<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="ProgId" content="Word.Document">
<meta name="Generator" content="Microsoft Word 14">
<meta name="Originator" content="Microsoft Word 14">
<link rel="File-List" href="cid:filelist.xml@01D01EC3.27DEE740"><!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:Zoom>120</w:Zoom>
<w:SpellingState>Clean</w:SpellingState>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:HyphenationZone>21</w:HyphenationZone>
<w:EnvelopeVis/>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>NL</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true" DefSemiHidden="true" DefQFormat="false" DefPriority="99" LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false" UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false" UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false" UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false" UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false" UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false" UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false" UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false" UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false" UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false" UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false" UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false" UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false" UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false" UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false" UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false" UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false" UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false" UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false" UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false" UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false" UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false" UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false" UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false" UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false" UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false" UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false" UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false" UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false" UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;
mso-font-charset:2;
mso-generic-font-family:auto;
mso-font-pitch:variable;
mso-font-signature:0 268435456 0 0 -2147483648 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;
mso-font-charset:2;
mso-generic-font-family:auto;
mso-font-pitch:variable;
mso-font-signature:0 268435456 0 0 -2147483648 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:-536870145 1073786111 1 0 415 0;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:-520081665 -1073717157 41 0 66047 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-fareast-font-family:Calibri;
mso-hansi-font-family:Calibri;
mso-bidi-font-family:"Times New Roman";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-noshow:yes;
mso-style-priority:99;
color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-noshow:yes;
mso-style-priority:99;
color:purple;
text-decoration:underline;
text-underline:single;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-noshow:yes;
mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
mso-fareast-font-family:Calibri;
mso-fareast-language:EN-US;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
mso-style-unhide:no;
mso-style-qformat:yes;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-fareast-font-family:Calibri;
mso-hansi-font-family:Calibri;
mso-bidi-font-family:"Times New Roman";
mso-fareast-language:EN-US;}
span.EmailStyle17
{mso-style-type:personal-compose;
mso-style-noshow:yes;
mso-style-unhide:no;
mso-ansi-font-size:10.0pt;
mso-bidi-font-size:11.0pt;
font-family:"Arial","sans-serif";
mso-ascii-font-family:Arial;
mso-hansi-font-family:Arial;
mso-bidi-font-family:"Times New Roman";
color:#172877;
font-weight:normal;
font-style:normal;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-unhide:no;
mso-style-locked:yes;
mso-style-link:"Balloon Text";
mso-ansi-font-size:8.0pt;
mso-bidi-font-size:8.0pt;
font-family:"Tahoma","sans-serif";
mso-ascii-font-family:Tahoma;
mso-hansi-font-family:Tahoma;
mso-bidi-font-family:Tahoma;}
span.SpellE
{mso-style-name:"";
mso-spl-e:yes;}
.MsoChpDefault
{mso-style-type:export-only;
mso-default-props:yes;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-fareast-font-family:Calibri;
mso-hansi-font-family:Calibri;
mso-bidi-font-family:"Times New Roman";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1621305584;
mso-list-type:hybrid;
mso-list-template-ids:789333838 -61853254 68354051 68354053 68354049 68354051 68354053 68354049 68354051 68354053;}
@list l0:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Arial","sans-serif";
mso-fareast-font-family:Calibri;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 10]><style>/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-hansi-font-family:Calibri;
mso-fareast-language:EN-US;}
</style><![endif]--><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="NL" link="blue" vlink="purple" style="tab-interval:35.4pt">
<div class="WordSection1">
<p class="MsoNormal"><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">Hi list,<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><span class="SpellE"><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">Suricata</span></font></span><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">
is giving me a hard time alerting on app-layer specific traffic. I want to alert on specific HTTP and DNS events, but so far I don’t get any events at all.<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">For debugging
purposes I’ve created an alert that will fire on <i style="mso-bidi-font-style:normal">
<span style="font-style:italic;mso-bidi-font-style:normal">every</span></i> http session. There hasn’t been a hit yet, although I’m monitoring my company’s internet connection and have initiated enough HTTP-requests.
