65, + 19, 49, 48, 76, 10, 76, 14, 76, 76, 76, + 76, 76, 76, 76, 76, 68, 76, 76, 76, 76, + 76, 76, 56, 76, 76, 21, 12, 76, 28, 76, + 16, 76, 76, 76, 47, 76, 76, 76, 13, 72, + 23, 76, 69, 76, 0, 76, 76, 76, 76, 76, + 76, 76, 76, 76, 76, 11, 58, 76, 76, 6, + 7, 76, 62, 54, 17, 76, 76, 76, 51, 18, + 76, 76, 53, 76, 0, 44, 9, 76, 76, 76, + 76, 76, 57, 76, 45, 76, 76, 8, 76, 76, + + 76, 76, 76, 50, 76, 22, 0, 76, 25, 39, + 76, 76, 76, 76, 76, 76, 76, 76, 76, 76, + 76, 20, 0, 76, 76, 76, 76, 63, 73, 76, + 76, 24, 64, 76, 43, 67, 1, 46, 76, 76, + 76, 42, 76, 76, 76, 41, 76, 55, 60, 59, + 76, 76, 76, 40, 71, 0 + } ; + +static const YY_CHAR yy_ec[256] = + { 0, + 1, 1, 1, 1, 1, 1, 1, 1, 2, 3, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 4, 5, 6, 7, 8, 8, 8, 9, 8, + 8, 8, 8, 8, 10, 11, 8, 12, 13, 13, + 13, 14, 13, 15, 13, 13, 13, 11, 8, 16, + 17, 18, 8, 19, 20, 21, 22, 23, 24, 25, + 26, 27, 28, 11, 29, 30, 31, 32, 33, 34, + 35, 36, 37, 38, 39, 40, 41, 42, 43, 11, + 8, 8, 8, 8, 11, 8, 44, 45, 46, 47, + + 48, 49, 50, 51, 52, 11, 53, 54, 55, 56, + 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, + 67, 11, 8, 8, 8, 8, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1 + } ; + +static const YY_CHAR yy_meta[68] = + { 0, + 1, 2, 3, 4, 5, 5, 5, 5, 5, 6, + 6, 6, 6, 6, 6, 5, 6, 5, 5, 6, + 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, + 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, + 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, + 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, + 6, 6, 6, 6, 6, 6, 6 + } ; + +static const flex_int16_t yy_base[263] = + { 0, + 0, 0, 66, 69, 280, 556, 556, 556, 556, 198, + 0, 188, 0, 62, 36, 179, 151, 150, 51, 60, + 55, 51, 48, 88, 88, 95, 53, 114, 107, 115, + 132, 143, 158, 68, 98, 138, 145, 132, 0, 92, + 556, 126, 556, 0, 90, 556, 0, 124, 0, 207, + 556, 0, 556, 142, 154, 170, 165, 153, 189, 162, + 172, 173, 176, 189, 197, 209, 0, 212, 206, 225, + 218, 209, 0, 206, 213, 222, 0, 222, 220, 223, + 0, 0, 240, 241, 235, 236, 237, 239, 0, 241, + 261, 0, 245, 250, 282, 249, 267, 253, 260, 273, + + 269, 276, 0, 306, 0, 287, 0, 0, 0, 0, + 0, 0, 0, 295, 0, 289, 0, 302, 299, 296, + 301, 293, 301, 288, 294, 0, 294, 300, 303, 300, + 126, 313, 0, 309, 303, 0, 0, 303, 0, 318, + 0, 315, 322, 316, 0, 317, 325, 329, 0, 0, + 0, 337, 0, 332, 341, 335, 335, 336, 338, 345, + 343, 344, 345, 363, 345, 0, 85, 346, 361, 0, + 0, 356, 0, 0, 0, 353, 366, 359, 0, 0, + 369, 381, 0, 387, 376, 0, 0, 389, 381, 395, + 382, 383, 0, 394, 0, 403, 410, 0, 388, 405, + + 388, 392, 411, 0, 397, 0, 411, 403, 0, 80, + 394, 414, 404, 412, 420, 416, 426, 422, 446, 430, + 445, 0, 445, 438, 443, 439, 439, 0, 0, 453, + 444, 0, 0, 441, 0, 0, 556, 0, 457, 439, + 460, 0, 461, 462, 460, 0, 462, 0, 0, 0, + 465, 477, 475, 0, 0, 556, 531, 534, 540, 543, + 74, 549 + } ; + +static const flex_int16_t yy_def[263] = + { 0, + 256, 1, 257, 257, 256, 256, 256, 256, 256, 258, + 259, 260, 261, 261, 14, 256, 261, 256, 256, 261, + 261, 261, 261, 261, 261, 261, 261, 261, 261, 261, + 261, 261, 261, 261, 261, 261, 261, 261, 262, 256, + 256, 258, 256, 259, 260, 256, 261, 14, 261, 261, + 256, 261, 256, 256, 261, 261, 261, 261, 261, 261, + 261, 261, 261, 261, 261, 261, 261, 261, 261, 261, + 261, 261, 261, 261, 261, 261, 261, 261, 261, 261, + 261, 261, 261, 261, 261, 261, 261, 261, 261, 261, + 261, 261, 261, 261, 261, 261, 261, 261, 261, 261, + + 261, 261, 262, 256, 50, 256, 261, 261, 261, 261, + 261, 261, 261, 261, 261, 261, 261, 261, 261, 261, + 261, 261, 261, 261, 261, 261, 261, 261, 261, 261, + 261, 261, 261, 261, 261, 261, 261, 261, 261, 261, + 261, 261, 261, 261, 261, 261, 261, 261, 261, 261, + 261, 261, 261, 261, 256, 261, 261, 261, 261, 261, + 261, 261, 261, 261, 261, 261, 261, 261, 261, 261, + 261, 261, 261, 261, 261, 261, 261, 261, 261, 261, + 261, 261, 261, 261, 256, 261, 261, 261, 261, 261, + 261, 261, 261, 261, 261, 261, 261, 261, 261, 261, + + 261, 261, 261, 261, 261, 261, 256, 261, 261, 261, + 261, 261, 261, 261, 261, 261, 261, 261, 261, 261, + 261, 261, 256, 261, 261, 261, 261, 261, 261, 261, + 261, 261, 261, 261, 261, 261, 256, 261, 261, 261, + 261, 261, 261, 261, 261, 261, 261, 261, 261, 261, + 261, 261, 261, 261, 261, 0, 256, 256, 256, 256, + 256, 256 + } ; + +static const flex_int16_t yy_nxt[624] = + { 0, + 6, 7, 8, 7, 9, 10, 11, 6, 12, 13, + 13, 14, 15, 15, 15, 16, 17, 18, 19, 20, + 21, 22, 23, 24, 25, 26, 27, 28, 13, 29, + 30, 31, 32, 33, 13, 34, 35, 36, 13, 37, + 13, 38, 13, 20, 21, 22, 23, 24, 25, 26, + 27, 28, 13, 29, 30, 31, 32, 33, 13, 34, + 35, 36, 13, 37, 13, 38, 13, 40, 41, 40, + 40, 41, 40, 48, 48, 48, 48, 47, 54, 47, + 58, 55, 61, 62, 63, 74, 64, 49, 59, 225, + 49, 56, 49, 104, 197, 104, 57, 60, 46, 49, + + 96, 47, 54, 50, 58, 55, 61, 62, 63, 74, + 64, 49, 59, 65, 49, 56, 49, 70, 72, 66, + 57, 60, 67, 49, 96, 68, 80, 50, 71, 69, + 81, 43, 73, 97, 83, 75, 76, 65, 77, 170, + 171, 70, 72, 66, 82, 78, 67, 79, 84, 68, + 80, 85, 71, 69, 81, 86, 73, 97, 83, 75, + 76, 102, 77, 88, 87, 47, 53, 52, 82, 78, + 98, 79, 84, 106, 100, 85, 99, 91, 89, 86, + 101, 90, 92, 107, 110, 102, 111, 88, 87, 47, + 93, 94, 108, 95, 98, 51, 46, 106, 100, 114, + + 99, 91, 89, 43, 101, 90, 92, 107, 110, 115, + 111, 116, 109, 117, 93, 94, 108, 95, 105, 105, + 105, 105, 112, 114, 118, 113, 105, 105, 105, 105, + 105, 105, 119, 115, 120, 116, 109, 117, 121, 122, + 125, 126, 127, 128, 123, 129, 112, 130, 118, 113, + 105, 105, 105, 105, 105, 105, 119, 124, 120, 131, + 132, 133, 121, 122, 125, 126, 127, 128, 123, 129, + 135, 130, 136, 137, 139, 140, 134, 138, 141, 256, + 144, 124, 142, 131, 132, 133, 145, 148, 149, 150, + 256, 151, 152, 153, 135, 154, 136, 137, 139, 140, + + 134, 138, 141, 143, 144, 146, 142, 104, 155, 104, + 145, 148, 149, 150, 147, 151, 152, 153, 156, 154, + 157, 158, 159, 160, 161, 162, 163, 143, 164, 146, + 165, 166, 155, 167, 168, 169, 172, 173, 147, 174, + 175, 176, 156, 177, 157, 158, 159, 160, 161, 162, + 163, 178, 164, 179, 165, 166, 180, 167, 168, 169, + 172, 173, 181, 174, 175, 176, 182, 177, 183, 184, + 185, 186, 187, 188, 189, 178, 190, 179, 191, 192, + 180, 193, 196, 198, 199, 194, 181, 200, 201, 202, + 182, 203, 183, 184, 185, 186, 187, 188, 189, 195, + + 190, 204, 191, 192, 205, 193, 196, 198, 199, 194, + 206, 200, 201, 202, 207, 203, 208, 209, 210, 211, + 212, 213, 214, 195, 217, 204, 218, 219, 205, 220, + 221, 215, 222, 223, 206, 224, 226, 227, 207, 228, + 208, 209, 210, 211, 212, 213, 214, 216, 217, 229, + 218, 219, 230, 220, 221, 215, 222, 223, 231, 224, + 226, 227, 232, 228, 233, 234, 235, 236, 237, 238, + 239, 216, 241, 229, 242, 243, 230, 244, 245, 246, + 240, 247, 231, 248, 249, 250, 232, 251, 233, 234, + 235, 236, 237, 238, 239, 252, 241, 253, 242, 243, + + 254, 244, 245, 246, 240, 247, 255, 248, 249, 250, + 256, 251, 256, 256, 256, 256, 256, 256, 256, 252, + 256, 253, 256, 256, 254, 256, 256, 256, 256, 256, + 255, 39, 39, 39, 39, 39, 39, 42, 42, 42, + 44, 44, 256, 44, 44, 44, 45, 45, 45, 103, + 256, 256, 256, 103, 103, 5, 256, 256, 256, 256, + 256, 256, 256, 256, 256, 256, 256, 256, 256, 256, + 256, 256, 256, 256, 256, 256, 256, 256, 256, 256, + 256, 256, 256, 256, 256, 256, 256, 256, 256, 256, + 256, 256, 256, 256, 256, 256, 256, 256, 256, 256, + + 256, 256, 256, 256, 256, 256, 256, 256, 256, 256, + 256, 256, 256, 256, 256, 256, 256, 256, 256, 256, + 256, 256, 256 + } ; + +static const flex_int16_t yy_chk[624] = + { 0, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, + 1, 1, 1, 1, 1, 1, 1, 3, 3, 3, + 4, 4, 4, 14, 14, 14, 14, 15, 19, 261, + 21, 20, 22, 22, 23, 27, 23, 14, 21, 210, + 14, 20, 14, 40, 167, 40, 20, 21, 45, 14, + + 34, 15, 19, 14, 21, 20, 22, 22, 23, 27, + 23, 14, 21, 24, 14, 20, 14, 25, 26, 24, + 20, 21, 24, 14, 34, 24, 29, 14, 25, 24, + 29, 42, 26, 35, 30, 28, 28, 24, 28, 131, + 131, 25, 26, 24, 29, 28, 24, 28, 30, 24, + 29, 31, 25, 24, 29, 31, 26, 35, 30, 28, + 28, 38, 28, 32, 31, 48, 18, 17, 29, 28, + 36, 28, 30, 54, 37, 31, 36, 33, 32, 31, + 37, 32, 33, 55, 57, 38, 58, 32, 31, 48, + 33, 33, 56, 33, 36, 16, 12, 54, 37, 60, + + 36, 33, 32, 10, 37, 32, 33, 55, 57, 61, + 58, 62, 56, 63, 33, 33, 56, 33, 50, 50, + 50, 50, 59, 60, 64, 59, 50, 50, 50, 50, + 50, 50, 65, 61, 66, 62, 56, 63, 68, 69, + 71, 72, 74, 75, 70, 76, 59, 78, 64, 59, + 50, 50, 50, 50, 50, 50, 65, 70, 66, 79, + 80, 83, 68, 69, 71, 72, 74, 75, 70, 76, + 84, 78, 85, 86, 87, 88, 83, 86, 90, 5, + 93, 70, 91, 79, 80, 83, 94, 96, 97, 98, + 0, 99, 100, 101, 84, 102, 85, 86, 87, 88, + + 83, 86, 90, 91, 93, 95, 91, 104, 106, 104, + 94, 96, 97, 98, 95, 99, 100, 101, 114, 102, + 116, 118, 119, 120, 121, 122, 123, 91, 124, 95, + 125, 127, 106, 128, 129, 130, 132, 134, 95, 135, + 138, 140, 114, 142, 116, 118, 119, 120, 121, 122, + 123, 143, 124, 144, 125, 127, 146, 128, 129, 130, + 132, 134, 147, 135, 138, 140, 148, 142, 152, 154, + 155, 156, 157, 158, 159, 143, 160, 144, 161, 162, + 146, 163, 165, 168, 169, 164, 147, 172, 176, 177, + 148, 178, 152, 154, 155, 156, 157, 158, 159, 164, + + 160, 181, 161, 162, 182, 163, 165, 168, 169, 164, + 184, 172, 176, 177, 185, 178, 188, 189, 190, 191, + 192, 194, 196, 164, 199, 181, 200, 201, 182, 202, + 203, 197, 205, 207, 184, 208, 211, 212, 185, 213, + 188, 189, 190, 191, 192, 194, 196, 197, 199, 214, + 200, 201, 215, 202, 203, 197, 205, 207, 216, 208, + 211, 212, 217, 213, 218, 219, 220, 221, 223, 224, + 225, 197, 226, 214, 227, 230, 215, 231, 234, 239, + 225, 240, 216, 241, 243, 244, 217, 245, 218, 219, + 220, 221, 223, 224, 225, 247, 226, 251, 227, 230, + + 252, 231, 234, 239, 225, 240, 253, 241, 243, 244, + 0, 245, 0, 0, 0, 0, 0, 0, 0, 247, + 0, 251, 0, 0, 252, 0, 0, 0, 0, 0, + 253, 257, 257, 257, 257, 257, 257, 258, 258, 258, + 259, 259, 0, 259, 259, 259, 260, 260, 260, 262, + 0, 0, 0, 262, 262, 256, 256, 256, 256, 256, + 256, 256, 256, 256, 256, 256, 256, 256, 256, 256, + 256, 256, 256, 256, 256, 256, 256, 256, 256, 256, + 256, 256, 256, 256, 256, 256, 256, 256, 256, 256, + 256, 256, 256, 256, 256, 256, 256, 256, 256, 256, + + 256, 256, 256, 256, 256, 256, 256, 256, 256, 256, + 256, 256, 256, 256, 256, 256, 256, 256, 256, 256, + 256, 256, 256 + } ; + +static yy_state_type yy_last_accepting_state; +static char *yy_last_accepting_cpos; + +extern int yy_flex_debug; +int yy_flex_debug = 0; + +/* The intent behind this definition is that it'll catch + * any uses of REJECT which flex missed. + */ +#define REJECT reject_used_but_not_detected +#define yymore() yymore_used_but_not_detected +#define YY_MORE_ADJ 0 +#define YY_RESTORE_YY_MORE_OFFSET +char *yytext; +#line 1 "filter/scanner.l" +/* + * Copyright (c) 2023, Peter Haag + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions are met: + * + * * Redistributions of source code must retain the above copyright notice, + * this list of conditions and the following disclaimer. + * * Redistributions in binary form must reproduce the above copyright notice, + * this list of conditions and the following disclaimer in the documentation + * and/or other materials provided with the distribution. + * * Neither the name of SWITCH nor the names of its contributors may be + * used to endorse or promote products derived from this software without + * specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" + * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE + * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR + * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF + * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS + * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN + * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) + * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE + * POSSIBILITY OF SUCH DAMAGE. + * + */ + +#line 34 "filter/scanner.l" + +#include +#include +#include +#include +#include +#include +#include +#include + +#include "filter.h" +#include "grammar.h" + +int lineno = 1; + + +#ifdef FLEX_SCANNER +#define YY_NO_UNPUT +static YY_BUFFER_STATE in_buffer; +#else +static char *in_buffer; + +#undef getc +#define getc(fp) (*in_buffer == 0 ? EOF : *in_buffer++) +#endif + +#define MAX_INCLUDE_DEPTH 10 +YY_BUFFER_STATE include_stack[MAX_INCLUDE_DEPTH]; + +struct buffer_info { + char *name; + int lineno; +} include_stack_info[MAX_INCLUDE_DEPTH]; + +int include_stack_ptr = 0; + +char *FilterFilename = NULL;; + +static char *stripQuotes(char *word); + +static void __attribute__((noreturn)) yy_fatal_error (yyconst char msg[]); + +// static void __attribute__((unused))yyunput (int c, char * yy_bp); + +#line 741 "filter/scanner.c" +#line 742 "filter/scanner.c" + +#define INITIAL 0 +#define incl 1 + +#ifndef YY_NO_UNISTD_H +/* Special case for "unistd.h", since it is non-ANSI. We include it way + * down here because we want the user's section 1 to have been scanned first. + * The user has a chance to override it with an option. + */ +#include +#endif + +#ifndef YY_EXTRA_TYPE +#define YY_EXTRA_TYPE void * +#endif + +static int yy_init_globals ( void ); + +/* Accessor methods to globals. + These are made visible to non-reentrant scanners for convenience. */ + +int yylex_destroy ( void ); + +int yyget_debug ( void ); + +void yyset_debug ( int debug_flag ); + +YY_EXTRA_TYPE yyget_extra ( void ); + +void yyset_extra ( YY_EXTRA_TYPE user_defined ); + +FILE *yyget_in ( void ); + +void yyset_in ( FILE * _in_str ); + +FILE *yyget_out ( void ); + +void yyset_out ( FILE * _out_str ); + + yy_size_t yyget_leng ( void ); + +char *yyget_text ( void ); + +int yyget_lineno ( void ); + +void yyset_lineno ( int _line_number ); + +/* Macros after this point can all be overridden by user definitions in + * section 1. + */ + +#ifndef YY_SKIP_YYWRAP +#ifdef __cplusplus +extern "C" int yywrap ( void ); +#else +extern int yywrap ( void ); +#endif +#endif + +#ifndef YY_NO_UNPUT + + static void yyunput ( int c, char *buf_ptr ); + +#endif + +#ifndef yytext_ptr +static void yy_flex_strncpy ( char *, const char *, int ); +#endif + +#ifdef YY_NEED_STRLEN +static int yy_flex_strlen ( const char * ); +#endif + +#ifndef YY_NO_INPUT +#ifdef __cplusplus +static int yyinput ( void ); +#else +static int input ( void ); +#endif + +#endif + +/* Amount of stuff to slurp up with each read. */ +#ifndef YY_READ_BUF_SIZE +#ifdef __ia64__ +/* On IA-64, the buffer size is 16k, not 8k */ +#define YY_READ_BUF_SIZE 16384 +#else +#define YY_READ_BUF_SIZE 8192 +#endif /* __ia64__ */ +#endif + +/* Copy whatever the last rule matched to the standard output. */ +#ifndef ECHO +/* This used to be an fputs(), but since the string might contain NUL's, + * we now use fwrite(). + */ +#define ECHO do { if (fwrite( yytext, (size_t) yyleng, 1, yyout )) {} } while (0) +#endif + +/* Gets input and stuffs it into "buf". number of characters read, or YY_NULL, + * is returned in "result". + */ +#ifndef YY_INPUT +#define YY_INPUT(buf,result,max_size) \ + if ( YY_CURRENT_BUFFER_LVALUE->yy_is_interactive ) \ + { \ + int c = '*'; \ + yy_size_t n; \ + for ( n = 0; n < max_size && \ + (c = getc( yyin )) != EOF && c != '\n'; ++n ) \ + buf[n] = (char) c; \ + if ( c == '\n' ) \ + buf[n++] = (char) c; \ + if ( c == EOF && ferror( yyin ) ) \ + YY_FATAL_ERROR( "input in flex scanner failed" ); \ + result = n; \ + } \ + else \ + { \ + errno=0; \ + while ( (result = (int) fread(buf, 1, (yy_size_t) max_size, yyin)) == 0 && ferror(yyin)) \ + { \ + if( errno != EINTR) \ + { \ + YY_FATAL_ERROR( "input in flex scanner failed" ); \ + break; \ + } \ + errno=0; \ + clearerr(yyin); \ + } \ + }\ +\ + +#endif + +/* No semi-colon after return; correct usage is to write "yyterminate();" - + * we don't want an extra ';' after the "return" because that will cause + * some compilers to complain about unreachable statements. + */ +#ifndef yyterminate +#define yyterminate() return YY_NULL +#endif + +/* Number of entries by which start-condition stack grows. */ +#ifndef YY_START_STACK_INCR +#define YY_START_STACK_INCR 25 +#endif + +/* Report a fatal error. */ +#ifndef YY_FATAL_ERROR +#define YY_FATAL_ERROR(msg) yy_fatal_error( msg ) +#endif + +/* end tables serialization structures and prototypes */ + +/* Default declaration of generated scanner - a define so the user can + * easily add parameters. + */ +#ifndef YY_DECL +#define YY_DECL_IS_OURS 1 + +extern int yylex (void); + +#define YY_DECL int yylex (void) +#endif /* !YY_DECL */ + +/* Code executed at the beginning of each rule, after yytext and yyleng + * have been set up. + */ +#ifndef YY_USER_ACTION +#define YY_USER_ACTION +#endif + +/* Code executed at the end of each rule. */ +#ifndef YY_BREAK +#define YY_BREAK /*LINTED*/break; +#endif + +#define YY_RULE_SETUP \ + YY_USER_ACTION + +/** The main scanner function which does all the work. + */ +YY_DECL +{ + yy_state_type yy_current_state; + char *yy_cp, *yy_bp; + int yy_act; + + if ( !(yy_init) ) + { + (yy_init) = 1; + +#ifdef YY_USER_INIT + YY_USER_INIT; +#endif + + if ( ! (yy_start) ) + (yy_start) = 1; /* first start state */ + + if ( ! yyin ) + yyin = stdin; + + if ( ! yyout ) + yyout = stdout; + + if ( ! YY_CURRENT_BUFFER ) { + yyensure_buffer_stack (); + YY_CURRENT_BUFFER_LVALUE = + yy_create_buffer( yyin, YY_BUF_SIZE ); + } + + yy_load_buffer_state( ); + } + + { +#line 83 "filter/scanner.l" + +#line 962 "filter/scanner.c" + + while ( /*CONSTCOND*/1 ) /* loops until end-of-file is reached */ + { + yy_cp = (yy_c_buf_p); + + /* Support of yytext. */ + *yy_cp = (yy_hold_char); + + /* yy_bp points to the position in yy_ch_buf of the start of + * the current run. + */ + yy_bp = yy_cp; + + yy_current_state = (yy_start); +yy_match: + do + { + YY_CHAR yy_c = yy_ec[YY_SC_TO_UI(*yy_cp)] ; + if ( yy_accept[yy_current_state] ) + { + (yy_last_accepting_state) = yy_current_state; + (yy_last_accepting_cpos) = yy_cp; + } + while ( yy_chk[yy_base[yy_current_state] + yy_c] != yy_current_state ) + { + yy_current_state = (int) yy_def[yy_current_state]; + if ( yy_current_state >= 257 ) + yy_c = yy_meta[yy_c]; + } + yy_current_state = yy_nxt[yy_base[yy_current_state] + yy_c]; + ++yy_cp; + } + while ( yy_base[yy_current_state] != 556 ); + +yy_find_action: + yy_act = yy_accept[yy_current_state]; + if ( yy_act == 0 ) + { /* have to back up */ + yy_cp = (yy_last_accepting_cpos); + yy_current_state = (yy_last_accepting_state); + yy_act = yy_accept[yy_current_state]; + } + + YY_DO_BEFORE_ACTION; + +do_action: /* This label is used only to access EOF actions. */ + + switch ( yy_act ) + { /* beginning of action switch */ + case 0: /* must back up */ + /* undo the effects of YY_DO_BEFORE_ACTION */ + *yy_cp = (yy_hold_char); + yy_cp = (yy_last_accepting_cpos); + yy_current_state = (yy_last_accepting_state); + goto yy_find_action; + +case 1: +YY_RULE_SETUP +#line 84 "filter/scanner.l" +BEGIN(incl); + YY_BREAK +case 2: +YY_RULE_SETUP +#line 86 "filter/scanner.l" +{ + yylval.value = (uint64_t) strtoull(yytext,NULL,10); + return NUMBER; + } + YY_BREAK +case 3: +YY_RULE_SETUP +#line 91 "filter/scanner.l" +{ + yylval.value = (uint64_t) strtoull(yytext,NULL,16); + return NUMBER; + } + YY_BREAK +case 4: +YY_RULE_SETUP +#line 96 "filter/scanner.l" +{ + size_t len = strlen(yytext); + switch (yytext[len-1]) { + case 'k': + case 'K': + yylval.value = 1000LL * (uint64_t) strtoull(yytext,NULL,10); + break; + case 'm': + case 'M': + yylval.value = 1000LL * 1000LL * (uint64_t) strtoull(yytext,NULL,10); + break; + case 'g': + case 'G': + yylval.value = 1000LL * 1000LL * 1000LL * (uint64_t) strtoull(yytext,NULL,10); + break; + case 't': + case 'T': + yylval.value = 1000LL * 1000LL * 1000LL * 1000LL * (uint64_t) strtoull(yytext,NULL,10); + break; + default: + yylval.value = (uint64_t) strtoull(yytext,NULL,10); + } + return NUMBER; + } + YY_BREAK +case 5: +YY_RULE_SETUP +#line 121 "filter/scanner.l" +{ return ANY; } + YY_BREAK +case 6: +YY_RULE_SETUP +#line 122 "filter/scanner.l" +{ return IPV4; } + YY_BREAK +case 7: +YY_RULE_SETUP +#line 123 "filter/scanner.l" +{ return IPV6; } + YY_BREAK +case 8: +YY_RULE_SETUP +#line 124 "filter/scanner.l" +{ return IDENT; } + YY_BREAK +case 9: +YY_RULE_SETUP +#line 125 "filter/scanner.l" +{ return COUNT; } + YY_BREAK +case 10: +YY_RULE_SETUP +#line 126 "filter/scanner.l" +{ return COUNT; } + YY_BREAK +case 11: +YY_RULE_SETUP +#line 127 "filter/scanner.l" +{ return IP; } + YY_BREAK +case 12: +YY_RULE_SETUP +#line 128 "filter/scanner.l" +{ return NET; } + YY_BREAK +case 13: +YY_RULE_SETUP +#line 130 "filter/scanner.l" +{ return SRC; } + YY_BREAK +case 14: +YY_RULE_SETUP +#line 131 "filter/scanner.l" +{ return DST; } + YY_BREAK +case 15: +YY_RULE_SETUP +#line 132 "filter/scanner.l" +{ return IN; } + YY_BREAK +case 16: +YY_RULE_SETUP +#line 133 "filter/scanner.l" +{ return OUT; } + YY_BREAK +case 17: +YY_RULE_SETUP +#line 134 "filter/scanner.l" +{ return NEXT; } + YY_BREAK +case 18: +YY_RULE_SETUP +#line 135 "filter/scanner.l" +{ return PREV; } + YY_BREAK +case 19: +YY_RULE_SETUP +#line 136 "filter/scanner.l" +{ return BGP; } + YY_BREAK +case 20: +YY_RULE_SETUP +#line 137 "filter/scanner.l" +{ return ROUTER; } + YY_BREAK +case 21: +YY_RULE_SETUP +#line 138 "filter/scanner.l" +{ return NAT; } + YY_BREAK +case 22: +YY_RULE_SETUP +#line 139 "filter/scanner.l" +{ return NAT; } + YY_BREAK +case 23: +YY_RULE_SETUP +#line 140 "filter/scanner.l" +{ return TUN; } + YY_BREAK +case 24: +YY_RULE_SETUP +#line 141 "filter/scanner.l" +{ return INGRESS;} + YY_BREAK +case 25: +YY_RULE_SETUP +#line 142 "filter/scanner.l" +{ return EGRESS; } + YY_BREAK +case 26: +YY_RULE_SETUP +#line 144 "filter/scanner.l" +{ return AND; } + YY_BREAK +case 27: +YY_RULE_SETUP +#line 145 "filter/scanner.l" +{ return OR; } + YY_BREAK +case 28: +YY_RULE_SETUP +#line 146 "filter/scanner.l" +{ return NOT; } + YY_BREAK +case 29: +YY_RULE_SETUP +#line 147 "filter/scanner.l" +{ return EQ; } + YY_BREAK +case 30: +YY_RULE_SETUP +#line 148 "filter/scanner.l" +{ return GT; } + YY_BREAK +case 31: +YY_RULE_SETUP +#line 149 "filter/scanner.l" +{ return LT; } + YY_BREAK +case 32: +YY_RULE_SETUP +#line 150 "filter/scanner.l" +{ return GE; } + YY_BREAK +case 33: +YY_RULE_SETUP +#line 151 "filter/scanner.l" +{ return LE; } + YY_BREAK +case 34: +YY_RULE_SETUP +#line 152 "filter/scanner.l" +{ return EQ; } + YY_BREAK +case 35: +YY_RULE_SETUP +#line 153 "filter/scanner.l" +{ return GT; } + YY_BREAK +case 36: +YY_RULE_SETUP +#line 154 "filter/scanner.l" +{ return LT; } + YY_BREAK +case 37: +YY_RULE_SETUP +#line 155 "filter/scanner.l" +{ return GE; } + YY_BREAK +case 38: +YY_RULE_SETUP +#line 156 "filter/scanner.l" +{ return LE; } + YY_BREAK +case 39: +YY_RULE_SETUP +#line 158 "filter/scanner.l" +{ return ENGINE; } + YY_BREAK +case 40: +YY_RULE_SETUP +#line 159 "filter/scanner.l" +{ return ENGINETYPE; } + YY_BREAK +case 41: +YY_RULE_SETUP +#line 160 "filter/scanner.l" +{ return ENGINEID; } + YY_BREAK +case 42: +YY_RULE_SETUP +#line 161 "filter/scanner.l" +{ return EXPORTER; } + YY_BREAK +case 43: +YY_RULE_SETUP +#line 163 "filter/scanner.l" +{ return PACKETS; } + YY_BREAK +case 44: +YY_RULE_SETUP +#line 164 "filter/scanner.l" +{ return BYTES; } + YY_BREAK +case 45: +YY_RULE_SETUP +#line 165 "filter/scanner.l" +{ return FLOWS; } + YY_BREAK +case 46: +YY_RULE_SETUP +#line 166 "filter/scanner.l" +{ return DURATION; } + YY_BREAK +case 47: +YY_RULE_SETUP +#line 167 "filter/scanner.l" +{ return PPS; } + YY_BREAK +case 48: +YY_RULE_SETUP +#line 168 "filter/scanner.l" +{ return BPS; } + YY_BREAK +case 49: +YY_RULE_SETUP +#line 169 "filter/scanner.l" +{ return BPP; } + YY_BREAK +case 50: +YY_RULE_SETUP +#line 171 "filter/scanner.l" +{ return PROTO; } + YY_BREAK +case 51: +YY_RULE_SETUP +#line 172 "filter/scanner.l" +{ return PORT; } + YY_BREAK +case 52: +YY_RULE_SETUP +#line 173 "filter/scanner.l" +{ return AS; } + YY_BREAK +case 53: +YY_RULE_SETUP +#line 174 "filter/scanner.l" +{ return VLAN; } + YY_BREAK +case 54: +YY_RULE_SETUP +#line 175 "filter/scanner.l" +{ return MPLS; } + YY_BREAK +case 55: +YY_RULE_SETUP +#line 176 "filter/scanner.l" +{ return ETHERTYPE;} + YY_BREAK +case 56: +YY_RULE_SETUP +#line 177 "filter/scanner.l" +{ return MAC; } + YY_BREAK +case 57: +YY_RULE_SETUP +#line 178 "filter/scanner.l" +{ return FLAGS; } + YY_BREAK +case 58: +YY_RULE_SETUP +#line 179 "filter/scanner.l" +{ return ICMP; } + YY_BREAK +case 59: +YY_RULE_SETUP +#line 180 "filter/scanner.l" +{ return ICMPTYPE; } + YY_BREAK +case 60: +YY_RULE_SETUP +#line 181 "filter/scanner.l" +{ return ICMPCODE; } + YY_BREAK +case 61: +YY_RULE_SETUP +#line 183 "filter/scanner.l" +{ return IF; } + YY_BREAK +case 62: +YY_RULE_SETUP +#line 184 "filter/scanner.l" +{ return MASK; } + YY_BREAK +case 63: +YY_RULE_SETUP +#line 185 "filter/scanner.l" +{ return FLOWDIR; } + YY_BREAK +case 64: +YY_RULE_SETUP +#line 186 "filter/scanner.l" +{ return LATENCY; } + YY_BREAK +case 65: +YY_RULE_SETUP +#line 187 "filter/scanner.l" +{ return ASA; } + YY_BREAK +case 66: +YY_RULE_SETUP +#line 188 "filter/scanner.l" +{ return ACL; } + YY_BREAK +case 67: +YY_RULE_SETUP +#line 189 "filter/scanner.l" +{ return PAYLOAD; } + YY_BREAK +case 68: +YY_RULE_SETUP +#line 190 "filter/scanner.l" +{ return GEO; } + YY_BREAK +case 69: +YY_RULE_SETUP +#line 191 "filter/scanner.l" +{ return VRF; } + YY_BREAK +case 70: +YY_RULE_SETUP +#line 192 "filter/scanner.l" +{ return PF; } + YY_BREAK +case 71: +YY_RULE_SETUP +#line 194 "filter/scanner.l" +{ return OBSERVATION; } + YY_BREAK +case 72: +YY_RULE_SETUP +#line 196 "filter/scanner.l" +{ return TOS; } + YY_BREAK +case 73: +YY_RULE_SETUP +#line 197 "filter/scanner.l" +{ return FWDSTAT; } + YY_BREAK +case 74: +YY_RULE_SETUP +#line 199 "filter/scanner.l" +{ ; } + YY_BREAK +case 75: +YY_RULE_SETUP +#line 200 "filter/scanner.l" +{ ; } + YY_BREAK +case 76: +YY_RULE_SETUP +#line 202 "filter/scanner.l" +{ + yylval.s = stripQuotes(yytext); + return STRING; + } + YY_BREAK +case 77: +YY_RULE_SETUP +#line 206 "filter/scanner.l" +{ + yylval.s = stripQuotes(yytext); + return STRING; + } + YY_BREAK +case 78: +YY_RULE_SETUP +#line 210 "filter/scanner.l" +{ + yylval.s = stripQuotes(yytext); + return STRING; + } + YY_BREAK +case 79: +/* rule 79 can match eol */ +YY_RULE_SETUP +#line 215 "filter/scanner.l" +{ lineno++; } + YY_BREAK +case 80: +YY_RULE_SETUP +#line 216 "filter/scanner.l" +{ return yytext[0]; } + YY_BREAK +case 81: +YY_RULE_SETUP +#line 219 "filter/scanner.l" +/* eat the whitespace */ + YY_BREAK +case 82: +YY_RULE_SETUP +#line 220 "filter/scanner.l" +{ /* got the include file name */ + if ( include_stack_ptr >= MAX_INCLUDE_DEPTH ) { + fprintf( stderr, "Includes nested too deeply" ); + exit(255); + } + + include_stack[include_stack_ptr] = YY_CURRENT_BUFFER; + include_stack_info[include_stack_ptr].name = FilterFilename; + include_stack_info[include_stack_ptr].lineno = lineno; + include_stack_ptr++; + + lineno = 1; + yyin = fopen( yytext, "r" ); + + if ( ! yyin ) { + fprintf(stderr, "Failed to open include file '%s': %s\n", yytext, strerror(errno)); + exit(255); + } + + FilterFilename = strdup(yytext); + yy_switch_to_buffer( yy_create_buffer( yyin, YY_BUF_SIZE ) ); + + BEGIN(INITIAL); + } + YY_BREAK +case YY_STATE_EOF(INITIAL): +case YY_STATE_EOF(incl): +#line 245 "filter/scanner.l" +{ + if ( include_stack_ptr == 0 ) { + yyterminate(); + } else { + if ( include_stack_info[include_stack_ptr].name ) + free(include_stack_info[include_stack_ptr].name); + include_stack_ptr--; + yy_delete_buffer( YY_CURRENT_BUFFER ); + yy_switch_to_buffer( include_stack[include_stack_ptr] ); + lineno = include_stack_info[include_stack_ptr].lineno; + FilterFilename = include_stack_info[include_stack_ptr].name; + } + } + YY_BREAK +case 83: +YY_RULE_SETUP +#line 259 "filter/scanner.l" +ECHO; + YY_BREAK +#line 1513 "filter/scanner.c" + + case YY_END_OF_BUFFER: + { + /* Amount of text matched not including the EOB char. */ + int yy_amount_of_matched_text = (int) (yy_cp - (yytext_ptr)) - 1; + + /* Undo the effects of YY_DO_BEFORE_ACTION. */ + *yy_cp = (yy_hold_char); + YY_RESTORE_YY_MORE_OFFSET + + if ( YY_CURRENT_BUFFER_LVALUE->yy_buffer_status == YY_BUFFER_NEW ) + { + /* We're scanning a new file or input source. It's + * possible that this happened because the user + * just pointed yyin at a new source and called + * yylex(). If so, then we have to assure + * consistency between YY_CURRENT_BUFFER and our + * globals. Here is the right place to do so, because + * this is the first action (other than possibly a + * back-up) that will match for the new input source. + */ + (yy_n_chars) = YY_CURRENT_BUFFER_LVALUE->yy_n_chars; + YY_CURRENT_BUFFER_LVALUE->yy_input_file = yyin; + YY_CURRENT_BUFFER_LVALUE->yy_buffer_status = YY_BUFFER_NORMAL; + } + + /* Note that here we test for yy_c_buf_p "<=" to the position + * of the first EOB in the buffer, since yy_c_buf_p will + * already have been incremented past the NUL character + * (since all states make transitions on EOB to the + * end-of-buffer state). Contrast this with the test + * in input(). + */ + if ( (yy_c_buf_p) <= &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[(yy_n_chars)] ) + { /* This was really a NUL. */ + yy_state_type yy_next_state; + + (yy_c_buf_p) = (yytext_ptr) + yy_amount_of_matched_text; + + yy_current_state = yy_get_previous_state( ); + + /* Okay, we're now positioned to make the NUL + * transition. We couldn't have + * yy_get_previous_state() go ahead and do it + * for us because it doesn't know how to deal + * with the possibility of jamming (and we don't + * want to build jamming into it because then it + * will run more slowly). + */ + + yy_next_state = yy_try_NUL_trans( yy_current_state ); + + yy_bp = (yytext_ptr) + YY_MORE_ADJ; + + if ( yy_next_state ) + { + /* Consume the NUL. */ + yy_cp = ++(yy_c_buf_p); + yy_current_state = yy_next_state; + goto yy_match; + } + + else + { + yy_cp = (yy_c_buf_p); + goto yy_find_action; + } + } + + else switch ( yy_get_next_buffer( ) ) + { + case EOB_ACT_END_OF_FILE: + { + (yy_did_buffer_switch_on_eof) = 0; + + if ( yywrap( ) ) + { + /* Note: because we've taken care in + * yy_get_next_buffer() to have set up + * yytext, we can now set up + * yy_c_buf_p so that if some total + * hoser (like flex itself) wants to + * call the scanner after we return the + * YY_NULL, it'll still work - another + * YY_NULL will get returned. + */ + (yy_c_buf_p) = (yytext_ptr) + YY_MORE_ADJ; + + yy_act = YY_STATE_EOF(YY_START); + goto do_action; + } + + else + { + if ( ! (yy_did_buffer_switch_on_eof) ) + YY_NEW_FILE; + } + break; + } + + case EOB_ACT_CONTINUE_SCAN: + (yy_c_buf_p) = + (yytext_ptr) + yy_amount_of_matched_text; + + yy_current_state = yy_get_previous_state( ); + + yy_cp = (yy_c_buf_p); + yy_bp = (yytext_ptr) + YY_MORE_ADJ; + goto yy_match; + + case EOB_ACT_LAST_MATCH: + (yy_c_buf_p) = + &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[(yy_n_chars)]; + + yy_current_state = yy_get_previous_state( ); + + yy_cp = (yy_c_buf_p); + yy_bp = (yytext_ptr) + YY_MORE_ADJ; + goto yy_find_action; + } + break; + } + + default: + YY_FATAL_ERROR( + "fatal flex scanner internal error--no action found" ); + } /* end of action switch */ + } /* end of scanning one token */ + } /* end of user's declarations */ +} /* end of yylex */ + +/* yy_get_next_buffer - try to read in a new buffer + * + * Returns a code representing an action: + * EOB_ACT_LAST_MATCH - + * EOB_ACT_CONTINUE_SCAN - continue scanning from current position + * EOB_ACT_END_OF_FILE - end of file + */ +static int yy_get_next_buffer (void) +{ + char *dest = YY_CURRENT_BUFFER_LVALUE->yy_ch_buf; + char *source = (yytext_ptr); + int number_to_move, i; + int ret_val; + + if ( (yy_c_buf_p) > &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[(yy_n_chars) + 1] ) + YY_FATAL_ERROR( + "fatal flex scanner internal error--end of buffer missed" ); + + if ( YY_CURRENT_BUFFER_LVALUE->yy_fill_buffer == 0 ) + { /* Don't try to fill the buffer, so this is an EOF. */ + if ( (yy_c_buf_p) - (yytext_ptr) - YY_MORE_ADJ == 1 ) + { + /* We matched a single character, the EOB, so + * treat this as a final EOF. + */ + return EOB_ACT_END_OF_FILE; + } + + else + { + /* We matched some text prior to the EOB, first + * process it. + */ + return EOB_ACT_LAST_MATCH; + } + } + + /* Try to read more data. */ + + /* First move last chars to start of buffer. */ + number_to_move = (int) ((yy_c_buf_p) - (yytext_ptr) - 1); + + for ( i = 0; i < number_to_move; ++i ) + *(dest++) = *(source++); + + if ( YY_CURRENT_BUFFER_LVALUE->yy_buffer_status == YY_BUFFER_EOF_PENDING ) + /* don't do the read, it's not guaranteed to return an EOF, + * just force an EOF + */ + YY_CURRENT_BUFFER_LVALUE->yy_n_chars = (yy_n_chars) = 0; + + else + { + yy_size_t num_to_read = + YY_CURRENT_BUFFER_LVALUE->yy_buf_size - number_to_move - 1; + + while ( num_to_read <= 0 ) + { /* Not enough room in the buffer - grow it. */ + + /* just a shorter name for the current buffer */ + YY_BUFFER_STATE b = YY_CURRENT_BUFFER_LVALUE; + + int yy_c_buf_p_offset = + (int) ((yy_c_buf_p) - b->yy_ch_buf); + + if ( b->yy_is_our_buffer ) + { + yy_size_t new_size = b->yy_buf_size * 2; + + if ( new_size <= 0 ) + b->yy_buf_size += b->yy_buf_size / 8; + else + b->yy_buf_size *= 2; + + b->yy_ch_buf = (char *) + /* Include room in for 2 EOB chars. */ + yyrealloc( (void *) b->yy_ch_buf, + (yy_size_t) (b->yy_buf_size + 2) ); + } + else + /* Can't grow it, we don't own it. */ + b->yy_ch_buf = NULL; + + if ( ! b->yy_ch_buf ) + YY_FATAL_ERROR( + "fatal error - scanner input buffer overflow" ); + + (yy_c_buf_p) = &b->yy_ch_buf[yy_c_buf_p_offset]; + + num_to_read = YY_CURRENT_BUFFER_LVALUE->yy_buf_size - + number_to_move - 1; + + } + + if ( num_to_read > YY_READ_BUF_SIZE ) + num_to_read = YY_READ_BUF_SIZE; + + /* Read in more data. */ + YY_INPUT( (&YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[number_to_move]), + (yy_n_chars), num_to_read ); + + YY_CURRENT_BUFFER_LVALUE->yy_n_chars = (yy_n_chars); + } + + if ( (yy_n_chars) == 0 ) + { + if ( number_to_move == YY_MORE_ADJ ) + { + ret_val = EOB_ACT_END_OF_FILE; + yyrestart( yyin ); + } + + else + { + ret_val = EOB_ACT_LAST_MATCH; + YY_CURRENT_BUFFER_LVALUE->yy_buffer_status = + YY_BUFFER_EOF_PENDING; + } + } + + else + ret_val = EOB_ACT_CONTINUE_SCAN; + + if (((yy_n_chars) + number_to_move) > YY_CURRENT_BUFFER_LVALUE->yy_buf_size) { + /* Extend the array by 50%, plus the number we really need. */ + yy_size_t new_size = (yy_n_chars) + number_to_move + ((yy_n_chars) >> 1); + YY_CURRENT_BUFFER_LVALUE->yy_ch_buf = (char *) yyrealloc( + (void *) YY_CURRENT_BUFFER_LVALUE->yy_ch_buf, (yy_size_t) new_size ); + if ( ! YY_CURRENT_BUFFER_LVALUE->yy_ch_buf ) + YY_FATAL_ERROR( "out of dynamic memory in yy_get_next_buffer()" ); + /* "- 2" to take care of EOB's */ + YY_CURRENT_BUFFER_LVALUE->yy_buf_size = (int) (new_size - 2); + } + + (yy_n_chars) += number_to_move; + YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[(yy_n_chars)] = YY_END_OF_BUFFER_CHAR; + YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[(yy_n_chars) + 1] = YY_END_OF_BUFFER_CHAR; + + (yytext_ptr) = &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[0]; + + return ret_val; +} + +/* yy_get_previous_state - get the state just before the EOB char was reached */ + + static yy_state_type yy_get_previous_state (void) +{ + yy_state_type yy_current_state; + char *yy_cp; + + yy_current_state = (yy_start); + + for ( yy_cp = (yytext_ptr) + YY_MORE_ADJ; yy_cp < (yy_c_buf_p); ++yy_cp ) + { + YY_CHAR yy_c = (*yy_cp ? yy_ec[YY_SC_TO_UI(*yy_cp)] : 1); + if ( yy_accept[yy_current_state] ) + { + (yy_last_accepting_state) = yy_current_state; + (yy_last_accepting_cpos) = yy_cp; + } + while ( yy_chk[yy_base[yy_current_state] + yy_c] != yy_current_state ) + { + yy_current_state = (int) yy_def[yy_current_state]; + if ( yy_current_state >= 257 ) + yy_c = yy_meta[yy_c]; + } + yy_current_state = yy_nxt[yy_base[yy_current_state] + yy_c]; + } + + return yy_current_state; +} + +/* yy_try_NUL_trans - try to make a transition on the NUL character + * + * synopsis + * next_state = yy_try_NUL_trans( current_state ); + */ + static yy_state_type yy_try_NUL_trans (yy_state_type yy_current_state ) +{ + int yy_is_jam; + char *yy_cp = (yy_c_buf_p); + + YY_CHAR yy_c = 1; + if ( yy_accept[yy_current_state] ) + { + (yy_last_accepting_state) = yy_current_state; + (yy_last_accepting_cpos) = yy_cp; + } + while ( yy_chk[yy_base[yy_current_state] + yy_c] != yy_current_state ) + { + yy_current_state = (int) yy_def[yy_current_state]; + if ( yy_current_state >= 257 ) + yy_c = yy_meta[yy_c]; + } + yy_current_state = yy_nxt[yy_base[yy_current_state] + yy_c]; + yy_is_jam = (yy_current_state == 256); + + return yy_is_jam ? 0 : yy_current_state; +} + +#ifndef YY_NO_UNPUT + + static void yyunput (int c, char * yy_bp ) +{ + char *yy_cp; + + yy_cp = (yy_c_buf_p); + + /* undo effects of setting up yytext */ + *yy_cp = (yy_hold_char); + + if ( yy_cp < YY_CURRENT_BUFFER_LVALUE->yy_ch_buf + 2 ) + { /* need to shift things up to make room */ + /* +2 for EOB chars. */ + yy_size_t number_to_move = (yy_n_chars) + 2; + char *dest = &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[ + YY_CURRENT_BUFFER_LVALUE->yy_buf_size + 2]; + char *source = + &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[number_to_move]; + + while ( source > YY_CURRENT_BUFFER_LVALUE->yy_ch_buf ) + *--dest = *--source; + + yy_cp += (int) (dest - source); + yy_bp += (int) (dest - source); + YY_CURRENT_BUFFER_LVALUE->yy_n_chars = + (yy_n_chars) = (int) YY_CURRENT_BUFFER_LVALUE->yy_buf_size; + + if ( yy_cp < YY_CURRENT_BUFFER_LVALUE->yy_ch_buf + 2 ) + YY_FATAL_ERROR( "flex scanner push-back overflow" ); + } + + *--yy_cp = (char) c; + + (yytext_ptr) = yy_bp; + (yy_hold_char) = *yy_cp; + (yy_c_buf_p) = yy_cp; +} + +#endif + +#ifndef YY_NO_INPUT +#ifdef __cplusplus + static int yyinput (void) +#else + static int input (void) +#endif + +{ + int c; + + *(yy_c_buf_p) = (yy_hold_char); + + if ( *(yy_c_buf_p) == YY_END_OF_BUFFER_CHAR ) + { + /* yy_c_buf_p now points to the character we want to return. + * If this occurs *before* the EOB characters, then it's a + * valid NUL; if not, then we've hit the end of the buffer. + */ + if ( (yy_c_buf_p) < &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[(yy_n_chars)] ) + /* This was really a NUL. */ + *(yy_c_buf_p) = '\0'; + + else + { /* need more input */ + yy_size_t offset = (yy_c_buf_p) - (yytext_ptr); + ++(yy_c_buf_p); + + switch ( yy_get_next_buffer( ) ) + { + case EOB_ACT_LAST_MATCH: + /* This happens because yy_g_n_b() + * sees that we've accumulated a + * token and flags that we need to + * try matching the token before + * proceeding. But for input(), + * there's no matching to consider. + * So convert the EOB_ACT_LAST_MATCH + * to EOB_ACT_END_OF_FILE. + */ + + /* Reset buffer status. */ + yyrestart( yyin ); + + /*FALLTHROUGH*/ + + case EOB_ACT_END_OF_FILE: + { + if ( yywrap( ) ) + return 0; + + if ( ! (yy_did_buffer_switch_on_eof) ) + YY_NEW_FILE; +#ifdef __cplusplus + return yyinput(); +#else + return input(); +#endif + } + + case EOB_ACT_CONTINUE_SCAN: + (yy_c_buf_p) = (yytext_ptr) + offset; + break; + } + } + } + + c = *(unsigned char *) (yy_c_buf_p); /* cast for 8-bit char's */ + *(yy_c_buf_p) = '\0'; /* preserve yytext */ + (yy_hold_char) = *++(yy_c_buf_p); + + return c; +} +#endif /* ifndef YY_NO_INPUT */ + +/** Immediately switch to a different input stream. + * @param input_file A readable stream. + * + * @note This function does not reset the start condition to @c INITIAL . + */ + void yyrestart (FILE * input_file ) +{ + + if ( ! YY_CURRENT_BUFFER ){ + yyensure_buffer_stack (); + YY_CURRENT_BUFFER_LVALUE = + yy_create_buffer( yyin, YY_BUF_SIZE ); + } + + yy_init_buffer( YY_CURRENT_BUFFER, input_file ); + yy_load_buffer_state( ); +} + +/** Switch to a different input buffer. + * @param new_buffer The new input buffer. + * + */ + void yy_switch_to_buffer (YY_BUFFER_STATE new_buffer ) +{ + + /* TODO. We should be able to replace this entire function body + * with + * yypop_buffer_state(); + * yypush_buffer_state(new_buffer); + */ + yyensure_buffer_stack (); + if ( YY_CURRENT_BUFFER == new_buffer ) + return; + + if ( YY_CURRENT_BUFFER ) + { + /* Flush out information for old buffer. */ + *(yy_c_buf_p) = (yy_hold_char); + YY_CURRENT_BUFFER_LVALUE->yy_buf_pos = (yy_c_buf_p); + YY_CURRENT_BUFFER_LVALUE->yy_n_chars = (yy_n_chars); + } + + YY_CURRENT_BUFFER_LVALUE = new_buffer; + yy_load_buffer_state( ); + + /* We don't actually know whether we did this switch during + * EOF (yywrap()) processing, but the only time this flag + * is looked at is after yywrap() is called, so it's safe + * to go ahead and always set it. + */ + (yy_did_buffer_switch_on_eof) = 1; +} + +static void yy_load_buffer_state (void) +{ + (yy_n_chars) = YY_CURRENT_BUFFER_LVALUE->yy_n_chars; + (yytext_ptr) = (yy_c_buf_p) = YY_CURRENT_BUFFER_LVALUE->yy_buf_pos; + yyin = YY_CURRENT_BUFFER_LVALUE->yy_input_file; + (yy_hold_char) = *(yy_c_buf_p); +} + +/** Allocate and initialize an input buffer state. + * @param file A readable stream. + * @param size The character buffer size in bytes. When in doubt, use @c YY_BUF_SIZE. + * + * @return the allocated buffer state. + */ + YY_BUFFER_STATE yy_create_buffer (FILE * file, int size ) +{ + YY_BUFFER_STATE b; + + b = (YY_BUFFER_STATE) yyalloc( sizeof( struct yy_buffer_state ) ); + if ( ! b ) + YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" ); + + b->yy_buf_size = size; + + /* yy_ch_buf has to be 2 characters longer than the size given because + * we need to put in 2 end-of-buffer characters. + */ + b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) ); + if ( ! b->yy_ch_buf ) + YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" ); + + b->yy_is_our_buffer = 1; + + yy_init_buffer( b, file ); + + return b; +} + +/** Destroy the buffer. + * @param b a buffer created with yy_create_buffer() + * + */ + void yy_delete_buffer (YY_BUFFER_STATE b ) +{ + + if ( ! b ) + return; + + if ( b == YY_CURRENT_BUFFER ) /* Not sure if we should pop here. */ + YY_CURRENT_BUFFER_LVALUE = (YY_BUFFER_STATE) 0; + + if ( b->yy_is_our_buffer ) + yyfree( (void *) b->yy_ch_buf ); + + yyfree( (void *) b ); +} + +/* Initializes or reinitializes a buffer. + * This function is sometimes called more than once on the same buffer, + * such as during a yyrestart() or at EOF. + */ + static void yy_init_buffer (YY_BUFFER_STATE b, FILE * file ) + +{ + int oerrno = errno; + + yy_flush_buffer( b ); + + b->yy_input_file = file; + b->yy_fill_buffer = 1; + + /* If b is the current buffer, then yy_init_buffer was _probably_ + * called from yyrestart() or through yy_get_next_buffer. + * In that case, we don't want to reset the lineno or column. + */ + if (b != YY_CURRENT_BUFFER){ + b->yy_bs_lineno = 1; + b->yy_bs_column = 0; + } + + b->yy_is_interactive = file ? (isatty( fileno(file) ) > 0) : 0; + + errno = oerrno; +} + +/** Discard all buffered characters. On the next scan, YY_INPUT will be called. + * @param b the buffer state to be flushed, usually @c YY_CURRENT_BUFFER. + * + */ + void yy_flush_buffer (YY_BUFFER_STATE b ) +{ + if ( ! b ) + return; + + b->yy_n_chars = 0; + + /* We always need two end-of-buffer characters. The first causes + * a transition to the end-of-buffer state. The second causes + * a jam in that state. + */ + b->yy_ch_buf[0] = YY_END_OF_BUFFER_CHAR; + b->yy_ch_buf[1] = YY_END_OF_BUFFER_CHAR; + + b->yy_buf_pos = &b->yy_ch_buf[0]; + + b->yy_at_bol = 1; + b->yy_buffer_status = YY_BUFFER_NEW; + + if ( b == YY_CURRENT_BUFFER ) + yy_load_buffer_state( ); +} + +/** Pushes the new state onto the stack. The new state becomes + * the current state. This function will allocate the stack + * if necessary. + * @param new_buffer The new state. + * + */ +void yypush_buffer_state (YY_BUFFER_STATE new_buffer ) +{ + if (new_buffer == NULL) + return; + + yyensure_buffer_stack(); + + /* This block is copied from yy_switch_to_buffer. */ + if ( YY_CURRENT_BUFFER ) + { + /* Flush out information for old buffer. */ + *(yy_c_buf_p) = (yy_hold_char); + YY_CURRENT_BUFFER_LVALUE->yy_buf_pos = (yy_c_buf_p); + YY_CURRENT_BUFFER_LVALUE->yy_n_chars = (yy_n_chars); + } + + /* Only push if top exists. Otherwise, replace top. */ + if (YY_CURRENT_BUFFER) + (yy_buffer_stack_top)++; + YY_CURRENT_BUFFER_LVALUE = new_buffer; + + /* copied from yy_switch_to_buffer. */ + yy_load_buffer_state( ); + (yy_did_buffer_switch_on_eof) = 1; +} + +/** Removes and deletes the top of the stack, if present. + * The next element becomes the new top. + * + */ +void yypop_buffer_state (void) +{ + if (!YY_CURRENT_BUFFER) + return; + + yy_delete_buffer(YY_CURRENT_BUFFER ); + YY_CURRENT_BUFFER_LVALUE = NULL; + if ((yy_buffer_stack_top) > 0) + --(yy_buffer_stack_top); + + if (YY_CURRENT_BUFFER) { + yy_load_buffer_state( ); + (yy_did_buffer_switch_on_eof) = 1; + } +} + +/* Allocates the stack if it does not exist. + * Guarantees space for at least one push. + */ +static void yyensure_buffer_stack (void) +{ + yy_size_t num_to_alloc; + + if (!(yy_buffer_stack)) { + + /* First allocation is just for 2 elements, since we don't know if this + * scanner will even need a stack. We use 2 instead of 1 to avoid an + * immediate realloc on the next call. + */ + num_to_alloc = 1; /* After all that talk, this was set to 1 anyways... */ + (yy_buffer_stack) = (struct yy_buffer_state**)yyalloc + (num_to_alloc * sizeof(struct yy_buffer_state*) + ); + if ( ! (yy_buffer_stack) ) + YY_FATAL_ERROR( "out of dynamic memory in yyensure_buffer_stack()" ); + + memset((yy_buffer_stack), 0, num_to_alloc * sizeof(struct yy_buffer_state*)); + + (yy_buffer_stack_max) = num_to_alloc; + (yy_buffer_stack_top) = 0; + return; + } + + if ((yy_buffer_stack_top) >= ((yy_buffer_stack_max)) - 1){ + + /* Increase the buffer to prepare for a possible push. */ + yy_size_t grow_size = 8 /* arbitrary grow size */; + + num_to_alloc = (yy_buffer_stack_max) + grow_size; + (yy_buffer_stack) = (struct yy_buffer_state**)yyrealloc + ((yy_buffer_stack), + num_to_alloc * sizeof(struct yy_buffer_state*) + ); + if ( ! (yy_buffer_stack) ) + YY_FATAL_ERROR( "out of dynamic memory in yyensure_buffer_stack()" ); + + /* zero only the new slots.