From d82549ebe093cb78f29e752df91b1f6a6b677f44 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Wed, 21 Sep 2022 09:39:36 +0200 Subject: [PATCH] tests: add http file with gap test --- tests/http-pipeline-files-with-gap/README.md | 1 + tests/http-pipeline-files-with-gap/input.pcap | Bin 0 -> 73989 bytes .../suricata.yaml | 103 ++++++++++++++++++ tests/http-pipeline-files-with-gap/test.yaml | 23 ++++ 4 files changed, 127 insertions(+) create mode 100644 tests/http-pipeline-files-with-gap/README.md create mode 100644 tests/http-pipeline-files-with-gap/input.pcap create mode 100644 tests/http-pipeline-files-with-gap/suricata.yaml create mode 100644 tests/http-pipeline-files-with-gap/test.yaml diff --git a/tests/http-pipeline-files-with-gap/README.md b/tests/http-pipeline-files-with-gap/README.md new file mode 100644 index 000000000..fd8fdffa4 --- /dev/null +++ b/tests/http-pipeline-files-with-gap/README.md @@ -0,0 +1 @@ +Pcap from malware traffic analysis diff --git a/tests/http-pipeline-files-with-gap/input.pcap b/tests/http-pipeline-files-with-gap/input.pcap new file mode 100644 index 0000000000000000000000000000000000000000..88131583bab12a0324014eed23d3fa4937b09cde GIT binary patch literal 73989 zc-riJ2S5|q_V*<8DhMJr9D;&{KoSTgG^v70k)qfQ$v^^Wq)_ZV_KppE!-^fmf(rJ6 z3n~_@*n98oyLXa60x`P#+1<%Ntr{ECZ+`;;aZrP+yhS5G!Ya zA!18J@NYvbqG8LM5G!brRxEo0Qlp0;UBeSmcQi6FG0vUpMzt^vX0b4llz~dI9H~1; z%ICSFOp%DkWih2(p};){?&_QacXx8{WMLYQrD9@C%s@F(sfgk3o}HcTmL?RY@h~@* z&`p-%E)(;DB+LM*vzR3fNO#T*aK=^a`iu^z0tlhb|6I@N@>K0kFjO9>MKt5#WDVE>j?2 za+qQN5+cmeb9(q_ROwo;D^( zG}wmUhA4y}ISZmV&eMuwj|`2zfgmayLunKW8r$8%Gz=)lKoez{D@vuK377~R0UJ~w z29?gBQ_!x_i58{_m^cgCSFni5;$ZGH3)5tB9H^iaCM!e3>KayyJ1|nQh~*~Yh%8L& zYXw*~myZc$(f}&O73DK?0z4>`A6H?bm?@9|6IW{(7Dpz?z}WaTQqZX6#9R@k<}iNX z45nCuNduA+Bgj6m8K_%m=6xfc^*4%z_Hs0I|H5+P9o~of9s}P2Egl7z|0v4f>#3vW3qwvd`!x$t0--NYJQWXI$gp6g%xLE774{twJWl@Y$+#zjb(9J7#aWJigE>9 zDVND3OIS>v5=6?C@~}XKdIF%H2xunKre2CX4OdU7sovZHD)ok&BZ!A5APQjTXr$86 z(P3z)7z64E(omokC!3ioL8U@eBo?M}rT*@U;*|}!9F#v96g^p6`NQNKy!^xl<r5?%_dM~)av4In9j&TO^es9!@Vv+ z-RlM?>cnb-V?}AfI*em^t78e0bYfZISdopf<_-W@-~5)TV`cZ!iDivrb=873AIHMf zvAXxsiPaRxiqL}f7{{_!$C|Gj%Lc~^Z;X}K3Su#CX~?zG1c5o+A#K*PL!ORXPb*F9 z$!n#up6(M7#D}h7*G!%i6AM6eBB4^i?O=ym1|*h9VEzLRLEj1>Y5JqHn3*XP`k@gR z#%|yjTJ16@6`U9VFli*zUFE2hRXQuj7O$KzEtRttRL)mMZ}rL;c44@gw!M58Y!O)*CETSPjE_m&vza^) z6r^GR=#FE#0jwa9)&zib$j#G5QIRfq27#Bt$JktEfD5?HrC!a_n>wwc8EzG!jjdu{ zD6onzzI)ZJqR%azSavv8h!(6nI95w_tnslH$P5Dn|2C|CgVAz6to}CL8dU!sRet$& zID#Qn;T;5W4cKyj}J{?iST;;U2SR34Ti;eniAO#Yq5lP+qNpSYjcMm%{w*;`2jg5~+}%pu%@g&y-=}T(^e%|FlL-FWojI5|IIO{Z@6L z39*^tj5=98fvnVDkrn%?tSr1b$f-iecUr{74=8)uOc7UtiwosQW%9Ya+<RaGcAJmxY7YD%MCXfBA&oahBRLLdbEQe~QQA{uwnl0kpAhydsc(J9H3%RmvtCcCMyc7n zY(7)KO~oWqZ6&K6R!E@gdV8>Scbe5XQw_uo2XPNXfh2H5LVctJPpOzvp;&FGq_7iFSDQ5YA=iWta1U6fJK#Sa~xB4p>fq9Rv(oQ^5Rm~gm8B$Gl^ zHwjmYk%5+Yvw|wq1>~!?Z3E9R*>LQn1@2oO@KIxY%IrHG_J6h$epnO#w}AE;YOF0evOb0@Q2PNkSs zMFr!Ez{6?EYa>m-kwR;fDF&Pb#et(mX=0&Fz*ea3hl-eN#Yim055-5` z01T}?5K|ScI>z_Yv=K$^tG6%3 z%^N=pPcq0Xro#H&>gi7lvIoYmGYMrKpdysnuwHPFY_t=c$biJ9^=$1&;3ZjHXhCf4 zS1AvoLs>$eP|QG`SS$+o_~EV&+?pj6GZiEIz=$w0v{;>9oC=)ST`^2;>JNDXwJ@cF z+>ga$N+f`-LFJ$+JYgEDOw#Ku6ipEev*FYb7egh$M1eIhWm1k%jB=O~vSv^L#tbTy zje*PrP%+KIRMpS7pQ1BiYl|mrzKs*M74u-i=Ehb}*!oV@iG|`=K8>-~*ujycPWM$< z$p9;UxgK&GY~R*4%yL04!e@Y9YqHB4I~BXoK+4E$m|~F{gl-ZZx>fN|Cc)g;7*hb+ z4~8RP?Cx+N9zJGlhbExMvX-R7$5 zws1UxP*dRmG?$;Ih-U#LD$R!i@-&Q_#sLYGuNOtrGk%uT%0$o;B4>$PeT(`MG#V>Gx4)IG*pd4)dP&?1v=$W!*l1*)UMOErCzv)hNY5IWKt=V)Svk) z1JI%XnlC9ZDkd>LHY_PLF)B93-<=64h2x<`)jEdx(N2GNl@BSrB;u-0@08-+nXYL; z>tremn)dpydgpjht~0P&XKj{iFPGt#yRkvJ1*&r2oC21M`Tot8OZyee4GT|*>KfyU zM#aR$_5!x!iYjdAA2iw@iSX~SSJ3qfppgROV&fAdVtYiz{!VM%rQ2GwaBJmgTFr*K zdE_aTf7MzagK}E|OKqjiS}o++xV7$VQ0@s;xqb(LwX(6l*;+k*#aesE#&?g3>5BG_ zN{mE7>BK@Px#u=-8O3;2sIT(?rv+=?w1yczAEsIJ~cu!5rFU zyn1+_cU>n|Adb~i3swP+m7tFG=B7@pARMbjW2_DMbbNbE9ZOcL6RQi3Wv>P61dipQ zj&>qJq-wh9rb3mQPTKQV=^+x)M{EE!*l42% z19>h^4|^Jvd$TTC?*i$;>u;t9&tFQzf@9DqG%~zL987_N{>j8kv*dptHF%H$6T;(r zMTLg{R$6c+=<71`5Zuh|w3zu#+{_)+&Ad!ERw$0utT9&Men<B5IbV1YZwmGWoZaEb};Q9+?fr|1p#&DGK)Q#_80$JU7 zi;2Ht99LuHr_R3cfojDGBvdSf6E!JJ#rTnFLzjZ5rihsWI2f(841W$)6#lKfzOTmYO1>3S2Z`D?F3Zy{ONSuk7$x7 zOcRpf1?0LbM8GH&#tYt86;w+VS^eV;u9Mh<^NhBA_Yc*D;2>91`#c)c>i1#DKkeX5b|@i zD8rOuX+p935dionvq|ODn@%Zxez%l9e|ES=D3+!Qd0e3`G3lPaTTY1hCv%Pzp-hTG zN>P&(CJhQl$2}f+tTHw?aP_)eLJ?;h1aS3SLU}|Lz7>f?-Fy!);kt_8z!kzMEJ$&xIF_bW!~XNcCN=G^YCE*)ZDLbJVH+@@t(`KN6>UA5E$+o~@$#U{eGUNHsGK zHO8T*T9}%u&uVe`OmS}A>B=+7a0!D#RY;i1WQHrygjMWO5GcN_ATB^_%I-pgKXn`6 z3~&M<@f4V5sph3&A#mbTHBn7c&y!