ELF          >            @       XE          @ 8  @                                  	       	                                        a      a                    0       0       0                               P=      PM      PM                               `=      `M      `M                                                                                                $       $              Std                                            Ptd   5      5      5                           Qtd                                                  Rtd   P=      PM      PM                                  GNU                      GNU r/}	?}(!`                              Ys                            U                                             Z                                                                                                              m                                            f                                             z                      s                                                                                                              ,                       F   "                                     __gmon_start__ _ITM_deregisterTMCloneTable _ITM_registerTMCloneTable __cxa_finalize free r_dbgprintf strcmp Debug malloc nvlstGetParams cnfparamvalsDestruct es_str2cstr cnfparamsPrint calloc strlen strncasecmp memmove modInit loadConf __stack_chk_fail libc.so.6 pmsnare.so GLIBC_2.4 GLIBC_2.2.5                                         ii        ui	         PM                   XM             P       P              P      S             P2      S             1      S              2      S             (2      S             S      O                    O                    O                    O                    O                    O                    hO                    pO                    xO                    O                    O                    O         	           O         
           O                    O                    O                    O                    O                    O                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    HH?  HtH     52?  %4?  @ h    fh   fh   fh   fh   fh   fh   fh   rfh   bfh	   Rfh
   Bfh   2fh   "f%>  fD  %N>  fD  %F>  fD  %>>  fD  %6>  fD  %.>  fD  %&>  fD  %>  fD  %>  fD  %>  fD  %>  fD  %=  fD  %=  fD  %=  fD  H=A  HA  H9tH=  Ht	        H=A  H5A  H)HH?HHHtH=  HtfD      =uA   u+UH==   HtH==  dMA  ]     w       1     1 H5  H1ff.     @ H#  H1ff.     @ %-ff.     1f     1f     1f     UHD>  1H5  HSH  HH=  H1H=  H5  =  H1H~<  H5  =  H]1f     HH1ff.     @ UHAUATISHL-?  I] Ht@ HH[ HuLMtLH1[A\A]]D  UH1H57  HSHH=  HHtHH]1 Hw  UHAVAUATISH  H    L-  HLu7HI$LH  HjI$1[A\A]A^] H5>  Hi  L50  HLOW  H5  H8  H5  H!  H5	  H
  H5  H  H5  H  H5  H  H5  H.  H5  HuSH<    H5F  HL5E  ju&HI$fD  H@ LH5t)H5  H"u>HWI$fD  H1I$r     H<@ H5  Ht=H5  HuJHI$$f.     H@ Hi  I$H  @ H5  Hau7H   I$D  H  H~H5y  HuHI$}HOH5  HuHMI$NH= H5*  HuH>I$I<$ 1HH5  H=2  2HfD  UHAWAVIAUATSHL%7  HuA$a  (   GHH  H@     H;  H  HPH  HZ HXHCC M   1H5;  LHEH  A$  E1f=:   LuL=  u"g    I:  IID9~GA~ tLLHH:  L LLtH5  L9u=ICD  H}H5m:  xHEE1HHD[A\A]A^A_]@ H5  Lu5ICWf.     H5J  H=m  1kfD  H5  LuuI>1s C        H9  Htf fHnfl dMtH59  1AH@ LH5&  H=  1 H5  H=  1HuH=89  35H5'9  1A]*     UHATI   SH   HtH9  1L H[A\]úff.      U1H5  HAVAUL-  ATLSH8  HH  L5g  MD  C   LcC\t  AD$ @ LLLLC1H[ H   ;uHD8  H8k7  {uH,8  H87  C{uH8  H8z7  C{ uH7  H87  CtSEC	   LcC Qf     CC011 LcC1f     [1A\A]A^]D  U1HAWIH5r  AVIAUL-  ATLSHIc_LEg\1H5|  LA)I_pHDwAw   @ <	tAV9tHAt< uEVINE9~&IcHHDUHMHMDUą   IcWLAG\Iwp)LLur  f.     I[  A9 uD`IY1DIEH5C  LA     H5  HE     H5  H  H[A\A]A^A_]D  H5  LQAVHM1IEH5  L2Ic~   H5C  HH}H}ȅ     H5-  yxH5  LAVHI+GpL IcFH{MA)H4McLCBD# AFMȃA)G\AFA)G`A+NAQ E1DH5  L1q@ H5y  L1WfH5Q  LAI+_pCEg\HcI_p H{A)IcFA)H4IcHUHUD AFA)G\AFA)G`H0   ]IcOLDIOpLH5!  1<H5  LI+_pC`A H5)  LyAVHI+GpLD  UH=  HAVIAUHuIATISHdH%(   HE1щÅ  M  M   HEH   H=0  ЉÅ   A   H53  H=%  AԉÅ   L%  H<1  1H5  L0  ÅudH0  1H5  L0  ÅuEH~/  1H5  Lt0  Åu&H/   uiH
/  H82  f     HIE HEdH+%(   uSH[A\A]A^]    f     ۸D@ HH  H5  L1z  HH                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               rsyslog.snare pmsnare glbl pmsnare.c parser datetime modExit modGetID getType getKeepType beginCnfLoad endCnfLoad checkCnf activateCnf freeCnf getModCnfName setModCnf parse2 GetParserName newParserInst freeParserInst isCompatibleWithFeature newParserInst (pmsnare)
 pmsnare: parser param blk:
 pmsnare: Begin endCnfLoad