*/ + memset((yy_buffer_stack) + (yy_buffer_stack_max), 0, grow_size * sizeof(struct yy_buffer_state*)); + (yy_buffer_stack_max) = num_to_alloc; + } +} + +/** Setup the input buffer state to scan directly from a user-specified character buffer. + * @param base the character buffer + * @param size the size in bytes of the character buffer + * + * @return the newly allocated buffer state object. + */ +YY_BUFFER_STATE yy_scan_buffer (char * base, yy_size_t size ) +{ + YY_BUFFER_STATE b; + + if ( size < 2 || + base[size-2] != YY_END_OF_BUFFER_CHAR || + base[size-1] != YY_END_OF_BUFFER_CHAR ) + /* They forgot to leave room for the EOB's. */ + return NULL; + + b = (YY_BUFFER_STATE) yyalloc( sizeof( struct yy_buffer_state ) ); + if ( ! b ) + YY_FATAL_ERROR( "out of dynamic memory in yy_scan_buffer()" ); + + b->yy_buf_size = (int) (size - 2); /* "- 2" to take care of EOB's */ + b->yy_buf_pos = b->yy_ch_buf = base; + b->yy_is_our_buffer = 0; + b->yy_input_file = NULL; + b->yy_n_chars = b->yy_buf_size; + b->yy_is_interactive = 0; + b->yy_at_bol = 1; + b->yy_fill_buffer = 0; + b->yy_buffer_status = YY_BUFFER_NEW; + + yy_switch_to_buffer( b ); + + return b; +} + +/** Setup the input buffer state to scan a string. The next call to yylex() will + * scan from a @e copy of @a str. + * @param yystr a NUL-terminated string to scan + * + * @return the newly allocated buffer state object. + * @note If you want to scan bytes that may contain NUL values, then use + * yy_scan_bytes() instead. + */ +YY_BUFFER_STATE yy_scan_string (const char * yystr ) +{ + + return yy_scan_bytes( yystr, (int) strlen(yystr) ); +} + +/** Setup the input buffer state to scan the given bytes. The next call to yylex() will + * scan from a @e copy of @a bytes. + * @param yybytes the byte buffer to scan + * @param _yybytes_len the number of bytes in the buffer pointed to by @a bytes. + * + * @return the newly allocated buffer state object. + */ +YY_BUFFER_STATE yy_scan_bytes (const char * yybytes, yy_size_t _yybytes_len ) +{ + YY_BUFFER_STATE b; + char *buf; + yy_size_t n; + yy_size_t i; + + /* Get memory for full buffer, including space for trailing EOB's. */ + n = (yy_size_t) (_yybytes_len + 2); + buf = (char *) yyalloc( n ); + if ( ! buf ) + YY_FATAL_ERROR( "out of dynamic memory in yy_scan_bytes()" ); + + for ( i = 0; i < _yybytes_len; ++i ) + buf[i] = yybytes[i]; + + buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR; + + b = yy_scan_buffer( buf, n ); + if ( ! b ) + YY_FATAL_ERROR( "bad buffer in yy_scan_bytes()" ); + + /* It's okay to grow etc. this buffer, and we should throw it + * away when we're done. + */ + b->yy_is_our_buffer = 1; + + return b; +} + +#ifndef YY_EXIT_FAILURE +#define YY_EXIT_FAILURE 2 +#endif + +static void yynoreturn yy_fatal_error (const char* msg ) +{ + fprintf( stderr, "%s\n", msg ); + exit( YY_EXIT_FAILURE ); +} + +/* Redefine yyless() so it works in section 3 code. */ + +#undef yyless +#define yyless(n) \ + do \ + { \ + /* Undo effects of setting up yytext. */ \ + yy_size_t yyless_macro_arg = (n); \ + YY_LESS_LINENO(yyless_macro_arg);\ + yytext[yyleng] = (yy_hold_char); \ + (yy_c_buf_p) = yytext + yyless_macro_arg; \ + (yy_hold_char) = *(yy_c_buf_p); \ + *(yy_c_buf_p) = '\0'; \ + yyleng = yyless_macro_arg; \ + } \ + while ( 0 ) + +/* Accessor methods (get/set functions) to struct members. */ + +/** Get the current line number. + * + */ +int yyget_lineno (void) +{ + + return yylineno; +} + +/** Get the input stream. + * + */ +FILE *yyget_in (void) +{ + return yyin; +} + +/** Get the output stream. + * + */ +FILE *yyget_out (void) +{ + return yyout; +} + +/** Get the length of the current token. + * + */ +yy_size_t yyget_leng (void) +{ + return yyleng; +} + +/** Get the current token. + * + */ + +char *yyget_text (void) +{ + return yytext; +} + +/** Set the current line number. + * @param _line_number line number + * + */ +void yyset_lineno (int _line_number ) +{ + + yylineno = _line_number; +} + +/** Set the input stream. This does not discard the current + * input buffer. + * @param _in_str A readable stream. + * + * @see yy_switch_to_buffer + */ +void yyset_in (FILE * _in_str ) +{ + yyin = _in_str ; +} + +void yyset_out (FILE * _out_str ) +{ + yyout = _out_str ; +} + +int yyget_debug (void) +{ + return yy_flex_debug; +} + +void yyset_debug (int _bdebug ) +{ + yy_flex_debug = _bdebug ; +} + +static int yy_init_globals (void) +{ + /* Initialization is the same as for the non-reentrant scanner. + * This function is called from yylex_destroy(), so don't allocate here. + */ + + (yy_buffer_stack) = NULL; + (yy_buffer_stack_top) = 0; + (yy_buffer_stack_max) = 0; + (yy_c_buf_p) = NULL; + (yy_init) = 0; + (yy_start) = 0; + +/* Defined in main.c */ +#ifdef YY_STDINIT + yyin = stdin; + yyout = stdout; +#else + yyin = NULL; + yyout = NULL; +#endif + + /* For future reference: Set errno on error, since we are called by + * yylex_init() + */ + return 0; +} + +/* yylex_destroy is for both reentrant and non-reentrant scanners. */ +int yylex_destroy (void) +{ + + /* Pop the buffer stack, destroying each element. */ + while(YY_CURRENT_BUFFER){ + yy_delete_buffer( YY_CURRENT_BUFFER ); + YY_CURRENT_BUFFER_LVALUE = NULL; + yypop_buffer_state(); + } + + /* Destroy the stack itself. */ + yyfree((yy_buffer_stack) ); + (yy_buffer_stack) = NULL; + + /* Reset the globals. This is important in a non-reentrant scanner so the next time + * yylex() is called, initialization will occur. */ + yy_init_globals( ); + + return 0; +} + +/* + * Internal utility routines. + */ + +#ifndef yytext_ptr +static void yy_flex_strncpy (char* s1, const char * s2, int n ) +{ + + int i; + for ( i = 0; i < n; ++i ) + s1[i] = s2[i]; +} +#endif + +#ifdef YY_NEED_STRLEN +static int yy_flex_strlen (const char * s ) +{ + int n; + for ( n = 0; s[n]; ++n ) + ; + + return n; +} +#endif + +void *yyalloc (yy_size_t size ) +{ + return malloc(size); +} + +void *yyrealloc (void * ptr, yy_size_t size ) +{ + + /* The cast to (char *) in the following accommodates both + * implementations that use char* generic pointers, and those + * that use void* generic pointers. It works with the latter + * because both ANSI C and C++ allow castless assignment from + * any pointer type to void*, and deal with argument conversions + * as though doing an assignment. + */ + return realloc(ptr, size); +} + +void yyfree (void * ptr ) +{ + free( (char *) ptr ); /* see yyrealloc() for (char *) cast */ +} + +#define YYTABLES_NAME "yytables" + +#line 259 "filter/scanner.l" + + +void lex_init(char *buf) { +#ifdef FLEX_SCANNER + in_buffer = yy_scan_string(buf); +#else + in_buffer = buf; +#endif + lineno = 1; +} + +/* + * Do any cleanup necessary after parsing. + */ +void lex_cleanup(void) { +#ifdef FLEX_SCANNER + if (in_buffer != NULL) + yy_delete_buffer(in_buffer); + in_buffer = NULL; +#endif +} + +int yywrap(void) { + return 1; +} + +static char *stripQuotes(char *string) { + char *w = strdup(string); + + // strip ", ' and /' from begin/end of string + if ( w[0] == 0x27 || w[0] == 0x22 || w[0] == 0x2f ) w++; + size_t last = strlen(w) -1; + + if ( w[last] == 0x27 || w[last] == 0x22 || w[last] == 0x2f ) w[last] = '\0'; + + return w; +} // End of stripQuotes diff --git a/src/libnffile/vcs_track.h b/src/libnffile/vcs_track.h new file mode 100644 index 00000000..b3c62a1e --- /dev/null +++ b/src/libnffile/vcs_track.h @@ -0,0 +1,7 @@ +#ifndef __VCS_TRACK_H__ +#define __VCS_TRACK_H__ +//THIS FILE IS AUTO GENERATED +//DO NOT TRACK THIS FILE WITH THE VCS +#define VCS_TRACK_DATE "2024-05-31 17:28:54 +0200" +#define VCS_TRACK_HASH "3810acf" +#endif diff --git a/src/tor/torlookup b/src/tor/torlookup new file mode 100755 index 0000000000000000000000000000000000000000..a3d4758ecc6934cb3ebc598f460cb01c3714fec1 GIT binary patch literal 146072 zcmeFaeRx#WwfMi!Oaf;zNys}%c$oxz$%Gd{17sAMNzgVBLXJ(Q~2=;!z z-}}$+dC2pe%sKn)z4qE`t-bczYp=b}e_S~8d8|^J;?KgB##J{&sfSb+cS>b&6?2uB z-(L8YTkg80^fpQD|7RBNpLEHSzh6!e66hiYqPw20F=;kG+D!!lqxS@dCvnY z`^pc57kf>xF?pwgdE{Bz)%zEvJiYhal$WnqdEdeny-5S%xrb>capnjT{K<19JUs*t z8k&FQ<#(@GxqQ*m@Af|TZ|~-mAiVkDC4cf9`4Z>59Gv55%wS#vr`^4i%K= zs7QbV?#s*XTYCSZrQa@JwDdd6O!)orYn>5SXNj*^R~J3 zgWQFGLB57^hxn=7!DlN!atZ7NuJZElF6(QhJP!`=me{CWnolV|hK9sCiPa)oJFUjFR`D;EUc$^T$G`<}z_ z8p8#E_eFS>moHq=C%u=#Yg`w^?~@2Ii-Z@EY$DOu-{;JlTXM_Ivx3}Isx{P3PY73@ zk z=a2sOv$gp}zgqX&O>f72|JCbB%i;>Q2`EwV=DkU~*iliryffR!ul(iEK7k|pCh||} z&F7ML!cxn(3(+K6A1>fCf7ObW_uMNa@5g_%i@|Yd^f(SyL?#FxjPe@KDjNisb@`6Q_uP+;}fgq`_!s@ z6@+W3NlC_$8`bu6JP%i%W5l3*w4yZ0__0!Ny2cgyAK*Ft{v@N#n(Aw}rua@;(|w1@ z@7StUXKSh~%j))Ps;=~td_=YjWeATZqVgjT(Te2y%wdUtRBt)*Hv&b#s)r6$+%oTWUa8u-0^mD=tes`Bo)s(tgh&ev#7 z4_egrI`Gx+ar>1f_;`*Lk>AR160nKa*jltV&uE*ejCRr=2LCpz+J6JT1R%AHCJ)d4 zY^72h4O+Fw;`ZOG$vaQ!Jo3Dysr?I}L-zJ0gS2DU3{l&&tliU0`t40J#taSO?@?;M znf8|?<1S65v{}=9iBZ6@s3~Up)5%5|>7US6a4h{6u-&@aUkPme&*?@7IGFh!PdD6| z)Ipxf#uUD#U_9&H9-lD3ruZBM}RCUKysw{U=WxgJ* z4BzL0DFW{gz!P4cTo3K6$-WPGt{AKKWq@0^i@GjatKT1^%3MQLqT~_!NWS;Trvicf zZPwwwbnXk1Rdsu|DifH8ph>tb_6vcsA42z!hbn&?@->FM4GD^JDZUKu+lIRR4l8Nr z19@x77qBb;!Sxy4JD|z=g>L^zcqM$@{gigpL4M?=t13Q3pEptrlXeAe|4L}Q9eNSM zloDAcNy;eI^?EEch)U=x8U>Dax4%&Hl>R9A&Lz)JzN{UUc0Eg)`aG~t`i~7*(w;Wx zAn(I%|0#Loee1=*K3@b6n!bPs+UEh22ZwtC19*_?TLC=jA3+|Z__pxu2Db2EM~DZn zeHIwNgB0I-!PVqJn(qbj2@eiI@8^f8qmAIAgTFq?y-m04UVVnUMQKS%Q->;}n9GCQ z_-We(tL{5Iq}7#*tTcWem@0Ze`ulf*7tY&?tlVc&d7oM{eK`(y{#}%B3(`O*&shu;P9PV|g$`w!N*n%b=yzOR$!=?Ux;eCE); z2IOuxygz9j>8s%#^7mYWO_lw6{nzP_BhZ<{eIwvQ7X3Wn%+m(AMDlWZy91o5uU=lyMjDI~?=@rFS-843xDwl&Kdbuc?!s&M>UxZ~ZK=uN(RN z7#xLf=itSf8x(qbginj|l>PsR$S{&KqzwKGNsUhb}_5vw?kfaC*#4AMVq+NB)DlF+If~b}z-$lN(Zu zbLl}n`FF|&)~lmEYqX{w^nvJeGtVDVj8e+?tSM~bz0qnde+yagtKFKB!>`8g<1UqQ z;k&%Ls9;?P!seHSmJ*At0@iF&q_*Rpq^6Ti=jY%p`WYWns8+~CH z-FmgE&Ph{cjbma)r1D(1cu~F+eVT)8w?PwuwF+1QS76lxs}fi_i7GE`5Lky(RM}x* zr2(t5AFLFUuiqIAuVE^WvHTLeDw9=N2e5_@f>+^CPwD)@@QPP?>4U)1lT?{LHfBWn zAb1HZ_h5L%syxwI1L@V6pvrQ9l`$Az&~*Z^gjOQEi=ow~;FwmrNc1W1=TNR5x*tY9 zb*FuV&U0?6JAXDbXY5a5{43o^z7z4P+BvyC^A(HDe)`(_O#9c?mHI3(C9^fV-5ICm zb=Lo+bbJN)O}39HS!r0=R-MHL2A!bC(OSPpjH8CT+&?9%8eMGT_rd{iP zR2_19d)C~HoXteuijccPY_)%D6xkGc3d_ld$h62w+XsRD_tO_dK16>>f9~L&$YaGv zf&J@wC;XOjLi_e`xvs$eAMsB3C*|bbJK=I42lnsco$$jf2Yrt7uI-b+{-2XBczjHm zFfOl!V0umm_LuQqaQTG#!ub3y1h=g-u)m!5f={@-)cc!IdH0#X{>8i(oWkYh{k~B7 z2HJWb?**^k^5C|I_lmZ9c=yR|zomZ$`*|MuvbZ$*)jQLIG%4m;AE{dEu=~`DFU?S` zp6QaO_C`4`_FYiP@d~(}MCJ%bn9Hj4yy`y}RN8N$#g|6s` zQu}O4p3)f2-BNB-)#&cBSmj9~_Be&#(z$E3`SwI*Okk|}&>HXCstvOz{6I@i{DE^< z^`hzn1(vv~4<~QU+0nkC(j`t>%e6@yJ@|uBD5X9ymz)hsfw= z@)6@)CeIbv&#x*qH73^6qH8f;{q^x)J=*QB`z)|OC(7;5(Urev&7sCzk$Lc}o6xw+ z#`|2}m1wrkaZ#$w7Uy0Si>!`ER%^7_&IuM(HZIofk4v<9o8#PmWc!GuWB-=L*xajT zV_(MD)GBmXqSL05Y;kIpz_ZVDdKcT22|Fg5Uts9K0KUJRx@4?~iBo>3PP)zQFVOVP zD$)c$k@N4shs){QkC~r{+}j#vIL(HzmE+y0e#WDR!e?%ZT_yg@b`pfui89$OQ!ScEtv&ctSJl7$dm=Ck9`m+Ipi%~ zRC%C=^bTafsp%!sj>8u0wbz~ARCp`6ZyN1xnGIdw)x2`(Qiv@$4Vt*nHNp0#F>f30 zdl!6n(%zhZ%HOq!a{6QLmR!3^lzNM6cVun^HoDO}<G>9jXqalX`P`8 zH%_m3*xkJFk-}zc;g;!^!p+mQLhp1{xQXKmdokm zQ)651y|_$6KU>h#R`higdLkPAGlaRcW&~y?9F_Uz7V7iGI!7Fn^W$13Af zo|kBD|NG350?Ddni{^HnB0VljO_kq!<2)@}7Tw#u1)Fg~p)$^pU(z;{Hl99uYG{$a zz@}Q{cRX;U{JozKoz_X&0?pp}60{aQKNDQ#H~t!IshJ5z&zdjO)>~-v&9r?cG$?Ai zxU8`0)YyMtV%kyYpfq?i{Db<^^VWvto6xt#wYT&vW}gW@J6& zZXUCxu-URjYi5&MbJjyeJkR9W%Cn_8OSya0hQ|0TrFzWvQ~%5Ki%rmXoXy=*MgJHF zO*)~;B5>Ns9AEVK9O%Z_?i~+~RjZbClgFgrIOy65U7hGMr$y~s0t_ePKz;PAsy(!! zCL>7SalnFCuGe~oPP4=RLCb$0*uSVy9X$m+p^No=piKBO2OGYsw*0_m;MPRXsd|;U z+H>^5fYpLO#{&JW@F5C*M8g;4Z_UuAo|iR4?0_lITlAicgXvR)c0)1Gmm3F%kweIIl0{l`Yg9PG`vibl%Z z>&^40GiC1eX8KHg63`JI0x#VcpB9uU@f~?Xa8!)iSC_=RE0Osq^WM7A?o}Hnx}7;| z^${`j<+@Dws&eGA9Y2R71OEiN_*73IZzS#cagj3IcLvAf!!jO2D`eZ$ztGzpi}^*j zX!GNMm5a~h18b~rnHF#V5PkL0+M9OmUG%*J4oghc8-r*hKIpr05Ut7I&e=Qeo$3S+U&9E)w}<8i%XvCI=^eID51nrShfz%NpV zo~gI$RWsq|i|~^@P|zmT_wT7{`@lS7{eiN5cJh(0=&}GVx_(;}&G(W@Ke1eYL0w*)iuljquop9djyL?aM*dgmy9T(k`+VqF)^J z%cR}>mM(>UvCvQKn7vxqj>+9+n0AaZ?U-iln1k3SLOZcf#EyAAM7w9#=I(mL9OuZp zqdv2ld_ubunySiT+&%*B#?jYw%?|A*n6zuej#1Qo7#V(zs}g&ENtANcj92-hZ{%GK zX>xA|_dS!J+2y=A^Z051PmV2K{F}4BmB-I+N`LRHbM33UoIN)mpUb;fxu4DbX6&BE z>}Ph_tCg{Z`B*$Q&_rw?q1}?*HBGt}?`0hB9FtvqVHUiF$DKvop91G9`hM&%?5TK9 zX>+vdszql13?HOytey0jOK}x?>(HAv>^uB#50zG4r5+I6r453AVCE3|bTWKOfnTZc zEe-w+r%$J2dk!(`r2N;ho#0jD`pj+_8|u(qb$YO0o_v>n04(uIeQ%2Ccc^ZU#vUS1 z3S}5`_no>49mPCe`0Pan!+gdz@5krOjO~N-*>+hz|7if93*f)lt1pE3EYDfsBYd{Q zXRpQXt$KZ$cO^ENG>p{wC`0`BHzZuCGcKPyirUY%dPp?0)tI@Ot@Oc!d7XMhyX#ZFl zC;1f`TbXaA2#!O97irzk-)%YCz?DjxEvv|>KQ}7T$#`PVDRjn7ay#FjW@$Qooz~QG zt!i398&|9zZCrRtGupT`-BWrJo-Gr2G454jyI!EL`@{687-d|;yN=QWyM`mH%#*hH zpRySEFW=mrHrnV|SKi$*R`iEve46*g^$U)IL%7aTfjgwIxBOrKLHRc7jVxb8`E>k4 z=l-smy1`fU&}YDCj7OJS_0F-3uaD3#zC+r@Wxs+~8a%VWJ1acIpRxwKX{KhJw^~_$ zu;3pG+WD2tmmHc}u3MO=bLD7tJGIKj1Jb|l0haha>muy@ZtOk?ZOs{_C!Q+}$_gV@qM}JHC&yYc}n_ID)i#}d^yn|m&vv^M3G|?@rIuLMu6^`b@=M-uzBJ}NV*k7_cj~To`cPY` zWk8v!yLL+%@YEMf-KC-*Y_`O$ZGN|C!}OCy>!-IDt()FfR6AWo|A6!w((6e7A?Xj3 z{t$M~pZN7mH}Swutu*b_TcG95&~zrWErP~{^oQS@bE?4l=%d}`NxVxYPYU!-h2GKF z2O9RL+S;d2Ms~NMmt;&wXYb8^f3)!@@NCf3lv~jM^qsv*IgDFKlRV_zkNoZ3KH7m_ z4gZ7MT6!oMpA73T;pd_hwOvK2JQLnk8D_qC%2zPX2>;IC&3u~6k_Ek3FOj*K_*gIA zptj#fp5XdYvhTbOoFQr-&nr)L>W(5+#J^0z|E=XrnV`J$GQq`6rmGigm(nfDrTGiBR+m*%sF z=%`bN&`$mO|BQA*vx8hh8==!+^l<<)obPgZ&fWPU{K7A`26}{m?<6lYI2M^tY^5)1 zm-LZmC^xWO4Ww0sbkD$c{Wo&ZMwru)?w(D?2yRM?&NPdw&Y1g~gtL^Zky3P7n z=0JRD1AU~gtj1|oKUluN%j#$(52aoI1YT0-dz5Koj<4fu)3A{&DV~-` z;pK|uZhyr>WmtdIxE@DR(m>>n{Q; zaa2;xA!~KJz)DcnCHVFtVI7K5Wp-dK0aiV*3whS#+^*Qr^C8yw!mt-p$L!SA+j6s4 zNXH)VUj-rzg5y zaiM3?f#EtgQRf`$96xI1FPDVcx9Qf^zigoHr>R?^OA69y*C&Cp*%^+c@-Eu?aiD+w z;MK2wp8M4gZQ`i^S?WI_^yOJkb-Ut2&%5DYGjzQKr;H#@zQ3+MzG+sFCavK0gAiUK zEBeKf3hdHA=oX_p<+GOUNb6mHL=*?#%uWkI08=T}d%jn8g z5h|l!yyJKW2W=7WdAZZ$C_n&%TvxQAFEuR-tu=HFSbbeuN~JDNA)lNjikQv z0*ms!uz+F0N>HwbURdSF_45H>ee1ZMI=VlsmFa!31a26Xzy($>T;Q2-Qo7V;)^t^EOtY%Bap_z`n*$%x z-`D+Udh5DJxVCU@=JIlF;@ZenH@$8BW-c$+Ca#TKlJ-Ncho^r!E@+c{2_4jEQQnUK zz~5D+S}IxNR}bCN({_{U`Lsa!MGwjRSh0Sjw1T(VCa8UXSjV_$wH$S%D}OpRyosMj zHGfJQep#d$(tf2pGk#6k3@fx)uQ#p6w!Q1A@y3JvK2biwaFWNtdSWZ>bc|Bf*hQuv z3frp;BO#@|#7)eJW?WBch}B!p8g>|di+;w zDceCT%Bky^*W-h5XtvHGV5i|P43}${xTA4u%88}KOYzQx4Gx7ju|^8qj@wjAI4^NY z+uM}NnU4>%@k`8BJjb)RRP z54@DqDfuf_-``yk2<)pQ21n>Cu+Gzm1G`j_ zh6mANFI|N#zl-_L9j;xHZzFkZU&q#QdS*y^W4!JKU%$YXxo`)t!)^HqZD|-2qAzX8 z2G{Vr9lUGJ=AE?9sj9uqJuT2dVmTH#pqr#?s`_51D(fDOEQr72&X!$Mon_9`Bd`l= zU!C4y-7&psZoW6m>Gn4;mPNKx@^^zv`&Wp)z(3}dF$y}JyOy^9(AsqW>dJ0cEWXE~ zj9=i@G1l$R#5Y__+?tHdVl%FrjQuo5<=r(_8N^3*W#cE4d>I)7$|bt}-=JJAmy}yc zIS;XM1Ivwcx?3pg_YYJ43&fk$Q};OPo=Ukx5(h=udnntgt2`HV5{F~f8SW<=@kM4a zj}=}jVz`*Y`<|$AKe~=Nv7>TKw||%$n>fSQHA!tZZEA}$4&(D^BhBPLxTj|@N1(27 zpR34bU7o%c?q|}s)SBt6vkmvn1($H$X%AK$cXCRQtS@EtRG2upv(!F6IK1ivywJ1a(Y^Fk&ner)uOFh)Gd7>Cri1y;j4j9<~?OlPg_7Y_B zHrBv~s;R>B?x%{Ho*z5O*iaZG&gm%v} zo`~K!CH0SR`_I z{JbrqF0t1lVX;QK_3nlV#?unF7uBa98~#N6(hbn43jUy*7Lm{S*9pdQ>Z=r8{>Lmc z29mYZtwj%v!46F}V@{t&Caxw=xU8AiKhcO8n0Ci?hUl?=`EH$PoExi}OqhST$}oUs z>IU@55&BLtefku1$Sc$gS*u!s{;LV;KhNqF-NYO8(+l0`zczFNa%;|27$@;DUfw73 zzfqUO#hNm^*1gS!yq*SM-D%quZm0fJWXh`iW*dvIG5%d}4AI%7)v9dc6f`&(k={%H zjBL}#cOc@OS>~bZjDL+t>&wK$(|iUgd5{Nnt#jEdy=%5P7b&CYuj;n3QR=ocR=Y2X^k}XjTnSu5 zxe~dyy|%iM&A zUzq#*4F~3Ku2n{Jt?FuLtkoXgJ$KB*Kb_mUp<(X38=fZrQ-`#W7f#>FCs%u8e z8Xo<>tUP+{*$U9q`03oLZ1tS18)i{=UtMvXwb0!LZ8rl`Xz0}9N;VM( zR*rpe*YKU0=;i8K#^5^qysVEHm5gom7QJ%}IHHT*bk>eHb-;FXfTS-3=N*<-SKtx! zDY{}4>7Q6*eC3+nX#vh@_*(*eiKmwMQHggyH(Dj#hfQ|kSJ;n~KYa}`8Apk&rhG|H zAYuHX#rajXSZ{^qc#E;J^e~s`Ho1R=YtiB;XJwj_b)z@cmRowp@UCO2HqWt9RWoJ< z@w{V#v58~%#u2MM+h+H=L$Eq1FE*aQlJRj^=w3(1bH1OMUPrpnNb)ptNne)xVlEjY z<-Srb@K_nfW8*D76`88%a`6E47t_DMTyAUj_{paKU?DK(U5Adumu9B#=}Rvm-HosK z#3pFOocF{}@O5HeabE3F8}s2;pdW2D3jRe^HxS2O5Tb7dw&Q|K{O{&iaRYX`O7X-i zBV2Ex)Q8VUj{*+!)?OI!M%txoDJ4#5AvD(GR3b;LraTrdZ{nBgnEFgTmF-Z;;*%T0 zn#m6Y_GsEpUe;*leL@|<_h~*0ZT>#*TYHETbEqW8AGPW>nbX{X9guF?wWaCgk#WX+ zf3H@}oTAJD{WY0`P`BLgrr&qO2k#}u=nV81+O)H-EqLZ|y#)-x;c>3x+>33Vg_LIQ+u?<-Qdsj=hONC^ z_FEj4@u49?PFF&oKib6>^OU+go?{v6@L7=!Q%+`2F)X}4H`<+l7=7bl4~Mkn@MvQB z#~$A4&@xUJ;`=%@S|#T^keQ@MYxB%@EmGBYqc=rnPQvf53Ctgni93PSPi~v@j8b?v zf__w)>~^hT%}@9z_#L#2=sXE*;jzSHn6ir8-jDpAM`nou*_wXa_2xc{Mho;oK01ci zXA<9UNZEDx%|w2u2LgG!(XFxuB=Y+PxG2`P1uiiYru?>;?}uXpW|%VkZ{(?9o+f$T z56ddD+)CR;mfQI?@uF?-h2-!F^0sp?ZEhzXWeT)!TwIYaa!G$E>(}mYUT>t3H%w!p zcLbf6H%OnLTm`>_(e~vC+U^8b)_L}aN()#Hl*7k-Ewp2Il!~!#p#Z z(ATHND!=q;iA@Nv31oxg&wBzp+(Xn9WTeFr2QTn#il3que_z`$$`8dqz}&ARS^3*% zDswK-h2Opb{VqPK9l7q7zz}><@Z#}Iw?EAqo&%@)o)%eR{+vEm8R$%N4qS)tNMdD0 z4rD$yu#S_VIwVf%e%3u?epNA4?U%8#AI*%heKsTZ=31!>o!+yi7}|XW8h)9zvRjBx z2*%yW97dzPRkXL2bq=$=#65YShxnG-q}|Y`kbdz+IJL@p7JGhV4MHdWw$8?$wCg=B z6=`n&2pe-y*8bXt$~tPYPw0Ca^-YMxJz1hchT7TE&=-JDQaC?~B ze2ezxx#|-B)+SUJ>G#wRBI*yWx2P zJQx3IV0@VGeR)M^|KquX#atT``Emo}apdyH;@8AZlDTLmbScJ9<3yen@w-{#tAVfL zU-&A%8j1Hg318|ctDF9XWK*6$#?Mf*cxrxl&U_L%ue%V~A@Xt^c#QyV7=F2RL{&TO ze(P*U* zz7X#1+@=z{|J%(Y}vNufRJ2FpYX0Sf-{|T)slfYxu%I?3? z_hkN3iJdHSm=eb93f}cAi|!O$d&{CfrR?wM>t@;9h_bwkEW6umQ*ytx+$`llc39KF zA1Zz7bs2}<%Fs3ZY=2(Rt@xGqwsdz(w$e+S%2xHN^|Yf39?M!xD!S-->N>ap;Ie78<;k*u2gs2!2b;+-;lmE|J^&yc#$`;dZk!=pMPnP%Wfi!;=@8sEy9uS>i!XTgd3q8$W+Bh)J z7vjVkf>|zv(--DtuT5m$id40)V3IO@@mWe@;I(Gj>dT6&mHkgMaubv>E{i_LI(>Mq zQimN98`bLC%-pITJA}DNS)AVLYUcSM&vnd$;$vG~Z}5CV-t&AL_O(8F*a&?JmuuLF z*aWw$p1Ifpe9EyYeXu$bftB6|tCHurl-)cfeni|zx9gzH-y{!o57(#j9Dh|`eRaeT zNPWMco^|L{@vFsi$-XO{YZzA{^v_{DV$RyKjBAe;ACp6#dUTw|JnchE_q6OrOVhZK ztS6wq7dN}}rEK}FTJ;`yj6TjQXa3bH{HBg_))CNoW##i&PcYM1GaRpizU9!`slac; z$24vdG3K`u9}G=@1dRkQ@Jo_d>Hzf0VJ;g7eZ%d`!QUY?I0Fshb+_xpDQshGz(^Wb z@;oe|)%79p1V#ruxt%g^%t#n9EXC~#P-X#X!=P<%9{7?lvelI!bLw1tjXckx%=?A0 zBPJZsoa0ke%ebqensRfLpSW`0tS#>R0@?ddUCs(+*q?CcFQ&e7>N^bV7}~cbmh!J{ zE`9B_JJb|XcwQ1q=L@uGH@K|Fnqxg2^enRNog3#W_ zHhgm8_ZOUV(^ZReyz)yuP1qXF?=csmPsnq@JzDi^(50Z6IUIZy|AF{4$m6oXqufyY zb4ZJ!56lidH{#!L;umnPBp*C;KA>DC4QD_@c#(~aIUnR5JPX6n@pZ(|7s4>=uy;%t z9_5OGhkQuHaMmF^82Wjq? zW)BK6IhVu=b+G5Vfb$GewA!8Yi;uFWk1;B8(cQ?n`FwkDUFDxhYa>ng5FQ(VXZrEN zyb&4azO>GAX)KZO>T>S_>n-5L9CD3~_)}tHv6cE_Pe*sR+F283ZWhMV-_R z;mxV}&=Xk`917Oreq_y{xrWVQa{97IG)~YBW`SW@vrpID8;+z(U^| z+`A-i1>0>`bQ`7!(&^eJR=+7=MH4W@iJoq?XAV%cnBK1Wj;_j z##je!CjhIJepUI>6fb9vRG)@V`S3J=9eom+*@#^&IU5&L>wH`6v*1CahNYXZCJ+n>n%6*)Lz(W^wiHsXVpd-1g%CXT>St2&o3 zwl=<$<+c4+d47SGRwetzY{Ub~eXZQHmLT`p-0#EBzY%|A!4$@M$`vqPY1Ffixcx7~ zQwMQ~oyb*V5%79~@MMe?yb2j3B}PW((Cmvprt50n<1giSnYX{WldEzZ<23WSPWb=e z5!G)_EwKSI*ALFA*?$X-ip_a@&<`c^Y1wmJXBqBwXz85`i9<|7c1~P_uNM3c=Q6f_ zu2rjyudaR%kLv7zn+xN=)(FyF0-(}vqT6FP1{05^5{j?uV?)V2Z zc?q6}Y4Q~9?W4&ZtDQW{IZ-%T_tk+m4}%N+mBq773F=yMD|+%XRQ*e*O2eR^>A zwEX+fkq0fRt1Y?yuD!tF%#lmr$Xd!6X!SqYi}~Jg)$%U!Ip@%Me&{Mb^04nEr8V1o zC-|J7d%f{Be$xx48sCprc^B|+3qNI#pv=GSLx#+@FmGAm<4o7*QCUe;FkM6A=wcwfLe zgXGx+KZ~`xOcQ_b6uDx3f8O}vt@#_t=f!5M!G>-EpK;OJyqeVDdY1RUNRL*N@zIvW zzW?BH&!KVN#rPFwQ&wPE!E*-q7qizahTl5uKV5#QQ~FqO$o6RDS7bMb-^x(CmeH;S zFHQH3`xGB0=cQH9XGf}$_C=)EkVoPuI)=L$OY~f`Km1{e(MD|48}Mg7?`PH6^AX3Ugn+8E%9(e-OVTMtuwOgIEw&ZOWO|% zn@|CCfeKy{QR|_q*qXYM?319z_zw)>60b9MFzcO5RZ+kg!p>0eESe#gOU#ejbML-I1;>ep}Akv6d3 z)|vgbzrVDP2L03f_uu~S{%?8kO>k-*&?b=w(Q!iWFs+AO98Aac?fVP!DDbicSH8IKjGY+=niB;^l;l%(0rzq*vg^oTh>`8x51Mb=x;}MVu?AhnlT6H zya*m-cIUC)Jtcv&oj5b5PGU+nhWrK+pG4o?Xi4>+V@~rb^F?Cwst#f6ZeqU3IUw6M zGw&0B;au+J-O1!FnTr!2+4)w|=ABM0#+$9B9g*0kHs*St+^vjvxy-dn&UA=I-^knu zz26(_b$))xMj__m8}Rc}_CPbw-=@?&%j0eL=rb6G5C}(`@Xf+^%nc$ z^pdHeGcPk@6#O^im6`u(l-&k>@Tp8W@jP}d_MjQtgYQV$xFY>uRHryfS|p4L&lDly%d)NRv74V0C-Y-@&@&?BF!tJ7(Qe^CdnY48Iur zM~}X`U;LbzcFWb~I=*SUv5r56dgPplfqlFXog#JgteJx>l^|2Ik*!(CSTTF!k-wQ% zQ~ul{e^$%U%blYmbGC47uUiFUP>NY|3&)_$!w=Gi??UJ-=g_`4Q)DH0E;771CUfc& zoUbMNppTZp_1`wT+b=ZMv)mGwnCHk+uA8AjOD<;*$QojZZ~5%SP-BCu*-PQeRV_MuDLQBi z2etYIN9@{Oz8oGBj4Ox!dy9&%G17Pko?C-+>|nbhc(_-8&q~s9-H$_%@JV_&|;=hiAyC@NCew4Wz?V;afa>qkouX z=x>pH%YydOA0qiSGRU{Bm+&nn#5a7=(qAjED;y81CX-jdZ=xQPSMjPv!7Ge6fBHY- z!;i1|pYh?({rNEaf53-(pPw z<4^D-pQnGG3&q|K);|})=T`VEI!|ZUkabQ*)!Ik&p{ttScW?W$h!+Vzk~jJ zJE@P)U#EX&h5Dx_6ffhbbkRT4XUcZ_dk|YKg4(%N>2`@ z*9{?^^?ncIwB(;G>FmX-i(zgL9ugDyoa{GDQ@t^6LwI&`X76+4%@H3tc^~8a$;ac} z{+7if=I5+eiL->?p%^aCb2nqF#+b2H>ArO6UKb%BpQfdn`yv`Fs<|#gPO?S>>kP{Z zzH|SMc;q4}xL>j^DTpI6ZaZ2zUv~@m91h`r4&U+v#0TC_oS@+LV{rQoxYdE%XW|Eo zz^{$i0rB0fGx5vteZ(1X7wJRjKJ0agOZ=XPEqyjf1F$6~ zEZj%_4D7&SSN;pcEOubeJpjI9(`8}Hi7j@4GkwDHA!)LQ4u8mA@sUgbeg$hXy=nMJ za!7-xW*RbcjMy@ntLHrqUrx@HF?zVj(lPNN+~G(5(DlKX(&4^eo)7G3U_3qm4&rBv ztXt+pU!%+c)<1>b5;MhokhpN}we+eA?hha@kE5GS*~Ra-!1S*MW%q-#fgM?_6AmWV zf9IW>y>XFpE&EJs&9$vy`Tr)5%pd8WNjZNHaHg|L$)`R!zd-hbof^k@t*Nd};O^yI zsl|z#ID1odMP;}z)M3A-^L&)NVf|Jtdg8|s{hwII*Wrc057|}y&ef5%mYy}Y(%0wE z=S%4Ov(W*wu&HF7FlbZBUc=p?{+dmHeGZ((Hx^toG;OthFg@6^|D6pFL$;-fQ&W!d zpAmRg65BZoT%E*rc5r@`X@6jE|1lzuS#E;Ukl56Iu+HR|`mK!e+gFcaEtGhB+So78 ze+6kE?^*}Kyw_>&yC5#f->*z|5Uz;}HjC_y>-YYi9K%Q2VDoYrBTaoM=N%%?k#W%X zKraunD?Av?XA#yvJ3hho#Q$W<5^_>#_KRSwZ&`$#ba1{%SQcdtA$rmy{R+K`T~Zdt zxtGR0xtuXJfQA!t`^E@l7r6J3KGRhp)biiJMGk( z<1#LV-|t^X46!A(vlTfb=Gbr3QoUKs+3_Xp&mwkEV6pdQ$2s~5=hk@@F@hDu62FfA zkagk;%0$*zYmV=O$MZ(66SQHUY2fo(R**hupq_TCyC?hY1>ZVpcfVNlbk?vU?rmG& zJod`f9cRaC-~CBZ`rV@oa~6zdWv?eIzhZRc8c8JV0RDwGyJ~rlI^b8S)DxahGrnxU zT)75(3pVn0u)Yyf8T`&dIq@o%#KH@Avj#{ka_3>_6j{Dfc*_|`R`}~?j8LsN8HcdR zWqtQy+Lpy{8NcCtihTI%{HFc!jp@cWLU~H~6<=1Q@5+sQi*6TvKMcGbDxqsEI@grf zug@@E;mjG)g=W1gXBfm4iF~5>gMN#!pCX*!8JYjR>Bdc$$=|+SY@B4@e}R)5z0ub!L5H#4x;TgTD!Ptytoq~82^>Z2{9C|1oaiZKOlB;fK_Ana zJ`T2HtNLh$!8~QqcIa^_Np4^}65Z8`b$Um(yPEHm;Q!^k0${0?Uy`wQ(6Seo^*_r@ z&Z9XAU7^iKee;Y_-SFw7l-(t+#+k|xKgP#*Lkq5_cy2H7l>Q0a>(R6A*lJQQeB7E% z%zp)V{X6e;`j!b3nGjxw^6bs7SFaAy1{ZV90*dbsA_x%Tb@)wr{gz653q$1OZZ_iw46_@>+LWTC#{$lUOazq%q}KWa^vH z$l+04jiPVJr>f~U^gGc_-{<+Qm#oB`CHo4==RuxipI<9yj8>qJiUo&(bbVVHUQ@0_ zCNEu2c#5@&cZ2e=S9z3?se*lSu)L=JB?fGU;K&&68RFR~IO?@lL!URrYvGLU1@QSb z>dWHS#DBMaP}|{uOWtk*m%-$%mHNl=PX7XVyXF5--eSogxz;Rw#H4xedh2Mjf9Si5 zT0|GvkvHi>m+LFB;AfT}$TRxFXcM<@UD6kJ_x6Rp?`QmNwCF}zBeXDg==+wAoA?kJ zKZO?>{;m(mhb;T(5BuuGufIR!*Cz(F5WOkKdFsr9Ofc~eloKcE?B@C%77N7@15I60}~X{m#6rgcD{-Z~nr#tF*Z z0>1*p^E6TyGS(tzm`a%<{N_@x>0ieW)IlsnCH=;xv7Z=Q?~|~ef74=!KS9duMpjo- zhJIrDs16cGDCyFFM7J-%-V`ag zeA{9qh3b|%#!$!QV5Mpv*Rl|dyQE#vu$LA$Ta70|H2f)f`rF%XZcQOx}T4w9pGV7QDhd9Y$IM@*sF^9Do<{(H}2e zbrqU8r1-`PUU~Sprl`p|k$C;aX3l+tCs)B!k*{(5>QQPQbDEY^i9w)Uhrp*D8070m zr%uws_za|zjlR{7PQCb~`U0cC#{)jK;A74?L;dQi7(>44MZ1Ij?CDq|8M+Ndvrof) z;dgc;<}!J5&oqx7{G$~= z;|yT*gnW{XP_s2rjMeM?|eR`nP-l-)2>R|C3aB<`C6IBMdthTDfAAPyYb1LA>Yg1DC3aBQ(DA39hvJm^GNC8xQ692R|B`b`q3!X8e3;nSUfXoE?8ZI z*-Y&w?L`Oo`IEvvq`SZ=i7TB;=J1hcg*U7p-Q94vIw~}$FD2<&>>>GrGuKVJJUOh- z=a3a`+Q#jio0J6pH9t_UpbiY4+0-{TzWg3|MISB@`e9#+e99Q`W5E^K;qnV!9XAF2 zu!%yW?jLM(Oh(t>PnLct`{JLUON=9N-BLGaq;5C$$aSjadD702_NS#1>n!g%&qLlz zzaFPr{zRITf8mjEdG^@yz6~A3oIhCh*}k&L@(z8_Tkeg%a9R$vj2srKd`FiuWk)O46q2uLX zN6rV^t-*QVDPULbdidDkbH6%U{N{h2t-QPA?CERWO*w0eciDPMAI<40_S)8ZO5NGE zU6FGoYk0`E<_%qwVqyH@+z+c@%kGwRIdT48h6eeF^8VR@q`o7KGlL@;4@d^B3?( z4^urI&!{G|KV>Btr=XwNH}?)P&&Pn~J>hroI_T&8#t=he-uGQ-S@XFTlGUJ{OuI}! z4zcQf$3;aIs>QVF2eGxnbB+|&uUXsOUuki-RDRA$i(PAve*|4cE-P3|Xh0V{#<(TC z{5o}7;H&VdlJycBYf+0>*YK>)>0b1t+sS#ARoRS5i-47*>2}8W7V*z%Yu6qhPg#N2 z3ar8Gtglh0!d96{K6Hj@tDU-ifUUN5s9~r6TSIyCBl0%gHXyG))VQA*AUArclKg>} z2kwQ^d<%sKVVaNBd-Xs9aKmellrw3n)ZIVP)w*Mi+kbUdAJuwRYzFx@k?!7itgiIs zvyHa~S>|P_3*X6Md?zBOQqN3tO(RrKqb~Do`dsMwcHKzi`Ke$V1(&Tw@9Cj_Y3A8l zv{^UztAxsIEjp~5=UeqYU+kmF5ojp7aUfkH`{g0(((#q(npT3}B`GKS@J?M*F*@HE zX?)pnV0W@Q>SoNF1+2*ah<_EheetovtMD1+$ika_^La=20_db)qGRw6Mx zi?d&qSe;GsEcY?o>xVY&bRMeTsmHaxBW1e8s*-bZ51P zF)o|9n?tPs-UvWc-SC3OSczIXvZtUD|jsDlUza9PErFS@fHTRFB?^*g#-lU~NftB#^*tyS-{OR0t zBfq!w9>=fe{&nM%FXB8SwqS)&XncY-P;ax-jkvaOKik=%H<4mpY`CIlRVkTOifiz zK0ep3I`W6}jUnHT4xd`s{~(%Fmj+)U#t-Ea!TSd z2g?(*Z?-DtGHsX1BYhfNN(-1HtvBmJSAQ)lUgb}kXyeSo0{Y%zp|w(WaGOW0e+l2N zi$PDa?<%;r*)29y-IUyV47)91k=p>y%G0=q#t7bX@4+be(ZFWG=_Wq`E{kv z_^qX<)ZXQ}pVymvN4BhO+SS~%?D(GNVn*B>x__oQX2g@6vsKPGb?cO5%=u#?@iB&xW6jm zJ}2USe8l~vi2J;V`}~Oe>3#Rv#Kkuks(A-z;DccQbzFBK?^$^8AwKz!(5aiX1hZ{? z!^=Dea)OHY?nZuO9_uNz=L#Q0cI3A?Q>FZZ>p8Apat-D;WgIovL_GLa%=mZcmx}Gi zeAJb!+A7=YwM>n&V5Na<8&-5l2eAs(Y3A{7>20BhI~zOJFRa z?EApjEWg8*E1oe)6I=xoQbz-%nO93u&=jQZ^1e61XHUGM^;tT6s1# zrN(0EYG$^A9Yd+R7?6XuCdYf-zsCmy=luO1%3vfS0 zJ|!;`r4*Ud*Jx2)F9S=`t9qH2a|CkmpEp|6 zD$ZJSHCp11aGojO9#ek!%-HwE`+(2g`CI(*T9eqLG4s^Xjg)a}QJtr5*tpXsHYhq# zzP<6}D88*Tzpm69_0;lMY=$%Vyg$H}?1EQvZbAa*wI;@lp5L`-#0`_zSrd=a)*+wI zJT9@830#M;M}IH&s5XpmE5>wwfJ}8^Pd+(9l}+NiGsAvhAMxSZr1|Y@YmWb-a=`=F zFh>5YGW!9oav9&})T-K3v8OFjMO@H;VH&6BnO+kbSF>YmL0gQL;PKUf`nD0IJ^n|d6Y4VfLZn}$&S_mr2t zRwwv9p`yBqI2-5h$oz3=@;BxkoRPBaZ_q>1{y;sSDCPeH^?VYg{C{U0`#o1ekvjT@ z*f(FI-N?>XzQ4Kw{%lu?N4E2>p7h7A-?H;LOQN^SI@veb66Kxz!GqfjOX86Ni)OAp zzrnZgzHN#3PGqcmM8zLDfn9qyGAus)?7ywv_B&)C!J-}cfZso;Wbdb3o+0k$b@7GG z4MSA(lkr;f3X8^B9m$kvRa$Pg8hJhX(IxZb_r!)zQTYXysIG`j4k2q6*)Z3TVcLdmzE8if9@=gBSdb9xCKH&a6(X*dh zyPT|xU!a`SnSIfEwBCH5NPmg)6G7Q!#d!y;TtJ+dUvr+5}!c*>gP8^?DQ<++A;@4~;?d>_cG#T=3E zyv|Z~Z|nwT+{#?j6J681F7Bm04bcV7PsXj=!$FK)3y`n((T$5)%iudo`ML0%Gf+&K znh1Ow=OV7dRy>JuAf0(I6?r;Inn@c!0l&MV^gUi4T!V}{uL#ndyKvn3Ys zyVw@&=X1afSeRCFRxdtsU<$m`)Nw1Yu}Qm%k*QqUtw-#@l({-*cORJ@oprQ?vg44u z64J4YTmpL>uycVuU)l{!XOGp8Z#Bt$hi?Gq#ZW${aJ)Be2G5~(FJ!(dXa66Bmg~U( zV6EzU37ZW2zUyVyy&C7G@-55d+wk2TX|}n~RfsIljk<8ho{EM+#)j$GQY3EUo$w(vWV z_6R=fY5PQAp5R`_=3o4E^|oh`joIktDlX?nWo+j92)!JZjVxqi46=cKGG&8r4RLnHCSeSi&M3H|cjulz;u6CG;GkeszVKH9zQHP&OoeCg%6 zO?BN3Y@ushB+p52K%Qctu^!@iC43Q{{tQ~@z)zuz4lnIp<@v%#Y;3dbIka8qa*}+e ze1IqZEIx69?~h*{o|cSq=O2Nev*D{=IL;flRvE?cMEqWrw&GV~>8p|a=;V7|K5!J? zh@5+o^Kr=eY~;K=B)6mJpvNfNMGO z{q8xwkxn~_-xw}=u|bzI-igjRjh;A^EpvMf-4O3(&f_Y_=92Nrj_!#?_sr2^y<5;d zlJ_9(diPrFVJ)t6J>U45$obU2fG_gy1hR2AX(DS+LKjJsb@cc7mHv1d-GuMQ8_XNj zO`DOwW@M7@4|r#*IBz_<={9szE4t|=bWWI*9J$)#S@lfWVmDo9F5>(!^(wC(_Y4M%!reSktU|W*E2Ajyrd3Og>gS?E{ z;O^c8FW-QdCqle@HN;E%&F%wUc=-YH^g)8!*NLva7d%db)2-lg0$eJPUpwbi#W8o6 zKDY&*o&cw(pocw{bmsA!z-0^aD`(e*@a(b?vo3Ti0yoha(hv5~zbdek>{q!T;M}Qg z&)7;{tzsNtj@aqWF1e5ck8q--h;Dg``QS6?mMU~hiDo~t2i?M2WLX?#tLPunP7mji zRH0kKM09h*r83VNt=b)voGL}DH~6_>d8No z`z7Et2fa`QE+ybG8+__SX6RSU`AJv%%fY1)KFyB6B^#L&{z?pr^g-tIe2-A=uOV+8 zG?zXZ##{0dL&8BKiZLg)m$$`y%SiCNm%2CG;*M-)ys3wW>%j9QWBdg06uMa97klIk zFSwR~t2czJS7?R2%tmhh3HVaqY{v3i8FwP(df}-cuF~hE{@X)&g)U3bX{NkGk9F87 zvTiX8J;C_Re#60aL~%%uG=%1@;b+f)=Zes?)G0D-Jsl`}hOtU$B{ueJaj~z8Oybk( z;}3q$X2z{Oj9b#4uneAJu6Zx*zm@ji3oS%;ZVSmyJ+Plb=1m#pekS)@8N(hibx4Bu zL*^f|H!7owtIL|;t3Zb=M2EQ1Aw}qr$)Pc{mHbb*{JC~Gq^Hw>@ONPHIhe6Kdk!g+9vSwmXSVki0)e#=5^`gL4Z=2#o} zjpla<*HEq($rAIwE#BVfKZ-B=igsp5_D z%fJ+RI5tML$Xfom6f;(MulgzRlY_KrFux&o*FIT)6?@wT-wQrf)#r%gOirlVDKJ$U z@g;6zF44d8T!>%necF)4817&$VjJ0-pTjvr1sbu=8M9V5aZXqcXAd>Ts42u{mR4G@ z6QTVpmK1Luc7>chiIE0fRqAUoSAYcgLD8eQjnjiv(Xeq@en`Dz+lI$*ffCQ;T!8QoB zc@&jeszIp@6#7joT4JrmQ;RKCs@B?mZ5t156Tym#m{>IL=QGbdna?b zRpDYUob`GVe)UGYS-Rij@M|;jaOr+6@H+yXq0F~P_xmyYn((&xQ=mU|FjWJfw`_$Q z`qeJUA8XPzu1WMZIailQIu(FVA0L-;Nh;`>4|>Y8;}-j(KIi8T3>p_29%F|P2x3z zw!m{q9y_-_^%qEo{OTAxL=&I?y@B&D^3mtF{0i?a2<@kee;JN-2K2)nhd;mN8ToE> z{5cAz+{+SJ>*2dexX;S7diA*D0e+Qo@43q&dAlj9eA4!-ww6HSYX6KVX42CVJYI&-6_{1o!bW;EV+Fk%mA4F zFljKUFexw&n0_$HFi9|W7#oZg#sY&f<~g*IQinF?^M@KN7)wt`Ug3G9-e)V=j+Pth z3%`PJ%0ATZko3boT^{^OtlXP3onswRUpSZkGb~+B?DaZQn+m;CEM065yoa{4B-*J9@&8OWBEVB|DFcwsb86>Gz!D>`jCCcE1w(S<=FZdXtW%VM%r_?jgzZB8_>@ zA@a;U=}NtB1M&u)ayH{U$X`@>UVtCUD$9}?=vCk2qG7ORzd(7~dA1g5^+k{PJ3QSB z`tb}j&X>6OektCZy0lY_(BGS+%zf(-t47{KAIN!3mF+>m2-^qR9~VzutKmDz_e1YG zto`e`b-csCdkeQg#_}v7>R31(@taaQXY$-3%QORL@kt+?;X4$?c^QM}S@$T;(Gc%; z;FN&>-RK|O+qHt9*1!+){KM-ZyT&x(Tgb@6i*V>U>h45;g3h!m7k(*8uDba+zukm+ z`h4tNjfEf1-Cz$$-jgZpLO#xv&Y#n7&pXyX+>W~%i&WabN8B-4R(Te!`H`a9F~rB5 z)QdZ-KIAoju-=bBkAsAnFV^sNbT2_&v6mvnk zibKqNvERs<8H4RZ9Z6!yT+j~mq})0#&R(m12lV_Z{JyH_&3>fh>T$7Rly(Qgmm_?+ z3ZKJpowp^w_`YG{-KJ4mt~veudD^vv^?AW@G5Qj1HsFqaqAOO01M{>T_{~)5k3;$f zFYa^4@nZ8(`CYL|D(;B5vTQ4@FZ?U|aXZp)hn)`^kyaVG*axsCN%=Qs5p?pl8xKqW z38J-m!Hu(;F@80pZNyZ3Ul(bYK=!e{cz4H&_WCpP!+Gx#$UORO?vHr|(%p=9N?GKZ zy$$^-R-f_nwOODUdGAw;ejZz$x$Je<_BQBT7zcd<->B^UepJc?R~_C<$Z_C)SjV?r zxJR6F;!ey98UIe?&F?G4@_S>xhC5{={xw9GEw7-g=JqM5#2skT1mS(nci1$ljbk}-T-~>bbL2s2y^ z?WgSFo%|06p#St2KXoAv<&p#An*()X_#+5o+h8u)AdpuD%M6@PP)0B1gK4~D{QKkL zuSR^HMeQuM;_kBz`z3bFiIec&fd$_Hv||s)hPNoJ(7#&nE(PAc$Z*GHO$XuEK4muW!Xu@iE>)q(z1tZ4qo{=KDz)$%8*hMGyU>}9=MS7Rb*ggjS*{aN!n(CWU7gt}5PcH+9 zcUt;-#hyc<@hj5@m@W6kL@)A@eN*Of5=7J zx4{o*H(T5AodnX|0-4~(SdTthSjw<|`q*NGO@`kQYv+u22J7LuR56A=4hd(rGIB0nx9;lS* zou3Ct>%PvZ{zR4Yd%!o#xNV#C`PHK;92aYPg%{jv8ly0V9RE<4&(Mcl@V<<}hm9)T zTaa#ymi2M81Rp+$bSaw!^pNp$A1P-Y`u*W5CCdZIzXWaS!anj7$b;hx-H*|Yxj5Y| zbYq@Q_d&YBqboss+8)?PuwEcPMZwFDgO|zc++W&>{k}Hj!+6glUOjYXKLCC+__GUT zr2m;T%3adBXZ+bYSlvZjz`G8;-+wdCeZ92+=Mll58Ei+))r`I|9I$aumG68RcV^qK za>eFq7U;5wI|uVJC+^U6gNA!xHo;B5A0Qv*cSOR&_J2>pL-$WVPgzkOeQtDkn6?=0iGGYV zWzXAXMxA(1>TJM@^M*E@H?(6MO2RmljByCx=zGqh)#KckKCZZ0xwdBeG(Vcx>cCo_ zePctO&}N};)%~Kra1Q$C>dL{K2c6pawoSfqfid}&&D{?*P&Q($)xU!ad6}64xrw&C z1!HP0!r6{5qaD4lg~g)bn=LzKJ{W89zV$1-pWeN3ZYTY4K2gIv)+h3yV{6;ENq#?@ zbl(OX%yrk`82{Y0X&NJ{SZ6K#jr!45nLEb-JEuqhb}^f2`XtPE4{zouj?)We*>8?W%j!=1r27wKUcfG4T2 zNpR!c*OZLKdRP|V92J%W_bi5eMGu<=cp+ez43=jh;JKg$^!40Z%5WhJhI7Mqz|@`2b=5b zOvPW+yO6)CPxbKEM#hCa$Y)P_0e>)_F=twc z^yS(Ob0!0y z#mURGhgm+z43;A+t{iRu>3+OL<@bG4elNP>@`K*wFUap+@Mi|jv~_~7950L7^{6A? zo4Xsh=+lGoE?FJN1)j~eLYMtEblH26e!~^6%v79B+oyE%4tu zw*+_ZT)Fjg9r%uH<_*@t4M^7*FTa8HA^HF3$RF~42a1I@9 z(;}W9uHB)x;Vb6&=5i44Ey!=&3*LVR(q$knCOl`LM2h8c5Z*ELJ_zBWt+SF@p zR(uFO6Yn(2^fN&x>OjfV7>v*s6 zS3~e!1JD3@9e2DnT`TD9PEYkkWAE_ofNUjwZlA)w!FA2>{aBmsT!#FOdf>xe=hUMC z-Jvk{)-$>H9 zzWOoJVVm7&qG`t?=hBqtJ0RosN!-)P8rPRg`=~$mSa$O43ifl)q0N4TaX)ZgA7Ni0 zjQxz|e*tBRuh++*ZPCf@8GppLbSZa^Ab;~6t3BWw%vD+)I3vX|_>mOU3;h3Yq*bEt zDM=aZaGcBgoVOeIr79IY3QhFrOGaXY<9?0{?5}40`9hcV8OSF-EMDi#^8Fh5v41w9 zj2G&kdb{@4Vb4`%z4A-STA_F*Ue9jqkKBg5NxKHD&q+J(jjT-JJv`hmL>}>NVeFlB z7C(hKkOlJ3ia8M8z<3VdddHou0^B*p`JYqii=nTv&VRjoi|Y?;s|@mLOlLj1Q|9TE zIzQ;nbX^GaMC+O%b9uM(KI@{oO!U3XPo`_o+ofOS^UlI~vh6O*nAb_W4T^S0hFq9- z-viHKt_+o4{VRWfo4C*o>v9om%nQ*yN5x;G;tS}%FBE^v>b%w_$P>zxhapS;K2WUN zg0mj)Vw`*&I+2p0BBy?I=gelv9_RzRnjv>e9u}GVRX%wtpP7(vpJKjv1p84J$`AZD z>`A1{KKw)Ag2r+l(HGCY`+oQR_d!<4_b0Yk54LTw9BfO&cO0OL9SfPnIU2uNy$R_x zqx^gm+Dm&3%89zPkGM&qcgyUB|NyYhu1Tv2HBptLA!jdm_5LBTv(wLixgJ;_)9M-W{q=LDcD}OP>ou-^RIM3-@+@inzC-E)S!8B`}X9 z*SC66roZED4!h;PQDwmA`@~|C>mHn8q^>OI=r#3)pX&3(rv*#@MD=t*X3VA*SnAo+q@KJ59q|VRNg5Q+PkRtU!lW3g0aS^cfl2L^*+{5yA}A4 z*~H_O$nz^I&+ISBa~*K{;h&b_SKaM$c z1Na|nkJe0#&0Kddy%!Ld^S0(KYdX>Id%Z`Mi*r1XBO2wjA;->qH5co!=jA>w@!7vV z#oCu`_BPx`{W}izqIrwJT4F3{AdnZofo;Uw20Hc9>&;5lMj+m+XKxn z=rnn665lmrx|queJ9L_upMz#CnLoWqgZ}VCzOU8(YHa<~B1$gO3J^aB~_9}AxA)z&TI*hSiI;IWT#ke4`aq0F&y^J3hETm`t< zhHploE<2ZvpnkdK^)E(fa?BVtQk#Q1{1JNfRL}%-wl22qZ&4ojq0bNBe>rF@uFLCc zL!2<;pw6#6jW>eXZ|Q#o-}BqnPhbDQU4*;3a&9{fZw@m~8}2u)L3*Fyu0}KaG3L9d>hrmz=$myhy~!dW8XT8F#jctW1%z6S2q z6n-7Ne+1`;nD0~I>$&7vo8sAP^u9G$(s%U!f50xe#?sY{HKlJRbY(cB;GJpdYJwhY zm8yeN={-xP<#t^PKZe}^+pPCw`E^>2*uPn(eaZeiK&LkJ=_Z8z2Y%$)zeBe}`9gYn zf2WU28CZXF?M{5~V58_9Dc_srxW~HV0HnnErA$}F*)dWZ1lsRG+KjggVfD!CH!AMW z05_j6{Y@8ZAD-Yk;FA3_!Cz5)H~71dO)_t+HQz&6vu!nHXs@>c(3gwASCF5*^$4F; z=0XSfYb8hVHVe}13*QNyW;4pi^9N@GBfz^OA%8E%9B>rofR|tnI2z||`eEk*5_{k=T+K?Z#Idz>F=f7MmT{Y9?#_TWq|($d>y_a&MG@!J37 zs>8n6Iv2utR^Tnz?5ivrW!>LUj<&&_KWEzX{~g{pD!C4GV}zeZ*~NAG+h#)@`na`_ z<-tBD`5AK_wC8W;zP07ob1m5G#2Mf&EA;WChk(s}RMe|QWL=~U0Uq8h;W&NV;lW(l z0=bJkC@=Y)jnORYcU`R=pQ5~$l&kjOJAVAmVt04azV55|jfDEbGqO)#v>%7*InEw8 z>kK}XVI%gh>m$sl?>MCKFv8n!!TcL&5#A; zn=dSoQ}AQoJ0ZhVT%4__1@BYW%CL74271c=n0dUHjBgas4YVVjGx{8`k>@Dh1>F8l z?(8vmL;7;aiCDdsj@JIlFr!RumuP7U(HoKwP#Vzn|H?8EraEbg_MTFBE-YNQ2ceF(3TVu-S$?Et~I_ziiJbfJfkaYHU;LksD_5ZY$+Bbrcs#9nX5i5wkmgeq;{L zTjK4(lxsxM*(*gC-(EO61oyIe9~pH#IuGZ(!LK_~X2>)uN00B^_vc38P-z8^*VS20x3r;y&mLJD@M*z3OMPakmQPe9vmdU5b^objWIE00Z`?m;-1!y}8ew^8)H9faH(~6b zhd4)aI)7e2T^u@!xYX%9Gad2|Ivoe(;6&7E$;C4?@Md~}Zv*bOq-_5bcXtKWmJdsP z4!^B2YX5cU`)#()8Isn=uGHQ~J=8j+QOwHJzWW~g^r-#sz~7AbAn=^nKbCl#GPJ+P zg;z4%qQb{#Xn%?ee-hzhROif3(OzeeK54>sVO@VW(UsZpKbC!bcj>IbpL;X4KY;HT zhdha~t?1||#D^YM&HWq2;fY!q$}8yse*e!qwtb)CZLc!OOng_Wu3)ejOqrQ-+qO~I zTfo`d)T$HsKJ+B;)Q+SbqoB{d4sX<4mznb0QQIvkX`6G!y76|ge4LU?+YoOH>cR9g z28f(b@s3F6tsg!@U7A6A z?-cpwP>e6mPSN~`$F%Q@OFP9WidHYk+)f&?Kg`GXaJS&BJI|Au>Ea!w(EZL{?&!E^z+g7Hrx@4&*O6JRbGxbYzMZ}rEtH9{`DgCWw^I6th#3O zkZs>gy(H6eSvK_pyl-NGZH2MHh^>2?U3LlH z2Vq&8Kp)l*{E{{w?feMh^4qp_KZEb3Fz?NnFYdwpYtq1idqka=ySi#^Bhx;`yD1#^ z_^seQXe0Aj^(pjv?HCW+IR-7jz8(7YTc8!%80)%=v}-}{&(LR*P(Ru3Z)RwZf=)(1 zGR9N9SCYo`DQh2jt-A>4m$(kZw~;QD-IfoIB)O zw&DF^$aI4T4~*7uk9TMLzj9|co5#nT%QW7@Y2OSPl!-g1=JB=hGHo-;hBqu)+cDP= zxU1cYH1PJ;{&C1F5APd3zQy{7CYZNyK0XU|!~9zxBg@BVe`J107v(#i=^mtI)OkB& z<5lw*4d)_vwg>d@TS;1+9HSjoWt4S_I`ul;;pCc8)+vUc<odKEgTA{|;n4&-ykbi@JSVifVCowClXAmw-K=37RGsz8(NmhBiPMdJ?0j3t&G z@V_*)6#i9~9lAf{2K~3^iP=b_rRtZ%xKGuxqhpvh-!dk&&9eQ0_t2)Que69&!?eGm zOgv*7^E)|Adjo#PTlhRvYe#vTMCZ@PIISP%V%*|fnfx|g)yElEAD`_uLl-FL!^Pkm z+0XC>yp$tYuVq?XU69lA9rD1Nov%>gEQ+D+xPg4Rx$Ey?xRpLXmIBQ5HnA}j}J zZ_sq#yxuh37e^oJijkKb8_Z>n#o>|W;c^Ul5Z?z%cLyjDt6FVZ`0~U9<4qCsH zd$9B_+{5{nI4JJO1H1q*?&o~VdhjKA-;R9Nb5`I8?l<>Ucd63={RMbiluy^*L_NLW zS+Dnvw!#8ZYj-eyo*w_4@Hb~`-&EtHyBSZ$N9%w@XcnN%Og)@ zK-R`|X?QPM%*}Xq+K* zjD$bFAMa4-1|3eoI4|fJ4;yC%9qNprL!A$FsB?i1btcd;3-N04<}ccCqQJeU%#`oT zvwoXgtrP7Eb|KDIoFiDM&imOed_I+J!~GfR?Z!dwy^Okvw9cP%tl%C5`!4rVC|{2v z%!x4iIdJZdYh=!+)?ht42Znnoe1Gx|#LH)Uo9=ILEoIa^19@Kg;u$a;(1mHr&}}|!lnCwMVt3ed;<_=Na^Ql<=be#vf?Zz`0P`-c}K=! z!#+Ch$vlF02{`}#B1xZ@ccAQ?t2vB$z=HZhq&e)23V$muJaZww7l?4a)i3jIvub0I zH))=MxDJe01>|?oJ;Ty|n0NTuhPj{-)A@F)sar>+~^5PU$jwR?}F!!k&oV< zvqosYN4bX~9j4dU{uw@GCf8D%Oz9THr~A|h?H5Srd}-9`iO0dKCfRQK7Z%|&S&~AtEEwYbG-NXFQ`+1ob5UD_x+^4 z-^?WaK?^w#XZ%4ZAK$4wjd|2V4-Zc&fo!&xM zSH>6Jk4Hn;AA=ux{uA5@ihu^wfyccgruhldWcbGjXMONSn@r;)*nQ<;muXv#dt}qS zrMkNr-&E{tEQ+VWpONn7ke;V8pZOE$5FhVl#Pi+_c?5mA_ioWzjqxA@<@N&CTd3#h zg`T7Y^?6j4*+}oXKGORI;zU3b)|GC(?Rw@@eccoJ3F1Wym+aeo6Zb%e;*AL%kLMK3 zcQtsfJHGr6Auihhy2wLpOXB~ak9@soAL>p{Lr=;$JNt;!*EuQU?fN^I57K~6dOF*7 z2J*uB@FC3Ghq(-OBn!}gYuQe=GlyAkp40RI&td!YFman9^Na8f2=kA`^4Hf&<}(s& z@5KCkVCweiH;b+myqVxD6kSW8zpuL8)r$8{QrF%oTG!s>>VjVOL_XTf2fCTtig_lvYdS1q#s=^~JMJeKb;<%B?|sGN z?MMB5Ld>`kb-W0C@4L&@x^`g7_8ajHC-B!Fyr@S8>fu8@_zto6F7TM*Yw{S=AAqz; ztD}J9>y(Tz(r$vZ$s6a=E`CkOdO9+aH0nylTU+Mh&Is=Fi-VRX>~-w2v^wgOwK1DU z?X%+h$#_q!Fa`RD_qrb{q+aqWjAYos(Kc8munt&b!qtiv;j4}e>bHlCWwyzssX(rLmS>vWNx){-RZN*~B=Ek@JxeQD<3Vi~kuWV`Cxpf69K z;i~(UsFbB7w_%Qs!_f_?0TN!xd@oG)A@^9&-b!PY@|Z?XS& zVLftfI@T4?TXs3|-4ygc4R60_%zFpYXCB33V3im3I*B*@NE_0H`MiU31nZaD>tvziW@~=YP4_OAE$ium!BbK!7gZpD|!H#_-G3W%^vB-*faW3BM!Wy^B z;yh9}pYPIw1}x)5e{<-rzh~btLxurOaJSl3vVh7 zu0s4XNOuYN8vTrKljm$k7~aa6n2YpY!aYll^+zDbNH6B+Rq3C=enIi~^mhQ)f-Y%w zRkc-E+u!+@%-T$(&3i+S0G~S0yX>4FLEq9kN-Kc=#~5SfT<6rq+V9^n#_irZns~V? zn)G{m$Cxhq&i~Cj7bV~&W2~U;cD#nQSG~MD3tBZiK)-GqzvrF|y>LJ1haJ!pr$Aqv ziZxXl&Z%0pcX6gMgYz48KA|0ZmNx=!eqdoMWaHp{57=AB;q22G>~r9Kq9R$(H%4jq zpq`8axpPA^;$RFP!oBZI;F{M-F0|Rrl6KHxBVJ!|EZ7tI{Fdubt|cg60m_+=@_q$+ z?8VSk=--~EoFSb$U^~B4KX?B3(3fs=9CY5+4<;EV3C0d%gR#O`UjXJla z{hiRKdtD##6-v$zEJ#4q08WxXhEzHQ_Q z=-GZ)CWZ*1K3&GeP42O-X&o;XLb z&pv&Ct1b&`ru}#mcL~Ny%F}I|v3~RUYEx#988Tn9ueW!ZwFTw-i6Sb|Gnu|$wzze zc8Sk>INv7fzSd9FeRhef>&zhRQ(TSrgz+W=%i*wGoaVLT?h#}QcyX}TA#mU3;iUabzoJ~ z2i--_X5Tex6Z${bkHj_e!8-{50`z0K9=Be+{Zs43*O9*5ckYt=)g!@km+Vi$TZ#X{ z+Nx9fUA(^;Ydi(*;u}9fH z&vo}clsOai$V8dnLz&wkN0*??X^nYx#j4DkEh(`w)4k^(-9@?JYb)ORHOl)Z+&MDJ z+w^XC&I`x~c}g0Q9?bg&-EVe5Kb$Z9W$@LEOKTr1NaI=4l>H1Z(8F6vSHg=f5WirW z3v&I)>Xe&IeW=pYhRssY4EYso4t?ak8sV#y-k_#Rc734 z(^qC(I&zvS*Tfhu$~*B=FK|m9%U_8%Sdq8Gk}C13TR`4j4u01LWf=jOGN|oxe3KUK zYQx*#@1q}nioWw7ydC!m`cJa#Kg0Kb0N(mH`0{=5xj{ePD>0{+k3KEazDjgq06T;> z%xTA-Rl~-t&c8#ZAB9YBw+);q+kV{)ZQmQ+>1*q}wMN^s-x&R(19%<2j9KyW@R2|1 z`}Tdrt&NYn;PvjJsVJj4uF>Dv*WNPea|(Vl(_=NOP~#`pAbHRF5s)`>D)>SKEO_my7T3*AK% z5I;T*=Xu8FlIOdNE=GLrmGpJzT+Z#$m#M$f%Q#y540jCM@jiUa@9b#p6Zm-_%x#VN zt-4e@ML&#}F~38XYA5LT3hs(Rx3sfx9KUhZ^7y=Q@|{=IxapT^ZHx=K#Who} zudl`PR+-ov4D2Zix8nDNv^n$O<1g$^C+!*CKwe!v~ zn$9P~x2Ir?g+9104P*MrAt~E;B)Pfe7uq5{?zB|5-b12YCej{4W`_7{ell0h{pzUqiXcx8R>cMHu&qPukDz;2zx>LdxbLI*~@#!TRL7FhkNcgCuWX^x4`V$arp5Y zfyI4_7>l26a?dciv40qglc&4WA+OSxnB2=uZs?g9U>~aCiep-_k$+)!zTBmCii}m`zI#%&rI$oOztO5?x#)eXHD*3 zo7}%OxnDB5Uop8~H@W{}a{tZbe%s{!r^)?qllvo+`;5u`naTZy$!*2Hy3vlwCU>gI zJ<#MHVsc+(a*r~(FEhEvncP>H+_)1G%NP4xF*oj?#N61ciMjJk?!_ke5|ewG$z5o2 z-(+&HHo3oHa+jLi6(;vuliP1{hfMDECig~@`&N_tc9Z*CCik5t_gyCU-6r>aCiep- z_k$+)!zTBmCii}m`zI#%&rI$oOztO5?x#)eXHD*3o7}%OxnDB5Uop8~H@W{}a{tZb ze%s{!r^)@E?q0UIXnEnnJP`?m7UoUyR|s$UocuW(<_Ld9d9)@-|MJo)L3hL}uJ?t* zK7XZC4{;*I2^8n#A}3rb9jC{?-Wl?&i~2&Ia%uP5Z0k~%rxIoBU3_bkktm%;+;Zl}+06s95& zs&Pm3A_l6WL0K)IzajwKa_8J~Uua&+LR6*<*mcgbfIs5)`AG$LxXkB^#dcPprYJ|i zS?Xb|^`1}!xd1j%OV1n$Z*b0K{CO$M+%+C&pu!YsVV+ECN~)-cgo^_~k3S=G4yru| z^ir8r1fu?OFo#I?sQ3YkUJU*!*M@H^cy3o|Mz4&s9_?)Bg&R)Mr&YkE+7mDq%EDtwvjgzzM1HE7@r z8YI#E&>Ef)*ewjOJXPQy=ot#LcnX8AR52l^eDZ{>Z2g~;t~s%P!XNM>_r(jAFIz0G zj)p^5gIMnBt38pjtM!JSg2t~fF@De;3QLZt@Kwt8LmqlQ6*Un7k_AF27MlPSiJBcVf+=fTT) z?X@^4*Bc+(ZPkBN&X}?}euOq9_nKo}S3P zN@*0YcWJ?9VPCmN@s+dM7wKJgy-GdBnlk6A$wd+8>W!wNUNyP6r-@h%=Z#lQ$jYe| za!4q3msN$~lC7*-jCD^HYbKOA4X(n-VAL@jYuA{MlSA8@DBFL{jlx%5?WqK>N6W&_ zGK@c{!?}SbsydO8a92Zsin0(YSner}R)S$XA^Z=8XuvC+fMBeN_{uyGmwsQF*x(NN zyb{tFUs8z@qSDifb{KNTvzXu{3Nr&8F z5duQQBa=d}4~wv;EQ%7J9(JcsRj)pUI zYbHn@^_O|eMS(wvVMv!2x=@(nT%;xo81E~ioF%088EvUP37qGgurZ1O{>G(C^+A*a zBuS0=pc)uNG~&b9D6Y?4wIa7Df9axSO8)eY1=2(~nDrGX$ChPsTFQZuEsXh}?7ej| zOv;Dy0492rk8+%l{!&_EP_4v-C?pGL^6n!Eh!`EE?`&@Jgh~ULHJ}wR3tsQ3Mru)z zN0&Q#^EfNqWj^$fIyqNxUO6FrC7z1s`~@w5X2>{i4e_A755!Z=K~Yy7@K?$L8(Bn5 z5%lRwEcf0)PE4J_&jpo!_H|R3OwOE-nrG`n0!y2!rXmsvvXL`pG2v^IC)7+v|C^9M zXTtS!Cagq_oRc}^%e21g^OpxUIMq}UGc_M(X6G33Rdfi!b)uX2h_C~??{$*j{UzUBe%saadd?XSdC_{s@B(D`~STD*OREW~8K zFO2*^^gK!V{83Ed`@&i20a44teTK=#>%{@!8xnmE+A=m?P+GgOfC#bRWmjUkaSk3s z!dIG*5UHnCu`rAHFg9a#vUK(G^9AJe9k6<3(ZU#)mj!BqTs2{x8S8=J3x-B`_-~OjLK`x{lX^o5tSLNI7s$Q>YY#tHg%^mk zf|D|RPVRL3F&#C8=Q;AWhZAJUo$es&RPL)4U-3kiVY##z#6d=WeIe~!7xhFTv;xM; zm$C-a54m84)WMhoX*$;*t*)LY%BmrdFHlG(&8~>TxvNQftdcoInVY}H6Y&PH@|+N! z9D!!VKru%_7eL2FoSv%4oYj~jTP4c5_=SiX@^Ey#Kwq3U!pxm2hi^d)|^8>*U!6B3^t3}Mk&kck-5A48$+ zgnAlLIToa{qs1r-jR$(18Dw`d!{};ekRz{=4UmmOdHiLeI;mNb882YZ!33aSA+;N3 zfrm1LJxD@D0RO1*2#OT?VdfjFvEfl#r%0f*K`I75Fwv8(ic#kYW9BDvgTeAz=v}J9 z^vB$1p*!N%VdasBQNBv5VwA`7iV74Ah?3sb)nFrIKsR~FbPc** zX@U=VQ5zK#`<_6BX*$?_O{cJi?07 zU^`6SATOY*!ys|4Zytw*KKxgcug{HcFtCw0$E<>d$d^aUt zSt&`<-j!F4jmfr(Ny-?!ps(u{qe)$%7cJ%q#YmSbRKk*<(Xf!#5ZzEl>ddE?-AEwT zXLS-A4Q!+_!8fUo0;1dMsl>WKR5&M2gv6@m%mf6QI5Eyc4hGH*K8!z5Mx(wPqcW1S zz!)X^thHV$l4p)$0$pQDe)T}5g2iR5^8bfrHfo+K^4ROy-~7=UgT)9!|7uWM&tEd0 z=pmen6po?Ah<`pQ0g4$tMsI7Wc%~CQiMq#fillN+1S=$vPuD>jgR;z+W$@{pR1{I6 zJXLQ4L#9c;>^}Ua_2HM(+fQehFeNE|EEU9^(JmN3L1<==Ikp0dBV|xHn?0iCaUQ<1 znmC_81p5dE)(U73Jds$c3N)u{c$rc*yv%7Ee!Wu9qbxJBl7Km7-NTfw?qN<<_vw}9 zVx{1gR9Fh7xRHJhR{O<<`dfxdA1XUV z{-ufq=6UnRKrv_Jm_g{`ZVKgHu_2N2xQlVV*+pKoq5|T9i&N+Vq03mx$?^Xsu3YkG z_Dpr;5+XK>tbimIJ>!eBA{40US;F_saX6>t497fc=^bk5@G*xg$81oI?C2THA}o4G zjvJA6bp!;P+@ZnvB!}KuBtvrb6l{^y-zgV}e2|CsZ0TX`bF=4e1wKm8=c;u&Z@m4a@?4exZvO(vHIpC~t@o4y|C#u$*N? z!ENq!ek+EzA5?4w(*$9FSV-$Xlvxjkd zCMM`782dmHk8i!c8`je?ie(9kF&!|{h|NVgZtESTw_H?=zAYC`)^=io@=To+Y0lW0}@}N2>qRRKKhp<&JU%Wef@%7S~6sBixs8uAkbQ z-+Ly^qOYZ%TsE?K>T0k`DHrEdCLS`>f=y(cUtTcrpH3v53ly4wD_L8=i{!*gOL705wsok53I;mj5>wT;vW zx_Nlvys}T~BuomN8mQZ9jbT)0m0tR6N!^&X2kW#ii@VYji3W|K9W$F);m(tIDmq5( zP18`M7*b)B(mNb2#j%T;Addhzp~b;|u$0Kg-dS~BJcis@Mw{eDh$qinu-%L~zR%bt z@VIN_kRggx@>qlGKfTGX=kB(Cv>?U_K5PzPW*hGf2BCLYO=V=B`j%@P zr2z?NOo(P;i5ZOmCl(1<`f8<6?g3z~MfNVMlFK_Xf9*18r^KRFl^(w*|x`GMd~IlaLd0DZjzdmufm zPz`z#(-(|^3a-DS|a0U$5=%j)2Q@(khv&4bOVMXPY& zpc=yzH@E<}BQhe-4D|+?ixIj4L!iRUEn}8U<3?_2!Pz@CMwP=dgG$|@++Ywc95j(d z_4!x0>v((#exOkg5Q+L#5p)-G50vuMhV0^ie14SpdQZe{xEF_@m;{xdRLt@l!2!ybIhh4e4FgK1fidQZuUbdoe`GQ3&S1vDHS-gDN(q-qLLZKER zpC^P~3-&M71(8aTA~9Nx!&negIIC2NF37VZ5zJb-rc{xky6`}kFSq@tfLp29ghI5u zkMs~y?W=*NSRV9(uos)Ip1cNUe`7zKtrs}oFKFYeuz-aJ41~bjs?tr^_(}JuWy{2} zbAD#8x$&X%#n|Mr7y6})?SF~yzy1jw<5Fo|f&XJv5@TUs?wcUQ2OlK=4UdHUzx%Vq z{Zit7{l4Vqa9A(+OSPGPcAG6NIXOAW(eo1)t1ZdV52dgt#}!2fajhIbw6+dftkSkB zTX~uwJ=|jQVH_L&^q+3W!z$2X$(}MbOUQrMV^b_^sxv!lDsGG9-M+1HfEaYibYXY& zpCATabeRyBj+;1TcK)h0`VY@L%(pDD+-UK@@Gq!r9lFticabH}jz)vyE`h)~cKM@? z_lX#02an@f5uC8qZ9DFC+40VWeK1V_D}*RPAdPE~&iQnkf9xauMNk~GFhzV-AX(U* z{e(5ApGa;?1zwu4H}@CGO9u(Z@xj72Y?!d_9gcVxW-c#Tt7GsX)W&iEva zoGt9NvxRljY+=j4Mp$a+3Tr!V`uCqNtnV%mBDh#2P0APcP5Hv+TrTYO%Y|^R5cZNn zVcC6?u#NtjNM5r>SPrid$t%7gY@5o2rL$ZlkE{?$8I{74?-h2hPl)H&ihi4_gvDMh ztfQ-iC8tL8J6R*dRzJ!V!Ns+xNIJA0wAmm;+Xi7hwLw@;*9x(8qp;`SBCM;vDQt&s zMcFqCYte1O65N7xwxUem5-C}C3hP|lXxVYEu%z!2R_89@>=NSS1IYg&k#uU0upIrN zu&w%$u+}z<2g5w988TZH{kix3NcD(qW-Dv~xmA;ggy%GZTu#p^;GcwHm~ z-#{L3qC9U3+roE6(o_Es){*}Neg28?c45bz9=i=~!G`SpORv{kKfPWLOs{9VBlUVR z4{hAhmp0`jVepZ($#;ZPlns`UFz&xeTNg*^^#c@)_d2CNcu?B7TOe)lqqOmsr?iJE zdzi9uzYD+gdfdU2_6TK?z8=TG?63o~rC@WlvLfjGjtsd#SRoSN1Yxqg&&bUcW-wHz*sI9`Q@BU#aXOW#6dmo0R=k zWv^29*OZMr==i1Ae_h#Ylzp?ZzoG16WtS-1t?W`|mnpkk*&bzAD7#YGUS<1~y;j+{ zLxo>@eYLV7dL-;uc0k!dWv^3qNZFXW;Fn$>QFc_>>y-_$gru<;v z@hR92_b`}yuOnJlfeym{19fm)tV9FncA5}2Z zV)*L{raWT!KNL*4GzsRkf+?R^et}DKtS{vh(@0e?x@lRhsgcr4t^{|yCGZnFIUR50Zy)B8xl4xym>LB@9R6m!Lp`0tpHvD3G8)f&vK&Bq)%eK!O4Z3M43ypg@8G2?``A zkf1<<0tpHvD3G8)f&vK&Bq)%eK!O4Z3M43ypg@8G2?``Akf1<<0tpHvD3G8)f&vK& zBq)%eK!O4Z3M43ypg@8G2?``Akf1<<0tpHvD3G8)f&vK&{Qr~!xw78r^}O4O8=v(S zeCW}*-%Fo<3g-P@{`xDJ_jCChqF^1uolXVw{x5%{QWms^Ft4e4~O(6nwjaYZd%01$z~&DR`EG?^Cc- z!4D}oL&1+K*rDJbE7+yr76sQU_~#04Q1H_VZdC9K3f`sQV+w9k@T&@LR`6dG+@j#O z6nt30?GnZt7Ya5kqy5;<2JabR2|Gc71O*ZlNKha_fdmB-6i84YL4gDX5)?>KAVGly z1riiUP#{5p1O*ZlNKha_fdmB-6i84YL4gDX5)?>KAVGly1riiUP#{5p1O*ZlNKha_ zfdmB-6i84YL4gDX5)?>KAVGly1riiUP#{5p1O*ZlNKha_fdmB-6i84YL4gDX5)}CV zDg~UVm=|UhE?VCLn>X@}pK%YL@JJZrUOU~wg3rZ!bD)U!ZgAB4CW}z-(XI|q$VRiOg2m&Od(7uObBKx%ublSFfB08 z!n^|WHq1vb)_%Z)`3B5Zn4iGB26GxF-2vLbtcJNAWLjcggMJeFy3*j?cf#j95qEsUiX2dd;{lpaJC$roM} z3I#$6s&UsYSn65tsTRe>3-t^OqkhlQK$*K5xfB<>!(mS-QXGo-36*)P!jY=ta(8Hh zPkMOtw2F&s+~KMaFd3`HQ&SeKV`M_%h`X$cKyiiJ$9zmal~H#HgrHYBk_sxP&u_Q_ z(TH+}Oi4xp)qxEj)S(#dCyL#rfe`5Ajs$!H?dk~yL@~-=9Vmm1|5e46o=C)3gTes} z8&-9oQWSe?*|HVNzrqu!0HkVF5eRxv%Zgyg=a0}o7>yvwijc>RLc>Bz6{sE)2-o=; z6afv&+z|#u!l<;bx;!M)Af)Hb0F^LYDyXb z1d*MpPoSdQT_=jY#VD{JmG*`sAysxnj}-e6TNF!YFcLsjKn!=aPKlVa7<8--dpu~Y z8bvfVpcme>YmkE8pwg}htVcQE5%!=QHC1|IdVTm`5*1~1hd^A|J~Dbx70MuFFydvs z!N30U;?hvSU0&u6Be`Dw+~^~s*t%PZ`w^t-`Wy*xL#*{(4!WJmfMu-@th zv^GFyHlUhl#8Zn77ni&4-8*~Tj~o_{9t9!Hz9=Jm2%>?7yl&7I4zRA?{P?ePD|kgV zIM}*)HX4p~2z#nMWzvqUFO7l?!+wK~I`5&NAfHFJ6y0n&+H5)4+IGGHN7%1_claRFQL}3&huLI_kn`Ru;1^3}zU=Ft_ll1DtZUd<+G(&yfhR}yEyw@8~*RwYRCU$t#r5lz>5D3k6_HU z=7uVlq5_w!a7VmitgyQMm7aofk3S-YdqDgv?c&fDV!n1iF}MBz5C2#f`ykhr-xw?h zKS=kD!s>B{R(jS&J^nJtlmZHfuiM3uJ21i{0si00kzc&I4f6*3qS_#&4I*x}EWW-7 znT6`aotBjm$cReOXt~K<9rcL&EI{Hk!}=9;liil(6eKSo5qEXj@@S+G(mYhY(znqg z26@HIY7rpCeg~ve_pqq%{+gBC@gyr*6U_J2ih66v9q|SHDxYszh1C}hqNuVCpIM?} zht)0`G5fHK)`WXhvzDJheQU34z5m0T5#FvzkS zgVlk^%4iJE>gaZ|_}Q~4rA_Zc?W%s=r{iApVsc5#7mP+XsMccdz#t1bj2O%R4ndFL40IXT)i<+ zEdJz>R#Qq12IyK(8OD`jFNQsk^QjbMbXzjAsDGMSxXXOizK9&{!{Q$)fl!Sbqj$8X z6md@=?vYj&=fE?vP)CR{Lk{k8+9mE!H32_JMSpxvM(^PNr`oI*ea`snRAHUkGiN-K zYML7!1J)^7=L7QpaY=>O@ShS$+@2P!6Afvgi1dGx{`%F!yv-1;HnDSx!Ku$EZfx@9rCx1DhJb;w#ipQrzC z;lK4)^gnQt|4)6aLf>X+J3>!$kQ7_-A0?{A;1Cv{F|0lvEh#Y%?X*~mD?ue>&o}!2i^%Oy}$y{D1gOU|TweMj31Ml(wNv!;3P463wymk*pIU}48MO0oD> zdXNK?*qt5{TLy>4PXLZaH8&ejDzgQNE zA6l_c<}~22b+P!ZoFi#AOmmdH-)k!nntf?Nd~Ux!Q0}X!GX_GL#(lAoc6XATSN$Yu zh1imOL(~(hlMx35@e(1Do%lDTP`n!mIoZ0ld+2Bq)qj~Uvd{e$BB12FPMLGd3BjEKjFqUC%X zAawFRJG3@j?ePS~QOsX=EbSbSG3-FUl6LFfq^(KM+fP}YZAquCEw&xj=dEv8PFk8Q zqYv1(+I9^&HMl*g#D2`yVhtX*R7WC{92t)O4u_-vq)8|H?Y5kD|mdd4&R{QBDW5& zQLuNN4p%FMShy3;5G&4D%ded4=+;icm-Dy#$@1?YxHox zf=jQ};ae44so;AQT&>_o3F9%^Hx}sef2QD!g*yB!VFwC^g(A!Mih`SN*Wv$F@LmP~ zi*Sk%%?duH;1&go!FqU`f|C{8uHYdG?ojX*MmW~E%>Nn%JGScZ^$KoK@XZR|rC{Qe z^Pl=f5ngTpun)$;t$-_#Q`+BFS1=k;r{G`zD|GkIK{U4};;4F!9ad#5d#-BE%<`DSS)Z*6e@*2jPupZM59 zl|RD7H-{6y1^coL8>#ROn100HN(X+lh;I%je$Em-?5$)ye*3`Wvu;Z;!(_hZDa+;lHo&4cNfvGMYbH%S`bJ6W^FmbAHY88!*F3|13K2qeXmk zIPtfZ>S3=LhZBFH z!k?n>4cNd}>>s1QIh^=Q75)th-+&GLjJW*G;lzjbRi-^(;Ty1lAD_QDocNm*{$&c^ zfDQcqarv9WiQk~`Usm)tU;{rse{(qT8x{W33g3Xwhi?ui{w{_8mclpS^WmGriQlB~ zaXdrzKLa-KmFM@G?_;!o)x2)5At8d;?}U<;QLq{stRzAz5z2n^M8sC{Ady198UaMem(4Rg>S%&Py7`y{2BP>aN;*8{I4i{12*vE=a=Si z;v4!8>O&~M4cNecK92t8aNSYV6{0-Q^FOjA1DZe?K_&XFnjwQ+b4cNeMio-XD z%ly~tY420`lN4;=pOe2ST;{LfTaElp;iNz3iTp9WWh}2LocK;`I5O-bReuAfAMuyc zfgdg6o5P7;U8{%HD|`cHeBvL5;m^P~hZBE%ogNlc* zf!`2^Zw@DZ?M6NSyA-|w8~9Jf;hV#WpM!&cjGF{OOa3!p13!L!V-6?2p|7LcmVF!9ad#5eSr)Nc~sfEl0oo9Mug7V*vD#5eSx)Q1w^fEl0oPCD?TMSOEO@eO?` z^{2!)V8$nYIvx1^Kkc0hm{(K3$N!D#7;uKAr1Z|C*(F-t(yQoaa1`^*n3- z>$89ByVv^fz30Ez-s`u2n;+EscItJ1mG@hz7qdR~eUO>R)cbbobw8H(XQ>ynKK0@M zuWzSb_b+)rlX|iAwXqH+GTZm<)a!mH?|)J+W_`9F>SgEs$qVp5r~8wvpTj>c?Fg