(u)E!XdS@i)#ed1b~Nl8RZf!5=2sRK#XYolVS zevPQ%$tUU7@^9}yfEE?8217yU6pS{38Z2n zTZZGR2h(~HRB=!}Qb2Lq6$8-F!j$GqLV;wyb<@!JA(}4= z|HWrh$@rE;%9P3^WRWa|$CYr!d)C1;!eO0X^`z4FYkbFdK~m z!V7>NJdv}L56y$(r%VJ>gu)EqFd1seAkf1D-ax74qK4@Y-c%miI?(kCT+}BvZW;DV_|97lY!dLJJ0@!$YawI38Vv2Z>(Y zlN4)zNP%cdE~;@rx#S^>1q=?4D=HzxJTz5+3V!L14+RLkiH^zUa|MbpgZq>6AN4M* zqCX1j57KkZTb)!t5~uphjj4X$V@UNjP1LFW*gKt6KMJRMZ%wM-_gF>sAIlI#xhhH# z^ORPT0;eHFfzi1jbCyVe&y_9baX}}Wt1wQOQm4oypmrq^OyUYtYUrC16gV-;2E@;o zps8H24FVglYF?m`NaW^zNw`@5xh0EhgbK!1$4Ghi)Afe@pKp!434aNk; z;I}AqQvodq#h7w&3+N|jF?ljfQ8vDw36?6s&}^=hQzs<~*WiE%0klAwQg{YX1P~c2 zOhvIQ3{Z_y2OLHsg{!U8a?z-=j{Ke z&^d4jj5`EF)5OATAcar_Z_bp#yD!1j*<2nE6$nAu0$wgEk%7c73tSFl%EgZeec!?~g$_DE3jPG8GSFYopFreL@PLYbNrCDi1e&^1E`=Cs=B;K- z%I=ynS}0Q`JSaFh)mvNrq8DZ0gF`TEWvFQs?Nb{@`-Usl{=*_Z?RQ0dxQzE#x)F-9 zRGo=G9qfU@a@k~$UyAv_yy!F^81%hqnn54z{*zH3u0F#rm2zbK6af>kd&3Ms)zWIw z-$NDswFE+tl&1Y4x~Kd!y5oA)hj*U_;a$Z9sH&c|hjvKM1|M`%{V1I3FEyt6vM@;X z7Deh*zx1O{svnJ0y_Y7{mxZaQK5a09C=Hm_U@?y;O>IOR|M9Pkh^s1vtg0q5fXo5k zAC8k}%0OoU1(3K2C|XW2GSmnQjtgnai5d(ZtJ_1}LfgNT3jR~ZqG%c#Ah<>s=*|H_ zd-|~OXdRBnF`+n(Dd0*J9a-R4C=-TaE(}Y2NKY{0i7~~)O%y>BG-Rq6-mV2B8IOm7 zU?u^98hX5p#}q>)V7!FFVv6|4;)+=^KJ;FeA}Pq`a9JFb3&2Hibv-75Q5`;)MJxoZ z3=qnevs7boxu9qe}}GJk7}djOBncFoU-lSZNA z#2JsV;97mIK=I%JKqH{10$C9Qp3PF^^ISm|zJ^}}xD%X=pQX+dsW2Ufd=SS8b1hq* z2)2SlLeT^k7l%mT2(w+$Fi;Rb1)K;P&jv$s&3A>jx`3^W3Q zCa^d{WdI2i^1xQv@(w@`Djk(@VaE>e6ef~%1h74m5?#>{U?V9^c(;zCe-EoYMwq2m zWA*sKvK-K1WCF^PWPmP{1ah3Ne$&5Bz8+Mq(bqsa6F&vN&Rd52U;8B4`EKMG}I@Cj;SkX(x4_zleGvQ=2% zAmlzk#y}oSz+tMwfO0elWoqFcJcY&Z;W8!kXQ;d<} zjL2odF)&yT2lx#rEKQ8zf{DaT5F{W!gSx=7pg3;z^`uk)V6kP2JINHJE(E;H0U5F@ z)PgVLNx5V;NVX*k86~cYAu}<4-zNm;u(OSofv`h_|Hu`}RxM`imsO|T(P|i1bTKr^MN&WuE|FA(O>Terl zqW;1l6HVoSb#uXg_b8JWT(AfJVQYq7u>1FiUf9ek1uY;wzpyaYMfGEGs=v^f>Z@WQ z)qmZfPWAR)#t3|nnzy#aMjhqj@Wn<`G^xHSw(f2gX9U3)1wHlBDbhGxr1M%tio-=( zuP)L{FP+h6JRW^$4Md7lby^7h;jLkRCO7#z5(K(C#nU||p$9oikc9#I6320+EDqV% zjY9GM7y45_K&Fh#rK;kMU!#_M`ZhbKQ#hEzVQ z#f=uT{%X|w0Wo@cdy+I10z3X*HvG4Hc!FX*9B6ha8J}sU(#SMlGEj+1aRVOiK_@f$ zb^ea8F8p)jCpbPdD=Au!4`&Ni_$ZVA&v-v+$)R84xmxL!ri`K}0} z#nTeSOpwH4Vo8WF=f96Xygjw^$1iDRVxoT9|3%*LqBr0TFZ%!Iyb%)>ni!mju{aSR zl!KjQPY}kb|4L$@74V;72H1RBqbHOJ^tj;41<>dE?{n*aRWXniXrB3ZJ2#}~E#5ja z@$q;jey(vQesMj_#6M`(`z1P6<)fqPAc-Ww5hK*}PRoGw; zL6HAM>hf*CT)()qFb&RW0(SZ@;w^m0GliSR!abDsFL2dA!%Du|eK$_b6|lG>9)^#9 zsZC}mW)|=Ck@N-=^csEevjUDSVZj$A=VWQk(_ zkB!g$(f$H^X~p?RC=D8sHmBA;ulZlcS-(j=6BF$h{2yc;Zx2n@@%H%tJ3A4x>Hk7n z0K>b&J8qzZ{Kqu8t#Hs#|##DcQC#3oZ;p$XB zBtR$CPr|9*O_S>H?^IEJo;8B}!z}Z6)V_(yFI@fqGynW#8uVv#p{lag=QgF7M9Sq0 z1)xU%xrOu!F|^NZ!dXqv-!rTED-U^6l#-}c3xDx0xgYgh>D~>xu5|BTiw>DGp%iNr z2-MrFZjI2dEagx;s)nJsx4iBo_4-vmD@B$9-$@qOz=(fzx`Yp(SpI{HM1i%VmPFyV z;II{oc-7a{p+bCB1ipX{UvweN7T`}#Ri2B509tTEqfktcF3iOgt9&6N>Pk20>Kq7X^_DC$3fqTue^f@#44^7K0I7;#|{S|39xLG2SX&3K?rcglG;&g z@ueJ83I(omV59g73@Kdi0cQnKxHuTnvt6K0s-J{Y{n^G;|I`9feeDxXJX-frjp(Elwy4*AWYpXZ(!s zfA2UH-J_v5d;HIvHN6>MN(-Nb4BaT6$>s{t7}dHVCU8C(T>S|bTwxe6MP`~17$%3A zg`w#(PALWlh} zIP>qZW33s3MnZt9o-z*G1Q;s@Z`x4a!{_e~Z_KZI1_D>m`1uFQM*t|UP&~NiV~|cV zoQ#uUMPo92IT1d{?7B>y4A*rrMl!&5hPGuh1LRZiWixS_WcYHTiVXFSA_z_K$O1Ky zRnKRyfAW)36_DxRJC#p|4%Vs0G+d2STGZH&tIs~`BYqufCg&R zJwxrvCIo?R)u_AmQ}OT!o>0UQHh8Fl;sn)W6_lEC1*t+({e#0tgy~dlIQ13zDhB(O!!hcshvm)00b?2fhNu9)3+f-1S63g3icotdk77sNN;SOP z<)B$~0*ec(D%Y@ylhUF-pr_?CwbkG4L;xv3Vc@3bQdWh>7rV1`R_L$V*`cEy3SwTNjlQ zFpvp@$bf?IB*BAkoFXHE_nXA=m{ORSkkG)o7vR9^b2HTv1Jgh^ha+Nwo{pjz7y{Ma zOr(4<5h<`Y_<<(izv}ONOoS&wXlF0%}H@&NS%k7g52=b4-;Ve}K%oShi#T0RWQazDCr5-?= z9@sd{g`>W`^c zJ!7;^tl2o$Q7u>@IMzOOta9C0b8xI9TCk+B8+%RT$<)phbYjiLu?{!JdOZlfboy$( zI@UzpSa~>Bd1I`1@P*7@FW*wfI<6aQ9*$L}1q;4d`^)7db*v_Gomlg6tV3F`N^z_p z6;>ZOTI^?vz&DEcX|p%7JWpFH@~%{6Z+Qz51elwJDTF%iZ>meIOSo90w1|bj*W@xo zU91mbrpQ8&RKRaTEW(sl*CAF=bFEnR$d{KN5u|H)BKoiM7aEzE80QW)L5jg*VInC5 zRez0KJx{ozo!mS5Wd=~(K+KQF;C-B82C9oTREXprOhK9qbOIP4Vv~~+EKHN&>ym=g zfYb~$S~!Hu<1yXoZWOdbZ>|7zR3&IkBI@M^`j5S1dwY5Mp^0LAblTn9jpB!jvlvvW z8>J)4<7QxJSB#Y*tSc#8z!EB66P7lFD{@8ISSpCf7<>?v1eB#sObgRcp+KPM!ZFb9 z7$zbI!<(33qxXZh=w*QP0FBf`TLu^?UxZU|gG~HgdB2%g^*}?7eLW08R5gs!C=@id zyM<{O5Q%{%%0T8urK1U$2!G@fO7&q-=?uCD+BG`S!W7@T#OAXPT-1CywPqlp5jhUiU-4!3hG92eRv`hR0D~|W|KWr*}gQ7REn=BlkP>T ztE_l5(p_K!K(p($XpLhkOp6`<_+)puCEUU3ZDoilt}}q6jzkb%n6|R`u@1` zRA`AH<}lC(F-KLm#oh)w9ICY=?oi&EPHfojUWVqfhlw{xDO(JY^LiyTCL-7>5Lmo_o)c7Oqlw_sB_eH9HDm}j5 z`RV^>oWDP4Hs&33#0#{Tmo}s7AYXzTm87vzT?2s|nOX%*0HSz&Fh{z9hVQ10Lj2`R zaS9oz6~!KzdT98crVy`Rq>ugAs(JoI_+mH;`6I4qA%7PSnGV zg7}0)Me8eWSMJoB&==8b)xK+M&|4-V#MZ4Xl-b3o|?D*TIBfUlT9!?