sysdig-kmp-default-0.26.5_k5.3.18_lp152.18-lp152.2.32 >  A ^]/=„;w!;KRa>8T`97=w>eʘGԫ#$X` >\B9'd^{_ j֎\ټOT6 I ^x/m[QRHyab2u]NKzC@/˲jt (1I3C>6(bO=bJ|S,69x`&nuf[t( 'ZZŏ@94s؆^djqBs)x*(ރ $Z䱼WUe[SmE2 rs[FN1#`jJgE >pM?~d- 8 Q<@HL_hs      &HTW@WvWHLp(q8x&9&:9&>zy?z@zBzGzHzIzXzYzZ{d[{p\{t]{^{b|c|d}e}f}l}u}0v}<}~a~l~p~~~~~~~~Csysdig-kmp-default0.26.5_k5.3.18_lp152.18lp152.2.32System-level explorationSysdig is open source, system-level exploration: capture system state and activity from a running Linux instance, then save, filter and analyze. Think of it as strace + tcpdump + lsof + awesome sauce. With a little Lua cherry on top.^] build70 openSUSE Leap 15.2openSUSEApache-2.0https://bugs.opensuse.orgSystem/Monitoringhttp://www.sysdig.org/linuxx86_64nvr=sysdig-kmp-default-0.26.5_k5.3.18_lp152.18-lp152.2.32 wm2=/usr/lib/module-init-tools/weak-modules2 if [ -x $wm2 ]; then INITRD_IN_POSTTRANS=1 /bin/bash -${-/e/} $wm2 --add-kmp $nvr finvr=sysdig-kmp-default-0.26.5_k5.3.18_lp152.18-lp152.2.32 rpm -ql $nvr | sed -n '/\.ko\(\.xz\)\?$/p' > /var/run/rpm-$nvr-modulesnvr=sysdig-kmp-default-0.26.5_k5.3.18_lp152.18-lp152.2.32 modules=( $(cat /var/run/rpm-$nvr-modules) ) rm -f /var/run/rpm-$nvr-modules if [ ${#modules[*]} = 0 ]; then echo "WARNING: $nvr does not contain any kernel modules" >&2 exit 0 fi wm2=/usr/lib/module-init-tools/weak-modules2 if [ -x $wm2 ]; then printf '%s\n' "${modules[@]}" | /bin/bash -${-/e/} $wm2 --remove-kmp $nvr fi AA큤^\^\^]c04093f711845e299581c576c2ef03932dd89fe015d20e3c76737338eb2812a0rootrootrootrootrootrootsysdig-0.26.5-lp152.2.32.src.rpmkmod(sysdig_probe)multiversion(kernel)sysdig-kmpsysdig-kmpsysdig-kmp-defaultsysdig-kmp-default(x86-64)sysdig-kmp-default-k5.3.18_lp152.18      /bin/sh/bin/sh/bin/sh/bin/shcoreutilsgrepksym(default:__alloc_percpu)ksym(default:__check_object_size)ksym(default:__class_create)ksym(default:__cpu_online_mask)ksym(default:__cpu_possible_mask)ksym(default:__cpuhp_remove_state)ksym(default:__cpuhp_setup_state)ksym(default:__fdget)ksym(default:__fentry__)ksym(default:__get_free_pages)ksym(default:__init_waitqueue_head)ksym(default:__kmalloc)ksym(default:__per_cpu_offset)ksym(default:__put_user_8)ksym(default:__stack_chk_fail)ksym(default:__task_pid_nr_ns)ksym(default:__x86_indirect_thunk_rax)ksym(default:_copy_from_user)ksym(default:_copy_to_user)ksym(default:_raw_spin_lock)ksym(default:alloc_chrdev_region)ksym(default:cdev_add)ksym(default:cdev_del)ksym(default:cdev_init)ksym(default:class_destroy)ksym(default:copy_user_enhanced_fast_string)ksym(default:copy_user_generic_string)ksym(default:copy_user_generic_unrolled)ksym(default:cpu_number)ksym(default:cpumask_next)ksym(default:current_task)ksym(default:device_create)ksym(default:device_destroy)ksym(default:fget)ksym(default:find_pid_ns)ksym(default:for_each_kernel_tracepoint)ksym(default:fput)ksym(default:free_pages)ksym(default:free_percpu)ksym(default:from_kgid_munged)ksym(default:from_kuid)ksym(default:from_kuid_munged)ksym(default:init_pid_ns)ksym(default:init_task)ksym(default:kernfs_path_from_node)ksym(default:kfree)ksym(default:ktime_get_real_ts64)ksym(default:memcpy)ksym(default:memmove)ksym(default:module_layout)ksym(default:mutex_lock)ksym(default:mutex_unlock)ksym(default:nr_cpu_ids)ksym(default:param_ops_bool)ksym(default:param_ops_uint)ksym(default:pid_task)ksym(default:printk)ksym(default:probe_kernel_read)ksym(default:pv_ops)ksym(default:remap_pfn_range)ksym(default:sme_me_mask)ksym(default:sockfd_lookup)ksym(default:strlcpy)ksym(default:strlen)ksym(default:strncpy)ksym(default:strnlen)ksym(default:synchronize_rcu)ksym(default:synchronize_srcu)ksym(default:task_active_pid_ns)ksym(default:task_cputime_adjusted)ksym(default:tracepoint_probe_register)ksym(default:tracepoint_probe_unregister)ksym(default:tracepoint_srcu)ksym(default:unregister_chrdev_region)ksym(default:vfree)ksym(default:vmalloc)ksym(default:vmalloc_to_pfn)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)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.0.4-14.6.0-14.0-15.2-1sysdig-kmp-default-k5.3.18_lp152.184.14.1^S^g@]A\Q\d[s[U@[0@Z4@Z@Z|;YdYYY]XXf@X@X^c@X*WF@W@Wx@Wc@W @V@V_VuFVs@VrVrVm]V9@V9@U5@UUF U@Marcus Meissner Martin Pluskal Martin Pluskal Martin Pluskal Martin Pluskal Martin Pluskal mpluskal@suse.comjoop.boonen@opensuse.orgmpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.comjoop.boonen@opensuse.orgmpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.comaspiers@suse.commpluskal@suse.comaspiers@suse.commpluskal@suse.commpluskal@suse.comrpm@fthiessen.derpm@fthiessen.dempluskal@suse.comboris@steki.netjoop.boonen@opensuse.orgjoop.boonen@opensuse.org- sysdig-32bit.patch: make build on 32bit- Update to version 0.26.5: * Fixed segfault that happens at startup (#1475, #1528) * Fixed memory leaks from certain thread/socket operations (#1491) * Fixed handling of SEND_SIG_NOINFO in the eBPF driver (#1493) * Fixed a regression in reading certain partial container events from scap files (#1513) * Updated use of Kubernetes APIs to support v1.16 (#1521) * Fixed rare driver deadlock that could occur during a context switch (#1522) * Added more detail to probe loader error message (#1541)- Update to version 0.26.4: * Prevent double-definition of ASSERT macro * Added fillers for chmod syscalls (#1472) * Added support for reporting cpu usage per