MWac>A*F!jN*dMX_6CTgLo!@7!)3-+7s25A$(Di}L?cv+0|HkQ4 zV5eTp`rIC4keSHT`*!LFjJLLJ_}!ph%=*-4vw*}8>U}%)YbIFRLnu=(M)9b}gKwvP zOFt6JnaFJ4w^LvCL2KIzJKGndXxguYPbM<;zMcBoPM?l4^D`rlU-~7{#N0f8S31ey4xV>BZ7dVdF?-w(r}ipMVoKZDZa36LT5&UsWt; zB2(|%sn>i8=U3Q&G3y(BFdp*l)GvS3u6vJbUo5?8*lXXn8~tNee?WT2(%%U!6Pf*A z?%Ant{J6DUjk4MPj#;1mzlQ}Reo(LaWa^h-z|8V0d{64dTt>1X!!Rf`)KWEely>F*J z^GRzC*$fZ>N5W)2E`$?I%Xj^gp~Gc^ko9QZ>N5~ z(+_oevGmvlCXv~H-%kA!r=RBZV(G*7eLM9loqmkdi%Zh`cIyA(^dsE%6PKj-?bLte z^hHiDE=lj(ssF+0FLnJFOW&OZBz|Og^~uz?f7aQYUQByUWGps`OucWXKGW&DIlZ_f zy>F*J%jtVNy|^U3Z>K)n>5H6RT$0|mQ{Ua`ySwc#mOdPh_;%{$zd?Tv9{*zL!{gVt zQ$Ku`-TsYS`(o*52HW4aQ(yaetA~H1Xx{@#uia(ju@-}WpZ@gpO!^ZQPD)7r|o@uQgaYa)m9?Y^D*s*9|? z(CNj}W3!kFV!BnR+qp?Eiiikodv&eLMAS zmRQ@*C{r&+(dcL6lZi~dZ>N6$5^JM>6!l`(XZsWIf51eh-nUaf@*QiNpKSGF=~o(c zLhswD&s=70M^HB3-?8*%ga0?xr=9wo_pJUc*S=W#@cPNOQ-9Fu*$mqkOHY?yCVpfD zcItn4-`a2(8oikHx&5$tOp@NWQ$OzmtIu)ApIG|pEFekm+o@l_!rHo^4*M@=eYQV= z1tfm3|Gu62oK@C_Cku>T%=*-a?fZ7>hp)E!9<1-N^lMl^;s@JTeKPg(zoS2%+5c;7 zUE0}xxcyaM`c@y=`pH;8y;%B@SO*iC?fZ7NzsBjiy6-QRzLilY^uC>X`3us2knM}5 z-_HXJiOlwWJN0EZSQ{R#HhQu2I31WIy>F*p{)zNgWcy<2Cj@%mPJMgl&$tuys25A$ zIMDlc>g5kf|48b^((g~UDrzE%GnOJCIun8_LVGt#qDFaJ^cld}I}6wUE}kOd@u zQ19ERm%l0fPpKEPKL3A~BQuey_wCfnKb8Kf)Qef4`US{LWa@o8_3~$>e=GH3)~7x^ zetkRj@_(g2EcIgPr(zvUWVY|ysW14^+Nz^Wy%BI4= zZ>Rp7pX|ENb$YS%Uzyeu?fZ7qJ_Zh~OaEW?U;e++KNskIJN5DproS-tV(DiD$FJ=4 z=e^*>gg-C+b9sF(|J=6j`dt39Twf0VxU@PL-<3JD`1r3P_-Nz3iU;iXeFWoB_E)U_ zX1X@`krCMWef#`s^$7c5^kUZM@rJKplJvfv`U0mP?et>lxeg}jeLMA&oqn&=i>2RU z)Cs+Br+&b1*7lOqi>0p}=zTl&Q=Puh>BZ8w5A?pB`rS_dw9|{FuOH}rJM~o$+Wvp- z^kV572YTO5eYVpNb$YS%;s2{|r+&WET{hwFL`m?uyo&P^#*5|RCgUm#x z-nUar;>0VkVKP_wCfzbNZ>S|6=KDx_?0FeLMB-Pqyt}=JaCe?_>c< zdf!g{@>8t7yc;ixr4NrE*V)36Q@_ONKXZDq^x^-vZ>RnTr@zMi ze~6`T6SVK!sZTr2_P?vsi%Zh`cIrnuePyQ?OCR>%xBLH}JniApm-zJ@k9V?;=kpwE zJjnS|+BH9VjbqI>^8bx?{Xcbatm~;Bj&*%g=ve;P_etNx?z_p3lhZ9f?O6WPFUj86 z+TV1n>&NAeHJ`B7vF4YyI@WwA$M@{N#_zmeLDv0^ACL9fjj{_9v?AY50Ew9=lvP7?!WMU3t9J5c>luKmsvgUN0D{E ziQ_}E#((_%BkT8#<4>~2ml=*nZnf*<^(pPT{^b1vvhD}){uNpGr|xmA=Sw(0OuOcP z`TI@Q?=!Ez$hy9wzdl+1_&i^cbw1+#0AZz~Mal<%C zAYrkYzd9Y~vMu-6-!smSvcBd&IbTfHd@$!P$+KrzJ?BHon(yTOWU}rT^ZqVb_iuT> z*67{+Th2d_HUGf*AY*smKf|%+4>(^yyXFIWJJ$Vu-p{99_v<-7M4s=~$N3tv=3_Yj zL)QEbpJyZM`8M9~BkO)1@4u0Ce~t5j+mZBACNWvKjc{cKQZ_Z(k}mE`qPu;FHiq&vi!H{uTGXfI{nAV@(-s! zI=M}*J^tulN|yg9{Uyorhot|fvEO0q)1Q$nf5mBz_51|=O=*|EDg7tO@{fGmv7R^J z^9{7?`2{|&Le}#reEx#0=PwRBuH^d9=M!kx^9S^ICd;3h{=;PX2h$&!EPrGAH-9 z_pyv7Y#JQ!sDK|2cxJ$J16~yHnt-@ZSS|G2rXq9Q-6!h=fn0Oe~0`%@(;*+kr9Hu%ax%`WrIAlWMxeMDuSXCzEr!Tuu`d_Hmw z!Dy6bPq*~m8`-;5j~cSr7l+!MJMat`vb>_f&?<9mS`XoZU0uX)Cg@CnS0!K#8 z5Yo?!=L%MsR9p07zeddv$gySafOt$-Er>^U)dClpOlYIL8ZsfsqI54BYm`3F25m*5 zSk%_YMLmmJB*L;rEsBL@jnJD6#bPy(2**nFg0M!3fN2rJVcGzx(e;RH$;fJ^V0&$1 ztQw9GE7L_}wd|s@0=$5$Q5ytgRtQhPEjFwwOD3=?3kaxYLaU<8_^1e<>PlTqWL1HQ zuNoaCh+Cv+sS&rI3EO5$@x|@K0H{%W20#s>rP_swz@&~DC^1R|go`>NQlt&`hN2f7 z734)njXHUuOQTM`{LrOQybT6C1r4x4Qd#oCq!Rr=sgVoos%WQCrsA7M42!Cxim`1? zNYlt3oC;|g1##;lFKiuxrZc=~BBrTZpunaMz38S^P%L(-UF0HeBCI=ZjTB#0WP_d} zru*+=m?E6JAGI{s@qnh04Q1#8 z(_6@4I8kRX5g=XJcEr|k(M6rbgcx<@0tTG7l?vj~OtpY9OL-F;y=$CP;khjyY}1SLg$(YV=SyjKm8M!c=f4=FXA9jR!5y+o!`uOurA2=5N zeA7qxs*c~Cg8zKehu-V)zxbw)Xkbx~TQJbzE0KB>qQEga$HcMdww`=BN&$Y_3(ad7 zFp|Zhq5?$7Pb|yFMH1*XyjLT#XHlGl7)Cq7n_gtNlc(#*oN4kgI>o4~sBbU6sw5VX zampB!8<~?=FO1+2#2ICK!s?q(SsptWw_xo!EoynE%#Io9opIfhs9=XKi7K{VW~n;a zmv25XT{7$DC2X+{#9MbNv|<{u-^83&+w;oEZYlEu0=*|78hEK4=@uJIV*_*R>MD!Z zkA3l?B6A^OueSSQ^k7G@Fjtm?wO&B*_tW6`sL-Mpcno=k1tGIQ1Sh@I|Tly>oCoBNdlwtWi|hD;51ujp0w8x%5xz z75jthNUQ>{uChM|e_%~{eS5kts$YMsM~U^Mpjea|=ae3`vF4P1b^gfrG;8UNH{Yc4 zx;r(N-uZLvx(5?6QbdvvW$G?kat;gEI7+`J9dXKq(=FY(J-+p$r$K1R8-gkDn?D+T2uJ)LF z=U!cN{QIXBqlZktZZ5L~Gbg{GC?AK4SO$NT9wrMV0H-=z8{+GEc?sZxw5JeZ{K=Zb_+dZ{eKFUl=<3 z<*a`1?(DrJ`IEJ4Z%b;IRr<)_d4mVtzj5K{Ru9yBcIYp;(ne(w>RrnUU-r{)!xrEQZuX^;R`eW}La&pEm3wFlt zKKI&wFD||MoV)-1z|bi-%scJfo7UHPzTm6_%inrA|Kqydzesy@&YN@FjX%=wthsl+ z-RM6KcN@I!VEyD?-}axi?bYeSrdGeA!?1Q0#x?oRA$PZXxY_Gn-+y|;^nTlO-Z=E| z#v>o(tXy1q-^{GEQzo}~?U$W5j=6I9%%n#uY+e3o($dsR_ARcSHFenDTbsUGw`PO6 z6U$D1>~9&>9?kAQZcO%d&H6`j0Ey@SWA=9@{&y^W^D2e{xoOwNt+CaCr5D zxidD@S$XTyGh&VY*)6(b?1}XjpET>GuO^MUx95(rTl3m3NgIE1v*ghiG+0=t!-Ex; zmY>t9@fURm)qU!<+1(23EWTy-rWG5O)qG{yo`FS|jhd8MW9jf+RSq_sxqIU`ofdvr z*tFfIbsHNG|Ey`x=6l9|dP2YU=j_Vt^7Ht05AUnBdB_tpA74CY;FI&FP1<&LjU8`a z)%k@@qxZi2=1XIm4SlEEtUcE}edYLb+V!89obt*~hkt6F(fpC7wbO{bBg*Y$Z|L4~#jQ@)!wV#y8LKiIP9#J~nC zz8tY<_`f>-j@7<)=$lDpiiS;iZ|_NqpSbz2i{3ipl1fiDeSK`1RUMiv-}!i#V_pBh z(m!x`z^k9Wao1aWx4++P??)qB&6!@i;gC67@+TgglX_Lkz=sayrF{|`GOgv)t%tmq zw(pLyJ8Cs;eQEt_i@OcmGyavfTVH%?@#epN5j(AUY{V;^Jfz4*h&w$9)}soY?6=t%W&XmKt64+^Z|~zpFuyvK?=n@nMb9tJ`LO zbkQyK>TVx&%J;w4&i$cj(yWE8I-a?=!h+fl?p}}`Yxd-I4g0pPGp1MHMbGZ(vS7&@ qRdy}C3rt8X~r_3}I6qx9dU)Gtl| literal 0 HcmV?d00001 diff --git a/test.sh b/test.sh new file mode 100644 index 00000000..d21e6c15 --- /dev/null +++ b/test.sh @@ -0,0 +1,13 @@ +#!/bin/sh + +NFDUMP=nfdump + +rm -f out1 +$NFDUMP -Gnone -q -r ../flow-archive/single.nf -o line > out1 +$NFDUMP -Gnone -q -r ../flow-archive/single.nf -o long >> out1 +$NFDUMP -Gnone -q -r ../flow-archive/single.nf -o extended >> out1 +$NFDUMP -Gnone -q -r ../flow-archive/bidir.nf -o biline >> out1 +$NFDUMP -Gnone -q -r ../flow-archive/bidir.nf -o bilong >> out1 +$NFDUMP -Gnone -q -r ../flow-archive/bidir.nf -o raw >> out1 + +diff -ru test1.txt out1 diff --git a/test1.txt b/test1.txt new file mode 100644 index 00000000..ddb5344a --- /dev/null +++ b/test1.txt @@ -0,0 +1,5975 @@ +2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:53384 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 -> 157.143.34.100:62096 29 18600 2 +2024-04-14 23:59:28.123 00:01:00.032 ICMP 8.8.8.8:0 -> 157.143.34.100:0.0 4 304 4 +2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:59579 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:59:29.049 00:00:00.000 TCP 79.110.62.11:44573 -> 157.143.34.100:6190 1 40 1 +2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:61842 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 -> 2.21.22.179:443 12 2107 2 +2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61828 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:59:16.238 00:00:00.000 TCP 193.3.53.7:59081 -> 157.143.34.100:789 1 40 1 +2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:56791 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:56069 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:55209 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:57:57.204 00:00:35.020 TCP 157.143.34.100:59650 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:58:57.901 00:00:35.008 TCP 157.143.34.100:63413 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:54:33.630 00:04:00.115 TCP 157.143.34.100:58186 -> 172.217.218.188:5228 10 840 2 +2024-04-14 23:58:14.287 00:00:00.020 UDP 216.239.35.4:123 -> 157.143.34.100:59726 1 76 2 +2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:54526 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:59:30.701 00:00:00.000 ICMP 129.82.138.31:0 -> 157.143.34.100:8.0 1 32 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:64041 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:65304 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:57459 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:58:41.598 00:00:00.010 UDP 83.150.25.25:123 -> 157.143.34.100:59868 1 76 2 +2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:64775 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:54:27.599 00:04:15.118 TCP 172.217.168.3:80 -> 157.143.34.100:59696 10 1155 2 +2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 -> 157.143.34.100:51638 13 6591 2 +2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:56896 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 -> 157.143.34.100:62151 11 4264 2 +2024-04-14 23:59:14.576 00:00:00.011 UDP 193.33.30.39:123 -> 157.143.34.100:46408 1 76 2 +2024-04-14 23:59:03.154 00:00:00.000 TCP 157.143.34.100:51943 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:59:08.059 00:00:00.000 TCP 185.165.191.27:26312 -> 157.143.34.100:1433 1 44 1 +2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 -> 157.143.34.100:59739 13 4154 2 +2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:64043 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 -> 213.144.148.130:28919 77363 4.4 M 2 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:53717 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:54:46.461 00:04:00.298 TCP 172.217.168.3:80 -> 157.143.34.100:57657 5 895 2 +2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:56559 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61573 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:54:38.798 00:04:29.864 TCP 157.143.34.100:51134 -> 142.251.31.188:5228 11 653 2 +2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:55160 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:59:22.598 00:00:00.010 UDP 77.109.132.50:123 -> 157.143.34.100:64169 1 76 2 +2024-04-14 23:59:34.639 00:00:00.000 TCP 79.110.62.75:56012 -> 157.143.34.100:5293 1 40 1 +2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 -> 157.143.34.100:59352 29 18602 2 +2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:54666 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:59:03.423 00:00:00.000 TCP 157.143.34.100:50809 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:58:41.389 00:00:00.000 TCP 162.216.149.113:51980 -> 157.143.34.100:9581 1 44 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:52026 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:62900 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:57:56.606 00:00:35.017 TCP 157.143.34.100:63078 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:59:14.683 00:00:00.000 UDP 43.163.240.155:59998 -> 157.143.34.100:11211 1 99 1 +2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:55135 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:58:28.871 00:00:00.020 UDP 216.239.35.0:123 -> 157.143.34.100:55198 1 76 2 +2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:64298 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:57:56.403 00:00:35.019 TCP 157.143.34.100:51720 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:59:14.065 00:00:00.000 TCP 95.214.27.8:48358 -> 157.143.34.100:8767 1 44 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:60801 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:57319 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:64995 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:61063 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:57:57.205 00:00:35.019 TCP 157.143.34.100:56945 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:59:20.746 00:00:00.021 UDP 157.143.34.100:2711 -> 216.239.32.10:53 1 75 2 +2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:51080 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:59:03.626 00:00:00.000 TCP 157.143.34.100:65294 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:59:03.042 00:00:00.000 TCP 157.143.34.100:53859 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:64330 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:59653 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:57:56.129 00:00:35.021 TCP 157.143.34.100:64367 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:58:48.803 00:00:00.000 TCP 35.203.210.92:51820 -> 157.143.34.100:17547 1 44 1 +2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:60616 -> 172.16.10.1:5000 1 48 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:57366 -> 172.16.10.2:5000 1 48 1 +2024-04-14 23:58:57.900 00:00:35.009 TCP 157.143.34.100:52333 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:59307 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:54845 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:58369 -> 172.16.10.2:5000 10 640 1 +2024-04-14 23:57:56.026 00:00:35.013 TCP 157.143.34.100:59696 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:58:55.834 00:00:35.020 TCP 157.143.34.100:51823 -> 172.16.10.1:5000 10 640 1 +2024-04-14 23:59:28.116 00:01:00.031 ICMP 157.143.34.100:0 -> 8.8.8.8:8.0 4 304 4 +2024-04-14 23:59:20.765 00:00:00.000 UDP 216.239.36.10:53 -> 157.143.34.100:43966 1 187 1 +2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:53384 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 -> 157.143.34.100:62096 ...AP.SF 0 29 18600 2 +2024-04-14 23:59:28.123 00:01:00.032 ICMP 8.8.8.8:0 -> 157.143.34.100:0.0 ........ 0 4 304 4 +2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:59579 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:59:29.049 00:00:00.000 TCP 79.110.62.11:44573 -> 157.143.34.100:6190 ......S. 0 1 40 1 +2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:61842 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 -> 2.21.22.179:443 CE.APRSF 0 12 2107 2 +2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61828 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:59:16.238 00:00:00.000 TCP 193.3.53.7:59081 -> 157.143.34.100:789 ......S. 0 1 40 1 +2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:56791 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:56069 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:55209 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:57:57.204 00:00:35.020 TCP 157.143.34.100:59650 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:58:57.901 00:00:35.008 TCP 157.143.34.100:63413 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:54:33.630 00:04:00.115 TCP 157.143.34.100:58186 -> 172.217.218.188:5228 ...AP... 0 10 840 2 +2024-04-14 23:58:14.287 00:00:00.020 UDP 216.239.35.4:123 -> 157.143.34.100:59726 ........ 0 1 76 2 +2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:54526 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:59:30.701 00:00:00.000 ICMP 129.82.138.31:0 -> 157.143.34.100:8.0 ........ 0 1 32 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:64041 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:65304 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:57459 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:58:41.598 00:00:00.010 UDP 83.150.25.25:123 -> 157.143.34.100:59868 ........ 0 1 76 2 +2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:64775 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:54:27.599 00:04:15.118 TCP 172.217.168.3:80 -> 157.143.34.100:59696 ...AP... 0 10 1155 2 +2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 -> 157.143.34.100:51638 ...AP.S. 0 13 6591 2 +2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:56896 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 -> 157.143.34.100:62151 ...AP.SF 0 11 4264 2 +2024-04-14 23:59:14.576 00:00:00.011 UDP 193.33.30.39:123 -> 157.143.34.100:46408 ........ 0 1 76 2 +2024-04-14 23:59:03.154 00:00:00.000 TCP 157.143.34.100:51943 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:59:08.059 00:00:00.000 TCP 185.165.191.27:26312 -> 157.143.34.100:1433 ......S. 0 1 44 1 +2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 -> 157.143.34.100:59739 ........ 0 13 4154 2 +2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:64043 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 -> 213.144.148.130:28919 ...AP..F 0 77363 4.4 M 2 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:53717 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:54:46.461 00:04:00.298 TCP 172.217.168.3:80 -> 157.143.34.100:57657 ...AP... 0 5 895 2 +2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:56559 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61573 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:54:38.798 00:04:29.864 TCP 157.143.34.100:51134 -> 142.251.31.188:5228 ...AP... 0 11 653 2 +2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:55160 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:59:22.598 00:00:00.010 UDP 77.109.132.50:123 -> 157.143.34.100:64169 ........ 0 1 76 2 +2024-04-14 23:59:34.639 00:00:00.000 TCP 79.110.62.75:56012 -> 157.143.34.100:5293 ......S. 0 1 40 1 +2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 -> 157.143.34.100:59352 ...AP.SF 0 29 18602 2 +2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:54666 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:59:03.423 00:00:00.000 TCP 157.143.34.100:50809 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:58:41.389 00:00:00.000 TCP 162.216.149.113:51980 -> 157.143.34.100:9581 ......S. 0 1 44 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:52026 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:62900 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:57:56.606 00:00:35.017 TCP 157.143.34.100:63078 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:59:14.683 00:00:00.000 UDP 43.163.240.155:59998 -> 157.143.34.100:11211 ........ 0 1 99 1 +2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:55135 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:58:28.871 00:00:00.020 UDP 216.239.35.0:123 -> 157.143.34.100:55198 ........ 0 1 76 2 +2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:64298 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:57:56.403 00:00:35.019 TCP 157.143.34.100:51720 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:59:14.065 00:00:00.000 TCP 95.214.27.8:48358 -> 157.143.34.100:8767 ......S. 0 1 44 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:60801 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:57319 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:64995 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:61063 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:57:57.205 00:00:35.019 TCP 157.143.34.100:56945 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:59:20.746 00:00:00.021 UDP 157.143.34.100:2711 -> 216.239.32.10:53 ........ 0 1 75 2 +2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:51080 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:59:03.626 00:00:00.000 TCP 157.143.34.100:65294 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:59:03.042 00:00:00.000 TCP 157.143.34.100:53859 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:64330 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:59653 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:57:56.129 00:00:35.021 TCP 157.143.34.100:64367 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:58:48.803 00:00:00.000 TCP 35.203.210.92:51820 -> 157.143.34.100:17547 ......S. 0 1 44 1 +2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:60616 -> 172.16.10.1:5000 ......S. 0 1 48 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:57366 -> 172.16.10.2:5000 ......S. 0 1 48 1 +2024-04-14 23:58:57.900 00:00:35.009 TCP 157.143.34.100:52333 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:59307 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:54845 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:58369 -> 172.16.10.2:5000 ......S. 0 10 640 1 +2024-04-14 23:57:56.026 00:00:35.013 TCP 157.143.34.100:59696 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:58:55.834 00:00:35.020 TCP 157.143.34.100:51823 -> 172.16.10.1:5000 ......S. 0 10 640 1 +2024-04-14 23:59:28.116 00:01:00.031 ICMP 157.143.34.100:0 -> 8.8.8.8:8.0 ........ 0 4 304 4 +2024-04-14 23:59:20.765 00:00:00.000 UDP 216.239.36.10:53 -> 157.143.34.100:43966 ........ 0 1 187 1 +2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:53384 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 -> 157.143.34.100:62096 ...AP.SF 0 29 18600 0 4804 641 2 +2024-04-14 23:59:28.123 00:01:00.032 ICMP 8.8.8.8:0 -> 157.143.34.100:0.0 ........ 0 4 304 0 40 76 4 +2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:59579 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:29.049 00:00:00.000 TCP 79.110.62.11:44573 -> 157.143.34.100:6190 ......S. 0 1 40 0 0 40 1 +2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:61842 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 -> 2.21.22.179:443 CE.APRSF 0 12 2107 23 32793 175 2 +2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61828 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:16.238 00:00:00.000 TCP 193.3.53.7:59081 -> 157.143.34.100:789 ......S. 0 1 40 0 0 40 1 +2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:56791 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:56069 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:55209 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:57:57.204 00:00:35.020 TCP 157.143.34.100:59650 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:57.901 00:00:35.008 TCP 157.143.34.100:63413 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:54:33.630 00:04:00.115 TCP 157.143.34.100:58186 -> 172.217.218.188:5228 ...AP... 0 10 840 0 27 84 2 +2024-04-14 23:58:14.287 00:00:00.020 UDP 216.239.35.4:123 -> 157.143.34.100:59726 ........ 0 1 76 50 30400 76 2 +2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:54526 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:30.701 00:00:00.000 ICMP 129.82.138.31:0 -> 157.143.34.100:8.0 ........ 0 1 32 0 0 32 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:64041 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:65304 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:57459 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:58:41.598 00:00:00.010 UDP 83.150.25.25:123 -> 157.143.34.100:59868 ........ 0 1 76 100 60800 76 2 +2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:64775 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:54:27.599 00:04:15.118 TCP 172.217.168.3:80 -> 157.143.34.100:59696 ...AP... 0 10 1155 0 36 115 2 +2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 -> 157.143.34.100:51638 ...AP.S. 0 13 6591 90 368727 507 2 +2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:56896 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 -> 157.143.34.100:62151 ...AP.SF 0 11 4264 4 14552 387 2 +2024-04-14 23:59:14.576 00:00:00.011 UDP 193.33.30.39:123 -> 157.143.34.100:46408 ........ 0 1 76 90 55272 76 2 +2024-04-14 23:59:03.154 00:00:00.000 TCP 157.143.34.100:51943 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:08.059 00:00:00.000 TCP 185.165.191.27:26312 -> 157.143.34.100:1433 ......S. 0 1 44 0 0 44 1 +2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 -> 157.143.34.100:59739 ........ 0 13 4154 114 291508 319 2 +2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:64043 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 -> 213.144.148.130:28919 ...AP..F 0 77363 4.4 M 408 183950 56 2 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:53717 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:54:46.461 00:04:00.298 TCP 172.217.168.3:80 -> 157.143.34.100:57657 ...AP... 0 5 895 0 29 179 2 +2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:56559 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61573 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:54:38.798 00:04:29.864 TCP 157.143.34.100:51134 -> 142.251.31.188:5228 ...AP... 0 11 653 0 19 59 2 +2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:55160 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:22.598 00:00:00.010 UDP 77.109.132.50:123 -> 157.143.34.100:64169 ........ 0 1 76 100 60800 76 2 +2024-04-14 23:59:34.639 00:00:00.000 TCP 79.110.62.75:56012 -> 157.143.34.100:5293 ......S. 0 1 40 0 0 40 1 +2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 -> 157.143.34.100:59352 ...AP.SF 0 29 18602 0 4803 641 2 +2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:54666 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:03.423 00:00:00.000 TCP 157.143.34.100:50809 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:58:41.389 00:00:00.000 TCP 162.216.149.113:51980 -> 157.143.34.100:9581 ......S. 0 1 44 0 0 44 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:52026 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:62900 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:57:56.606 00:00:35.017 TCP 157.143.34.100:63078 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:14.683 00:00:00.000 UDP 43.163.240.155:59998 -> 157.143.34.100:11211 ........ 0 1 99 0 0 99 1 +2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:55135 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:28.871 00:00:00.020 UDP 216.239.35.0:123 -> 157.143.34.100:55198 ........ 0 1 76 50 30400 76 2 +2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:64298 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:57:56.403 00:00:35.019 TCP 157.143.34.100:51720 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:14.065 00:00:00.000 TCP 95.214.27.8:48358 -> 157.143.34.100:8767 ......S. 0 1 44 0 0 44 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:60801 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:57319 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:64995 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:61063 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:57:57.205 00:00:35.019 TCP 157.143.34.100:56945 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:20.746 00:00:00.021 UDP 157.143.34.100:2711 -> 216.239.32.10:53 ........ 0 1 75 47 28571 75 2 +2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:51080 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:03.626 00:00:00.000 TCP 157.143.34.100:65294 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:03.042 00:00:00.000 TCP 157.143.34.100:53859 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:64330 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:59653 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:57:56.129 00:00:35.021 TCP 157.143.34.100:64367 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:48.803 00:00:00.000 TCP 35.203.210.92:51820 -> 157.143.34.100:17547 ......S. 0 1 44 0 0 44 1 +2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:60616 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:57366 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1 +2024-04-14 23:58:57.900 00:00:35.009 TCP 157.143.34.100:52333 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:59307 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:54845 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:58369 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:57:56.026 00:00:35.013 TCP 157.143.34.100:59696 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:58:55.834 00:00:35.020 TCP 157.143.34.100:51823 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1 +2024-04-14 23:59:28.116 00:01:00.031 ICMP 157.143.34.100:0 -> 8.8.8.8:8.0 ........ 0 4 304 0 40 76 4 +2024-04-14 23:59:20.765 00:00:00.000 UDP 216.239.36.10:53 -> 157.143.34.100:43966 ........ 0 1 187 0 0 187 1 +2024-04-15 00:03:25.950 00:00:00.235 TCP 157.143.34.100:56142 <-> 54.78.190.126:443 12 12 6732 1369 2 +2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 <-> 157.143.34.100:62096 31 29 6893 18600 2 +2024-04-15 00:03:01.359 00:00:00.235 TCP 104.22.15.70:443 <-> 157.143.34.100:58020 12 10 2982 5716 2 +2024-04-15 00:06:22.130 00:00:00.104 UDP 172.217.168.42:443 <-> 157.143.34.100:59255 11 11 4134 4142 2 +2024-04-15 00:05:44.685 00:00:30.997 TCP 17.248.209.68:443 <-> 157.143.34.100:58880 32 29 6945 18601 2 +2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 <-> 2.21.22.179:443 14 12 11839 2107 2 +2024-04-15 00:03:25.444 00:00:00.461 TCP 104.22.15.70:443 <-> 157.143.34.100:61719 12 14 1547 8683 2 +2024-04-15 00:06:24.093 00:00:00.150 TCP 172.217.168.42:443 <-> 157.143.34.100:51654 0 16 0 8224 1 +2024-04-15 00:05:43.067 00:00:31.027 TCP 13.224.103.88:443 <-> 157.143.34.100:60765 13 11 1562 7425 2 +2024-04-15 00:02:30.187 00:00:31.035 TCP 17.248.209.70:443 <-> 157.143.34.100:50515 35 31 7113 18713 2 +2024-04-15 00:06:22.740 00:00:00.127 TCP 172.217.168.42:443 <-> 157.143.34.100:54951 0 9 0 6256 1 +2024-04-15 00:06:21.134 00:00:00.091 TCP 172.217.168.42:443 <-> 157.143.34.100:65089 8 7 1069 6187 2 +2024-04-15 00:04:40.006 00:00:31.014 TCP 17.248.209.68:443 <-> 157.143.34.100:53757 34 30 7061 18660 2 +2024-04-15 00:03:37.356 00:00:00.180 TCP 13.224.103.47:443 <-> 157.143.34.100:63066 13 12 1676 7012 2 +2024-04-15 00:06:23.422 00:00:00.260 TCP 172.217.168.3:443 <-> 157.143.34.100:51203 0 10 0 5830 1 +2024-04-15 00:06:21.097 00:00:00.494 UDP 172.217.168.42:443 <-> 157.143.34.100:53011 32 29 10776 9134 2 +2024-04-14 23:59:33.733 00:05:00.280 TCP 157.143.34.100:58186 <-> 172.217.218.188:5228 18 12 1098 1008 2 +2024-04-15 00:06:23.212 00:00:00.043 TCP 172.217.168.42:443 <-> 157.143.34.100:59891 0 7 0 6183 1 +2024-04-14 23:59:48.800 00:00:30.957 TCP 17.248.209.66:443 <-> 157.143.34.100:56527 32 29 6945 18599 2 +2024-04-15 00:01:10.411 00:04:00.118 TCP 172.217.168.46:443 <-> 157.143.34.100:61354 22 20 6831 2568 2 +2024-04-15 00:06:22.291 00:00:00.082 UDP 172.217.168.42:443 <-> 157.143.34.100:61593 0 12 0 4310 1 +2024-04-15 00:04:21.362 00:00:01.427 TCP 157.143.34.100:61426 <-> 2.21.22.179:443 14 12 11736 2093 2 +2024-04-15 00:06:13.946 00:00:00.163 TCP 172.217.168.46:443 <-> 157.143.34.100:62402 14 13 2093 9207 2 +2024-04-14 23:54:27.599 00:10:00.268 TCP 172.217.168.3:80 <-> 157.143.34.100:59696 31 21 4672 2362 4 +2024-04-15 00:03:02.757 00:00:31.032 TCP 17.248.209.70:443 <-> 157.143.34.100:56357 32 29 6945 18599 2 +2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 <-> 157.143.34.100:62151 11 11 1934 4264 2 +2024-04-15 00:06:23.300 00:00:00.068 UDP 172.217.168.46:443 <-> 157.143.34.100:65143 0 10 0 4065 1 +2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 <-> 157.143.34.100:51638 10 13 2112 6591 2 +2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 <-> 157.143.34.100:59739 13 13 4781 4154 2 +2024-04-15 00:04:37.438 00:00:30.643 TCP 17.171.47.23:443 <-> 157.143.34.100:61655 15 20 3579 16585 2 +2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 <-> 213.144.148.130:28919 114757 77363 160.9 M 4.4 M 2 +2024-04-15 00:06:22.149 00:00:00.101 UDP 172.217.168.42:443 <-> 157.143.34.100:51648 0 13 0 7924 1 +2024-04-15 00:06:22.156 00:00:00.080 UDP 172.217.168.42:443 <-> 157.143.34.100:62094 0 11 0 4235 1 +2024-04-15 00:03:35.178 00:00:30.994 TCP 17.248.209.70:443 <-> 157.143.34.100:58109 32 31 7510 18717 2 +2024-04-15 00:04:07.739 00:00:30.996 TCP 17.248.209.68:443 <-> 157.143.34.100:54177 33 29 6997 18600 2 +2024-04-14 23:54:46.461 00:09:00.639 TCP 157.143.34.100:57657 <-> 172.217.168.3:80 0 20 0 4330 2 +2024-04-15 00:03:37.183 00:00:00.181 TCP 13.224.103.47:443 <-> 157.143.34.100:62379 12 12 1574 7405 2 +2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 <-> 157.143.34.100:59352 33 29 7661 18602 2 +2024-04-15 00:00:21.008 00:00:31.018 TCP 17.248.209.66:443 <-> 157.143.34.100:62570 31 29 6893 18601 2 +2024-04-15 00:01:25.509 00:00:30.947 TCP 17.248.209.70:443 <-> 157.143.34.100:50258 33 29 6997 18599 2 +2024-04-15 00:04:37.481 00:00:01.097 TCP 157.143.34.100:58134 <-> 17.253.15.204:443 13 12 6168 1668 2 +2024-04-15 00:06:21.236 00:00:00.995 UDP 172.217.168.42:443 <-> 157.143.34.100:61866 0 20 0 5794 1 +2024-04-15 00:01:09.800 00:00:00.348 TCP 157.143.34.100:61318 <-> 142.250.203.115:443 11 12 5919 1657 2 +2024-04-15 00:00:53.217 00:00:30.938 TCP 17.248.209.66:443 <-> 157.143.34.100:57665 31 28 6893 18476 2 +2024-04-15 00:01:57.818 00:00:30.998 TCP 17.248.209.70:443 <-> 157.143.34.100:53916 33 29 7009 18601 2 +2024-04-15 00:02:44.996 00:00:06.716 TCP 52.48.41.28:443 <-> 157.143.34.100:59373 20 18 2131 4295 2 +2024-04-14 23:59:16.526 00:00:31.011 TCP 17.248.209.66:443 <-> 157.143.34.100:62179 32 29 6945 18600 2 +2024-04-15 00:03:26.152 00:00:00.227 TCP 157.143.34.100:53018 <-> 54.78.190.126:443 11 12 7222 1355 2 +2024-04-15 00:06:21.700 00:00:00.521 UDP 172.217.168.42:443 <-> 157.143.34.100:59480 21 26 5602 14779 2 +2024-04-15 00:03:37.356 00:00:00.173 TCP 13.224.103.47:443 <-> 157.143.34.100:60460 12 12 1634 7012 2 +2024-04-15 00:05:12.425 00:00:30.973 TCP 17.248.209.68:443 <-> 157.143.34.100:53730 32 29 6945 18529 2 +2024-04-15 00:03:26.344 00:00:00.233 TCP 157.143.34.100:54916 <-> 54.78.190.126:443 12 13 6786 1409 2 +2024-04-15 00:06:23.187 00:00:00.447 UDP 172.217.168.42:443 <-> 157.143.34.100:63665 0 20 0 7353 1 +2024-04-15 00:03:10.588 00:00:37.586 TCP 157.143.34.100:51573 <-> 35.231.208.158:443 8 10 3814 1602 2 +2024-04-15 00:03:25.950 00:00:00.235 TCP 157.143.34.100:56142 <-> 54.78.190.126:443 ...AP.SF 0 12 12 6732 1369 2 +2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 <-> 157.143.34.100:62096 ...AP.SF 0 31 29 6893 18600 2 +2024-04-15 00:03:01.359 00:00:00.235 TCP 104.22.15.70:443 <-> 157.143.34.100:58020 ...AP.SF 0 12 10 2982 5716 2 +2024-04-15 00:06:22.130 00:00:00.104 UDP 172.217.168.42:443 <-> 157.143.34.100:59255 ........ 0 11 11 4134 4142 2 +2024-04-15 00:05:44.685 00:00:30.997 TCP 17.248.209.68:443 <-> 157.143.34.100:58880 ...AP.SF 0 32 29 6945 18601 2 +2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 <-> 2.21.22.179:443 CE.APRSF 0 14 12 11839 2107 2 +2024-04-15 00:03:25.444 00:00:00.461 TCP 104.22.15.70:443 <-> 157.143.34.100:61719 ...AP.SF 0 12 14 1547 8683 2 +2024-04-15 00:06:24.093 00:00:00.150 TCP 172.217.168.42:443 <-> 157.143.34.100:51654 ...AP.S. 0 0 16 0 8224 1 +2024-04-15 00:05:43.067 00:00:31.027 TCP 13.224.103.88:443 <-> 157.143.34.100:60765 ...AP.SF 0 13 11 1562 7425 2 +2024-04-15 00:02:30.187 00:00:31.035 TCP 17.248.209.70:443 <-> 157.143.34.100:50515 ...AP.SF 0 35 31 7113 18713 2 +2024-04-15 00:06:22.740 00:00:00.127 TCP 172.217.168.42:443 <-> 157.143.34.100:54951 ...AP.S. 0 0 9 0 6256 1 +2024-04-15 00:06:21.134 00:00:00.091 TCP 172.217.168.42:443 <-> 157.143.34.100:65089 ...AP.S. 0 8 7 1069 6187 2 +2024-04-15 00:04:40.006 00:00:31.014 TCP 17.248.209.68:443 <-> 157.143.34.100:53757 ...AP.SF 0 34 30 7061 18660 2 +2024-04-15 00:03:37.356 00:00:00.180 TCP 13.224.103.47:443 <-> 157.143.34.100:63066 ...AP.SF 0 13 12 1676 7012 2 +2024-04-15 00:06:23.422 00:00:00.260 TCP 172.217.168.3:443 <-> 157.143.34.100:51203 ...AP.S. 0 0 10 0 5830 1 +2024-04-15 00:06:21.097 00:00:00.494 UDP 172.217.168.42:443 <-> 157.143.34.100:53011 ........ 0 32 29 10776 9134 2 +2024-04-14 23:59:33.733 00:05:00.280 TCP 157.143.34.100:58186 <-> 172.217.218.188:5228 ...AP... 0 18 12 1098 1008 2 +2024-04-15 00:06:23.212 00:00:00.043 TCP 172.217.168.42:443 <-> 157.143.34.100:59891 ...AP.S. 0 0 7 0 6183 1 +2024-04-14 23:59:48.800 00:00:30.957 TCP 17.248.209.66:443 <-> 157.143.34.100:56527 ...AP.SF 0 32 29 6945 18599 2 +2024-04-15 00:01:10.411 00:04:00.118 TCP 172.217.168.46:443 <-> 157.143.34.100:61354 ...AP.SF 0 22 20 6831 2568 2 +2024-04-15 00:06:22.291 00:00:00.082 UDP 172.217.168.42:443 <-> 157.143.34.100:61593 ........ 0 0 12 0 4310 1 +2024-04-15 00:04:21.362 00:00:01.427 TCP 157.143.34.100:61426 <-> 2.21.22.179:443 CE.APRSF 0 14 12 11736 2093 2 +2024-04-15 00:06:13.946 00:00:00.163 TCP 172.217.168.46:443 <-> 157.143.34.100:62402 ...AP.SF 0 14 13 2093 9207 2 +2024-04-14 23:54:27.599 00:10:00.268 TCP 172.217.168.3:80 <-> 157.143.34.100:59696 ...AP... 0 31 21 4672 2362 4 +2024-04-15 00:03:02.757 00:00:31.032 TCP 17.248.209.70:443 <-> 157.143.34.100:56357 ...AP.SF 0 32 29 6945 18599 2 +2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 <-> 157.143.34.100:62151 ...AP.SF 0 11 11 1934 4264 2 +2024-04-15 00:06:23.300 00:00:00.068 UDP 172.217.168.46:443 <-> 157.143.34.100:65143 ........ 0 0 10 0 4065 1 +2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 <-> 157.143.34.100:51638 ...AP.S. 0 10 13 2112 6591 2 +2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 <-> 157.143.34.100:59739 ........ 0 13 13 4781 4154 2 +2024-04-15 00:04:37.438 00:00:30.643 TCP 17.171.47.23:443 <-> 157.143.34.100:61655 .E.APRSF 0 15 20 3579 16585 2 +2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 <-> 213.144.148.130:28919 ...AP..F 0 114757 77363 160.9 M 4.4 M 2 +2024-04-15 00:06:22.149 00:00:00.101 UDP 172.217.168.42:443 <-> 157.143.34.100:51648 ........ 0 0 13 0 7924 1 +2024-04-15 00:06:22.156 00:00:00.080 UDP 172.217.168.42:443 <-> 157.143.34.100:62094 ........ 0 0 11 0 4235 1 +2024-04-15 00:03:35.178 00:00:30.994 TCP 17.248.209.70:443 <-> 157.143.34.100:58109 ...AP.SF 0 32 31 7510 18717 2 +2024-04-15 00:04:07.739 00:00:30.996 TCP 17.248.209.68:443 <-> 157.143.34.100:54177 ...AP.SF 0 33 29 6997 18600 2 +2024-04-14 23:54:46.461 00:09:00.639 TCP 157.143.34.100:57657 <-> 172.217.168.3:80 ...AP... 0 0 20 0 4330 2 +2024-04-15 00:03:37.183 00:00:00.181 TCP 13.224.103.47:443 <-> 157.143.34.100:62379 ...AP.SF 0 12 12 1574 7405 2 +2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 <-> 157.143.34.100:59352 ...AP.SF 0 33 29 7661 18602 2 +2024-04-15 00:00:21.008 00:00:31.018 TCP 17.248.209.66:443 <-> 157.143.34.100:62570 ...AP.SF 0 31 29 6893 18601 2 +2024-04-15 00:01:25.509 00:00:30.947 TCP 17.248.209.70:443 <-> 157.143.34.100:50258 ...AP.SF 0 33 29 6997 18599 2 +2024-04-15 00:04:37.481 00:00:01.097 TCP 157.143.34.100:58134 <-> 17.253.15.204:443 CE.APRSF 0 13 12 6168 1668 2 +2024-04-15 00:06:21.236 00:00:00.995 UDP 172.217.168.42:443 <-> 157.143.34.100:61866 ........ 0 0 20 0 5794 1 +2024-04-15 00:01:09.800 00:00:00.348 TCP 157.143.34.100:61318 <-> 142.250.203.115:443 ...AP.SF 0 11 12 5919 1657 2 +2024-04-15 00:00:53.217 00:00:30.938 TCP 17.248.209.66:443 <-> 157.143.34.100:57665 ...AP.SF 0 31 28 6893 18476 2 +2024-04-15 00:01:57.818 00:00:30.998 TCP 17.248.209.70:443 <-> 157.143.34.100:53916 ...AP.SF 0 33 29 7009 18601 2 +2024-04-15 00:02:44.996 00:00:06.716 TCP 52.48.41.28:443 <-> 157.143.34.100:59373 ...AP.SF 0 20 18 2131 4295 2 +2024-04-14 23:59:16.526 00:00:31.011 TCP 17.248.209.66:443 <-> 157.143.34.100:62179 ...AP.SF 0 32 29 6945 18600 2 +2024-04-15 00:03:26.152 00:00:00.227 TCP 157.143.34.100:53018 <-> 54.78.190.126:443 ...AP.SF 0 11 12 7222 1355 2 +2024-04-15 00:06:21.700 00:00:00.521 UDP 172.217.168.42:443 <-> 157.143.34.100:59480 ........ 0 21 26 5602 14779 2 +2024-04-15 00:03:37.356 00:00:00.173 TCP 13.224.103.47:443 <-> 157.143.34.100:60460 ...AP.SF 0 12 12 1634 7012 2 +2024-04-15 00:05:12.425 00:00:30.973 TCP 17.248.209.68:443 <-> 157.143.34.100:53730 ...AP.SF 0 32 29 6945 18529 2 +2024-04-15 00:03:26.344 00:00:00.233 TCP 157.143.34.100:54916 <-> 54.78.190.126:443 ...AP.SF 0 12 13 6786 1409 2 +2024-04-15 00:06:23.187 00:00:00.447 UDP 172.217.168.42:443 <-> 157.143.34.100:63665 ........ 0 0 20 0 7353 1 +2024-04-15 00:03:10.588 00:00:37.586 TCP 157.143.34.100:51573 <-> 35.231.208.158:443 ...AP.SF 0 8 10 3814 1602 2 + +Flow Record: + RecordCount = 1 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 353 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132205950 [2024-04-15 00:03:25.950] + last = 1713132206185 [2024-04-15 00:03:26.185] + received at = 1713132277673 [2024-04-15 00:04:37.673] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 56142 + dst port = 443 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 1369 + src addr = 157.143.34.100 + dst addr = 54.78.190.126 + out packets = 12 + out bytes = 6732 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 33.772 ms + srv latency = 0.000 ms + app latency = 0.192 ms + in payload = 173 + TLS version = TLS 1.2 + sni name = www.qobuz.com + ja3 hash = e4d448cdfe06dc1243c1eb026c74ac9a + ja4 hash = t12d220700_0d4ca5d4ec72_3304d8368043 +16 03 03 00 A8 01 00 00 A4 03 03 66 1C 52 AD 5A | ...........f.R.Z +BC 09 1D B4 3F 77 22 C0 76 9B 66 08 AC 30 E0 84 | ....?w".v.f..0.. +8D FA D9 E8 DE 46 3E 36 85 38 C2 00 00 2C 00 FF | .....F>6.8...,.. +C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0 +C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'.......... +00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 4F 00 00 | .=.<.5./.....O.. +00 12 00 10 00 00 0D 77 77 77 2E 71 6F 62 75 7A | .......www.qobuz +2E 63 6F 6D 00 0A 00 08 00 06 00 17 00 18 00 19 | .com............ +00 0B 00 02 01 00 00 0D 00 12 00 10 04 01 02 01 | ................ +05 01 06 01 04 03 02 03 05 03 06 03 00 05 00 05 | ................ +01 00 00 00 00 00 12 00 00 00 17 00 00 | ............. + +Flow Record: + RecordCount = 2 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131924315 [2024-04-14 23:58:44.315] + last = 1713131955289 [2024-04-14 23:59:15.289] + received at = 1713132056973 [2024-04-15 00:00:56.973] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 62096 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18600 + src addr = 17.248.209.71 + dst addr = 157.143.34.100 + out packets = 31 + out bytes = 6893 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 20.436 ms + srv latency = 0.000 ms + app latency = 0.511 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 49 BA 87 66 52 | ....z...v..I..fR +4C C5 4D 23 B4 8F 17 EC 17 67 CE 2D 85 2A 3C 0B | L.M#.....g.-.*<. +74 6A FF D8 6B 20 CD DD 52 17 08 20 09 40 D6 50 | tj..k ..R.. .@.P +CA B4 ED E7 95 E3 79 7A A7 F5 8D 69 87 C5 D1 2F | ......yz...i.../ +DE F0 4E 7D 59 4B B2 E2 25 00 7A 7C 13 02 00 00 | ..N}YK..%.z|.... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 31 | ..+.....3.$... 1 +AA E8 62 9E AD 02 D2 0C 46 E2 E1 07 4B 5F DA 99 | ..b.....F...K_.. +72 42 F3 E1 89 E0 A4 C9 06 CA D4 D9 5D 19 3C 14 | rB..........].<. +03 03 00 01 01 17 03 03 00 2A 6F 9E 45 C3 4E 87 | .........*o.E.N. +6C 98 B1 8D 44 F1 9F 33 EF 92 F6 EA 08 48 96 FE | l...D..3.....H.. +30 81 44 12 6E 90 45 67 86 02 E7 FD 35 A4 B8 B5 | 0.D.n.Eg....5... +91 28 7A 46 17 03 03 11 25 82 A9 6B DB 38 8B DB | .(zF....%..k.8.. +00 69 94 CC 41 FC FA 18 FD 43 DC D5 93 27 47 13 | .i..A....C...'G. +7E 9A 79 16 26 19 2F CE 51 CD 31 FB C2 56 9C 15 | ~.y.&./.Q.1..V.. +F8 8C 06 8E D5 A2 2D 03 89 6E C2 4F 55 A2 70 0D | ......-..n.OU.p. +A1 B6 3D 8A 82 49 15 57 54 A2 67 64 FB 13 A8 9A | ..=..I.WT.gd.... +AE A8 89 E4 66 87 16 05 C7 A3 10 5B DC 26 1B B2 | ....f......[.&.. +6F 01 72 7F 4D 19 BE 21 E0 43 C5 DA 23 35 E0 EB | o.r.M..!.C..#5.. +3E 70 C7 66 7E C3 B4 D4 34 F6 F1 FE 26 5F B6 D5 | >p.f~...4...&_.. +E6 26 B9 0E 16 00 B2 1C 42 41 F3 4E 8C E1 64 8D | .&......BA.N..d. +9A 2D 47 52 B9 11 17 8E 36 9B 78 EF 55 91 BB 3D | .-GR....6.x.U..= +B7 58 5D F0 BB FA 24 53 94 C3 A1 ED C1 C8 ED 72 | .X]...$S.......r +C0 85 ED F3 C9 35 C1 D4 56 7D 0A 91 B0 41 5E 21 | .....5..V}...A^! +19 BE 80 04 BF E7 D7 AB 14 D7 CD 83 56 3A BE 9B | ............V:.. +F7 29 69 15 92 30 25 46 6C 9B FF 0B 15 16 E5 8E | .)i..0%Fl....... +22 F9 AC 33 AA BD 8A BA 1D E3 BB 4A 9D E5 31 5B | "..3.......J..1[ +57 5A 6A E2 86 3F 24 91 D0 0B DD 76 7A 7B 69 33 | WZj..?$....vz{i3 +74 48 81 07 65 AD 07 EB 74 00 2E 58 D2 7B A6 FA | tH..e...t..X.{.. +04 DD D6 7A F4 EE 41 06 A5 9C CF 89 B1 36 A5 0C | ...z..A......6.. +C1 A6 91 D5 DE 3B 0C A3 A5 27 11 66 0C A5 D8 FB | .....;...'.f.... +E4 D0 52 28 4A 20 84 AB 4E 85 D4 3B A1 71 36 92 | ..R(J ..N..;.q6. +3D A0 C1 71 F8 A5 E1 73 66 BE 42 76 57 D5 89 48 | =..q...sf.BvW..H +76 EB 09 3C 24 ED F4 23 93 38 CF 2B BE F1 54 6E | v..<$..#.8.+..Tn +11 39 6E 51 7B 86 B8 9D 7A E4 61 58 FF F7 0D 9A | .9nQ{...z.aX.... +90 BA A0 E2 E8 99 1E 5E 2C 34 56 C5 37 A4 8F E5 | .......^,4V.7... +B6 05 76 E3 E0 F3 2A 3E FD FF D2 C2 04 5B 63 10 | ..v...*>.....[c. +A5 1B C7 9A D5 07 A2 CB 0E C2 34 D3 C1 F3 BB 4F | ..........4....O +45 AB C0 98 AF A0 23 34 46 47 29 DD D4 87 91 04 | E.....#4FG)..... +24 EB 44 CD 86 EB 1F D5 6F D1 28 37 03 B1 58 ED | $.D.....o.(7..X. +C4 2D 34 0A 2F A3 28 B3 68 B5 CB 0F 54 F3 9A 75 | .-4./.(.h...T..u +BB C3 D3 E6 CA A4 D0 73 D0 8B F1 78 EC CB BE F7 | .......s...x.... +97 44 5C B1 30 03 22 4C CF 0D E1 26 35 ED 95 15 | .D\.0."L...&5... +46 9D FF 9C AB CD 32 6E 51 A2 F5 51 C6 C0 E3 D5 | F.....2nQ..Q.... +8D F8 65 B8 10 BA F7 3A 9A 3A 62 1D F1 6C C5 80 | ..e....:.:b..l.. +44 C7 02 47 70 65 FA 38 2C 7F AB FF 7A 51 A2 73 | D..Gpe.8,...zQ.s +A2 B0 32 CA BF 14 18 AA 51 71 43 4A 1E 36 D4 9A | ..2.....QqCJ.6.. +DD 52 E8 F0 D1 1D 03 14 F5 CA EC F1 05 92 25 78 | .R............%x +79 9D 90 F3 EC 7E A4 12 9C 04 29 05 55 D7 9B C5 | y....~....).U... +60 CA 3D 82 C5 D4 CF C5 89 F6 F0 22 60 BE A9 BB | `.=........"`... +56 47 1D 32 90 B3 31 D3 49 17 4C DC 55 DB 74 31 | VG.2..1.I.L.U.t1 +D6 88 CA 28 D6 CB 87 F0 95 C8 C9 D6 B4 F7 FC 8D | ...(............ +0B 49 1E 2E 44 1E 04 FC 07 82 30 49 AB 75 8E 22 | .I..D.....0I.u." +AF C8 1F B8 D4 2B 1A ED 28 07 B5 F7 24 1F 41 9F | .....+..(...$.A. +A1 B2 A5 32 4A D5 42 5C A4 52 6A 52 D7 7B 07 CA | ...2J.B\.RjR.{.. +4A 06 11 7C 32 3F 54 06 9C C5 8B B5 3E 9A AE 3E | J..|2?T.....>..> +BD A4 17 22 15 68 69 29 F6 46 B1 B1 92 70 35 88 | ...".hi).F...p5. +1F FE E9 2D 58 13 AA 84 0B C3 53 39 17 C8 52 38 | ...-X.....S9..R8 +7F 42 EF 10 20 09 98 B5 A1 0A 50 CF C4 0B 0D E0 | .B.. .....P..... +9A F6 2E 5C 18 C2 9D F8 CB 30 BD 35 28 76 A5 F8 | ...\.....0.5(v.. +93 2C A0 F9 5A E5 1F 2C 37 42 BF D3 42 72 61 E9 | .,..Z..,7B..Bra. +06 26 71 61 07 BE 99 78 58 CB 30 9A 0B 78 81 71 | .&qa...xX.0..x.q +74 EF 2C 03 34 CD 1F E3 A1 55 45 38 70 5F 0B F9 | t.,.4....UE8p_.. +B6 9E 20 4A 13 21 DD 50 91 2B 57 16 96 7A 50 62 | .. J.!.P.+W..zPb +9E 55 58 54 18 24 82 9E 0D D7 DE 91 C8 22 B5 DD | .UXT.$.......".. +20 8B 36 47 DF D2 7C 50 3C CF ED 97 08 50 31 A4 | .6G..|P<....P1. +76 F2 BD ED 34 26 32 70 A2 A3 F4 EC C9 1C C7 55 | v...4&2p.......U +9C 17 99 35 90 B5 36 27 76 B9 01 31 D5 35 69 B0 | ...5..6'v..1.5i. +C6 4D 5A FC 90 A4 52 2E 67 F9 7A 06 6C B7 3E A8 | .MZ...R.g.z.l.>. +99 A3 43 1A FF C1 77 16 0B 42 B7 87 CC C7 67 A0 | ..C...w..B....g. +A9 80 83 DB 2C 7C 57 79 DE 2F FC ED FC F0 C5 AB | ....,|Wy./...... +6D 61 DE 5F 1B FB 5E C8 FC C0 26 14 1B 0B 98 42 | ma._..^...&....B +22 66 61 04 3A 8C E7 93 61 27 34 D8 2E 37 CB F5 | "fa.:...a'4..7.. +F4 5A D7 75 9E C1 DE 3E CD 7C 36 31 1D 69 27 D8 | .Z.u...>.|61.i'. +38 0A A0 B0 C5 72 26 8C 6E 9A D5 21 5F EE 18 10 | 8....r&.n..!_... +4E B3 BE EC 75 74 B8 17 EE 92 D9 C0 F0 4D 82 10 | N...ut.......M.. +49 D4 54 25 C3 BE 6D F9 21 A6 19 3A 3F 22 88 97 | I.T%..m.!..:?".. +AF 5C B9 23 88 C6 06 DA F7 63 38 D3 75 D8 39 E9 | .\.#.....c8.u.9. +C2 DA 1A B2 AC 86 87 82 84 0C 5C 12 F0 F4 96 55 | ..........\....U +A6 22 49 61 23 79 2C B1 41 5F A3 A6 9D C5 72 5E | ."Ia#y,.A_....r^ +CA 3B A3 87 EB 51 50 59 EF 9E C7 2E FD 8E C6 E5 | .;...QPY........ +E4 28 78 F8 BC 57 23 EC 68 C8 36 BF A7 74 A2 8D | .(x..W#.h.6..t.. +4D 08 18 7C 0B EE 94 FF 3A AD 08 1E 1A B9 51 3E | M..|....:.....Q> +A5 1F C9 69 60 09 6D 30 33 0E A1 97 1D 74 68 EC | ...i`.m03....th. +4B 8D 3D 75 54 65 55 98 A7 56 A2 7F C4 74 AD 82 | K.=uTeU..V...t.. +65 14 01 AE 2C F1 C0 28 30 D7 E1 52 EA 9E 85 3C | e...,..(0..R...< +E7 9B 4C CC 2F 06 32 ED 39 44 ED 98 7B 42 30 BA | ..L./.2.9D..{B0. +43 97 3F D2 21 FC 23 68 F0 DA DB 54 A8 AB B1 2A | C.?.!.#h...T...* +B4 55 D4 46 61 63 F2 84 53 F0 8E 48 37 CF B4 42 | .U.Fac..S..H7..B +AB 71 22 4A B0 3B 85 52 52 65 1F 54 3F FF DB D9 | .q"J.;.RRe.T?... +6F A0 AB 75 52 5E B5 69 0B A6 0B 83 3E 43 E6 49 | o..uR^.i....>C.I +A2 5F 22 40 57 2A 7B A3 | ._"@W*{. + +Flow Record: + RecordCount = 3 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132181359 [2024-04-15 00:03:01.359] + last = 1713132181594 [2024-04-15 00:03:01.594] + received at = 1713132277671 [2024-04-15 00:04:37.671] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 58020 + src tos = 0 + fwd status = 0 + in packets = 10 + in bytes = 5716 + src addr = 104.22.15.70 + dst addr = 157.143.34.100 + out packets = 12 + out bytes = 2982 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 20.021 ms + srv latency = 0.000 ms + app latency = 2.690 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 22a29273c84f24c87ea605eb553e276c + ja4s hash = t130500_c02b_926e7c93a85d +16 03 03 00 63 02 00 00 5F 03 03 66 1C 52 95 D7 | ....c..._..f.R.. +7D 9A A6 14 66 72 15 EE D8 CD 5A B5 8C C2 59 A9 | }...fr....Z...Y. +C1 BE 8B 44 4F 57 4E 47 52 44 01 20 41 EB 3F 41 | ...DOWNGRD. A.?A +3F 9A 01 89 2E FB 2E 77 FA 6C CF 71 72 88 C9 77 | ?......w.l.qr..w +62 18 07 A8 8F 8F 63 B2 FF E6 E6 FC C0 2B 00 00 | b.....c......+.. +17 00 00 00 00 00 17 00 00 FF 01 00 01 00 00 0B | ................ +00 02 01 00 00 05 00 00 16 03 03 10 2A 0B 00 10 | ............*... +26 00 10 23 00 03 85 30 82 03 81 30 82 03 07 A0 | &..#...0...0.... +03 02 01 02 02 12 04 83 EA 68 06 B1 AD EA 76 77 | .........h....vw +39 76 37 6B A8 36 09 DB 30 0A 06 08 2A 86 48 CE | 9v7k.6..0...*.H. +3D 04 03 03 30 32 31 0B 30 09 06 03 55 04 06 13 | =...021.0...U... +02 55 53 31 16 30 14 06 03 55 04 0A 13 0D 4C 65 | .US1.0...U....Le +74 27 73 20 45 6E 63 72 79 70 74 31 0B 30 09 06 | t's Encrypt1.0.. +03 55 04 03 13 02 45 31 30 1E 17 0D 32 34 30 34 | .U....E10...2404 +31 34 30 30 31 39 31 30 5A 17 0D 32 34 30 37 31 | 14001910Z..24071 +33 30 30 31 39 30 39 5A 30 1B 31 19 30 17 06 03 | 3001909Z0.1.0... +55 04 03 13 10 61 70 69 2E 72 6F 6F 6E 6C 61 62 | U....api.roonlab +73 2E 6E 65 74 30 59 30 13 06 07 2A 86 48 CE 3D | s.net0Y0...*.H.= +02 01 06 08 2A 86 48 CE 3D 03 01 07 03 42 00 04 | ....*.H.=....B.. +03 24 E9 47 62 77 D9 B4 96 C5 B3 C4 89 CE 0C 90 | .$.Gbw.......... +20 5F E8 D8 AB 0E E0 42 26 48 8D DE A1 16 8F 3A | _.....B&H.....: +B9 59 C4 D4 ED 39 D3 C0 2A B0 86 2A 97 25 0F 1F | .Y...9..*..*.%.. +35 B4 B8 23 8B 28 0F 27 D2 A2 7E 6A 39 C5 C4 AB | 5..#.(.'..~j9... +A3 82 02 12 30 82 02 0E 30 0E 06 03 55 1D 0F 01 | ....0...0...U... +01 FF 04 04 03 02 07 80 30 1D 06 03 55 1D 25 04 | ........0...U.%. +16 30 14 06 08 2B 06 01 05 05 07 03 01 06 08 2B | .0...+.........+ +06 01 05 05 07 03 02 30 0C 06 03 55 1D 13 01 01 | .......0...U.... +FF 04 02 30 00 30 1D 06 03 55 1D 0E 04 16 04 14 | ...0.0...U...... +0A A2 9D 1D D2 00 85 F6 3D 30 A7 DD 5E 2F 7E 5E | ........=0..^/~^ +78 20 ED 2D 30 1F 06 03 55 1D 23 04 18 30 16 80 | x .-0...U.#..0.. +14 5A F3 ED 2B FC 36 C2 37 79 B9 52 30 EA 54 6F | .Z..+.6.7y.R0.To +CF 55 CB 2E AC 30 55 06 08 2B 06 01 05 05 07 01 | .U...0U..+...... +01 04 49 30 47 30 21 06 08 2B 06 01 05 05 07 30 | ..I0G0!..+.....0 +01 86 15 68 74 74 70 3A 2F 2F 65 31 2E 6F 2E 6C | ...http://e1.o.l +65 6E 63 72 2E 6F 72 67 30 22 06 08 2B 06 01 05 | encr.org0"..+... +05 07 30 02 86 16 68 74 74 70 3A 2F 2F 65 31 2E | ..0...http://e1. +69 2E 6C 65 6E 63 72 2E 6F 72 67 2F 30 1B 06 03 | i.lencr.org/0... +55 1D 11 04 14 30 12 82 10 61 70 69 2E 72 6F 6F | U....0...api.roo +6E 6C 61 62 73 2E 6E 65 74 30 13 06 03 55 1D 20 | nlabs.net0...U. +04 0C 30 0A 30 08 06 06 67 81 0C 01 02 01 30 82 | ..0.0...g.....0. +01 04 06 0A 2B 06 01 04 01 D6 79 02 04 02 04 81 | ....+.....y..... +F5 04 81 F2 00 F0 00 76 00 3B 53 77 75 3E 2D B9 | .......v.;Swu>-. +80 4E 8B 30 5B 06 FE 40 3B 67 D8 4F C3 F4 C7 BD | .N.0[..@;g.O.... +00 0D 2D 72 6F E1 FA D4 17 00 00 01 8E DA 2F D2 | ..-ro........./. +59 00 00 04 03 00 47 30 45 02 20 6F E8 1F A9 FF | Y.....G0E. o.... +36 DA 08 EC F7 36 0B 23 53 C5 A7 03 8F 7D F4 7E | 6....6.#S....}.~ +4C 36 EE 8F C2 18 C1 A1 29 3C 0C 02 21 00 BD 20 | L6......)<..!.. +9B F4 BF 57 40 FD C9 4C BB 99 C3 97 10 4A D1 A0 | ...W@..L.....J.. +BF 15 0F F8 F7 09 29 4B 92 1B 26 71 DE 38 00 76 | ......)K..&q.8.v +00 76 FF 88 3F 0A B6 FB 95 51 C2 61 CC F5 87 BA | .v..?....Q.a.... +34 B4 A4 CD BB 29 DC 68 42 0A 9F E6 67 4C 5A 3A | 4....).hB...gLZ: +74 00 00 01 8E DA 2F D2 86 00 00 04 03 00 47 30 | t...../.......G0 +45 02 20 16 94 7C D4 B6 9E B1 48 6C C9 1A DF 74 | E. ..|....Hl...t +FB D1 68 4B F2 63 29 C5 38 28 41 55 9B 68 55 A7 | ..hK.c).8(AU.hU. +02 B0 44 02 21 00 F5 3D C0 DA B0 F4 EC 78 14 3B | ..D.!..=.....x.; +9B F5 60 22 AC 71 CD CD E4 8F E7 DB 33 68 9C 38 | ..`".q......3h.8 +E0 76 22 EE CF 94 30 0A 06 08 2A 86 48 CE 3D 04 | .v"...0...*.H.=. +03 03 03 68 00 30 65 02 31 00 99 37 0F 43 15 73 | ...h.0e.1..7.C.s +E5 F6 E2 32 68 10 DC 15 4D 34 F2 B9 28 B3 77 CA | ...2h...M4..(.w. +D5 77 0C 98 08 7A 2C 62 FC 9D E7 DE 6A 46 00 52 | .w...z,b....jF.R +6E 92 0D 49 D2 67 BE CD C0 72 02 30 0D 29 D9 D1 | n..I.g...r.0.).. +E4 F5 CF FF 43 83 D1 25 7A 79 9B 4E 7D 53 EE 37 | ....C..%zy.N}S.7 +8C 33 00 6E DE F6 25 2A 68 49 B0 C1 7E FE 82 06 | .3.n..%*hI..~... +53 0B C0 FD 4A EA 99 1F A9 D1 D4 44 00 02 CA 30 | S...J......D...0 +82 02 C6 30 82 02 4D A0 03 02 01 02 02 11 00 B3 | ...0..M......... +BD DF F8 A7 84 5B BC E9 03 A0 41 35 B3 4A 45 30 | .....[....A5.JE0 +0A 06 08 2A 86 48 CE 3D 04 03 03 30 4F 31 0B 30 | ...*.H.=...0O1.0 +09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 | ...U....US1)0'.. +55 04 0A 13 20 49 6E 74 65 72 6E 65 74 20 53 65 | U... Internet Se +63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 | curity Research +47 72 6F 75 70 31 15 30 13 06 03 55 04 03 13 0C | Group1.0...U.... +49 53 52 47 20 52 6F 6F 74 20 58 32 30 1E 17 0D | ISRG Root X20... +32 30 30 39 30 34 30 30 30 30 30 30 5A 17 0D 32 | 200904000000Z..2 +35 30 39 31 35 31 36 30 30 30 30 5A 30 32 31 0B | 50915160000Z021. +30 09 06 03 55 04 06 13 02 55 53 31 16 30 14 06 | 0...U....US1.0.. +03 55 04 0A 13 0D 4C 65 74 27 73 20 45 6E 63 72 | .U....Let's Encr +79 70 74 31 0B 30 09 06 03 55 04 03 13 02 45 31 | ypt1.0...U....E1 +30 76 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B | 0v0...