natlog-2.00.00/build0000755000175000017500000000704213226656470013164 0ustar frankfrank#!/usr/bin/icmake -qt/tmp/bisonc++ #define LOGENV "NATLOG" string g_logPath = getenv(LOGENV)[1], g_cwd = chdir(""); // initial working directory, ends in / int g_echo = ON; #include "icmconf" #include "icmake/cuteoln" #include "icmake/backtick" #include "icmake/setopt" #include "icmake/run" #include "icmake/md" #include "icmake/findall" #include "icmake/logfile" #include "icmake/logzip" #include "icmake/uninstall" #include "icmake/loginstall" #include "icmake/special" #include "icmake/pathfile" #include "icmake/precompileheaders" #include "icmake/clean" #include "icmake/manpage" #include "icmake/install" #include "icmake/github" void main(int argc, list argv) { string option; string strip; int idx; for (idx = listlen(argv); idx--; ) { if (argv[idx] == "-q") { g_echo = OFF; argv -= (list)"-q"; } else if (argv[idx] == "-P") { g_gch = 0; argv -= (list)"-P"; } } echo(g_echo); option = argv[1]; if (option == "clean") clean(0); if (option == "distclean") clean(1); if (option != "") special(); if (option == "install") install(argv[2], argv[3]); if (option == "uninstall") uninstall(argv[2]); if (option == "github") github(); if (option == "man") manpage(); if (option == "library") { precompileHeaders(); system("icmbuild library"); exit(0); } if (argv[2] == "strip") strip = "strip"; if (option == "program") { precompileHeaders(); system("icmbuild program " + strip); exit(0); } if (option == "xref") { precompileHeaders(); system("icmbuild program " + strip); run("oxref -fxs tmp/lib" LIBRARY ".a > " PROGRAM ".xref"); exit(0); } printf("Usage: build [-q -P] what\n" "Where\n" " [-q]: run quietly, do not show executed commands\n" " [-P]: do not use precompiled headers\n" "`what' is one of:\n" " clean - clean up remnants of previous " "compilations\n" " distclean - clean + fully remove tmp/\n" " library - build " PROGRAM "'s library\n" " man - build the man-page (requires Yodl)\n" " program [strip] - build " PROGRAM " (optionally strip the\n" " executable)\n" " xref [strip] - same a `program', also builds xref file\n" " using oxref\n" " install selection [base] - to install the software in the \n" " locations defined in the INSTALL.im file,\n" " optionally below base\n" " selection can be\n" " x, to install all components,\n" " or a combination of:\n" " b (binary program),\n" " d (documentation),\n" " m (man-page)\n" " uninstall logfile - remove files and empty directories listed\n" " in the file 'logfile'\n" " github - prepare github's gh-pages update\n" " (internal use only)\n" "\n" ); exit(1); } natlog-2.00.00/build-depends0000644000175000017500000000027213226656470014577 0ustar frankfrankBuild-Depends: g++ (>= 4.7.1), icmake (>= 7.19.00), libbobcat-dev (>= 3.01.00), libpcap-dev, yodl (>= 3.00.0) natlog-2.00.00/changelog0000644000175000017500000001714113237114301013772 0ustar frankfranknatlog (2.00.00) * Added mode tcpdump processing captured tcpdump files * Modes tcpdump, conntrack and device (formerly known as mode pcap) log files show numbers of bytes that were sent and received. * To use byte-accounting in mode conntrack the following command must have been issued (after starting iptables): /bin/echo "1" > /proc/sys/net/netfilter/nf_conntrack_acct * Added option --contrack-device, by default set to /proc/net/nf_conntrack. Older systems may still use /proc/net/ip_conntrack, which may be selected using this option. * Added option --ip-header-size, correcting for the IP header sizes which are added by conntrack to its logs. * Added option --log, replacing the former --no-syslog option. --log can be used to specify a log-file instead of using syslog facilities. * Added option --log-data, specifying a path to a log file to contain a table that can be used by statistical software. * Added option --log-rotate, specifying time-interval between log-file rotations and number of log-files to rotate. * Option --protocol can be used to process tcp, udp, and/or icmp protocols for all three modes. To process all three protocols '--protocol all' can be specified. With mode conntrack only a single protocol or 'all' can be used. * Added option --terminate terminating a running natlog daemon process. * Added option --ttl for udp/icmp and/or tcp connections -- Frank B. Brokken Thu, 08 Feb 2018 19:36:39 +0100 natlog (1.03.00) * Fixed bug when setting syslog-facility in options/setSyslogFacility: instead of using the assignment operator (=) to set the facility the comparison operator (==) was written... :-( * The --verbose option can be abbreviated to -V. When specified twice, the actual configuration parameters are shown. When specified more often, natlog ends after showing the configuration parameters. -- Frank B. Brokken Thu, 26 Jan 2017 12:27:40 +0100 natlog (1.02.03) * Adapted natlog's build scripts to icmake >= 8.00.03 -- Frank B. Brokken Fri, 11 Dec 2015 17:17:43 +0100 natlog (1.02.02) * Kevin Brodsky observed that the installation scripts used 'chdir' rather than 'cd'. Fixed in this release. * Kevin Brodsky also observed that the combined size of all precompiled headers might exceed some disks capacities. The option -P was added to the ./build script to prevent the use of precompiled headers. -- Frank B. Brokken Mon, 05 Oct 2015 21:06:54 +0200 natlog (1.02.01) * Standardized the (de)installation procedures. See INSTALL for details. -- Frank B. Brokken Sun, 04 Oct 2015 16:09:21 +0200 natlog (1.02.00) * Conntrack(8) has two modes: when -p is specified conntrack shows connections of protocol . When -p is not specified connections of all protocols are shown. When multiple -p options are specified only the last specified protocol is selected. Conntrack commands generated by natlog before 1.02.00 erroneously specified multiple -p options. This was fixed in version 1.02.00. * The man-page shows `:syslogtag, isequal, "NATLOG:" stop' rather than (the now deprecated) `:syslogtag, isequal, "NATLOG:" ~'. * The previously discontinued option conntrack-path is no longer recognized. * The --protocol option can also be specified as -P. * Added the file 'required' to the source distribution summarizing the required software for building natlog. -- Frank B. Brokken Mon, 23 Feb 2015 11:05:53 +0100 natlog (1.01.0) * Added configuration option `conntrack-command'. With the `conntrack' command the icmp, udp and tcp layer four protocols are monitored. By default natlog's `conntrack' command monitors the tcp protocol. * Added configuration option `conntrack-restart, to specify how often conntrack may be restarted if its process prematurely ends. * The configuration option `conntrack-path' is discontinued, and `conntrack-command' should be used instead. See the man-page for details. * Added configuration option `protocol', to specify which layer four protocols to monitor with the `conntrack' command. * The default pid file path is set to `/run/natlog.pid'. * Replaced FBB::Errno calls by FBB::Exception -- Frank B. Brokken Mon, 10 Feb 2014 20:21:27 +0100 natlog (1.00.2) * Added a missing #include to the showseconds.ih header, required by g++ 8.4.2. -- Frank B. Brokken Sun, 01 Dec 2013 18:15:46 +0100 natlog (1.00.1) * Natlog's version bumped to 1.00.1, after 1 year of active use. * Removed the class Signal from natlog's classes as it's available in Bobcat. * Explicitly including previously implicitly included bobcat/errno * Cleanup of icmconf file -- Frank B. Brokken Sat, 08 Jun 2013 10:57:34 +0200 natlog (0.91.3) * Natlog returns 0 for options --help and --version * Catching Errno exceptions is replaced by catching std::exception exceptions -- Frank B. Brokken Fri, 25 Jan 2013 08:58:07 +0100 natlog (0.91.2) * Added build-depends file and INSTALL files. -- Frank B. Brokken Wed, 07 Nov 2012 12:03:53 +0100 natlog (0.91.1) * build script recognizes CXX, CXXFLAGS, LDFLAGS environment variables -- Frank B. Brokken Sun, 15 Jul 2012 14:40:11 +0200 natlog (0.91.0) * Normal end of program (e.g., the starting daemon or ending natfork/childprocess) now returns 0, otherwise 1 * Checking whether conntrack runs is implemented by inspecting the access rights for /proc/net/ip_conntrack * Reorganized message handling: all messages generated by the daemon are sent to the syslog daemon, unless --no-syslog was specified * General code cleanup -- Frank B. Brokken Thu, 21 Jun 2012 13:45:11 +0200 natlog (0.90.0) * Updated sourceforge's `excluded' file. * Added the --pid-file option defining the location of a file holding the daemon's PID. By default the pid-file is /var/run/natlog.pid. -- Frank B. Brokken Sat, 16 Jun 2012 12:03:01 +0200 natlog (0.80.0) * Added auto-detection of devices without Ethernet packet headers * Natlog's pcap mode now writes syslog messages * Added option --stdout (-s) writing syslog-equivalent messages to the standard ouput * General code cleanup and reorganization -- Frank B. Brokken Fri, 15 Jun 2012 17:01:08 +0200 natlog (0.30.0) * Initial implementation of 'natlog in out', performing direct packet capturing on the `in' and `out' devices. -- Frank B. Brokken Thu, 14 Jun 2012 14:37:42 +0200 natlog (0.20.0) * NATLOG writes incomplete connections to syslog when terminated by a SIGTERM signal. -- Frank B. Brokken Mon, 11 Jun 2012 16:42:40 +0200 natlog (0.10.0) * NATLOG now hosted at sourceforge (http://natlog.sourceforge.net/). * Added maintenance files to handle uploads to sourceforge -- Frank B. Brokken Sat, 09 Jun 2012 16:39:34 +0200 natlog (0.03.0) * Syslog message and man-page cleanup -- Frank B. Brokken Thu, 07 Jun 2012 17:20:04 +0200 natlog (0.02.0) * Processed elements are now removed from `record' in conntrack/run.cc -- Frank B. Brokken Thu, 07 Jun 2012 14:10:19 +0200 natlog (0.01.0) * Project Start. -- Frank B. Brokken Tue, 05 Jun 2012 22:17:08 +0200 natlog-2.00.00/CLASSES0000644000175000017500000000036313236662052013150 0ustar frankfrankrotatingstreambuf rotatingstream nic options storage showseconds record producer pcaprecord pcap pcapfilter devicesproducer conntrackrecord conntrackproducer tcpdumprecord tcpdumpproducer connectionsconsumer natfork tcpdumprecord natlog-2.00.00/connectionsconsumer/0000755000175000017500000000000013236662052016224 5ustar frankfranknatlog-2.00.00/connectionsconsumer/cleanupwrap.cc0000644000175000017500000000127113236662052021055 0ustar frankfrank#include "connectionsconsumer.ih" // static void ConnectionsConsumer::cleanupWrap(ConnectionsConsumer *const consumer) { // if lastUsed + ttl < now then log and remove the record // so: if lastUsed < now - ttl log and remove the record while (not consumer->d_storage.empty()) { this_thread::sleep_for(chrono::seconds(3)); consumer->cleanupICMP_UDP(time(0) - consumer->d_ttl); // tcp connections passive for more than 1 hour are removed. consumer->cleanup(time(0) - Options::instance().ttlTCP(), consumer->d_tcpMutex, consumer->d_tcp, &ConnectionsConsumer::logTCP_UDP, "tcp"); } } natlog-2.00.00/connectionsconsumer/logicmp.cc0000644000175000017500000000124013236662052020162 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::logICMP(Record const &record, [[maybe_unused]] char const *) { d_stdMsg << "from " << record.beginTime() << " thru " << record.endTime() << ShowSeconds::utcMarker() << ": icmp " << record.sourceIPstr() << " (via: " << record.viaIPstr() << ") " "to " << record.destIPstr() << "; " "sent: " << record.sentBytes() << ", " "received: " << record.receivedBytes() << s_logType[d_logType].first << endl; (this->*d_logData)(record, "icmp"); } natlog-2.00.00/connectionsconsumer/logtcpudp.cc0000644000175000017500000000134613236662052020540 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::logTCP_UDP(Record const &record, char const *type) { if (record.viaIP() != 0) { d_stdMsg << "from " << record.beginTime() << " thru " << record.endTime() << ShowSeconds::utcMarker() << ": " << type << ' ' << record.sourceIPstr() << ':' << record.sourcePort() << " (via: " << record.viaIPstr() << ':' << record.viaPort() << ") " "to " << record.destIPstr() << ':' << record.destPort() << "; " "sent: " << record.sentBytes() << ", " "received: " << record.receivedBytes() << s_logType[d_logType].first << endl; (this->*d_logData)(record, type); } } natlog-2.00.00/connectionsconsumer/udpin.cc0000644000175000017500000000260413236662052017654 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::udpIn(Record &record) { size_t key = record.setTCPUDPkey(); // find the key if (g_nic.mask(Record::IN, record.sourceIP())) // package is sent? { // connecting the local net? // then ignore the record if (g_nic.mask(Record::IN, record.destIP())) return; // if accumulated data exist // then update #sent if (auto iter = d_udp.find(key); iter != d_udp.end()) { iter->second.addSentBytes(record.payload()); iter->second.setEndTime(record); } else // or it's a new connection { record.addSentBytes(record.payload()); // set #sent d_udp.insert( value_type{ key, record } ); // store the record d_id[record.id()] = key; // store id -> key, used by udpOut } return; } auto iter = d_udp.find(key); // find the accumulated data if (iter == d_udp.end()) // not available: done return; iter->second.addReceivedBytes(record.payload()); // add #received iter->second.setEndTime(record); } natlog-2.00.00/connectionsconsumer/data.cc0000644000175000017500000000101613236662052017442 0ustar frankfrank#include "connectionsconsumer.ih" unordered_map ConnectionsConsumer::s_handler = { { Record::ICMP, &ConnectionsConsumer::icmp }, { Record::TCP, &ConnectionsConsumer::tcp }, { Record::UDP, &ConnectionsConsumer::udp }, }; pair ConnectionsConsumer::s_logType[] { { "", "ok" }, { " (INCOMPLETE)", "incomplete" }, { " (EOP)", "eop" } }; natlog-2.00.00/connectionsconsumer/connectionsconsumer.ih0000644000175000017500000000062013236662052022642 0ustar frankfrank#include "connectionsconsumer.h" #include //TMP #include #define CERR cerr << __FILE__": " #include #include #include #include #include #include "../showseconds/showseconds.h" #include "../storage/storage.h" #include "../options/options.h" #include "../nic/nic.h" using namespace std; using namespace FBB; natlog-2.00.00/connectionsconsumer/udpdestroy.cc0000644000175000017500000000120113236662052020727 0ustar frankfrank//#include "connectionsconsumer.ih" // //void ConnectionsConsumer::udpDestroy(Record &record) //{ // // find this record's accumulated data // auto iter = d_udp.find(record.key()); // // if (iter == d_udp.end()) // unknown record: no existing // return; // connection // // auto &accu = iter->second; // accu.setEndTime(record); // // accu.addSentBytes(record.sentBytes()); // accu.addReceivedBytes(record.receivedBytes()); // // logTCP_UDP(iter->second, "udp"); // d_udp.erase(iter); // remove the entry //} // // natlog-2.00.00/connectionsconsumer/tcpin.cc0000644000175000017500000000313713236662052017654 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::tcpIn(Record &record) { size_t key = record.setTCPUDPkey(); if (record.flags() == Record::SYN) // syn-flag set { if (g_nic.mask(Record::IN, record.sourceIP())) // package is sent? { // connecting the local net? // then ignore the record if (g_nic.mask(Record::IN, record.destIP())) return; // store new connection d_tcp.insert( value_type{ key, record } ); // d_sequence: a support map for SYN tcp connections d_sequence[record.id()] = key; // used by OUT at SYN flag } return; } // find this record's accumulated data auto iter = d_tcp.find(record.key()); if (iter == d_tcp.end()) // unknown record: no existing return; // connection or final ACKs // existing connections: Record &accu = iter->second; // the connection's accumulated data accu.setEndTime(record); if (accu.sourceIP() == record.sourceIP()) // packet was sent to dest. accu.addSentBytes(record.payload()); else // packet was received fm. dest. accu.addReceivedBytes(record.payload()); if (record.flags() & Record::FIN) // FIN-flag set { logTCP_UDP(iter->second, "tcp"); d_tcp.erase(iter); // remove the entry } } natlog-2.00.00/connectionsconsumer/run.cc0000644000175000017500000000260413236662052017341 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::run() { thread cleanupThread; // when logging in Conntrack-mode or Device-mode (realTime) // inspect the TTL of the incoming packages in the background. if (d_options.realTime()) cleanupThread = thread{ &ConnectionsConsumer::cleanupWrap, this }; while (true) { d_storage.consumeWait(); if (d_storage.empty()) break; Record &record = d_storage.fetch(); // makes available the next // record. Since this is the // only thread fetching records // there's no need to copy the // record at this point d_storage.produceNotify(); // process the incoming protocol // data, calls tcp, udp or icmp (this->*s_handler[record.protocol()])(record); } if (d_options.realTime()) cleanupThread.join(); d_logType = EOP; time_t eop = time(0) + 1; cleanupICMP_UDP(eop); // what's still in the maps is // there at EOP cleanup(eop, d_tcpMutex, d_tcp, &ConnectionsConsumer::logTCP_UDP, "tcp"); } natlog-2.00.00/connectionsconsumer/tcp.cc0000644000175000017500000000077413236662052017331 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::tcp(Record &record) { lock_guard lg(d_tcpMutex); switch (record.type()) { case Record::IN: tcpIn(record); break; case Record::OUT: tcpOut(record); return; case Record::NEW: d_tcp.insert( value_type{ record.key(), record } ); return; case Record::DESTROY: tcp_udpDestroy(d_tcp, record, "tcp"); return; } } natlog-2.00.00/connectionsconsumer/connectionsconsumer.h0000644000175000017500000000636413236662052022504 0ustar frankfrank#ifndef INCLUDED_CONNECTIONSCONSUMER_ #define INCLUDED_CONNECTIONSCONSUMER_ #include #include #include #include #include #include "../record/record.h" #include "../rotatingstream/rotatingstream.h" class Storage; class Options; // ConnectionsConsumer object constructed in natfork/childprocess class ConnectionsConsumer: public FBB::SignalHandler { typedef std::unordered_map Size_tMap; typedef std::unordered_map RecordMap; typedef RecordMap::value_type value_type; Options const &d_options; RotatingStream d_logDataStream; std::ostream &d_stdMsg; Storage &d_storage; std::mutex d_icmpMutex; RecordMap d_icmp; std::mutex d_udpMutex; RecordMap d_udp; Size_tMap d_sequence; // TCP: sequence nr -> key Size_tMap d_id; // UDP: id nr -> key std::mutex d_tcpMutex; RecordMap d_tcp; void (ConnectionsConsumer::*d_logData)(Record const &, char const *); static std::unordered_map< Record::Protocol, void (ConnectionsConsumer::*)(Record &) > s_handler; time_t d_ttl; enum LogType { COMPLETE, INCOMPLETE, EOP }; LogType d_logType = COMPLETE; static std::pair s_logType[]; public: ConnectionsConsumer(std::ostream &stdMsg,Storage &storage); void run(); // process all connections: // start the producer thread // and consume the produced data private: void icmp(Record &record); // Producers must make sure that void tcp(Record &record); // only defined protocols are void udp(Record &record); // returned void icmpIn(Record &record); void tcpIn(Record &record); void udpIn(Record &record); void icmpOut(Record const &record); void tcpOut(Record const &record); void udpOut(Record const &record); void icmpDestroy(Record &record); // used for conntrack connections void tcp_udpDestroy(RecordMap &map, Record const &record, char const *type); void tcpDestroy(Record &record); void udpDestroy(Record &record); void logICMP(Record const &record, char const *type = ""); void logTCP_UDP(Record const &record, char const *type); void logData(Record const &record, char const *type); void noDataLog(Record const &record, char const *type); void signalHandler(size_t signum) override; static void cleanupWrap(ConnectionsConsumer *const consumer); void cleanupICMP_UDP(time_t now_ttl); // clean up completed // connections. void cleanup( time_t now_ttl, std::mutex &mapMutex, RecordMap &map, void (ConnectionsConsumer::*logFun)(Record const &, char const *), char const *type ); static void header(std::ostream &log); }; inline void ConnectionsConsumer::signalHandler(size_t signum) { d_logType = EOP; } #endif natlog-2.00.00/connectionsconsumer/icmp.cc0000644000175000017500000000075613236662052017473 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::icmp(Record &record) { lock_guard lg(d_icmpMutex); switch (record.type()) { case Record::IN: icmpIn(record); return; case Record::OUT: icmpOut(record); return; case Record::NEW: d_icmp.insert( value_type{ record.key(), record } ); return; case Record::DESTROY: icmpDestroy(record); return; } } natlog-2.00.00/connectionsconsumer/tcpout.cc0000644000175000017500000000230613236662052020052 0ustar frankfrank#include "connectionsconsumer.ih" // The OUT interface is used to NAT source addresses to the nathost's // address. When receiving a SYN packet the via-data can be set // and the entry can be removed from d_sequence, as no information // about this connection on the OUT device is used anymore. void ConnectionsConsumer::tcpOut(Record const &record) { if (record.flags() != Record::SYN) // not a mere SYN record: return; // no further actions required. // find the matching record auto iter = d_tcp.find( d_sequence[ record.id() ] ); if (iter == d_tcp.end()) // no data for this connection return; // 1st time out: // NAT has changed the source address // OK: so set the accumulated data's // 'via' address. if (g_nic.address(Record::OUT) == record.sourceIP()) { iter->second.setViaIP(record.sourceIP()); iter->second.setViaPort(record.sourcePort()); } d_sequence.erase(d_sequence.find(record.id())); } natlog-2.00.00/connectionsconsumer/udp.cc0000644000175000017500000000100413236662052017316 0ustar frankfrank #include "connectionsconsumer.ih" void ConnectionsConsumer::udp(Record &record) { lock_guard lg(d_udpMutex); switch (record.type()) { case Record::IN: udpIn(record); return; case Record::OUT: udpOut(record); return; case Record::NEW: d_udp.insert( value_type{ record.key(), record } ); return; case Record::DESTROY: tcp_udpDestroy(d_udp, record, "udp"); return; } } natlog-2.00.00/connectionsconsumer/cleanupicmpudp.cc0000644000175000017500000000051213236662052021542 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::cleanupICMP_UDP(time_t now_ttl) { cleanup(now_ttl, d_icmpMutex, d_icmp, &ConnectionsConsumer::logICMP, "icmp"); cleanup(now_ttl, d_udpMutex, d_udp, &ConnectionsConsumer::logTCP_UDP, "udp"); } natlog-2.00.00/connectionsconsumer/icmconf0000777000175000017500000000000013236662052023031 2../options/icmconfustar frankfranknatlog-2.00.00/connectionsconsumer/icmpout.cc0000644000175000017500000000112013236662052020205 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::icmpOut(Record const &record) { auto iter = d_icmp.find(record.key()); if (iter == d_icmp.end()) // key not found. return; // 1st time out: // NAT has changed the source address // OK: so set the accumulated data's // 'via' address. if (g_nic.address(Record::OUT) == record.sourceIP()) iter->second.setViaIP(record.sourceIP()); } natlog-2.00.00/connectionsconsumer/tcpudpdestroy.cc0000644000175000017500000000125013236662052021442 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::tcp_udpDestroy(RecordMap &map, Record const &record, char const *type) { // find this record's accumulated data auto iter = map.find(record.key()); if (iter == map.end()) // unknown record: no existing return; // connection auto &accu = iter->second; accu.setEndTime(record); accu.addSentBytes(record.sentBytes()); accu.addReceivedBytes(record.receivedBytes()); logTCP_UDP(iter->second, type); map.erase(iter); // remove the entry } natlog-2.00.00/connectionsconsumer/logdata.cc0000644000175000017500000000202613236662052020146 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::logData(Record const &record, char const *type) { auto ptr = ShowSeconds::utcFormat(); d_logDataStream << record.protocolStr() << ',' << setw(11) << ntohl(record.sourceIP())<< ',' << setw(16) << record.sourceIPstr() << ',' << setw(8) << record.sourcePort() << ',' << setw(11) << ntohl(record.destIP()) << ',' << setw(16) << record.destIPstr() << ',' << setw(8) << record.destPort() << ',' << setw(11) << record.sentBytes() << ',' << setw(11) << record.receivedBytes() << ',' << setw(11) << record.inSeconds() << ',' << setw(11) << record.seconds() << ", " << record.beginTime() << ", " << record.endTime() << ", " << setw(10) << s_logType[d_logType].second << endl; ShowSeconds::setFormat(ptr); } natlog-2.00.00/connectionsconsumer/udpout.cc0000644000175000017500000000241213236662052020052 0ustar frankfrank#include "connectionsconsumer.ih" // The OUT interface is used to NAT source addresses to the nathost's // address. When receiving a known ID packet the via-data can be set // and the entry can be removed from d_id, as no information // about this connection on the OUT device is used anymore. void ConnectionsConsumer::udpOut(Record const &record) { // previously seen ID? auto iterID = d_id.find(record.id()); if (iterID == d_id.end()) // no: no further actions required. return; // find the matching record auto iter = d_udp.find( iterID->second ); if (iter == d_udp.end()) // not available for some reason return; // 1st time out: // NAT has changed the source address // OK: so set the accumulated data's // 'via' address. if (g_nic.address(Record::OUT) == record.sourceIP()) { iter->second.setViaIP(record.sourceIP()); iter->second.setViaPort(record.sourcePort()); } d_id.erase(iterID); // remove the ID information } natlog-2.00.00/connectionsconsumer/icmpdestroy.cc0000644000175000017500000000113413236662052021074 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::icmpDestroy(Record &record) { auto iter = d_icmp.find(record.key()); // find this record's data if (iter == d_icmp.end()) // unknown record: matching NEW return; // not seen during this program's // lifetime iter->second.setEndTime(record); iter->second.addSentBytes(record.sentBytes()); iter->second.addReceivedBytes(record.receivedBytes()); logICMP(iter->second); d_icmp.erase(iter); // remove the entry } natlog-2.00.00/connectionsconsumer/icmpin.cc0000644000175000017500000000251113236662052020011 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::icmpIn(Record &record) { if (g_nic.mask(Record::IN, record.sourceIP())) // package being sent? { // connecting the local net? // then ignore the record if (g_nic.mask(Record::IN, record.destIP())) return; // key is the record's ID // existing entry: if (auto iter = d_icmp.find(record.key()); iter != d_icmp.end()) { iter->second.addSentBytes(record.payload()); iter->second.setEndTime(record); } else // new entry: { record.addSentBytes(record.payload()); // initial payload d_icmp.insert( value_type{ record.key(), record } ); } return; } // source is not the local computer. This must be an answer, and the // record must therefore exist: auto iter = d_icmp.find(record.key()); // find the accumulated data if (iter == d_icmp.end()) // not available: done return; iter->second.addReceivedBytes(record.payload()); // add #received iter->second.setEndTime(record); } natlog-2.00.00/connectionsconsumer/header.cc0000644000175000017500000000130113236662052017756 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::header(ostream &log) { log << "type," << setw(11) << "srcNr" << ',' << setw(16) << "srcIP" << ',' << setw(8) << "srcPort" << ',' << setw(11) << "dstNr" << ',' << setw(16) << "dstIP" << ',' << setw(8) << "dstPort" << ',' << setw(11) << "sent" << ',' << setw(11) << "recvd" << ',' << setw(11) << "begin" << ',' << setw(11) << "end" << ", " << setw(22) << "beginTime" << ", " << setw(22) << "endTime" << ", status" << endl; // 1234567890 } natlog-2.00.00/connectionsconsumer/nologdata.cc0000644000175000017500000000027113236662052020503 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::noDataLog([[maybe_unused]] Record const &record, [[maybe_unused]] char const *type) {} natlog-2.00.00/connectionsconsumer/connectionsconsumer1.cc0000644000175000017500000000121113236662052022705 0ustar frankfrank#include "connectionsconsumer.ih" ConnectionsConsumer::ConnectionsConsumer(ostream &stdMsg, Storage &storage) : d_options(Options::instance()), d_logDataStream(header), d_stdMsg(stdMsg), d_storage(storage), d_ttl(d_options.ttl()) { string path; if (ArgConfig::instance().option(&path, "log-data") == 0) d_logData = &ConnectionsConsumer::noDataLog; else { d_logData = &ConnectionsConsumer::logData; // member logging data d_logDataStream.open(path); // prepare for data log } Signal::instance().add(SIGINT, *this); Signal::instance().add(SIGTERM, *this); } natlog-2.00.00/connectionsconsumer/cleanup.cc0000644000175000017500000000111513236662052020160 0ustar frankfrank#include "connectionsconsumer.ih" void ConnectionsConsumer::cleanup( time_t now_ttl, mutex &mapMutex, RecordMap &map, void (ConnectionsConsumer::*logFun)(Record const &, char const *), char const *type) { vector remove; lock_guard lg(mapMutex); for (value_type &value: map) { if (value.second.lastUsed() < now_ttl) { (this->*logFun)(value.second, type); remove.push_back(value.first); } } for (size_t key: remove) map.erase(map.find(key)); } natlog-2.00.00/connectionsconsumer/frame0000644000175000017500000000007513236662052017243 0ustar frankfrank#include "connectionsconsumer.ih" ConnectionsConsumer:: { } natlog-2.00.00/conntrackproducer/0000755000175000017500000000000013236662052015654 5ustar frankfranknatlog-2.00.00/conntrackproducer/parentprocess.cc0000644000175000017500000000053713236662052021060 0ustar frankfrank#include "conntrackproducer.ih" // See also README.conntrack void ConntrackProducer::parentProcess() { string line; // co-used for retrieving the IP Header size while (getline(cin, line)) process(line); waitForChild(); if (not d_signaled) d_stdMsg << "conntrack terminated" << endl; } natlog-2.00.00/conntrackproducer/data.cc0000644000175000017500000000555013236662052017101 0ustar frankfrank#include "conntrackproducer.ih" // [1338987414.52626 ] [NEW] tcp 6 120 SYN_SENT // src=192.168.1.4 dst=129.125.14.80 sport=59783 dport=22 // [UNREPLIED] // packets=7 bytes=450 // src=129.125.14.80 dst=129.125.100.246 sport=22 dport=59783 // packets=7 bytes=450 .... Pattern ConntrackProducer::s_tcpudp { R"(\[(\d+)\.