docker cpuset (#1473) * Fixed build error on older Linux kernels (#1477) * Fixed driver build for RHEL 7.7/4.13+ w/CONFIG_VIRT_CPU_ACCOUNTING_GEN (#1471) * Fixed cmake to look for pkg-config before building grpc (#1470) * Fixed printing of strings (#1466) * readv input parsing improvements (#1463) * Suport Kubernetes liveness/readiness probes [#1320] * Fix edge cases in handling clone() and prlimit() system calls [#1401, #1465] * Stability and performance fixes - Drop no longer needed patches: * sysdig-include.patch * sysdig-linking.patch- Update to version 0.26.1: * Changes to build the kmod with 5.1 kernels [#1413] * Explicitly disable psl to address build failures on MAC OS [#1417] * Fix handling of container metadata in "infra" events [#1418] - Changes for version 0.26.0: * Perform docker metadata fetches asynchronously: When new containers are discovered, fetch metadata about the container asynchronously, which should significantly reduce the likelihood of dropped system call events. [#1326] [#1378] [#1374] [#1381] [#1373] [#1382] [#1388] [#1389] [#1384] [#1392] [#1396] [#1411] * Add field to display time in ISO 8601 UTC [#1317] [#1360] * Performance improvements of ring buffer processing [#1372] * Support major/minor device numbers for fd events [#1315] #1383] * Add the ability to prepend encoded log severity in the log message [#1327] * Raise the iov limit in eBPF [#1390] * Changes to pull user event logging out into a separate component. [#1375] * Log a debug message when looking up an IP address of an incomplete container [#1398] * Support cri-o container metadata caching [#1399] * Logging API with lazy parameter evaluation [#1394] * Support BPM container type [#1319] * Fix bug in fullcapture range check [#1386] * Allow chisels to receive the full content of big buffers. [#1361] * start the analyzer before forcing next for a scap file [#1366] * Create a grpc_channel_registry for all channels [#1369] * Modified the behavior of fullcapture port range [#1370] * Check file before dereferencing [#1397] * Fix build for older kernels (<3.9) [#1400] * Added -fno-stack-protector to avoid clang errors [#1401] * Addl loop prevention for traverse_parent_state [#1411] * Add interfaces for async metrics collection [#1346] * Use epel 7-11 (7-9 is no longer available) [#1362] * Make some global variables related to fetching container state thread-local [#1356] * Allow downloading prebuilt modules without SSL verification [#1358] * add test helper to container manager. [#1365] * Cleanup old docker images after building a new ebpf-probe-builder [#1367] * valgrind clean for analyzer end to end test [#1387] * flush flags change to new namespace, add code enabling easy use of sinsp_threadinfo in std::set/map [#1395] * add friend class for unit testing [#1406] - Changes for version 0.25.0: * Support Linux 5.0 * CRI container runtime support * runtimeSpec.linux returned by containerd is an object, not an array (#1343) * Fix gRPC build with gcc 7 (#1322) * CRI-O container support (#1310) * Fix check for Docker pause containers [SMAGENT-1305] (#1306) * Detect CRI pod sandbox containers (#1297) * Container Runtime Interface support (#1277) * Prebuilt probes * Prebuild minikube kernel modules (#1294) * Build probe modification to include Fedora-Atomic. [SMAGENT-1251] (#1293) * Fix for newer versions of LXC not being detected (#1345) * [SMAGENT-1433] pull legacy GCC artifacts from local cache as debian no longer supports (#1342) * Use TBB_INCLUDE_DIR for consistency w/ falco agent (#1329) * SMAGENT-1297: Rebuild gcc-plugins before building kernel module (#1305) * Modified BPF probe builder (#1301) * Call set*ent() before reading the user/group NSS database (#1341) * Properly initialize default settings for tracers (#1339) * Fix bpf ptrace filler (#1338) * Fix potential memory leak in libelf (#1337) * Fix case where fclose could be called twice. (#1330) * Handle mmap failure gracefully (#1324) * Add stream event details in csysdig output (#1335) * SMAGENT-1400: Make sinsp_logger thread-safe (#1333) * Never drop socket syscalls to ensure we have fdinfo for subsequent binds. SMAGENT-1270 (#1312) * Infer fd info for sendto system call [SMAGENT-1282] (#1304) * Async framework base [SMAGENT-1247] (#1303) * Handle events for unknown threads after scap start [SMAGENT-1082] (#1296) * Add ability to print filtercheck field names only (#1288) - Add patches to fix build issues with shared components: * sysdig-include.patch * sysdig-linking.patch- Update to version 0.24.2: * Added the ability to specify a set of ports where data is captured with bigger snaplen (20000) (#1256) * Made fd resolution work for getsockopt (#1280) * Check getsockopt event before accessing it (#1284) * Fixed snprintf placeholder for size_t/{u,}int64_t (#1279) * Disabled reading environment from /proc by default (#1272) * Excluding suppressed processes during initial /proc scan (#1269) * Fixed Windows build in CYGWIN environment (#1270) * Changes to eliminate warnings with gcc 5.4 (#1271) * Trigger build errors for extra compiler warnings (#1265) * Handling thread table overflows (#1263) * Deleted threadinfos that we failed to add to the thread table (#1260) * Reduce CPU usage (#1261) * Lua parser interfaces (#1254) * Fixed a compile issue when trying to make the project using