*.H.=....+ +81 04 00 22 03 62 00 04 24 5C 2D A2 2A FD 1C 4B | ...".b..$\-.*..K +A6 5D 97 73 27 31 AC B2 A0 69 62 EF 65 E8 A6 B0 | .].s'1...ib.e... +F0 AC 4B 9F FF 1C 0B 70 0F D3 98 2F 4D FC 0F 00 | ..K....p.../M... +9B 37 F0 74 05 57 32 97 2E 05 EF 2A 43 25 A3 FB | .7.t.W2....*C%.. +6E 34 27 13 F6 4F 7E 69 D3 02 99 5E EB 24 47 92 | n4'..O~i...^.$G. +C1 24 9B E6 B1 21 8F C1 24 81 FC 68 CC 1F 69 BA | .$...!..$..h..i. +58 F5 19 22 F7 74 C6 16 A3 82 01 08 30 82 01 04 | X..".t......0... +30 0E 06 03 55 1D 0F 01 01 FF 04 04 03 02 01 86 | 0...U........... +30 1D 06 03 55 1D 25 04 16 30 14 06 08 2B 06 01 | 0...U.%..0...+.. +05 05 07 03 02 06 08 2B 06 01 05 05 07 03 01 30 | .......+.......0 +12 06 03 55 1D 13 01 01 FF 04 08 30 06 01 01 FF | ...U.......0.... +02 01 00 30 1D 06 03 55 1D 0E 04 16 04 14 5A F3 | ...0...U......Z. +ED 2B FC 36 C2 37 79 B9 | .+.6.7y. + +Flow Record: + RecordCount = 4 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 5 12 15 29 + size = 1402 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132382130 [2024-04-15 00:06:22.130] + last = 1713132382234 [2024-04-15 00:06:22.234] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 59255 + src tos = 0 + fwd status = 0 + in packets = 11 + in bytes = 4142 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + out packets = 11 + out bytes = 4134 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +CA 00 00 00 01 00 08 E5 8A 24 A1 F6 A1 CD 6B 00 | .........$....k. +43 9E DA A3 8B B8 17 5B 5D AA C2 B6 EA 30 50 6F | C......[]....0Po +60 A3 30 DC 21 98 BB DE 84 13 45 CA AE E6 39 DF | `.0.!.....E...9. +5D 8F 92 B6 D0 06 A3 96 D9 CC 00 A8 2C F5 AE E5 | ]...........,... +29 4C 8B 6C 98 E1 45 8F C0 1E 82 14 FC 59 2D 4F | )L.l..E......Y-O +FA F2 14 8C D8 D7 41 8F DB 1D 97 B9 60 EE 3A A6 | ......A.....`.:. +D9 6A EB 92 5A 86 01 5C 49 76 24 52 8C 12 00 B6 | .j..Z..\Iv$R.... +F0 07 C6 8D 6A 4C BA 2B CC 75 1E 6F 5B D7 B9 FA | ....jL.+.u.o[... +78 E5 28 06 96 50 34 07 23 94 9B FA 83 CB 4C AC | x.(..P4.#.....L. +1C 17 2F C1 31 55 33 D8 3B DA 3D F3 2D 6A 01 44 | ../.1U3.;.=.-j.D +A9 D7 5E 34 19 43 E3 3C 61 81 F0 07 82 27 48 16 | ..^4.C.M.M......+ +2C 7F 7B FA E1 41 43 1A 55 C6 F9 6E 83 4B 86 35 | ,.{..AC.U..n.K.5 +ED 84 B9 B4 4F 79 2B 90 6B 3F AA C7 DD CF 56 7E | ....Oy+.k?....V~ +DD DC E7 FE 95 A0 2D EA DB 89 5F 6A E5 0F D1 40 | ......-..._j...@ +8D 5F 4F 67 A5 AC EA 1D 01 2C 4B E4 01 4F 76 CE | ._Og.....,K..Ov. +DA 78 68 CF 00 F3 83 D0 24 88 88 35 94 BF E3 44 | .xh.....$..5...D +FF E3 CB 5B 47 F9 89 91 2A 69 15 E2 48 B2 35 2A | ...[G...*i..H.5* +3E 47 E6 FD 10 FE D2 14 00 19 9A D9 21 A2 7C 7E | >G..........!.|~ +BA 21 A1 A4 34 5C 58 C4 BF 5C 0E 05 B8 34 8C 75 | .!..4\X..\...4.u +5B 38 2A 82 3C 8B EF 3D 09 40 D1 9C E5 1B 99 64 | [8*.<..=.@.....d +A7 2F 66 7C 8C AF 51 61 AD F4 74 EF 4A 15 7E 76 | ./f|..Qa..t.J.~v +0C 14 11 68 E5 5A 09 E3 98 A2 E1 2B 79 38 2E 84 | ...h.Z.....+y8.. +FD D0 F9 62 4F A5 04 A8 78 B3 9E 56 28 48 3B C9 | ...bO...x..V(H;. +B3 41 DB 89 FA 88 86 29 56 3C F0 95 F0 A0 1D 0A | .A.....)V<...... +DC C1 62 31 AC 3A 3C 7A 02 A3 7C 0E CF 62 9C 67 | ..b1.:w.F..o]..o:. +C4 CF 59 19 AE 88 FE 6A 64 9B B3 18 78 43 7D C7 | ..Y....jd...xC}. +3F 36 20 50 B8 2C BE AE 10 28 2E A8 76 65 B4 07 | ?6 P.,...(..ve.. +13 E1 81 E9 A1 58 52 1B 32 4B 31 23 D7 94 F5 B1 | .....XR.2K1#.... +7E 71 5F DF 5B 0A A8 27 D3 44 7C 22 19 98 DC 30 | ~q_.[..'.D|"...0 +7C 1A 49 CF 45 C9 36 85 79 0E 97 22 FF 21 99 0E | |.I.E.6.y..".!.. +CE 2A 62 70 69 9A 9E 23 52 A9 A0 CB 28 EF CC A5 | .*bpi..#R...(... +E5 00 00 00 01 00 08 E5 8A 24 A1 F6 A1 CD 6B 40 | .........$....k@ +DD 9D B6 50 9A 8F FC 48 7E 97 F2 8C B0 EA 2C E2 | ...P...H~.....,. +3C 2D 1B E3 18 B7 D8 90 75 C3 56 18 3F 2C 49 3F | <-......u.V.?,I? +ED FA FE 35 16 20 E0 6D B2 2E F8 64 75 2E F0 F7 | ...5. .m...du... +CF 4A 3B 7D C3 CF 52 3A 85 88 CA 19 83 03 B7 EA | .J;}..R:........ +70 00 5A EC C1 ED 9C 99 B9 AB 1F B2 61 40 48 10 | p.Z.........a@H. +57 2B 2B 50 2A B9 D0 79 81 07 86 9F AE 8C 52 A1 | W++P*..y......R. +4F 82 03 4D 70 59 65 01 BB 95 34 77 56 53 24 B4 | O..MpYe...4wVS$. +6B 28 B2 9E 0F 34 96 F7 36 1B 5F F4 D3 65 C2 A6 | k(...4..6._..e.. +17 16 74 58 2E 1A 44 88 A8 75 90 BE 70 FB 70 DD | ..tX..D..u..p.p. +29 B9 4D 7F 71 33 18 94 5F D6 50 11 60 A9 00 D5 | ).M.q3.._.P.`... +C8 07 59 60 7D 89 45 6A 45 AF 64 19 F9 02 99 99 | ..Y`}.EjE.d..... +81 36 50 D7 D4 05 4D 94 7F 7C 98 62 59 D7 31 FE | .6P...M..|.bY.1. +FF D9 A5 D2 DE C4 3B A1 95 51 F7 95 4E 54 9E 1A | ......;..Q..NT.. +C8 E0 2D 47 BF E8 BA 4E 5D 55 30 BD 00 1F 40 FB | ..-G...N]U0...@. +E0 5F F6 76 52 1A C0 5B 2B F1 E1 87 27 DC 6F A8 | ._.vR..[+...'.o. +CD B7 FE CD 27 36 B3 38 83 E9 F4 D0 BE A0 CE 5F | ....'6.8......._ +33 FF 43 66 EC FD 9A 37 8F F6 31 35 2B A3 6B 13 | 3.Cf...7..15+.k. +49 9A 7E 67 5B 39 8B 2E 50 5F 49 62 C2 98 22 2E | I.~g[9..P_Ib..". +C5 60 | .` + +Flow Record: + RecordCount = 5 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132344685 [2024-04-15 00:05:44.685] + last = 1713132375682 [2024-04-15 00:06:15.682] + received at = 1713132441667 [2024-04-15 00:07:21.667] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 58880 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18601 + src addr = 17.248.209.68 + dst addr = 157.143.34.100 + out packets = 32 + out bytes = 6945 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 15.901 ms + srv latency = 0.000 ms + app latency = 0.477 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 06 5F 5B 5F C9 | ....z...v..._[_. +89 D3 54 BD 52 AF D1 91 4D 77 E2 33 02 79 79 80 | ..T.R...Mw.3.yy. +8A E6 A6 74 F8 2E 54 EB 99 7B 22 20 B3 98 93 D3 | ...t..T..{" .... +FD EB 7B 82 1C 6D CE 5F 4D FC 85 2E 08 13 D8 57 | ..{..m._M......W +7A D0 B5 AA 1D A0 FB B9 06 38 CF 1B 13 02 00 00 | z........8...... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 5A | ..+.....3.$... Z +4D 34 B9 06 BA C1 3B 67 FD 4A 78 18 7A 0E 7F DE | M4....;g.Jx.z... +FA F0 75 D1 54 99 D5 BE FC CA 58 52 B2 B8 06 14 | ..u.T.....XR.... +03 03 00 01 01 17 03 03 00 2A 1C FE 79 61 CA BB | .........*..ya.. +00 74 16 64 A1 C4 A8 89 A4 71 4D 5B 6E 4B C8 F8 | .t.d.....qM[nK.. +D5 5A 79 CA FA 80 F6 59 DE 71 61 E3 97 A9 B3 24 | .Zy....Y.qa....$ +7E AA 09 E7 17 03 03 11 25 98 E8 13 7E 0E C0 6F | ~.......%...~..o +F4 D7 20 62 54 8F AE C2 BA 65 DB 64 8F 9C FB 9A | .. bT....e.d.... +61 11 BB EE 1E B3 40 3F 69 13 F3 DD D3 87 AB 54 | a.....@?i......T +7A E2 63 0A 58 D2 80 85 A3 9D 28 8C A4 EA C3 7C | z.c.X.....(....| +81 5B 05 76 B5 B5 7F 8F 81 CA 1A F4 85 65 CD 0E | .[.v.........e.. +B1 C0 11 66 38 58 79 E9 0E E4 9D 49 2A 23 B8 92 | ...f8Xy....I*#.. +BA 65 8D 86 C9 56 A8 D5 5D 62 52 B0 08 2E F1 B8 | .e...V..]bR..... +CB 37 82 FE 9E FD 25 AF 4C B5 E5 70 D6 61 98 1D | .7....%.L..p.a.. +26 D0 B9 02 9A 59 0A 92 AB 17 3E 30 3D E2 5B BD | &....Y....>0=.[. +62 BF E7 3D 5C 74 D6 CE A2 5D CE 99 0C 3F 19 42 | b..=\t...]...?.B +DC 0C E6 2F 5F 32 59 F2 3C 8A DF 4F E2 14 8E 7B | .../_2Y.<..O...{ +84 6D 19 4B E3 05 EE 17 D7 0B DB AF D3 AA 92 B4 | .m.K............ +6A AF DC DE 5A A1 D2 50 34 C9 9C D6 9E 7E D4 37 | j...Z..P4....~.7 +EA DF C5 2B 13 B9 E4 3C 57 97 45 78 31 7A 1C CF | ...+... +20 F3 65 C5 1B 03 68 7E 0A 13 DB EB BB 37 A3 E6 | .e...h~.....7.. +2C 7B 2E E6 9B 2C BD 73 EC A1 D2 7F 56 02 B2 A2 | ,{...,.s....V... +EE 48 A1 FE 4F 6D A8 EF 09 0C FA F0 C1 C7 39 68 | .H..Om........9h +D2 EE 4B 3B 3C 32 36 85 35 F3 91 51 0A 24 86 73 | ..K;<26.5..Q.$.s +65 20 D7 3F 6B 8D E4 29 EA FD 7F 19 17 42 4D 53 | e .?k..).....BMS +BB 98 1B EB C8 29 A2 BB 4B DA 22 C8 EA 25 0A 52 | .....)..K."..%.R +BA 1E D9 DC AF 82 67 7A FE FD 78 7D 59 A0 8D 47 | ......gz..x}Y..G +9D B2 36 71 23 DA 5B 3E 8E 8E 6B FC D2 E2 E2 4E | ..6q#.[>..k....N +A2 18 DB AF B8 77 C8 A9 4B D9 D9 7A 49 D8 73 56 | .....w..K..zI.sV +4B CE DA 4B 56 22 FE CE DB 4E B7 51 BF 71 1E CF | K..KV"...N.Q.q.. +45 EB 36 AC 25 8D CE 55 61 7A C4 51 15 29 FC 52 | E.6.%..Uaz.Q.).R +4B 51 BA 03 B5 FB AD 24 C3 56 72 19 2A 07 51 1B | KQ.....$.Vr.*.Q. +62 9C 45 19 31 AC F2 9E 6C 44 A6 C9 35 EA 0B 67 | b.E.1...lD..5..g +13 25 1A 88 FC E4 35 D2 87 58 E5 3B AF 0D 4C 56 | .%....5..X.;..LV +C8 F5 B3 22 D6 D9 34 1D CE 76 15 FB BF 79 47 7A | ..."..4..v...yGz +80 E1 0E B5 E4 BA 92 DC 35 35 99 AD 55 4A 25 F0 | ........55..UJ%. +5F 04 B3 A5 70 F5 EE 6E 67 D2 7C E6 3C 14 ED AB | _...p..ng.|.<... +00 BF 33 5E AE F3 6D 61 84 40 48 51 CD B1 71 B4 | ..3^..ma.@HQ..q. +20 5C A2 B2 18 26 9D A6 38 3D 44 FB 55 44 AD CA | \...&..8=D.UD.. +88 71 AE 7B 3D 02 11 B6 DA 49 AF DC 7E 32 32 2E | .q.{=....I..~22. +5A CD C2 FD 5E 07 69 AC 48 33 86 2F EE CE E9 8A | Z...^.i.H3./.... +5E 0D C1 25 52 4A 8A 85 5B E8 4B 70 D9 18 75 D8 | ^..%RJ..[.Kp..u. +EF 27 46 3D 5E 61 F6 E6 64 EA 72 6B 18 B2 EE 65 | .'F=^a..d.rk...e +F9 BB 47 0D 7E 6C 60 29 A8 C4 EA 68 99 16 98 7C | ..G.~l`)...h...| +86 B2 40 92 36 E7 22 54 40 F7 46 91 CD FD 22 99 | ..@.6."T@.F...". +53 9E 83 64 2E CE C7 D4 90 93 A4 22 CE 2F 40 91 | S..d......."./@. +90 62 A7 2C 7C 09 FD F7 38 6D BB 33 AC F3 D7 2B | .b.,|...8m.3...+ +7A 48 A7 18 9B F1 FC F8 19 DF B8 05 B7 C2 B1 10 | zH.............. +CD 5A 92 F5 D6 C9 01 5B 5B A0 4C 98 96 30 0D 55 | .Z.....[[.L..0.U +C8 5D BE B1 CA 5D 26 CF 54 4E 3A 0C 47 33 DB 23 | .]...]&.TN:.G3.# +84 09 60 39 8F EB A9 49 58 87 D5 C2 B6 63 94 72 | ..`9...IX....c.r +AF A7 8D A2 AE B6 C8 B7 CA 4C 20 14 B5 54 F6 0E | .........L ..T.. +86 98 53 62 04 FA D5 FC 3E F2 3C 36 77 C6 0A 55 | ..Sb....>.<6w..U +4E 17 7C F7 09 F1 0D 9D 5E 27 5D 9B 6F 89 75 B0 | N.|.....^'].o.u. +54 28 C0 0E 30 38 6B 54 7B 6F BB 6C BF B4 98 D3 | T(..08kT{o.l.... +4D 9E 8D 5D 67 2E E2 32 17 BC AC 35 65 61 52 34 | M..]g..2...5eaR4 +D9 40 5C 63 CD F0 09 47 BF 47 EB 78 03 1E 12 C4 | .@\c...G.G.x.... +12 D8 24 35 EC 23 B8 CD 14 FC 43 17 C0 FE 79 21 | ..$5.#....C...y! +82 03 DB CF B7 E8 09 8B B4 41 95 D5 82 7D AE 20 | .........A...}. +09 83 EE F4 03 E7 1E 30 | .......0 + +Flow Record: + RecordCount = 6 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 697 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131941133 [2024-04-14 23:59:01.133] + last = 1713131941647 [2024-04-14 23:59:01.647] + received at = 1713132015760 [2024-04-15 00:00:15.760] + proto = 6 TCP + tcp flags = 0xdf CE.APRSF + src port = 57373 + dst port = 443 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 2107 + src addr = 157.143.34.100 + dst addr = 2.21.22.179 + out packets = 14 + out bytes = 11839 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 8.922 ms + srv latency = 0.000 ms + app latency = 0.281 ms + in payload = 517 + TLS version = TLS 1.2 + sni name = weather-data.apple.com + ja3 hash = e252913a211e4a33817d5ac1775d8e55 + ja4 hash = t12d2014h1_a09f3c656075_14788d8d241b +16 03 01 02 00 01 00 01 FC 03 03 32 C8 C9 9C F0 | ...........2.... +AD CA 63 94 02 3F 00 86 B2 D3 DF 74 42 A5 8D 6F | ..c..?.....tB..o +C3 17 5F C5 80 FC 3A 60 37 73 8C 20 0E 6F 59 04 | .._...:`7s. .oY. +DD D8 EB A3 7F 07 F1 ED 5D A9 36 CB BE 5D AF A6 | ........].6..].. +D3 48 65 9E 23 C8 C1 26 35 74 43 CA 00 2A 4A 4A | .He.#..&5tC..*JJ +13 01 13 02 13 03 C0 2C C0 2B CC A9 C0 30 C0 2F | .......,.+...0./ +CC A8 C0 0A C0 09 C0 14 C0 13 00 9D 00 9C 00 35 | ...............5 +00 2F C0 08 C0 12 00 0A 01 00 01 89 7A 7A 00 00 | ./..........zz.. +00 00 00 1B 00 19 00 00 16 77 65 61 74 68 65 72 | .........weather +2D 64 61 74 61 2E 61 70 70 6C 65 2E 63 6F 6D 00 | -data.apple.com. +17 00 00 FF 01 00 01 00 00 0A 00 0C 00 0A 0A 0A | ................ +00 1D 00 17 00 18 00 19 00 0B 00 02 01 00 00 10 | ................ +00 0B 00 09 08 68 74 74 70 2F 31 2E 31 00 05 00 | .....http/1.1... +05 01 00 00 00 00 00 0D 00 18 00 16 04 03 08 04 | ................ +04 01 05 03 02 03 08 05 08 05 05 01 08 06 06 01 | ................ +02 01 00 12 00 00 00 33 00 2B 00 29 0A 0A 00 01 | .......3.+.).... +00 00 1D 00 20 CD D6 86 28 3D 9D 85 AA E0 F6 AD | .... ...(=...... +E1 77 C0 9F A7 4C 94 5F EE A2 51 21 50 F6 24 77 | .w...L._..Q!P.$w +1A B9 3A 7A 05 00 2D 00 02 01 01 00 2B 00 0B 0A | ..:z..-.....+... +3A 3A 03 04 03 03 03 02 03 01 00 1B 00 03 02 00 | ::.............. +01 4A 4A 00 01 00 00 15 00 BB 00 00 00 00 00 00 | .JJ............. +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 | ..... + +Flow Record: + RecordCount = 7 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132205444 [2024-04-15 00:03:25.444] + last = 1713132205905 [2024-04-15 00:03:25.905] + received at = 1713132277672 [2024-04-15 00:04:37.672] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 61719 + src tos = 0 + fwd status = 0 + in packets = 14 + in bytes = 8683 + src addr = 104.22.15.70 + dst addr = 157.143.34.100 + out packets = 12 + out bytes = 1547 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 20.237 ms + srv latency = 0.000 ms + app latency = 0.872 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 22a29273c84f24c87ea605eb553e276c + ja4s hash = t130500_c02b_926e7c93a85d +16 03 03 00 63 02 00 00 5F 03 03 66 1C 52 AD 8D | ....c..._..f.R.. +9B 43 7C 13 66 ED 60 9B C2 29 29 7C C7 4E BE F9 | .C|.f.`..))|.N.. +F6 C0 F8 44 4F 57 4E 47 52 44 01 20 2F A0 46 C8 | ...DOWNGRD. /.F. +DA 94 A0 79 8B 05 C1 B8 C1 C2 5F C5 CF 34 CB 03 | ...y......_..4.. +42 12 2B 03 3B 48 BF 23 C5 A2 E2 32 C0 2B 00 00 | B.+.;H.#...2.+.. +17 00 00 00 00 00 17 00 00 FF 01 00 01 00 00 0B | ................ +00 02 01 00 00 05 00 00 16 03 03 10 2A 0B 00 10 | ............*... +26 00 10 23 00 03 85 30 82 03 81 30 82 03 07 A0 | &..#...0...0.... +03 02 01 02 02 12 04 83 EA 68 06 B1 AD EA 76 77 | .........h....vw +39 76 37 6B A8 36 09 DB 30 0A 06 08 2A 86 48 CE | 9v7k.6..0...*.H. +3D 04 03 03 30 32 31 0B 30 09 06 03 55 04 06 13 | =...021.0...U... +02 55 53 31 16 30 14 06 03 55 04 0A 13 0D 4C 65 | .US1.0...U....Le +74 27 73 20 45 6E 63 72 79 70 74 31 0B 30 09 06 | t's Encrypt1.0.. +03 55 04 03 13 02 45 31 30 1E 17 0D 32 34 30 34 | .U....E10...2404 +31 34 30 30 31 39 31 30 5A 17 0D 32 34 30 37 31 | 14001910Z..24071 +33 30 30 31 39 30 39 5A 30 1B 31 19 30 17 06 03 | 3001909Z0.1.0... +55 04 03 13 10 61 70 69 2E 72 6F 6F 6E 6C 61 62 | U....api.roonlab +73 2E 6E 65 74 30 59 30 13 06 07 2A 86 48 CE 3D | s.net0Y0...*.H.= +02 01 06 08 2A 86 48 CE 3D 03 01 07 03 42 00 04 | ....*.H.=....B.. +03 24 E9 47 62 77 D9 B4 96 C5 B3 C4 89 CE 0C 90 | .$.Gbw.......... +20 5F E8 D8 AB 0E E0 42 26 48 8D DE A1 16 8F 3A | _.....B&H.....: +B9 59 C4 D4 ED 39 D3 C0 2A B0 86 2A 97 25 0F 1F | .Y...9..*..*.%.. +35 B4 B8 23 8B 28 0F 27 D2 A2 7E 6A 39 C5 C4 AB | 5..#.(.'..~j9... +A3 82 02 12 30 82 02 0E 30 0E 06 03 55 1D 0F 01 | ....0...0...U... +01 FF 04 04 03 02 07 80 30 1D 06 03 55 1D 25 04 | ........0...U.%. +16 30 14 06 08 2B 06 01 05 05 07 03 01 06 08 2B | .0...+.........+ +06 01 05 05 07 03 02 30 0C 06 03 55 1D 13 01 01 | .......0...U.... +FF 04 02 30 00 30 1D 06 03 55 1D 0E 04 16 04 14 | ...0.0...U...... +0A A2 9D 1D D2 00 85 F6 3D 30 A7 DD 5E 2F 7E 5E | ........=0..^/~^ +78 20 ED 2D 30 1F 06 03 55 1D 23 04 18 30 16 80 | x .-0...U.#..0.. +14 5A F3 ED 2B FC 36 C2 37 79 B9 52 30 EA 54 6F | .Z..+.6.7y.R0.To +CF 55 CB 2E AC 30 55 06 08 2B 06 01 05 05 07 01 | .U...0U..+...... +01 04 49 30 47 30 21 06 08 2B 06 01 05 05 07 30 | ..I0G0!..+.....0 +01 86 15 68 74 74 70 3A 2F 2F 65 31 2E 6F 2E 6C | ...http://e1.o.l +65 6E 63 72 2E 6F 72 67 30 22 06 08 2B 06 01 05 | encr.org0"..+... +05 07 30 02 86 16 68 74 74 70 3A 2F 2F 65 31 2E | ..0...http://e1. +69 2E 6C 65 6E 63 72 2E 6F 72 67 2F 30 1B 06 03 | i.lencr.org/0... +55 1D 11 04 14 30 12 82 10 61 70 69 2E 72 6F 6F | U....0...api.roo +6E 6C 61 62 73 2E 6E 65 74 30 13 06 03 55 1D 20 | nlabs.net0...U. +04 0C 30 0A 30 08 06 06 67 81 0C 01 02 01 30 82 | ..0.0...g.....0. +01 04 06 0A 2B 06 01 04 01 D6 79 02 04 02 04 81 | ....+.....y..... +F5 04 81 F2 00 F0 00 76 00 3B 53 77 75 3E 2D B9 | .......v.;Swu>-. +80 4E 8B 30 5B 06 FE 40 3B 67 D8 4F C3 F4 C7 BD | .N.0[..@;g.O.... +00 0D 2D 72 6F E1 FA D4 17 00 00 01 8E DA 2F D2 | ..-ro........./. +59 00 00 04 03 00 47 30 45 02 20 6F E8 1F A9 FF | Y.....G0E. o.... +36 DA 08 EC F7 36 0B 23 53 C5 A7 03 8F 7D F4 7E | 6....6.#S....}.~ +4C 36 EE 8F C2 18 C1 A1 29 3C 0C 02 21 00 BD 20 | L6......)<..!.. +9B F4 BF 57 40 FD C9 4C BB 99 C3 97 10 4A D1 A0 | ...W@..L.....J.. +BF 15 0F F8 F7 09 29 4B 92 1B 26 71 DE 38 00 76 | ......)K..&q.8.v +00 76 FF 88 3F 0A B6 FB 95 51 C2 61 CC F5 87 BA | .v..?....Q.a.... +34 B4 A4 CD BB 29 DC 68 42 0A 9F E6 67 4C 5A 3A | 4....).hB...gLZ: +74 00 00 01 8E DA 2F D2 86 00 00 04 03 00 47 30 | t...../.......G0 +45 02 20 16 94 7C D4 B6 9E B1 48 6C C9 1A DF 74 | E. ..|....Hl...t +FB D1 68 4B F2 63 29 C5 38 28 41 55 9B 68 55 A7 | ..hK.c).8(AU.hU. +02 B0 44 02 21 00 F5 3D C0 DA B0 F4 EC 78 14 3B | ..D.!..=.....x.; +9B F5 60 22 AC 71 CD CD E4 8F E7 DB 33 68 9C 38 | ..`".q......3h.8 +E0 76 22 EE CF 94 30 0A 06 08 2A 86 48 CE 3D 04 | .v"...0...*.H.=. +03 03 03 68 00 30 65 02 31 00 99 37 0F 43 15 73 | ...h.0e.1..7.C.s +E5 F6 E2 32 68 10 DC 15 4D 34 F2 B9 28 B3 77 CA | ...2h...M4..(.w. +D5 77 0C 98 08 7A 2C 62 FC 9D E7 DE 6A 46 00 52 | .w...z,b....jF.R +6E 92 0D 49 D2 67 BE CD C0 72 02 30 0D 29 D9 D1 | n..I.g...r.0.).. +E4 F5 CF FF 43 83 D1 25 7A 79 9B 4E 7D 53 EE 37 | ....C..%zy.N}S.7 +8C 33 00 6E DE F6 25 2A 68 49 B0 C1 7E FE 82 06 | .3.n..%*hI..~... +53 0B C0 FD 4A EA 99 1F A9 D1 D4 44 00 02 CA 30 | S...J......D...0 +82 02 C6 30 82 02 4D A0 03 02 01 02 02 11 00 B3 | ...0..M......... +BD DF F8 A7 84 5B BC E9 03 A0 41 35 B3 4A 45 30 | .....[....A5.JE0 +0A 06 08 2A 86 48 CE 3D 04 03 03 30 4F 31 0B 30 | ...*.H.=...0O1.0 +09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 | ...U....US1)0'.. +55 04 0A 13 20 49 6E 74 65 72 6E 65 74 20 53 65 | U... Internet Se +63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 | curity Research +47 72 6F 75 70 31 15 30 13 06 03 55 04 03 13 0C | Group1.0...U.... +49 53 52 47 20 52 6F 6F 74 20 58 32 30 1E 17 0D | ISRG Root X20... +32 30 30 39 30 34 30 30 30 30 30 30 5A 17 0D 32 | 200904000000Z..2 +35 30 39 31 35 31 36 30 30 30 30 5A 30 32 31 0B | 50915160000Z021. +30 09 06 03 55 04 06 13 02 55 53 31 16 30 14 06 | 0...U....US1.0.. +03 55 04 0A 13 0D 4C 65 74 27 73 20 45 6E 63 72 | .U....Let's Encr +79 70 74 31 0B 30 09 06 03 55 04 03 13 02 45 31 | ypt1.0...U....E1 +30 76 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B | 0v0...*.H.=....+ +81 04 00 22 03 62 00 04 24 5C 2D A2 2A FD 1C 4B | ...".b..$\-.*..K +A6 5D 97 73 27 31 AC B2 A0 69 62 EF 65 E8 A6 B0 | .].s'1...ib.e... +F0 AC 4B 9F FF 1C 0B 70 0F D3 98 2F 4D FC 0F 00 | ..K....p.../M... +9B 37 F0 74 05 57 32 97 2E 05 EF 2A 43 25 A3 FB | .7.t.W2....*C%.. +6E 34 27 13 F6 4F 7E 69 D3 02 99 5E EB 24 47 92 | n4'..O~i...^.$G. +C1 24 9B E6 B1 21 8F C1 24 81 FC 68 CC 1F 69 BA | .$...!..$..h..i. +58 F5 19 22 F7 74 C6 16 A3 82 01 08 30 82 01 04 | X..".t......0... +30 0E 06 03 55 1D 0F 01 01 FF 04 04 03 02 01 86 | 0...U........... +30 1D 06 03 55 1D 25 04 16 30 14 06 08 2B 06 01 | 0...U.%..0...+.. +05 05 07 03 02 06 08 2B 06 01 05 05 07 03 01 30 | .......+.......0 +12 06 03 55 1D 13 01 01 FF 04 08 30 06 01 01 FF | ...U.......0.... +02 01 00 30 1D 06 03 55 1D 0E 04 16 04 14 5A F3 | ...0...U......Z. +ED 2B FC 36 C2 37 79 B9 | .+.6.7y. + +Flow Record: + RecordCount = 8 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 12 15 17 29 + size = 1552 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132384093 [2024-04-15 00:06:24.093] + last = 1713132384243 [2024-04-15 00:06:24.243] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 6 TCP + tcp flags = 0x1a ...AP.S. + src port = 443 + dst port = 51654 + src tos = 0 + fwd status = 0 + in packets = 16 + in bytes = 8224 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 17.256 ms + srv latency = 0.000 ms + app latency = 12.277 ms + in payload = 1400 + TLS version = TLS 1.3 + ja3s hash = eb1d94daa7e0344597e756a1fb6e7054 + ja4s hash = t130200_1301_234ea6891581 +16 03 03 00 7A 02 00 00 76 03 03 F7 31 6E 76 5D | ....z...v...1nv] +50 18 9E C7 FF A0 81 7E 43 7E 54 B2 83 88 37 32 | P......~C~T...72 +B0 9C 34 D8 FE 71 30 8A 5E 1C C0 20 19 5E C2 96 | ..4..q0.^.. .^.. +F9 4D 3C 3C FB B9 52 E5 8C D5 FB BE 2E 7B BF 04 | .M<<..R......{.. +D4 08 5A F9 AC 46 9C AA 9E 96 2C D8 13 01 00 00 | ..Z..F....,..... +2E 00 33 00 24 00 1D 00 20 64 27 97 8D 8E EF 2D | ..3.$... d'....- +72 2F 70 A2 DE 5A 25 3D DF 40 6D 9B D8 29 58 9D | r/p..Z%=.@m..)X. +1B 72 87 40 73 31 C4 B1 28 00 2B 00 02 03 04 14 | .r.@s1..(.+..... +03 03 00 01 01 17 03 03 11 C6 BF EE 88 59 20 60 | .............Y ` +98 65 7A 6A 1C 1A 96 58 6F CC 5A B0 8A 54 5D B7 | .ezj...Xo.Z..T]. +64 B5 39 FE 09 53 AF F9 77 F4 A7 BF AD CF 95 1D | d.9..S..w....... +68 90 C6 38 68 25 4A A3 A4 AE 4E D5 EF C1 37 15 | h..8h%J...N...7. +67 49 B6 04 42 83 78 59 23 8F 2C 64 B8 6E B4 0A | gI..B.xY#.,d.n.. +E4 14 0C DC DB 15 19 BD A4 61 C6 12 D7 B7 20 7A | .........a.... z +24 C8 FF 63 0D FA FF 6B E2 C0 D3 B0 C8 1E 69 62 | $..c...k......ib +43 F7 05 72 64 AE 5A 82 F4 BE 80 8E A0 BE 70 75 | C..rd.Z.......pu +F0 E3 04 91 4E 76 9A 10 BB 4D CA D4 CB 1D D0 08 | ....Nv...M...... +3E 30 AB 2D 83 EE 59 97 AF 3A 91 4D 49 B3 64 1A | >0.-..Y..:.MI.d. +F9 16 FC 27 A2 67 61 23 B5 40 BA D8 89 78 92 6C | ...'.ga#.@...x.l +6D 77 0C 44 F4 F0 23 0E F9 F0 ED 65 60 0E 19 36 | mw.D..#....e`..6 +3A 96 29 3F 0C BB AD 76 92 34 8C 99 7E 20 4D 57 | :.)?...v.4..~ MW +78 F1 81 17 17 B5 F7 8F 8A 04 E7 95 7B 2E 51 29 | x...........{.Q) +00 66 D8 8D 40 CD A5 3A 8B 1B 55 99 7C 1E 56 6B | .f..@..:..U.|.Vk +B8 BC BE BA 30 87 EE 31 25 2D 63 9F F2 62 45 21 | ....0..1%-c..bE! +11 DE BD 34 3D DC E7 6F 53 4C 85 E3 C4 40 CB 48 | ...4=..oSL...@.H +64 6A E9 01 B5 CA AF 39 41 32 E5 A7 B1 F0 D3 36 | dj.....9A2.....6 +F2 9F FB 9E 87 6C 56 FA 67 AA 72 74 E7 D4 83 D3 | .....lV.g.rt.... +12 EF 6A 98 44 79 42 E6 21 85 AE 83 F3 7F 86 04 | ..j.DyB.!....... +A3 11 53 51 88 7D C2 04 C5 19 97 B1 EC 06 DD 3D | ..SQ.}.........= +70 B9 D9 37 29 A2 DA 81 1A AC 0E 63 5D C4 98 9E | p..7)......c]... +6A 85 FB 6E 94 98 F1 62 9D 02 8C F9 27 4D 61 DB | j..n...b....'Ma. +AB 7B 5D EE 4A 37 72 85 D8 62 8B 8C 57 C9 03 44 | .{].J7r..b..W..D +4F 90 B5 C8 3A ED 2A E5 39 08 E3 65 9C 5E 9D 20 | O...:.*.9..e.^. +74 02 ED EF C8 1F 34 87 28 58 4D DB B6 CD 9D 94 | t.....4.(XM..... +FE 9C 19 13 79 1F 65 00 EB DC BE 01 00 FE 8A 33 | ....y.e........3 +00 FA AB BC FE D3 81 E1 1F D0 EE 3B 51 67 B3 27 | ...........;Qg.' +48 BA 17 48 5D 92 B8 6F 09 25 36 E4 63 42 B6 84 | H..H]..o.%6.cB.. +F3 B8 09 16 1C 20 F2 04 0D 29 03 3B 40 C6 FF 80 | ..... ...).;@... +BB BA B6 D3 1A 9B 72 E6 16 C8 B6 48 C1 63 93 29 | ......r....H.c.) +5F 2F B5 8D 40 23 44 82 C1 40 57 B0 9C 2E 2A E2 | _/..@#D..@W...*. +83 C7 88 DE 6E 66 1A FF 68 3B 17 C8 20 AC 36 45 | ....nf..h;.. .6E +CD 10 FD 11 C6 0F 4A D1 E3 24 A2 16 0F 29 B4 96 | ......J..$...).. +CE 9F 85 D3 0C 8D 61 FD 66 74 27 8E 96 F4 A3 CD | ......a.ft'..... +E0 A6 69 BB 36 3F F6 F5 6D D8 B4 33 E8 44 AA F4 | ..i.6?..m..3.D.. +DF 1B 80 A6 C0 3D 1D 33 EF C2 44 EB F6 8C 1E 7E | .....=.3..D....~ +25 DE B4 83 52 37 5F 04 6D F9 C3 8B 43 8A 52 B3 | %...R7_.m...C.R. +75 0E B3 5F A0 EE 93 CC 2F 64 C7 13 02 94 CE FD | u.._..../d...... +FA 9B CE 80 8F C8 11 DC FB 20 77 90 2C 87 F7 B9 | ......... w.,... +4C 99 8B A9 2C 06 02 FE A6 D5 E3 A7 D6 A6 08 8A | L...,........... +C3 73 47 14 97 DB 20 2D 95 08 9D 05 5A E5 15 52 | .sG... -....Z..R +C3 F3 EF 92 DD 98 A9 D6 4D 50 2C 20 97 4A DE A2 | ........MP, .J.. +44 68 7F 6C 77 0C 18 2C 31 99 7C 59 0B 9D A4 25 | Dh.lw..,1.|Y...% +45 A0 D1 B1 3A 4A 7F F0 3B EB 59 C3 AC FC E4 ED | E...:J..;.Y..... +98 07 5C 70 A1 67 D2 B2 E2 32 F0 A0 B9 5A 12 D6 | ..\p.g...2...Z.. +AD 71 51 CE B1 5B 55 8D B5 26 99 77 32 BC 22 0E | .qQ..[U..&.w2.". +1D F1 8E 34 4F B1 B8 44 69 4D 86 CF 52 1F 8E 69 | ...4O..DiM..R..i +FB 7A 25 C9 53 45 B1 EA A3 E2 29 D3 8A B6 90 EB | .z%.SE....)..... +D5 B8 E6 86 AC EF 44 1E 10 E2 D5 73 A3 89 EA C4 | ......D....s.... +A7 BE 05 CC 27 07 6A 40 38 5A A2 E9 A4 C8 8C 01 | ....'.j@8Z...... +04 CD 16 C8 75 F8 D8 EC A3 CC F1 85 8B 9A 51 49 | ....u.........QI +53 9A 77 40 C2 B9 71 0D 75 CF A8 33 E8 41 4F 28 | S.w@..q.u..3.AO( +07 F2 F7 27 7B 56 05 54 C1 3C 0F 64 F1 CB 19 CA | ...'{V.T.<.d.... +2F 0C BE AD 1C 1B 37 AD 44 7C 67 03 0A 52 82 1A | /.....7.D|g..R.. +CA 8B C7 16 B1 45 F4 D4 E0 BB F2 17 1A 0B 73 57 | .....E........sW +67 F9 90 99 DE BD CD 0D 1F F6 67 B5 47 9D A5 2F | g.........g.G../ +E8 07 88 19 5A 93 76 AE D1 6A 8A 6A 43 B5 50 02 | ....Z.v..j.jC.P. +6F 7D E8 86 75 5E 7C 27 13 58 BD FA EA 5D 3B 73 | o}..u^|'.X...];s +62 C6 F0 8A 48 59 1B 28 C5 19 8D 27 65 06 79 A6 | b...HY.(...'e.y. +06 A3 A5 A2 A9 8B 31 C5 50 13 68 F8 0E 74 2A CA | ......1.P.h..t*. +B8 CE 16 D3 72 C2 65 6B 84 02 5B 04 5E 99 BE CC | ....r.ek..[.^... +96 55 D7 28 F0 1D 30 13 69 0C 8E 22 11 7D C7 A9 | .U.(..0.i..".}.. +38 3D A1 70 63 BF E9 62 86 A6 3E 7C A2 F5 04 A3 | 8=.pc..b..>|.... +51 81 C2 84 52 70 0C C3 DC 7B D5 94 C1 FB A9 EA | Q...Rp...{...... +86 94 77 DC 3C 7D 02 21 E2 74 CE D5 D2 0C 24 EE | ..w.<}.!.t....$. +5E FF 2F 0F 59 C8 E6 17 1A 4B 28 E3 81 74 EE 15 | ^./.Y....K(..t.. +F7 20 32 94 5B 83 89 E4 4D DF 97 22 E2 2E 38 C8 | . 2.[...M.."..8. +82 90 DD D1 57 8A 1F 67 23 55 13 69 D8 58 89 A3 | ....W..g#U.i.X.. +9D CE 9D BE 36 7C 60 42 CC FE B2 FE A5 6B B5 04 | ....6|`B.....k.. +A7 9E 4B 65 EB FE BF 8B 53 28 EA 91 F8 84 30 38 | ..Ke....S(....08 +A5 ED 04 34 D0 80 B2 2A 29 98 66 11 DF 7A E0 80 | ...4...*).f..z.. +67 99 51 95 10 2D 19 0E BB E6 65 1C B8 2C E1 82 | g.Q..-....e..,.. +20 7D B7 62 0D 43 10 16 3A 86 A4 09 86 FB 8D B8 | }.b.C..:....... +8C BE 35 E4 C1 81 11 67 F5 71 74 27 51 83 5F 1C | ..5....g.qt'Q._. +E7 30 A0 01 A4 BA 7A D0 5A C0 A9 EB A7 27 E0 3D | .0....z.Z....'.= +EC 32 5C 42 70 5E BC 8E 3B 80 38 6D 50 01 3E FF | .2\Bp^..;.8mP.>. +62 66 10 DA CC 15 8A 58 51 D7 F4 12 A9 96 6A 73 | bf.....XQ.....js +B6 7B ED 7A 5B 47 4C D6 B2 98 EB C2 1B A4 34 0C | .{.z[GL.......4. +80 7D A0 C3 0A D5 E6 BD | .}...... + +Flow Record: + RecordCount = 9 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1608 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132343067 [2024-04-15 00:05:43.067] + last = 1713132374094 [2024-04-15 00:06:14.094] + received at = 1713132441667 [2024-04-15 00:07:21.667] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 60765 + src tos = 0 + fwd status = 0 + in packets = 11 + in bytes = 7425 + src addr = 13.224.103.88 + dst addr = 157.143.34.100 + out packets = 13 + out bytes = 1562 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 9.079 ms + srv latency = 0.000 ms + app latency = 0.953 ms + in payload = 1428 + TLS version = TLS 1.3 + ja3s hash = f4febc55ea12b31ae17cfb7e614afda8 + ja4s hash = t130200_1301_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 4E 99 6A 88 F4 | ....z...v..N.j.. +23 FB 72 E0 A5 0D 5B 9A 68 F9 7F C4 41 FF DA 79 | #.r...[.h...A..y +A1 1F 14 D3 13 17 D7 20 5C DF 00 20 CB 27 55 C5 | ....... \.. .'U. +74 05 0D 63 D6 AD 4C 2D 37 FE EB 9E 6D 5E 91 48 | t..c..L-7...m^.H +4D 54 F4 AF BB D6 4A FF AA 7D 28 29 13 01 00 00 | MT....J..}().... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 7B | ..+.....3.$... { +61 25 DF 97 AE 9F F0 8D C4 09 5D 24 B6 6E CA 47 | a%........]$.n.G +98 28 27 FD 62 02 F2 D2 00 50 B5 6B DB 70 04 14 | .('.b....P.k.p.. +03 03 00 01 01 17 03 03 00 1B 24 CA D3 A8 2F 54 | ..........$.../T +E9 82 40 F6 D7 93 C8 9C 28 2E CC E3 7F 1F CA 9C | ..@.....(....... +F1 6C 24 76 C6 17 03 03 15 4E 60 B7 D9 3D 86 7E | .l$v.....N`..=.~ +1B A9 15 76 E6 36 69 AB 13 B6 69 84 A7 E1 2C 79 | ...v.6i...i...,y +06 76 FC 38 4E D7 B4 E0 E7 C1 1A 63 A4 53 88 44 | .v.8N......c.S.D +9A 97 5E A8 96 CD 6D EA E2 B1 C2 06 14 E4 55 81 | ..^...m.......U. +95 70 0C 1E 9D 68 77 23 44 90 92 D8 B3 5F C7 E4 | .p...hw#D...._.. +9D 3C 27 F5 7D 4F 16 7F 10 2D B4 36 A4 4E FB 1D | .<'.}O...-.6.N.. +73 42 03 2B 20 23 24 26 D5 5D 60 4A 02 58 7B F7 | sB.+ #$&.]`J.X{. +63 16 8C 6C A5 DF 5C B9 C2 74 43 88 F9 8B BF 71 | c..l..\..tC....q +26 B6 36 67 8C 72 44 66 4B 09 B1 DA 66 0F 7D D0 | &.6g.rDfK...f.}. +99 E1 4F 55 6A 11 E0 96 0F 91 15 BC 3B 27 F5 BF | ..OUj.......;'.. +54 30 F5 D6 AB ED B0 F9 92 14 53 CE 4C 42 97 AF | T0........S.LB.. +AE 0A BA 6A 37 18 A0 06 81 91 97 0E 34 F9 A9 F8 | ...j7.......4... +F9 77 F5 79 4C 54 29 05 7A 0A B2 84 3E CA 98 D2 | .w.yLT).z...>... +EA 87 6C E1 1F 65 E0 0B D8 91 CF 29 C0 FB D4 0C | ..l..e.....).... +CE 79 DB 29 B9 FF F8 66 50 A5 AD C3 EB 35 14 B6 | .y.)...fP....5.. +55 E6 99 C2 4C C0 15 4E 1E 67 FA 67 31 25 6A EA | U...L..N.g.g1%j. +E5 78 F0 19 6D 7B D8 5C D6 86 81 81 CC F9 2B FA | .x..m{.\......+. +C1 A2 CF F7 07 84 FE D4 51 A8 4F 00 8E 1C 26 53 | ........Q.O...&S +74 55 46 F4 22 DC 90 D8 83 16 5B C1 DC B7 17 01 | tUF.".....[..... +CD 20 84 8E 01 79 03 A6 B5 49 75 91 90 44 B4 DC | . ...y...Iu..D.. +47 99 F3 83 3A 41 1B AD 2A AA 93 A8 92 23 97 F1 | G...:A..*....#.. +F8 7B CB 35 58 74 81 75 FC 16 14 0F E4 EE FB 89 | .{.5Xt.u........ +26 EE 25 B0 DD D4 87 B0 C6 B7 D8 EE 80 C9 0E E2 | &.%............. +06 02 61 86 6F AB F8 82 7B A1 C5 C7 B8 A5 D6 4C | ..a.o...{......L +B7 BE F9 2E 6E 12 33 96 F1 DB D4 61 A9 B4 ED FE | ....n.3....a.... +47 8B 30 62 C6 DB 0F 1C 59 86 4C BB ED 1A 67 63 | G.0b....Y.L...gc +55 F9 BD 4C 1B 6F 65 B8 B3 BF 02 7A 72 55 83 3B | U..L.oe....zrU.; +CA B7 16 DE 8C 0E 89 EC FC E7 D2 19 9B 6C D6 91 | .............l.. +BA 97 77 3C 0C BF 06 58 6B 8E 2A AC 1C 95 E0 99 | ..w<...Xk.*..... +23 28 C5 0A 66 B9 0E 69 51 9E 47 ED 02 52 14 DA | #(..f..iQ.G..R.. +34 F3 8B 98 A7 A3 36 07 F1 94 7E EE 81 6A BF 55 | 4.....6...~..j.U +94 F7 E4 0A 07 CC C9 EA 40 F9 52 AB 79 C1 DC A6 | ........@.R.y... +9A 63 C8 4C 95 70 40 D4 89 6F 73 6C 11 8D 06 34 | .c.L.p@..osl...4 +99 B0 FF 96 B0 26 DF D6 96 B3 BF 92 15 00 FB C7 | .....&.......... +8D 26 7F 72 9B 1F 84 C9 A5 3D AD 10 ED E8 75 6C | .&.r.....=....ul +E7 67 EB B3 50 26 6A F8 08 02 0E 0E 0A 83 CC 84 | .g..P&j......... +50 D6 25 DD B4 BE 87 07 B1 7D 77 D1 98 27 D9 30 | P.%......}w..'.0 +71 22 51 BF C8 FB 14 0D A7 AA DC 3C 2B 46 13 64 | q"Q........<+F.d +51 B7 FD 8E F8 59 0C 47 91 52 9A 43 9B 29 6D 2B | Q....Y.G.R.C.)m+ +17 23 F7 30 AF 7C C7 7D 02 B6 A4 74 A6 8E 45 07 | .#.0.|.}...t..E. +6F EA 3C EE 59 2F 22 26 7C DC 03 AB 9F BD 94 38 | o.<.Y/"&|......8 +30 A5 DC B5 E9 16 A4 59 DB 41 19 99 02 7A B9 47 | 0......Y.A...z.G +DA F6 90 EA 19 C0 A8 10 F9 AC 9D 92 17 71 52 F7 | .............qR. +AB E2 20 09 F3 AA 8A 34 6D 46 66 86 33 10 0F D7 | .. ....4mFf.3... +9B 0B 7E 65 C2 EA 96 31 07 79 D0 40 EC A2 F7 69 | ..~e...1.y.@...i +AE 39 B9 7B 25 1D BE 77 8E 8D F5 A6 4C 84 CD 65 | .9.{%..w....L..e +BD 10 9D 35 5A 4D FF DA 45 C7 D5 A0 51 5B B8 34 | ...5ZM..E...Q[.4 +60 D9 98 67 AC 5A F1 A9 AF F5 69 B8 AA A3 4B FC | `..g.Z....i...K. +C5 F3 BC C5 5A F8 2C 1B 11 C5 89 CE 1A F9 12 BC | ....Z.,......... +BC A4 84 65 72 12 B5 F1 55 92 E1 70 82 8E C8 D2 | ...er...U..p.... +16 EA 23 FF A5 3E 2B ED A9 9D 53 60 68 98 7A 22 | ..#..>+...S`h.z" +17 30 B2 B8 BB 46 5A 9D 9F F5 15 8E D3 E7 4D 0F | .0...FZ.......M. +8F DF 63 D2 63 03 AF D0 47 76 03 FF A2 6A 2C D0 | ..c.c...Gv...j,. +C3 22 9B 42 C3 D1 4E FD 7C F1 15 23 67 0D EF 22 | .".B..N.|..#g.." +D7 AF 36 91 38 17 09 4F B4 CE 23 DB 04 5B 1D 63 | ..6.8..O..#..[.c +A4 64 71 5E 94 68 3D D6 6B 6A 8A 37 36 D4 58 5C | .dq^.h=.kj.76.X\ +7F B5 EE 97 00 D7 99 B1 4B F9 06 60 7E 16 9F B8 | ........K..`~... +9B D2 A9 10 1D CB E6 52 7A 09 04 D2 A3 2E 02 83 | .......Rz....... +87 08 24 C0 5F 7D C7 78 9C 3E 9C CD A0 E9 A5 F7 | ..$._}.x.>...... +8C D7 E6 5E C8 55 73 36 54 EF AA A7 82 D5 B9 C3 | ...^.Us6T....... +14 64 9C 79 4C EF 76 0F C1 30 85 50 F6 71 8C A7 | .d.yL.v..0.P.q.. +22 1E AD 9B 64 FA 40 DC 55 60 28 F3 0E D1 FA 4F | "...d.@.U`(....O +DE 43 EB 62 20 E5 97 5C 3E 9C A9 F4 7B 25 31 4B | .C.b ..\>...{%1K +22 C5 CC 46 A6 1C 41 FC 6D 4C DD 0F 34 8B 07 59 | "..F..A.mL..4..Y +50 C5 5B A9 77 15 02 E3 3E C1 EE 26 74 0F 7C 62 | P.[.w...>..&t.|b +D9 41 09 E8 FD B5 18 CD 51 1B 29 D5 FD C8 8F 22 | .A......Q.)...." +DF 34 90 FB 75 5F F9 16 EF 73 FC 27 E7 69 BB 06 | .4..u_...s.'.i.. +DB 02 F0 C5 1B F5 DE FD 05 23 8D 72 64 8A 5D EF | .........#.rd.]. +F6 AF DE 70 0C 5C FF 78 46 FD E3 79 ED 62 50 16 | ...p.\.xF..y.bP. +AD F6 47 EF BD 0B A6 9B 0A 63 39 91 F3 AB 33 09 | ..G......c9...3. +BE 9B CC E5 3F 1F 0C 12 C6 13 D8 D7 31 B1 AB 30 | ....?.......1..0 +2B 84 6B A3 FC D6 A2 D3 2A 7F B6 A5 B6 B1 0A 0C | +.k.....*....... +32 50 5F 96 9A 16 45 89 B9 EB 65 26 D9 75 31 17 | 2P_...E...e&.u1. +73 4C E9 54 15 A3 6B 15 01 1D 04 AA D4 4B 96 D6 | sL.T..k......K.. +27 60 B0 ED 32 DB 02 40 00 CA 3D 38 88 D3 73 32 | '`..2..@..=8..s2 +D4 BA 08 FE 9E 48 1A C2 E5 64 99 94 1D A0 48 57 | .....H...d....HW +C3 F2 CB 10 BD 8F ED B9 28 7F BE BC 7C AD C0 E4 | ........(...|... +2A D4 96 26 04 34 DD 4F 7E D6 A5 A3 46 3C 02 56 | *..&.4.O~...F<.V +2D 47 EC 83 26 59 F2 8C 38 1C 6F DD C7 10 D4 17 | -G..&Y..8.o..... +89 70 D9 36 | .p.6 + +Flow Record: + RecordCount = 10 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132150187 [2024-04-15 00:02:30.187] + last = 1713132181222 [2024-04-15 00:03:01.222] + received at = 1713132277671 [2024-04-15 00:04:37.671] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 50515 + src tos = 0 + fwd status = 0 + in packets = 31 + in bytes = 18713 + src addr = 17.248.209.70 + dst addr = 157.143.34.100 + out packets = 35 + out bytes = 7113 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 37.394 ms + srv latency = 0.000 ms + app latency = 1.532 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 39 14 3D 1E 9C | ....z...v..9.=.. +45 09 BE 33 D6 49 D4 17 64 7E 84 8F ED 84 60 36 | E..3.I..d~....`6 +EB 28 62 14 5D D0 C8 7E A5 C8 A0 20 98 24 EA 27 | .(b.]..~... .$.' +E5 C5 CD 5C 65 13 BD 0B 19 25 70 91 8B 00 9D 34 | ...\e....%p....4 +A0 10 A4 DE 86 D9 75 65 83 14 39 97 13 02 00 00 | ......ue..9..... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 89 | ..+.....3.$... . +42 59 93 D8 D4 39 F1 F1 21 30 F1 89 54 21 60 F6 | BY...9..!0..T!`. +E7 D2 E0 55 12 1A 1C D4 08 4A 88 30 44 43 72 14 | ...U.....J.0DCr. +03 03 00 01 01 17 03 03 00 2A 22 E0 87 DF 32 A3 | .........*"...2. +FF B9 44 76 82 95 5A 33 E3 47 77 5D A5 80 02 29 | ..Dv..Z3.Gw]...) +09 3E 60 15 B9 02 BA 2A 11 D2 26 77 34 BD 33 45 | .>`....*..&w4.3E +7F 01 1C 39 17 03 03 11 25 1B 4A 8E DB E3 E9 C4 | ...9....%.J..... +AF F7 DC 8F 08 65 BA 45 EA 47 6E DB 0E DD E0 EB | .....e.E.Gn..... +42 43 DF AF 11 BB FB BE 07 EC 90 E8 56 04 D0 C5 | BC..........V... +98 04 42 67 EF 03 D3 33 08 55 75 09 1B 8D D0 D8 | ..Bg...3.Uu..... +B3 83 80 3F 1A A7 27 93 BD 10 B9 2E 98 80 03 E2 | ...?..'......... +7D 14 3E 35 0E 24 22 04 3E 88 19 25 D6 5A 99 FF | }.>5.$".>..%.Z.. +33 ED DB 46 16 AD 41 43 38 46 79 05 8C 91 14 01 | 3..F..AC8Fy..... +1C 89 BB 1F 79 FB 8D 82 CA 48 90 AE 56 AC 6B 38 | ....y....H..V.k8 +63 67 4E 4C B5 B1 CD 3B 48 60 EA 11 7C 94 FB BC | cgNL...;H`..|... +E3 3F B5 19 D3 AE F5 9C 80 EB 29 37 40 65 8E 8B | .?........)7@e.. +51 1B FA 63 62 F0 CE 8E E8 35 CB B0 CC D0 6E C8 | Q..cb....5....n. +0F 66 68 05 1A 6A 96 AE 73 5C 19 1A CC 95 1B 41 | .fh..j..s\.....A +BB BC C0 4A 6E CD CD 97 D3 DD F0 67 E7 B6 D3 40 | ...Jn......g...@ +9E 6A 19 73 FF B8 2F 52 7D 3A 35 14 CF 4C 1A F4 | .j.s../R}:5..L.. +7E 73 57 7C B3 0F 8C EC B2 2F 27 CC 7C A8 90 1C | ~sW|...../'.|... +52 D9 3F 6A E3 F3 EC 50 70 E7 CB 7A 82 A9 9E BD | R.?j...Pp..z.... +6C 5F 52 51 AE 58 D5 50 BF AF 3B 92 55 98 30 4D | l_RQ.X.P..;.U.0M +50 AA 04 BF 42 13 3F 39 C0 FB 56 74 E4 17 58 6B | P...B.?9..Vt..Xk +55 5A AC ED AB 6A 2A D1 FA E5 DA 1B 96 4E 8A B0 | UZ...j*......N.. +49 30 9B D8 6C 72 F3 31 13 2D 32 C7 6B FB F5 56 | I0..lr.1.-2.k..V +39 B7 C9 6D 02 03 69 54 32 04 15 78 C0 4E B1 E2 | 9..m..iT2..x.N.. +07 13 42 3F 09 E1 1C AE 29 5A CE 37 96 18 EA 12 | ..B?....)Z.7.... +64 A1 ED 71 AB 08 34 DD 46 11 F7 FB 93 F9 E1 AE | d..q..4.F....... +B7 91 7B D4 CD 89 B5 72 5E 32 85 B9 61 DA 39 31 | ..{....r^2..a.91 +00 5E FF 56 0D F5 84 7D C9 A7 94 39 8F 80 3A 7C | .^.V...}...9..:| +02 8E 43 F2 88 C7 E1 D8 81 84 26 8C 47 0D 31 F5 | ..C.......&.G.1. +4F B5 A3 C9 90 26 87 3D 0C 39 A8 6D A8 11 A3 E7 | O....&.=.9.m.... +1E F6 A5 E6 27 C8 16 25 73 F9 63 9E A9 03 C4 EF | ....'..%s.c..... +7E 48 8E F0 B0 C9 F6 89 D1 7B 2F 3B C7 D7 DB 52 | ~H.......{/;...R +27 7A A8 E4 41 95 51 72 31 9F 59 7F B4 9B AD 7E | 'z..A.Qr1.Y....~ +CA 03 A9 DA DE 07 FA 3B CF E1 73 86 B5 06 16 86 | .......;..s..... +CF C1 9F D6 BE 47 9C 2C AB F1 31 ED 1D 60 20 28 | .....G.,..1..` ( +B5 5A B3 BE BF D1 4D AA E0 05 02 54 97 6C 90 14 | .Z....M....T.l.. +7B 43 B5 C8 80 7A DE 53 1C D2 EC 32 72 61 7C E1 | {C...z.S...2ra|. +F9 6D EA F6 54 28 6A 58 D8 1C B8 C1 5B 24 CD 3A | .m..T(jX....[$.: +3C 85 6C 93 79 87 7C 48 D8 4B C0 51 26 8F 04 7B | <.l.y.|H.K.Q&..{ +54 1D BD F9 E8 DA C8 D8 1E 3F 35 1D FF EE 81 4E | T........?5....N +40 26 5D 54 5F B0 51 16 22 4A FD CB 8E DD 91 F3 | @&]T_.Q."J...... +E2 37 75 5D EE 95 72 3A 54 C1 21 05 0F 65 13 E4 | .7u]..r:T.!..e.. +CC 4F F9 1B 05 CE 5F 24 A8 51 4E 48 AF 71 0A 2C | .O...._$.QNH.q., +18 03 BF 29 36 2F 93 5E 92 CB 46 B3 FE 59 4B 69 | ...)6/.^..F..YKi +D8 F2 5B 2E 16 CA 3A 2C 1A 20 76 E3 60 06 97 2D | ..[...:,. v.`..- +FC 3D 52 3D 9C 52 65 F5 C7 65 1F A2 87 68 79 1D | .=R=.Re..e...hy. +DB BF C0 CA A2 A2 2C 59 EE 7E D1 C6 6E 52 84 2D | ......,Y.~..nR.- +F1 9A 67 EB 9C D7 AB D4 B8 A9 23 60 58 B5 2D 00 | ..g.......#`X.-. +50 B5 12 34 46 55 3E E5 F6 69 1A B5 59 0C 83 E2 | P..4FU>..i..Y... +68 FE 0D 6A E2 75 7E A6 0F 52 81 C0 0B DB B2 0E | h..j.u~..R...... +0D 24 D7 17 7D 6E BC 78 5E 4A 36 4E D2 85 CD 97 | .$..}n.x^J6N.... +84 7F CE 64 21 76 7C B2 66 28 E7 12 87 96 6D 80 | ...d!v|.f(....m. +15 BB 79 36 F7 D8 75 D4 59 3A 72 67 66 30 9F A4 | ..y6..u.Y:rgf0.. +39 A0 7C 36 A5 1D 80 E5 9C B9 B2 E7 04 9A 04 42 | 9.|6...........B +71 81 46 63 E7 5E 4D E8 6B 51 E9 D3 FE 98 FA A0 | q.Fc.^M.kQ...... +9D 03 D8 6A 8E B8 A6 CB 34 25 10 9D C3 BF B2 1F | ...j....4%...... +E9 1A FB 08 E6 97 B5 3F 47 75 5B 0B 2F F8 FF 3A | .......?Gu[./..: +2C E6 72 F2 34 BC 4F 22 99 C8 35 B9 95 25 89 4C | ,.r.4.O"..5..%.L +11 1D 67 E1 04 4A 21 7D A7 CA 00 FC 10 9E 37 A2 | ..g..J!}......7. +13 63 F6 E2 30 E7 6E 35 DD 76 B0 05 3E 15 F6 0C | .c..0.n5.v..>... +0B C1 65 74 41 C4 1E 16 12 C8 D5 4D 0E 76 1C 24 | ..etA......M.v.$ +DF 52 3A AF 18 E8 01 CC 93 58 D9 01 72 7C 23 8F | .R:......X..r|#. +74 8F 4F 3F EE F9 04 E7 8F DC 0C 73 A6 BF 8E C0 | t.O?.......s.... +F2 4F 7B 9D 8C FF 19 FD A9 A4 6C D9 DB 60 F6 D0 | .O{.......l..`.. +D2 B2 0C 50 1A D7 8E CA C9 CA FC AC EC 6E 64 8B | ...P.........nd. +98 DA 0F 52 3D CC C3 8A 67 63 96 0F AB 6A 4C 52 | ...R=...gc...jLR +CF AA F3 5B D3 75 1E D7 1A 22 F3 78 4D 9D 1F E8 | ...[.u...".xM... +2A D0 08 56 DA 56 F2 F8 B0 37 5C F2 74 56 90 55 | *..V.V...7\.tV.U +77 5D 3F 4A B2 6D 1C A7 C7 5D 26 66 8A F2 D1 A6 | w]?J.m...]&f.... +AB 51 57 A9 61 55 05 D7 74 BA 25 C5 FF 1A F8 48 | .QW.aU..t.%....H +C6 31 08 AC 29 77 23 A2 AE DB E7 F2 A0 62 45 65 | .1..)w#......bEe +DC AC 22 CE 75 B1 7B 16 1D 07 A4 F2 D9 02 6E 7E | ..".u.{.......n~ +D2 54 A5 07 3C 82 FF C0 43 CD 2C 7E A4 26 B9 40 | .T..<...C.,~.&.@ +D1 4E 74 9A 8A 9D DA C1 3C 62 1D D2 E1 FB 37 89 | .Nt...... +0E 69 60 DA 0E CB 66 D3 5B 3F A5 43 4F F1 17 D0 | .i`...f.[?.CO... +0D B7 CC 67 6D 66 0C 99 13 CE E1 0F 89 44 76 E1 | ...gmf.......Dv. +A5 B7 BC 4C 16 F3 28 26 10 05 E6 FD 19 A5 52 DC | ...L..(&......R. +74 CA 69 B8 65 D2 0D 6E | t.i.e..n + +Flow Record: + RecordCount = 11 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 12 15 17 29 + size = 1552 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132382740 [2024-04-15 00:06:22.740] + last = 1713132382867 [2024-04-15 00:06:22.867] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 6 TCP + tcp flags = 0x1a ...AP.S. + src port = 443 + dst port = 54951 + src tos = 0 + fwd status = 0 + in packets = 9 + in bytes = 6256 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 14.387 ms + srv latency = 0.000 ms + app latency = 12.303 ms + in payload = 1400 + TLS version = TLS 1.3 + ja3s hash = eb1d94daa7e0344597e756a1fb6e7054 + ja4s hash = t130200_1301_234ea6891581 +16 03 03 00 7A 02 00 00 76 03 03 A4 CC 9F 4C 12 | ....z...v.....L. +9C 28 15 46 13 5D 29 86 5C 70 66 AC 5C C8 6E FF | .(.F.]).\pf.\.n. +C6 D4 3C 2B E3 29 50 4C DB A9 81 20 FB 70 A6 90 | ..<+.)PL... .p.. +D9 69 76 6A 45 CC 1C 07 0D CA E7 09 68 5D 45 7A | .ivjE.......h]Ez +AD 08 D7 4E DF 65 71 4E 9C 42 A1 E5 13 01 00 00 | ...N.eqN.B...... +2E 00 33 00 24 00 1D 00 20 71 C1 B8 99 D6 4F C0 | ..3.$... q....O. +0F 91 75 29 DC C6 0D B9 0C 09 02 FD B4 4B E0 F8 | ..u).........K.. +8A C2 3E DD 40 2F C2 4A 10 00 2B 00 02 03 04 14 | ..>.@/.J..+..... +03 03 00 01 01 17 03 03 11 B7 51 EC AC 23 28 01 | ..........Q..#(. +F1 04 0B 82 DD 8B 76 FC D8 10 E6 70 50 C1 58 10 | ......v....pP.X. +D9 7E 69 4F A9 CC 47 3C BB AF 74 00 E6 9D 3C EE | .~iO..G<..t...<. +3A 29 D5 98 EC A7 DF 57 F1 50 57 C1 BA A3 42 17 | :).....W.PW...B. +EC 74 34 DC 44 27 C8 14 64 38 AC AA E4 E8 95 FD | .t4.D'..d8...... +77 39 E6 DF 84 6B 49 21 06 E1 22 99 1C 47 64 F0 | w9...kI!.."..Gd. +10 CC 3F 63 A8 1C 0C 31 C2 51 31 14 D4 58 D5 E8 | ..?c...1.Q1..X.. +6C 68 17 98 D4 03 F9 F7 A8 27 3B E4 8F 34 24 5F | lh.......';..4$_ +ED 68 7E 1F 5E C2 18 87 33 12 D6 CE A4 23 88 8D | .h~.^...3....#.. +45 EB 8A C1 1B 47 C1 A9 35 DF 44 0D F6 62 66 9B | E....G..5.D..bf. +56 83 1A 34 2A 74 34 56 49 CF 09 3E 8E 5A 39 AF | V..4*t4VI..>.Z9. +97 CE 76 1F FC 8E CE 05 96 7C 96 89 A4 A6 4C 90 | ..v......|....L. +2E D4 79 9E 6A 4D 5E 27 BD CB 99 87 A6 95 3A F2 | ..y.jM^'......:. +B7 89 8E 40 B7 E2 E2 B8 41 08 8B 57 B5 AB E3 4D | ...@....A..W...M +EE 1A 69 AC DC 3B 5D E3 95 0D A2 75 CA 4A 7F 6E | ..i..;]....u.J.n +61 8A 03 68 D2 CF DB C3 52 30 8E D5 30 F4 90 1B | a..h....R0..0... +BA F9 A3 FF B4 7F 50 3B 22 37 C4 4C D6 9E 21 1B | ......P;"7.L..!. +B4 A5 EB 0E 1E 83 2B BE 99 B0 98 6F 3B 73 12 28 | ......+....o;s.( +8E 71 68 29 F8 4F BE 31 B7 4C FB 39 CB 47 9D BC | .qh).O.1.L.9.G.. +0D 8C 21 FA 4F DB A9 11 6B 74 F2 A2 54 D9 18 04 | ..!.O...kt..T... +3A 0E E5 DA 0D D8 8B 88 83 41 37 C6 66 88 FB 36 | :........A7.f..6 +7C A7 C5 3B AA 99 64 8F E3 83 CC AE CF 68 20 39 | |..;..d......h 9 +33 79 B1 9A F4 C9 EE 91 03 40 0C 18 C7 90 A4 7F | 3y.......@...... +68 92 66 E5 55 01 A7 3F 0A 12 62 33 D6 D5 A1 D0 | h.f.U..?..b3.... +9B E8 08 03 3F 57 1B 34 01 C8 B5 32 F9 58 FE B9 | ....?W.4...2.X.. +90 7F 44 4F 34 1D F4 10 49 DC 6E C5 7E 06 0A 89 | ..DO4...I.n.~... +DA 1C C7 73 D8 30 58 F0 FD 75 F2 09 61 AE 65 51 | ...s.0X..u..a.eQ +70 F1 63 18 1A FC 0C 64 71 36 D0 2F 8D F4 9E 8D | p.c....dq6./.... +49 9A 59 9A 03 5F 90 FC B9 E3 72 90 D2 14 E7 90 | I.Y.._....r..... +27 45 40 65 05 11 1D DF 3C 76 8C C5 24 D3 ED D0 | 'E@e......%.y. +3D D4 E0 E3 25 89 AF 1E 7C 8B 14 3E 8A 28 AC CC | =...%...|..>.(.. +98 74 58 76 5C FE 1B 3B 58 22 E1 C5 35 46 FF DE | .tXv\..;X"..5F.. +47 17 C1 7C 57 90 8A 30 20 56 66 59 A2 D0 C7 82 | G..|W..0 VfY.... +3B 40 B9 4D 1E 00 2A 5C 0D 85 FE 06 40 01 1D C6 | ;@.M..*\....@... +44 98 62 84 99 21 ED FF 53 CB 6F 4C F2 D6 55 8E | D.b..!..S.oL..U. +9C 4D 5B F7 57 DA 03 60 50 B6 EE 7C A0 32 6D 3D | .M[.W..`P..|.2m= +76 F1 8E BE 90 A5 59 18 53 BD FC 4D 20 FB 81 C5 | v.....Y.S..M ... +40 FC 1E D5 6C 74 3D 4B F7 19 05 53 27 A5 98 BF | @...lt=K...S'... +47 1A B9 70 12 C0 19 15 48 3B FB 45 67 37 75 87 | G..p....H;.Eg7u. +04 5C 80 FC B4 4E EA 98 79 EB 88 A1 33 BC C8 40 | .\...N..y...3..@ +2B 70 C4 3B 60 69 DD D9 | +p.;`i.. + +Flow Record: + RecordCount = 12 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1580 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132381134 [2024-04-15 00:06:21.134] + last = 1713132381225 [2024-04-15 00:06:21.225] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 6 TCP + tcp flags = 0x1a ...AP.S. + src port = 443 + dst port = 65089 + src tos = 0 + fwd status = 0 + in packets = 7 + in bytes = 6187 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + out packets = 8 + out bytes = 1069 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 12.155 ms + srv latency = 0.000 ms + app latency = 12.660 ms + in payload = 1400 + TLS version = TLS 1.3 + ja3s hash = eb1d94daa7e0344597e756a1fb6e7054 + ja4s hash = t130200_1301_234ea6891581 +16 03 03 00 7A 02 00 00 76 03 03 2F 41 00 E8 EC | ....z...v../A... +7C 12 29 B4 6C 17 29 76 2E AD 84 68 C3 91 E2 37 | |.).l.)v...h...7 +90 B3 83 B7 B3 E4 92 1D BE BA 40 20 AB 9A 15 7A | ..........@ ...z +9C 5B 06 39 E0 F6 E6 8C 85 2D 1D 8F 2B A8 D3 B0 | .[.9.....-..+... +5F B5 53 E4 FC 17 74 D2 AD 29 9A 40 13 01 00 00 | _.S...t..).@.... +2E 00 33 00 24 00 1D 00 20 8E 52 6C 3A FC F0 C2 | ..3.$... .Rl:... +1E B0 9C EC 44 84 24 9B 07 E5 C2 DE 37 E3 C0 7D | ....D.$.....7..} +1D D8 54 FD 0C 05 B4 55 63 00 2B 00 02 03 04 14 | ..T....Uc.+..... +03 03 00 01 01 17 03 03 12 67 0B 5D 1F 1B C8 36 | .........g.]...6 +12 84 0A A5 4C AD B7 03 79 09 29 46 82 B1 7C 59 | ....L...y.)F..|Y +CB FD CF 33 64 44 D9 A8 EC E0 85 15 C6 3C BE 8C | ...3dD.......<.. +B8 9D B2 EF 8E 90 FD A5 BC 69 0A 67 03 C9 18 FF | .........i.g.... +08 08 BC 84 0B 26 5B 8B D2 EE 9E 0E 07 E4 AC 1B | .....&[......... +E0 F5 4B BE 26 DC 09 C9 88 C2 DF A3 A0 84 42 7D | ..K.&.........B} +E1 25 34 EB DC 4F CC BE DA 2F 01 A2 6A B9 CC 5F | .%4..O.../..j.._ +E2 38 1F A5 1B 19 E7 23 01 D8 93 D9 54 D8 72 EA | .8.....#....T.r. +06 4C 4E 54 A3 BB F6 3E 7F 37 AD D7 FD 3B 21 F9 | .LNT...>.7...;!. +1F DB 7F B7 28 5C CA 7A C6 01 55 9F 10 66 58 53 | ....(\.z..U..fXS +B7 D2 C1 9F 66 25 7D FB 21 D2 DA 6C D5 0F 1F 17 | ....f%}.!..l.... +A2 31 CF F1 A3 17 62 B4 67 3C 34 0B C2 46 E4 80 | .1....b.g<4..F.. +B5 39 D2 5D 45 84 5B 23 F2 A8 89 39 D0 E7 B4 C9 | .9.]E.[#...9.... +9C 70 36 29 9C 8E 86 C8 0D DF C9 10 F3 FE 25 04 | .p6)..........%. +35 BB 6B FC 01 57 3F 99 A6 6B 16 B2 CB 75 2C 73 | 5.k..W?..k...u,s +E8 5C 6C A5 18 3B 2D 0C E9 E6 E5 C1 79 81 FC 32 | .\l..;-.....y..2 +E4 17 A4 6A D3 89 6E 4A 81 4E DB 6F 42 34 22 E3 | ...j..nJ.N.oB4". +11 3C 40 76 E2 6B 24 08 65 9E EA A0 43 55 AA 40 | .<@v.k$.e...CU.@ +B4 F9 37 4E 51 1B 7A 30 87 B6 61 84 A8 C8 BC 78 | ..7NQ.z0..a....x +71 C9 DB 30 4A 01 F4 F5 62 53 38 B3 A7 8D 29 5B | q..0J...bS8...)[ +68 5C 7F 30 F2 A7 5C 20 4F 64 33 83 D1 7F 3D 81 | h\.0..\ Od3...=. +0F AE 1E 0E ED B1 A9 48 33 21 78 31 39 4B AF A1 | .......H3!x19K.. +00 30 B6 22 D1 DF 35 C4 E0 05 D7 4F CA 9B 94 66 | .0."..5....O...f +05 4B F7 4C F5 F2 90 AE 61 E6 B8 7B 60 C3 9D 2C | .K.L....a..{`.., +32 ED 55 DB DB 9D 92 0F 13 9C 5A 9B 78 D9 22 A5 | 2.U.......Z.x.". +D5 F5 79 B5 57 07 8A 5B 5C 01 97 30 89 44 A5 C5 | ..y.W..[\..0.D.. +68 52 86 60 4A 85 C7 11 18 DF 3D 0D 37 32 D1 5B | hR.`J.....=.72.[ +C7 0A 83 F7 CD 9E E1 7B D2 D1 81 3C F3 4C 3E C6 | .......{...<.L>. +FC 6D 6A 75 10 88 4C 78 54 DC 1C 59 83 31 D9 1E | .mju..LxT..Y.1.. +A9 4D 85 92 EF AF 2A 85 DA 05 88 F6 59 20 DE 5D | .M....*.....Y .] +1B 92 0D D7 32 79 1C B0 0D 4A BA 8D E4 04 59 5C | ....2y...J....Y\ +CE B3 EB 76 74 38 A1 2B F0 51 27 AE E4 80 CE 6E | ...vt8.+.Q'....n +94 65 06 07 77 97 71 A5 22 42 EF E5 BD 82 62 9C | .e..w.q."B....b. +55 86 DF 8C 76 9A 19 9A AB 75 BD E5 77 74 D2 2D | U...v....u..wt.- +4B A1 45 1E F3 38 48 51 80 CD BD A1 75 D5 5E FC | K.E..8HQ....u.^. +97 D2 70 DB 63 79 57 21 15 1A 9A 8D 46 CB EA 92 | ..p.cyW!....F... +AC 67 9A 41 13 A8 A5 EA 02 79 B4 16 CE 38 58 95 | .g.A.....y...8X. +71 D6 62 3A D9 10 FE 09 F8 4D 70 C3 F4 3A 95 F1 | q.b:.....Mp..:.. +03 5D E4 B8 F4 87 CE 7E 40 CD 1A E1 37 EE 7E F3 | .].....~@...7.~. +53 09 32 12 8D C9 7B 4C 57 30 91 E2 6C B5 53 3D | S.2...{LW0..l.S= +96 B7 D5 4E 09 0F 54 05 83 06 6D EF 54 A9 50 A4 | ...N..T...m.T.P. +9D FF F5 AF FE 86 64 5B 55 84 59 4B 5B C1 1D FD | ......d[U.YK[... +8A 3E 91 C1 32 4A A9 A4 05 F5 D7 61 55 CA 42 9D | .>..2J.....aU.B. +45 31 A4 1F F5 79 00 94 AB 94 21 DE 1D 59 AF 06 | E1...y....!..Y.. +B4 5F EA AA 2D D3 FE 8E 1E F9 3C 91 C9 77 08 16 | ._..