(\d+).*\[(NEW|DESTROY)\]\s+(tcp|udp).*)" // 1 2 3 4 time: [1338899277.41469 ] R"(src=(\S+)\s+dst=(\S+)\s+)" // source to nat, dest // 5 6 R"(sport=(\d+)\s+dport=(\d+))" // source from, dest port // 7 8 R"((\s+packets=(\d+)\s+bytes=(\d+))?.*)" // maybe sent packets/bytes //9 10 11 R"(dst=(\S+).*)" // natted source (key) // 12 (was: 9) R"(dport=(\d+))" // natted dport (key) // 13 (was: 10) R"((\s+packets=(\d+)\s+bytes=(\d+))?)", // maybe recv'd packets/bytes //14 15 16 true, static_cast(CTtcpudp::nFields) }; // If packets/bytes are not provided then the final #14 thru #16 are not // available, and end() returns 14, otherwise 17. /////////////////////////////////////////////////////////////////////////// // [1387190207.153486] [NEW] icmp 1 30 // src=192.168.17.7 dst=129.125.3.162 type=8 code=0 id=7016 // [UNREPLIED] // packets=1 bytes=84 <-- maybe // src=129.125.3.162 dst=129.125.100.246 type=0 code=0 id=7016 // packets=1 bytes=84 <-- maybe Pattern ConntrackProducer::s_icmp { // [1514579857.235298] [DESTROY] icmp 1 R"(\[(\d+)\.(\d+).*\[(NEW|DESTROY)\]\s+icmp.*)" // 1 2 3 //src=192.168.17.6 dst=129.125.3.162 R"(src=(\S+)\s+dst=(\S+)\s+)" // source to nat, dest // 4 5 // type=8 code=0 id=3269 R"(\S+\s+\S+\s+id=(\d+)\s+)" // id= (key) // 6 // packets=4 bytes=336 R"((packets=(\d+)\s+bytes=(\d+)\s+)?)" // maybe sent packets/bytes // 7 8 9 // src=129.125.3.162 dst=192.168.8.17 type=0 code=0 id=3269 R"(.*dst=(\S+).*id=\d+)" // natted source // 10 (was: 7) // packets=4 bytes=336 R"((\s+packets=(\d+)\s+bytes=(\d+))?)", // maybe rev'd packets/bytes // 11 12 13 true, static_cast(CTicmp::nFields) }; // If packets/bytes are not provided then the final #11 thru #13 are not // available, and end() returns 11, otherwise 14. natlog-2.00.00/conntrackproducer/run.cc0000644000175000017500000000125213236662052016767 0ustar frankfrank#include "conntrackproducer.ih" void ConntrackProducer::run() { size_t max = d_options.conntrackRestart(); d_stdMsg << "starting `" << d_options.conntrackCommand() << "' (max " << max << " restarts)" << endl; ++max; // restarts, so add 1 for initial startup. for (size_t idx = 0; idx != max; ) { ++idx; try { d_pipe = Pipe(); fork(); return; } catch (Options::ExitStatus status) { d_stdMsg << "conntrack run " << idx << " ended" << endl; } } d_stdMsg << "conntrack started " << max << " times, giving up" << endl; } natlog-2.00.00/conntrackproducer/conntrackproducer.ih0000644000175000017500000000066613236662052021734 0ustar frankfrank#include "conntrackproducer.h" //TMP //#include //#define CERR cerr << __FILE__": " #include #include #include #include #include #include #include #include #include "../options/options.h" #include "../storage/storage.h" #include "../conntrackrecord/conntrackrecord.h" using namespace std; using namespace FBB; natlog-2.00.00/conntrackproducer/childprocess.cc0000644000175000017500000000061213236662052020644 0ustar frankfrank#include "conntrackproducer.ih" void ConntrackProducer::childProcess() { vector cmd(String::split(static_cast(0), d_options.conntrackCommand())); char const **args = String::argv(cmd); execv(args[0], const_cast(args)); throw 0; // this should not be reached, but if so main properly ends. } natlog-2.00.00/conntrackproducer/conntrackproducer1.cc0000644000175000017500000000072713236662052022000 0ustar frankfrank#include "conntrackproducer.ih" ConntrackProducer::ConntrackProducer(ostream &stdMsg, Storage &storage) : d_options(Options::instance()), d_stdMsg(stdMsg), d_storage(storage) { if (access(d_options.conntrackDevice(), R_OK) != 0) throw Exception() << "Cannot read " << d_options.conntrackDevice(); Signal::instance().add(SIGHUP, *this); // ignored Signal::instance().add(SIGINT, *this); Signal::instance().add(SIGTERM, *this); } natlog-2.00.00/conntrackproducer/icmconf0000777000175000017500000000000013236662052022461 2../options/icmconfustar frankfranknatlog-2.00.00/conntrackproducer/childredirections.cc0000644000175000017500000000023613236662052021662 0ustar frankfrank#include "conntrackproducer.ih" void ConntrackProducer::childRedirections() { int fd[] = {STDOUT_FILENO, STDERR_FILENO}; d_pipe.writtenBy(fd, 2); } natlog-2.00.00/conntrackproducer/parentredirections.cc0000644000175000017500000000016513236662052022071 0ustar frankfrank#include "conntrackproducer.ih" void ConntrackProducer::parentRedirections() { d_pipe.readFrom(STDIN_FILENO); } natlog-2.00.00/conntrackproducer/process.cc0000644000175000017500000000136013236662052017641 0ustar frankfrank#include "conntrackproducer.ih" void ConntrackProducer::process(string const &line) { imsg << "LINE: " << line << endl; if (s_tcpudp << line) // try to match UDP or TCP { if ( d_options.hasProtocol( s_tcpudp[ static_cast(CTtcpudp::PROTOCOL) ] ) ) d_storage.push( ConntrackRecord{ Record::TCP, // (also for UDP) s_tcpudp } ); return; } // or try to match ICMP if (s_icmp << line and d_options.hasProtocol(Record::ICMP)) { d_storage.push( ConntrackRecord{ Record::ICMP, s_icmp } ); return; } imsg << " (not matched)" << endl; } natlog-2.00.00/conntrackproducer/destructor.cc0000644000175000017500000000020213236662052020353 0ustar frankfrank#include "conntrackproducer.ih" ConntrackProducer::~ConntrackProducer() { d_stdMsg << "monitoring conntrack ends" << endl; } natlog-2.00.00/conntrackproducer/signalhandler.cc0000644000175000017500000000065113236662052021000 0ustar frankfrank#include "conntrackproducer.ih" void ConntrackProducer::signalHandler(size_t signum) { if (signum == SIGHUP) { d_stdMsg << "ignoring signal SIGHUP" << endl; return; } d_stdMsg << "received signal " << signum << " (" << (signum == SIGINT ? "SIGINT" : "SIGTERM") << ')' << endl; d_signaled = true; kill(pid(), SIGTERM); kill(pid(), SIGTERM); kill(pid(), SIGKILL); } natlog-2.00.00/conntrackproducer/conntrackproducer.h0000644000175000017500000000202113236662052021546 0ustar frankfrank#ifndef INCLUDED_CONNTRACKPRODUCER_ #define INCLUDED_CONNTRACKPRODUCER_ #include #include #include #include #include #include "../producer/producer.h" class Options; class Storage; namespace FBB { class Pattern; } class ConntrackProducer: public Producer, public FBB::Fork, public FBB::SignalHandler { FBB::Pipe d_pipe; Options &d_options; std::ostream &d_stdMsg; Storage &d_storage; bool d_signaled = false; static FBB::Pattern s_tcpudp; static FBB::Pattern s_icmp; public: ConntrackProducer(std::ostream &stdMsg, Storage &storage); ~ConntrackProducer(); private: void run() override; void process(std::string const &line); void signalHandler(size_t signum) override; void parentProcess() override; void childProcess() override; void childRedirections() override; void parentRedirections() override; }; #endif natlog-2.00.00/conntrackproducer/frame0000644000175000017500000000007113236662052016667 0ustar frankfrank#include "conntrackproducer.ih" ConntrackProducer:: { } natlog-2.00.00/conntrackproducer/driver/0000755000175000017500000000000013236662052017147 5ustar frankfranknatlog-2.00.00/conntrackrecord/0000755000175000017500000000000013236662052015307 5ustar frankfranknatlog-2.00.00/conntrackrecord/conntrackrecord1.cc0000644000175000017500000000061413236662052021061 0ustar frankfrank#include "conntrackrecord.ih" ConntrackRecord::ConntrackRecord(Protocol type, Pattern const &pattern) : d_pattern(pattern) { setLastUsed(::time(0)); setType(pat(CTicmp::TYPE) == "NEW" ? NEW : DESTROY); setTime(stoul(pat(CTicmp::SECONDS)), stoul(pat(CTicmp::MU_SECONDS))); if (type == ICMP) initICMP(pattern); else initTCP_UDP(pattern); } natlog-2.00.00/conntrackrecord/icmconf0000777000175000017500000000000013236662052022114 2../options/icmconfustar frankfranknatlog-2.00.00/conntrackrecord/conntrackrecord.h0000644000175000017500000000254413236662052020646 0ustar frankfrank#ifndef INCLUDED_CONNTRACKRECORD_ #define INCLUDED_CONNTRACKRECORD_ // CTtcpudp and CTicmp: see below #include #include "../record/record.h" namespace FBB { class Pattern; } class ConntrackRecord: public Record { FBB::Pattern const &d_pattern; public: ConntrackRecord(Protocol protocol, FBB::Pattern const &pattern); private: void initTCP_UDP(FBB::Pattern const &pattern); void initICMP(FBB::Pattern const &pattern); template std::string pat(Enum value) const; }; // Indices when matching conntrackproducer entries with Pattern for tcp/udp enum class CTtcpudp { SECONDS = 1, // 1st three entries are common with CTicmp MU_SECONDS, TYPE, // NEW, DESTROY PROTOCOL, // tcp/udp SRC, DST, SPORT, DPORT, SENTPACKETTEXT, SENTPACKETS, SENTBYTES, NATSRC, NATPORT, RECVDPACKETTEXT, RECVDPACKETS, RECVDBYTES, nFields, }; // Indices when matching conntrackproducer entries with Pattern for tcp/udp enum class CTicmp { SECONDS = 1, MU_SECONDS, TYPE, // NEW, DESTROY SRC, DST, ID, SENTPACKETTEXT, SENTPACKETS, SENTBYTES, NATSRC, RECVDPACKETTEXT, RECVDPACKETS, RECVDBYTES, nFields, }; #endif natlog-2.00.00/conntrackrecord/inittcpudp.cc0000644000175000017500000000213513236662052020002 0ustar frankfrank#include "conntrackrecord.ih" void ConntrackRecord::initTCP_UDP(Pattern const &pattern) { setSourceIP( aton(pat(CTtcpudp::SRC)) ); setDestIP( aton(pat(CTtcpudp::DST)) ); setViaIP( aton(pat(CTtcpudp::NATSRC)) ); setPorts( stoul(pat(CTtcpudp::SPORT)), stoul(pat(CTtcpudp::DPORT)) ); setViaPort( stoul(pat(CTtcpudp::NATPORT)) ); setProtocol( pat(CTtcpudp::PROTOCOL) == "tcp" ? TCP : UDP ); setTCPUDPkey(); if (type() == DESTROY) // DESTROY records may have sent/received { // byte counts if (pattern.end() == static_cast(CTtcpudp::nFields)) { size_t ipHeaderSize = Options::instance().IPheaderSize(); if (ipHeaderSize != 0) ipHeaderSize *= stoul(pat(CTtcpudp::RECVDPACKETS)); size_t nBytes = stoul(pat(CTtcpudp::SENTBYTES)); addSentBytes( nBytes ? nBytes - ipHeaderSize : 0 ); nBytes = stoul(pat(CTtcpudp::RECVDBYTES)); addReceivedBytes( nBytes ? nBytes - ipHeaderSize : 0 ); } }; } natlog-2.00.00/conntrackrecord/frame0000644000175000017500000000006513226657237016335 0ustar frankfrank#include "conntrackrecord.ih" ConntrackRecord:: { } natlog-2.00.00/conntrackrecord/conntrackrecord.ih0000644000175000017500000000057613236662052021022 0ustar frankfrank#include "conntrackrecord.h" //TMP //#include //#define CERR cerr << __FILE__": " #include #include #include #include "../options/options.h" using namespace std; using namespace FBB; template inline std::string ConntrackRecord::pat(Enum value) const { return d_pattern[ static_cast(value) ]; } natlog-2.00.00/conntrackrecord/initicmp.cc0000644000175000017500000000150513236662052017433 0ustar frankfrank#include "conntrackrecord.ih" void ConntrackRecord::initICMP(Pattern const &pattern) { setSourceIP( aton(pat(CTicmp::SRC)) ); setDestIP( aton(pat(CTicmp::DST)) ); setViaIP( aton(pat(CTicmp::NATSRC)) ); setProtocol(ICMP); setKey( stoul(pat(CTicmp::ID)) ); if (type() == DESTROY) { if (pattern.end() == static_cast(CTicmp::nFields)) { size_t ipHeaderSize = Options::instance().IPheaderSize(); if (ipHeaderSize != 0) ipHeaderSize *= stoul(pat(CTicmp::RECVDPACKETS)); size_t nBytes = stoul(pat(CTicmp::SENTBYTES)); addSentBytes( nBytes ? nBytes - ipHeaderSize : 0 ); nBytes = stoul(pat(CTicmp::RECVDBYTES)); addReceivedBytes( nBytes ? nBytes - ipHeaderSize : 0 ); } }; } natlog-2.00.00/devicesproducer/0000755000175000017500000000000013236662052015314 5ustar frankfranknatlog-2.00.00/devicesproducer/devicesproducer.ih0000644000175000017500000000043713236662052021030 0ustar frankfrank#include "devicesproducer.h" #include #include //TMP //#define CERR std::cerr << __FILE__": " #include "../options/options.h" #include "../storage/storage.h" #include "../pcapfilter/pcapfilter.h" #include "../nic/nic.h" using namespace std; using namespace FBB; natlog-2.00.00/devicesproducer/devicesproducer1.cc0000644000175000017500000000056613236662052021101 0ustar frankfrank#include "devicesproducer.ih" DevicesProducer::DevicesProducer(ostream &stdMsg, Storage &storage) : d_stdMsg(stdMsg), d_storage(storage), d_signaled(0) { Options const &options = Options::instance(); d_inName = options[0]; d_outName = options[1]; handleSignals(); g_nic.set(Record::IN, d_inName); g_nic.set(Record::OUT, d_outName); } natlog-2.00.00/devicesproducer/run.cc0000644000175000017500000000125513236662052016432 0ustar frankfrank#include "devicesproducer.ih" void DevicesProducer::run() { PcapFilter in{ d_inName, Record::IN, d_stdMsg, d_storage }; PcapFilter out{ d_outName, Record::OUT, d_stdMsg, d_storage }; thread inThread{ in }; thread outThread{ out }; d_stdMsg << "starting capturing " << d_inName << " and " << d_outName << endl; d_signaled.wait(); d_endSignal = true; in.stop(); out.stop(); inThread.join(); outThread.join(); d_stdMsg << "monitoring " << d_inName << " and " << d_outName << " ends" << endl; } natlog-2.00.00/devicesproducer/icmconf0000777000175000017500000000000013236662052022121 2../options/icmconfustar frankfranknatlog-2.00.00/devicesproducer/destructor.cc0000644000175000017500000000032413236662052020020 0ustar frankfrank#include "devicesproducer.ih" DevicesProducer::~DevicesProducer() { if (not d_endSignal) d_stdMsg << "monitoring " << d_inName << " and " << d_outName << " ends" << endl; } natlog-2.00.00/devicesproducer/signalhandler.cc0000644000175000017500000000053113236662052020435 0ustar frankfrank#include "devicesproducer.ih" void DevicesProducer::signalHandler(size_t signum) { if (signum == SIGHUP) { d_stdMsg << "ignoring signal SIGHUP" << endl; return; } d_stdMsg << "received signal " << signum << " (" << (signum == SIGINT ? "SIGINT" : "SIGTERM") << ')' << endl; d_signaled.notify(); } natlog-2.00.00/devicesproducer/frame0000644000175000017500000000006513236662052016332 0ustar frankfrank#include "devicesproducer.ih" DevicesProducer:: { } natlog-2.00.00/devicesproducer/devicesproducer.h0000644000175000017500000000125713236662052020660 0ustar frankfrank#ifndef INCLUDED_DEVICESPRODUCER_ #define INCLUDED_DEVICESPRODUCER_ #include #include #include #include "../producer/producer.h" class Storage; class DevicesProducer: public Producer, public FBB::SignalHandler { std::ostream &d_stdMsg; Storage &d_storage; FBB::Semaphore d_signaled; bool d_endSignal = false; char const *d_inName; char const *d_outName; public: DevicesProducer(std::ostream &stdMsg, Storage &storage); ~DevicesProducer() override; private: void run() override; void signalHandler(size_t signum) override; void handleSignals(); }; #endif natlog-2.00.00/devicesproducer/handlesignals.cc0000644000175000017500000000031313236662052020434 0ustar frankfrank#include "devicesproducer.ih" void DevicesProducer::handleSignals() { Signal::instance().add(SIGHUP, *this); Signal::instance().add(SIGINT, *this); Signal::instance().add(SIGTERM, *this); } natlog-2.00.00/documentation/0000755000175000017500000000000013236662052014777 5ustar frankfranknatlog-2.00.00/documentation/README.flow0000644000175000017500000002062313236662052016630 0ustar frankfrankmain | +- NatFork | | | +- RotatingStream | | | | | +- RotatingStreambuf | | | +- setupStdMsg | | | +- RotatingStream::open | | | +- RotatingStreambuf::open | | | +- rotateThread (thread, once) | | | +- rotate | +- natfork.run() | +--- parentProcess | +--- childProcess | +---+ (1 of 3) | | | +- ConntrackProducer | | | | | +- signalHandler | | | +- DevicesProducer | | | +- TcpdumpProducer | +--- Producer::process (thread) | | | +---+ (1 of 3) | | | | | +- ConntrackProducer.run | | | | | | | +- childProcess: execs 'conntrack' | | | | | | | +- parentProcess | | | | | | | +- process pushes ConntrackRecord on the storage | | | | | +- DevicesProducer.run | | | | | | | +- PcapFilter (thread) | | | | | | | | | +- operator() | | | | | | | | | | | +- Pcap d_pcap.loop | | | | | | | | | +- callback pushes PcapRecord on the storage | | | | | | | +- PcapFilter out | | | | | | | +- operator() (same, see above) | | | | | +- TcpdumpProducer.run | | | | | +- get | | | | | +- process | | | | | +- store pushes TcpdumpRecord on the storage | | | +- storage.setEmpty | +- ConnectionsConsumer | | | +- RotatingStream | | | | | +- RotatingStreambuf | | | +- RotatingStream::open | | | +- RotatingStreambuf::open | | | +- rotateThread (thread, once) | | | +- rotate | +- ConnectionsConsumer.run | +- cleanupWrap (thread) | | | +- cleanupICMP_UDP | | | +- cleanup("icmp") | | | | | +- logICMP | | | | | +-logICMPdata | | | +- cleanup("udp") | | | +- logTCP_UDP | | | +-logTCP_UDPdata | +---+ | | | +- icmp | | | | | +- icmpDestroy | | | | | +- logICMP | | | | | logICMPdata | | | +- udp | | | | | +- udpIn | | | | | +- udpOut | | | | | +- tcp_udpDestroy | | | | | +- logTCP_UDP | | | | | logTCP_UDPdata | | | +- tcp | | | +- tcpIn | | | | | +- logTCP_UDP | | | | | logTCP_UDPdata | | | +- tcpOut | | | +- tcp_udpDestroy | | | +- logTCP_UDP | | | logTCP_UDPdata | +- cleanupICMP_UDP | | | +- cleanup("icmp") | | | | | +- logICMP | | | | | +-logICMPdata | | | +- cleanup("udp") | | | +- logTCP_UDP | | | +-logTCP_UDPdata | +- cleanup("tcp") | +- logTCP_UDP | logTCP_UDPdata =================================================================== main -> natfork.run() NatFork: childProcess mode CONNTRACK: ConntrackProducer object installs signal handler for signals 2 (SIGINT) and 15 (SIGTERM) signalHandler: kills conntrack process d_signalled = true thread: Producer::process calls one of: ConntrackProducer.run -> forks (repeatedly, with a limit) --------------------- childProcess: execs 'conntrack' throws 0 on failure, ending main, thus ending parentProcess: parentProcess: loop: process(line) from childProcess pushes ConntrackRecord =============== storage.setEmpty() not d_signaled: 'terminated' msg data.cc - definitions of regular expressions (FBB::Pattern objects) matching TCP/UDP or ICMP packets. DevicesProducer.run ------------------- detach anonymous PcapFilter thread reading the 1st (incoming, pre-NAT) device PcapFilter out reading the 2nd (outgoing, post-NAT) device out(), ends at signal 2 or 15 storage.setEmpty() out not signaled: 'terminated' msg PcapFilter: Pcap d_pcap wraps C pcap_ function calls. operator()() - explicitly called or thread d_pcap.loop: receives this as void * callback as pcap_handler. callback: pushes PcapRecord ========== TcpdumpProducer.run ------------------- opens 1st (incoming, pre-NAT) tcpdump saved file and 2nd (outgoing, post-NAT) tcpdump saved file gets 1st packets from both calls process(): calls store() for all packets sorted by time store: pushes TcpdumpRecord ============= storage.setEmpty ConnectionsConsumer.run() thread: cleanupWrap loop: storage.wait(), break if empty fetch Record notify producer handle protocol data: icmp(): IN, NEW: d_icmp += record (key is record's ID) update addresses, sent/received DESTROY: icmpDestroy(): logICMP(), d_icmp -= record udp(): IN: udpIn() d_udp += record (key: setTCPUDPkey) d_id[record.id()] = key update sent/received OUT: udpOut() record.id test or: set IP, d_id -= ID NEW: d_udp += record DESTROY: tcp_udpDestroy() - cf. icmpDestroy tcp(): IN: tcpIn() d_tcp += record (key: setTCPTCPkey) d_sequence[record.id()] = key update sent/received OUT: tcpOut() SYN flag test or: set IP, d_sequence -= ID NEW: d_tcp += record DESTROY: tcp_udpDestroy() cleanupICMP_UDP, cleanup(tcp) natlog-2.00.00/documentation/README.udp0000644000175000017500000000445313236662052016454 0ustar frankfrankSetting up a demo udp connection: On the server run (make sure the firewall accepts incoming connections for the used port: iptables -A INPUT -p udp --dport -j ACCEPT Start nc to listen on the port: nc -l -u -p Start nc on the client: nc -u server Run tcpdump -ni udp and port to inspect the flow. Example: Server (e.g., www.rug.nl): nc -l -u -p 12345 Client: nc -u www.rug.nl 12345 Tcpdump (e.g. at the client) tcpdump -ni eth0 udp and port 12345 When sending UDP packets, the ID's at the client and nat computer are identical: Client (1.2) to destination (2.51): 15:43:54.437608 IP (tos 0x0, ttl 64, id 36222, offset 0, flags [DF], proto UDP (17), length 34) 192.168.1.2.51757 > 129.125.2.51.12345: UDP, length 6 15:44:13.541867 IP (tos 0x0, ttl 52, id 18749, offset 0, flags [DF], proto UDP (17), length 38) 129.125.2.51.12345 > 192.168.1.2.51757: UDP, length 10 15:45:49.393355 IP (tos 0x0, ttl 64, id 63059, offset 0, flags [DF], proto UDP (17), length 37) 192.168.1.2.51757 > 129.125.2.51.12345: UDP, length 9 15:46:17.583739 IP (tos 0x0, ttl 52, id 24262, offset 0, flags [DF], proto UDP (17), length 40) 129.125.2.51.12345 > 192.168.1.2.51757: UDP, length 12 Nathost (17.6) to destination (2.51): 15:43:54.437689 IP (tos 0x0, ttl 63, id 36222, offset 0, flags [DF], proto UDP (17), length 34) 192.168.17.6.51757 > 129.125.2.51.12345: UDP, length 6 15:44:13.541818 IP (tos 0x0, ttl 53, id 18749, offset 0, flags [DF], proto UDP (17), length 38) 129.125.2.51.12345 > 192.168.17.6.51757: UDP, length 10 15:45:49.393444 IP (tos 0x0, ttl 63, id 63059, offset 0, flags [DF], proto UDP (17), length 37) 192.168.17.6.51757 > 129.125.2.51.12345: UDP, length 9 15:46:17.583695 IP (tos 0x0, ttl 53, id 24262, offset 0, flags [DF], proto UDP (17), length 40) 129.125.2.51.12345 > 192.168.17.6.51757: UDP, length 12 Multiple udp packets may be sent by identical processes, in which case the client and nathost computers may use different ports. The IN connections store the source, dest, IP-addresses and ports, and uses d_id (like the tcp's sequence nr) to allow association with the matching OUT packet. Once the association is made, the via IP-address and port can be set, and the d_id entry can be removed. natlog-2.00.00/documentation/README.tcp0000644000175000017500000004730513236662052016455 0ustar frankfrankAn example of TCP communication as processed by Pcap (DevicesProducer and TcpdumpProducer) Note: usually cport and nport are identical, but that's not necessarily so, so cport and nport cannot be used to identify the nathost and nat-port (nport) Here is an example of the TCP communication: SYN: ==== start connection at the client computer: 09:42:20.615902 br0 (IN) client.cport > remote.22: Flags [S], seq 442193845, win 29200, options [mss 1460,sackOK,TS val 918415591 ecr 0,nop,wscale 7], length 0 NAT: nathost is the natting host on the outbound interface 09:42:20.616029 eth1 (OUT) nathost.nport > remote.22: Flags [S], seq 442193845, win 29200, options [mss 1460,sackOK,TS val 918415591 ecr 0,nop,wscale 7], length 0 Initially, on the IN and OUT devices the seq. nrs are identical, and are used to match the two SYN records. This is only required once: to determine the nathost's address and port. ----------------------------------------------------------- SYN ACK: ======== reply from remote -> nathost 09:42:20.665832 eth1 (OUT) remote.22 > nathost.nport: Flags [S.], seq 3499515712, ack 442193846, win 65535, options [mss 1409,nop,wscale 7,sackOK,TS val 1600635341 ecr 918415591], length 0 remote reply forwarded by nathost to client 09:42:20.665882 br0 (IN) remote.22 > client.cport: Flags [S.], seq 3499515712, ack 442193846, win 65535, options [mss 1409,nop,wscale 7,sackOK,TS val 1600635341 ecr 918415591], length 0 These SYN ACK records do not contain useful information (for us). E.g., no length ----------------------------------------------------------- ACK: ==== client sends ACK to remote 09:42:20.666158 br0 (IN) client.cport > remote.22: Flags [.], ack 1, win 229, options [nop,nop,TS val 918415641 ecr 1600635341], length 0 nathost forwards ACK to remote: 09:42:20.666202 eth1 (OUT) nathost.nport > remote.22: Flags [.], ack 1, win 229, options [nop,nop,TS val 918415641 ecr 1600635341], length 0 Same ----------------------------------------------------------- Data: ===== client sends data packet: 09:42:20.666543 br0 (IN) client.cport > remote.22: Flags [P.], seq 1:33, ack 1, win 229, options [nop,nop,TS val 918415642 ecr 1600635341], length 32 Using cport|22 as key, the #sent bytes is updated if the record's source port is equal to the record[key]'s source port ----------------------------------------------------------- nathost forwards data to remote: 09:42:20.666583 eth1 (OUT) nathost.nport > remote.22: Flags [P.], seq 1:33, ack 1, win 229, options [nop,nop,TS val 918415642 ecr 1600635341], length 32 Since this is mere forwarding, no administration is required. ----------------------------------------------------------- remote: data to nathost 09:42:20.695657 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 1:33, ack 33, win 1023, options [nop,nop,TS val 1600635344 ecr 918415642], length 32 Incoming data, which can also be ignored, since it'll arrive at the client ----------------------------------------------------------- nathost forwards to client: 09:42:20.695704 br0 (IN) remote.22 > client.cport: Flags [P.], seq 1:33, ack 33, win 1023, options [nop,nop,TS val 1600635344 ecr 918415642], length 32 Data arriving at the client: using cport|22 as key, the #received bytes is updated if the record's dest port is equal to the record[key]'s source port ----------------------------------------------------------- client sends ACK to remote 09:42:20.695976 br0 (IN) client.cport > remote.22: Flags [.], ack 33, win 229, options [nop,nop,TS val 918415671 ecr 1600635344], length 0 nathost forwards ACK to remote 09:42:20.696019 eth1 (OUT) nathost.nport > remote.22: Flags [.], ack 33, win 229, options [nop,nop,TS val 918415671 ecr 1600635344], length 0 09:42:20.696687 br0 (IN) client.cport > remote.22: Flags [P.], seq 33:1393, ack 33, win 229, options [nop,nop,TS val 918415672 ecr 1600635344], length 1360 09:42:20.696730 eth1 (OUT) nathost.nport > remote.22: Flags [P.], seq 33:1393, ack 33, win 229, options [nop,nop,TS val 918415672 ecr 1600635344], length 1360 09:42:20.699595 eth1 (OUT) remote.22 > nathost.nport: Flags [.], ack 33, win 1024, options [nop,nop,TS val 1600635344 ecr 918415642], length 0 09:42:20.699634 br0 (IN) remote.22 > client.cport: Flags [.], ack 33, win 1024, options [nop,nop,TS val 1600635344 ecr 918415642], length 0 09:42:20.704898 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 33:929, ack 33, win 1024, options [nop,nop,TS val 1600635345 ecr 918415642], length 896 09:42:20.704939 br0 (IN) remote.22 > client.cport: Flags [P.], seq 33:929, ack 33, win 1024, options [nop,nop,TS val 1600635345 ecr 918415642], length 896 09:42:20.737513 eth1 (OUT) remote.22 > nathost.nport: Flags [.], ack 1393, win 1024, options [nop,nop,TS val 1600635348 ecr 918415672], length 0 09:42:20.737555 br0 (IN) remote.22 > client.cport: Flags [.], ack 1393, win 1024, options [nop,nop,TS val 1600635348 ecr 918415672], length 0 09:42:20.737821 br0 (IN) client.cport > remote.22: Flags [P.], seq 1393:1441, ack 929, win 251, options [nop,nop,TS val 918415713 ecr 1600635345], length 48 09:42:20.737864 eth1 (OUT) nathost.nport > remote.22: Flags [P.], seq 1393:1441, ack 929, win 251, options [nop,nop,TS val 918415713 ecr 1600635345], length 48 09:42:20.783898 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 929:1469, ack 1441, win 1024, options [nop,nop,TS val 1600635353 ecr 918415713], length 540 09:42:20.783988 br0 (IN) remote.22 > client.cport: Flags [P.], seq 929:1469, ack 1441, win 1024, options [nop,nop,TS val 1600635353 ecr 918415713], length 540 09:42:20.790159 br0 (IN) client.cport > remote.22: Flags [P.], seq 1441:1457, ack 1469, win 265, options [nop,nop,TS val 918415765 ecr 1600635353], length 16 09:42:20.790211 eth1 (OUT) nathost.nport > remote.22: Flags [P.], seq 1441:1457, ack 1469, win 265, options [nop,nop,TS val 918415765 ecr 1600635353], length 16 09:42:20.928624 eth1 (OUT) remote.22 > nathost.nport: Flags [.], ack 1457, win 1024, options [nop,nop,TS val 1600635367 ecr 918415765], length 0 09:42:20.928715 br0 (IN) remote.22 > client.cport: Flags [.], ack 1457, win 1024, options [nop,nop,TS val 1600635367 ecr 918415765], length 0 etc. etc. 09:42:20.928949 br0 (IN) client.cport > remote.22: Flags [P.], seq 1457:1501, ack 1469, win 265, options [nop,nop,TS val 918415904 ecr 1600635367], length 44 09:42:20.929001 eth1 (OUT) nathost.nport > remote.22: Flags [P.], seq 1457:1501, ack 1469, win 265, options [nop,nop,TS val 918415904 ecr 1600635367], length 44 09:42:20.965643 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 1469:1513, ack 1501, win 1024, options [nop,nop,TS val 1600635371 ecr 918415904], length 44 09:42:20.965696 br0 (IN) remote.22 > client.cport: Flags [P.], seq 1469:1513, ack 1501, win 1024, options [nop,nop,TS val 1600635371 ecr 918415904], length 44 09:42:20.966059 br0 (IN) client.cport > remote.22: Flags [P.], seq 1501:1561, ack 1513, win 265, options [nop,nop,TS val 918415941 ecr 1600635371], length 60 09:42:20.966083 eth1 (OUT) nathost.nport > remote.22: Flags [P.], seq 1501:1561, ack 1513, win 265, options [nop,nop,TS val 918415941 ecr 1600635371], length 60 09:42:21.008693 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 1513:1589, ack 1561, win 1024, options [nop,nop,TS val 1600635375 ecr 918415941], length 76 09:42:21.008722 br0 (IN) remote.22 > client.cport: Flags [P.], seq 1513:1589, ack 1561, win 1024, options [nop,nop,TS val 1600635375 ecr 918415941], length 76 09:42:21.009433 br0 (IN) client.cport > remote.22: Flags [P.], seq 1561:1925, ack 1589, win 265, options [nop,nop,TS val 918415984 ecr 1600635375], length 364 09:42:21.009457 eth1 (OUT) nathost.nport > remote.22: Flags [P.], seq 1561:1925, ack 1589, win 265, options [nop,nop,TS val 918415984 ecr 1600635375], length 364 09:42:21.051808 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 1589:1905, ack 1925, win 1024, options [nop,nop,TS val 1600635379 ecr 918415984], length 316 09:42:21.051839 br0 (IN) remote.22 > client.cport: Flags [P.], seq 1589:1905, ack 1925, win 1024, options [nop,nop,TS val 1600635379 ecr 918415984], length 316 09:42:21.057729 br0 (IN) client.cport > remote.22: Flags [P.], seq 1925:2561, ack 1905, win 279, options [nop,nop,TS val 918416033 ecr 1600635379], length 636 09:42:21.057753 eth1 (OUT) nathost.nport > remote.22: Flags [P.], seq 1925:2561, ack 1905, win 279, options [nop,nop,TS