VS2017 on Windows 10 (#1248) * Added ifdef guards to socket options with (#1257),(#1258) * Improved getsockopt()/setsockopt() support (#1188) * Fix fd.net comparisons with in operator (#1252) * Only check out sysdig for initial invocation (#1251) * Build probe modules only with sysdig directory (#1244) * Fixed spelling and copy/pased comment errors (#1250) - Changes for version 0.24.1: * Fix struct packing - Changes for version 0.24.0: * Switch to Apache 2.0 License: All userspace code moves from GPL to Apache 2 license. Kernel module switches to dual-license MIT + GPLv2. Enjoy! [#1233] [#1242] * Complete IPv6 Support. Sysdig previously had partial IPv6 support, but this release rounds out full support for ipv6 addresses in filter fields, csysdig, etc. [#1204] * loginuid support. Add user.loginuid & user.loginname to track login users, which do not change despite sudo/su operations. [#1189] [#1214] [#1218] [#1219] [#1227] * Track connections by domain name: New fields fd.*ip.name allow matching connection ips with resolved domain names. [#1213] * Add endswith filter to support suffix matching on strings [#1209] * Add minikube support to the kernel module probe loader script [#1205] * Improve error string return handling at startup/when reading capture files [#1215] * Disable boot2docker kernel module builds for pre-built kernel modules [#1232] * eBPF Support Improvements/Fixes [#1235] [#1236] [#1237] [#1239] * Improve/fix windows build [#1242] * Don't drop setns events when in dropping mode [#1198] * At startup, wait a bit for an existing sysdig-probe module to be unloaded before loading a new one [#1201] * Support extracting container metadata for containers spawned with just an image id and not an image name [#1207] * Properly extract image metadata when the image contains a host:port component [#1206] * Minor compilation bug fixes [#1212] * Small packaging fixes [#1228] [#1229] [#1231] * Fix an inconsistency when writing capture files containing unknown fds [#1234]- Update to version 0.23.1: * Fix ia32 check on BPF for 4.14 and 4.15 kernels * Adjust wrong events lengths when reading older captures [#1195] * More flexible captures: the flexibility of the capture format/reading process has been improved to allow backward and forward-compatibility [#1163] * Support logging elapsed time on tracers [#1186] * Fixes on custom containers support [#1170] * Avoid invalid free() calls around m_suppressed_pointers [#1184] * Properly set the address list total length when reading a capture [#1185]- Update to version 0.22: * eBPF support for sysdig: eBPF as the instrumentation backend in kernel space (beta) * Parsing an argument passed to sysdig-probe-loader as a custom URL for the kernel module like -e SYSDIG_PROBE_URL=http://54.183.253.176:52354 [#1085] * Several changes to expand the set of events that are skipped by falco, and to centralize the logic for knowing which events to skip [#1105] * Improved proc lookup in libsinsp [#1107] [#1110] [#1112] * Improved performance [#1126] [#1120] [#1121] [#1137] * In dropping mode, drop events that don't change system state [#1123] * Introduce non-STL thread table API [#1142] * Add the ability to ignore events by process name (comm). At the scap level, ignoring is by tid. At the sinsp level, as threads are added/removed from the thread table the comm is checked against a set of comms and if found the tid is added to the scap-level ignore hash table [#1139] * The container_manager can now receive callbacks to call when a new container is detected or an inactive one is removed [#1133] * Add support for adding custom container types alongside Docker etc (on sinsp level) [#1149] * Parse and store three new container_info fields: repository, tag and digest [#1127] * Skip proc scan in sinsp_dumper w/ threads_from_sinsp=true [#1164] * Allow k8s filterchecks with analyzer [#1160] * When creating the sysdig docker image, add the ability to directly set the sysdig version via the environment variable SYSDIG_VERSION [#1166] - Drop upstreamed patch: * sysdig_proto_ops_getname.patch- Patch sysdig_proto_ops_getname.patch to fix build - Seth Forshee : Update for proto_ops.getname() prototype changes in Linux 4.17 (#1114)- Update to version 0.21.0: * Track Versioning in Capture Files: With this release, we will increment the pcap major/minor version in capture files when a release adds new event types, additional event fields, etc. that are incompatible with earlier sysdig versions. [#1081] [#1084] * Add s390x as a platform using Docker [#1029] * When saving container information, also store certain mesos-related environment information associated with the first process in the container [#1021] [#1057] * New filtercheck fd.connected returns whether or not a network connection file descriptor is actually bound to a remote endpoint. Think of udp sockets that only use sendto() vs udp sockets that use connect() and then send(), or tcp sockets that have been created but not connect()ed yet. [#1051] * New filtercheck fd.name_changed is true when an event changes the connection information for a connection fd. This can occur in some cases such as udp connections where a connect() changes the connection information for a fd. * Make the thread table size configurable via sinsp::set_max_thread_table_size() [#1056] * Add