-.....<..w.. +E8 89 12 21 76 A0 70 A6 EA 44 FB D7 C1 B2 31 BF | ...!v.p..D....1. +5B 6E 47 EF 93 C2 09 03 77 50 0C C6 BC 62 BD CC | [nG.....wP...b.. +0E 7B 83 08 C4 07 1B 12 28 88 DF 5B 1F BE 14 CC | .{......(..[.... +CE B6 3C 0A FA 6A 22 1D EC 90 62 B2 17 E9 04 FB | ..<..j"...b..... +BC 52 AD 31 BC 04 59 37 39 E8 D2 22 6C 9A 41 F9 | .R.1..Y79.."l.A. +FB 5F 60 71 92 03 A6 2E C1 37 F7 02 BE 19 F8 52 | ._`q.....7.....R +F8 13 DD DD B3 AC 36 8B C3 D3 FA 90 C7 4A E8 23 | ......6......J.# +63 17 C6 1B D6 57 65 3C 5D 1D 69 7B 71 09 DC 00 | c....We<].i{q... +4B EA 33 62 9D FE B5 A3 D9 00 5C 74 D4 93 1A B7 | K.3b......\t.... +F1 B3 2C DC 4D 98 04 C3 0B 84 1D D5 44 FA 35 4E | ..,.M.......D.5N +79 A7 13 7A 74 5C E5 5B C7 5B D9 32 10 84 85 F1 | y..zt\.[.[.2.... +7D 9B 84 B1 A1 BB 30 F6 CB 53 B4 72 1C 44 D5 E1 | }.....0..S.r.D.. +A3 55 5F F3 6F F0 E4 7F 25 E8 F2 70 75 C7 93 18 | .U_.o...%..pu... +49 D4 79 38 30 00 9F 03 A2 53 A7 46 74 AD C1 A3 | I.y80....S.Ft... +CE 18 00 78 4C BE 9D 45 42 AB 65 92 19 C5 3B 23 | ...xL..EB.e...;# +60 58 88 5A B9 BF C0 4E 02 9F 06 98 41 93 37 98 | `X.Z...N....A.7. +CA D4 FA F9 92 9D BA A6 C3 25 C9 CF 41 DA FD 1A | .........%..A... +80 BA D8 A5 5B AF 71 F0 B9 6A 2C 8F 90 86 16 A5 | ....[.q..j,..... +37 05 5A C0 FE D3 60 E5 6F 51 70 2D 1D 43 15 43 | 7.Z...`.oQp-.C.C +98 24 19 92 4B 1D 3B 13 79 65 D9 95 BE 1B 89 A7 | .$..K.;.ye...... +BE 0D 07 D8 16 2A 36 78 03 FD AF FE 84 20 FD 88 | .....*6x..... .. +AF 01 EA 54 36 97 A0 A4 12 99 F6 15 67 E6 49 6D | ...T6.......g.Im +F9 3E DB 2D 03 A8 CB CE FC C5 CA F9 AD 35 61 A8 | .>.-.........5a. +79 E8 2C A3 BF 8A 6A 8F AB 04 0E CE 21 05 53 67 | y.,...j.....!.Sg +2B 80 49 F7 EB 1F 56 8C F5 5E 61 94 57 00 D3 48 | +.I...V..^a.W..H +84 0F 36 64 24 DB 93 C0 B3 71 26 7E B6 D5 F5 C0 | ..6d$....q&~.... +50 C5 C8 D3 85 48 20 9F 27 E6 AF 68 B7 95 8C 9A | P....H .'..h.... +56 8E 1F AD 54 36 89 3E 88 B1 61 68 82 1F 7D FD | V...T6.>..ah..}. +18 56 01 02 9C 7E 5D E1 23 EB 62 AC 6C 84 43 E6 | .V...~].#.b.l.C. +35 8B 5A 87 59 48 CC 48 95 35 C6 96 65 6F 40 C2 | 5.Z.YH.H.5..eo@. +B9 D5 15 5F 8E B5 59 42 05 6D F3 3F F5 19 DE 8F | ..._..YB.m.?.... +43 69 12 00 E1 6A 17 6E 2C F8 CB FA F2 2F 3C 3C | Ci...j.n,..../<< +18 E0 68 5F 04 3A CD 49 E7 4D 49 B8 0A 21 F7 41 | ..h_.:.I.MI..!.A +16 C5 2A 80 7A C2 3E 3E DD EB C7 28 BA B2 2A C0 | ..*.z.>>...(..*. +19 FD 20 FA D6 86 C5 08 | .. ..... + +Flow Record: + RecordCount = 13 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132280006 [2024-04-15 00:04:40.006] + last = 1713132311020 [2024-04-15 00:05:11.020] + received at = 1713132377066 [2024-04-15 00:06:17.066] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 53757 + src tos = 0 + fwd status = 0 + in packets = 30 + in bytes = 18660 + src addr = 17.248.209.68 + dst addr = 157.143.34.100 + out packets = 34 + out bytes = 7061 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 37.432 ms + srv latency = 0.000 ms + app latency = 5.568 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 D8 57 62 FC 39 | ....z...v...Wb.9 +3D 06 8F DF CA 43 25 60 4F 32 6C 2A E1 06 C5 C6 | =....C%`O2l*.... +FC 5C F8 B3 F6 41 57 FE 6A 46 02 20 7B 77 E2 C0 | .\...AW.jF. {w.. +38 A7 17 3F E3 40 C1 CA 68 76 BA 94 9F 1C D4 93 | 8..?.@..hv...... +8C 47 94 8E 87 54 5A DE C2 F4 3B F8 13 02 00 00 | .G...TZ...;..... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 69 | ..+.....3.$... i +23 3D 95 74 AC 97 89 95 95 B2 E2 93 CD 2D C9 B0 | #=.t.........-.. +90 98 6C A5 7C 8D 95 07 8E 4F 2E 88 D8 2C 50 14 | ..l.|....O...,P. +03 03 00 01 01 17 03 03 00 2A 87 9D AE BC 0A EE | .........*...... +FF 8E F6 3D 66 AD B9 7F 8C 96 8E 6F 59 BC 24 E4 | ...=f......oY.$. +DF 2D 4B 94 57 AE DF E7 7F 03 C1 E4 AC E2 04 02 | .-K.W........... +7E AB FA AE 17 03 03 11 25 D3 31 8F EB 4A EC 7D | ~.......%.1..J.} +A2 6A C9 AB C2 BA 4F 24 62 F8 18 96 62 E1 6D C5 | .j....O$b...b.m. +4A 2F D3 1E 73 B3 5C C1 99 68 8B 02 85 DE 0E 97 | J/..s.\..h...... +20 10 E2 1B C9 DF 47 39 DA DB 9F 93 DE F8 03 6D | .....G9.......m +6C 96 56 7D 48 1E 76 6E 56 90 3C 38 58 A8 31 00 | l.V}H.vnV.<8X.1. +2F 7E 06 84 D8 FF E0 79 6F 94 67 F2 AD 87 F3 83 | /~.....yo.g..... +49 0B FE D8 33 2C 87 8A 92 FC A7 E4 10 68 AC 31 | I...3,.......h.1 +B9 2E ED E2 48 D8 95 D8 5B 40 79 F7 94 28 D6 A9 | ....H...[@y..(.. +CD A8 9A 9B BD E5 7A 56 9D 55 0D 21 C1 C7 67 53 | ......zV.U.!..gS +4B 3C 77 9C 04 C6 8F 16 01 64 B7 93 C5 FC AD 67 | K...\B...:e +F3 4C B1 4E D2 F5 9F 3B D6 A9 47 86 FE E0 FA 45 | .L.N...;..G....E +72 B1 BA 9A 87 64 F7 48 06 DA 45 35 AD 87 68 94 | r....d.H..E5..h. +DB 9E FA F8 28 45 50 E5 67 91 53 A1 50 35 CF 31 | ....(EP.g.S.P5.1 +DD B4 5E 04 71 53 23 13 5F F4 AF 69 F3 DE 8B 16 | ..^.qS#._..i.... +99 DD DD 17 6D 1A E7 90 82 AB C9 E6 1A ED 39 00 | ....m.........9. +64 51 97 82 C3 24 DD 5F 91 B4 15 27 F5 30 5F 79 | dQ...$._...'.0_y +7B 46 E3 8A 8C 6D E6 0A 8A 7E EF 8B 32 90 4C BB | {F...m...~..2.L. +AE 71 7F 22 69 C4 40 68 98 B1 D9 C3 21 4C CC FE | .q."i.@h....!L.. +A9 0F FB 9A 93 06 95 ED D1 36 52 A8 A0 D0 E7 ED | .........6R..... +77 6A E1 E8 71 1E BD E6 C3 04 F0 D0 85 51 B0 D5 | wj..q........Q.. +36 9F 39 19 58 9F 6B 68 77 61 4B 6A 48 F0 DA 92 | 6.9.X.khwaKjH... +02 8F FA 10 2F 56 9A 29 00 E1 77 2A 79 2C FE 76 | ..../V.)..w*y,.v +C9 29 E8 74 A0 95 10 02 B9 59 0E 3C 9F 12 D2 27 | .).t.....Y.<...' +0A BE CB 8D D4 E2 25 CD EE EF E6 80 67 B9 07 A2 | ......%.....g... +64 9E 36 C8 8F D3 A8 A7 32 93 19 33 CF 8D AD CC | d.6.....2..3.... +CE C9 7A 9F 27 AB F5 95 68 8A 32 E6 BE D7 DA AE | ..z.'...h.2..... +88 65 5D 12 B1 FD E5 DB 0D F9 D2 BA D7 B3 E0 76 | .e]............v +34 BB 2A 5D 4C 24 80 F1 4E A7 57 99 33 14 66 2F | 4.*]L$..N.W.3.f/ +9B 55 AB 0E 70 E9 24 7B 7E 32 E8 C6 75 50 F3 9A | .U..p.${~2..uP.. +CB B9 40 CC A1 D4 77 4E 24 23 61 EB 64 7E 5B 08 | ..@...wN$#a.d~[. +0D 4C 9B 2D 1E 15 75 91 4D 65 AF 80 8E 5B 2F A5 | .L.-..u.Me...[/. +1A C8 11 72 14 7D A3 F7 62 77 24 1B 87 AD 01 8B | ...r.}..bw$..... +2C 67 09 1C 0B AC 83 C9 ED A3 31 17 D3 8C 5C FC | ,g........1...\. +7A 39 E5 48 A1 F0 51 51 44 73 F7 35 63 04 4A FA | z9.H..QQDs.5c.J. +C2 D4 09 8D 5E 08 6C 75 B6 11 CF 5D 06 B1 2C 03 | ....^.lu...]..,. +BD 6F 6E F8 8D 0E 47 AF FE 56 B7 A6 C2 D0 81 F9 | .on...G..V...... +F9 80 A6 C2 3C D4 BA DA 2B 9D FB DA 69 A4 B8 C5 | ....<...+...i... +0C 52 5B 25 26 E8 2D EA 26 08 80 52 1F 6B CF E3 | .R[%&.-.&..R.k.. +97 79 E7 EF 31 37 A4 D8 48 14 50 43 65 E1 AF 77 | .y..17..H.PCe..w +87 0F 0A 20 AF E8 B8 48 F5 78 E2 FB B4 71 C6 62 | ... ...H.x...q.b +43 EA C9 74 CE 3E D2 27 73 80 81 03 CE 21 F5 DA | C..t.>.'s....!.. +34 6E E2 C4 88 4E CE 73 41 23 CD 32 9A A4 90 43 | 4n...N.sA#.2...C +2C 6B FE 5E B1 40 B2 B0 87 30 12 EE 09 21 4D 04 | ,k.^.@...0...!M. +F2 52 C7 A8 7E D2 AE 84 A1 7D D6 7B 11 88 38 5C | .R..~....}.{..8\ +E8 55 1D 51 C3 D7 EA E4 DA DE C6 97 E8 69 AF 77 | .U.Q.........i.w +AB 45 5B 18 3B 14 1E A9 C7 98 96 44 7A 0A EC 29 | .E[.;......Dz..) +C2 F9 D5 3C 74 10 BC A3 5A 0A 87 93 E4 51 8F 86 | .....Xf|........ +F3 67 1B 86 4C 51 06 7D 6D DA 45 18 2B FC 1E 44 | .g..LQ.}m.E.+..D +A6 B9 5C C0 59 A4 6D 05 36 8A B2 E3 3A 80 EA 02 | ..\.Y.m.6...:... +8D 62 DF 56 FD 38 02 ED 2F B8 D0 8B 9B 9A F2 61 | .b.V.8../......a +64 65 35 53 96 7A F0 6C 31 C7 7E 5E A1 54 E7 C3 | de5S.z.l1.~^.T.. +BA 43 70 41 B1 3E C3 3A 52 4E 1F 60 76 A2 B0 C2 | .CpA.>.:RN.`v... +D1 4C 9A F6 77 EC F1 27 91 26 A9 CD 2A DE 32 44 | .L..w..'.&..*.2D +3F 36 E0 CD C1 D7 44 35 97 09 08 C6 2D 7F 77 08 | ?6....D5....-.w. +DF B3 74 CB 2F 40 8D 19 2D 22 3D F6 34 B8 AF 4C | ..t./@..-"=.4..L +C0 9A CF 57 74 80 70 DA 8E 5F 31 EB BB 33 1E BA | ...Wt.p.._1..3.. +B3 6C CA FD 79 23 35 7F 6A B8 45 7C 99 B4 51 F9 | .l..y#5.j.E|..Q. +09 59 21 FC EA B0 63 7B DB B7 0A 72 A2 B5 2D DD | .Y!...c{...r..-. +AF F4 46 63 D1 AE 3A 9F | ..Fc..:. + +Flow Record: + RecordCount = 14 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1608 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132217356 [2024-04-15 00:03:37.356] + last = 1713132217536 [2024-04-15 00:03:37.536] + received at = 1713132302717 [2024-04-15 00:05:02.717] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 63066 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 7012 + src addr = 13.224.103.47 + dst addr = 157.143.34.100 + out packets = 13 + out bytes = 1676 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 8.294 ms + srv latency = 0.000 ms + app latency = 0.126 ms + in payload = 1428 + TLS version = TLS 1.3 + ja3s hash = 16a232c6047ab4c7f493b826d419a8be + ja4s hash = t130500_c02f_a241d087c239 +16 03 03 00 63 02 00 00 5F 03 03 B6 34 33 F2 88 | ....c..._...43.. +78 52 42 1B 23 B5 25 06 E1 C5 F1 43 8E EA 02 12 | xRB.#.%....C.... +E8 BD 2C 44 4F 57 4E 47 52 44 01 20 A8 D8 47 33 | ..,DOWNGRD. ..G3 +1B CD 04 21 EC 56 BD B4 92 B7 03 50 6D 06 8A 40 | ...!.V.....Pm..@ +19 F1 9D 9C 44 0A 13 97 69 C2 4A 8A C0 2F 00 00 | ....D...i.J../.. +17 00 00 00 00 00 0B 00 02 01 00 FF 01 00 01 00 | ................ +00 05 00 00 00 17 00 00 16 03 03 13 93 0B 00 13 | ................ +8F 00 13 8C 00 06 0F 30 82 06 0B 30 82 04 F3 A0 | .......0...0.... +03 02 01 02 02 10 0A 28 52 01 F0 E0 3A 67 F4 F8 | .......(R...:g.. +C7 A1 48 40 12 B8 30 0D 06 09 2A 86 48 86 F7 0D | ..H@..0...*.H... +01 01 0B 05 00 30 3C 31 0B 30 09 06 03 55 04 06 | .....0<1.0...U.. +13 02 55 53 31 0F 30 0D 06 03 55 04 0A 13 06 41 | ..US1.0...U....A +6D 61 7A 6F 6E 31 1C 30 1A 06 03 55 04 03 13 13 | mazon1.0...U.... +41 6D 61 7A 6F 6E 20 52 53 41 20 32 30 34 38 20 | Amazon RSA 2048 +4D 30 31 30 1E 17 0D 32 33 30 37 31 30 30 30 30 | M010...230710000 +30 30 30 5A 17 0D 32 34 30 38 30 37 32 33 35 39 | 000Z..2408072359 +35 39 5A 30 14 31 12 30 10 06 03 55 04 03 13 09 | 59Z0.1.0...U.... +74 69 64 61 6C 2E 63 6F 6D 30 82 01 22 30 0D 06 | tidal.com0.."0.. +09 2A 86 48 86 F7 0D 01 01 01 05 00 03 82 01 0F | .*.H............ +00 30 82 01 0A 02 82 01 01 00 D8 DB 24 28 FF 06 | .0..........$(.. +62 F6 20 6C E1 1D 3C 09 F1 AF 3E 26 6B F1 90 4E | b. l..<...>&k..N +E7 D5 28 7C BD 18 AA E2 8F 06 66 64 65 35 62 25 | ..(|......fde5b% +4A 9D 59 73 C3 BD 0A 64 C0 29 6C AA CC F5 3F A4 | J.Ys...d.)l...?. +47 33 26 D1 13 96 93 01 DE 8A B0 B1 52 A7 20 F9 | G3&.........R. . +49 B9 F9 B0 04 D8 27 BF A0 52 55 7C 5F B5 9F EF | I.....'..RU|_... +CE 8E F0 EA 98 8D 49 2A FE 0B 65 E2 C5 29 06 33 | ......I*..e..).3 +91 C0 28 73 69 1E AB 09 06 E2 71 A2 0C 5F 50 A3 | ..(si.....q.._P. +82 7D BE F5 A2 B6 FC BE E2 55 FD BB 3E E3 7F 2B | .}.......U..>..+ +B8 6E D9 5D E0 75 49 6A CD DC 49 52 0B 58 C2 0B | .n.].uIj..IR.X.. +B4 35 31 C6 35 8C F2 90 AC 29 FA 74 EA EF 5F AD | .51.5....).t.._. +C3 2F B5 D0 04 4A CB 98 A8 8B 4B AE 22 86 58 EB | ./...J....K.".X. +E1 9E E0 B1 4F F4 F3 07 14 B5 14 62 99 33 85 5E | ....O......b.3.^ +60 B9 01 6A 6A 26 FE 78 0B 00 DF D9 B5 BA 39 A4 | `..jj&.x......9. +51 6F E1 88 1D 08 AE 05 B5 BD A9 50 BD 10 EC 45 | Qo.........P...E +16 89 84 41 35 8B 69 2E DC 52 07 44 E8 28 B3 4C | ...A5.i..R.D.(.L +0D A5 5F D9 8B 75 86 89 3C 93 02 03 01 00 01 A3 | .._..u..<....... +82 03 2F 30 82 03 2B 30 1F 06 03 55 1D 23 04 18 | ../0..+0...U.#.. +30 16 80 14 81 B8 0E 63 8A 89 12 18 E5 FA 3B 3B | 0......c......;; +50 95 9F E6 E5 90 13 85 30 1D 06 03 55 1D 0E 04 | P.......0...U... +16 04 14 A6 52 40 27 FC 32 CD 1D D0 81 EC 6B 98 | ....R@'.2.....k. +04 D6 8B FB 00 1D 81 30 61 06 03 55 1D 11 04 5A | .......0a..U...Z +30 58 82 09 74 69 64 61 6C 2E 63 6F 6D 82 0F 2A | 0X..tidal.com..* +2E 77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D | .wimpmusic.com.. +77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D 74 | wimpmusic.com..t +69 64 61 6C 68 69 66 69 2E 63 6F 6D 82 0B 2A 2E | idalhifi.com..*. +74 69 64 61 6C 2E 63 6F 6D 82 0F 2A 2E 74 69 64 | tidal.com..*.tid +61 6C 68 69 66 69 2E 63 6F 6D 30 0E 06 03 55 1D | alhifi.com0...U. +0F 01 01 FF 04 04 03 02 05 A0 30 1D 06 03 55 1D | ..........0...U. +25 04 16 30 14 06 08 2B 06 01 05 05 07 03 01 06 | %..0...+........ +08 2B 06 01 05 05 07 03 02 30 3B 06 03 55 1D 1F | .+.......0;..U.. +04 34 30 32 30 30 A0 2E A0 2C 86 2A 68 74 74 70 | .40200...,.*http +3A 2F 2F 63 72 6C 2E 72 32 6D 30 31 2E 61 6D 61 | ://crl.r2m01.ama +7A 6F 6E 74 72 75 73 74 2E 63 6F 6D 2F 72 32 6D | zontrust.com/r2m +30 31 2E 63 72 6C 30 13 06 03 55 1D 20 04 0C 30 | 01.crl0...U. ..0 +0A 30 08 06 06 67 81 0C 01 02 01 30 75 06 08 2B | .0...g.....0u..+ +06 01 05 05 07 01 01 04 69 30 67 30 2D 06 08 2B | ........i0g0-..+ +06 01 05 05 07 30 01 86 21 68 74 74 70 3A 2F 2F | .....0..!http:// +6F 63 73 70 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F | ocsp.r2m01.amazo +6E 74 72 75 73 74 2E 63 6F 6D 30 36 06 08 2B 06 | ntrust.com06..+. +01 05 05 07 30 02 86 2A 68 74 74 70 3A 2F 2F 63 | ....0..*http://c +72 74 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F 6E 74 | rt.r2m01.amazont +72 75 73 74 2E 63 6F 6D 2F 72 32 6D 30 31 2E 63 | rust.com/r2m01.c +65 72 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 | er0...U.......0. +30 82 01 7E 06 0A 2B 06 01 04 01 D6 79 02 04 02 | 0..~..+.....y... +04 82 01 6E 04 82 01 6A 01 68 00 76 00 EE CD D0 | ...n...j.h.v.... +64 D5 DB 1A CE C5 5C B7 9D B4 CD 13 A2 32 87 46 | d.....\......2.F +7C BC EC DE C3 51 48 59 46 71 1F B5 9B 00 00 01 | |....QHYFq...... +89 3E 21 77 27 00 00 04 03 00 47 30 45 02 21 00 | .>!w'.....G0E.!. +C3 53 34 AF 43 03 C8 C1 11 23 3E C1 40 EF 06 27 | .S4.C....#>.@..' +CD E1 7A 49 8B DD 92 84 2B 16 63 6C 2A B5 A2 E2 | ..zI....+.cl*... +02 20 0F C9 0F B9 45 4D E3 88 94 3D 75 78 15 CC | . ....EM...=ux.. +7F 6B 35 8B 00 3B 7B 0E 8A 1C 2D 27 86 24 17 F5 | .k5..;{...-'.$.. +63 B7 00 76 00 48 B0 E3 6B DA A6 47 34 0F E5 6A | c..v.H..k..G4..j +02 FA 9D 30 EB 1C 52 01 CB 56 DD 2C 81 D9 BB BF | ...0..R..V.,.... +AB 39 D8 84 73 00 00 01 89 3E 21 77 04 00 00 04 | .9..s....>!w.... +03 00 47 30 45 02 21 00 AC F0 89 AA C4 1F 25 10 | ..G0E.!.......%. +2E 63 EB 9F 51 F8 34 FC B8 E9 87 80 67 CF FE 12 | .c..Q.4.....g... +46 67 8D 9C ED 23 25 A6 02 20 0D 0C 2F 87 19 F4 | Fg...#%.. ../... +EF 94 64 B0 F4 2D 7D 3C 5E 33 52 8D 7B D4 E0 FB | ..d..-}<^3R.{... +4D 9A 14 C8 E1 65 89 5E C6 C4 00 76 00 DA B6 BF | M....e.^...v.... +6B 3F B5 B6 22 9F 9B C2 BB 5C 6B E8 70 91 71 6C | k?.."....\k.p.ql +BB 51 84 85 34 BD A4 3D 30 48 D7 FB AB 00 00 01 | .Q..4..=0H...... +89 3E 21 76 E0 00 00 04 03 00 47 30 45 02 21 00 | .>!v......G0E.!. +86 79 F0 C1 4E 93 9C 55 56 DF 1B 18 DC AF 80 B5 | .y..N..UV....... +DB 29 68 19 86 6B B1 AF A0 E3 0D A5 91 42 42 37 | .)h..k.......BB7 +02 20 53 72 52 08 2E 09 7A E8 B8 10 1E AA C5 7D | . SrR...z......} +0F D0 25 D2 EE 1D EC F5 E1 09 2D F5 B4 12 3A 83 | ..%.......-...:. +59 A7 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 | Y.0...*.H....... +00 03 82 01 01 00 4F E5 AC 91 4E 4A 44 05 5D 5D | ......O...NJD.]] +D3 9D AC B4 | .... + +Flow Record: + RecordCount = 15 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 12 15 17 29 + size = 1552 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132383422 [2024-04-15 00:06:23.422] + last = 1713132383682 [2024-04-15 00:06:23.682] + received at = 1713132487351 [2024-04-15 00:08:07.351] + proto = 6 TCP + tcp flags = 0x1a ...AP.S. + src port = 443 + dst port = 51203 + src tos = 0 + fwd status = 0 + in packets = 10 + in bytes = 5830 + src addr = 172.217.168.3 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 11.892 ms + srv latency = 0.000 ms + app latency = 12.273 ms + in payload = 1400 + TLS version = TLS 1.3 + ja3s hash = eb1d94daa7e0344597e756a1fb6e7054 + ja4s hash = t130200_1301_234ea6891581 +16 03 03 00 7A 02 00 00 76 03 03 8B 6A FF 3D D8 | ....z...v...j.=. +80 07 13 E3 58 50 71 3F 59 82 6D E4 84 79 91 A6 | ....XPq?Y.m..y.. +4F 49 70 98 49 76 7F 09 6B 17 B9 20 82 74 02 0F | OIp.Iv..k.. .t.. +67 B4 15 96 F5 76 60 19 36 1A 59 CC 40 18 6C 70 | g....v`.6.Y.@.lp +CF D5 A6 5F CE 26 99 60 E0 00 F9 3F 13 01 00 00 | ..._.&.`...?.... +2E 00 33 00 24 00 1D 00 20 30 B0 9E DB 3B 2C BE | ..3.$... 0...;,. +E9 EB C1 01 12 54 BD 2D 6D 7C DC 91 C8 10 3E 50 | .....T.-m|....>P +21 38 B3 BF 0D 17 B3 23 2E 00 2B 00 02 03 04 14 | !8.....#..+..... +03 03 00 01 01 17 03 03 10 5C 1B 1C E6 64 5E F0 | .........\...d^. +BC 23 4E CE 2F 95 23 32 32 F0 D1 C5 ED 6F 22 B2 | .#N./.#22....o". +61 F3 E0 FD 3D 9A B1 EB 4E 0C 84 31 67 3D 12 24 | a...=...N..1g=.$ +3A 60 85 48 30 FF 7C 88 15 33 F6 4E F7 61 69 8E | :`.H0.|..3.N.ai. +3B 30 A8 13 DE 16 39 58 16 2E E0 3B 83 1F 8B D6 | ;0....9X...;.... +D8 4E 0A 3C 51 EF D5 AB 44 CE 79 0D 9D 24 FB 9C | .N. +AD D5 BB E6 86 80 3A 13 19 AB EA 8B E0 C3 9F 56 | ......:........V +EC 27 56 2B 98 40 10 71 D1 5E C9 59 11 B4 93 53 | .'V+.@.q.^.Y...S +A5 F5 CE A3 65 77 54 07 35 AC 0D 66 04 DF 75 7E | ....ewT.5..f..u~ +4B 98 BD 6A 8E AB 02 C7 EB AA 0C 07 5B 13 B7 7D | K..j........[..} +25 7B 62 D2 BD 07 09 D2 7C 7B 25 23 7D 46 BE 4E | %{b.....|{%#}F.N +3C A0 DE 29 29 00 4A 09 68 A8 01 C9 DF 8C ED 0E | <..)).J.h....... +AE 80 6E 39 37 D2 B0 30 97 72 A0 3F 1F 69 E6 03 | ..n97..0.r.?.i.. +DA F7 C4 2F 9F 38 1E 1F 26 63 7B EE E5 A0 48 30 | .../.8..&c{...H0 +AF 8B E5 53 69 49 6D 6C 25 B6 67 43 56 8F 6A 97 | ...SiIml%.gCV.j. +03 33 68 7A 3C 2C 00 7E 0C 3D 85 20 76 FC E0 9D | .3hz<,.~.=. v... +4E 64 1B 0F 78 31 F7 B5 81 C7 FB 29 0E F2 A5 24 | Nd..x1.....)...$ +37 FD BF A2 3D 53 A7 BE 23 4A 38 3F 55 97 E3 27 | 7...=S..#J8?U..' +90 0D 67 84 F7 26 7D 50 9F E6 4B 28 0D 5F BE 65 | ..g..&}P..K(._.e +70 3E 32 3B C0 E9 CB 56 DD 0D 3D E9 C0 AA F8 0F | p>2;...V..=..... +6E CF 57 A6 40 CE D9 D8 1C D9 2D 03 E1 C9 E0 C0 | n.W.@.....-..... +9E 9F 70 14 07 19 5C 94 7B CF 57 48 7C C0 53 C7 | ..p...\.{.WH|.S. +93 C3 F3 CE BE 95 1E 8C 91 DF 20 4E E8 EE 9F 0B | .......... N.... +CC 5A 8D F0 73 88 64 E6 8F E1 3F E9 A8 F1 90 7E | .Z..s.d...?....~ +FB C0 2D 64 70 63 9B 1C 79 3F 48 00 8D B5 9B 40 | ..-dpc..y?H....@ +5F 56 6B 6F C0 15 B9 6C 70 22 3E C8 8C DB BC D5 | _Vko...lp">..... +AC 93 7D 61 26 2E C4 7F 84 2F F1 91 9D 19 64 17 | ..}a&..../....d. +6E 63 E0 3B 31 E7 09 B2 5F E2 B8 12 E1 0E DC DF | nc.;1..._....... +D8 39 E7 42 5F FD E7 DE BC C3 12 B3 40 C3 47 C2 | .9.B_.......@.G. +8D 56 57 98 A0 E1 F3 80 23 C5 40 F2 0C A7 12 94 | .VW.....#.@..... +F1 2E EF B0 CD 47 60 FF 0E C0 F4 0E 1E 0C E4 BD | .....G`......... +BF C5 4F 95 D9 5C 57 C0 42 C1 2F 5D 92 BB 89 BF | ..O..\W.B./].... +68 13 46 27 E3 C1 2F 79 AB F4 77 F0 DF 42 9B 38 | h.F'../y..w..B.8 +28 6D 5B FE 17 BC AB F8 36 44 75 73 CF 54 2A E2 | (m[.....6Dus.T*. +F3 00 A0 57 7C 80 2F D7 6A 45 D1 C0 80 D4 B9 86 | ...W|./.jE...... +09 EF D7 50 06 EB 3C 04 E3 B1 02 53 9F 7E ED 82 | ...P..<....S.~.. +32 87 23 39 5A C3 06 58 33 F4 DB E3 4C EE 32 0B | 2.#9Z..X3...L.2. +9A 30 DC D5 E3 E3 50 1B 41 76 2C E3 CD 95 97 1F | .0....P.Av,..... +5E BA 6F 14 72 BB 07 1A B0 A2 DA B7 EC C2 0A 97 | ^.o.r........... +44 51 D1 19 BB A4 77 29 8C D2 2B AD 68 DA C5 D9 | DQ....w)..+.h... +7B 07 A8 09 8D FA A7 CC E0 1C F9 13 6D 56 EC 88 | {...........mV.. +AD 45 C7 76 0E 5D 19 44 74 82 CD B3 23 68 96 71 | .E.v.].Dt...#h.q +2C 89 02 CA C1 0C 3C 81 70 51 A3 97 94 76 42 29 | ,.....<.pQ...vB) +58 54 9D 04 C3 41 7C FC A5 0B 5D 50 2E EF 1C 3B | XT...A|...]P...; +AD 61 1A 9C 0B 84 D2 01 D1 DC 79 E8 98 94 9C 81 | .a........y..... +F2 81 DA FC 31 A7 62 21 E9 06 EA 95 01 A9 32 A2 | ....1.b!......2. +71 F9 0A CF C4 20 AA 27 15 BA 63 9C DE 77 00 C9 | q.... .'..c..w.. +46 F6 FC 6D E0 DE 8F 80 DD FC 52 90 5B FD F4 72 | F..m......R.[..r +8C 8F DE EF 9F 9F FD 9B 16 1D B3 01 CD 7E D6 5B | .............~.[ +D0 1A 56 B1 6D 05 B1 B3 7A FE 16 F8 CB A6 2B 7B | ..V.m...z.....+{ +12 89 93 A9 FF 8A 6B CF 0B 93 F3 6F 18 CE C7 EF | ......k....o.... +8F AF 96 8F DA F0 4F DC 07 35 F3 83 F8 C6 04 57 | ......O..5.....W +A2 05 74 9C C0 AD 12 9D 7C 84 84 E5 84 52 33 0C | ..t.....|....R3. +52 DB 74 C2 3E E8 5A A8 40 73 D4 26 C2 F4 67 5E | R.t.>.Z.@s.&..g^ +42 F4 F9 11 73 DD B8 47 18 06 B9 C5 10 A7 1F BE | B...s..G........ +DD 6E BF 9B 0F 1A 25 1C 97 37 6D 8B FD 34 C4 1C | .n....%..7m..4.. +1D D8 EA A2 B0 CE B1 EA 19 A1 CC 80 B8 54 4C B3 | .............TL. +3A 61 DD CC 71 A5 19 56 D2 19 5C 31 03 5F 45 70 | :a..q..V..\1._Ep +4D 19 E0 F6 10 AA F4 62 07 CB F4 23 13 09 4C 8E | M......b...#..L. +00 02 00 3E A0 E5 01 07 1D 85 C9 2B 14 18 C7 34 | ...>.......+...4 +24 3F 76 2E 45 0A 49 3F BC 0C 3C 5D 95 9F FE F7 | $?v.E.I?..<].... +61 25 43 C9 83 25 BB 6B D8 C3 EF AE 0C 44 0F F4 | a%C..%.k.....D.. +40 0C F5 0C 5F CE 4D DF 07 95 DE B9 C3 BC 51 A8 | @..._.M.......Q. +C7 0F 55 50 46 41 64 FB 6B 8D 48 3F 49 75 1B DE | ..UPFAd.k.H?Iu.. +37 0F F5 86 6F 90 48 4D 46 B6 30 D2 9F 0F 24 76 | 7...o.HMF.0...$v +93 A8 93 62 0E A0 F1 7A CC 5F 3D 10 DB B9 C6 EA | ...b...z._=..... +F4 29 82 A5 9B 97 9C AC 3B 9D 90 4E 4A 64 1B 06 | .)......;..NJd.. +E4 F0 C0 E7 A0 E4 5B B2 FF 40 DA A4 4E 95 80 43 | ......[..@..N..C +5C E7 F7 37 32 6B F7 AB ED 11 CE 49 21 B8 F0 F4 | \..72k.....I!... +40 21 57 19 F1 CF 88 A2 A9 A5 13 C4 5D A7 4B 88 | @!W.........].K. +80 C7 A6 85 52 A4 F6 1F 39 50 DB 40 E2 E4 E4 DF | ....R...9P.@.... +22 5F 0F B8 66 D5 6A 43 D3 27 E6 D3 CA A0 4A A6 | "_..f.jC.'....J. +25 38 34 4F CC C6 7D 67 03 24 0C 40 3D 5C C6 24 | %84O..}g.$.@=\.$ +FC 9B 32 35 C3 C5 6C 02 | ..25..l. + +Flow Record: + RecordCount = 16 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 5 12 15 29 + size = 1402 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132381097 [2024-04-15 00:06:21.097] + last = 1713132381591 [2024-04-15 00:06:21.591] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 53011 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 9134 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + out packets = 32 + out bytes = 10776 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +C3 00 00 00 01 00 08 E7 13 B0 C5 BD EF F7 C0 00 | ................ +44 D0 75 F6 A3 03 41 C8 A0 F9 02 4C E7 10 86 9D | D.u...A....L.... +67 D6 F8 F6 AA E1 21 76 FD 84 3B 22 B6 F3 FE 11 | g.....!v..;".... +76 6F D5 9C 0B EA 10 C1 5F EC D6 60 D0 BD 73 EE | vo......_..`..s. +7F 77 0F D6 82 1A 86 91 15 BC 80 A7 71 05 D6 9D | .w..........q... +7C 24 CD E6 F4 3B 7D 09 7F C2 EE 8F 6D 7C 3D 83 | |$...;}.....m|=. +B6 57 6E 02 94 7B AF 1C 00 A2 00 90 24 03 10 BB | .Wn..{......$... +3C 02 4F BF 36 CE 45 1E 48 D3 8E 42 5D 17 53 C9 | <.O.6.E.H..B].S. +FB 54 B9 FD AF 01 0D 9D 6D 94 7A B7 7B 6E 32 22 | .T......m.z.{n2" +C6 FB 4F C3 0F AC F0 8F 74 6C B3 FF E8 FB 19 B9 | ..O.....tl...... +8D C3 44 F9 A3 76 37 DD C0 BB 17 C2 24 34 A8 3E | ..D..v7.....$4.> +70 27 1B CC 83 3A F0 18 77 70 A5 03 BB 0B 2F 11 | p'...:..wp..../. +1A E1 D0 F8 7B A7 AF 78 AF DC 4F 92 31 B7 13 38 | ....{..x..O.1..8 +CB A7 87 6C F5 00 39 43 2F 44 AC BB 06 50 0E EA | ...l..9C/D...P.. +1E D2 0C 96 C8 08 76 C5 7C D9 78 94 AB 24 AA 13 | ......v.|.x..$.. +23 4C A3 10 F4 2C FB 27 46 A1 7F 07 F7 54 72 36 | #L...,.'F....Tr6 +4F 09 9E A2 5F 78 78 91 83 F0 4D 43 B9 48 AB 43 | O..._xx...MC.H.C +0B EA C0 F8 74 49 BA C3 ED 78 EC 99 EC C3 22 F7 | ....tI...x....". +DF FD 57 09 D2 3D ED D8 A6 A5 51 7F B2 2D 1F 56 | ..W..=....Q..-.V +7A 43 38 9A 97 7F C2 66 D3 D3 EA 67 1A 4D 19 52 | zC8....f...g.M.R +98 69 0D 86 D1 93 6F 70 45 15 44 6A 73 64 96 59 | .i....opE.Djsd.Y +91 31 6A 4E 2A EB F8 ED 51 3B 73 31 31 77 97 2B | .1jN*...Q;s11w.+ +C5 D4 C3 CA 8D C0 FC E4 6B 13 FC 22 8F 65 A6 FC | ........k..".e.. +B1 C1 F7 87 8E 88 FB D2 F8 65 BA 7F 9D 30 D1 4D | .........e...0.M +0A CE FD 0A A4 A4 88 D1 2C 2A 05 FF 9C 5B 9E 20 | ........,*...[. +4F D4 6F 56 DA D5 3C AA C9 A7 B2 CE B5 B3 27 43 | O.oV..<.......'C +EF BB BF 8F 1A 2E A5 71 1D 08 AA A2 53 2A D8 41 | .......q....S*.A +E0 6D 43 49 47 09 07 D3 64 EE 29 60 24 63 6A B3 | .mCIG...d.)`$cj. +39 87 10 DC 5E AA E7 5A 50 8B 4F 96 AE 14 35 8D | 9...^..ZP.O...5. +4A 30 88 03 DE 99 86 A4 FE B4 07 CC C8 9C 4A 3D | J0............J= +96 54 33 36 61 12 C8 87 3B A4 D3 72 75 E0 5F 4E | .T36a...;..ru._N +A9 8A 22 C8 C9 04 5A 64 73 3B 90 96 8D BA 66 3C | .."...Zds;....f< +C9 B0 86 43 3B A2 F9 FF BF 2B 79 12 65 36 6C 3B | ...C;....+y.e6l; +95 00 C6 9C 8D B8 5F 9D 5B FE BF 5F C6 92 C4 A5 | ......_.[.._.... +19 A7 DB 60 F7 DE 55 51 95 90 26 84 BD 2B 98 D9 | ...`..UQ..&..+.. +6E 1C 83 BC 12 DC 11 30 88 E5 64 F5 E4 D5 A2 0E | n......0..d..... +62 54 2E 53 4C DC 36 7F 83 8C A9 F7 BA 31 3B F4 | bT.SL.6......1;. +DD 39 E4 55 C4 32 AD D0 6C F9 91 55 52 B4 0D DF | .9.U.2..l..UR... +12 3A 38 1B B4 E5 76 80 FB 6D 54 89 00 63 D0 9E | .:8...v..mT..c.. +0C 39 E4 95 E3 31 82 3F 8D CF 52 C6 58 D3 B0 8E | .9...1.?..R.X... +65 57 EE C9 A6 54 8A E9 D3 66 4F 44 3F 10 3F 09 | eW...T...fOD?.?. +84 3A 69 91 3C D5 6B 7F 71 E5 3E AC AE 7D 1A 27 | .:i.<.k.q.>..}.' +D5 06 72 CC 7D 8B 1C E1 2F 57 56 FD 17 62 27 E2 | ..r.}.../WV..b'. +B5 9D AB 2B C1 ED 19 2A CF A3 76 C3 D5 0A 45 F0 | ...+...*..v...E. +89 2C 96 E0 57 20 09 37 4F ED 4E 86 EE 5B 16 9B | .,..W .7O.N..[.. +34 DB 86 27 1A 5B 94 EE 46 1C BA AF 84 61 87 79 | 4..'.[..F....a.y +AB BC 1B 99 25 ED 02 EF F1 A7 D4 EB F9 DC C0 BC | ....%........... +6D 2B 9B D0 E3 19 31 67 CD 25 C9 A9 87 36 A5 1C | m+....1g.%...6.. +23 43 29 72 3E 5D 54 3C 06 CF 0D 7E 9C 9E 36 5C | #C)r>]T<...~..6\ +9A 7E 0A 3B 7C CC 87 A2 B7 0D 62 D1 B3 AB B3 38 | .~.;|.....b....8 +7A 2B 3F 9C 06 DB 58 90 9B F2 B9 B1 24 3F 50 B2 | z+?...X.....$?P. +09 AA CA 7D C2 6C B1 66 A2 C8 9C 2A 8A 87 3C 61 | ...}.l.f...*.. +69 2D 2D D5 A9 EC 6B 78 F4 A6 1C 9D 2E 6D 48 A5 | i--...kx.....mH. +7F F3 70 E0 3F 0E 63 CA 43 FD FE B4 62 DD BD 0A | ..p.?.c.C...b... +18 F9 A0 F4 AD A5 8B 2A 68 ED 80 BE 9D 5C 8A 57 | .......*h....\.W +CB 97 FD D6 F7 57 D1 FE BF 73 2D 9B FC CF 29 3E | .....W...s-...)> +E7 07 03 8F D2 BD 77 40 F7 BE CA 13 C7 9F 78 A2 | ......w@......x. +95 87 5C 8F 98 F0 40 47 88 F7 2E 82 C1 2C 73 5A | ..\...@G.....,sZ +A5 4D B8 3F A9 4A 02 F6 F7 AB A8 A8 92 0B 39 67 | .M.?.J........9g +5B CE 54 72 E3 B6 95 F8 9E 9F EC 13 5D B4 54 1D | [.Tr........].T. +87 05 0E DC D2 68 2D 1D 61 6B FD 4E 71 1E 54 98 | .....h-.ak.Nq.T. +13 1E C1 3C 60 13 B0 56 7F 83 65 84 BA D8 EE 25 | ...<`..V..e....% +71 87 91 AD FC 3E BB 5A 17 DA BD C9 2A 4A 88 D4 | q....>.Z....*J.. +0B 7E 5F 07 F1 E1 B3 B1 C2 34 93 A0 2F 36 8D BF | .~_......4../6.. +5E 52 D5 C0 A9 F3 04 97 96 43 53 28 0B 0F 99 6D | ^R.......CS(...m +AC F7 | .. + +Flow Record: + RecordCount = 17 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 207 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131973733 [2024-04-14 23:59:33.733] + last = 1713132274013 [2024-04-15 00:04:34.013] + received at = 1713132302717 [2024-04-15 00:05:02.717] + proto = 6 TCP + tcp flags = 0x18 ...AP... + src port = 58186 + dst port = 5228 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 1008 + src addr = 157.143.34.100 + dst addr = 172.217.218.188 + out packets = 18 + out bytes = 1098 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 22.592 ms + srv latency = 0.000 ms + app latency = 60021.633 ms + in payload = 27 +17 03 03 00 16 9B DC 11 55 10 BF F9 A3 22 CC 05 | ........U....".. +48 4B 8D F8 CE 75 87 33 C8 94 5A | HK...u.3..Z + +Flow Record: + RecordCount = 18 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 12 15 17 29 + size = 1552 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132383212 [2024-04-15 00:06:23.212] + last = 1713132383255 [2024-04-15 00:06:23.255] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 6 TCP + tcp flags = 0x1a ...AP.S. + src port = 443 + dst port = 59891 + src tos = 0 + fwd status = 0 + in packets = 7 + in bytes = 6183 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 14.087 ms + srv latency = 0.000 ms + app latency = 12.190 ms + in payload = 1400 + TLS version = TLS 1.3 + ja3s hash = eb1d94daa7e0344597e756a1fb6e7054 + ja4s hash = t130200_1301_234ea6891581 +16 03 03 00 7A 02 00 00 76 03 03 13 E1 DC 7D B5 | ....z...v.....}. +69 92 B1 0C A0 2C 7C C4 38 37 56 94 C6 C2 3B 83 | i....,|.87V...;. +45 89 8F EA BD C8 39 28 08 49 68 20 30 9B C6 11 | E.....9(.Ih 0... +6E 0B CF DF 1C 95 F8 BC F5 22 4D 40 FF 75 57 F7 | n........"M@.uW. +07 93 99 A5 47 45 E0 7D 8D 54 B7 EE 13 01 00 00 | ....GE.}.T...... +2E 00 33 00 24 00 1D 00 20 97 D6 73 BB 08 FC B3 | ..3.$... ..s.... +28 4B 73 E5 F1 82 7D A0 71 92 4F 55 EE 63 2C 20 | (Ks...}.q.OU.c, +22 F2 2B 12 10 DA 4F D0 43 00 2B 00 02 03 04 14 | ".+...O.C.+..... +03 03 00 01 01 17 03 03 12 65 79 4A E7 22 BA 6E | .........eyJ.".n +28 C0 53 AB 67 D1 8C 12 DA 7B 3F 13 4A 0A C6 BC | (.S.g....{?.J... +B7 47 EC E7 9F 83 D9 90 65 80 BD C9 6C B7 C9 DF | .G......e...l... +2B BF 9F 34 52 0F 61 28 79 A7 BF 68 D0 47 27 24 | +..4R.a(y..h.G'$ +3A 87 A9 F4 85 ED 88 A5 65 D8 2D E6 D6 59 F9 41 | :.......e.-..Y.A +91 3D 23 E9 21 DC 44 04 61 39 72 2B 39 B5 55 89 | .=#.!.D.a9r+9.U. +4C A6 C8 A8 F9 D0 06 E8 CC A5 FD A6 80 40 77 0D | L............@w. +27 24 BD 8C C3 6D 1E 57 FC 63 3C 79 9D 39 A2 56 | '$...m.W.c +91 25 C1 3E 20 6F 8F 6D 87 FA CF BE C4 3F 3F B1 | .%.> o.m.....??. +B9 11 BC F1 3E 74 67 CD 3A F3 F2 B5 68 6D 0A E9 | ....>tg.:...hm.. +45 1A 96 FA B7 82 CC 26 88 42 40 F3 05 DB 81 89 | E......&.B@..... +2C 63 41 E4 D7 F4 58 9C 29 CF D6 D1 78 0B 59 63 | ,cA...X.)...x.Yc +EA CD DB AA 45 0D BE 18 14 40 39 12 BE B1 A5 BE | ....E....@9..... +80 FD 87 14 C5 10 40 8D 72 D1 9D E0 DE 69 1E 28 | ......@.r....i.( +4D 0C 7C 89 65 44 F3 D3 C8 1F 68 07 A8 DF EF 63 | M.|.eD....h....c +14 6E 9C 54 5C 53 F4 FF B4 03 14 F6 72 C6 8F A9 | .n.T\S......r... +89 08 1F 58 44 E2 CA EB 26 CA 1C 57 C6 CB 3C 4E | ...XD...&..W........w#...A... +20 68 86 2D 02 DA 28 3B CF 4D 62 12 5F 2D 6C 6A | h.-..(;.Mb._-lj +AB 1C DA 4D 8F 98 AD 10 B5 02 45 64 94 AC 2A 99 | ...M......Ed..*. +66 12 AC DB B2 8F 14 D1 FB 0B 43 1D BF 07 AA 84 | f.........C..... +27 93 B2 B0 10 B0 39 06 07 EA 73 CE 1F E8 84 8C | '.....9...s..... +7C A1 26 B8 B2 43 11 BA C9 19 2F 9C 52 9A DF 17 | |.&..C..../.R... +2C 37 28 37 8B 3E 73 04 84 76 25 8F E2 A9 56 58 | ,7(7.>s..v%...VX +31 9E 77 27 2E 17 21 55 EA 58 52 05 FC C9 CB 18 | 1.w'..!U.XR..... +58 46 07 0E DA CA 4B 62 FA D1 78 F2 DA 07 77 84 | XF....Kb..x...w. +FE 75 84 85 17 09 E9 E5 B2 26 D8 73 26 36 FA F0 | .u.......&.s&6.. +C5 DF 91 49 9B F9 E2 74 25 40 B8 A1 15 41 00 F6 | ...I...t%@...A.. +FD B1 F1 CE 40 3F 2A 3A | ....@?*: + +Flow Record: + RecordCount = 19 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131988800 [2024-04-14 23:59:48.800] + last = 1713132019757 [2024-04-15 00:00:19.757] + received at = 1713132148815 [2024-04-15 00:02:28.815] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 56527 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18599 + src addr = 17.248.209.66 + dst addr = 157.143.34.100 + out packets = 32 + out bytes = 6945 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 20.998 ms + srv latency = 0.000 ms + app latency = 0.754 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 1C 7E C7 0C FC | ....z...v...~... +6D A3 32 54 9E A2 B0 09 49 4D 8A F1 75 55 F9 72 | m.2T....IM..uU.r +68 5B 28 B5 1D 19 4B 5B F7 A7 85 20 07 EB D9 DB | h[(...K[... .... +4D D5 2E 83 B5 12 E1 49 AA 70 13 F8 1B 5D 10 87 | M......I.p...].. +43 3F 20 B8 CA 28 6E 56 CD C8 C0 91 13 02 00 00 | C? ..(nV........ +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 E6 | ..+.....3.$... . +08 A1 60 FE 02 68 AA 96 43 AD 3A 49 56 70 BF DC | ..`..h..C.:IVp.. +66 F1 43 D2 84 9F 34 2D 6C 4F 9D EE DD 96 32 14 | f.C...4-lO....2. +03 03 00 01 01 17 03 03 00 2A 11 82 49 70 11 B5 | .........*..Ip.. +13 81 E2 1A 42 4B 6C 40 BB 91 D7 86 47 34 A2 1B | ....BKl@....G4.. +A6 46 C9 2A AE 5C 5F E5 BC 66 F7 AE 03 13 DA 0F | .F.*.\_..f...... +A6 F6 24 78 17 03 03 11 25 06 2E 11 AB 37 AD AA | ..$x....%....7.. +E1 B7 13 26 29 8F AB 4E A7 42 2C 8C F2 F2 6E E3 | ...&)..N.B,...n. +8B 40 E0 F5 6F 18 58 52 64 B4 FF 7A 41 D0 81 11 | .@..o.XRd..zA... +35 2C 6E 8A 4B 9F DC 71 A7 0B E8 5F EC C2 9D BD | 5,n.K..q..._.... +90 75 AA 44 F5 7C 56 68 60 A9 D8 66 20 1C DD 1D | .u.D.|Vh`..f ... +01 81 6C CC 7B A9 E3 0A FE 71 85 4C 83 43 06 4D | ..l.{....q.L.C.M +AF DA 96 03 F2 EF E4 78 49 7B 13 37 5F 8B 77 89 | .......xI{.7_.w. +6E B8 D5 80 85 8A C2 12 EE C2 E5 93 5C 22 EC 42 | n...........\".B +E6 FA EC 39 EA 33 9F 94 7F 82 C6 D1 EB 77 22 4B | ...9.3.......w"K +EA FF 80 1B 75 73 84 34 63 EF FD 9F 8C 65 14 61 | ....us.4c....e.a +6C 54 59 54 44 78 8B 0B C1 2F 7B E7 EB 89 E4 5D | lTYTDx.../{....] +B6 4A 1B FF E0 97 03 2E DC F9 01 F4 89 D7 4A B8 | .J............J. +8A 52 11 DB B7 07 8A 18 A1 B6 7C 52 30 55 14 9A | .R........|R0U.. +1F DF 4C E8 E6 A5 C4 CB F8 DE 13 67 E2 59 9E 93 | ..L........g.Y.. +35 62 46 F0 D4 E2 8A 29 07 65 96 FB 8E E1 F9 27 | 5bF....).e.....' +C6 CE 8E F3 01 57 79 A5 E5 88 C2 05 7F 64 55 74 | .....Wy......dUt +BB F6 9D 0F F7 3D F2 3C 7E 80 F9 03 B4 FB 4D D1 | .....=.<~.....M. +5E 09 FB 55 F9 0D 98 35 24 0E 4C 09 CD C3 02 A8 | ^..U...5$.L..... +B4 10 51 F3 29 24 68 F6 C0 53 EC 4D 83 BD 29 BE | ..Q.)$h..S.M..). +E5 F6 21 3C D1 96 91 6C D5 A9 56 42 F5 2B 2D F1 | ..!<...l..VB.+-. +AF 20 B5 E1 9E 3A 15 BA 44 55 BC 3F 99 72 72 EB | . ...:..DU.?.rr. +9B 5A 9B 84 CC 57 FE 3A 34 73 2D F7 F3 2E FD 3E | .Z...W.:4s-....> +46 92 39 71 B6 3A FC 55 BF B2 25 1C E6 3E BE 1B | F.9q.:.U..%..>.. +08 0F 08 FD 8D E8 85 D2 71 6F E0 19 7D 31 28 BF | ........qo..}1(. +8C 2A 5D 7F 20 94 E5 00 86 7D 3F 0B AA 44 27 81 | .*]. ....}?..D'. +78 A7 29 FC FA 5D F1 AD B6 25 D1 1D DF 01 BA 83 | x.)..]...%...... +7D A7 1E 23 E2 56 0F 25 51 97 AE 33 ED A3 FD A0 | }..#.V.%Q..3.... +02 C0 EA CD 07 AE 6A F1 B5 43 AC E7 FE A5 54 01 | ......j..C....T. +BD 1E BA A9 C7 A5 61 43 0B 3B 4A B8 00 CA 26 EB | ......aC.;J...&. +5D 91 F2 CD 55 91 E3 10 30 54 FD 51 C5 7F 5D 73 | ]...U...0T.Q..]s +93 32 7A A7 8E 6E B7 A9 24 AB DD D8 33 8D F0 E3 | .2z..n..$...3... +83 48 FB 94 30 25 27 73 A5 F2 C0 A1 5C 34 9F 03 | .H..0%'s....\4.. +8B 9E C4 DB D2 D9 C0 AA 50 41 27 06 A6 C8 C1 64 | ........PA'....d +E7 CF 05 FB FB A9 30 09 4A 19 8C 0D 80 81 59 15 | ......0.J.....Y. +98 CD 44 33 95 9B E8 48 FA F2 BD 2F 98 B5 79 6A | ..D3...H.../..yj +D7 61 FD 0A 4E 68 CE 5C CA FC 14 D0 C5 84 FD 06 | .a..Nh.\........ +B7 85 E8 1A 76 92 27 9F C7 F7 68 F8 78 BC 59 E6 | ....v.'...h.x.Y. +DE 27 99 D4 7D F8 42 5D 29 52 FA 61 34 3E DE C0 | .'..}.B])R.a4>.. +08 F5 D2 D1 B6 70 6B A7 04 F9 44 F2 54 AB F0 47 | .....pk...D.T..G +44 41 26 29 B4 8C 32 6F C4 2F 21 82 1D B4 D1 0B | DA&)..2o./!..... +BB DE 69 66 BD D8 8C 60 8D C6 19 35 1E 26 C1 DD | ..if...`...5.&.. +28 48 12 38 1E 60 B8 17 84 94 B2 76 26 37 52 CE | (H.8.`.....v&7R. +EB FD 05 EF 53 9F 3E 12 2B 8A 18 AF 2A AC B2 5D | ....S.>.+...*..] +C8 E1 07 3C 46 14 72 F1 B6 99 CF 4D 33 5D DD 1C | ...... +2A 86 4C 35 C1 FD 02 FD 46 F5 AD F5 D5 84 E5 AF | *.L5....F....... +04 9A 33 96 A7 39 5D B9 B5 CB 2C 3D A2 73 FB 82 | ..3..9]...,=.s.. +CA 69 71 3A 4C 37 64 EF E6 43 2E AE F9 94 8A 99 | .iq:L7d..C...... +0C 7B C9 B1 AF 72 FB 35 70 44 5F 68 F9 AA 27 1C | .{...r.5pD_h..'. +66 26 3C 6E 66 08 2B D9 87 4C CF 0E 60 EE 38 D2 | f&].. .(..... +CD EC 83 28 8D 6D 05 2A 1F 7E 80 80 35 EA 6E 48 | ...(.m.*.~..5.nH +5B A2 02 32 8C 1D 40 1F 31 9C 13 35 9E 2E 8B 97 | [..2..@.1..5.... +CC 2C F3 5B C9 70 0B FE C7 AE B7 8D FE D2 A5 A7 | .,.[.p.......... +33 2D 28 54 C3 CE 3D 3F 7B E3 93 51 E2 30 4F CC | 3-(T..=?{..Q.0O. +07 08 14 C0 CE 87 BA A8 02 46 57 73 D7 5A D7 E4 | .........FWs.Z.. +04 F7 5D 21 7A F9 01 D5 36 B2 5F 74 4F 59 BE 6E | ..]!z...6._tOY.n +71 F3 2D E2 FA AD 66 8B A5 AA 5F 3B DE 92 24 5A | q.-...f..._;..$Z +DB 80 39 86 E3 05 24 A5 FA D4 65 F6 B2 A2 05 47 | ..9...$...e....G +F9 0F 44 07 E8 5F 93 2D 8F EB CE 4E AF 41 34 7E | ..D.._.-...N.A4~ +07 66 4E 08 E6 EE C0 11 E9 84 3F 8C 0D A1 44 39 | .fN.......?...D9 +47 2D 06 A8 FC 56 44 DB FE C1 CE 7A BB F2 D4 6B | G-...VD....z...k +D4 59 47 1B 9F B4 A3 D1 2B 20 80 7C DD 53 03 13 | .YG.....+ .|.S.. +CE 45 03 E8 BF 27 4F 4E 19 2B 1E 6B 77 86 43 B1 | .E...'ON.+.kw.C. +CE E3 04 8F 7D 39 B9 1E 07 38 43 FE 97 97 89 D9 | ....}9...8C..... +F2 B0 C2 0B 63 B3 3E 72 62 B3 39 07 77 88 30 BF | ....c.>rb.9.w.0. +A9 15 FF C8 45 2D 85 39 35 0A 92 8F 7B 36 70 7F | ....E-.95...{6p. +D4 90 1D 48 19 9A 94 9D F1 D0 84 90 DF A5 23 7A | ...H..........#z +51 53 B2 A6 9C D7 FB 39 C0 17 CC 2D 7D 91 1E 14 | QS.....9...-}... +A1 6F 07 5C 99 86 97 8C 48 5B 79 55 10 2D 60 3C | .o.\....H[yU.-`< +F9 20 83 DD 67 5D 55 E7 55 59 59 C3 DC E1 B0 D0 | . ..g]U.UYY..... +B5 A2 43 E2 72 D0 CC 69 20 92 D3 5C 03 DA AF 3D | ..C.r..i ..\...= +DF 60 BC 86 10 F3 A4 0F 63 7F B4 52 2F FE 7C 76 | .`......c..R/.|v +3A 3D 75 65 F3 9B 07 8F C4 AF B2 95 AA 72 F0 15 | :=ue.........r.. +CE A8 85 D6 B3 16 10 A4 22 77 54 61 13 BB A8 A1 | ........"wTa.... +57 4C DE 92 81 E9 39 2C DF 97 78 F5 DB AB C6 26 | WL....9,..x....& +7C FB 02 49 A4 91 16 9B 40 83 10 E5 C5 BA 48 D5 | |..I....@.....H. +C3 83 90 65 EE 34 1B AD 85 6C E8 9B 95 4D 7C 6E | ...e.4...l...M|n +46 1C E9 B3 C5 FA B3 80 AF DB 46 81 95 91 B9 7F | F.........F..... +85 01 00 96 A9 8D AF 79 82 82 F3 4E B3 F9 16 C0 | .......y...N.... +64 CF 15 B4 80 A1 5F AF 7F 13 76 20 A2 25 B8 F8 | d....._...v .%.. +89 9C 8C 6B 54 53 9C E0 41 47 AA FC 58 20 E7 6F | ...kTS..AG..X .o +77 47 A0 E0 00 00 00 01 00 08 F5 2F 5E B8 7A 96 | wG........./^.z. +2F 0C 40 DC A5 62 B8 43 14 9B 03 D9 9D AC FD 15 | /.@..b.C........ +18 C8 37 F8 36 48 2B 23 95 87 69 A0 EF C0 FB F7 | ..7.6H+#..i..... +72 F4 5A BD 20 92 D4 A5 7D 71 5F 2E 94 4B FA 82 | r.Z. ...}q_..K.. +50 F2 9A C4 E2 4B 8D E0 B7 3E E1 21 34 EF 5F 83 | P....K...>.!4._. +DF 78 BF 09 8F 55 FC 0F 00 EB 2E 5F D8 6C 07 79 | .x...U....._.l.y +88 53 1D FC DE F9 4A BE 7A E3 3F 2B 75 01 97 78 | .S....J.z.?+u..x +66 8E E6 C0 30 D7 8F 53 0C 9D 2F 39 3A 27 56 20 | f...0..S../9:'V +56 A6 1B E4 87 DE F8 AC 1B 32 5D 85 7A B5 AA 35 | V........2].z..5 +89 39 8B C0 40 60 D2 00 58 69 AE ED 16 52 23 E3 | .9..@`..Xi...R#. +D2 4E 0B EE 1C 4C FE 8B A1 55 2D 41 E7 9E 0B 89 | .N...L...U-A.... +C6 D2 86 68 E7 D9 24 8A B3 C4 BD 15 82 56 8B F0 | ...h..$......V.. +2D 6D 9C 35 CC 4A 2C 10 EB 76 94 A5 10 FB 59 68 | -m.5.J,..v....Yh +C4 A4 7D 5B 0D FC 1E E3 BE 64 A9 AF D6 DA DE 81 | ..}[.....d...... +EA 99 92 3F 4E BE 74 61 0F FC 9D 85 46 01 05 8F | ...?N.ta....F... +45 25 EF 18 E8 76 47 39 48 99 AA 13 A0 7E 7D B7 | E%...vG9H....~}. +E3 FF AE F4 17 45 8D 26 8A D2 AC 6D C7 3B 7D 97 | .....E.&...m.;}. +39 6F 8A 28 C8 BB 6D 2B CD 74 4B 14 CD 2B C7 B1 | 9o.(..m+.tK..+.. +B1 78 8E C5 6C A7 2D 98 88 BD 08 9D 2D 74 58 F8 | .x..l.-.....-tX. +6F C0 | o. + +Flow Record: + RecordCount = 22 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 697 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132261362 [2024-04-15 00:04:21.362] + last = 1713132262789 [2024-04-15 00:04:22.789] + received at = 1713132344717 [2024-04-15 00:05:44.717] + proto = 6 TCP + tcp flags = 0xdf CE.APRSF + src port = 61426 + dst port = 443 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 2093 + src addr = 157.143.34.100 + dst addr = 2.21.22.179 + out packets = 14 + out bytes = 11736 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 8.926 ms + srv latency = 0.000 ms + app latency = 0.376 ms + in payload = 517 + TLS version = TLS 1.2 + sni name = weather-data.apple.com + ja3 hash = 5d5dfdf4aa8c9df35f686abcc6af682b + ja4 hash = t12d2014h1_a09f3c656075_14788d8d241b +16 03 01 02 00 01 00 01 FC 03 03 7D 64 24 23 B0 | ...........}d$#. +E7 C4 36 01 A0 3D 33 4A BC FE 74 FD 4E B6 7A 8E | ..6..=3J..t.N.z. +8E B3 5F 1F B3 D9 FD 8F 20 B6 D0 20 07 D2 65 9F | .._..... .. ..e. +8D 6D 56 BB 2D 2D 89 D1 22 8F 59 6F B1 25 1D 5D | .mV.--..".Yo.%.] +1F 68 C6 AF 0F 78 8D F1 52 58 85 C6 00 2A DA DA | .h...x..RX...*.. +13 01 13 02 13 03 C0 2C C0 2B CC A9 C0 30 C0 2F | .......,.+...0./ +CC A8 C0 0A C0 09 C0 14 C0 13 00 9D 00 9C 00 35 | ...............5 +00 2F C0 08 C0 12 00 0A 01 00 01 89 7A 7A 00 00 | ./..........zz.. +00 00 00 1B 00 19 00 00 16 77 65 61 74 68 65 72 | .........weather +2D 64 61 74 61 2E 61 70 70 6C 65 2E 63 6F 6D 00 | -data.apple.com. +17 00 00 FF 01 00 01 00 00 0A 00 0C 00 0A BA BA | ................ +00 1D 00 17 00 18 00 19 00 0B 00 02 01 00 00 10 | ................ +00 0B 00 09 08 68 74 74 70 2F 31 2E 31 00 05 00 | .....http/1.1... +05 01 00 00 00 00 00 0D 00 18 00 16 04 03 08 04 | ................ +04 01 05 03 02 03 08 05 08 05 05 01 08 06 06 01 | ................ +02 01 00 12 00 00 00 33 00 2B 00 29 BA BA 00 01 | .......3.+.).... +00 00 1D 00 20 4C F5 50 53 0E 60 45 CA 05 46 91 | .... L.PS.`E..F. +5F 2E 88 C2 12 9D B0 26 0B 41 D6 42 64 14 74 8E | _......&.A.Bd.t. +0C 5D 1E 7D 53 00 2D 00 02 01 01 00 2B 00 0B 0A | .].}S.-.....+... +9A 9A 03 04 03 03 03 02 03 01 00 1B 00 03 02 00 | ................ +01 1A 1A 00 01 00 00 15 00 BB 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 | ..... + +Flow Record: + RecordCount = 23 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1580 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132373946 [2024-04-15 00:06:13.946] + last = 1713132374109 [2024-04-15 00:06:14.109] + received at = 1713132441667 [2024-04-15 00:07:21.667] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 62402 + src tos = 0 + fwd status = 0 + in packets = 13 + in bytes = 9207 + src addr = 172.217.168.46 + dst addr = 157.143.34.100 + out packets = 14 + out bytes = 2093 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 77.332 ms + srv latency = 0.000 ms + app latency = 12.450 ms + in payload = 1400 + TLS version = TLS 1.3 + ja3s hash = 907bf3ecef1c987c889946b737b43de8 + ja4s hash = t130200_1302_234ea6891581 +16 03 03 00 7A 02 00 00 76 03 03 D5 71 BB B1 1A | ....z...v...q... +95 66 F2 88 85 6C F4 36 A9 82 04 93 1B 8F B1 9A | .f...l.6........ +0A 0D BA 3A BA 0F A7 24 71 07 5F 20 66 D7 B6 F8 | ...:...$q._ f... +AA AB 07 E8 E6 60 09 15 05 4D D8 2B 5B B8 7E 1F | .....`...M.+[.~. +1F 55 20 C5 CF B6 48 CF 77 B4 DD 8A 13 02 00 00 | .U ...H.w....... +2E 00 33 00 24 00 1D 00 20 61 8D 3B 33 BC 4C C7 | ..3.$... a.;3.L. +6C D4 C0 38 D7 48 73 09 48 FB F9 5E BE E9 FD BB | l..8.Hs.H..^.... +56 71 77 42 70 3F 63 38 21 00 2B 00 02 03 04 14 | VqwBp?c8!.+..... +03 03 00 01 01 17 03 03 1A 22 F1 BA 35 AF F6 99 | ........."..5... +A6 19 1C 08 09 BD EC 85 39 91 44 9A 56 06 02 10 | ........9.D.V... +A7 8E 6A 7E 06 03 7C 50 F7 DB 4D 49 F8 3B 9C 74 | ..j~..|P..MI.;.t +62 0C EA B7 24 C3 F5 11 09 B0 7B D6 BB 2D 88 BC | b...$.....{..-.. +3E 63 42 58 2A 33 DA 1F 90 C9 35 C4 A5 61 C6 92 | >cBX*3....5..a.. +FA 88 A4 C6 FF A5 FB AB 7D E5 C1 DC 1B 73 EA F8 | ........}....s.. +DF 10 21 D8 E6 B3 64 7B 6B B9 E1 77 6F AF 31 1A | ..!...d{k..wo.1. +87 AF 31 EA D7 8B 2B 67 CF 87 C3 C8 A1 43 D9 DA | ..1...+g.....C.. +39 7C 24 0E 29 87 92 4B ED D0 3F 74 DC 21 44 15 | 9|$.)..K..?t.!D. +47 9C 30 8A 22 33 6A 21 69 8B 7C 24 6E 49 3D D2 | G.0."3j!i.|$nI=. +E3 42 CF A8 3F AC F1 A3 97 B0 82 78 19 56 5E 3E | .B..?......x.V^> +17 91 A1 30 3A E9 4C 4D 5A 05 B0 51 E8 48 58 77 | ...0:.LMZ..Q.HXw +9C CF 0D 10 43 8E B6 22 C2 9A 95 10 F1 14 8C B0 | ....C.."........ +E3 DA 29 F0 91 41 A7 59 CD 45 A5 FB B9 73 9E 4A | ..)..A.Y.E...s.J +D3 DB D6 5C 32 C5 D9 EC 71 AF 67 CE FD C6 3A 0E | ...\2...q.g...:. +17 B6 FE E8 98 22 F3 73 81 47 32 05 39 3B FF BD | .....".s.G2.9;.. +00 3B F3 93 00 D8 45 C3 7F 7E C5 BE CD 96 58 08 | .;....E..~....X. +43 C9 30 86 91 22 03 8F F8 8A 6D 54 62 C9 59 74 | C.0.."....mTb.Yt +F4 DF 0C 7D D7 FE 9A 51 85 AB D8 EA 59 DF ED DD | ...}...Q....Y... +17 C8 B0 F7 6C 53 AB 80 BC 1C 3A CB E7 DE 9E D5 | ....lS....:..... +4C E1 0A F5 30 D5 31 0F 87 C5 C5 5B 7F 90 81 D7 | L...0.1....[.... +03 7F 35 39 F6 B1 15 A2 09 F3 11 34 F8 69 35 A3 | ..59.......4.i5. +E7 BB 74 48 6C A6 97 38 65 0A AB 65 A3 AC 6F 03 | ..tHl..8e..e..o. +D8 11 2C 54 7E 2B D8 17 90 1A 1A 44 FC FA C7 1D | ..,T~+.....D.... +0C 15 C5 89 1E EB C5 B1 8A 4B 68 A4 E5 DD 17 DB | .........Kh..... +9D 04 01 66 4E 91 8D 7E FD FE 2D 8A 7D 29 CB 85 | ...fN..~..-.}).. +38 81 40 85 AB 0D 7F 90 65 C0 EF 06 98 F0 23 8D | 8.@.....e.....#. +5E 0E DB 56 4A E7 67 5A 5A 09 4C 91 94 6A 55 01 | ^..VJ.gZZ.L..jU. +6D 39 72 3E F4 47 E6 3E 7C F7 BC C4 47 5D 53 9A | m9r>.G.>|...G]S. +8B 37 58 F8 BC 6A B6 41 42 85 86 FE 48 B7 38 3B | .7X..j.AB...H.8; +D2 90 A8 C0 74 5A 83 FF 20 4C 89 AD DE 53 DC 7E | ....tZ.. L...S.~ +63 2F 6B 4A 00 A8 F8 28 87 26 03 52 4F A9 2D 28 | c/kJ...(.&.RO.-( +C8 20 89 D5 65 A7 E7 1E D8 09 EB FF 5F AB E7 B7 | . ..e......._... +DD 79 5D 16 84 EC FC 9C 70 8C DE 53 CD CA 2C 11 | .y].....p..S..,. +05 EC 60 65 2B F4 91 D0 87 DA 61 F2 D5 E3 4C FF | ..`e+.....a...L. +1D 9B C2 FB C8 B6 1C 43 05 3F 88 48 74 FE 46 4B | .......C.?.Ht.FK +A9 6F A1 43 0E F7 09 4C 73 A5 2D 38 7F DF E6 79 | .o.C...Ls.-8...y +8E 4B 07 10 58 6F E9 16 C0 57 25 B9 D6 8A 0E 18 | .K..Xo...W%..... +85 F6 FE A8 DB 38 9A 86 D2 73 36 40 B4 49 D5 61 | .....8...s6@.I.a +CC F8 B3 FB E1 B1 A8 A9 E1 2A 23 E2 6D C8 30 7B | .........*#.m.0{ +96 94 55 E5 5D 04 88 B9 E6 53 AC C3 66 45 F5 E2 | ..U.]....S..fE.. +0F 6A 79 8F A6 2A EA 7D 2D 07 A2 AA 18 C3 C3 DC | .jy..*.}-....... +12 16 32 DA 36 27 00 DD F5 18 9C C1 2D CA C6 D2 | ..2.6'......-... +9D 7F D8 1B 2F 48 67 53 43 F2 51 D2 2C 6E 02 C6 | ..../HgSC.Q.,n.. +B5 C0 3C 13 59 FE 1F 23 D5 99 50 73 20 54 F8 D1 | ..<.Y..#..Ps T.. +8D 84 91 A3 1D 9B 9E 57 74 5A 62 9E B4 46 7D 1B | .......WtZb..F}. +E7 15 11 A1 96 BE B8 34 A2 7F F2 03 10 FF BB 5F | .......4......._ +49 11 C7 C9 63 A7 1B C6 92 D6 2D 02 8A 75 B5 85 | I...c.....-..u.. +57 01 3C 56 9E 35 D2 44 7F B1 A7 86 55 24 21 6B | W. +61 BB 7E CF 0E F3 C9 6F FE BD 4F 22 A6 C9 7D 78 | a.~....o..O"..}x +8A 0D 31 94 04 83 A5 15 89 B1 5C A9 B8 A4 59 CF | ..1.......\...Y. +F0 B0 C1 B9 3C 45 CC D1 A9 59 2B 32 88 EE 3E 79 | ....y +38 35 B6 D7 E8 00 F8 84 A6 47 64 0E 8B B3 F0 31 | 85.......Gd....1 +FD 27 C5 33 11 4C D0 F6 57 28 BA DF 1D 4C BA 36 | .'.3.L..W(...L.6 +4C C0 72 B5 B1 3A 18 04 93 69 4D 53 63 84 36 78 | L.r..:...iMSc.6x +27 C9 C0 CB 0D 1E DD 71 28 86 DA 24 79 83 73 21 | '......q(..$y.s! +5B 7B 4C 0B 80 C1 33 CA 7D 70 B8 C8 BC 41 3A CD | [{L...3.}p...A:. +29 3C BB 9C 90 64 54 6A F5 3F 3C 24 72 81 64 88 | )<...dTj.?<$r.d. +9A D9 A0 60 9C 7E 27 D3 DC 60 F9 96 AC 39 1F F4 | ...`.~'..`...9.. +69 C6 4B 8B 64 64 DD B7 1B FD 6C 8F BB 86 AF 3A | i.K.dd....l....: +4A ED 3F 08 1C 5D 54 F0 1F DE 50 B3 CE 0E 51 AD | J.?..]T...P...Q. +56 3D 0F DE 4D 7B 21 39 FA 38 8A C1 3A D0 B3 B6 | V=..M{!9.8..:... +19 CE F8 73 FD 4E 02 1D 23 46 67 C7 51 C9 97 21 | ...s.N..#Fg.Q..! +97 74 C1 26 33 6D 6A 58 4C 90 C1 0D 88 B1 91 78 | .t.&3mjXL......x +C8 DD 9A 54 CE 62 66 AD 28 36 3D 00 2A 5A A7 0B | ...T.bf.(6=.*Z.. +F8 46 FD E6 E7 6B ED A1 67 64 D8 F6 C0 C9 D6 22 | .F...k..gd....." +07 90 FD 2C 1B FB 4D E9 F6 FE 8D 2C A0 67 86 A7 | ...,..M....,.g.. +08 01 00 1A 7E 80 7D AB 37 01 D1 3C BA DD E0 15 | ....~.}.7..<.... +3B F9 F4 FF 9E 08 08 5F 46 4A 38 29 B8 DC 0C 36 | ;......_FJ8)...6 +5F EA 76 F9 BB 94 27 A4 C3 E6 BA 36 5F 1B 7C AC | _.v...'....6_.|. +51 0B BB 41 CD 16 D2 32 3C 1C E7 1F 4A D6 79 77 | Q..A...2<...J.yw +4E E3 51 E6 04 D5 32 A2 06 DD 33 6B 35 0B AF 28 | N.Q...2...3k5..( +0E 39 CC CE 66 0D 37 BD C7 19 43 A3 39 85 68 55 | .9..f.7...C.9.hU +71 58 9F 07 C3 B7 90 38 BD D8 D5 C7 D5 D8 C5 AA | qX.....8........ +C1 9E DD ED B9 A6 91 50 C8 21 60 46 B8 31 0D AA | .......P.!