val 918416033 ecr 1600635379], length 636 09:42:21.102581 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 1905:1933, ack 2561, win 1024, options [nop,nop,TS val 1600635385 ecr 918416033], length 28 09:42:21.102606 br0 (IN) remote.22 > client.cport: Flags [P.], seq 1905:1933, ack 2561, win 1024, options [nop,nop,TS val 1600635385 ecr 918416033], length 28 09:42:21.103151 br0 (IN) client.cport > remote.22: Flags [P.], seq 2561:2665, ack 1933, win 279, options [nop,nop,TS val 918416078 ecr 1600635385], length 104 09:42:21.103173 eth1 (OUT) nathost.nport > remote.22: Flags [P.], seq 2561:2665, ack 1933, win 279, options [nop,nop,TS val 918416078 ecr 1600635385], length 104 09:42:21.130577 eth1 (OUT) remote.22 > nathost.nport: Flags [.], ack 2665, win 1024, options [nop,nop,TS val 1600635387 ecr 918416078], length 0 09:42:21.130596 br0 (IN) remote.22 > client.cport: Flags [.], ack 2665, win 1024, options [nop,nop,TS val 1600635387 ecr 918416078], length 0 remote sends data to client: 09:42:21.138829 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 1933:2585, ack 2665, win 1024, options [nop,nop,TS val 1600635388 ecr 918416078], length 652 09:42:21.138857 br0 (IN) remote.22 > client.cport: Flags [P.], seq 1933:2585, ack 2665, win 1024, options [nop,nop,TS val 1600635388 ecr 918416078], length 652 remote sends data to nathost: 09:42:21.146627 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 2585:2629, ack 2665, win 1024, options [nop,nop,TS val 1600635389 ecr 918416078], length 44 09:42:21.146647 br0 (IN) remote.22 > client.cport: Flags [P.], seq 2585:2629, ack 2665, win 1024, options [nop,nop,TS val 1600635389 ecr 918416078], length 44 09:42:21.146951 br0 (IN) client.cport > remote.22: Flags [.], ack 2629, win 293, options [nop,nop,TS val 918416122 ecr 1600635388], length 0 09:42:21.146974 eth1 (OUT) nathost.nport > remote.22: Flags [.], ack 2629, win 293, options [nop,nop,TS val 918416122 ecr 1600635388], length 0 client sends data to remote (via nathost) 09:42:21.151816 br0 (IN) client.cport > remote.22: Flags [P.], seq 2665:2773, ack 2629, win 293, options [nop,nop,TS val 918416127 ecr 1600635388], length 108 09:42:21.151837 eth1 (OUT) nathost.nport > remote.22: Flags [P.], seq 2665:2773, ack 2629, win 293, options [nop,nop,TS val 918416127 ecr 1600635388], length 108 09:42:21.151997 br0 (IN) client.cport > remote.22: Flags [P.], seq 2773:3209, ack 2629, win 293, options [nop,nop,TS val 918416127 ecr 1600635388], length 436 09:42:21.152019 eth1 (OUT) nathost.nport > remote.22: Flags [P.], seq 2773:3209, ack 2629, win 293, options [nop,nop,TS val 918416127 ecr 1600635388], length 436 09:42:21.192828 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 2629:2741, ack 3209, win 1024, options [nop,nop,TS val 1600635394 ecr 918416127], length 112 09:42:21.192886 br0 (IN) remote.22 > client.cport: Flags [P.], seq 2629:2741, ack 3209, win 1024, options [nop,nop,TS val 1600635394 ecr 918416127], length 112 09:42:21.192918 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 2741:2945, ack 3209, win 1024, options [nop,nop,TS val 1600635394 ecr 918416127], length 204 09:42:21.192956 br0 (IN) remote.22 > client.cport: Flags [P.], seq 2741:2945, ack 3209, win 1024, options [nop,nop,TS val 1600635394 ecr 918416127], length 204 09:42:21.193401 br0 (IN) client.cport > remote.22: Flags [.], ack 2945, win 307, options [nop,nop,TS val 918416169 ecr 1600635394], length 0 09:42:21.193446 eth1 (OUT) nathost.nport > remote.22: Flags [.], ack 2945, win 307, options [nop,nop,TS val 918416169 ecr 1600635394], length 0 09:42:21.237611 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 2945:3005, ack 3209, win 1024, options [nop,nop,TS val 1600635398 ecr 918416169], length 60 09:42:21.237654 br0 (IN) remote.22 > client.cport: Flags [P.], seq 2945:3005, ack 3209, win 1024, options [nop,nop,TS val 1600635398 ecr 918416169], length 60 09:42:21.238632 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 3005:3065, ack 3209, win 1024, options [nop,nop,TS val 1600635398 ecr 918416169], length 60 09:42:21.238670 br0 (IN) remote.22 > client.cport: Flags [P.], seq 3005:3065, ack 3209, win 1024, options [nop,nop,TS val 1600635398 ecr 918416169], length 60 09:42:21.239154 br0 (IN) client.cport > remote.22: Flags [.], ack 3065, win 307, options [nop,nop,TS val 918416214 ecr 1600635398], length 0 09:42:21.239198 eth1 (OUT) nathost.nport > remote.22: Flags [.], ack 3065, win 307, options [nop,nop,TS val 918416214 ecr 1600635398], length 0 09:42:21.247777 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 3065:3109, ack 3209, win 1024, options [nop,nop,TS val 1600635399 ecr 918416169], length 44 09:42:21.247816 br0 (IN) remote.22 > client.cport: Flags [P.], seq 3065:3109, ack 3209, win 1024, options [nop,nop,TS val 1600635399 ecr 918416169], length 44 09:42:21.247848 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 3109:3201, ack 3209, win 1024, options [nop,nop,TS val 1600635399 ecr 918416169], length 92 09:42:21.247885 br0 (IN) remote.22 > client.cport: Flags [P.], seq 3109:3201, ack 3209, win 1024, options [nop,nop,TS val 1600635399 ecr 918416169], length 92 09:42:21.248158 br0 (IN) client.cport > remote.22: Flags [.], ack 3201, win 307, options [nop,nop,TS val 918416223 ecr 1600635399], length 0 09:42:21.248199 eth1 (OUT) nathost.nport > remote.22: Flags [.], ack 3201, win 307, options [nop,nop,TS val 918416223 ecr 1600635399], length 0 09:43:22.683338 br0 (IN) client.cport > remote.22: Flags [P.], seq 3209:3237, ack 3201, win 307, options [nop,nop,TS val 918477658 ecr 1600635399], length 28 09:43:22.683443 eth1 (OUT) nathost.nport > remote.22: Flags [P.], seq 3209:3237, ack 3201, win 307, options [nop,nop,TS val 918477658 ecr 1600635399], length 28 09:43:22.726840 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 3201:3245, ack 3237, win 8184, options [nop,nop,TS val 1600641547 ecr 918477658], length 44 09:43:22.726897 br0 (IN) remote.22 > client.cport: Flags [P.], seq 3201:3245, ack 3237, win 8184, options [nop,nop,TS val 1600641547 ecr 918477658], length 44 09:43:22.728709 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 3245:3353, ack 3237, win 8184, options [nop,nop,TS val 1600641547 ecr 918477658], length 108 09:43:22.728749 br0 (IN) remote.22 > client.cport: Flags [P.], seq 3245:3353, ack 3237, win 8184, options [nop,nop,TS val 1600641547 ecr 918477658], length 108 09:43:22.729249 br0 (IN) client.cport > remote.22: Flags [.], ack 3353, win 307, options [nop,nop,TS val 918477704 ecr 1600641547], length 0 09:43:22.729293 eth1 (OUT) nathost.nport > remote.22: Flags [.], ack 3353, win 307, options [nop,nop,TS val 918477704 ecr 1600641547], length 0 09:43:22.729653 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 3353:3397, ack 3237, win 8184, options [nop,nop,TS val 1600641547 ecr 918477658], length 44 09:43:22.729692 br0 (IN) remote.22 > client.cport: Flags [P.], seq 3353:3397, ack 3237, win 8184, options [nop,nop,TS val 1600641547 ecr 918477658], length 44 09:43:22.730874 eth1 (OUT) remote.22 > nathost.nport: Flags [P.], seq 3397:3541, ack 3237, win 8184, options [nop,nop,TS val 1600641547 ecr 918477658], length 144 09:43:22.730912 br0 (IN) remote.22 > client.cport: Flags [P.], seq 3397:3541, ack 3237, win 8184, options [nop,nop,TS val 1600641547 ecr 918477658], length 144 09:43:22.731374 br0 (IN) client.cport > remote.22: Flags [.], ack 3541, win 321, options [nop,nop,TS val 918477707 ecr 1600641547], length 0 09:43:22.731417 eth1 (OUT) nathost.nport > remote.22: Flags [.], ack 3541, win 321, options [nop,nop,TS val 918477707 ecr 1600641547], length 0 09:43:22.731492 br0 (IN) client.cport > remote.22: Flags [P.], seq 3237:3265, ack 3541, win 321, options [nop,nop,TS val 918477707 ecr 1600641547], length 28 09:43:22.731532 eth1 (OUT) nathost.nport > remote.22: Flags [P.], seq 3237:3265, ack 3541, win 321, options [nop,nop,TS val 918477707 ecr 1600641547], length 28 09:43:22.731553 br0 (IN) client.cport > remote.22: Flags [P.], seq 3265:3325, ack 3541, win 321, options [nop,nop,TS val 918477707 ecr 1600641547], length 60 09:43:22.731591 eth1 (OUT) nathost.nport > remote.22: Flags [P.], seq 3265:3325, ack 3541, win 321, options [nop,nop,TS val 918477707 ecr 1600641547], length 60 ------------------------------------------------------------------------- FIN: client sends FIN+ACK to remote 09:43:22.731605 br0 (IN) client.cport > remote.22: Flags [F.], seq 3325, ack 3541, win 321, options [nop,nop,TS val 918477707 ecr 1600641547], length 0 once FIN is received, no further useful information arrives for this connection and the tcp-record entry is logged and erased. Any further info arriving for cport|22 is now ignored since the record matching the key no longer exists: see below for examples of additionally arriving packets: ------------------------------------------------------------------------------- nathost forwards FIN+ACK to remote 09:43:22.731645 eth1 (OUT) nathost.nport > remote.22: Flags [F.], seq 3325, ack 3541, win 321, options [nop,nop,TS val 918477707 ecr 1600641547], length 0 remote replies by sending ACK to nathost 09:43:22.759772 eth1 (OUT) remote.22 > nathost.nport: Flags [.], ack 3265, win 8184, options [nop,nop,TS val 1600641550 ecr 918477707], length 0 nathost forwards remote ACK to cient 09:43:22.759813 br0 (IN) remote.22 > client.cport: Flags [.], ack 3265, win 8184, options [nop,nop,TS val 1600641550 ecr 918477707], length 0 remote sends another ACL to nathost 09:43:22.763745 eth1 (OUT) remote.22 > nathost.nport: Flags [.], ack 3265, win 8184, options [nop,nop,TS val 1600641550 ecr 918477707,sack 1 {3325:3325},eol], length 0 nathorst forwards another ACK to client 09:43:22.763784 br0 (IN) remote.22 > client.cport: Flags [.], ack 3265, win 8184, options [nop,nop,TS val 1600641550 ecr 918477707,sack 1 {3325:3325},eol], length 0 remote sends another ACK to nathost 09:43:22.763809 eth1 (OUT) remote.22 > nathost.nport: Flags [.], ack 3325, win 8183, options [nop,nop,TS val 1600641550 ec nathost forwards ACK to client 09:43:22.763857 br0 (IN) remote.22 > client.cport: Flags [.], ack 3325, win 8183, options [nop,nop,TS val 1600641550 ec natlog-2.00.00/documentation/ip-header-v41.png0000644000175000017500000053005513226657571017774 0ustar frankfrank‰PNG  IHDR ø–MiCCPICC ProfilexœíVYP“W=" ‹HY‚(B¨ŠˆDVEŠ¢ˆÕ*IˆKÂÏOdQP‹ ¢ (T\)®B]ª¥HA­¢Vm‹ V¬Åô!¶v¦uêsË™¹3çž¹óÍ=÷<Üh>â‘d €X"¥ü½Ü˜!¡aLµ. ` ˜óñ¤+—ËÁ;ñì:¸Æâ‘dÌ»Ïý#ÆP!¡aÁ /Rrú|%_@?QJJb)}A/ HVT ? Jh‹”¼€6_Éëh¯ˆ¤Ñ ¨êJ"£%€Z@׎Æ Çö HJ hnÀ‹c#Í‹,BBØÊkÆz³_ôü· TÑ€qÑÌ}݉Àâ­6È€`4ů°·Z òB¡œ¨ÕÔB1´G¡ÞÐ{€Æ8AµêÍÄUàßöJŸo@'@³¤¿R9¬¤NרвÓ0–£Ó¤;Gï¸#Ýð¡‘ÛøÝžMœg²Ù´ÝÌàÃðIù“[ÌiS-DÓò-ë¦ßeiΰ´ö³Ùn°+±¯v¸2óÖ,ùlš“öG&Îs纸øÌ[í~ÿƒÎ‡²ŽüXðSZÔ£€Ÿ]äÓ å¿ô>¹x>0ô\¡ñû_÷«ì|€qîÓÎÁÆ1Ø“Ëdób¢ùO*Œü£Aƒ;<ÀLØÁ6pD0<ÁlðƒhðA)„ˆ|Ÿ‘ï©0I ìX2™ŠEI™®$#d²cÅd‚THY1½%‚VL;{PöUЩÊ mfú4Ö.øÛÜßÒÈï°xnC pHYsaa¨?§i IDATxœìÝwXS×ðoCÀâ@d "n÷Þ³?µjÁ]gÝ£­u´Õªu[G­Vë¨Z÷®³î‰ˆŠÈDÀɆ¬ûûãà5&àý<}|’;Î=÷öärß{–€ã8B!„BHÞ õB!„BHqEá!„B!$Ÿ(œ „B!„ä…„B!„|¢p‚B!„’ONB!„Bò‰Â B!„BH>Q8A!„BÉ' '!„B!ùDá!„B!$Ÿ(œ „B!„ä…„B!„|¢p‚B!„’ONB!„Bò‰Â B!„BH>Q8A!„BÉ' '!„B!ùDá!„B!$Ÿ(œ „B!„ä…„B!„|¢p‚B!„’ONB!„Bò‰Â B!„BH>Q8A!„BÉ' '!„B!ùDá!„B!$ŸŒôB)îÞ½Û§OöùùóçæææüªðððV­Zå°¯H$rpppsskÖ¬ÙÈ‘# /Ÿiii¾¾¾6lØ Aƒ<íÛ¤I“˜˜«V­:thηoßž} ´±±ÉOv‹„¥¥eZZZÍš5Ÿ={¦ï¼BHICá!„hE*•ÆÇÇk\%—˳[Å‹½qãÆöíÛ×­[·aÆ:B`êÔ©þù'€ü1¯áÄëׯى¤§§çº±L&ãÏZ.—ç=§EGñ‘¾3B!%…„¢Kvvv"‘Hy‰T*å8Ž} êÖ­ÛÝ»wóú¬¯ ???KB!EƒÂ BÑ¥{÷î©7ûIMM :{öìÂ…  …T*6lØÝ»wÅb±=vìX&H!„䊺bBH¡+S¦Œ§§ç¼yóöìÙÖž?^‡‡ËåÞÞÞïß¿×aš„BH®(œ „¢3xðàêÕ«³ÏOž<ÑaÊK–,¹rå €œ;…B!ºE!¤H5oÞÜÏÏÉÇGGGpuuíÞ½{v{mÚ´I&“8p`ÕªUUÖÞ¸q㧟~0aÂ[[Ûëׯ^þóäåË—W®\ñ÷÷÷÷÷—Ë厎Ž}úôéÝ»wέ¼^¼xñ×_EDDpW­Z5;;»¾}ûvîÜY d·—T*}ðàÁ­[·nݺ%‘HجY³\3©P(®^½zÿþ}ÿ°°°Ê•+{xx :´fÍšêGGG>|@Ó¦M›7oÎqܶmÛÎœ9óâÅ‹Ý»w»¹¹iqU!¤dá!„hAù=55Uy•òð£ñññ9§3hÐ ¶åèÑ£9Ž[²d ûZ£F …B¡q—[·n±m*T¨‘‘¡²öÇÜÜÜÒÒÒ/^Ì6þñÇózŽ5jÔ`ûnݺ5×=zÄŸ5ëk®b÷îÝêwlmm;¦1M‰Dâãã£Ò—çèèxçÎ;ÆÅÅyxx¨ï2dÈ©TÊFõ­Y³¦úŽñññ]ºtÑx¸aƽ}ûVeûÿý—­7oÞ‡ÚµkÇoŸ]Þ!¤d£ÆN„R¤?~Ì>Ô©S€··7{ãu÷î]»üóÏ?ìÃ!CLLLTÖN˜0!22ÒØØxÏž=fff…•ï¼J¥cÆŒñññIII`nnÞ¤I¾RååË—_|ñÅš5kÔw3fÌîÝ»år¹@ pssëÛ·ï—_~Ù´iS¡P ""¢{÷îAAA*{={ö¬E‹þþþì«‘‘‘££#Ûeß¾} ÈnˆØk×®5lØðܹs쫽½½‡‡?+È®]»š5köúõkûÊd²>}úü÷ßy¹0„RQ8A!Egß¾}üÓ°§§';;;~ ÖJ…B¡8pàûç«W¯VÏ߶ªY³fÊË÷ïßÏ–;88¼|ùRe¯[·n±j ¨5vš7o[>xð`õff*T  ###ùå|c'•*Uº~ýz.×”BJ:ª „]jÕªUíϹººZXXØÙÙ-^¼8-- €©©éÚµkù]ú÷ï_¦L|‹ÿ¸¬R5!•J½¼¼RRRÊ•+·k×.þ¡Yï~þùç>˜={výúõUÖ ‚¥K—²ö]HMMåW½xñÂÖÖ¶zõê|÷ennnl¯ØØXåå|ç“yóæU«VMe¯fÍš 2D=µ˜˜˜U«V(_¾üºuëÔ{x7hÐ`èС ï©X¾|yË–-5®"„ÒƒFv"„] ËyƒúõëïÙ³§víÚü ‹þýûïÞ½€ŸŸŸr›%™LÆZ@y{{+§3þ|Ö×â÷ß·³³Óá)¨^½:{7ŸƒŒŒŒõå§Nb¼¼¼4îX±bÅFùûû§¤¤œ9sæË/¿dË·lÙ’Ãá®\¹Â}œYœ÷ìÙ³‡¨R¥Ê°aÃ4î8mÚ4~ºÞåË—ÓÓÓtêÔI}ÚA¦K—.ëׯàëë»`Á•µ666ÇÏ!ÄRJP8A!ºTµjUõŠ‘Häìììîî^¿~ýáÇ«w§>|8Nð¯Û\¼x‘uîÙ³§òSï… –/_ÀÛÛ{ðàÁ:?‹… òM’²óøñãzõê©,”H$‘‘‘LLL,--_¾|©qߦM›²z˜ÐÐÐìÒOLLŒˆˆˆŒŒŒŒŒ `×G¼¹»»ó]¨U¸ººª/ä!''§ì2éââ"  EXXÇq*5uëÖÍaÔZB)=(œ „] Èîmw:tèP½zõ˜˜˜ÐÐÐÀÀ@¾?¦“r‡à7oÞ 6Œã8‡7ê"×:.—ËdffÚÛÛçºý»wïT–:tèСC—/_Îî)_åpìC½>¬¬¬Ê–-›˜˜¨¼ïî²|ùr˜å ###==ï÷ÂTªT)×ìBHi@á!„èŸP(ôññYºt)???NH$6cZ¥J•z÷îÍo¼páBÖ`ôèÑê}-ØG"##Y7n##£Ö­[Åi¬jB{™™™ü縸8ŸóçÏ«lS¹råfÍš 4H¥¹€¨¨(~›ŽR®\9•p"ùT '!„0NBˆAP'~þùggÏže}š‡ªÜ’‡£?þüܱcÇŽ;”/_^½ ðõU«V=tèöÛsçíí}ᦦ¦;vìÖ­[‹-œœœØ˜­Ê¶y|ABBBv‡à8Ž«ñ¸óçÏïÙ³g®ù´´´ÌuB)(œ „ƒP»vmOOÏ»wï>}ú4((ÈÝÝ]cK'ÇwTxýúuãƳëÏ îøñã,–([¶ìÙ³g›5k¦²ë9Ýáøj uñññêSdð; …ÂæÍ›k™IB!ê(œ „C1|øp6X“ŸŸßìÙ³; Q£F 4PÞlöìÙÙ šàøñãl¢·!C†°1Rµ¦/8 ‹jÕªÅÆÆÊd²àà`õ¾ÚÌÑ£GŸ>}Ê2ɺX𭶬KPž÷ƒçââÂ>Ü»w/55•·«âÆê kÕªÅ>ðÓY¨{ûö-»’vvvlÐXB!ê(œ „C1xðàéÓ§K¥R???ww÷””hªšðððÈal¾ïD­ZµúôéSh™ÍVË–-Ùà¶7nܼy³ú±±±^^^iiiæææ“'Of ùê>BPqöìYõ…®®®UªT‰‹‹KLLܽ{÷øñãÕ·Y±b…úÂæÍ› ŽãŽ?¥±'÷âÅ‹Ùô .Ô˜%B! eÚ#B!ÖÖÖ½zõðèÑ#6\¬X,.vïÅ—-[ÆFÂݱc«lQ&•J§M›Æ¦ó8p _ŸàææÆ>ð³€+[¾|¹ÆÈD,/Z´ˆ}^´h«ñP¶eË–[·n©ïX¯^½Q£F±üÌž=[&“©lpçÎM›6022*vÿ !¤(Q8A!„ŸíÁƒz÷îÍ:"#ÎÎγgÏ™™Ù¶mÛõëׇ††r÷þýûóçÏ7oÞÜ××€­­íÊ•+ù½:vìȦq8qâÄÈ‘#¯\¹¢P(ÂÃÃwìØÑ·oßo¿ýÖÄÄ„­Éw‡5jkRÛ¦M›;w†††*ŠÇÏ™3gܸqB¡°\¹rêù\¶lYùòå8p sçÎW¯^MJJ’ËåÁÁÁ‹/nݺ5;Ä¢E‹²«0!„jìD!¥gÏžÖÖÖoß¾e_GŽ©ßüäÏܹsÃÃÃ÷íÛ—‘‘1eʦ¦¦üVVVû÷ï¯X±"¿¤I“&Ó§O_½z5>ŽI¥¼‹½½ý¡C‡V¯^½gωDâèèX¯^½ÀÀ@B¡ðŸþùâ‹/ÂÃÃß¾}ËÚ†ñ‹/>vì˜zEÅŠ÷ïßïííðßÿµmÛV ˆÅbå±køí·ßÂ"„’ƒj'!Ä€ˆÅbÖ@•*Uºwï®ßüä™™ÙÞ½{ÿþûï²e˲%|` ºvíЪU+•½–.]º`Á±X¬¼‹P(üßÿþwïÞ=éÓ§k¬gpww¿wïk'Æ°XÂÊÊjË–-ßÿ}vùìÒ¥K`` ?P,Çq|,acc³víÚýû÷ÓÔׄ’3ÇqúÎ!„’)555 àþýû!!!ÖÖÖvvv]ºtÉy¶ìÈÈÈk×®‰D"{{ûîÝ»W¯^_ûúõë›7offf6lØP½ Rhhè7\\\Z´hQ¿~}‘H¤M>Ÿ?~ÿþ}ÿÌÌL[[[ww÷.]ºQ>!„äŽÂ B!„BH>Qc'B!„BH>Q8A!„BÉ' '!„B!ùDá!„B!$Ÿ(œ „B!„ä…„B!„|¢p‚B!„’OÅ$œ8.æŸþkå„9_#5%§]n^FÜË¢Ê!„B!¥Q1™òS.Gf:Î=‚P©O1kŒÅøec¶»Ìƒ)ó1pxæ’B!„Ò¥˜„LÍÚ‰À½n\ÄýpVåàäšµMèSdf@’‰Œt„!2ÎxÏõêy@XLêd!„B1lÅ*œàedàÚô¾;ñäŽÜÈZ5ñ+tï‡Øh|x 'àè{'Ì…Ã{в#Bž NClÚ3s=fŸB!„’¡X…_u„@©aOaUß|ý½±ûw¼ŠAÕê†g°å ]pç ÆÏÁÀá8¸'ýp#Ul‘œ„žøgFNÖ÷ÉB!„Rì«f?>ãá3#'câw›`òPhÜöN8uNú¡AS8º|¶×)?4i‰¸—¸ƒð`ÔõÀÕszÈ-©Ý ˆ2L!„BH‰V¬Â e¼ ý†â·Å¸õBƒðÅ`Õ-«VGul=”õ5$ yf”B!„«X5vz‚ðg†¶aôÿ`çˆÆ-ÀÉõ›`öh´ïŽ ³6›àÃ;è=WÏáöU¸ƒ¡]xOO'@!„BH‰R¬j':¹g}¨\ ›áçß²ê(ô÷ÆÂ)˜·êÓƽaé·Hú€™?áÉ l‡Š6Hú€‘S0pDgœB!„IÀqœ¾ó  ÿÃqëŧÎ’ab x÷‘a¨á„Š6úÊ#!„B!%L±ªÐ(= ñ±Ø²#¾ù,–`UöÓç ?µƒ"„B!„èB±ê;¡Qd¾hŽZõ {*‰¸¸¸ .ÄÅÅêQ!¤àè~E).è~Uÿp¢v}¾Á/a^¦ð²mÛ6{{ûÎ;ÛÛÛoÛ¶­ðD!D÷+BHqA÷«’¡¤ô(Loß¾µµµÍÌÌd_MLL^¾|imm­ß\‘’aï޽˖-ûî»ï¼¼¼ôRÐýŠº_Ý¢ûU‰Qük' _`` _Ödffê1?¤$ùùçŸ=zôóÏ?ë;#¤„ û)g¤C")ŒãKÔ’U_BHþ¤¦¦òÿRpt¿"…‡îWD·è~Ubv8ñþ-FöAmKt©F6hR ÿñiíñh팅Sà‡‰hhƒ«çò–þÍˈ{©Ë B!„Ršp8ñ&ÿk—Qøû,BÒpç%FMÅ‚ÉXú]Ö»6¡}wüºo°ûwl=ŒŽ=óvˆ9cpõ¼Î3N!„BH)aÀóNl^ïp5 eË@•j˜ø-„Bü:Þã‘œˆ×q¨Û¡ €ô4$~@¹òxÿ—NÃÌ­:}šz"#·¯àý[x¶†m ð¿…Œt„!2Îz:IB!„BŠ1'í†÷¸¬X‚7b2–ÿ€Ëg€øX\>s ܼ[W£Re„aŲåÑ©·æ]ÒRxÓâÜ#Üz«²ø}9ªØŒ ¿+YÿÍø ÍÚê2«‰0g ºþ×Âqà^ýëXó£.AJ§3‡1ïôjŒ”¤Ü7&Do_cñ,xÇÏ°÷îŦ*æO.¤y{Hiq÷ŽîÅš8yGoâàU$¾Ã+ô-BHQ0àpbúxûÃz ô) $%b÷fü±³¯I…‰)fıýà8T³CÙò(W¦fèÒ{¶àU $ì܈½¡P€ØÞé «g >Ó„Põ£QsÙ ŽÓAâ¤4»{ !Oàì¦ï|äþM55ëk…Šèï÷o¬ÇL‘bïÎ5”±Äÿ†d}õlg7ÄÇê5O„"bÀáDu{œºä$trG­2¨[«`ý^ ›˜í."¦-Ä44·‡gu¤$gmüËïd¢¥#šTæ_±i?*U€Þƒ°ô[¬ZXЬF„ lyÔiøi‰“+^EãÝ›‚¦\<%%%:t()‰^¨ØüU8p .}gEÿ¨\éF…Š˜ý œ\?-‰Š€rô•#ý¢r¥ƒFà´?D¢¬¯¡ˆŽ@ûzÍ!¤ˆp8ÀÉ'îàáüý/nD ½|Z{ò|Æ€½¢¸¬¿…CÇâîKlüç±ÿ"lª@•j8|ƒ°û4®„¢óǶRÓ"à5¾™[Ð|†?ƒµjμIÈn .ô œ”··÷—_~éíí­“Ô ðu›”æ R¹ÒKRÙjÒ“çfU¥øï_œòCÛn¨Z½re€IQ¹Ò*¶YÝ[Œ!ÑÃíº¡NWÕ0OPWI%''1"99Y'©à ê6)RÜv8Á”·F³6¨n¯íö֕Ф¥ê›6Ž.hà “Ï–[•U]’q/a^æ³%*€$3»=~ûí·‚Ô€“zðàÿoÁà ê6)2̤r¥—¤r—øó'ç;6ÅÚ]9lh˜'HåJ/IåNl©rî^ÇÕs9lh˜'¨«¤ÂÂÂvîܦ“Ô ðu›)îŠC8aøÊUÀ«˜Ï–$¾€ õ’BÉÅñhë‚£û°xü® ¢Mñ³á÷½ƒXŒy“¨!!¥…ºPÅošòiIÜK˜˜¡Rýå‰B²±æ'Lú ]ÿ‡«a6ñSÃ'BòmÅ<ü³íÓWS3 ƒ„WˆÕ_ž!E„þŠèB§^pûʧ%ÿE›Î‹õ•#BÑ,è!Öü„¯g`ÅŸ([Nß¹!%ÅÍËømñgK‚ªØê)C„¢c¨³b/z¾&æƒ2;`ïŒõKð*ë÷è;[„¢æê9ÃÎû·¶¼[ßR;¸ÑÁ£1k–~Ÿ ÈHlj8wý†ªv,$„”DNè‚XŒ}çáÕÛ@Ùòøu+6Õw¶!DÍ«J°`²êòz)œ ù7`8Ÿaó üþ+@€/}ðuÕ%¤T p"?8Žã”º—qlÖ¼ËÁx‚Ä÷¨ß"QÖLyÙ§ Èqƒœ kÅð@  …„B¡úë¹\ή” * …¹ÐØÍèùóçþþþìÆÊ6Èk5Ebbâƒt’C}%ÅGø¡T¥ÃnR©ÔßßJ/”·§kE×*¯øk¥“Ô ðóš”Ærõüùs•Íž?~ÿþ}*WÙ¡r¥=ºVÚ ¬þ> ðóš”r¥ 'úý €B¡jš[óÇAAAùÏnqàîî^®\ñœˆ#Ÿc-e2k!žž~äÈ}ÿ_"„B)áŽ9’žžž™™Éš°Ê öx6aÂ}ç®ÐM˜0A¿ÏÀùFµŸá>¾®S|$—Ë•;íÝ»×ÍÍMO¹+6Îœ93wî\ºVÚ kE •+BHqìååÅ>³÷¹"‘ˆã8¡P(‰ð±ZuÍš5S¦LÑÉ_¼xÀÞÞ^'©iãÊ•+mÛ¶Íu3GGÇ"ÈLa pâ3,Æ‚R¥ ߌqsskÔ¨‘þ2X<ƒ®•vèZ‘Â@åŠR±×¸¬c!5611ÑÕû‘¿ÿþ[ tëÖM'©å*))é‡~·²²*š#= ­Ó+¾¬Lsº_žÄ$¼ÿ ïLB!$_øç.¾“ΡP(¶oß¾mÛ6]Mç—+__ß7oÞøúúÍáô‚ U,à›9I¥Rõ‘H5éŸ)25±Wm–^ÛƘ³ž†¢LM?—{š ºz!,Z÷ÅÀqªLž‡š­Ôv˯¦½ðó¥F!„öÐÅÀØØÎ#ŠK—.½zõêÕ«W—.]ÒmÊÙùóÏ?ùK* '>Ã×K(wÈ¦Ú KÏ@¦8iP¿ÀéH@¡Ð¼º?÷¢|Yx6€ŒL¨^'‘"-½ 9çqœ6S¾B-Z{Í IDAT!D[ì5.ß »0ê(þúë/#####£¿þúK‡Éf',,ìÖ­[nݺÅÆû*‘(œÐL9¨(²ê0’o™™øi ¦ŽÎó^¯â5¯ŠK@º¦Ø#)Ù ú÷ö=’’5¯Êî(„BáñÏ]…Q/ ))ÉÏÏO&“Éd2??¿¤¤$BÅÎ;Y‡r‘H´sçÎÂ>œ¾”úp"%Çà‡Iص Ñ‘übVšYu›Œ†²³ÿ!1 ÝÚk»}r ¼'òª5†}S>ýiÕ¶}¨Ó¶Q¶6Z|ÿnf-ƒæ}P®6Ê»câ÷ŸU˜ûç‚ÂÅ]yp'ª(ÿ^ÁûÄÏ–d¨N웋À§pv€ò¼7ÑømÛgÛ<þôyø4"|ÿ@Ì[ŽOð¿nðæ: Dç6سeÌ1y>Z÷Eø C.ÇwKѵ-æOËÛéB!¥? ÿ$¦P(”'ë, ?ÿü“ŸÄS üù矣Gç±aC^°~üWÖa£S§N…wD})ÝáÄS!•àücØÖ@f&¾h&?@~þ ?¬"ë;£%Ü™K¸vç³%™y '=EM‡Ï–<š­Ÿ-yó–„Ãg°g=úõ€™ãà{Û÷£] (8¬œ)£!¡ByôìˆEkàä‡ãìtm¿/EíöYÉ®û þ\²VY«ì›áìèÝZ{bߦ¼ !„R:ñO_B¡o狼VO|7þX¬?CÍš5u’¾:ÖOƒŸuØ p¢dIK…ßN|3¶5ÀăG NÜáê5V+–‰¶z!||¶¤B¼¥ð(}º|¶¤S+ÿ¼â¸o³FˆzGÎâìY«Þ}@x$Ô°ÅðX· ·ýÿG03€€'05AÛfYÛ»ÕDjYŸÁÒS|:Ø8+5@5W„BÉÿÜÅO:¡ÃÄY7å6T¬?âE‹txßOƒ_Â:llÚ´©äM@QŠÃ‰ç!Тç%Ž®Opu=”;ÑÈN†ïí{­FbRÓÀ£nV¨À>W²€à04ê†Ñ»3F BÈsÌ_ié03…Xü)‘èSjå¬àQ÷Ó*ºhÙ$볉Ò.„BÉò£—n‡uRîÆ |¸mÛ¶ýôÓOB¡îû+÷Óà±…ÚÂJ/J}8Q©ò§%εÞ¾fßøÁ cl¢[Õ«âY¸¶»:@ýÚèù±¾q§oVh±eªT™¿³"‡kw³6pqÄûD>EÃ:…ˆèO©ÝĤ02€´t,ß”Õð©Ô’Ëåqqq¶¶¶×róòå˪U«ÚÙÙÆM\ç¤Ritt´“““ö»¤§§?zô¨B… ÎÎÎÙ5ù}ÿþ}xx¸¹¹¹£££™™¿<&&ÆÚÚZy !„”…÷è¥ÒWxý”ûiðŠ Ã†^ƒ?ä…%.ÌÊ|ZR¡"H2•ÿß붮mûöí{öìQYmiiéå奓£L›6ÍÅÅE'Iˆ;8öï§ÿ.\SÝ M3<{®mjm›£n-,ÛÿGHIÅÆ=3«w¥ HJɪë8}ì†LŽÃ€^¨TK×#=2–oÿx8Î)©˜» ¯ß",_ÏƦ¨\Q7'žÄÄD‹ì}ýõ×…{øíٳǢzõêç<~ü¸³³s5Z´háàààää´mÛ6õÍ ¢Fß~û­nÓ\±bÅ/¿ü¢åe¿~ýº‡‡‡••U³fÍ\\\¬¬¬z÷`DDD¯^½*T¨àééY§NkkëI“&%'g4üÏ?ÿL™2E·§@Šµ¿þú+‡²wúôéìvŒ‹‹‹ŒŒÔænnn3gÎÌîÐwîÜQ_URSSCBBøwº•*UÒùÏ™2•‡.Ý>€e·ª0& `ý4Ô[Ëó6t~Dý*ŵå¬ .öß8&¾À•·†Ú|vº:fß¾}'L˜°oß¾¡C‡*/÷óóKIIùòË/urWW×÷ïßë$)±tÃg_j üÆgK:¶ÂÆJalœ{jFFðýƒÆ£q˜šÀÔ+çg Ó4Æ GÎÂΦ&p«‰=0ô4ë;'áûŽƒ•ÄÆø²º´ÍJ­aüµçâ·íHP¯6ŽþU赦¦¦óæÍcŸ¥Ré‚ <==û÷ïÏ–Ô­[7û] Ýúõ뜜֬Ycd¤z{¹sçNÿþý;wî¼eË›ˆˆˆU«V3ÆÈÈhøðáºÊ@«V­tÛ¯îÅ‹Ë–-{ðà6—}ÿþýǯT©Òš5k5j”’’rõêÕ+Vxxx;v¬I“&222¾øâ‹ÄÄÄ¿ÿþ»nݺïÞ½;~üøºu뢢¢Ž?`âĉNNNׯ_oÕJw¹“âÌÃÃ/{þþþ¾¾¾£Fâ_åðþèÛo¿½uëÖ³gÏr=DZZZ¦¦A0d2Yjjj‘õ!¼téRŸ>}>|X¿~}èôi’ …4{]zzú7*T¨@&“%%%YYYñ¤®_¿žžž®Û á#GŽX[[³SP9¢@ 8zô¨Æè½ãJ­Ëg9;pû·ó ÷orvÈ<úORRR|||dddHHȃV¬XÁ_.ÿ¶_¿~b±øýû÷Ê ›7o^¾|ùŒŒŒ&n öîÝ«“k¥=©”«Þ„;öov‘˹'ϸ«·¹‰ª«B¹—¯²>§¤r±qYŸÓÓ¹[÷¹˜X ©¥¤r7ïq÷r¸ÓVÁ¯UZZ€1cÆä;ݲµµ7nœÆU#GŽ477ûö-¿D&“U­ZµY³fE•»ü>|xÿþýUj¼ì111b±¸Q£FïÞ½S^~÷î]“ °¿‘§N°k×.åm&MšàÅ‹ìë¼yóš4i’ï<ýo6ÖÙ³gµÙxØ°a®®®Úligg7iÒ$õå[¶lpóæͼå2¿XDýðáCöÕÚÚzÎœ9Esh¢/þþþüSÖŠ+-ù÷(gd,oÞž¿:ŠtxX‰Drøða~IttôíÛ· dbb 11qÊ”)Mš4™5k_ÏÜ£G_~ù¥víÚ2™,!!aÍš5mÚ´qrrêß¿HHÛrË–-cÇŽåÓß¿Û¶m+UªÔ¸qãU«Vñ•-6l˜2eJXXØàÁƒ]]]»téžrŠ###,šuæa¡î®hÝTCM‚‹ªUÉú\ÆU?ö¯15E3ØVÕZs4oŒÆõ¡÷Žééé½{÷^»v-¿„ã¸AƒýòË/‰dÀ€çÏŸgÅÆÝÝ}ÆŒéJ³gWöÔ…††~ùå—5jÔpvv5jT||<€wïÞ 0àíÛ·çÏŸ0`€zµÞ‹/,--Y9gD"ѪU«ºtù4Ö½{÷ àêêÚ£GöÃlݺuܸqaaa£FòññéÑ£Çï¿ÿ®œøСCÙè#GŽäk®ÓÒÒ¦M›ææææææ6kÖ¬‡æz  {öìѲòdõêÕ‰dݺuåË—W^Þ¤I“)S¦<|øðܹsì:¨Xñ³&q'Nœ1cÿzØËËëÞ½{×®©5ì#DMFFÆœ9sêׯ_¹råÎ;_¹r…-ÿæ›oΟ?ÿòåË=z>>Þ¿ïáá±k×®víÚõíÛ÷àÁƒ-Z´`Ïj‰‰‰gÎœùúë¯úé'Ö–£[·n[¶lùꫯFŽÜ´iÓÔÔT<8yò$K|ÕªUƒ®]»öêÕ«;uêôý÷ßóFOž<Ù¿«V­*T¨0f̘ØØØ~ýúßö|#A®Àõ»¹oY²™™™I¥Ò•+Wò·à;wîøúúÖ¨QC&“a„„„„öíÛŸ8qÀÛ·oÏœ9Ó½{÷›7oz{{;99ýüóÏüovùòåC‡-S¦LÛ¶m7oÞÜ«W¯Ý»w'''ÛÙÙÕ©S‡åÜÙÙ™m¼gÏž~ø¡AƒMš4ñõõå›’R‚‚Šâ¡Hê@ •\ÎMñæìœ8#Å7^™éé©©©‰‰‰qqqÁÁÁ÷ïßÿõ×_ùË¥“ºªñãÇóM>Z´háììÌ>O:U$ñ ¢££Åbñ¢E‹8Žcs¯4hÐàÕ«WDZºˆM›6±-_¿~Ý´iÓ+W®°ô«U«Æq\||¼……ÅرcùCoØ°ÀÕ«WÙföïßÏVØ»woÁOP_ -RR5´\2p…ÑØi×®]®_¿Î¾Îœ9ÓÜÜ<99™E›5jÔøðá[ÅÞÊŸíèè8räȪU«6hÐ`åÊ•*Ý<ÂÃônÝš_R£F ±XÌÚ{`£0"‘H(Òœ}%€……k­ÄqÜ;w^¼xÁÇ«\]]•·¬R¥J\\œ6e‰ŠŠ’Éd*«‹‹ _¨rU³fÍI“&íÛ·/66öÔ©SU«VŸ‡”””#FkL°wïÞ*TØ¿¿¯¯¯zÕ€ „‡‡óïh£¢¢ªT©²uëÖ<ÈÅÅ%44TËáÝæÌ™`öìÙü$\̽{÷vïÞýå—_²¹),--9¢2@@ P(öööü’°°06ô>!9pww R~:¿yó¦z­Ú®]»ÌÌÌ~ÿýwSSÓ÷ïßGFFäR:u’““cbbøŸÒÉ“''Mš”sÀ‚ å?Lÿþûo¾ó@1N至³sË–-ýõWcc㯾úŠ_>þüØØØeË–¥¤¤øûûûøøìÛ·¯yóæê)xxxܽ{wÑ¢E™™™2™ìĉžžžÊÛtèÐÁÓÓsÍš5÷îÝc/€.\èééÉú½éh˜^YÇ&ý€%ë³>g÷×uú×X· ‘Ñ…ž™‚322|ø²aÆ 4mÚÔÕÕµfÍš_}õÕž={._¾œ‘‘áëëûÕW_EFFf÷H-‹¼zõê„„>&W6cÆ ±X5~üøŠ+.X° ::úõë×Ë–-›5k–£££ÆJ ^ûöí===—,Y²~ýú‡~ÿý÷¬'!ÃÚG±Úû_BHQÑg?p#—Ë333‹`d'fóæÍÔ§ÇZ½zµ‰‰ «€¶³³Û·o[Î*._¾Ìo¹qãF‘HÄ:Åöïߟ zÃìÄq\DDDÓ¦Mñ±¾¸U«V±±YÓ°?ÞÁÁAùÐÆÆÆóæÍ+ø©évT™Úí8/ ÃdQ(¸è—œÚ¸;YÞpÉ)ª %.%UuaûÜè™Çq2[ÎïÇqÜ«xÕÝ'Íå†MÍKîsSxÓرªªÆóKØÈNãÆc¯-…Baûöí=zÄo]ÙS!‘H¦M›Æ*kkkåµrÙI.—/]º”5u`Äbñ!CøIßÞ½{ÇFdyèرãÓ§OÙª3fØØØh<Çnݺ)/äGvâ8îÌ™3üô¶¶¶ü˜69HëhÁÅËaöÀTªTIù˜˜øÙ c/^d•‡GGG÷éÓÇØØØÈȨE‹7nÇqœT*mÙ²%€É“'sjÓرîRº¾¨DŸhd§€Â‰OŠ8œÈAbbâÿýwíÚµ\‡ÃKHHøï¿ÿNŸ>͆ØÓH¡P„„„œ;w.**J×9լȉͻ¸rµ9Ør–®Ü”ùœTÊq'“qÂêÜÖ=\£®l9aunøÔ¬xC"á¦ÌçL8c{®Ë`nþr®ëŽã¸ú9Ør[ξiV8ñÓj®N‡¬ÝGÏü4×õ© œØA—ÃÑÞcß›7o„Bá–-[ø%,œX¿~½B¡xôèQLLŒú^y*{.\xôè‘D"ÉSÆ’““ïÝ»wøðá«W¯*ÏÍ‹ŠŠú÷ߕ㜂Éd? Rϧ–êر#?˜¦ö"##Oœ8qÿþ}äkÌXppð‰'Ξ=«þûýã?ªU«–ï1)œ(mÒÒÒnß¾}õêU•À•ã8¹\ÃØçïïÏÇÑÑÑüÈÑù#•JÙlsíeff¦§§s·}ûv•—qqql) (œ(>µ¨&†ÃÊʪmÛ¶ÚlY©R%å÷  åa4J†}GðÍ<,ùÃài(OÇá·E à0ógü¶[cåXû'†D‡VX¼ÛÿÁÞ p«‰ßwañ:4®çö¡ï(8Øaõ¬ÄWnÆŠyèÞÛöaÑ: €¶Í –3$R\¸†þ=õtÚZÛºukÙ²e‡ ¢¾J °FüêòTöò×j΢qãÆ9ôµ°³³³³³ËGʉD"ÖY"ßZ¼xq÷îÝùå~´JmØÛÛ+w„И±ZµjÕªUK}ÇqëׯŸ?¾ò â„äÀÌÌŒUD« …Ê#%T®\¹råÊü×êÕ«ðÐFFFyj•÷êÕ« Ì›7oÊ”)¤RéŽ;6l¨¼r !†úNâê§Õèݳ' r%´o‰Ù°ÓÒ½,¾‰áa[«² ?ƒ\ŽÕ[ðÃôëÚ.ømj:fmlS&&07C›¬%“F`œì«ã§Y(c†‡AYËì`"Æ€¢=Õ<:zôh›6m.\8wî\~¢’o-Z´uÊ—Ís†‹Rƒ 4h ¾ÜÈÈèûï¿/úü”åÊ•S­°uêÔ©ÈŽEHщD­ZµRŸ+†RLQ8AŠ%ëò¨Pf¦˜:&kɽ‡8se­Ý Õ!.^G»o糫šn¬ï IDATÈYx$fŽËÏŽ„B!%…¤ˆy…cŸOsÔ®9& džØ ý{àÒ L]€Æõ‘簾ðꇿö£žZ7Åï»pýnVWl–e”T˜™æ”“WñHË@=·Ÿ!„BH‰@á)®ÜÆ•ÏæûÆýÓ˜;/ã0x"LM™‰ÁÿÆŹ¤³~&ý€¡“ÁqèÐã¼ñ4,kÕàÿaüwpoˆ[9¥òF¢O=+!„BJ9 '>@( Ôè;k¥ZÐålWm[…ÅsòöÕáðqÀO‘\Ìg›=¿™õ¡\YìÝ©±_ÏFÝ£tzõC¿îÈÈÔ°û‹;Ÿ>ûžÀ¾0ͱƒB!ù þÆ?•é;k$'Nä‚J°«ZUµ ¼ßh˜ˆñ÷zˆÅ‹À‘3XµàÓZ33˜eßÀû8p7å?·„BÉ=wGNhÆÇÄ ’]‚,›‹6ý`ÓŽvx‚ƒà3 »¯Û†‰ÃáìPXÙ#„BJ3öÄE5Å…¨Ô²Ñèï%†[M$"à ¢cѸl«æm÷ Ã`]¾prF!„”zì¡‹Z›;Nä„o´Ç/ Öc~Š‹ÈÈHöµ²«„„8$ÄåyÇؘܷÉÿV¤8¢rE).”ïTêÏ]¤X pB3¾@«ÔNxyyé1WÅ ]+íѵ"…Ê!¤xák'(¨(^(œP¥ÜÌI$±U¶éß¿åÊ•%‰\.—H$ …B.—+ Žã´<ÊÍ›7[´h‘ûv†šÇqljD"•fŽìZ:t(==ÝÌ̬ÿþär9Û^¡P°}år¹ö•˜t­JϵÊÙ©S§222LMM{öìi8¹ÒWRÙ•«øøøK—.)oÙ¡C‡Ê•+S¹Ê•+íѵÒÞ‡.^¼Ø±cÇråÊN®ô˜”òc•X,‰Db±8>>þСCÊ›ñÏ]ÊMžt’[R¨(œø +µ|¥„H$222R'ªU«æä䔑‘!“Éd2‹(-ààà “<ë%)ŽãøkÅ®òhnFFFŒŒŒø‡k±Çeåt˜+ÃLŠ®•®’R¾VOÍO0OIeW®Ô·¬\¹²££#•«ìP¹Ò]+í%$$¨V­šMÁS3ÀÌkRÂÄb±‘‘‘‘‘‘©©©úóÿÜÅWS€FÄ)(œøD9–àÿå_þ)‹Åb± '„B!ûS­}8!‰Ìr”TkzOŠ”QZ ˜ššòÏÇü£LÑäÊ0“¢kUüµÒIjx‚ùNJ¹\«¬566611¡r•*WÚ£k¥=ö/]+†²âà þQJÿÜ¥Òä‰" GáÄg”ïørÌÞÇ(366677‰D,œ022R~©¬ ‘HT¦LäY_I±W›ÇñÃéªTM²?9*oÜ ÛKû[]«Ru­rÀ_+¤f€'˜×¤4–+ö£ÌÄÄÄÜÜœÊUv¨\i®•öØs¶™™]+†ÿÃgllÌ õ×FFFê¯Û(–0|NhÆ7vbå^e­©©©¥¥¥‰‰‰\.gE^à ccc´§ÔcRü£Œò^åÙÊÊŠS¢¾—Îse˜IѵÒIRì¡Y(ê$5<Á¼&¥±\™››«lfnnΗ.õ½tž«b—•+íѵÒ^rr2KKKºVŒò+ZÖœI,›ššªlfdddllÌ7vÒI>I pâ3|¥k½Çþ誷í377/[¶,ëŠÍ°?ÕÚ·"(·Êkô%øØ€[(ZZZ²W§ÊÍÀÔwÔa® 3)ºVô(SIñŃ „B¡Æp¢|ùò|¹â·/FåJcä#‹Ë—×0ŒöçÅP¹Ò]+í}øðN(aM˜X[&F,«ß¯ø׸lšÏ®¸ pB3öœÇïÔãcl°Hƒ…¬jB½#;Û$ä¾’âÿfçð;Wo©Í^É•a&E×JWI1:IÍ0O0åJù¥±ï„òB>®(FåJcV³K*¯áÊ•öèZåŠýèXÏ¥‚§f€'˜×¤”_ײ8AãP7B%E#N¨R$( õâÎBjEðµ|‹dmŽbdddii©“ ë%)@Àšä¿ò ¡ô‹µª‰D|+ ¶=‹ÄèZ®U^(×ä<5<Á<%¥\®”ßÞiì;Á§©Üä©•+þì”3,‰,,,rÞFT®´G×J{ì–^¦LºVø^^|í‹+ÔߣñuBš}¢X¡pâ3ì¯2ðs*›‰Åbcccu°ña•›¼kC$©7Ì=&Å~ä|Åqœ™™ûÊÖš›› …B™LÆ_Xö×(OïéZ^®ŠWRüµÒIjx‚ùHŠ/Wì+Çqê»›šš+7ˆB1,W*m´Ø™À@½Ý—ö¨\i®•ö؃²Æîù`€'˜×¤øg*¾æ!»pB¹o!…Å…Ÿ*=ª5¾Àb±˜UJÈd²|„MFå;ÏzIJý] òC0ÃRcƒTf·—nse˜IѵÒURŒNR3ÌÌk¹beƒýÅå”fµSÙÌÔÔT¹*ƒ-7ür¥RßË~2r¹\e„4V‡¬2b•öuÅ<*WÚ£k•+ö"’5.xjx‚yMJ9B`}S5Þ¯T:¬ò·8d˜ '4|ì#«P(ÔËqttôÓ§OYÁÏ ¥w„¹JMM ÕIVõ•”ú_kþ«T*eÿ†„„ð缯®re˜IѵÒIRüµÒIjx‚yMŠï¸¯üzþåË—*›½|ùòéÓ§ü}Œe ÿ~ŇÊmÿØ¡Pøþýû°°0¾²‚ß ¯á•+íѵÒ^tt4ûW'Âx‚yMJùÄÏ,Á®’úfÔw¢øáÈçØد‰$###555))É××Wßÿ—!„BJ8__ߤ¤¤ÔÔÔŒŒ ‰D"“ÉøÁ3uÅß߀¿¿¿n“5¨#=ªø §ô’Oc¦½{÷º¹¹é/ƒ„’»3gÎÌ;·߯‚ƒƒ½¼¼–,YÒ½{w}ç…R ìçÌ>óÏ]Ê]X¹|u‹"E‰Â‰ÏðÁ§Ô~I¹I€››[£Fô“9BÑNpp0JÁýÊÁÁ¡dŸ !¥ {èbÝ'øЂúÎÉ õnÑ€(X…ö-Œ !„BHþðÏ]*ïv‰£Ú UÜDZ_Ù„¬Ýž¾3E!º±/pß×G¿>6ôXG§ŽœV;%¤&ðkÅ"qMëš›NÞp¸úëÀYgfm¾»Y=Í.Î]{ž{nî¾Gû"fDjþ !%{îâT ±b‹ '>÷Øcá„L&“J¥NBJ ™B–*M•+²nkiÒ´ekŒóǾ¾J~õoØ¿#L“¤Ml6QeßLyfª4õ»6ß ?›{ÛÅÚ…­M“¦þBJ,¹\.•JYüÀ‰| úLŠ…š)Ô؉R‚9–wœÚb*ÿõÇ?ÖÝPwí͵êá3¯Ý¼2â2E•;BH)Â?w©LF õøè„/Æô㿱ÒÌÚ;I$=æ‹BŠ’©±©»û‹ÄI„ã¸v >0Øysß½}W^[™œ™Ì¯Ý¸·ëή­ÿl½èò¢À¸Àa‡%¤$P(r`ˆÝJ»vÛÚýó蟂ž !¤X‘H$ìÑ‹=ƒé;;D[N"Ã0kþ=¢Òˆã8ª „”*oÓÞž ?ç\Þ¹ ‰,»ºìë£_˲yíæ¹Z»þpá‡ÑGF³U˯.ê7´Œq™¶öm7ßÝÜëï^»îN–$Xzu©ÏAk—yíæYˆ-†ú =tX§D)&X¡<Ì&?j¿¾³FrB©ß ÁÇQÉð±øÊ?¢p‚R‚½øðbãíìsÈÛ3¡g2d³[ÏÎnûúë ð©gdÅ2o½¥²Í¹ðsÃÿ³ïŸìë›´7'žŸÿÓåŸ&xNØÔg€;üØcw˜¤¶™ïcß–v-îô3€qžãÆÐϽ!¥ÿô% i|§b„ `Å<¤§aØDl\Ê(Ï¢Bá!¤d{ööÙ÷ç¾gŸÅ"±kÅÿ³wÞaQ$M¯ ì– HQ’"bBŒ˜EQQ1gŬçéy§Ÿ§\ðÔ3ÇCD}=#*bÀ¢r®ˆ€d0¢¬¤Ýï>ÇqY`%×ïñá™éî©©n{{ºº«»­ºôëàWZú~–ý˜K±5ùš%Ó\õ¿ ©$ícÚ‹·/¢3¢ %…pãÕÏÅŸýüÿ{—7ÙiòÕ¤«ä¶…N‹ÓÏO¯ _9ªý¨¶úmwÙ©¤,"R? û]%ÏFê2Þœ¸yöýÿÜ˧I€Œ!Þ{‚4lú¶êæ¦xúÿëûå.Ŏˉ ºü$øsñgC¡Žª OzŸ_v‚"iÑ×»½w/º°((*h}äz ƒ!¶CV÷Xm¬e\Ì RŸav½ÐÍ©Ѹ×N¼{óÇÁ¢uÐƾd$½¹VeDéH$’ôôôÚÖAª‹GGÜxuãĨo—¾ÍXœ1Äv ×äi@f^&òåû—ôµž†Þár–äœ{nX›a‡cù{H kŽ4$òóóïÝ»—PÚw\$½}û–\c³\À®W=¥q›‹&B+˜²P&˜Y‰Ñ2n¨ ‚«W¯Ê?¾­­mUä‹D¢øøxz[033³%K–ë#GŽ“âââÀÀ@++«ª¼(!!þΛ7ÏÒÒ²ìôRÝÜK»'|#\㱦Ÿe¿¦êM :#šDY5³€ð—átâK —ÈE±¤xÐáAçâÏið4¼¬¼¶ Ú6ÓeftFt±¤¸ÆsÐ`¹uë– òòòj[» •••œœ\F‚[·n9::jiiuêÔÉÒÒRKKkàÀYYYÌ4>>>ššš“'O†o›åÊ©ÄlŠ‘J#ÓéÂX}¡;;Ý7ÂáÈ%H{ðñ@j2¨ð@§©Ìyvµ«)RˆÅb‘HTÆn[±k×® 4(66ÖÎÎ\]][·nM¢þøã ‹   .—Ûºuë.]ºTåEíÛ·_´hѺuëÀÊÊêýû÷U‘† UÇVÏVÀ„ŇyYz½/x¿ãþŽkI׸ln~q~óÎÆÎ?EþÝÍ»}rôä¿'ÉS*U5×ÖØØ™h›$¾K<-<Ý¡yŽJ™oC*€D"‰Dƒ¶·—“çñxµ¢RåX²dÉ;wž?.76$$düøñzzzAAAyyy7nÜØ´i“££ãéÓ§;vì)))ÇŽ›0aÂâÅ‹áÛf¹r*1›b¤Ò0@[¢ш͉¸GP˜#ܘa*=¬ØÝúÿu‚Yñtw¤êÓ×iiiìÛ·/L:uêÔ©ÊzËŒ3fÌô‚Ôš|Í{ý¸6b­î]°F´qiü¥¡ÁCÍ·˜g/É>9ê䌳3^XHålìü«×¯3Ãf xXì¶xð‘Á¦›M­ûÛ¬%YŠ¯ÃþcÀÔZª´uØ›ûmÎ^’M®çv™›˜ykò­÷Ëßýîh–=R¦ÜŸzL´MN9·2ïÓŠO·n«©¨ékè  ½A{ááƒi‚G?œö0nvœ]s»ªfQ˜]»vM:5!!aâĉ@Ž#Ü¿Ô¨Q­Zµòööþå—_>}úzá³gÏFíèè8sæÌ'Ož,X°àìÙ³ëååõôéÓ•+W:88x{{_¾|ùǶ¶¶$!77wÎœ9ŽŽŽ;v\´h=¿J„¤¤¤,[¶ÌÑÑÑÉÉéûï¿'-ó¬Y³ÂÃÃÓÓÓ½¼¼âââdr±eË–¢¢¢ß~û¶%;vœ3gNllìå˗Ö/_ëÖ­[³fL³œ““äææfaa1lØ°øøø²µ-Ù#•†îwQ j[)¤|±9ÑL,¬¾þkÚ ¨––”Q¹" ±XܳgÏmÛ¶¹ººZXXÌž=›9™æêê7yòdKKË™3gÒ]ö¸¸¸WWצM›Nž<9##cèС ¦¦¦mÛ¶‡V­ZÀ™3gbccy<ž££#ÇkÞ¼¹££#‹ÅzôèÝ•ß°aÃøñã---—-[öæÍŸ}ûöÀÓ§O{öìyãÆ€€€Aƒ:uª{÷î¹¹¹jjjnnnl6ÛÔÔ´S§Nö_×póæÍ£F²µµÝ²eK¯^½–-[6~üø²Õ®¡âF<.¯³igzYM¾¦™ŽYæ§Lý ú¿GýÎãòTUT‹%ÅûcöwhÞ~ŠÏå;9 ´èhäˆnN5ŒP(|øpãÆtqEGG׶¢ˆr8xð \ºt‰¢¨ýû÷ÀÉ“'ITjjª@ °¶¶¦(ª   eË–®®®ô`ÉÖ­[@(R5mÚ4 !Q?€¿ÿþ›¢¨3gÎ@ll,‰ÒÕÕ;w.¹666ž?>¹ž={¶±±1EQYYY&L 5trrêÖ­EQ¿ÿþ»‘‘QAA 'æǵk×È­ªªêÊ•+Éõ´iÓŒŒŒ(ŠÊÎÎS¦L¡¥µoܸQ¶ÚHÃàï¿ÿ®³íÕ¨QœÕœî»»OýgjÛßÛl0ø7çߊ ‰ŽŽÆJ[ ®_¿úúú­¾åÞ½{E-X°.\XXXHÒ{xxLš4‰~Üßß_OO\÷ë×ÏÂÂ"77—ÜþöÛoðóÏ?SuåÊðóó#Q.\GGGr{çκý™;w.‡Ãyõê‰JMMåñxëÖ­£…Œ9’n{mll¼½½Éõ¸q㬬¬äæQ[[ÛÝÝ]nÔ›7o`Ú´iEݾ}¢¢¢HÝ,“¹ˆmÛþóSxýúµ‹‹KdddÙÚRß6ÅH… ?gÂÆ>|( “’’²²²rssE"Qaa!}T¶²^W“ÍcÍ¿±æiij2ÌX"MÆ%×”'Nðù|OOOrkbb2hÐ rýèÑ£¤¤$__ß¼¼¼OŸ>}úô‰$»xñ"I ¾ûî;rݦM‡ÃœWœ7nˆD¢‘#GÒ!§N"_èÙ³g§§§óùüׯ_ß¿ÿôéÓ@ï%—ÈÈȼ¼¼Ð!ò!W¢ÚRQ8|}âõž=‹%Å3\fÜz×V¯J»¨!ÅÞÞ~à·4mÚ”Dq8œ… Ò˲¯^½º{÷n‰DòêÕ«ðððèèèÂÂBH$áááÆ £'¦NÊfÓ£ S`nnμmÓ¦ Ù‰“'Ozxx4iÒ„´®ÚÚÚÎÎÎtë þþþ´3}ûöí_¼xQnîÄb±††|¼‚‚e<®¯¯¯ªªúÓO?íß¿?++«Y³fwïÞ%såj‹ –F¼A¾˜˜Ø¹sguuu:ÄØؘ '¯×Ì™3gÎœÉ|äÝ»wä‚þ ‡Ãa³Ù•Û ìå˗о}{:ÄÄÄÄÄÄ>~üøçŸþõ×_¯^½RWW'[E)"­[·ntˆ™™ÇKKKS®ÚRQ8lŽk W×®µ­HãÅ××·´¥Øººº†††ôm\\\PPPppðçÏŸ utþ;Ž055U,37¹æóùºººLQ´bf·OŠ¢ ÒÒÒRSSe–˜›t3eòx<±X\nîZ·n˜˜(7Š4Œô&{rÑÖÖ>þüêÕ«ýýýÀÎÎÎÏÏoÁ‚EEEåj‹ 4'455é~6!66–Ž€ƒzxxÈÝÜÜœÍf3ÝLKƒ¸„‡=,Œ¸9‘ ×D)hiiч ijj¶oß~„ =ª¨œÌÌL"äðáÃ2Qššš€¹ÑR3Ü»wO(®Y³¦_¿~d`‚n|š6mÚ´iÓË—/Ó‰ÃÃÃ+:$Áf³mmmoÞ¼I·®ÆÆÆK—.=tèPUÔ&çHÊx„>xðàСCÇo×®]ߺu«oß¾Ÿ>}255õ÷÷¿pá‚……ÅÝ»w«I[i 9 °hÑ".—;gÎœôôô?.[¶ŒöüiݺµÏ‘#G""" BCC}||’““Ëõ8"sô×®]“±+ ww÷.]ºüúë¯wïÞÍÌÌ\·nÝÍ›7Ç...÷ïßÏÍÍ Y±b|üø‘|¼›5köðáC™É}ggç   H$’ØØØï¿ÿÞÙÙ¹gÏž/‘H$²µµ]¿~ýúõëW¯^íâârñâEWW×ÐÐÐ É¡(J$‰D"æŽj„ãÇçåå‰D"E¼\åbkk+ÂÂÂ>|ø””´dÉ’k×®çççÀâÅ‹£¢¢f̘ñèÑ£àààiÓ¦Ub&aÕªU6lÈËË‹ŽŽöóó îܹs¹êêêfddDGGe˜´iÓfñâÅaaannnÁÁÁOŸ>½{÷nPP‡‡G‹-~ùå—²%;::Þ¿ݺu………b±øìÙ³IIIÎÎÎåj+·)FFš666ÁÁÁááá&&&:::? ¤c·oßÞ½{wuuõï¾û®Y³fgÏžUSS+[¦³³s×®]çÍ›·víZÕ8qâ„™™YçÎŒŒ~üñÇÀÀ@²ÓÒ¥Kutt¬­­›4iòÃ?\¸pÁÉÉiäÈ‘7nÜ€©S§^»v­k×®LQ,ëرcúúúÎÎÎ|>¿C‡ÆÆÆÿüóOÅÊAÊÃÆÆfîܹsçΠܳgÏ£G¬­­'Nœ¨ ÍÄÁÁáòåËôª$BHHˆƒƒƒòôE*€¦¦æ?þxþüy]]]KKËW¯^]ºt‰Ïç“¥Õ .\µjUpp°ƒƒÃÒ¥K·mÛÆçóË^å\’aÆmÙ²eÍš5ZZZNNN‘‘‘GŽ‘»Ç« #FŒÐÖÖvrrzðàAÉØŸþùرcdöíÛwîÜyéÒ¥^^^wïÞmÑ¢EÙ’ÕÔÔÖ¯_ÿûï¿khhhii }º~ýúË—/åƦ¤¤\ºtéÉ“'’™•••ŸŸ_¡GÒÓÓ~üH7Dtù •xEnnîõë×oÞ¼Io‡­‰$--Mæ¼3’““Ïž=ûðáCzë[ÉÉɹ~ýúùóç׶´¦)Ü(¶€Kˆä?A÷îÝK‹555¥I+ŽAE122¢L3aºW±X,æž*ôºpX,–¥¥¥¥¥eEu@0-[¶477_»vm·nÝúôésæÌ™Ÿ~úiãÆÚÚÚJ‘ߧO---¹cÆe£££Ó«W¯ú ´ÐÐPMMÍ>}ú?¤VàñxLï#MMûP„Y IDATMÒà 0 °°0<<œÜîÞ½›ÅbÙÛÛWâZZZe´½¥Áf³ËNÓ¢E‹r§#䢧§§§§'7ª mKkŠ¤ÁƒÎN‚ ‹M›6µnÝzÊ”)iiiÓ¦MëÞ½û¢E‹”(ßÄÄ$))©¢OI¥ÒQ£F]½zõõë×$$$$dÈ!ôHÂßßÿêÕ«­[·ž6mš§§g``àöíÛédiT 9 Ò¸ÐÐÐ8pà@JJŠƒƒC^^ÞÁƒ+±ˆ¶ TUUõõõ+ñ ··7‡Ã9qâ¼zõêîÝ»ôa‹H]cĈ/^¼X´hQaa¡››[DDÄÔ©Sk[)Aj4'A]»v2dÈ›7ofÍšU9oÒ‹ÅôN8EGGÇÓÓ3$$BCCuttúöí«DÝåÒªU«iÓ¦íÛ·oåÊ•ÌC3il 9 Ò舉‰9{ö¬@ عsgvv¶%Ÿ;wîýû÷...•{ÜÇÇ'222++ëرcÞÞÞèé„ R÷AsA¤qQXXèççײeË[·n‰D¢€€eI~õêÕŠ+LLL*}ÂÉàÁƒy<ÞÆïß¿ïãã£,Å©p¹\555‹¥,™vvv¹¹¹å…TÜÙ A¤q±bÅŠÿý÷ÚµkvvvëÖ­[´hÑÞ½{'NœX Q/_¾Ü»w/H$’”””íÛ·ܸqƒãX 455û÷ïÿûï¿7mÚ´W¯^•‚ HƒA‰†Ãáhii)W&‚æÄWX,‹Åb³Ù¬Ô¶j‚ Ê!222((( ÀÝÝæÏŸüøñyóæõìÙ“OV!¢¢¢¢¢¢Èu»víÆŒãëë[ŃçFuòäÉaÆ©¨¨TE‚ õì€ÕSÐœ(¬Ê‚4$ºwï.‘Hè[6›MÛ…)§*QEߎ9’ykooϼE¤a£Ä~WAAÁ±cÇîß¿Ÿ——צM›)S¦ÐìH¥ÒÛ·oŸ>}ZCC£gÏžŠœÅŽ”®=ShQ ‚ ‚T?¤ÇEû‰TE”H$0`ÀäÉ“£££cbb/^ܾ}ûôôtKfh###Ož<éîî¤í1hNÈ9ËÆf³•»#;‚ ‚ RÒéRŠ³ÓÁƒ#""ÂÂÂnݺõèÑ£³gϦ¦¦®^½ÂÂÂöîÝ»ÿþ;wîÄÆÆ®ZµjÁ‚èìTôR :D(Ö¢>‚ Šœœ º½"YKNNŽ‰‰©m]©Ì–ªd¿«Òܾ}»M›6}úô!· °´´¼yó&lÛ¶ÍÒÒÒÏÏD͘1cíÚµÿýwÇŽ«þÞÆ šò¡+´Ì섯¯o-j… ¢8 ¾½Z¾|ùòåËk[ A”=;Qu£¢GÞÞÞô­H$ÊÉɱµµ€øøxæfÖÚÚÚ86QÐœ…éæÄápÈ_™4Æ 300(**’H$EEER©T"‘H¥RÅ× FEEuéÒE) ×AQçÎ+((PUUíß¿ÝѪnŠÂ²R,+&EQÅápd\³³³¯]»ÆLéááa``@ÒK¥Rò¬D"QÜ‘ Ne4È,+<<¼wïÞ¤Õ•H$•Î Ö+ÅÁ²Rœ>\½zµgÏž:::uG«ZÅìVñx<‡Ããñ²³³Ož<ÉLF÷»ªnNLš4‰¾‹ÅË–-ËÍÍ>~çÎ'N¤¥ihhhkk'&&2gddtíÚµ*¯kä 9!ÚÙ‰Ô{™XUUUMMM>Ÿ/‘HˆEQQsBEEE)þ”uSùö³Ùl¥H«ƒT¢(,+ÅÁ²’îm3AÔÕÕe’©««kiiу÷2O)]+%Š’›A‚T*år¹šššl6›bPò©rÁz¥8XVŠóéÓ'ÐÔÔIJ"0‡h‰;Ç#ŒL¸\®ŠŠ íìTõ~úé§èèè7n”´ú÷ïõêÕ¼¼<@111)))?þøcU^×ÈAsâèI â½G¾I%}ûÔÕÕµµµÉRlù’)>ÉÞš†2ÀONi”ìßÐeÕ¤I™¨Jœ\ë¬VQX¯d ÕIs¢iÓ¦d¼ƒ´i$±âΙµ•Ab*k¢<ñ,%¹àr¹ZZZ$„Ãá0tè’Qð-€õJ1°¬çÇ€æâÂD|™<¯d{Eã’4U±(.^¼hgg' ™Ñjkk>|æÌ™¡¡¡?þøãÇÇß¡C‡áÇWú]šò!ß-2Ÿ^²6cƒXÄœ _²’ó¥!×'¡rÔMQ¥H«›¬œ¨’æÝ,)­æD­g°ºE°^èB·Q¥­PQQaöË«U«êÅ4œ˜P´(ÚLF+ê)õJq°¬Ê…üÉÊ¥ªK«ƒ¬¨(æp-±änuÃfPg'‘H#‹™û;€¥¥åðáÃ]]]<8iÒ¤£G€ÍéÓ§KÚ6ˆâ 9! Ó2î%“†˜ÔÄŠ g'è13EÞB¦é•¢pE`)EZÌ`¥EÑ£L‡Åb‘)W¹iª[«ú" ë‹ÅÜ •îp—üº«ªªÒµ‹ÙçfŽý+K+%Š"ó'2ý Hfƒ¹\®ºº:ÝG‘ñt"Ã=Šdë•â`Y)YT ¡¡e_ ~z‡z7Ø’K±é¹‹*.ŸÐÐÐ(...#ÁèÑ£‡þàÁCCÖ-[Vî- šß@/ò#Ÿ1zbN&ÇSQQ!0²?,ÓsWè=IªNE÷o”"­f°*¢h×r!3;!ã¾RcZÕ QX¯JBWš’“õŽL‡(¨ ±Z2Œ“(È-‡Ã¡Í ¹–U…^õJ°¬‡t”å.¨u0ƒE÷©è™‡ÒÌ Ö·(EU¹ðx<\~­,Ðœøzè‹‘;¾Åb±x<™”‹Å•0'Xò6Œª´ÎuPA)Òêf+$Šž¶búiH$¦ŠŠ íÎl@Ÿòª¨VõQ똮WdtCî×—tþJîwT÷ëU¹ª’nðe'YøÖJ¯èüÖ+ÅÁ²*R'‰ktÕ¥ÕÁ VTÓœ ¿\¹ñË]°ŠÔ}ÐœëËPR©´äÚ‰ÔÔÔgÏž+‚>2‰$VP¾H$zñâ…RT­ƒ¢È cqq±R¤ÕÁ VT”Œ9AI)+±XO'f>U!s¢”U`½’¬B†oëUzzºL²ŒŒ ¡PHÚ1¦A[÷Û«’•Ÿé¬%‰âããe~/ÀAWð‡ƒõJq°¬‡kššZÅí‰u0ƒÅ\âEŸ,!sø0ꪸv©a*ÐSi$ÐÒÑë".^¼8räÈÚÖ AA¤!êééÉ\_¡{¬v‰‰‰qttŒŽŽvpp¨m]ª œø¦_»\¦¿ÿþÛÆƦöD.\X¾|9Ö+D¹`½B¤¾  }}}É5Ýï*¹R—Asâhãé¿Ät °±±iÀÆ%Róý°±^!Êë‚ õÒé"Ë'Ð}¦Q離Ú¢ Ÿj[#AAÝï’ÛEê8hNÈ"³pB,+~Ö5‚ ‚ R9è~}@°Üd™™™‚oiÙ²¥··÷³gÏÊ}EVVVrr²’õnô ³Ó7Ð{Äœ‹ÅÅÅÅhN ‚ ‚T7‰¤¸¸˜¬š(c:²·›··wÿþý °°011ñÀ:uJHHÐ××/ãK–,¹sçÎóçÏ«CÿF šòaèì„ ‚ RÝÐý®2¦&h:vì@ßöë×ÏÓÓóìÙ³'N¬f5Y½³ÓËç°q9ÌëÁ£{t0©Ídº­¨¨¨DAi ÑžNõ 133.—›ŸŸ?pàÀ_ý•Ž¢(ê»ï¾[¿~ý¬Y³ÂÃÃÓÓÓ½¼¼âââHì_ýÕ«W/kkk??¿»wïÒOåää¹¹¹YXX 6Œ> )Iã6'".@_;Øóäd¡íÔ Nphs9¥g'AAªbEÈìѯÙÙÙëׯ×ÐÐ:t¨ššZqqñ/¿üB ¹wï^hh¨™™™ƒƒƒ¾¾¾ššš›››––L™2eÆŒêêêÓ§OÏÉÉéÑ£ÇÙ³g€¢(OOÏ;wúøøøûû …B‘H¤ô,7 ·9±f˜¶„˜l¹ r {} ˆÅÄÓIò4'AAª™ÞWÙFÅÆŒŒŒŒŒš6mÚ¼yóÇþ|Ë–-ýýý íííùå_.FlNÀ²``[€›%tm …’Ÿ¶Ó‘ôæNxŠJäýû÷¯_¿®>ùiiiùùùÕ'A¤^ðêÕ«›7ofddÔ¶"H£ *]/•N:½ÿþãÇ0vìØ”””û÷†êëë÷éÓ§ä#ZZZšššÉÉÉ©ßbee=zôˆŒŒLIIÙ»woóæÍ7mÚTõ<6H·9y ŸC pë VmX¯³Ø{ƒoOa¬Äz J°oß>Aéœ?