ELF>@I@8 @H H 110000=0M0MH=HMHM $$Std Ptd$5$5$5QtdRtd0=0M0MGNUGNUzeEV\D%=>D%5>D%->D%%>D%>D%>D% >D%>D%=D%=D%=D%=D%=DH=AHAH9tH=Ht H=AH5AH)HH?HHHtH=HtfD=EAu+UH==Ht H=:YdA]w11H%H1ff.@HH1ff.@%-ff.1f1f1fUH-1H >HH5=H1H <H5r=H1H V<H5{Y=1]DHH1ff.@ATL%?UHSI$HtDHH[ HuLHtH[1]A\UHH1H5LH=HtH1]ff.@HsAUATUSHHHHH-IHu8HHHLHH1H[]A\A]@H5NLyL-@LL_WH5.LHH5#L1H5LH5 LH5LH5LH5L*H5LuSH\H5VLL-Uzu&HHH@LLEt)H5L2u>HwHHQHpfH9;@H5 Lt5H5LuJH#H"H@HqHfH@H5Lqu7HHfDHH }H5L'uHH{HOH5 LuHnHMHO!H5<LuH`HH;1LH5H=FFHf.AWAVAUATIUSHL-7Ht$AUS(YHH/H@ Hv;HuHPHHj HhHEEE ML1H5;IHAEsf=:tqM1L-IE:HI9~GAtHLHH:L0LdtH5LQu=IEDH5i:LHD$E1H(HD[]A\A]A^A_@H5Lu-IEXfH5jH=1fDH5LuUI?1E H9HHH@H(HhkLH5nH=1H5H=1LH=Y9tdH5H91A]kHMuAH591A=ff.UHSHHHtH8E1H(HHD[]Af.AU1H5'ATUH-SHH H8HHL-NfDCA$\tAD$LLLHC1H[ H;uH48H8[7{uH8H8s7C{uH8H8j7C{ uH7H86C Lct SAA$ AD$NfDC C011C5DH1[]A\A]ff.AW1IH5AVIAUL-ATLUSHIc_LAo\1H5L)I_pHى< t< tAV9t HuEfIND9~ HIcHHL$HL$IcGLA_\IWp)HluafPEH< u1IADH5oL 5 H5HBJ H5H&H[]A\A]A^A_f.H5LqAVHL$1H5LIAQMcf H5bILi H5QLtH5LAVHI+GpDd  IcFH{)H4HcHgD+AFA)G\A)G`A)efDIE1DLH5-1fH5L1f.H5yLaI+opDe EAW\IcI_p IcFH{D))H4HcHD+AFA)G\A)G`H0cIcOLIOpLH5U1CH5LI+opDe lH5nLAVHI+GpDd AUH=IATUHSHHdH%(HD$1HAą"HMH$HH= 1AąAEH53H=WAąH-H N11H5H0AąueH .01H5H0AąuEH /1H5H0Aąu%HN/uhH9/H82HHHD$dH+%(uSHD[]A\A]AEDDfHxH5H1{HHrsyslog.snarepmsnareglblpmsnare.cparserdatetimemodExitmodGetIDgetTypegetKeepTypebeginCnfLoadendCnfLoadcheckCnfactivateCnffreeCnfgetModCnfNamesetModCnfparse2GetParserNamenewParserInstfreeParserInstisCompatibleWithFeaturenewParserInst (pmsnare) pmsnare: parser param blk: pmsnare: Begin endCnfLoad MSWinEventLogLinuxKAuditobjGetObjInterfaceregCfSysLineHdlr8.2310.0-4.el9pmsnare: free parser instance %p entry point '%s' not present in module parser.escapecontrolcharactersonreceiveparser.escapecontrolcharactertabparser.escapecontrolcharacterscstyleparser.controlcharacterescapeprefixpmsnare: program error, non-handled param '%s' pmsnare: Snare parser will treat '%s' as tab. Message will now be parsed by fix Snare parser. pmsnare: msg to look at: [%d]'%s' pmsnare: Message is too short to be Snare! pmsnare: tab separated message pmsnare: tab [%d]'%s' msg at the first separator: [%d]'%s' Found a non-syslog Windows Snare message. Found a non-syslog Linux Snare message. Found a syslog Windows Snare message. pmsnare: Found a syslog Linux Snare message. pmsnare: new message: [%d]'%s' pmsnare: tab [%d]'%s' msg after the timestamp and hostname: [%d]'%s' snare parser init called, compiled with version %s ;,@T h|,< L`|l`zRx $0FJ w?:*3$"D\ p| x[EU(,MFHD uCBX1Ek@t(OBA A(G0S (A ABBE HtFBB B(D0A8DP9 8D0A(B BBBE (FEIL ^ DAA 80EFKA H(G0(C ABBHlMFNE I(D0A8DP 8F0A(B BBBK 8FLA D(G@  (D ABBI `@M   $!0M8Mo 7 HOPP ooxooHoHM0@P`p  X2 1202`Spmsnare.so-8.2310.0-4.el9.x86_64.debug g7zXZִF!t/Q]?Eh=ڊ2N 1dP>^NDpL2$~|U;]k#Dop PXq76dCbU9d)EO`iKR;zٵCn WYAb.E1Yr(I1w ZGx'/qx3䵤#fugT=phHen.ֺkM^/[n\EA1Y|{2@wLF$b!r2NhSǿNBF[bUJ^LpE/vw@b\Kk`؆0k 3SB{׆y.LNW>ƌ@WVîr ?pUڰгcKtfS;D3\yܼmjPP9M9J!.lInsf3X7ʱ~ <#֖8u/Q>,]wH<;Uk߻WH*Xt=B6C1hk_} hɨN0*{䊺;eNY<(LYuzhC!SjHs\ 2' ='I7c@y~vJ!fg<unà8 )xԳYЋ'swkKt]+ť cJ ЏA䶩ʯ Bܶ"5\N0za#'eO%'B^E& -zyz̟E>^k8"F<O $*֞b,Z W e/mBgI+Iu5 ~仫|3R NQ~eE۠5F# "uL}6C*H5rn[w w=R֨߹΍ a\K7`'\'͹Cl -&d6Sޟ@i۩FIn#lc EE{wd@\xL ްyx g$C/^lai`3 __١EHo٤L]6e6ó (ijPvbI>T&Gña^ʙa#gYZ.shstrtab.note.gnu.property.note.gnu.build-id.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.sec.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.data.rel.ro.dynamic.got.data.bss.gnu_debuglink.gnu_debugdata  $1o$; C7KoHH*Xoxx0gPqBP{v  2$!$! 200$$5$5550M0=8M8=@M@=HMH=HOH?P@ SC C,CpH