ELF>.@@8 @@@@ MMppp""  88800hhhDDStd88800PtdQtdRtdPP/lib64/ld-linux-x86-64.so.2 GNUGNU_"Oij6+GNUaaemt,SxCt4U+nPgte(C %dDNiQ%W[A |y1a $b`I , F"_ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTable__cxa_finalize__libc_start_main__cxa_atexitapr_pallocapr_filepath_merge__stack_chk_failstderr__fprintf_chkfwritefputcapr_time_nowapr_snprintfstrlenapr_file_write_fullapr_vsnprintfapr_time_exp_ltapr_strftimefputsapr_global_mutex_trylockapr_pool_create_exapr_file_openapr_hash_firstapr_hash_thisapr_hash_nextapr_file_closeapr_file_removeapr_file_renameapr_file_truncapr_pool_destroyapr_global_mutex_unlockapr_global_mutex_lock__ctype_b_locapr_sleepapr_file_flushapr_table_makeapr_file_getsapr_pstrmemdupapr_table_setapr_table_getstrtolapr_strerrorapr_signal_description_getapr_thread_pool_getapr_array_makeapr_hash_makeapr_global_mutex_createapr_thread_mutex_createapr_array_pushpcre_compileapr_thread_mutex_trylockapr_hash_setfreeapr_array_popapr_thread_mutex_unlockpcre_execapr_psprintfapr_statfopenfcloseapr_pool_clearapr_thread_exitapr_thread_mutex_lockapr_file_lockapr_file_mtime_setapr_threadattr_createapr_threadattr_detach_setapr_threadattr_stacksize_setapr_thread_createmallocstrdupapr_atoi64apr_signal_threadapr_file_open_stdin__memmove_chkapr_file_readapr_app_initializeapr_terminategetpidapr_setup_signal_threadapr_getopt_initapr_getoptapr_version_stringpcre_versioncurl_version_infocurl_versioncurl_slist_free_allcurl_global_cleanupcurl_easy_initcurl_easy_setoptcurl_easy_performcurl_slist_appendcurl_global_initcurl_easy_getinfolibapr-1.so.0libcurl-gnutls.so.4libpcre.so.3libc.so.6GLIBC_2.4GLIBC_2.3GLIBC_2.3.4GLIBC_2.34GLIBC_2.2.5CURL_GNUTLS_3`ii ii "ti ,8ui C#= O/P/ȯaЯ د<T\^ (08 @ H P X`hpxȭЭح !"#$%&' (()0*8+@,H-P.X/`0h1p2x3456789:;=Ȯ>Ю?خ@ABCDEFGH I(J0K8L@MHNPOXP`QhRpSxUVWXYZ[]_`HHHtH5Œ%Ìhhhhhhhhqhah Qh Ah 1h !h hhhhhhhhhhqhahQhAh1h!hhhh h!h"h#h$h%h&h'qh(ah)Qh*Ah+1h,!h-h.h/h0h1h2h3h4h5h6h7qh8ah9Qh:Ah;1h<!h=h>h?h@hAhBhChDhEhFhGqhHahIQhJAhK1hL!hMhNhOhPhQhRhShThUhVhWqhXahYQ%D% D%D%D%D%D%D%݆D%ՆD%͆D%ņD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%݅D%ՅD%ͅD%ŅD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%݄D%ՄD%̈́D%ńD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%EDAT1USH0|$ H|$ H4$HdH%(HD$(1H=!AH=P A111H=aK111H=Q'T$ ~LH $H5+H|$u3Ld$ Hl$HMH|$LHHtw4D$P^\xHHfAFHAAFAAH9uHL[]\"HfAHH9t<"d<\u\\HfQِ\rHfiɐA\vHfDY\nHfAf\tHfY뉐\bHfAvfDHeHE1L[]H,1ff.fHdH%(HD$1H$HtmLH5H HH$Ht1x;HHDHT$dH+%(uH@1ҁ9NHE1ifSH}1H ?HCGH;KH 1H=OG2H3 H H=? H /H=HGH "H=_GH [H=H?ATUSHH $HH $H fH-?dH%(H$ 1AH|$ IE)D$Hl$HH>HEL MIH4ׂCHHHHH?HH>)1H9H=}HL$HHH$ dH+%(u H []A\ff.AWAVAUATUSHH $HH $HH$!HL$!L$!t@)$ !)