ÞÌÌlÉ’%ÕñêÁƒ—öÞfÍšUHÿ{÷î•Œº~ýº@ ¸sçŽu–J¥½{÷ŽŽŽ.[ùrKµ µ=:gÎ%êܨ¸uë–Li4èÑ£G•&‰âãã«iƒµû÷ï ‚›7oV‡p€ââb@0sæL™ðgÏž ‚   å¾ÎÄÄdõêÕU—CQÔ?þ¨««knnîææflllmm}ñâE:žžžr¿Júúúüñ‡"õ™NW…:`b±øÊ•+]ºt!k¬ûô飯¯züøñÑ£Gs¹rÜûÛ¶mûéÓ§´´4“/„……Íœ9“Ãáܺu«oß¾Ÿ>}255õ÷÷¿pá‚……ú;•F#^;‘‘ +¦Ã øó(  ~˜ÏÞý+kÊ"00’9Ï®ºuqtt\¹r%¹ŽŽŽ 8q¢¥¥% ±´´tuumݺuu¼z̘1ij8œœüý÷ß“[¹¿=¹ˆÅb‘H$w°I“&=zôÐÖÖVŠ¶„;vp8OOÏ>”¡|¹¥š––VšÚ3fÌ°°°¸uë–«««5o$H$‘H4zôèN:€X,NHH uss{üøqË–-+$íÚµkƒ Šµ³³SºªR©T$¡C#R­ˆD¢ÂÂB™@R÷”n'+eL*•<8,,lüøñ>>>zzz/^Ÿ?oÞ¼‚‚’òÏ?ÿäóùGMM † VXXXé 6ì¹;;ié¼~ INJók—Tú…ZRñ+þþþûöí€ØØX//¯§OŸ®\¹ÒÁÁÁÛÛûòåË>|°µµõðð û%Ó”v8‹‚¼xñbøðáfff­Zµš8qbvvvE%<}útĈÏŸ?ÿßÿþG4§£âââ¼¼¼"""*¤êáÇ †ZQM*Š¯¯ïƒÐ FYØÛÛ³ÙìW¯^À®]»¦Nš0qâDúLÓîÝ»ëéé999mÞ¼™Ì„„„§3flß¾ /^lggg``лwïÈÈHæ[<Ø¥K###__ßcÇŽÑáU¯ÉRÝþŸ¤œ1cFjjêÕ«WOž<™pâÄ W=ù®÷4bs¢³;èÂŽMð÷.x ×ÎÖï)í¦âžj[39œ9s†´¹oß¾½pá±"úõëåííݵk×ØØØ‘#G¾}ûvøðáÉÉÉä©ÒgQ¸¸8''§ÌÌÌU«VMŸ>ýÆ:tx÷î]…4ÏÉÉ9qâÄÛ·oííí/^¼LG:t(""¢C‡RõþýûVVV5𓶴´TQQù矪ûE„ÐÐP©TJ|ö„Bá¹sç<==Ï;gcc›7o5j”­­í–-[zõêµlÙ227mjjÚ¶m[ppphÕª•T*íÙ³çÞ½{}}}þùg55µ=züïÿ#¯Ø°aÃøñã---—-[öæÍb„+¥&#HU`î¦OÃLæêê7yòdKKË™3gN™2…DmØ°! @,¯\¹ÒÊÊjÅŠ“&M"Q111Ý»w‰‰>|xzzº‡‡³ã^F»ñ×_y{{‹D"===¦&>|HNNöôôTQQ‘É…ÏÁƒéôGŽY±b…½½}ÇŽCCC‡ FÂß¿ïèèxðàAwww²»N—.]ˆ /‘HÜÝÝ:4räȱcÇž:uªGiiiÌ·¼|ùÒÝÝ=''gáÂ…ðóÏ?ûùùYZZ®\¹R Œ3†üä_¿~}áÂ…ÜÜ\úÁ{÷îÝ¿Ÿ\_¹reíÚµ ,ppp`±XK–,qvvÞ¸qc·nݬ­­×¯_ÿûï¿Wì¿©‡ìÚµK[[{ôèÑ2ál6ÛØؘÅb‘[.—kgg×»wïæ͛ˤÔÓÓëÞ½{¿~ýZµjU×_jb ¤Îòè>ÕÇŽ2òOÚżèÆ‘H”›››•••””$ >|¸qãFº¸jËÙIWWwîܹE]¹rüüüHø… ÀÑÑ‘ÜÏŠ¢È°zPP‰’H$vvve¼ZÆ_hÀ€FFFôTcJJ ŸÏŸ3gNÉËð" ߺu‹¢(777+++:ÊÜÜ|ôèÑUÕÅÅÅÇǧ\åe¨„³EQ666¥Å*…é”BœÆŽ»uëÖ­[·nÙ²ÅÇÇGGGGSS3##ƒ¢¨ ÀÂ… ÉÄqvv¶@ ˜2e -aëÖ­pãÆ ê[g§ýû÷ÀåËÿù(’ªbll,•J³²²444&L˜@ qrrêÖ­UfMFg'¤º){=qv*((hÙ²¥««+=(K~B¡¢(¦¯”¿¿¿žž¹0`€¶¶ö§OŸÈ-iÓÈÐ{Ùíª©©)‹Åº~ýzI…Éîåzaéêêêëë¿ÿžÜ®ZµŠËå/‘¹sçr8œW¯^‘¨ÔÔT·nÝ:ê‹Õ¹sçHÔ‹/Ølöo¿ýF}qvŠ766îÖ­ÛÇI{{û=zÐï X½z5EQaaapÿþ}:ªgÏž}ûöeª—››KnÉÚÜ—/_R%•J[´h1bĈ²3ˆÔLg§7>|øP(&%%eee‰D¢ÊÉÇ'æææÌÛ6mÚ™(ãp–’öwIÄbñÅ‹}||ˆË ˜ššÚÙÙÑgLV‚qãÆœEæÙ·oß*bN¤¤¤ˆÅb777f ¥¥åµk×*­öwß}7gÎœãÇ·oßþèÑ£&&&½{÷®ªÉÉÉ"‘¨E‹•Ö¡BXXXTÈ= a²}ûö &”«««KWã—/_Ór033ãñx2.$eçΙ>d«®´´4"¤}ûötÙõ/11Qé5A* ÙC†G›dÀÌ™3eö“%.yqqqAAAÁÁÁŸ?644¤;ßÉÉÉEõìÙ“NÏáp h™e·«Ì “Ö­[³Ùl¹½íäääË—/{yy™˜˜€‘‘E†ÄbqAAAZZZjj*Ý•§KÛ¶mËìÚÛÛÓ×»wﶰ°HLLüßÿþG:¶{÷îE‹­_¿ÞÀÀ€¬© Kie‹ÅÌ ™Ÿ6›-³;"…k'êb±8??ŸËår¹Ü ™ööö̪ÅäñãÇŽŽŽÑÑÑJRAs¢~B¬ˆ²!‡³|XrÑ9$''“µXe¨Gƒæ‚(‘F¼»¡SÆá,Šòòòž>}êääT­Æÿï¿ÿîܹ3##ƒºV\UcccuuõçÏŸWEÅIHH¨Ž³ˆ“^xx8B–4tìرdÊÿý—Ù‰ŠŠÒ××733#ÿSôFaàéé9xðàjªÉ¢Dˆ?ÆÇé60//o„ B¡ðÞ½{B¡pÍš5ýúõ#ö6íhnll¬££Ãœg‹ˆˆ ·"¬Ê'`þüùqqq{öìa&''»»»—´ó™°Ùl[[Û›7oÒï566^ºté¡C‡ÀÞÞþåË—´Í“’’Ò¼yó]»v‘Û^½z©ªªîرããÇä ÑâââAƒ;wNCCÃËËkÛ¶m3gÎŒŽŽ...&³4ôvRYYY©©©åf Aê͉Ë´iÓš5k¶zõêÔÔÔׯ_oØ°aÑ¢E-[¶Tdfƒ°xñ⨨¨]»våçççääL›6Åb-Z´¨´ô¡¡¡[¿%%%E&MŸ>}ÈIõ®®®ô‰rŠ«ª¢¢Ò¥Kåše¨ýòåK4'jggç   H$’ØØØï¿ÿÞÙÙ™xqèêêÀµk×Þ¼y3þ|•yóæåääìß¿ÿÂ… ‹-âp8îîî]ºtùõ×_ïÞ½›™™¹nݺ›7oŽ7*^“¤†iݺµÏ‘#G""" BCC}||’““íììlmmAXX؇’’’–,YríÚµâââüü|²aѽ{÷þüóϼ¼¼„„„õë×Ó®€UùÌœ9ÓÍÍmÊ”)óæÍ òäÉÞ½{»víJ}Yí]6«V­ÊÈÈØ°aC^^^tt´ŸŸ_pppçÎ`Á‚<oÁ‚iii111S§Nåñxô–P„¶mÛ.X°àèÑ£gÏžUQQÑÑÑY³f ±@OŸ>Ý¡C•:p8œåË—_¹r%**ê»ï¾£÷÷D¤†Ag§K“&MΞ=ëëëkffÆb±x<ÞôéÓ7lØ ¸„ùóçgffN™2eúôé‰DWW7,,¬ŒÃ¹·lÙ"bee%s´6‡Ã3fÌæÍ›ýýý+§j¯^½~úé'ÅsQ.rÕ633{ÿþýëׯќ¨X,Ö±cÇ|||œ9ŽD"quu %±ÎÎÎ]»v7oÞË—/ÿý÷cÇŽMœ8ÑÀÀ€ÃáH¥Ò%K–}¢àĉß}÷éµðx¼ÀÀ@â­^ÑšŒ 5ÏöíÛ'OžìááÁb±ÈŠˆ²úÇ\»v­®®.‹Å1bÄ¥K—†jnnž½páÂW¯^Íš5‹¬À&§+Uù°X¬þùgÅŠüñÇo¿ýF=<<öîÝ[r1FI† ¶eË–eË–‘c+MMM9BÖ/YXXœ>}zìرÄ)ÑØØ8$$¤är¸Õ«W‡„„LŸ>½{÷î‹/~üøèÑ#‡Ó±cG™VT"‘…B²‡ÃçósrrÎœ9ÃLFë‘Q!ƒ($RƵD6MQ1ˆòt) DùPXTÓzV+hNÈÂtsâp8ä¯LCCC“ÂÂB±XLŒ ‚âæD\\œ‰‰‰R®ƒ¢H‰q8¥H«ƒ¬(Ò‡#> {~\.è¿ÆÆÆl6[,Ó}>ò¬D"Q|·¾—UÙ`½bRZ½*Ù éééc½* ¬WŠƒe¥8dƒfÍšU]ZÌ`EE‘ŸÏçr¹|>¿dÿŠîw1]ž”¢-R­ 9ñ ôh±9—Ë-YÝy<ž@ àr¹b±˜ÏçI¿ à‹8Ž@ PŠÎuP]ŒJ‘V3X!Q2£ÈÀ˜û¢J‹¥¦¦Æf³)Š¢§¹*1Š\ß˪l°^1)­^ñù|™”|>_ `½* ¬WŠƒe¥8Ÿ?uuu,+û <Ëår¹\UUUWR&éwÑÓ€;âÔÐœø Ó– ÿÒƒLx<ù ˆÅb±XÌf³É§ºBæ„šššRÔ®ƒ¢˜]äªK«ƒ¬´(ºÛÇúv/mRV,‹öHIÉéÒêѪ¾ˆÂzUÆSð¥^©¨¨ÈĪ¨¨ðù|¬W¥õJq°¬‡ö|>ËŠ@÷¬hs‚îJ1¡û]2.OõË¢HdýîÖWÐœøf÷Ž®ÇÄ…‰ŠŠŠºº:‡Ã!æ—Ëe*+‡ÃÑÐÐPŠÎuP]†J‘V3XQQd˜¢(zëa¹³$ ]‘¤R) Q¼meUX¯d[¯äÎN¨««c½* ¬WŠƒe¥8¤Ÿ­¦¦†eE ?|***Äœàóù%‡?¸\nÉá¶úeKÀ€ñµ­Aƒæ„|hg'RïebUUU555ù|¾D"!EEÍ ¥¨ZE‘Î ›ÍVŠ´:˜ÁŠŠ¢»}ÌÆQÆœÐÒÒ"ièQd™§”®U½…õJ¹õJ]]]&™ººº––Ö«ÒÀz¥8XVŠóéÓ'ÐÔÔIJ"0‡h‰;Ç+yP4—Ë% µån„S_˜ím¬¾ 9aWjI›͉o '%ˆ÷ùè–\;¡®®®­­]TTÄ\„M/sT„Ð4”~rd ý6¦µIäX_ŽJd³ÙZZZtx*Q«z' ë• rëUIß555¬W¥õJq°¬çÇ€æz»zA6Ç+9üAã’4õô<»½À³Ç7!Y9hN4JH?x”´‰±A, bN©‰’ó¥!×'¡rÔMQ¥H«›¬(ºßVF›¨¢¢"SÓyª*ZÕGQ¬W¹5DîÚ f Ö«ÒÀz¥8XVåB~tdåRÕ¥ÕÁ VTs¸–Ø r·ºa3¨wVDcÍ Y˜†H¥R¹;;©««+‚ž =’y —ËÕÔÔTŠÂuP=‚¥iu0ƒÅb±È¦œô-Œ²d؆öH!é‰ÕŠõ °^}Kiõª¤ó€ªª*qv¬WòÀz¥8XVŠChhh`Y½Ê‹ž v…ܘóhTÔÐœøb=Ó¶=1'“ŒÇ㑱d’’Þ§BK±K~õ+GUFϦÔÁ VB)Úæ¤(JMMÜ’Xzq?] É—[ñJU ­ê—(¬W%‘[¯dÒ¨©©©¨¨`½* ¬WŠƒe¥8¤£,wy@%¨ƒ¬¨(ºOEÏ<”fN0×6`sâQlÝ÷MHKèÙ­–´©2hN|ëËNtˆÜ<‹ÅãñȤ„X,®„9Á’·aT¥u®ƒ¢J‘V73X!QtkÈô3¡;v²V‡lèYÚSÊÕª>Š"`½¢“ f)ùéÅz¥ X¯˪\8_Žüò¢ÓùÞÉ݈_fÁ*i¦êïšì2¸v®Ýþ&dÒ(4'¬/kd¥RiÉzœššúìÙ3bE0ÃVüÜ ‘HôâÅ ¥¨ZE“¿J‘V3XQQ%½àè[º¬âããé‘¿²ŸU–VõNÖ+äÖ«ôôt™déééÏŸ?ÇzUX¯ËJqRSSÉ_¥t…ë`+*Š.ãd RJ%“Õ¯µ~#ÀoÄ×c†Á˜arÒ¬Ykþw­£ TZ éVcTà‹ÒH ¤£×E\¼xqäÈ‘µ­‚ ‚ HC&44ÔÓÓ“^\A¯ Pâ+bbb£££”(¶‘ƒ³ß@ïÅNŸ#!ãÂô÷ßÛØØÔž‚‚ ‚ ¡PèëëK®©o¡}Õ—™ŠF šßÀ<鉄i : š³‚ ‚ J‡tºÈò £¢¶UCÊ¢®n©:´EA;>Õ¶F‚ ‚ ºß%3¶‹ÔqpvB™…b±Xñ³®AAÊAú]´ƒSÃÞ+¶!æÄ7i5Úœ‹ÅÅÅÅhN ‚ ‚T7‰¤¸¸˜õå´;zíDmë…”:;ɇiT ³‚ ‚ HuC÷»d«IÞ€×okåÍõ˜ÆdNDße_%Âî_aÞ8X=N‡ÐÁ¤6§¢¢¢ÕAA¤ñQTTDº^¤Vó H¥Ð{D?(,%Ì^YþS¢ÏŸ5Ù[¬ù7–M£1'( ~[§Ž|ø4¹ÀoëàMœ> ³F±fù2‘SêpvAA¤º!Vs›Mz×þšQ`Ç!àpÀ³Ç·¢|(T Ë~í6XwaBujVÛo,›F`NÄÿ ›VÁ NpíœlÔÚÐD"ãáðxAùLb‡cE^"ÕWò4'AAª™ÞW ïï$ú k6é5ó¶E#0'^½„û7A]šê}.Cì}:šèp¹0a°ܦ·:Ƶ‚ ‚ 5ƒÌÚ‰^>qøÂÐ~òc}¦AèY= }FµŒš™Ù!§áû_f,‡íÿKü FL+7ð ;2n.>g.CpêÄÆ×XHI‡e?ƒ£'8õƒïf¦åÊ‘ûÆÚ¥ììÔgô0ÃîÝøž÷ f.ƒ~C¿†¤$¥Ý„iHÔ–÷‚ ‚ H£‚îzÕŠEq?¬,€Ç“{å&<~¹Ÿ`æøœA» 9 îœS#hk ÑOÁ¡´jÃÀ &†´L˜¹<†ÿq’Ràöplzºðö=\ˆ€~c@¿ŒQaí¯ ­ ¦”%§äkF`N”†N˜³âëmVý@ihJ¾ôæN¸C‚ 4E¥¥¥¥§§ššš²Ù`ŽA¤F¨Ý®×!´6/+Áë· Œ„fMØ,øy+@׎ðî:¾`× aö*p¶‡ÿr`†u+˜µNëV·îCÄqèÞàêM€v6²ý¿Ä¶îpã.,˜R–™7ÖðC@Qpü ôi™i’í¡`dʬÄ5?׆ HåÌ™3­Zµ233ëÒ¥‹¹¹¹……Åž={j[©²èÝ»·@ صkWÙÉæÏŸokk+7êöíÛl6ûÉ“'Õ ‚ È7Ètºj²FQ÷¼sbpßÿl °k)$¥Ê¦yI©à;òDð)>å§;Àňÿ¸uúÏ– ñÿè“úÚÛ‹$…äÔ)½9‘œÞ]a¡?ô Bʵ' –9Ï®vuD¤.pïÞ½aÆY[[_¾|966öÔ©Sfff“'O>pà@m«&Ÿ„„„+W®ìß¿¿ÜÄe|¶qHAš¡N$§‚(Z˜”•F·É×kž €X,›†3W€–Íÿ,ÝÞ}ø/A{›rÄ™åÊ©S4bg'ˆ¹ £{ƒyk{퀢èzÁ¬Çxº;‚ °cÇwäÈ‘¦M›€ÝÀMMM·oß>~üøÚÖNPWWŸ:ujPPPbb¢……Emk„ Rt«æÍ òæÌœ²Ò(âܪ)8ø+xt•®¸ØJÈ©E÷ìļq``§nC;:Œb@/ªE©#¼zõJSS“ÏçÓ!góæÍ}úô¡CBBBºwﮧ§çää´yófznsË–-þþþt²OŸ>yyy]¼x„B¡——W||üúõëmmmÅb1üûￃ 222òððؼyóû÷ïégÿúë¯^½zY[[ûùùݽ{·4m¥RéÁƒ‡:yòd8|ø03V$vîܹÿþ{öì‘ùl8pÀËË«S§N‹/ÎÍÍ¥ÃwíÚ5uêÔ„„„‰'”­ONNNPP›››……Å°aÃâããiÅŽ;6zôhSSSww÷£G–Sî‚4daפQaÜÔUáù˪Êikðð ˜ý÷/ï3L˜_á3"”%§fhÄæDÚ+HŠ‡ÎîðO0„ì…½ÔÑ=¬cûXO¢k[3Aê"ÎÎÎÙÙÙ&L¸{÷.m'Œ=zݺuäzóæÍ£F²µµÝ²eK¯^½–-[FÏZ=''§GgÏž•«íÕ«WSRRüüüÚ´iÓ¾}ûC‡ÑQb±¸gÏžÛ¶msuuµ°°˜={vpp0»aÆ &¨©© 0 44t„ t”P(|( ³²²rssE"Qaa!}T¶²^'·;÷Óï”ÀòëmAÆT@à·ºm©Å?~=ucêñ¿EQÅÅT×ÁS³WRE½{O ›L1Å2¦À˜êùõìÅO™v¤f.ÿ*äÊ Œ©û¾†Œ™EY»ýw]†™7Ö:Éœ(‰DRXX(‰Ðœ@¤4^¼x±uëÖQ£FéëëÇ#æÐÐPøçŸè”ÉÉÉ°iÓ&Jsâ?þ QÅÅÅ\.wüøñtb‘Ht÷îÝ?.X°€Çã%''ü¦M›€¶ChrssÕÔÔ.\Hn_¾| 3fÌ ·ƒ âóù"‘ˆN?zôhbNIŒàà`:ŠLÐæ‡ÃÉÈÈ QeèóáÃUUU“}ûöɨ7xð`X±bÅ“'Od\i„Ôs"3›â™S×nURrV•Ÿÿõ6%ºtzò¬’Ò‘#óÆZ¤;;!‚TœÖ­[Ïœ93888##ãܹs†††³gÏÎÊÊ"]önݺÑ)ÍÌÌx<ñh’¡ä~qíÛ·'©©©b±ØÎÎŽŽRWWwqqÑÔÔ|ñâEQQ‘¹¹¹ÖàíÛ·2ÒBBBòóó÷ìÙcdddddÔ­[7‹R\\ ‰‰‰;wVWW§Ó“‹ÄÄDèÙ³'eddÄ”¬««khhH®ËÐG[[ûüùó-[¶ô÷÷744´··ÿå—_È:´Ý»w7.((¨}ûö†††S§NMOO/¯ÔAªæú0kü±¯’èªê×[S#èÓÚ•ØÇ©¢”!GæµHãÞÙ AD1222ÜÝÝ—.]:iÒ$Âáp¼¼¼.\8gÎœØØX ÈÊÊ"û>Á—Þ¶LwœðÿìÝwX×Úðw¶Rv©RD1"± vì£b¹Ø1$¶X£Ñ4ÛM¾¨Ñ«ÆD½WõÆÆ…„V¬(JPDA©vw¾?ŽŽÃ°° ¼¿ÇÇg™™}çœÃóî)“‘‘Q݉Œ€t_ …âùóçfffR©ôöíÛ|>Ÿý;;;• »wïvqqY¸p!³%))iÇŽ‘‘‘#GŽ”J¥*INbb"y!‘HàÉ“'¤ï…½KöòôéÓçܹsYYY111¿ýöÛ’%K ŲeËlllöìÙ³uëÖsçÎqwrròðð€˜˜fÅôþû…ųgÏè7³ µÜ=ÛÛÛÛÚÚÆÆÆ2[~úé'[[Û¼¼|xdd¤©©iPPÐÖ­[ÃÃÃH· Bé—ÄŽý ²r}—£±Át!„jFQÔêÕ«Ïœ9rõêÕ´´´-[¶¬^½ºK—.íÛ· ìܹsDDÄõë× Ebbâš5k:wîLùûûOŸ>ýÎ;GŽùòË/µ<ÐfùòåW¯^ݾ}ûóçÏ;¶aÆÀÀÀÖ­[‡……µhÑbõêÕYYY6lX¼xqÛ¶myU-ß½{7EQ“&Mbo´°°8pà©S§ /^,æÍ›÷äÉ“—/_®X±‚|5`ÀÿˆˆˆøøøòòòãÇ“Õl5ÒR??¿k×®}ýõ×ååår¹üÔ©S;w …_|ñéyðàÁ‰':uê$ ëòÝA!]ñó‚Îô]ˆFGß“7 NÅFi¡P(Ö¯_/•J™_"‘hâĉϟ?'dddtéÒHwA@@3kY&“9’¼«cÇŽÇŽãóùì©Øqqq̉ärùòåË™$¡wïÞOž|ø0×DQT¿~ýV®\I¦bÓ4ýàÁ2sƒ¢(›C‡k*¶­­-;¦–òüôÓOb±˜Ïç“á[cÆŒ!ëA%%%999Á›U®®®‰‰‰uûÎ „1ÙŠj¢ö¡ƒ†L©TÊß(+++++#ÙELL̲eËÈ1 ¾¾¾Úã „š°’’’¿ÿþ;++«E‹ÌL ‚¦éû÷ï?zôÈÍÍÍÑÑQå½OŸ>-,,l׮ǥ¦¦ÚÙÙ©Ä‘ËåwîÜÉÏÏïر£½½}]*’кukõ§e+ŠäääÊÊJŸû ´”§  àîÝ»¯^½ruuuqqa¶———'''çää888xyya×BͼíFj IDATÙÍ›7ýüüÈë7öïßßÔÔT$™˜˜ Þàqy$5çÓáíœnáTl„z‰Äßßßßß_ã^Š¢\]]]]]5îmÑ¢E‹-¸ŸˆÌ»P!Øë>ÕšD"éÕ«—Æ]|>ßÇLJc-å±±±±±±Qß.‹«k@„Ò»ÊJ°ô€ŒƒŸÖUÙ~÷t_/…³uv®K×áƒQøgãžüs'B!„z«´ Ê+T7*•PZº^9¢ Ât!„B!TK˜N „B!ôζÿú·ž0e\y;¥ò `Ý&zÃÌÅpäT•wí9 A“¡ë0Xú ½¬²«è%ÌûüÁûA°ø+xQøz{ê}š i`í&èÐäòz®Ø;Ât!„B¡*”JP(Tÿ±Í^ }&F0w*ä?…>ãàÔ›'M†~/X4 žÁ¸°·ņ-ºŒ`h?8| Bß>n^‚ß`Ø{zw‡Qƒáh$tyE/!*f-/¿‡vNPýJãúS±B!„ªâ×Cðë¡j÷^¼;÷CÄX0 `Þ è?Vn„aý!+î?„?ÁÐþSƒ¡•?Ä^‚àaðô9|ýL¶|ö Œ˜ÿ{óàÐ/#àÑcxmZ„Ž—عVÍ}@Q1d^{Ûz«sma:B!„P=üaJp•-Ù¹ðõ¯_‹‘FAqÉë-CúÂ’o 7àåߥ¯àÑc¸z ^É^O쎊…W29èõ[˜=ém:q,{€¥ùë˜æfÐÙ¢ãÞ¦3'b.˜N°QEQÇ£Ôè»h!„BMœú sWÖð…éà aSªlIùûm:q/**Á©›ê»ž½{[8z¶ì†¸xàQàãÂ7·Û2ú¼=ÞÁîõ ™ ç@V˜¹W-ëIE^UwL'j€¹B!„PÃh,÷]fRšÂí¿€_u² ܾ Ás`Òh¸ñ?ðp##péñz¶ƒÄàI.ؾyQâ×/D"‰`ä@ø¿ÕU í:NÅ֌ɉ¡ñ\Ù!„B¹ãÒcwží¡¸ç@k‡×ÿNÿá+χ½GÀض­?/02‚…ð0 h £@쥷qÎ\|ý‚ǃí൷[µ„åëáßG¼nïÓ TzÙtõ\w„B!TrÓÕ(F›‡M–°ú;Èʆ‚g°a ,þÚ¶:w‚2œøÊËáÚ-öàñ ¸hô/ˆØ ñ7 ¼ŽGCôÙ·1?_Ùy°a ””BÂm˜2üÝüôWIÎCŠþ0ƒö˜-©©©z,B!„PS¾³R¿ï2X–pj„| mº ÁÜ©°aÀèÁ0b„.„©óÁÔ6®„¡ýàóoaÞç°ù8¼FÍ€#haÛ7‡a¯cŽ߯†à³ @8¶„}[ gW=Ö’+L'4c.h•Þ‰=– !„B¨©RéÐW1„B kØîéVe{W?øûÜIƒügÐÑííšKB!ÿò ;¼;Ÿ05¤€¶m ! ’S¡R>ªçZ8fL„[)ÀçÃûÞ ¿=—Æ"L'T±‡9ñù|ò¿Ê1cÆŒ±³³«¨¨P(J¥R¡P(•JšŒŒã >>¾{÷î:)°†ŠŒŒ”ÉdFFFC† 1œRf(l+î°­¸ÈÍͽté{K=ìííõ[*C…×wØVÜž9s¦oß¾†S*=†bßV‰D">Ÿ/‰òòòŽ;Æ>Œ¹ï2„¤‚ ¼=4ï²³;›·_¶vxûšÏÏjcšI¡—Ú‚QÓ‰*ÈUËtJðù|@ žN8888;;Ëd2¹\.—ËIFAp<Ñ­[·œœœtRf %Èÿ:‰f€Ôa(l+î°­jÇÞÞ¾Ž1 ³‚x]5|(l+îòóóÀÁÁÁÖV 0À ¾k(Þ"‘H ###õû+澋É(WÄi 0x‹K0ÿóù|õëX$‰D" éÇ#]ÜÓ >Ÿoll¬“b`(¦%uÍ+¨ÃPØVÜa[qA~5©l©cLƒª ÎCáuŶwb±˜ümE0wVL:ÁÜJ±1÷]ì;1ÀŒÂàa:QÓ­Æ~xŠ@mÉ_¡PhbbÂçóI:!H.Á}°ŸÏ755ÕI™ 0Ó†:‰f€Ôa(l+î°­¸022RßRǘUA‡ÂëŠ;l+îÈ}¶±±1¶ÁÜS …B’NˆÅb¡P¨r˜@ PytáwB€éDu˜ÁNäºWÙkdd$•JÅb±B¡ Å»¦B¡P'ã) 3™¼ÎãñtÍ+¨ÃPØVÜa[q!‘HÔ·Ô1¦AUPç¡ðºâÛŠ»ââbJ¥ØVû#Z2œI$©ü!„B!3ØI'åD Ó‰*Ø“°IŠLÓ´úØ>sss2› iš¦i…BÁñDMàWƒø'‡;l+î°­¸Pÿ°ÐÔÔÓ -ðºâÛŠ»ÂÂBÀt‚… a"c™‘Hdbb¢~ùWeB¶N ÜØ=ÎkKÐÑP5ÃtB3’TÐ4­ñ1v$Ù ™I'Hׄz?Fux<ž˜Yý«n 3¡“h†YAl+½„"°­´P<  ëÓ *X¡¼®¸Ã¶ªùI¬ûOa€|×PìkIž q©‹¾²ˆ¢—ÐÊ>™ëW4Ðïg€¥X[|´¢âàA¼†Ã~;§ÃÎo¨TïÓ UìD”J¥úåNRj’E0½J¥’ôfp9‹@ J¥:)°†b>ÁÒI4¬ Ca[q‡mÅ…ú§}&&&uŒiPÔy(¼®¸Ã¶âŽôšššb[¹;bV¸aVƒUŸŠÍô]¨LÅnH4 ¥eP^Ñpgôê‹çÀ×K_Ÿ½ºÉþÎÝáâ5èÜpeãÓ‰*HöÌäLÇœÊa"‘H(’¬ƒ¬K¿ÁñD|>_}È`í`(fú”N¢`u ÛŠ;l+.4öNÔ1¦AUPç¡ðºâÛŠ;r£¬qz@-`ß5û¡^L^¡1 XôØGa€LŒaV,X×"õ]5˜NTAQ”ÊŒj>Ÿ¯ž$P%‰H§„\.¯E:¡qÁ¨Z—ÙC:‰f˜ĶÒK(ÛJ‹êÖq¯KLƒª`}„"ðºâÛªFä'±î?}„Vð]C±327UãBü*VÉm•¡Íɾž~‚¤»àòŒ ³'¿Þ>> ‚‡ìød>ߎñ´´{½÷î=ø*þN‡îþ6~=}À¯#ÌX pà8¤?‚ý?½>øF|¿.'@[GXú ìýz{Èhøf\¸ tiÈ× Ó ÍÈJ¥Rý:ÎÊʺ{÷.É"HRA¶sîDiié½{÷tRT UYYIþ×I4¬ Ca[q‡mÅEvv¶ú–:Æ4¨ ê<^WÜa[q—••Eþ×É­°Vð]C1í@±ž,AZIý0Cž}:ÆÌç60s"<Îð•p= vü௠tŠŠ!<^•AÄNxø.ŸHº£ m1ââ¡çP(ÀÖÞ‡ž] æ<8:@Wßקxö‚&C¯n0~lÿŒ˜wã m׶ ÀñhƒK'€FU‘µ_+**d2YiiéË—/>¬ïïB!„Pwøðá—/_––––••UTTÈårfñL]IHH€„„„êxQHC+závÉdtÛntÀHš•²åWZÑ©÷iš¦­=ikOºàÙë]«6Ò|Gº¬Œ¦izð$Ú¹;]ôòõ®¦¡½~óë/œéU_¿[FC+ú¿ÿ{ýeÒZÑ~[÷^´ïÀw®u}ÃÞ‰*hš&Ù0ýæ9sÀþýûÝÝÝõW@„B¡¦#555$$„¼V¹Ief´HOÅ­ÈÈ‚ÅaPRúzË ÞÑqàæ0b ´°z½ËÛJÈÈ‚öÎs̳7×çL†…_T{‘F |ýºƒ+Àßéo÷º¹À¹+ºªÎ`:Q“<ЬñKì!Lîîî¾¾¾šßŒB!„j‹Üt‘é*I…¾‹p/ |%„¯¬²ýyáëd±WB$Ë!+ä hïüv—X\åHö6À ‘€`?ÕÌù=8Sû*ÔL'4`2 ÒAÁ}FB!„ª澋*b ‰!•ìý{hØgʘIròßnyY OŸW{õ ì…~ žË{\ Ü` k²¼! ß¬ýJ(AÆíé»P!„BMsßE–ÍTYlSï<Ûܸ ­^ÿ+y¡ !õ¾¶wYY‚•üyîí–˜óPëZÝÞµ}s½ÁÞ‰*H·“NÈåòÊÊJL'B!„ê›B¡¨¬¬džvÇÌhø’ÜJ-¿VÙâá }?€ñÃaß15ºùÁÉøæG(}Þjˆ¶t.¬Ü­€Ù“áî=˜¿x¬N—Vpã6ÌŸ••Û6¨žQÉ*ÌáSà`ƒûÔªbõ©ÙÌ iøñkø}ŸêöÐa0c$ä>†+ç`Ù,jÙlf ø„½!„B €|’Ë^f“Yµ_ßE«ÂÑôª’Kh7t*ôðfÒöÏûðaMJÀªúµžš†Í¿Âç @,®E‘ëW3èH»ÇÀÙhHº¶-«ì:ø \9 cÁ¯(•ôÿ­¡þõOX¾–H™® L'B!„s÷EQûã]}—«®¦}†A»èß22ᯠ°m=X˜¿[ãÑ ÁìIõSĺiéÄ£t¸vLLÁÊFu×_Áðñà× €ÇƒY‹vPZL›J˜9Ù˜N „B5æ¾Ë0;%j-xÜ»ž‡+ г+|¾>èòÎA¤Ø·EóZ´z× Ò‰ÃaÀp€ÆÃÕóo·ËÊàI&ôYáêyP*¡KOzâLZ¡ årö+;!„BÕ7æÖ«)eOŸ>ýý÷ßG6¥EØ”ÚÇé÷îʤkÍ ¨Î£t.ÃüÉ AÙ+ (Þâ¯3ýÌâNMàRF!„2pMòÖ+++kÖ¬Yþþþ-Z´ÐwYê‹Av™4ŒŒ{{¶À¦}øR‹aÀÞ†ÔÍ+싸idÆ!ÌÌÌ$oH¥R//¯ÐÐÐ[·jZ«¯&¥¥¥iiiÌ¢pmÚ´Y¶l™AÔ¨ÿþ‰dçÎÚ»téÇ»}û¶Æ½­[·^½zµÎˆjTnºð¬±hÆé„@0p$  "Ã'+) xÿµçÙ鹨¡úQZZÚ¡C‡µk×®]»võêÕ]ºt‰ŽŽ8|øp]ÂÆÆƺ¹¹¥¦¦’/ÚµkgPÕÝ¿ÿ¯¿þ’Éd»wï®ñ`-ãñ#„P­5ɉÍA3ìÔª @×^o·´÷¤y|ªð9Tý‹HQ”†·#„šww÷ùóç3_æååMŸ>=00PWÓÐIœú {öì111™3gNDDăœu~ „ÒŽ¹ãÂt¢qiƽï¹€Ä þ:ývK|¥T(]=è7˜É@ú+%B¨AÙÙÙmܸ±¤¤dóæÍÌÆíÛ·÷ë×ÏÍÍmÊ”)W®\a¶çççGDDôìÙÓÙÙy̘1iiipðàÁ5kÖÀG}´mÛ6˜6mÚ¯¿þ ‰‰‰AAA™™™+V¬ðóóó÷÷_³f ó'“¦éÝ»wO˜0ÁÅÅeÔ¨Qß}÷]qq±ö€ “É–.]êíímgg׿ÿsçΑíÚÏ¥B©TîÝ»wôèÑ3g΀ÿüç?*ìÙ³'((¨k×®K—.-**bïJLLœkÖ,²ñúõëÁÁÁíÛ· Ú±c»‡š8q¢££cïÞ½ûí7f×7/^ìææÖ©S§Å‹Ëd2­ß@„P#¦2 “ŠÆ¢§&¦¶Îÿ ë—ÃÃt8}¾ù”¶o-ö¡¾K†Ò§˜™™1wƳgÏþè£LLLæΛŸŸß§OŸS§NMÓƒ Ú±cÇøñã§M›–ššÚ¥K—ÒÒRGGGOOOðõõuqq€“'O&&&À³gÏ¢¢¢?yòdgg篾ú*""‚œhÆ ³fÍ’Ëå«V­jß¾ýÊ•+g̘Z*•Ê¾}ûþòË/!!!ëׯ766îÓ§ÏÿûßÏ¥âÌ™3™™™S¦Lñðððòòú÷¿ÿÍÞ»aÆÐÐPccã¡C‡>|844”ÙuóæÍ^½zݼysìرOž< |ñâÙ•šš9hРÈÈHwww8}út@@@JJÊÌ™3]]]ÃÃÃgÏžM^¿~ý”)S\]]W­Z%‘H&MšDjqûöí=zddd,_¾¼k×®¿üòËôéÓëþ-F5˜T4tó1÷CÚ¿e•-ååôWŸÒŽí´#(;TÜN(---**ÊÍÍÍÈÈHMM½qãÆÆ™æJHHÐSéBºÇãñ&Ož¬¾ÝÃãC‡4M_¸p"""Èv…BèííMÓ4é‹Øºu+ÙUPPÐ¥K—sçÎÑ4}òäIHLL$»¬­­çÏŸOÓô_ýãÆc>{sww5jy8cÆ ¦ Ó¦M³±±!¯« Hæ9üùçŸìâµjÕJ©Tj?—ŠI“&µlÙR.—Ó4½víZˆgêebb2aÂòeeeePP$%%Ñ4=tèPssóââb²—t8¬ZµŠ¦éE‹À§Ÿ~Z^^NÓ´L&kÛ¶m@@Sž-[¶@jj*MÓ>>>}úôaÊ3kÖ¬Õ«WÓ4ýÍ7ßP•——G¶ÿöÛo½{÷®¬¬ÔX „Pc”ÀÜemܸñÆ©©©<ÈÍÍ-***---//g•­«Ó5äí\ß±á5§Þ‰­ázv•-"|þ$=…Cqp6þ#‰n逸Â!„ ˆ‘‘‘­­-;vL$=º¸¸¸¸¸¸´´tÈ!III¹¹¹¶¶¶FFFëÖ­Û½{wnnn‹-®\¹Ò³gσO›6ìååuïÞ=òúÌ™3?ÿü³B¡xôèQLLLBBByy¹öP§OŸ655íÝ»7ù’Çã=yò$33Sû¹Ø^¾|yìر>Ÿ&L¦ƒ"**êÕ«W#GŽ$_ ¦K¡¬¬,22²_¿~‰„l™>}ºX,f"óùüO?ýT$À­[·222BBBJJJHc4¢££à½÷Þ‹‹‹[µjUrr2MÓ;vìøòË/Évš¦§NSVV6~üø¸¸8 ÏúC!ÃӜ҉êXXA·ÞÐÖÕ@Ÿ4ˆjXr¹<##£sçÎpïÞ½ŠŠ '''³7–,YÏž=377ÿßÿþ׶mÛiÓ¦µlÙÒÇÇç»ï¾ã2ÕÊÚÚšy-‰är9yMF™™™999M:•YV‹ôôônݺ …Bf‹««+<~üXû¹Øø€¢¨ƒVVVÀƒ oß¾ÌñäÅÇišfïâóùvvv욶lÙ’¼&™Lxx8Ó’¤¨ÏŸ?€ŸþyêÔ©^^^-[¶œ3gΓ'O`òäÉÿüç?SSS `eetæÌ™›!„PCÂÏxB¨ŠÈÈÈ/^téÒÌÌ̤RéíÛ·É'÷ rÓܧOŸsçÎeeeÅÄÄüöÛoK–,Q(5>‚WÍ'ÁÁÁJ¥òèÑ£]ºt±²²Z±bÅÖ­[µ‡’H$999ì-)))ààà‘‘¡å\l»wïvqqY¸p!³%))iÇŽ‘‘‘#GŽ$=OžþœÉdTƒ÷îݨ¾ÝÆÆfÏž=[·n=wîÜÉ“'÷ìÙsãÆ 2}eÉ’%‹/NHHˆŽŽþå—_œ””D&c „2øy}:<<œÏç_¼xqàÀÅÅÅŽŽŽÓ¦M‹ŠŠrvvf¯ûôN®^½šššúÅ_ <ØÊÊ Ø㉫ãááqçÎvFokkÛ¦MŽçMKK»téÒŒ3ÂY6nÜ(‰Èx§Ž;@ll,ó¦ U«Vì]qqqÕõÏÙä7nÜ`Z²¤¤$44455µ²²røðá‘‘‘¦¦¦AAA[·n OHH¨¬¬\·nݲeË(Šò÷÷ÿì³Ï8PYYY÷ç "„Ò!L'BÍZzzú/¿üòË/¿ìܹóóÏ?÷÷÷ÏÈÈ8qâ&Ö¢E‹Õ«WgeelØ°añâÅmÛ¶åñx~~~×®]ûúë¯ËËËårù©S§˜!Rä½±±±OŸ>åXŒ:H$’Ó§Ofdd,[¶,66¶²²²¬¬LKÀ…  … äçç“'ÐEEE-^¼X¥/E‹Ý»wS5iÒ$öF ‹ž:uª°°pÀ€þþþñññåååÇ'³€¢¨eË–]½zõ§Ÿ~*))¹ÿþÚµkÙ#¯ØÚµk7~üø}ûöÅÅÅÉd²Ã‡?þáÇÞÞÞB¡ÐÂÂâ‹/¾ =<8qâD§N„BaÇŽ7mÚô×_Ñ4]TT´{÷n>Ÿïëë˱v!eeeëÞصkìÚµk ùM‹jO¯Á ‹B¡(//Ç•j>TÆuìØqÞ¼y—/_fsùòeòL7Š¢Äbñ‚ d2ÙõÓO?‰Åb>Ÿoll cÆŒ!«UVVöèÑ>ùäZme§k×®1Á'MšäææF^ÿðÃVVV<Ïç?>66ÖÂÂÂÖÖVK@š¦ÿûßÿZZZŸÏ§(jùòåd&íç" EëÖ­{÷î­Þ2{÷î€;vÐ4ýàÁoooÒ666‡‚7+;UTT„……‘]E}ûí·¾¾¾ÌÊN¤ðŒçÏŸ3Þ<©ªoß¾wïÞ%»’’’œœœ€Œ­ruu%ËXÉåò¡C‡€‰‰ Ç311a–ÒB5 ³²S§N@ µo@§NtR‘ê4‡•(—ò}C©TÊß(+++++#ÙELL 3:!!?C¨¹‘ËåwîÜÉÏÏïر£½½={WAAÁÝ»w_½zåêêJ ÁÈËË377722â~¢ŠŠŠ„„OOO2£ ¸¸øÅ‹Ìȥꖕ•Ý¾}»¢¢ÂÛÛÛÌ̬65¬‰B¡HNN®¬¬ôññQïxüøqzzº……E¡²²²RSS[¶lI†Q1ÊËË“““srr¼¼¼ØgIKKKOO755íر# †j2nÞ¼éççG^oܸ±ÿþ¦¦¦"‘ÈÄÄÄØؘ¹ïç2L‹Í›7“OaT¶Sõã?~òÉ'u ®©`ӾĩØ!T@@>žWgccccc£q{#ŽD"Q·nݘ/¥R)É+´466&ÇëŸÏ÷ññ©n/™ Á1”££££££úv±Xìïï¯ñ-íÛ·oß¾=Çø!¤.$$dÑ¢Eê«Ûñùü½©)Á¹!„B¨)³¶¶6l˜Ê¼2>Ÿ?lØ0ö‚Ú¨v0@!„BMÜôéÓ {‹B¡˜>}º¾ÊÓ”`:B!„š¸   •ÉWäá˜ú*OS‚éB!„jâAhh(YÍIýKT˜N „B¡¦/44”™-—ËCCCõZœ¦Ó „B!Ôôyyyy{{“çäx{{{yyé»DM¦o‘Ë‹ÇãQjô]4„B¡&NýŒ¹+ÓÕ)fÎœ©òÕ¦5À\!„B¨aÔ÷}WHHŸÏÇÇMèN@ьɉ3 „B¡úGî¸tÞ#ÁF@A^ÔGüæ Ó TzÙêø\w„B!T#rÓUߣÍñY:‡é„6Ì =fKjjª˃B!Ô”°ï¬Ôï»………wîÜÑÉÍÍÍàÒ¥KÚ“J¥8W›#L'4c.h•Þ i‡B!TTz'Ø»>ûì³mÛ¶5pyrssíììø¤¦ªØÃœø|>ù_å˜1cÆØÙÙUTT(ŠŠŠ ¥R©P(”J%MÓÏß½{wØCEFFÊd2##£!C†N© 3¶wØV\äææª|äÖ£G{{{ý–ÊCáuŶw………gÎœéÛ·¯………áñ q IDAT”J¡Ø·U"‘ˆÏç‹D¢¼¼¼cÇŽ±cî»Ô“Šˆˆˆyóæé¤äI$Ì%8Ât¢ rÕ2|>_ ¨§ÎÎÎ2™L.—Ëår’QOtëÖ-'''”ÙC‘gL D3À ê0¶wØVµcoo_ǘ†YA¼®>¶wùùùààà`kk[÷hXÁw Å{C$ @`dd¤~ÅÜw1¼¹7‹Åîîî:)9Ò9L'ÞbçÌÿ|>_} ŸH$‰D@Ò Gº&¸§|>ßØØX'Å6ÀPLKê$šVP‡¡°­¸Ã¶â‚üjRÙRǘUA‡ÂëŠ;l+îÄb1ùÛŠ`t‚¹•bcî»Øwb€klŸOÒ @@r îƒø|¾©©©NÊl€¡˜6ÔI4¬ Ca[q‡mÅ…‘‘‘ú–:Æ4¨ ê<^WÜa[qGî³±­æžJ(’tB, …B•ÃÊ£ëêo}'¤C˜NhÆ v"×½Ê^###©T*‹ É(Þ5 …:Oi˜¡Èäu§“hXA†Â¶âÛŠ ‰D¢¾¥Ž1 ª‚:…×wØVÜ€T*Ŷ"ØÑ’áL"‘Hýã@  ™ÁN:)'j˜NTÁž„MRdš¦ÕÇö™˜˜˜››“©ØMÓ4M+ Ž'j¿´À?9Üa[q‡mÅ…ú‡…¦¦¦˜Nh×wØVÜB“N'(Š‰D–––ì-ZŽ'C˜˜[,’N˜˜˜¨F>ÆU™]÷£z…é„f䊧iZãcìH²A2 ’N® õ~Œêðx<2°²î 3¡“h†YAl+½„"°­´P<  ëÓ *X¡¼®¸Ã¶ªùI¬ûOahdž]Í¥½3ýh`’'…BõßW<Ì"L'T± P*•ê½$¥&YÓ;¡T*Io—³©Tª“`(æ,D3À ê0¶wØV\¨ÚgbbRǘUA‡ÂëŠ;l+îH?¡©©iSm+2l‰ ÅÜú³gN³7’Û*ör±dú„zñÈP(•©ØÈÀa:QÉž™Ü€Ð˜N…B’uõaé78žˆÏ竬 ÅüÑI4¬ Ca[q‡mÅ…ÆÞ‰:Æ4¨ ê<^WÜa[qGÖ,Ò8=  ­‚LﳲŢýKŠµr¦úÂPä护ØGш`:QEQ*3ªù|¾z’@† ’N ¹\^‹tBã‚Qµ.³†"tÍ0+ˆm¥—P¶•Õ­ã^—˜UÁúEàuŶUÈObÝúƒª sO,±Óxó:õ\‚™;A±Õ¸P,É(Ø11£0|˜NhF.tP*•êó²²îÞ½K²’TíÜŸ;QZZzïÞ=ÕCUVV’ÿuÍ+¨ÃPØVÜa[q‘­¾¥Ž1 ª‚:…×wØVÜeee‘ÿu²<‘AU¹¹/))¹wï»ÛÁÁÁÁÒÒ’IW(Ö’¯$¿Rï¦P ÎtJf ×±þÍó@:f^Dttô¸qãô].„B!ÃÕ¢E‹èèh©TÊtÎ0–Ø]Œ3gΨÜ_8qbðàÁìc ñç7oÞôóóKHHðõõÕwYê öNTAÓ4¹j™çH¨ aÚ¿?>ã!„BˆíåË—Ü·o_xx8I$˜ÇG×Àê¯ oQŸëEÞB^³Ç;!‡éDLòÀ¿ÄÂäîîÞ„“K„B¡Ú™3gή]»¦L™baaÁ gbÒ ’°gnh †)Dc„OÔ€É(˜Oú.B!„A[±bEyyùîÝ»€Y–™‡M&¦ó«R‰@U] ªá«€jÓ U*'är9÷g]#„B5O-[¶ Û½{wII y6{'fø“à S±1‹hŒ0¨‚ vbÒ ¹\^YY‰éB!„PæÍ›÷òåËãÇËß `²×~U™išL'4c'8Ø !„B¨FmÛ¶ñõ®—EÐ×–΄Ã_ÑA~ôÝ$&{&Ÿ°w!„Bˆ£AƒYZZþù矕••ì!OÀZçFßÅDºÔ Ò‰¯¥5œKƒÿDÁõl˜0Nþg£¾˜•“ b þ´jà †7Ó'˜N:L'B!„¸àóùAAA.\ sPI.¡|‰&©©§r9$^ƒÑ“ÀÒ@ €Ð®^€W¥pdLœ ­ÚˆÅ0a•ù€ºu•yzÎ@!„z'Æ KKKËËËcÉdç*FM@SO'JŠ!| ~»%ó€…}Úµk×ââb}5_FFF¦¦¦EEEL.Áæ„·UMOóH'Þ‡Q=àÓi0x4Ä¥Âý,¬àuRA½ÚÒÔžg§B#¤J&“•––’× …¢´´tĈk×®]»ví—_~9bĈøøøž={fdd¨¿7##£{÷î'Nœ˜5kÖéÓ§/]º´eË–²²²   ÿû¿ÿãröeË– 4ˆ¼¶´´ìÓ§¹¹¹®ªF„‡‡Ï›7ÏØØXWÚµkWãaZþ¼•——¿zõê]ÏûêÕ«òòòw}G±±±nnn©©©äËþÃÌ>{=]ŒÚ5>wìKº)qqqéÓ§ÏêÕ«õ]Ô|)•J™L& É'f˜æMU3xîÄÍ+0±?8µƒÓס£ïÛívÒ¡k¯×[rŸíتÞ^àS‘Á8p`hh(óåÔ©S{ôèñóÏ?¯]»VåÈéÓ§?xðàìÙ³=zô [ºwï2pàÀ¥K—:ÔÝÝûy½½½O:UçâWyíÚµãÇë0æt ©¨ËéÄÂ… ýýýÃÃù¤Óé\rr²B¡hÕª•‚E¥k󊦤ôN,˜ vðû¥*¹tí ¦R¸|öí–?ŽÓ¡¢[öÊN8m5">>><ïÑ£G*Û¯\¹Æä„™™Ù¦M›”J%é ˆ‹‹ ÎÈÈøä“O:tè°oß>räÇóäÉ“   ”””äääààà¿ÿþ›ì½wïÞرcÛ´iãââ2}úô¼¼<²=111(((33sÅŠ~~~þþþkÖ¬©îOÈ÷ß?zôh333X´hQHH{ï¿þõ¯#FiñññóçÏïرã|°|ùòÛ·o“cRSSƒ‚‚ÒÒÒÖ®]Û¡C¹\>mÚ4fMÓ»wïž0a‚‹‹Ë¨Q£¾ûî;öh¹\¾råJOOOww÷O>ù¤º"ׯ_nß¾}PPÐŽ;´~7ÞÚ¾}{¿~ýÜÜܦL™råÊfûøñã>|øðḹ¹M˜0!''‡Ù{÷î݉'úùù…‡‡ß¾}{Ñ¢E§N:xðàš5kà£>Ú¶msð®]» àêê:qâDŽãæe2ÙÒ¥K½½½íììú÷ïîÜ9²½¢¢"888&&&""¢gÏž‹-*++•³«\ÕÔ~hÿ¾p±eË–yóæÝ¿„ íÛ·0`@dddÕT¹¤ÕÃîÝ»·{÷î!!!‡b¶k¿Ú“““W­Zåëë;jÔ¨?ÿü³°°pÖ¬Y:t dR/îGÖxºêZÕÛÛÛÍÍmóæÍïÔ’éÊþýûMMM]]]É—*#°¢éiêéÄãG‘ÝzÃñpð—·ÿ’n€‘1„̆#{á?Û¡ Ž€ŸPÎþ”–Hõ]h„jéðáÃJ¥RýóÈØØXP¹A'ºtéâèèxóæMxôèÑÑ£G_¼x1wî\KKËÉ“'oݺ|}}mmm{öìiff–ŸŸôèÑgÏž@JJŠ¿¿NNÎçŸ>wîÜóçÏwêÔéùóçðìÙ³¨¨¨ÁƒÇÇÇOž<ÙÙÙù«¯¾ŠˆˆÐXøëׯ{yy‘×ööö`ÏùöÛoÀÈÈ(99¹oß¾çÏŸŸ5kÖðáÃÿý÷^½z@QQQTTÔ¬Y³¾üòËvíÚQuòäÉÄÄDaÆ ³fÍ’Ëå«V­jß¾ýÊ•+g̘ÁÄ_±bů¿þ:vìØQ£FíܹsÀ€êíNŸ>’’2sæLWW×ðððÙ³g×øM™={öG}dbb2wîÜüüü>}ú07‹ýõ×êÕ«çϟߧOŸààà'NŒ=šìJJJêÒ¥KJJÊ!C{öì¹sçÎäädGGGOOOòqqq!ïÛ·oåÊ•>>>ï¿ÿþáÇnjSc©”Jeß¾}ùå—õë×÷éÓç¿ÿý/Èåò£GΘ1cÿþý£F0`À¿þõ¯!C†€ÊÙÙ—–€Ú/íß.RRR<`ee5sæÌìììÑ£Gß¿_{©T.i•˜6løÇ?þáêêºbÅŠ§OŸŽ?žä¥5^í$7 •5jT=Ç÷ìÙ³±cÇ’©ܬË—§§§nûú⨠ `ëÖ­½zõ¸8lsA7mGÿM;‚†?£išV(èy“iGŠvÚI ü8¤¼¬¬´´´¨¨(777###55õÆ7ndš+!!AßUBÍ×ðáÃÍÍÍÉë³gÏÀäÉ“·lÙ²eË–ï¿ÿ~üøñR©4;;[å³fÍ€¼¼y8cÆ æŒÓ¦M³±±¡išLGñöö®¨¨ »ÈgºÇ§izÑ¢E¶¶¶4MËd²¶mÛ0uÙ²e ¤¦¦ªWÇÑÑ1<<œ¦é .@DDÙ®P(½½½™âY[[/W­ZÅçóËÊÊhšyò$$&&2Almm_¼xA¾üüóÏÓ>Õ!ßë?ÿü“]°V­Z)•JÒ mÚ´),,${I?ÌéÓ§UÎξ ´Ô~T÷}a7¾vaaapðàAòeRRìß¿_{©èª—4[nn®©©ihh(³Åßßÿƒ> 9\íS¦L!»¢¢¢ÀÏÏ|I.NRHîGÖå‡ëóÏ?€û÷ï×Ø€éÖŒ3LMM·nÝúûï¿ÇÆÆÆÇÇ'''gdddgg?}ú´¤¤¤¼¼œ¬K.~¶¨¨(}_÷šü dSï32i ÿ–®àñàÇCbŒ…¤gôÿ^SoÔ´9rdÅŠ+V¬X³fÍ¥K—zöìyùòå–-[ªVYY ‰Dc™LÆÞ5eÊò‚¢¨ &<þœ|Ы‘\.ŽŽ dæO;::z{{ÇÇÇ3ÇL›6™€äååuïÞ=õ8dÀÓ¯âààпÿ#GŽ/ûí·-Z 6 >ùä“'OžˆÅâ‚‚‚k×®8q˜eŽ`æÌ™öööê§8sæÌÏ?ÿ¬P(=z“Àž-=mÚ4¡PH^“OâoܸÁ~û­[·222BBBJJJŠ‹‹‹‹‹É,ÞèèèêŽ;&‰FMÞRZZ:dȤ¤¤ÜÜ\rÀˆ#Z´hA^{{{+ŠŒŒ …B3fÌæSó9sæðªÿíÔ¯_? òšŒòzðà–RÀéÓ§MMM{÷îM¾äñxAAAOž<ÉÌÌ$[HîJ^Oœ8‘¢(’ÔÕ:`u—öï G‰äÃ?$¯=<<ø|~ZZ—RitþüùÒÒÒqãÆ1[~ÿý÷ü‘ËÕ>vìXòÂÉɉý¥‡‡°’ªñÈ:þp¹¹¹©œ¡pýúõ]»v >\"‘PEQÇ£Xô]@T/ðîÀÒº÷©jg7B†oÛ¶m/ßÈÌÌþ<ëŸ=räHöÞ¬¬,æu^^ÞóçÏÙ÷è •J`ïÞ½YU-\¸PËIÍÌ̤RéÇUÞÅܬklÒ)Án—/_>}ú´º³ðù|-eÐH"‘¨×€•™¨3fÖ“ààà#GŽüöÛo:u"ìÙ³gäÈ‘sçÎurrâñxdLj®^½šššúÅ_ <˜|’­òFö³ØÈ„‡÷ߟ}™‚|ãÆÖo”””„††2ÏÐÈÓÓ³¸¸øñãÇÌ»NŸ>®=°²²²²²b?a0&&†Öé,F;wî°oUãããmmmÛ´iC¾d_/^,++Ó¾”p5ªñûRGµ+•··7ÄÅÅ1[ 4bÄ]]íÕñt÷ïß …ï´4Bu-‰<==y<é'dg*‰fM ¦5}EmÚ´©¢¢âý÷ßÿñÇ/^¼x÷îÝ}ûö&%%íܹ“y .¼páBIIɾ}û¶oß¾téRrïkmm@Ö e,]º4>>~çÎeeeùùùaaaE-^¼øJسgOŠ¢ØéüãÿHIIÙ³gÓ5]ºt¹víZZZZQQÑÁƒW®\ /_¾Ô~·Ý¡C‰DrúôéÂÂÂŒŒŒeË–ÅÆÆVVV2u9zôè?ÿùORÁÕ«W{yy‘ŒvíÚ?~ß¾}qqq2™ìðáÃãÇøð!¹õ¬NXXX‹-V¯^••UPP°aÆŋ·mÛ¶ÆO¦I«~ôÑG·nÝ:pà@XXó2¾%66VKqùòå=zìß¿_}×Â… …Bá‚ òóóe2ÙîÝ»£¢¢/^Ìä9Gݼyó‹/gÏžííí=tèP-g¯1 F5~_ëÖ­ëÑ£‡öWïZÍê.éÞ½{wïÞý‡~¸råJNNÎ×_}áÂ…©S§‚Ž®vîêrºôôt7772ø ¡†‘žžncccddÄçóÇ€¢(vv¡ïb6„èèèuoìÚµ víÚÅlÑ>é®1j±CôêÕëæÍ›S¦LY°`³ÑÃÃãüùó*vÎœ9sÀ€2™L*•Nš4‰¬ÁÁÁ‡ò÷÷gVî'.\˜““3{öì¹sç* kkëÓ§O¿ë kkk•t¢W¯^ï½÷^NN{‰ÛåË—‡††º¹¹QåîîNV†7nÜÙ³gÅbquñ¥Ré7ß|óÕW_Y[[SüÇŒ=ÚÉɉPiôôéÓ_ýµC‡ú.jv$ÉСC/_¾LæN°3 •ÙÍ———··7»ÊEy{{W÷p¤F­©õ¶ „jÍËËKï¿æ‚ƒƒõ[ÃáâââââBf7$@°bÅŠ>)Ò¡¶mÛjYÜ¡z5cÆŒ‘#GfeeuèÐÝ Ñ{¡Â¦Ó „B!¤`Ù²egÏžežC2öÿ͇µµõ°aÃÈÄk@0lØ°¦1™M¦!„BH7æÎkmm}ðàA…BA³@Ó4ó¢¹eÓ§O'²årùôéÓõ]œú‚éÄ[êÏo>ë „BÕ±±ñÊ•+ccc?~L¶DšÓ0'FPP••XYYé»8õÓ‰`.B!ÄÝì$˜D IDATÙ³[·n½eË&‘µ¤¢™ääAÐ$7ÁÀtB3¦§0£@!„âÌÈÈhÓ¦MW¯^‹‹cqjV‰ƒI'ô\Žú„é„ìaNäQŽú.B!„P£1bĈ!C†DDD”••1Ó'ša.^^^³fÍÒû:ìõªÉv»è„Ê 55UåA!„P3DnÄ•o0³œ9ÒËñÏŸ?ÏÉÉÙ¿ÿ'Ÿ|Âd4Ë;µ@aaá;wê¡iÂĉ/]ºTãa PÃtB3ösÙ½MuÁ`„B5äsR•%gT^T·‘Q\\laaÁÜ) ò?C(‡*Ö½_â³Ï>Û¶m[ÝënÈæλuëV}—¢60PÅæÄçóÉÿ*ÇŒ3ÆÎή¢¢B¡PTTT0y9÷•øøøîÝ»ë¤À*22R&“ 2ÄpJe˜¡°­¸Ã¶â"77Wå3°=zØÛÛë·T† ¯+î°­¸+,,Ÿ/‘Hê„Ü,ñù|' ±±1É+ÈEQ@%«©Ër±b±ØÝݽŽ%GõÓ‰·Ø¹ó?ù‘P9R$‰D" éÇS¾™fÄñ\|>ßØØX'Å6ÀPLKê$šVP‡¡°­¸Ã¶â‚üjRÙRǘUA‡ÂëŠ;l+îÄb1ù¿©¶¹A222"½B¡$ì‘N”¦gyÕýÔÈa:Q…J· ù1P_'X(š˜˜ðù|’NfÉŽ'âóù¦¦¦:)³†bÚP'Ñ °‚: …mŶFFFê[êÓ *¨óPx]q‡mŹe'~êÍ+HÒ Š¢„B!ŸÏ‰D<|Þʤ*éDÝÏ‹ ¦š1ƒÈ„Ê^###2P¡PŒâ]Ó ¡P¨«ÉûŠL^çñx:‰f€Ôa(l+î°­¸PÆ ‘HêÓ *¨óPx]q‡mÅ]qq1H¥Ò&ÙV$7 ¡H^A ò¿X,&I…X,fz-Ô'rè¢6ÈP`:QÓ)AfMPEÓ´úÜ  2›™„MÓ´B¡àx"‘HDº^wŠù“£“hXA†Â¶âÛŠ ©Tª¾¥Ž1 ª‚:…×wØVÜ€™™Y“l+’ ˆD"KKKªêÊN¤k‚`2 vO…ú=j0ÐŒüxÐ4­ñ1väçØk-¿ÓÔ"§>&¡v 0óñƒN¢`u ÛŠ;l+.ȯ&•-uŒiPÔy(¼®¸Ã¶âŽ™;Ñ´ÛJ$‘û%2ýš¼‰DÌ ödTòY-vM4I˜N¨b'@Ó´ú`'±X,•Jår9{‰X¥RIz3¸œE(š››ë¤ÀŠù“£“hXA†Â¶âÛŠ õQѦ¦¦uŒiPÔy(¼®¸Ã¶âŽ ;”H$Mµ­ÈÌR2nŠN:Èø’Wi¤ƒ‚䀃š"L'ª —8ÓÏ@Q”R©Tÿ´ÏØØØÄÄD¡P°ÿN½ÀÌÌL'e6ÀPL‡¸N¢`uªQ·UÆñb ±CïV SªFÝV ÊÄÄD}KcTuªÆëªàfÁó¤g¥Ù¥&ö&-{9˜»h»3À ê0þ rG{SSÓFÔV´’Î9Ÿýâî ù+¹ÄQÒz £Ø\¬%”P($£+UÖÃ$$¯ …Ì8(²…ñES‚éDL÷3‰‚¬t¦r˜H$211a:%j—Nèj• ¥ÛÕ? °‚: ÕxÛêUÁ«¿w§¶âl:¤†3b[5d¨úXÙÉ *¨óPÚ¯«Ôw“¶&JZKLìLIp$½Ëªnïõ¯¾Ke˜¡ðg;Ý®ìÔT*”W¿¹ü(&Óª½%% ²¢3ÓÝ°s¤Uµ©`aÁ^ “ôT¨Œ€"‰{6æM ¦š1CžàÍç1l̳U îéEQêËÃ׺¨†Šù•¡«h†VA†jŒm•û(÷zî£3e 2v¶aJÕÛªáCiœ;QǘUA‡Òr]•=/KÚšØn´k·åÝ@öBùS7¸áÜß™/Ò<Ô+¨ÃPø3ÈùI¬ûOÑÌKÈÍŒÉì±&Àeˆ äßÊûcNtÚÁ¿Éůû#W&C`§ÌkŠõ ÔL'4`_îÕMÅ666Vï”àžN8;;«I¨ ennž››knn®“hXA†b~7¢¶zžò¼øáK+g«œç9ä, S*¼®¸ @U¶Ô1¦AUPç¡´\WùWòÀ7Ôì211qÖ>q×­Š¼ k7ëz-•a†jŒ¿¯ôŠ< ÛÖÖ¶±´Õ‹;/ÆÏÑž<>œz´5w2¯x^®å¼mÛ¶%0ìvæÀ¼ ]ì1Q€ƒš®S‡›v’5tèPöÞßÿ½_¿~êG""22rË–-üñ!Cô]CסC‡ììl‡»wïê»,ïì—ï}¦v \Ó·aN‡×111cÇŽeo9zôhÿþýõUçåºÊ¾‘ýøJVç°.ïõ}ÏÿD¦ú{úù™Ò–ª ò6ú÷UÃ+**ÒÕüéPœ[,/“[¶µ$_¾xøâ?A{{¯êã=ɇËۙ܀ªŠÙ vÖ èèèÁƒ³ãDEE 4H'5B {'ª¥%o&#™/•Jeƒ”¨Ñ1bĈ#ô]ŠFF}±FAåg¡^áuÅ…úšîdf¤^ Ó(h¹®ÚtmÓ¦kæËŒ³÷þ—ö^/'KGˆ*Â+Š kkÍ]X†É²õë«:~Ó¥¬ËY9·²z9uëÅñ{­2‰ø¤r+…=MþFÐŒ¹âišV¿úɤ"æKõÑPqÄ|xÓHÿ<7d:¸Àt¢>ÈŠdç¾=›ðëV[ÿqD³mÏÆþû q!4Òr¥R®Ì¾‘u)Ómˆ;Ç7ªgì.‹êCMþF¨秲Qå ;¡ºk¤ž104˜Nè\Êñ”¨å‘@ÃàõAþ¡ï3Ÿš3¼¢š°æõü`^ÏʲʟºlþsåÃ=9&Ãä¡™Àßµ¡±S¡Z`Ï]ÓwYÞ3ÙNßAoiüø¿GµvöÛ¸sßžíâ;àËFæºy–pãÕ¨_!íb×±xÏÂw’ùRl*ö›âþûs… ­]Ó¨-¤ø!„Ò 79÷Ü·g»†uþÃÌ%PÓöðÒÃóߟcoÉ»“Rûæ¸êzWØ;BiqöOȳlcysÿMöv÷ wcKc}• ¡úàâ{rÁ‰¿¾Žñ}_.“ß9ž’æì%2ÕÍó.PÓ†éB!¤AæåGÊJeÔgÿSÙÞÒ»%¦¨‰ñ™ÐéYú³K[.]Ú|‘lñþÐ{к ý– 5M$ø÷ؽOn=žtowܼ› 4û¶iòõGýš`ûI?Ú%<=žø,ê‹ýïT6ƒæ ¦wÊ©*¬Ú?â'Ž:ÇÐÙ(éXb¯ Ç,ÇZIZNÒ±'Ù·³/WÖU¡qʹºöÊ“ÃÕ ÕTôUSN§<Üÿà³ëóµÌ´$-!tnñÙÔ3)ÊzÊÊ:Ê ¿<´kél¦ŒÌ"ÑÞí­ÑÞJí­×C¢]IKÉd(t«IR‰vÐ%t“t!¤¤¥äìL>u ¹ËagÚ¹œN š;xÐÜÁíôѼ÷¼K«.Z·žqØŸÁd%špðÎ÷·=7ѹmú•9q9/.?ç×ðÛR«ÚòÚ˜ÍÑN³œ'~? !Ä­àóËõõWm'ÚRÑ­‘—›z6uÊO¾öÓíñÓÓ¿ÿS<.™ž’ç%±_ÇÈ+·© §2§rØRWÏR¸ãïåЋÚfÚÁçf)¨*ðªxN?úäðc§œÀAb_Zu±2»ÂÎÇNÒ¢Jž—<9üØeÑб_c0Å)ÅÆüzçûÛ¾û§JZTÆõŒÔ3)n«Gº…Ždɳrîfó;úà§û®Ë†KZ”tA´·D{+A´·D{ëA´KDZѺŠn;³‹ÍRÖUf²þù‚‰Gž\½„º¶îjöìêâêãÇJÓK¥òYéWÓkJjF­qÇó‘÷rèmäl”z&…Þý(rrËÒKu,tÚX«üÇù!—CñS%m¥~öu•uå™å4ªÄVf÷ŸúÏÕcm íšâjÚuk¨k8»àôy.š&mºV™S©mÞÖ …*H,xõ׫Qáî ª !ŽgÂ÷“l&ÚÒ(ŠÁd0YLòßËë×Ò§þê'§ qêþöõ[„Õ8+|É`€V_Mn%—F­2o¾dÊ1]eɳB¦#Ítmt3£3i%]í­ÑÞJíU ¢½• Ú%"­h]E÷i jà6<¿ô¼,£|Äç#ñ’¢”¢Ìè—!ƒyr… B“¡}ðñ¥EFFFÍ/©Ì®à¨s üÛuUÛ\;÷a.·‚«¬£,iåÇmñ¶ê}%é{©”´”<6Œ¦Ný.÷BˆÆB‡€vSú“¹YEvÅ»ÜwäÉŒ†è/oÊ)ȹ¯óÈŠ¡Ôã×ðkKk9ꜧ‘O« ßk[èX{YÓë`V‘UÎ`1Ì=,òÿÎ+I+QÖS1eÖ˾íºa5%5—C/ ¥n¨þ±u† 5lØ°Æ/™4“W’|ø±¡³‘G.ãjzeNåù.4jR[V£Ö[MQãß?½Aƒ¬¿²h%]í­ÔúhoñxÕ‰ÑÞ ˆöÖëÄhoæx…Á±½5 ÚI-¯@WÑ}Ò‰ÒôÒˆþ;B"j˸ˆ ì|û7îKêø©Sîƒ7 ܆«ÜZYr¿~ý<<ôèTÈ §g%-¥¤?“ªŠ«L[¥»M(ÑÞâñª£½í4t|´7s¼‚c{ëA´“Z<^®¢û¤JÚJγQ—ÜÛwëÛ¿rîf›Ž4kcáÊÊÊ_~ùÑ915‹žR—ðÞ×!„¤2Ý^¥]H»~È{ûçÙƒðèÚ\— w]6¼¡®aï௅_µž`#éžiå-3- OKÜ:/ä jùïrß)i)Izø3u3]öh~Ì”cZ{ÛXyYg\M¯*ª"/¹µSŽ‰¶t8n×±Ð0Ãþþñ•Ù•´O÷÷Ä«¨ZO°¡÷v„Г#_\|îwpºíä~!‘@ôÓÐ=q;ïÒ8åhk„œumýµè/oÊsä-ÇZž;$ãj:^¿˜Ô§E– ˆv¬ùãD»¤ Ú[Ží­ÑNÕüñ tÝ'h Ï-ý.ÿ}{Z/ÕWqù5|ò Y]T-Ç‘“ÊœÍmqçûÛw¿¿30ÐqìWã8êÚåÜúö/>ŽŸþÓ+¯(ïä·ónev¥¤­Ï%i%µeµ{í&—T¼ªØ3h÷ä]Ÿ t¤]CÌÄÅ$ãjz}u=’°g,îÿÚgXr žÄ½ŽÖØ8„Puquê™×eÃi_CåÜÍQÔR´öþç¤Å”c:Ìxç·ßå½Ó0–ø®)†ÎFónÎò…L9&ƒÉˆšsR×F—^Ť>-²T@´·D»D Ú[ ¢½õ ÚA÷Ó£äÕ_Y!swóöþ ‹±VI&½yøÆrŒ%^’q=Ýt¤í–P©(N-¾ûý—ECÉQ´½¾ÿºúLyÊA•©f¨æõ7ÔëìÂ3…IK–“WÑ^ÞÈS”Ó2•xênû^¡Ìè—äi/ûv6b0t¬h”3£_Š¢3hv¸Ç8êÞ;^my-¹+³+ñrI‹zt !åô³9W>Ã1É­àfý•5j;ZIwZdiho=ˆöÖƒho=ˆöÖƒhÝO÷I'êÞÖ%OÂ܆‚Äü”Ó)ÖlNSÔTª.©.zV¤c©#¯(…†<Ë1–š¦š××]eïñÑì«yoW\UA•ïþim/¹-rîd3噚&šäfÁl¼m$Ä1ÐñÒª‹±[cœgðÏ/¤½¼ñr€ß¶²Ä½3ÅÎr rlìBÖlÒÎ¥Þø¿ëÖº²•Ù)QÏÞ<Èu u£1 Ðf¢~ý»;îˆD„Åh‹g§’Ó.¤:…8ј)˹“­ÚKµsäÙùöO;—zqå…¡ ‡êÙégÞ|ùübšÍ$[ŽšÄ§-3í¤Âû{ã]— ¯¯©¿´ê‚V_-z‰|lZäÑ=;±Ï+D{ëA´·D{ëA´·D;è~ºO:QUXuyÕEüX^I^ÇJ×}Çð•#¯i;¹ßó i¿ùuÖÅÙ&Cû4^AR,6+ètÈŸ~GL9Œâ¨s&íœlèÔ¦‰#Ú.÷áQƒèú†kbË{Ù÷’ôHê0°âUÅý½÷ïï‰ÇKìgØ{}ë-ŠÒe7ÅîÝ›·q;ïþýÛ#„b0†-FÇ—ƒÁ˜q8àì¢3WB/á%öþc7£W1‚ rârúÒº+•õxëñÛ¼omûëxÀŸx‰åXKz·—²ð´¾rÄíí·âvÞÔ õûéùì›J¯s­t§E–ˆöÖƒho=ˆöNÑÞzÝ>ÚAWÁ w«µ®ŽÕ%ÕªªÒ͹+^UðÞÕõØ»-½*e·’[þ²œ msíNBª¯®/K/e±YÚ:4®¨‰©Ì©¬.ªÒ±Ò•£'¿†_š^Ê{ÏÓ6×ÖìÛ¦;CU—T—g”iôÑÔìC¿œ¨9'ËÒË–vKÌ»‹õlôÚR=™ÑÞ) Ú;D{§€hÝI÷iƒÉt‚ˆÖ ×°ÛU(i)™ 5éìZˆSPU0lÜòz­£eªE£{n»b«°Iç¶>ªúªªúw‰#ãÓ"K D{§€hïí¢t'Ýð": ý(j(VUQ—ÈδÈHD;è9 ÚA[@:!ׯ_wvº ØV­×µ¶•Z/Un9—_Ã'—ÈÈ´ÈHD;è9:7Ú»Öy4éDk½|ùÒÔÔôåË—]‘.¶Uëu¹me1Ö !ôæár‰,L‹ @{€h=G'F{—;‚Æ h­ÚÚZòÐ<ØV­×å¶9-ò›oªŠª®†_©*¨¢7é 2¢ôí]î<ë¡C±ôÈæ´È´ˆvÐs@´ƒ¶€t  c¥ Ë»÷´È`í ç€h´A: £{O‹ D;è9 Ú zh‚t@¤í¢ªªªå•º îú½Úl+=œ{H'¤I(^»vmÆŒæææ]—vann>cÆŒk×® …Âή‹¬ƒm 'ƒó`Ïé„t¼xñ"<<ÜÀÀ`„ §OŸær¹’–````nn^]]M.¹té’¶ö?#¢F½cÇ„……ŹsçÄÞ›˜˜(//߸̃º¸¸HZ“fp¹ÜÓ§OO˜0¡W¯^ááá/^¼bá­¤¡¡¡ô®®®§§grrr3ëgdd<~ü¸ÃªGê¬muãÆ %%¥ŒŒ üT(öêÕËÃÃ\áÌ™3JJJoÞ¼ùHÍñññùöÛo¥SQÝš,üfÒ‰6yûöíþýûûõë·cÇŽòòr„A4Šª««ËÎÎÞ´i¹D(’iÉÒ¥Kñ/Â& '¢Éå ¾¾žFeš?¨¬¬lÇŽýúõsvvÞ¿ÿÛ·o¥û)ͨ««Ûºuë“'O?~|üøñòòr///‘Hô±õÿøãÍ›7wXõ¨:e[¹ºº644Ü»w?MHH(//‹‹{÷î^g``ЧOzåÓ o=P§ÿf&Š¥C(Þ¼yóСCçÏŸ'›ð¨my"‘èþýû-–ãââÂbý{ûúO?ýtïÞ½ÁÁÁÎÎÎbkZYYiii‘Oÿþû襤¤~ýú1‚\X__ãÆŠŠ wwwSSÓÆ÷äÉ“ÔÔT;;;'''&ó?™¤P(LHHh±ÂÔ_íøû&%%-]ºtÅŠ>>>sçÎ7nù’““ëêêZ,³E&&&FFFÔ%†††¶¶¶¡~ýúmß¾}„ ¯^½’——ÏÏÏ'7HeeeRR’±±ñëׯËËËïß¿ïêêŠ*((¸wïžššš›››ŠŠŠØg•––feeµ½Î¨c·•¡¡!™¨ªª2$>>þ³Ï>CݸqÃËËëùóç111~~~¡{÷î3¯\VVûîÝ;777;;;„@ ¸sçÎÈ‘#SSS ÆÀù|þÇß¿ïææÖä§åääЮ<€nI¢ó èÚÐ:‰‰‰¡3gά]»VGG!$'×Öd¬ªªŠ,_MM-22rÆŒÎÎ΀ ˆsçÎq8üª««ë¶mÛ‚033suuUSS6lBhÁ‚A<~ü˜Éd:ÔÊʪoß¾ŠŠŠ/^$âçŸvpp B$Íž=[^^ÞËËËÈÈhÒ¤IµµµÔo×öñRxkèèè¬]»öàÁƒm,ê›o¾¡V•ÍfGFF’O—,YÒ§O‘Htûömƒ‘››‹—oݺÕÖÖöðáÃ}ûöÕÑÑ &âäÉ“JJJƒ ÔÓÓ=z´¯¯¯šš°ŠŠ „мyóX,ÖÏ?ÿ\UU5|øpyyùAƒikkÛÚÚ~ýõ×bmïÞ½mÿ zêyðÌ™3¡ÄÄÄVþ2Z'$£¬¬¬¥¥¥®®Žû5} ‡ÃIJJj±4%%%±%»wﶵµÝ»wïÊ•+?ö.6›]PP ¢¢ráÂœßËÉɉD¢©S§†…… ‚… ._¾|Ò¤Iä[Ž;vúô霜CCêª*''§ƒ._¾œZ“Ötjtttäñxͬ ®®®¥¥ehhˆ:sæL¿~ýZ,³E8y£Ú²eËÏ?ÿLÄ›7oòòò.]ºÄ`0FŽiddtæÌ™U«V!„¢¢¢‚‚‚fÍš•‘‘ñìÙ³#GŽ”––Λ7o÷îÝóæÍC-]ºtùòåwïÞ¥–B(77÷õë×FFF[¶lyóæMVV–‰‰Ill,Ù¬AèééI»òº¥Vž•••;¬J @:!==½ðððððð„„„Ã‡;v¬¦¦†Åb‰ÍZÀd2mllh”o``ðÝwß­^½÷KiÒüùóq/O>ùDGG'!!aøðá cÅŠ C^^>88ø÷ß/..&ßrúôiWWׂ‚‚‚‚„““Stt45`±X­©°X)üF¡P¨¢¢4{öl<ò§R¦¦¦ô6B‹ÆŽ‹{.UVVÞ¼yóÓO?MNN611ùôÓOOŸ>½jÕª—/_¦¤¤\¸pú®›7o ›G!„öíÛÇãñ8¹ŽººººººT*Ù‰ÛjèСŠŠŠñññ|>¿oß¾–––úúú………/^¼¸wïÞ€tuuß¼y“œœL6,Œ5JSS3>>~êÔ©¡°°0ÜÁììÙ³&L011Ayzz7þ8MMMMMMiU@÷ ÑytiNÐäâââââqáÂ…ƒÆÄÄ0Œf·Þ¼yóŽ=º|ùò&W ï2 SSSÜOIQQQAA/733CQ'‰ÊËË«¨¨ #—888´±žL&“ ˆÑ£GöÙgS¦L¡þ(ooÆ ó÷÷Ç/^>Óp8j§X‹Õä,ˆvÐEA´ƒžC¢hKžE"î××ÐÐ  åä¤{_¤–qsDCCƒ¼¼ŸÃá´S- @ÀãñðÙlÂg&“Ùx>ˆvÐ¥A´ƒžC¢hG”D‚ìæÄçóqØËËËwÎw uÈä!Äf³qß<ê¤gR«6 §¶bÒªíG)î¼A½|Õí khï®êêê=z”••õ±¿immmEE~, :°vƒF´‹My,ø¢È8êu.ãÎí•J'À„¿RCCƒ@ zýºÉ“'kii‘³³“~üñG•¨¨(©|Š‰‰Ixx¸TŠêÈ@Å;!FíbÛD»333 --­!C†>|XÒI°¬¬,òwÔmØ°ÁÔÔ´ —}='ÚãããU>¢¦¦¦³k'âââׯ_7³B||¼“““ššš‹‹‹¥¥¥ššÚ¤I“Š‹‹©ëøûû«ªªÎ›7!ô矪¨¨544ЫR»î¡R$Q´‹µÅ‘ï­¯¯çñx2íà¶8«8tɪ¢7NéxtÆNPÄñÞËçóy<^Ïé§NzùòåóçÏÏš5‹º<22’Á`Lœ8Q*Ÿ2|øp ©Õ …B'//////äääðÜÍœu ÚÅp¹\“… â§EEE7oÞœ3g—Ë]²d‰¤¥ 0 ,,lëÖ­Ò®&BÕ××s¹Üö(¹Kè9Ñ. kkk?ùä±—ºÖ¨ððð‡fdd4ùêÉ“'gÍš¥««áèèXSS÷ý÷ß;99]¼xqРA¡ÜÜÜS§NÍž={íÚµ¡={ö˜™™EDDÐЮ{¨Ií¨ÑäNd×¾›ND>‹œaþÅO/Ž62ÛiVZ[J¾Êf±-´-– Y2kà¬ÆÝi®‡ýü÷ÏËk>ö\๠Ñ"S"sBsÚµþ=>2ËÉÉÉÉÉÉËËãî|Í_*êô‡‘i™õðÙ?üüü–.]zêÔ)j:‘———¢¤¤$•O‰ŒŒ”J9=õ²«Dy>>#FŒ˜7o^RRƒÁÀýš‚‚‚lmmBùùù“&M7n\gV½CHíd.A~èÑÞ"AmC­Pôϵn×DÝdáàWŽª‹nfÝœsn—Ï]â"~¨¯Ö×6Ô®s['ÏüÏÈKmKü*·¡ç^Ù‘:œý2 òêO‹És 9v‚  öY”nåºUUUŸèèè·oß’ OŸ>MDpp0~úË/¿xzzZ[['$$«…„„;vìÒ¥KîîîçÏŸG=yò$,,ÌÚÚzàÀaaa<¯9gÎœßÿ?æñxk×®µ··×××3fÌÝ»wÉýýý£¢¢¢¢¢ÆŽkmmPTTÔÞ[@öá“ ŽXj 7ÿ.ˆöæq8œ~ýú½yó?mÌ™™™Ó¦M311177Ÿ;wnII B¨°°ÐÛÛ›ÏçGFFâ÷6¹&ÆårW­Zeccccc–œœL¾tòäÉ‘#Gêêê:;;ïرCÆ/¥wˆvìÀ .ÌÊÊš;wîüùóBA>|8 ÀÜÜÜÇÇç‡~¨®®&×ñâÅÌ™3œœ–.]š’’zùòe„Prr²··wjjêÆñÑþÝ»wóçÏ·µµõððÀ«aïß¿_±b…““Ó AƒÂÂÂÈ“.$77wýúõNNNÎÎÎ_~ù%þ£,[¶,&&¦  ÀÛÛ;--Mì[ìܹ“ÏçïÞ½›Ì%°Aƒ­X±"999::úÊ•+6l@mݺuóæÍ~~~111~~~B¡°´´4""ÂÍÍÍÌÌlêÔ©/_¾l¾¶Mî¡2«ÑN†:Œ¢2Õ4]9l%þ·}Üöûóï›kšïz°ëcëoµq‹çê¿àÁYáB,\[ííM²t‚h4½y%vB„PpppCCùsçÈ%QQQFFF¡ ,Y²DIIiñâÅ¥¥¥îîîäéçöíÛ¿üò‹Omm­®®nJJŠ««kNNκuë\\\:4wî\¼æ¥K—ð)‘H4zôèC‡nÛ¶MQQÑÝÝüèØØØ/¾øbåÊ•îîî~~~/^ôõõíÐm!“È QøÊ«XçZ±½¢½•***¢££ÍÍÍñS±`NKKsvv.**Ú´iÓâÅ‹ãââXYY©¨¨èææÆd2]\\B[!$ GuôèÑéÓ§?ÞÝÝ=??!´cÇŽ€€[[Û;wzzz®_¿^¬·aÑŽ¥§§_½zÕËËëêÕ«666¡íÛ·ÏŸ?_ lܸÑÊÊêÿþïÿ>ûì3¼ò³gφ ’––6a„ääd77·¤¦¦"„***®_¿Ž³ˆñãÇ?xðÀÇÇÇÕÕ599yúôéÓ¦MÃ#Þ¾}ëäätäÈ‘Q£Fùøøœ9sfØ°a87Æ…à·™™™mÙ²%""!äè訧§‡÷ 555±oqûöm###77·Æ_pÚ´i¡§OŸêééYYY!„lllÌÍÍœœØl¶““BÈËËë×_õ÷÷Ÿ3gNzzú!Cjkk›©mã=T–Ií$2 ‚À}Ðñ\±Xñ®„#Ïé§×ïÍû7m)„ ˆÃI‡N˜G˜û÷ùáÞÕõÿ&óÇŸ÷Ǹ¿Øz{ë³âg!gBJkJB"‘èTê©™§fÿ`<êà¨)'Úúeº2ÜŒ†Ã•ø0mF§§ÿ¹Õ"|ˆ:yò$A+W®d±XoÞ¼Á/ååå±Ùì­[·’…LŸ>ü½kccããデ„„XYY5ùÕÕÕGÕäKååå¡E‹qÿþ}„ЃðK†††Ÿþ9A¸-bß¾}xyYYÙ!CîÞ½Û|m‰ÿLÒhçóùuuuïÞ½+---((ÈÌÌ|úôéƒbccŸ?ÞYߢsI:‚6¡›™7ñSýíúŽL ®P^[ÎùŠc»Û¶ñ{—]^†6¡šúš&K½ª·ýŸCñ·w¾•ûRnZä´CO­¹¾†½™=ýÄtüÒÿîþmB>ú¬¿¹¾÷w½¾7B›PVEA_ßþš½™½)fÓÏ~žpdó æÙ´³Òúâ]ÎóçÏcccãââž>}š™™YPPPZZúîÝ»ºº:<ø§SjEsìÑèª2‘u6‹5sæ̽{÷VTThkkS{:={–Ífûúú’­ê&LX³fMqq±BÈÍÍmäÈ‘ø¥>}ú6|øp±Ïºr劲²ò¨Q£ðS&“éíí}ëÖ­ÜÜÜ>}ú „>ùäüª½½½P(ÌÉÉÁj{,2P1ra‹ï"@´#„222Ö¯_³Ùl++«#GŽ=ú%˜Á7üýýñKÆÆÆööö<+³ù5¯]»¦¢¢2~üxü’……Ebb¢††ÆÝ»wkjj¨óLš4iÙ²e>1bD»|ù®£§E»ƒƒC¿~ý¨K´´´ð‹µzõjrXö_ý… …ùùù™™™‰‰‰õõõxILL̪U«ÈÆ… ~þùçÔ2qSB¨oß¾Ô§ø£qëÄÙ³g=<<455ñÑ^]]}ðàÁ7nÜظq#^yÎœ9ä`Ö<þ¼Åo'”••›| w…UQQiæízzzçÛo¿UTT?~¼ÙÛ¶ÅÚv 4¢ orJœ§>ëiÞ¼{óSÂOøñËŠ—×3¯ó¼5#Ö|l}ûŸìèßQÚ:Ê:<['úUô¬³~óù ?-ç–_θŒ*©)ùêöW‹/Þ7yBh³Çfï£ÞùUùxµ¨Ô(Wc×-ž[B /\paÁÓ⧾ýzhŸ ±ƒ³Œ„®†bS¥X³.*88x×®]çΛ7o^TT”“““B(33“Ïçã3UEEN' @. ***ú駟ƎËápÜÝÝ׬Y3zôhê_½z5tèPê w,--Bùùù8ÐÖÖ&_ÂçÑ;aI,\i N…hG7îÊ•+ͬ@snn®@ ë¡aiiyëÖ-±·4¿fvv¶u:<‡Ï‰'BÔÌÁÄÄ„Ífã~P=\O‹öÀÀÀ ÅÖÖÖîÕ«ù4---"""22’ËåöêÕKCC/ÏË˸µ SPP HBd9øŽQd?Œ —ŸŸŸ——'Öa‰z)GìàÜš#³……Evvv“/½zõ ¯ÐÌÛÕÕÕ¯]»öÅ_Ì™3!dooÊçó[¬m— i´‹]X%Grã~#Vm—Q‘±>úÕ#ÛJÇêȨ#Í ‡o9ž:[UAµñ:Íù !$ ó«ò3+2 ë…õ¡¸7qÜîÇ9ÿ|œ{žó¼¿rþÂOûhô¹˜qqcÌÆ€vzv¿NùUJ_±K"û R ±\ºãµõfòÔ ©KœrÚÎNž<éååõðáÃ;wâåjjjªªª)))øF†$}}ý&ËY³fMXXXbbâ7:4~üøgϞᎿ˜ŠŠŠØèjÛª6†+D»¤ðõÔÆjhh(ÑšŠŠŠb/UVV²Ùlü®ââbò:4ÎÛɽ 'ƒhÿ???‘HtæÌ™!C†hii­_¿~ß¾}!ü“šiUUU¸+©Åã*›Íf³ÙS¦LÙ±cu9uªVç=zôÅ‹èÿùçŸ cøðáÍ—àîî~÷îݼ¼¼˜˜˜'N¬Y³F(®Y³¦ÅÚv ´Ã•Ì%ºÇÄÒ5Î|Ü•à殉ùnÜwÊì¦ÛÐHi¥i÷#"S"¹ Ü^*½48ÿ$ó9osЇ™ °ÞªÿÆóù-ìzXăˆoî~£¯¬?ÅvÊî_ª‰ŸGz<¶ÅbQ3ŠÎ®TîŠMî´²ð5dJppð­[·öïßû>á…vvvÕÕÕùùùF\¹reéÒ¥bÙöí·ß†‡‡3 ggç 6DFF644<}ú”ºN¿~ýž?N=ó=xð@OOÏÄĤ]¿]÷@†në¯×B´Ó ¯¯¯­­û‹c555©©©ÎÎέéààðêÕ+²Í!77×ÀÀàÀ¸‡ILL ù.Ü…ÏÁ0ˆvªG¥§§oÞ¼yüøñ8 MLLÄ/iiiiiiEGG“+ÇÄÄHº˜L¦­­í½{÷ÈC½¡¡áºuëŽ=Ú–jãûH¬Y³†ÏçS—?~üøèÑ£Ó¦Mëß¿3o7n\uuµ±±ñœ9s®_¿nff–ÐNµíD’F;õ]©ó;á÷&îLÀ™Šu…k §ØNÁËUÙª¡¢šÒ¼zûŠ|¬«¬ûÇ´?JÃK¯]Úoê±äcSŽOéàšËÙ W‰gvúX{J÷»‚EÛ§Ÿ~JÄ÷ß?nÜ8²ñaÑ¢E:::_|ñE^^^YYÙöíÛÃÂÂLMM›¼LÕ¿ÿü166– ˆ÷ïß>|˜Åb9::R×ùüóÏåååW­ZUZZÊãñ>|ýúõ°°°&ó€5½‹jˆv©X»víƒ8PWWWZZºhÑ"ƒ†_ÕÑÑyòä îÅÑÌš¡¡¡l6;444???))iáÂ…l6{êÔ©ƒŽˆˆxüø±P(LNNþòË/,Ö3°g‚ho’­­­ŠŠÊ•+WÞ½{—““~ëÖ­†††ºº:ô!—,YòôéÓÈÈÈE‹ÑhIØ´iSaaáöíÛkjjƒƒƒ###‡Úâµµµ qe¨úõë·víÚ+W®¸¹¹EFF¦¦¦&$$DDDxxxôéÓç‡~h¾d''§¿ÿþ{ëÖ­x\òåË—srrÜbm©{¨,“4ª›,AF®òvcò¥—§oöØ<Þr¼–’B(±ðŸdÞJÇ !óêßkC7³nâ †ÉÇ&_}yU™­ìmå½oò¾¥C–&&6iÞë½Ápíb š]‚‘‘‘»»û_ýEœª©©yùòåÀÀ@ƒÁf³/^¼}ûö&K˜8q¢§§ç˜1c”””x<‡ÃÙ³gµµ5u++«S§NÍ;W__ŸÅb‰D¢ððp<‡ ²ãóÏ?/**Z°`ÁâÅ‹…B¡¶¶ö•+WÈ~Þ .üæ›o\]]‹‹‹›YÓÌÌìâÅd\K IDAT‹AAAÆÆÆ!CCÓ'Oâ1B§Nò÷÷|xTTT'~_ ãTUU¿þúë-[¶hkk3 ??¿›7oúúúöíÛ·¤¤dõêÕ<o×®]û÷ï711Ù·o_HHH󣜛:uêÎ;ׯ_¿a ŒÿüóÏ&çxãççwêÔ)ggç»wï6^Û¶mønä] p?¥ß~û­ñIJb¿ùæ›ÐÐÐ;w²Ù캺º©S§®^½ºÅÚR÷P‰6‚,#At›5€DlumUØ*W^^ñ¶ô~Ë{ûóß?ßʹ%Ç”«k¨sïë>Øpð·w¿Eì;òDʉ³ÏÏâwɳä58›om¶×·7R7ʮ̾˜~q Á@y–|³ŸÖm5ÝÆñÜñ}0¾kžRÇãñù|.—[UUUWWW[[kdd4pàÀö«k7 ž?^ZZÚ¿<»/_¾|õꕲ²rÿþýÉ®ábêêêRRRø|¾½½}‹gðôéÓüü|6›­¦¦¦¦¦¦¤¤Äf³9Ž‚‚‚œœ‹Å¢ö†h—¢²²²””===kkkêü¡êêꆆ2›YS(¦§§3™L êKAdee½yóÆÚÚçA´7‹Ïç'&&ÚÙÙ©ªª"„ª««ß¾}Kí)Z]]­ªªZ]]­¦¦vûömr½Ö«ªªzúô)‹Å4h‚‚B+ß%‰ŠŠŠz÷îMx@Ì›7oRSS{õêÕ¿rºªÖ(++{ñâ—˵´´DÞLmÅöPÙÑÞvGŸ 9r3äæX‹±!