$h0ca)rq=qt~ktE{X@jqpF z^xc6GF({re2vI#56bgezM-YRVdUbf!Gxh7XA1x=;%eb7VDo5XExnBJ?EKnP&wte4g z&6A@-LkHpS4C?`i6(E>L_TUPHL@Na03#8)st|4f0pT4M31(3o7F+_mOOqN6xoe+@- zONt5)MJ3=QMC0?WT2YJV$dPd0-P!U z+vmY{JD!Zs1=}CswS0^z0X1t5_e(Jr2W(Towz)VlJ``*NS28wFQ`=5a+lFx*Ditae z<%;nsy$-C7DAm{32aUwCd6-m6j$^Vi;G9LMkS}5iauGzKGyZ7`>lOu->_zqU@*>lq z$<%#x9{j}*Y+J?F>z)dmw>w?GPuqFIm7tIO7Szqm`h6)N=`RMIF8eF>``Rr>kS3tr ziq5L(V+ZX;EedimmK%$sR?bgP_=S&Jd2SG{u6ocgER`waNl{pDaBM~JBmTw96!gr~osBKSslKEU)vqHs!Cdh) zQ5~zfy-uoMj#GVe4XOt?Dyo-_YEUx@PXiyD)!z`?L2iiESzAQ!>1jmY#thNx57(9w z>MW^;NiPI)LGQNr6`okf&ka6A`2GZBI%ZmBdZNBH|(9DdGj;MJ{X%Bw>732M;P}t78s8)o@czlxYW4H_`dOH6DyPUCJd8U6ShgN$qbX# zCVNcIn%p({Y-(-lVj5tYXqs+1+H`?wq3IFRtER8b%*;q;zGgkmxMriw7MN`{J8pK% z?4x;8^G@cW=KalO=F`m!%nzDhHh*nlVc~4i#iFl;)MC2DdW&+4>lPm@Z7kg^qb%8$ zBQ5hSi!7@wpEWUQ(!NP>lYvc!G?~|AN0YNno>-Y!Ia`HVF|9^eR%%{-g+YL?S1zuEp~H|_N7ob96Qcy=@Fw%b+PeQMsOd2n;A`K0EB z&8wQfw{K};pc30Y)wD)PxX+OXHvG(tsU7UM6%bkmzAGp}NM7a!c+30e$gGGm+ z4w)TRb~xYBu%l1MjE+k>{?UopiQb9RDZkU%&cx1Mow=QtbgpzYaP@T+xUO`)NH!-2 zle5Sh$+z6>+h;O6^7+L)}AtMe9Uk(ei2M zJuEyTJVtu#_IT;p*%R|z>UoK7LyxA*>1Fh=QGvk zxUYe4i0??>eZC(VUJNN?JL9<@*)PLygWm&x7k|uuwg2q^QUEhxMZnEKG;na>^1z!x zjzP?zl|i*#oVu{PtnG3?xMOg7@TTBrA(Rkt$gYt0p^VVsp$EhC!n%e{4yy=n8lDus zDExW^DIzUmW5kQD^sYm@9*i`I>>fEQ@?un*C|1<^s2AP5yAAJlxVw4xgzk&F*Y@bt zL)>FeG%>nc^qlCcG3{dnF~zY+Y*g%=*lTevahY*@dm8qP>zUv4UOY8^Sp2aB8%WRB z>~&K8a-8aSH>P^SVUX&N);)}20KgLVAnKy}6*$$~X;Qu6FcsB1BqK<|po9$x?-D~2 zXC&4nbx4vWmGx@UtADTcz25f@>pi>o&1CoF;mN1^wCuy}v%9ZR-(G#!_I=wgykB0w zyZ!0?C-ko#;4&a*z=?q^2l58)AJk+JbI^{#27`MK-Z1zJGnToM`8FjgWpT<2Rw!#e z>oL0vdoKGS7J$vh?xzN%&Q5)h7LYb4?I9%L(EM7v+BPWfS!$ zawk?y@|d)6(znU%$tR~!rp%l2Wh!gx$!XMS3#NUao;tl^hS!XxGYw}7W>(J%nze4W z_3Rg$=|ZL z_2Nm3-!EY=sao1)Y2mUq%cd;*w4A&A(u%GtidH(WoVUtwRo1F|t9z|Jw#H}8`n4_B zPFef4Ku~aVUHrPk>%G^n-_Ux)jE%&NvW*Wn_22Zz=CIAX3(18mw%Bc%vK84X+xlqR z;BD30yKgVs;j^P~XZxLtciHTkTtq0!EqYPRDZaV8&+f{SZY5=V{PyhH>$bOGpX0v# z{mu5zC^an|SNi?HkOOZIiVi+Gly>NL*`TtT^5pXKhkG8bIMV&d@uLw(%Z~*gJ8(SU z_`Va26D22oP8Of?I#qO zsS7a|Dyx&KFJ0_^@#ZD=r3aUJmtS7Vy7IYZ)K!D4ldoA_n|HnS^_4d|-q>=}>*oGj zVYg1#Ce+s4X5D^#M{?)O-EsFU?#;X3_Wt?@vy_0z@A zIy~F?yvy^`FOpx}eJOtV{ngahEnXMA@qAPEHty~9cl>vs-%tL~;={U+J|B;L>iy~d z=j<;=Ulx4r_;t^>?%%F{=YRkH{g!E%GSwAG+?Z@(3WkpaoNSss%VfF7pLg8=x$zbqKKn1Kw)xoa=*QkNI!+1TY zE&?KJKV4N}B(&~A1|09f-@Jse)t=%{O;q)L)z6JmJpfTCfQvG;4kth%L=1c+C>LV? z02H32DE3!Q5{eUrLS6t#eN2Gl4yw>y*$Qy8t~moCJ$H^K>Y(~IC{Fc0jj7)30;Kvw zaq3k68PiGiD{-oCrb+c?7gSV#G!H@0|9$@V`QPV%pZ|S+?+4PeWtvWUUWL=MttLHN zyQ%28?UVn}^Z!2o9iRF{7ZbpRrXY<)zSkh3h#rv${|6s^@V|kvfq}lhfvJ&^p|QEC zxw)CCnVE%UQ!5KgYfCdTD?2M|8{1~hnwd9gZf|F6-_*95Ed(Lxfot>)ObiT6Y%RYr^-#hy$DkBI?0;E7ixy#L$?aXP{3s1;+;{JrVYKfR3w<;`5=Dl%QpOJUXNFIe3H>*|HbeLBf@+453cocs$J^5XiM#) zoks?)rwATwySB>6nYx#{YEECotW}r31s8hV^1lAgAw#()Zhz-HTs#q|?SQgAK!z1UAE; zvw}{q37QQ}+fYeJUzXHw+>N1^&c5y#TRZ2`Mp6Frp)I~)9lykH z*!idH^xt3V#?X%&hP5AB9&Kb_Zd4(ix>ANVXUFX!qx39Yf?Akr!=IlYMwh=Z>PA*$wpIPBiUPa%-+nK-G zh52^tfTnEvkz#ZWPo-;f7NBRNZM{e^|`>Zkx>{-otvh96nnD)Ni_~HW@cE!_c zT(&-*)GEuj)l)&W`$&u8e)A`Gl#QhZQJqYVrg`@vx7gO^?bb_O>|0n)c&7iP>yXc* z?Aj;S_Aqzp?Yh1;(shA_1#K3IUfI%3mc!z;&DJ}$r$$)H$a9R6B+l-B`r5ATdrFsW z-?^sK>=%>yUuJCz1Ud{q;mCh}<>+-kp1O8L$K=Dh7o-eXeR%%akKM){j@Wr{zA*Ff z`Q}7V+nt$To(%aYj%D7kF1<6e=>1ccpsOHb_@-gTHD?$( zlGpQnqrXhapEbYZ`PYJPg2#?)IbAiYB^IEZ{T3fmb7R-EeOZ?U74)^S7dSEFV}|Ba z94?M&{UA4gXlgs3Ho{#;udlk5^rDosKprbMbUJ(Co|FKP@l23X11RlgVjHO$ac@KPG;rXu3%eK#=%!auR zDN%smo>f}?lr@6Iul|e$-kDRlFs5L^jWgZ3CB%zo=U%_Mtn@zHa2#$Ku4cgd?iG?q%I6 zdDkWr2+*YB*v9$v(nD*%1smSpJNH4Z_ekG}SroU9{>jZIBtDn7v5KIWa~2tvqvcjb zmG`|eUOBwdOZ+My7O{VCy9q+eYWKBYN?f)+pLj!jyx-7w+kjN$+tb>&xp18N(yD`vZ`BhWu`Af$NL8#-d&Y7WQsrb@TIt@wcDi!S!nvzb;hkO$qvuheMh)! zZ}R>xUe_XgobHe!P<@R~s$YXseN#=UZ*@~e^)cTO zgm@uGGI3>PhU>T!4|wdZ#_kn0KK;{+=a0J@bmUTMOm5!gs*md`Zyp)zU7a<3gH6<9 zZ*M$V1d)iDc@>E4Ni)X>Y==hC+QjE$297DO!WL!X|bH)^BgthCSN4Pln0PSZ}+ z(o0(3em-x`d7n;fKUdm1Vns~I+LmuSE%9Z1=}NRc zpZj4OKK<%+J!r?bj>DP@hsF++Y>e5` zIbqGG7kBTS- z^%1KxH&Uv^4+Mq}2QT*Sd1OaZakSjBbnp zV$b>-l&_!U(faVC8z&AGp1a7mJN3e{Rh#$?`;zA!V)ff~%g^_jM7r-k%f`}mZA z$J@8#>kyl(NkM{&$ON_)Evl(0?#%v&Dt^r+avN zG4(@RJ{(SG^dEZB>|q*l-K@Ud(>-DwqH8WJ3BGvdMs)8RlOH5IjHbA3eA}mQ=d~#% zPbc}s@%E-L?##Se(fn0Oj={C|V<=1F=XIh<;_j^mVZ)ET^V|TF+a2}q3A4%vb-9>V zw)FIuzyrruzUnvP^S8G5a=VU}CRm^0N3b?=EBc0cWIWB}@9Y$CtiS()LsVu-rT+P; z{dVoJ7_2YxZvJYYe@KN<{opXi2l0ZOCKW5W|@^|sG*~%MQA_XbT{G{2?