$0!)$@!)$P!)$`!)$p!)$!)$!dH%(H$ 1H$f9{)$)$HH$H}/H$ dH+%(HĨ![]A\A]A^A_fDHL$PH$!D$PHD$XLl$ Lt$pL$H$ D$T0LHD$`L$D 3|DL$ QLHHt$MLH <dAWH<1UDL$ALLH-{XZHt(L LLHHf.HIzLH0@AWH<AVAUATUSH8H <{dH%(H$(1L$ Hl$ HD$LL$ L1H zH<1HH4ׂCHHHH?HH;)1 ~z1HC1H=zz=H;11H|$111LD$H|$LVQAąHH|$1HH HzP J1H:H@H|$1HHPHpH|$1H޺HyMH9h HC11(H5ay1ZHHtbHf:Ll$fDHL111HD$1AH|$HPHpDH|$1H޺0HxHHuDHB11H|$.Ht$LHT$H=xLmHT$H5xLYHt$LH=x1H+:11)H|$11HA H=kxH$(dH+%(H8[]A\A]A^A_DL11H9HiA11H|$H=w-H.911spfDH@11SH=w@f1@AWAVAUIATUSH9H4$u yItH$H[]IA\A]A^A_fAHL1E1C'IHI9t_ tWHD$t%8HL$HHf% fHL$HDH uǽDC'L1A H~~Mux<+HADFL9s`AHHz<%uLBM9s;I?DErEZAvA v ErAwGA0A6wLrHFL9rDDC߃7A@DDG؃A@Ѓ7AAACHDOfDWUHr7117uN(ut@'fuuu4H R611Ha? H=uHt{4A11H 6Hg?ATUSHH $H H=]u dH%(H$1HtHL)uH5t1H|$H\$@HT$H=~>wDd$HEtDH8ux u @Dd$HHHDfHADB uE{A#qI@tAL$IDJ tH=LtLH) H}HA$HDG tAL$IHDO utBLDHHIzuL9v(ADG tJHBDO uA<$"tH=WsLfI9s:"uIH$dH+%(u)H []A\ÿH41QlH=11-H r11HV=ATH54HH=rdH%(H$1HtHrH=frH5g4HHt H6rH=?rH5I4HHt 1qLrH5qH=RrMAąH 211H<H=qH533HHt 1pH=qH53HHt'1 RvpM pH0q~BHu311i=ypHc kp11HT<H cq11H@3H p11H:3 ,p11H+3w o11H!3\ o11H3AHZp1H 3HH1!H=RpH52HHt) 1 H21jo1H=pH52zHHt11 H21o1H=oH52.HH H21HHo1NH=oH52HHt$H21H)oH1H=@oH5k2HHt) 1H^21Tn1H=nH5P2hHHt) 1HA21 n1H=nH512$HHt$H'21HnH1HH=ynH52HHt11 1xm m11H1H=-nH51HHt11 xCm =m11H1H=mH51MHHt11 xl l11H1dH=mH51HHt11 Mxl l11Hf1H=ImH5g1HHHX11HHl1H=mH5C1rHHHlH/111H=lH5!17HH>HllH111_H=lH51HHH)lH011$H=UlH50HHt 1 AD%kH$dH+%(HD11H0A\9k*kvHH k1IH61oH711PH7Hv7H=7H7ff.fHwoH*HcH>1H(011H@1H/11H@1H/11HÉ|$ L$ 1IH671oH611P1H4/=iAVAUMATE1UHHHtfDBD%< t < t IL9uwCH-*HcH>LLHHHM/LH1H1]A\A]A^1DLLHHLH/H1iH1]A\A]A^HL$H0EDF HL$HEHHt#fH9HH@DN uLrLLH)I)LLHH6.LH1DLLHHLH-H1H1]A\A]A^LLHHjLH-H1QH1]A\A]A^LKLHH-H-LH1^HAW@AVAUATUSH8H=hdH%(H$(1HD$]H6hHH=NhHgHcH 2hH5gH=g2H hH=gRAą85fH=gHfHfHfL5@H1H1QRf_t H1HfDxDDffAfL$@fA!@ &NH1BH1cA*H1*L+NH1H=eD9%eH.HH11Ҿ'H1'H1HeH1ke1Ҿ@H1r1ҾQH1ad H1>f H1 HifE@Ll$Ld$E1L5Z%LLLHdHLL%%E1LLHH$(dH+%(H8[]A\A]A^A_DD$AE1H11JRfD$E1E12H:&11Ht$ nH0H11lHt$ ;H0HLH11/LEDAWfH,)AVAUIATUSHHHxdH%(H$h1)$`)$p)$)$)$)$)$)$)$)$)$)$)$ )$0)$@)$PH5b11H|$HDbE D$ AE1E1AE1H>0LnH=b=1H(LAMtK1HK0L&Iw1ɺLH=GbIL1H#0LH=TbOHL8H=aLL|L1Hv'L1H/H=b$1H^'L^ `1IWH=aIOD$ 1E1jH$`'HHHD$011H5%qHt$ HdHHY''HHH1H|$H5N%H@ HHD$('H1uH1H$HtH|$(D$ DD$ ELL$8HL$L1H0h^H^D$ t ]9{ ]~(H'%L1i=]Hc:HtAH7IWIwH|$HDLIH,1AH|$H1LH$]=^EH*L1j1H*LTH=]=H=v]1ɺLE.H=]L8H=\H/LH1-d]H=d]H|$HL1H#1LMH$hdH+%("Hx1[]A\A]A^A_fIWIwH|$HnH+HL1AOf.LD$H.1L#D$ t [9A>fHT$P H1HD$P#LD$0LLL$HL$PD$ 1H+LD$PDT$ MEnI!ILL$0HL$L1HF-d[H[1H-L31LH(H=[=H=?