support for new AWS Linux 2 AMI [#1058] * Add process group id to execve events [#1044] [#1080] * Expand the set of system calls returned by the driver when in dropping mode [#1075] * Handle AT_FDCWD arguments to linkat, openat, etc. and resolve the path relative to the cwd [#1020]- Modernise spec file using spec-cleaner- Update to version 0.20.0: * Use dithered boxes to increase the number of available colors for spectrogram/subsecoffset views [#961] [#963] [#966] * Add the ability to log json parse errors to a separate log file [#975] [#981] [#990] * Update the embedded jsonpp implementation to 0.10.6 [#975] [#982] * Reduce inactive container scan time from 20 minutes to 30 seconds [#985] * Added the ability to parse and represent RAW sockets [#991] * Handle finit_module syscall [#996] [#1001] * Add error message when scap_open() is called with incorrect mode [#997] * Use explicit versions for all Docker API Endpoints [#1000] * Report more detailed errors when PPM_IOCTL_GET_N_TRACEPOINT_HIT fails [#1016] * Add support for bpf/seccomp syscalls [#1031] [#1033] * When trying to build the kernel module using dkms fails, include dkms.log output along with the failure [#1038]- Update to version 0.19.1: * Fix a compilation issue on old versions of kernels 2.6.32 shipped by RHEL/CentOS - Changes for version 0.19.0: * Add per-cpu counters when a tracepoint is hit [#947] * mq_unlink syscall reports as ptrace [#927] * Fixed copy-paste typo [#946] * expose the event masking/unmasking mechanism at the inspector level [#951] * Fix targetViewFilter for "Accessed Files" in wsysdig_summary chisel [#952] * Various improvements and fixes for Sysdig Inspect - Changes for version 0.18.0: * Changed language of CLA to also cover government contributions [#902] * Support mapped container docker networking mode, currently used by k8s pods [#922] * Allow an external event capture dumper object to be used together with an inspector object [#912] * Handle reading large execve args/env that might otherwise cause a page fault [#920] * Add container events (container start/stop/etc) to capture files. In the future, will also be used for orchestrator information. [#935] * Add the executable path as a filterable/displayable item proc.exepath [#845] [#934] * Small README changes [#936] * Support additional flags to clone() syscall [#909] * Support page faults as events [#904] * Support for upcoming visualization product [#931] * Compilation fixes for sysdig monitor agent [#942] * Fix minor problems found by valgrind [#938] * Fix crash when reading large messages from docker daemon [#932] * Better cleanup of failed installation of the sysdig driver under coreos [#926] * Ensure that a parent's ptid is set when an execve fills in information on a new process [#914] * Fix IN operator so it works with non-string values [#913] * fix compile errors with newer versions of libcurl [#895] [#911] * fix compile errors when O_DIRECTORY not defined [#907] * Use session id, not process group id, for proc.sid [#904] [#905] * Small docs fixes related to container.mount.* [#901] * Update installation script to use latest version of EPEL repository [#897] - Drop no longer needed sysdig-curlbuild.patch- Fix building with recent curl (gh#draios/sysdig#895): * sysdig-curlbuild.patch- Update to version 0.17.0 (boo#1051562): * New features: + Support netlink sockets [#809] * Bug fixes: + Fix a bug on cgroups parsing that prevented sysdig to start [#835] + Allow sysdig to read k8s state from very large k8s environments [#856] + Improve compatibility with older linux kernels [#889] + Improve rkt detection by checking the existence of files into /var/lib/rkt [#893]- Update to version 0.16.0: * New features: + support for Kernel 4.11 + sysdig -N is now the default option, server port decoding can be reenabled with -R + Decode unshare syscall * Bugfixes: + Fix rkt detection for containers created before sysdig runs + Fix container detection if docker itself is running inside a container + Fix detection of lxc containers + Fix compilation issues on RHEL5 + Fix memory leak on spy_users chisel- Update to version 0.15.1 (boo#1032025): * Bug fixes: + Fixed driver compilation issues on armv6l + Fixes on Kubernetes support + Regression on rkt detection #748 + Fixed high cpu usage when sysdig was used with -M parameter, #783 + Fixed a memory leak #772- Update to version 0.15.0 * New Features + Support for Linux Kernel 4.10 + Use /proc//status instead of custom ioctl to get process vpid for kernels >= 4.1 * Bug fixes + Various fixes on Kubernetes ingestion + Fix some happening deadlocks in the driver when ioctl were exiting with error + Fix mkdir and rmdir events, they were skipped in case of page faults + Bugfix on topports_server chisel + Avoid some cases of infinite loop when evaluating filters like proc.aname * Fixed sysdig-no_return_random.patch https://github.com/draios/sysdig/issues/734- Update to version 0.14.0: * JSON output is not: an object per event separated by newline, instead of objects inside array as before. * New filter proc.pcmdline, which represents the full command line (proc.name + proc.args) of the parent of the process generating the event * Fixes for kernel version 4.9.3 * Improved detection of Mesos containers * Fix compilation with HAS_CAPTURE disabled on Linux * Fixes for merged captures support - Add sysdig-no_return_random.patch - Enable building on more platforms- Update to version 0.13.0 (boo#1017181): * Ability to open concatenated capture files * evtin.