~QZA=UE&ZID5ve_T84m zd5}~Ir78iu@0;ziMOlTm3JB2W9<>^?kx=qC1VA(F~v^N^Y@nz zoWG#JAgbb2?Zhio_#n{9NU2)3T{2- zrd_`g&l1+u3@biA^!;V~usLIPGrj~zj}Ho>VeM;+UaZ(|Pi=kfep9K#v^N9SI^K$~ zFSosTHZlEN97?Pnn>TLv2c(s_+oun=C#`)k$cPkuE;VdimrGXWM+cuXZLzhTL&TLq zdDZzbFKOxVWZ$X_6V5M6DXCo3hF)zv=1PA5OP`Vk^}ld;%^!0gmeY=2elYNjW%Ko$ z&%Jw;Gdbs2_V}gyo6p*HDV8|+OIr1pryDBvxOOgqbCC{&s&}W>y)PP=#~QUYzr%e< z&y%j|r22C>)sJsX^^U%f>Nh@7r}~sfI;nmwPW9HBRPX4kqWWwJf+VCjk*4m5l$dkR z@};6(GuDLKH?coiaULtUyLQ~-#fSH9x1V9|e&y!lOb zjoGRG+x|G!Z*}m!=f#iv>Q#Lp96j-+nEYh>yLQPRO^<$%bvCKEI#3U z|5ag<_|3rs=k}~xFy`4QcX3U>r>sLmD*HPoWnDA-x^bBAmwunSZiwp5|Kq@w;__uj z4(uF4O#hWWX2QiYt>0DG291dtG5v^W!_rdD{i0&)FHO6@$wKL~lHYgj-FEd->lTH6 zE$q&0t$19_Kij^4r(>TOgC4dYS1i0V|G?0JpZDIFJ?ixO3zvt)TCKNsA$gt(Sv2aw zxFs#GmX93zmV72->>^`yjGOVjjjJXlxkRQcn2K&?*tB*Z@h<=IZH)3FcJ&u?>iD%c zQ?86!m^a5l?r3Oc9<_TZ`KtNyzDEw{^snhQt#C!m^;f%E?scv?doMRDe{;>HN5xsi z?s?t#_qQLLu|;@~Uv~Jz#)NsRU%cAyz(2$D==6badGEdX=C&BY9G3yz=R2j&@EUVgkRll1N3v)4-=Avxr|*HWr& zSFb;{C_1Y>UC`;=x|$fzP8}Q zdVBa6f$8uErI3U3|H44-CyYxCO4Ot8C=#!dENUD zT3}Uu$L7-P^lg#WqVv-tY>#+(+Mk`BUvOmhQ%dNj4{@hcscVib+`O*E*kH2Zqr~k? zZ0xshk+&Nkv3ESieG}P*;h)>_rH5Ti+t;(0Z+o=pOV4C28*H+T`1tM7vAibD7d*ao zZTY3$gRs}NQxl(H6E;X&29OHVlUi_QXD?fGEN`@XwddBu!y-3jw64DXj+rUjMA&nG zsw;asQBEinSxhr+V5J6BwNZP<76Eg?yaE!BgRaH1|KE*5*4V#p?V7FC2 z>r$6l1FBB?RNUKf;jvA8j!Tnw9cIX57Vr|hm`(NW)ik^9+Fj7kY(3g$>?DVtJra@^ zO`AY@Gh}Y$^bHY@r`7JBe>hJNOn6@U_1XUAOT@cY4YsWee{jE7dEsR4g0%xfHzQ$9 zUpTjH%ilquvN9eHpMNT-a)e-`ubm*<>cp8d;l9fp{P&e#fBn!oC?H=@4D5pHDdN84#y?`aS zZ!vc9?cro;rGb6h?IO%{oRrh7%K*yYQF^a@3pzZ%S33Xvz{i;%S_N3{ z@Qa!j>_)b3Rc-jOheOWD4UdQizo0Y1kGOt3=G1b?GRvg*V@+F3{Lr^J9y#Ct`NMug zE6a^8h`yNad-G*=lu2&k=B>+*FjSjja>={IBZv8@KT=+AXG^Y41{Oxc0nwBy-c zuNU1K-sR5L<|4acO~X@L46eR6pgi=>l8@{4Y?&uc?hlDcjbYCI+TVV5rQk_1JO0p` zlFO@aTq7LMyK}JY!^-%u?uXWQzi#UlI_CP$UBwxQ3V4LIch(m(cIgn z$#do(9&n00BkXW(M@qqRV@w*d;k0p@ zZSz6x{AP-0rGyPI-g>5>{idCr^E<7vY4jUMaR(YUB} zfaTyQ$yt){zMxmAJmcJg)b)lVqN*n!47OyFC*JV!88mp?zM#(DoukH@u6!51KrnQ_ zoPO&bcu3sL7Ef@oP*ei4Ql0 z^JYJpR5)mcsE6al%9Rtxo}|={pCE z@BQcPIql}hU-yT;(WMX3Q_Q!O`+IwiT`2GM+V9n6=D9DvXYKd&%KT$N?3LQk(taOF z@9*vK%h=d&QSD7bm|b7*e5kN;)p?h}N5;E%q#Fkh^D5$A9#YWMWMYk;n7nrR1J{U+ zbFcUuy7`s7_UyOZ;!Bq6p82mh(C$;eGs2q7^M}6edg4y@z0!5|Bdx<`Se;2sKJHuo z>flu2+&yiI9qw-P+`qS6FsQ^oXyRr6ipsFI5s<#~BxWsj@no*CwTl%VqA(tFz}*9;5DTk<>ZFF7#$=&2)RuaY`;G~To^LhjIc z$&$ixUp_MLau|D#ek`A{Z+PgH;-M!5!^*pRT`sYBxBb?>#k1`!YVX`@IaBWF-LYoP z3iGY67SE86Y+qb`^UIX#!c4Jz61TEldh!s@s~g|C4h!CWbqrlUXS~_P^%WcbNV~JV zWYZ)nxv7oAi)(IGCVo${Dp~gpW6rI03Y;Ivq`xTVy*fH&-qBqPswYf;eQSx~!q`pu zQ%(+Df;DS@s{PzppMDeVAwBm=)Jf0laC&Z{Nza`htLQntJAw={q;*(*Yu&5;{Hc)> zys}G5g}E2K0?nRpdRdi{((}dox#eWa&Az0gBZd{;Ly&aC;sfh5@?TsS7BrlCJryXTZ#{6WxJ5wyX zJTJMormOS)p7+lzSy%b6+tlGr2Z2J-AGRW2-xIercH1Fe3*Zo^E zK01uAq_>}YI2ie*asd?4zZ~N!+F^*Oyx`A$KvOmTWV5LBz62 zqBjrn3u4T6RS*iFLT?phT4&s#q1jQ#7` zR|AgDUBC9o_)CvTFH)MC^?%SMU|!Lq-!j<45~Ppc*MEY!nANYSJGyNgCLGs zdN|#rGV7gW7DlI(>5Cqv0S)j+R2w2-sDaWOMP3IG4@*4 z5j*6-;VB&QiR=^A)QjeieX^1+baLY6r7!l)*~*P4%Owj(U*2M}cjuK`QHv9&giIN~ z{ziR`9$J$kGb;) ze5-9Ssim#4+r;-pt?fKZj#O|?9=hAVW~71T#UW8qQ59k1d#paPE+k{~#UoQ4jrye+ zhVY+Xc^p*BP996B-oCG-V)WdZx38BFKa2Ipn~2VieYx$;;hb4cExHXWv6$3s^WMd` z3wwPk`F!%mnq$G|r1?v-Cl;KFnA82he9p5Pe!E#F>jw-vU%Kl5v38eXQT5@X@CQky zL8+l6MYCZIxgx zn}uG~`OP%E4_B*URAFEmW+*9%&u#NsZ;I>U#&Oo2C*Ckf-<9~hU9Ft9MOH7yD`tv$ zVv`68#dDw?c{1p;ZLLT$oj=b&KHRJBb{Mnpc7qbc+*f3Nrh)L&oLZ=R@uX+6pT#{{ zrW0@oO$|1e&*_M9XGTgNQPHu(A zVYms#fr)+yu+|Rj-1F?BhWUp|obuNzc10)uU5PXA+*ji1Lcdqy1AmV7>%EJjz?bi6?e7zpwU&NfYT${{2w~gQJ}U5puZf=o&P{(>UA}zh@iOX z;ajCbI-vh7p_F#XFS!6uB0x@yaUAYqM-}tT4w>VtUkd{e_kTTiuf) zjf0zlVs_fN>K;KkHa0mk`l!>baz*Urwc;D9w~bhbJ@E?Py4%A)^Ri7nAvLvLY4v%0 zVl?Q+*M3*YAfcQC)q&4yvym8s$AMw1(?$qQkb8j>>v)Fs3+#hfLKW0!{rw7@9hfHD zO59Q)JANWlfbF!In%pg59h$DEA*Oo`?)qDBQrT3NP&>J4tEGeOLT3 zm4!NEoi%A@uOFirDv%EqZeIPoT%cWoFEjUWD_8z3)#- zQ(WLDj+a{}?Pl?&c#9u=yw-(*G#5=ZXplVMbkarPTtZlGM`r8CpuT#_4BIyU(_a6f zz`X@C%NaR$YOl0$l_~+@lnBVobjQpvjXxM>h}q04m>fs&suX1{Iv4VmtDJzK>~I4}8U$J8(GHXI z`(S7-m2f<3&`5A1h=H9H5rGBS3Y(dVh}c8^PRiDSltyei^h`QyQbvOjAYh12KF(+; zJFy}w=_S+3?!Q=`oq}3kff>_EO>kiQ*;T7r*So|a67Fmav$Khfj9R$`youvE0zT`r z;SMip?in~nEL$PlR|s%fcXuX;ez2ce*rGF9?CiA9q~ZoUc+`8BUYons7#pW+Td0?_ z6LV(PP&#@QbNx(px01q$^5dp7EAA8iRM{$SKiO#+MO2GFhZF8c(klm+?lnEz%EArhxJ)h8dXanoj8XEck5~&8p<4 z^%<$b=J`>uOs;CMxwt@zMKi$x2^lrC-@{k}<;zhAf@R0cKI)LrTiugf{L6M*VrC6S zHx3x{vie}wb(Ui&FfttlGntopYZ;2%>L%btrV&a_pCPaQI`Qi<0gI-^q`DvmQ6z)gm#O7-&DDvih^ywke%OO}J3)|M$)mv5v0_6Yo@waBqL!7DZf()!v*SSWhwbDt zZNug&0Wz`$SuRdFyyfq-WpdgEQ;SVY8=A}t%W+Yk8(c;Si11{O&#WVIldFD(0o9CzP002gN^Ee+-j1CD=d2Ri2c7t$nY^KE(V_#=0j!`yz zmE;IPD@~pzK-kk{`_LKcxW2ZMoS;hOA^K~#-0Z7vkZF4!N zNWVv2*)K+nl4o@=o?_y>Zw-1cTY6>UIfBHVeVW6KHyk)dn^=1S@< zE&EHd3pT!