`F.1.. +98 FE B4 B9 85 6D 97 4A | .....m.J + +Flow Record: + RecordCount = 24 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 307 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131667599 [2024-04-14 23:54:27.599] + last = 1713132267867 [2024-04-15 00:04:27.867] + received at = 1713132000886 [2024-04-15 00:00:00.886] + proto = 6 TCP + tcp flags = 0x18 ...AP... + src port = 80 + dst port = 59696 + src tos = 0 + fwd status = 0 + in packets = 21 + in bytes = 2362 + src addr = 172.217.168.3 + dst addr = 157.143.34.100 + out packets = 31 + out bytes = 4672 + aggr flows = 4 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 14994.852 ms + srv latency = 0.000 ms + app latency = 45038.849 ms + in payload = 127 +HTTP/1.1 204 No Content +Content-Length: 0 +Cross-Origin-Resource-Policy: cross-origin +Date: Sun, 14 Apr 2024 21:54:42 GMT + + +48 54 54 50 2F 31 2E 31 20 32 30 34 20 4E 6F 20 | HTTP/1.1 204 No +43 6F 6E 74 65 6E 74 0D 0A 43 6F 6E 74 65 6E 74 | Content..Content +2D 4C 65 6E 67 74 68 3A 20 30 0D 0A 43 72 6F 73 | -Length: 0..Cros +73 2D 4F 72 69 67 69 6E 2D 52 65 73 6F 75 72 63 | s-Origin-Resourc +65 2D 50 6F 6C 69 63 79 3A 20 63 72 6F 73 73 2D | e-Policy: cross- +6F 72 69 67 69 6E 0D 0A 44 61 74 65 3A 20 53 75 | origin..Date: Su +6E 2C 20 31 34 20 41 70 72 20 32 30 32 34 20 32 | n, 14 Apr 2024 2 +31 3A 35 34 3A 34 32 20 47 4D 54 0D 0A 0D 0A | 1:54:42 GMT.... + +Flow Record: + RecordCount = 25 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132182757 [2024-04-15 00:03:02.757] + last = 1713132213789 [2024-04-15 00:03:33.789] + received at = 1713132302717 [2024-04-15 00:05:02.717] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 56357 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18599 + src addr = 17.248.209.70 + dst addr = 157.143.34.100 + out packets = 32 + out bytes = 6945 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 45.236 ms + srv latency = 0.000 ms + app latency = 0.455 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 11 32 B9 C4 F1 | ....z...v...2... +D7 F2 4F 62 6E FE 1E F7 E4 80 EC DC EA BC 41 49 | ..Obn.........AI +D8 0D 60 9B 98 44 09 BB FE 4F 38 20 22 C8 0F F6 | ..`..D...O8 "... +0D 5B AA 86 CB B7 69 10 A3 6D EC 3B 66 85 AE 3E | .[....i..m.;f..> +22 D2 50 50 5B 44 74 C8 84 04 96 59 13 02 00 00 | ".PP[Dt....Y.... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 8E | ..+.....3.$... . +DD 42 50 BD EF C9 5B D0 70 F8 4A 24 25 30 70 F8 | .BP...[.p.J$%0p. +D1 D7 98 38 30 EC D4 6B 15 8D AE AC 87 EC 3C 14 | ...80..k......<. +03 03 00 01 01 17 03 03 00 2A 18 A2 9F E9 8F 57 | .........*.....W +DF 8D 59 A0 DF 8D F4 FA E3 95 30 2C 59 40 EB 4F | ..Y.......0,Y@.O +48 1F 56 C6 AA 07 7C 83 55 02 5A 21 10 37 76 E4 | H.V...|.U.Z!.7v. +BF D0 21 E0 17 03 03 11 25 08 0F D1 EF 46 ED 7C | ..!.....%....F.| +EB 37 35 57 15 B6 51 AA D2 3D F0 07 EF 2D F1 06 | .75W..Q..=...-.. +41 17 F1 14 A4 E0 07 F5 02 97 F4 C9 1E 66 F9 13 | A............f.. +B6 BD 54 D3 E8 9C 85 C3 4E 64 4E 53 B9 F6 17 8B | ..T.....NdNS.... +70 13 DD A8 C2 C7 82 B0 2C FE D1 FA 76 6A 4F C7 | p.......,...vjO. +49 C9 AF 23 55 8C F4 54 F7 A0 94 6B BA DF 36 C0 | I..#U..T...k..6. +EA 5F 43 73 4A 68 C2 16 55 AA EC 10 87 05 23 9F | ._CsJh..U.....#. +FA 9C 70 69 22 8D 7A 8A FA AD 67 32 AC 7B ED B1 | ..pi".z...g2.{.. +13 8F E4 31 17 BD 00 0B 82 A2 AB E3 97 79 78 AB | ...1.........yx. +8A 63 AB EC 10 FA F4 0F AF 54 F0 88 60 4C C7 91 | .c.......T..`L.. +8E 3D 0C 08 4F 8D 76 15 54 85 6D FD 0F FF CF A8 | .=..O.v.T.m..... +C6 77 F2 A1 4C 27 80 F0 0F 1C D6 53 5A E0 01 38 | .w..L'.....SZ..8 +DE 34 98 4E 78 E1 4B F0 40 74 1F FA 58 79 A6 EA | .4.Nx.K.@t..Xy.. +AE 76 84 26 EE C1 F2 03 64 EB 61 62 9E 16 76 25 | .v.&....d.ab..v% +30 2A 7D 0B CB 0D 8A 1E C4 09 38 28 3E F3 4F FF | 0*}.......8(>.O. +00 72 9E 80 95 6B F3 8B 72 CF 47 DD FA 70 04 AF | .r...k..r.G..p.. +BD 87 2C 6D DD E5 36 00 B4 6F 98 04 BE F6 00 DA | ..,m..6..o...... +D1 D9 49 16 69 CE E8 7F F9 F2 EE 4F C9 4A EC F8 | ..I.i......O.J.. +65 87 6E 96 F9 70 87 78 31 64 18 B1 BB F3 E5 C3 | e.n..p.x1d...... +01 C1 E3 93 41 DF 33 CC 77 8E 81 F1 50 24 07 F1 | ....A.3.w...P$.. +3D D8 22 42 E5 C0 C5 6A C5 8B 67 D9 0A F3 B6 F5 | =."B...j..g..... +DC A9 CF 23 FB D9 8B 60 37 FF 88 3C 0A 0F F5 EE | ...#...`7..<.... +D6 15 0D 3A 45 99 8A FA 30 D5 1F E2 54 52 5F 58 | ...:E...0...TR_X +55 D8 A0 C3 F6 11 9B 56 6F 14 F4 24 38 9F 75 9E | U......Vo..$8.u. +68 9E 16 36 B2 C0 C5 C1 2E D9 36 9A D6 84 AC 0C | h..6......6..... +A4 76 BC 3E 1B A5 A1 0E 0F 59 96 4A D6 95 85 AF | .v.>.....Y.J.... +BE B5 BB 01 E2 A6 14 5B 5C 60 78 FB E0 41 3B 70 | .......[\`x..A;p +8D B4 38 17 9F C2 1C 49 FB 49 3A 12 D2 BE D6 9A | ..8....I.I:..... +CB A8 82 70 49 69 26 01 D6 9A F1 DF 61 5C E4 E5 | ...pIi&.....a\.. +6D 2B 1C E7 22 16 E2 FD D8 9B E6 E9 81 37 EA 87 | m+.."........7.. +72 1C 2D 55 3C E9 69 DB 4A D6 1E 41 27 6B 02 51 | r.-U<.i.J..A'k.Q +46 05 30 1D 4E AD 54 49 40 5E 88 5E E9 70 2A 33 | F.0.N.TI@^.^.p*3 +69 D8 1D A9 56 EB B9 E4 75 15 DC CF B5 DE 94 0B | i...V...u....... +99 6D 59 7F 74 D3 19 B1 0B 59 EF 56 9B 31 C5 1C | .mY.t....Y.V.1.. +E9 CB 09 08 49 CC 24 AA 85 46 A5 B6 75 15 1F 62 | ....I.$..F..u..b +12 1E 33 37 BB 90 3A EC 92 66 67 AC B6 2D 20 FC | ..37..:..fg..- . +E8 74 0B D8 ED 4B FF B1 D5 F8 F1 38 A4 36 C6 33 | .t...K.....8.6.3 +2E 7E 48 59 BB BF 42 CE 66 02 DB E1 EB 95 62 3A | .~HY..B.f.....b: +17 2B D5 76 2D 50 01 73 27 17 61 DF DA DE 20 A4 | .+.v-P.s'.a... . +5F 7B BA 2C E6 16 8C 47 68 EF C1 01 7D 08 9C BD | _{.,...Gh...}... +7A 15 C7 D9 18 E9 D5 CD EF 6F 43 9B 76 58 6B E4 | z........oC.vXk. +AD 19 33 13 C5 59 B0 CE 8D CA E7 D1 90 9D 77 78 | ..3..Y........wx +E2 5C 46 3D 89 19 BC 45 07 8E 15 DB FE DF 7E 6D | .\F=...E......~m +1C 35 79 FD 29 E3 B0 E4 7F AC 5D 82 0D B6 C8 2C | .5y.).....]...., +4A 83 41 BA 4A 72 E6 89 5D 8F B7 04 28 9F 87 4A | J.A.Jr..]...(..J +C6 76 AB F9 76 87 3E 58 51 BA F6 1A 67 8A 61 11 | .v..v.>XQ...g.a. +BD A1 35 F5 54 21 D0 61 28 B9 29 BF FE 2E CA 22 | ..5.T!.a(.)...." +26 53 9E 4C DF A8 88 96 04 67 FF DF BF 2C 89 27 | &S.L.....g...,.' +F0 BD A8 D3 C6 FA 6F 67 16 18 78 EE EE 9A 0C 4F | ......og..x....O +BA C6 F3 E7 C2 DD 6F 64 21 1C 28 0C 62 5A 54 96 | ......od!.(.bZT. +94 56 4B 4E 44 EF C2 E3 51 8E 1A 8A 08 54 90 FE | .VKND...Q....T.. +58 72 87 18 97 C7 A3 74 D4 52 EE CF 15 A8 4E 77 | Xr.....t.R....Nw +96 4D 5F 0B 7D 77 1A 1D 4B 45 7B B6 84 91 C7 3F | .M_.}w..KE{....? +C4 1D F0 D1 F9 46 45 BC 6A 32 AF 42 15 4A 1C 39 | .....FE.j2.B.J.9 +DE 99 81 98 F4 66 26 E1 1F 2A 76 FB D1 C8 26 1A | .....f&..*v...&. +EF 99 30 AF 36 EC 7E 1D 81 8E 1D 07 3D D2 44 A5 | ..0.6.~.....=.D. +09 AF 5D E2 F0 D6 AA 3E 74 54 F4 8D 72 96 04 DF | ..]....>tT..r... +FB B2 E9 E9 61 7F DA 74 BE E6 48 8D A7 37 2C D0 | ....a..t..H..7,. +A1 DB 2F AE 5B 52 C9 A9 F5 26 7C 30 53 71 38 62 | ../.[R...&|0Sq8b +C7 44 11 79 AC B5 87 84 C0 43 67 0D 38 2B F6 C1 | .D.y.....Cg.8+.. +1C 46 B1 C9 E7 08 CC 3B D3 35 99 F3 A9 AA 84 13 | .F.....;.5...... +13 B2 E7 86 91 69 DE 46 0E D6 35 B0 EB 65 FE DA | .....i.F..5..e.. +4E 0C C7 DF BC B1 EA F4 C8 2B 3D 6C DB DC 4B BD | N........+=l..K. +F9 AB 98 7F 7D 1A 69 B6 91 75 70 BE 69 93 72 7E | ....}.i..up.i.r~ +1C E9 F9 DF BB 6D 77 3E 1B F4 E9 41 AE F9 90 B6 | .....mw>...A.... +5C 6E 1B 84 BC 10 6A 07 E2 29 95 6C BE 52 9C 1E | \n....j..).l.R.. +E6 DB 05 B4 B0 5D 92 6E 57 97 BF 7D 43 47 1C FE | .....].nW..}CG.. +A8 86 C5 8E C0 D1 F8 02 A9 61 8F EA 3D E8 6A B7 | .........a..=.j. +AB 1E 64 45 7D 2B 12 23 8F 6B 3E F6 33 D9 B2 DB | ..dE}+.#.k>.3... +B2 E3 78 91 93 42 00 F2 CD 56 3E 95 BC E9 75 E4 | ..x..B...V>...u. +1C F4 E6 F9 68 22 1F 55 37 FA 42 60 F2 E9 44 89 | ....h".U7.B`..D. +DE B8 28 2C 3C DB 2D BF ED 23 08 9C 41 09 44 04 | ..(,<.-..#..A.D. +98 16 DF 29 44 67 8D 82 2B B7 E9 B2 C2 24 57 51 | ...)Dg..+....$WQ +B3 25 3E F0 CD 4F 04 4A 00 0A 0D BE ED 08 D8 C5 | .%>..O.J........ +15 30 EF 48 DA ED 7E 8B 8B 96 8E 3B DE 21 A6 4A | .0.H..~....;.!.J +DF A9 87 CC 7B 2D AF 50 4D A5 8D 0C 1E 76 97 54 | ....{-.PM....v.T +AE 4D 0A 93 70 9A 64 F2 B2 25 09 9D 05 92 37 83 | .M..p.d..%....7. +53 7D CA 07 D3 0F 91 BC C7 5E FA 13 2A AF C3 A2 | S}.......^..*... +72 DC B7 8C E4 BD 68 CA 7A F8 64 30 17 B7 57 80 | r.....h.z.d0..W. +F7 05 FE 0C 20 CE 2E 0E | .... ... + +Flow Record: + RecordCount = 26 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131929021 [2024-04-14 23:58:49.021] + last = 1713131931365 [2024-04-14 23:58:51.365] + received at = 1713132000887 [2024-04-15 00:00:00.887] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 62151 + src tos = 0 + fwd status = 0 + in packets = 11 + in bytes = 4264 + src addr = 17.167.200.72 + dst addr = 157.143.34.100 + out packets = 11 + out bytes = 1934 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 115.449 ms + srv latency = 0.000 ms + app latency = 0.451 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 00 51 45 C8 28 | ....z...v...QE.( +61 9C 48 BB 3E 53 E2 C9 1B 3B C0 74 4D 6F 75 75 | a.H.>S...;.tMouu +0B 03 44 2F 32 4C 1D FF DB 66 F6 20 A7 31 2D EC | ..D/2L...f. .1-. +54 26 7F DA FF BF 48 CC CF 4A AE 02 62 C5 9D AE | T&....H..J..b... +8A EF C1 51 C1 76 A6 9C B2 EF E1 2A 13 02 00 00 | ...Q.v.....*.... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 0C | ..+.....3.$... . +78 79 B7 37 F8 07 9A 3A E0 21 6F 50 A6 A9 7F 38 | xy.7...:.!oP...8 +8A CE E4 17 AC 80 6E 19 44 47 5E 19 49 5E 26 14 | ......n.DG^.I^&. +03 03 00 01 01 17 03 03 00 2A 6E 3C 9E 92 4F AB | .........*n<..O. +98 A8 DF E3 DF C8 69 0B 9F E2 0B 6F 60 4B 5A F1 | ......i....o`KZ. +F6 7D 6A E7 CC 50 FF 9B 6F A2 36 EE EF DD 58 08 | .}j..P..o.6...X. +5D 3A 17 AA 17 03 03 09 7C 13 9F FF 12 8E 31 58 | ]:......|.....1X +73 C1 79 47 C9 38 1C 01 2A 52 22 46 8F BC 8D 65 | s.yG.8..*R"F...e +30 31 E4 F6 E2 74 39 55 8D E0 79 46 F6 51 4D 7D | 01...t9U..yF.QM} +05 E5 2C 02 56 6A 5B 69 55 1F 7A 67 70 AA 98 B1 | ..,.Vj[iU.zgp... +F9 34 DF 56 EB 99 C4 3C EA 32 48 37 5B 26 A7 15 | .4.V...<.2H7[&.. +3B 82 8B 56 4C D6 CB 3A DF 36 7B E0 46 03 52 13 | ;..VL..:.6{.F.R. +5B ED 15 6E 77 D1 CC AD 99 D4 51 15 61 89 A7 43 | [..nw.....Q.a..C +63 26 08 BD BA 68 E1 C0 9B 77 CC 36 B5 78 AF B1 | c&...h...w.6.x.. +A1 1D 7C 29 1A 5C 21 CD E2 9A D5 2D 01 38 B0 18 | ..|).\!....-.8.. +F6 FD D5 85 E3 EF 2A A4 4B F5 AF 57 5A 2D E1 57 | ......*.K..WZ-.W +B2 9D D2 86 77 3A 04 8F 49 B1 30 DB ED ED 6B 4D | ....w:..I.0...kM +34 46 30 33 6C 3F 1C 05 8F 82 E3 50 04 06 15 A5 | 4F03l?.....P.... +37 67 A5 B5 BF A9 D6 43 85 81 18 8E CB 4B CC F2 | 7g.....C.....K.. +85 89 B4 75 39 72 8A 25 5E 14 23 9B C9 3E 66 08 | ...u9r.%^.#..>f. +DC 23 53 F9 E1 77 E0 94 94 86 19 A9 C1 09 CD 34 | .#S..w.........4 +AF 86 2C 84 18 DB F8 3A C9 96 B4 42 03 0C B0 56 | ..,....:...B...V +26 BC 76 8D 09 2C 86 B8 D0 6A B0 5C BF 8B 61 25 | &.v..,...j.\..a% +7B 26 77 BA CD D0 52 8A E6 25 5B 70 4A 2F 88 C0 | {&w...R..%[pJ/.. +45 E0 39 20 1A 19 73 B0 F4 3F 6B B2 34 1F C0 FA | E.9 ..s..?k.4... +26 55 5D 5E 8C 3D F1 5A D7 A1 21 B7 8C 3E 63 54 | &U]^.=.Z..!..>cT +89 8B 69 10 8A 7D E4 2E C4 83 90 28 63 9B B2 3E | ..i..}.....(c..> +74 FA BA 23 BD 38 38 7E 39 14 B2 88 9F 9E 47 71 | t..#.88~9.....Gq +4D 8D C2 A6 51 17 A2 4E 39 78 BC 8D BF 5F 99 8E | M...Q..N9x..._.. +82 D5 20 5A 3E FF D2 35 67 3A 07 24 47 75 9F 9E | .. Z>..5g:.$Gu.. +AC BC EE 16 AF C5 29 28 BA ED C8 7B 8B A3 00 D7 | ......)(...{.... +96 61 FA 23 8D 3D 85 8D 50 A1 E7 BD 73 11 8D ED | .a.#.=..P...s... +2C 4B 5E A7 0B FC 92 7B B8 3B 9A BC 62 51 D5 60 | ,K^....{.;..bQ.` +1C CD EA 0F 9A 32 86 E0 87 C4 C8 57 1D 3B 05 13 | .....2.....W.;.. +61 F1 D8 96 70 44 05 17 7B 18 2F DA 26 6C AB 67 | a...pD..{./.&l.g +23 C8 EE 3F C1 CC CA 23 39 9D FA A4 B2 46 34 30 | #..?...#9....F40 +F9 3E D3 AD 7C AE 68 97 28 A0 BF 50 9F 42 12 E2 | .>..|.h.(..P.B.. +A1 40 66 2C DF C8 6E E5 9D D5 57 71 AE 7C A5 27 | .@f,..n...Wq.|.' +69 74 DE 65 0E DF 18 35 D6 1A 59 AB 11 86 1D 88 | it.e...5..Y..... +DB DB 64 3F 40 AE 40 10 47 83 7C 4B A1 47 B7 AD | ..d?@.@.G.|K.G.. +6F BE 62 BB 54 5C 53 2E 44 BB 12 23 D1 83 77 F3 | o.b.T\S.D..#..w. +7B BF D8 A8 7F 5F 75 16 E7 E0 FB CC 0F E8 70 75 | {...._u.......pu +36 29 C4 95 98 15 D5 C6 E6 32 3E EB 24 BA 14 C5 | 6).......2>.$... +A8 A4 01 90 33 D4 66 93 92 6A DB C9 9E 2A 61 3B | ....3.f..j...*a; +9B 36 4E 37 D3 5B 0C 3D D9 F0 1E 10 84 50 80 9A | .6N7.[.=.....P.. +66 AA 3D F5 1B B7 5E FD 1B ED 24 E3 DE 5E 65 C6 | f.=...^...$..^e. +AA A5 AB 78 A4 D4 94 EB 2D DC 03 0B 95 D6 D4 F9 | ...x....-....... +A9 AE 43 A8 69 70 77 47 E4 55 1D BE EC 88 D0 32 | ..C.ipwG.U.....2 +EB F5 AC 41 D4 FD E4 EE 49 F4 3A 33 9F 32 BE 02 | ...A....I.:3.2.. +FC 54 C8 34 40 C7 9B 96 6C 58 0E EA 05 6A 96 8F | .T.4@...lX...j.. +04 87 A5 C4 F2 6C C6 1C 30 91 E4 EA 80 91 7A 2E | .....l..0.....z. +DE 5F 5F B7 DC 2C 59 EA 51 E8 95 E1 16 1A 7C F2 | .__..,Y.Q.....|. +F8 A5 CE 60 8B 19 BF 7F BE 32 56 CD 0E 7C 64 FF | ...`.....2V..|d. +70 D4 B6 A0 91 E4 F5 E6 18 72 70 63 10 27 2A 7B | p........rpc.'*{ +45 17 C4 AA DB 24 45 13 2A 20 85 E3 20 F3 42 AC | E....$E.* .. .B. +E7 11 11 B6 21 78 72 35 CB 41 F0 02 26 38 52 85 | ....!xr5.A..&8R. +78 B2 09 5F C9 C4 EC F0 CD B9 58 9F 59 20 03 31 | x.._......X.Y .1 +DF C2 C3 B8 B5 20 1B 5D 7A B6 0A A0 7C E3 A5 25 | ..... .]z...|..% +EA 10 DC 8F 09 E6 02 DD 1B C9 0A 25 F2 03 3A 4C | ...........%..:L +E8 06 EB 47 7D 9C 02 6E 20 C0 E5 72 0B 94 07 77 | ...G}..n ..r...w +D4 55 4A DC 6A 96 4F 97 0C 1E 6E 53 01 76 B0 D2 | .UJ.j.O...nS.v.. +3F 1B 40 14 8A 2E 43 C3 B8 CC 72 BB F8 ED 16 2F | ?.@...C...r..../ +EB BD 18 BA 1F 46 BA 57 70 A5 6A 59 5D 79 58 FE | .....F.Wp.jY]yX. +BA 44 67 E9 38 B1 77 15 21 B7 0A 8D 26 7D 19 DB | .Dg.8.w.!...&}.. +5B D4 F6 E7 8E C3 5E 91 AF F1 2A A3 E6 8C FA 2B | [.....^...*....+ +55 3F B7 30 F4 29 48 2C D0 3B 82 6A E0 3D 28 07 | U?.0.)H,.;.j.=(. +29 9E 64 BE B4 20 DC A2 B4 E2 E1 5E 15 CC 28 51 | ).d.. .....^..(Q +FC 0C 19 A1 54 9E BD A5 88 5A C8 61 66 02 5F 73 | ....T....Z.af._s +CF EC D9 35 4D 75 2B 93 B1 14 C4 A1 C7 24 15 66 | ...5Mu+......$.f +EB 69 5B 87 B4 92 AA DD 8A 61 FE 88 B2 EF 75 14 | .i[......a....u. +4F 45 A7 DE AC BF 81 63 2E 60 17 A2 22 26 10 0D | OE.....c.`.."&.. +5A 50 D1 BA 0B 96 13 A1 5D 8B 5E 93 14 8B 11 68 | ZP......].^....h +A6 0F C0 EC B7 AE 12 49 1C CE 79 14 33 D1 D7 BE | .......I..y.3... +E2 7C C5 B2 72 3F 22 02 E7 E6 B3 88 8C A9 99 1A | .|..r?"......... +A8 65 03 E9 7B 37 61 12 94 40 89 DF A1 D9 10 48 | .e..{7a..@.....H +14 98 BA 18 04 54 C3 8C AC E9 1A 5F 01 A2 7D 57 | .....T....._..}W +21 7A 7E F5 B6 CB 4E D4 8B DF 4E 3F C6 FA FA 4A | !z~...N...N?...J +C5 E9 7E 5F A5 3B 9A 9D EC F1 88 D0 DE 90 AE F0 | ..~_.;.......... +95 25 10 16 D0 8E A9 0C 0D 32 7A 43 D7 BF BA 8D | .%.......2zC.... +DD 60 66 10 4D 69 94 C9 F2 CF AD EE D8 5B DA FE | .`f.Mi.......[.. +6C 7C A2 5B 5E 9B CC 24 ED 03 14 7D 42 DD F5 1E | l|.[^..$...}B... +94 A1 47 8E A2 A6 52 B1 29 49 71 4B 22 94 10 FE | ..G...R.)IqK"... +42 5A F5 78 58 58 A1 DD 2E E6 BA 16 1D DD 75 61 | BZ.xXX........ua +B4 CB DF A6 31 1F F0 0D 9C 8A AE 5B 9D 51 A8 4E | ....1......[.Q.N +C8 32 49 C6 AC DB 83 4B 21 23 89 C7 FE 05 70 F7 | .2I....K!#....p. +CD F5 09 64 03 D4 1E 0D | ...d.... + +Flow Record: + RecordCount = 27 + Flags = 0x00 PCAP v1, Unsampled + Elements = 5: 1 2 12 15 29 + size = 1374 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132383300 [2024-04-15 00:06:23.300] + last = 1713132383368 [2024-04-15 00:06:23.368] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 65143 + src tos = 0 + fwd status = 0 + in packets = 10 + in bytes = 4065 + src addr = 172.217.168.46 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +C8 00 00 00 01 00 08 FB 35 76 79 08 37 B0 41 00 | ........5vy.7.A. +43 9F E3 60 AA A3 C7 E4 66 E3 57 8A 01 2A F2 C9 | C..`....f.W..*.. +CE DA C1 45 56 47 08 C3 98 0A C2 3C AC DC EF F7 | ...EVG.....<.... +09 09 1A E5 20 F5 7E 1A F2 17 3C BA 59 9C 3D BE | .... .~...<.Y.=. +B9 A6 65 84 82 F1 7E F0 05 49 04 C1 A6 B9 F9 51 | ..e...~..I.....Q +24 A1 1B 3C B9 A8 8B A6 FF AD 99 CE CC D0 FF D1 | $..<............ +30 7A 1C 63 45 8D A1 92 C3 53 1C C2 E7 66 8C D1 | 0z.cE....S...f.. +7B 5B 30 5E 8E E7 2F 5E F9 7F 0A 04 7D 72 C2 2A | {[0^../^....}r.* +7D 15 0A 3B CA E5 5E 28 DC 37 47 43 59 A7 52 C3 | }..;..^(.7GCY.R. +20 D2 C3 F7 B5 81 98 1E 99 57 EC 67 C1 47 FC 4F | ........W.g.G.O +D5 53 5C 7A 9C 5D 02 0C B6 AC D1 12 EC FB CD 85 | .S\z.].......... +BE 23 65 B3 35 4E 1F 19 B4 58 23 EA 8D 73 A5 71 | .#e.5N...X#..s.q +72 92 41 80 D9 BA CA 53 F4 C5 01 EC CA 3F 08 26 | r.A....S.....?.& +87 1E 5D 3A E4 FB F1 33 78 6A 2A 54 2D 29 E1 27 | ..]:...3xj*T-).' +E2 43 11 59 2A 67 63 8C 7B 10 58 CC 47 56 D0 43 | .C.Y*gc.{.X.GV.C +46 CC 97 84 7A 1E 71 EC 7C 12 3D 2B 59 44 AC C3 | F...z.q.|.=+YD.. +FA D2 F6 73 F9 78 62 5A C8 6C 5A ED 82 BA 54 32 | ...s.xbZ.lZ...T2 +71 F7 A6 04 6E 93 B2 A5 EE 73 D4 CF 79 E9 D2 00 | q...n....s..y... +16 AB 26 85 AA F8 92 C4 33 3C 8A 21 96 AF A4 84 | ..&.....3<.!.... +10 CE 27 6D 67 DD D5 73 72 71 9A 51 1B 82 59 BF | ..'mg..srq.Q..Y. +98 D1 D9 D6 ED 43 4C 7E 88 4A A8 31 75 1F BC 10 | .....CL~.J.1u... +9A 12 1C 47 30 24 94 A7 9D 3A 08 E7 28 E9 55 C2 | ...G0$...:..(.U. +B7 77 DE 1D 3D 55 66 CF 87 06 6D 6C CF 12 81 C3 | .w..=Uf...ml.... +D1 B2 71 75 A8 08 79 4D AA 0F 57 8E 9F 2E 75 A5 | ..qu..yM..W...u. +45 DE B2 B3 83 C2 43 46 94 4D 9C 60 DB 1B 77 00 | E.....CF.M.`..w. +90 18 2B 1C 79 6D 23 EC 3D C5 6A E8 C1 4A 18 FC | ..+.ym#.=.j..J.. +3E 32 FC 81 53 95 5E 2E A7 B0 13 04 37 B2 70 20 | >2..S.^.....7.p +A5 B4 25 BA 50 B1 96 07 05 2F 73 F9 C1 77 56 9C | ..%.P..../s..wV. +E0 79 88 5A FB E0 6B D8 4D C3 32 7B CE 67 68 7B | .y.Z..k.M.2{.gh{ +BC 70 D4 78 E4 76 3A 84 16 7C 91 0A A8 67 40 7B | .p.x.v:..|...g@{ +32 F5 D1 4E 26 C8 EA 8E C8 7C 96 36 5A 7A 98 2C | 2..N&....|.6Zz., +7A 9C 34 34 BB 7F 9A 87 51 D6 57 4F 57 B4 FB 23 | z.44....Q.WOW..# +AF FF E7 15 DF 36 EC 0C A5 0E CF 89 1B 27 81 0A | .....6.......'.. +29 48 BA 6A 78 80 B3 8D D6 60 96 BB EB 97 15 A6 | )H.jx....`...... +3F A1 D8 D2 0A 00 11 75 99 6A 97 F5 35 61 E1 48 | ?......u.j..5a.H +06 73 33 17 AE FE 3E A1 09 9E 6B E0 4B EF 83 21 | .s3...>...k.K..! +CE 8A 54 7B E7 B2 F8 33 C2 90 4B B2 42 64 B5 F7 | ..T{...3..K.Bd.. +AE B8 88 8C 73 04 EF 56 69 5D 12 50 D1 D3 C5 D2 | ....s..Vi].P.... +14 97 80 6B CD 0B EA B5 10 81 29 DB 51 FA 1B 7F | ...k......).Q... +04 07 95 8F 01 05 E0 29 DB 3B F4 9E 6C EF D6 4E | .......).;..l..N +60 2D 5D 47 AF 94 65 DA 16 63 F4 48 04 AF F3 9B | `-]G..e..c.H.... +89 A8 71 5D 5A 46 20 8F 48 BE 83 A1 9C C0 88 A2 | ..q]ZF .H....... +7E 9A 85 4C 2F 74 DA 2E C1 4D 09 72 A1 FE 97 E1 | ~..L/t...M.r.... +77 9E C9 8C 91 37 AF 1A 62 65 1B 49 71 52 A1 63 | w....7..be.IqR.c +81 25 46 E1 AF EF 91 9A EE 9C 0F 2D 3D F6 90 CA | .%F........-=... +E8 64 20 A9 9F F6 AE 19 CD 0D 71 1F 72 9A B1 11 | .d .......q.r... +1D 2F 59 E3 48 11 7D 33 31 68 75 C4 42 1C 97 BF | ./Y.H.}31hu.B... +0B C2 FF 43 D1 BE 65 94 EC CD 83 01 97 15 19 73 | ...C..e........s +40 96 25 AD D9 1E 01 AE 65 FE AB FE 97 94 7B 77 | @.%.....e.....{w +10 73 66 B8 28 32 D8 CC 23 6E 2A 78 F6 B5 3D F1 | .sf.(2..#n*x..=. +DF 24 86 52 1C 8C 3F EA 27 67 EA 18 94 A0 25 29 | .$.R..?.'g....%) +67 84 C4 65 72 4B E6 92 E3 D7 38 59 61 53 80 1F | g..erK....8YaS.. +92 4E A7 5F C5 CF 46 87 5C BC 20 F9 09 75 20 08 | .N._..F.\. ..u . +39 35 D4 27 3E 39 87 88 6D 99 98 B0 31 7C C7 14 | 95.'>9..m...1|.. +AD 27 83 7A 48 DF 46 96 30 AB B0 0A 59 31 15 58 | .'.zH.F.0...Y1.X +1A F3 00 3F 31 39 DE 49 AD F8 1F 0F D2 7E 87 12 | ...?19.I.....~.. +65 C1 2A 1A F6 A4 D7 5A 62 FB 7F D8 81 1A CC 35 | e.*....Zb......5 +D9 7E BA DF 94 36 13 E9 E7 4F C6 DF EE B4 97 BA | .~...6...O...... +04 9A 40 A2 CF FF 51 BE D4 5C 2A F6 44 5B 4D 10 | ..@...Q..\*.D[M. +17 E9 00 00 00 01 00 08 FB 35 76 79 08 37 B0 41 | .........5vy.7.A +40 E1 A9 5F DA BA 7F D0 47 13 03 C1 B6 A1 EE 7C | @.._....G......| +67 E1 9E 9C 3B CF 26 9F E0 33 8E 8B DA 54 B5 00 | g...;.&..3...T.. +15 F5 EC 3D A7 1C D5 7D 14 46 3E BD A7 B8 75 27 | ...=...}.F>...u' +44 51 95 5E A9 AA 7B AC CE 17 F2 14 EC 9D 7C FA | DQ.^..{.......|. +3F BE A6 2A CC 8E 79 0B CF E9 D8 16 DB D4 5F 28 | ?..*..y......._( +63 B6 9D 6F 1C B3 3D 05 CB 7B DB 57 63 81 CB 4E | c..o..=..{.Wc..N +F1 6B D9 F3 52 81 FC 78 1C FB 78 6D 9E 66 2E 7F | .k..R..x..xm.f.. +4C 31 82 19 7E F1 20 51 B2 E7 71 E1 A0 28 6A 12 | L1..~. Q..q..(j. +CE E9 85 DB 10 F0 27 38 A1 AD FC 71 35 DC 57 B0 | ......'8...q5.W. +FD 1B 52 F9 F1 60 17 BB AF 85 D0 86 F3 F3 C3 8C | ..R..`.......... +8D C8 C8 91 1D 39 07 4C 96 4A 0D 4E 0C 41 46 9B | .....9.L.J.N.AF. +26 E2 D2 F3 B9 D4 E9 CD 7F F7 B4 64 B6 A6 A3 4E | &..........d...N +73 BA 34 07 EC 27 D4 15 D7 4E 00 25 38 5E 77 B9 | s.4..'...N.%8^w. +0B 8F 34 AB 21 B3 1F 6B 55 9D A4 53 14 04 23 84 | ..4.!..kU..S..#. +A1 DB BB 5F D1 C7 80 FB 5E 17 80 A1 25 53 DA 83 | ..._....^...%S.. +33 85 65 18 9D BF 6E 56 14 A9 91 92 6B 98 2B 89 | 3.e...nV....k.+. +40 2A 5D B7 21 64 5B 16 0C 24 36 98 30 2B 71 BA | @*].!d[..$6.0+q. +75 F6 B5 F9 5D 08 B4 43 05 9F B7 B9 B5 AC 84 78 | u...]..C.......x +89 F9 | .. + +Flow Record: + RecordCount = 28 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1580 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131960775 [2024-04-14 23:59:20.775] + last = 1713131960918 [2024-04-14 23:59:20.918] + received at = 1713132056973 [2024-04-15 00:00:56.973] + proto = 6 TCP + tcp flags = 0x1a ...AP.S. + src port = 443 + dst port = 51638 + src tos = 0 + fwd status = 0 + in packets = 13 + in bytes = 6591 + src addr = 216.239.38.57 + dst addr = 157.143.34.100 + out packets = 10 + out bytes = 2112 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 10.664 ms + srv latency = 0.000 ms + app latency = 12.179 ms + in payload = 1400 + TLS version = TLS 1.3 + ja3s hash = eb1d94daa7e0344597e756a1fb6e7054 + ja4s hash = t130200_1301_234ea6891581 +16 03 03 00 7A 02 00 00 76 03 03 A7 FE FC 65 C2 | ....z...v.....e. +D4 EC A5 5B 0F 3B D6 ED 7B EA 1B B6 69 00 01 87 | ...[.;..{...i... +EF 46 59 9E 49 03 98 31 D1 6E 29 20 66 A7 15 FB | .FY.I..1.n) f... +32 59 A6 6A D1 EA 6A 52 2E 78 D8 6D 5B 5D 1C 54 | 2Y.j..jR.x.m[].T +66 0D 9A 23 BF CF 20 31 90 CC E4 72 13 01 00 00 | f..#.. 1...r.... +2E 00 33 00 24 00 1D 00 20 A6 15 46 AA B9 60 60 | ..3.$... ..F..`` +0D A7 6B 67 87 07 E5 73 0F 5B 52 EB 29 EE B8 63 | ..kg...s.[R.)..c +3B B8 18 4D 4E CE 3E E0 05 00 2B 00 02 03 04 14 | ;..MN.>...+..... +03 03 00 01 01 17 03 03 12 08 17 C6 B3 4B BE 36 | .............K.6 +8E 05 AB 3D CA B2 CD 38 98 09 F4 9C 5B 5D FF 98 | ...=...8....[].. +CE 16 BD A2 84 FC 66 75 7B F2 21 39 0D B5 FF 9C | ......fu{.!9.... +C7 99 3A C5 7A 5B D5 CD D3 42 79 DF 00 E7 7B 05 | ..:.z[...By...{. +6F B7 82 86 00 76 8B DF 2B 8A 60 5D E2 C4 4B C6 | o....v..+.`]..K. +68 18 B4 B2 E5 8A 88 75 5C 77 21 EB 0E 14 A2 1F | h......u\w!..... +83 AC 2F 7F F4 90 E3 B6 B3 5F 8D 01 CD BE 5D F9 | ../......_....]. +39 C0 78 2A A5 36 8B B1 72 AF 29 DD E1 DE 4F AB | 9.x*.6..r.)...O. +F3 BC 9D 1B 3F F8 05 83 D6 DF 6C 45 2A 88 99 68 | ....?.....lE*..h +62 D6 8C C2 4F 23 C3 36 42 AC 2F 5A 54 B3 0C 19 | b...O#.6B./ZT... +F6 EB AB FE 7B D6 37 F5 FE FD 05 D2 73 29 5A CC | ....{.7.....s)Z. +0D F9 14 64 9A 6E 10 37 64 84 87 8B C9 34 26 0A | ...d.n.7d....4&. +A2 DE AF 6E CB 25 EC 79 63 77 38 F3 1A E7 90 23 | ...n.%.ycw8....# +4A 9C 00 5C 8C F6 91 68 9A 0F E9 65 92 FB A6 F7 | J..\...h...e.... +95 48 1C F7 78 F6 2B 7C FB 5C 70 72 FD 18 58 97 | .H..x.+|.\pr..X. +D8 92 21 39 A3 53 AB 43 B2 ED E5 96 20 47 5A 88 | ..!9.S.C.... GZ. +4B 32 BF 77 FA 10 00 66 06 DA 01 9F DB 4E B4 E3 | K2.w...f.....N.. +2C 0A 27 D3 40 1A 52 25 CC B2 AA E4 43 4F 2D D2 | ,.'.@.R%....CO-. +EF 1A D1 5E 8B D9 27 A0 D8 76 CD 3C 19 7F 6F BA | ...^..'..v.<..o. +53 58 91 8A DB 99 8B 72 56 1A 18 1E BF 57 A3 5C | SX.....rV....W.\ +44 EC 18 46 32 17 C5 45 6F DB EA ED 4A 4F E3 10 | D..F2..Eo...JO.. +49 9D 92 5B 6E 93 7A 48 14 91 11 10 B3 17 FD 97 | I..[n.zH........ +40 59 35 59 AA 99 EC 3A 2E BD A9 73 36 C1 F3 89 | @Y5Y...:...s6... +CF 46 1E 9E F4 80 BA 51 11 A3 12 1C 07 9D 7E 4D | .F.....Q......~M +D1 A4 C3 96 37 72 D9 1B AE 16 19 C1 3F FC 9A 57 | ....7r......?..W +3A CA 0B B5 C9 6C 42 87 41 3D 83 A4 A7 32 E4 A7 | :....lB.A=...2.. +33 18 41 4F C3 C7 94 BC 9A 92 85 CF 03 EE 55 07 | 3.AO..........U. +81 69 6E B7 18 5B 68 77 05 51 C9 C6 EB BF 44 5E | .in..[hw.Q....D^ +8D D2 A9 D9 82 97 EB C5 78 F5 55 82 0F 68 1B A3 | ........x.U..h.. +C9 3B 72 44 43 EE 60 30 C3 6D A4 77 0A 53 53 A6 | .;rDC.`0.m.w.SS. +84 2C 6A 48 D0 D4 D1 33 5B 4A 1B 43 7F 1F 50 5B | .,jH...3[J.C..P[ +81 75 92 C6 2B 72 BE 24 43 43 8E D8 3E 00 98 4C | .u..+r.$CC..>..L +30 46 BD 5C 78 E3 EC 2E DB 25 8F 12 BA 24 90 DB | 0F.\x....%...$.. +9D 1C 25 07 AC 40 0A 6A DE E2 49 95 69 5E 2C 3B | ..%..@.j..I.i^,; +C3 A3 C1 94 44 6C 7C 2B F0 1A 2B E1 DE 45 EE 91 | ....Dl|+..+..E.. +43 FB ED 60 3C 20 FD 25 84 11 74 A5 D7 3C 8D C3 | C..`< .%..t..<.. +58 48 A8 40 DE 4A 31 A0 D3 18 57 75 0E 75 5D E7 | XH.@.J1...Wu.u]. +2C BC FF 78 34 9C A6 EB 21 ED BB B1 AE BB E1 C6 | ,..x4...!....... +4A AC 6D 3E 31 F4 C8 AA ED 92 A0 86 CE DE 0A 9A | J.m>1........... +F6 DF 07 18 CF 47 7A 26 49 92 D9 80 8C 5C EB 4C | .....Gz&I....\.L +05 D2 93 43 39 29 29 C8 03 A0 2B 7C 5B 13 B8 50 | ...C9))...+|[..P +33 82 C0 D5 17 59 5D 6D 0B 39 30 73 2E 9B 05 F2 | 3....Y]m.90s.... +0F B4 FE 2F 2D B8 AA 0F 13 57 11 14 26 10 72 B6 | .../-....W..&.r. +F4 83 3D E8 54 FB BF 14 69 A6 06 69 5A A9 49 CB | ..=.T...i..iZ.I. +86 92 A3 30 DB BF D9 6F 87 19 24 2D AF CB 07 58 | ...0...o..$-...X +1E 69 3B 35 D1 F4 6B C7 70 F1 57 4D 86 A8 BD 01 | .i;5..k.p.WM.... +DA 47 55 F9 0F 27 B6 CE 7C FA C9 D4 C5 C8 A8 12 | .GU..'..|....... +27 8C EE 4A CE 63 1E DA 62 35 A5 8F 5E DC 88 F1 | '..J.c..b5..^... +EC 3D 76 8A 20 CA 7A B9 88 DC E9 D1 66 2C 01 1E | .=v. .z.....f,.. +AC 95 79 96 90 E5 83 10 F9 07 35 87 5E 4E 2F B6 | ..y.......5.^N/. +7F 90 99 53 1C A2 42 FF 32 5C 9B FF DC 2F DA FA | ...S..B.2\.../.. +7E 32 38 2F 29 2B 78 B2 FF A1 E8 1C A1 5C 71 10 | ~28/)+x......\q. +C5 E5 1E 6B 2A 47 60 9C 0A 4F 0A 3F 21 43 B4 8C | ...k*G`..O.?!C.. +E4 DF 9C 75 FA 7E 5A 8D 39 81 DE 8D 79 B4 41 B6 | ...u.~Z.9...y.A. +2A 67 F8 01 E4 C8 AC 3A 1C 44 1B B9 1E E0 55 E0 | *g.....:.D....U. +0C D3 90 55 40 DA 08 1F 3C 14 B7 F1 C9 E7 2C BA | ...U@...<.....,. +15 5F 9A AD EC 1B 76 CB A0 E2 74 13 38 13 60 76 | ._....v...t.8.`v +80 47 59 09 12 22 30 B8 B1 78 3B 1F A8 B9 EB AD | .GY.."0..x;..... +5D 19 C2 6D 8C 41 DB 7C 4F 68 CE BC E3 65 4E 15 | ]..m.A.|Oh...eN. +16 57 D1 52 55 0F 5D A1 A9 5E 4D 23 92 DF FB 8C | .W.RU.]..^M#.... +15 2F 36 8A 69 41 3D 7D 92 EF AB 0C 30 63 6E 7C | ./6.iA=}....0cn| +1F 2E 74 70 F7 13 95 0D 8D 24 2E 13 3D 8C 63 E5 | ..tp.....$..=.c. +30 36 9F 9F 71 B5 1D 83 58 C4 8F A8 9E 21 98 12 | 06..q...X....!.. +98 C3 78 AF 5D B6 C2 B9 16 5A 0D 3C D6 9D E6 97 | ..x.]....Z.<.... +35 A7 B4 79 03 49 EA 91 A4 5C 13 B2 B6 DC 72 B4 | 5..y.I...\....r. +F9 9F 55 60 7C 46 51 7E 9A 79 85 F3 45 E4 96 5B | ..U`|FQ~.y..E..[ +3B D5 25 FD 52 15 1A 2A C7 A5 95 45 83 19 75 23 | ;.%.R..*...E..u# +03 E3 66 C0 24 50 3D CA 74 1D C0 92 8F 62 56 06 | ..f.$P=.t....bV. +99 B8 C3 53 FA 2B 20 98 D0 0D 97 E7 82 EC 60 EA | ...S.+ .......`. +A9 59 C5 50 A1 ED 81 CD CF 2D E5 A8 E5 EB D2 55 | .Y.P.....-.....U +B1 DF 7F AD FB 65 A2 55 AC 50 93 38 A4 99 7C 5D | .....e.U.P.8..|] +DC 7F F1 0C 85 BF 2D 8E C9 CF 4B 8B 35 D7 75 16 | ......-...K.5.u. +51 BB 39 B2 55 7A 7F 33 28 57 16 0C 59 06 47 31 | Q.9.Uz.3(W..Y.G1 +84 22 69 38 CD 46 32 77 EB 14 C3 7E BE AE 5B 23 | ."i8.F2w...~..[# +73 E3 CC 2D CB 4E F7 26 6A 66 AA 52 58 96 20 25 | s..-.N.&jf.RX. % +D1 5F 83 7B EE A4 95 9E 41 78 99 23 17 7C C2 73 | ._.{....Ax.#.|.s +EE 49 D7 EB 7B FA B2 4F B5 54 13 0D 89 23 3B EB | .I..{..O.T...#;. +DB 56 A8 10 4B B4 80 0C 74 43 F5 C8 52 47 8A 7E | .V..K...tC..RG.~ +CD 8E F0 00 59 0C 06 C1 D3 C0 C3 22 49 79 46 FB | ....Y......"IyF. +0D 86 FA F3 67 12 C0 B5 | ....g... + +Flow Record: + RecordCount = 29 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 5 12 15 29 + size = 1402 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131960512 [2024-04-14 23:59:20.512] + last = 1713131960626 [2024-04-14 23:59:20.626] + received at = 1713132056972 [2024-04-15 00:00:56.972] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 59739 + src tos = 0 + fwd status = 0 + in packets = 13 + in bytes = 4154 + src addr = 172.217.168.10 + dst addr = 157.143.34.100 + out packets = 13 + out bytes = 4781 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +C1 00 00 00 01 00 08 E2 4A D5 5D 68 47 4A 30 00 | ........J.]hGJ0. +43 A1 6D B0 33 2E 3F EC 20 2F 13 6E 05 3A 95 A3 | C.m.3.?. /.n.:.. +68 80 F2 D3 25 F7 D2 32 EA 33 9F 90 04 EF 48 54 | h...%..2.3....HT +54 19 1F 4E E7 DB C9 E6 D2 49 97 EB 76 4C 4C 38 | T..N.....I..vLL8 +56 35 8F 44 B2 E8 6F 76 6D 71 2B F6 12 EE 0B 14 | V5.D..ovmq+..... +B3 54 8E E7 08 79 0F E5 C5 8A 26 C2 36 95 34 48 | .T...y....&.6.4H +F3 77 95 DD AF B5 65 E5 0C 1E 39 FA 2B 66 E7 FA | .w....e...9.+f.. +41 D1 F7 1B E0 DE 51 46 63 3B 82 0C 19 69 16 6F | A.....QFc;...i.o +C1 37 56 B8 FB 9B EB BF 94 18 96 DD AB AA EC CE | .7V............. +0E D3 5C 4F 1B EB F7 EA 7C 2E 7D CF C2 CE 05 A7 | ..\O....|.}..... +5B 21 86 12 80 2E A7 01 04 55 F5 9A B3 81 65 61 | [!.......U....ea +10 86 F6 4F 23 9B 77 F7 CB 7A 50 80 7A 45 64 6A | ...O#.w..zP.zEdj +D9 40 3E AB 93 69 66 C3 E6 44 3F 36 15 DC 1A 98 | .@>..if..D?6.... +03 86 BF 71 15 96 D4 74 16 87 AC 60 B5 58 69 3B | ...q...t...`.Xi; +FE 77 E1 F3 CE 68 CF E1 AB 87 8C 7D 1C 21 E9 CF | .w...h.....}.!.. +16 4B 6A B3 1F 50 94 6B 26 3B C2 66 23 82 AD 8D | .Kj..P.k&;.f#... +0B 47 60 20 8A BD 91 F5 3C F0 65 57 F6 A4 B8 48 | .G` ....<.eW...H +57 DD 93 2D A1 73 4A A3 64 C5 B9 A6 4E 41 BC 8C | W..-.sJ.d...NA.. +98 47 9D 17 DA 43 DF 47 28 FF B8 FF 8C 05 44 CB | .G...C.G(.....D. +46 7F 86 BD 64 8C 65 65 96 DA 72 DF 1A E9 61 A4 | F...d.ee..r...a. +38 26 F2 F4 E5 CE 24 83 B6 3B 4E F6 27 DC C3 96 | 8&....$..;N.'... +37 4F 3D 06 C5 0E 13 1E A0 FE C2 83 CC A8 C3 D1 | 7O=............. +7D 18 A6 69 61 BC E4 18 E8 E7 92 96 36 09 2A B1 | }..ia.......6.*. +B6 BB F3 F1 67 A7 D2 41 2A 29 8E B9 39 54 AA 89 | ....g..A*)..9T.. +01 BF 20 DB 36 A3 7A CB AE 68 BE 14 21 69 AD 3C | .. .6.z..h..!i.< +6D 73 E9 82 A1 15 B8 FF DF F4 52 BA 30 40 65 3D | ms........R.0@e= +AF 37 CD 60 5B 4D 49 2E 23 7D 7F 6A FD EF 7A 46 | .7.`[MI.#}.j..zF +E3 5A 53 66 D7 6E B0 36 68 97 72 3D E1 D9 A6 D5 | .ZSf.n.6h.r=.... +93 E3 A1 D2 2F 9F 74 90 74 EB 30 F7 A2 C2 7B DA | ..../.t.t.0...{. +30 8A BD FE 95 58 40 98 E8 D8 00 3F 58 53 D9 FE | 0....X@....?XS.. +68 44 F7 9A C8 CB 2A 8C AE 2D 7B E6 0E FD E4 E4 | hD....*..-{..... +F2 3D 4E 89 61 99 2A D7 B8 B0 79 22 16 A1 6C 75 | .=N.a.*...y"..lu +07 36 9C DE 9A 3D 8C 3C EB 6D F1 C7 93 C5 F4 BD | .6...=.<.m...... +0E C0 B0 5D 57 CB 41 E4 E9 EA 95 08 4A 47 AA 9F | ...]W.A.....JG.. +22 3E B1 22 7F 0A DD 4E EE 73 93 25 BD 5A BE 2F | ">."...N.s.%.Z./ +94 0A DE 15 C4 62 F1 11 93 50 84 A3 ED 98 FF 06 | .....b...P...... +A3 4F 3D 6D 34 FA 46 46 9A 71 5D 56 16 F2 FE EA | .O=m4.FF.q]V.... +A0 6B 72 C4 94 89 B5 C3 AC 25 86 E9 BC F1 00 B3 | .kr......%...... +71 7E 45 43 11 A3 E7 6B C9 2B A9 14 D1 62 97 0F | q~EC...k.+...b.. +9F FB F2 B6 64 F0 A1 11 FA 02 7D 13 CD D1 75 D0 | ....d.....}...u. +76 59 CB E5 F5 80 2D 29 C4 79 58 B0 BA BD 27 BB | vY....-).yX...'. +82 8F E3 F5 2F 4B EC 3E D7 F1 9B B7 A9 5F 4D 89 | ..../K.>....._M. +90 30 30 F8 2C 86 AF C9 47 D0 D7 8F 88 55 52 79 | .00.,...G....URy +DB B1 10 B5 62 D4 BC A0 71 6F DD A2 74 A2 C1 5F | ....b...qo..t.._ +AB 37 F3 5F 36 E1 1D CB 0E 54 44 B9 30 69 AA B2 | .7._6....TD.0i.. +32 DF 01 CA 77 24 1A 27 67 C6 E0 69 B5 7F 3D 56 | 2...w$.'g..i..=V +9A 9C 3D 71 74 AF 18 8E 1C 2E BD 41 4C 70 33 FC | ..=qt......ALp3. +B6 B3 2A D2 6D 91 02 EA D1 CE 40 D7 C0 44 A4 45 | ..*.m.....@..D.E +0F FB 14 9D AF DD CD 64 AE 3B A2 28 BD A8 62 AF | .......d.;.(..b. +F1 C7 31 5E 86 32 D4 D3 F8 4E 41 A9 5D 24 85 69 | ..1^.2...NA.]$.i +E9 E5 A0 F6 06 49 DD 60 7B F9 D6 2A 2E 55 C6 83 | .....I.`{..*.U.. +C1 D7 70 CF EF 9D 9B 73 F4 50 0F 72 64 3B C5 E2 | ..p....s.P.rd;.. +4A 76 03 37 EF 82 B2 4D E2 02 50 30 61 1F E2 63 | Jv.7...M..P0a..c +97 E3 7E 7D 86 C8 0C 44 73 32 F7 D3 2E 6D 09 A5 | ..~}...Ds2...m.. +86 AF 04 52 8B 0A CB B5 6E 6F 0B EB C8 C9 5F 36 | ...R....no...._6 +0C EE 1C CE BB 10 E7 DE F6 6B 7B E2 B4 2C BA 5A | .........k{..,.Z +A8 B7 34 04 E5 BF 77 EE 63 15 D8 5B 90 18 BC 20 | ..4...w.c..[... +4B 9D 9F 0A 4B C6 AE 77 10 8B 8D DC 01 91 38 A4 | K...K..w......8. +67 96 82 0E BE 11 34 AB 22 44 96 C2 1C 36 FE 65 | g.....4."D...6.e +9E B0 BA E4 00 00 00 01 00 08 E2 4A D5 5D 68 47 | ...........J.]hG +4A 30 40 DA FA C4 3A 2A 2F 11 32 67 87 91 9A 31 | J0@...:*/.2g...1 +E3 DF 1B 5A 37 DF CA 72 49 B2 24 1C 17 DB 86 0C | ...Z7..rI.$..... +0B B1 90 D3 EE 70 37 BC 2D 40 5A 82 74 F0 B6 B1 | .....p7.-@Z.t... +5C BD F6 DF 0E 8B FA 08 14 F3 EA 7C EA CA 98 87 | \..........|.... +2B 5B 72 61 84 B8 7D A7 05 14 20 AE A3 80 D4 2F | +[ra..}... ..../ +58 C6 1C FA ED A9 25 08 C0 97 78 EB C6 A3 A0 34 | X.....%...x....4 +D5 4D FF FD F7 81 6B 40 44 7F 22 14 84 3D D0 C3 | .M....k@D."..=.. +35 D8 62 CF 20 1C E0 5F 69 1D 68 ED 01 95 1B 71 | 5.b. .._i.h....q +79 72 AC 76 BD 86 D6 1A 4B 3A 9C 61 69 51 20 04 | yr.v....K:.aiQ . +B6 2B 74 B0 C5 16 E8 77 A9 F9 C9 FF 0C AF 03 2F | .+t....w......./ +54 99 A7 E6 88 3D A5 BC 39 E1 A4 30 3E 82 06 69 | T....=..9..0>..i +D1 8A 5D 82 72 8D 1D 86 DD CF 28 E2 3A D0 C1 1D | ..].r.....(.:... +6E 3E 88 C1 B4 7F 58 F7 C9 BA 27 BC 10 9D 0E 5F | n>....X...'...._ +BF FD E8 34 E2 96 D5 E1 2D AB FB 04 A3 C3 4A 29 | ...4....-.....J) +92 CD 7E 65 E0 EF A4 59 B7 E6 F5 94 98 FD 13 D2 | ..~e...Y........ +7E 36 57 73 5A C1 67 8B D1 AB 3B B9 94 4B 23 BC | ~6WsZ.g...;..K#. +F2 A4 3C 2D 46 F2 E5 F0 97 4D 3A 65 43 61 71 57 | ..<-F....M:eCaqW +1B 9E FA 84 DE 77 9B 89 72 55 05 3B 60 6B 32 D1 | .....w..rU.;`k2. +88 DA | .. + +Flow Record: + RecordCount = 30 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132277438 [2024-04-15 00:04:37.438] + last = 1713132308081 [2024-04-15 00:05:08.081] + received at = 1713132377066 [2024-04-15 00:06:17.066] + proto = 6 TCP + tcp flags = 0x5f .E.APRSF + src port = 443 + dst port = 61655 + src tos = 0 + fwd status = 0 + in packets = 20 + in bytes = 16585 + src addr = 17.171.47.23 + dst addr = 157.143.34.100 + out packets = 15 + out bytes = 3579 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 115.517 ms + srv latency = 0.000 ms + app latency = 2.904 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 5d79edf64e03689ff559a54e9d9487bc + ja4s hash = t130500_c02f_8763c20bf469 +16 03 03 00 70 02 00 00 6C 03 03 2B 8C B3 98 F0 | ....p...l..+.... +55 62 49 37 D3 80 56 50 51 6D E9 6B DF B1 58 8A | UbI7..VPQm.k..X. +B3 11 BC 56 2F 13 25 77 71 FD 72 20 DC 64 15 78 | ...V/.%wq.r .d.x +F4 1F A0 B9 B4 CB A6 01 29 4D 0A AB A7 00 00 F7 | ........)M...... +23 F9 D1 BE A4 14 72 D7 5E 4D A2 63 C0 2F 00 00 | #.....r.^M.c./.. +24 FF 01 00 01 00 00 00 00 00 00 0B 00 04 03 00 | $............... +01 02 00 10 00 0B 00 09 08 68 74 74 70 2F 31 2E | .........http/1. +31 00 17 00 00 16 03 03 0D 46 0B 00 0D 42 00 0D | 1........F...B.. +3F 00 04 7B 30 82 04 77 30 82 03 5F A0 03 02 01 | ?..{0..w0.._.... +02 02 10 1F 8A 57 19 C7 FB 1A 8B 00 EC 11 F7 D8 | .....W.......... +4E 86 86 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B | N..0...*.H...... +05 00 30 6D 31 27 30 25 06 03 55 04 03 0C 1E 41 | ..0m1'0%..U....A +70 70 6C 65 20 53 65 72 76 65 72 20 41 75 74 68 | pple Server Auth +65 6E 74 69 63 61 74 69 6F 6E 20 43 41 31 20 30 | entication CA1 0 +1E 06 03 55 04 0B 0C 17 43 65 72 74 69 66 69 63 | ...U....Certific +61 74 69 6F 6E 20 41 75 74 68 6F 72 69 74 79 31 | ation Authority1 +13 30 11 06 03 55 04 0A 0C 0A 41 70 70 6C 65 20 | .0...U....Apple +49 6E 63 2E 31 0B 30 09 06 03 55 04 06 13 02 55 | Inc.1.0...U....U +53 30 1E 17 0D 32 33 30 39 31 34 32 32 35 30 34 | S0...23091422504 +35 5A 17 0D 32 34 31 30 31 33 32 32 35 30 34 34 | 5Z..241013225044 +5A 30 50 31 17 30 15 06 03 55 04 03 0C 0E 67 64 | Z0P1.0...U....gd +6D 66 2E 61 70 70 6C 65 2E 63 6F 6D 31 13 30 11 | mf.apple.com1.0. +06 03 55 04 0A 0C 0A 41 70 70 6C 65 20 49 6E 63 | ..U....Apple Inc +2E 31 13 30 11 06 03 55 04 08 0C 0A 43 61 6C 69 | .1.0...U....Cali +66 6F 72 6E 69 61 31 0B 30 09 06 03 55 04 06 13 | fornia1.0...U... +02 55 53 30 82 01 22 30 0D 06 09 2A 86 48 86 F7 | .US0.."0...*.H.. +0D 01 01 01 05 00 03 82 01 0F 00 30 82 01 0A 02 | ...........0.... +82 01 01 00 D6 1D EE 94 DD 1F BD A5 B9 50 0B C1 | .............P.. +7D 65 07 B0 65 A8 46 3D 20 5D DB 39 BE F8 4F 23 | }e..e.F= ].9..O# +30 C9 15 55 DD BA 4B 21 53 BD 58 65 ED BF 57 00 | 0..U..K!S.Xe..W. +D6 06 99 86 AC 7A 6A 7B F3 73 25 BC B0 86 2B A2 | .....zj{.s%...+. +C7 9D D0 18 72 50 9D 79 77 82 D6 E1 12 04 54 3E | ....rP.yw.....T> +06 57 EE 60 2C AC 13 D0 8E A6 A5 4E CC 44 B1 6D | .W.`,......N.D.m +9F 59 43 57 C4 75 3B 1A 32 4C 17 1D A2 DD 65 3A | .YCW.u;.2L....e: +3E 69 E3 F8 9E E6 D7 57 9E 75 8F 0B 98 84 C3 F6 | >i.....W.u...... +71 6F 63 5C AE 7E 21 5A 6E 87 B1 69 AE 8F E9 5D | qoc\.~!Zn..i...] +E8 10 4E E2 81 0D 8E 30 33 E1 FD 27 BC BA 11 1B | ..N....03..'.... +F4 2E 19 94 01 E6 41 34 AD 82 42 8D 8E 0C 34 11 | ......A4..B...4. +49 62 67 4B A9 03 49 B1 EA 36 FA A3 84 C0 E7 9F | IbgK..I..6...... +E2 04 59 17 9F 81 2A 6A D7 88 23 02 0D C4 A3 7A | ..Y...*j..#....z +50 6C 69 D2 5A 7E 5C 80 51 63 A8 EF 5B C4 8D C4 | Pli.Z~\.Qc..[... +27 5A 79 F7 60 61 80 6E BA 6A 67 1D D5 6F 3B D1 | 'Zy.`a.n.jg..o;. +89 6E 5A DB 30 89 8F CB 57 B5 87 5E F3 11 DC E0 | .nZ.0...W..^.... +56 70 A2 B7 02 03 01 00 01 A3 82 01 2E 30 82 01 | Vp...........0.. +2A 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 30 | *0...U.......0.0 +1F 06 03 55 1D 23 04 18 30 16 80 14 2C C5 6D 52 | ...U.#..0...,.mR +DD 31 EF 8C EC 08 81 ED DF DC CA 43 00 45 01 D0 | .1.........C.E.. +30 4A 06 08 2B 06 01 05 05 07 01 01 04 3E 30 3C | 0J..+........>0< +30 3A 06 08 2B 06 01 05 05 07 30 01 86 2E 68 74 | 0:..+.....0...ht +74 70 3A 2F 2F 6F 63 73 70 2E 61 70 70 6C 65 2E | tp://ocsp.apple. +63 6F 6D 2F 6F 63 73 70 30 33 2D 61 70 70 6C 65 | com/ocsp03-apple +73 65 72 76 65 72 61 75 74 68 31 32 30 19 06 03 | serverauth120... +55 1D 11 04 12 30 10 82 0E 67 64 6D 66 2E 61 70 | U....0...gdmf.ap +70 6C 65 2E 63 6F 6D 30 13 06 03 55 1D 25 04 0C | ple.com0...U.%.. +30 0A 06 08 2B 06 01 05 05 07 03 01 30 3C 06 03 | 0...+.......0<.. +55 1D 1F 04 35 30 33 30 31 A0 2F A0 2D 86 2B 68 | U...50301./.-.+h +74 74 70 3A 2F 2F 63 72 6C 2E 61 70 70 6C 65 2E | ttp://crl.apple. +63 6F 6D 2F 61 70 70 6C 65 73 65 72 76 65 72 61 | com/appleservera +75 74 68 63 61 31 2E 63 72 6C 30 1D 06 03 55 1D | uthca1.crl0...U. +0E 04 16 04 14 20 4F CC B0 7C 3F 01 EE 1B 7F 56 | ..... O..|?....V +F1 56 D1 59 87 9B EF 49 F6 30 0E 06 03 55 1D 0F | .V.Y...I.0...U.. +01 01 FF 04 04 03 02 05 A0 30 10 06 0A 2A 86 48 | .........0...*.H +86 F7 63 64 06 1B 10 04 02 05 00 30 0D 06 09 2A | ..cd.......0...* +86 48 86 F7 0D 01 01 0B 05 00 03 82 01 01 00 28 | .H.............( +B1 4E E7 5B 95 BC 2A F1 18 22 AA 80 2E B7 B7 B4 | .N.[..*.."...... +18 44 F5 8C 37 7D 5D 04 D5 C8 8C 77 C6 17 1E 00 | .D..7}]....w.... +95 DE 8D D5 8F 6B EB E2 58 39 93 8A B9 EC F7 20 | .....k..X9..... +91 99 C9 F6 84 36 1C 13 2B C7 DB 1B 1A EB 75 D2 | .....6..+.....u. +CF A2 3C 28 43 71 41 1F 53 38 30 96 54 E0 89 C5 | ..<(CqA.S80.T... +0D D4 D0 7D B3 37 DC 09 2E 9A 47 1F 1C B5 51 F4 | ...}.7....G...Q. +BB F5 A4 1A 1F 3B 09 07 FB 5E B6 CB 18 78 0D 8E | .....;...^...x.. +5E EE 9E 24 9B 94 4A DE C7 D8 59 0A 24 B2 2E 06 | ^..$..J...Y.$... +FF DB 26 A3 EF AE 56 FC 32 54 60 6A 0B F5 EC 5A | ..&...V.2T`j...Z +58 44 65 3B 05 F6 9C B2 0B 62 82 4B 09 A7 CC 1B | XDe;.....b.K.... +EA 1B 9B 6F 55 0A 30 CE B6 D4 68 02 78 33 05 3C | ...oU.0...h.x3.< +FB 47 88 96 E8 0D 87 D1 73 78 B0 4E 40 B5 0F 0C | .G......sx.N@... +B1 D4 51 B9 25 1D 55 3C D3 71 73 72 F5 FB 81 D4 | ..Q.%.U<.qsr.... +20 AA C0 6F 91 07 9C 67 22 57 FB 2A FD F7 A5 F4 | ..o...g"W.*.... +C2 C9 8D FF 02 8B 45 EA 3E AD 4F EC 83 A5 F2 F4 | ......E.>.O..... +F7 18 3D 3E 27 5C 6B 9C B7 3E 90 7E 2D F1 1D 00 | ..=>'\k..>.~-... +03 FC 30 82 03 F8 30 82 02 E0 A0 03 02 01 02 02 | ..0...0......... +08 23 69 74 04 AD CB 83 14 30 0D 06 09 2A 86 48 | .#it.....0...*.H +86 F7 0D 01 01 0B 05 00 30 62 31 0B 30 09 06 03 | ........0b1.0... +55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 0A | U....US1.0...U.. +13 0A 41 70 70 6C 65 20 49 6E 63 2E 31 26 30 24 | ..Apple Inc.1&0$ +06 03 55 04 0B 13 1D 41 70 70 6C 65 20 43 65 72 | ..U....Apple Cer +74 69 66 69 63 61 74 69 6F 6E 20 41 75 74 68 6F | tification Autho +72 69 74 79 31 16 30 14 06 03 55 04 03 13 0D 41 | rity1.0...U....A +70 70 6C 65 20 52 6F 6F 74 20 43 41 30 1E 17 0D | pple Root CA0... +31 34 30 33 30 38 30 31 35 33 30 34 5A 17 0D 32 | 140308015304Z..2 +39 30 33 30 38 30 31 35 | 90308015 + +Flow Record: + RecordCount = 31 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 215 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131712553 [2024-04-14 23:55:12.553] + last = 1713131901997 [2024-04-14 23:58:21.997] + received at = 1713132000887 [2024-04-15 00:00:00.887] + proto = 6 TCP + tcp flags = 0x19 ...AP..F + src port = 8822 + dst port = 28919 + src tos = 0 + fwd status = 0 + in packets = 77363 + in bytes = 4356041 + src addr = 157.143.34.100 + dst addr = 213.144.148.130 + out packets = 114757 + out bytes = 160882567 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 8.939 ms + srv latency = 0.000 ms + app latency = 6.125 ms + in payload = 35 +17 03 03 00 1E 26 63 BD 98 5C E1 DD 35 E9 83 17 | .....&c..\..5... +5A A1 96 8E 7D 2D 03 A5 84 00 67 16 BF A6 85 D3 | Z...}-....g..... +B5 F7 3F | ..? + +Flow Record: + RecordCount = 32 + Flags = 0x00 PCAP v1, Unsampled + Elements = 5: 1 2 12 15 29 + size = 1374 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132382149 [2024-04-15 00:06:22.149] + last = 1713132382250 [2024-04-15 00:06:22.250] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 51648 + src tos = 0 + fwd status = 0 + in packets = 13 + in bytes = 7924 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +CD 00 00 00 01 00 08 F8 66 9D D0 4F F4 18 10 00 | ........f..O.... +44 D0 54 94 A0 D1 83 4F 1A DE 52 00 F1 E6 1A 7E | D.T....O..R....~ +69 D7 B5 FE 82 DA 34 17 90 B4 FD 85 43 19 97 A1 | i.....4.....C... +B3 B6 F7 77 44 FF A4 AA F8 5A 45 5D C4 B3 EE 4B | ...wD....ZE]...K +78 6B 76 7E 29 62 C3 33 26 6D E6 52 A7 78 2B 92 | xkv~)b.3&m.R.x+. +B9 17 97 8A A0 B4 C5 04 8E E7 B1 CB A7 20 E3 82 | ............. .. +9C 9B 67 6D B8 CC DA F5 C4 C9 D5 91 8E 12 AE 55 | ..gm...........U +B0 ED 73 AA 14 A1 5D 4A CB 7B A2 06 3D 1A 33 80 | ..s...]J.{..=.3. +A0 30 7C 08 DA 21 25 E4 21 54 D7 9F 00 FD 19 2F | .0|..!%.!T...../ +C6 71 C3 6F 50 B4 0E 02 64 11 A6 67 E7 71 94 01 | .q.oP...d..g.q.. +A9 41 96 D7 F0 F1 D2 EA D5 6B 68 A2 99 BC BD 7C | .A.......kh....| +4B 24 C2 A8 0B 81 B6 99 6F 41 D7 78 16 AE 46 F3 | K$......oA.x..F. +AC 6D 73 07 DD 49 CF 01 DB C7 DD CE 6E 2F 74 81 | .ms..I......n/t. +83 08 69 D1 06 3E B4 05 6B E0 65 15 30 C9 5B F1 | ..i..>..k.e.0.[. +92 40 45 E1 79 3D 00 46 60 67 41 1E D6 6F AC D5 | .@E.y=.F`gA..o.. +99 24 C5 9A F0 C9 26 ED 40 D4 8A 2C 9C 9B 21 A7 | .$....&.@..,..!. +DA 49 EB 31 80 3D 5D F8 B0 1B AA 47 4A 41 D6 EC | .I.1.=]....GJA.. +F4 7F D6 C4 D5 BD BB 12 68 BA C3 54 04 56 8B 3A | ........h..T.V.: +8B 40 B1 7F DA C2 78 CE 4E 35 FE C3 F5 F8 A0 C4 | .@....x.N5...... +23 55 4C 05 6C 66 A1 27 10 32 A0 A1 66 2C BF B2 | #UL.lf.'.2..f,.. +C8 46 3D 76 0F 28 1D B1 77 E9 8E C9 46 33 3C 9B | .F=v.(..w...F3<. +16 F3 85 0F 87 21 05 55 05 2C E4 EA 47 6D 73 81 | .....!.U.,..Gms. +5D F1 F3 59 DF 48 49 CE 5F 14 89 D7 9F A2 11 93 | ]..Y.HI._....... +49 8C 62 F4 FB F0 42 10 A4 79 C4 0D DC 65 F4 0A | I.b...B..y...e.. +BC 2F B0 5F 51 1E D1 02 C2 43 54 87 E2 AB F1 E0 | ./._Q....CT..... +84 E2 78 2C 5C 1A 50 5A 93 50 B2 F2 1C 78 92 E4 | ..x,\.PZ.P...x.. +59 C2 63 64 BA E8 BD 93 2D 16 C3 62 BB 77 E5 C4 | Y.cd....-..b.w.. +88 5F B1 77 8C DE 7E 98 F0 48 D0 ED 01 D3 52 90 | ._.w..~..H....R. +2E 5E DA AD 6F 4A 4E EB 99 9B DB 7B AB BB C0 EF | .^..oJN....{.... +A6 66 6A D7 C9 7C 44 D3 8D 6F 94 87 38 11 FA 0A | .fj..|D..o..8... +46 69 05 3F 25 C1 D8 4F 55 BA 32 8C B0 B2 D2 EB | Fi.?%..OU.2..... +E6 A6 7D 94 3A 10 96 8A EB 5B 5A 05 3E 04 C0 F5 | ..}.:....[Z.>... +72 75 74 BD D1 A3 68 2C 0C 65 A9 39 2E 8A 18 D5 | rut...h,.e.9.... +30 B1 9E F0 25 AB 4F C1 B3 75 1A 0B DE 7C 2B 0F | 0...%.O..u...|+. +66 66 4A 59 B1 4C 84 1D 56 B2 82 42 37 4B B5 33 | ffJY.L..V..B7K.3 +76 44 62 86 3D 3D 9C 6B 48 A8 0B 2E BB 72 DB 53 | vDb.==.kH....r.S +09 1D DB 34 21 5A 47 51 5F 65 94 3E E3 A3 BB 84 | ...4!ZGQ_e.>.... +57 23 67 EF 87 49 CD 3B 64 92 51 D1 04 68 CD AF | W#g..I.;d.Q..h.. +A8 85 D2 10 A9 24 52 AE 00 1E F8 AD BF DD 38 2C | .....$R.......8, +56 F1 6A A3 AA 33 0F AA 09 8D 51 56 7A 43 E1 F3 | V.j..3....QVzC.. +E5 BA 57 46 D6 50 A0 E1 71 E2 9A EE EF B7 A4 BD | ..WF.P..q....... +93 DD FE 49 F2 DE BF AE A4 B1 FD F8 20 B7 B6 67 | ...I........ ..g +24 27 DB 0E FD 20 6A 2E 9A CA E9 C4 C1 50 DE D8 | $'... j......P.. +96 72 5A AF 9A D3 B4 A3 D5 BF 3E 99 E0 19 96 B4 | .rZ.......>..... +A2 CA BB 67 ED B6 B5 E7 32 F2 FD F8 1A 69 F3 24 | ...g....2....i.$ +60 45 E3 D0 0F 40 AC E7 6A 9D EE AF 4D C0 92 85 | `E...@..j...M... +10 76 44 EC 0F 61 B9 8A C6 65 C3 AA 13 64 B9 B4 | .vD..a...e...d.. +80 63 67 A8 AD 00 81 60 2F 85 63 75 BD 4F 93 23 | .cg....`/.cu.O.# +8A EC B5 CD 0D BB 0B 1D 46 D2 A0 44 DF 5D 0F C7 | ........F..D.].. +59 A1 D8 A6 5C B9 AB 1E FC F9 C3 5A 20 47 C9 1D | Y...\......Z G.. +7C 25 25 9D FF 00 9A 50 55 B0 A6 13 2C EF 13 DF | |%%....PU...,... +13 1F 19 9F B6 22 DB 51 CB 35 7F D9 FA 61 55 B3 | .....".Q.5...aU. +60 88 F1 47 00 91 80 5F E1 50 43 4A 97 0B 5B E4 | `..G..._.PCJ..[. +F0 73 2D 48 B9 49 3D C6 BF 7D A1 49 8F F7 C1 7E | .s-H.I=..}.I...~ +4C 2E B8 D1 0D 5C 3F B5 FD CD AA 70 55 22 9B AA | L....\?....pU".. +43 C5 3C DB 82 DB D1 61 90 CD 15 7C AE 99 00 9A | C.<....a...|.... +E7 33 91 D0 22 92 DB 97 FE 12 86 78 4A E3 6E B9 | .3.."......xJ.n. +4C 11 33 CD 3C EC 22 4A AB 4E A3 01 F6 8F 6A 6D | L.3.<."J.N....jm +B6 25 62 7D E5 56 0A 60 F3 E6 F2 74 CC E3 32 13 | .%b}.V.`...t..2. +31 85 51 4E E8 4E 56 91 34 D6 EA 8B 89 32 16 1E | 1.QN.NV.4....2.. +21 5E DA FC 8E F0 CF 60 7E CA 3C 90 93 32 32 C9 | !^.....`~.<..22. +94 61 3F B4 F5 15 9B C2 50 23 FB 7C AD 61 E3 C7 | .a?.....P#.|.a.. +CA 7C 39 AC 41 8B 3D 40 44 8B F6 74 21 C3 76 61 | .|9.A.=@D..t!.va +83 2C 0A F0 45 E7 65 A9 35 D2 C2 1E 4C A9 3E 04 | .,..E.e.5...L.>. +D1 DE A1 55 EE 84 9A 95 F7 27 54 FB D6 33 F7 09 | ...U.....'T..3.. +7C F4 78 83 BE 33 B2 0D F8 DE EA 91 5A A7 F4 0B | |.x..3......Z... +EB FD 26 7B 4F A8 8D 08 AA 47 B6 94 F7 A3 13 EA | ..&{O....G...... +51 4F 84 66 68 9A F8 A4 F2 84 2B A8 94 25 CC B9 | QO.fh.....+..%.. +DA 8E 1E B2 7A 96 B5 3F EC 20 6C 97 55 C9 12 9C | ....z..?. l.U... +8A D4 10 9B 12 6B 50 AD 84 5E 0F A8 D9 0D 6A C1 | .....kP..^....j. +8A 59 22 AB BB 89 88 0D 4B EC 06 80 2A CA 96 8A | .Y".....K...*... +B8 28 3D 68 34 9E 44 EA 8D 03 FA 17 A4 77 4F 5A | .(=h4.D......wOZ +C0 2B 03 40 43 58 4D 25 E5 07 6D 11 37 42 9A 67 | .+.@CXM%..m.7B.g +5F AF 09 6D 6A 7B 26 10 53 91 54 EF 75 E5 C6 CE | _..mj{&.S.T.u... +57 9F 2D 77 87 17 21 12 76 45 26 4A ED 9A D6 46 | W.-w..!.vE&J...F +96 8F 4E DB 8D A3 91 53 AA DD 42 10 B2 32 5F 30 | ..N....S..B..2_0 +A6 7A 8B 3E 89 F7 99 21 53 D3 B1 C4 89 51 A8 21 | .z.>...!S....Q.! +2D 4C 4E B9 DF 25 41 F0 28 AD 18 C2 67 82 84 A4 | -LN..%A.(...g... +7F 91 | .. + +Flow Record: + RecordCount = 33 + Flags = 0x00 PCAP v1, Unsampled + Elements = 5: 1 2 12 15 29 + size = 1374 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132382156 [2024-04-15 00:06:22.156] + last = 1713132382236 [2024-04-15 00:06:22.236] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 62094 + src tos = 0 + fwd status = 0 + in packets = 11 + in bytes = 4235 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +CF 00 00 00 01 00 08 F7 3F ED 54 B4 25 50 4F 00 | ........?.T.%PO. +43 9E B2 C8 9C D7 1F 54 E4 35 8A 0A 3F 98 2C 17 | C......T.5..?.,. +86 05 50 C3 82 14 9B 6C 75 F3 F8 CC 32 7B BB 2C | ..P....lu...2{., +0F 78 72 56 AA E1 9C FC 99 04 50 2D 06 B6 21 32 | .xrV......P-..!2 +44 C4 23 8E A0 C6 35 CB C8 EB AC E8 99 DB 60 FE | D.#...5.......`. +A1 43 B5 61 DD 52 F9 C5 2C C5 74 8F CA 04 34 B6 | .C.a.R..,.t...4. +41 82 F9 5E 47 FF DB 57 C2 D4 AC 00 76 26 02 7E | A..^G..W....v&.~ +C6 56 40 67 35 CD 46 27 0C 37 A0 A3 D6 E7 20 A9 | .V@g5.F'.7.... . +22 82 0E 15 49 C5 D6 1D A2 1E D5 FC B9 07 F6 DF | "...I........... +25 9A 41 7B 36 CE 7A EC D1 82 E1 61 17 16 63 7C | %.A{6.z....a..c| +6F 37 11 7A 7C A1 C9 FC 80 DC 70 60 E7 90 36 E6 | o7.z|.....p`..6. +CF 0A 1D 46 BF 2E 7B 78 4F 35 7D 8E CC 6C 09 71 | ...F..{xO5}..l.q +93 0D F7 E4 C0 89 24 FF 6E 29 02 D5 89 45 E5 42 | ......