* fields can be used also for displaying now * Fix driver for Kernel 4.9 * Fix on IPv4 mapped IPv6 parsing * Fix memory leak #694 * Fix issue #687 about connecting to an K8s API server via HTTPS- Update to version 0.12.1: * Compilation issues when using non-bundled OpenSSL #672 * Compilation issues under S390 architecture * Various issues on k8s parsing * Stale thread info when parsing processes within containers #665 * Avoid getting cwd from driver, causes issues on Kernel 4.8 - Changes for version 0.12.0: * New filters container.mount.* to match container mount points * New filter container.privileged to match containers running in privileged mode * Support latest kubernetes features: k8s.deployment.* and k8s.rs.* filters are now available * Added glob operator for strings, works as classic shell glob path matcher * Added pmatch operator * Add less package on docker image - Drop upstreamed sysdig-do-not-use-private-jq-api.patch - Enable building on s390x- Use current macros for KMP building * drop sysdig-kmp-preamble - Use exclusivearch instead of excluding architectures- Update to version 0.11.0: * Support for tracers. A way to add user level events to sysdig stream. Seeannouncement blog post. * New csysdig views: Traces List, Traces Summary, Traces Spectogram * New evtin.* and span.* filters startswith operand for strings, ex: fd.name startswith /etc * evt.is_open_{read,write} fields, true or false if an event is an open() in read or write * Improved performances of Kubernetes metadata parsing. * Bug fixes for IPv6 - Add sysdig-do-not-use-private-jq-api.patch to allow building with system JQ- Update to version 0.10.1: * Minor bugfixes, mostly related to Kubernetes and Mesos parsing- Update to version 0.10.0: * setsid event * proc.sid filter field: the session id of the process generating the event * proc.sname filter field: the name of the current process session leader * --force-term-compat command line option: try to configure simple terminal * settings (xterm-1002) that work better with terminals like putty * Many minor bugfixes * builds with gcc6 (boo#985121) - Use pkgconfig() style dependencies - Build with lua-5.1 as builds fail with lua-5.2 and later- Update to 0.9.0 * Mesos and Marathon support: + csysdig views: Mesos Tasks, Mesos Frameworks, Marathon Apps, arathon Groups + -m sysdig/csysdig parameter to specify URLs for Mesos Master Marathon API + -pm sysdig parameter to get a Mesos-friendly event output + Filter fields: mesos.task.name, mesos.task.id, mesos.task.label, mesos.task.labels, mesos.framework.name, mesos.framework.id, marathon.app.name, marathon.app.id, marathon.app.label, marathon.app.labels, marathon.group.name, marathon.group.id * icontains filter comparison operator: case-insensitive string comparison * Support for SSL based authentication and bearer token authentication against the Kubernetes API server. Previously, SSL was just supported for CA verification. See the updated documentation for -K * New actions on csysdig views: lsof and renice * New network filter fields that support a CIDR notation (e.g. 127.0.0.1/24): fd.net, fd.cnet, fd.snet, fd.lnet, fd.rnet- Update to 0.8.0 * Bug fixes + Better terminal mouse handling for csysdig + Minor bugfixes * New and updated features + rkt support (when running sysdig in a container, bind mounting the rkt directory is necessary, e.g. -v /var/lib/rkt:/host/var/lib/rkt:ro for Docker) + chroot event + container.type: the container type, e.g. docker or rkt + Prebuild sysdig-probe for Debian kernels- Update to 0.7.1 * Fix sysdig-probe compilation for kernel < 3.4.0 * Fix compilation on OSX - Changes for 0.7.0 * Fix sysdig-probe for kernel 4.4 * Fix a remotely possible deadlock during ioctl calls * Fix Kubernetes support when data returned from the API server is particularly big * Minor bugfixes * Spectrogram views in csysdig: spectro_all (System call latency spectrogram) and spectro_file (File I/O latency spectrogram) * Ability to authenticate to a Kubernetes API server using a certificate, via -K or --k8s-api-cert=. Can also be specified via the environment variable SYSDIG_K8S_API_CERT * Ability to sort columns in csysdig views using the keyboard * --filter-proclist: apply the filter to the process table * -M: add the possibility to stop collecting after X seconds evt.latency.quantized: 10-base log of the delta between an exit event and the correspondent enter event evt.latency.human: delta between an exit event and the correspondent enter event, as a human readable string (e.g. 10.3ms)- Fix .spec file bug which was causing Frankenstein kernel modules: https://github.com/draios/sysdig/issues/496#issuecomment-165929462- Exclude archs on which build fails- Fix whitespace issues in .spec and .changes files - Remove duplicate %{_datadir} directory from %files- Update to 0.6.0 * Full support to Kubernetes, even when saving events to a trace file * semget system event * access system event * Automatically build sysdig-probe for boot2docker releases * Properly filter process table serialization in a trace file when a process filter is used * Some csysdig