ELF>@I@8 @H H 110000=0M0MH=HMHM $$Std Ptd$5$5$5QtdRtd0=0M0MGNUGNUcX拉!J(' YsU Zmf zs, F" __gmon_start___ITM_deregisterTMCloneTable_ITM_registerTMCloneTable__cxa_finalizefreer_dbgprintfstrcmpDebugmallocnvlstGetParamscnfparamvalsDestructes_str2cstrcnfparamsPrintcallocstrlenstrncasecmpmemmovemodInitloadConf__stack_chk_faillibcap-ng.so.0libc.so.6pmsnare.soGLIBC_2.4GLIBC_2.2.5 ii !ui +0M8M`@M@MSX2S1S2S02SSOOOO OO`OhOpOxOOO O O O OOOOOHH?HtH5*?%+?hhhhhhhhqhah Qh Ah 1h !h %E>D%=>D%5>D%->D%%>D%>D%>D% >D%>D%=D%=D%=D%=D%=DH=AHAH9tH=Ht H=AH5AH)HH?HHHtH=HtfD=eAu+UH==Ht H=:Yd=A]w11H%H1ff.@HH1ff.@%-ff.1f1f1fUH-1H >HH5=H1H <H5r=H1H V<H5{Y=1]DHH1ff.@ATL%?UHSI$HtDHH[ HuLHtH[1]A\UHH1H5LH=HtH1]ff.@HsAUATUSHHHHH-IHu8HHHLHH1H[]A\A]@H5NLyL-@LL_WH5.LHH5#L1H5LH5 LH5LH5LH5L*H5LuSH\H5VLL-Uzu&HHH@LLEt)H5L2u>HwHHQHpfH9;@H5 Lt5H5LuJH#H"H@HqHfH@H5Lqu7HHfDHH }H5L'uHH{HOH5 LuHnHMHO!H5<LuH`HH;1LH5H=FFHf.AWAVAUATIUSHL-7Ht$AUS(YHH/H@ H;HuHPHHj HhHEEE ML1H5(;IHAEsf=;tqM1L-IE:HI9~GAtHLHH:L0LdtH5LQu=IEDH5:LHD$E1H(HD[]A\A]A^A_@H5Lu-IEXfH5jH=1fDH5LuUI?1E H:HHH@H(HhkLH5nH=1H5H=1LH=y9tdH5h91A]kHMuAH5:91A=ff.UHSHHHtH9E1H(HHD[]Af.AU1H5'ATUH-SHH H8HHL-NfDCA$\tAD$LLLHC1H[ H;uHT8H8k7{uH<8H87C{uH#8H8z7C{ uH 8H87C Lct SAA$ AD$NfDC C011C5DH1[]A\A]ff.AW1IH5AVIAUL-ATLUSHIc_LAo\1H5L)I_pHى< t< tAV9t HuEfIND9~ HIcHHL$HL$IcGLA_\IWp)HluafPEH< u1IADH5oL 5 H5HBJ H5H&H[]A\A]A^A_f.H5LqAVHL$1H5LIAQMcf H5bILi H5QLtH5LAVHI+GpDd  IcFH{)H4HcHgD+AFA)G\A)G`A)efDIE1DLH5-1fH5L1f.H5yLaI+opDe EAW\IcI_p IcFH{D))H4HcHD+AFA)G\A)G`H0cIcOLIOpLH5U1CH5LI+opDe lH5nLAVHI+GpDd AUH=IATUHSHHdH%(HD$1HAą"HMH$HH= 1AąAEH53H=WAąH-H N11H5H0AąueH .01H5H0AąuEH /1H5H0Aąu%HN/uhH9/H82HHHD$dH+%(uSHD[]A\A]AEDDfHxH5H1{HHrsyslog.snarepmsnareglblpmsnare.cparserdatetimemodExitmodGetIDgetTypegetKeepTypebeginCnfLoadendCnfLoadcheckCnfactivateCnffreeCnfgetModCnfNamesetModCnfparse2GetParserNamenewParserInstfreeParserInstisCompatibleWithFeaturenewParserInst (pmsnare) pmsnare: parser param blk: pmsnare: Begin endCnfLoad MSWinEventLogLinuxKAuditobjGetObjInterfaceregCfSysLineHdlr8.2412.0-1.el9pmsnare: free parser instance %p entry point '%s' not present in module parser.escapecontrolcharactersonreceiveparser.escapecontrolcharactertabparser.escapecontrolcharacterscstyleparser.controlcharacterescapeprefixpmsnare: program error, non-handled param '%s' pmsnare: Snare parser will treat '%s' as tab. Message will now be parsed by fix Snare parser. pmsnare: msg to look at: [%d]'%s' pmsnare: Message is too short to be Snare! pmsnare: tab separated message pmsnare: tab [%d]'%s' msg at the first separator: [%d]'%s' Found a non-syslog Windows Snare message. Found a non-syslog Linux Snare message. Found a syslog Windows Snare message. pmsnare: Found a syslog Linux Snare message. pmsnare: new message: [%d]'%s' pmsnare: tab [%d]'%s' msg after the timestamp and hostname: [%d]'%s' snare parser init called, compiled with version %s ;,@T h|,< L`|l`zRx $0FJ w?:*3$"D\ p| x[EU(,MFHD uCBX1Ek@t(OBA A(G0S (A ABBE HtFBB B(D0A8DP9 8D0A(B BBBE (FEIL ^ DAA 80EFKA H(G0(C ABBHlMFNE I(D0A8DP 8F0A(B BBBK 8FLA D(G@  (D ABBI `@M   $!0M8Mo 7 HOPP ooxooHoHM0@P`p  X2 1202Spmsnare.so-8.2412.0-1.el9.x86_64.debug@7zXZִF!t/M]?Eh=ڊ2N 1dP>^NDpL2$~|U;]k#Dop PXq76dCbU9,p,/q\}.+S7/.o\S7#5j\#F g~^\nCXa܈($T18E(/]&ɲ;!T?k[ q .&d}[t33>&>዆u/lG?':HfΛ-10v"p$3En_Xz`)'{~(Sw g~F(OC9Ә4!IཙZn_1!NV]; PPs 3ةp *h' ט:wŦ]9HQ׌X|w%YXYԻs 6UEͫ>AOD&my֥auk+GDg+>bWk -v89Q(ZxUZũokwē/ fcW|T ȺTbPW[xݢC]4 R>^GgL{5LzWx ڨRZF"o֚ xtjPA1_I3ALٸ,V*^ /R;GZ^:{aS6?>?Oh AU]GO^J#/=7yfTx z.3Ah){RϹ!FA=%>O߿'>}a 6A7Yۉ2Hq7%Gle&skf-#W ΟZm@A' 㟔C>=ʟ|vȀ(Y!-*1/bNiHNC&cl@%Ĉ`cjua(JHjkŹ$p0U;t >һ\bJA5,O=Z{wЀ*A#䑀gYZ.shstrtab.note.gnu.property.note.gnu.build-id.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.sec.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.data.rel.ro.dynamic.got.data.bss.gnu_debuglink.gnu_debugdata  $1o$; C7KoHH*Xoxx0gPqBP{v  2$!$! 200$$5$5550M0=8M8=@M@=HMH=HOH?P@ SC C,CH