=-BPQHvQkY*Uo=hh*|es9+b1v_MtMj1xT1|wJV@$WNDq8*1gZ3g53iB% zN7@*Lvr|#m+?H~s)DHCqdL55p6Jt2p23jDGIkE=&CjhQ;WEm!;7XYV<%I zGk#8uyB|Cb8|s@^3Uny|yV|OB3&Tm6M}bp7VpFNAVKr%afM&9doM-$y!wHnu>;P<}F=ECYT>T7y;vfylDqmS#1@xkPep>k$mHR(e?%wPxP+wadn^ z_r%(pt;p&--W%7za-?-r&8~$uAhI2b$zL55?C_7-DBm=FD)PE^%>w_5jE&oww}ClWlg5wxJds&<_Y+%G&THo}?e^ptkezGN~; z#U^&>y4_U!Te?Js?mBbRpZnu9`57%sfN9nxrFTDUK<8G=LHbsi0?wg<_|T6A5)WAF z^xjZce6$|*6kz8PV+g}xAf!EUz$y0vvtMZB{(LMq#y~CeI=gY_=omX>)7@I{>oE3( zeli~nun+R;HZ;It%j|9O?K)(TpduFeYf}lcccpHF)Th&~1OOfqVfmggiMi$WN=CUM zCq;Wy5!>a3*iL%Am8-@yJaOA11ZU+NH%@oo%Xlw-GTN0hWG*}wKA1}rC@zH6nzxvg ze%28!sH(T}7En;~m7}OE+tsyq3y%3opTjGG`;1IZvUhJ?qo2IEm$naLej01sV9_#N zKQa43ZfdK-;+b+)*4pY@p0Zgd4>7S1n|gT~?~Rz`VCR7kOXD_e$VMoPs~s&}&9)s_dHW+{;?AO^|mU};eS`+e98Bfc#Qw=l{oCrv3|V{MRe%jv4l_WV}-N- z9ZTmfmV6H2PiZ6nSK7e(XW9@x{X1{S*-PBjd#84;VKF#%GOt>F1arY|@{XUGA$66(+PHHTq z#kPA|Za`3)-vll-p_2=FIdo>Z1}E-y*MzRWT+mf(%-aLg$7oj+QVvR{ zBToNX4^^A5TA8Jjr)^hPNw6b*o|F$?eo6HqsHNq!!j?L`irMx9mJY}A=0M+t%+X8J z;ew5-tM-D(#}?Ae!kqk!!tsX&?TC}l)31U?u|A!B7uFyjx|3&RLJS%3}mC?fLHKc zBI~U}Hitp|3TlsEM<#lA$BLHf3vh_L5!HLgr3a%_bt8YLyU?5}>aw;0W%QFo4lRE& zh?4?7rMv|sNS;|j>w`P8yRbTV)H>tb)I&h4VoxDSyV-}h+t;9%F1kjS4vOmyI=$?m znH%YJD|?F37eec8w}7iRex|_#BX1gJFpW1dhS}oiQutM5tRb~5^<6?#h2AL7f4j!& zMCSQk4e?LabI5tsY3R$hZ~jlNH~l?16g~NU0@sFC#!R`nsW_sDv8_1uQDfs(@+5e{ z_O7|O{?&0%VEiOF18j5GAg-d&8f*-+lU))6w;$IrvofNk(vptAjm<&=2!!J-t+@eY z7M`21K&=zAei zxKfU=bWa>={UShyb`{m`5E)}=$4Rn!6`gm8sd!`_!LFaY!-t4 zf?it4GIYY+iSCvQYdKpVoJPyByikPb)WT4c_7rKW5-Nz(c-|2QjwiF5KUUT@ocl?m zTc7i#bQc*l+rexd>Z<<<3B4AwbyzvBa}&j+X7if_wr2Y z6yD%0!u}}ZtW2YjkxMf({t=%6I<@6e=>YGFlk)`+Yr zlt6>opxJ*@i3~hhGUc_OyILwRs5hNQ$`p|EmUCX7Uy_bks~R(Mf9iu1XPOwAR==Ru zYz4Z&e8Vc(wP1x;oMjMaMWOG(<}i~n&r2Q{N0Evny_SzCR*OYNAEStWHjA1ch6_>} z+Ny$_0ny3#miJG|J4AIq=cyum9)*8XHj~vR4){SFp67hX-nZkaX~l2kt5TgO9}#Ew zjAONboo^6(!fIJP8Bw2PMn(rE$`g(CM&z@_*H(?PT{YJrHd~v8?s-oBGtULTc>d=r zOmbf-{>?LcIsl-H*LQ7OkJbO~erP0aScLf<6 zr<07M=jgK}iG1_0F;g=##piiSf`W2(5rb>T<$GRFF0Hz+n>oRTg+S-bvFb}}Sp=Q2 zL{+1PNRi1z&H}A|5vo3HLPl+!?jxi6@JRq6X|bs=G4#&ZJiRHu%m%_v0b7I0R1f|>M=xZ@w)H;ArA4If zr~SFcr9Eema7f-%2xqJ}O;ad%7o&*Z)xGyk{gtXT#C3yi;R3ODy)XyW_$lLN?(Xo{ z*^-nG$Iz>4$Qy^W!Y@5i@fiG2IblzmM$s{T{H@1!H3w%77sfSWQ^zcG#BKaSCxyDM zaw&;&OomJsPP=``QxrDbmc!zQ7jlZl0O zsR7Q{z~=&FRw2=X4YWdUM}{>iMvA{r^*)Tm(=6zpKZ0oT#r~K!tY@OpbE?xy5kQf> z+Sq=2(jh({*9S`d4vn{rwPbf?3bZ8aR#mMu>+X$Z`(Wl`VX6(9M0gi%jt3d`tz>$y z@4(_+pKZD2jy551wdMz-+(F~5*Rq`_^V@_J#`R^#C)@`Yutqnt;3EF!`V zfm-9no)Gw=b?yb(Q_c)hDUJw=1!_%(n+H2`_vflBaSlDFBCc0(>YM5^D*0uz@*4V! z!*_o?|2~%a-eW`&{-@K|rKAD>cSc0_(;!wP(J1h6gQL1tDLmgteP3GBo$esG>lWZ8 zw(+YEKtXlWGkFy{!i6H3i1ujA7HL+%wb!%lLC1OX3vS}C0$KgU_Jz4ph7ecZYF|%p zUc>W*D$0Pi?-f6iBpw+n7n1QX9)l7|!aO*#wPbwqlIiG{S1cF>Ss4RS7@*%I;}sGx#M|{zuOT>W1;HchUej1-G|A zG&}i10uvgY{K6Y23;Bln8~VU^F1$7b9!_%YnSA0DyITSAaRxx?Q2VyjznB+RaA?!5 zGyM(^(8yE$RPzVx#LAVwywa;|s2CC5(G06U5weAwZ&yvs6bfujaKC31l!UWCXOfZW zt}NTCa_Gi{yGi0ZwQB%Vlay?slQ^OoI!%{PVy(|LMCL#BhC}&Eg%THaBvl#vwt^>Y zA{ri&dRR;LyXwqm=$tn4nrOYCtyI|N{%EuZ($v&g2p%{2%egp}PRGUzYt=_gL})i@ zr)bNx1cfiv79R2D;?+qsxw!ZF@CO{AT*?vIL~yq-Dz8n9Z6c@d?88yKRH3dtyJr^u zn7+%CltkCE>`m~u)n##8XVAyxwCI8e2h}gUmV-V`N}rORM+}?Q@g;sHkL~y@>q;qE zNrPYGYn{}_sPNH;nGCqH@N~yE1~x(FtZABkrOSz9h&oAyMr%-2B3)|u8GQ%*7aMjD zqyKhBX^1|gcW;T^(ot!W?8lFpv0Yk$Z<-cj#n45r;ykn1NypPkz8^-}RNqq)>dSwi{5Wc5ri2uqo;KZRX<;Bqfx#zhu2k?hVoQmmJ zCC>iuO8k}LeI*_^@p~n1oBPLD&ws^Y`*$p<-1}I*?!U+4$opg3DEyT+9{n?INag;W zHqsmc033+cB-H``iaMnbX-Tr|DO(q2+4{oDL=`i*Q~~)=-a4P`VRuXe{d3FY6q_Jo zYfA(rI@f4#Q}lMt+pPTxU;@vCQGfKQZJA%2kdG*PAWIQQL?ROVf}g%I!jkXp`vTk` z4*thB3=A2|mtg+z+}CUYkGK;yN6z*?mhzjer|}bgV3gjK@!75}CuoXjus&Y!>aX@W-W6n~FGViXxetI0`huOx7K(Or$r#mi zdu2W6+Re?M^51Jos1&ppuRM>m?M(J>#xAsMrsmtQMQix1N8~d<|8Pd(NzUO>I}20C z2lW}b6YJ8+VsSaeQAFPM zVe^8I1WbvD{X0Y#S8S9qOri6$x_nA*RpYY=oIu^)8ageH%izs+=%2b`4;-MYB497J}j&2GJOm=_%E@t_L*im8YJ5sBim-yphymweZ zY<(2d8apQ+Y!@yUW($zhrdYOUMJ7#`p9*07I0;hzQG5%i_Fh~my`)v$yOznX>6TfY z+CY%GKa=h8viWejWp_z=%G^;$xFr3!gDTM5Xj(151`|%(Gny7hU}=qIXki&%Ki9@V z(aldUB`S6<>32{Ujr?SoscbCw_#InBq8}5Mgda%^ap{GmuYPn>iX-u~bTU_ejp87F z!w0HsDAPXNf2Sph_k6kWCq7YqC8MQ{kt(6(m@biyD|_Em?f0TWtIYv?*~oM2(%@S_ zxR-Tw<2lIhn1{#Vr3^NDZQNPa!X+!u))$Ob``3c$MZ0BZrc>?~tbNPOw$_WdNP38Y z5pJWS%F@aHvQf&|X^-T{3#-_&-kHd_F`ZvmsB%pSSe4+Qgs;sfxxGCUG>7B8 zDcMYP7K6k(%ouEI6Hlg#s-h>QUuz&9|7DWr62rexk+40{$Im#Gk;@4F3atJGxFGGM z4aK%0)2=FoUd7z)sX(epe>}$YGBC$C)KcuJbU~0NwHhN3uFo*yUl`kUv&aeaED?u`RJBW_B0+BaL+YEX>P&6~O z7p5+tp0*?w-t*j*_ebiPe^Jl+Z|dcd?y3Jw_dE5>-~UK`(J$&B{*!unq`#?8zKhk1 zAsVAsI3G9qgHKmSCA;IfJauej$C(=hS$v-S$jo+D)jK|Nb^Qu~2kepkxy44vwSaNPMAdxO4IQVm?