ƒÿ8÷vnå؉åW–ïMØ[³±¦É±«¯¯>–|¬$¼!´ûÁî-··¼ã½c †Ÿß¢Á‹|#}Ù,vIxIþûü%——\ϼN b°áà û ¥W–¯-ÖWÑO)IùäÏO^¿{­ÂV©á×XjYž8mo`/Ý-ÐUHíF²tUjhh€tEÍì„òòò,‹ÚU ¢tií4Lœ8±¾¾ž±zõêÊÊJrö' ›$ŠvH':_ÀO,J´Ó³ÃS?U×W¿­{k¢aB¾*"DyÎ¯‹^‡“„P½ >µ4µ¨º¨·jïúzlÓ’Õt‚ÎG2(ðSr¡”k€T5]êÓV¾A´ƒ®¢†9sæ̘1ÃÂÂb̘1999±±±û÷ï‡\BöшvÐYØrì¡Æÿ%RUPUUP-ª.røÉaã¨+†­@5'hðo^§ §àÜ[| ;ÚšÁàÝ•ÉdÂ~ d_ât!í4øùùeffFGG'$$¸¹¹mÚ´ î‡Ø%H®ŒFPLžeJ/Õ^žfž¡×CÏÇ÷iᆌ q£Dg×!é™÷“ÿãaUUUÓ§Oo* EQQQ,K,Œ›Ü!!ÚA—Ñz‰¢Dþ Ã-rrrùùùB¡°Ãª €¤pòL¶ÅÉHF!Y:AMúñŽ*''‡èêêþüóÏeeeõõõx¶‡§ ihh©;ƒî ‡"þ$//'ôàp8xÆ]]]]]]¼ÊÉɉu´Û!!Ú,ƒh=‡t£5ênÉ3èZÄ’gYh© ßÙ©qNobb¢¡¡QWWW__Ïåry<^CCŸÏçóùxB|?é~HÔßl6›ÍfËËËs8%%%EEE55µÆ9}‹»D;Aí çhh' ?ÕÑÑÙ¿YYÇÃÑŽï#Ž“g‘H„£îvÚ õðËd2qò,''§  €£Ãáèêêêèè4ÀXsé ÅÆ_FNNN^^·âlmħ¸‚Úy‘ _Áb³Ù8&ðé_µÂë0$®Ñd D;è9¤íŒF­付L¦‘‘‘ªªj]]Çkœ< ˆvЮÚ‡'ÏGQQQ]] uò†*£ºƒÑ;AîØAà]ïZ8}'÷dyyyœÓóù||í ú#‚öF¶ý‘ç²5ãp88hÉKYͤõí@–A´ƒžCºÑŽ‘ 3ÎU8þD‚ pÀ“5Ù@Ñqßô0ä¥jòÌáp”••qp’»€¼¼<¢ì[mú·±#[XäääpßY‡#‰pã8Þ dÿZ²s-ì„ ýP#“ì_‹Óz6›Ï7x!y)«5çˆv ƒ ÚAÏ!õhgPàP'ógÜ×Áyµ@ àóùx¤A8y†€íG,Ùò@¦ È}Àüïð‰Îªy›ncGM¡ÈR!&“I‹Å …øÛâ+XÐã´ê¹¼ž„Ï.øLCž„ðîÇ’p6}ˆv ; ÚAÏÑ~ю㜠²£N-Øl6f<"Kf×0i2hodVŒ£÷zÂ]ûpvÁü/IðíRg‰ÖÆû3Þ÷ÈÚ …Bü}ð ø’›ÍÆ®@ ÀgèqÚy¾a0dÖ.O/b‘?È}’ÑT_[ˆv Ë ÚAÏ!Ýh'Ë$³œŠà`ÆØ:¯“C&ÈaB8Ç€€íÇ*™$mÂ8 ;ã᤿DmèÄšÓ;³yüX(²Ùl@Àøp[ ²‹!ÙN¨{ h?d’×™ð)︹Íf3™L6›Í Œ4ýXfÑdD;è9¤í“gœEàåxÜ»IAA÷q¢Ânä¹É»Ü>õ±KÇפK#s`2§%ód24yî·NàøÆ»"Þiɪã—äääðùçúäùzÐÞÈ´ž<ë½É’l¶&z|þ@Žzí@–A´ƒžCºÑŽ1™L‘HD–,÷á¦Úl6/'û¦“}œÈhoã´ÈÔåc»êfÿØcÐŽ[Ædª@2„›&ÈÞ}ˆ2¸¨«ÝÖ±rrr ä‰_ÓÂÓ’gê4Ýlo2…î7Eþî'£6D;Y9IžÁãñBÇ·±±¡W²ŒKOO är¹Ô; ʵîÎå@,¼ÅZuh\*jWmšÙ 5ên‹÷ÉO>ù$>>þÕ«Wêêêx5¼îÙ³gãÆôóókãç"„LMM¶mÛÖö¢Z”““3~üøììì#GŽÌœ9“úR}}½žžÞìÙ³wïÞZ»ví/¿üB¾Ê`0 ½¼¼¾øâ ±bããã'L˜@]¢®®îèèøÕW_ 8PÒJÖÖÖôíÛ—ÍfKúÞÖ°³³›0aÂ÷ßOïíùùù«V­ uuu•nŨîß¿?jÔ¨¤¤¤P—‹³èíxMF;A3gÎŒÏËËCÅÇÇ{{{SßÕüßÔÒÒ²´´”|Êf³-,,-ZB£’YYYšššíôËæc ¶ Ì;÷Ì™3ä«šššŽŽŽ¾¾¾!!!4>ôĉ .<þ¼‡‡½joܸñĉYYY’¾±OŸ>sæÌÙ¼yó;w>ùä“7n :”^šôüùó &¼xñ‚Çã©««8p`öìÙ•€wySSS±]¾]£],bI?ýôSPPê´–bç‚™3gž>}ú“O>¡Æ¼´ªqüøñ Ô××s¹\|WòÎR\\Ìãñúöí+饵É價ÑÞdœ“È’¥µ1m¦æ¸]‚:ÉÆÆÆÑѱ-åË>âÃ,懻³Q3ŠÎ®L#·Ùø@n4I$°¶¦˜ØÎ}ºgÏž”””˜˜±¿:A\.7 `È!!@ðêÕ«¨¨(ww÷äädSSS‰*yçÎ)S¦$%%ÙÛÛ·õ 7…ú5%%‰fÍšu÷îÝ™3g¶ëŸŒI™ º\Šû›X´Áãñjkk™¦Ä‘èoÊårMLL,X€Ÿß¼ysÞ¼yuuuK–,‘´n Û²e ý¯÷q ±] ¾¾¾¾¾gAäååÅÅÅ}öÙg÷îÝûå—_päÖ …\.wb¦Wm¼KÒx;ña¨€¶¶¶»»»¦¦¦tCwÅŠË—/WVVær¹x‰¤åã]þéÓ§b»|»F;—ËíÕ«—ØU„Pÿþý»P¿ÚGKê¹ ??ÿôéÓ³fÍZ³f ½ïÞ|5~úé'33³;wâ[³Ñ(_Z6lØððáÃôôtIß(•íLݶM¦’Öª1j.A6V4.œ^RAmÜ ÇiP§Gëö¨¹5‹€Šæµ²-NFH'3}úôeË–EEE‘Û F^^Þ£GBBBTTT¤ò)'NœJ9­QXX¨©©9gÎœÆ/QG¡]ü+\çóÏ?ßµkWjjªƒƒCã÷zyyQ¯JΚ5ËÕÕõСCß|óD•üØ/iiÁAL¯ðmÛ¶%''£ö¬Fþ:l7k²Á±õSƒafföù矓K¾úê«þýûÿøãË–-£W™€Æ»€œœõ‰D¢°°°ˆˆàà`‰>´íQM{›o8pà•+Wè}úÇ\½zõñãÇ/^$¿ïØYÑnmm½uëÖŽùÄvB{›SÏ<@ÛÙÙµG5 &Mš4~üxz…KíH*Û¹4ùû¬qòЖt‚A&ää³Ý¾³8žD«q3¤ÓNÉs;i—Ÿªªª>>>ÑÑÑoß¾%ž>}š òÇÄ/¿üâééimmœ@®rìرK—.¹»»Ÿ?!ôäÉ“°°0kkk|å÷5DÍ™3ç÷ßÇy<ÞÚµkíííõõõÇŒs÷î]²@ÿ¨¨¨¨¨¨±cÇZ[[}¬æ'Ož9r¤®®®³³óŽ;ðþÿÿ÷—/_ær¹~~~qqq46ˆ““Bèõë×­YÙÁÁÉd¾yó!”žžîííýòåËo¾ùÆÖÖOŒÝd%Ož<ùå—_"„–,Y²ÿþf¾öüùóÉ“'÷îÝÛÃÃcÇŽä_ª™-IÛÇ¿þúkܦ™áÁƒ+W®ìß¿ÿˆ#Ö­[—’’‚—'''{{{çææ®_¿ÞÉÉÉÙÙùË/¿¤Öÿøãooo—µk×¾ÿ¾í–:êß´E§_¿~Í@ffæ´iÓLLLÌÍÍçÎ[RR‚*,,ôööæóù‘‘‘¸¨&×ĸ\îªU«llllllÂÂÂp²‡56ô0™ÌmÛ¶éëëûí·m)§ÅH8räÈ°aÃz÷îxêÔ©Æ%øúú:tˆ|zõêUooo²q 999((ÈÑÑqöìÙ?&WKMMõóóËÈÈ@íÝ»wÅŠYYYVVVcÇŽ½zõ*¹æ‹/fÎœéää´téÒ”””ÐÐÐË—/7ù]vîÜéë뫦¦F.ÿ÷ÿggggcc³|ùòêêjrMêªêêjooï7n4¹Ëw®&Ãõcû5B¨®®nݺuC† ™6mÚÉ“'Oœ8ñÅ_à—üýýÿøãÈÈÈqãƹ¸¸|÷ÝwAìÚµkèС7n¤þÝ?v6ùØÁ¿ÅM÷±Ã õ\ðÝwßmØ°!´uëÖï¾û}üT…züø±ŸŸŸ•••··÷¯¿þŠ6SÊÊJ??¿ŠŠŠ˜˜???¡PxàÀ… feeÍ;wþüùd Mîªm=ª&¿Â²eËbbb ¼½½ÓÒÒB%%%ß~û­‡‡‡­­í¼yóNŸ>M–@=ƒ¯Y³¦íÛ™Þ9W*0é¢vš"»< …B>ŸßYß®#544Ô××ã¯Lm©@” Ac#°sÿŽÍk¯ëÄÁÁÁ çÎ#—DEEáÐ ,X²d‰’’ÒâÅ‹KKKÝÝÝÉ“îíÛ·ùåŸÚÚZ]]Ý””WWלœœuëÖ¹¸¸:thîܹxÍK—.áß@"‘hôèч ܶm›¢¢¢»»;ùѱ±±_|ñÅÊ•+ÝÝÝýüü.^¼èëëÛdwìØ`kk»sçNOOÏõë×ãÎZÖÖÖzzz NNNZZZ4¶nH±°°hÍÊQQQ"‘¯üþýûëׯϟ?ÿ«¯¾²°°`0«¤±±1¾BæèèhnnÞÌ×A={ölðàÁEEEááá–––›7oÆ?@›ß’ôTUU®_¿ÞÅÅ¥™ÕRSSG7þüÉ“'Ÿ?~äÈ‘87¨¨¨¸~ýúøñãVVV!33³fNUW®\>|xZZÚ¼yó,--—.]Š;76S 6›íääÄf³ œœœ FzzúÕ«W½¼¼®^½Š‡í6³«¶~ëQ}ì+8::êééá# N€½½½wíÚåììZVV6}út2£ žÁ-,,Ú¾éseØ´Nx@v™É@ àïK½•í9²€Œ"Ú‡@ Ð××÷òòÂOsssñA ˆ{÷î!„"""È@{{{üÔØؘÁ`ܹs?ýúë¯ FII ~zâĉQ£F544¡­­½råJ‚ >ŒŠŽŽ¦hhhˆCV[[[[[»¬¬ ¿ºqãF‹UWW'Vá’’• KöîÝ‹Š‹‹#bÕªUFFFM~S|ýfþüùø)î ²cÇŽ½{÷îÝ»wË–- ÃÛÛ»ñ{ïܹƒ Â+ïܹÓßß_CCCUUµ°° ˆ‡"„ŠŠŠZ¬ä¥K—BÉÉÉ-®9~üx##£·oßâ—¶oߎ*,,l~K/]º´ÉÐŒO?ýÔÕÕU ¼xñ!Õäj?þøcïÞ½y<~Š¯øÞºu‹ ˆØØX„ÐôéÓÉcAeeeJJJxyCCýìÙ3IëÙ“'OVWWÇ[ü›ŠÑ××·³³ÛûÁŠ+ðo”C‡€ ˆ‰'öîÝ›Ëå⧹¹¹ +V¬ÀO9¾ôØüšø ýÕ«WñK™™™L&s÷îÝ͇ÍÇ@lð÷÷WPPh¼ÚæÍ›B)))­Ý¬AÄ‘#GB7oÞ$š„ââbeeåÙ³g“otvv1bA¡¡¡zzzx¡’’ÒÚµkÉuðÓ÷ïßãÍ¥®®Ž'€'_BÆn|||øÆáÿM›6|||:::žjxß8­í’%K´´´àùŠŠ ‰[·nÁCèÕÊËË rµàýòž¿w`Oº­­­©©©¡¡¡¦¦¦¼¼¼°°0//ïâÅ‹€¬¬¬¯-ã@‘••ÏÈÈÈËË+,,,//¯©©ihhhjjjkkƒcŒ¯-¦~` V'H$’««kBBœÒÃj:ÅÆÆR(GGGƒÁ`0ZZZlllrssß¿ï577·°°€ÿUUUY²dI|||[[›‹‹KRR’ˆÈL>nß¾=hРɓ'ÃC"‘hmm]UUUQQÏØÛÛËÉÉÁÿúúú§´´”KàÇ3™L[[[ôŒ6½%88xóæÍ›7o>pà@mmíúõ룣£ùŽ‰‰ƒ‚‚RSSÍÍÍÓÓÓÑC‡í•8!Ùlv||ü´iÓPOSk×®}úô)FëñMö–‹/ÆÅÅýý÷ß=à®]»¶ªªŠJ¥ÖÕÕ={ö,..€]vwwGWúôôôŠŠŠ÷îÝkmmupp€çEDDP›æ¯KßË›7o6âÒ¥K²²².\Àê· €Ífß¿Ê”)¨çDeee}}}¨Ã?äÝ»wi4ª“­¡¡‘••åààп¥€ èU^^þ3ãé6'"ü‚oß¾`óðaÃz+ç@Ðã7Å2cÆ |K_4TTT°ÙlsssìUMMÍÄÄD®[ðC¾}ûVWWû  “¨•×_¥€‹7oÞ¨ªª~þp¢Ûœ3<¶êPRRRRR ­ÊÊÊÁf$‰¤  Ðí]Xí èî.”ðË IDATÃáÀbW– T*•ŸÇ^¨€ÎU¦°YW]]]FFícù|S–ÏGGGçðáÃü®b¿N¹.--ž.À°aðöEè˜@$¹F_°ÿÑck"HåÏEߪA~Mîz{{{{{cÃCµÃ^!++‹NIôØòöLoÈ«W¯;v,))‰H$p9±åÒâãGÿ67ß8h¿k8ûÖ_àé7nÜpssC)ʘ1cLMM·mÛÖ[×8aaaþþþd2¹´´”Ë÷ýñãÇûí7@cc#W–`±Xp,5Ÿ@GY߸I€@;püUYY™žžŽaKJJJHH”••Uþ®¦ÅÏϯ´´ôùóçÛ·o/**š5k—»:Æe] [k´yæ7Gˆöþ±í7l¨¾‘î)Dp!qBÂéj¨2áp8uuu,«Ç7Ù+JJJ F`` šššššÜûÓÛÛ[MMWþÀÛ¶mó÷÷/--e0aaa\ºýˆ°*„Ö¤øÇ~VÞoÄ»Ë~H111l4440™Ì+ííí±±±ÆÆÆŸà“ÄÅÅÁsukk+WyAçh%$$À3RCC¿A¯È'}ì onnæ'l>¹¾Ü·•º}í=N®Sà”k¨þ‡ gPð—4a‡¸ÇÖDÊŸ‹>WƒÝ6U0k]¸pKB¬ë³>ÐcQäí ˜®0yyyNNNÇÏÌÌliiÉÊÊ’““ëC°››ïìJÅ—ôìÄápZZZ\]]CBBBBBÖ¯_/''wàÀ=Ä °X¬–––?BO9Xþù矖––n­ã¸Œ°…+?$ë&|ñâʼn‰‰'Nœ€ºO𤮮.ƒÁ ÓéJŸ¸}û¶··w·Õßž={üýý ‚‘‘Ñ–-["##Y,Vvv66ŒŽŽN~~>¶bJKK“——WQQ\T@||>ž_{ ga±Fáà¿eÐ$¾öÁƒøð ërêÛ§\kjj¾zõ ­m>~üøìÙ³ÞÆß«ÖD@úV òkªàš|ff&*!“É\¶lYöpàôwQ¤µ\¸pALLìĉãÆmll„‹{}HB?67ß>è+B(¾ØêÄÞÞ~ýúõëׯ Š½ÿ~IIɺuëúÕرc£¢¢°gètzjj*¿ÍøØŸ@ð¼pDñ#1°Ã 777Aöïß?cÆ Ts`ÕªUrrr•••uuu¿ÿþ»¯¯¯ššZ·ÓHÐ?4×kjj:þ<‰Dâʲ7n$“É6l¨­­moo?þü½{÷|}}{Õ¢L™2ÅØØ844ôùóç''''((ÈØظۥޯ¾pY?11±¾¾?d@@@FFÆÉ“'bccÿý÷)S¦()) þ&íìì<<<ð¥ÓÂ5w‡ ¦¥¥Å;•5a„gÏž655EEEmݺÐÜÜŒ_ÝXYY…††¦¥¥uttܸq£Éß¿ýö[ZZÚ©S§ÚÚÚjkkW­ZE |}}áU99¹ÌÌL8Ë‹rÓ¦M eÓ¦Mt:ýÅ‹+W®¤P(sçÎí¯RÀápÎ~â?þ°°°8yòä®]»fÏž :tÈÔÔ´[ež¾1yòä_~ùåðáÃOŸ>}÷îÝ®]»’““yG/FFF×®]ƒcÚ€€Ô©(t‘‘‘Æd2‹‹‹CBBz»1|á^^^ÙÙÙ‘‘‘«V­â75nnnN ¸†W¯^ýã?ª««³²²õôô …‘‘ƒÁX¾|y~~~LLÌŽ;Ðâƒ-ò½õ‹S®7lØ@&“çÏŸÿï¿ÿ&&&:::677÷6þ^µ&Xp^]ß~M•†††‹‹Ë¥K—’’’ÚÛÛ£££]\\ÊÊÊà¸Ï_p ,œÖVVVæ̶¶6cc㶶¶¸¸¸ŽŽŽgÏžÁ}i¡Þ8ûý=ÿ æpÎ'ØÊ•+±åâîÝ»³gÏÆN}Ó¦M[´hÑÍ›7±¾›ÄÉÉ µŒ…ÄÄÄÐh´3ftM/ÖpBÈFÙtóÖn‘‘‘Ø“ééé¨Y•JÝ°aêúƒË{ ›Í†ÖfâââD"Q\\üøñãðêÙ Ak×®IKKà–(Ð †õåWèºõüSZZ M`ufff†ºâé­g'&“)ÈË^€Î;Ç/œpJJJDH‹ejj X»v-~H6›€¶¸“'O®ªª‚—pÞ$öÓ((( ’FØÇåçÙéùóçp©@ Œ=:++ Σ?zô֞Ϟ=C»¹¹ikk£Ñ†™@ 2î6ðÕ=;á|S.lllø]åÍ6l@?«¬¬ìýû÷Ñ«»víUPPè1ä½{÷PÕáÇ£~Zp²àž°5Œ‚‚‚ ¸^,&pR^ÏNürBuu5ªJN¡Püüüày¬g§üü|hPA&“­­­¡“Y觳³zm‚î½÷ïß?vìØn=;aý,!B&“a0‹ õ‰UTT¢££ÅÄÄŽ=Úmº ÝÝÝᨰk×.Ô@__¿¼¼}½¨³1cÆÄÆÆ’H$èÙ‰«Èpr,ovÅ)ׂܻwO[[ ))¹zõê… ZXXÀ¹êmƒyó桇3gÎ7núP~­ NåÿêpªA~žpšª†††¹sç‚OJnS§N}ýú5¼„/—g'4CpŠªào NRRR žäãÇ;;;íííEDDˆD¢„„ÄñãÇCBBˆDâš5kžZ¢_Þów tëÔÙÙÉ`0>|øðþýûÒÒÒÜÜÜŒŒŒ¤¤¤C‡þžôßÕÐР¨¨8qâDô ÎÕ«Wqqq\çïÝ»8þ¼àQÁ:3//L&‡‡‡£çMLLÜÜܶoß@=Ô!Ÿ<;íܹóÆIII¹¹¹¥¥¥ïß¿ÿðáƒÁèìì:wú1øÿ俼qãF:îééÙÙÙ Õí***FŒqãƧOŸ†„„tvv¢ Ê‹/Æ·cÇCCC6hÐ 111 1112™L¥R©T*ºe[oÓ%äÛâkc„"äGÂÆÆfÚ´ièá¡C‡º» ííí\˶?ýõ—¼¼üÛ·oááëׯi4\u"䇻:QWWW]]]RR’“““žžžpðàA€»ïDkk«¶¶6\I>yòdßdà·:ýƒ;vLð¨àêN‡ºpp—’HIIutt@mFÞÕ‰ÀÀÀk×®%$$¤§§çää”””TWW×ÕÕ W'~$ÖvBˆ!B~ÜÝÝ>|¨¡¡±jÕª™3gúùù8q‚ß*•J=qâÄîÝ»¿Œk—o{{{ …bhhèêêêêê:iÒ$ Ô !?¼½.ô< Çâ/&&T__¯©©Ùï»*Aó-¨2×[æÌ™#""*QQQsæÌŽ˜ùSŠM~·¯EÈ÷‹p8!Dˆ!ý€““SQQ‘¯¯oGG‡¹¹yRRÒÊ•+qÂOŸ>=88¸±±ñ‹IøM¡¨¨øòåËóçÏËÈÈ(**;v îI÷µå"äËÑc7º³³sß¾}4­¨¨î ÔüóÏ? …w—'A’’š5kVTTTiié³gϸLæx~xp;!B„ù©9räÈ‘#¡I· 899 ¨<ß8RRRŽŽŽŽŽŽ_[!B¾½š’ÎËË{üø±¿¿¿···……EíËqýúõ˜˜˜ P©Ô¾Åàââ²hÑ¢#GŽÈÈÈÀ}¥ø`öÀ®Eü¨‡B„"Dˆ!_œ`iiiüñ‡———™™ÙÙ³g <<<îܹӷ‡>xð ®®ÐÚÚš••uþüù &œ';LŸ>F£Í›7ß%WW×//ÕçššJ$y÷Tîs³ÕÚÚêîî¾jÕª .üxNϸ¦äžéy‰„0—&~HJÙ‰N§ëêêräH\\Üq󛥵µµ££ --mii‰³ V¯–tÜÜÜච€ˆˆˆ²²²   x7r‰_Aã×ÒÒúiÝÈ|ƒøûû§§§CW}\ttt´¶¶Âÿfff½Ý·›mgÏž““Ó÷ür¦€qŽ9ÒÒÒ200º*òcÐÞÞ·ñp8œ––WW׉'Ølvqqqtt´¹¹ynn.:$ÆAºôsò𷜾uëVcc#Ü RUUõðáCäÓîòßÝ~¾¾5[?~466...ž8qbuuõÉ“'/]ºt÷î]"ñÇñ?‰v£á|<Ü ük õ%€c 8¨€ÿ…ÉNxzzjjj>|øPRR²©©iÆŒýõ×7>œ@Ñ×׿uëVņu –’’òîÝ»€€€¯"‰—————WÅ&äËÙÛ[ú7Û|7n422òööîÃN®B¾f̘±lÙ2ôpÉ’%¦¦¦§OŸ ùzB}‹èééåçç_¿~ÝÝÝ=3hР^mæýÓ·úçСCÅÅÅ)))¦¦¦‚íÚµëæÍ›!ä—k0€öªá`©  àkK7PÀ¤aÓ‹NG?}Øú®Gž>} ¸uëz&33óìÙ³Ý~ÿþ}HHˆ¥¥å¨Q£~ýõ×èèhxþõë׳fÍzóæÍîÝ»GÅb±ùøñãÚµkÇŽkddäããÓÐÐÀallì¬Y³òòòÐ3/_¾œ5kVbb"ÎãQVVöööF$//oÞ¼yð|vv¶›››¡¡áÒ¥KŸ={6lØ°mÛ¶õíÍØÙÙIIIq\µjÕˆ#ž?¾páBuuõiӦݿ^ÂJÂáp¢¢¢,X ¤¤daa³Ÿ.?Ož<ééé‰KMM]·n®®®™™™¿¿nn.z)??Á‚cÇŽõòòÊÍÍݸqãÍ›7>…_<ÙÙÙðClݺÕÐÐÐÁÁáßÿmllôðð5j”¥¥%Œó{&³¼¼< `ìرPO»ÇçåË—ÍÍÍåääÆwàÀ6› ˆ··÷°aà 4kÖ¬—/_rŹiÓ&yyyøÙ²e°ìþ>ÑlsùòåqãÆÌÌÌŽ?¯>{ölÞ¼yššš³fÍâÚfU¬ÞmœÝ¦¢««»nÝ:ôðöíÛžžžè^ÈB¾;fÏžVb=œ;w ¥¥…H$º¹¹ñÞËd2}}}'Nœhmm}úôéõë×kkkÃK]]]çÎsqqQWWwppØ¿ss3Ò]~ãréÒ%+++33³;wæää,^¼nܾbÅŠ¢¢"wwwüxŽ=ú믿æåå-]ºTGGgõêÕ•••)))¶¶¶šššNNNUUU½}o¦¦¦“'Ož1cÆÌ™3±çùå—… êèèÌ™3=ɯâÈ̯ÈÈȘ5kVaa!I@@ÀÖ­[áÿÅ‹_¼x1..nòäÉ×®]ƒ'ÿú믩S§jii-Z´(==+íùóçgÍš5aÂ???èbÛp@°ÍÖÑ£G×®][TTäâ⢩©9}úôÛ·owû~\]]‡ ‚ÖœP_îÌ™3‚¼ÛotWl&“ÙÐÐPSSS^^þúõ묬¬äää3gÎ|ÅîßãðáÃwïÞMNNÎÊÊzýúuyyyMMMCC“ÉîŠýÃ0 «oÞ¼™9sfZZZNNÎСC­¬¬`“À‹µµ5N_²d‰¶¶ö­[·æÏŸíääÔÔÔtïÞ=OOÏ´´´™3g„ÆÆÆñãÇøðÁÝÝ]VVöÌ™3·nÝzôè‘‚‚6Bƒû÷ï7»xñbRRœåå÷8l µµµW¯^Ý´iàÅ‹–––JJJ®®®=š2e ‡Ãé÷7öáÃkkk —“'OÚÛÛ¿~ýZMM +ÉÞ½{wîÜéïïoiiçææF¥Ry]¶ãüâÅ‹Û·oÃÿ/_¾œ:uêèÑ£===ÛÛÛÏ;wòäɲ²2))©ÜÜ\333555{{û¤¤$sss‡#//oggÇûQpâùðáý{÷ŠŠŠdeegÍšuöìÙ¨ªªÒh´ùóç_¿~}Þ¼yoÞ¼1bD¿¿Ï/ Læ¬Y³äåå-Z”––¶sçN)))øÕ<èëë»bÅ OOϼ¼¼Í›7¿xñâï¿ÿ;vlJJJgg§¹¹¹¤¤$Nü7oÞ„j‚¿O4Û(++ëêêB;¿‘#Gnß¾=wî\uuu:îííýüùóððp pVç“_ax]]Ý7n9rfee:uÊÃÃCM!ß#ÑÑÑ]]]¼ëQl6{êÔ©/_¾\µjUGGÇÚµk%$$PµŸßÿ=00ÐÁÁaÛ¶m¯_¿ÞºukFFÆ•+Wxó¿€?þøÃßßÎœ9ãÇÿ믿ÂÃÃétzPP¼¼|AAÁ;wâãã[ZZüüüðãyõêÕÕ«Woß¾=uêÔ &œ:u*))éÝ»w3fÌppp8uꔳ³srrroß ›Í^²dÉÊ•+ëëë¡á\eeezzz@@@ff& §âÈ̯¨««»wï^SSFFÔ³$%%•––¦¦¦Ž7nÈ!€+Vœ9sÆÆÆfõêÕwïÞµ´´ŒŽŽ¶³³ƒOß¼y³£££­­í¹sç"""ºM&¶ÙzõêUlllTTÔ¼yó<<<"""_½zÅ›=æÌ™yñâÅÅ‹·¶¶=z”@ X[[÷ö%³ðj:‘ÉdUUÕ°°°¦¦¦ÖÖÖ¶¶¶ÎÎÎŽŽŽÎÎN‹ÅápàPöÕ¾¶øxÀt‰ˆˆ é¢P(T*•B¡ˆ‰‰ÉÈȨ¨¨Éd2™,ÔwúáDQQÑСCýõ× .HKK766>üÚµkÆÆÆ\!+++‹‹‹###¡t‹–˜˜ˆöš***àBðŽ;ÊËËß¾}«¢¢X¶lÙÈ‘#O:µmÛ6lœêêê“&MŠ‰‰A‡QQQŽŽŽƒîñq¼lß¾@ <}ú”F£mÛ¶íÔ©Sý¾Ñ=€Á`\¸paÎœ9WWW}}ý§OŸrõ·¢££MMMwîÜ X¹råŠ+²³³y‡ œ˜˜(##“––·°Ñ××·±±JyyùäädØÍýóÏ?ׯ_½ûQpâMMM/\¸°´´œ5k–˜˜XFFÀÖÖÖÄÄ$##ã{N@ÆŒ+ÇÑ£G?yòdÓ¦MµµµÁÁÁ+V¬@}{«ªª®Y³fÕªU¿þúëãÇ[[[·lÙÒ«õê}ššš644\¼xÑÓÓS__öጟâÊ•+%%%°/¸råÊ9sæÀÿB~  5EggçÓ§Oïß¿/!!ÁëËòÒ¥K±±±°Ö =z4:œxðàÁÒ¥KOŸ> ëëë¡Â W~à YSS³cÇŽÕ«W?~ 'PètºÏž={àÞÛüâ|üøñæÍ›°M$Ïž=»wï^¨§Š ÈŸþÙÙÙÙÛ=¼»ººW­Z Wtt´¤¤äÌ™3á€_Hqd°à%%%%))ÉÂÂþ?uêThhè† ëÖ­›>}úÖ­[íììêëëwíÚµ`Á81·eË{{û»wïömmmTTô%jmm­¯¯ÿìÙ3Þá„£££§§çÒ¥K·lÙòñãÇ–––Ó§O+** òb¿}ৄc tD;ßÊÊÊC† iiiSõ¨(‡ÓÙÙ‰ œ¹ÿÚ)ÀM…Bà 貉B¡Ðh´Aƒ‰ˆˆ  ô  ïäk‹/¤#§ââb:^PP™™ÙÐЕç,XÀ;Ù©¬¬ÜÜÜlkkÛÒÒ’ŸŸ‰ÚCC<<|xVVüÿêÕ«ÐÐP8Å£¨¨8xð`~ñð YZZ ÀúÂ6löFYYYì ÿ‰ h_–5® õ>×]...îîî555mmm\¾˜q )¾Ì‚46›*;ÿÖçEEE¼+Æ>|xûö-[Ep½^~ÈÈÈ ÿao²[-J¨F§Ó%$$iii¦¦¦/^ôõõä)ß,p&¾«« «é$""Âáp`K!**J ³ûd2™Åb3¤» IDATAM'‡ó]´’p˜õàÐŽ"àR(«ï$ÜtâÇ`@†P ð>|øÀ2//ÏÉÉÉÍÍ-33SGGGTTtäÈ‘Ýf,˜<ˆ=­Q$%%bbb‚‚‚®\¹²lÙ2Øþ8¬×°³P ŸÓä¯/<ÞdÈ!ÇüøñÍ›7#""233Ÿ?Þ78rìØ1kkk•ììl###­½{÷ ÙÜÜ\__ÏOr~ñà$퇤Ûd4ðþý{´A…­µ€Í°à˜=.\¸0eÊ®ópwˆ>dõÓXWWxºbB~B$$$¸rTNNúßÉÉ©««ëêÕ«&L‘‘Ù¼y3ÔYâ…_H˜½ß½{‡v²áX—øO¸ŠËÁÁL&ÇÄÄ´¶¶ÂÅ ìUœBŠ/³ ¤¬¬Œw^")))!!‘——G"‘°çàºeUUº1%öóá HëÖÜÜüìÙ3˜LÀ/¿ü¢§§ý½'°ÀW»ÝpW 8`@õX,‹Å…à ‡ó} 'àp‘Œ®TP>A&“¡â ùµ¥ÒŸ Èç„‹¨Õ/àÁƒD"‘w%áÂ… bbb'Nœ7nœ¨¨hcc#œ%íFP"qôèÑÉÉÉJŸ>|x@@ÀÅ‹»•aéÒ¥ùùùáááÕÕÕèÌ™àƒ >|ðàÁ‰‰‰è™¤¤¤¯²·‹Åš={ö;w dmm}üøqooשּׁ,‹… &¸À«W¯1b‘HDçeddddd) ÅÇÇ£g  Ðøñã¿Š<ººº€ÌÌL´1™ÌeË–ô9«÷˜Æââb2™Ì¯û"äçAWW·¤¤¤²²vtt ÖÌÁÁÁ³fÍ‚ãR~5 NH¸¦ŠÍŠÿþû/?ab¿#))immuåÊ•9sæp­ãR™q8¸ª­­…!ß¿~^tuu NGŸ~ûömooo‰4f̶Šxøða½qqq …òúõkôL[[NÇY¤úî@u{¸l'àèípÉ|TY«8ôÍ‚¨Ÿ–#àŠ:~Àn€-TvúÁá„£££¡¡áÎ;OŸ>M§Ó÷ìÙµbÅ ì¢'ÄØظ­­-..®££ãÙ³gvvvD"‘Á`tÛݾ}{uuõï¿ÿÎd2³²²/^ibbÒ­ VVVC‡õóó333C—¿{õ8@ð÷÷ÏÈÈ c2™ÅÅÅ!!!ØÚßÎÎŽK=w€ “Ƀ†Ó{oß¾‹‹344äjŠze„ Ïž=+,,ljjŠŠŠÚºu+úüí·ßÒÒÒ¼¼¼²³³###W­Z…3‹€O?¿‚ï)S¦‡††>þœÃáäääC…YYÙêêꬬ¬¶¶¶“ja%&&Ö××khh¸¸¸\ºt)))©½½=::ÚÅÅ¥¬¬L___ðœÃ'~%%%ÚÚÚ¨ÂúùóçMMMóóó.ÉB¾M|}}EDDÖ­[WUUÕÜܼyófTéeôèÑ4íöíÛ?~,--õ÷÷OLLd±X°h`óNHKKKccã={ö=z4''góæͱ±±ü„Á¢à:tÈÔÔôýû÷½ºËÅÅ%99ùùóçØ]‰ 8…GfœÂÐÐD"mÙ²%!!!--ÍÙÙ™Êß&jÕªUrrr•••uuu¿ÿþ»¯¯¯šš‘H´²²222 MKKëèè¸qãF·†‹}CDDÄÉÉéÉ“'[·n}ýúu^^Þ† —/_Þ_øº`:A…8y ÄÅÅ D£Ñ$$$$$$¤¤¤¤¤¤¤¥¥¥¥¥edd¤¿P9¡ð0!Ð[\\&&&ëâék!ýÀ 'µk×===•••·nÝ:oÞ¼ð†ttt´··_¶l™¸¸ø´iÓ-Z´cÇŽ˜˜˜uëÖñž;wî¡C‡‚ƒƒ%%%ŒŒ?~|éÒ%ssóne ‘HnnnL&»aP¯ñññY±bÅš5k$%%µ´´\]]á$ äùóç¹¹¹½x5ŸÁo¿ýVWW§¬¬,!!1räÈ®®®óçÏ÷V`”€€€ÁƒkkkKKKïرãÞ½{FFFóçÏòä‰ÏöíÛ###ÇŽpüøq*•ŠZè Oÿ&ÿ{„@ \¹rE^^ÞØؘJ¥>üÆ𪓓“”””‘‘Q· ý…±±±©©é†  Ë—'NXXXL™2E\\ÜÙÙYNNîÖ­[bbb@àœÃ'~………è!NOKKc2™—d!ß&£FŠŒŒŒWRR}º½½ý„ P·¼HKKߺu«¬¬LEEEAA!88ØÃÃcß¾}-##cjj*&&æéé‰:sëNœ8áêêºwï^}}ýˆˆˆ={öð·¾_P;.Wªp,¿¯„„„¤¤¤¤¤¤””üEÇß8PTTr¨5'!!!&&GhzQw±ÂÕ‰ €Î"—””ÐétèК555ÕÕÕúúúP_cA_û¼477ggg“H¤ñãÇã̲ô×ã t:½¤¤ÄÀÀà뮽vtt¼|ùòÝ»wÆ ÓÓÓñ#PàÜÜÜÁƒC[AŠŠŠÔÕÕQsƒµê%%%“’’&OžÜ·x~r)...//×ÖÖVVVÆ^êêê‚_s kÕšš)))QQQxXYYYPP ¨¨È;`<«cãä—ÆÚÚZ%%¥{÷îa-8…üÌÀµe%%%h£¥³³3++KWW*Ð3ŒÆÆFX«€ÿæ7ü]]]¢¢¢çÎ Àñ„Ï×…_!Å‘§hoo/..5j” Õ2›ÍÎÏϯ­­3f ×vÝçåË—,«GG&}£ªª*??_TTTWW—Wáûõ÷ÚÕÕÕÕÕM#ººº 7E‡­&àI¸ãzËw±Ô5ª†C&¸ø€õéD¡PГ¼c…|ï ìpBÈ÷ˆ­­mGGª‚ 7 ÿ‘ÔX…|vìØñøñã„„„¯-ˆŸwïÞlÛ¶ ®6³X¬éÓ§‹ŠŠö£NŽ!}»y0çpä­±QÛë. °{ö]tÒxÍBÐAN  N¤O0|mñ…ôÂùc!ܸ»»;;;khhLŸ>½´´4!!áĉ±„ÞÂ`0Nœ8µÝ"dàPTTœ6mÚ¦M›®^½ ývÔ×× ³Ÿoè þ‡¶ˆz…gH$×@Ë×]0ÿ…È×NvØ¿¢ØBúáê„n())yðàÁÓ§OGŽiii‰ÝU@ˆ)---((°¶¶þÚ‚ùYàp8éééñññFFF¶¶¶ªªª_[(!Bø´@ÿ@÷¯èbú éa—&Àwµ:0 ¨È"°Ëð?:wú±'„"Dˆ!B´¯Å»ø€ÚT€ÿªEñÞûm‚p©0qíX‡]¾à½WÈwp8!DÈ7M[[Û›7o°ú ù–A¤ººšÅbõÖM!B~`°¶Øk/ñö͸¶×@ÏcckñµäÒï‡B„|96mÚäáá·~ëiiéÐÐP¸ñâû÷ï—-[mâ9Ž®®nxx¸©©)àÖ­[ÎÎÎãÇüø1ööqãÆÄÇÇ›ššš˜˜ ^ŒÉd²••ÕÒ¥KgÏžÝ/ ‰ŽŽnjj‚›®ÔÖÖþñÇ\~ùå—yóæq|ùòå„ ÒÓÓõõõÑ“óæÍûûï¿Ÿ?naaOuuussó½{÷B¯kÅÅÅØ»ää䜜œV¬XÑïä8p»ÀêÕ«%$$L %%eùòå………D"qäÈ‘666!!!pïð¡C‡8p`Ñ¢E0d||üüùó/^|äÈOOÏÚÚÚ¸¸8À€~¸ï‘ÆÆF6›ïPÈgÒÔÔÔÑÑîx-d@ÁŽ¸þsûÒ’}\ìT·ÿû‹Åª¬¬äu ÷u¡Óé²²²Ðëúωp“s¾´´´vvv~mAþdž Ð-ùú:>wîÜÔÔÔŠÿ'AèèèÐÐPt{Únikkc³Ù€ÆÆF##£¶¶¶ìì쎎ŽŒŒ ===kkë’’ô’ššZ^^ŽÞ›ŸŸÿêÕ«¶¶6¸;X{{»³³srrrrrr\\œ†††ƒƒv¿ó>óöíÛ€€€/^ÀC‹Uú_ºݥ«««­­k³íŽŽXÊàÕÈÈÈäää‡úúú&&&N˜0¡±±€ H[[[xx8LQXXXNNδiÓZ[[??EXvíÚUQQQ÷ èÀQÀ677;::ZXX´··Ÿ={öÚµkk×®…WÑOˆ···wss;rä@èèè@÷.¸÷ùDDDÀ­?{u×çÔ¥]]]Ó§OG·noo¿páÂÚµkÝÝÝ÷ïßßÔÔÔ‡8?ŸÔÔT"‘˜——÷9‘°Ùìøøø5kÖxzzž>}ºÛMèqªåÖÖV"‘xîܹn#Ç6ïß¿/++æ¾¾~âĉ½ý²B¤´´444týúõW®\imm%üwclì&ÙâââÀÀÀ¥K—dffb/„´´´-[¶„„„¤¦¦’¾Uº5Âîq,ÑcáÚ¿HHHŸ¿…ŠŠŠ¿¿?àÙ³g4-99™+@ßJÖåË—qv0û)àÕá¹yó& ''çk ò?–,Y21s8¸­Ä•+W"þŸœ»w$&&ℤR©§NBÄÏÏOAAÉd¢—˜LæðáÃýýý¹~ýú Aƒ,--ÿøã4@`` àñãÇ‚üöÛoØÈÇŒ³qãÆÏL‹’’Lˆ——W·.^¼hllÜÞÞÎ{)''ðâÅ ìI[[Ûùóç#òôéS@QQzéãÇ222Û¶mC¤°°ðüùsô*ÜZ;55õ3S„¥¶¶–B¡°Ùlœ08 LHH µµµè™#GŽŒ9þ—””<þ<‚ <óññAƒ-Z´hÆŒðÿ}¸~½œÏ©KÃÂÂŒá&“9uêT2™ljj ÷FTVV¦Óé}ˆö3IIIäææ~N$3gÎwppÐÒÒ,_¾œ+~µÜÒÒ8sæL·‘c‹%K–hiiõ(ϲeË6lØÐËDé™;wîFŒaii)**:eÊ”¶¶6®0]ÿåÎ;pÏlKKK8á†z˜uww'&LÐÓÓ8p€ómÐÕ½}]ø…«¬¬LBB¢¸¸¸/_AY°`Axx8‚ éé逤¤$®}+Y--- ÉÉÉ}ì{G¸:ñ=áåå11ïÝ»7;;{ b°°°ÈÉÉyùò%X[ôÆK—.…J2Aƒ•••íÞ½²Ùl—¨¨(4À•+WœœœøEØÒÒRYY ;.ŸCrrrYY¿= ËËË7nÜxéÒ¥¾m1É…”””››[lll·W H$Rÿ.ykhh|üø1%%¥¢¢‚7~eee E—Ö­[W\\Œ ×%6nÜxàÀADê¯÷=ÒÒÒìãã/\¸””tûöí”””ììì[·nUVV~]!ûÆÙ³g=z”pýúõׯ_oß¾ýÒ¥K?~Ćùœj¹ÅÆ;Æ•]…|&?~ôððppp())ILLLNNNII æ Æe©¼qãFuuõÚÚÚÄÄĺººqãÆùùùuuu‰Ä»wïž;w.""âéÓ§¹¹¹¾¾¾YYY¼¾Y¿<¼&×ýndee5räÈ>ÇéééÙçÛù•,qqqOOÏ 6ô9æïN@ï………!!!£G†ÊÏŸ?wrrÒÒÒ²¶¶GïÙ³g÷î݉‰‰óçÏWWWwpp(((À‰§©©iݺuãÆ?~¼¯¯/T„€dffúúújkkúúú¶··£—ø=ÝÅÅ%:::::ÚÊÊJ[[{Á‚ïÞ½DEE¼¼¼Nœ8¨­­ 577WWWŸ;w.œ+åbÓ¦M .Äžù믿ìíí¡$ü$çM&¿g…‡‡¯X±¼¨¨hÞ¼y***#GŽ\¾|9ºùë±cÇ`'fÁ‚ZZZVVVpv„ééé»wï>räšF ââ⪪ª‚ï¶ËápJKKykLtSÛ®®.''§œœØüçååUTTpye}ýúudddddäŸþiooßÖÖ6þüÏL‹ªªªªª*? QÅ‹÷£Jž––Vii)zxïÞ½ÈÈÈþù'00pÓ¦MVVV ýõ,@qqquuµŠŠŠ“““ªªª››‹ÅÂÀO ¿¿hh¨´´ôôéÓƒƒƒß¼yƒ ?j%Ò-ñáú‘ŠŠŠùó竨¨˜˜˜œ9sž vrrB0ÚÞPøþù‡«.ü+d.þþûïöövGGGx˜ššª££ceemmm555yunݺemmꔬ… >þœ·FúYˆ%¸„daaA&“íììØlö­[·(ʨQ£öíÛ·víZOOOØÖÖVQQqØ°aþþþ!!!ZZZƒ *--í6ž††uuu))© 6ìÚµkĈÚÚÚïß¿G$77—B¡Ì;÷ìÙ³+V¬––vuu…Àyº¬¬ì¨Q£wïÞ½eË11±‰'"’’’‹ëš5kîß¿ßÕÕehh8jÔ¨£GîܹsôèÑRRRXEȾ}ûÀu9ÔÕÕgÏž Žä¼Éä÷¬U«V 6 ÆüòåK ‰_~ù%<<|ÿþýC‡ýðá &/////¿zõê}ûöéèèP(¬ –¦¦&55µ;v¼~ýÝ9@HwÀfƒwi Tvêêꈈàìúõëd2A3f„„„ ²uëÖùóçÃUZTÙIQQq„ &L011quuMKK믴̚5‹WÙ)55UBB¢¡¡ß]P–WÙÉÙÙéNÙ Aððpeee䓲“®®.LÑäɓׯ____ß_)‚DEE-^¼¸±±A„„‰´gÏÁijjºxñ¢§§'ê¬[·ž—””8p`Îœ9C‡ÅêDq); ܇ûL ²“ŒŒŒ‰‰É¡C‡æÌ™S„ È©S§Øµ~•Ù³gsÕ¥n…Ìů¿þjdd„ž>}:&&=d2™RRR&&&\wÁÍÙ³gá!4Ö?qâ<œ9s¦­­-‚[…òÖÉ{÷î8::îرcĈÐdêcìÞ½›B¡lß¾ý¯¿þ²±±!‰±±±ø¯jÏGGG—––^¸páüùóo߾ŤZ†…]FFFQQqûöíþþþT*uâĉP½m,NŸ>mhh(''RQQÓP"âì쬪ªŠ/üÏÌêÕ«ÿþû/‚ Ðq¾}ûðoÙ¼y³´´4ö êÁêF®X±A††EEʼn'BMK'''YYÙŠŠ AÊÊÊÔÔÔ,,,àíð)))KKKÞG÷ª'†“===‰D¢]hhèŒ3DEEoÞ¼ /)++Oš4‰H$Ž?þÊ•+aË–-¨þþþ¢¢¢°:ʼn§pqw¸Ç~ÑŽ?^SS öüùsÀÅ‹‘••]¿~=Ò“²SoK‚ ,‹L&ûúúòJþ30€Ã ƒwïÞ!ÒÞÞ®¦¦fff†jÑ;v PPP€ ˆ­­-63‚”••IJJ.[¶Œ7AÖ¯_O"‘ÊËËáaee%…BÙµk‚ »wï&555ðÒåË—'OžÌb±ðŸ.+++++[WW/mÛ¶D"A½F¬¾/ìÊ?~«««›0aì´a©ªª"‰[·n…‡X&q$çJ&γ°Ã [[ÛaƵ¶¶ÂÊŠ *• ;.«V­DEEÁKÐfN‡ðâææfjjÊf³…ÉFðá‚ Û·oçº %ÐáÄ™3gôõõÑÔÔŒ‰‰áNp©à÷#Ý'ìíí¹Ú9. úP||<ö¤™™¼«ÛáÄÊ•+ç΋tg;ñ°··Ÿ:u*ö?ÅÅÅX¥^6›½mÛ6@II ‚ ’’’°r¨««SPP°³³CCâÛN|;ÀáD`` zfòäÉRRR­­­T*U¾‡Õ¬…°u)~…ÌÅ„ \\\º•„ÅbA÷Ó§Oó^UQQtÒ¥¡¡ãéèè Cp«P®:¹®®N\\|Á‚è£á2 ìñ`;sžžžØ÷Ó-p\íããC¥R%$$H$™LÆÚA R-ßÙÙ ÏÀ……7n ÿm,°ÞüJx¸}ûvÀç(¦ÿØ0™L #FTVV6Ì‚ƒÙ®[æΫ­­=ÝĽ|ùAuëÖ„‡BÕV´ö+))ÑÓÓ#AQQŽŽ‰ÄÕ4=š÷ѽê‰ñËÆp®=44žçp8S¦L‚ ÊÊÊáÑ£GðÐÜÜk¥3bÄ8Xʼn¿pqqàÀ2™ŒÚ¶áDû矲³³á%???IIÉ––DàáDoKdÔ¨QcÇŽå•üg`m'<<<† ¿hiiéÂ… ™L&ƒÁ`03gÎÀ&@^^~ÆŒ𿪪ª™™ìˆsň2eŠ´´4ŒGJJÊØØÆçT–,YßÖÖæââ’””$""ÒãÓíííåääà}}}¨g•yyyQQÑ={öœ?þýû÷rrrOŸ>577ç 6lØ°éÓ§ÇÄÄÀÃË—/ËÉÉAëXɹ’)ȳØlöýû÷§L™‚êœ(++ëë맥¥ÁCæìì ÿëèèH¤nµ³.^¼÷÷ß“H¤î¿¢¯Ä¤I“"""°š6---AAA\î_¡bÌ»wïlll¾¸˜ÿ£ªªêæ͛˗/Ç 3tèP+qHWWWNNŽ††F·á?|øeffÖϲòçôéÓ‰‰‰èaWWjC/HOž<‰õK"‘`ø>À3PKJNNîÌ™3·nÝ ë÷$|°*—ÖÖÖMMMoß¾}zÉ’%¡¡¡zzzŠŠŠ+W®„u)°›âàà0oÞ< …"&&—­?üÂÅE~~>Ö'Z999(IZZZEEØNoK5†ùÙùÏ\¸paÊ”)¼çX›i@ccc·»ÉR( …âààpðàAìytfÅÏϺ8¸ÿþÙ³ggÍš•››ÛãÓ{œ]€XZZ>~ü¸²²2>>þòåË~~~z/Æâèè(!!óñãG:îîî.ˆä½}œœÀº¯^½>|8¿Dñ6E%%% #00ëöV 4òµ––¾}û¶§§§¦¦&…Béììœ>}ú“'Ox¿‹‹‹ËíÛ·]\\¾Šœ(p＃>|˜Á`L:•H$¶··«¨¨Ü»w[ÞáB%@ÐÓÓ›3gζmÛà ÿË°ÿþ††]]] …ÒÐаyóft•Oš˜˜œ={ÖÇÇÇßß_^^¾¹¹ù—_~¹ÿ~·n 8°páBìbì·‚ UUUÊÊÊðjãÀ¦×ÆÆFZZ:::šH$–——£öaé±BFöÇØZš°†‡‡/_¾Ç@yêÔ©T*õÑ£G=Z³fžžž‚‚BRRRBBT¯í± Å ]UUºËty 2dHDDÄñãÇ?~|óæ͈ˆˆÌÌL¨«ÍØ%šãëêꊈˆ|øð¡·Õ2¶gYSSÓÐЀÓƒtÛPB “ºº:¿ÕB!€/^ܺu‹F£…‡‡¯[·®GWÇ¿{÷.“ÉD¿]UU•˜˜\1èììÜ·oF+**º|ù2œ¼€[—B ÈŠ+BCCcbb|}}¥¤¤`¥ººZº¿èñËÆ’’’yyy\keÝ&\RRÒÁÁ!&&&((èÊ•+Ë–-ƒ]œHð ۧǗmÉ’%óæÍËÏÏ¿|ù²––VoW¹ûP²uuuŸãuêûf 4¨¸4Òà˜*«A^¿~=mÚ´ôôtAlmmÅÄÄP³f‹¥ªª õíx5Û Q­5AºººÜÜÜ ÊiHHVá¶Ð‘‘‘øO—••ÅÞuýúuðIi«ï›œœlee…z[ïêêRWWwttì6ùîîºÞÞÞ†††‚HΕLœga•ödee'Mš„FÈ`0H$ÒÊ•+a°#F`E"“ÉÐy?–ÖÖÖ7`väÈ‘7oÞôÁW´‚N§?}ú´Góßï‹ŽŽŽÌÌ̪ªª¯-H÷0™Ì/^ðúZ¶¶¶ÜÜÜ´´4Tõö‡ÚN vY‚¸¸¸HKK£»p¬\¹rĈ¾¾¾JJJ¨Z9¶.ů±tvvŠ‹‹/\¸=³mÛ6"‘—¶zÄÊÊ º„‚ªá®®®666d2ùáÇ0NÊU'Cmƒ¢a·/77·³³ÓÎÎîöíÛè%¸°€ÿé™L¦¤¤¤µµ5z>âÔ©S‚WËPÃzÓ‚À¹Ø[·n!ü5¼ù5”ððàÁƒd2¹££ÿÝþ´´··ëêêjiiåä䈉‰A?+ø\»v €Í!è›7o&‰ÉÉÉfff222°J„®±=ŠÞK4«suuUPP`0ðÜáñÂ… ¼¼'†“÷ìÙþëbú«„¥[YYÙÛÛûлwï W¥ÂÂBx'œÂÅ›¢… R©T´bÁ—­££CFF&00pèСXÚNô¶dALLL°7þT|‰á‚ ...rrr‰‰‰mmmW®\Ñ××9r$´ƒsEp]¯®®ÎÃÃL&gffvÔ„Û»w/ƒÁÈÌÌtss#‰ÐðôÆ¢¢¢ñññ]]]?~ôòò"‘H°!Áy:ÎpnDzøðẺºÖÖÖÁƒûùùµ··³X¬¸¸8€Í X ’.F;räˆ ’s%çYØ|¼oß>‰ÞÚÚZSSãææ&"" ¹Np'<„¦ØB„áN(((Ü¿¿®®îâÅ‹T*588 ðäÉXû '±u)‚[!s1mÚ4¬g'cccCCÃ3ÿëë Khh(@@+ÌÓ§O$%%ÑŽ>NÊU'wuu)))¥¦¦¶··_¿~]ZZm)-Zdll\YY‰ HII‰¶¶6j‹9mÚ´_ýµ[ñvíÚ%""âïï_\\=fÌeeeh*Š§Z†°oß¾ªªªÌÌL===.ÿ3‚lܸ‘F£eff¶¶¶â4”‚xyy3¦[… âããC `Æ€ûÆðÛì ¥££CCCCMMíÑ£Gt:ÝËË‹J¥>}úA¸¡õš5kyó樨(a~øðAQQQEE%<<üýû÷wîÜ7nœ¬¬,ô—œœ,""²`Á‚ââ⬬,===CCCÞœƒô²'Æ/744ÈÉÉM:µ¢¢¢¶¶vïÞ½4 “ð'Øl6´‘333COâD‚_¸¸8yò$øäÙ¢GÙñòò¢ÑhD"¦ "àp¢·% ž2dÈÎ;»Í ?<_h8ÑÐÐ0wî\ðiýzêÔ©¯_¿†—lmmQCœ‘#G¢þºý؇¢R©0eeetZ…Ífщ¸¸8‘HG#á<g8Áb±àâÚµk £R©$ jÏ;—ßNWW—ªª*…BAFáKΛL~ÏÂæãÎÎN¸a \æ“••E½c ‡B„Ο?O&“ÿüóO¨,D V­Z…úB¤««kĈ눫.Å©¹Ø³gFƒÿ™Lf·Ú¡XwXàŽnnnðÚGÂ' 8U(oüöí[hC † råÊ´¥ÈÍÍ…ÚzPmCSSÝÿ›F£¡[zsÑÑÑû¦0:::yyy¼ÁzN@·ã0}}}Ôy ¶±HIIJ\?Æi(™>}:úÆ„pñèÑ#"‘ˆúvãp8&&&Я=eee¨¨´´4\I€N¢TTTÐu†ýû÷þúë/Až={†5¸RSSÃz’üçŸP«¤Q£Fñ W=1œlœžžjôÞ†®Fò'ûNr¹\ɧpqXîܹ#H´È'o3gÎÄF"àp¢·% ¾^Àõë×»ý?<ä ÝVVV(**Ž3=igg×ÜÜüøñãšššêêê±cÇöOsssvv6‰D?~<—RraaaIIÉ AƒÆŒƒ5Gæ÷ô©©©‘’’ÔÕÕ½~ýìy\LÝÿÀÏÌÔ´ïÚJ{)$!TˆöB %%BEòàÉC{¾ö5’žzÈVJÉIû¾h_”Jû4ÓÌýýq~îë>35-Ú<îûyÝ{î¹çž{çÞsÎçœÏ’ÛÑÑ¡¢¢28õ865g¢Ÿ×ª¯¯ÏÌÌ”PSSC½àààà +]]]ééé***p* 3ÔŽmKAÿäÚÚÚñãÇGGGeí1ô¿ ¥ÓéYYY4MWW—)gWWWVVVMMŒŒÌ¤I“Уµµµ^^^wîÜé­ÌÆÆÆÌÌL™‰'öÓŠ¯G²³³¹¹¹Ùô VŽ#{ì(ëêêää䢢¢°v±8CEAAASSÓ´iÓúéG‘Á`ää䔕•ÉÊÊÂàQØ£T*599YZZZQQq 5éíÓëí5twwçääÔÕÕikk£ž6 ›BØ|\LÌŸ?_]]ëoHêÖú² ;¬ÏŸ?³ÝýWQq¢GPqbt«ƒƒƒƒóƒª««GDD  Î?ˆ——Wii)TýéX¼xñš5kШÞcœ¼zõêÅ‹£]œ^ILL433+++íºü AtttÜÝÝaà¯_\œÀÁÁÁÁùQ(Êüùó‹ŠŠÙ¸]mmmÚÚÚ=Âú£üYÈÉÉÑÔÔíZô‹ÖÖV•øøx Ñ® ;6mÚ$%%Õgt—æÁƒ‡JJJú‘eÆŸš‘pËžµkײ‰À‚ƒó‹C£ÑŠŠŠäääX=iþÔ”——Ôßè/Ëæ9pppÌž=ÛÇÇÇÒÒr¨d ??DD“3ñŸ…ŸE–|ýúõƸ,3ö9zô(kÔËQG@@àÎ;¿¬,Àð8ŠÅÁÁa"&&fóæÍÖÖÖ>>>L6úX„……oܸ·[[[×­[G&“ ‘HÔÑѹwïšsݺu<<<§OŸÆžž““ÃÃÃâð|GPPpéÒ¥‘‘‘CuGnnn7oÞDäË—/^,ôæoAëׯ£qèeee=<ÆRXXÈZCèWdýúõXÏ’lžCee%öt!!!ƒÃ‡C×"LW‘——ß±cGoÖÌ888888ÃÍè¯Nààü版ˆX±b…›››Appð“'O233{ÌÙÙÙ ƒ²3 “ööö˜˜ƒüüüààà+VpssC­t*•Ê`0îÞ½»mÛ6ôôÐÐP:ŽNåR(@kkë³gÏlmm£££¡±ìpîܹ‹/ÂhA4­¤¤{ôéÓ§|||K—.e=ñÈ‘#þŒfÐÐа²²’’’‚»ºººX?È‚hkkïرão'##CNNNKK p%88X__ë­¥¢¢‚——÷Ê•+ØÄ .ppp|ùòA“'O¢•‡|þü™D"!âïﯩ©ùƒ•gOPP‚‚\€AˆÃÃñ´´„ãxAÂÂÂøùù{Œ“PPPÈÊÊê±ðU«V-\¸éÇs€Y_¿~Í````aa^%99=”““Ãæ¥ÂÁÁÁÁÁV~a5/œ‘‚ŸŸßÊÊ nKIIñòò¦§§³?%44tùòå222ØÄèèhc2nÜ8###襕•UZZjaaÑ[™íííªªªƒ¼ +V¬8wî\š`¢¬¬lÇŽwîÜéÑSÞãÇÉd²³³36ÑÕÕµ¡¡ALL¬Ç˵´´ÐéôñãÇÿHû€€@cccSS ¶¶¶££Z5Ã<ÅÅÅãÆCý¾‚A<À·oߘ=PòòòH$ô¿Ž3¦ ÓéUUU£] œáe¤•jkk)Joâà(**aÓ ?~411‰ŠŠš={öh×g4 ƒ‚öùY>±á`¤Å Ÿ÷ïßÃx¥CŤI“¼½½á(mLÁ`0ÚÛÛétúhWgLŸŸïîŸÙg졶¶6Ô¢´´LíììÌÌ̬¬¬„‘8K—.uww/,,TQQ¹ÿ¾¿¿[[¶œäää/_¾ˆD¢¢¢bBB´t>|ñâEJJJG?|ø€®–°¿)ÀÙ³g[[[™™™‡†!Š) *}}ýúµ¨¨hÁ‚èPŒŸŸßÌÌ [æÐÆ-ÊÎÎNIIÑÑÑ™1cFkkëÓ§O‹‹‹•••ãââš››ŒŒDEE«ªª.]ºdccÓ[!³gÏÆÖŠU¸êÏs¼|ù2-- ÐÙÙ™­¨¨(((ˆžCSóððØÚÚîÛ·oî¿/DDDŒ‡Ö^eòþ¨»»ÛæŸ={VII) €5ž7SÎŽŽ…M›6ÁÝšššçÏŸ¯[·®££cóæÍ}^éŸÃ÷1ÛW2ahh¨¬¬<Úµ`¦½½}êÔ©«V­P©Ô¼¼¼§OŸ†……±Ÿ£yöì™……Å„ &L˜påÊ•™3g>}úçÈž¢¢"ggg¦VÝÅÅ%((H__¿³³óÀ'OžÜ±cÇÐÖ™øƾ}ûöÂ… [¶lAÓi4Z{{{Þ@6¯_WWW{{ûîÝ»™¤îÞf¦Æ,?Ë'6,Œ°rÕš5kTUU‡¶Lnnî½{÷m™CBo!Üq~5 Æ_ýÅÃÃãîîÞÔÔÄ&'j;¡¯¯ohhÈtF˜ª¬¬Dä·ß~[¹r%‚ fffLKKãããkoo¿qãÛ‰DBBbÍš5***fff/^DÚØØlܸ‘ÍéP(b2ADTT4 éÉvâСC€ÒÒRdDl'–-[6kÖ,tWUUÕ××·££ƒ››ÖA8ÄOIIa=½Ÿ¶}>VÛ‰ììl‰tìØ1¤'Û œÁ1äý´¤þü9Ü•••Ý´iSrJJJBÔÎÎΉ'ª¨¨ôyÑ·oß222úÌ9fûÊŸ"‘¸jÕ*lJmmí”)SøùùÙ8ëkjj’‘‘±µµ¥Óé‚$''“ÉdÔ”Ž=T*uÚ´iPzG?~ ¸uëÜÝ¿?àãÇCXç¹rå @EEEPPÛvy{{«©©Mž<ÙÛÛNÅmÙ²%66¶ªªÊÜÜ<;;;//ÏÜܼ  Àßß_CC£»»{ñâÅX·-OŸ>577ïè耻999ÖÖÖ222&&&'Ožljjª®®677§R©!!!+W®œ:ujݺuh ­­­æææÐE1ëåÍÍÍS§N6mš··7Ô™î‘ÐÐйs犋‹ëéé}Êtî‹/ÌÍÍ?}ú„¦¤¥¥™››ãÁû~Ž;vâĉ„„„sçÎõ3–çìÙ³?|ø'­Q¢¢¢Xs:::††††††Z[[·c+++–––––ÖÞÞ^SSƒº¨ªªªzôè“=Pg)66›˜œœÜØØØÛ)7nÀô››;}úttwæÌ™)))eee M×ÒÒìm‰¦? â9hjjΙ3Úñ"YYYöööp:Ÿ}Ó×Ñѱ}ûvuuuuuuoooÔXhÍš5·oß~ô葱±ñƒ@ïpzzº¹¹yVVÖÞ½{§L™bggóíÛ7 8®B¹|ùòüùóÕÔÔV¯^ýáÃ4ÝÑÑ1,,,,,ÌÔÔTMMmùòå555€¥?½t[ƒ£±±ÑÞÞ¾¡¡!66ÖÞÞ~kÔÜÜÜšššeee=½y󦹹¹Á®]»š››±‡·mÛ¦­­={öìÝ»wÃ/”µ¯D$((hùòå'N´³³;qⶵÉÍÍ]±bÅÔ©SÝÝÝ333===áÓî±íñŠ`àÿ ʺuënܸ·‡ðOr$%%=ÚÖÖvöìÙÞòM¥R±î™(,,\ºt©‚‚ÂĉáÚ8ëë7 ®^½ºiÓ&¸PãââøòåËáÇMLL4446lØð÷ßcóß½{wáÂ…³gÏ>xð`FFÆš5k &á¹sç6lØ••åä䤥¥µyóæÊÊÊwïÞYYY©ªª.[¶¬ºº-$99ÙÞÞ^UUÕÜÜŠRÞÚ½¼ÇÿÃ"NdffΚ5«¤¤d÷îÝp1eÊ ž9sæ 677GEE¹¸¸8p@YY™@ <þ»î\^^¬ŒŒ }}ýšš??¿•+W¢ˆD¢¼¼¼¼ôË—/ѨTjTTTee%€õrMMMS§N½uë–‘‘‘]xxøÌ™3áÛÏÄÉ“'—/_®¡¡qêÔ©ùóçûúú®]»ÊÎÎ 544Ý°aCuuõâÅ‹‹ŠŠ°§ëêê¾xñ"88M ~ùò¥®®îÐ=uœ±ËÅ‹·nÝ*((˜ÿoß¾±?eß¾}"""öööÐkvvöž={˜|¤Bììì ._¾ìàà0,µÇpýúõ ïLš4iñâÅçÏŸ‡‡bbbÄÅÅágØ3gÎ\±b…Oll,Fƒ–/_Î&B”¾Ð…BIÿ7ЩÑPahhššš ÈËËûçŸLLL”••%$$¾|ùB§Ó/_¾ÜÑÑÁÆ *//©’èœdÏ $$Ä$^ŽôÉ“'†††ÙÙÙ6lPQQqww‡[ ÷vïïñ¿Àp,y:tˆ@ @‡‚Ü»wÏÈÈ~Â..C] ]]Ýšš˜ÂËË‹Õ͸xñ" ¹¹A333999TQäÈ‘#€êêjäß«KNNNh /A¾~ý ¸víZ—Û¶m‰D*++ƒ»d2ùàÁƒL·óåËèÛ©# IDAT~~~¬ǹsçÀwUWWW@hh(<”‘‘€sXe'+++999è€A{{ûA=]œŸŒòòrÖïŽ)ü ªì„ Hjj*œçãã#‘H3fÌ(((““cRvBÄÚÚZ@@ ³³AaUv²hÑ"¬£Øß~ûÍÎήϳ¾}ûæêêJ$Éd2''§‚‚BppðŽ;zSvBDXXØÉÉ AÖ')//?„7ÕÜܼzõjaaa`…@äÍ›7&&&\\\"""¼¼¼èÄDo«(ïß¿G0ÊN}>‡ź¸¸HKK·´´Œ¢²œ:}ûö-¶éƒrïÓ§Oá¡ÂÂB"‘ø¿ÿýAyyy±i„áµV¯^ Á¥¹©S§Â]غ«¿yó€j£Ñét¸+&&&&&†ªvìÝ»—D"ÁÛ±é¶ú«²So~™Y•´´´Î}ÇÃÃz` d:±¾¾ž——wùòåp—F£AçPÙéÌ™3222¨›f8ow±}¥‰‰ÉúõëÑb×­['..·ÍÌÌ”””`Ï‹ Èÿþ÷?À_ý…ôÔ²¹bÿÿA&ÄÄĶmÛ† ÑŸ2T°*A455544z;kÉ’%jjjØ”cÇŽï*‘!..níÚµ|||………0O}}½ŒŒÌñãÇùóÏ?Ñ¡ZWW‰DÚ·o¶@}}ýÞ*Ðgƒ‚‚1110~;²²²èXÎÐçççÓh´I“&M˜0šL`•,--eddP'Úååå\\\p·Oe'%%¥‰ àQOOO€——lËËË?~ R(11±Í›7#R[[ çÐÇ]!ß›¬GÁ£P4…/6‚ ^^^œœœ]]] EQQÑÐÐ}pÈ———‡°m÷Øßãža1Å?~<‚ kÖ¬ñöö644ttttttì-ó† ú4¦ìîîŽýí·ßPE‘­[·š˜˜`ݧôìå"""LLLDDD ä*$$¤¯¯½wï^ì)¯^½jkk³´´DS¬¬¬¶lÙòþý{8CÉÏÏ µššš$‰uT±jÕªÇøðaÆŒIIIååå°ÆùÏÇ»ýÌŒ]ÊŸ>>###˜N$ÍÍÍãããËËË{sÏÍÁÁqõêÕY³fùùùAÑÒÝÝíèèˆ.§ÈËËëèè$&&ö³VfffXSlìS%‘H^^^d2 5ÄÚÛÛËÊÊ’’’:::àó|ýúuGGªñN&“7lØ_u:–cz!544h4ZUUU]]]II‰··7j½,FGG«©©þ ù~A†EœXµjUMMÍùóçMMM¹¹¹wîÜ eDVØø¶ƒjN€ŠŠŠîînô///VŹ7X5VÑËQ(”ÊÊÊŠŠ ¦‘S€þ決 d2®ÝDEEÑC$‰H$²^×ÆÆFPP0,,lÆŒaaa"""lâàà HKKKKKv-†~~~è€ulÂÉÉÙãjõ¸qãÐQé0ÆŸCŸôÖô}þüYKK «áƒUìP#Œ¾üPõœIùŠU………T*•ÕßkCCõb½™Á Ú¹  ¨Û.\Ø£ Ÿ?`+†NÓÒÒrþüùË—/—••ñòòb;M&²³³BBB:::¤¥¥Qaö¶Øè4\\\Lîà°½vŸWìÏ?Ø£þ§ôIwwwII ª'ÆŠ¨¨(Öl|Ÿ- Ïü±råJTæúõë±±±ÏŸ?‡–3P3¶´´”‡‡~q褤±±Š(ƒ¨sqqñŒ3°ƒxèL©²²’M´ww÷€€tP^^ÞÝÝÍäµVEE%>>¾Ÿ;v쓤„"&&†íÃÃÃÏ;÷òåK"‘¨««‹ÖêcýA1Ån’””DÛ%øB2ùC¾‡šuwwwwwÇBmÛú3äû.Sì;w–””$''ïÛ·¯°°ÐÌÌ,//o … óPØ…šK:^__:kï ønõ™L&“Éÿ+ÈBàû][[‹¦ÀÞ }M±>˜!¬M$Ï’%K`„Ý¿ÿþÛÁÁöj8888?)½5}<<<ØæÐØØÈäìô¯f½+‚‚‚¥¥¥Lå câþ†¨Ûnàš<646&æ‰'öîÝëããSRRÒÚÚŠš6±booÿúõkh S]].w@ÑZ«CZZZ˜þM,}^±Ÿ¿7ÆøŸòôéÓ¦¦&6“›²²²uuuØ—¿ªªŠ‡‡ ºT*õèÑ£üüü………÷î݃ÒÒÒ:;;çÌ™£¨¨¨¨¨xêÔ)€¢¢¢““Ÿ)Qª««ûô<Þ[ùùù±ÿ5º%`…³âïï/%%µiÓ&4®)±–†º5*233íííeee?}úÔÞÞž’’2nÜ8($À lÐð£þ¼°[·n1µ'è]†|¿ Ã"N>|ØÇLJ@ èééíÙ³'$$„F£õGïBDDÊ5o’’’’ÀʸçÏŸ—`5›nhh@ÿZ6RD"QCCãÍ›7rß‘••Ý½{7V!×d±nX Òç@§W­ZUVVvñâÅÒÒRÖ%lœÿºººÅÅÅèúmyy¹””¥ÿ0{´´´Z[[+++Ñrž¸$%%ÅÄÄ°ž©ÚÚÚ²²²ôôôúY·~rëÖ-ž‹/N:•››»©© zÀìhíùóç-_KK ðéÓ'´=ikksrrSrìdXÄ mmí3gμxñAæææ   ‰4eÊ€˜˜XuuuJJJgg'ë‰zzzÿüóÏÿþ÷¿üüüÝ»wcýíÞ½;))éòåËGŽ111‘““Œ7îÓ§OP^×ÓÓkmmuvvÎÉÉùûï¿8Àƥƾ}ûª««9ÒÖÖ–’’²zõêÖh¯&&&úúúÉÉÉt:===ý?þÐ××è’+´pòññQVV†ž"ÓÒÒfÍšÕo8888cOOO2™ìééYYY™ššºiÓ&2™¼dÉÖœýl„Ùãêê:nܸýû÷WTTÔ××9rÄÛÛ[QQ±Ï™HlĦÛ:uêÔ¬Y³° Ô£ˆ©©©žž^@@@bbbWW×Ç¡'tÈôéÓ?~üXPPÐÜÜúûï¿ZZZà` í+544øùùŸì¯øƒ°ùSF…âââÀÀÀÀÀÀ«W¯îÛ·OOO¯¤¤$22’MlP eeå-[¶¼zõªªªÊÝݽ¢¢š%&&;vlóæ͆††6lHHH¨b€jQªªªpšßÝݽ¡¡ÁÅÅ¥¸¸855uíÚµ“'OF Zç;vprrnß¾½®®ŽB¡EEEy{{÷G·±±Yºt)Ö·|s®^½ÚÙÙYWWçêêJ  8þ=Tû`ü¾ÈÈÈ®®®?ZYY‰ÄÖÖVAŒõõõ>|öìÙôôt__߈ˆˆ–¯¬¬ìèèxçΗ/_°ªŽŽŽ¥¥¥lTQ†êJ†Ã¾»»»Jä¼¼¼D"‘——÷Â… ðÐÛ·oá'ñêÕ+Ö(o999PBàää477ß=;uwwïÞ½mÔŒŒŒÐ@*äææ–””D„B¡ ‹¶ÚÚÚ$ ëÙ‰)¨Ü©S§¸¸¸ È!//Òã•””À•AøB§R‚¸ººb}I!ÂÉÉ MûY¯¿«#GŽÀÝ„„ M…ƒƒƒ3ÆaòìÔ[Ó‡ HTTjg"++‹ºa‘——wwwÇžÕ[# ¯…Æç‚ÆŽ÷î݃»ÐmKß¿¯¤¤ \\\Û·oG} ‰‰‰aý›Á`ж?bÓmA·3p”=?âÙ‰)Œ>þ G6A\\Æ¡‡w”œœ —/‚††FJJ œ†®´°}åéÓ§EEE‰D"‰DrttŒ–@„F£ùùùAk …°°0ž³gÏ"=ujl®8  êى͟2ò0ÉTÚÚÚÐi{JKKQm~®­­MYYYAAŽƒ‘ïÑ-/]ºÄt:ôc‰MÁzUWW/))ù‘:ÿóÏ?"""pxC vïÞÝÝÝÍZêÙ ›X]] £ìAÏNT*uûöíèHILL,::ÍŒ}ý˜`ÆÎÓÓ¾™*•jccÃÁÁA$.\¸àïïO$·lÙ‚ HEE…µµ5'''ÇÌ™3¡ö¬S“c¤¢î›àâOqq1‚ pú¶KóæÍËÍÍ…ÙØ·{lîñ?6•¯‚‚‚ââb>>>mmm¬å ƒÁ¨©©‘‘‘éqÝA¢¢"111ì)(mmmyyy’’’¨ÇHkk+FCOùúõë·oߘ,lz£¥¥%--D"M›6‹‹«·l°beeejjjLWï?W®\Ù²eKee¥„„ÄàJÀùÅ©«««©©QRRb£à祹¹¹ººZUUu@š*c²²2*•:qâDÖ™]*•ZRR"%%{âÿ*t:=//H$*++cm=Yég#Ìžîîœºº:mmí>½¢0õG½u[c :ž••E£Ñ°v¨(ÂÂÂP_AÂÂB%%%ðï¾’J¥¦¤¤hiiÁƤµµµ©© «åÒÚÚ* ÐÚÚ*((øòåKÔÿ+l®øãü, { ššš¦M›6$-•JMNN–––ÕDotvvfffR©TÞÜÖõŸúúúÌÌL 555¦—“i¨ö#|ùò¥ººZGG>ÏÊÊJ´E¥R© ƒ››ûÆ»wïî1žXŸTTTäååIKKC¹Ÿ á=þdŒª0ókÁ`0ôôôÐX8¿¥¥¥GŽ±¶¶öðð@Ö°TVVòô„°°0Ì }×ÀÖsÅŠ_¿~…‡ Ðü‚‚‚K—.ŒŒ¦9~ü¸èÏAÔÔT__ßõë×£³¬öxfBˆH$Šˆˆ888|úôiäo•[±bÅÕ«WÑ'Œ Èýû÷׬Y³iÓ¦°/áÏ?ÿ„ŽVßêÕ«Ñ HA ÷"‘ÈÉÉ9gθvŠ°<yyù;v SbØ'€§Üpp† ‹ùó磻§N‚Q_G±J88ý¡ººZ\\†¸A„J¥Î;öƒ3¬ —g'&vìØ¡««›““³o߾Ѯ ÎHÓÚÚ:wîÜŒŒŒE‹½|ùÃE\\üÅwÔÕÕçÏŸ·ax‡‡š™™­X±âË—/--->>p{úôéT*5!!ÁÎÎn@…‹ŠŠÙÙÙÁpEòòò¬‘ ÃwƒMMM¢¢¢µµµòòòmmm00*ÀÄÄ„B¡@‚X‚ƒƒUTT/^ŒMTQQ±¶¶~ôèÑŽ;DEEß¾}ûêÕ+4,ôË—/{«L^^‰D‚Æ88#Éĉ'Nœèêê:ÚÁÁ$ÉÐÐ:ÏÄIpqgxA¤¨¨()) UTTܱcµ?À LÑdX£ÕÜÜÜ@}}ýÇ;;;—-[6µÿ7EEEÕÕÕ ‚‚‚µµµ+W® ‚AšÐªÒÒÒLÁŒ°¸ººÂP\9sæìÙ³páÂ…5kÖÈÊÊNš4iöìÙÖÖÖ .Dí˜Gæ­­­,X ¢¢¢§§÷úõëµk×N›6B¡H¤”” *Yåää°ŠEEE؈Î(êêê䧧ç«W¯ŒŒŒ¤¥¥çÎkbb²|ùr¬AvTTTAA‚ yyyÁÁÁ¦¦¦’’’ðPXXXFFšÓÍÍÍÆÆf¨΀ÁÅ œá¥¶¶¶³³óÁƒ?~?~ü™3g\]]'OžÌ&*ÜÜÜàßÂ+ÉÉÉÐy‘HTTTLHH`ã }ÐpqqY[[Ÿ9sFXX8..náÂ…ÚÚÚ¦¦¦à{èzˆ˜˜ï%³gÏÆ:ÞA](.X° ²²òåË—111ÏŸ?¿pႶ¶ö«W¯ …ÀÈÜ`vvvJJŠŽŽÎŒ3Z[[Ÿ>}Z\\ ÝÆïܹ3;;›››ûîÝ»¼¼¼=ú?éîîî1½¢¢†Œ{ýúuaaadddBB‚‡‡‡——WDDÄÂ… aΘ“‡‡ÇÖÖkj%//u­3ä±fûN¯­­Å ŒYÚÛÛ)Êp¼™8888cšÑÖ¶ÂÁùÝ«£ÑEètº„„ÄÉ“'ÙœÂd;µê333±y¨TêªU« Zóh)ÖÛØØÌ›7¯¤¤€U°„6L°±hllLJJ¦$%%‘H$è–~ÄnpÙ²e³fÍBwUUU}}}a0—/_^¶l™‹‹ËÛ·o988*++YOß¼yó”)SXÓ¥¤¤lmmIJJÂzÈillÔ×ן:u*Ò“í–±c;qûöm(ßöh=2f),,Äúéê?Û·oWWWïON`gg7ˆ«Œmmmùùù]]]:K^^~Œ¼#Fuu5_pp0Ó¡ªª*~~~>>¾ÐÐÐÞNÿüùó©S§<<@FF†oòäÉçÎálnn^½zµ°°ð¸q㎎ŽPäÕ«WS§NÕÔÔäáá±³³£Ñh½•ÐÙÙéææÆÁÁA$¹¸¸¸¸¸ÜÜÜЊB¡lØ°H$ 7NFFÆÙÙv·c_œhhhXºt)77÷ĉ—.]ÚÝÝ}åÊ•7®[·nÆ ‚ÔÖÖúûû«««¯_¿>,, [Â;wLMM ÿüóÏôôôÕ«WùòA³gÏ®_¿>33síÚµšššnnnoß¾µ´´TQQ±··ÇF~üöíÛÖ­[§L™¢§§çåå…º$>{öìÖ­[ UTT,XeѪª*333"‘8qâD(²)A¶¶6ooossók×®mÛ¶­OqâñãÇÆÆÆ##££Gæææš™™åçç:tH]]¾-ïÞ½óððÐÒÒ244ôññÉÈÈ@OïèèðññÑ××_²dɽ{÷BBBöíÛ988ݽ{×ÔÔtúôéGe0:::¿ÿþ;S!—.]š7ožªªêªU«à7…rÿþýû÷ï/X°@UUÕÑÑ~¡÷îÝ›:u*ÀÐÐë£%99ÙËËKUUUWW×ËË«³³¦;99"rãÆ 3rrr`¶?.]ºTEEÅÌÌìòåËìŸáÍýüü888ÐГ‚TTTÿÞ†æ7nܤ¦¦¢)sçΕ——g07n´³³knn†éOŸ>µ²²Š¥Ñh|||Ø9‹´´4lo-,,TTTÐCµµµ€½f¨ÎK–,‘——WRRZ·n"³Ç—™Í烅½8ÁÚz0Œ7n8::*))ÙÚÚ?~¼¥¥Í?¬­GZZš™™YYYÙîÝ»§L™2uêÔýû÷3 ÖÖƒN§‡††._¾\NNnîܹ!!!=ÞÝ/.NààŒ•••©©©h—<h4ZNN ñ6„(mmm©©©¬DYYôJ4h ÆçÏŸ˜æÒF*•úþýûòòr¦ôÂÂB¸xÒ' %99955µGƒ¯_¿¾}û6??ê:‚´¶¶úûû úûûÓétOO¤æ6 IDATO999%%%IIÉ'N 2eÊqqq//¯+W®@ÇS¨DqôèQ€¯¯¯ŒŒŒœœFUwuu–’’Z¹r¥““‡†††°°°ƒƒƒ···¡¡!,¤±±QIIIHHhûöíœ0a‚ššú¸ººJHHHHH¸¹¹=zTSS“L&666úûûsppŸ>}š}!4múôé¼¼¼žžžîîî<<<}ŠIIIÐWÛ¦M›ÂÂÂÞ¿˜;w.''§••Uwwwff&77÷”)SNŸ>}äÈ555aaáoß¾!ÒÝÝm`` ""âæææììL&“åää 9 ‚ bbbJJJRRR»ví200èééIIIyyyAÏfðŽqqq!‰VVV .äææ~ôèZˆººº´´ô¡C‡öìÙÃÃÃc``€ ÈÛ·o¡Þ–-[¢££™n*##ƒL&/Y²$00pãÆ"""¨0&&&¶mÛ6AþùçŸMßÙ¸q#///™L†ÿéãÇÉd²ººúÑ£G·nÝÊÁÁ†¦ùCóÓ§O/Z´ÈÔÔM?uê”   8Ó£8áëë+""‚MK uuu/^¼ 7nD¤±±QZZÚÀÀ »»»±±ñСCÙÙÙè)»FYYž‚"$$dllü#uÎÊʘ9sæ•+WŽ?®¬¬,%%aÖ—™ÍçÃ{q‚µõ8|ø0ÇÒ¥KwîÜI&“—-[3wëñâÅ €†††‘‘ÑÉ“'ííí'Oždm=:D&“÷íÛwéÒ% "‘Èhè—'pppppú‹¬¬,:êéé ðòò‚òmyy¹€€ÀãÇáQèãhóæÍ‚ÔÖÖòòòº¹¹ÁC]]]óæÍÃèð×ÙÙð×_Á]///NNNx‰mÛ¶‘H$TW°¢¢‚L&ÄÇÇ#rýúuðâÅ x¨¸¸ pWLLLBBÀ†~Ê‹‹a0ãÇ···GäÍ›7€€€˜N§›˜˜èèè …ˆ‰‰¡’ðÞ½{I$œ×`£ìtèÐ!'€¹wïž‘‘œœFÅ ,þù'àúõë‚P(EEECCCtñäܹs€¼¼¼>ŸäØÍO:uãÆ ‰TWWÓ V¯^ Wz'–,YÂôþ;v |÷HáááA âââÖ®]ËÇÇWXXØã¥uuuËËË»ººH$ºxÑ×××ÐÐø‘:[ZZÊÈÈtttÀ ååå\\\HO/3›Ï‡ (N())MÄEY„¥õ@ÄÄÄdýúõèéëÖ­GF¤õ€âIJeËÐ7V]]5ǶºººXáÍÅÅeÿþý¬÷þ ‚›bãàààà ‰äååE&“òòò---–––ííí999!!!]]]€×¯_wtt¬[·žE&“á- —¥¥%Üž0a`éÒ¥pWCCƒF£Á±QDD„‰‰‰ˆˆHkkkkk«¾¾~tt4ÌÉÏÏïàà·555I$Rúul çââBCÊÉÉY[[îÉlØ°uˆ¼uëÖªª*..®úúú?FFF¨T* ::ZAAJJJfffØrLMMQïÃãÇ×ÕÕ…‘ ‚ººzii)¼#2™¼xñbxGíííP`ccõ÷:::t::dcÃøñãY³fMlllgg§££ãË—/{³¿ˆˆøã?vìØsiii%%%+W®lkkƒU‚ý§~^ìììH$Rxx8 ¬¬ìÇè+×#UUUÐõ3Š¸¸8~GŽQUUupp¸yóæ©S§˜ ܹuëÖ¤I“*++#""äåå¿|ùB§ÓY „¥ ®ÎÝÝÝÑÑÑ&&&¨³oyyy¬K ìËÌþdÅÌÌÌ t,Á¶€¸¸¸k×®Ñéô²²²ØØØ”””‘l=ëÖ­#p{Ò¤IX× (ãÇùòåÞ½{¡@xåÊ•ôvï¿?“kœ1…˜˜Ö½Xxxø¹sç^¾|I$uuuѨípðŠÆÈÈÈ`Ë‘””D;rèuhE¡P*+++**˜‚{ ¡¡q„D"‰D:ÎTaö…|þüyÆŒXÇk²²²)))}?`ÐCHKKËùóç/_¾\VVÆËË«££ƒ*))aŠï.##SVV†îbƒ´‰DÖÇ(,,¤R©p …¥¡¡žŽ …Go}ºôYµjUMMÍùóçMMM¹¹¹wî܉Š=XÒÒÒÖ¬Y³hÑ¢ãÇÃ8swwwwwÇællldѱ°°ð¢E‹BCC]]]Ä…….\˜››Û[~QQÑOŸ>aSšššPºãááùã?V®\©¢¢ÂÛ´¨¨hõêÕIIIëÖ­;räÌßðŠŠ lÎÆÆF(¢ ®ÎåååÝÝÝsæÌÁž¢¢¢‚u⇾Ì}~ƒ¬;vŒIþAaj=²³³à4„´´´°°0L™Ö°|&=~#×®]óööð÷÷—””´µµÝ¿?„àâΙ™iooÿÛo¿}úôISSmÃn^@@PSSƒŠ‹‹±ç¢ž”Ù@&“Éd²­­íÉ“'±éè”9k!‹Wö…TVVbÓÓÓÓû¬XŸœ8qÂßßÿܹsæææ iiizzzð€€@uu56óçÏŸ±»l"B‚ï7(((( ™™É” ©ÞŸÇËÊÎ;½½½SRR¢££ÍÌÌ222ÔÕÕ±yêêêlmmåååïÝ»‡^þÝ·nÝ211Áf†é?;ŽŽŽkÖ¬©­­½ÿ¾:¹Þ#²²²Ïž=kkkãçç‡)UUU<<,X°@YY999º`‚ðññ 1½!ÕÕÕ³fÍtáX¿¦¦›?;;»Ç!rŸßà`ooÏ`0ÂÃçOŸ.**êëë{áÂ0R­G?Ë¿yóæ… ^½zõèÑ£›7o~úô)99¹÷÷WvÂÁÓÐh´ÜÜÜÖÖÖÑ®Nܺu‹‡‡çâÅ‹S§Nåæænjj*--…ã]8‹f~þüù@Ë'‰oÞ¼‘ûŽ¬¬ìîÝ»ƒƒƒ‡ª--­ââbtö·«« š%ü 7oÞ´µµuss›0a‘HÄ.w¨¨¨dgg£ƒ¹oß¾}üøq åkiiµ¶¶VVV¢7õäÉwwwö¢{>ìããC ôôôöìÙB£Ñ Â= •J…V‘‘‘BBBØú>}ú„Ö§­­ÍÉÉi .Æ&666d2ùèÑ£?~tttdŸ*á¼zõ Myøðá‚ à€ÞÏÏ/333**ÊÐÐÐÝÝ,׬Y###óîÝ;¬,±°°HIIikkƒ»©©©åå僮³¤¤¤˜˜4€´µµeee¡/–!ù{$)))//ÏÏÏÏÌÌ . ŸÉØi=h4šµµõÓ§OùøøÌÍÍ/\¸àîîž’’B£ÑZŸÿ¸8ƒ3„……­]»ÖÕÕõáÇl²‰ˆˆ@cP@[[›³³3??¿–––°°°®®nhh(šóìÙ³¼ddd-Z;v {ÔÀÀàôéÓhô#œ8qÂÓ,‘§§gNNNŸ…ìÚµ‹———éQ(**2… P¼¿ÁQYY¹~ýz¦Ä°°°k×®¡»_¾|ÁÞµŸŸ_E½xñ‚——·GŽØØXwww›Ý»wýú`bbÂÛOž<)**¦(((xzzŽý¡˜¾¾~gggdddWW×Ç­¬¬ˆDbkk+‚ ÆÆÆúúú‡>{ölzzº¯¯/tV3PöíÛW]]}äÈ‘¶¶¶”””Õ«W‡„„̘1£ÏÇ÷éÓ'8­Ë¦oooªªª––___¬ºÔáÇgÍš…$ôŸéÓ§üø±   ¹¹944ô÷ß@'˜Û·oçää\¶lÙóçÏããã/^ÜÒÒ2Ðò]]]Ç·ÿþŠŠŠúúú#GŽx{{+**ö9Û µ;âããá;‰E[[ûÌ™3ÐF¼¹¹9((ˆD"1nÝÜÜÞ½{·jÕªœœœ‡ß)//WVVvtt¼sçÎË—/)JXX˜££cii)VËëçE@@ÀÂÂâÌ™3¢¢¢óçÏgŸÙÂÂBYYyË–-¯^½ªªªrww¯¨¨Ø»w/ 11ñرc›7o644 ìèè€&ÐEž‘‘QHHH ¨4åîîÞÐÐàââR\\œššºvíÚÉ“'£¦ƒ«ó®]»¯^½ÚÙÙYWWçêêJ ¼½½{,jÐß {444øùùŸÜ¸qcܸqCâ¨QPPpÙ²ek¾“›› Ó Æýû÷Áw5l ÑhâââK–,Á¦KJJ?~›rëÖ­án£à¤)ô‚R\\¬¤¤]A¢££%$$лvwwï±4hÕÇêå6<<œL&oÛ¶íСCjjjÚÚÚ‚dff¾{÷îÝ»w^^^<<<ï¾ÓØØ ˆƒƒƒá?9oÞ<™ööö¡~†É³“„„zˆJ¥ÚØØÀ˜.\ð÷÷'‰[¶lA¤¢¢ÂÚÚš“““ƒƒcæÌ™0:8êãu„ h9‡ .V \Ý!rêÔ)...¨C%//ú}g*Ažnäyóæ¡mÅÏê% î¶FK@¾Ç…è-$\ii)ª÷/""#еµµ)+++((@yAhyréÒ¥ÞæË÷ìÙsÞ½{5›VWW/))ùÁ:S©ÔíÛ·ƒïšubbb¨ã`Ö—aûù`éÓQ,¶õ@äôéÓ¢¢¢D"‘D"9::ÆÇÇ Ã<ÃÝzÀÅl4Àß~û ýð±­GFF4R‚­„ŠŠ ‚‹88à FãççGÊׯ_çææî1‚'.]ºÄËË‹¿ƒ ˆ‰‰ÉüùóáöÉ“'¥¤¤°G?þL"‘‚‚‚ñ÷÷WTTÄ=pà€œœÜÞK]]4PcJöìªêЧ8ñðáCaaá[·nqqqaã¼8áîîg•°âôhÀŠçÏŸ_¾|yŸö&N˜™™¡qp¡•*AsçÎñóóc󳆴ƒk>سÆ,µµµ)))èKRQQ,@ººº ‹ÒÀÀ@¦ÁDÿinnNHHxóæ :bî---Ø¿†M!­­­ èËÂ… {ûxû$==uRÉ`0òóó±ñ[ZZàÈÌ̬7y•=4-===&&õéÙOjkk{‹‡“ŸŸÿôéÓA‡‚)//þüyffæ Îý‘ŸŸÿþý{ÖÆsptuu½}ûöóçÏCR†ÂÈÌÌìÏ>¸o°OºººÑèu---è'ƒŒ™Ö†zôèѧOŸÝü÷Sl„Åú5gø@<°I1***ÚÚÚPד&&& ¥  ª÷Œ»Éä¿"::šB¡ôvJKK N?