$.n)...E.B +F2 E5 18 8D 27 42 75 7A BD C2 D2 AF F4 F4 79 B2 | ....'Buz......y. +43 1F 6C F0 B6 0A 88 6F 96 93 1D 4E F1 6A 42 04 | C.l....o...N.jB. +63 F6 FF 69 73 03 75 15 44 26 98 CD 75 8F 99 89 | c..is.u.D&..u... +78 85 06 F4 70 78 B8 24 A9 A8 D7 6D 06 63 E5 BC | x...px.$...m.c.. +CA 39 E9 F9 DB 5C 30 DC E6 A4 C3 60 18 4B 1F 4A | .9...\0....`.K.J +C6 A8 02 DD 46 90 CB 6C A9 28 A4 ED 25 15 56 81 | ....F..l.(..%.V. +65 C3 F6 64 84 E9 FA 36 1E F3 72 25 99 BD 27 92 | e..d...6..r%..'. +AF 9C 3B 1F 26 F3 5F 3A 48 CE D5 8A 9E 54 91 B0 | ..;.&._:H....T.. +88 1F 74 08 F9 EA 0D 67 58 D5 1F B1 FD 1B 55 2D | ..t....gX.....U- +35 5B 40 A4 8E C5 9D B3 1E 6D BA 15 77 71 8B 50 | 5[@......m..wq.P +72 82 56 67 26 7E 38 72 21 DF F9 C4 AF BC 84 DC | r.Vg&~8r!....... +61 88 84 6F 21 37 4A 23 86 48 C6 E5 85 5D C8 90 | a..o!7J#.H...].. +FD 9B E1 98 8E A8 0B A6 73 C2 BF 5A 2B 60 B7 DF | ........s..Z+`.. +29 01 F8 3B 7A 11 A6 AE 89 D1 F7 9B 35 27 D3 2E | )..;z.......5'.. +DD 18 13 7E 57 FF CC 5F 0D 8D B5 70 BB AF E5 24 | ...~W.._...p...$ +81 69 72 9B 4A 64 1E 48 CE F1 62 7A F1 9B 9D 80 | .ir.Jd.H..bz.... +10 1F 50 FE 23 1B 56 0F 78 E4 7F 21 9D 82 55 94 | ..P.#.V.x..!..U. +35 CF CA 72 39 31 69 CA 79 71 3E 32 7E B1 6A 89 | 5..r91i.yq>2~.j. +EC 90 3D 04 1D 14 D8 6F 7B 6B DB 91 00 7C A3 64 | ..=....o{k...|.d +7C 63 12 15 9D 54 6F B4 F3 7F 7E C2 0E 9D 13 16 | |c...To...~..... +58 B9 D2 6C 2D 24 92 0C FC 4A 86 AA 4F 10 D1 3E | X..l-$...J..O..> +2E 59 A0 C7 51 9A 13 78 02 80 06 7F E1 C4 ED 7A | .Y..Q..x.......z +F7 21 27 A8 97 67 A6 B3 83 51 04 8D 59 15 76 D4 | .!'..g...Q..Y.v. +38 A8 A2 60 B6 A1 5A F1 D9 80 93 B9 C6 AE 67 F1 | 8..`..Z.......g. +B1 FC 81 DC A8 65 9A D3 62 D9 8F A9 F7 9C 3D 38 | .....e..b.....=8 +F0 B4 A2 4E 2E 89 26 A6 9F D9 13 E7 7E 6D 27 DD | ...N..&.....~m'. +D5 F0 07 2C B6 E2 90 27 14 D8 CC 95 74 75 20 A0 | ...,...'....tu . +77 AD 92 9B A1 9B DF 1C 00 E1 C1 2C EF F0 13 CB | w..........,.... +C0 92 F5 2E 35 8E 59 23 7F 6C B0 53 9C 50 FB DA | ....5.Y#.l.S.P.. +0F 4B 69 B7 43 D6 9D 8A ED 03 25 3C E1 23 E1 3E | .Ki.C.....%<.#.> +97 AD AD 23 68 37 94 BB 76 54 63 55 B2 D9 A2 59 | ...#h7..vTcU...Y +A6 FC 1E 40 4A C9 38 B5 ED 04 F8 CC 72 15 6D A9 | ...@J.8.....r.m. +6B ED D3 87 6C 19 5C 81 D1 6F DB 9A 3E 11 FF F8 | k...l.\..o..>... +B3 B1 D7 E5 0B 83 76 EA 2C 7E 17 51 0F 72 0A 60 | ......v.,~.Q.r.` +D2 61 F8 A1 32 48 7F 9F F0 2B E2 5C 7B 92 87 64 | .a..2H...+.\{..d +A2 10 CA 14 A9 B1 DE 11 F2 ED A1 7F E1 61 A9 DF | .............a.. +55 1A 7B 14 6D EC A3 96 85 02 CE 9F 7D EA 4C B5 | U.{.m.......}.L. +75 F4 88 AA AA 1A 1D 05 93 73 44 4B C9 32 53 23 | u........sDK.2S# +F3 2D F6 C8 91 74 AF 75 EB 25 97 3B 73 30 FC 0F | .-...t.u.%.;s0.. +8D CE EB 59 0E CB E5 9D BC 2E 96 56 13 8F 23 9C | ...Y.......V..#. +F7 5D 99 61 13 8C 3A FE CD F7 61 F7 AC 8B 03 03 | .].a..:...a..... +A1 F8 37 D3 7A 4B 31 43 A8 0C 30 B3 0F 8B 38 5C | ..7.zK1C..0...8\ +54 4E 0D C1 5C 90 FA B0 61 51 76 B2 61 2B F2 8C | TN..\...aQv.a+.. +FB 35 FE FA D0 E4 6D 6C 2B B5 ED 29 A8 4B 94 87 | .5....ml+..).K.. +CE B4 AB 95 A4 5F 4D 66 68 96 0B 4F AD D7 B8 78 | ....._Mfh..O...x +E8 9F B9 A2 33 E1 28 66 90 B9 6D AD CD CA 13 EB | ....3.(f..m..... +EA 00 00 00 01 00 08 F7 3F ED 54 B4 25 50 4F 40 | ........?.T.%PO@ +DD 7C 19 06 61 91 7B 50 62 B3 63 73 49 A5 C5 11 | .|..a.{Pb.csI... +BB CC C1 EA 7F 4A 68 1D E1 75 D8 8E 7E CF E8 77 | .....Jh..u..~..w +67 B3 48 7E B3 5B 69 A9 B4 96 1C BD 48 8E 97 47 | g.H~.[i.....H..G +69 9D AF ED CD 27 58 97 A9 61 A0 C7 1A 03 D9 D6 | i....'X..a...... +37 61 86 09 0A 1B 09 45 10 2C DF 51 4C BA E5 26 | 7a.....E.,.QL..& +6C BD 4A BF 98 DF F3 88 F7 B6 45 C3 28 A3 77 E3 | l.J.......E.(.w. +CB 35 89 A2 8A 80 B0 F8 58 60 B4 87 E5 74 47 61 | .5......X`...tGa +18 5B A5 69 C3 EA FE 9C 59 58 65 BB 91 D8 7A 14 | .[.i....YXe...z. +64 FC 91 60 16 A4 B7 8B 01 65 0C 83 77 19 CB EC | d..`.....e..w... +DB AC 74 0B 33 82 BA 24 E4 F2 CC 5C B0 F1 5A 6B | ..t.3..$...\..Zk +7B 75 9D BE C2 09 0B 2D C1 29 47 36 42 30 FD 5D | {u.....-.)G6B0.] +BA 86 8F AF 06 DD C1 5A E5 04 03 CF 2A 86 33 BE | .......Z....*.3. +34 50 59 BA F1 2C A0 56 AC 48 8F 8B 35 38 56 8B | 4PY..,.V.H..58V. +A7 9D 1E E8 05 FB E9 7B EF 23 0F A4 C3 46 4E 86 | .......{.#...FN. +8E FF 56 9F B2 EF F0 03 02 D9 F3 57 F6 46 84 00 | ..V........W.F.. +7B CB F6 CC 91 FA B8 E6 89 B6 3B E0 E6 73 23 02 | {.........;..s#. +92 90 75 B4 AA 4B 87 EC 06 03 6A D5 BC 19 3B 5B | ..u..K....j...;[ +9A 8F FC 66 28 BE 44 3B 9C 27 45 A5 4D 21 23 41 | ...f(.D;.'E.M!#A +D9 A8 | .. + +Flow Record: + RecordCount = 34 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132215178 [2024-04-15 00:03:35.178] + last = 1713132246172 [2024-04-15 00:04:06.172] + received at = 1713132344716 [2024-04-15 00:05:44.716] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 58109 + src tos = 0 + fwd status = 0 + in packets = 31 + in bytes = 18717 + src addr = 17.248.209.70 + dst addr = 157.143.34.100 + out packets = 32 + out bytes = 7510 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 35.872 ms + srv latency = 0.000 ms + app latency = 0.137 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 5F 95 36 4B 3B | ....z...v.._.6K; +A8 68 F4 A5 B1 0D F8 D4 1C 96 CF 01 51 38 5B F5 | .h..........Q8[. +2E B9 47 59 3B AC 5C E4 04 2F BC 20 AC D5 26 82 | ..GY;.\../. ..&. +E0 3C 9C 98 F0 83 B9 FE 54 75 7C 9A EC AC 91 B0 | .<......Tu|..... +0F 42 99 B1 52 A0 25 B4 79 E6 84 DE 13 02 00 00 | .B..R.%.y....... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 25 | ..+.....3.$... % +D5 67 AD 8A 9D AA 38 7C C2 B5 85 5F A4 BE B6 FC | .g....8|..._.... +2C 1A 8F 28 87 93 EC 18 25 ED 62 CC CC FE 01 14 | ,..(....%.b..... +03 03 00 01 01 17 03 03 00 2A 06 20 73 A3 20 EB | .........*. s. . +41 9C EC B4 9C 12 6D FA 16 9E 91 E4 FD 79 3E 1A | A.....m......y>. +AD 53 38 A8 90 90 98 21 EB 04 31 7A 07 E8 7D 0C | .S8....!..1z..}. +E1 3D E1 8C 17 03 03 11 25 C5 1C 21 48 1D A3 6E | .=......%..!H..n +31 E9 DF 43 7B 3B DC 7A AF 65 D3 92 CF 45 20 07 | 1..C{;.z.e...E . +57 16 EF 76 9C FB 5C 9E 07 8F 18 CC 60 79 33 EB | W..v..\.....`y3. +8E 10 A1 EF B9 3A 14 86 57 8B 89 76 2C E4 EC 33 | .....:..W..v,..3 +62 18 6C D2 08 6D 1F 9C 0B AE 26 CF B8 08 16 9E | b.l..m....&..... +B2 C2 3C F5 13 A4 CF 61 DC 8D 68 66 23 0D DD B6 | ..<....a..hf#... +AE CF A6 23 4D 90 D2 46 47 D1 40 81 7B 74 14 A6 | ...#M..FG.@.{t.. +9C B9 45 A5 8A 3A 4C 06 52 57 8F 5C 1D AD B0 55 | ..E..:L.RW.\...U +DA 8A AA 09 6C AB E5 5A 0F 05 FB 6C 7B 4A F1 2F | ....l..Z...l{J./ +36 A1 69 21 C7 DE D1 E6 36 46 EF C9 09 8A 90 81 | 6.i!....6F...... +9A C0 F7 46 F5 11 C5 89 15 04 0E 84 38 1C 3A D2 | ...F........8.:. +07 62 E9 D2 6D 8A 7E 1B 13 A3 73 47 1E 78 B8 F8 | .b..m.~...sG.x.. +8C 29 93 D3 F5 B9 82 D2 05 08 DD 0D 3D 35 4C 00 | .)..........=5L. +41 BD 26 31 AB 75 91 63 A8 22 81 1A 56 01 87 4B | A.&1.u.c."..V..K +F8 4C FB A2 22 A3 DF E9 FD B0 E6 89 EA D8 41 9A | .L..".........A. +80 8C F0 00 AD 23 F6 BC B3 26 34 D0 BE 37 02 11 | .....#...&4..7.. +95 FD DF F7 C2 09 F7 58 6E 40 11 B2 52 CD DC 4E | .......Xn@..R..N +6C DE BB 83 AE F3 25 BF 92 6A 32 FD 64 5C E4 23 | l.....%..j2.d\.# +89 9F 34 C1 24 14 40 4C 1D 18 78 86 A5 A6 D9 8C | ..4.$.@L..x..... +E4 CD C2 FB BB 27 8C 89 E6 A5 C3 8D 5E F2 4D DC | .....'......^.M. +E3 CB 67 A0 6B 18 98 56 1B 53 2D 15 BF FC CD 01 | ..g.k..V.S-..... +8F A3 6F 33 36 55 16 B2 AF 04 14 4A 1D B4 8C F1 | ..o36U.....J.... +89 3E 79 08 17 30 CE 6A BF 2F 56 71 3E 6B 07 27 | .>y..0.j./Vq>k.' +13 99 F2 2C C8 84 16 36 2F CC 01 CB C2 D1 D0 EF | ...,...6/....... +31 F3 BF 9A 24 85 7D CD 52 F0 66 D0 86 B1 A4 C0 | 1...$.}.R.f..... +11 6E 96 D2 DF 47 FF F5 63 D6 D6 DB F5 D3 BA CB | .n...G..c....... +69 BF A2 74 D4 22 41 AD B6 81 28 05 3C 2C 33 C5 | i..t."A...(.<,3. +C7 93 50 84 55 77 E8 22 09 31 20 82 58 7E C5 F5 | ..P.Uw.".1 .X~.. +C8 C2 78 E7 27 D9 4C 3B 71 6C 5C 34 65 25 EE 63 | ..x.'.L;ql\4e%.c +4D 8C 85 00 5F 70 B9 9C D2 EB D9 3C 86 F3 A4 A8 | M..._p.....<.... +02 7C FC A8 55 C7 54 42 03 56 2C 49 99 77 80 E5 | .|..U.TB.V,I.w.. +AB B3 C9 98 2E 71 32 2A D0 A9 1B 25 BD 7C 65 30 | .....q2*...%.|e0 +4B C0 3E 0B C3 F5 E2 6F 5F E9 86 AE 61 09 38 8E | K.>....o_...a.8. +B6 CD FF 35 31 78 42 F6 3A 84 CF 32 3E 10 A6 12 | ...51xB.:..2>... +70 BD D3 72 3D 2F 0A A9 64 B1 04 9E 98 1F D5 3E | p..r=/..d......> +8B 8A FB 79 E8 36 93 FC DB E2 56 74 9C 5E DB FF | ...y.6....Vt.^.. +A1 A2 46 BC 2C 70 8C D3 E7 27 2C 43 C7 A3 31 FA | ..F.,p...',C..1. +C6 9C B8 02 78 82 F2 F7 BE 27 1B 9B A8 8D B0 DA | ....x....'...... +79 62 3A 61 83 29 E9 C4 E5 5E 4D EC 0F 2E C7 72 | yb:a.)...^M....r +5A FF F0 03 AC D6 3C FC 50 83 10 91 7B E3 43 81 | Z.....<.P...{.C. +58 C8 0B 96 73 8B F8 CC 81 8C F0 1F 7B 23 F5 11 | X...s.......{#.. +BE 63 88 84 DF F6 51 9E B6 E7 89 48 BA C2 65 A8 | .c....Q....H..e. +07 4D 58 45 6B 9F 45 7F F5 D1 0E BE 2F 30 3F E7 | .MXEk.E...../0?. +60 32 5E 46 23 8C 8F F6 3D 54 54 82 C2 41 D5 30 | `2^F#...=TT..A.0 +BD 2C 7F 45 EE 29 EC EC ED CB 98 7C 3D DD 4D C7 | .,.E.).....|=.M. +B9 B0 E8 5A 7F 41 0D 76 0A 7F 1F 16 42 34 1C BF | ...Z.A.v....B4.. +32 D7 CF 8D 73 D9 31 AD 52 5F 47 C3 9F 08 CE 40 | 2...s.1.R_G....@ +5B 7A D8 37 7B 22 A4 0C 5B 7F 4B 6C 82 5C B7 F8 | [z.7{"..[.Kl.\.. +9B 84 AF 00 13 9D 35 D9 0E 44 16 41 0B 55 06 BF | ......5..D.A.U.. +60 BD 6A 28 31 44 23 E8 78 72 3C 56 06 07 BD C0 | `.j(1D#.xr..xO.yM... +9E 34 F3 4C 95 8A 35 86 0E 46 CA 56 5A B8 78 97 | .4.L..5..F.VZ.x. +A9 19 16 1A 39 50 97 98 7F EF CE 50 E5 03 2D 8B | ....9P.....P..-. +41 7C FC 44 E3 B2 A7 2E 61 53 AD 4B A5 82 A8 32 | A|.D....aS.K...2 +7D 0D 94 CA 8B 94 56 3E D7 F1 42 3C DE BC 0A 6B | }.....V>..B<...k +6A DC E4 49 6E 75 50 09 23 CE B1 7F 36 19 AE 4B | j..InuP.#...6..K +18 87 09 6C 7B 75 A8 9C 32 72 4D 66 FE 0B 17 B5 | ...l{u..2rMf.... +AD 4B 21 5E A1 FD 7E 50 E8 EB 38 86 6E F1 29 37 | .K!^..~P..8.n.)7 +FC D7 99 B5 E6 A8 EA 25 8F 02 C0 A4 90 55 0E 59 | .......%.....U.Y +04 05 D7 E0 39 F0 B0 AA 19 43 E0 FC 2B FB BC 94 | ....9....C..+... +4C 21 64 27 A7 E8 BA 99 8A F0 4F 9F A0 A3 70 24 | L!d'......O...p$ +5B FC 09 A4 FE AF 75 57 29 16 D7 B7 B3 9E AD 04 | [.....uW)....... +A4 E3 FF 53 7A D9 3C 80 25 2E D3 2D 21 C9 99 E4 | ...Sz.<.%..-!... +03 FF C8 4D 59 E3 1B 29 40 5D D1 8E 3F 6A B3 FC | ...MY..)@]..?j.. +EC 12 DB 9A 89 8F 64 D3 | ......d. + +Flow Record: + RecordCount = 35 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132247739 [2024-04-15 00:04:07.739] + last = 1713132278735 [2024-04-15 00:04:38.735] + received at = 1713132344717 [2024-04-15 00:05:44.717] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 54177 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18600 + src addr = 17.248.209.68 + dst addr = 157.143.34.100 + out packets = 33 + out bytes = 6997 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 20.248 ms + srv latency = 0.000 ms + app latency = 0.646 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 DE 4B 54 CE 60 | ....z...v...KT.` +EA F7 8D F7 0E A1 04 9C BE 26 AA 77 72 7B 8A 3D | .........&.wr{.= +53 88 D2 A2 AD 13 6D FA 01 70 8F 20 5D 8D 40 36 | S.....m..p. ].@6 +E1 AD 53 AA 9B 5F AF AA 31 57 AC F2 BA 2E C1 30 | ..S.._..1W.....0 +B1 1D CE 76 08 77 04 66 CA 51 BC E9 13 02 00 00 | ...v.w.f.Q...... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 E3 | ..+.....3.$... . +AE 33 17 B0 0F 6F 0E 59 D0 FE D4 65 F4 FA 4E 5B | .3...o.Y...e..N[ +9E 9E FE 48 66 B8 93 9A F8 4A 3F 41 11 41 0C 14 | ...Hf....J?A.A.. +03 03 00 01 01 17 03 03 00 2A F4 6E 08 19 4A EF | .........*.n..J. +73 ED D6 F3 5F BC F8 18 07 AA 67 52 1E 2D 2B A3 | s..._.....gR.-+. +2A E4 C3 31 C1 7D 48 85 CE 38 71 36 A9 B6 1E 8B | *..1.}H..8q6.... +D9 D5 30 19 17 03 03 11 25 56 DA 20 19 6E 15 CF | ..0.....%V. .n.. +D5 C3 2E FA 2A 91 88 E0 0E 9A 55 F7 55 FD 2C F4 | ....*.....U.U.,. +1F 6B C0 BE 70 EA D0 31 43 74 C3 9F 8D A7 D5 8E | .k..p..1Ct...... +E7 4D 1A 8D 17 31 38 AB BD C3 A5 B6 1E E1 B8 69 | .M...18........i +0F 70 B5 C7 B8 2E 48 33 19 38 09 EC 16 10 5E B6 | .p....H3.8....^. +21 49 44 89 4E BA 21 B8 61 F4 B2 0A E1 5A C6 45 | !ID.N.!.a....Z.E +19 9A C1 9F 6E D4 C7 1D 8F 13 A5 CC 57 22 75 BB | ....n.......W"u. +AE F1 F6 98 B1 AB 36 1A 03 25 C4 2D 99 29 4C 0F | ......6..%.-.)L. +90 09 7F FE 2D 8D 1E E8 0A EB E5 FE 77 CB 57 0C | ....-.......w.W. +FF 71 D2 B7 8E AD 7D 7C 5A 6C 3A B8 C7 89 BE 6A | .q....}|Zl:....j +41 C9 C9 5B 40 C3 74 22 26 83 CE A0 02 6E 3F 1C | A..[@.t"&....n?. +22 9F CB 30 07 24 A3 A2 EB 6F 2C 51 E1 38 4C 67 | "..0.$...o,Q.8Lg +D9 1C BB F3 F2 5E 7A 0D 1B D3 E8 D2 00 F0 25 BA | .....^z.......%. +CE 18 64 95 51 D3 2A 48 08 F7 57 96 20 5C 82 81 | ..d.Q.*H..W. \.. +86 A8 D0 E9 B5 01 BD 99 2D F3 31 E6 65 06 F2 09 | ........-.1.e... +17 58 F1 E5 42 DA AB A5 4B 99 49 08 41 91 C7 9E | .X..B...K.I.A... +D6 EA C0 66 6D C8 F7 E1 DE B0 9E D1 A0 B8 A8 B7 | ...fm........... +5C 2B F3 A4 76 D0 E8 13 35 5C 12 31 9C F2 05 20 | \+..v...5\.1... +2F 99 F8 18 DA C3 AA A4 C0 76 7D E8 E0 65 E3 6F | /........v}..e.o +6D E2 8F B2 85 2B A1 41 7D 42 AB 0F 01 8A F2 46 | m....+.A}B.....F +E3 90 B0 FE 62 81 9B DA BD F7 DD FC 3C F4 2D E2 | ....b.......<.-. +FC 51 B8 81 13 1F 63 67 56 FC 23 C4 32 FF DF 50 | .Q....cgV.#.2..P +40 88 8B C8 02 B1 61 7B 93 19 79 47 DB 82 56 34 | @.....a{..yG..V4 +7E CB 87 2D 60 33 37 53 79 22 EE 84 20 0D 58 2F | ~..-`37Sy".. .X/ +7C B5 54 E9 97 C3 C6 EA EE 0F 2A BC 0D 46 B2 73 | |.T.......*..F.s +82 C5 E5 24 80 5B 92 3A DF E2 EE A0 07 30 72 D7 | ...$.[.:.....0r. +F7 E6 19 49 74 3F 24 04 72 69 61 D4 19 37 A7 1C | ...It?$.ria..7.. +D4 3A CB D2 69 83 2A 29 C0 0D 56 E3 9B 9F 18 43 | .:..i.*)..V....C +07 A6 EF 37 65 87 B6 E2 5D 05 FC 27 44 46 EE 04 | ...7e...]..'DF.. +9D FF BD 1C 95 2D D2 AA 3F E0 D7 A7 BF 56 41 1E | .....-..?....VA. +F2 01 94 B2 81 39 6E 10 63 68 7A B0 51 F1 94 C0 | .....9n.chz.Q... +D5 08 7C 85 D2 20 43 3C 0B F1 87 00 C5 27 B1 F0 | ..|.. C<.....'.. +39 A0 E4 AD B0 FD 9A 69 8F 34 56 4B 74 C0 B3 07 | 9......i.4VKt... +82 89 13 E4 14 CC 0A D7 CC 0D DE 11 61 7C D3 30 | ............a|.0 +4E 08 25 4A A4 69 1C 51 30 A2 37 17 8C DE 13 B8 | N.%J.i.Q0.7..... +CC F6 6B 46 88 B8 DD 87 70 DC 70 AD 5B C5 4C 3C | ..kF....p.p.[.L< +04 4F F6 DB EA 18 98 A6 70 61 EC 1D 2E 11 C2 70 | .O......pa.....p +F3 25 81 79 B1 C1 64 6A B2 27 07 1E 93 8C 5E 4A | .%.y..dj.'....^J +03 4F 55 49 32 87 20 90 5D 6A CE A1 2B 6C 9E AF | .OUI2. .]j..+l.. +8C 32 24 2E 85 06 EB C9 C4 E5 05 D1 E0 D9 9F 93 | .2$............. +F0 E4 FF 54 CA 20 56 1E DC 01 CA 2D 84 54 22 4C | ...T. V....-.T"L +59 DB B0 FF AF 26 5F 1F 08 EB 19 01 A2 A2 F5 37 | Y....&_........7 +CD 99 AA AF 30 7B 0A 33 1E 33 A7 C0 63 35 0A 3F | ....0{.3.3..c5.? +43 CE 09 BC F1 63 A3 89 9C A1 63 D0 F2 50 D0 FE | C....c....c..P.. +E3 D1 EC 0E 91 E0 F2 0E 2A 23 B7 39 30 C7 C6 8B | ........*#.90... +44 12 9A 10 69 C6 40 93 8B F3 E8 FB 83 7B 2E DB | D...i.@......{.. +61 30 D8 97 8E 5E 47 AA A9 BB 49 2F DE 9D 1F 63 | a0...^G...I/...c +A2 4D 31 CC 8C 7B 39 13 A9 82 CE 25 2A 7E 42 26 | .M1..{9....%*~B& +3F D9 F0 85 80 EC D7 B9 97 75 A2 3C E2 03 B8 31 | ?........u.<...1 +7C 7C 96 B6 CA 90 7D 40 DD 2A EE 71 A2 C5 9A 0A | ||....}@.*.q.... +1A 3B DC 98 F5 7B 3B 1F 46 8E 5D 7C AE 6F 99 EA | .;...{;.F.]|.o.. +EF A2 D4 2B 7F 32 10 05 88 20 57 46 EF 00 ED E8 | ...+.2... WF.... +7E 4C B2 F4 55 58 89 1D 27 74 98 D6 BA 0C 13 15 | ~L..UX..'t...... +71 AD 2F 27 DF 79 8A 80 44 39 32 87 CF 0F 51 D7 | q./'.y..D92...Q. +EA 4B AE A1 AF FD 0C B6 23 B3 D2 5C F3 A4 02 98 | .K......#..\.... +95 6A 0C 5E CE 61 AD 79 46 A3 CF 0B 5F 11 C1 FF | .j.^.a.yF..._... +F8 B6 AD 92 98 CE AA F4 90 B8 C4 B6 53 0C 3C 46 | ............S..0X..5..6... +9B 9E BA 4D 0F 3E E7 18 50 17 14 4C 9F B1 78 01 | ...M.>..P..L..x. +AF 3B F4 BC 43 EE 9F 47 E0 B6 02 3A 93 4A 61 D4 | .;..C..G...:.Ja. +14 FF D0 D8 B3 69 9F 48 F3 EE 6F D2 4C CB 51 D3 | .....i.H..o.L.Q. +85 07 7D 1F 92 94 81 95 09 BB D7 5A AB 59 5A DF | ..}........Z.YZ. +51 69 CB 73 0B 2B 6A FA 3E CF 5A 87 6A F0 5B 3A | Qi.s.+j.>.Z.j.[: +CC C6 A2 5C FC EE 80 65 30 D1 B5 EE 09 6E 6E C3 | ...\...e0....nn. +6A 02 90 7A 99 F0 06 6B 76 10 C8 3D 34 33 DA D6 | j..z...kv..=43.. +C5 8B 6E F2 06 AD 65 4D 6C 50 0E 20 8D BD 1C 0A | ..n...eMlP. .... +2C 8C 32 E6 B3 7D C7 30 F5 6E 21 FD 95 B9 8C 11 | ,.2..}.0.n!..... +81 FB 67 23 78 50 B5 F9 54 24 21 D6 A3 1C 6E 9E | ..g#xP..T$!...n. +65 5D D0 23 15 AA 08 AA 6A CF 6A 34 D1 C4 3B 5C | e].#....j.j4..;\ +2D 21 FD E8 53 4D 43 1A 1C 69 EC 2B 17 F4 00 54 | -!..SMC..i.+...T +A4 E3 D0 24 49 F6 7E 55 1C 74 1F AE B5 A0 FB D5 | ...$I.~U.t...... +85 D7 CA E8 69 6E 38 63 0F 3D 69 C3 CF C7 52 5D | ....in8c.=i...R] +C1 2C 8F CF DF 5E 10 24 | .,...^.$ + +Flow Record: + RecordCount = 36 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 509 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131686461 [2024-04-14 23:54:46.461] + last = 1713132227100 [2024-04-15 00:03:47.100] + received at = 1713132000887 [2024-04-15 00:00:00.887] + proto = 6 TCP + tcp flags = 0x18 ...AP... + src port = 57657 + dst port = 80 + src tos = 0 + fwd status = 0 + in packets = 20 + in bytes = 4330 + src addr = 157.143.34.100 + dst addr = 172.217.168.3 + out packets = 0 + out bytes = 0 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 9.655 ms + srv latency = 0.000 ms + app latency = 60041.739 ms + in payload = 329 +HEAD /generate_204 HTTP/1.1 +Host: connectivitycheck.gstatic.com +Connection: keep-alive +User-Agent: Mozilla/5.0 (Linux; Android 12.0; Build/STTC.220815.001) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.0 Safari/537.36 CrKey/1.56.500000 DeviceType/AndroidTV +Accept-Encoding: gzip, deflate +Accept-Language: de-DE + + +48 45 41 44 20 2F 67 65 6E 65 72 61 74 65 5F 32 | HEAD /generate_2 +30 34 20 48 54 54 50 2F 31 2E 31 0D 0A 48 6F 73 | 04 HTTP/1.1..Hos +74 3A 20 63 6F 6E 6E 65 63 74 69 76 69 74 79 63 | t: connectivityc +68 65 63 6B 2E 67 73 74 61 74 69 63 2E 63 6F 6D | heck.gstatic.com +0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 6B 65 | ..Connection: ke +65 70 2D 61 6C 69 76 65 0D 0A 55 73 65 72 2D 41 | ep-alive..User-A +67 65 6E 74 3A 20 4D 6F 7A 69 6C 6C 61 2F 35 2E | gent: Mozilla/5. +30 20 28 4C 69 6E 75 78 3B 20 41 6E 64 72 6F 69 | 0 (Linux; Androi +64 20 31 32 2E 30 3B 20 42 75 69 6C 64 2F 53 54 | d 12.0; Build/ST +54 43 2E 32 32 30 38 31 35 2E 30 30 31 29 20 41 | TC.220815.001) A +70 70 6C 65 57 65 62 4B 69 74 2F 35 33 37 2E 33 | ppleWebKit/537.3 +36 20 28 4B 48 54 4D 4C 2C 20 6C 69 6B 65 20 47 | 6 (KHTML, like G +65 63 6B 6F 29 20 43 68 72 6F 6D 65 2F 39 32 2E | ecko) Chrome/92. +30 2E 34 35 31 35 2E 30 20 53 61 66 61 72 69 2F | 0.4515.0 Safari/ +35 33 37 2E 33 36 20 43 72 4B 65 79 2F 31 2E 35 | 537.36 CrKey/1.5 +36 2E 35 30 30 30 30 30 20 44 65 76 69 63 65 54 | 6.500000 DeviceT +79 70 65 2F 41 6E 64 72 6F 69 64 54 56 0D 0A 41 | ype/AndroidTV..A +63 63 65 70 74 2D 45 6E 63 6F 64 69 6E 67 3A 20 | ccept-Encoding: +67 7A 69 70 2C 20 64 65 66 6C 61 74 65 0D 0A 41 | gzip, deflate..A +63 63 65 70 74 2D 4C 61 6E 67 75 61 67 65 3A 20 | ccept-Language: +64 65 2D 44 45 0D 0A 0D 0A | de-DE.... + +Flow Record: + RecordCount = 37 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1608 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132217183 [2024-04-15 00:03:37.183] + last = 1713132217364 [2024-04-15 00:03:37.364] + received at = 1713132302717 [2024-04-15 00:05:02.717] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 62379 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 7405 + src addr = 13.224.103.47 + dst addr = 157.143.34.100 + out packets = 12 + out bytes = 1574 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 8.987 ms + srv latency = 0.000 ms + app latency = 0.175 ms + in payload = 1428 + TLS version = TLS 1.3 + ja3s hash = 16a232c6047ab4c7f493b826d419a8be + ja4s hash = t130500_c02f_a241d087c239 +16 03 03 00 63 02 00 00 5F 03 03 9D AE A3 BB B0 | ....c..._....... +31 98 E2 AA 7E 8E 4C CE 03 2E CA 4B A9 52 EB 7F | 1...~.L....K.R.. +50 A6 22 44 4F 57 4E 47 52 44 01 20 C0 BA F8 8A | P."DOWNGRD. .... +F5 3D C6 35 94 30 22 CF B9 46 BE 54 0B FF 9B 16 | .=.5.0"..F.T.... +2A CB E5 DF CB E4 81 97 6A 2B A6 4F C0 2F 00 00 | *.......j+.O./.. +17 00 00 00 00 00 0B 00 02 01 00 FF 01 00 01 00 | ................ +00 05 00 00 00 17 00 00 16 03 03 13 93 0B 00 13 | ................ +8F 00 13 8C 00 06 0F 30 82 06 0B 30 82 04 F3 A0 | .......0...0.... +03 02 01 02 02 10 0A 28 52 01 F0 E0 3A 67 F4 F8 | .......(R...:g.. +C7 A1 48 40 12 B8 30 0D 06 09 2A 86 48 86 F7 0D | ..H@..0...*.H... +01 01 0B 05 00 30 3C 31 0B 30 09 06 03 55 04 06 | .....0<1.0...U.. +13 02 55 53 31 0F 30 0D 06 03 55 04 0A 13 06 41 | ..US1.0...U....A +6D 61 7A 6F 6E 31 1C 30 1A 06 03 55 04 03 13 13 | mazon1.0...U.... +41 6D 61 7A 6F 6E 20 52 53 41 20 32 30 34 38 20 | Amazon RSA 2048 +4D 30 31 30 1E 17 0D 32 33 30 37 31 30 30 30 30 | M010...230710000 +30 30 30 5A 17 0D 32 34 30 38 30 37 32 33 35 39 | 000Z..2408072359 +35 39 5A 30 14 31 12 30 10 06 03 55 04 03 13 09 | 59Z0.1.0...U.... +74 69 64 61 6C 2E 63 6F 6D 30 82 01 22 30 0D 06 | tidal.com0.."0.. +09 2A 86 48 86 F7 0D 01 01 01 05 00 03 82 01 0F | .*.H............ +00 30 82 01 0A 02 82 01 01 00 D8 DB 24 28 FF 06 | .0..........$(.. +62 F6 20 6C E1 1D 3C 09 F1 AF 3E 26 6B F1 90 4E | b. l..<...>&k..N +E7 D5 28 7C BD 18 AA E2 8F 06 66 64 65 35 62 25 | ..(|......fde5b% +4A 9D 59 73 C3 BD 0A 64 C0 29 6C AA CC F5 3F A4 | J.Ys...d.)l...?. +47 33 26 D1 13 96 93 01 DE 8A B0 B1 52 A7 20 F9 | G3&.........R. . +49 B9 F9 B0 04 D8 27 BF A0 52 55 7C 5F B5 9F EF | I.....'..RU|_... +CE 8E F0 EA 98 8D 49 2A FE 0B 65 E2 C5 29 06 33 | ......I*..e..).3 +91 C0 28 73 69 1E AB 09 06 E2 71 A2 0C 5F 50 A3 | ..(si.....q.._P. +82 7D BE F5 A2 B6 FC BE E2 55 FD BB 3E E3 7F 2B | .}.......U..>..+ +B8 6E D9 5D E0 75 49 6A CD DC 49 52 0B 58 C2 0B | .n.].uIj..IR.X.. +B4 35 31 C6 35 8C F2 90 AC 29 FA 74 EA EF 5F AD | .51.5....).t.._. +C3 2F B5 D0 04 4A CB 98 A8 8B 4B AE 22 86 58 EB | ./...J....K.".X. +E1 9E E0 B1 4F F4 F3 07 14 B5 14 62 99 33 85 5E | ....O......b.3.^ +60 B9 01 6A 6A 26 FE 78 0B 00 DF D9 B5 BA 39 A4 | `..jj&.x......9. +51 6F E1 88 1D 08 AE 05 B5 BD A9 50 BD 10 EC 45 | Qo.........P...E +16 89 84 41 35 8B 69 2E DC 52 07 44 E8 28 B3 4C | ...A5.i..R.D.(.L +0D A5 5F D9 8B 75 86 89 3C 93 02 03 01 00 01 A3 | .._..u..<....... +82 03 2F 30 82 03 2B 30 1F 06 03 55 1D 23 04 18 | ../0..+0...U.#.. +30 16 80 14 81 B8 0E 63 8A 89 12 18 E5 FA 3B 3B | 0......c......;; +50 95 9F E6 E5 90 13 85 30 1D 06 03 55 1D 0E 04 | P.......0...U... +16 04 14 A6 52 40 27 FC 32 CD 1D D0 81 EC 6B 98 | ....R@'.2.....k. +04 D6 8B FB 00 1D 81 30 61 06 03 55 1D 11 04 5A | .......0a..U...Z +30 58 82 09 74 69 64 61 6C 2E 63 6F 6D 82 0F 2A | 0X..tidal.com..* +2E 77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D | .wimpmusic.com.. +77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D 74 | wimpmusic.com..t +69 64 61 6C 68 69 66 69 2E 63 6F 6D 82 0B 2A 2E | idalhifi.com..*. +74 69 64 61 6C 2E 63 6F 6D 82 0F 2A 2E 74 69 64 | tidal.com..*.tid +61 6C 68 69 66 69 2E 63 6F 6D 30 0E 06 03 55 1D | alhifi.com0...U. +0F 01 01 FF 04 04 03 02 05 A0 30 1D 06 03 55 1D | ..........0...U. +25 04 16 30 14 06 08 2B 06 01 05 05 07 03 01 06 | %..0...+........ +08 2B 06 01 05 05 07 03 02 30 3B 06 03 55 1D 1F | .+.......0;..U.. +04 34 30 32 30 30 A0 2E A0 2C 86 2A 68 74 74 70 | .40200...,.*http +3A 2F 2F 63 72 6C 2E 72 32 6D 30 31 2E 61 6D 61 | ://crl.r2m01.ama +7A 6F 6E 74 72 75 73 74 2E 63 6F 6D 2F 72 32 6D | zontrust.com/r2m +30 31 2E 63 72 6C 30 13 06 03 55 1D 20 04 0C 30 | 01.crl0...U. ..0 +0A 30 08 06 06 67 81 0C 01 02 01 30 75 06 08 2B | .0...g.....0u..+ +06 01 05 05 07 01 01 04 69 30 67 30 2D 06 08 2B | ........i0g0-..+ +06 01 05 05 07 30 01 86 21 68 74 74 70 3A 2F 2F | .....0..!http:// +6F 63 73 70 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F | ocsp.r2m01.amazo +6E 74 72 75 73 74 2E 63 6F 6D 30 36 06 08 2B 06 | ntrust.com06..+. +01 05 05 07 30 02 86 2A 68 74 74 70 3A 2F 2F 63 | ....0..*http://c +72 74 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F 6E 74 | rt.r2m01.amazont +72 75 73 74 2E 63 6F 6D 2F 72 32 6D 30 31 2E 63 | rust.com/r2m01.c +65 72 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 | er0...U.......0. +30 82 01 7E 06 0A 2B 06 01 04 01 D6 79 02 04 02 | 0..~..+.....y... +04 82 01 6E 04 82 01 6A 01 68 00 76 00 EE CD D0 | ...n...j.h.v.... +64 D5 DB 1A CE C5 5C B7 9D B4 CD 13 A2 32 87 46 | d.....\......2.F +7C BC EC DE C3 51 48 59 46 71 1F B5 9B 00 00 01 | |....QHYFq...... +89 3E 21 77 27 00 00 04 03 00 47 30 45 02 21 00 | .>!w'.....G0E.!. +C3 53 34 AF 43 03 C8 C1 11 23 3E C1 40 EF 06 27 | .S4.C....#>.@..' +CD E1 7A 49 8B DD 92 84 2B 16 63 6C 2A B5 A2 E2 | ..zI....+.cl*... +02 20 0F C9 0F B9 45 4D E3 88 94 3D 75 78 15 CC | . ....EM...=ux.. +7F 6B 35 8B 00 3B 7B 0E 8A 1C 2D 27 86 24 17 F5 | .k5..;{...-'.$.. +63 B7 00 76 00 48 B0 E3 6B DA A6 47 34 0F E5 6A | c..v.H..k..G4..j +02 FA 9D 30 EB 1C 52 01 CB 56 DD 2C 81 D9 BB BF | ...0..R..V.,.... +AB 39 D8 84 73 00 00 01 89 3E 21 77 04 00 00 04 | .9..s....>!w.... +03 00 47 30 45 02 21 00 AC F0 89 AA C4 1F 25 10 | ..G0E.!.......%. +2E 63 EB 9F 51 F8 34 FC B8 E9 87 80 67 CF FE 12 | .c..Q.4.....g... +46 67 8D 9C ED 23 25 A6 02 20 0D 0C 2F 87 19 F4 | Fg...#%.. ../... +EF 94 64 B0 F4 2D 7D 3C 5E 33 52 8D 7B D4 E0 FB | ..d..-}<^3R.{... +4D 9A 14 C8 E1 65 89 5E C6 C4 00 76 00 DA B6 BF | M....e.^...v.... +6B 3F B5 B6 22 9F 9B C2 BB 5C 6B E8 70 91 71 6C | k?.."....\k.p.ql +BB 51 84 85 34 BD A4 3D 30 48 D7 FB AB 00 00 01 | .Q..4..=0H...... +89 3E 21 76 E0 00 00 04 03 00 47 30 45 02 21 00 | .>!v......G0E.!. +86 79 F0 C1 4E 93 9C 55 56 DF 1B 18 DC AF 80 B5 | .y..N..UV....... +DB 29 68 19 86 6B B1 AF A0 E3 0D A5 91 42 42 37 | .)h..k.......BB7 +02 20 53 72 52 08 2E 09 7A E8 B8 10 1E AA C5 7D | . SrR...z......} +0F D0 25 D2 EE 1D EC F5 E1 09 2D F5 B4 12 3A 83 | ..%.......-...:. +59 A7 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 | Y.0...*.H....... +00 03 82 01 01 00 4F E5 AC 91 4E 4A 44 05 5D 5D | ......O...NJD.]] +D3 9D AC B4 | .... + +Flow Record: + RecordCount = 38 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713131891886 [2024-04-14 23:58:11.886] + last = 1713131922866 [2024-04-14 23:58:42.866] + received at = 1713132000887 [2024-04-15 00:00:00.887] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 59352 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18602 + src addr = 17.248.209.64 + dst addr = 157.143.34.100 + out packets = 33 + out bytes = 7661 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 37.772 ms + srv latency = 0.000 ms + app latency = 0.399 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 D1 32 AE 40 32 | ....z...v...2.@2 +FA 5A 43 DA E8 35 18 BF CE 43 38 C1 21 28 49 E1 | .ZC..5...C8.!(I. +0E 8F 79 82 7E 79 B4 D2 71 FF 62 20 A4 9E D2 77 | ..y.~y..q.b ...w +03 38 6A 7C 91 64 F0 89 B5 94 14 43 21 F7 CF 0C | .8j|.d.....C!... +5B F1 28 E3 AC 7B BC 69 6A 5A 91 D5 13 02 00 00 | [.(..{.ijZ...... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 34 | ..+.....3.$... 4 +0A C4 F7 9C 16 6A D7 3B C7 B1 74 BA 2A 8E 29 19 | .....j.;..t.*.). +37 5D 26 C4 17 39 18 16 4C 90 72 3F 4C 01 32 14 | 7]&..9..L.r?L.2. +03 03 00 01 01 17 03 03 00 2A 2C FA B6 58 12 8F | .........*,..X.. +60 B6 9E CB CD 16 B9 C2 5C 65 9E 8B E9 2C B7 04 | `.......\e...,.. +C2 B6 05 4B 63 A3 31 A1 35 61 1C F1 38 7F CB 6F | ...Kc.1.5a..8..o +6D 96 75 11 17 03 03 11 25 FF 5A D2 A9 86 4A 2A | m.u.....%.Z...J* +DB F3 B1 D0 02 0A E2 B7 10 B1 8B E8 E3 03 CE E2 | ................ +7D BE 31 25 8B 0F F2 4A 10 58 E4 2F 47 C4 8D F8 | }.1%...J.X./G... +AA 48 88 87 A7 4F 56 DD ED CA 48 96 F6 3E 82 63 | .H...OV...H..>.c +00 56 78 6A 45 B6 A7 BB E7 66 AB D9 4D 32 9F 53 | .VxjE....f..M2.S +57 40 5D 22 8D 68 71 58 40 45 62 1A 88 4A 76 81 | W@]".hqX@Eb..Jv. +C0 50 93 2E 2E 68 BA E9 0D D0 18 FB BF FE D8 61 | .P...h.........a +E7 A0 63 3A 0B 05 A1 BC 3C 61 EC 01 3D 05 47 EE | ..c:....U..&!.;.a.{. +DF 3F F4 AE 09 78 1A AB 1A 8F 30 01 7E 7E 56 E4 | .?...x....0.~~V. +29 04 7D DA BC A1 B7 FC 5A 29 04 94 66 16 BC 11 | ).}.....Z)..f... +5F DB D3 1B 31 45 13 14 FB 79 AE 13 C6 46 B2 35 | _...1E...y...F.5 +D8 19 DF D3 4E 39 0F D5 80 8D CB 38 85 84 1B 5E | ....N9.....8...^ +06 8A AD 3F 60 AA DE B9 7F 37 D4 AA F9 95 DD 13 | ...?`....7...... +4F B8 AA 9F 72 85 30 B1 1D ED 39 3A 9F 6D 3F 3A | O...r.0...9:.m?: +8E CA 5B 74 50 45 CC 8D 31 62 EE 26 67 0E B3 61 | ..[tPE..1b.&g..a +40 9B 38 35 AA EF F9 A0 15 0F F9 CF F5 06 EE 4F | @.85...........O +FE F6 D4 8F 56 30 81 FF 7C F7 B3 F0 6C 08 5B FB | ....V0..|...l.[. +18 D5 9D 7B 25 11 CF 42 B1 38 5C 80 25 E1 E2 5D | ...{%..B.8\.%..] +92 91 B3 28 9C 56 52 DC B7 2E 53 E7 B3 D0 0D 5A | ...(.VR...S....Z +B1 5A 07 B8 4B 19 6D 3D 81 B8 8F 11 8D 44 0B 52 | .Z..K.m=.....D.R +00 44 FE 96 DE A0 F9 44 CA E2 9F 7C 86 A5 F3 A2 | .D.....D...|.... +E3 51 42 95 A3 A2 37 9D 46 37 6C 5A E6 91 E2 E0 | .QB...7.F7lZ.... +D7 F2 03 4A 7B 7F 19 E4 54 2A D1 0B 2D 99 61 A4 | ...J{...T*..-.a. +A7 69 86 0B 65 63 FE AE 8E 07 CF 80 4D 81 A9 42 | .i..ec......M..B +2F 4C B2 2A 3F 06 20 B1 4F E8 10 7F 49 4B 07 49 | /L.*?. .O...IK.I +05 77 5D FA 80 24 DD 39 F8 29 F2 B5 8F 24 85 E3 | .w]..$.9.)...$.. +2C FA 87 5C 96 02 DF C6 EA A4 36 FD 94 D2 4F 42 | ,..\......6...OB +E0 79 FD 26 B1 02 77 F0 9B 32 BC 8A 80 EE 41 E4 | .y.&..w..2....A. +36 3E A5 0B 14 CF 03 AB 00 14 F2 A6 9D 9F F9 65 | 6>.............e +A7 27 E3 4A F5 D6 1F E4 7E 37 7D 6A 90 DE 7C 09 | .'.J....~7}j..|. +78 DF 98 59 59 15 E7 20 FF 71 86 D5 F0 E3 1D D0 | x..YY.. .q...... +61 4D 83 CF 2A C7 29 2D 4E 72 09 12 11 DE 49 8B | aM..*.)-Nr....I. +C3 88 6B D1 5B 0F 58 DD 9A A3 8C 84 A0 B4 87 06 | ..k.[.X......... +1E C7 E8 9A AE FA BF 7E 02 D8 40 37 75 81 9B 6B | .......~..@7u..k +81 B7 25 6A 95 4B C1 9A 22 04 D9 73 BA F1 E4 64 | ..%j.K.."..s...d +CE 1C 97 A2 B5 92 01 AB D9 E0 82 66 37 1E 40 06 | ...........f7.@. +68 39 2B BA FB 95 8B D5 49 8E 37 FA BE 8C 17 9F | h9+.....I.7..... +59 32 B6 59 20 02 36 B3 BB 7E 79 A9 F5 4D 51 21 | Y2.Y .6..~y..MQ! +34 36 1D 6C D4 A7 FB BF A5 F0 12 CA E0 DE EB F8 | 46.l............ +D1 7B 56 16 FD 74 6C 3D 71 03 4F C3 7B C6 3C 12 | .{V..tl=q.O.{.<. +AA CF E3 B6 61 75 97 3B B0 AE 8A 9B C5 69 C7 BC | ....au.;.....i.. +D8 30 E7 D8 AB 42 CD 55 66 1F DB 1A 20 99 82 36 | .0...B.Uf... ..6 +88 70 02 43 B7 48 AA 15 03 D8 32 1A 6D 39 38 55 | .p.C.H....2.m98U +A8 81 C1 7A B9 7D C9 55 C8 D1 34 C3 1E 3A 9C FE | ...z.}.U..4..:.. +81 FA 8F 5D AB 29 71 C7 9A 71 24 23 8A 77 C8 C3 | ...].)q..q$#.w.. +EC 32 F2 B7 78 86 28 8C 23 53 EF 7E AE 77 B1 D3 | .2..x.(.#S.~.w.. +3C D9 BB 6D BA C0 B1 D8 9C CC C0 BD E3 64 69 CF | <..m.........di. +06 BA E3 F2 8F 07 84 CB 96 CB 92 B2 BD B5 13 DE | ................ +C8 FA 78 B1 3E C7 F5 6B 1E EC 85 75 55 AD 29 DE | ..x.>..k...uU.). +9D 50 4E D3 10 7A C2 2F 96 E5 66 92 4D 7D 6B 0C | .PN..z./..f.M}k. +06 12 5C D6 F7 27 F9 66 16 4D 50 9B BF B1 11 8C | ..\..'.f.MP..... +5E A3 3C C5 89 FA 64 3B 90 24 0F 02 09 86 E3 83 | ^.<...d;.$...... +A7 92 D3 C1 6D 78 69 A2 69 6B 0A EC 6E 5E 9D 21 | ....mxi.ik..n^.! +A0 B7 94 9F 80 27 43 7E 79 D3 4B BC B2 41 32 D8 | .....'C~y.K..A2. +45 74 8B 48 D8 0F D3 C4 B2 54 B7 98 5E A7 4E 10 | Et.H.....T..^.N. +57 37 08 29 32 12 D4 56 52 E4 66 80 CA AE B4 D6 | W7.)2..VR.f..... +82 51 85 FE AB 9D 5C D7 19 04 7A B5 79 84 30 DB | .Q....\...z.y.0. +9C 13 48 EA 7B 0B 27 4A 41 26 AB 3C D1 87 CA 22 | ..H.{.'JA&.<..." +B1 EE 36 4E B9 B5 EF D7 24 E1 00 68 73 66 CB D8 | ..6N....$..hsf.. +65 20 98 D6 9E 14 FA 1D C2 5B 38 3C DD 98 1A B1 | e .......[8<.... +DA 6D 2D B9 D9 98 57 A9 E3 1E D3 92 AD AA 95 1B | .m-...W......... +AD 7F F3 C5 42 A1 C0 28 5D EB 97 82 DC 81 BA 7D | ....B..(]......} +C1 1D D3 5C B9 9F 48 C1 38 06 EC 7C 2D 0C AD 4E | ...\..H.8..|-..N +B7 BE 45 BF 87 A8 F3 E8 47 5D 15 1F B7 83 1D DA | ..E.....G]...... +D3 5A E3 74 2D A2 24 3B B2 DE 7B 91 AA AD 57 65 | .Z.t-.$;..{...We +C2 4F 36 2E 5F 7D 2F E3 C3 56 36 72 00 1A B6 56 | .O6._}/..V6r...V +12 F7 B3 E9 53 7D 03 AD | ....S}.. + +Flow Record: + RecordCount = 39 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132021008 [2024-04-15 00:00:21.008] + last = 1713132052026 [2024-04-15 00:00:52.026] + received at = 1713132148816 [2024-04-15 00:02:28.816] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 62570 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18601 + src addr = 17.248.209.66 + dst addr = 157.143.34.100 + out packets = 31 + out bytes = 6893 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 20.982 ms + srv latency = 0.000 ms + app latency = 0.659 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 97 31 ED 4A FD | ....z...v...1.J. +10 DC 67 8C 63 98 B6 DF BE 8B 69 CD 83 50 56 63 | ..g.c.....i..PVc +9E DB B6 30 5E C8 08 61 17 94 80 20 57 AD A0 84 | ...0^..a... W... +F0 8D 06 FE 36 3D 5B FE AD 33 AF 7C 19 B6 25 11 | ....6=[..3.|..%. +D0 C1 3C AD 56 A5 0C D2 3E EE B5 4F 13 02 00 00 | ..<.V...>..O.... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 D2 | ..+.....3.$... . +28 C3 36 14 8A FE 72 74 14 8D 77 23 60 0E 5A AF | (.6...rt..w#`.Z. +42 96 24 81 12 F4 41 55 85 38 D0 2F CB 1C 38 14 | B.$...AU.8./..8. +03 03 00 01 01 17 03 03 00 2A C0 0C 2C 4D D1 4C | .........*..,M.L +6B B6 74 A0 CD B3 CD A1 D6 8B E4 90 80 C2 D2 FD | k.t............. +2F 33 1C 77 4F 97 27 5E 46 1A 2B C4 C3 0C 6C 9A | /3.wO.'^F.+...l. +E9 04 BA 1E 17 03 03 11 25 FC 09 88 6D 62 A8 7C | ........%...mb.| +81 C3 54 13 F5 28 77 49 B2 E0 E1 33 91 EB 17 C7 | ..T..(wI...3.... +DE 18 4E 45 EC CB 31 A1 2E 95 48 CD 01 B5 0A 8F | ..NE..1...H..... +F2 D1 57 67 51 CC F1 A2 41 E5 3A DD CE 8F 2C 75 | ..WgQ...A.:...,u +D2 D1 5D 56 F4 97 C2 90 90 CD C2 3D EE A6 E2 19 | ..]V.......=.... +84 EA EB D1 3C 7B F2 71 70 0E C1 F2 61 E4 01 81 | ....<{.qp...a... +F2 4F 71 73 8C 59 CE D5 9B C7 E7 B3 7E 23 04 3E | .Oqs.Y......~#.> +DF 05 9A 31 8F 82 C2 EA 66 0F 67 4A 41 CA 97 C3 | ...1....f.gJA... +28 B4 03 DE 4A B4 A9 4E 30 C0 F2 FE 5A 87 D2 FA | (...J..N0...Z... +E9 C2 84 2D 77 26 3B CC EB BC CB 05 27 F6 84 42 | ...-w&;.....'..B +68 A0 95 B4 66 01 A6 0F EC 76 23 13 4E DD AE BF | h...f....v#.N... +A9 6F EF 6D 30 C7 D7 AF 39 36 54 FC B8 EF 96 BB | .o.m0...96T..... +44 D8 55 8E 33 9B B2 C1 D3 98 68 1A 6B 52 F3 70 | D.U.3.....h.kR.p +F5 30 23 76 DD 63 61 28 A4 96 D1 BA 63 95 E4 83 | .0#v.ca(....c... +AC 51 7F 72 1F A6 77 7F C6 2C 14 3C E5 1D C2 31 | .Q.r..w..,.<...1 +C3 54 4D 8C 7F 85 19 3B AA 72 C4 3F F2 59 A0 EC | .TM....;.r.?.Y.. +65 18 08 CE 78 24 0B 51 54 89 6D 3C E5 69 07 06 | e...x$.QT.m<.i.. +20 A7 89 CA 0A 0B D6 44 A4 8B D7 B6 07 DC AF CE | ......D........ +BD 72 59 EA 17 D0 38 9C BD 05 24 13 7D 10 BF F8 | .rY...8...$.}... +BF 9A 8D 97 51 1F 16 6E 55 9F 71 9B 9D 77 53 2E | ....Q..nU.q..wS. +D3 F6 01 C8 4E 99 98 90 20 C0 79 98 A0 4D D7 95 | ....N... .y..M.. +1D 16 9D 5F F3 A7 DC DF 97 90 37 F2 AD AA 94 88 | ..._......7..... +C1 51 68 6F 58 80 CD EB 94 DB 22 E5 83 A0 23 1B | .QhoX....."...#. +03 88 89 31 4A 92 17 0B BD 08 CD C9 49 CB AB 5C | ...1J.......I..\ +86 94 09 81 5E 23 DE D8 95 CA A5 EE A6 EA 84 AF | ....^#.......... +1C E6 82 AD 01 56 B2 F7 24 48 1D D2 16 D3 28 0A | .....V..$H....(. +FB E0 69 79 78 89 AA B0 7A 9D 07 50 81 F2 01 2E | ..iyx...z..P.... +ED 4B D2 65 DA F6 72 4F 00 DB A3 D6 9B 51 67 40 | .K.e..rO.....Qg@ +D3 EA F8 D7 95 03 D6 85 B7 3D 60 DA EB A1 35 57 | .........=`...5W +C3 2C A2 FC B3 DC FE 46 0F B9 DC F5 30 4B DE 09 | .,.....F....0K.. +B4 7A AF CB FE 1E 1C AC 48 DE B3 5C DE 92 89 EE | .z......H..\.... +24 7A 9A 95 05 3B B4 5C 56 68 1D CE 7F B3 EC 77 | $z...;.\Vh.....w +4F 07 61 2E 97 4C 5A EF 90 98 CB DB 44 11 82 B5 | O.a..LZ.....D... +AA 85 C0 46 DC 6A 24 33 2F B2 7F C1 BB 4A BA 98 | ...F.j$3/....J.. +0E E2 4C AF C6 DF 3C A2 A7 0B 4D AF B1 9C 25 B2 | ..L...<...M...%. +81 DC E1 66 D6 1D 92 F5 60 7E 4D 82 13 A9 81 13 | ...f....`~M..... +A2 EA 64 0A 6E 33 27 A1 40 26 16 5A E2 16 F8 C9 | ..d.n3'.@&.Z.... +0C DE C1 5F B0 1B 9E AF 3E 10 B4 9E 7F BA CC F9 | ..._....>....... +7D EA DB 2E 76 F2 82 53 D9 F8 D3 4F 23 D9 C5 5D | }...v..S...O#..] +B7 5F 1A 02 FA A9 D6 99 0F 48 67 98 C1 A3 BF 51 | ._.......Hg....Q +83 45 F4 97 AA 73 7A 8B 0E 70 35 F9 C7 94 74 7B | .E...sz..p5...t{ +08 15 83 93 AD 20 4E C0 14 A4 93 66 CD B5 68 BF | ..... N....f..h. +14 E9 13 35 27 56 A3 5A BA C1 95 99 E8 74 8A 3C | ...5'V.Z.....t.< +D5 14 11 BC 77 D2 1A 24 C3 12 79 1E CA F0 56 A9 | ....w..$..y...V. +A7 2D E1 DD E7 F4 7E 53 4E 9A 51 D0 97 51 F0 D1 | .-....~SN.Q..Q.. +44 14 9E 4C 34 FE 04 9A 48 6E BD 2E FC 46 E5 7A | D..L4...Hn...F.z +F4 E5 F7 9A 34 AE C5 D9 98 DC BF 7C C6 0B 50 64 | ....4......|..Pd +45 FC 1F B4 72 2C 25 90 B1 49 34 22 EB 38 A8 FE | E...r,%..I4".8.. +4B A6 15 7F 07 2B 33 11 D4 C6 D6 EB 22 7C 32 C2 | K....+3....."|2. +F8 0A 55 AF 96 BC 5E 37 CA D0 D8 B4 3A A8 29 A6 | ..U...^7....:.). +0A FF F7 BA 9C 5A 30 CB 7E 34 FB 08 9B E6 E5 55 | .....Z0.~4.....U +92 A3 5A 2C 1B C4 66 A8 12 89 4C 18 BD 7D 78 E8 | ..Z,..f...L..}x. +42 75 4F F3 3E F9 81 52 F3 8C A6 62 E4 BB EA 61 | BuO.>..R...b...a +D1 48 8A 17 73 E3 8F 3A 5B F8 C3 FA 6B B5 3E 9A | .H..s..:[...k.>. +91 05 CD CF 72 3F DB E4 D0 A7 E9 F8 EA AB 91 FB | ....r?.......... +50 6A 1A D0 9F 96 6A 7C 60 C6 24 6F E1 BF 85 0A | Pj....j|`.$o.... +8E B5 1F 0B 7E 07 DD DE 4F 83 6E AB B7 CF DC D0 | ....~...O.n..... +48 31 E1 3E 8B 26 85 81 79 D1 59 61 09 5F A1 DC | H1.>.&..y.Ya._.. +88 68 FA 36 74 61 CB FC D9 E7 A5 BB 93 10 54 D1 | .h.6ta........T. +FC 9D 31 ED D3 09 BC 1C CD 45 95 3F 80 AE E5 6E | ..1......E.?...n +2C 00 A9 CB BB 3A 3E 5B A0 64 25 86 B2 AD 1D 19 | ,....:>[.d%..... +38 A5 85 A8 92 E2 AB AB 63 44 E0 62 9F A1 41 41 | 8.......cD.b..AA +78 D9 B9 9C FE 5B AE 83 F1 29 DB 18 15 04 87 C2 | x....[...)...... +7D 40 BD 7F 5E 98 CE 28 1A 73 E7 1E 4B 09 8C AF | }@..^..(.s..K... +39 51 51 3B D7 4C 55 0D A8 A5 FB 7F 9F 64 FB E7 | 9QQ;.LU......d.. +BA C7 35 BB 4B BD 4C 4E C7 0E 07 E5 AC CE CF FC | ..5.K.LN........ +EF AF 36 10 8A F1 B5 4A 07 7B 52 F3 D0 A3 5E BE | ..6....J.{R...^. +25 43 1B BF 2A 11 2B B2 6F 3D F3 AB 2B 17 1C EB | %C..*.+.o=..+... +AA 32 7A EB E3 D7 57 04 FA 5C E2 F2 3E 44 1D A4 | .2z...W..\..>D.. +99 55 C5 31 AC 44 9D CF 36 AD C6 D1 B4 BF 48 06 | .U.1.D..6.....H. +57 DF 7E 05 08 D0 F9 B3 9B F9 B2 EA 79 AB A4 58 | W.~.........y..X +38 1B BB EE 0A D4 50 20 E3 6A 8D A3 F7 39 29 70 | 8.....P .j...9)p +46 4F 90 1E E2 A4 90 41 A0 71 64 D0 E2 9B 4F 92 | FO.....A.qd...O. +CC 75 26 00 48 A1 3C 21 8A 40 95 26 12 42 7C E4 | .u&.H..+..i. +66 74 FE F3 13 98 7D C3 0F 85 E2 E4 86 E0 C5 50 | ft....}........P +6D EC 88 46 39 9A 29 D2 | m..F9.). + +Flow Record: + RecordCount = 40 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132085509 [2024-04-15 00:01:25.509] + last = 1713132116456 [2024-04-15 00:01:56.456] + received at = 1713132206017 [2024-04-15 00:03:26.017] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 50258 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18599 + src addr = 17.248.209.70 + dst addr = 157.143.34.100 + out packets = 33 + out bytes = 6997 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 15.118 ms + srv latency = 0.000 ms + app latency = 0.281 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 51 F7 9E 89 EF | ....z...v..Q.... +56 2A 52 60 11 28 0E E9 55 AC 50 3E 74 23 8E 82 | V*R`.(..U.P>t#.. +22 DA 63 D3 27 E6 36 EE 88 21 56 20 B5 BD 9E 75 | ".c.'.6..!V ...u +60 02 71 70 F8 90 BD A9 94 99 18 BE 11 DF BB F9 | `.qp............ +B1 46 8A F7 44 97 BA C2 99 86 22 0C 13 02 00 00 | .F..D....."..... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 DD | ..+.....3.$... . +A7 C8 04 22 21 A7 CE DE 72 00 81 C8 A2 FB 0F 17 | ..."!...r....... +F0 D9 12 06 3F 9A FE 05 2E 4E A2 AA 59 FD 0D 14 | ....?....N..Y... +03 03 00 01 01 17 03 03 00 2A 58 A5 07 0E C9 D3 | .........*X..... +1D 28 9C 41 CC 67 47 F9 EE 99 5B 1C 9C 1E B1 C8 | .(.A.gG...[..... +FD 0A 30 C1 33 85 AF 15 21 A0 FE 4D A1 CC 20 39 | ..0.3...!..M.. 9 +0F E9 3F 52 17 03 03 11 25 BE 48 BC 30 5C 88 13 | ..?R....%.H.0\.. +E1 4F DD CB 5F 00 67 93 02 C0 53 9D 77 A1 E7 D6 | .O.._.g...S.w... +A1 82 11 47 ED 9E 38 E4 82 29 64 57 8C 62 F2 5A | ...G..8..)dW.b.Z +A8 BC 72 09 55 22 FF 99 D4 C4 1F 22 2E 38 35 04 | ..r.U".....".85. +51 C1 7B FB ED A0 DF 6F F2 9A 9B 5A 15 A4 D9 22 | Q.{....o...Z..." +A3 F5 62 68 A3 CD 1B DB A7 0C D6 0C BC 8C 5C 57 | ..bh..........\W +1A B4 49 47 F1 FE 80 AA AE 99 BA 7F 54 2D 05 A5 | ..IG........T-.. +07 2F 55 F9 7E 95 8E 67 44 A0 FD 63 AA E5 B0 A1 | ./U.~..gD..c.... +A5 53 3E 2D 49 6E D2 61 CE 45 2A A3 94 55 48 37 | .S>-In.a.E*..UH7 +86 14 34 F1 63 F2 44 4F 64 D9 0B E2 FB 1B 5B 00 | ..4.c.DOd.....[. +47 2E F2 09 91 20 98 98 D7 2D F9 36 7A 3D 59 03 | G.... ...-.6z=Y. +8C EE FD B5 C5 B1 A9 D1 7C 2E A9 66 1B E3 1B EA | ........|..f.... +D6 69 8A 51 F2 8C 05 70 F3 AA 8B C5 BE 12 D8 35 | .i.Q...p.......5 +8E E8 DF 4F 13 51 BE 05 E5 93 0A 74 42 EB CB 83 | ...O.Q.....tB... +13 8C 16 0B BF AF C8 E5 4C 38 92 29 7E 89 91 6D | ........L8.)~..m +FB 40 F8 AE 93 A9 44 1E 01 D6 A9 06 4F E8 E1 C5 | .@....D.....O... +9C 1F 95 A0 07 AE 17 1C E3 17 1F C6 67 AD 0A 42 | ............g..B +AD 5F AB 3F 34 14 DD DE DA 4D 94 08 D7 7F E1 17 | ._.?4....M...... +1D 7F B4 87 08 EA 39 D8 B8 4B ED BA 74 D6 3C 84 | ......9..K..t.<. +33 76 0A 1A EA 51 D8 0C D0 68 65 D0 EB E8 6A F8 | 3v...Q...he...j. +1F B6 D2 69 45 1D 0D 60 0D 2C 77 1F 26 AB FD 39 | ...iE..`.,w.&..9 +7C 05 57 5F 33 31 81 F6 77 06 87 AC B5 0A 2D 9A | |.W_31..w.....-. +B5 60 1A 0D F0 14 77 78 1E BB 8E 35 52 81 86 C4 | .`....wx...5R... +09 A5 A1 AE D7 D0 C4 1F 1E AA 3E 86 59 E4 75 EC | ..........>.Y.u. +E3 A9 94 F4 EC AF 24 49 01 74 58 B2 3D 47 D8 5A | ......$I.tX.=G.Z +15 6E 1C 00 9F AB 87 79 ED 52 E7 53 7B 5B C5 A6 | .n.....y.R.S{[.. +CF BA 99 DA 87 9D B9 F5 D1 E0 3E 58 3C 48 26 DD | ..........>XD....6i..=. +1F B4 5B 61 31 2E 01 97 E5 98 B3 7E 4B 7B 47 A1 | ..[a1......~K{G. +1D 97 F6 59 62 C5 96 07 2F C3 23 B7 92 A2 79 48 | ...Yb.../.#...yH +8E AF B3 33 40 0F 64 55 96 A6 26 84 D8 C8 47 B4 | ...3@.dU..&...G. +BE 37 1C A5 7C A5 6F 49 64 ED C3 5E 08 08 1E 0D | .7..|.oId..^.... +4F A4 B3 6E DD E8 B5 41 3F BA C5 2A DD 23 C7 BF | O..n...A?..*.#.. +FF 94 16 D7 FB B5 46 BF 4B 72 E6 59 CF 08 27 D0 | ......F.Kr.Y..'. +1F 01 E2 80 E0 B9 88 88 D2 57 07 2E 92 7D 0B FF | .........W...}.. +E4 C3 F9 6D 3E D3 9E 0E BF CC D4 32 60 05 65 7C | ...m>......2`.e| +5A 3C 2B 35 04 37 02 91 9B A4 E0 1E 2D 0F 70 DF | Z<+5.7......-.p. +8E 7A 69 43 EB 84 3E 72 09 72 2D DA 1A 47 47 41 | .ziC..>r.r-..GGA +81 FE F2 7F E6 DC 56 F8 6F 95 9B F8 5B 74 EF 38 | ......V.o...[t.8 +88 DC BD 50 18 B2 0E A6 88 81 C3 42 46 DA EA 65 | ...P.......BF..e +7B 4E 18 86 EB 64 0C 3A F7 25 0E 00 6C 5E BB 55 | {N...d.:.%..l^.U +DA 1D 85 FC 2A BB 1C 9A 9B B8 FC C6 94 D7 3B 28 | ....*.........;( +F2 55 83 B5 E9 D3 F3 60 1E A9 47 BD 10 84 AD 2D | .U.....`..G....- +0C E7 DF 27 E4 E5 9D 4B 5E E5 45 6A 6F 88 A4 C3 | ...'...K^.Ejo... +EC 53 AC E0 2C 0A 20 22 C0 5A B1 37 69 99 31 E1 | .S..,. ".Z.7i.1. +C2 D5 6B 16 3A 18 B6 A5 A6 5D 6C F7 31 CA 3F EB | ..k.:....]l.1.?. +1B 41 9B EF 33 F3 53 F6 0D 76 8D AC CE 0A 31 95 | .A..3.S..v....1. +6B 45 26 A4 8E 6B 22 84 68 69 60 F5 19 55 EC 4D | kE&..k".hi`..U.M +82 97 A5 38 15 4E E8 69 2B CC B8 23 8E 64 D1 C5 | ...8.N.i+..#.d.. +25 78 BB D5 59 27 58 D3 C7 E9 9C 4D 85 C7 6C E7 | %x..Y'X....M..l. +4E 2C 92 63 8E A1 28 77 B1 30 B6 74 92 98 0C 0E | N,.c..(w.0.t.... +2F 12 E3 97 64 B6 05 A0 AA 3B 78 A5 DA 89 1F 30 | /...d....;x....0 +25 44 4F 8F FE 61 49 67 BD 83 58 C5 6D A9 48 A1 | %DO..aIg..X.m.H. +6A CE 33 C6 79 6C 80 2C B9 63 44 98 A3 40 1D 99 | j.3.yl.,.cD..@.. +6E 09 7C AC EA 03 01 2E 81 A7 57 70 33 A2 2D CD | n.|.......Wp3.-. +17 C2 B9 0E 85 89 97 12 85 2A A2 FF 61 E6 87 43 | .........*..a..C +87 F8 FF 65 DA 46 EF 9D 1D 7F 87 58 E7 64 C9 24 | ...e.F.....X.d.$ +F7 FD E2 EC 0E 5B 70 D2 D6 61 73 C4 A3 95 2C 86 | .....[p..as...,. +D3 6D 3F BA A0 86 12 C2 F8 67 26 E0 8B 31 3A 79 | .m?......g&..1:y +C6 DF 14 21 68 F3 87 C8 72 10 90 C2 1B 74 D2 E7 | ...!h...r....t.. +01 07 AF 74 34 D6 BC 06 CD 47 7D 27 D4 9B C8 B5 | ...t4....G}'.... +17 FB 30 B6 C9 D5 28 2F 6D DC AB 28 75 AB B0 96 | ..0...(/m..(u... +6A 15 B0 14 DF 2B 3E 7D 60 72 5A 78 90 83 E5 E2 | j....+>}`rZx.... +70 92 E9 66 5D D8 47 15 46 5D 93 C0 B7 22 6B 1E | p..f].G.F]..."k. +74 56 19 73 D4 23 A5 55 33 98 9B D7 9D C9 F3 62 | tV.s.#.U3......b +C5 46 1D DA 36 55 8F 3D D5 CE 8C 68 6A CE 5C 6F | .F..6U.=...hj.\o +3A 06 15 F4 70 19 5E 39 D1 B8 A8 99 85 71 0F 05 | :...p.^9.....q.. +52 FC 2E FF AD AF 32 69 BF D4 5D 45 5B 7E 58 7E | R.....2i..]E[~X~ +87 14 38 0E E7 4F 27 97 64 2B B3 8F F4 61 C8 68 | ..8..O'.d+...a.h +BA E1 73 08 D5 C7 CF 03 AD 29 AF 10 2E 22 E0 44 | ..s......)...".D +3B D9 B9 2B 31 E3 99 00 39 19 2A 10 C1 BC 33 C6 | ;..+1...9.*...3. +1F 18 AE 7B 2C 92 DE A9 40 B4 3D 2B 9D B1 35 BC | ...{,...@.=+..5. +81 DB 35 46 7D 06 1D B8 95 6B 1D 6D A2 5C 91 A3 | ..5F}....k.m.\.. +79 A3 D1 78 82 13 7F 06 | y..x.... + +Flow Record: + RecordCount = 41 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 697 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132277481 [2024-04-15 00:04:37.481] + last = 1713132278578 [2024-04-15 00:04:38.578] + received at = 1713132344717 [2024-04-15 00:05:44.717] + proto = 6 TCP + tcp flags = 0xdf CE.APRSF + src port = 58134 + dst port = 443 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 1668 + src addr = 157.143.34.100 + dst addr = 17.253.15.204 + out packets = 13 + out bytes = 6168 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 14.757 ms + srv latency = 0.000 ms + app latency = 1.106 ms + in payload = 517 + TLS version = TLS 1.2 + sni name = mesu.apple.com + ja3 hash = 201976c7f7ca335fd8e2b45260f666fa + ja4 hash = t12d2014h2_a09f3c656075_14788d8d241b +16 03 01 02 00 01 00 01 FC 03 03 34 28 A0 76 84 | ...........4(.v. +84 5D EC BC 34 9C AD 77 F6 AB A1 D7 53 04 E9 E6 | .]..4..w....S... +7E F8 C4 49 9E 3A 36 17 F5 94 FE 20 9D CA 84 52 | ~..I.:6.... ...R +7B 00 CE 4D 73 F3 1F 26 60 C9 CC 91 F3 97 DE F4 | {..Ms..&`....... +69 A1 01 EC 83 B7 9A C5 CA B5 94 A5 00 2A 2A 2A | i............*** +13 01 13 02 13 03 C0 2C C0 2B CC A9 C0 30 C0 2F | .......,.+...0./ +CC A8 C0 0A C0 09 C0 14 C0 13 00 9D 00 9C 00 35 | ...............5 +00 2F C0 08 C0 12 00 0A 01 00 01 89 0A 0A 00 00 | ./.............. +00 00 00 13 00 11 00 00 0E 6D 65 73 75 2E 61 70 | .........mesu.ap +70 6C 65 2E 63 6F 6D 00 17 00 00 FF 01 00 01 00 | ple.com......... +00 0A 00 0C 00 0A EA EA 00 1D 00 17 00 18 00 19 | ................ +00 0B 00 02 01 00 00 10 00 0E 00 0C 02 68 32 08 | .............h2. +68 74 74 70 2F 31 2E 31 00 05 00 05 01 00 00 00 | http/1.1........ +00 00 0D 00 18 00 16 04 03 08 04 04 01 05 03 02 | ................ +03 08 05 08 05 05 01 08 06 06 01 02 01 00 12 00 | ................ +00 00 33 00 2B 00 29 EA EA 00 01 00 00 1D 00 20 | ..3.+.)........ +A7 C9 F3 1D 0F 6A A2 EF 2D 13 2B F6 09 3A 40 26 | .....j..-.+..:@& +62 46 1E 85 9D 70 D4 57 64 83 8B 36 29 F7 98 12 | bF...p.Wd..6)... +00 2D 00 02 01 01 00 2B 00 0B 0A 1A 1A 03 04 03 | .-.....+........ +03 03 02 03 01 00 1B 00 03 02 00 01 6A 6A 00 01 | ............jj.. +00 00 15 00 C0 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 | ..... + +Flow Record: + RecordCount = 42 + Flags = 0x00 PCAP v1, Unsampled + Elements = 5: 1 2 12 15 29 + size = 1374 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132381236 [2024-04-15 00:06:21.236] + last = 1713132382231 [2024-04-15 00:06:22.231] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 61866 + src tos = 0 + fwd status = 0 + in packets = 20 + in bytes = 5794 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +CD 00 00 00 01 00 08 F4 50 1D 41 A2 D1 A7 84 00 | ........P.A..... +43 9F C7 1F ED 58 42 AF D3 1F D6 9C F4 15 5B B0 | C....XB.......[. +2A F5 23 EE 4E CE 8A 44 AC DD 3E 54 01 24 C9 C4 | *.#.N..D..>T.$.. +2C DD 15 8B 73 78 5E 2E 69 4D E9 F6 7F B1 36 32 | ,...sx^.iM....62 +2E E3 BF D7 A6 CF A2 F3 A1 8B 6F 1A F9 75 73 3F | ..........o..us? +2E 56 02 9F 30 62 80 F9 1E E5 58 3D 9A 26 6F 65 | .V..0b....X=.