[1ɺLIwIL@H)*X@HH)L1$$$$$D$D$HL$@fH0lDHA(L1BH=ZFLL$8HL$ELH*1 @B3qZHYHL$ELH)11H!L1LH9'H=Z=;=YKHT$`0H1YHXzHT$XH10fY=( gHL$L$XLHp*D$`AH1'LH==Y`H9'1L1LH)&H=Y=^Hv+L1WH=X[7Ld$LHL*Ht$HL} HL$L1H)LD$HL$0L1H)A{HHj*L1M11Hn"H"11H=MP6fDAWHHy1AVL=#L5AUI4ׂCATIU1SH[D0LHE0H~HH)H=?KL 'SɐLL1LvLu.HH+ KHH?IHc[KHH)H9+HH+5LHH?IHc1KHHH)H9~nLL1HHK K;J}HK;B }H"L1@iH"L1HݿfH$!L1=pK~'5\K KuJLH11LJHcHYJH!>DH L1r}ff.UH1HHBH=+u1]ÉH1Htff.AWAVAUATUSHXH=JdH%(H$H1HD$0H5cJH|$8HNƅHD$(111HHD$E1E11E1lD$E1D$D$@=H[H|$0 D$D$D$I9v{DDHTIH[< tI9wHT: IJ\-EH|$(LHL)H2!1H1I_E1IL9rEIL)L9AE1D |$|$HD$0DT$ H11XH|$(>H|$111.D$DT$E=Hu=GtHHH H$HdH+%(HX[]A\A]A^A_f.H1AH誽H|$(HHH1HHD HH "GDB PH 1wHAXAYH|$(D$2DT$H|$(LJt-DT$L).H1H1DT$E_11DHDT$L)MJt-HM)LLD$XHT$H|$(HLD$L1IH1LD$LDT$L)HI9MAE1D |$H|$8Nt%HT$0L)LDT$HD$0@DT$D$DpFEhD$D$Ld$0E1I9S@DT$H1Mt$8IL1HA_XDT$mEDT$H|$(HH11H1E1E1DT$E1D|$=EHT$0DT$EtrH|$(L>HL$01HpI1!DT$H11H1E1E1E1D|$ATH1H> 1DT$Ht$@H1H1D$DT$D$e11HDb=Dt%\E'n5Du9HD CP uЋH H11HtDҿH11c~f.@HC1鎺HHXdD$h@((\S+)\ (.*?)\ (\S+)^(\S+)\ (\S+)\ (\S+)\ (\S+)\ \[([^:]+):(\d+:\d+:\d+)\ ([^\]]+)\]\ "(.*)"\ (\d+)\ (\S+)\ "(.*)"\ "(.*)"\ (\S+)\ "(.*)"\ /?(\S+)\ (\d+)\ (\d+)\ (\S+)(.*)$0123456789abcdef2.9.5 Options: -h This help INOUT%u %s: %s %a %b %d %H:%M:%S %Y[%s] [%d] [%d/%pp] %s %s.new%s.old%u Checkpoint not required.Checkpoint started.Failed to create file: %sCheckpoint completed.Shutting downMemory allocation failed!CollectorRootErrorLogErrorLogLevelStartupDelayTLSProtocolDelaying execution for %dms.CollectorRoot=%sErrorLog=%sErrorLogLevel=%dStartupDelay=%dTLSProtocol=%dcURL version=%sCheckpointIntervalCheckpointInterval=%dInsecureNoCheckCertInsecureNoCheckCert=%dQueuePathQueuePath=%sLockFileLockFile=%sServerErrorTimeoutServerErrorTimeout=%dTransactionDelayTransactionDelay=%dTransactionLogTransactionLog=%sMaxConnectionsMaxConnections=%dMaxWorkerRequestsMaxWorkerRequests=%dKeepAliveKeepAlive=%dKeepAliveTimeoutKeepAliveTimeout=%dLogStorageDirLogStorageDir=%sConsoleURIConsoleURI=%sSensorUsernameSensorUsername=%sSensorPasswordSensorPassword=%sKeepEntriesKeepEntries=%dCaught SIGINT, shutting down.Caught SIGHUP, ignored.Caught SIGALRM, ignored.Caught SIGTSTP, ignored.CURL: %sCURL: HEADER_IN %sCURL: HEADER_OUT %sCURL: DATA_IN %sCURL: DATA_OUT %sWorker thread starting.Worker fetch started.Worker fetch completed.Processing entry.Regular expression matched.%s/%.*sX-Content-Hash: %.