~|Gsss±ž1GQQ‘²²ò·oßòòòäåå`úܹsÓÓÓÛÚÚ´µµû|ÔAAAK—.uss»ÿþ¦M›~°Vƒæ?þعsçýû÷Q4¨+¿víZl΢¢"55µ¢¢¢ºº:---¬šxàçç·²²‚ÛRRR¼¼¼ééé3gÎì yyy$ N?q$%%±“ÖP<«©©ÑÕÕÝ»w¯‡‡€F£Mžý¿Äyxxlmm÷íÛ7ÈÚ nß¾½eË–ØØØòòòÍ›7[ZZö¶’6fÑÔÔò2¥¥¥³²²âââbcc¹¸¸Î;·xñbö¾Gqp~5þ­Çž!X€@¥O4…Á`€Þ+pp†¦å"‘ˆ•%tx2bPššš±±±ÐfÀÈÈÚe²AUU5&&æ?þLŸ>ýÇ€¸¸8¬SQQQ¬¿<ÿ½{÷zyyÁvVFFž5„888 áTçÍ›gii; q"((¨ªª ;Ë~ûömt xðàîÝ»ÐãøŽ;úŒŽŽ¾}ûvÿO š6mÖhdùòågÎœùðáƒÁ0Ôwh:qâÄ»wï=zÔØØèççÇÇÇ·páÂÞògffb… MMÍ‹/nݺUPP0??&JJJH ÁÁÁÁÁÁ³ ru«àkjj¦N:´•ÃÁr ¤¤¤Á`ŒŒÖÓï¿ÿ¾}ûv--­’’’E‹íÙ³§ÏSDDDž?¾iÓ&%%%>>> …¢¯¯Ÿ˜˜ÈÆóŒ°óèÑ#èî}88~üxcc£––™LnllôõõEuŸú„F£Ý¹sÆoB™1c†‚‚BppðX'888ÂÂÂvíÚ%&&ÖÙÙ)$$ã¶öˆ±±1v÷ýû÷eee~~~Øàw§OŸÞ¶mÛ°UyØijjêîì8(ÍÍÍ]]]£]œÿ‡N§×ÖÖö¹Žƒóƒºb€ P—‰Á`Ðh4¸[UU×"ppÆ&D"QVV®Wprr ‰„5®>ŠŠŠ„……Ç7 ³jjj***´´´ UîX ½½½°°PEEeìTid¨¨¨ P(JJJPƒî—…Á`À µçÏŸG±3ÁÍÍÍh¥¨¨HDD„ɧ+?~411‰ŠŠš={6Ó!›üü|tµg¸©­­¥P(0|U\\Ü‚ ’’’¦M›Æ”­¸¸xÁ‚LNiGŒÞlGG??ÿõë×ä‘ çgçÎ;6l P(T*•ƒã={ö„„„”””ÔÕÕÿ½3‡j}ø3ÃÌØ…PÊÙ*Ñr[‰V¥´*%Ú´’5íåvK{Š6u]¥T7q)Šr¯n᧤ëZZ4–HÙÍ>¿?Þ:;ÄlÕù~úô9ç=ç¼ç9Ç;3ïó>ÛäÉ“8Ð…b|´Í:!ìé„t 6›Þæ{‚žLuuuSSRØl6Ò(ð£ºS5Š¶ãª¾}ûb.û=iiévçüþ¦!2è#Nž<)&&fggW]]%¿ˆˆxõêJââ¢~\ŒŒŒ¼¼¼PÎ\ðx¼††’'ƒÁhlll—øíÁÇÇçáǘöÒÒ2œŽŽŽ¥¥ePPÐÁƒ»L6<"^,‘_ñäèÑ£ÚÚÚýyd2™Ø§©±±‘Édv‰tßí‰Èæ„t ‡Óì—>AÏ T1116›M¥Ry< œèšŒ±ß Û¶mC©®ði¸þüóϲ²2__ßî­G°aÃ33³Õ«W·où€€ ¡ÓéS¦LèE@ÐQ´'¡ ïH£àp8l6).AÂårÑXåp8ØFt·hß¿þú+ƒÁhMVÓ‚‚‚Y³fihhèèè,]ºôíÛ·PZZjooÏb±¢¢¢æÏŸÎLOO_·nÝ!CÆŒãë뛓“ó•BÖÔÔ¬]»ÖÔÔtøðá^^^>|@íOž<±··/..öóó355533Ûºu+¶fßÔÔäëëkaa1k֬˗/_ºt)((PÂû’’{{ûÜÜ\trmm­———‰‰‰™™ÙŽ;°NŒõõõ±ÌÂ8;;GDDDEEMœ8qĈûöíãóù‡9r$ªû‹õãèèˆO½ooo–y<^ttô¼yóÔÕÕÇéÒ¥–^¬' `ðàÁžžžø´ -½1ø|þùóççΫ££3cÆŒýû÷wjî‚vóþý{''§ªªª¤¤$'''4=»|ùò¸q㔕•ÍÌÌ8ðÅ9ƒÁؼy³±±±ªªª VMÕÇÇ+?Êçó—-[†]µbÅŠÎy,‚žKÛÔ |ø5Zèe±Xl6›Éd2 6›ÝIRtl6›Á` ±Êb±I ŸQ »$ èé<~üXOOï‹uÖrssÍÌÌÊÊʶlÙ²råÊ :ôýû÷’’’cÇŽ%“Éêêê(þþÙ³gÖÖÖ¦¦¦$éÀsçÎ544 ™0a‚ŸŸŸèï<ÏÚÚúìÙ³óçÏß»w¯¤¤¤¥¥åõë×@RRòÌ™3µµµ››{ãÆsçΡX©>„‡‡1,Šà;„ßÐâ.ƒÁ¨¯¯¯®®~÷î]IIIAAAnnnVVÖ«W¯ÚÔ[÷réw¾ô@þû‚í»ó¥ò_wä½ÖoåŒûÚNÎ^âKäÿÕµŽ‚üwï?n¯ôåÙu·î$^½z•••õôéÓ‚‚‚’’’wïÞUWW£úÓȼÖÝôt,,,œ…Û§L™"//íNžŸæ̉”œœŒÚ‹ŠŠ$$$† †v]\\ôôôÐ6êdþüùØ fÎœ‰í¢:*………²)))©¨¨ÔÔÔ ]¤œñù|§©©éää„IIImÞ¼»044Ð…&&&–––Ø¡åË— ¿X< `llÌb±P Ò~ÿýwÑoL++«eË–a»®®®ÊÊʧôúõë·aÃ>Ÿÿöí[wwwìбcÇàÁƒ|>ãÆ***¨]]]}õêÕ|>ÿüùópçÎÔŽôí~ýúñxÿÚµk$©¼¼¼k” ûigõ.þ§Êø•]þ7µ¸Ëá@CÛúXlhh‚”¯ï Ü•^9F6p(üã6Ÿßñï¤ëÁ}4z±b‹_„Ïççææ~1*€Ãá$&&ZYYIJJ¢uuuccãôôtá“===KJJh4ZeeåãÇoÞ¼ ,«ÝB^»vÍÊÊJAA¡®®®®®N^^ÞÜÜ<11;ÁÕÕ ”222*((€ÄÄD ,³¶¶ö¤I“DÜÅÉÉ Û644Ä[P•ÆW¯^5{¡­­-fâÐÔÔ411ÑÖÖ‰d``ÐÒUx455SRRŸ={ÆçóöoßþÅ«ÀÕÕKïãàà™™™ÐŠ7†q÷îÝÓ§Os¹Üׯ_'%%eeea»ß÷ï߯¯¯ŸT>ô¶ö«Ù`8ܼàê­Ï‡Á{'Œœ ‹àL”àº~Æpr½±`¿Âp5…Ã#Áà _ÂҰܻ͢žºœA,,Z g}nw^WnÁ•[`;ôÇÂÜ•P†ó‰ý§æ­S;Xí9ÿÀÆíp+ JËÁ~!°Xõ;Ì_ýùä̧°` èŒg¸Úf »ä­‡†+Ú%B&ZZÔ/++}*H"pZnnn³µ´öïßèããóòå˺ººãÇ„T*•J¥Î™3çÍÁ×Ç@Å+••---Å·¼xñBÄšíQYY -'†]´¤¥¯#¼ÕBYY9""¢¢¢">>~æÌ™¿þúëôéÓEô‰ñæÍlûíÛ·ïß¿WSSkÍÃprrzðàALLLUUUiii+ïKÐí dyy9ÖRPPÀb±DèÌ222Âaø¤”:88dff>~ü¸²²ÒÒÒr„ ¹¹¹OŸ>ýçŸuâǤ͡Ø9>¡µÞ–®óárÿáâC5˜N‚ Waü(˜1 bâaÔ4x[ùñ¨ýB8tÌŒ`£;TVÁì5 ¬çÀ‰øi8hk€çˆºñ¹Ï¸$øiäþ nó@w¬÷ÍåBü]°[ñwÁ 9Ý7Ã*’€•.Pñ,gí¤‡’Ó èX–£Ái ܼŽn=}“!7¬áÉs;Â#áYHJÀX “A] F ûxrÕ°_L8OƒÿåÂ4WxYÜ6!»ÌžÆçó±Õ>áQM@@Ð,ýúõ“’’úbñ8UUU%%%c€¨¯¯öì™™™™ðÉÓ§O_¹r¥––™LÎÊÊ>§õÉdCCô´´þŸèׯŸ¯¯ïÅ‹E_¨««›››‹ÍŸª««?~Ü> )ŠAû.G(((TTT`»hƒÍfO:5>>^ZZÚÞÞþĉ«W¯ÎÊÊjM*¼gKZZ >¼õoìÑ£GyyyÛ¶m›4iª ÿ•,‚.cРA””„µ Á \ŠÉóçÏñEzzºŠŠŠ††ØÙÙñx¼àà`##£Þ½{5JRRrëÖ­***"ú$øŽiuïzŽ÷ùgc“ƒ¸æþí<üùèöƒðšO“àà6\®ÁË7þÀ›R(|çB`,_Ñ'A©Üû ò:<ʆ_­pl7ä߇Ʀ2™à¹ÌMày l^Gv¡íþü[ôñz8N‚âG°É£ Oñçcÿ Al¬_ü £Ì àçÏ'TVÁÓ$X »}`“;d<Àg¨ô†´ë°ËÒnÀ/¨oPèþkA\ƘúOºG]„탫a°ÇR®“ÿ¯ío¼[á ÕaüÃ~º …2jÔ¨ÖÔ¢Þ¼yszzzxxxSSSEEÅŠ+H$’——:Ú»wïÌÌL´üoaañøñãüüüšššË—/@mmí?•õõõÇþKXXlÙ²¥´´488¸¾¾>++kÑ¢EQQQ#GŽÝÛúõë)ÊìÙ³oß¾}ïÞ=GGG”¸¡¤¤TZZš••ÕÔÔ$¢DQQ‘¾¾þ“_‰ÆÌÌìúõë‡þ÷ß}}}Qð+P(”^½zmÛ¶ ¹©¼xñâæÍ›C‡EN)ø+LLL̾}ûЃ¡…äV¾1CCC™¸¸¸êêê—/_úøøÜ»wÍf·æt/VVVæææÌÈÈàr¹Ož<Ùºu«¹¹9,$̆ (Êúõë+** Æùóç¼¼¼yMQQqĈׯ_·²²*•:vìØ7nLš4I„áŽà;æ«b'ø¸Œ±ß¨uÂÓB÷þçßä Ÿ^‹«Ñ  uõPWòr`n‰)êjPû/L¶†FxžQ¿C#˜,€˜8 QÁÎòc'ýÕ`ªíÇíì\xùæ;B}ÃÇ>íÆÀÇ>@Œ ›< ­?C×âJGû}64‚ƒ5<ýÊ?­mM›½?n.^¾.’ÀL{“ýxÈc![®äF¥À´OÅp uà³ô­€Y'07'"v‚€ ML˜0¡5êĆ <==ÝÝÝeeeUUUâââ0ÿ{÷î¡ŠÚ¾¾¾½zõÒ××WPPؾ}{BB‚™™ÙìÙ³}ºwï^ìÐæÍ›+++ÕÕÕeeeuttx<JÂÿ}±Âìر#44´_¿~fffâââ·nÝBÞk­|c²²²»víúã?”””tuu_¿~}ûöm¦¥¥õ•KÐÙH¤èèhsss6tèÐ~ýúµ”Ρ§§}çÎUUU™¥K—z{{oܸ;ÁÁÁÏç#u&L˜ŸBü ~@HmšEq¹\¤<`…&kkk›ššú÷ïollÜy²v,‘×`áZHøõó¼±íl?/þ‚¾* 5„ߎá@xžÇÎCJ:I`2Š^Ãì)pz? ±†ÞŠrõó%Þ;!öä݇_c`Ѻf„Ùº¶m‚MÛá×kðöIó‡G‚»¤ÿ#…ü¦-ؤf.y– ƒõ¡÷pu†_¶|lü=f,ƒ§w@VŒ‚°Ÿaù‚Ï—¨ÃFwð] ©^°s3ÀJ_ˆ¿ ¯}>“Ü×ÁŽ¶Çxt#OŸ>¥Óé4MVVVNNNJJŠB¡HHHÐh4qqq111ÑnÍåååššš‰‰‰–––_<¹²²2''GEEE__Ó uuul6ùÌÀÓ§O{õê…ü(ø|~AA¶¶¶¸¸x»å¬­­ÍÎÎ>|8Fký…uuu222$ÉÞÞ^GGåÓWVV¦¦¦†e…j–ŠŠŠþýû'$$ˆX÷m%|>¿°°PII {KL&óÙ³gH###ü»x±ÂäææJHHèèè´·ò±X¬¬¬¬Áƒ#]«®®îÇèGÐÃA#êõë×úúúêêê­¹¤©©)''‡ÅbcÉ„iÿ—5ü×Rߦ³“¨T RaúD8ôŸvô—ó8yÀGÈüé‚„èŒô+#+ôÿF*>yþqCVàÂ!°úïâjo7r² + 9É ö_k“ªòÇfmr2eŸ½s¡¶Þ½oñ.Â|spl  ‚öѧOŸ5kÖ=z´5ꄲ²rK³jlá_Š"‘HI–ÚœœÜ¸qãZþ©S§‚‚‚>|8`ÀÈËËKKKÃgƒ%“É͆’ :vìد×%€D"¡\:ÂÐh´fQ@èÅ 3xðàfÛ[ùƨT*ÞJVVö‹w$è! ÕÒ jIII ‹Î‰à»ák]Üð󳎧A&ƒá@H{ ýÕ>þë×|÷ÂÅ€ WARB÷‚©HHÀ‡jxõæãôz°½†7Ÿr„0™ö)¢o°@fÎç>ëaÉÈ+ü*QëA]ÐË>w— «@ôR»¢(ö‚;÷?·$=hÆóñ½j¿]ÆöíÛ333srrº[ŽdÚ´iT*uèСóæÍ›7oÞ˜1cÆ·hÑ¢6uRWWŠ4~ÚœÙIØÝü;Ö(¶¬‡Ò·| ê +­…¨0ÒÀ|(41àæm`2áq6LY d2ÔÕŸ^+@\ Ön’2¨­¿àÏÅòç©y Rþ®Üç•ðŠƆ­éÊ-8vî?ÿŠK`Å"è­AûáM)TVAð1ðÚ 4š7JàÙ¼Ò3a•dçBÔ XáûŸØ‰ÞŠ™/^·õµõ\„‡.>A@ÐVddd®]»Æ@ù¾úöíûìÙ³óçÏ+**öíÛ÷رc×®]kk8õ»wïÎ;ghØê/t‚rvúî™é!Aà þÁÀPï ‘Ç`ìÇI0Í–l—u -?Àä °åX»Žî‚¨ãàºú› Àú'ð^Wã>öºܼÁjøÖ?ÁåPøT:öË„„ ¶èiÃÄñp+æ¯ P©°Ò‚ý¾ÜÛ&`0áÐi½jpb¸¬éG=Âî#0z:”U])‚ï SSÓî¡ã‘——wtttttlw @¾R?m ÅF)q°Pl‹%Š=tèÐΓµ»¨­ƒì\ƒáÆ Ÿö¶Jß‚±áG·"z)ÈÊ€¼|4hôï ÚÍ}S y…ÐW†|UjòÿÀáÀó|¨¨‚!úÐG¥m×ÖÕƒ¬ ÔÕƒœ¤\ñ£>·³Ù ¨ÐaBv/ÙÙÙt:J¥¢Ê¯RRRT*Šý5¡Ÿ? ÄäéËÈɸR–«*w€þ¸ú’2Ò-^êj Þb1Êv".ƃÚvÉd`2!éòÇXðÓ¿ À×ÉWƈ|+TVVÊÈÈH¶ÞXLð]#¼ØJ8Ät%ÂIäD§•ë^Ú¦N„€O‡í|C¸Î9+`àO`3^Cr„î…^òÝ-V§!}J£ÑF½páBáB]222gÎœquumÓ­ ”””¾ê¾j¼-eì Ô ‚®D`N"<ÙÆO»¯µNºÄ7Ó(Hƒ;àï,;¶¬‡1ß{F85˜€€ ‹áñx \.îÝ»7uêÔ'Ož D±?ýôVêNL&³EºvíZQQÑùóç'Nœ(p¨ººÚÜܼ°°pĈ¥¥¥§NŠŒŒüã?„5Šö¥s022òòòÚ¹sgû¥'ø ðŠ„p–ŽfÏé9 ~4„ÕÀ­núÆd·Oi¾JhÖLAðm¡£:Z°¢mé¿U„Ý-Ág¢¢¢ºå¾t:]AAañâŇBBB ÿüóÏÑ£Góùü­[·îܹ366vúôé]/'A'é<¯Qðx< Ò‹tëõd2YÀ·-jô™LûÕ lB†j ‹‹‹Óét.–•€ çQVV†U¿&4 ‚¶òäÉ__ß_~ùåÒ¥Kqqqššš«W¯677÷ööNKKëӧϦM›¦L™!!!999çÎCÖÕÕÍ™3gýúõvvvXo—/_Þ·o¬ZµjÁ‚+W®tuu7nœ««kJJʱcÇ~ùå—¤¤$EEEtN³R:u*::šN§[XX¬Y³fĈÍžÆ`0‚‚‚Þ¾}kdd„ª¶ܺu«±±ÑÉÉiݺucÇŽÅ_UXX¨¬¬xðବ¬aÆéèè@ll¬¼¼<¼~ý:&&&##c̘1+W®¼}ûöÂ… kjjV­Z% ’»»û™3gV®\ùÇXZZ^¹r©4xx<žµµu~~¾———ŠŠÊõë×---cbbõõõUTT***LMM.œ1cFTTÔÅ‹-ZÔØØxôèQ‰dooßìûñóó£Ñhnnn,ëСC?NOO711INNÖ××ÇÔ‰‹/¦¤¤œ}ºoß¾Í>Qÿþý322( ÚöôôŒ6mš]LLÌÁƒÑWÍÕ«W§L™¢©©éïï¿sçÎ1cƬ[·¶oßþúõë/^hhh !uttÂÃÃoÞ¼Éf³CCCUTT\]]­­­CCC9‘ÛúkÀ;8¡ÿ•””ž>}Êápº[4‚WRRBÓi‰Äãñz‚×S›3; lˆ‹‹#+Œ¸¸¸†††¼¼|SSƒÁhlld0l6›Åb±X,T­óJ$ è 0]BLLŒJ¥R©T …"!!!%%%!!!)))///..Ž-ö3,<ª D0kÖ,´ÔlwРAðêÕ«ŽºÑ¢EƒºH$Òܹsoß¾]XX8xð`ìT¸ÚÑѱ®®µ888x{{———÷éÓßU\\œ´´ôøñãÑ.™L¶··¿wï^qq±¦fsµ>ñüùó»wïÊÉÉYYYUVVÞ½{÷ÀS¦LQUU>ÙÕÕéHOOÏÌÌÌiÓ¦-\¸ðÖ­[ÿý7R·Š‹‹>,|ùµk׬¬¬ÐãÈËË›››'&&jjjòù|//¯Ÿ~úÉÙÙÙÙÙ¹•¯‘ Y.|™x<š¢p¹\---YYÙî–Ž€ Eêêê˜L&™LFnÛÀçóÅÄÄïSwIÕÎ… 4oC¾\ …ËåR(T °§BËÃèôA%Ô ‚Îi¶hd¢)...!!!--'R0Иt2¡E´ lm-‰!?%Œf¿äÛV§««+°]^^ŽW' X,–°1¤ªªJ@(**9r$6×Ç:¤Óé¢Õ wïÞÑét4ÅLOO=zôÅ‹½¼¼„OVSû\NH[[[QQ±¼¼¦M›&''wåÊ•‘#G^¹rEAAÁÁÁAàZƒA§Óß¼y#''‡o744€… –••?~ÜÖÖVBBÂÒÒÒÛÛÛÚÚZ„ä-!ìéÄf³Ñÿ\.—0øôp¸\.›ÍF³6›M¡PÈd2~Twˬækc'°ÙZô¥P(Èô ‡ƒŽ"Eý¢Ag€>?HYP'Ð6R$íSë‰Ø ‚¶ÒŽ€¿—/_¶ãF Û®®®©¿œœœ¬¬lNNZÛÂ6ÈÈÈ”••á[rssá¿ €0µµµ?vssÖ«GeddtåÊ•fÕ‰7oÞ`Ûoß¾}ÿþ=ê_RRræÌ™111û÷ï¿zõêœ9sP <È :}útzØìÖÛÛÛËË++++11ñìÙ³“&Mzúô©ù Z‚MZ.ÁápˆŒ2=4PÅÄÄØl6•Jåñx(pâÛ‹€OËÀȼ‚t .—K¥Ri4zôxȳéýÈ:ѡ‚T2™Œ ÑhØÿ˜FA(N¯^½ªªª°u²ŒŒŒvtòèÑ£ í¤¤$†í"I§Óúé'ÔrêÔ©øøøëׯ t5hР“'O–••a¦•ôôt¥ÐRRRT*õŸþÁZšššètº¹¹y³ç?|øÛNKK€áǣ݅ ž?>44ôÕ«W˜2™lhh˜––Ö¿ÔÂçó-Zdbbâíí½gÏžšššŸþÙÌÌÌÌÌÌÖÖÖÂÂ";;›P'Ú ï˜³‚˜¨ôpuÅNˆ‹‹£Œ-ñw—TíÅÆ"Y) –OÇã¡…a¤E gFŸO,[G?ÁG°a‰T\ …‚F#R$¿FCɺ[v‚ï 33³C‡-]ºÔÛÛûùóçÛ·ooöS†ªAß»wOMM­wïÞG7lØЯ_¿¡C‡þþûï§NÚ¼y³ÀåŠ+BBB‚‚‚Ο?/!!qæ̙ݻw/[¶LØ~²aÆ3gά_¿þèÑ£rrr—.]JHHØ»w¯è__qqq''§_ý5 `áÂ…çرc>|Xºti³çÇÄÄìÛ·oáÂ…åååAAAFFF˜S“••U¿~ý|||ˆ)?лwïÌÌÌ/^hkkoÙ²eÖ¬YÁÁÁkÖ¬ÉÏÏ ‰ŠŠòðð€!C†8;;Oœ8ÑÚÚº¶¶öüùóbbbÆ €«W¯^»vMÀ¿‹ %ðá×\.—Ëå²X,êÉf³ñ±þm¥ºº:77·wïÞÚÚÚxßB‚„Íf3 ôÝ…¦1ha”L&£°ìoÀÙ ‰‹²Û"é1­{0ô”@ê>›Å&èTð)›0åHÀ»Bᔵï(<¤‰ANЕÛž Ïž=ûêÕ«çÏŸ?þü!CN:Õl&qssóÑ£G¯_¿¾¨¨èÈ‘#GÝÜÜlmm †¬¬ì‚ ¶lÙ"p‚‚‚­[·æÏŸ¯¡¡A"‘¨TêÊ•+ƒƒƒ…o¤§§½téRUUU111çãã³qãÆ/>Hhh(—ËÝ»wïž={€F£íÙ³§¥0è;v„††úøø€±±qll,ö· “ÉóæÍÛ¿¿››þÝ»w=º¼¼|æÌ™!!!~~~þþþ|>_]]=22ÕÁ˜yòäúõë%%%£G¶³³öHd±Xk×®õòò8p`›øÛ‡Ãá0™L4ÉA!hfÞ½sR›n}üÁ© (qÒ–˜L&2G ,±È€ˆ™&ˆ,± ¦ Ò+æ€Ìêæ­×>3EK`B£ èš±=ÇàöîÝ»êêê/þä¿}ûV^^_”-""bÉ’%åååòòòOž<166–””lér‡óüùóŠŠŠ!C†ˆ^¡ojjÊÉÉa±XÆÆÆÏ¢)))yþü¹„„ÄàÁƒ…kS››+!!!¡aaakÖ¬¡Óé***øöºº:6›u[[[›-&&6|øp•òüüü¢¢"iié!C†|Q ‚–À¼¯‘E‚Ëå2™Ì¦¦&&“Éb±[™éøûÀ××÷çŸÞµk—ŒŒ j©¨¨¸uëVNNΙ3g\]]ÀÓÓóرc¾¾¾]]]ä¹¾råÊÁƒûøø b27oÞ¼qãƲeËNŸ>-pÇ3gÎ(Õˆ)S¦ÄÆÆFGG»¸¸ðù| ‹¿ÿþ[^^>##C hêܹsK—.MKKÃú~^½zõþý{qqqIIIIIIäsD1ï®—ªÍêúéùPNXTk;„%t"ÊÔt*X%|’䌇þGz•J%“ÉètA!z&\µÙ!MŒp‚®D`Ðâ?-]/[»ÁÔ‰fó±~‹ðù|sss}}ýÈÈÈî–åGóqBê‡ÃijjB9î †²²òµæÔ‰ŠŠ eee¬±¡¡A[[ÛÐУDêD}}½´´´poß¾ÕÑÑ155½}û6~QÀÑÑñÆ>(T/¼¸?þü¿þúKKKK[[[__?&&FUUµ¢¢bܸqrrr¨² VòæÍ›,ë‡U' +++)Š´´4Ò(Ðô©hòÓõRµÙÙ ‹GkÀ KS…ÚÑ0r@ć:AËK¹6…"áêµcjŸožu5 ~‹@à|‚Î?hI">Ÿ ËØ°aCrrraa᯿þÚݲ| ŸäXÖF»[®îGZZZSS“N§·æ䆆†}ûöáu Ô.++ûîÝ;ó"†ß½{çîî~øða##£;wî¼{÷nß¾}hAEEeþüù[·n­¬¬TVVf2™üñèêê¢Ìl?&H&‘Hl6[RR’ËåâÅvíÅFî§ð)® Aú–1Ÿ–ˆ èTÿM‹ìH…À< ð|Ñ3sÄ‚ø:*ÍêÄP'èl,rxÍ3ÐaqAô]ÝÝ‚SSÓ={ö`Þß:Æ ÓÒÒrqqQPPènYíÌÀápÐt9iwŸh=…‚‚‚ŒŒ —Öœœ••Õ»wï‘#G ´0àÂ… _¼|ùòå @é Þ¾} FFFØÑ¡C‡@nn®¥¥¥¬¬ì½{÷àêÕ«ÍÆbý  8¤Bp8"<ª»˜ö'Šåóù˜ýz!åûéBçT‚ÎË€íbê~?Á‚¶¬×âM´555hŸµ o‹ëا# o‹œÑ•——G¡ºÝ˜ë£Ýá§ß:­œ–t%øµ!¼yùÇüê>tèrdâóùÏŸ?ONN600رcþcccü×HïÞ½QfäÂÂBѵ Eýû￧§§£]ô•uûöm,Ãò_ýÏŸ?·´´lß-¾?ðcµÙ1Ü-´§Œ Iæø„ÕªC¿dhÊ%°v ?꧔ +p'árŽ&W* e±ø¬‚<¯¼¼-™ôd úôéƒ)¤O©ù€ðz"ø±°'£ïvTwâÇ\ô¼xñ"ú­äóùåååL&sØ°a‘“&M‡bcµ%$$DdJÍîÝ»çÌ™ƒW˜››[ZZþòË/&LˆŽŽ¬‡³Nàk0;]w1í´N ß$ÌzÎÿ”.9>¡]T‚P$º¥BÀÑ&ëöKƒ3ú±QTT|òä ábKГSTTd³ÙXRoüÇ¡»¥# è`“0|^ûîªÈÌÌÄB±y<Þ¦M›:îë닳oß¾fC±õõõ333…Ûù|þ¹sç8nܸfoÿôéÓãÇãcbbÖ­[wîܹcÇŽŸ8qbîܹƒnÿ³}w u-âw»ÑNuûYB `؃a»èhyZ‚fOÜÊ¿/! Ò%0ÿZMMMyyùŽ•œ€ ©©©a0(@ˆÃá lÈÝ-AC`e—˜«Éä­[·†‡‡ã«¼‹ÀÀÀàæÍ›999Š)))Ë–-;tèPKêľ}ûôõõÇŒƒoTTT¼xñ"0™LvéÒ%qqqäE€à mv·D_£N`^O˜~˜Ô™\.·¼¼¼_¿~Ý-AóL›Œø(ÃH‘Àlâ?æ Á7„À –˜˜þ‡3VL`zõêÕ§OŸºººÖœìîî~ìØ1??¿ëׯcÞPgß¾}’’’3fÌhöª÷ïß?xð`ûöíøƼ¼¼¹s熄„X[[£¢+‘‘‘C‡%J• е߳Nà™ª««ûõëG¡PÒÓÓ àÓ—””ìß¿ßÃÃã+ˆˆXºtiuu5æÃ×DFF._¾œÉd2 áò=º}ûvaaa¿~ýœœœ† †b0ÑÑÑõõõ†††îîîÍ.o766ÊÊÊž>}•`Æ qqqùùùP^^Î`0º«àŽººúÒ¥K¾ D€—¼³ž'µoæ„YÀ1E&“‰r´ Wú$ èQ r¢H‹À‚ÙàSҳ»à „F!„¬¬lUUUkÎÔÖÖÞ³gϺuë&L˜°víÚAƒ?~üöíÛGŽi)JûîÝ»<o„ øFMMÍÒÒÒ;v :TNN.,,,11Ec`]áñÜõ|­:Ñ°råJT[ nllÄ"¶¿ÔO—<~ü¸ŽŽÎÁƒ©TªÀOrttô‚ úõ맧§wýúõàààS§N¹»»@CCôiÓ|ˆÕ´ïZÿæñ’ðù||6Ò",K Á6AOƒÃá0 qqq@A–XŠ³o1×AWÒ·oßÄÄÄGYXX|ñdOOOiii___,«ššÚÍ›7§NÚÒ%III4ÍÔÔß())ùÛo¿-\¸PYY™F£ÉÉÉ:tËòDГéĹ®®njjê¹sç:ïÝN;vìĉ…Œ===§NZTTtûö튊 mmmtèÂ… )))qqqþùgvvö­[·Þ¼yÔÖ»¯Zµ*""¢£Ëùv%GàÝ-(ð¡¥xÓFpp0ŸÏÇ—ÄFÄÇÇs¹\¤K=z”Ïç7‡ ‘HË–-+++ËËËKJJzýúuII‰]Nž<É`0„½˜lllŠŠŠþúë¯äääÒÒÒU«V _ëääÄçóÌ’Ø=–NT'-ZôÓO?y{{ ×D€ÇÛÛÛ`-~~~hÛÙÙ9"""**jâĉ#FŒØ·oŸÏ?tèÐÈ‘#MLLñ?ÅÅųgÏÖÐÐ9rä™3gðwÉÈÈprrÒÓÓ³·· ÃÚÃÃÃ=<< —.]º|ùrañ ÆæÍ›UUUmllîß¿ïß¿wrrªªªJJJrrr˜PæççWTT,[¶ -JJJ.X° ººjþúë¯AƒÙÚÚ¢“'Ož¬««›––ÖÒÛãp8ƒ600ðôôÄ\ùcÍš5III%%%öööå!oݺeooÿúõk´{àÀ{{û¢¢"´9kÖ,ô fÍš¥¡¡¡££³téRTAòòòìííóóówïÞmhhÈápàÉ“' .6lØ’%K222°Ûñx¼èèèyóæ©««?þÒ¥KÍ>&98;;_¹råÊ•+¶¶¶úúúsçÎ-++kéUt/ÈtˆÕwG™QýÔî­c˜6mšL ôîÝ[Ä…………­1…ûûû0@¸½¦¦FFFÆÏϯý¢·‘òòòW¯^¡íU«VikkwÙ­»l "¢Cr“ [Õy]Hñë h3=a ¯éGZZzĈ£Fú†Ü:ËÙ ÈdrXXØ°aü¼¼ÎŸ?/p´²²2!!+=BvyHNNÎÈÈhlltqqIMMõññ‰ŽŽ.))Y°`AqqñîÝ»•••×­[‡N7nœžžÞ† îß¿ïææV]]½iÓ&ˆ‹‹›9s¦¶¶¶››N_½zuFFR*òòòâãã“’’¼½½dãñxÖÖÖùùù^^^***ׯ_·´´Œ‰‰±µµ555½sçNŸ>}LMM¬jjjÏž=8p Úe±X)))ãÇ—’’KKK|@RCCCEE…¡¡aKoÏÏÏF£¹¹¹±X¬C‡=~ü8==D"ýïÿ‹‹‹€aÆýùçŸ,kìرrrrøk p÷î]}qúôé¼¼¼;wîèèèÀÅ‹QŽ—ÜÜÜQ£F 2dË–-555§N:thnn®¢¢bMMMBBÂòåËÓÓÓíììÐ}---û÷ï?oÞ¼ÔÔT+++L›Ú»wïŽ;|||,--oÞ¼¹`Áæèè(ðD˜äèïûôéÓšššÕ«W766ÿüùósçÎÕÑÑ™1cÆþýû[™aP-y*;vlíÚµ………sçÎÕÓÓ³µµÇŽ655ùúúZXXÌš5ëòåË—.]BJÍ:fff.X°@GGÇÆÆæöíÛ_)pO)hĶÃ9ï΄©Ð¼Oþ~È“ Á! 脇6,±!Úý¶Y3AEØ(ÑÝt¶uh4ZXX˜¥¥epp0~…^‡ƒw®@Y™LÆœˆØ÷‰DêÛ·/Önnneeeååå°zõêÕ«Wã/|ÿþ=ÚPRRÂ_ˆ§¨¨häÈ‘ø$°ººº@§Ó[Jy†ÇÊÊÊÊÊ <<<Ž92{ölT¥…Á`øøø;vÌÔÔô¯¿þ9r$:ÿôéÓ‘‘‘h;$$eÑUSSÃ:ÔÖÖVTTDOÔJNž=00ðŸþ xôèQttt»o-ÂS177÷Úµk—/_ž5k–››[DD„££cnnîÀ¹\®••U~~þܹs™L¦‹‹‹ŠŠŠŠŠÊŽ;„«ªªìííÇçìì|êÔ©iÓ¦ýóÏ?͆y|£`9UB¡4k^éɘ5¯EcG±Àî–< :ò܃OÙÅÄÄðÕßQâ2þ§Šº¢»E ÄÅÅ }‚™LÇÆ|Ñ(:]€qãÆ-[¶lïÞ½µxõê*R@ß-ÿQ,))QWWG»ÿü󨩩544À… ÐÌ£5*ddd"ƒÑr&~Š/̵k×RRR<ˆIîéé–šš:f̘¦¦¦qãÆåç燅…-]ºÿ·?räHpp0ÚîÕ«Úxóæ vÂÛ·oß¿/úî 0©©©©©©kÖ¬122RUUMIIINNž}ðC·Ûm]¤NôêÕëÈ‘#ø Ï¡C‡Š‰‰ùûûÓh4)))ŸvQ_»vm¯^½LMMnܸr" 8ÐÙÙ922rÆŒ#GŽŒÝµkWCCƒ±±ñ;Ü°aÙ3gÖ¯_ôèQ99¹K—.%$$ìÝ»W´ÁdÎœ9k×®=qâDß¾}ãããwïÞÝ·o_”z911ÑØØ8/////»D^^~Ö¬YÍö³oß¾… –——¡ Ÿò˜5kšØÀòž©¨¨œ:uª²²’Éd2™LƒÁb±°° Ìåõ»ÿþ'èFb€üîPj>qqq*•*!!A£Ñh4š²²²ŠŠ ´XŒ€ð¨îbºH€9sæ\¸pËt$%%uüøñ5kÖØØØôîÝ{ñâÅ}ûö­®®nk· % `æÌ™ $ÉÃÃ#  uss³²²BOkkëË—/ O»…ÑÓÓ‹ŽŽ^ºt©ªªª˜˜ÇóññÙ¸q£è«úôé½dÉ’aÆ¡“Ë—/+**644üïÿãp8Ñ#ººº-©;vì õññccãØØXá!âäämffvÿþ}i888lØ°óõBYªlmm±‰þ† ÊÊÊÜÝÝW®\Éår•””âââbT06mÚôúõë5kÖxzzª‚mÞ¼yÚ´iêêê222õõõºººÂy¿ð ·ßýÏI›Ü᜜œx<^LLŒ………¢¢¢ŸŸß‰'Ú}kä\'ÂSQØWý9deeKKKñí/^¼hé.-uòÝЦá*ìé„&Ol6›Ëåjjj~¥ŠH@ЩTWW755¡5Zd'“ÉøQÝì ­ì¢…B …Âår)Š–––’’R$êëë ‡Ãa±Xè³À#ŠBt2H³E#“B¡P©Tqqq ¤TÈÊÊ"MçÐÉÝ>Ñ)êD¯^½šý° ¸S{xx,^¼¸°°ÐÀÀ@ ý@å»ììlünBBÚX¼xñâÅ‹ÀÝÝýÉ“'ººº Øi 111oÞ¼ÉËËëÛ·ï!C°C8pà€ˆG˜1c†]NN‹Å266ÆvÀb„AÅãþý÷ß·oß0@GGMY¤¥¥[ï‹)%%…Þ^```nn®„„ª EÛ£G....++k6¬BOOÿWÐÔÔø£P(”ƒúûûçä䨨¨èëëcšÆˆ#„O (**211éÕ«fÇ022ÊËË{öì’ÄÈȨYÓ^r¿ïôéÓ{ø·órÚzw¸GåååýöÛo“&MB-YYY_sk”p¹žŠºººwïÞÅÜ«««?~ü••¾¦Eœ&à·æOç;³Û| *&&Æf³©T*ÇCˈ­ŒÀfoâââh–†>(w9‡ÃAG‘">?ÎoAW‚Æ*2² ¨h)( úb'ZBBB?Ëo74 •‚F]]‹¬h’’’-õ) “vÜ®YмJd2ù‹9”D£¬¬ŒOÙ$šþýû£Ph4š™™Ù׈ÑÁÏ®š=Ô-Ru%¢Ýáz÷î™™ùâÅ CCC™¸¸8{{û>œ¾1š½"F5àJU`ÎNB èáp¹\dOqqq4€1U¡¥«HŸ ;bi¸\.•J¥Ñhè‚:Ai'QÿÈ:ÑuFðC‚…Yãh4ö?¦Q`|ŸÖ ‚ïÑîp»wï=ztyyù®]»vìØ¡¤¤D"‘œœœnß¾íè訥¥…êTˆàÞ½{ÁË–-³¶¶nŸ§¢Allìºuëìììäää,X ¦¦†™ñÎí}%ß-øðkn¼;Ðÿíl#@°ÙìÜÜ\.—«««‹·utl6›Á``©c‘ž€|™PX¶6oC*òhB ÃH‹@º çS Ód9‰ »À†%RqQ' …‚ ,ˆ5 $wêN±‰OA³ ‡ƒä566ÖÖÖ655544ôïßèСÝ-cWPYY)쇨««c³Ù(0šÅbeee <E8ÔÕÕ}øðá+šõTl uuu222$ÉÞÞ^GG3€ðx<ä’×í 9]@vv6N§R©rrrrrrRRRØïZÖ»˜bË®˜E‚Éd666²X,&“©¨¨CÆ'ì IDATØš’;ÊåË——-[vãÆ †±gÏž={ö<{öLKK«£îõ×_3æÉ“'XívSYY¹lÙ²ÄÄD‹…ZfÎœyðàAôѸ{÷®Í£GÚ”¸O‰‰‰³fÍÊËËkÖŒüóúõë÷ïß‹‹‹KJJJII¡AŽ÷ ÁÇJa)°LÊHA#ŸÁ` /|¬j¾zi+³´Ò§Â)øú”O ¯q Ôˆœ î¯DÑõbÖ ‚æév]¿‡ Â_Å…J¥b•Ñ¡ÖÔxM[=O:ôðáCT>"///--ÍÉÉ ;áë¿DŒmþ§Êø™SO˜N˜A£e&Ô QD8á?ºÝ- Ó¦MÛµk×СCQVå;wîŒ7‹çþѺ¢ â2´RËf³™LfO«Xÿ­°qãƪª*|¸ŽÝèÑ£,X°k×.Ñé@Ú²§ñx< …‚jÀ£ÌN-)äOåð° *•Êf³±v …‚Üüð!ø@  øºÆQ ÿ‘^A¥RÉd2ú_ ž]wIÞÍêáQJð -êDϤo߾Ϟ=»{÷nRRF;v옣£#ªhùҾኅOòGÎ)iGRSS³eË–´´42™lii€¥û{ûöí™3gîܹS^^þÓO?Mš4 o¹Šˆˆ¸téÒû÷ïÇ/¡¸¥>ÃÃÃ322¼½½÷ìÙ#&&Ž¿*##ã?þظq£@èÿüùó333edd°–ÚÚZ//¯;w‹OŸ>}Ë–-Øß+###88øéÓ§:::ŽŽŽîîîØUÏŸ?÷ññÉÌÌÔ×ן2eÊÒ¥Kñ‰ QQQ.\ظq£­­mEEEddäµk×JJJ†ŒŠ´„„„äääœ;w]RWW7gÎœõë×ÛÙÙ;v,;;{ýúõû÷ïüøñøñãýýý‹‹‹÷ìÙ“ŸŸobbrøðáfó v=(¼D"±ÙlIII.—‹O+ W-}Fò€fl¨¹ª#Ÿ¢~˜TÝ~ ˆŒ‹”@^OøFü—|wMN:^¨©©áN0oÞ<ô+Ú£´µµ±šÙ@¥R¸jժŋ ¿¬U«V%$$ˆÈ1ÿõt 7m[Y¿~}\\ªíõõ§õLüýý£¢¢^¾|ÙÝ‚46-ë9YšE^^ÞÑÑÑÑѱ»é~†«èÄäØôÛ@åº0—ñ®¸ /v| ^¶> >¼ªªÊÕÕUIIéÌ™3·nÝJMMUUU{{{:îâ⢯¯ëÖ­Ù³g_¹riÁÁÁ~~~ŽŽŽ“'O>wî\DDDkúÌËË‹OJJjhhðööõÿûL™2Eø)ì...}úôqrrºvíÚÖ­[{õêµvíZˆ‹‹›9s¦¶¶¶››N_½zuFFFXX<}útÔ¨Q†††>>>¹¹¹Û¶mKJJúã?ðÝ^¸pÁÕÕ500ÐÖÖ–ÏçÛÙÙ1ŒÕ«Wøð!**Ê¢¤¤DZZ:'''%%»ŠÅb%$$ ×’››gmmmaaž’’RVV6qâÄéÓ§‡‡‡Ï™3'--­ ¿NÙÓ ÁápÐ"‚ð¨Æƒ­þâóAaßóHÀ2Æâ“ñ æ¶DÂ%Å[!0(<ݾÊÙñê„„„D`` Úf³ÙAAAæææ3gÎD-(¤²5¥è²²²Û·o»ºº666®ZµJà¦]³ZÐ]ß zzz>|è¨Óz&(î³»¥ha¥ŸD"½yó†ð!èÉ”••µµ`*Þõÿ¥Ús&O“'Oqtûöí¯_¿~ñâZ–Z²d‰ŽŽNxxx``à›7o £¢¢P...ýúõ»wïž““Ó»wïvîÜ9wîܨ¨(ð÷÷Ÿ6m65Ñ'ÐéôM›6íÙ³G؆VvZÂ>~üøÈÈHزe‹¡¡ajjêÚµk™L¦§§§¹¹ùƒÐ_M__Íš5›6mÒ××÷ññQTTLJJBåutt|}}ñE'Ïž=»|ùò;v º®………ÙÙÙ'NœX¹r%¬\¹ròäÉYYYÂõO¨®®ŽEJ™L>{öìÞ½{}}}€Ïç9r„Åbõ ~¬6;†›™)0 ¥@A˜ŽúÁ¼ÒÑ9=GÁ&øþ@Z16äðqø ãs·/qv¼:A£ÑÐw 455™˜˜`-ˆVz”0`ݺuØUÛ¶m2dÈ¡C‡„Õ‰ï›U«Vµæ‘[yAë!á,pqQµµµ³gÏîné¾À•+WúôéƒÕLÅÿ/|2ÿ¿à=õœÉ“§§ç Aƒð-·nÝŠ‹‹CÛ×®]³²²RPP¨««yyyssóÄÄÄÀÀ@uuuT„¤¡¡áõë×=jlld2™ÐØØ8}útÔ‰¸¸¸»»;¦NˆèÄÄÄ6mÚÔì|U@“’’úâCá}® ÿý÷_ÈÎÎ~ùò¥——W}}=:dgg‰‰‰:::III ,ÀJ•{zzZYYaTaaa»wï^´hÒ%@EEEBBbÏž=’’’“&MêÓ§ÏßÿýEÁ€F£a*Ê5kÖ,LT6›]RR‚2t/˜uŸËõ‹±hÒ†9>aµêÐL {¬65AÐeDibZ.™ø Nø¯ôïÍ:ñEZïQ*€„„Ä Aƒ[:!333$$åuÙ¼yóĉ±C§NŠŽŽ¦ÓékÖ¬Ájëv¸7m^^Þ† >|åÊ•_ý5''G à7Æ“'O|}}ùå—K—.ÅÅÅijj®^½ÚÜÜÜÛÛ;--­OŸ>›6mBkBaaa˜ÛÙÙIV\\ëYëy>Ï€ƒŸÐ¥|“lƒ¤¤¤Ž=ZUUÕÚÚ ed[ZZ ó.t4Ç;Ú’ È­iòðð@A~~~~~~))))))ø«Wƹô¯Eƒ0¼>æ÷º­°²²‚£jDEE4'ZZZJKKKJJØÂðÐM\\ÜÁƒïÝ»G¥Rµµµ‘ê1ô’ÅË—¡×ZuJHHÀ×/'êêê€ÂÂB¶C)))EEE®®®pïL£Ñà²'\ÜððððððÀŸ[[[ —FñY…„„ðIW·mÛ6bĈk×®UTTÀ«‹ŠŠÞ¼ysóæÍ‹-hiiýñÇÞÞÞœR0l¾dÒÒÒèQ…QæÈOò–CâKlÓÄ@[þ_ +þ¿ M˜‚4$H¾?lFÛZÄ¿u¢G¸÷(e£¦¦&))IYY¹»£–––S§NuttqâDXX˜——`õêÕ¦¦¦7n´¶¶$oZ@]]]qq1ç¤'†††áááccc AAÁ´´4€••Õ„ ÒÒÒ8s3UUU½{÷NRR@¥RwìØÑÒÒÖñ466æææÂI5QQÑŒŒŒüü|%%% ÃÒÒÒ=z„w$ëŽ>8κ¸¸¬^½:++K[[-""ƒg’’’.\øÏ?ÿÀ’ÕÕÕׯ_ï± xzìùA‚‚ ņSÂ0W%ÀA‰Wáj;ZpÔV‘ü—A¾puJ’£Ì©PO-_ø8uö«‰ØP©T G¡ n†ýñÇÚÚÚ¾¾¾ááá‚‚‚GŽÃô/_¾Â[ƒ}))):::ðÄ»wïrS'q{tttŒŒŒöïß¿hÑ"üküÔ©S=¾²455HéøÝ»wžžžÛ·o?~<ƒÁÀ§“?tèК5kJJJক••¼¼|@@@@@À¥K—ììì?~'//¿hÑ"WWב#GB'11±ššì[š…çÏŸ7짥oÖ/òzBkUý*ÿ ½¢©©©¥¥EBBâG7¤¿•––Ž1âgP«ªª¢Óé‚‚‚ý©„íͶXßÓŸ« ?ÀœàÞ£ôýû÷þþþð3FSUU ïNEžF£Íš5 ~†+ÑÐ5>>žF£ÙÙÙAÏWÀŒ3|}}+**É›àææÆ-p~¨ln©Ð?¸°°ó”Y³fA[ ¥¥ÕÑÑQPPÀæ9033C ôǧR©JJJ …¢®®ÞeÍœôÁqvÞ¼yëÖ­‹‹‹ÓÖÖÆ0,::zîܹðë†?Ò¥¥¥¹¹¹™™™°·¹§ÇžXÐz"†ap¸Q _¥A±s¸@á¤6IHìäé€-Z¦èNãü‚ŦM›æÌ™âééùáÇ={öDFFB=}}ýæææ«W¯ÚÛÛ¿zõÊËË‹J¥644`fff¦§§6qâD]]ÝÄÄD¼K-AÄP(”“'OjiiéëëoݺÕÀÀ ¥¥%!!açÎFFFxwÐ.9r¤££ã… lmm'L˜píÚµmÛ¶555A'???ŸcÇŽ988Ü»w/$$ÄÄÄDNNîÕ«W¨__ßóçÏ{xx˜˜˜èêꦧ§óððܼy³  ÀÍÍ  §§·wïÞÅ‹ûúú¾yó&((è'ô ÎG—óy& K'@¶³ºT›\±bR›ÔÐа²²Ú½{÷@ÝÔwÀÉÉ)&&ÆÆÆ&>>¾Ï•455•••)**ö6(̘1ø¡²²²––V@@òCñõõ=zô(ç¹fff°Í†mß¾}ïÞ½HŠFEEeß¾}l^‘ØØØ.$---á´BVVÖåË—ËÊÊ&Nœ8}útNˤ­­mÍš5ëÖ­cóúC˜››üøñܹsóçÏ煮àüOü™ÿ7€9Á½G©¹¹9òÞé´, }Üáx.77·­­sŽ¿¦¦FFFf0¼iÜ‹É"¿[Øx6W®._‚øYøßۥľ{©T*—¯lUõÁqVRRrÆŒ±±±[·nMMM-..F_hNNNXXXdd$“É”••EKóÄ &qÓó²(ТŒ‹èìì„ŽOpzÅNp)*BBÒðO&Š€þN4 Úp'^Rð§ZpfÏž½gÏÿ 6`&//áÂ(^dgg7kÖ,WWW—!C†ìܹÓÊÊjÓ¦M«W¯>pà@LLŒ­­­¡¡!…B‘””|èááD2øøø|}}·nÝÊÑ‘#GÜÜÜLLLà¬ù´iÓ¢££á|çêÕ«+++W®\¹|ùr€‘‘ÑùóçÙN§ÑhG566öññù矶oßîíí½gÏÖÜÜ<{öìuëÖbccÏœ9sæ̙ѣGC…ÛÿWÃöŸÒÜÜ<|øp6µÉ%K–´´´Àï·¹¹¹­­íWqÇÄĸººþùçŸýiöýû÷gÎœ™••…çá†ææfYYÙU«VÁÍÎÎμ¼¼ˆˆˆ7n¤§§Ãa[[[“ÉôóóCÃ3ˆŠŠ ã²±±IHHX¸p¡£££””Ô­[·¢¢¢¬¬¬nܸaaaÁvÅ“'OÞ¾}›³%²²²ZZZ/^tqqÁ0ÌÀÀ <<\TTôùóçl®4‘‘‘ÇwqqÁ»dã¹|ùòÇÏœ9caañ = ý燙Üx”ö ί æDDD„……³³³a\Ücm¨IÛó½y:!÷øvƒÁ|0——Æðá¥E¾CÛHþk ¯Y´8ÍZ¸@Á÷ dKü 2¥8;;;;;sî D›k×®]²dÉË—/yxxÆÇÏÏ÷óññ]¹råóçÏåååZZZðõèââ}ŸFŒ‘™™ùúõëööv8¯„ÿÏí®ÎÐÐÐ3[ëêꦦ¦~úô z¨ª««ãGEÓ¦Mc{EDEE¡Ïâââqqq%%%ïÞ½“••…³§ž;vlܸñÝ»wÒÒÒòòòpÿŒ3ð¡Í•+W:88¼}û–Édª¨¨ ©+~~þË—/WWWýúΡœ#GŽàÛ¶qãF$X²dÉ’%Kˆoÿ_Æ¿Lm²¬¬ °`Á‚A’#FNNŽÍïÚÚÚzÆŒ7nÜÀ÷j@@À!C8O?{ölBB®]»óá¸qãÜÝÝUUU—-[VTTÄVþæÍ›lÿqK–,ÉÍÍuttlhhððð7n\\\œ´´teeåÔ©S ÿy[[ÛÞ½{ÓÓÓ¯^½J|G¥¥¥âââ .äºþ%üs¢Ÿ¥½ESSóÂ… ¥¥¥hP{ìر7n\ºtéû{Óþ„ˆ‹‹ãpÄqÖÚÚzèСÑÑÑ1110 --íÝ»wh 33³WMúÎ=Çj0Æ † J1—#h4\”€ªšÐŠ c'H¼¬´cÑ2.P Ó­Qô!Žâ×BDDdêÔ©]’––ÆË6 7 €‡‡†{õ¶Nn••íNªGäå呵ÀN7n÷UA±¯.IJJ"Z.!V›ìNOë^á°»Ìå€kIÃ.3µw™[=!!úegddüùçŸmvqq177 õòò‚Aªèèè]»vV®\éìì ½ø¢££:ôöí[…ùóç{yyÏoⶠ"fëÖ­JJJ02¥ªªªØx¶ÒK—.]¹råÕ«Wüüü<¨®®Þµk|E0ŒùóçoÙ²VÒÚÚ ÝÝUTTrrrºkÏƯ_¿Îd2ííí׬Y3eÊ”–––Í›7'&&~þüy̘1›7oFo‚^ýùæD?=J{ËòåË÷ìÙ³yóæ3gÎœ›4'HôRqÙRÑŠ///ŒÉ¦R©4 ¯"ÐåJ…ÐUä ÉÏ ç£Ëù<8j“z’Ý)bÝg.ç^Ò3S{w¹Õ †ªªê½{÷ÔÕÕa\%A›ïÝ»WPPðäÉ]]]¶º¼¼¼¦¦fff¦ŽŽìŠÐÐPww÷¥K—fggûûû¿xñ‚Ó¯; þÍäÉ“{,ùõë×ÂÂÂ+V°ùA‰O¯¨¨XºtéæÍ›¡¹þùógð¿žêcÇŽäää CñƒØØXo@555ƒQYY©««;tèÐÎÎÎiÓ¦}øðÁÇLJÁ`\ºtÉØØ8..ÎÎÎöê¯È0'@¿=J{…¸¸øõë×çÏŸ¯  cW¬X¾‹7íׯ_SSSQRðŸsss///>>>SSÓ;v¬]»¶ÿÕ.\¸ððáÃÓ§OGóÂÂÂÛ¶mÛºu«„„…B±··¿}û¶¢¢"ü7æ¦Iýñcî-Håi“ãÇað///´% ²% D,iN œ92àZòǃ+ø¤èÛã‹´%H~-ØÌàÁ€KµI=IнÂ!Aæò^Iâ3µäV×××g±XÇwuu0aq›áMÝ»wsÎÐබöܹsK—.ÕÒÒª¬¬ tww?vì,0|øpOOÏåË—wi!ÀLVðsKKKjjê£GÜÜÜØ©µ´´ð_«¤¤äÓ§O¹— íOOOqqq”×EMM pûöm´â÷äÉÀ›7oŒ¹¬ÓÅÅåÅ‹ÅÅÅ6lœ={6555))ÉÔÔàêêjjjºjÕ*[[[x;Ýõê¯Èàš‚‚‚ݨˆ=JÜ_ˆÍÅ|Ëg ?~üû÷ïß¼ySYY9zôh£<Þ´ãÇdz°°Ø·o|°Áæ5«¢¢‚ßF›GŽA7ˆ×ØØØpSìåË—øÍÄÄDôYCC£¸¸8//OBBbèС´nØÇYί~Íš5+V¬ÈÌÌÔÔÔ„\\\ Õð^ÈMÝ÷ü`×"ÚÛÛ‘Q×+ D,²"P U@š$ƒ úqE+ÐZàãã£~KßÎÇLJ¼¡z5Æêr™‚„䧅sQb0®Â¥Ú$ž¤ŒŒLw ‡™Ë{%iˆÏÔN[Žž¹l3`Ê”)ÜŒzíÒœøôéôÈ´µµ}úô  ¢¢Âiaa"Âñôkè›ëÛ·oãããcbb•¾¾¾±±ñßÿ]YYùûï¿ß¸q&ÅêOžÜ„„„!C†ÁM*•jii™’’R\\ ­ .{õ—àǬN úãQÚ+xyy»ÓToÚ¢¢¢³gÏv©$ðó@¡PTTT¾Ïµh4>_XX˜3+vMê§s¯@ºÐZ@ÊNȪ³³“F£±-JqØ$ƒ ÛÈ ¿LÏpGÅAá.jU‹’6–––’ÂÇ$?3Ÿ>}âLÚ8àWáRm’XO²;…Ãî2—·µµõJÒŸ© ·z¯Ú ¸Ö«ÌÏÏÿ몤  @£ÑJKK»,?~üø{÷î¡ÍÆÆFõë×Ï™3ïE¶k×.ÎPì‘#GR©Ô.Uï “’’,--ñ#:<;wîüí·ßØÂâââÖ¬Ysúôéƒjii>|ØÉÉ f€éùùù&LÀBp`SZZ Í îU@~~°9ñ¯‡——÷îÝ»¢¢¢?º!$}‚Ëp¾Eq!ß'øZøx Ò– ù>p®!àÕ`¡›úÜãRåAFH}}=©Jòó#--ÿÔ• ô$¡Âa—™Ë}}}û,iH[½Wmæ8诨¨€žà›¡Âej9:äììüôéÓ.ƒRð(**Þ¾}ýF#vîÜyôèQ(]ÅIyyyDDÄŸþÉv³C‡=wî µµ•ŸŸ?**Š———m§WÐét¸Þ‚€aÜ?C¢½‡4'—aÆýè& èUM˜q|sgBv[¥Ø`’ÿœx›MÓâGW=Vˆ·Ià‡¡C‡:t¨ªªªµµµµµµ©©©­­ &mloog±Xø¥9’Á=Ð…ÆÑh´!C†ÀŒRRRC‡EOûͲB 'I pØ]æòþHçVç²Í½ºw˜799~<}úÀ½\uA>WĬ]»vÕªU'Ož„9!………‘‘‘FFFÝÚÚÛÛÙ¼ÔÞ½{%d¦M›¨/\¸0vìØþ8T5êèÑ£Ÿ>}BëE©©© £Kø_Òœ !é´¬ .Uv—ˤ-Aò}À–8íŠ.Í âzи²DEE›››[ZZ˜LfKK LßÖÖÖÑÑ,ŠA¾W’ÿ.È–àáá ˆ`ÆF!!!AA[ˆF$ IDATAQQQ(hF¡Pд=çSý} Г$P8$È\ÞgICâÜê\¶¹Ç«ÀÔº)))¿ýö›‰‰‰¾¾~XX˜¡¡¡ŽŽÎëׯ·lÙ¢¯¯O L \9©©©á¦°‡‡ÇÅ‹ÝÝÝ_¿~mmm---žž€aØñãÇ»;+99YNNŽmÙaøðáååå[·n;v¬ˆˆÈñãÇoݺ£±ûÌÚµkOž<éååuàÀ‘¨¨¨ÄÄÄ;vp/›û Aš$$=Ãö³„÷kÆ9®" £££¢¢‚\µ@؆Jø% ¶=\ÖMeAæãã£ÑhhBS¾%΃ØHH .‹(| aÆÆ!C†À‡ð™ ¢ÒZ=Ib…Ãî2—÷GÒ ·:—mî}}}CCC//¯üüüýû÷_¼xÑÑÑQ__fw4iRLL ÷½=ÖÂÃÃׯ_ߣC…B¹råÊÆ8°oß>¸ÓÄÄäÔ©Sœq  ÃîܹÃiÞ FDD,X°@JJŠŸŸ_DDdïÞ½½Ê뉪ªêÅ‹/^,--ÍÃÃÓÙÙ¹~ýzooïþÔùÓB!HHzþ_æëׯÝEzœœœXMMMeeeŠŠŠHV¢;455g̘ñ÷߳툊ŠÊËËãºá½£¢¢¢¥¥¾‘SRRÌÍÍSSSûùnˆˆpwwomme2™lJnQQQË–-»|ù2ôñUQQÁ§2¤Ñh#GŽ\¾|¹‹‹KC„'Ožefföå–——'..§Ö~]8;„Íǃ›AÊš—X,üš ƒSCCCcc#ü ×(X,V[[[{{;4$` 6ùkB2À/…ŒÌ AAAèìD§Ó………yyy…„„„„„øùù¡7ÔMF¹G¿',‹SOÒÖÖ†W8lhhøòå t€©ªªâÌ\©¯¯ï³¤a—¹Õ{Õæùüù³¨¨(œwÀ0,//¯¨¨HMM­»$ŒKccãÛ·o[[[G¢Ûû@SSÓëׯ;;;Ç?PÏLsssvvv[[›––[<ý¿‰¶:QUUE§Óû¦ðEBòÁ΄„„T_{{û–-[Æ3ÔFÝÝûèþýû666/^¼èNp Ád2ÛÚÚ8ëikkc2™ƒ÷¹aƧOŸ¾{÷àRôór‡RRR‚solcÜŽŽ&“ UwL&SAAfoTTTܾ}ÛÍÍ­¹¹%«é1ßckÇŽëãã³uëÖ¾ßÒO@—æDjƒKHÖ foäçç‡Ö”5c±XP7Ù!ýº’žÀçjD±0W#ü xpü¨Õ ž$Â!AæòþHäVÇCÐæÁmS(•ï¦  Óéúúúý¯gÈ!lQ%ýGPPÐÀÀ``ëü ùæDAA™™Y~~þ… ØrEWUU9s¿‡N§÷6Oö¡C‡Ö¯_ÏÇÇWPPÀf¤>|f’ÿòå gE<6lˆŒŒ,((ÿ;M{ÿþ}++«äädü»€“ôôt“ÄÄDn2;BfÎœÙÑÑqãÆ .Ë÷ÈÚµk‡ æããÓåÑïf̘ɓ'/[¶¬ËŒÝñüùóW¯^)++ÛÙÙ¡yýƒ~øðaõêÕ™™™Ã‡_»víŒ3àÑæææ   »wïÊËËÏ;ð7oÞlݺÕÓÓ399¹®®ÎÒÒr÷îÝ°p}}½ORR//¯Í¦M›ºü©ÎÍÍõóóKOOçãã322Ú±c‡´´tmm­»»{MMMrr²½½}tttocÑFuëÖ­.ž={6**ª¶¶ÖÈȈM1555**êÎ;bbb“'Ovvv3fLyyù’%KÚÚÚ"##óóó#""º+IÜQïÞ½[»ví¾}ûbbbΟ?ŸÍËËÛ]=YYY~~~ÿýwTTTBBÂðáÃ=<<ôõõ}}}=z$##³nÝ:”ƒö;Cù&|Lý–`Š5ÁÅ •J…ÞMÐœÀa“¡Ø$ƒ ^² -Að}šxW¨^åZ!!!é'?Àœ(--_¸p!ç¡ÜÜ\eeåq×ÑщŽŽÆ›¥¥¥Ož<ÑÑÑyñâEŸ«ÕÒÒº~ýzÿ›7¨dggûùùÑéôÝÿ:¡¡¡>>>îîîK—.ÍÎÎö÷÷ñâÅùóçååå555333utt wlHHÈæÍ›mllÞ¾}»qãÆ´´4˜’“fÏž­¤¤äææVZZêááñüùs¨k‘““=gÎ77·³gÏÚÙÙåääŒ9²££ÃÄÄäÇNNN­­­... ƒÁ`lݺUGGçñãÇmmmS¦Lùüù3ÀÅÅEFFÆÞÞ>>>~Ë–-bbb«W¯fkINNÎĉG½iÓ¦ºººcÇŽ;6''‡F£éêê&%%ÉÈÈèêêöá×½¦¦&))©K%ò;;;++«Ó§OŸ={zýúõ´iÓ444–.]ÚÒÒrúôécÇŽ N™2%99Y^^.mwWRTT” £êêê—.]ššš:}út …BPOMMMbbbnn®„„„……Å©S§’’’†N§Ó._¾}n644Ì;×ËË f¡‡°MÓb¸}ûv55µ¿þú«³³sÒ¤I‡ÎÈÈ3fÌÎ;ÕÕÕñ͸sçÎîÝ»·mÛ¦§§÷¼|ùÒßßßßß¿K'È+W®„††hkkÿõ×_ZZZÍÍͦ¦¦^^^° †aŽŽŽÚÚÚ7n䬡¹¹ÙÉÉiÕªUÝùMu9/ÛåŒr—§GDDœ9s†ÉdNŸ>ÝÆÆf÷îÝ»wïf0€ºººM›6=zôˆJ¥oܸQ\\¼Ë˱Áb±6nÜxùò厎33³¿þúKXX800ðõë×111hè¹ÿþääd'''˜ÍMíƒîçæ •••îîî({øðážžžË—/Ÿl``À3 ¨¨èСCðó‡[ZZ8uÖ«««ƒƒƒœœ"##6l˜5kÖÍ›7áÑ”””¡C‡¦¦¦ÂÈE--­3f¼xñÂØØxÆ ÁÁÁ“'O^³f qI‚Ž‚ÔÕÕÃÈE‚z`aCCÃððp€±±±………  `ZZÀÊÊj„ iii?Êœ@2(F‚F£µ··£ý|||íííüüüø 2× É`ƒ7Ä| á_hWÐh4*• ÿ¢2¤¿ É÷aP̉ÎÎÎiÓ¦}øðÁÇLJÁ`\ºtÉØØ8..ÎÎÎNMMÁ`TVVêêꢤ‰ˆ¼¼¼‘#G^½z5;;[JJjúôé0y˜5kV```||üÒ¥KážèèèY³fá½í³³³ñÙÝÛÚÚíííñõ°MÓæææÆÅÅA¯'Oždff9rä?þÐÑÑ9{öì¸qã^¿~ hkkß¹sGMM ™çλwï^TTg›Ÿ>}zïÞ={{{›'NŒ?>++KUUµ½½}÷îÝkÖ¬¯Å´´´˜˜˜™3gvyãëÖ­îÎœàœ—ínF™ó Úµk×úõëmmmÇwôèÑãÇ—––nÙ²…Á`|ùòeܸq555‹-’8yòäõë×ïß¿Ïy9NüýýùùùÝÜÜÚÚÚöîÝ›žžžšš*''ôäÉ”U'44T[[[QQ‘mjŸ`nþòàÁƒÆÆF+++´ÇÚÚÚÓÓóéÓ§œ5wïÞttt”––æææfff¶¶¶ry¡—/_øøø466Â=оuë4'èt:´%£Fâááùðá,   €ôò”””,,,ŠŠŠº»þ_CCCºÿáa±X·nÝrttD òòòZZZ©©©\Þ ž÷ïߣ¸¦ªªΖx˜˜Èd2mllà&//¯»»;2'V­ZµjÕ*@UUUaaáÕ«Wmmmœ—#(ÙcG¹¹¹!”¯8gÎø¾(Ð&ÌúTXXØÛŽ wÀÍéBãŽØà~èª-ŠÎo°‰&“ øÄ)T(Rz=áwrj%“ ƒbNœ;w.555))ÉÔÔàêêjjjºjÕ*[[[—/^w9C™——w÷îÝãÇËÉÉåçç >|˜-þKÄÅÅMMM£££¡9Q\\üìÙ³ 6<{ö¬Wõt9M‹øôéÓ­[·`ˆ³³³––VPPZîHJJNŸ>=...,, ¾Ñbcc­­­»Œ¾hhhÈÈÈÐÖÖÌŸ?_NNnëÖ­çÏŸ_°`‹‹Kjjª¡¡! &&FHHÉá¹råÊÙ³g322ÍÅÅÅÙæe f”ñ'~þü9((hÅŠ‡ZZZ–––£AAAEEE?~„jw®®®ÊÊÊ'Nœ`»'rrrÏŸ?‡m–““[µjÕµk×ìíí===ccc¡9ñìÙ³âââ¿ÿþÛÐÐ?µßãÜü"??€·h4ê1<999aaa‘‘‘L&SVV¶W:wð™ôðððððÀﯭ­…ðf!œ´ƒQ=ªªªøS~ûí7sŸ,‚F£±X,¶ÅÅÅ,‹mÉQEE%%%…ûÛA˜››'$$ôXìãǼˆ8>j}}ý¡C‡Ž;VTT$$$DlCP²ÇŽÂ+ÒöxE”ÓÙÜ·~ì ÍþBç%èàGfpggg'´"ðâ°dìÉ ‚Ü–ð¢±øUä…g`—&ð‚"+W®LLL„/Ÿ_¼Ø }V=‰ŒŒ\ºtéÕ«W{Ì^÷ýÕºÿúà?!ƒâV˜0dÈ##£ÿ¿•jiiYVVV\\Lp†aüüüNNN_¿~ÍËËËÎÎ5jÔ²eË Teptt¼wïT¯‰‰Á{1  ”>|Ò¤IÐoÏ‚ JKK¡“––V\\ìììÜemãLJ¶@VVvìر™™™;;;!!¡ØØXx(66ÖÖÖ–34¢¬¬lÉ’%»wïfs¸"Î(›˜˜ô8£üðáC&“‰$˜h4>­}||¼‰‰‰¸¸xCCCCCƒ¨¨¨¾¾~w³l,Z´Ù?0J8##CLLÌÚÚ:..Sà7ȹ&çæçÏŸßØØ/ææ¹ï„Á`È!€ŠŠ ´'77·­­ ?ØEØÛÛ?|ø0..®¦¦¦¼¼͵sŒØ/ù_,§÷0ìRaaáòòrü~â_ǽá-úô ¿3''gP“ÖÁ„²²2´'++ }Þ½{w@@Àúõë ÷'%{ÕQ=^ñ'wæfó;GÒE (X^^^$°CB2àóH@ï&>dÿЂ^”3fÌÞ½{áç_}9/6C@JJŠššZÆ`,‹K5|¯~¾ÿÿ# ÊêD~~þ„ ðäP~¸´´”Ày‰B¡dgg£ÍÑ£G¯[·nþüù7oÞìÕøakk»lÙ²¸¸¸+VDGGÛÚÚÒ-ì>H§³É*«¨¨<}ú”­Ì¬Y³DDDbbb&L˜#..ŽtuØ`h@Ÿ(:nkkšžž^TTtäÈÎÓ/^¬¢¢bii ý%ÚÚÚššš %%% ²¹ŸQ†3ø[F nii)---))aKÑ¢¡¡ÑÝuñào\IIièСp¾`Á‚¸¸¸´´´ñãÇÇÆÆΞ=›3QIsó? è»’œœ ?à³Á™ .--íÝ»wHAš‘\¢©© ÈÈÈ@Ž@ïÞ½óôôܾ};±~¶ŠŠÊÝ»w?}úçË¿~ýšžž—ú†´´´„„Ä;wážÆÆÆׯ_ãÍÎfeJIIÑÑÑ{ çäìÙ³666HŽ c Jöª£¸¿âÏå[Æw>&€;:: W-Pl2j‚ä»7tN*>™x‹¯æDº9‘|ežŒN§sÎPŽár@G‘†††¾5CTTÔÂÂ"::º   ==ÝÑÑ‘¸| œ´´´à7¿|ùÂF)((8{öl8Ë;wîÜ’’üæ›7oдî‚ Š‹‹ÓÓÓcbb †™™çéYYYOŸ>ñ÷ïß߸qcĈÄùí¹ŸQ†³àø’П'æÎË6AŽØ€¿ñÏŸ?×ÖÖÂGeÆŒâââ111ЈZ°`ç¹=ÎÍÿ(LLLôõõÞ?ÞÑÑ‘••µeË}}}¸ø WZSRRª««544ètzBBÂׯ_ Ö¯_Ÿ’’ÒÞÞÞÜÜÌÍ…FŽéèèxáÂ…{÷îµ´´ÄÄÄ8::ö¨¢ëååÅÇÇçààpûöí””;;»úúztTBB¢¼¼<33“Ëf@þüóÏÔÔÔ'N477WVV._¾œB¡t—üd@033ÓÓÓ KMMmmm½rå ~aÊÀÀ ==ýÇuuuÑÑÑP½ ¾¾%%%322àRAIâŽbƒøŠÜcjj:¨fXwàõs PBå ããモœüüüß$!dÐÆ<”w®] ¯'øР¬Syy¹¥¥%Á'ËÊÈÈpvvVVV655½}û6þ”cÇŽýþûïjjjüñ‹5“ÉôòòRWWWWW÷ññÁ¯¬FGGO:UJJJOO/44Mw999,,lÊ”)£Fòööîîeþüùs{{{UUUKKKv½eËÀÊ•+Ñ f—%‰9xðàêÕ«óòòœœœTUUÍÌÌ``g—½ZWW·zõj]]ÝqãÆùøø|ùòî÷凶oß®¡¡Áb±º«– žî¾G’aP̉Q£F½yó?îLMMe0ÄŸ±±±øÙ}(nÓŸÜŽŽŽ>Ü·oßСCa 11±ššô3ÿüùóÞÖÿæ͔ȂÅb=xð Ë…” À%…ÂÂBÎXR|mh˜ÒÖÖ–––†f²ÍÌÌ FLLLllì¼yóxy»XVzüøñ{šššïß¿G±ž]‚f”Ñ8£ŒbÇÐ}<99íA/P*•ª¡¡ñèÑ#¹o 6ÌÏÏïܹs—Fà¿ôGoSøÐD‰‹‹»xñ¢œœ[>š›G—nlltuuí³Ü@A¡P.^¼È`0ôõõùùùÇŽ;lØ°+W®À£úúú†††^^^[·nÞ¶mÛÍ›7%$$TTTŠŠŠnß¾ÍÏÏϽÂÏ‘#G¦Njbb"$$4wî\IIÉëׯ ö”r^]]ýÚµkÕÕÕÓ§O·µµÕÐÐppp@É.ìííEEEõôôzõ±víÚU«V¹»» KKK'&&&$$Œ9’ûz …B‰‰‰:t¨¡¡¡  àÒ¥K‘”ÀÏÏOLLLMMM\\<(((11QOOÏÁÁááÇ€eË–¥¤¤À$‚’ÄÅñ¹çÙ³g¯^½êGÇôüD/òP‡¦ÞÙ‰Íó„„dðà|äÐc9¨RN‚‚‚S¦L¡R©xA‘ššKKËÖÖVGGÇ/^Ìš5 ÍHº»»¯\¹RHHhÅŠ•••ÆÆÆ]*õutt;wÎÁÁaÁ‚—/_666†Áu¡¡¡NNN{öìùý÷ßýýý‘¶~NNN\\œ™™Y{{»Á‰'ÌÍÍ­¬¬† bcc“””…7X,V\\Ü’%K"""lmmÍÌÌŽ=Ú¥gDBB¤I“rrrÜÜÜTTT<<< 4"4àUOº,ILNNNttô¤I“†êææV^^ngg———ÇÙ«_¾|ÑÕÕ 722‚'N„2åH’;((häÈ‘ ¥»j êéò{$0°Aàýû÷|||sçÎýüùsssóéÓ§yxxvíÚzyyÉÉÉqžU]]=tèPŒŒŒ¦¦¦{÷î)((Œ=šÅbaöâÅ‹‰'^¸p¡Ç«‡……JKK1 khh¤R©K–,Gáda[[†ap°ëêêš““#%%E¡Pþùç ü½½ >_.˜êééõØbs"88X@@@ZZð¶¶6˜Ôº¢JHH îb£¤¤dæÌ™prhâĉ0Ì´¢¢ݳg???l¿¼¼<|·r^|壙x---ü0º³³SQQ‘B¡@£ÒÞÞg”W­Z…aXmmíìÙ³Á77ÙiÓ¦½}û–Ë^ú/sôèQƒññãG¸ùöí[:Ÿü|÷î]!!¡Ç÷³N{{{YYYøùÁƒBÿ‹¬¬¬••UFFF?¯2¨trðÝ~6s‚F£u|Ë»ÒÞÞ Ä0ÌÛÛ›F£Öãï¿ÿ q0ÂÁÁN§ãoáåË—………Ð?ùÊ•+h?Œ‡üûï¿á¥¡R3<´uëVÀ‡à&L^ôñãGøÛŠŸõhhh P([¶lÁp#8V9tèj- GÜ·oö¿æqI6ØÌ :ŽÁô—°¯ØzU^^ÞÔÔ´ǤI“&OžŒ®~àÀTAµõ`¤91h –9a“É|öìÙÇëêê¸?‹Åb½zõêþýûœÿ{ƒ:Ž±é IDATDUUçL<]MÓZYYM™2ðŠŠŠW Ž;ÆÇÇ÷ùóçÛSYYùüùóÖÖV¶ýÕÕÕT*õøñã=ÖÀ%ló²ÜÏ(·¶¶Â9õS§N!£ RWWwÿþýGµ´´_Ž“ׯ_ãm„©©©©©)ç~üÔ>Ö¹ùÿ,ååårrr"""NNNNNN3fÌà|ðH~HGåää jý}æíÛ·p­u×®]Ož—û7Ñ·ˆˆˆ°°pvv6\íGpÙDPjkki4G)ƒØDƹ1gS‹ùúõ+›º&Ò2a Mäü½æ¾$'Ýõ(èbccÃöáí*R” Ú>ÔC2 üÔ èÿÖ®]«­­ýæÍ›M›6õ­†+W®L™2eË–-6l |ldeeÿýwooo##£åË—ëèè¼ÿ~ðô›[ZZॾ¾þ¬Y³é*ÿqDEEíìì:´gÏ'''~~þÝ¢Ÿ²£ ÏŸ?¿yóæÊ•+ÙÆÍóçÏ÷ööÆ¿êëë}||´µµõôô¶nÝŠ=ˆÃ¼yófæÌ™¿ýö›‰‰Ihh(ÒuÁiii ]ª*++¡p’’ÒìÙ³aºwÀž={P†@CCƒ¥¥%”üâR§KºÛIHH€INƒƒƒwíÚÕå‰]êüdeeYZZûûûëêêêééÁ‰^€§§grrrYY™¥¥eNNÎëׯíííaú'N,[¶,//oñâÅ0I+q—ö mmm*•JË’¤G455JKK‘:HBB‚‡‡›uÐÖÖÎÏÏG‰M‹‹‹eddNœ8DÆQÉîDÆ{ŸëñãÇÍÍÍlj1Ük™ ¶êI?]¼’ÞBš}gáÂ…ÜÈèèè,Y²¤¬¬¬oÙ3ŠŠŠFFF™™™ƒ*¸É çÏŸ¿ÿþ´iÓÚÛÛW®\ùìÙ³AšðòòNž<ùĉ?&µÃIH~^¼x°¶¶æ<„6]\\îÝ»gooßÙÙ¹eË–Àýâ0¯^½Ò××ÿôéÓúõëUTT9ÅÃÃÃ,X````ff†aØôéÓ?îèè¸hÑ¢wïÞ@ììì{÷ÚÚÚá¸Kaœ.o°K±ƒUïÔÕÕ•””8OìN秦¦&11ÑÂÂ"55uÁ‚JJJ[·n…±:::  шˆˆTVV—€wïÞݸqcúôé7nÜ€¿)}ÓÛé’˜˜˜ÎÎÎA•bûuÁëJ°|ùrIIÉÍ›7—””TUU…„„øøøŒ1‚s*FYx{{—––¾xñbÙ²e4möìÙÄ"ã½"..îÀ_¾|ÉÊÊrww×ÒÒ‚2bq¼ yŸɉÁ÷ê¦M›ÊËËCBB333ÿøãÈÈÈ &ô¶Nâz¸üIzÍó³"!!!!ù•ðõõpJ´á±xY*uuõÙ³gc=‰ÃXXXÈÉÉ}ùò‚äååå(vâäÉ“T*uÛ¶m°\‹8|ø0ܬªª200€jr®®®ŠŠŠ¨ÕÕÕ=Ï¥0ÛM‹í@­¹ÔÔTÎÞ Ðùåàà€zC]]ÝÖÖ~ÆÇNà%@¼½½ëÖ­ƒì•ÞgìÄ‚ }š­IÄæ7Â8l7E,¶C`NèüÀŽB:¡†988ÀŽÂÍ 4¸ì•Þ§9! ü yyù™3gþ´?= Š ÚÛÛ³²²’’’z•a±X¯_¿~óæ › ±Èx@sâÀÙÙÙ=¾- ´L[õ„­W ]zE„aHúéìDBòÈŒŒ¤Óé(w¸’’ÇСC Îœ9ƒu•P¹  `äÈ‘ ãÒ¥Kß·Õý¢©©éÇmmmœ‡îß¿O§ÓQNCGGGaaá.3C_¸pN§ËÉÉA}Æ_…¼¼<è¯Ò[Ö®];x^…½z×À‘4)))gÎœA›xí Æb±p¤ëáá!ò ¨ ^[[[RRÂb±ðŽBBB(ÐsÛ¶mŠŠŠ×®]«¨¨€{DEEoÞ¼9bĈE‹ÉÊÊjkkïÞ½»³³“³mß2 C¤¥¥‘ÿ$tAasïáüËÏÏLž<íQPP ÑhÈñ½;`­¢¢"ºe¸ÂƒžèOÂÖQÄHHHÈÊÊ¢úA7]Úc=€#GŽ ;¤¸¸øêÕ«?­ÀÏ€°°0 &†——WKKËÔÔTFF†¸$¦¦¦††^y@¡PTTTLMMû)1B¡PFM %‘——733=z4ç!iiinJö ¶^…‚.“&MêgˆA=Ü$ÜóouÏËËÇ¿”IH~ X,VSSë0™L…eË–ÁÍOŸ>ݾ}{Ñ¢EL&såÊ•lçÆÇÇçççŸ9sÆÜÜü»6º¤¤¤Ìœ93++‹ÓãV\\ÜØØXTTP\\|ñâEWW×?ÿü“³’())………ýZbcÆŒñññ îù]š”ßhNܼy“Í¡™ÅbÍŸ?_YYÉu)>C ÓÜÜ €ËŽŽŽÚÚZ111¸yäÈsssMMMOOÏØØX¸ÓØØøÁƒ%%%ÉÉÉQQQ¾¾¾ëׯg».JWLÐ6bzÛé˜î·ÁÓ½’âß°:1f̘ÁÓ"!ùžŒ1bÍ7BBBž‹íp¯óÓ7[o‡ä…F£ýõ×_'NüÑ !ù¯ðo0'HH~,---þù§–––´´´©©éƒÐ!—óçÏ_»vÍØØøòå˽­Y@@`Ô¨Qœº7n¼~ý:“É´··øðá»wï,--?|ø°}ûv è/‘ššºf͚ѣGOž<ÙÏÏ/;;ÞÜÜìççg``0gÎœèè訨¨Í›7ÃCŽŽŽgÏžŒŒ477?~<ÌC¿wïÞ &À¬#øiò.å/a%111111fffjjjNNNP^=::zË–-€•+W9r„í¦&òfmm­½½}MMMrr²½½}GGgþüù¯¿þ211ÑÐÐpssC3ÙˆˆssóÉ“'¿zõÊÅÅ¥²²ôR?´;]΃®^½://ÏÉÉIUUÕÌÌìÆ€òòrKK˶¶¶ÈÈH¤VTWW·zõj]]ÝqãÆùøøàEQ›šš|}}'L˜0cÆŒ“'Oþ$K …ròäɶ¶6}}ý#GŽddd<~üxÆ +V¬022Z±bñéÄâ0~~~iiiÇŽ«­­ 111‘““Ã×àëë«®®îááñõëW]]ÝôôôàààÖÖV‹uýúõ‚‚}}}€žž^CCÃâÅ‹ß¼yÔO˳Ïb;Üëü°!!!Q^^ž™™ ×mºcôvH~uxyyýýýõôô~tCHþ3 RLFSSÓš5kÔÔÔÔÔÔÖ­[÷òåKt(**jÊ”)’’’ººº»wïf±Xphh¨««+*V__oaa‘˜˜ˆaØV­Z•››ëèè½ 0 +++³°° R©ÊÊÊóæͤ{!!! ££câĉ;vì8yò¤µµ5…BAq¨òòò“'O¦R©ãÆ{ôèÛ¹xù 䥥g̘/P]]- €Òy"Ξ=khh(""²}ûöׯ_ÉҩS§òññY[[³X¬ììl½{÷†„„¨©©‰‰‰}ýúÃ0‹5~üxqqñ+V,^¼˜F£ÉÉÉéêêš%$$”””dddþüóÏñãÇôôôdddÖ­[çààØ»w/,¹téR*•jmmfnn. €Ôr$$$ÔÕÕeee·mÛ¶aÃAAA˜üõñãÇüñÀÓÓóÖ­[l7…âMÓÒÒ Òå²eËbbbðe¶oß.""2iÒ¤íÛ·wttpö°ŽŽŽ””ÔºuëŽ?3– JvîÜ °µµõ÷÷ÿí·ßàPæb_¾|¹˜˜˜ŒŒÌüùó]]]yyy544ÄÄÄæÎëãã#**:iÒ$XÉõë×i4šººúÎ;W­ZÅËË»téRxhùòå ƒÁ`¬X±bçΣF¢Ñh¹¹¹µµµÛ·oçåå566†X[[«¤¤$**êå嬨¨¨¦¦VQQa0òöööððd0jjj=>ŠßŒŒ ¼³ßúõë‘gVlGGGÔ~q‹åçç‡ÆÙFFFeeeGVl¨»dÉ Ã:ÄÏÏÏÃÃ#((˜={6Ò;²±±õŒ=:>>ž‡‡…bs#ŒÃy×b;¡ØX÷:?œåììŒ:êñãÇÐßýÁƒl¡ØH“§Ç.eƒ3ûôéÓ]–$!!!éƒbN°X¬qãÆ :4 88XYYYLL¬¤¤ðݻwÜÝÝÃÃÃ}}}ùøøœáYÄZ\þH“|g`øiRRÜ„BÆ ƒyyy …rÿþý.Ïå4'455~cõêÕPÏþÔ©SœçzyyÉÉÉÁÏÐœÐÖÖF*"û÷ïÿí·ß¢œ#OIIÁ0ìäÉ“ åÎ;ðP~~>4<঄„ƒÁ¨««ƒ›"""htÕÙÙ9|øp{{{ŒPþV"!!QUU7xxx 6ȵk×YYYœw„3φ ¶víZø™­‡‹‹‹………‘ÞbKK‹„„ÄÊ•+1 «¨¨€ÚÿðPkk+œZFæàB?”X—V ½zõ 7Žáš5kxxxŠŠŠàfII F ƾ=QÈ"-))¡Óé?•9)//¿{÷î«W¯Øi¸@¦¡¡!=={5›ÊÊÊû÷ïß¼y~xªªªrss{Û6ú,¶Ã½ÎžŽŽŽÒÒRô¤3àz;$$$$Ü3(ŒáááÏŸ?¿qㆥ¥%ÀÉÉIMM->>ÞÉÉ)00ÐÝÝýرc°äðáÃ===—/_ŽWÌè’ÊÊÊèèh˜`ÈÒÒRKK+==}Þ¼y6lž)#Ì®Š¤! àòGš„ä;“ŸŸ?a¼Æm É1cÆp_›¹¹9Òm¬®®~òä —¶Û…êëëwìØ¡¨¨È`0Œ_¾|‰ÀE›: ^ÙJ¥v©¡Ù[ùK7 ˜}ƒ­‡ãââLLLètú˜1cöïß¾(ïƒ ²Ý87ú¡=êrâõyxx¨T*›J) ¥¥¥´´499YÇãÇaï}üøq„ BBB¨<ùëHBòÃé•wôY6š6lØ0bĈîŽvvvšššÂŠ^‰•WWW?M!uɵk×”••&Nœ¨¨¨¨¤¤tòäɽ¹ÿAAA)¹áÄ}}}Ù~æz þ òòòêÃ$ÂAYøøñ£¦¦&>ôM[[¸–îfû ææGš„äûC§Óaœ1"''p U¿3»wïÞ¾}ûÁƒ---^¾|‰bò`Ö[|á?â7‰5gàï ü%üð=g¤ðdggÛÛÛ;;;gddŒ5J@@@YY¾‹ tæ§OŸö(L&€à¦Í=êrrVÂ9Ú Ñh4ÍÆÆ&44¿êÞ ³½³²²zl É Ò+!ïélt´¶¶2™ÌîŽ=z”‡‡®öJ¬\YYÙØØxóæÍaaa]Öœ––6{ölSSÓãÇ3Œ‚‚‚ÐÐP777˜¡r ï&Mš„&}ðâ#GŽì§ªþ RUUÅKetÉ üä âåõµµHºí'îîQ)¼oS$$˨Q£Þ¼yƒ·(RSS †‚‚ÂlÕÙ³gmllV¬X¡¨¨H¥Rñ®2***999¨Á_¿~MOOïmýƒ-ÙgÂÃÃ9¢««+ ðåË—ÂÂBø®€“Ux­ÏÛ·o÷¶þÑå¤R©=B• 6ÌÏÏïܹsðùùù%%%°pkk+ŒT!!!ù±p/äýÓÒÔÔ¸nݺî ßãÚµk<˜——×å¹G¥Ñh.\055ÕÒÒ²±±III‘••åÔñ("##—.] ?ãÄ—-[vöìÙºÊÊ•+°¶+ƒbNhkkççç£ ¶ââb™'NKw¸R8 Éw`íÚµ|||^^^•••---gÎœILLôññù±kƒôôô>ÔÕÕEGGoܸP__a˜——ŸƒƒÃíÛ·SRRììì`°A¯èü% %%…mÆa Ð××onn¾zõjkkkzzºµµ5•JmhhÀ0ÌØØX__ÿ¯¿þ:pà@VV–¿¿|||oëï.§¤¤dFF\ Ú´iSyyyHHHcccffæü å’|||xyyW¯^]VVV__ïïï_‰µ¶¶î2S8 Éw†MÈ›S´:77wÎœ9 ÊÊÊ‹/†ITº”î²$„Édzyy©«««««ûøøà×*£££§N*%%¥§§ÊËÆùóç[ZZìììúvZZZjjjè²pQQ‘°°0> 5Ohh¨™™ ­­ÍÞÞ>999,,lÊ”)£FòööÆë hgw× ‹-:}ú4§€ø©S§ < $<<|âĉ¿ýöÛüùó/^¼ˆöw)§Îù?~_[wÝÞPø„A1'¼½½i4š··wiié‹/–-[F£ÑfÏžM,ÝÝg¥püôË—/ #""ã¾HH8QUU½xñbRR’´´4N_¼x±¯¯¯··÷m•ŸŸŸ˜˜˜ššš¸¸xPPPbb¢žžžƒƒÃÇÕÕÕ¯]»V]]=}út[[[ ‡Þæп~ýzaa¡‚‚‚´´t`` ››”a%F__ßÐÐÐËËkëÖ­}½9"ìììfÍšåêê*$$ôûï¿/X° (((66võêÕT*5>>^__ݺuãÆ»ÿ>œr£Ó齺đ#G¦Njbb"$$4wî\IIÉëׯC¡Rb–-[–’’bhh˜={öž={EDDôôô¢Ðh4êT ÝÁÄÄdãÆݺ þ®÷ò–Z=~üxccã––üµ¨¨HIIiÙ²eø+5l´œ5O:…úã?pRNNNÿ駟*++Y,ÖÂ… ÉâáˆÕ?&dMNBrww÷÷÷'¿v!XùÆÑ_ñµ%´´´Lœ8ßÅihhŒ5*44”ËåâÔææf„P=È«1žO#&'vvG•@„®®îòåËñrjñ   ‚ ***ÔÔÔ¨sš¹ºº2„N]âZ¼x±±±1Aò«]~ ð/^w5'‚‰D™™™¯_¿–ˆJ.?tw×"…Kü“täçŸ600ÈËËÃ_ß¼yÃb±p»ýËVVV¦¯¯ÿ ÑÖÖæéé9jÔ¨[ªÏ‹ôÌkÝÁØؘüGÀ'ÂÐÐPAAAý/ººº<{ö,¹‚™™™§§'þ, Èiµ0777777ü™¼[•¿æÔ©SY,uî‘´´´‚‚‚ÈÈH„Ðï¿ÿN.Ç!¼CCC‰Ž›íííjjj6l —H7'ä#AçÏŸGÝ¿¿£ŠÊÉÉ9räÈôéÓqHY&“yìØ1â¯æõÑUcc#FÛ¼y3®½‘#G6P <ß÷wT D'š¸¢p‹+..NMM¥˜Ëå&''ãÆ9¿ªÌæ„üj_¼x1‹Å"“D"ƒÁزeKGõ…é–ÈNƒÁÀÃ%ÈÝݵHá·«ÿY“&MÚ¾}»³³3~ËëééÙùp´Ÿ/6›=bĈ•+WFGGã‘ÐÕÕÕqqq»\€ÏèQ£ÈN/2‘A«‹ŠŠD"î¾H²±±‘¾àÈ_óƒÄÉ$477ã ‘:òÞcÄÓÕ××w´‚µµµµµõÒ¥KÅbñ½{÷–,Yäç燧3¢Æoe±XFFF8vvqq19冧*ê¨:‡ï£ÇÑ/B G=~üxaa¡ªªjgÆ¿áÜäTû9éÇ æøXØlvffæéÓ§uttØlö‘#Gðœt»\ÿ†óçÏ?|øpøðáB¡000 ,ù- IDAT0))©›fÖû²544¬^½ÚÉÉÉÕÕuÛ¶m%È^JJÊ”)Szõê5vìXÜ“#âôéÓÓ§O·²²òõõÝ·o5z}zzú¬Y³\\\æÎ+„ãøñã#FŒ°µµ={vRR¹\zä+ŸÇR:†¸ô2ò×ü q2IøŽ\b_WUU’š“!TVVfccCe‚Á`Œ;vÕªUx¬,^ØÚÚJݪ®®ÎÜÜÇΞ6mZñÿOˆÑQ%t¦´xêæ---øë¾}û‚ƒƒ×­[—ŸŸßØØxôèÑ÷æöÞjÿ/Ç …æÿ9ššš~~~G=pàÀôéÓ©8¾l cðàÁ›7oþõ×_å?