`=kT6YJ@F=V#h#a%!GkE@DrCwkc0jd0co74wvT* zcWI{FgxfgYF1LQ7q0sBI>pTH)JG$KM8NPP^i|-I()uLI1{s1${5em5C?Iye^LZ?98eUw-ru`~zVDY%t{&U| zsp(fUO+QR5N+nr7v?=T=u*@H`u-C}<>U`Ae$%Xt|UY+J>wKts!Hk|s+@pg4mvA|m9 zSx`mt8#?s@dF!gLG$rOOwx;jpY~%M+8g*GK3nxtaL1v&`C__FcFSDqk+p~B0^yQ+Z z>CHGcfU1|C1@`K@W(B&_dMC<#cJe_E(#FIPO^mP&WByV*rQR;GV`UzvFNmPWWI-jR zF;$&?L&dFp@3(~ldIX(YTunOD(N(HB+l1P7a!gutaxg664CdGYc(dT+B!yI(F8XTG z&{Dg$x`yX%ggDs}0ZCBvw2KTDevk|`kbr#){*81do5hU@-V(X3>4?Fp-YG=;3UpM{ z-lV-I(NJS7RxBP&jK^n7$gmVEOEOFX7a?Dc&xi?X+C|nkvl3qE6{D?-vd(<6G_th? z^Cf3Cd}!38*v?;m(jpCe%J?AuDLW%uD~>7(L$eI#XZ3?Cm@%w2C3H5ySExVn33z_cK?DN5Z1!7{`oIQumI6v-3ERsMUnEYU=B;8X8DA z9K#TT&%doV*32n{Kz!wf^7iuXd2adsN9tLAQP1*k>XkI^sdw%DoqBwyKR(2`{1^2o z|D;|?<8SJFegXh_=cxrbEkC!Sc2@Y0o!Kz$gg=AeJ$B^DjiRwAnC7Sz4Z*Yh8-ocO zY&E>FA`6yT<73~SICAm>kg&x)NBg}t@a&Co^-mJ zrn9;O8@&-rzEg9K7QE$FvEhr5exw0yc3a^8yDCW3!ZeGOMf}@h1pgGGx_99Sn8-I_ zS$=L+8B1gYMXWFMH)w7`V8Y9pVqc8GlKbXB+e z*-=piFdKt5cpUg?(&2-v?@Vj82p-<|->yI%r_2BC;#8#n69tev+PRZsV&KRo9fIif zgSUWU*%soeKoeofH{xh}UuInfa!%Os0Xl3P2?W(H77<8J+h>*g)s%_au5y?wJWCdW zf_ggytB(W2Br9;vd~>lmSA)*pwJ|}7F)=tSL6%{fV9>)HDSO#;W+v?A;<&F}Zy`|B zHh^MBeMs1`yCUI+WT4f9hhzJ5WS3($4@wDCMFfU2NNn`)s0Qy@^P{k-3=_fm z;6wuZWGaUcn!|>Nn3-9<#?LAvWU51k?8&Ow(sUDI%W=TO)eVJ<{p%(0bjmwCN&v!U>1`8HJK_pHkjcEvQHqv1Z{Ap#k zw-LfNX?e70S(jft0X~bGyYQ{DEVmW5{J4VyI!Rc#I0hP@xmtGHq{@Lnnhb`nx?Qu7 z8sty#DfJ*IAF<`p#r=uq{!T7IUDX>!Hmy;?`s2Ad^68MPWN1J9^DV$z>c(cYGd8&! zP~8w>iLkW2lS0_SneCw&S;`)?_I^{kB4C3yFq&5RPNgnO__5Xo|4*af?!ma3n;pxL zF4O_ghOyi1JalliD$*+2luB;5QK9>)3VS!=6m9Z|=z4=_YG$H4ZjtpWxC&lDoQ=eG z*Kx+)^Gxgdr-v9*`P@@4GWu`oRm<;>t=NT4^=ga#e3)f~BC_k53Ajc|KX~S^3`9VPIMe@|O0MaI26ysh={*hXXAJ_9=vu ziYx^!^XD|*sYJYGCloJ?7Ao6t<(}C@W#Vty2J?6Yrild*IT)ywLj_;~;dhd-p7x3H z7AC!0CgN^S((B;{$*TsU^!KgbF{!;c0`#1VK!E)xk~VulO6XG@62OR>d27DJ=k7+1jBA{Kv4|o=SQR zaMr@^T#yP)CZ+#gZ6k(@#UA_MQKWWRWG{Vk@zRaL&iBqauZDQXGYL=rh^1X;zRCXB zzXXNd2YLN>9gT%IsI4YGEH1d5DxB<%hxg`}H`bmYY6^BIwwoP5AA7T{Y#JuUc`8p> zE05PES+DBP8vJqQ1{S$PMNS%U!iC~ucG&NSIK^~TB_fqzo;EMeDH z4eiAKl)n2|0z1hvUotNZY! zTb0Abd}FMMr_~87`j)$Aj-~ismn%ynMEkBCP!~F|5kqc`8$t5X%6KzQCh3(;%{ypy zqFsIR7*+N6V!#Z{u_^7%On+$l?zq~6bB0tj1LGS!ZP?BJ_-7zb9seT+)5oNE z20T;@BCeu~OBVF(KimSqSo$xuSm?TtIfhIe^r0IO58m_%YFzJ_F8164%9dd9_D2@% znO3p=C+9^)6(C3C%Ac*eklt9{LG9w0p`Aow4ycvDUg_E=ME}ANznEcn%;4aWH=aWXC_hrd|u{o_ZV7->Hu%dGsgh ztM92Nzx^lmHr9Vr-==f707OmITBKbds%uMZ$Wbq6&4=|^1Yg4Q?d5%fpjIPgm-05I z;cb#iDcv10OiZ}}R~8IGbj4Y}&&xx6x8_8aDY$XoM2^4u+GPPLOrfnEa2?D_jNE!& z+Yt*L$^<@Vg;hV9pG&;IAVO!}Uz6Fl#%joL z)YAXiXvA?pxZaQDjS_Aq_h-v1?CX>KM-ys;DRmc&i_MKx{rDB&iezJjZ|jPNYQUS_ z)P3g{PZmpYdR4u$_4)bskv(O@AfOtb=Oj&rAM4@d`tQZ!%-Da?G){FQmXHLMLF0y=SwqcW&kOFN_R@U9M`* zXm8N014-04eIK`RsgUMYyy2B`8ceaq@(T}t<@%XU3zMRbB~$+8=<&_B^jknc;4R?8 zy9vxK?m%lkjL*JnMrMakEH9ll8F7wXiMA(n|$>3<*FTJ;bA>vHUjj2{K zOoW)|IQ+XgKX>5tfYo)M&v=xb?agZrzouKj#Ja|IkC31z4T;2(=Z@_Zjm*=(ky9Q- zDFt-%OMgWih`Ql9A6ef5Xb*Ga-G4l)lf^bx_P`fRdyPX40k^rdw;-D;**67s$8oH* z3Z~bm_tVA+v$g#uCyLI0FR}z6UK%od0Ig^wgKFjRgdc4`+6GmP4c5FVm)O5047>OH z_Nc8eFow5G8H+eiZ#koN(&&)O_!s(OCc7iif%I0lHEsd^%;&bS2ijhQBkL=29Xrd7 zmE!g(Buk?ftp-c`?_=gG=UoM1L$S=R_%0!_Cf`R@tjvzvMV2>;r-rw=0-h2OW|Wx< z0kz<;J&4>Zv^K&O4C+hqJuknk70z%V{;+;EI!{HQfYZF*!TP~f?GlE-NL<%n-meTP zDIrO13e2L6VKcwXX#>6dHuFLTH^-%W`hq6*&xs{<7H{K{t z{4WFFYIN>g#M3>K|BPL-T)`PU1Ze0nQZ^42MYC1lPLprpH=OM@q>@&L?0<>A*kxZ( z%q$Q*YnHt_CEkA~Bhw9&Sub10kV;aaE{W-8YwIM;dMlpHj$Mht(*YMmUKMB^aO1Tv zDh;@j_Az;m6`! zn*Rts>=*bq{{-Km`)}||(*S@zAuQIFn`j3YD^o zJZqDgO;Jx@Ovv2rhfcv7l?o<7AyF<_Ldo=(-Xk5KH%)2R)I%8C$62(6roVdYU40o^ zE-^AhPxGiG95N|6A)|X1+FsG^AH+x3FF_2JDlIH^E+Jx^P?h*$?C%(CA@XN(isQCY!7aCRi>NC&FQ)5yZ zEN86|EQl*oZ)_mUvo8)I=R+|^|BOCCY&F7`cnioIaFf3U7)_n(tJ`GL$Qrn);8ZRT zfZ$UHhbKil`veG-7Jk^I;K|8rKfh!)^*Iv-e669$`caNKO7!=7%c*|}RhfB;Tw0}H z59;3nWZXTufLE-Up0mZp@Q-n7ekw_fT@w%tz{9` z)Z{YqU-czGSkeluwFRsYN4EX{`l2#D=V6*{jfk?Y3)s;Vb|o_pu6S&?6asP*O4SaY zYzHk%({#|$8tl6}ah!Wfhv;M2^NY0ikNej9iM=z??CA7FMO;(p4>mkf+bFpOIO`AT z=})VNWxVR(fi@s}rTIzwYP80Qu1W`!FGIeM=4XGHNKD$wp0Io4xesgaN^^Nz}t zF(NfTRH)RzNkSO;Z8oeKVM+*T-vU_Q-2(nY=<)yfA~X)_-yDrlM!zSOEhaI^rprzn zc*!*c2z)^8DuYElX8P@G9$x;l&GjpPecZd2zObkAcca%(!hRcR8B|+|n3Ft@I|IVP z`e-lcD%?J?#OqyA&@EN#?b5a(uVM=PUam@R{R7ru;`#Z6-(JF#Yjb$hv|Kt3b?LvJk;*=YfzOc1g~dSJ=8O%JT8m~Fs7v1bAAr7nLj82@AKlB7-*dm_U(~Pfc@A&+Blr!!zz_Lff!{^>JNRxi_Yr+}asC8; z%`fn;{|UYp*5Bac+X4VqnGSOlYN9s%9;L8jT|Rw_g&oVn4CE?)*T3d2e4AtXd&ez@ z1ffKg1(ul($MqhVS(27M!HEW38^pc+wP1zblqzkVht;qFUNN)TSRQmUh=mo%%pF*D z$EV$W*TdUiL~60%_Wz^1Z!