 MSWinEventLog LinuxKAudit objGetObjInterface regCfSysLineHdlr 8.2312.0 pmsnare: free parser instance %p
       entry point '%s' not present in module
 parser.escapecontrolcharactersonreceive parser.escapecontrolcharactertab        parser.escapecontrolcharacterscstyle    parser.controlcharacterescapeprefix     pmsnare: program error, non-handled param '%s'
 pmsnare: Snare parser will treat '%s' as tab.
  Message will now be parsed by fix Snare parser.
        pmsnare: msg to look at: [%d]'%s'
      pmsnare: Message is too short to be Snare!
     pmsnare: tab separated message
 pmsnare: tab [%d]'%s'	msg at the first separator: [%d]'%s'
     Found a non-syslog Windows Snare message.
      Found a non-syslog Linux Snare message.
        Found a syslog Windows Snare message.
  pmsnare: Found a syslog Linux Snare message.
   pmsnare: new message: [%d]'%s'
 pmsnare: tab [%d]'%s'	msg after the timestamp and hostname: [%d]'%s'
   snare parser init called, compiled with version %s
 ;              $  8  L  `  t      $  4      $$  dD  |      4   0         zR x  $      0    FJw ?9*3$"       D                 \                 t   X             T             P             \             h             t             p             l             hg    ESAM      8         $   L  [    ECDHF     t  =    EOAg4        NCFDY
D  ,     p   ECDLK
E  $     B    ECBIg
A  (   $  K   ELDM(   ,   P  ,k   EEBLEQ<
F,     l   EJBIEH!
H                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            P                                                      T!             PM                           XM                    o                                    
       (                           PO             8                                                     P      	                            o           o    h      o           o    8      o                                                                                           `M                      0      @      P      `      p                                                                                                       P                                                                                                                                                                                                                                                                                                                                                                                                                           
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               P2      
       1              2             (2                   S      /usr/lib/debug/.dwz/x86_64-linux-gnu/rsyslog.debug 2LiDg͑Ϛ d71072c02f7def093f7d1228d921bae6b6608b.debug     .shstrtab .note.gnu.property .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.got .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .dynamic .data .bss .gnu_debugaltlink .gnu_debuglink                                                                                                                                                  $                              1   o                   $                             ;                                                   C                         (                             K   o       8      8      *                            X   o       h      h      0                            g                         P                           q      B                   8                          {                                                         v                                                                                                                                                                                               r                                          T!      T!                                          2        0       0                                               5      5                                                 5      5                                                PM      P=                                                XM      X=                                                `M      `=                                              PO      P?                                                 P       @                                                 S      C                                                           C      G                                                    D      4                                                    LD                                   