¥™3gN||ü”)SÚÛÛ7oÞL†y¹uëÖàÁƒ_½z5þ|›¥K—’áPvïÞ½`Á‘HÜ«W¯ 6Ì›7'½xñÂÓÓóÅ‹_ýuii©··75¢ËÂ… UUU—,YÂår½¼¼nÞ¼‰“$F¾þ‹À{êêêâÎXSSSff&9ÿO'×ìZœÌŽ˜˜˜¨ªªfggÿ“CËÍÍUTT´³³“XÎf³+**¤á´··#„,,,ð×ääd2éÉ“'|>ßÎÎN~ììŽ*¡3¥ÅïâããÉ%£Gž4i’N½#]«öÿŠÜÙ Àgßôüïÿ#—ØÙÙMž<™ ˆÖÖVKKËÁƒ“]œñ Ŭ¬,‚ ¼½½çÍ›Gn ¯¯??^SSó%þ‰{-ã 7<ˆ“Äb±··wß¾}ñW‰‘¯t+CCÃqãÆÉYÁÌÌŒ:0`Ïž= ãĉ---•••3gÎTPP ‡†šššŽ;ÇZ³æ»wï˜LæÔ©S‹‹‹9Θ1cÔÔÔ ÚÛÛÝÜÜ,,,ž?.‰ÒÒÒ,,,Èr†b1ÂÕÕ•ü*=vBþ1èàà 3iïÞ½¡3f$%%ÕÖÖfgg>|XCCÃÝݽ½½@………ñx¼´´´Þ½{÷íÛW ÚµkWcccjjêÌ™3étú£GäTщ±A 8°GÏž=+++ÃÃÃà ‚˜2eŠ©©ivvv]]Ý¥K—ðHÈÈH|£þ@äØ ùÕ.?hÐøñã©×À/4't nNÄÄÄKüüüúôéC~JwôèQr$eNNBˆûN„H$*((ˆurrÒÐÐ ¢¥¥…F£á ¹Ž’’þŒcŽy†††"„p$1êÈWºÛßmN´µµ­X±ýÇRWW—æKüÿ)å¯Ù…8™rš;wî¤îBsbäÈ‘ÇIb±x×®]Ô±¬L&sÆŒ<øk(ö¢E‹ð¯t:ÝËË‹ïÀJJJ¸G–™™ÙÅ‹ß[ iN”••‘£˜Læš5kðò””„F³··çp8ø~BAýÈæ„üj—ßœ044$_$hN𔕕©©©©©©;wN"©´´”Åb©©©‘‘ã>Eê\¾|¹µµõßÍmĈjzzzžžžÑBdjjjÊÎÎÆÏ®À§7'’’’È%þþþ¶¶¶Aàn ÒpØ–ÌÌÌyóæá~Ìl6ÛÞÞ7'^¿~:räu/=zôÀÿƒÉ “233 ©»7>A\.÷Áƒ!. ©ˆ”rÖìZœL™ÊËË™L&õ窱¬TTT|ðàœuSRR®^½úøñcêâæÄáÇÛÛÛ322JJJ¤·•;»£Jè¤ÒÒÒ””jÄpLN8õŽB†v¡Úÿ º1²ÿÄ_WÉ‹/Κ5‹š…‡‹‰D¢S¸®ÂWéå½zõ¢ökï$>Ÿ¯­­½iÓ&œsIIÉíÛ·çÌ™CÄœ9säl7qâÄôôôÎÄÜÿ™sŸãG’gÏžõöö–^ŽZDGG»»»ëèè¬_¿þرcdjii)¹>Ç#;Ikhh¨««gddHÌ1ohhø €î¡¯¯'ê•&‘RΚ]‹“)“‘‘Ñwß}wøða//¯ÎoE :thGåÄX,–«««ô(Fï¤ihhxzzÊLê¨:ÉØØXæ8uê?F <ÕQÈÐ.Tû Åàpqq‰Åó˜’._¾ìââò±ŠÔÏœ9Ó… uuu,X°`Á‚… nÛ¶íÉ“'úúú/^üà% þOŸššJ¦ljjš;wnVVVrrrVVÖ–-[ÆŒƒ)’£MLL´´´¨Ñ3ãããñØMœgcccII ™ç­[·–.]*ѺtÞÖ­[SSS322þî†áááxL 9ÀðÕW_qõêUrIIIIbbâ”)S¨«Õ××/[¶¬_¿~ýû÷_½z5õIeeåÎ;½½½íííçÏŸE&q¹Üƒ:´gÏž“'O~ûö-^~àÀ€€rµÆÆƱcÇÞ½{!”••5vìØ·oßîرÃÞÞ¿‘³wù‘:I'Nœ cõøûûGFFFFFúøøØÚÚNŸ>½óñ™L&ž/ !´eË–)S¦P_†„……Mš4)""bóæÍ¡ÀÀÀððpœÔQÒööö+W®Ì˜1ÃÌÌlØ°a8(;ø7Y[[ûûû_¸p!>>¾µµ522Òßß¿   oß¾ööö,ëÖ­[uuuùùùëÖ­‹‹‹ …|>ŸF£­[·.99ùèÑ£MMM¹¹¹;vìPTTÄy.^¼XOOoÓ¦MÅÅÅUUU»wï^½zµ¥¥¥Ì×#€Î`±X111[;£ººú·ß~ërpm&“¹sçÎvmsð©ûhݬø"à~‡=z´¹üÀ8(Þ… ‚àñx={öÔÔÔ\±bEHHˆ………­­mEE^ßÅÅE__ÕªU'NœÀaì"## ‚hoowvv¶³³;|øð¶mÛìíí555›šš‚˜;w.uàŽ¥ç·Æãb==='L˜ ‰äìÃáhhhôîÝ;$$däÈ‘,KEEEæ´ÄÔiºººvvvl6{ûöí?þø£ŠŠŠ‡‡‡Ì*4h““ùµ¹¹ùÌ™3t:´ÃñþÈzôè1qâÄ'OžàÉõ¾ûî;<0ñæÍ›L&ÓÎÎnÏž=AAA ,À›lß¾ÉdnܸñçŸ7nN§Šô¬ØäØ ‚ x<ÞäÉ“Ñ_áí‡þæÍœtèÐ!:Î`0üýýãââ´´´ðhѶ¶6<-F£Ñh¡¡¡...äé÷ìÙ3EEE÷îÝ£lÁAbbbCCþÚÐÐ@žAÇÇÇ×ÖÖJg( ÓÓÓcccÉ“À'†bðaøúú.Z´(::zñâÅ………IIIÁÁÁÔbbb¼½½µµµñ|ÀšššnnnwïÞ 633khh@577&''·´´„²²òÎ;UTTÆŒcddDX¾ùóçÉßûªU«þøã???‹…×üöÛoƒ‚‚:“ÿ¤I“Èà}}ûö‹Åùùù2_…’µQSS“––véÒ%¡P©¥¥5a„èèèÐh´ÈÈH é>iiiùùù«W¯&'C=z4BèîÝ»¶¶¶æææׯ_ž>}zŸ>}¨ý À¿ÌÌÌÌÌÌLz9“É0`ùU]]:Ò™¡‚‚ŒÅ€Oô@àÃÐÒÒ=zôåË—Bø.yÔ¨QdjkkkIIÉýû÷5(žwïÞ¥Ñhø“Éœ6mZttô•+WLMM% ˜œ8¤B¡pâĉüñ‡ššÚرc;¶téR‡# »û(Í >uuõqãÆ………éèèŒ1B"uãÆeee»wïnjjâp8³gϾxñ"îMîææÆçó¯_¿.ž?>aÂ:ŽÇF÷ë×ïùóç!!!@$ݼy3??ßÍÍ !äêêÚØØøí·ß¾~ý:**jëÖ­ä ií]~¤Î…ÇãúË‘#GfÏž½k×.___²»ü¬Y³ ~þùçY³f‘/=pgª¸¸¸êêj9qHµ´´¶lÙ‚_ªäåå]¿~ÝÙÙÅ„ æÏŸÿaÿÏÇ À玌섿^¹r!4þ|ü•Ù‰ ˆ())á›~333)• ˆ¶¶¶I“&)((ÐétuuõcÇŽíرƒN§÷ÝwA=zTII‰Á`à“'OA´¶¶~õÕWøÙÁÁ!&&†Á`P#;ÅÇÇS‹*gïr"uRIDvZ»v-™tíÚ5„ÐË—/¥·4hõš£¦¦æææ"‰ÈuÚÛÛ-,,h4Znn.¹P(âmƒ‚‚¹qH_¾|iaaÂÊmllp<(‚ ÝÜÜÞó+ «heö(@wkhhHKKc0ýû÷WRR¢&UVV–••õíÛOú[RR¢®®®©©‰ªªªzóæMKK‹••u«êê꺺:kkë¸÷’’’wïÞ999iiiýÓƒì„Pll¬ÄòÊÊJMMMeeeüµ¸¸8++‹Íf;88PW™™™åååÆÆÆŽŽŽü d‚æàãËÉɱ³³‹‰‰!ß·à³Í ÀÇÔÚÚ:bĈÜÜ\KKËÄÄD9Ã?ð ‚¡Ø€IAAaÈ!¿üòË“'O -|vàí ‹àí ‹ 9è"hNºš€.‚æ ‹ 9è"hNºš€.‚æ ‹ 9è"hNºšt/±X\TTÄãñ>vAÀçJ$ÖÔÔÈLåóùÿry>_PWР9@w‹Å'Ož?~üŠ+¦L™2oÞ¼·oß~Ø]¤¥¥ÉLÊÉÉùú믥—ß¿_ú¦ª¦¦æرckÖ¬Ù»woQQ^X__±yóæ‹/ …B¼ðíÛ·‡Þµk×Ó§OÉͳ³³=º{÷îgÏžµ··w¦ä7oÞ5jÔ… ¨ 7mÚ4jÔ¨¼¼¼Ž¶ÊÈÈÈÏÏGUUU={öLfžØ„ ‚‚‚²³³;S’ÌÊé&™™™ÉÉÉK–,éhìììµk×_¿~ýôéÓ+V¬ þ­­­«W¯ž;wnG›Ë?œS§N>|øÁçä3­«={ö<þ¼ æææNŸ>!zùòe9™ïرƒü«™9sæÞ½{ÿQ¡Br/M‹P(œ5k–X,þçYº4'è.ÇŽ{ôèQxxxLLLLLŒ““Óúõ뛚š>à.¾ÿþûž={v”J„ôÂ={öÔÖÖR—ˆÅâeË–577ûúúŠD¢ï¿ÿÿóÞ¹sgnnîÈ‘#_¼x±wï^„PUUÕš5k ú÷ïàÀÇ#„ŠŠŠV¯^mddÔ»wïýû÷ÇÇÇw¦äb±XAAáþýûä’¦¦¦ÔÔT‚ d»~ýzbb"BèíÛ·§N’ÎÓÊÊê÷ßÿý÷ßOž<Éb±vîÜٙ¤+§ûõèÑCÎ ±±±§OŸ^»víîÝ»W­ZuðàA%%¥cÇŽárssóòòΟ?ßQògÔ¨Q'Nìrù?/Ÿc]‰D"‡ãääÔ…mŒŒV­ZÕ™ÌÅbñ˜1c"##¯\¹²aÆššš¥K—¶µµuµÔÿ—üKSçq8{{{ƒñϳtÆ–-[>vøq¹Ü;w†„„ØÚÚ"„”••]\\²²²LMM êêêÎœ9sýúõÂÂÂ^½z)**–––>|øÏç_¸p!==ÝÚÚZEEåÚµk­­­FFF¡ªªªˆˆ ‹k×®±X¬Ó§O{xx$$$©««óx¼ˆˆˆäädMMÍøøxKKˆ††û÷ï;::FDD$%%kjj^¼x155U ØÙÙ©¨¨à¢æääÜ»w履~êѣǠAƒ.]ºÔ³gÏêêꨨ¨£GZXXôë×oß¾}3fÌ8uꔩ©éÂ… ­¬¬ Fbb¢··wTT”¶¶ö¢E‹lmm[ZZ8ÎðáÃß[?ÙÙÙÍÍÍ•••ZZZ¡?ÿü³­­­²²rܸq:::"‘(666::úíÛ·ªªªzzzÉÉÉwïÞ­®®f2™<(((@988Pó|÷¯¢¢"‹Åb±X·oßž>}:Nçr¹7nܸqã—Ëe³Ù***qqqiiiööö¡ÄÄÄ/^p8jåGDDyòÄØظ¾¾>--MGGçìÙ³={öTUUEÕÔÔ>|·â¶lÙòüù󪪪'N]¹rÅÃÃC \¸p¡¨¨ˆN§;::J õ·NMM­­­MNNŽŽŽ®®®¶µµ¥Ñh999õõõfffçÏŸWWW‰‰¹ÿ>‹ÅÂÅC%$$\¾|ùÕ«Wúúúššš˜‘‘qöìÙˆD"|ã(Q?—.]*,,TVVNII±²²zïYÅ`0ôôô*++/\¸`cc£¬¬œœœœžžÞ…$„P]]µ®¤O­O³®8N}}}GMòO°ÆÆÆ””‡§OŸªªªfff^½zµªªÊÖÖ–N§S3øð!‹ÅòôôTVVÖ××2dȉ'tuummm¯\¹¢ªªzëÖ-¦««+Qi/^¼HKKÃ5|þüy±XÌf³E"ÑÉ“'Ÿ>}jdd$nܸ¡¬¬|îܹ¤¤$###üÇ.}½RTTÌÉɉŽŽ¾wï^{{»……>ÌK—. 4ÈÜÜü½'à#‚·t‹ììl555êÍ.“Éܶm[Ÿ>}Z[[/^œŸŸïããSZZŠß”––þüóÏ...<ï‡~@ÕÕÕ]¼xoþçŸfgg755EDDlÚ´IAA!tõêÕŠŠ >ŸX[[«§§·sçÎãÇ777#„šššÂÃÃ{öìÉårׯ_233£ÑhfffL&“,˜¦¦&ÞÞ„Ïç:::⇂ºººJJJyyyùùùÎÎÎxMss󜜄££ãóçÏ9NFFF|||¿~ý:YEA 6,..÷öö&{5Ü»wïæÍ› PWWÿá‡ZZZtttX,–ŽŽŽ¾¾¾¡¡!“É455•ÈS äåååå奦¦ž={vôèÑøöíÛÇår‡ öêÕ+ütßÆÆæøñãÉÉÉ\.wÇŽ&&&ÔÊ)(( BîÞ½ûÊ•+¡ŒŒŒ#GŽœ={V[[û½G—––¶gχcbbˆÒÑÑY»v-þu®^½ÊårByyy/^tvv~÷îݺuëðæOž<ññña2™ÑÑÑ?þø£P(TUUUPP°°°(,,TTTÔ××WRR266–y€ÔÃILL ®¬¬tss»~ý:îý’ššŠ;ŒEDDlݺÕÈÈÈÜÜ|íÚµ¥¥¥¡Ë—/‡‡‡[[[s¹ÜÀÀ@ÜÇŒ”ššºnÝ: OOϳgÏž;wN¢~RRR‚ƒƒŒŒª««øá‡ëׯwæ”(**ŠE={öìÒ¥K!tçΪªª®%ál%êJúÔú4ëêñãÇC‡íÚ ÆãñðI‹Ë\VVæààpåÊ•ˆˆù™«¨¨ØÛÛ¿zõ !tûöíM›6egg³X,éJCýú믡ººº_ýõÚµk¡×¯_'&&2™L|iª­­=}útXXXïÞ½KJJðUHæõª¡¡aýúõVVV}úô ONNFµ··§¤¤¸»»wæä|D »|™x<žŽŽŽÌ¤»w着ªîÞ½!4dÈ??¿ÔÔT„P[[Û¦M›X,–——×Ì™3ËËË}||.\¸ÐÔÔÄb±âãã}}}BÍÍÍû÷ïÇ/=È V¯^²±±Y±b^. CBB´´´¼½½'NœX__?dÈ6dÈ‹Enndd„²–––îܹÓÍÍÍÂÂâÖ­[Ô‡¬&&&¥¥¥äBccãòòòÖÖVggg“5kÖ0 ‹åááA=X‚ Z[[B4MYYY"ÉÛÛ{ß¾}›6m"SUUU7lØ`ddÔÖÖ“‘‘áááÁf³---ûöíÛØؘžž>xð`‰º-++ÛµkB¨¥¥…ËåzzzâŠ0`ÀäÉ“Bêêêk×®E™šš.Z´hÿþý¦¦¦cÆŒquuÅ…Ä•sðàAOOO<ªÁÁÁaÛ¶mÓ¦MÃeÆ·P9@Ü} ñç!C†àÕ %*ÍÕÕµ¥¥¥´´477×ÝÝ=== ‡3`ÀjnmmmÛ¶mÓÒÒ4hЄ êëëãâ⤯W999A899éééõéÓ‡F£!„233­­­%þ¬Ÿ hNÐ-Ølvqqqss³šš¹ðõë×ÚÚÚùùù}ûöÅKh4š……Eee¥¡¡!›ÍÆw3t:ÝÂÂâùóç“&M²±±IHHpvv.((ðôôär¹ªªªÔ¶B÷˜ÂŸûôéƒï9B¸kζ¹¹YºéܹsQQQ3fÌÀ÷Í:::äÃ]„P[[›žžžŽŽ~²Ž‰DêêêÊÊÊ¡¡¡ŠŠŠQQQL&óÈ‘#?ýôÓž={È KKKñÍ“¦¦&~~IåèèÈçósssß¾}ëêêŠûù`VVV—/_~ùòekkkCCƒœT–––äЂòòò… zxxXZZ²Ùìààà‚‚ƒAfåëë{ëÖ­wïÞáUnn®P(\¼x1BH,×ÖÖ „‹‹‹Äšr7QBÊÊÊdç(&“‰³"Y[[ã–'NïÝ»7‡Ã166ÖÒÒª¯¯Ç{g0<ÃáL›6íÑ£GÚÚÚ¯e˜L¦Ì¤ÂRðîÞ¾}‹3—Nµ²²ºsç΀Z[[?Žïêêêê,--©ëÚ---[ZZðø]²~ É<ûõë'Ñœè¨Ò\\\JJJššš233·nݺ{÷îššš†††^½zµ¶¶v!IºP'N­O¡®^¿~maa¡ªªÚÒÒ2oÞ¼––±Xìãã3pàÀ?ÿü³ÿþHî FmNO÷rrrššš qæ2맱±ÑÚÚšüE:ª4WW×ôôt<ŠË夦¦âV I]]_…ÔÔÔ Fss³Ÿ¸« ÂIDATÌë•«««»»ûÌ™3­¬¬¼¼¼ðH•Ç2Df!ŸhNÐ-,,,ÄbqJJÊ°aÃð>Ÿ¿fÍšððpSSSüp+--µ··çñxdÄ„PQQѨQ£B>>>>lhhF¶Ð¥VÝÜÜΟ?ïãã³hÑ¢;vXZZ._¾|ïÞ½¸Ù ‘Cnn®Ì¤"ÏŠÂÂBƒAmåRS p+!´~ýz|#(‰$ÜÔÔ”¼É.++355UWW§Ö’’9²Yâvu\i***ŽŽŽ·nÝÒ××···onn~ðà»»;FëZ’Ì ï©õ)Ôy'}ÿþ}___ÿüüü;wîüòË/^^^Æ ËËËû»'XEE…‹Å’s›. ð .D¹†È¬´àæÄŒ3²²²‹‹‹©JÿÉȼ^µµµ­\¹réÒ¥çÂ… ÍÍ͉‰‰¸Ù øÄÁØ º…ŸŸß¹sçÊËËBmmmtttìÑ£ÇСC9Nqq1BèÍ›7!ü,°¢¢wYNKK«ªªÂ£„‡ž––vçÎܺ©oß¾©©©¸wdd¤ü‚Ñét‰§ãééé ÁÁÁ@ ˆÅb[[Û‚‚‚¬¬¬öööÈÈHmmm---{{ûØØض¶¶úúúÈÈHüŽÅÔÔ411‡‚yöìÙ€¨Íƒ¡¥¥¥¥¥ÕÑ‹ooï{÷î½~ýzàÀ䦦¦²²2<&ûÍ›7dìZƒ /}AøªªªÎ;÷îÝ;ww÷ÜÜ\sssWWWeeå»wïâ§Ñ|>×®]óæÍ[±bÅ¡C‡ª««©Ùººº&''3™L Û·ooß¾½£Ûµ÷à{•——¿|ù!”ššÚØØhgg‡²··7008yò¤§§çÁƒ—-[6dÈãÇ{{{KO@!ó%jéÉ“'|>_,ß¹s§wïÞxì éÁƒ¡ººº§OŸ:99š˜˜<}úTSSSAAaûöíx…·oßâSÔÓÓ366GV}øð¡Dÿ„Pß¾}ïÝ»Ççóù|þ7:_i—/_Æ#p\\\.^¼HfÞ…$²À¤ŽN­O­®ž>}Šûò;vêÔ©!KKË%K–üòË/3gÎ$ß@vÆ£Gø|¾P(¼yó&î‹HfŽ‰Åb@ÐÚÚZTT´fÍ+++‰.‹Uš»»{rr²P(Ô××ïׯ_dd¤³³ó{Ÿbȼ^ýùçŸÛ·oWQQñôô6l—ËÍÍÍ544ÔÐÐèü‘>x;@wY¸paXXØÌ™3uuuëêêœñ3?CCCŸ¹sçöêÕ«¼¼üûï¿Çë„……µµµñx¼åË—ãñ šššÎÎι¹¹dÇiœ5kÖúõëÁ AƒäÜm <øûï¿ #£”¾|ù²ººÚÏÏ\gõêÕãÇ_¹råŠ+444D"Qhh(BÈÇÇ'11qêÔ©¸½._¾üàÁƒS§NUQQ …76kïÞ½ FÿþýÉHS!‹õõ×_/]ºTOOO__äÈ‘GŽqssëß¿ÿ¡C‡ÔÕÕ‡ÞÜܼråÊPsËÊÊÂo9ÍÍÍCBBŒŒŒ†  ‹G­¡¡qâĉææfmmí¯¾úŠN§ÇÅÅ…††îÙ³‡¬œY³fmÞ¼yÚ´i,KMMmãÆë þ–ž={†……µ¶¶VVV®]»–|š»|ùò7n,_¾ÜÜÜœÍfWVVVWW»¸¸àT2páÂ…äá „ðCeü,ëÖ­9Í™3‡Çã¹»»ã:ùñÇ7oÞ|ëÖ-7tèP|zܸq£¾¾~Û¶m>>><ð÷÷744‰DÒ½Å/^|úôéo¾ù†F£õïߟ|©õ^GÅ#þ]]]ãââpÇž®%‘&óïèÔú¤ê*??_GG¿îø[-™ÌÍÍñŸª’’ÒÞ½{©™c×®]Ã]ÎŒûõë·páB‰TG•¦¯¯¯««‹|8;;744H7–¤É¼^yyy]ºtiêÔ©&&&B¡pݺuqqqÐÓ €ÏèNMMM999¸·1ÇËÉÉøkRRÒ·ß~KDII‰P(¤®¹ÿþß~ûMÎ.êëëKJJÚÛÛE"Qcc£ŸŸŸü"I¦#|>???¿½½º°ªªŠËåJ—z8Ç«««ÃŸkjjð‡–––¶¶6‚ D"QSSSçs+))ÁÅrj€šT^^þîÝ;±X܅¿×ÿþ÷¿—/_’_KKKù|¾Ì5«ªª^½zõÞ_Mæâ{÷î={ö¬@ (++“ÞpìرEEEµµµdmcB¡ðÝ»w•••2w‡§{Ç'žtjiii]]>“oܸqèÐ!ù…ÿ—É<µ¾¤ºÊÎΦ^ÚÚÚJJJþá™,³Òº £ë•H$ÊÏÏ///ÿ'…|ðv€î¥¦¦FŽk¤ÒÖÖ–oÔÄÄ„ü\]]ýâÅ‹ÇKD’ ‰‚‚‚–,Ybbbrùòå÷>ÒÃ]·;CYY™ OÒÓÓ“^SCCãƒwK Ö&‹|‰!Ý©]>²b™L&5N®jå³ |pwïÞår¹äH„Ža*“žžžÌ:— 󩇃Glw´9õq5¦   g&2:nffÖQjZZÚíÛ·ÚÚÚ.\¸°råÊ÷–ÿß$óÔúbꪮ®îæÍ›äEEEê…¥kdVZtt½b0ÒWÀg¦±à“€Ç³:`•••ñññK–,‘s/‚RQQéÕ«WRRRrrrŸ>}¾ýö[éáà“ ³Ù;:‹jjj$:›ýsVVV"‘(>>¾´´túôé}ñ?e_@]ÕÔÔ”––.\¸úÓ×+¾<4¢sá@<t4']Í @ý¢ìÈÀ®ÅzIEND®B`‚natlog-2.00.00/documentation/man/0000755000175000017500000000000013236662052015552 5ustar frankfranknatlog-2.00.00/documentation/man/natlog.yo0000644000175000017500000005704413236662052017421 0ustar frankfrankNOUSERMACRO(natlog protocol) includefile(../../release.yo) htmlbodyopt(text)(#27408B) htmlbodyopt(bgcolor)(#FFFAF0) whenhtml(mailto(Frank B. Brokken: f.b.brokken@rug.nl)) DEFINEMACRO(lsoption)(2)(\ bf(--ARG1) (bf(-ARG2))\ ) DEFINEMACRO(lsaoption)(3)(\ bf(--ARG1)=tt(ARG3) (bf(-ARG2))\ ) DEFINEMACRO(laoption)(2)(\ bf(--ARG1)=tt(ARG2)\ ) DEFINEMACRO(loption)(1)(\ bf(--ARG1)\ ) DEFINEMACRO(soption)(1)(\ bf(-ARG1)\ ) DEFINEMACRO(itx)(0)() DEFINEMACRO(itemlist)(1)(ARG1) DELETEMACRO(tt) DEFINEMACRO(tt)(1)(em(ARG1)) COMMENT( man-request, section, date, distribution file, general name) manpage(natlog)(1)(_CurYrs_)(natlog._CurVers_.tar.gz) (natlog) COMMENT( man-request, larger title ) manpagename(natlog)(source-nat logging tool) COMMENT( all other: add after () ) manpagesynopsis() bf(natlog) [OPTIONS] tt(command) manpagesection(DESCRIPTION) Firewalls like bf(iptables)(1) may offer tt(POSTROUTING) (source network address translation, snat) facilities changing the source address of a host behind the firewall to the address of the host connected to the outer world. With tt(snat) the following combinations of IP addresses and port numbers are encountered: itemization( it() the IP address and port number used by the host behind the firewall initiating a connection to the outer world (the source host, in this manual page referred to as tt(IPsrc, sport)); it() the IP address and port number of the host that tt(IPsrc) connects to (the destination host, in this manual page referred to as tt(IPdst, dport)); it() the IP address and port number used by the firewalling host when source natting tt(IPsrc) and tt(sport) (the firewall host, in this manual page referred to as tt(IPfw, fwport)). ) Source natting usually uses tt(sport) for tt(fwport), but tt(fwport) may already be in use, in which case the firewalling host must use another, available port to forward communication from tt(IPsrc, sport) to tt(IPdst, dport). The general scheme that applies to source natting, therefore, looks like this: verb( IPsrc:sport is translated by the firewall to IPfw:fwport; IPfw:fwport is used when communicating with IPdst:dport. ) From the perspective of the destination host the communication originates at tt(IPfw::fwport) and consequently all communication (e.g., incident reports) sent by the systems administrator maintaining tt(IPdst) to tt(IPfw)'s systems administrator will refer to tt(IPfw:fwport), rather than to tt(IPsrc::sport). The standard log facilities provided by tt(iptables) do not easily allow relating tt(IPfw:fwport) to tt(IPsrc:sport), and tt(natlog) was developed to fill in that particular niche. tt(Natlog) provides data about source natting in various forms. The standard logging mode consists of messages sent to the syslog daemon (cf., bf(rsyslogd)(1)) and/or to the standard output stream showing the essential characteristics of connections using source natting. Here is an example of a logged message (log-entries occupy single lines; the line-breaks below are to enhance readability): verb( NATLOG: from 1338990672:55588 thru 1338990747:807100 (UTC): tcp 192.168.19.72:4467 (via: 129.125.90.132:4467) to to 200.49.219.180:443; sent: 802, received: 7669 ) The values tt(1338990672:55588) and tt(1338990747:807100) are time stamps showing the begin- and end-times in seconds:microseconds of a tcp connection since the beginning of the epoch (Jan 1, 1970, 0:00 UTC). tt(Natlog) offers the tt(--time) option for requesting human-readable time specifications like tt(Nov 2 13:29:11) rather than time representations using seconds and micro seconds. The next value (tt(192.168.19.72:4467)) represents tt(IPsrc::sport). This is followed by tt(129.125.90.132:4467), representing tt(IPfw:fwport). The third pair of values (tt(200.49.219.180:443)) represents tt(IPdst:dport). In this example, host tt(192.168.19.72), using port tt(4467), connected to host tt(200.49.219.180), port tt(443). To this latter host the connection appears to have originated from tt(129.125.90.132) port tt(4467). The log message allows us to associate this with the `real' host and port from which the connection originated: tt(192.168.19.72:4467). The final entries show the number of bytes that were sent by the source-host (tt(IPsrc)) and received from the destination-host (tt(IPdst)). When tt(natlog) is terminated it can no longer track connections that are still open. If tt(natlog) was terminated (by a tt(SIGINT) or tt(SIGTERM) signal), then it logs a `terminating' line, followed by an overview of all (potentially) still open connections. Those connections are flagged with a trailing '(EOP)' (end of program) log-element, and their end-times show tt(natlog's) termination time. Incomplete connections show tt((INCOMPLETE)). In addition to the standard logs the option tt(--log-data) is available. This option requires the path to a file where information is logged in tabular form, which can easily be processed by statistical software like bf(R)(1). When specifying this option information will be appended to an existing file. When the log file does not yet exist it is created. The first line of the thus written log files names the columns of the table. The column names are (all on one line): verb( type, srcNr, srcIP, srcPort, dstNr, dstIP, dstPort, sent, recvd, begin, end, beginTime, endTime, status ) Most column labels will be self-explanatory. tt(Type) indicates the connection type, logged as tt(icmp, tcp,) or tt(udp); tt(srcNr) and tt(dstNr) are the 32 bit numeric values of, respectively, the source host's IP address and the destination host's IP address (decimal representations); tt(begin) and tt(end) are the times in seconds since the beginning of the epoch, corresponding to the times displayed at, respectively, tt(beginTime) and tt(endTime); tt(status) indicates the status of the logged connection information: tt(ok) indicates a connection that was normally completed; tt(incomplete) indicates that the connection was recognized, but was not normally completed; tt(eop) is used for connections that were still active by the time tt(natlog) terminates. When the status equals tt(incomplete), the time entries show the times of receiving the first and last packets of that connection; when tt(eop), then the tt(end) and tt(endTime) entries show tt(natlog's) termination time. Log entries look like this (each entry occupies one line, header line and logged data lines are right-aligned): verb( tcp, 101820608, 192.168.17.6, 48886, 4012145084, 188.121.36.239, 80, 430, 2266, 1517387644, 1517387644, Jan 31 08:34:04:318340, Jan 31 08:34:04:383170, ok ) manpagesection(MODES AND COMMANDS) itemization( it() tt(conntrack): the `conntrack'-mode. This command can only be used on platforms using bf(iptables)(1) where bf(conntrack)(1) has also been installed. Information about source-natted connections is obtained from bf(conntrack)(1)'s output. In this mode all, or one of the (by default) tcp, udp, and icmp layer four protocols can be monitored. By default tt(conntrack) does not report byte counts. To have conntrack report byte counts the command verb( $ echo 1 > /proc/sys/net/netfilter/nf_conntrack_acct ) must have been issued before starting tt(conntrack). tt(Conntrack) includes the sizes of the IP headers (usually 20 bytes) in reported byte counts. Thus, tt(icmp) packets are usually reported as having size 84, even though bf(ping)(1) reports a payload of 64 bytes. Since the actual sizes of IP headers cannot be determined from conntrack's output, the sizes reported when using tt(natlog's) conntrack mode are as reported by tt(conntrack), and are therefore not corrected for IP header lengths. The option tt(--conntrack-ip-header-size) can be used to correct for the (assumed) IP header sizes. See also the tt(conntrack-command) option. it() tt(indevice outdevice): the `devices'-mode. Here, tt(indevice) is the name of the device behind the firewall: addresses living behind the tt(indevice) are source-natted to the firewall host's IP address when passed on to the tt(outdevice); tt(outdevice) is the name of the device where source-natted packets are forwarded to, and from where replies for source-natted hosts living behind the tt(indevice) are received. With this command all, or any combination of the (by default) tcp, udp, and icmp layer four protocols can be monitored. it() tt(infile in-address in-mask outfile out-address out-mask): the `tcpdump'-mode. This command can be used to process bf(tcpdump)(1) generated binary files, generated on the source-natting host. If a source natting host uses interface tt(eth1) behind the firewall and tt(eth0) to connect to the outside world, then the follow tt(tcpdump) commands produce the required binary files (these commands will normally be run in the background, hence the trailing tt(&)): verb( tcpdump -wi eth0 /tmp/eth0 & tcpdump -wi eth1 /tmp/eth1 & ) To have tt(natlog) process these files, terminate the tt(tcpdump) commands, and transfer the files tt(/tmp/eth0) and tt(/tmp/eth1) to the host where tt(natlog) has been installed. The required addresses and masks are shown by the bf(ifconfig)(1) command. E.g., verb( eth0: flags=4163 mtu 1500 inet 129.125.1.123 netmask 255.255.0.0 broadcast 129.125.255.255 eth1: flags=4163 mtu 1500 inet 192.168.1.1 netmask 255.255.255.0 broadcast 192.168.1255 ) The relevant info is shown in the lines following the interface's name: the value following tt(inet) is the interface's IP address, and the value following tt(netmask) is the network's mask. Combining files and addresses, tt(natlog) is run as follows (all on one line): verb( natlog /tmp/eth0 129.125.1.123 255.255.0.0 /tmp/eth1 192.168.1.1 255.255.255.0 ) Instead of fully specifying the netmask, netmaks specifications like /24 are also accepted. In that case the number following the slash indicates the number of non-zero bits of the netmask. In practice, each value of the netmask is either 255 (8 bits are set) or 0 (0 bits are set), and so 255.255.0.0 can also be specified as /16, while 255.255.255.0 can be specified like /24. ) manpagesection(OPTIONS) itemization( it() lsaoption(config)(c)(config-path)nl() The argument tt(config-path) defines the path to tt(natlog's) configuration file. By default it is tt(/etc/natlog.conf). All configuration options have defaults, which are used when no configuration file and no command-line options were provided. All options, except for tt(config, help, verbose) and tt(version) can also be specified in the configuration file. The configuration file ignores empty lines and all information on lines beginning with a hash-mark (tt(#)). In the configuration file initial hyphens should be omitted, and option names may immediately be followed by a colon. Multi-word arguments should not be surrounded by quotes. Examples: verb( stdout syslog-facility: LOCAL0 ) Command-line options override configuration file options. it() laoption(conntrack-command)(path [options])nl() The path and options to the bf(conntrack)(1) program. By default this is verb( /usr/sbin/conntrack -p tcp -E -n -o timestamp -e NEW,DESTROY ) resulting in:nl() - Monitoring the tcp layer four protocol;nl() - Displaying real-time event logs (tt(-E));nl() - Displaying time stamps (tt(-o timestamp));nl() - Logging all new and destroyed (ended) events (tt(-e NEW,DESTROY));nl() By default tt(tcp) is monitored. Other protocols can be configured using the tt(--protocol) option. The tt(conntrack) program must be available when requesting tt(natlog)'s tt(conntrack) command. Layer four protocols other than tcp, udp and icmp are currently not supported. A subset of the supported protocols may be requested using tt(conntrack's -p tcp, -p udp) or tt(-p icmp) options. it() laoption(conntrack-device)(dev)nl() By default tt(conntrack) monitors the information made available at the tt(/proc/net/nf_conntrack) device. When another device is used, it can be specified using this option. it() laoption(conntrack-ip-header-size)(size)nl() This option can be used to correct for the IP header sizes. By default, tt(conntrack) includes these sizes in reported byte counts. By specifying this option packet sizes reported by tt(conntrack) are reduced by tt(size). Commonly IP headers consist of 20 bytes (so, to correct for this specify tt(--conntrack-ip-header-size 20)). it() laoption(conntrack-restart)(max)nl() If the conntrack process prematurely ends it is restarted at most tt(max) times (these are pure em(restarts): conntrack's initial startup is not counted for this option). By default 10 restarts are allowed. it() loption(help) (soption(h))nl() Write basic usage information to the standard output stream and terminate. it() laoption(log)(argument)nl() By default tt(natlog) forwards log messages about tt(natlog) and connection information to the syslog daemon using the tt(DAEMON) facility with priority tt(NOTICE) (see below at the tt(syslog*) options). This is identical to specifying the argument tt(syslog). Alternatively, specify the argument tt(off) to suppress writing log messages. Any other argument is interpreted as a path-specification to a file to receive the log messages: log-messages are appended to existing files. If the log file does not yet exist it is first created. it() laoption(log-data)(path)nl() tt(Path) specifies the pathname of the file where information about observed connections is written in tabular form. Information is appended to existing files. If tt(path) does not yet exist it is first created. Refer to the tt(DESCRIPTION) section for information about the format of the generated table. Specify tt("") as command-line option if the configuration file specifies a log data file but you don't want the data to be logged in a particular run of tt(natlog). it() laoption(log-rotate)(spec)nl() This option is used to specify the frequency and the number of log-files that are rotated. By default log-files are not rotated.nl() Specify tt(time[mhd]) or tt(time[mhd]nFiles). A time unit specification must follow tt(time) and is tt(m) for minutes, tt(h) for hours, and tt(d) for days. tt(nFiles) specifies the max. number of rotated files. If only tt(time[mhd]) is specified, then tt(nFiles) is set to 1. By default (or if tt(time) or tt(nfiles) are specified as zero) log files are not rotated. it() loption(no-daemon)nl() By default, tt(natlog) runs in the background (a daemon). tt(Natlog) runs as an ordinary program (i.e., in the foreground when the option tt(no-daemon) is provided). When running as a daemon, tt(--stdout) (see below) is suppressed, and tt(--verbose) messages (see below) are sent to the syslog daemon, unless tt(--no-syslog) was specified. When using the tcpdump-mode tt(natlog) does not run in the background. In this case, if tt(no-daemon) is omitted a warning message is logged, and tt(natlog) continues as an ordinary program. it() lsaoption(pid-file)(p)(path)nl() When tt(natlog) runs in the background, then tt(path) is the name of the path of the file holding the daemon's process-id. By default this is tt(/run/natlog.pid). To end the daemon, send a tt(SIGINT) or tt(SIGTERM) signal to the process id mentioned in the tt(pid-file). tt(Natlog) ignores tt(SIGHUP) signals (but writes a log message when receiving a tt(SIGHUP) interrupt). it() lsaoption(protocol)(P)(specification)nl() The protocol(s) to monitor. By default the tcp layer four protocol is monitored. Currently tt(natlog's conntrack) command can monitor the tcp, udp, and icmp layer four protocols. Using the tt(protocol) option (note: singular!) any subset of these protocols can be selected by specifying a colon-separated subset of tcp, udp, and icmp (e.g., tt(--protocol udp:tcp)). The specification tt(all) can be used to monitor all three protocols (tcp, udp, and icmp). When using the conntrack-mode, only a single protocol (including tt(all)) can be specified. it() loption(stdout) (soption(s))nl() Syslog-equivalent messages are sent to the standard output. This option is implied by tt(--verbose), but is suppressed once tt(natlog) runs as a daemon. it() laoption(syslog-facility)(facility)nl() The facility that is used to write the syslog messages to. By default this is tt(DAEMON). For an overview of facilities and their meanings, see, e.g., bf(syslog)(3). With tt(natlog) the facilities tt(DAEMON, LOCAL0, LOCAL1, LOCAL2, LOCAL3, LOCAL4, LOCAL5, LOCAL6, LOCAL7), and tt(USER) can be used. it() laoption(syslog-priority)(priority)nl() The priority that is used to write the syslog messages to. By default this is tt(NOTICE). For an overview of priorities and their meanings, see, e.g., bf(syslog)(3). With tt(natlog) all defined priorities can be used. E.g., tt( EMERG, ALERT, CRIT, ERR, WARNING, NOTICE, INFO) and tt(DEBUG). it() laoption(syslog-tag)(tag)nl() When syslog messages are generated they can be provided with a em(tag), which can be used to filter tt(natlog)'s syslog messages from the log-files. By default the tag tt(NATLOG) is used. See also section tt(RSYSLOG FILTERING) below. it() loption(terminate)nl() When tt(natlog) is running as a daemon, a separate command tt(natlog --terminate) can be issued to terminate the daemon. This assumes that the default pid-file (tt(/run/natlog.pid)) was used or that a non-default pid-file was specified in the default configuration file. If not, then the location of the pid-file or the location of the non-default configuration file must also be specified. When the daemon could be terminated 0 is returned. Otherwise, an error message is displayed and 1 is returned, it() lsaoption(time)(t)(spec)nl() By default time stamps written by tt(natlog) are in raw, numeric form. E.g., verb( NATLOG: From 1338990672:55588 thru 1338990747:807100 ) These time stamps indicate times in seconds:microseconds since the beginning of the epoch, January 1, 1970, 0:00 UTC. This option can be used to change the seconds part of the time stamps to more conventional representations.nl() Specify tt(raw) (the default) for the default representation in seconds since the epoch; nl() specify tt(utc) for a representation like tt(Jun 6 13:29:11), using Universal Time Coordinated;nl() specify tt(local) for a representation like tt(Jun 6 13:29:11), using the local time zone defined by the computer running tt(natlog). it() lsaoption(ttl)(T)(secs[ui])nl() time-to-live for received connections. At most two time-to-live specifications can be provided: for udp/icmp connections a letter tt(u) must be appended to the specified seconds. By default tt(60u) is used. For tcp connections a letter tt(t) must be appended to the specified seconds. By default tt(3000t) is used. Both time-to-live specifications may be combined: tt(--ttl 120u1800t) specifies a time-to-live of two minutes for udp/icmp connections and a time-to-live of half an hour for tcp connections. Time-to-live is not used in conntrack-mode. it() lsoption(verbose)(V)nl() Additional messages about tt(natlog)'s mode of operation are sent to the standard output stream. When tt(natlog) runs as a daemon these messages are sent to the syslog daemon, unless tt(--no-syslog) was specified. When tt(--verbose) is specified twice then all actual configuration parameters are shown just before tt(natlog) starts. When tt(--verbose) is specified more often then tt(natlog) ends after reporting the configuration parameters. it() loption(version) (soption(v))nl() Write tt(natlog)'s version number to the standard output stream and terminate. COMMENT( it() loption(warn) (soption(w))nl() Warn about terminating connections not yet registered in tt(natlog)'s database. This normally only happens during a short period after starting tt(natlog), when existing connections haven't yet been noticed. END) ) manpagesection(RSYSLOG FILTERING) When using bf(rsyslogd)(1) property based filters may be used to filter syslog messages and write them to a file of your choice. E.g., to filter messages starting with the syslog message tag (e.g., tt(NATLOG)) use verb( :syslogtag, isequal, "NATLOG:" /var/log/natlog.log :syslogtag, isequal, "NATLOG:" stop ) Note that the colon is part of the tag, but is not specified with the tt(syslog-tag) option. This causes all messages having the tt(NATLOG:) tag to be written on tt(/var/log/natlog.log) after which they are discarded. More extensive filtering is also supported, see, e.g., tt(http://www.rsyslog.com/doc/rsyslog_conf_filter.html) and tt(http://www.rsyslog.com/doc/property_replacer.html) manpagesection(EXAMPLES) Examples of tt(natlog) activations: itemization( it() tt(natlog --no-daemon --no-syslog -s br0 eth0)nl() tt(Natlog) remains active as a foreground process, no syslog messages are written, syslog-equivalent message are written to the standard output. tt(Natlog) uses the pcap library to capture packets from the tt(br0) device, which is active behind the firewall, and to capture packets from the tt(eth0) device, which is the device to where source-natted packages are sent. it() tt(natlog conntrack)nl() Depending on the options specified in tt(/etc/natlog.conf) (or, if not available, tt(natlog)'s default options) source-natted connections are obtained from bf(conntrack)(1). By default tt(natlog) continues as a daemon process, generating syslog messages using syslog tags tt(NATLOG:), and containing information about source-natted connections. ) Here is tt(natlog)'s default configuration file. Empty lines and lines starting with hash-marks (#) are ignored. Options adhere to the following syntax: verb( option value ) Option and value are separated by white space, a colon may be appended to option names: verbinclude(../../etc/natlog.conf) manpagesection(FILES) itemization( it() tt(/etc/natlog.conf): default configuration file location. ) manpagesection(SEE ALSO) bf(conntrack)(1), bf(ifconfig)(1), bf(iptables)(1), bf(pcap-filter)(7), bf(ping)(1), bf(R)(1), bf(rsyslogd)(1), bf(syslog)(3), bf(tcpdump)(1) manpagesection(BUGS) tt(Natlog) currently only processes tcp, udp and icmp layer four protocols. manpageauthor() Frank B. Brokken (f.b.brokken@rug.nl). natlog-2.00.00/documentation/README.packet0000644000175000017500000001260213236662052017126 0ustar