*sX-ForensicLog-Summary: %s%s:%sExpect:rbRemoving: %sCould not open "%s": %sWaiting for lock on "%s": %sCould not lock "%s": %sLocked: %sCould not stat "%s": %sUnlocked: %sSet mtime: %sSleeping for %d msec.Worker processing completed.Worker thread completed.We were told to shut down.Destroying thread_pool.Creating thread_pool.Worker creation started.Queue locking thread mutex.Queue unlocking thread mutex.Management thread: Starting.Management thread: Exiting.Management thread: ProcessingSignal thread: Starting.Signal thread: Error %dRead %lu bytes from pipeRecycling tmp_pool.fvh1.7.07.74.0ModSecurity Log Collector (mlogc) v%s Usage: mlogc [options] /path/to/the/mlogc.conf -f Force depletion of queue on exit -v Version information Checkpoint locking global mutex.Checkpoint waiting on global mutex.Checkpoint unlocking global mutex.Checkpoint wrote %d queued entries to new queue.Checkpoint wrote %d additional entries to new queue.ModSecurity Audit Log Collector %s terminating normally.ModSecurity Audit Log Collector %s terminating with error %dUnable to open configuration file: %sError reading from the configuration file.Failed to open the error log %s: %s Configuring ModSecurity Audit Log Collector %s.Continuing execution after %dms delay.QueuePath not defined in the configuration file.Missing mandatory parameter LogStorageDir. Missing mandatory parameter ConsoleURI. Missing mandatory parameter SensorUsername. Missing mandatory parameter SensorPassword. Caught SIGTERM, shutting down.Caught unexpected signal %d: %sFailed to create global mutex: %sFailed to create thread mutex: %sTLSv1.2 is unsupported in cURL %d.%d.%dFailed to compile pattern: %s Shutting down due to server error.Worker shutdown locking thread mutex.Worker fetch locking thread mutex.Worker fetch waiting on thread mutex.Removing previous entry from storage.Getting one entry from the queue.Worker fetch unlocking thread mutex.No more work for this thread, exiting.Invalid entry (failed to match regex): %sInvalid entry (PCRE error %d): %sSTAT "%s" {uid=%d; gid=%d; size=%ld; csize=%ld; atime=%ld; ctime=%ld; mtime=%ld}File found (%ld bytes), skipping.File found (%ld bytes), activating cURL.Invalid entry (failed to open file for reading): %sRequest returned with status "%ld %s": %sFlagging server as errored after failure to retrieve response code for entry %s (cURL code %d): Possible SSL negotiation errorFlagging server as errored after failure to retrieve response code for entry %s (cURL code %d): %sClearing the server error flag after successful entry submission: %sCould not set mtime on "%s": %sEntry completed (%.3f seconds, %.0f bytes): %sFailed to submit entry with "409 %s": %sFlagging server as errored