actions now ask the user for confirmation * various bugfixes * drop GH_496_fix.patch- Update to 0.5.1 * Fix connection to HTTPS Kubernetes API servers * Properly compile bundled OpenSSL * Fix sysdig-probe build on Linux 4.3 * Minor bugfixes - Changes for 0.5.0: * Full Kubernetes support! * Add a convenient USE_BUNDLED_DEPS CMake option to enable/disable all bundled dependencies at once. * New build/runtime dependencies: libb64, libcurl, openssl. - Add GH_496_fix.patch - Update dependencies and not use anything bundled- Updated to 0.4.0, notable changes: * Support ia32 emulation on 64bit kernels * HTTP chisels now support UNIX sockets (e.g. Docker API) * New events: mount, umount * Support Docker containers when running in a different cgroup root layout * csysdig view actions: press F7 or F8 while inside a csysdig view to see what actions are supported- Updated to 0.2.0, notable changes: * New version scheme * Update ncurses so it will compile on GCC 5 * Don't use GCC 5 inside the Docker container, because older kernels are still not ready * Support CPU hotplug * Fix improper access to socket structure during accept() * Docker image now includes the RUN label to make it easier to run sysdig on Atomic Linux * New events: semop, semctl, ppoll * Port numbers will be automatically converted to service names unless -N is specified- Use proper cmake macros - Remove conditions around fdupes as package does not build for old releases anyway - Enable parallel build- updated from 0.1.99 to 0.1.102 - notable changes: * Support for decoding setns and flock syscall * Parse O_CLOEXEC flag on open and related syscalls * Parse CLONE_NEWUSER flag on clone * Support truncated tracefiles * Now sysdig can rotate tracing file when capturing, using -C, -e, -W, -G * Better extraction/filtering capabilities for event related to multiple file descriptors, like poll * Precompiled kernel modules for older coreos releases * This release introduces csysdig, the awesome ncurses user interface for sysdig * Support for intercepting signals via the signaldeliver event: parameters are source pid, destination pid and signal type * Docker container ships with GCC 4.8 other than the latest from Debian, to increase compatibility * echo_fds chisel has a better formatting * Correctly show container output even when renaming containers on Docker >= 1.5- Cleaned and corrected the spec file- Cleaned the spec file up - Build version 0.1.99/bin/sh/bin/sh/bin/shsysdig-kmp-desktopsysdig-kmp-tracesysdig-kmp-xen0.26.50.26.5_k5.3.18_lp152.180.26.5_k5.3.18_lp152.18-lp152.2.320.26.5_k5.3.18_lp152.18-lp152.2.325.3.18-lp152.18-defaultextrasysdig-probe.ko/lib/modules//lib/modules/5.3.18-lp152.18-default//lib/modules/5.3.18-lp152.18-default/extra/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.2/standard/9d4dd973a9a1189528989728348f2d08-sysdigcpioxz5x86_64-suse-linuxdirectoryELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), BuildID[sha1]=b10774c885596c56702fb3472ee2e80770addbf0, not stripped if test -x /usr/lib/module-init-tools/regenerate-initrd-posttrans; then /bin/bash -c 'set +e; /usr/lib/module-init-tools/regenerate-initrd-posttrans' fi/bin/shpackageand(kernel-default:sysdig)kernel-defaultutf-88df97eb0cb67311e0fd2e301f45075c0e0c613021caf39ea6a0f9e2d45ca68bd?07zXZ !t/ ] crt:bLL C΋msOtն۷K9!i N஭zzTr"E+o^kA=zE1ϊX)#t0d Xg\2Re<`酓2^R<6nnUk v׍H:ZP*q{9JY'GS.i]kN&'W +($$S 8*qXoq^ϊ.SV_4-:&h"!̢l8:SBlZ"ydzVJ¸6r0̳ZG h[& Q+ÍFh3nL $CʿS-]I|]1uI:+x,Hu_<QE,P֐xq_0;l*";8r;͌kS_ݳD$q]kYTwa 7 n4q7pKl~&A jT3_٣otA*4xs>A5ȠSzTT\rq0';LoUts|apmpKD2Y)Vp oPF($\BQ0QTpstś/<,&y6(P*_ [xL ";qʒZgNYLjJo~Nmt2Ϧ79LejF尵fMT7(IܤଘLPϞQ3 ١%*: ,F]?ʧ.,^30m[FK+~īת[^X;pyoN_eDUԛ%{&]UGQ ۆV&Vr陯wbl`BKσ4i4K43sSQ7h{mtuNV*1vk ^P+?Oe!>vg /\,8v >̄^Eg*"bśC7h !iI:=l52t 2V _5NkPͬV"$bf.M&}o퓪4QmX_ dR-l'nFth`Ɔdyc429|@ dQ$ Q2Z8Nkįbä&Uq'+ ?LnSVm-$>o|O5nci pjIvrY<2+д"%8j~R eM|~00ra\g>A+7$o[̱v['7!a\>Tze1UmGN:meC*9(2Vb>2ed3O]夦Z ěp"MOr&R1EQ w-wc{I{f 'KQg"I7d$WU b`vGA{ߪ9=e'$}/DWDl+l\4ZgeuM<.j{l/">RR0pN@FΫk^pW}K4[^(d4g77)w0bhms;f' ȥ *d4[52N5X[<IUpB&@Id<<"J/C3Wl8;#dej/-٩RdbNKyz:4u'(Ѭ0vulɜR7|ؓށC&_Gk!L3U#-uS3xlЫ px9´bơf5ӧ (Mo7DN.f<>sizMh`$u"N(G#8bݩ2ŲC=NFrr*9d̠gr7o%8?!VRLR?.~糵$(ךa;JnjdiԄg{ܾ)Yȃg,_yԍJ¸; O=oC_UkEV-tڮ~`__MwTRN'jPN %:QݎN8ȲbTyl 9NjfWQ@ ,3Q Y|4ZZ<.Zf\V`ϱZ k&-hT^OQEM[kI1Zҭ&w'o^|WTcAy{kO@iC|&r;3~ue_1;foN̿Ov]ās c3'܅]T\O!%|u怙ކ?;H •1&x%w`ӱ . `qz|j %3OMo#Z;aW[wnCEe5GvG%搫QŰEXp ljNt nj$TPv8d.<ֶn [G27;5Ubiuu%"^^21ԢK v !x{+A(rX'cG3WUMo_?!ãTVӑuPSJ",nHP?^8PIџvJ{IbO{;%IWYT?*WLjZ ̙O2Y|CnhZGŸ:vd{a0S\F uAXD0cRqVدӵG``}'mjXPMMWSvTgKЈڗ])W|QBIʀ2NQ67aS?i5D2qP._\MkrqfmʸnP#@ W܁bUҨ+C!EEGcMAöy o]@{r'9Z6tPf @D$%VӰlS |चll",390x,Y3@'ʚVӭK9r]Y,s؏/k{t=u q#]!zEIXCw 9,B+yTmo!#Mw>3Wg)I8bC0&c/.ی2޷4OyHˆ) ~tPg bb*;?m ?|P?VkE=4XX`v~&[;`u]& !%uj\s׆#4OFN(vq9ǗMs˗ 8gJI0w(\'0uH F#5lj(Xߨ}fdK]"Ko/B;P@ .KyU'8IE^5#X1& N`G@9lo98-r^._I|H5-+y KHw2t.S+km7哵0wY>FRp#1iJ#h ˎ c9)z(z73Ž驽i@g-rV+-Ɏ$ O.ҟ(FM/=J:9܆WjP زS!WO`&CjKnN $]~6Q>E}{d!n"VJMv`,yMnM x$L5Y2`y6)E/ >Jtb d,0-cwnXP]HIIc hTO3U|ׂn-:W=\P=Pz& rҭLaYnp<ڍV2kΩ8|uh Pq-n}CGdp"u$P벵c,-=/ #I+yZ˃)"gH8`y1s:ՕwiClTKiAxPܔӐ3yl"qfGLC3pOxx@$A˄,et]C_lh[4xs ]w[!-*[^g =EIV2]DˢhP.+RI=KˆWj=L]w"B^1#?j|[~ֹPޞenv-,~sS\^_ZƩl2jX9d%l&XqK䨥fDafP͒ү]}>^u#r,Fڞdw<(ҿADWRԫ%ڽQ$ZNjdp𨢜O\$m> Ke )_eŠ3܎;~t·ue[G}r`w2N}X٠/s+,blFnʹ߅gԛl%F4`br s{X0㷖>^.BjB5xl\> P zsw[~ֆ @Co>M]cy& 8h}]t(`591w!4#4r!گSW>Feγ0Mfp{&r҈f>Y ZdJPbE ʼnEW0dH X _Ȗvx!e\^ƌ)u6!I3 2vzHYN+nn&sa!