<span class="SpellE">Tcpdump</span> shows me<span style="mso-spacerun:yes"> </span>
the complete HTTP-session and when I use an alert that fires on any <span class="SpellE">
tcp</span>-session over HTTP_PORTS I get to see them as well. <o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">Rules:<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">alert http any
<span class="SpellE">any</span> -> any <span class="SpellE">any</span> (<span class="SpellE">msg</span>:"HTTP connection detected "; sid:89601; rev:1;)<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">alert
<span class="SpellE">tcp</span> $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (<span class="SpellE">msg</span>:"Outgoing HTTP connection detected "; sid:89602; rev:1;)<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">So, first one
never firing, second one constantly. Should be the other way ‘round, right?<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">Anyone any idea
what could be wrong here (or better: where did I go wrong?)?<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">Some additional
information:<o:p></o:p></span></font></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo1"><![if !supportLists]><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-fareast-font-family:Arial;color:#172877;mso-ansi-language:EN-GB"><span style="mso-list:Ignore">-<font size="1" face="Times New Roman"><span style="font:7.0pt "Times New Roman"">
</span></font></span></span></font><![endif]><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">Checksum
checks are off in <span class="SpellE">suricata</span> and offloading is disabled on the sniffing interface.<o:p></o:p></span></font></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo1"><![if !supportLists]><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-fareast-font-family:Arial;color:#172877;mso-ansi-language:EN-GB"><span style="mso-list:Ignore">-<font size="1" face="Times New Roman"><span style="font:7.0pt "Times New Roman"">
</span></font></span></span></font><![endif]><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">We’re
in IDS mode, on a SPAN port, which is not overloaded.<o:p></o:p></span></font></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo1"><![if !supportLists]><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-fareast-font-family:Arial;color:#172877;mso-ansi-language:EN-GB"><span style="mso-list:Ignore">-<font size="1" face="Times New Roman"><span style="font:7.0pt "Times New Roman"">
</span></font></span></span></font><![endif]><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">Stats.log
says no checksum issues, no reassembly issues, <o:p></o:p></span></font></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo1"><![if !supportLists]><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-fareast-font-family:Arial;color:#172877;mso-ansi-language:EN-GB"><span style="mso-list:Ignore">-<font size="1" face="Times New Roman"><span style="font:7.0pt "Times New Roman"">
</span></font></span></span></font><![endif]><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">Configs
attached<o:p></o:p></span></font></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo1"><![if !supportLists]><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-fareast-font-family:Arial;color:#172877;mso-ansi-language:EN-GB"><span style="mso-list:Ignore">-<font size="1" face="Times New Roman"><span style="font:7.0pt "Times New Roman"">
</span></font></span></span></font><![endif]><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">Build
information:<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB">$>
<span class="SpellE">suricata</span> --build-info<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB">This is
<span class="SpellE">Suricata</span> version 2.0.4 RELEASE<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB">Features: PCAP_SET_BUFF LIBPCAP_VERSION_MAJOR=1 AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG LIBNET1.1 HAVE_HTP_URI_NORMALIZE_HOOK
PCRE_JIT HAVE_NSS HAVE_LIBJANSSON<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB">SIMD support: SSE_4_2 SSE_4_1 SSE_3<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB">Atomic
<span class="SpellE">intrisics</span>: 1 2 4 8 byte(s)<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB">32-bits, Little-endian architecture<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB">GCC version 4.7.2, C version 199901<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB">L1 cache line size (CLS)=64<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB">compiled with
<span class="SpellE">LibHTP</span> v0.5.15, linked against <span class="SpellE">LibHTP</span> v0.5.15<o:p></o:p></span></font></p>
<p class="MsoNormal"><span class="SpellE"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB">Suricata</span></font></span><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB">
Configuration:<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>AF_PACKET support:<span style="mso-spacerun:yes"> </span>
yes<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>PF_RING support:<span style="mso-spacerun:yes"> </span>