after failure to submit entry %s with HTTP response code %ld: %sFlagging server as errored after failure to submit entry %s (cURL code %d): %sInvalid entry (file not found %d): %sReached max requests (%d) for this worker, exiting.Worker shutdown unlocking thread mutex.Worker shutdown waiting on thread mutex.Worker creation locking thread mutex.Worker creation waiting on thread mutex.Worker creation unlocking thread mutex.Failed to create new worker thread: %dWorker creation completed: %ppNo more cURL handles (Internal Error).Queue waiting on thread mutex.Error reading from the queue file.Transaction initialization locking global mutex.Transaction initialization waiting on global mutex.Transaction initialization started.Loaded %d entries from the queue file.Loaded %d entries from the OLD queue file.Queue file not found. New one will be created.Failed to open the transaction log: %s Transaction initialization unlocking global mutex.Transaction initialization completed.Management thread: Waiting for worker threads to finish.Running final transaction checkpoint.Management thread: Creating worker thread to investigate server.Management thread: Creating worker thread to catch up with the queue.Management thread: Initiating a checkpoint (previous was %ld seconds ago).Management thread: Last checkpoint was %ld seconds ago.Unable to open stdin for readingInternal state: [evnt "%lu"][curr "%lu"][next "%lu"][nbytes "%lu"]No more data to read, emptying buffer: %sRead %lu bytes from pipe: `%s'Dropping remaining portion of failed event: `%s'Received audit log entry (count %lu queue %d workers %d): %sEvent buffer contains partial event: `%s'Processed %d entries from buffer.Shifted buffer back %lu and offset %lu bytes for next read: `%s'Event continuation too large, dropping it as well: `%s'Event too large, dropping event: `%s'Waiting for queue to empty (%d active).Could not empty queue (%d active). APR: compiled="%s"; loaded="%s" PCRE: compiled="%d.%d"; loaded="%s" cURL: compiled="%s"; loaded="%s" Failed to create new management thread: %dFailed to create new signal thread: %d; 8HH`xX,ح0D8\ȺhxTXXh0dHzRx &D$4`FJ w?:*3$"\t<JLG  DAH  GAA PD w E |A8BAA G L@I@  AABA d@ԥ BBB B(A0A8G L@LC 8A0A(B BBBG CJC`CACL|BNB B(A0A8G 8A0A(B BBBF HFBB E(A0A8DPZ 8A0A(F BBBC DP XLA8pԬYBAA G I   AABA $SBN UE $0H s E [ E [ A |ض9SBE D(G@n(C BBBDH@s (C BBBD  (C BBBD s (C BBBA L|kBLB B(A0A8Gm 8A0A(B BBBA !FMB E(A0A8R+LFA 8C0A(B BBBC SLGGG^SLGGG^0hLBAA F@  AABF ,BIC  ABK DCBBB A(A0G I  0D(A BBBA ,BMG ABA 0D05FNP L(I0C8D@x