$a;,n=LAMn:r7}1\BHNr+yo噥xJ))c~8x$M ߚ%j 6!5 liɻS[3CtbJyD?*{x-I9O[PYhuxB%ȫMPgqtNO8mc;wxb}n%%a5SEH\ 292AR>zic @8YBgGPiI td r!|Uo)lY.mvRF ~1.NI]$]]vKY~㛗.Gm3$Jhthzt!cdvkEGX~"hXɠH,C8 }iFo(=?8ތ)eɥvp8.J.N-TߎJMkFa)?\'}BYD3 z%7m7C#+)~v7\8l Mj:ޥ?~nRKj#}]27vwUTsQy9ukaxKkv,(Bg:G)7(Y$gW$d3i]S=;铄kjȧ47q6c83RSQފ.ԛyMHx^ Z'ig5+?*):>D:ZRc#Wu Ƚ0?Blf{X Ӽ&Rͭbov4r'IԪ^2'|?#uJ'0Q z1 @wҋk.$-7kvYWOho_Өc\|P{Kym# }v/,(:J NͪQ[8p]٭2cu\3Ch/3S] lVz9\LaT>x[nhuyW }\Ga v[L泠Z^_{ZŃB%4H- g^+DQNw zvg0"l~aex{ޘÁ~Muvlve/$ D{ڹZۅfE|liGg|z,&E{dFбHrdMbe@.=? b|<4~A!M:$ӿyL62 tI!M$wΪVWtS'OKgK"P^xYn%&yk\%6 |L0x D@*f3̩:C}l'jzy_C\Me |ł7$3D #%А^keq$|9. dnH EY1ԡڞɩȷ0nT*,#CKa祄UA< dsclrpQ!N<"|ͳfLgGt+m"tR}w̆] Q8*PǑܖ?ZX%wʦ?:y{1-* _ (Gy8_i$3_]f %52I:V~[pĚRzw ;lDSWx2U}0l r-۝~od-6wW1°Q s,ғdLޟe[)n\i$4H;a.mhx},!u̡r >}ʷ{RN"A2BM/@m!1jn=^6^5/>2`~J/0fE$M՝Aj}߱s&LԶ6OY_:V҅~dPt! s &U& bƾ1'UH %$L2mp8"[$5)Z$ m|oYʼnEjϳ6*@!>y5/u0Bx@%KOVV<5Qgdpw]k1иD7Pn8UFƶ'%hr PVN7)jSsQ<2E~B|k咭@{Α N& {>qMH[?o' t/?g\ Kc=,qej)?i7HTjs%)R X]爑@;mXR2b;wg*ɟVM,TU< AOR*dd0TߣĕCTD"ș 4Ӈ<:-P%y!]e>4DD%LZ;-*6]A/{'/3bDt&*WbݯlE^!p Φis5(ǂPV(QͺyT<Єdz$Oe: HCrjRGg&7 p5Wy//$7ᒝ7M$FrW)Sh=o3]Bx)B~ÙUR+5 u,:`mLy8s nJP  9kaBs襻2oC>S5TN`?z}(aʳ9O30xTo/W=&,^K\ =K3%L픾oj3A>0ᇂ"gdMߋN8bi; "^IN(8ƭ$;b tFϫJZޅkoj~SHשr6'.:*0] p2HNKbYRZ>;WBrO4q.? Jwmqpst\VC䏷, |m`OkPD&u JيFKKaR;Axͷ$ Ϸ4!&T%x B(_?ǎgV"_u1gD dF.M<`^8H[ɰu>5qko)hNEX-ՙgG=gwmak攀7 ( #Hvz"3R9Vr=^U/`RSd&8/>^8¡ŰfG> a6 5A+tu΁]=zbwINcm+ܷ{g19~/Oc&_9RX|ľ<`2N=>G0Pc@P&FP hYhI7seUɂ)6x6;l>2)Bqvnr`X/kmzSꈇ;TtKlwaSedN/pLg:kw)TxE)phuZ9-?9q5>`*l*FkP .g񌇃fˤZti:n^5B4WHG]K #?Vo Xѱyp]wXkQ:+V|eM]yWˁlHjEܾuW$ufpH$SH%ͷi75z2XL Lͤ+Jݿh9E*A'$db;OMY P)ZN\ ?Gz|2fohRۑ%_ Z6i~ GxYq$*'Le \>Uvpy6myp[2Sa}ATӝ?]F4@+ ?n( 'U6[-!3`ƃo L<1Ɨwp NWSOkK_KM+Ztwn1jӶɤsxŻ>4dv<#u+V +Pɲx! toQ7nBn)Vg̟.:_[K 8]W7(2g+Y6w>B|v5(VJ֮s핃;3zEtmϗ/t}JhÕ9>1K1<ςgo3jK~8ӎ& ֆQ{:3~J0P֬Q5Xv6-mѓn3.Ȁd_ʇi2H^Yb9wjf Ft(uJ>d>M;u&;+o_EG._\o''*ډ74wNf X܂֕j-\?~o.elfl&RO3gg齺t=UMϖWIlQ4;| ƷF; S6a^Cﻯ\ҏ: ġO*k|nfJm8ͱPOLt-Fy_+9n&Z(@a9 L +  :}h9aۂs bHo \)Ү8Ro5LGԚ=N#c[ېS/0ΆXJ\7U1G!:GVu}*0r[6ѵ9Vȹ̍քaTA|AS jsl}9-oLpP^!~9SfTA1M-ց-?o5 w  Kh:YFq>ZʖO޹99..D[=,gu$娩FӤ&gfN}EgqsEB4_>Ҁfa(G.:nks_4_:wwÖ M")c?̐ɪH[ 4F,w)@4@{U?56S7Pܢ& r+Cn1 Df3qnjJ p >7KS &c޸uyeȿ&ѓ;Ύ(1bU(~;y6g 4+i$ x_lώM&XzB4?]}M)W"3`P}ߟ֙NM/|Y<,QX. wP,k&a fLu?xqMm9}"FMX#tET  49] p2E; ş-1qA_?CefüNr>VrԚ".;OEmzU`P6J0Z=;(5ڀEŃ?'YQCH\MA><{wļ4(j#RQ~9LG1DВ0#P"1P&7o+`W{!G"Yu-ϝ|TS⮬>fĜ.kl0Y/=zVD X=n`/ncN4BP~%$esy6ǘNVƹ?%BwñwNti S.^X3-E L޳aBhPrH~q" InvaLZ˝R ͪ`s68/Vl1)#a&3]VB4vꫀ+;tvo@cdFKYO͋yn F*+dx FRYsJҒp~b8;X/C3ǔOu9G H4,m9m KӔDJO!H#OSp)[<,hƎ|]Vvo;Iv}MpSYS{;ӭPwy6! W\8|bc٦{0/l:J/ذM˷$qvd]ӴvNOwPS3Cv#yu dQ][؞d 3.4sY,q0k0Öm4c,#R&Ob;N ؂iWklϊ6G\>ZAsBSܛ&KHIT&#`2h2 UOJRo; Rq#[F1JĆh'a#SAV ycxg(N6C?cb&Z0fDߟ@D[hl N ټV/S#?=(|gd+ۈyZ|.s҄40Bc*@v* tn5f~/4&ur G. CZѣ[`yU ɵ/M#WTIj/9^1b+Z͢ҭ}Oy$SϥOHtk?E0jIYm3 K%ȣ# j씼q}1Ä`p(y}.l,`tT_D0 Sc{BPXgX {.ԗ^gPf列PaCtHBvx57a)yZӌe\kNo A!FeKe#+b ;;߼Q1 1`D|E0 *хy(pC{yBX>0\$|$ۦ* i~R@ֻ@a)U37YI:e>qc>GHms\7;ҵ3?{k)pVJ?w_hSh) nv7.`/ެvx(㴲VH8eo+!QЃY֮:ŢnER9L<`ua^T!7gai^~qR%3{ s GUr%XMf$#59A>и(»JU.q@dK*䮸of6u !CYޜ#z,&p7"!0L$i RXFn1NktmAPԧZntOm 9aғCWRb_cww&b{I'64nfɻaaERԜ2 Jf%3=v{[e.> MOl$u,V3g ͇ɟP9e(e3u'7GY_ϺdVp:A$L7d̺6P?IL*8F]DU4dj4@Geodn hx' -[{XT8shl u:Oj g\t<#s5VȦsk}je4:\µ H6 !Yp~NдlI: 2עO%rL~_jGD8auƎS)WlO0˷0uЛ1i_@t8^'tY#᰸W[Ծ%xWaxI罰AlJZ>S! <+,ߴ]Y&U%WR$3Njݿ݃Aκx|OV#vH/@G3RřN!vjPRo8u-;8|'W޻,9 ᬒ[YU۱v:`c!e];T/JD 2lsn[CLS 9]'Re۶#m 'Q[Jkg,^0әpމtk-Tު+QգbVB!~Gp'#M__^Srz71pg64M}ʠ *9}(}{żv; ^ L04N اhhO2 ‘7Aδ쾮&*R Go+[CYi7<*5lKgU44s0%VFQN#s>QP<d͉: DCcǠX:^䉄vhR88x:ƱH'NN澊B[6bׄUA'TРNC蓐XcA5/!V(.)qpCs'3$&+#,1 b}Qdz(yKH뇉#WRօL=Yڸ:;%M#(qnoq(VIb3LukF707ƇxX1_9_]X x \qTb_ ._Ge^E3vJ8DqAMgKaZUyřI;S,Vbr lF pU)8.a귌rZ3 !y^.>į [Qu+ & O9Oٽ2Xg!#Xo伆Dd;Un 3ZzՄK_B`yLt75,Hg ^x1⦫}oH{, *n- ]AܝSj2,#_&UNԘYp*&» jOԁMoN}#,92m9nRM1YpTe̠eU |\kc[z>6gow ×_)U<3x G*[4ȅhFİcXӦ dn!)ƺ]n22?b@/|/StXT済%oj_UF _0_lLe %M^1=`Ͽ3rtI.bLC%|ӹT=&BFr_^X@s2E `JL\:AûmV贬}<y'v:pDH<*8]1OaZ.F@m[NF *&WLvA&;m? "QG|QL]T9 `bje`hyj:/Hơ? rVsFUkBn\7Q#qh8`NB%׾זS=TO৸ l&69]NԌP<`C4 }gW<ώT) R.(Nv\wuݽ0TX-;''5EMQ¶*!Ot=y x+݈/6E+ŪvA~?g]z=Tꒀv%Aqo72k78u3<МQԧzݑ9Y_9tZ!T j;Yl7ף*R5Gu.P;:?>W| _aJvUo4s|σNEX&eN@y?{+ZH'y#ao\HkUbjXcPG^7nWZh͌ G:1 AsZk7%GU q}P?fL* D N8t׼nd"X5)珯Eb+oB?zlrJcNFopaq`'C@:0V"x(<"EtFũDvy`;}PժZ*}ݒ*πiB@o҈UHm%#DL[KqBLާK%gFMpA>GUD߻VfX`9eJN6G=ힺ9XC) %Ze2ڣy aI5D& ْAR. 8iYvܵMN* Ugs<`M[/J(DկQMp-@,&Ҽ,UQW{\w/ЌP&n| IN(1ƎH^bK̹Ѹ{~qԌ8Y&,Ђ8] U1s0k_NE2Bnqn-Fêڷ &ҖMG쉣S˔k/nA 7#oJir>.;hC p(&c%GN51ЪK'z[/[^(<$JԌ8t;nJVB]LR'>,A"f߷&Чf[̑?܄-?_C{潰c U)"rq:8T k;?ܴ%nCe"uVΓn&7'`DZU YE'NFzw Gtzv~V^vBRq8WM dȠQ" S7q Fw8@F:R T ?o=QEhZkPg7-ó L3ح:-JR,!㸖l'}[d2{.4Nqߋ$4Ci@,vAJ$qxʽ駂YY*ԻQ#9~"t__Ϊj!-2<ʰiiO)kQUC7y,eQ fMM!x.4p | ^Gݫ0KfFĪ"a} I|lb<@:s!V38gJ G."am4~hZxG]UsKǃ AaMx3NY{CS)GVrv`=Kk>:,T?28sQePjг 3rldZ oF\GC,sD\H530m8B] k&9#xRpH}h;%&8,>ս6k9]* Jy4&>6OgJJHȔP1-;k櫐֘z?o/Ȱ7Y)þngf iUo޵SpZp>%8C/SQjmNV[6P#+mP$"z+!P l;PZP=!$.Sx%0yⷧZ"~R/[|(ǣ-4vU~ŦNgY,G a`JR2dg֨ZzJ1Y;By`dy4 0[64'>1*a+!O1Aƽ8ޓzq+jGJ_g9 oq )E"/%M{aag%,X1kn5|j }fY .~.K.B_g`^ ͔ 7+vSzkeVC*quãĊ8̀]Iఽ_gbWYO:7$ǧB'0Zo?hHNgekC!0>T?SbY ON ??~aaizIg֏m<G\akSuA!$v C>&u.+YH>M$([qDD)Enas2q K0{'>N@@HwPz ȶ$0_w1fH5:J(Bv@~yA eOXbB7#qn+ލ dAn9`[ `I몺M=_FԩZZ7)B^!a.̥ /gKaԯuAXq;*tq]) R8GW`dA~5u؍Ǝزzkp[K^1ϑY~MIN鲒TP;kdzSAڤJ(ӬE/чH. r_t*5c軮x stqt&Q#kg&*&׊˻dm2FOC_1 4-ᗍ1buf2r=,KsWkc_O6qw *gW^SWc[;ؑ~Ġ4sL>V iV=k 6NUM#!Vr,ܢjrG% s41Xk[V.KJ-+ÿGyodnBr:]FJ4gn,'i[JHH+L[KD2*hpb9_YY8M1|}09me8x쭯ɂ90m'XȦڊ~}7Y+bB XFc|M$GGYg&ߐAqnn&4w=lBpVMMK4tyAt{2Bi2Pӵq5P^[ pkr!4K}Ut;KxpReBG1G'> m=́bT)F8#rFXu[vNBj^{i*ݔ3/țO0$QE'2wق{Mф=]ko*x+G)u2 &n^ JM+iu}ִf\dTX9W"}V1Ǎevؽ]HAܨJxJ6]֐R? U=hX X-{0(wK0SQ< k ~O(5a^AזU#?9_y-% O斶8ShnB;xN @1eZ$bޭpVbmQFw~ĸnIҭ< <] j>bMaX jAO _RA󑅗ЃI)G=?m TpӝW xŌ2֯"qЂcc`"JL-@7oDF%+N=sIL"1qAOqh_k.D1?JG!j@?!B8q?D9?z>xXE}fO6}[SؘfJ}@ m3rkI*ŚB3g*1PgU@9Zpx{]@ާBw6qDG:L܏8E_6`ѕό T-LjEXtO(5T)({??wv6s6uc^eF4٘ԌROBh0H_ vˏt6>O:jJLrx uh$Sˌu,eQg W":wnHM/ (?""f1.