&oe +46 8D 2A 77 D2 6A B1 E6 03 C4 D5 30 38 08 1E AE | F.*w.j.....08... +5B F8 4F 77 17 92 98 3F 34 79 96 6C 29 46 10 AD | [.Ow...?4y.l)F.. +E3 16 31 36 4D 15 FC DE 8B F9 C3 27 BE 8F 8B EA | ..16M......'.... +C8 E2 7C C4 D6 EF 31 18 26 E7 AD 5E 8A 8A C9 BB | ..|...1.&..^.... +E3 A4 0D F1 94 59 34 E9 8C C4 BD F7 75 EA 04 6F | .....Y4.....u..o +71 FA D7 7F 56 9E 04 43 78 2B 00 DF 84 33 BF 16 | q...V..Cx+...3.. +69 77 E8 B9 1E 1B 91 9C 98 A7 39 6D 82 E6 8E 18 | iw........9m.... +64 0C 4B 25 3F 42 F4 65 FA 53 D1 99 C6 66 01 AE | d.K%?B.e.S...f.. +B4 49 4C 11 38 20 08 5B 48 73 26 BC 6F 0D 24 98 | .IL.8 .[Hs&.o.$. +3A CD 38 DF E1 1C 62 40 81 C9 22 B5 61 73 FB 0B | :.8...b@..".as.. +1A 50 B1 FA 1B 41 C5 A5 DF 41 FC 7F CB 8C BC 01 | .P...A...A...... +7A 73 8D BB 9B 8B 4D 48 6F CD 42 FA 87 A4 2C E0 | zs....MHo.B...,. +AC 30 DA D6 CC DE C3 99 A2 2A BD DE 29 C7 98 A4 | .0.......*..)... +D4 DE CD 4D 4B 5E 68 56 AB 6C CC 39 12 7A 38 14 | ...MK^hV.l.9.z8. +35 89 27 9C 11 63 24 72 3C B9 AC 1B 39 E3 C2 D2 | 5.'..c$r<...9... +E0 4F 74 9B C8 C9 B2 AA 39 13 D8 C7 E1 43 64 59 | .Ot.....9....CdY +17 F5 BB DB 01 CD 8F 3C 23 25 65 03 48 9C 6E 85 | .......<#%e.H.n. +7F 90 68 F9 9A C5 B0 9E 7E F2 85 15 29 CC 1B 36 | ..h.....~...)..6 +1D 9B 4B 6C 76 2E 83 ED 94 5D 8B FC AD 0C 3B B3 | ..Klv....]....;. +5F 71 C8 F4 F5 82 72 84 5C 62 F9 8E 04 98 6E EE | _q....r.\b....n. +28 D8 A6 A7 DA 09 92 9F C9 7C C4 BA DD 52 84 59 | (........|...R.Y +EA F8 18 DB 18 D7 9B 68 AC F9 0C C8 B1 3B 9F 18 | .......h.....;.. +15 75 09 FC 60 1D 25 DD 66 54 11 98 3E 1D C8 35 | .u..`.%.fT..>..5 +67 40 84 ED 2B EB 00 5B 6C C6 96 B4 B3 9D 52 45 | g@..+..[l.....RE +EF 30 DD 9E 27 F9 88 7B 20 8C 70 2E FB 4E C9 7E | .0..'..{ .p..N.~ +AE D1 F3 A6 A3 31 FA 8C 9A DA 39 2B 6C 90 D5 3F | .....1....9+l..? +BC BA FE 25 EF 46 4C 9A 46 A4 42 D3 AA 8E A8 1B | ...%.FL.F.B..... +06 4F DB 38 91 9D 44 C8 4C 1D 29 CB 70 34 36 EE | .O.8..D.L.).p46. +42 51 6F 50 91 02 CB F2 04 33 DF BC 45 2F 52 24 | BQoP.....3..E/R$ +D0 8B 76 F3 D4 C3 77 32 19 41 E5 49 D0 2F 7E 81 | ..v...w2.A.I./~. +59 F0 B1 61 68 4A 69 CC 8B D0 98 B9 2A 22 67 22 | Y..ahJi.....*"g" +5D D2 73 6E 28 02 6A D1 70 C9 07 01 C5 96 DC BD | ].sn(.j.p....... +4A 49 7B 5D 47 59 3D 13 3F FE CE 0B CA E2 16 24 | JI{]GY=.?......$ +FE 2E 5B B1 FF 76 97 5B A2 93 37 23 37 8B 5C 6A | ..[..v.[..7#7.\j +D5 EA 1D BA 4D 4E D7 74 27 3B 82 C5 F5 9E BB D4 | ....MN.t';...... +C0 69 C9 EC 3C 20 92 32 61 1A 59 42 56 DC CB AE | .i..< .2a.YBV... +51 AC 88 CD 9B D2 42 2A 56 CF 89 9C FF A0 97 AD | Q.....B*V....... +45 90 B3 AC F1 3C 5E EB 45 18 90 D5 7C 7F BD 90 | E....<^.E...|... +17 C8 B8 61 F9 2B E3 75 F4 60 45 DB 51 41 7F 16 | ...a.+.u.`E.QA.. +61 8C 7C 02 C5 A3 FC 66 61 5F 5E 3A 36 9A 94 79 | a.|....fa_^:6..y +37 37 9F 5B 78 A6 A2 B9 14 2C 3F BC A0 10 58 19 | 77.[x....,?...X. +1A 15 9F 76 71 D2 41 0C 07 90 49 6C 39 65 CA DA | ...vq.A...Il9e.. +17 65 1B 7D FF 76 53 70 6E AF 10 1F B4 00 4A 51 | .e.}.vSpn.....JQ +AF DA 1B 4A 8A 4D 15 E5 EC 59 A5 0D F8 C6 B2 FA | ...J.M...Y...... +85 4E C1 E3 EA BE AE CC EC BC 69 BD 53 D1 D6 52 | .N........i.S..R +AA B3 57 21 47 7F 99 19 7A D4 97 66 FF 69 38 8E | ..W!G...z..f.i8. +2A 2D BD 99 EE 0C E8 86 CD 48 77 DA A9 61 9A 90 | *-.......Hw..a.. +66 0D E0 78 CF AE B0 06 DF 84 F7 C7 8F B0 B8 B0 | f..x............ +6E 57 99 49 17 91 F9 E0 21 15 92 D0 E8 EE 36 65 | nW.I....!.....6e +7B 5D 2E 46 A6 0F E9 FE 3C AF 19 82 C8 50 BE D4 | {].F....<....P.. +10 E8 9E EE D6 07 10 D2 41 43 70 8F B1 F5 BA DE | ........ACp..... +1C 1A 7A F8 B8 6B 3F 0F C4 39 59 71 93 86 A2 0E | ..z..k?..9Yq.... +9E 79 75 B4 FC 17 D9 50 38 14 27 AC B0 ED 6A 19 | .yu....P8.'...j. +AD EC 00 00 00 01 00 08 F4 50 1D 41 A2 D1 A7 84 | .........P.A.... +40 E0 8B 6C 3D FC 69 FB B5 56 28 68 AD 17 D5 B4 | @..l=.i..V(h.... +A0 2B EE 4F 19 E2 BD FB 8A A9 A9 25 B5 9E 0E F7 | .+.O.......%.... +2D 38 13 4C 20 02 4F 51 9A B3 D9 36 D7 03 A7 F6 | -8.L .OQ...6.... +E7 7F 76 E3 CF 78 46 9F 2A F0 A8 B7 3F 87 33 A5 | ..v..xF.*...?.3. +E7 F2 55 E6 8D CA 9C 75 8B 3B 78 4C DE BF ED 50 | ..U....u.;xL...P +AF 43 37 34 10 F6 9D 84 EA 67 AB 9D 6B C0 28 5B | .C74.....g..k.([ +9A 31 07 B4 AF ED 89 B2 28 BD E6 68 8E 97 99 D7 | .1......(..h.... +73 90 0B 1A E8 62 8E 2D BB F9 E9 2F F1 31 E6 D1 | s....b.-.../.1.. +C0 44 0E EA 02 39 AF EE 68 D0 2F 6B 0C AB 0E D4 | .D...9..h./k.... +CF E6 44 23 AE 85 0E BD 60 A7 44 82 4D D7 1C BB | ..D#....`.D.M... +0A 53 68 64 EA E2 24 BF 95 90 6E 1A B8 FA 24 79 | .Shd..$...n...$y +67 48 9C 35 F3 BE 78 08 6C B6 91 AB CF 66 A6 78 | gH.5..x.l....f.x +5B E1 BF 9F 0C 45 ED 54 FB 27 C8 6C 01 3A 22 2A | [....E.T.'.l.:"* +EB E7 50 A9 17 B9 8C C5 C7 93 D6 3F DE E6 AD C0 | ..P........?.... +AD 52 5C AD 91 03 AD C0 96 3A 3E 42 6F A4 1D 2A | .R\......:>Bo..* +FF 8B 51 59 A9 07 A1 9D 34 D1 6B B6 00 ED 04 FD | ..QY....4.k..... +39 44 F6 F2 4D CF 9A 92 16 A1 4E BE 0C 97 9A 22 | 9D..M.....N...." +D5 30 6B 1D B4 E0 E4 9C 78 C9 40 99 84 69 DD 01 | .0k.....x.@..i.. +CA BB | .. + +Flow Record: + RecordCount = 43 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 697 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132069800 [2024-04-15 00:01:09.800] + last = 1713132070148 [2024-04-15 00:01:10.148] + received at = 1713132148817 [2024-04-15 00:02:28.817] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 61318 + dst port = 443 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 1657 + src addr = 157.143.34.100 + dst addr = 142.250.203.115 + out packets = 11 + out bytes = 5919 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 10.143 ms + srv latency = 0.000 ms + app latency = 64.929 ms + in payload = 517 + TLS version = TLS 1.2 + sni name = live.cast4.audio + ja3 hash = f436b9416f37d134cadd04886327d3e8 + ja4 hash = t12d3113h1_e8f1e7e78f70_1b3407e2c936 +16 03 01 02 00 01 00 01 FC 03 03 8D E4 2D FF D2 | .............-.. +3F DE 98 1E 84 D7 12 88 63 72 80 E6 02 63 8A BD | ?.......cr...c.. +02 09 D5 8D C4 1C 9B 09 F8 72 11 20 55 71 3A DB | .........r. Uq:. +A1 BF C9 6A C2 65 7A B4 4C 1D 02 EA 5D 1C AD CE | ...j.ez.L...]... +86 3C E9 B0 BA B1 99 FD 0E 42 88 8B 00 3E 13 02 | .<.......B...>.. +13 03 13 01 C0 2C C0 30 00 9F CC A9 CC A8 CC AA | .....,.0........ +C0 2B C0 2F 00 9E C0 24 C0 28 00 6B C0 23 C0 27 | .+./...$.(.k.#.' +00 67 C0 0A C0 14 00 39 C0 09 C0 13 00 33 00 9D | .g.....9.....3.. +00 9C 00 3D 00 3C 00 35 00 2F 00 FF 01 00 01 75 | ...=.<.5./.....u +00 00 00 15 00 13 00 00 10 6C 69 76 65 2E 63 61 | .........live.ca +73 74 34 2E 61 75 64 69 6F 00 0B 00 04 03 00 01 | st4.audio....... +02 00 0A 00 0C 00 0A 00 1D 00 17 00 1E 00 19 00 | ................ +18 33 74 00 00 00 10 00 0B 00 09 08 68 74 74 70 | .3t.........http +2F 31 2E 31 00 16 00 00 00 17 00 00 00 31 00 00 | /1.1.........1.. +00 0D 00 30 00 2E 04 03 05 03 06 03 08 07 08 08 | ...0............ +08 09 08 0A 08 0B 08 04 08 05 08 06 04 01 05 01 | ................ +06 01 03 03 02 03 03 01 02 01 03 02 02 02 04 02 | ................ +05 02 06 02 00 2B 00 09 08 03 04 03 03 03 02 03 | .....+.......... +01 00 2D 00 02 01 01 00 33 00 26 00 24 00 1D 00 | ..-.....3.&.$... +20 54 05 CF AA 99 70 B9 66 FE B1 28 85 C3 FD D7 | T....p.f..(.... +F5 D8 D5 53 E4 A9 64 5E 10 2E 11 03 4D 0E AF 01 | ...S..d^....M... +01 00 15 00 B0 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ +00 00 00 00 00 | ..... + +Flow Record: + RecordCount = 44 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132053217 [2024-04-15 00:00:53.217] + last = 1713132084155 [2024-04-15 00:01:24.155] + received at = 1713132148817 [2024-04-15 00:02:28.817] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 57665 + src tos = 0 + fwd status = 0 + in packets = 28 + in bytes = 18476 + src addr = 17.248.209.66 + dst addr = 157.143.34.100 + out packets = 31 + out bytes = 6893 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 15.616 ms + srv latency = 0.000 ms + app latency = 0.366 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 BE AC 7B A5 70 | ....z...v....{.p +C6 14 FB 55 57 7D F7 9B 3B 21 E6 64 85 38 E0 78 | ...UW}..;!.d.8.x +7F B7 57 27 54 1A 89 25 FB 92 4E 20 A9 E1 BF 80 | ..W'T..%..N .... +95 64 A5 A3 2B BA 8A C8 8D 92 32 AC 36 EE 42 E2 | .d..+.....2.6.B. +34 75 9D 32 A3 8A 42 72 72 5B BA ED 13 02 00 00 | 4u.2..Brr[...... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 C0 | ..+.....3.$... . +73 73 29 17 46 C8 24 A0 88 CF 00 65 82 DB 99 81 | ss).F.$....e.... +A1 97 45 7A 95 AA 5D 59 67 25 D9 C7 39 CD 0B 14 | ..Ez..]Yg%..9... +03 03 00 01 01 17 03 03 00 2A 32 DB E1 2B 9D AD | .........*2..+.. +1E CE 8B 06 31 09 35 0D 51 43 78 10 6C CB DF A9 | ....1.5.QCx.l... +0C 95 84 D7 11 13 E9 D3 D1 C4 29 65 5B 1D C9 CD | ..........)e[... +A3 54 CB 46 17 03 03 11 25 D3 26 96 3C ED CF 17 | .T.F....%.&.<... +37 91 37 69 42 79 4D B4 3C B1 E2 D3 E3 AA 46 4C | 7.7iByM.<.....FL +6D 17 C5 60 34 51 79 BB 88 11 3A B5 E9 44 4A 55 | m..`4Qy...:..DJU +47 C7 AD 22 B2 12 4D C0 B1 4B 7F 15 BD 5E CD 6C | G.."..M..K...^.l +05 76 4A BF 1A 6F 31 4F 09 69 39 F6 C8 F2 E0 F8 | .vJ..o1O.i9..... +F8 3C 15 26 5A 15 03 B4 C1 2A DF AF 7B 22 1B A1 | .<.&Z....*..{".. +EB 78 0C 5C 7B B2 51 2A 29 A5 8B 93 17 C1 23 D4 | .x.\{.Q*).....#. +67 D5 EF 12 8E CB 77 1F 27 89 37 5B 76 AB 1F A4 | g.....w.'.7[v... +A2 8E 4E FD 8F 04 16 B9 DB FB DB C1 32 3F D0 53 | ..N.........2?.S +E8 41 CE 29 AA 6E 83 31 FC BB 16 4D 0F 63 06 75 | .A.).n.1...M.c.u +52 CC 84 49 AD 0D 3A 84 1E B2 2B 43 AF 3B 23 74 | R..I..:...+C.;#t +ED 31 FF E8 45 6E AC D6 65 C3 74 30 87 0A 7D 77 | .1..En..e.t0..}w +CE FA 34 FB 4D FC 94 74 54 9E 89 56 D7 B7 66 17 | ..4.M..tT..V..f. +39 45 F6 E7 13 4A FA D5 9C 13 83 5B 74 3C 5F FE | 9E...J.....[t<_. +B2 6B 81 27 2E 7F 7D 06 A7 CC DA 2A 35 55 11 AE | .k.'..}....*5U.. +C2 F4 E4 95 DE 37 CD 4C 8C 0A C4 43 57 7F C1 F6 | .....7.L...CW... +DD 92 66 05 C1 41 26 E8 14 B7 EB AF 86 0F C3 B7 | ..f..A&......... +37 F3 44 16 7C BB D7 86 8A DA 89 8C 86 0B A1 6A | 7.D.|..........j +8A 24 25 A6 D1 71 23 62 02 FD 79 9F 00 37 97 AA | .$%..q#b..y..7.. +0E 9F FE C8 7E FB 3A 59 AC E1 69 2A F5 A4 C3 B8 | ....~.:Y..i*.... +68 BA 4C D4 45 E7 7A B9 FD 46 1B 55 CE FF C5 45 | h.L.E.z..F.U...E +18 AD C3 9B 84 C7 FE A7 C6 92 9D BF 4B C3 E6 4A | ............K..J +05 34 7C 21 5C 83 7C 96 C7 5A D7 6E A1 69 45 2F | .4|!\.|..Z.n.iE/ +3C 46 EA 00 30 A5 D5 35 F7 92 38 4F A3 5B 03 09 | ..OJ.... +8C 46 BF 90 96 3E 36 BF 12 FA 1E B5 FD 3D 51 CA | .F...>6......=Q. +1D A0 B2 95 A7 44 97 3D 85 7A 7F 26 AC 61 C6 CA | .....D.=.z.&.a.. +11 93 C3 2F B9 5E 05 79 A9 96 14 8F 50 33 A2 63 | .../.^.y....P3.c +DA 89 2A D1 FE 8A 40 AA F3 24 15 BD EB 63 F7 2A | ..*...@..$...c.* +79 5E 1A 4D 56 14 13 48 F6 B7 8C 52 3F 10 BC 07 | y^.MV..H...R?... +6F E8 53 5D 2B 5F 24 EB E1 79 E6 02 43 A8 89 93 | o.S]+_$..y..C... +AA 06 A7 5A 87 2E 8E 01 A0 06 95 EB 7D DD CF BB | ...Z........}... +6A 6F 70 0D 89 AE CB 14 2A 7D 0F 61 1C 5E C0 B9 | jop.....*}.a.^.. +20 C2 4E 4E 53 87 10 7B 50 D2 BA 8D 37 CD D7 27 | .NNS..{P...7..' +9D 7A 62 2A 23 45 96 7C EF D5 FA 8B CA 04 4F C6 | .zb*#E.|......O. +9F 6E EC 3A 8B 10 FA 63 34 22 CC FE 09 0B 1B 23 | .n.:...c4".....# +9B 29 52 08 13 E8 84 72 8F EE AA A1 34 CD EA F5 | .)R....r....4... +48 3E 57 5F 3C 78 8C A3 C6 82 41 9F 2D CF 19 C3 | H>W_.k(.. +75 11 D0 B8 FD B1 20 B0 99 8B 3E B9 54 DB EF C4 | u..... ...>.T... +DD C0 8E B8 1D EF 91 AB E2 91 19 C1 D1 B7 B6 AD | ................ +EA 98 8F 67 FD 7F 52 89 21 01 51 04 9C 05 35 35 | ...g..R.!.Q...55 +4C 66 66 0A 72 A8 50 46 34 D1 D6 FE 11 90 F5 CA | Lff.r.PF4....... +9E 3E B7 71 89 96 AA DC 6F E5 1C 48 52 9A ED 99 | .>.q....o..HR... +E1 B1 6A 30 F0 3F 88 60 46 2E 91 ED E3 8F 40 9C | ..j0.?.`F.....@. +45 A1 DB 7B E1 99 19 C9 40 3C 6B 7C 25 F5 EC 93 | E..{....@S. +93 F8 0E 25 27 F9 C8 51 75 54 38 B6 04 6A 9C 4C | ...%'..QuT8..j.L +EE 7C E8 05 D6 5B 15 60 FD 85 40 C3 92 F8 8E B4 | .|...[.`..@..... +15 6C 25 6E 50 13 CE 68 70 EC 5A 94 7E 72 2D F4 | .l%nP..hp.Z.~r-. +4F FA 5E B0 61 20 63 55 00 DA F6 16 DB 56 41 81 | O.^.a cU.....VA. +B4 1E 2F B8 4F 6F 51 FA E7 E6 44 98 31 DA 2C D4 | ../.OoQ...D.1.,. +46 68 AE 04 AC E8 CB 78 DC 70 84 6D 03 66 82 F1 | Fh.....x.p.m.f.. +22 6C 78 8B 15 90 19 A6 C6 3B 9D D2 EE 85 75 06 | "lx......;....u. +E6 84 E4 E8 65 09 2F C8 4E A8 14 D1 4D 63 C4 F2 | ....e./.N...Mc.. +5D 34 6B ED 6E 13 AD 12 0F 50 2B D4 AA D2 AE D9 | ]4k.n....P+..... +13 BE 1F 91 9E 3F 55 E2 61 21 D5 D2 BE 45 FE 89 | .....?U.a!...E.. +4F E4 41 AE F2 5F 6F 29 82 BB EE AA 9C 12 08 72 | O.A.._o).......r +75 F2 86 C0 B8 3E D2 BC 89 51 35 DE 0E 29 80 37 | u....>...Q5..).7 +04 0B 03 4A B4 28 6D 29 C6 13 1F 53 EE B5 D5 4E | ...J.(m)...S...N +5C 3C 9C 0E 97 F4 7D 3C 63 69 69 0D 61 8C D7 CD | \<....}........{..@. +CA AF 56 EE 75 0D DC 54 8F 95 07 21 EB 00 8E E9 | ..V.u..T...!.... +C0 F6 A2 09 17 03 03 11 25 0B 3C 28 76 22 1E 2F | ........%.<(v"./ +7E 43 BF E5 18 1F C4 28 04 1D 02 29 85 E3 7E 6F | ~C.....(...)..~o +4B 6C 32 FF 65 13 6C C2 2A B2 62 C6 6E 76 FB 96 | Kl2.e.l.*.b.nv.. +1D A3 BB A5 02 B4 F9 D1 C0 53 AF CA 89 99 44 ED | .........S....D. +38 20 5B B8 D3 0F EC FF 4A FA 58 91 7D 05 5F A8 | 8 [.....J.X.}._. +E6 71 1D F4 BD 27 CC 90 EB 99 8B 05 09 91 92 84 | .q...'.......... +2A D2 3F D9 16 68 2A EC 42 E6 BE 1C 6E 9A D3 0E | *.?..h*.B...n... +13 4A 1D 1F EB 30 A0 86 39 4D 7E 60 6A 3F 66 71 | .J...0..9M~`j?fq +95 9A F0 7C D4 72 3F 64 4F 86 60 55 C4 15 D4 29 | ...|.r?dO.`U...) +B0 16 33 19 39 47 66 94 3F 16 61 7C CC D2 5A A3 | ..3.9Gf.?.a|..Z. +F2 27 0D 9E 35 51 B3 89 0A 85 1E 41 6F BA 1A 77 | .'..5Q.....Ao..w +26 81 01 97 CF 54 F9 2C 78 77 05 D3 31 30 B0 E7 | &....T.,xw..10.. +24 FB E3 30 7D DB DD 93 19 F6 D4 24 22 E3 DA 41 | $..0}......$"..A +9D 59 7D 86 42 D6 0D 05 8B D8 16 C3 DA FB 38 0C | .Y}.B.........8. +13 71 BC 74 3E F1 BB 16 7C 89 FA E6 B8 8C 5E 28 | .q.t>...|.....^( +C1 BD C2 EE C4 D4 91 D6 D7 8B 70 57 B1 ED 47 72 | ..........pW..Gr +57 2F CC B2 62 E8 2E F4 8C 9D 45 E3 F2 7A C7 75 | W/..b.....E..z.u +89 34 B2 5C 20 0E FA 3D 2B 0D AD E9 B7 B2 7C D3 | .4.\ ..=+.....|. +B9 0F 12 F1 88 19 0F 1A 89 4A 1A 12 E5 42 3D 61 | .........J...B=a +F5 01 6B 56 5D 45 CB 3C 11 D9 F7 E3 02 3B F2 5A | ..kV]E.<.....;.Z +72 A1 88 F1 5A C1 39 96 94 90 14 03 7C 9E A5 2E | r...Z.9.....|... +73 04 DB AD D7 22 17 13 82 51 EE 78 77 63 F9 26 | s...."...Q.xwc.& +78 1A DC 80 D7 C3 23 94 5C 15 D8 0F E2 9D FC 20 | x.....#.\...... +40 49 53 36 3B F7 5A 48 3C D2 3B 5F F1 87 87 0F | @IS6;.ZH<.;_.... +00 DB A9 E8 27 FF 3B A1 05 93 EC A6 CC 8A 64 62 | ....'.;.......db +A3 E3 6E 52 02 84 EC A1 12 97 E6 F2 C0 54 E1 9C | ..nR.........T.. +74 EF 0B 93 D0 82 C2 6F 33 BD D1 F1 EB 48 6F BA | t......o3....Ho. +74 31 E0 98 23 11 CF 8C 0E C1 27 11 4E 91 65 E6 | t1..#.....'.N.e. +5C DF 7B 6E 5D 92 B3 3E C9 9F 1C 84 13 1E 5B E2 | \.{n]..>......[. +1D 14 F4 03 A3 5B 7D BC 30 F3 6C 00 F1 25 5B F0 | .....[}.0.l..%[. +94 80 11 B5 75 A3 16 59 C6 70 D1 53 6E 62 96 77 | ....u..Y.p.Snb.w +01 1D B1 3F 12 41 F5 93 F1 7D 58 E8 2A 60 43 1C | ...?.A...}X.*`C. +8E 9D 60 3F 1D 1E CC 58 EE 61 B7 1B D1 5B 4C 0E | ..`?...X.a...[L. +39 40 C0 50 2C 8A 2E 28 D8 BA AD FF 29 64 F1 6D | 9@.P,..(....)d.m +94 E4 E4 3E E9 19 1F 9E 0D 02 39 68 A7 EE 58 5A | ...>......9h..XZ +B8 24 F5 80 D3 70 2A 7A DB E0 62 8A C4 47 8A E6 | .$...p*z..b..G.. +67 D0 28 1D 31 32 5D 23 61 0D 64 04 69 75 3D 08 | g.(.12]#a.d.iu=. +DA 01 FC 1C 93 CF 16 24 4E AA 68 D6 8E 52 4F 91 | .......$N.h..RO. +A0 C5 6C 5F 71 1D D1 FE 4C F3 88 FA 3E 74 E9 90 | ..l_q...L...>t.. +B6 BD 9D AE DC 47 1C 4B 63 39 A3 6E D8 5E 76 72 | .....G.Kc9.n.^vr +9B B0 DC FB 6E 09 F7 EB 13 A2 DE B6 D1 06 3E 8B | ....n.........>. +0F 03 E0 2C 4E B9 03 94 5B E2 1F 56 0B DA CF 3B | ...,N...[..V...; +42 B9 69 8E 51 90 8D 88 D5 13 6E B9 F7 A3 8F DD | B.i.Q.....n..... +2D 23 D5 89 07 3C FA 01 40 D0 D6 99 B6 17 1B 58 | -#...<..@......X +33 76 D4 5B 9F A0 BC C1 4D 5A 1D AF 38 23 1C F7 | 3v.[....MZ..8#.. +A1 AC 63 AA 65 8E FB 64 62 CD 22 5C 0D 44 4A 34 | ..c.e..db."\.DJ4 +A3 6F 94 16 6A 4F 3A 90 1B 75 C6 56 AC C8 90 D8 | .o..jO:..u.V.... +2F EF 0F E9 30 94 43 57 F5 D8 F3 16 F1 56 EF 1F | /...0.CW.....V.. +06 00 00 40 28 C4 02 4C F7 2F 69 ED BE 9B 06 A1 | ...@(..L./i..... +7F C0 6B D9 BF 68 3B 7B 0E 63 3B 58 88 A8 DD A4 | ..k..h;{.c;X.... +E0 BB 3D D1 5B 8E 55 BC AD E4 E8 71 55 A4 E3 38 | ..=.[.U....qU..8 +D1 8A 53 9A 00 7B 23 63 A6 F7 0F BF FA AF E1 E4 | ..S..{#c........ +97 65 9F 3D BF 90 E2 72 48 8A A3 15 BF 74 91 79 | .e.=...rH....t.y +E1 34 53 6D 16 FD 83 04 C8 F9 68 20 31 B1 CA 81 | .4Sm......h 1... +9B BC 06 66 B3 7B B3 00 95 63 36 4F 5F 54 62 55 | ...f.{...c6O_TbU +40 7C 05 F6 62 A3 E1 80 0B F0 12 38 30 AE 91 1C | @|..b......80... +8B D8 75 82 D7 F7 6C 64 5F EB FD 6A 4E EC 77 F6 | ..u...ld_..jN.w. +70 04 F6 7D 97 31 6D 9D BB AA 8B F7 84 ED 63 78 | p..}.1m.......cx +EE EA CD F5 69 E1 16 5D 5B 57 F4 EF 7B C1 36 A6 | ....i..][W..{.6. +E4 44 DE B1 E8 82 C1 B3 25 B1 3E 9A 2D 8E 20 0E | .D......%.>.-. . +C9 2F 9E 79 7B FA 16 3D 2E AB 96 96 84 F4 0D B9 | ./.y{..=........ +76 86 E5 28 1C 41 45 F6 33 B0 B4 1E 74 C0 63 C0 | v..(.AE.3...t.c. +10 15 FD B9 99 F3 F0 C8 84 33 28 B9 2F 81 99 A8 | .........3(./... +F2 A3 40 6F 7E BE B1 8A A7 87 BE A2 4B 47 42 37 | ..@o~.......KGB7 +7D 48 F9 36 20 04 D7 1E BA 0E 74 7B 16 83 92 45 | }H.6 .....t{...E +FF 02 C9 68 09 8B 1C AF 29 29 84 19 EC 62 0E 4E | ...h....))...b.N +B3 A2 3E D1 52 50 CF 52 63 AB 04 20 49 6E A4 D4 | ..>.RP.Rc.. In.. +02 DB D2 6D 3C F1 2E 14 9F 70 D4 CE F7 19 36 74 | ...m<....p....6t +6A F5 7B 0D 16 BC 0B F3 F0 05 5A B2 7C EC 05 FD | j.{.......Z.|... +A4 39 D2 8A AB 04 C3 04 56 1C ED A8 3F 1A 29 1A | .9......V...?.). +55 2B BB CA C2 2B 66 38 61 DE 95 3F 1E 58 3B 59 | U+...+f8a..?.X;Y +98 1F 77 60 A8 6C 12 DA 80 01 7E 99 D6 AB 44 02 | ..w`.l....~...D. +36 14 35 E9 29 9D E0 BB 65 26 79 2F 3C 47 6C 7B | 6.5.)...e&y/.xj#M.. N..P +F9 84 7F E6 5B 99 A3 72 D1 8C CC 00 00 2C 00 FF | ....[..r.....,.. +C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0 +C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'.......... +00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 4F 00 00 | .=.<.5./.....O.. +00 12 00 10 00 00 0D 77 77 77 2E 71 6F 62 75 7A | .......www.qobuz +2E 63 6F 6D 00 0A 00 08 00 06 00 17 00 18 00 19 | .com............ +00 0B 00 02 01 00 00 0D 00 12 00 10 04 01 02 01 | ................ +05 01 06 01 04 03 02 03 05 03 06 03 00 05 00 05 | ................ +01 00 00 00 00 00 12 00 00 00 17 00 00 | ............. + +Flow Record: + RecordCount = 49 + Flags = 0x00 PCAP v1, Unsampled + Elements = 6: 1 2 5 12 15 29 + size = 1402 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132381700 [2024-04-15 00:06:21.700] + last = 1713132382221 [2024-04-15 00:06:22.221] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 59480 + src tos = 0 + fwd status = 0 + in packets = 26 + in bytes = 14779 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + out packets = 21 + out bytes = 5602 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +C5 00 00 00 01 00 08 E4 11 02 B6 A6 93 80 E0 00 | ................ +43 A5 76 A7 10 E4 E7 8E 3B DC 64 72 07 2D A6 F0 | C.v.....;.dr.-.. +D7 5C 9B 5E A7 74 1B D8 A0 BA A7 B8 5B 65 77 39 | .\.^.t......[ew9 +4B 94 62 37 9A A6 50 4A F0 EE 2C 95 D7 97 82 7B | K.b7..PJ..,....{ +95 06 6D FC 1A 5F B0 DD 21 72 49 74 12 B2 99 D5 | ..m.._..!rIt.... +6F 39 CD A8 10 25 42 8E BB 06 0F 28 93 43 57 E7 | o9...%B....(.CW. +23 FC 1B E7 77 83 05 8D 59 E7 6F 82 1B A1 0B 62 | #...w...Y.o....b +89 63 84 04 38 FB D2 B7 1F 57 37 D8 07 A2 79 C1 | .c..8....W7...y. +90 38 BC DF 3F A8 0A 64 23 19 ED C1 C4 AD FB D9 | .8..?..d#....... +69 E0 E9 16 0F 2E 03 C0 F7 F5 16 A2 E9 1B DF 00 | i............... +D7 7E 87 96 8A CC 83 2F EE 38 18 39 CC D9 FC 46 | .~...../.8.9...F +0A 94 F9 70 E4 0D 3B A3 73 41 CD 0D C1 88 88 1F | ...p..;.sA...... +88 2E 1F BB B7 97 33 93 B5 66 E0 61 5B 00 21 4A | ......3..f.a[.!J +40 2F 4D 8D 37 82 13 30 9A 5C 8F 54 98 38 8D 9D | @/M.7..0.\.T.8.. +3E B0 F4 53 6F 51 81 0B DD 5C 79 5A 33 7E 95 99 | >..SoQ...\yZ3~.. +9E 11 6A 7B B9 8F AA E5 39 86 FF EA 45 8E 6D 85 | ..j{....9...E.m. +C3 50 B9 E7 04 7D 66 18 4F 5E 2A 99 AA 90 92 AC | .P...}f.O^*..... +08 00 A8 68 1D 39 25 A3 75 03 B6 FB 5A 3C D8 5D | ...h.9%.u...Z<.] +63 FA 55 56 5B CB 90 05 3D 33 27 6C AD 9F 83 A0 | c.UV[...=3'l.... +B1 2F 57 48 29 D8 73 28 F3 01 EF 9D 78 54 9D 4A | ./WH).s(....xT.J +83 3E FF BB 80 FC EA 03 40 2F 51 75 7A 46 BA E2 | .>......@/QuzF.. +20 DB 71 9A A9 A1 66 27 EA 5C 21 B8 FF 43 52 16 | .q...f'.\!..CR. +B1 DF 2F 1F E2 83 95 F6 2D 99 3B 3E DF 12 FE 15 | ../.....-.;>.... +26 EB 90 B9 1C A8 AC 10 6D 64 CC 16 54 0F 2F 79 | &.......md..T./y +9D 4F DA 66 B2 C4 E9 0A FF 65 06 28 5C 94 4E 00 | .O.f.....e.(\.N. +01 07 48 4F 2B 47 91 C1 8C 50 01 FD B5 1D 71 81 | ..HO+G...P....q. +A2 82 10 F4 27 9C A5 19 32 35 4E 8A 6C 37 55 5E | ....'...25N.l7U^ +68 DA E2 9A 72 86 09 17 3F 29 38 7C 4C D4 2E 81 | h...r...?)8|L... +E2 39 4B 54 6F 89 ED 25 1B 11 22 9B 35 42 81 C5 | .9KTo..%..".5B.. +C1 14 73 C0 05 44 64 50 12 AD 28 5F 7D 4F 6D 87 | ..s..DdP..(_}Om. +B9 96 DF 78 DA D3 1B 73 31 81 02 A6 98 51 A6 9E | ...x...s1....Q.. +F1 27 23 D1 03 DE 4A D0 5E 21 FE 90 C5 33 0D F2 | .'#...J.^!...3.. +83 67 68 AA A0 84 F7 06 FD B1 28 53 0A E6 D1 DF | .gh.......(S.... +67 0B 56 12 6E D0 B1 2D E3 08 13 F3 B6 AF 42 A3 | g.V.n..-......B. +78 74 B3 2F 8D 8B 8A 81 B8 32 54 95 BD 13 42 48 | xt./.....2T...BH +9D 29 2F AA 44 9B 02 0F FE 6C F6 93 F6 AF AB C0 | .)/.D....l...... +A3 94 9C 8F C0 80 86 C5 8A 07 D5 CC 50 9A 88 53 | ............P..S +DF 18 EC CF 06 F6 F7 B6 A8 E4 AE 42 97 A1 A4 66 | ...........B...f +41 CA CE E4 90 FD 46 BD 29 BC C7 35 89 C7 3E FA | A.....F.)..5..>. +55 A6 45 32 49 8C 46 F6 E3 1A 71 83 CA D1 6F CE | U.E2I.F...q...o. +84 C2 8D DD E4 97 D1 C4 72 41 86 52 C9 46 9F DA | ........rA.R.F.. +22 C9 A4 34 F7 C5 47 19 CA 6A 8E B4 BB 98 88 26 | "..4..G..j.....& +07 D7 9E EE AD 2C 52 6A 94 79 02 B2 43 60 A5 9F | .....,Rj.y..C`.. +7E A7 EC 07 8C E8 70 2C 0B 53 BF 90 D2 54 A8 06 | ~.....p,.S...T.. +81 5E ED 6D BA 02 AD B2 33 35 BB FF 8D E1 EF FB | .^.m....35...... +A0 74 40 1F 69 B3 1C 7B FB 80 99 CF 1C 5D 06 9B | .t@.i..{.....].. +71 F5 59 CE 6B C5 6E 2A C8 4A 31 9D 1E 33 28 65 | q.Y.k.n*.J1..3(e +76 8B 03 06 47 75 24 83 1B FD 50 5C 2C 8E 4B 1C | v...Gu$...P\,.K. +3D 1D DA 81 8B 9E 5A 29 92 0E 4C 63 1F 8C 3B DF | =.....Z)..Lc..;. +33 83 A5 79 75 BC 39 AA 3A 33 A8 3C 8E FA F0 39 | 3..yu.9.:3.<...9 +E3 9A 90 BE A7 09 4D BE 58 08 89 03 45 AE 64 52 | ......M.X...E.dR +63 14 01 DC A4 32 15 63 4A 0E B0 EC 38 F5 1E 1F | c....2.cJ...8... +86 B9 5D 93 71 55 A6 C7 C0 1E 1A D4 10 1B 9A CF | ..].qU.......... +FF 9D FC D2 64 EB 09 B3 5B 29 53 90 40 09 E7 5F | ....d...[)S.@.._ +59 89 8E 1C 45 2E A2 A5 A1 6C 60 88 EC D7 DE 3D | Y...E....l`....= +47 D6 D1 69 49 16 E7 AA 40 A2 2E 9F 46 55 38 D0 | G..iI...@...FU8. +C4 40 EA 11 76 E9 79 0C 27 B1 79 0C A2 45 EE B5 | .@..v.y.'.y..E.. +A5 F9 E0 A2 D9 60 C1 FC 9E 9D 5F 73 75 77 A1 C3 | .....`...._suw.. +89 D8 B1 4A 69 8D FC 32 F1 B4 50 31 57 B2 0D A7 | ...Ji..2..P1W... +26 D7 2E F9 A8 71 C1 EB 00 00 00 01 00 08 E4 11 | &....q.......... +02 B6 A6 93 80 E0 40 DB 3A AC 96 84 01 55 A5 34 | ......@.:....U.4 +23 AF 67 E4 1B 7C 94 59 B1 DB 49 DA 5B AA 48 A0 | #.g..|.Y..I.[.H. +7B 37 EC 84 44 BF AB C4 68 1E BB 91 50 44 CA 8E | {7..D...h...PD.. +88 BA 2B 8F F1 C6 7F A3 19 39 4E 74 3C 64 92 BE | ..+......9Nt.....1M...../U. +C1 52 63 49 50 11 2D CE 3A 7A 83 2D 4F 83 75 18 | .RcIP.-.:z.-O.u. +21 3C 12 D2 59 47 1D 4C BE 21 24 A0 C6 C4 30 58 | !<..YG.L.!$...0X +39 5A AD 30 A8 FE ED 4B 33 13 C9 30 E9 9A 47 E3 | 9Z.0...K3..0..G. +FB 19 52 41 AB A4 F6 4E 9A 50 BB 8C A8 BD 67 F8 | ..RA...N.P....g. +13 49 | .I + +Flow Record: + RecordCount = 50 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1608 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132217356 [2024-04-15 00:03:37.356] + last = 1713132217529 [2024-04-15 00:03:37.529] + received at = 1713132302716 [2024-04-15 00:05:02.716] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 60460 + src tos = 0 + fwd status = 0 + in packets = 12 + in bytes = 7012 + src addr = 13.224.103.47 + dst addr = 157.143.34.100 + out packets = 12 + out bytes = 1634 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 8.405 ms + srv latency = 0.000 ms + app latency = 0.262 ms + in payload = 1428 + TLS version = TLS 1.3 + ja3s hash = 16a232c6047ab4c7f493b826d419a8be + ja4s hash = t130500_c02f_a241d087c239 +16 03 03 00 63 02 00 00 5F 03 03 26 A5 A3 FF 2E | ....c..._..&.... +BB 06 A5 05 5B 55 50 AB DA F5 FE 10 52 07 5F 75 | ....[UP.....R._u +F6 5D A5 44 4F 57 4E 47 52 44 01 20 34 AB F1 B6 | .].DOWNGRD. 4... +B8 5E 91 27 7C F7 F7 51 A4 EC 3B 5C BD 90 7E 88 | .^.'|..Q..;\..~. +B7 B2 71 2B 3D F6 53 9F 31 E6 FF E5 C0 2F 00 00 | ..q+=.S.1..../.. +17 00 00 00 00 00 0B 00 02 01 00 FF 01 00 01 00 | ................ +00 05 00 00 00 17 00 00 16 03 03 13 93 0B 00 13 | ................ +8F 00 13 8C 00 06 0F 30 82 06 0B 30 82 04 F3 A0 | .......0...0.... +03 02 01 02 02 10 0A 28 52 01 F0 E0 3A 67 F4 F8 | .......(R...:g.. +C7 A1 48 40 12 B8 30 0D 06 09 2A 86 48 86 F7 0D | ..H@..0...*.H... +01 01 0B 05 00 30 3C 31 0B 30 09 06 03 55 04 06 | .....0<1.0...U.. +13 02 55 53 31 0F 30 0D 06 03 55 04 0A 13 06 41 | ..US1.0...U....A +6D 61 7A 6F 6E 31 1C 30 1A 06 03 55 04 03 13 13 | mazon1.0...U.... +41 6D 61 7A 6F 6E 20 52 53 41 20 32 30 34 38 20 | Amazon RSA 2048 +4D 30 31 30 1E 17 0D 32 33 30 37 31 30 30 30 30 | M010...230710000 +30 30 30 5A 17 0D 32 34 30 38 30 37 32 33 35 39 | 000Z..2408072359 +35 39 5A 30 14 31 12 30 10 06 03 55 04 03 13 09 | 59Z0.1.0...U.... +74 69 64 61 6C 2E 63 6F 6D 30 82 01 22 30 0D 06 | tidal.com0.."0.. +09 2A 86 48 86 F7 0D 01 01 01 05 00 03 82 01 0F | .*.H............ +00 30 82 01 0A 02 82 01 01 00 D8 DB 24 28 FF 06 | .0..........$(.. +62 F6 20 6C E1 1D 3C 09 F1 AF 3E 26 6B F1 90 4E | b. l..<...>&k..N +E7 D5 28 7C BD 18 AA E2 8F 06 66 64 65 35 62 25 | ..(|......fde5b% +4A 9D 59 73 C3 BD 0A 64 C0 29 6C AA CC F5 3F A4 | J.Ys...d.)l...?. +47 33 26 D1 13 96 93 01 DE 8A B0 B1 52 A7 20 F9 | G3&.........R. . +49 B9 F9 B0 04 D8 27 BF A0 52 55 7C 5F B5 9F EF | I.....'..RU|_... +CE 8E F0 EA 98 8D 49 2A FE 0B 65 E2 C5 29 06 33 | ......I*..e..).3 +91 C0 28 73 69 1E AB 09 06 E2 71 A2 0C 5F 50 A3 | ..(si.....q.._P. +82 7D BE F5 A2 B6 FC BE E2 55 FD BB 3E E3 7F 2B | .}.......U..>..+ +B8 6E D9 5D E0 75 49 6A CD DC 49 52 0B 58 C2 0B | .n.].uIj..IR.X.. +B4 35 31 C6 35 8C F2 90 AC 29 FA 74 EA EF 5F AD | .51.5....).t.._. +C3 2F B5 D0 04 4A CB 98 A8 8B 4B AE 22 86 58 EB | ./...J....K.".X. +E1 9E E0 B1 4F F4 F3 07 14 B5 14 62 99 33 85 5E | ....O......b.3.^ +60 B9 01 6A 6A 26 FE 78 0B 00 DF D9 B5 BA 39 A4 | `..jj&.x......9. +51 6F E1 88 1D 08 AE 05 B5 BD A9 50 BD 10 EC 45 | Qo.........P...E +16 89 84 41 35 8B 69 2E DC 52 07 44 E8 28 B3 4C | ...A5.i..R.D.(.L +0D A5 5F D9 8B 75 86 89 3C 93 02 03 01 00 01 A3 | .._..u..<....... +82 03 2F 30 82 03 2B 30 1F 06 03 55 1D 23 04 18 | ../0..+0...U.#.. +30 16 80 14 81 B8 0E 63 8A 89 12 18 E5 FA 3B 3B | 0......c......;; +50 95 9F E6 E5 90 13 85 30 1D 06 03 55 1D 0E 04 | P.......0...U... +16 04 14 A6 52 40 27 FC 32 CD 1D D0 81 EC 6B 98 | ....R@'.2.....k. +04 D6 8B FB 00 1D 81 30 61 06 03 55 1D 11 04 5A | .......0a..U...Z +30 58 82 09 74 69 64 61 6C 2E 63 6F 6D 82 0F 2A | 0X..tidal.com..* +2E 77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D | .wimpmusic.com.. +77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D 74 | wimpmusic.com..t +69 64 61 6C 68 69 66 69 2E 63 6F 6D 82 0B 2A 2E | idalhifi.com..*. +74 69 64 61 6C 2E 63 6F 6D 82 0F 2A 2E 74 69 64 | tidal.com..*.tid +61 6C 68 69 66 69 2E 63 6F 6D 30 0E 06 03 55 1D | alhifi.com0...U. +0F 01 01 FF 04 04 03 02 05 A0 30 1D 06 03 55 1D | ..........0...U. +25 04 16 30 14 06 08 2B 06 01 05 05 07 03 01 06 | %..0...+........ +08 2B 06 01 05 05 07 03 02 30 3B 06 03 55 1D 1F | .+.......0;..U.. +04 34 30 32 30 30 A0 2E A0 2C 86 2A 68 74 74 70 | .40200...,.*http +3A 2F 2F 63 72 6C 2E 72 32 6D 30 31 2E 61 6D 61 | ://crl.r2m01.ama +7A 6F 6E 74 72 75 73 74 2E 63 6F 6D 2F 72 32 6D | zontrust.com/r2m +30 31 2E 63 72 6C 30 13 06 03 55 1D 20 04 0C 30 | 01.crl0...U. ..0 +0A 30 08 06 06 67 81 0C 01 02 01 30 75 06 08 2B | .0...g.....0u..+ +06 01 05 05 07 01 01 04 69 30 67 30 2D 06 08 2B | ........i0g0-..+ +06 01 05 05 07 30 01 86 21 68 74 74 70 3A 2F 2F | .....0..!http:// +6F 63 73 70 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F | ocsp.r2m01.amazo +6E 74 72 75 73 74 2E 63 6F 6D 30 36 06 08 2B 06 | ntrust.com06..+. +01 05 05 07 30 02 86 2A 68 74 74 70 3A 2F 2F 63 | ....0..*http://c +72 74 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F 6E 74 | rt.r2m01.amazont +72 75 73 74 2E 63 6F 6D 2F 72 32 6D 30 31 2E 63 | rust.com/r2m01.c +65 72 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 | er0...U.......0. +30 82 01 7E 06 0A 2B 06 01 04 01 D6 79 02 04 02 | 0..~..+.....y... +04 82 01 6E 04 82 01 6A 01 68 00 76 00 EE CD D0 | ...n...j.h.v.... +64 D5 DB 1A CE C5 5C B7 9D B4 CD 13 A2 32 87 46 | d.....\......2.F +7C BC EC DE C3 51 48 59 46 71 1F B5 9B 00 00 01 | |....QHYFq...... +89 3E 21 77 27 00 00 04 03 00 47 30 45 02 21 00 | .>!w'.....G0E.!. +C3 53 34 AF 43 03 C8 C1 11 23 3E C1 40 EF 06 27 | .S4.C....#>.@..' +CD E1 7A 49 8B DD 92 84 2B 16 63 6C 2A B5 A2 E2 | ..zI....+.cl*... +02 20 0F C9 0F B9 45 4D E3 88 94 3D 75 78 15 CC | . ....EM...=ux.. +7F 6B 35 8B 00 3B 7B 0E 8A 1C 2D 27 86 24 17 F5 | .k5..;{...-'.$.. +63 B7 00 76 00 48 B0 E3 6B DA A6 47 34 0F E5 6A | c..v.H..k..G4..j +02 FA 9D 30 EB 1C 52 01 CB 56 DD 2C 81 D9 BB BF | ...0..R..V.,.... +AB 39 D8 84 73 00 00 01 89 3E 21 77 04 00 00 04 | .9..s....>!w.... +03 00 47 30 45 02 21 00 AC F0 89 AA C4 1F 25 10 | ..G0E.!.......%. +2E 63 EB 9F 51 F8 34 FC B8 E9 87 80 67 CF FE 12 | .c..Q.4.....g... +46 67 8D 9C ED 23 25 A6 02 20 0D 0C 2F 87 19 F4 | Fg...#%.. ../... +EF 94 64 B0 F4 2D 7D 3C 5E 33 52 8D 7B D4 E0 FB | ..d..-}<^3R.{... +4D 9A 14 C8 E1 65 89 5E C6 C4 00 76 00 DA B6 BF | M....e.^...v.... +6B 3F B5 B6 22 9F 9B C2 BB 5C 6B E8 70 91 71 6C | k?.."....\k.p.ql +BB 51 84 85 34 BD A4 3D 30 48 D7 FB AB 00 00 01 | .Q..4..=0H...... +89 3E 21 76 E0 00 00 04 03 00 47 30 45 02 21 00 | .>!v......G0E.!. +86 79 F0 C1 4E 93 9C 55 56 DF 1B 18 DC AF 80 B5 | .y..N..UV....... +DB 29 68 19 86 6B B1 AF A0 E3 0D A5 91 42 42 37 | .)h..k.......BB7 +02 20 53 72 52 08 2E 09 7A E8 B8 10 1E AA C5 7D | . SrR...z......} +0F D0 25 D2 EE 1D EC F5 E1 09 2D F5 B4 12 3A 83 | ..%.......-...:. +59 A7 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 | Y.0...*.H....... +00 03 82 01 01 00 4F E5 AC 91 4E 4A 44 05 5D 5D | ......O...NJD.]] +D3 9D AC B4 | .... + +Flow Record: + RecordCount = 51 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 1628 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132312425 [2024-04-15 00:05:12.425] + last = 1713132343398 [2024-04-15 00:05:43.398] + received at = 1713132441666 [2024-04-15 00:07:21.666] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 443 + dst port = 53730 + src tos = 0 + fwd status = 0 + in packets = 29 + in bytes = 18529 + src addr = 17.248.209.68 + dst addr = 157.143.34.100 + out packets = 32 + out bytes = 6945 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 14.995 ms + srv latency = 0.000 ms + app latency = 0.552 ms + in payload = 1448 + TLS version = TLS 1.3 + ja3s hash = 15af977ce25de452b96affa2addb1036 + ja4s hash = t130200_1302_a56c5b993250 +16 03 03 00 7A 02 00 00 76 03 03 BA 07 CE 30 B6 | ....z...v.....0. +38 80 A7 FA BB F3 72 03 0E D3 3A DB A0 09 A2 32 | 8.....r...:....2 +3F 62 21 32 7F 97 D2 60 4E 8A 14 20 C4 DD 6E AC | ?b!2...`N.. ..n. +FE 8D B5 9A 86 C2 18 8B E6 AD 1D 0E 16 6F 29 59 | .............o)Y +BE 9F 65 72 F1 40 A4 36 30 40 75 00 13 02 00 00 | ..er.@.60@u..... +2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 D4 | ..+.....3.$... . +B1 07 2D 73 84 95 82 57 76 60 00 7C A0 69 FE 16 | ..-s...Wv`.|.i.. +09 86 B8 7F D3 AD 8D 4C 0D 2D 80 81 9E 4A 64 14 | .......L.-...Jd. +03 03 00 01 01 17 03 03 00 2A 68 7C DD 01 66 6A | .........*h|..fj +65 00 01 CD 30 FB E6 6D 04 1F BA BD 7C 0F A2 66 | e...0..m....|..f +3B 4F 36 DD 98 A6 08 4C 1B 59 B5 5C A9 61 D3 36 | ;O6....L.Y.\.a.6 +D9 2D 3E 84 17 03 03 11 25 7A F3 01 9C 4C C3 2F | .->.....%z...L./ +38 70 C5 24 22 E9 B0 2A B7 42 59 52 FE E1 9E ED | 8p.$"..*.BYR.... +E4 C7 D7 D5 D7 A1 77 5B 9B 56 CF 4A 6F 91 53 5E | ......w[.V.Jo.S^ +BA E9 58 20 6E 2E A1 D6 CA 4E D3 53 FB E9 0D 91 | ..X n....N.S.... +6B 2C FC B4 89 8A D0 C6 F1 1D 0E 0F 7E E4 74 16 | k,..........~.t. +AA B0 58 62 71 50 39 54 89 FA E6 BB 13 48 A4 AC | ..XbqP9T.....H.. +D4 71 D8 EC C0 3C 9F 7B E3 7E C8 38 5C 52 BE 8E | .q...<.{.~.8\R.. +79 29 F8 9B 62 1D 96 5B 90 FC D9 2D A3 35 BE 0A | y)..b..[...-.5.. +E7 4F 06 E2 1C 43 7C CD 25 C1 E7 8B EF 89 78 D3 | .O...C|.%.....x. +89 D6 1C 47 1D 61 1B DB 15 EC 78 D0 A8 C8 34 23 | ...G.a....x...4# +42 7D 5E EE FC 93 55 50 FB 85 07 40 1B DC 5A 59 | B}^...UP...@..ZY +5F 63 E9 E1 23 60 BA 38 85 52 55 AB 2D B0 41 AA | _c..#`.8.RU.-.A. +70 E0 B5 EB 50 1A 21 E5 FC C2 3D AE 9F 13 1A 96 | p...P.!...=..... +B5 D0 E8 0F A8 C9 A6 FB CC 29 0C 85 29 8D 3A 83 | .........)..).:. +F8 77 6B 04 E5 67 A9 CE EB DF A6 F0 2B 2E EB 33 | .wk..g......+..3 +AD B7 CC F6 26 D0 A6 DF 5B 28 68 49 32 59 20 D5 | ....&...[(hI2Y . +CF 0D 35 61 90 4D 42 D0 79 2B 73 B0 A3 3D 6C C2 | ..5a.MB.y+s..=l. +08 00 3C 98 3A CB 76 DB C7 04 1B C7 22 15 BF 5B | ..<.:.v....."..[ +43 CE 13 BC C5 7C EE 4D 68 BB 4F 93 08 8C E9 D0 | C....|.Mh.O..... +5F 55 A1 E0 54 6D 6A 2C 1C 0A C0 90 59 12 17 6F | _U..Tmj,....Y..o +55 5A 6E A8 28 3B 2C 39 49 5F 8E 65 B9 8E 89 40 | UZn.(;,9I_.e...@ +63 91 F0 03 E0 1B A3 E2 A6 4F 21 F0 5E EB E4 28 | c........O!.^..( +A8 B5 B2 5E 72 36 08 66 E9 55 A7 E6 4A 5F 69 CF | ...^r6.f.U..J_i. +8C 2F 5D 7B EF BB 53 9B A7 AC F2 92 EE 83 1B BA | ./]{..S......... +F0 55 E6 AC 49 9E 05 77 3D E9 DA 03 82 74 E0 E1 | .U..I..w=....t.. +AE F7 F1 D5 B8 C1 5B ED 61 9C 90 F2 F9 1C 44 0D | ......[.a.....D. +1A BD A5 5D 45 A5 D1 45 5E 00 52 EC A3 93 5B D2 | ...]E..E^.R...[. +CF 84 56 D8 6C 34 62 BA CB 11 85 13 11 4B CF 97 | ..V.l4b......K.. +00 F4 4E C0 22 8C F1 72 EB B3 9E EF C9 B9 AC 24 | ..N."..r.......$ +C6 77 DB 5F 12 8D FE D2 D3 AA DB 87 6F 98 F8 06 | .w._........o... +C3 31 CE C2 D4 9D 36 54 F4 4D 75 C4 A0 17 99 DF | .1....6T.Mu..... +DB 59 A8 75 4D FD F3 A8 FC 0F EF E1 A5 32 CC 2B | .Y.uM........2.+ +E2 3B 9F 5C 9C 25 F5 A0 B4 CA 20 90 CE 78 49 34 | .;.\.%.... ..xI4 +33 DB AF F8 17 FF 79 42 36 DE 0B F0 97 0F 5E A1 | 3.....yB6.....^. +41 62 3F 6D 86 77 77 E9 E9 92 1C 27 24 8A 74 D1 | Ab?m.ww....'$.t. +B5 1E 7D 1D 52 2F F9 C5 36 81 F2 77 63 71 B4 90 | ..}.R/..6..wcq.. +98 28 5C E8 15 EB B2 DD 05 C8 44 13 AA 8A 57 1A | .(\.......D...W. +97 38 61 D1 C4 5C 30 37 B0 43 D5 50 05 9F 68 9E | .8a..\07.C.P..h. +6C E2 79 D0 74 F4 CD EA 7C C9 84 10 9D 82 68 6C | l.y.t...|.....hl +FC 52 C8 A7 03 77 B0 8D 30 BB BF 95 9A B9 B2 D2 | .R...w..0....... +21 A4 78 FA DB BE 89 54 BF F0 FF 9D 40 75 5F 3A | !.x....T....@u_: +CA EF 49 9A 91 48 41 42 01 15 CF 02 1F 0F BD 47 | ..I..HAB.......G +17 7A 5D 5D 3F 77 37 0F EF 75 BD B9 E3 37 73 5B | .z]]?w7..u...7s[ +75 1B 6B 2F 05 6F BF 38 DB 27 D0 B5 BD 04 47 BD | u.k/.o.8.'....G. +15 E0 8B 3A 2B 2A 15 10 55 9D 7F B6 21 2F C9 75 | ...:+*..U...!/.u +65 03 28 C2 DE 2A 7A 95 9B 84 F0 39 B2 FF FE 73 | e.(..*z....9...s +6E B7 4A AF 25 07 D8 C0 B4 37 7E C7 8A 49 AA A3 | n.J.%....7~..I.. +44 F1 D9 4B 15 4C 1A 3D 44 05 75 4A 48 C0 CA 5F | D..K.L.=D.uJH.._ +EC 35 1C 59 10 52 51 D4 F6 F2 92 A2 F0 42 51 0D | .5.Y.RQ......BQ. +E0 EE E1 A2 3C 34 21 E1 BA A9 39 0F 63 74 74 E7 | ....<4!...9.ctt. +C7 72 FF 52 C6 23 39 B0 FA 31 9D 7C 45 EF C7 2E | .r.R.#9..1.|E... +D5 F5 CD 87 0A CE 6D 9B 8A E9 CE FF E5 24 C9 A2 | ......m......$.. +C0 B8 63 E8 CC 8B 10 6F FE 3C 03 94 C4 DC 28 50 | ..c....o.<....(P +54 00 2D F2 FB BF 8B 15 B8 83 A6 67 0B 18 1A 47 | T.-........g...G +60 C3 4E B2 2E 3D 75 B8 C9 B8 3A 5F B1 61 2B A8 | `.N..=u...:_.a+. +05 A0 B1 28 D5 EF D0 CC E6 5C A8 BB 36 28 12 EF | ...(.....\..6(.. +51 E5 2D 22 AF FF 04 04 2E 64 D0 0F 53 62 37 E2 | Q.-".....d..Sb7. +25 A0 52 27 D4 AC 8F 7E FB 20 77 36 DC 3A 9C 9A | %.R'...~. w6.:.. +81 98 EA 1B 77 86 7A 45 67 95 2C F4 B5 5A F6 6F | ....w.zEg.,..Z.o +43 96 79 6C 57 FA 38 D7 5B AB C2 DE 12 CE D6 CA | C.ylW.8.[....... +54 E0 04 2F 2D 73 55 09 78 88 52 C3 61 68 F5 EB | T../-sU.x.R.ah.. +13 9C AF DE 0B 08 9C F0 67 54 FD AF FF 29 8E 23 | ........gT...).# +83 C7 F5 20 6A 1A 63 EB E8 AD 7C 10 CF 55 2F 8B | ... j.c...|..U/. +1B 0F 79 19 DD EA 4B BD 80 30 09 13 D8 FF D9 2A | ..y...K..0.....* +5C 7C 28 A5 8A 2C 4B 3C 98 7F F8 58 71 7C E8 44 | \|(..,K<...Xq|.D +19 6D 2A 29 71 CD 91 53 FF 0C BF 15 5D 44 35 DE | .m*)q..S....]D5. +3C 96 81 28 48 BD 59 7B A1 CD 38 4D D3 B0 F7 E6 | <..(H.Y{..8M.... +AC F2 03 2D 30 14 93 3B E9 47 69 8B 8E 61 09 93 | ...-0..;.Gi..a.. +E3 5D DD 70 42 38 08 39 B9 86 81 CD 91 AA BC 49 | .].pB8.9.......I +70 B0 38 04 5F 4D 9F 8E 4A 26 A6 72 2B 49 B7 00 | p.8._M..J&.r+I.. +9A 70 F3 65 DB 91 9D 6C 27 FB B2 E3 AB 03 80 2C | .p.e...l'......, +79 05 2F FA A0 C3 B3 0B 06 93 1E 56 EB 7E FB D7 | y./........V.~.. +27 20 DD B8 43 59 91 9D 35 0C C3 69 70 96 E4 66 | ' ..CY..5..ip..f +A5 FE 26 46 84 B8 3C AE 7C 72 D1 A1 CB C5 DC 2A | ..&F..<.|r.....* +B8 D3 2A 89 FC C9 19 00 8F 3F 9D 57 B1 D1 B9 35 | ..*......?.W...5 +B0 ED C3 5D 8A A6 D4 6D 5D FB 5D 6B 26 59 27 F4 | ...]...m].]k&Y'. +9C 87 FB A3 47 E6 91 B1 FF 51 5E 3E 1E 69 7F CD | ....G....Q^>.i.. +CC D2 F5 C8 8D 83 32 B3 B3 5E 66 61 1E F4 7D 58 | ......2..^fa..}X +E9 06 30 86 26 1E B6 73 55 E1 C8 6A B7 FA 9C A4 | ..0.&..sU..j.... +B1 4A A4 7A E9 C5 6F C8 | .J.z..o. + +Flow Record: + RecordCount = 52 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 353 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132206344 [2024-04-15 00:03:26.344] + last = 1713132206577 [2024-04-15 00:03:26.577] + received at = 1713132277673 [2024-04-15 00:04:37.673] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 54916 + dst port = 443 + src tos = 0 + fwd status = 0 + in packets = 13 + in bytes = 1409 + src addr = 157.143.34.100 + dst addr = 54.78.190.126 + out packets = 12 + out bytes = 6786 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 35.198 ms + srv latency = 0.000 ms + app latency = 0.237 ms + in payload = 173 + TLS version = TLS 1.2 + sni name = www.qobuz.com + ja3 hash = e4d448cdfe06dc1243c1eb026c74ac9a + ja4 hash = t12d220700_0d4ca5d4ec72_3304d8368043 +16 03 03 00 A8 01 00 00 A4 03 03 66 1C 52 AE 75 | ...........f.R.u +E6 5A 53 F3 ED F5 7B 78 DC B6 C7 28 DF DD 89 AC | .ZS...{x...(.... +C7 3D 97 1B 21 70 B8 32 FD 81 65 00 00 2C 00 FF | .=..!p.2..e..,.. +C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0 +C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'.......... +00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 4F 00 00 | .=.<.5./.....O.. +00 12 00 10 00 00 0D 77 77 77 2E 71 6F 62 75 7A | .......www.qobuz +2E 63 6F 6D 00 0A 00 08 00 06 00 17 00 18 00 19 | .com............ +00 0B 00 02 01 00 00 0D 00 12 00 10 04 01 02 01 | ................ +05 01 06 01 04 03 02 03 05 03 06 03 00 05 00 05 | ................ +01 00 00 00 00 00 12 00 00 00 17 00 00 | ............. + +Flow Record: + RecordCount = 53 + Flags = 0x00 PCAP v1, Unsampled + Elements = 5: 1 2 12 15 29 + size = 1374 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132383187 [2024-04-15 00:06:23.187] + last = 1713132383634 [2024-04-15 00:06:23.634] + received at = 1713132487352 [2024-04-15 00:08:07.352] + proto = 17 UDP + tcp flags = 0x00 ........ + src port = 443 + dst port = 63665 + src tos = 0 + fwd status = 0 + in packets = 20 + in bytes = 7353 + src addr = 172.217.168.42 + dst addr = 157.143.34.100 + ip exporter = 192.168.168.1 + in src mac = 00:00:5e:00:01:0b + out dst mac = 00:0d:b9:5a:49:2f + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + in payload = 1250 +C2 00 00 00 01 00 08 FC 08 64 CD 41 6A C8 CC 00 | .........d.Aj... +44 D0 D9 63 FA BA 01 0A C7 9D 2B BE A1 36 63 8F | D..c......+..6c. +77 1F 0A DA BE 57 45 8B D4 11 4F 3A CA AD F6 26 | w....WE...O:...& +41 33 91 C2 56 64 8E 78 0A F7 DB 8A 1D 6B B8 61 | A3..Vd.x.....k.a +31 09 EE D2 C7 56 FB 76 D8 E6 B0 6E AA 66 FB DF | 1....V.v...n.f.. +47 83 C3 BD 63 28 CC 57 66 AF 03 40 42 9E 26 5B | G...c(.Wf..@B.&[ +6A B3 1F F4 CC 23 BF DC 3A 77 D7 17 1B 60 FC 84 | j....#..:w...`.. +F8 52 30 A7 02 0E 34 F8 D0 DE 3C 1D 29 07 82 1B | .R0...4...<.)... +89 37 33 8A A2 AD 64 A9 10 10 ED 28 B1 F8 7C 53 | .73...d....(..|S +61 CA 61 E4 90 85 A3 EC 44 A1 B9 F7 B9 06 62 A3 | a.a.....D.....b. +5E 8A 13 1D D5 46 C7 4F E8 98 50 96 D1 9B 3C 8F | ^....F.O..P...<. +36 F2 02 B5 8B CC 75 3C 24 F5 BC 08 F7 20 EF 55 | 6.....u<$.... .U +28 BE 32 6B 4E 6F 12 4C F5 F7 41 E8 36 C9 11 85 | (.2kNo.L..A.6... +F9 19 F6 9D 04 3D 53 E4 44 8A 69 CD 40 4B 70 0F | .....=S.D.i.@Kp. +F3 78 AB 37 56 09 F2 0C 25 8A 83 E4 36 1B F8 97 | .x.7V...%...6... +5A 70 8F 6F D0 F6 29 EA 85 3B 02 BE 88 C8 F3 31 | Zp.o..)..;.....1 +B8 A6 24 84 08 41 1D 79 2D 69 B9 AB 1C C6 41 F1 | ..$..A.y-i....A. +0C 57 A3 92 93 A2 1C E8 01 25 68 E9 DF 06 CB 88 | .W.......%h..... +7B 29 B1 D7 FD 0E CB A5 23 06 F3 59 64 7E 08 2B | {)......#..Yd~.+ +AD F8 08 83 0C E0 19 0C C6 C4 46 E9 F9 BC F7 1A | ..........F..... +52 DC 1C 0F DB E5 A2 11 61 A9 4A 6F E6 EA 6D A0 | R.......a.Jo..m. +E7 A8 E3 7D 02 62 DB 79 A1 FD A3 99 54 09 00 0A | ...}.b.y....T... +03 C5 83 2B 5C 3B E8 79 1A 2A C9 F8 C6 A1 33 CA | ...+\;.y.*....3. +0D 1C E9 BC 22 D6 18 26 92 C7 C2 50 51 A8 AE 72 | ...."..&...PQ..r +BB 1D 81 0A 02 C5 29 7E 82 C3 D3 1F 8B 7B 5D 45 | ......)~.....{]E +72 DB A8 C7 B7 E5 FA A7 8D 31 18 0A FF D9 2D C7 | r........1....-. +6E 27 97 FC 3B B6 2D CE D5 DD C3 A3 5F C7 92 67 | n'..;.-....._..g +84 EF C1 D4 E1 11 5B 71 57 98 47 F0 A8 B5 4F 4C | ......[qW.G...OL +75 89 3D 1D 3C 0A 15 C1 65 FE 6B 02 78 02 45 79 | u.=.<...e.k.x.Ey +59 FB 7C FA FA 5A 9F 83 2A AF 3B A8 59 3B 27 24 | Y.|..Z..*.;.Y;'$ +57 AA 60 63 F7 E5 DF 4E 98 82 5B E1 E7 65 D5 FF | W.`c...N..[..e.. +6F 0D 45 25 02 74 08 23 D3 89 DE EC 15 17 5C 4D | o.E%.t.#......\M +3C 8F BA D0 4B 02 C0 8B B7 41 82 F9 B0 03 D5 3C | <...K....A.....< +10 1D 2B 5E FE C4 C0 88 88 D0 81 22 F8 75 2F D0 | ..+^.......".u/. +EE 03 83 CC 62 FF 31 5A 33 1B 1E B7 22 FD AD AF | ....b.1Z3..."... +CC 32 4B 0F A7 4A AE 41 B2 AE 5A 7A 37 61 46 5B | .2K..J.A..Zz7aF[ +91 9B D6 D4 26 72 8C 05 B5 7E 52 40 3C 76 CA C1 | ....&r...~R@.8....Y.S... +2A F9 D3 DD 5D 1B 14 69 0E A0 76 E4 52 60 31 B1 | *...]..i..v.R`1. +B2 3C 74 85 59 4D 02 6F 93 92 D1 8A F0 71 C8 3C | .Z....}3..... +6F 5A 57 8A 52 DE 42 36 A8 52 DA 25 8D 27 72 99 | oZW.R.B6.R.%.'r. +6C 1A 5C 5C 30 04 80 FA 8E 38 4E 4F 78 1C 20 7E | l.\\0....8NOx. ~ +FB 77 1C 89 8F 9B 75 0F DE 26 D4 B7 95 4E D9 25 | .w....u..&...N.% +AB F1 25 07 9C 6E 43 80 70 16 27 C3 28 15 0F 06 | ..%..nC.p.'.(... +1E D1 82 46 CA 68 2A E7 E8 75 BA C2 23 B6 58 7A | ...F.h*..u..#.Xz +8A 2B 6E 82 C1 3F 62 BF 27 AE D9 66 8C 48 76 C2 | .+n..?b.'..f.Hv. +A4 B7 12 AD 41 51 D8 1C 02 C2 6C 12 43 31 3E 7F | ....AQ....l.C1>. +88 8A 8B AE BC 93 95 94 C9 66 08 5E 90 98 C6 2D | .........f.^...- +B1 C3 66 EF BF AC FF 2C 79 6D 3E 9E 5F 6D 63 DC | ..f....,ym>._mc. +28 69 C2 2B 8B A3 85 77 03 AD E7 22 11 F5 2F AB | (i.+...w..."../. +F4 E9 2F 20 11 BF CE AD 0C AE D9 AF 91 5F C4 8A | ../ ........._.. +97 72 E7 A4 CC F3 B3 49 CB F8 34 F0 81 16 C2 BE | .r.....I..4..... +35 33 61 62 F5 E6 D0 2A 95 AA 45 38 B8 27 8D 42 | 53ab...*..E8.'.B +FA 0C 26 81 6A 14 6C 9D 29 8F 8B E8 C1 32 8B 3F | ..&.j.l.)....2.? +4A C6 4F 78 56 B2 F5 79 45 89 55 CF A1 B9 E8 CD | J.OxV..yE.U..... +EB 64 1C 19 9D 3C B1 7D 35 7D 61 49 60 42 FC 7E | .d...<.}5}aI`B.~ +3D 5F | =_ + +Flow Record: + RecordCount = 54 + Flags = 0x00 PCAP v1, Unsampled + Elements = 7: 1 2 5 12 15 17 29 + size = 362 + engine type = 17 + engine ID = 1 + export sysid = 0 + first = 1713132190588 [2024-04-15 00:03:10.588] + last = 1713132228174 [2024-04-15 00:03:48.174] + received at = 1713132302717 [2024-04-15 00:05:02.717] + proto = 6 TCP + tcp flags = 0x1b ...AP.SF + src port = 51573 + dst port = 443 + src tos = 0 + fwd status = 0 + in packets = 10 + in bytes = 1602 + src addr = 157.143.34.100 + dst addr = 35.231.208.158 + out packets = 8 + out bytes = 3814 + aggr flows = 2 + ip exporter = 192.168.168.1 + in src mac = 00:0d:b9:5a:49:2f + out dst mac = 00:00:5e:00:01:0b + in dst mac = 00:00:00:00:00:00 + out src mac = 00:00:00:00:00:00 + cli latency = 112.082 ms + srv latency = 0.000 ms + app latency = 0.006 ms + in payload = 182 + TLS version = TLS 1.2 + sni name = discovery.roonlabs.net + ja3 hash = e4d448cdfe06dc1243c1eb026c74ac9a + ja4 hash = t12d220700_0d4ca5d4ec72_3304d8368043 +16 03 01 00 B1 01 00 00 AD 03 03 66 1C 52 9E 01 | ...........f.R.. +F0 56 F8 48 43 57 15 76 7B BF E9 B7 80 0C 89 2E | .V.HCW.v{....... +FB 77 A8 F2 0C 2C 46 7A CB 4D 02 00 00 2C 00 FF | .w...,Fz.M...,.. +C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0 +C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'.......... +00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 58 00 00 | .=.<.5./.....X.. +00 1B 00 19 00 00 16 64 69 73 63 6F 76 65 72 79 | .......discovery +2E 72 6F 6F 6E 6C 61 62 73 2E 6E 65 74 00 0A 00 | .roonlabs.net... +08 00 06 00 17 00 18 00 19 00 0B 00 02 01 00 00 | ................ +0D 00 12 00 10 04 01 02 01 05 01 06 01 04 03 02 | ................ +03 05 03 06 03 00 05 00 05 01 00 00 00 00 00 12 | ................ +00 00 00 17 00 00 | ...... diff --git a/tmp/bidir b/tmp/bidir new file mode 100644 index 0000000000000000000000000000000000000000..851a3b6e298614fdba26bd6b8701a385f9b38276 GIT binary patch literal 1061 zcmbu8ze~eV5XUcxHC983Aa;{bT)H_phy`aSadB`F!5>3~if)AnX%N9(L=ZO}1g9?k zBL*Y5JBx#egWmVO9C-;uP!C@3-TRTx-S=I+8=J^>Ur&Z~{5q>Qmbso#S zhGmxm74uYC5OiWpY(DAm=O!qmQL-J}vuK{$-SBOO1M#05TX$WKu@Ae@j?#44n&i1n z9<97LljqIjfy?t#kEs7eoYxe8SLfjS`qDU!(Z_5j_Shqj-?A4n_OO+v!Uh+7u)zf% zY}5|E$!;6$YF$_v)}?x1i>-6lxXx$~GPd|KdoE*_bpu~?17CCl-*4zkc(cKDbX|P2oc(kVtGdN6^^0|%XKb_X|Mg4G zZXRm3_%eI3qVB)+3%3Ma@xZ%SQJs4Gy&bZnGu33^?BN6(n$EOxZ0=z$_sZ)MSKXIC Js1z^fzX4M>j+Foa literal 0 HcmV?d00001 diff --git a/tmp/v4 b/tmp/v4 new file mode 100644 index 0000000000000000000000000000000000000000..0485be560c07a89eeece98267b6eb3bcc1c7648a GIT binary patch literal 1493 zcmd;C%EZ9H!v2wGT4Wjn7%(!h0BIdo2oFRu0x>rb{{Tub18H^!1qMza4Fd`a)=eNb z6Hp~H&^T^}8U{87CT5U6Mg|iGovfPAazGA@{u!6NCJV?1$%8;Sgkmsdu$e6gWHT}F zFfi_uKgG%zF@qh*-fGOiQ28I|Oa>7Kkh4H;kPv`q;$q-n_^D#u!~>*3?jY4}H;6F| z7c@*6V0QB}+`Phd*}4g2_j4YI0+8KoKqkm;1_cnoz(A?p9uQ*~HeEv44f3=6haaaw zc7yy3vL9qO$X<}&q231D-6+@);`pkuMuuHNC`@qQ^{^esNHORh%m2q|LMdyll36T-;UM{3~kV~2J^SD z7(^4L@$Ch*Tf+ijx0BN1s{xF7(wYQy?6!s4EmniDyWaS32xCI{WRSmm4Hy_|q5cNt ze^7c8qEeUxjRu2FO5cye;`>fQOQYaxwoshuoDZT06y}tqb8o2Kd@cxovt+Nl3d`R= zkn%UIY!OyK*o|Da0E;$;xj+mG8^#7shP?c|R0gJoDZtDK0UtmrfB?pa@G$u>aTpEL T2jipD=;p!XVFfCThKU0JdnUq| literal 0 HcmV?d00001 diff --git a/tmp/v6 b/tmp/v6 new file mode 100644 index 0000000000000000000000000000000000000000..e71c275aabe32edaca16567a9d49313f759d9a81 GIT binary patch literal 1917 zcmcJQO-NKx6vxlKqw}GoHBQ>1&|A2O30nC`YSStt6vAj>1R~-UyE{yQiWd=eg&+HppSup1bQ)J&Q4NZW6uaqSG^s3{I#8C2WW%>(DJmd zf-dNuxV7Dm1@U8p!*8x*ncB%dvI7skeMn(G0-ZsPi7HcX+gd=WZlyA~d|)w1+8k~l z4h8$7eTy|>9b4YNytC<-4r`r+IM81A@!hn1*1LT7>`WfKJMZ$znziIB-ex}WF5ik3 z#e<1o!l!%#q#u|7UPZ?gOx3FlZ$)E__v%OSlD$wL)~^$aF=Za|ARH0aPe&+z6yM?n z%jf79x8pkaSU~#y#o$~}d>i2R^W2O!LrZ^p7t_7#N~;3J_m~~y^3fFg`Ka^1<2ygj zeBxdG)@d3v5AN)UepC*hzf=v+--gvqyvuimV9-9#dEoNNJwAc$uQkTkUaCs^QH;gH z_XEyl{nC8GxgX{Do_xgmiFf%v*-1UPddB6G`&&!>;&+)(yvvuhe0ue5y398{xi+8; zrPQpU{UB(anYpy!m$o}}CH<$%2!JvsKmCvVwz%hxq@>I=n) z-@mr}(SB_xtu^2Bedbzzx|dI4x75IZbE{LqZ-x1e=SKRpp_KU^q)5NVTZ4TsUakE2 zAN@#|Y5eHUt9$}RZ;XzB&OgCNgY9%H`!-v)?+ZR^m2IJ!>&L@4Ak_7M%~u;Q51a@j GLw5o51ngk| literal 0 HcmV?d00001