no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span><span class="SpellE">NFQueue</span> support:<span style="mso-spacerun:yes">
</span>no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>NFLOG support:<span style="mso-spacerun:yes"> </span>
no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>IPFW support:<span style="mso-spacerun:yes"> </span>
no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>DAG enabled:<span style="mso-spacerun:yes"> </span><span style="mso-spacerun:yes"> </span>no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span><span class="SpellE">Napatech</span> enabled:<span style="mso-spacerun:yes">
</span>no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>Unix socket enabled:<span style="mso-spacerun:yes"> </span>
yes<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>Detection enabled:<span style="mso-spacerun:yes"> </span>
yes<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span><span class="SpellE">libnss</span> support:<span style="mso-spacerun:yes">
</span>yes<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span><span class="SpellE">libnspr</span> support:<span style="mso-spacerun:yes">
</span><span style="mso-spacerun:yes"> </span>yes<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span><span class="SpellE">libjansson</span> support:<span style="mso-spacerun:yes">
</span>yes<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>Prelude support:<span style="mso-spacerun:yes"> </span>
no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>PCRE <span class="SpellE">jit</span>:<span style="mso-spacerun:yes">
</span>yes<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>LUA support:<span style="mso-spacerun:yes"> </span>
no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span><span class="SpellE">libluajit</span>:<span style="mso-spacerun:yes">
</span>no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span><span class="SpellE">libgeoip</span>:<span style="mso-spacerun:yes">
</span>yes<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>Non-bundled <span class="SpellE">htp</span>:<span style="mso-spacerun:yes">
</span>no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>Old barnyard2 support:<span style="mso-spacerun:yes"> </span>
no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>CUDA enabled:<span style="mso-spacerun:yes"> </span>
no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span><span class="SpellE">Suricatasc</span> install:<span style="mso-spacerun:yes">
</span>yes<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>Unit tests enabled: <span style="mso-spacerun:yes"> </span>no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>Debug output enabled:<span style="mso-spacerun:yes"> </span>
no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>Debug validation enabled:<span style="mso-spacerun:yes"> </span>
no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>Profiling enabled:<span style="mso-spacerun:yes"> </span>
no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>Profiling locks enabled:<span style="mso-spacerun:yes"> </span>
no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span><span class="SpellE">Coccinelle</span> / <span class="SpellE">spatch</span>:<span style="mso-spacerun:yes">
</span>no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB">Generic build parameters:<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>Installation prefix (--prefix):<span style="mso-spacerun:yes"> </span>
/<span class="SpellE">usr</span><o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>Configuration directory (--<span class="SpellE">sysconfdir</span>):<span style="mso-spacerun:yes">
</span>/<span class="SpellE">etc</span>/<span class="SpellE">suricata</span>/<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>Log directory (--<span class="SpellE">localstatedir</span>) :<span style="mso-spacerun:yes">
</span>/<span class="SpellE">var</span>/log/<span class="SpellE">suricata</span>/<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>Host:<span style="mso-spacerun:yes"> </span>
i686-pc-linux-gnu<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes"> </span>GCC binary:<span style="mso-spacerun:yes">
</span><span class="SpellE">gcc</span><o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>GCC Protect enabled:<span style="mso-spacerun:yes"> </span>
no<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span>GCC march native enabled:<span style="mso-spacerun:yes"> </span>
yes<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="1" face="Courier New"><span lang="EN-GB" style="font-size:9.0pt;font-family:"Courier New";mso-ansi-language:EN-GB"><span style="mso-spacerun:yes">
</span></span></font><font size="1" face="Courier New"><span style="font-size:9.0pt;font-family:"Courier New"">GCC Profile
<span class="SpellE">enabled</span>:<span style="mso-spacerun:yes">
</span>no</span></font><o:p></o:p></p>
<p class="MsoNormal"><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">TIA!<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#172877" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:"Times New Roman";color:#172877;mso-ansi-language:EN-GB">Joris<o:p></o:p></span></font></p>
</div>
</body>
</html>