&S+O*wCCto-)l~b@B(*(W;g$9OHLWjcopuI`D^e5oiMHO^Y z2v?x9;M)qzql<;wU09#s%%x6q?M366wzgSAF=-Lo(z3-|$Se-%^JDc7O_)He)>j+0 z8{J6rakiB|Cx)So$=e57#N14ckx@F$RlV@b{hDn~$>2GRlIlJ-=>)#@e#k`P7Cx-V zb=s#K;xLO}hFr_<+CP}s95eV6s)f$YzGQS@d8Dh`Q?teSA@+dlLa_Zvw|mxg8@3Z- zX~0v%aMwa#vasjMIIFajl2J=?eq&#V`3i2`ca7Yq<`X0i@UgKAVGZ9|r-)&; zplR}q#=0rp(wX@mXM8Mbcm~qMH5y9OFNY7MHiqy>QQDQ2m8K2)Bn<2C+T~cT@rP!u zrkvAw=g7rvnP0$Qd*+zx(&m2pBC;?17+8%Y3iir>tv63F7r8Ir0$f={9S0PpQXv!+ z7jqr!=tDJlsON!C!k&t;NTW#@$|Y?80ch(UWA8>1$=s0+2uW1p3G?Fv89t`r+3(Qe zW8iNgtuJJusvm+#8~xqn+opmMY?e|UET(F6;{B$UCmcL3G5dBN&g5h*wV|bswUzrd z1GD|_w+o0r;k=OPV+Ey_T7rZnk|)47whyFtaBFDYA;NO|y@L{XGxIBa-SIOaZ)f}G z?Tp3NlCLH~mKPWP+Ues>8W%^kueyI;%u);Ysp(wn*Y8glJKO>WEK8?_TA^y1;9~A# zEBNVR!Y2J>m8wjAO|7se{A>ywe*t&U)Gg@QD?aT%Tl=)XqwRX)o#>T<82edYHy`$z zb{<#C#LT^8!FCf?Uxo)plP?-NGX5!Shx5YQZjreXy5Y%*v^YUU;7*!c2n9OlP1Kz2 zU-J)$3WZnE3pRT4e}tXUS!S!5x%=L@AU76@Z3h3G zPX2Z#?7V3}A(v&p$cVnsG*w-go_Kdtu~&RtQ+p8Q26QW2^5 zKrR^{-UjRVY0=>Q-{wwK?l`rAe&$$7;eq2FU~dYImQ+-i&5tH4)#V+J)C512(jWzb))9{OstaCCpdl2^J4_gAHaVq@C*FM z{{~;*=pOu*_J4zKv;Rl%Ykz@%^-u8ijs6DzlnVe*=f(>$RZ^!MUBRf<&i!vkZr$X{ za|r5BImNn%*K&hN9ULSh^yxLsFu_aQvzPAbG5N<0iut}f(t&BvB?vRR_9(>0B(sLc z#Mre#QGDw^H>25NKT|tS_%fU*jdS{~c*aG}=l&A?na*LSrkgjK{`vdxIF%qR%P(7J zBd9_=uAVy7R=Y!F##Og~PpMs}M75H&PfL4v!6wGS2tihW=5do+g|#1+InwUR8S7EG zFx&kji=RTPOxIm`8zTo(dHaK}eBrgVFindE>qY%;qjODPNOZ1&f&D;Ov``5VPyN}E zKhY57>nl0Y$mRYA%6R(W7R^0mx+D>AfG%RMQRr;f8{=ax%AgnQnN>%{IdzSy4zBhV zg9+2N(CO=eo41u`W1Z^D(KP88@#>z!a5kN(unyyexfy2{)F?TBQ>BuADY~dB0B#7$eer zk>HtcIr)Irf<>~x(zbVYaJ}&h@@AEnrpL)=kmIrM6^so7{LaQ$UCS4G;dX!acasxn zXgm9%s?>PFAqLk8v z_uM7dqQ#zul%q|~r|VT$~;9nbP!0 zilK>F{)G8cTKlF4Elv1_;LS1TP7keE2?MT{wvRn`3tm6=on15 zXAxm8I%UR2-vX>2qrI$I?URVncT@A_fzTT&9X@u-l!g*IifSghQZc&jtTa4}#0@0a z|4K#7Sqh1h0((YU)<46wb$}k7NyHfWJG|V`RCBVbgcYiKk}{#Qox zr}L<-Og$OB+PG!65U~>HFHouizgW-0^_kuN@kOg0-8GH3BU!OFzHZeOwdF5iMultG zca@i=fagde(kfKkhal@2FR?nQY&u^1EdY%%%!9-Ik(SSs@MS0+|J^TUXNDPpVTtOd@?mD7UcM zg=DLO6j-Vv|5h`Ahw|ww{ceECa2lb>9yI$VqO2&aPAmPO$LA@lI=A0OmNaj0geiMZ z-?zzHAD_AL;)SjTN&vc1kr6FxO)1F9z1%2M^>QX??zxIg#-w3O4LrvRm@h0dkW}s) zGl+}3ZDJr$@?aSX6+d>Xn_fe#=4zd6%+GB>lD6GOq5bgEIi?N^PIQ}do(%7rq`A=BoACEajhWAFUBA%>6|)mQ z*%@S<+A&PpbX%=T?zT3>1V(7;ahdS5uFY40*Nr?SY#F0;B=(BdtHiV-H*IClF82^` zFE_xB!U$Dcy06^LKJ#+xMklb{Q9Y@AVvLX8#RCT}caDd@7cR{BuCu$~u*rym+e{~Q+VO+Be5VxwI zx{>uKTBm--jT)H8$f;uSuovA^*hFeSgy~(c9eIy+|DRUQJE+NJ4dWr8h%`YU7(sgP zNC^nyp@a^ifSAxZAR0hgKp;|u2uPDEASHmPhtP%4k&bkvC!ll=%|xZQ3*PaL-gB;V zXYT#uo7tJ2dG_7?zWwbxyU%`w$S)5*RnIQD{Hv$f>G}?u>zXVqymBq4L1|$-J$P>y zkh1^Q!_BI`I<$9kTF>#AKfTp3df)Z_NR3;`2UpxKTO1qaPrrvq!q#G6DmgPlhoX8( zRf$CZMepZxtLwTUtoB!uCdSD(#Oj}X_NKg1S{62^Rl;zFlNwn#<|IGg>G3TfuPyQ8 zp(U()Pm)C-*L(bNcY6HGt{y`@{WB`fu{e5k?Ik&$?YG&x0$V{P7Kaa^8ep z82oJVG~MZ?T9`R}+`fk}GvgQX?3(J28{k-^Jv&=N91RyyWuuCW_j~@qTYtJ|uE032 zXtM*z*YJ8J;FaDVR@?dt<5J~0+Qm=Wn^eYeJJ;ZVpX~%di671kP42$$hvz=`{#cs1 zM{An&8lR7=)K(mAoI3(+!UDVM?_8qV`O*sO~h)$PHl>-(Dkr-{G=Ih%zGVQ(@I#rO~)J78)f1_WP`C! zhM*x}UiVSf{?;+BFzQ7fNjc!mGJkA)xv;YUWx2sS_0`Me?MYDfY%C3;rBm`!Q-`U< z=QQ`v;5CCBcU)-yNMxJnZ(ntdv3l>ip}`%_A#@gnGzg8b+%H4BLtL%vXoxp@8(MTb zcPPi?lxUMvbIvsc*8&Qvwmk9MaI?9SbEdecn!9>n@2t(pHGOy^SdWR%(L6ias_J+6ogYWqc#l zrlniq76%*AL)sM}bdhBEz>2bvH(E?uX3=>v?u`iv3>hdeq2+kV>G-NRAvO<(y}yys zHQlRZdU@Ft5*g)$d)+&g7bT?nL}C6}`TR2*rCBF&^9>*81|H59$W5SiIIEj*n@GkQ zS8{ACf91F*o+Bf7c||*m167MA2i&T@opVe#zEfq6z%qjQQ(h_SK;F+`ET^@ zL7h2Ex18j5Pfx|C?iC2%XHZKFVN_~y?QjBlOsysV0dvK&!uQ}+UR@uk9)6HRCBJg3 zc;)c``xWOj#r?E9ch4DJL)7i^aFa~0q?bxC5)%_U!Smon`dqH?KcSoqwF7RSMaB{vCC;(nYt(Qs6v1E?R`+MACM z!=<<7Uvh;p?YqBM2Hq|GqTsaxMr9vZt2GE2%d$($2tn8J;t3f&TSP?XW?vCB#$XV6 zrN}2E@pazC6wyxczFK>H#uX3VO&>#AnVeYdg_HjQ-&j3+qf}&1#c~jlw09L;;hv1)s_J zseF64D?S8mT&;iEexJLb4ala1XmLxV(^*fU(ScB;DP@XfS-|?bN8L)l6yJ1fOTJuK zb-}z>%%&a}aCmN0c~Fi=f0A2ceiAuhl*b!jp*-p8{ zq*xK{p$uH7*H~?oJ2veaeo}wzW74;V4V(xxfYHBL8`YMHU!>6>Q%A#;#6CPW= z89(1kU$-t}0YaCjn3$feO%`q!PRJ98VLHsT<=(x+NZPn38ESy?+0O4yjQw2`rEg;~ zJ4d2M*wkV`e5B7z*=ZE0pbGzM|uR5G#&wD^VlVkvq-g% zrAL6Tr}#iU%o6A4SN4#1yTV2u9B>OrLpvy zbcXw@Mekp9mRWa8^=_3>?NN+^1a74PH5$JbCbE*O!evo>Mo;6jdc711!gwEKNBO+-MEEu0ZT=9F30KjNX@RCC$u`*Dj`Q*NCC> zG?h@OGwI|lo^9_cR2__UDtNQx$yZan{0!4a&0^PmKU`N0Jd@%GI`zq4049uf4hsKQ*<`@V-x!8{FA2QELpSgn+L1c>p( zN5aZqK~aN|(aVrYyE6QILl+0fnY=wQxh%O_hfLzD=tzl6_t7X-v?z5BYFV5XI5!4~ zBLQ>Rs08hK`Kegw!}DJX;RC;%v$*y8o%%aHA6GT@MSzp$cH({WqOO9Wg36Zo9bT*L zdvuHFr6#zC#sOTWx=3D1`7uRp4ZD<-^g;y_#O`v&q9Xvf8{c^cq;8|~l{1^TluB;Q_E8_kNd=&SIKgWptyFcedOF)(a06oS$^zTp)LDzq?Vyga( zdKC9J)UyJf80!N7sWEgktS*sYo{$T)!RsF3#Q+cCf$ckC93ha0=$CQMquSc4p)7dh zGruFi3?Eti4|&sS(z9>@sk2HT7L7+AHz6)(wrlyT$iX5cG^s0OmbGbXbi@KM1 zfutSsm=Ct}l=M~+RCAMdG0n=(Z(`PjR$|FZ=8T7=)mf2?Ea%@MQb=An_P3NsmeE}i zSM+&(MThL>YVuj!(1YS|JhI!7Yq!ElEk^)}xD+u&8f%-W2mL#hBxnV1NHPn^Om zcOnKRX&y7ugdG8pj9jjlvVhI^klL?X-oN0VNhzUAU8M|U3$E_737}}mN!4sUzZL&O z)2DbbHTVD5s$_HjP$h6C21?Ouz%uuvB z)C_%edgx_z0LMgAX19oDHo6Z^j47=8-~4n%Hs%$X*~*_UZY+vi?$4d$voq*vRj_GH z4zt|ixCT!Aon~pJ*#QEvIqSpITF5iQXTR-7*Ehdm(hI-I^=<{5oeNYMu{=OJAz;HhaEyr;i;!V}Mbywtu7C`~dVE83uAvQ;=;)sy)9d$70#P*BmYt$ohS7k{cST_bycx-~x5 zj8M#-Q4iX%z}7)$hXUJvx>QWI7joe<=^4xUNN%aOJ+1_X61YGJiCRh-2=l36IMc