<3|Pv-*x) WY' GH8L"**N ˖fE|fIr(p&]z!&Ms%邈Kk4 ~1v|XAXSjzmq!a2ƾzd&>lR"݁4դ_mj;՟縪k#ަ }q8t!iiJ)"=}H0/IY%N^- I+R+{V둱no- Ws ZΎ)xC+.W ^^Ȧlw}s1qlska?^~/M_1"ߠg o'U"A}>1Q!iBTj2I{BdzEDübF" mɈIԼpZQw` Ot(!bW vt,UZ dr;<XY$ N/c3IW΄.F?BP/إ^nAb{ESgG 44NNb<~ML Q`瓭JzXm!;$(Xv,la<)b*-n8\bs Ձi91aft=-Zɺ/obP81Q1!ڛT j4eb2:ѫ;g2h!['z%&XMog.T*fjl aq&B*{}x=d*G*S ȫ&5dX`}j^9~iK*^ڨz3ES+i]<foL,뼬p>x&eyۄP=M Z Lnt WBcz6j LR~EBO0ܫ( -q, kJvUEmΰL-0i ֢y(7rLOf?CEf~Mu<1Ls?|l.7cEB=x]ZQ4=<߫6ռme.I-װR( }$ 9_bPeF^pF4 MR}{l@u(ȓ%ckSLNvisbx' 9_dZmw_(8:yPSNփ C0T6ޚimXl M@ uu ~֒cddؾJ6&5.MlOrrYo$f&*[}i7 xSkCp|m:Hm:_]~))*hc2K 6+2,^\IM1F.y2H^ _Ĩ{ɒ" Ʉڛ?3jOKzzBf&auux(؝11nV11hqcZcDu70rxN_X#%K<{mU ȡ/w0B_!O.<\T<]7 DUj_;w9qVAԘ)a qztjq>FLk 51eA)@= ,?އ1E3;M|wqM[vrW WFKI[84(氼hOkXnV5' ;&L WQ>ؑG0hRMqRZIe_V58(C\KX+ ֨f߶Un߈_$+x}[cO̵%)x rHkJq. St Uw>#ˡ9x S=yY}ݨ@p*;RJnʱzE}S{uOb:?aDwYT0gܲmԢGWAVʥZ[#|kt wNdƓJ*$@GٍQ#htmF;asмi_"7 >Yh{n 2ViCqO6"'onjOooSa]X AYd+) %jTJ_.$a Jp_)ũk31 xCP;/e ^SƉݒx$JqSG65Ypw~|SjpIzOyN|}SK:.Tc, zdÎCv1ߓ%g߉:\OGaPl&{x[yqy8KWl*3 y@~]4Jn ؀^s$k.[cȗUpOP>PvG5,,z @'z g-ar th`G<'BJQ˰-vX't;J&txԠ8o@v'\`Q̬ J` pxX"29gaMS%Uר^%P+byԷPWo^tX#mƇEfc]guQiBdU5.{;PTPpiϧ:otN[>ϮaHcM\Ll}ٰ_3+, 5ALE<"1[o/O\FDFjf DrZ+΃jM5ʲs5%QY6 ՝ Zzg.f sK_lUq2 #,@_ȷ>pHyכGx/>V{DlG2'R`sͩUǑmع.D]?aIE NHtWrZ+7O \jZ~ւj^ f]lfJc}@!/luŕƮZu]P$P0q?>q5AޯIi< 8АtK3;|;Pˇ+Ec<ӝzXYFϒ߻pI%#2}]ÿVO8ƶKy4/s"f4ZdQF>ܠd9ΡJ%Ipu$ q+^Cj-| u|#~. mYsXv ɦb-e![<4# ϗsRFwb]C &xa1Fc'.򇚧Ȗ:7>woț\dqd8!ׇZЭ=z (.,dSHK $%ͨm N,O"Akxh'C_={ak;R? )lT~1$q8ꇣ4R.(Gcgp S@N, @tK504a͵3fSӰžҚ͞a#Jk7Vb<ɗX<W17'A>D4l4rwQ(h 0s1A P+P(zӹ.;A&,S%OS\Af3W]9`=A TmF_# ~oWbQzF!8tAa=q#$:8Qb9au*^!icu$ 諍HJ, vOԚ,6ϋ(X+y[VT@nNiە(%*瑸_EgBl_2͕ϝAMMj|3+P2m눆P(iQvB e;j[9>XQa[Zqu-0㸿1PbAՠ_g%eQS柇@5"=6hNv]rؤĕSn()=~k3qUU2o=I,t5<2@*M +̦0:+!Gi%XB بc<׉r6¸U 3\.Tp /|<6Q2m/ƫkxdGdfy%w@wn&'6gI4/2'g.+8 14IvXf T<`hiupS{e=WsR&K$%1"Қk-u\#0G]FQ9.f›8^ RIM/0]9>^_uE1x.@2u>9l]F~r=2Kw] e}I Tb\ 8ڢ6LI=ǜ37sfr4`j Csa @O Bn~+7L~O”rȅQOԠTU)7o 21eWi#U~>x |YMaQ/5r&"]ymqU[{WiD ;J8g4/fSDeu7FDU8-8m㆞qS|nv D+d`3ՋZ-Zi%=ҽOfH Ko٨ȸ cq>Ed^lT^b׉N5z St4qf : y*RB| Tbu05)LmyK -7lT^' ʣsӢasJxA<\.FE*[hDwxT4jEBy`ҽښ^KDS#h M joJ#-&w3 rYU,ceO4/, ǜT} Oq%[RDVXjq|9tzYpLw1b&J ;L\y07~b_ߍQT#29d/  "AMzEnëQW63mYHC Y8$ܐ! ګ54¶HV-̺h˘]tThD.1L Ğe(0&,?F2F) zFX4!@>G;!4]\;LW}Zwi!c)XaEB!"Tt+1՛ݴj\FY[)9ģ}xÏ#K,b/:p_OmӊwtF$J{JCzLT~eQEj?Ř܋COgNT-S0`, WhY`1E9잖i ʂ>^p/l ŽUҜ} >Q?Zus\@9gIM京N.VFFLh>dF`p\voQ#e? d;ă읔iL&S4Y7c7 mM7#7۬MujuD^%-Hq5aNH>q&.Na YiYDfՑ$ۥB$q{ dn$9e-1*rJN)}tG>cTœ. -aih׎IaK@*=\ QHCWpZê 7m,T8𪊸 lWzh=pgqR6g뛚` ˠHwWjF(g%yĠ\Zfd6$ꡋ{5,il2'Q750WwTbΝTdO=y 69I5-2و1E+}Mf۳6MdփV<ïkwV!P%tcdI.O9F+GX™}0]:Y-駯EhJFWFА*xL6yC}J^wf$ۦ/r,|hai<[m3& ﮝA3)ޘьJ+{EM.QތGu"λ4b8+%W&CQt/*ұDʬɲEheZODuYל_Cr?dzeCkDx9`!ٰ߰m:j㏡`-Ih)244ѻc^Soŵ %1u9d!fn %SsKt q1%tb~=-Ks' H;yuʷ1A JjvN{ # !^Ө[J;vvbۍ שۿ^X+̶Q8=t6G_gօb$T3dt_I2EoڕC?q $ )4;$A+KM>Cך.SzZ)-[ʭp7< R ӟJYR1&v!g2`rq[Ih"cڙHb|v~cEfSٴ.Ȍ[@Uޚ[L|E8(n]m5ؕ#(?Lm\ӳzYnD$vloɷOP I3> +sѭ4&@$L+ʓ7R$ETc[l0qvSN[,N.bw+joNh#X,d1RK^\ꔉ# ,ZpT$N.5U "+WQgnA_6RSVqll}Qa>e;SLdtqa2S|'?^R$Ǭ$ ޹6!ƟeVmT|8GnBޠB|NߣQ?'XR hw>;zZԅH|y0>Ta!5*=oW]͟.b:z(@Oso]Bq8^s|`{v<{dI^#q IuBD6\L_Q|$,CE ԏ1 S{dK."r2K0Z`8}ʶ?Ϝ _KbwY+Yplՙ@1%)vghjNě$(Yo&ub,UNCes4eHՂ_DtMS % $1"bV|9\ 8$]X|- V#3 Bw`@h>'V0#DkQg 9k$r&59S[8%:ݢ$@gq8cWSuւS[4N% [zy5OVBe`z@S:#RF1ؚ9A- YI<?_|d2U9%;eUf7dvDO^%{dsfEi`qXsg[%ڷK2IUrzѲOf5Huä C9'.%zHKoY|k僦쑝h J[[ }J?>`˩5ӷaőSv=ƿ'$EE2Cn;lD+myO-*>"Wd8}}XPHCJC-{!o$o ,IYOV7Ggbiv4tڊ=/hGQXl-jC* v0 N5{]?Wj:3;eF׆쑭Nr0׼(3 +_K֪'2!ʙ.K%3![`\Hؼ0d%\v :0H6n]?ԑ3 ^~y}5+![~QYOR&>C׶Oh\?HΖ]71SMA~*PfB@~-F` ܝ)3ttw{`kG+ ? \QWXOq>E$|=(wXL]gړM hf4  DLE=5וGۤTo$/m!el^g:xocN߆Ps3W` >|4nim]6+ &@FHEn_f-c2,18YL8YI;Ra{gBD0N,YsFk(7$D MgB2YYRp> PL+/DZG) LT7^=HcڀA<RjUkhF1#ذ͢Psoǫ9 Ik$)/tQ:S!+=khļA'qaJ?~31Cj<fz-}"GyjV6:--8p#U~8#I+4T/ %%ng|%Cw:B~?bQgqE^F1ʟBY͋ Bɽ +[3u˪n/Phkآd v~LI69TR, B]*T[fr9gdPPd!'bcOԌRΘ*8B2g>B:E1@/ HygeH_ݨr=<>͉y!V`cnFF$;P+0NCȚB0MѿAIv hok2~l6IYpKB"_xpTBzTꙐH>W|A<cԾ1GҺu.'+?,E j\Z/{ `zIw`Php@ fx0 }8^{HBu4[A IJXe,v%r@S.)Yc(my[=FeX1~U!kJ -eъq:AlExD2Rҵ#8oCFh?+sJt5}9ިz̩X"%"K Sq:5{ȓ:,#z5p͵Kΰ,=;hvUq4%}P=~PW mf{bq-(%Y|eC@LR\>.+z~7P"p2U=ӷC+ LHc` Gp $ tGy {F-V8ikl>,hXuoR ùA\`UR>d%I fHAÕLð{gr 9}wQ3:H35"|^xȡ{G2CUc5XF2CE%욵BWQmɡ4Ozo/yQPdJ&y-4k<|h XA[yTYpxQRv{ˎ)4=v=Foi DdHRo^ qNiu8rsOZ*ט#ׯ}_nCMrz^B߫i#%cq 5iTZD2d]x25Ж+v2=Ñ9Q3U 4[IwZj9Fp%l=8b;@Cw{́hCD S(޺Fhn$urg~&Yƛ)c|) #pFذ#uI2s8tVgGAN}HMa'*tzUQWmAJ]wȾI?:]jA"R0ƄWGHf$We)&i֖ Q\ *ii*X1.ѹ Ț0c)K7g1ivo$A;Js}@]q7)Ж-C+\ ՋٖhMၥbs͓rV:k*vʗD]Rǡ^B"@WEZ&c4JY@3`5}6;R҉Q"m]2r BTzm[a5֩WHH8Mru}CBI6Usݵ)ܽF{:~M>,ߩlvځ$?h$.e?'^e />K[7b ̙{PoO܃ ZT\cKd&`;z{Ln^gJVs`@iR2`G~9(Guzܱ" bJ.۶ɺ.j=^΄a&uU%*f:NeLB*fG~ovA&?1^e$^ wzқU.u+__mm<[uu}bH%h~AV#ƉD_i&tX/B٢ \6`MgܲTLCj궔Ē`u'}WxV|, aW-/H/=nsnU;$:0/c ֺnONeQ2Fh_!̖72Qo]0L*uYVp}G$]13o/K] zGegЦ&Z8CE(J63'(4I+IYtΏvBa *x(V UԱQV"iȜ˪[/y=Q1/hmGri]pP#s)|:=Wb:z LgpⰙۥ|vO܂h&\nkZ|&x7 Y.!F# arfc\I -F .HzܠdJ,kUF˵R5euԚz.{漌O4 `CI8g,d 49ss}OpC\%->u۩8Y3h :̯:O?2̣rxP ,vepr!_$@P}lka { as̘NRcuM\Q~w 4 TP8:iOɑM[_CjJo+rtlI~(./Ts%xI {ŽHiJuI j5➆%C,7u:JAF Cc4ᎎWjOμ-$.!}5oV9G_F3ddp>"12kukiPXFYD?!zǬ| +M>QԿx퀻d vs{wvf/\۲o#쭱k~0b;t ԕi-Y$Zh滁/p?S{]葍g[ފTHs4'$??h@/ <+,jB0;Vne'-ү5D!%<XJ3JEan>|qRt>ԬX!u7bF]4JCXSfx>mvWC9KQ*?/|s8q7=Ws /#й:X/LU}Q\0SO_g[C[<=[EC@px WSdd8궼aԳ,eI^гcT ?P?J0m4-=yim 8=GE܎f?=Pdԅ>/\eM+s-Xnj5Cˈ|GF}zssC{m ^ڗd܍5$:\k:y