bBDm9MF3s@a?rpq`l|#!H!=n4)WQyNA!~ONU?I=V&5iO)2$W<{u zacQ>uDQN1y_?yyk5fiPb)7+{3tjjUC{=!wU{v$v`+vC9SpD#h1ziEx8yDR1@PvLTw zo7{oevI2Ci> z=y}?<&)>%X%7%YH=NL(+vsQ72T336A&<45=-K~M cW$jqy7ZH8=7LonGMT9(7y8Nwoo8Ke)2Oj{iYybcN literal 0 Hc-jL100001 diff --git a/tests/http-pipeline-files-with-gap/suricata.yaml b/tests/http-pipeline-files-with-gap/suricata.yaml new file mode 100644 index 000000000..758e0505e --- /dev/null +++ b/tests/http-pipeline-files-with-gap/suricata.yaml @@ -0,0 +1,103 @@ +%YAML 1.1 +--- + +outputs: + - eve-log: + enabled: yes + types: + - files + - stats + - file-store: + version: 2 + enabled: yes + force-filestore: yes + stream-depth: 0 + +app-layer: + # error-policy: ignore + protocols: + http: + enabled: yes + libhtp: + default-config: + personality: IDS + + # Can be specified in kb, mb, gb. Just a number indicates + # it's in bytes. + request-body-limit: 100kb + response-body-limit: 100kb + + # inspection limits + request-body-minimal-inspect-size: 32kb + request-body-inspect-window: 4kb + response-body-minimal-inspect-size: 40kb + response-body-inspect-window: 16kb + + # response body decompression (0 disables) + response-body-decompress-layer-limit: 2 + + # auto will use http-body-inline mode in IPS mode, yes or no set it statically + http-body-inline: auto + + # Decompress SWF files. + # Two types: 'deflate', 'lzma', 'both' will decompress deflate and lzma + # compress-depth: + # Specifies the maximum amount of data to decompress, + # set 0 for unlimited. + # decompress-depth: + # Specifies the maximum amount of decompressed data to obtain, + # set 0 for unlimited. + swf-decompression: + enabled: yes + type: both + compress-depth: 100kb + decompress-depth: 100kb + + # Use a random value for inspection sizes around the specified value. + # This lowers the risk of some evasion techniques but could lead + # to detection change between runs. It is set to 'yes' by default. + #randomize-inspection-sizes: yes + # If "randomize-inspection-sizes" is active, the value of various + # inspection size will be chosen from the [1 - range%, 1 + range%] + # range + # Default value of "randomize-inspection-range" is 10. + #randomize-inspection-range: 10 + + # decoding + double-decode-path: no + double-decode-query: no + + # Can enable LZMA decompression + #lzma-enabled: false + # Memory limit usage for LZMA decompression dictionary + # Data is decompressed until dictionary reaches this size + #lzma-memlimit: 1mb + # Maximum decompressed size with a compression ratio + # above 2048 (only LZMA can reach this ratio, deflate cannot) + #compression-bomb-limit: 1mb + # Maximum time spent decompressing a single transaction in usec + #decompression-time-limit: 100000 + + server-config: + + #- apache: + # address: [192.168.1.0/24, 127.0.0.0/8, "::1"] + # personality: Apache_2 + # # Can be specified in kb, mb, gb. Just a number indicates + # # it's in bytes. + # request-body-limit: 4096 + # response-body-limit: 4096 + # double-decode-path: no + # double-decode-query: no + + #- iis7: + # address: + # - 192.168.0.0/24 + # - 192.168.10.0/24 + # personality: IIS_7_0 + # # Can be specified in kb, mb, gb. Just a number indicates + # # it's in bytes. + # request-body-limit: 4096 + # response-body-limit: 4096 + # double-decode-path: no + # double-decode-query: no diff --git a/tests/http-pipeline-files-with-gap/test.yaml b/tests/http-pipeline-files-with-gap/test.yaml new file mode 100644 index 000000000..98a4d4a0f --- /dev/null +++ b/tests/http-pipeline-files-with-gap/test.yaml @@ -0,0 +1,23 @@ +requires: + min-version: 6 + features: + - HAVE_NSS + +checks: + - filter: + count: 3 + match: + event_type: fileinfo + - filter: + count: 1 + match: + event_type: fileinfo + fileinfo.gaps: true + fileinfo.size: 733 + fileinfo.state: TRUNCATED + fileinfo.sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 + - filter: + count: 1 + match: + event_type: stats + stats.file_store.fs_errors: 0 -- 2.47.2