frankfrank struct pcap_pkthdr { struct timeval ts; /* time stamp */ bpf_u_int32 caplen; /* length of portion present */ bpf_u_int32 len; /* length this packet (off wire) */ }; These values should be fairly self explanatory. The last argument is a pointer to a u_char, and it points to the first byte of a chunk of data containing the entire packet, as sniffed by pcap_loop(). The following are the structure definitions that I use to describe a TCP/IP packet over Ethernet. /* Ethernet addresses are 6 bytes */ /* Ethernet header */ struct sniff_ethernet { u_char ether_dhost[6]; /* Destination host address */ u_char ether_shost[6]; /* Source host address */ u_short ether_type; /* IP? ARP? RARP? etc */ }; /* IP header */ struct sniff_ip { u_char ip_vhl; /* version << 4 | header length >> 2 */ u_char ip_tos; /* type of service */ u_short ip_len; /* total length */ u_short ip_id; /* identification */ u_short ip_off; /* fragment offset field */ #define IP_RF 0x8000 /* reserved fragment flag */ #define IP_DF 0x4000 /* dont fragment flag */ #define IP_MF 0x2000 /* more fragments flag */ #define IP_OFFMASK 0x1fff /* mask for fragmenting bits */ u_char ip_ttl; /* time to live */ u_char ip_p; /* protocol */ u_short ip_sum; /* checksum */ struct in_addr ip_src,ip_dst; /* source and dest address */ }; #define IP_HL(ip) (((ip)->ip_vhl) & 0x0f) #define IP_V(ip) (((ip)->ip_vhl) >> 4) /* TCP header */ struct sniff_tcp { u_short th_sport; /* source port */ u_short th_dport; /* destination port */ tcp_seq th_seq; /* sequence number */ tcp_seq th_ack; /* acknowledgement number */ u_char th_offx2; /* data offset, rsvd */ #define TH_OFF(th) (((th)->th_offx2 & 0xf0) >> 4) u_char th_flags; #define TH_FIN 0x01 #define TH_SYN 0x02 #define TH_RST 0x04 #define TH_PUSH 0x08 #define TH_ACK 0x10 #define TH_URG 0x20 #define TH_ECE 0x40 #define TH_CWR 0x80 #define TH_FLAGS (TH_FIN|TH_SYN|TH_RST|TH_ACK|TH_URG|TH_ECE|TH_CWR) u_short th_win; /* window */ u_short th_sum; /* checksum */ u_short th_urp; /* urgent pointer */ }; we're going to assume that we are dealing with a TCP/IP packet over Ethernet. This same technique applies to any packet; the only difference is the structure types that you actually use. So let's begin by defining the variables and compile-time definitions we will need to deconstruct the packet data. /* ethernet headers are always exactly 14 bytes */ #define SIZE_ETHERNET 14 const struct sniff_ethernet *ethernet; /* The ethernet header */ const struct sniff_ip *ip; /* The IP header */ const struct sniff_tcp *tcp; /* The TCP header */ const char *payload; /* Packet payload */ u_int size_ip; u_int size_tcp; And now we do our magical typecasting: ethernet = (struct sniff_ethernet*)(packet); ip = (struct sniff_ip*)(packet + SIZE_ETHERNET); size_ip = IP_HL(ip)*4; if (size_ip < 20) { printf(" * Invalid IP header length: %u bytes\n", size_ip); return; } tcp = (struct sniff_tcp*)(packet + SIZE_ETHERNET + size_ip); size_tcp = TH_OFF(tcp)*4; if (size_tcp < 20) { printf(" * Invalid TCP header length: %u bytes\n", size_tcp); return; } payload = (u_char *)(packet + SIZE_ETHERNET + size_ip + size_tcp); For the sake of simplicity, we'll say that the address this pointer is set to is the value X. Well, if our three structures are just sitting in line, the first of them (sniff_ethernet) being located in memory at the address X, then we can easily find the address of the structure after it; that address is X plus the length of the Ethernet header, which is 14, or SIZE_ETHERNET. Similarly if we have the address of that header, the address of the structure after it is the address of that header plus the length of that header. The IP header, unlike the Ethernet header, does not have a fixed length; its length is given, as a count of 4-byte words, by the header length field of the IP header. As it's a count of 4-byte words, it must be multiplied by 4 to give the size in bytes. The minimum length of that header is 20 bytes. The TCP header also has a variable length; its length is given, as a number of 4-byte words, by the "data offset" field of the TCP header, and its minimum length is also 20 bytes. So let's make a chart: Variable Location (in bytes) sniff_ethernet X sniff_ip X + SIZE_ETHERNET sniff_tcp X + SIZE_ETHERNET + {IP header length} payload X + SIZE_ETHERNET + {IP header length} + {TCP header length} The sniff_ethernet structure, being the first in line, is simply at location X. sniff_ip, who follows directly after sniff_ethernet, is at the location X, plus however much space the Ethernet header consumes (14 bytes, or SIZE_ETHERNET). sniff_tcp is after both sniff_ip and sniff_ethernet, so it is location at X plus the sizes of the Ethernet and IP headers (14 bytes, and 4 times the IP header length, respectively). Lastly, the payload (which doesn't have a single structure corresponding to it, as its contents depends on the protocol being used atop TCP) is located after all of them. natlog-2.00.00/documentation/tcp_header.png0000644000175000017500000026020113226657571017615 0ustar frankfrank‰PNG  IHDR ø–MgAMAÖØÔOX2tEXtSoftwareAdobe ImageReadyqÉe<`IDATxÚì½l\çyïyHË?$K‰ h»Ù.b)nM²Q½ý#ŽÈ:Mš¢)9Þâö6mLN‹¦‹í%Ù&ź],É]$Y4í%¹U÷nSÜ’tÛ\Û5Éë¢iÝø’´ƒEâ8å(.b9pWTa»HlÀ#ia5¶Dî÷œG|õꜙáü8Î ? ƒóó9ç<|Ïû>ßóþjÛÚÚ *§ 9È @NrÈ @Nr€œ@Nr€œär€œär€œä '€œä 'öœ\.—Ïç«8±+¢à®¥¥¥³gÏjÁÜÓÓ344Tì¡ÛÐÍìxÝþþþ*îv#B ½½½;¿ººj :X§4ìŸÏ=W‰?4.[MNuѹ˜œœLZ[YY)mP{××× Þ‰Î-óÒ’%:¸¢ÇÔݺ(çxw­J/TgÜsüs@ƒÓŽ pŒ ¸ïúžú÷õõÍÏÏ×r¡¥¥%]H—ÃçÐÔÀÐì ¬OPÄo­hú#’œ:uÊ_Íf³N$tttŒ ºfERËËË:ÀVé`344Tì®ÜG÷¤qreff¦§§gdd„?" 'ö†bḢv''&&&JQdï´„ NOOÇú˜&Íd2ÖABŠB[ŠuK(vEm×]9#ãããÈ h^hìöžššrZbnn®˜HèêêZ\\´½ù|¾ºÖJ2¢KزŒ”n[€œhh¤%¬ “ýéééÅÀØؘ-/--UwÅÞ[^[[ÛÛÇ_ݦüSL «UŵbW,g쬂% 'v§ FGGËSuxxØŸUD·ÆžÞª;“É´µµ l£em)yÏÏÏ÷õõuvvº³´ÜÝÝí$Y11Ífcg—#EbW´eYscøƶìéš~݉¤säÀ®DÕ.¨-³CWW— ¯œ) ŠEØ{øÔ6†U²v¥ÄSºaíRŸTPŠì'''%* Š+;Ñõbwgff´½´)xEm7‘_ëÂ… V¡íÕ¹{ëg€–‡®Ø°ßqmê9Ý›_­`ª>ZB¡|ÕHA š$+,@·½±v_³³³®âÂÎÒéz;+!ËÉÉ7$ ìaýËÙ0Y¹ˆb÷éN”~5å¦-:×D`‰ñµ\§2gýä@5øó^×MK(¶e»•NÃWcïmkjAAöââ¢ÿÔŠõ‡‡‡­]ŽQÜïß›e2Ãõ ¢)ùtV___°=š–oÓ4ƒ¹WJÃí’e»V±Úƒ©©);16ЖNÔյ׆â-6¾–¹(v«€œØ-9‘î7ì‚¿}Ë_ZZrÝqÛ$ ²ké `JFñwLK¸`}2BË NNè¢÷ÛŒ±³¬g¹Eÿ19á†Ìš››‹]N§(ÜwÊ*öG±{Ð1n,ùÍu—? ¶RCK 'š•r"~ÁuŽwñ›’Ñ¥‹ÕÆŒŽŽZ(¯0Ý…òR¶ñرcÏ*ØNÌ]Nª `%Œn£`‡lש£„ÜÒ}šf[^^NÊ .@N´ö¿Šª ”Ëé2^pZnEÞ¶P¢Ã†u6°êa:A-q·Åº@¸Ë•˜>\×JÖä¸K´s» ñT⊀œht Fó.”¯¥ÛwéȾô ¸ jjjvv¶Ø¹.@×ñÉ€Þ:H\¸pa#µƒ*q¹žžžª )'܉™LfÇ'-¨dö|^äÀ¾À…³ú­®º  )šJ÷W1]†Î•™™™)(l”§b—«4¸w'2ýr ¡q ¶™)Fww·ߤý}ˬqÇØ1bC*:ujhh(›ÍîFè_é°W€œ¨+~|…ËåŒïd|\\ÞŒO-TQ¤>>>îæŽ|¬èÁKÏUWâÄä,ÐP0+6ìwººº\d\¢;Ï‚-T1kDƒh§Š;Ù,Ô.¾Ÿ˜˜(SK¸ÃΞ=[옂wRÝ}r`µ7çZ 666Ü„nM×Ìɵìrs®´ó‰Í/Q¾*p=°ÝÀ¯Ékl"å±-Ñ€J»ì>ÝÔ€œØüIC—n™ãèèèp:¤Y²îþTz1fggm†¸dçŠbÝ-$à :ÍÖ*±QP«.}@ Ne÷Yl* @NÔ‰ÅÅE[PÝÝÝíÚöøØçp÷~nn®éF#õç´.(œôàn„Y78•«‘’µR&ããã;^.9]L¹zžýöç(8m¶ëù]æ,°KÐàzÄ,y`!¯P´ªeE´I[›?’ÖÁM:QšD‚€M<'á¤X|ppÐ÷……W‡0==íjl¤ t˜I, *)›OtŠ¹Åf¾ ¶›Q¹Îv9ëæ®Ë¹~ËË˦%܉1äá¾¾>붡»µuðì쬫Zq:ö†-€ÅE´“““ež²¾¾¾c'cÙ a žîC”úã¸J=W9Ç»;Ñ]Åv½ñÆ¥{'=¦SŠyFbc.¢Xá"¯«Æ‘JqÏ•¼¨Nt’¦àu“ˆÖ`7 vZ¹ÂÁÊo[¯SÂÎÏÏ///'{kïðð°"àbÁñ®ô¤§0ãeŽªäî¤`i =æììl¬f`hhhtt4ùvÊøø¸ß Luüôô´]"iÍùíüùó±s¥t¢N×F»\òÏd™Õ1~O»îÄÄDRl8/Ñ¡ >´ù_°ÀGÁ±kîߪó©¹94£—#Tä7EòxóX‰9ò\‡‡Õ¥ÿUœ È @NrÈ @Nr€œ@Nr€œär€œä '*¥½9nór>xvõ¦ÿÚRG–––"´@¢€F†ü ȯ ž4Ií„ôÃ#Áý7ÔÅ+Áç炇†Šž¢ãg:8Þ›JZÏd2nuqqqhhˆ¤©ËåôÛÛÛ‹+ ­²™ü ȯ€ü êI{3Ýìc+×ÿ/®ŒŸßA\J§cvv¶Ä*@-es_Äêê*Þò+ ¿ò+@NÔ‘N…âóãÁc37¶?š çê Û¥å ªÍÐöãmá-Ô·¡@1òùëIqmm où 'ê…ôÀc³Af$\¾ûX°°-g%0¤Nô§'ÂÕÌðõöQ¦.¾ñFø_ç~*àv4ÓÍo»±|WGØwB<4¶z:— »I<µÜÝu£¿„´ª—ò×Nu‡ÂC»`¿È‰s^¯ñÇfÂJ†¥õP3œè ¾².<»v½ÊÂç…³a„UP8ûKNø<2JSŒ†mŸ†Gƒ¯,…•I¤¬ùÓu&BµÑÞÄ÷þÊFp×ÑpáCCÁ ¹°ʼnÞu'zÂ#è¿þÿDT‰q‰ÞØûJNøÓØ΄Ý'¬iÓ‘ŽPQ<6ö½¾éøµPH<4jŒG³á–Ëù°£…u±€}!'¤èÎLÝø/=ðØJ($Œ‡à V»ÏÏ]A4a…„Äñ¶à':£Q¡VÒ¿C™ýüxð@gx•L_¨XRdq>L`iåWf¯çWúUŽ P;çrá—>“]å ?†;´4MÒwâxï@¥ã‡†nªsÈŒÜè–-ÕqfqwïPe³¤Ë£Ó‘Ι »‰ë†Ý4Þ5&¡Rá‘°æÖò«g×°/Ó8jʦ>•¹>袕ƒŸ ßäø(€œhÄ,Ì:N¸¡`ëϹ\Ø \7`ù¦TD¦/ŒÿCN@m,ÎO-_Ÿâ9© ä¤<ÓϯęÉpL ÒT AiÔÏoG³rpq9°hoú'Pþ¥À]ÖV|e9üõ3͇†®·³¨‘pì²1â› ;¾ÏÍÍuttðŽÕ„‹ùö½:%]¥—¨†¯gP1±/%+é*ÍÌÊר̈́•`´¸?Aº‚ýF;.HKùÂË —ËÍÏϧrå4%;KiYka_¥ é _•…dƒÿ™cq>Œü´¥ˆœ ]‘®*ã‘°+öçÆKWV®HW€œ€Z¿[\¸p¡…M/^ÄW¤+ÒU㦫W6ÂÈ/â©¿ÄWdÒéª2~g:l20<ÖÛ*Cº"]rb¯ñG3ÔÿÓ™›š|<µ–…‹óñåŠJSåw»Ç]Tq@Crf*x¨;Ì%$Î,VT¿ PŠã½¡@}t:ü¯"{W Y@Nì¬%¤lšˆs[Á7Þˆú¤zšáS™u©þrù,.„²µ£ëÆš¶?»j‰ã½¤0h8͆C9ýÎtðÔù›¦ë¨•ÎúïcÍç.åñ rbï°!«Ï,^ʵ|z",ÿ>?j ßï:ÅîÞ²éÇfÂoo±¹ätX8xk4ÂzUMè¿3U ŒÄɼ'Tæ)¤ QŽö—X G H‹½aÒºì‰ëâ‚Ïj­Oì¤/ÙœWåŸ$ò¬…Ù蘅Pfè×-ÛX×™‘pùÑlY»>7“M3§í/œ Ît‡Eé ¹ëy_íDHð|hèú¤Å6}ÌJü4O-‡u§ õ,Úsd†ªç‘Ñ°Ô~d ,ûŽD ìÌd؃‚vtȉ=Ãj ~àWì.I =p¼-” ¡~¹±,m LBÚ"mPZ ØÜœ—óa§Ï‡ÕÒ'†ªþ&—Lî*žky8ne|í~j@SÎBZÖð¾ÂW†Jîk' ʉb“®HWø _í¹©ä“Z¾€râf†Gî'zo ·*… -Ãc¥º%œÎ„íŽ>?þJTX£¦‡ÃæOÖ?,ˆ:NHi6”8 œ—P®^½šÊûÜh¦\æ’–5|…¯ðU¬¬-('ŠÕNÈ`-e3é _á+|•®)Ë‘’ùU,¬BT 'Òà‘±°«ô#a‡léi‰¯,…(•®dxdôúÐ×:EšáþP„ý×®›ze#@Öº_Ÿè ÛDiûͽ±]™]°ðÖ–·ß~{Ë£Ò'Óéz¿ÿýï×î¤4%;.¯IžÂWøÊÿ–Qº µ=Ъ¬º`&]á+|…¯R4Õæ‘Œ ”eù™Š¢Yhkô†ký_ºN+aºÂñìjXwaþ²N±¡cï>vS[)ÙyálÜι\²õ”•Ç®]àOÿôO?ýôÓnïÑ£GìÇ~¬ ’.“‹/^ºté‡~è‡jwOš’üÇÔÂ{ÞóžT¬á+|…¯ÊG^’?¿úÑýQ|EºÂWøªALù áùçŸ÷ó«~ðƒÿ÷ßÞÞnbC[´l»666²ÙlËåsss]]]ȉVÀÕ9X‹&ý~øÃ~æ™g´«£££·—ñ: ÑÉåÂìȯ )ò«|>œñÁ|òÉ'MN8Qaº"]9!kõŒÚíéC¶°œ8@:NÊ ÷»áv©l^YYÁEÐà „m>ɯ )ò«ÕÕU[¶ ë–[nqÁLN(ÈN1CÓë™=ÎÏÏëwdd¤…ÿˆí¤ã¤–Øô°± ð À®Æ`ÖÃÛìÂ`²KKKR/ú­ÛsÍF´öß9Q4M›–Hw4(ˆÅ]ÅN‹ååe÷[666rZ@Nì#á÷Pš¾zõj*¾@1läY''ª?³ù|Þšé׺4ì6®^¢µ+(……«hSʦ±Àn`ö ×H]KQK§‚Ë»‡»J=›W!'ö8;}l ø äÀn‡a~èåÚ†¤†ùUu¨.„pmœ´ÐŠbßˉgWƒL_p¼-x ³íw²Áå¼ëíÚ;ñ†ì6®¥Ónôön nµýb=4êÖa9Q_ÎåÂ)±ïî gÅ~t:xj¹íôÃÁv?l×›Ú €]ÅÕN¸ÆNÁ®UMÛ’"®Ÿ†£n6õåÌT¨%Î,†³bgF‚Ï͵}c-xvÕ¥`?AÀîɉ˜Hw,œd[£]m}TÐx«¶wÚßrâ+K¡Špéø¡Aý¶}ãéÀâ‰ÆNuÀš„ìR'ìdÓ¦]íÏP°ê£UÇwÚÇrâ\Ô~îDÏM8ÕþÜÓ±Á¨ØUb¡WºÑW±~ »ÔŸ!ÖOÃѪPìc9q)j¾v¤£PzÞÚ¥¡‘Y(øþ@Ån`Én Ž]êÏP¢¢%+((¶pj¼ (P-ÏÔÔTggç@D___wwwönlK »-–K–fccCò‰¿>@£½Ô™L¦öw3ö‚ˬ2º´ jAÓÍ@”ýÆü ly||¼:kº·Öž„¸U£/¿^"Åè«t™¾%~ ›-Ù}âÉ7žš£úŠÔ“24²–˜œœœžžéèèP ¤-*εell¬oX÷9<<ìçÈf³ºó¡¡¡Šì,,,èÁIä õR+ Ò»©ØznnNÛ«¶{Áµ|êÔ©ZnÒ7ØÕÕ¥eý¦ë‡ÞÞ^e¼nummMWÑ‚¿±|q¢s'&&H]Í(*v#³´d¯Øüü¼^®Ô°¯½ý—×>ùù[tÀî]9Q_èŸ]»¾`<»¶õ™/ð2ï+fffÆ"lUo¸Jñ\.§0½1å„î°¿ÿF¢Õrww·JúJå4æK­°#“ÉŒë¥îèèHåéÖºá݈Ôõ°±ÌÍ"¿*ä@L±»åÕÕU%* x?±¥þFû/ˆÕ㵶¸Ýß>4,ÎßX]\ÐÏæOý|R%C S°Ñäèè¨ÿå`jjJ!»µ,ò (KðOÔª}‡ Ѳ2«Á/mGE¦¢«ß·³*͹ÜSèºÎ”\WØý(R±ût7 ƒh¿µ·–õÎvvv&Û7ú¯|__Ÿµ£H¾àɬ)›ÍÚYZð³A—Mér²lM†b͈Ÿ½”ÎvŠ]«¢ÌM :ÝœàžÔÏxu“Ú533cÙr2†Æ‡  9Ñ„œž^ÙNg¹±çÛ>?¾ù‰¿ù®÷¬÷ýýý*~TùAüÈÈÈÊÊŠ-k×ää¤m™˜˜ÐÁ*Òl×… b¡¿VµÑJ>+Dƒí:Vߎ~µlŠBGªhÔïââ¢vuttT¤(t¢Êl?*øu®~Í”•²V´Ç§ÇNÑã·X•+@ ᶶf«ŠÑ=KcXî¡Ù}Ð;®·{%B§˜H¾à±¬I‡i»NQn0á>‘¸lJ—³Ú3hF,Ðß1Û)v­rÐé.ƒ’Yç„¡¡!™u¦t˜¢½ºDoo¯}uŽÕù@3* °fú³ík¾¾²5Ô»uo°õ›Ÿ½zõê•+W.]ºôú믿úê«/½ôÒóÏ?òäIwnAËñÆoX¯ ÷WV´¾¾n{ÏŸ?oñ·;~nnN[ìÓ ±a(ì`+VUæ³c¥²¬§oDÅ¡;19Ì…Ý¡166¦suó²o¦´¬'rÇk¯™ŠÝOÁ›‡–¡??4±œ!ùG´<ÇÞqC/¾Þt÷^ë×åf:EÇ'_ðXÖ$ ~†ãR‹´Z0—ð—ýëî˜í»Vòy­K†Cët©ç÷¤îºîét®ż ™_Yù«pKA—B/` ÃŒ)$S`æúg§Bì­!CN…}ßûþ`qÝI« Õù¡)P4±ººº¶¶¦_+ɬ¤Õø]ŸULf³Ùååe+êJ3::ê>žÅìȾµ"Ð.e4~u„,—ø€°E约YÚkl­Õ™™™äý@³ |IyÂF„m9vì˜}ø·_9ÒÄÄDo„«V-Íàà Ÿºeÿô2ÎÞ1Û)v­‚u­~æf ЭW˜œ«mYå“–Z•rZýL RÙ àF\.Tz©HËd2*¡µjÍüæ@Õ•XI;Ö˜!Øe¢ü*5‹õèJAù Фèu¶HÚæÃ*Ø ÀMMMY;F­*­úÅ×…¬Õ³_Î}¦•í”Cdn óNÀ¾¦àèé*¥,^/8l¹5>zôhŠ·Q°R>˺[ ]€¦Ã¦Îíééq;Š5ѯBð7ÞxcqqÑZBV=Wƒ² ë177gí9«©¶>ÙŽeÅäoÈ €=Æ,-,,Ķ›PAe#µûCˆØrÁ~%æ¦IÚÉf³ÝÝÝAÔ0 v¢M|QÅãè®b¦´JgD€¦C’Àª‚¨Uë÷ìÞk‹ûÝàE6óŒd€ ®Zµ†ÑUlËË1UŸlÇZ„úNX^^ÖS—Ó軈J£±±1ÉŠà­à´ÁU–[—Dûuã>Ùø!¶1ˆF;±èßÊÝ“ÎÚ)î*3336NõgP)®-VRjÁõA¬3¥»ÍGhA—+Ý_B?sÇì-Ö!Ê0© 7Ù‚õ °×Ùr!×´I…­Zî¡s•ø¡|E/¸µ&²Ï+2¨ü*Ù3i°Šl§ †‡‡å7p­5-=5î*Ýy» ( )àØÜÜdd§ý‰Âw¿ÆÜ4†$äüùó~p¯dàâ—Ü6öˆ?|Š?v„Îòíø£èDÿü]eãðç{²^æÅƲpm”ÿ„‘`oGvŠ144vf}}Ýï9àçB±)ÞÜèm±¼DÖä§7s°]eqqÑ… ¾Á˜‘ò³)sÇDkãhÌ'“ù˜Ë™I`ŒìÄÈNu m‹1}=e¥$ûvÄ[o¾ù¦’r6›}î¹ç‚í&ª8ªU±ïXÅjÏ­€ë?Ü¥³ÊiÅ[ÂŽÝ@™vJ`3QEZdž‰ŠÚ¯†5€!¿j1Šåî•íªî·³œ)»¨e&% –Ÿí¤’Q—óP:’ÖPÍ’_ÙŸUrBZôàÁƒ‡º-âÖˆööv7l*IHWTöX·–Àû!Cfd'€ŸâJì-Q&UT\•88­¬M%h™¦ ªhLŠåÅ^ùê^ðØYþEK,?ÛÙÕŒz7rTØúNr€œärbGüÁÈÚ"ð @b°X†O€œØÇ*'zr¢âÔl šd P7-ASó¦ƒY±‹j ÛžÏçmx€FF™•~ɯ Yò«Ñ 'šXÛB{û œ\.700€ ) ¿€æBA—ƒáäDsË F,AßsÏ=?üð[o½õöÛo_½zõZÄæææÖÖV™ö¿÷½ï½öÚk÷Ýw_í·Ú€¦dǾ‰ÞÑzˆ¯ðÕ^™ò?pø­1m»ýþíßþí¿üË¿¸S~à~àÃþðf„V-§r™U9¥5éŠw_á«ÚMYuKÄn½õÖÛn»íñÇùå—cǸР9œhn-á+ ¥û؇¾ÿþû¯\¹â…¨HNÜ~ûí:þÞ{ï­ýnДìØÂ;ÞñŽT¬á+|…¯ü/nYyŽ+t]1¼¶¶æŸrèСãÇ»O¾œ(³´&]ñâ+|U»)Ë£D˜–8xðà“O>;LA—¯%PȉfÕ±²9Y;¡U½V+Ý_Û¦|9qÇwè]Ò‹Tû 7 )Ù±…´¬á+|…¯ü±e«¯p°ß>Ó¶[©ïk Q~QMºâÄWøªvSÊmnÙÆä„HÆW±Ú ê(M‰+km9Y6›t>|ø°^¿±“°SʹÊwÞ©÷ðèÑ£µßpš’—פb _á+|U,¿òUkï˯Ž9bZÂåQîDÒé _á«:˜² ÇÉ WA‘lbù˜Ë©üÏ€œh2\3'ÀJôÉâùСCz$'LHHTQ£ä2íKÍë-R_û­6 )÷­"-kø _á«‚ZÂ~-ƒrßðbųV-²qJ”SUÔŠ€tÅ;ˆ¯ðUí¦,§RLå*(D,¿²ÖPv@²m 'šIH^u›)Šä+!EnÚÚõî¨ï„Uº¯µÐ€¦üJÞT¬á+|…¯JȉØ0íI9qèÐ!_NTÔÒ‰tÅ;ˆ¯ðU*¦üÈÊ*(’Ÿkƒí ¿©9¢9Ñ”¸ÄíÒ},)k£Šg×;ÙÁ±LMøðá´>4”)ÿ«L*Öð¾ÂWå¨ ×ä)–_¹Ú‰êJeÒ¾ÂWøªFS®g—å„õ¯h¿âRäDSâwÅV²N–ÁÖµQ¯?XŠß.¹M¯—Ð>Öþy ÑL¹¯2iYÃWø _“Áö§;—S•¨pG•|ð#]ñâ+|U£)÷±Ã) W ‘”þàNTM 'šUK8EaZ¢àÈN’þt~îr05’ÊÐ hÊ —–5|…¯ðU1-$ª’µ.²‰\f9MºâÄWøªvS±‘3M6ÙÉv¡(ͪ%üáØ‹ìdJÃ\c§òµD°=¬²ÞÃÚï¹M¹£iYÃWø _•–SYv”,zµ*ƒöeÄ?˜tEºÂWøªÎ¦b£ð'åDàÍŠ›f‡9ÑÄŠÂ5õ+('´«ºÚ ²QŠ|…¯j7åò«ØÆØê­·ÞZΉ¤+Ò¾ÂW»š_Å"«bµ±J ´DsÄÏ}V߸~ÕúµæLýèGŸyæwÀ]wÝuâĉàæÆ]âòåË—.]ºûî»k¿Û4%;çÎÓ»ßýîT¬á+|…¯ÊG^’·zäÈ‘ãÇã+Ò¾ÂW`*&^xáq{|ðÁ/ùËVqázY¤.'VWWVVVúûûëXêrúÕ‘ûWá`rBHN|õ«_Õ®ŽŽŽÞÞ^\ ¹\.ŸÏkáø€äD¬7vêƒ;!'v;Æ£Ým”–híÔPOm+ÄwÑWàõ Ã9ÍúÆUDpóô±ÔÞÔ' s#ï'¿êr¢)t¥Ó]¡×¾‚ÆNñ¤ì°¾W¯^%Mìv ¦ +Ø.ÖUPÐê©ñ¡v¢°¢pú9P9áWP€!'š2Û‚%âkÛšv; óC/ëDÐ}9ÑL\ηδ--ø°­½¾Øml¾/¿C6>AN4fƒ§–ƒW6¯3µuÀÕNø½±‰ÁÍÃc3Á³«¶è§`†¨œˆ ×Þ  Ϲ\ð¹ñàós±4mÐØ  X“:a#'šËùàS™`x,xh(R7´ƒÔ‡XèEôÕDìûy'ÍwuNÇ´©`_±¡…ÞÞÞŽŽP7EAÖŒìïÚ ë2qf1™š¯Ž‚ °OÈårÝÝÝÙl6ŸÏ·äÃNMMµµµe2™‚ÛS¿© vÔ~½Ñr¢xe#ì2‘ $*¢®Øm¯n´?÷´¯(H"ûÉIý®¯¯[y¶¸¸¸´´Ô××תŠB,Eð×€Æ`ȉ¦’ba&xdàúɉ¥Çnýµ“,ö!óóó’ +++½½½¶ehhhnnncc£…îþþþñññÖK€œØ5èÎmÝô?6ÿÝÿüý³ÿšTÉÐò\¼x1¹QŠB·[Uح໳³³­­­»»[ Ä?ØíX]]Õo.—³íÂfMªlWuÕÈd2mv¢˜V³Ù¬íõ[^iA«v¹¾¾>_ðèmq§X?bLOO뀩©©‚{KܹžÝ–íZò†–gff´`âаz;Ò¿\ —ʈVµW»œ[ …!èBN´`R&YìN:åBX?_YY±eÅý ‹‚ÛFë.2VÔ«'&&´K DG*¶è?áÐn—~­1Õââ¢NìèèpŠÂ“®®.íšœœœp¡¶»`—3-¡]½½½Ú.›î—¨|Б²,P0^/qç.\°ÛÕ…ì–tKZMJ)mf~ÓÝÞ.•}-k¯Ž×3’DàqÿlpOœºöWÿéÊ•+—.]zýõ×_}õÕ—^zéùçŸ?yò¤ùJ!Nha»–NŠ_ÝÎÍͽñƶWËÚ~þüywüØؘ€´1ˆ¾ô»]¦@"k¹?ÂíÒF·K‡éBþ=èv»Ãt —Ù±;1 Bw¨Û)-Ûm»S´+vcÅè®ÐY2žÜ^âÎí0yÌ?ËÝ’oÄ–cÎ1¿•p©…º1çhI\ °Â-] ½€) S0¦ìêÕ«®v*øùXÝ°åȪÊjaeks3xûm\°?ŠØØØX]]][[Óïüüüìì¬Õh‹bn7Œ¬8vì˜}°·-®C ÆšBD窘ñkt ÿDÙqËnÔZ݉âlWk»vo===1ƒËËË ÓK܆Âú©©©‰‰‰J=æ¯ú Ãb$cN.æR3eƒ” ÐÈ 'nÂ>ð[ø»´´”ÉdÆÇÇ­O¶uHžráÂ?Ü-—@6ý&Le¢³b¬RÅT„ßÛaÇ(ß ç™™Þ%¯tN —@³@ß €›k"¶Ñºb»oç+¬w ÖK399™´Y‹Ád%¾Õ]”fz:œÍ3›ÍÖÁÕÖûÂDÅn¸õ¦··×5[òÑ |]GdciiI ÄÚÙªÛµ¼¼\ìBþ.É•Ø(´SSSÉ©åbXû(ÿNº»»¥´]·»´¬¸ÉG'ÎÍÍÉl‰QqK<ÔŽøf×ÖÖt99¼„KIÈ €fbttT1® 4d[r¹œVÚjW°ÝŽ||Ü‚]Â5ˆGIèWQ»Ûå·_2¡âF^òwɲ¯j!µ&'']wðb Ûä#l4Xk§466&ûö¶KË6hÕŽXUŒ?”S‰;¯ß9zLëËQÂ¥$Hä@3a㱚¢°IúúúæÚÀ¯Ávg…¼njEÛ6FjqDµÚeƒ¢úšAÆu¼íò»;ËòÜÜœBm›xAµâìûCÛ­J'tFhAFì&u®bt{„Ø®rÐÁ~'‡w^…Zs~Óš©Ò.€¦ 1}rÅæææÛoE¼ùæ›W®\Éf³Ï=÷œüå4A€¦Æ 4¤Ð¶`ê\.—Ïç»" îÒ‰ÖÃØI‘`»Ÿt±ÈÞö»b1Š¥{°J†T:!”¾óJ[Âow@kã&Û9yòäÜÜÜÁƒ:t[Ä­ííímmmi]Î&çñ3ç:<`õjká?"#;ÜÄŽAm‰ÆH%v•.ºª+ØŠ%u‘bI™–©ŽÝ±}4,4vä@ÃÐÕÕ599IÓhyhì°+r¢–ŽË͵€œäÄÞâFfcÏã€:Ä`±0 Ÿ '9±U2N ôäDÅ©Ù4É nZ‚¦æMÅÕ>¶=ŸÏÛ<ðP; ®JG_€œhbql íí7*pr¹ÜÀÀþH]~ vË-·¤®+˜c9Q?9aBˆ¥ã{î¹çá‡~ë­·Þ~ûí«W¯^‹ØÜÜÜÚÚ*Óþ÷¾÷½×^{í¾ûî«ýVДìXÎ}­÷€ø _5²©••q«ï|ç;küBºÂWø _Õnʪ["8pë­·ÞvÛm?þøË/¿;Æ…^n5Ý9F‘uÒ¾¢Pºpøðáûï¿ÿÊ•+NQˆŠäÄí·ß®ãï½÷ÞÚï¶MÉŽ-¼ãïHžÂWøª|¾þõ¯û«‡ªÑ é _á+|U»)‹©D˜–8xðà“O>;LA—ÓD¤È‰&ÖŽbµZÕk ñ`bãÚ6åˉ;î¸Cï’^¤Úo¸MÉŽ-¤e _á+|U>±/ Z­Ñ é _á+|U»)k¹d˜œÉø*V;A\ŠœhJ¶¶±åXß W<>|X¯ßØIØ)å\åÎ;ïÔ{xôèÑÚo¸MÉŽËkR±†¯ð¾ªENÔht…¯ð¾ªÑ” ''\E²ˆ ? «ñ>—––¦¦¦r¹œ–ûûû§§§{{{m×ÆÆÆøø¸ÐòÐÐÐÄÄ„ÛȉpÍœ677•ècŠBÛ:¤7Ar„„D…¶ëà2íKÍë-:räHí·Ú€¦Ü·Š´¬á+|…¯j‘5$]á+|…¯j7e¡”b*WA!bù•µ†²’mCªÓ™LFRA*"ŸÏÏÎÎ ¬¯¯wuuiUË‹‹‹:R’C«çÏŸ×Â`äD B"ðªÛLQ$_ )rÓÖ®vE}'¬ŠÐ}½¨…4åWò¦b _á+|U‹œ¨Ñ é _á+|U»)?²² ŠäçÚ`»£`Só*~r0ÁDµÝÝÝRsssóóóÒ6Ä“vuvvêxzi#'ÒÁ%n—îc Z:äz`›°ß2…iúǧõy ¡Lù_eR±†¯ð¾ªENÔht…¯ð¾ªÑ”ë’êDEA9aý+Ú=j¼ÉÕÕÕÉÉI·ÚÑÑÑÛÛ+¡åååeI7\¬viUÇ#'éàwÅV²N6ÝÓöÛo¿]¯ÖDEPvß iz½„Ò$©|h4Sî«LZÖð¾ÂWµÈ‰ ’®ð¾ÂW5š²8ÊÕ9¸:Š‚r"ÅÁVVVüù%òù|.— ¢™ÄFFFüƒ%'|íȉš´„S¦% Žì$9áO7áwà.S#© ­Ð€¦ÜyiYÃWø _•O¬xÖjIWø _á«ÚMÅFÎ4ÙPld§´f¯“BðµD&“Ñïðð°­ÒM9±[ZÂ$%âb#;™Ò°×Ø©|-l«¬÷°ö{n@SîãhZÖð¾ÂW•~ñWk4HºÂWø _¥b*6 RNÞ¬ØN{¤àÍÌÌLMMiaqqÑ×€œ¨‡¢pMý Ê íª®v‚l”"_á+äé _á«ýã«Xí„…Rk'Ò¹\.›ÍZÓ¦éééÒ5ÔWT_ôTôY}?àúUëך3}ô£}æ™gÜwÝu׉'¯§D¥>¼|ùò¥K—î¾ûîÚï¶MÉιsç´ðîw¿;kø _á«ò‘—dÇ­9räøñãøŠt…¯ðU#˜r"Á^xáq{|ðÁ/ùËVqá$GZb``Àwò;Qm¢Îþ7nlº$¯…œh}\…ƒÉ !9ñÕ¯~5ؤ‚‚þ|>¯…|à’~oìåD‰8~fff||Ü »±±ÑÝÝ=77럜@NÔ$'6·¹zõêÏþìÏšœèïïoíÔPOm¯®®šœø›¿ù@Öõ¯¨Ú¬$JggçÐÐPìCð±cǤ´·¯¯¯££ÃF†µžëëë»ô€-/'è;qn^w[¨hr:¨% Sè%!áz¥V݉bcc£¿¿_²Á´ŠÃÔ…„„âûñññL&£U©Ž¹¹9üœØ•]ét×PuèeÃfÖ>‡dCé Âl@N¤œ”ÖwâêÕ«È €ÝŽÁtÛÃÅ}5í¸  ¢ðûN ê 'h‚œhútl –ˆ¯mC‚Øí0̽ŒáäD“ðÔRé Ž·éÛïdƒËy¿¶µw"•ì66ß—Ó|ÏEN4Ï®ŸÊÇ{ƒÇV‚ÏÏO-·ÿTàõæv ¸Ú ;5û»+öc³ÁÝ]¡p<š ^Èmý7÷ù¢‚ °Ûr»ˆ¾MÂ¥|('G:ÂßËùÀâ‰ÆNuÀš„¸é¿JcÓÃùtuuŽŽÆæ­ƒ:°¿;e†ÃöN̈́˯l4Ü}lóäcƒ;¡v•XèµcôeóÓõ{hK___lÞº‚:$)E öwíDf$xj9øÜxøßdñÜSÁͳO %ê£(* À$!&&&Üêèè¨äÄì쬶ãÌz²¿k'>?|e)8=vÅþ£ÅàDï-ÿþ¿k{ñ¬k´gBEÐø¨ikkÛØØ(óx<55U盬««:qÇïmu@÷PÌúə™™äöt¿òY …µ„_/QEôÕÑÑÑÕՕχ­Öçççc9ÒÒÒÒTÄF„-¸]™LFyK6›õs9™’ËvÆÇÇË/bû†W6‚…™PKœžèÚZø¯Ú|ËŸÿ¡KÄ €¦ ¡‚DEÞØ=T .,,”8À/žªU`*VWWµ|öì٘ЪÊ°Û.-¡¤¿¿_Çwww»¢D™žÕumìëë³S9áÉ ñÀ©[Žt'zÚ^½@²h.ãvuu •vaW±î*˜qÔ‡ùùùmú"÷Qç ªv°#­FBWVVz#lA¢bffFËsssZPQbù˜}¨šžžžˆÐ.i ]·#'« V)ÐÝÝ­Óõ«|Õ, EH]ôõõiWgggµ ÅíÈ hìÿèè脇òzÅ—¦(bÒBÇ«üp_¯í#“Ž/3ðµ†4~p¿¼¼ì2uEHÞèןÛV“µƒƒƒ1SºOWºCÓ~}úÚÚš»»¨ÛUÅÀ¸vo¾‘ÉdÒ ým¬Æ™™™‚'vås«\r­žz(=o @KR°Ãƒ~cU¸VYáWÀNGHŠXî=22rþüy%:Æ5j²#m4ûb%ÕaCwàyä´ ÖƒDƒ{ ë-TUñ`ãÛCˆZ+ØØñ;¾Æðð°N—;ÒÚÕøƒZ÷ ×õÂÄŒ›3e}¸ÝK:+›ÍÛ-}uŠvYYð'vµ[U”lz“³P—ƒŒèÎ-ò¶š}-¬BIbmÃÊ9RÒ.¸¹þÄš».%µ´J’LQÈ &)ý?·íÒ‚  õèOÌl­ D¬ß”¨<ʯ¼×¶Xæ쬌ݾU%wršÁ~Ok?÷W¨jÕV‹mShKìÕøZ@_•7‹‹‹ XmÆoÅ;@¹UM¸Õ Poi+Ìt'*äܼ ~½Ý¤ÍÀ ›÷ëÖí‹še›n¢ºJV.Úü r£¼TNß HÅæH>c¬»JtùÐf~ÐÕ}×UCè×æå7ÜÍÛçC Û%×Åþ@°ØØØPn`ãmì„ )ÒF»R‡\±¹¹ùvÄ[o¾ùæ•+W4<÷ÜsÁö°08  ¹Pˆo_úÓêmlß× V;TŠnL·g ¥ î*}Ï:@¡³4F3+Uç–‚UUá½Úÿ柂…ÿ@°Û¸'Ož<977wðàÁC‡Ýqçw¶··WEŒÛôš{[KiŸ`Z;€dd'hq¬ílŠS´V¢+¸KÅÒàà Ö^¨ºû©Î-µ?{ZÞ+áºtÿÜ°W\»vM¿ÖͺŠ,¢`¿±±±°°0<<œüˆÈ €ÖǺUœ={V¡‹j³øáhI9ÑÞÞ^…–(rÎÉÉÉS§N!'R„¾MÃôôôÜÜœu.Ôï\n€=„Ú €fb$?@ƒ@í '9±·ø=~ªLªˆÁba>ANrb«dœ@èȉŠS³%h’5@Ý´MÍ›Š-ª%|l»õŽRAÁUéè M,Žm¡½ýFN.—À?©ãÏœ@N4½œ0!aÄô=÷ÜóðÿõÖ[o¿ýöÕ«W¯Elnnnmm•iÿ{ßûÞk¯½vß}÷Õ~« hJv¬羈Ö{@|…¯ÙÔÊÊŠŒ¸Õw¾ó5~!]á+|…¯j7eaÕ-¸õÖ[o»í¶Çüå—_ŽãB¯–‘½½½È‰ý¨%|E¡t;àðáÃ÷ßÿ•+Wœ¢ɉÛo¿]Çß{ï½µßmš’[xÇ;Þ‘Š5|…¯ðUù|ýë_÷W:T£AÒ¾ÂWøªvSSˆ0-qðàÁ'Ÿ|2v˜‚._K´†¢˜žžFNì;-á(V;¡U½&6®mS¾œ¸ãŽ;ô.éEªý†ДìØBZÖð¾ÂWåû¢Õ ’®ð¾ÂWµ›RìtË6&'D2¾ŠÕNЃ9Ñ”lmc˱¾®x>|ø°^¿±“°SʹÊwÞ©÷ðèÑ£µßpš’—פb _á+|U‹œ¨Ñ é _á+|U£)“NN¸ Šd. 3Pȉ¦Ä5sÚÜÜT¢) m?tèÞÉ Ú®ƒË´/5¯·èÈ‘#µßjšrß*Ò²†¯ð¾ªENÔht…¯ð¾ªÝ”…RŠ©\…ˆåWÖÊH¶ Ù[.¼|öƒg¾.ˆûï >ÖœþxpÔsÀ«Á})¸ÿ½Áï}:\µãåcáäľWÝfŠ"ùJH‘›¶vý°+ê;aU„îëE-ÔÓT™èWòÖ~cøªå}U¾|Uœ8tèP™YéŠt…¯ðÕ.™ò#+« H~® ¶k0ü¦æ *¾õbð‘OG‚O}<è‰z‹<±œùRøÿï¾J Ó¿ø›¡Æ°Õ?"”ÒÇÞ]åEuºþ¿ùȉæÄ%n—îcIYU<»Ø&$ì·Ì Ò4ýáÇÓúQ;Q*AW:Ý5Àþaொí~ßðÈûF´ÿ~~êkSKÿ´´qiC«½ïìíµ]ÆøÚxnÇí:}èG†*ºèô©i³¦]…¿@“†^6lf#L`çøË?£|) …û6+öÙ¨ÛÃ_þ‡«&Ä>ü›ß Žÿ\x®µú½O_¯å|2ì>ávIŸØ.ûÕ.è'äDÓ$e‡Róµk×®^½ŠœHÒÏLtòk“Zu[ºîêÒ¯t‚¢ÉI ñ¾½}2»öòÚ܇çìH#¥á ŒÕ—W3Odt€¿Ñßë_È!²£½0üiš4SÐlë*(ö¼ÕÓÑ#¡øÔÇÃY ¬nAË1!qÿ{Ã^÷ow„´: ãÁ÷_ûÏaÅÅËá²Nt­›´pî¯Ã]2ûsý×ë+œ… ªÊ(G± 'TQ¸ª ä@A&~r"&'ü-BÊAºbåVë;ÒóΞñµñÁtõ:Æ?q"˜™úÚTA9aFb2¬šZNØ(ü6hlãô ¢ê‚]$9ü!žbk¹Øد:ÑŸ$Û§Øö„¾7¥c[°N׶ANTÊÒ?-å^ËMŸšvZÂë“~XøöB‰s%j×ùïçgÖg¤Lô?Ù¤ÊvežÈè>W_^•z)x ža˜zY'Š ºOrÂã\.x$Ñðú©¥ ÓoÓÿ¶áàÜY¿¶µw"•TÊÚËkÉVIâü¯ž_üØb‰sÄÇDHH*H$ô¾³W÷ ÍÐ÷}’ ¶+ûdÖvé¿4ƒV'¿6i»¤"f×g­=•Eë)€º¡ Ë`‰&b?5v:3<»×ŸÊ .烅Ùö៺ö=»õ÷XK'j'ª#÷Z®Ì.ÑŠ×] /–ÿiyþÛó“?9Yìxíõ¼žßþÕuŒë€1Ú7Úù;¥pL$ÈÂÊ/¬˜ÔÑ®î?ívg鿤Ž5Ä’YíÒÁc}cüAvW;á„ÓPíªc~~^¿###ȉfFbq!ü}e#¾ka6¸»+8sýCéÖOœj{è‡Ûÿÿukòÿ ¼Á»*<üñš:nïPø^°w„ÑuWW¬ÒÃz~ǶH0Ô3’+¾]NâAšáF®ðí¨côkŒw ~r"&$mˆ§êXXX@N´Ò ™‘PQÄj'´zzòÆê‘ŽàDOÛ«oˆ';T µTL?Ñ ±¶ªÈ^¡ù–‹uÅŽ]=ˆÆÕ=Ø·KË1ùáVuK“?99³>Óý§Ý&3†ß7\°½ìÖ$$9=648û ïÄýÁé‰ðÿ‰°à±• 3|cõr>xáìÖ»Åw"MTŠBsɆ‚¬®^}韖tÝ€ÄÀô©éó¿z¾ÄÁþMJ¨X׎‘÷¬¾¼jcLñר±Ð‹è 9ÑòÉ 9œ­ýÍÿí?‡“¡|r"üïø쇿6ç¢N9ó¥pÒõßû­j/úP·è·qX¹™®®®L&ÓŒŠŒéSÓR å»ÿ´{à¯úþ¢O¿¥G‰M…ѾQ‰»¢ Ü$U  ÿº¹Ï-ýÓRçìÔÿÜk97pÓР鿆¨½öü)¡éèïûÚÚšÛ²aÀmÌ嚺S§NéwrrÒö\T %šŽý=+¶ÍDqwWðÔùðWiw{Δzò‹¿N—øw_ gF4î¿7øâT¸Qâ?}žÅ‹ÿ_¸Å-‹ž¼1O{Ë”þjww÷ÂÂÂÐÐ/jƒ³ò +¿â+Wd¯Øýâ÷/½ýèÜ=s±Ñ–* Ö‹](ˆZ1¹Ñœ¤Îÿêy›,O—°N6¦“¶Œ¼oD²Áš<éH¿w„¤Žîöìkgƒ¨½V¬¡@så¨R×?JÙ§m\^^v#̘ް¼× P)û»vâsãÁñÞ`qýFŠ"*y÷øó'ž_øô -áøÝßõÙ¿—æ“ÁÙÃÿZøíß>óûáFýþv´ð­ƒ_üÍ°í“þÿä/O¬Þ0òÌ7Ã-¶ë“×{eè¢1 IWWW>£›¬ŠÆ¾¾>k •Ífý*{•”nW&“±OnÆÌÌŒUñwvvNMM9ƒãóóó¶]Ë:Ñ¿ºNtÍ–Š ¢Ï{viÛµO—{ú‹EùÖêiâ''ô›¹Õæ’KåB6kž‹þu˜.ªÿf_¿ZÖ®ƒ„ks%ýà7¾’„°¥:Ðм úRýþF-»ï5Êîlt|åiZÖ.e³.¿õ3=å–Êî´]‡ù™­Ÿëÿ,©\Ôå™îZATm’´û*%ÍÆå|8Pì]áôvÛÿÛþèi_~¬žÉúéçB!auI´ýéo^_è8þ×Âý÷†í„~­vâ#Ÿ ë+þîOÂÿÇÞJ “ Òùõð0mÿËÿ6m’´¸x9T)1 ˆÊ!0½½½®ØS‘£Õ•••ÅÅE â­¬Ò²”€ŠIÛ¥ÂÉ ƒ©ˆ‘‘íšžžVyævé,•|*µ÷Ô©S===Zõ‹´ÙÙYé™ÒF¬ Ô‚®;77' ´!n|&¿6™y"#]¡ÿZȽ–íÅ-Ðj"?ªsp9’#,ku]'-_¸pÁò^-+—S¨Lorrr>Âi åcccÚ¥KhÕ×î,å‡&,—Öïòò²»°‘øí,­º¬À½PÍÂ~jìt÷±›ÆŠ}e#\½”w“Q´[ú×öÞ >úoëvSÿü/AOñ€^q¿õ–þÝ߸Þ[ ¶ýÏŸ¸ÞÊzTk»i)„_ü­p£ŽùäDð+ ÛM|ØÛûÏžN<\uÿӾʕ1*–\ý{6›U@¯"Ê•”*áTªY)¥@ßvuttÈ”J2-¨ Ô)®f_[¬îŠ.‰õõu[Öu •p¶ªc´WE¯~KÑ…´ª²S¿Ú¥-ÝÝÝd+ cE7¦¾6esçõ¾³×Mƒ ÐJ(;R¾¤œÊj$”ÅiÁ6*ÏÔ‚‰ŠX+S‡r<Ë~u€rc¢ÌVù¡´„2[-Û.mñ•†¶,..ºP~h¹ôÐÐ2RÛ¾¶¶¦]Nçh•­ÍÎ~ªÈŒ„M8Ž÷†«Þÿ­…•Íù§®~æ ÍõXïyWø+å yð­úŽ¿ýb¨".¼þ¿ÿÞëƒÏêÿ·¾®þõjƒ>Èêͨ”²=ØîDØÓÓãöZ4oBâرcAT™®2O‡Y5…+®¤IÜYfÐ}$³ÂÕ‰i®ç·t…NÔ–ÒF¬©€»OÆ7¶ÆGâaý—׷ƶô_ h hYñÜßo½#ô«lÊr'×ÞÉr³bYÖàà [vYœèOîë³\zxøÆЖZVi‡¹ëŽŽŽú«thvà‚=VíPɃ#…ݸÿ$ì´mÃ@iUZâôÇÃz (Ð5âƒ'ÔÒþêüü|6›µ/[ÖM¯Uw…¥+Û¦¦¦¬ ’ 0•UÚh÷åÛª‚ÐÚ;É‚ìƒYi#¾æ‰•»{‹Ât«õušEöÖ«áìٳŪ&Šaù¡ŸËù}LBÌ­VÄT.­›™õWùc ' zÜ[­BR6\¼vœøÄÇv6òàûà ;þ‰•PZ\x5lÈDË6Ns¦ŠP™wñâE_o”¨—*ϬI®Nt»Êoyiõ Ö¢W¦ìûÙŽFüŠ¶šº¢Â±«TZöCƒ`_aK| Ø ¬oC.Âeh®O…«%¨?—‹e€É#À°ÊÞ£Gš´°J­vEðÇhj˜ÆnùXØ<é·ÿ À.›hâSßÁ‚ÔˆMf';²öÅ©P¢üó¿„*B[ž¸é‹ØKÛÌ6]¡hí}ý™LÆ>¼ÙMAôaÌ:LÑW4«^÷g®°žÓ%æ²°öNÖƒÂJ¸ÒFbäø}SÁF”êëë³Ùñª<ªàDF¥}Ç‹ÍuUÝX†œi£ÇTí¨‚¨R:Ö)÷'íèOPõ£éDýÕìϧ¿£LU=•JZAØ?X>f©×}Œ°ð]¹œ²²J«¬URlÀ(_¥ø¹´ì+?t ™´ m€)•ª äÔŠ"~ €§Ÿ %àõ«a#¥3_ =öî,ÜÿÞðôON\ï´-#g_¼^#qúãaÇk3«½:FË~c'ø­›ÃQcccóóóŠY·i-[Auìر™Ûe Ú¥¢Tå–u˶²ÍºP—øÆ?::j= ] àÒFt¼–MÌèÒ±¡fkÄd’Òùóç·¶¶Þxã 9arr2Ùè«LV ÑßËÙH.Ö>e¡ÿ\sss6Xv¦§§}SúTçv%811¡¿þ‚ú;*Ù(‘¸3+ÅÔrþ¡‘¿ÅèÍrßGüï&UT X3«ñ°~bV¥Uë™­¬R¹´Þk×ÑÂdƒ 0åä‡ËÆ ¹Ù‚m677¯^½zåÊ•K—.½þú믾úêK/½ôüóÏŸòë[ûnüÿoÿíÖÓÏÝtŒÐC»tŒ;àÿâ¦sÿÍø³>ó…Ûðƒ[ö_®oÏ_ WµÑÙLݼüãmÄäv+í,6–ˆ¡RJñ¢;2ö}Ká m×¹¾xµõõõÒ7iå«»hi# 6e¥i¥Ï^ìx«cqó•µx¸ ‚höÜò·ïˆÜkçÑx»ÕÝUÁ´?ME¾2·ë7¶]!‘’\¥w¥S”$b-°KÑ󩼃ЪØ[K‡6ø’RuÁ–| üä¤Ö)X¥dRÏÖ.¿—v,«´Ä￧±UØ·¸Vá–‚.…^ À†)SH¦ÀLáYŠ—+–Ïïê¶|†L߉†àþ{¯w~øÖwÂÕ÷¼«@¥„p<øþà͸±zúãa‹‚çþÞ§Ã1dm—߉âè‘àÜ_‡Ûm`¨½e""¹ýüùó1‘ Ã nhÓMX_@k˜ëT‡² Ûk¹ëù]좥X‘,1£»J·° -å+(Wâ¶jÄoß2õ\6eŠ-ìÏQi{§b¦ª°Sð=©q`·±~e±zË’ýÁÜ‹{bõ~~~(‘`º,vÙ”}åQ.]0«4m_bšäDQb>»ZÎ-¶«–ËíÖ¯XÀW,šO%Ð/a¤Ä]U4CA›¦mZ)Ù+¶¶NðÃÃÃãããiõe·VÝ©h¼ê¦ÙÒ_К‚ º¿fÁð ¹(ñ:е9 ÁÆÆFêEr[[[2ÞÝ[qb5­nJ¢Brbii©êhÛï0m³žUáF)×Á4ˆšwë>«pÔâ⢞h~~ÞD…ÕwKZT]³4ÛR°f9)“ ˆ÷|–ŒÙÙY›@0ð&½ªZNÄÆ8rs÷VŠÍ‰î¯V'í¬í‡u —>ѯé’õŠÐYþ4aAJu/È €VCa¢ÑúLMM:uªŠæU 8m…æäÆ_ÊçóVP]”œVM‹tˆï+É Ý¡ÜnX«Àê%&&&lø¯l6«Õ*žQ§0÷4  ЈôööœO@Ñöääd*Ý‹«Ö9É«Û–cÇŽUª%¤FFFú·±oöµ›úßBT7…EìØÑÑam“ŠiE€¦ƒÚ €Fdttt```ff&Ö\gvvVýNüdÃØ+&öJ¹Iý*2µ¼¼ìštär¹………ê)5š ¢n1·˜ØóffȉÝÂï®j“ÎâØ“¨}ddd||üâÅ‹’Š>†juuuµê&7«;üquËÔ9ÙlV2Àj*´ª“©¨õŽNœŸŸOʆÁÁAßžèuÆ& Ôƒ û¾²¹ÀHäÉ,†áäTÏÜÜœbPÅ£n0­®¬¬TÝz¾àÑ•T,=£ˆ¿»»ÛmTÜ\éøBV¡ëXDã;Éøììl¬Öbo‘ç%~*îýõÿ‚6I0c1@KéÀä\6û71ö[Ûüë¿þë›o¾©âÿ¹çž `TÍfÁÂV|•–¯¬V¡ÑFswóÒ9xGì/Xpb/ÞA ´LòäÉ“óóó‡ºãŽ;nÛæÀííí)VSèZºb-ßæÈ“P;QDfmW·QÑ{NcÆëLVÕìA€Œ¾šš#'ZIKøØö|>_°õ9Ä°1pð¾Ò@9ùU‰è M,Žm¡½ýÆXº6ü<þ)|…¯€tP>~»&är¢éå„ #– ï¹çž‡~ø­·Þzûí·¯^½z-bss³ü^(ßûÞ÷^{íµûö[­§)_\ù-Ál»ÛûÝï~÷oþæo‚¨ÏnOOÏæ6Úb^rŽ*'§ÀW-ï«òíØ·öû"Zï+2å' —œ,¿zòÉ'•®Ü‘ïz×»~æg~Æ’“˦ü_—ØHW¤+|…¯vÏ”åT·D8pàÖ[o½í¶Ûüñ—_~9vŒ ½ȉæÖ~!­t;àðáÃ÷ßÿ•+Wœ¢ɉÛo¿]Çß{ï½µßm=Mùï¶ô¼î…wY€v)ƒ°cÞñŽw?~\6ÜòCä2s |Õò¾*ߎóU*ÖšÚW±´á4ªò«¯~õ«þ‘”A“©[ÛhÙ’eÌéjŸ§+|…¯vÏ”åQ"LK(wzòÉ'c‡)óµŠ9ѬZ"ó%k'´ª×ÀD¥ûkÛ”/'î¸ã½Kz‘j¿ázš*8´û,ê^~¹ž¶0GÅâcQ~6¯ZÞWåÛ±…´¬5µ¯\õ‚Ÿ_ùJÕ¡UKZ–®‚¨.Â7’\&]íÛt…¯ðÕî™RuË6&'D2¾ŠÕNPGœhJ\ çŠêXÙlÒùðáÃz üÆN¢t‘ìsçwê=;5š)çí´¬µ€¯bßí,µ$k'Ükï&Q"™µ@~UÚŽŸ_µÞâ+|Õ ¦üÈÊ*(’Ÿkƒí ¿©9¢9Ñ”¸ÄíÒ},)Û×>×;Ùq¶LMßJRü˜Æÿ*ã­.GhR_k­du¸öiÁof~+訊¤W*Ø€¦bÒ«õ°RS±æV Ê —´bzÕ×!û'¿ŠÙqï èð¾Ú%SÉ.^å„}i¿âRäDSk…œ ï´ýöÛo×kàÂã÷ ('hðCíã½2å–ñƒ`-¸Ú ¹HÙMò€Š>64©¯J§„dÃ0óUÒ3i°ÖHW;ʉ´¬µ†¯b”kèçW±¾’UÔN®xñ¾ªÅ”ëcéCgÊ!)'üÁ¨š@N4«–¼6n|ÏØ1Šýé&bmTvÄÔH*C+ì•©Xƒ—?ZQ2Ž©tzš&õU™éÁ ë[+8*Ô>IW¥íKW­ñ€Õ™JŽÎ””Îu¥¿¡®HWø _íž©ØÈ™&Šìd»PȉfÕþPîÅFvr­“µàÅSþ…Lyë=¬ýž÷Ö”kºm®°gAÖ$-ì-û·¼¯’éÁm1W8;nÁÉ°ª'µlÎNMùBã™rÞNËZËø*Öx)ùµÏ\çO4QQƒº–ɯŠÙq/f*Öð¾ÂW¥…kÅ””7+vlú&bTäD+ ×Ô¯ œÐ®êj'Z#k𣓂٨õµ*ÿÄ“þ3Ʀ s¹¤ßQÇiT§¾*ÍC-­&ÇÝ«‚4åÏ2žŠµÖð•K'±™é ~þ(ö–ù„}„Èø _¥3Ä"«bµ±J ´DsÄÏ•ØòøS‰Ys¦~ô£Ï<óŒ;à®»î:qâDø(X>—/_¾téÒÝwß]ûÝ6 )yñŵðîw¿»vk­ç+_'¤î+!S©<`£™’‘sçÎiAŽJÅZ«úJ^’·zäÈ›¶¶ê"¹µó+—®È¯ð¾ªƒ©˜Hxá…dÄí}ðÁ¿üå/Û÷5×Ë"u9±ºº:00°²²Òßß_ŸÀR—Ó¯®ˆœØG¸ “Brâ«_ýªvuttôööâ"hpr¹œ~ɯ )ò«|>¯…|à’±ÞØ©î„œØ hìTž·Qesk§h öCé-“_)ÄwÑW˜Tô«ˆàæ)œ©½¨OæFÞO~ÕäDS&èJ§»B¯}âIÙa}'®^½JšØíLAW°=Ì«  ÕSãCíDaEáô1r >r¯  CN4e:¶KÄ׶!5ìvæ‡^Ö‰" ûr¢±8— ˆo¼œÍtÇÛÚ>ôÃmÍú°­½©`·±ù¾üÙø9Ñ`œ™ ž]oüT&ÜøètðØJp¼·íûͶÿºì;Q;P\í„ß›¬)Ø]±¥ÂßW6⻞Z ·?u>¸»+L²?qªíC?ܾôØÖƒ?x# ”v[NÄ„„–SŸÆÕ"µ •C¬vâ+ËáöHKמ|)U ª‘0hìP®yÞ@N4ô‡ÿÅ™ .'Î傇†‚Åùà©åàR¾íxOð+ÿCð÷Äw"Mì*±Ð‹è 9Ñ$¼ /åƒ Ç;¤+nY\¸öŸþnë‡ßçO@A*ÙŸlDh¡···££‡ì¶¢ kFö}‹4i‰¥õ°+ö鉭Åîê8ð{ŸqöL(“ ÷«««}}}ÝÝÝÙl6ŸÏ»½mmmúMërSSSÌÑ¥s˜ÔsžrîÄ>©˵bd2—O–ÀòÕÓ¥ëù°Ð Z¯— úBN4 Žlx>Ò±õS?ßþÜÓ.“”÷!KKK*꺺ºÖ××-S›››³8öÊôJ°â¡|RÑ9ùäpÄŽ‡éÒäºûVT€5û»±Ó‰ÞZ¸‹6-ûš|>ŸÍf‡††ÝÆ‘‘© l333cccx @ô÷÷Ƕ(ÿÌår½½½%ÎRŽŠëZŒý];ñ@ØÛ£mé±kKªdØ',--IQLOO'KM.\ð…G&“±*þññqÿ`©Žîînmïì윚šòkÿµj»ô«å‚÷ k®Í€î§¯¯Ï5$P9íŽñ/ªíR;¶w~~Þ–íD]HËî–ÜaмX —Ý2?GÒíÒ+ïÚ/–)¹ìB¿n¯ËRÜeÞUWW—ÝIéìÎϾd\—Ð^]ÚÏ ìéÜ¥Ÿ"é h^ºMÈé‰pVìGlŠ¶Ó™à•kÿýÿD²Þ·¬­­uE$wÍÍÍù2#›Íööö®¬¬LNNÎD¸TH{h—Ž×v•ñ®ÌÓÁ¶K¿ZN–|2«Bqbb¢££CŪΕ’Ññ‹‹‹ÎT.Â×6«««V¸JóhYGŽŽŽZ‹µXÐ͘Š[€fG¯ÿÒÒ’²å$§NÒ»¯×\o÷b„½æ®ãA‰LÉeÃÃÃÚ«ÜFù’Œ+ÿ±še†É*ˆù§~v§ MUæ–̾tu©UݶòX-XÕÓÓcvtu[(ñ1o¿õ©¡­{ƒðÿ'N]ýžºråÊ¥K—^ýõW_}õ¥—^zþùçOžUØÌz65þ-– ÙX¨6ƒ2 Ë…ŠM£©ÜÀò™L„r ÿșҎª &NÊÇ.jy”~u‡þÜ å`ŸNô8VQSõS;5.رéìHcú:äŠÍÍÍ·#ÞŠxóÍ7¯\¹"ÙúÜsÏYÞZ¬ç´RÖÁ±Š/jÖ£à¹f¶X£…b¦‚è+c¬ì´/|Ÿƒ$’_íÛ\Ȧu³_wÌ”J L¦º<°ºì®`îçg}Õ=4~~eÅÙÉ“'çææ+5[ÂB€\(ˆÆ[XX°ï÷Áv߉XþP]L_c&ScП¼çª• Àèèh²cd@ÕDJÐØ  ‰QПËåúúúlêh-HQÐÀ'6ÓŽÛ9°_èêêZ__WTd#4hA«4ˆ½&Iå -Ôw¥š>T*s¸€}Ëàà`lpaƒj‡Ú hqlj)·ªåäp퀜øÿÙ{ຮóÎóû".°¥Ä9!!wl-nƒmIÛÑI”qÜN*.·» 5±+§Lâ¤ÒŽ@%©lÓM`ÊYœ™Dwö¶ 2Žc[Ž €$w$z`g´L´IGe mJâ:ÿwÿħÃs—wß} î{øÿ õêâ.çžóÝïœó}gB!¢qÇ;iք܉â.FÆýM$!„Bˆ:Ø`žVÝðÝuœ´¦“Ü !„B!ÊàÀœ{_-W w¢~^²„ „BѦ;%Ô5!w¢NÚL…–G!„BQ7_¢¦CÍ9eB'ª‹Šõ%\x~ii‰ûÀ !DžAa…_•WBˆF)¯¬/RÅ­··÷d@òmÚ…]îDœc¬[÷rÎÜÜ\WW—ä#„hT^ ! ]® æúÕ-ÐŽ=ZòžƒNMMé£ÈÈîNБ ž¼wïÞw¾ó/^¼téÒåË—¯\½zõÚµk)ÃöÙgÏž={×]wUÕ…pØ„pW@ó%P²’¬V+(·ÃÉóüýô§?ý/ÿò/öÈ÷~ï÷>ðÀWð/K*+¬Ò '^)JV’UåA±€Z°aÆ7nÚ´éãÿøéÓ§½{Ìôr ¨U±ìÕ5!w¢"_Âõ( ÷Þ 7ÝtÓë_ÿú^xÁ< P–;±yófÜÿÚ×¾¶òØæ0(„ÃW¾ò•U M²’¬$+·¥ÃŽQæX¥kÕðÌÌŒûȶmÛn¿ývkòp݉”£“¥Wʃ’•dUyP,£6Зغuëƒ>èÝ£Ëõ%YuV¸ê{s$®\¹~Dz¥<(YIVµÊæwmXv”×üáÚ]ò%äN4°Á1æCÃC€Æ‡{'¶oßn󰯮P Ó¼#îܹ³ò8ç0(„cÅhUB“¬$+ÉÊ2Þœìpï„ëN0„²êié•ò d%YU wÜ݉pïÎÓ£ˆ›A!äN4ŒSáNŸ»Ðr8åì #QÖĉÂʈêô6æ0(wÌhUB“¬$+ÉÊ<ÈÑJnSHä`'›,®à¥WÒ+ÉJ²ªOPîX&vP„{'pR'äN4ƒ/ÁzÚŒ(zd[ ‰ƒ={öT%4ÉJ²’¬Ò·ƒ@JÄÎïرãöÛo—¬¤W’•dµêAy­´ø}üñÇÏ;g7¼õ­oýÔ§>eã "·ælDºººð;55%wb-ºô%ð wâ‘GÁ¥Ý»w8p@"B!„¨ sssKKK8xË[Þw‚¾„í>!w¢!Ð`§ðz¼¡ð%š[„B!êlmOOO›õe˜Æ;ÉhT_†9¹‹ÀªG!„¢ÖfŒ.w˜; EòÉ3ë$‚H§‚¶ÝµB!„¨)¶!ÝÒØ"'¨w" B_YAÚ,„BQkÌz'¸l” 0¹­Í6ØéòåËÒf!„BˆZ`0ºÖ­[gcCª²¦­¨ìMœPï„B!DÜ Ú]j.w"—|x¤ðCm…Û[Š¿ÒW8¿ôò¥Ó…îŽâù{Z[þS_áÜRae¸ž¦b !„BÔÓ°éÞ_BîĪò›ƒ…º{ ÿuªð›ãEÿ᧺®_zr®x¼gñÒ¯)|îxËÏ¿“#öl…üc!„Bˆ:`vׇՂN˜;11Zô%Þ?tý_8p!&O~x¤øï‡'¯_Ú±»åýÝð7®u¼¹à¬ì$ÏX!„¢¦xvÿm‚mìÖÍþ‘NL»{^>sÏÁâï™SÅß¿?Vt*Lè~[¾ðPÁÙƒâÊ•+Ò!„BˆZÃæZ"VîDθã@q ~=cϾâH§â í7ÜOçº/>ämf'B!„¨)žé%ë«höÁN;v_ïŽ p!~¥¯°swᇞ˜»~C„>߀´Dˆ¦gnnni©¸ÃÁƒó¦B4·G!¬Y3#ÒÎ/çdî(úÿu*Ê‹¸A› ÎúNRh!‘‘‘‘–xì¶ÑÑѶ¶¶ŽŽŽ®€ÖÖV<è†~÷=z4ùÕÇÂÄ#}}}'OžLmx ÓÓÓôCøv/>5åرcˆp%! ™ˆ¿+½ÚÅŸŸ˜BÃGI)a!Dn} ­é$w"Ç|îXq¡ØÉ£…÷&g ·HÒæÀÓ* ÑèôôôL­ÐÛÛ‹3S¼g0W߆‡‡qÒ 7¸Ï8pî,ïÈ÷âB@8æøø8,lxsss%£{`ÐÛª³³³>ƒQŽ„ UÈÄÄ„ëÔ'þ»wïÆ7ò¾š¢A ` ÇXÙ ^įô§\ÿ§#7tJpÔ‰™FC˜¹öß•ZÑìàñÌÌL!4è&þèèè‘#G`ú›UJcF0¼¸ ”û,ŽÛÚÚ`7>|Ø{éÑøt`ÌÒÅxö®y2)©Ð¸/‹±±1/¥•S·ø÷÷÷CÂø¦Z&„u¦Ù{'8ÆéýÃÅ'Âœ~øpÑÙxÙñ˜ÀÏÕ󿆽d!DóÖ³ù®a “4¹'Úx$—‘‘•¹¹ª¼ÇÆÆyi—r'ò@kkkxŠÝ»w³+¸ÉÐÜ !„EàE ØvÔ·×GBä„ÈñNÙùÈ?ÚwB!ê;ë:WØø¥d†‡‡;;;óí¥¥¥ÉÉIMÂBä‡þþþ£G†OÊBQòûìÙ³gïºë®Ê£šÃ ]ð»š/’•d•ç P!û÷–[n©°–^IV’•dUyP4«ÖlØ°aãÆ›6múøÇ?~úôiï3½\ë F6 ·¦·?Õ;ÑT¾„ëQ@ï½nºé¦×¿þõ/¼ð‚y ,wbóæ͸ÿµ¯}må±ÍaP‡¯|å+«šd%YIVéyì±ÇÜ·mÛVa€Ò+ÉJ²’¬*Š6Õ†ú[·n}ðÁ½Û`t¹¾„çQÈF•;Ñ0¾„×;‘ à<ÐÙ¸²BzwbË–-ÈKÈH•G8‡A!T+4ÉJ²’¬Òãµ€àß ”^IV’•dUyP°Ö¯@w„í+¯wBÛÉhlÂzï©2N"ÿ0?°k¢ÜÁNx¹è¦›nª<¶9 Ê —j…&YIV’U%îD…J¯$+ÉJ²ª<(ñávP¸ÓSÍåˆï$äN4¤Gaž´§Í8³mÛ6ó%l¤~ÓgÂÍ›7ïر£*ù9oAY1Z­Ð$+ÉJ²ªÄ¨0@é•d%YIV•E÷ÀÆ;Ñ£ðÊ+×î’/!w¢½xî¬ xÐø°;±}ûv›‡}5àZ@ÊáqdÂ]»vUç…p¬­Jh’•d%YUâNT ôJ²’¬$«Êƒr‡~Ølì°;óô(âfP¹ ãT¸Ó'ÂîNnÛ¶Íú%Œô¯ÀãÕêmÌaP‡Õ M²’¬$«2Êô ¼+ Pz%YIV’UU‚ZçÀŠð`'žÔÄ ¹ ïK°ƒÚŒúÍ‘s'¬_Â|‰rçNT«·1oA¹cF«šd%YIVé©Å`'é•d%YIVESÊõ(ØáÝc]¶Ž< ¹ ìTP§Ý<à¹æH\[¡ÜL¨)h’•d%YU=(MÅ–^IV’U>ƒ ¯œçNØô Y¤r'Õ‘p¼]±ÍàrË®/Q–;¸aÃ[H®r¹®[U M²ÊmŸŸÿö ϼ°çG÷JVù Ê+²ðo…*žùÌéo}þ[—¿{iÃöû|ÿ+Ú_)Y)6¥¬.}ç´ýÙÿñ-ïxõÎ=ìÝù¯vV1V‘kñ‡K°–²NåN4*Phx ‘þ1«g[Ê©¬Y#ÚT­JÈaPV¸T+4É*· üÒŸ}¿¯yçk%«üv'* pçÁ/þÚ¾þ©Sûß¾Û]ÛÏ~ùì~ñÄÝ|#þ•¬”›OVýÒÌò×–öÜ¿gÛ÷m?õÉ“_Ÿ<õÖßËÝßSÝX±Œ²…ž<Ã&a‡= !w¢‘ óÀ]êà*„7lܸÑí”(«k¢ìkƒ c­•Ã ªšd•·.>µøì—¾uzúôs³g¿ç ß“üFéUƒ »¸–ó T¾ÄëÞû¯ñÇ3<úÕÿk~ÿïß´c“d%½j&Y±H¿wø¾¶{þ½ã=w|ú=Ÿzú¿?½ç¾½UŒ• ýˆëyp} uMÈh§‚gfǹ| p÷Ýwß|óÍU)ráÁÁƒ+­¹eUÝ*§n üƧ¾þüSÏã¼cSIkUzUç ªîN¬åòêùùoã÷u=ÿÚ.½¦û5 Ÿxú» ß¹é¯Ry%½j¦òêü?ŸÃïkßy;ÿÝôÊM;öì¸rárÜ{3ÇÊó(¼Kš-w¢©| „}‰ÂJgœÝ­ ±²¦ò2+oA¡ˆyì±Ç–––î¿ÿþ¦L`ƒ2EBjUuþøƒüŸyðw=ëÒ«<Ùü!YeÓ«[îúž»ßÿ†í¯xy8Ç…g^ÀïÖÝÛ"¥ªòJzÕ¸åÕÿã›ðgÿ~û‰çžùÂ3?wwÜ·®$VÞ<Õ8gCæ¨Ü‰&q*lÝXï¼·²»ðxÃÞ !¤Ê~+Š„zºòêyµïºÅ\zµ*îÄZ.¯¾ÿÍß?û÷¹ÇŸ›û½/ïØ»ãU¯•Ê+iN³–WŸÿõGàK|ó±oÞzï­÷ÞWçòJŽ„܉5Q7ÍÕÕ®†vÖ¢ìôªÂÆN|e|~ÓÎÍoû÷­M‘6~y%RqË]·lÙµåâù‹ð(þÇo|þ-zëª]BîDs©RwQõr³•ŠQVvÈ­R©¼ª g=ó¹üýùÓçÚúÀ›úïÙ¼s³TKJÕÄÜñwâ÷ž{OŒ>/j¿sïN9"50‘;P‘žüèÇÞýñ›ï¼ù§îyˇ޺f} •WMÏ#¿ö0þÜ3\ÓéüéóŽ;!„BdáüésŸûÀßß3pï}äí;jÖ@+DxéÜKpž=ýÇïν;$!wB!„È“{róÎÍ·Þ»çÌ£gÜ?^Žh2nÿñ; ØðŸ©ÞÐóG~íá=÷í‘#-Ò ¹B!Dg= ÓêØ»?î?üï„™%ùˆf*ýC¿ûÃp!¬¢íÛpF’kÈ€ýÍÇÎx'Û~䶛ï¼Ù½áMý÷Ô4Ï=þê¼4Wãk+DɤQ‰œñ›·V âbÁš·/¸sïŽÊ[‰ªûaTåí JÛ¥íUü‚9Ôpi»´½v_ðöŸ¸M¯ BîD,pNŒ>æçNŸÇ™{î¥ ÁxÌÉFÕ]û …Âç>ðY–V ý§T>âùÜãg+©ÏŸ¿{ß'9ü‘ÅèÛ>òölÄ“}ñ±.~6ZT^Ö|înáç³=þ…±ø¬îûâÙ>ÿ'sú{wt±âZ‡Ÿzß'3äjyHÑ­÷íyë‡Þj üÊóöö Þįr9ûøYT~í}ìLæIcH"ƒz_ éEAYýoóï-7œ·|è~o\õ#¿öÐKç.fû”ˆÆæ›Þ5ÿ^TûŽ=;P[dø‚øúHÚ=ý÷PºlAÕi»´]Ú.m—¶KÛEãÒÌS±oÿñ¢5.Xã YŽí œE‡¿*N§[xðéçe û+‘Qž;‘Ù•ÿÚÿµE…Ñûf@‹Õžûö ¸Aª­ %=O?ø4‚b}Ã"´3ž®$zˆFÑ骬”¹xî¥[±¿Ì]ÆóãóH=@¹!nd…§ÜøÀwE ?Vªáp×®]‘1ôöžþ{ù,¢‡À>ût¶Ô!·¬|AD Ç8¹ê™TÚ¾µ=Îì¶7Š¶G–WÒvi{-´]4 Í<›³)X¨=ù±'OŒ>ös ?o“êp²rÿþý ÿKÏ'ü™{îݳÓ xAm?r[>*²`B±bq“!oß|ç-÷ Üë–æpÒ*l]ûÜ> §kçÞŠu·Pv›¯*±öP¸¿¾¯ýå/X¬0*íœE˜_;ÑÅÉêÀ‡^ZZêíí _ +ÏKç.f«SQóya¢‡¿Õ]µCÚ^um/]^­’¶'#mÏ¿¶'—W*Û¥í´½dy%äN¬_p:Î>~}x ¨yéû…92Àòÿ† ¾Óž[‚2šY†1ˆVùÑ'P*q¹Øšr[P²ØÌ3”xõ«™üî¿è®¼ë¹íGŠ§nÿ)ûU3´¼åCo=üï´?J  ,ÄÁ[„ŽM>Ùæ#"9îÜAß–µÎ@%Zù¤›ï¼Å[üqá³OgûÓ> YYPTÑl §TwYdi»´]Ú.m—¶KÛE£ÓT½¶,3UÑ—vŒ÷nÛ´sóB¹þtåïEÞ»gàÞ£;}nçÞO|ô‰{w¸+Ó­ g;ƒâÉfz9…~Ù©† ŸüØëŒÎ<]yooåÜÓ¾ã_½ý/o wˆýâ¹—Þö‘·g É ºøOï¹o/¾#JdoýÄôP÷n{àÕ&ðMŵäOWEìa~|žAÑdksªî²ÈÒvi»´]Ú.m—¶‹Fgýððps¤dçÿ´¦¼ý}ïWýà/¿ùuïy{óIë«_qá¹ W^ºòïøje„|Ë·<3÷ÌÒ?/¢Ì /P›¹ ƒkÎfåoë¿z…+þ½ªã{ËÛ†Í~à¯).·÷XqóDéà¯w}ç¾j}¸l£<Ÿ»Þ󺫯|köÄŠbÏ,®ÖW·¢’X|z‘›¦#™{x_8{aó®-·ÿøíê€'vnÀ”­Q A!9Ï_Dê.œ½p׿{ÝÁßèÊ«/Œ=-r…ƒ¬‹ú°³²Ñ}Òvi»´]Ú.m—¶‹F¤åÚµk’‚"%ám[¸JIÊM!…¶ !mMÆ:‰@!„B!w¢¶ŒH’Õ—Õ¦›½åGr²,²Òv!QÛe3ÈXCLH’Õ—Õž{÷p“#;““e‘…¶ шÚ.›Aî„bm‘Ïe‘…¶ !m«Å‰@‘ž|.‹,„´]i»;!„h ÞÔÏÍwÜüÄÇž8óèéÛ¸ ÿjUr!mBÚ.äN!DZÚ¸­-붲BHÛ…¶‹fBs'„B!„r'„B!„õEƒªÌÒÒÒ±cÇpÐÛÛÛdI;zô(~>¼{÷n}hÉJ!„P=( ê¨"ð"úúúZ[[ñ{êÔ©æK e ¤Ë$$+!„Bõ Ü Q'Ožlkkëîî¦/ž®®®––„fg¦§§q†Ç8à&/¸-róH»ÁwâþZ49 ±H2îF¸>PPŠªäÝ4ÛUÜgUdå)")•Ô–4ÔH£„B4+«k3¹¹fii 9¤££9dtt´Z9N|äù©©©äÍB‘|¢€@êöêááák+LNNâßãxbbbfffMÉêàÁƒn’Ù,d"âîQ.BÑô6ƒ¨š;Q60ÎŽ?žÜlS²õw€{¦··÷XÀáǽ›aâf@D&Aø8Óßßon^ o¿8344­ˆ8öÆAOO7µãd@ɲ òüÜÜ\_ÂHn±Å¿ûöíã·À“Œã±±1DOAzž”–ª”qu–•çà_HQPO("ÞfŒ¤A4¨Ð.Ä ç;;;O\Åüâ©HáTKhB!šÉH_Š†çšHl)šeÕ’¼ÛÄÎð‡`à...âÌÔÔ”} BÐAÁÛ ÁÜ&üË›xÃÄy\…uˆ“ø÷3ä[œœ ÀÁÀÀ€ûvÜY­tQPU -ü!\ÑAVRÜÔñ<ˆdŽó«á'ñ‹›ñëJÉ ¼ž¹¯Z²òRÔ!™&|z$Ù‹„S€³³³¸:ã*½8@I :hä€X~q‚+.O—à]Pb£££H‹«otÞ¼¦&õN!„È\Ò¾’Ð v*›Ã°ºàWŒÁ–Št27Ù¼CÖJðF\óÇ6NÙÒLp¼¾„Ýÿ'[Ï ´H†G^…‰›Àq2ÞbpŒCí3L>œ ðE @€ôŽ¼.T VïL€ERro«Ö•U—Ä÷EÈøåëðjh,,ñuø—nXX—:;;Msâô­êBBÑ4”U ¹kŽáÈr˜é°Ìª5¦‚…YlÓjÁððp…Ãlð8Šp_OwP& bœLäÉÉIó‰![H©F<ò +NŸp;¸€¬%.+}*ê d–‡ÞAh'a­X!„"Ÿ6ƒ¨ZÙ)-¹Zy&ì¿ðüiNA¶áòaê³…Ùêʪ­­ó(ânàJD RZSz•FÔ+-+„¢¹í+‘ õN4$qk•\ ©é-BúKÉýªZ‰¨\i¤YøK!„r'„hlººº8ÐK¢B!„;!Dy¨«T!„¢Îhe'!„B!„Ü !„B!D}Ñ`§´hYÉJ²B!T -+„B!„;!„B!„;!„B!„;!„B!„;!„B!„r'„B!„r'„B!„r'„B!„r'„B!„r'„B!„Bî„B!„Bî„B!„Bî„B!„Bî„B!„B „B!„;!„B!„;!„B!„;!„B!„;!„B!„r'„B!„r'„B!„r'„B!„r'„B!„r'„B!„Bî„B!„Bî„B!„Bî„B!„Bî„B!„Bî„B!„BÈB!„BÈB!„BÈB!„BÈB!„B¹B!„B¹B!„B¹B!„B¹B!„B¹B!„B!wB!„B!wB!„B!wB!„B!wB!„B!wB!„B!äN!„B!Åp‘"ò¨è--‘ÇÒv!m—¶ i»´]¬)mÏ—;aÏò ü+DN²_ø·ÜÜ(mÒvi»¶ ѸڞGwâZ€›ëÜ/ ±ZN|Ë vìæÆ”ùPÚ.¤íÒv!m¢qµ=îÄÕ«W-ᘹŽ'¯\¹Î“Ò Qçèe³õë×ãwݺu<ÃÞŒci»¶KÛ…´]Ú.šUÛóèNX¾r³ß¯ÿú¯?ôÐCa'^9P¬®Oïþ{ÿý÷ÿê¯þª›KzöÒv!m—¶ i»$/WÛëÀ† ϸ9ðê 8¦Û$Dn¢^¹rºº.ÿâÿ&W9Òv!m—<…´]ˆÕözx>åúÜ6 ðª†ÄÜtÓMúÌ"Ï,..®XçàI”¶ i»´]HÛ…hm¯²=f=²~/]º´êö„(ÉÅ‹7lØPXi—Bƃö–l‹’¶ i»Òv!WÛsçN\s0‡þòåËêùŠZX™±d#-CJÛ…´]Ú.¤íB4“¶çÑp—8°x)@•DCøô6¾½8 ;”¶ i»´]HÛ…h\mÏ©;áºõæÍeBÑ(™°Zd-Yu¥íBÚ.a i»«í9u'Ân={^š˜“çNâ/îêÁ½íxîìÜñ>Žƒ]›w~õáý;÷Û¥¥—–pÕ{öÀ-voÞ]ÖKq?žbP8PÖJ‡ÆnØ°aýúõ¶8`Þ´}iiéرc§NÂq{{ûáÇs.UDxnnîÀ»wï®V˜ÓÓÓÅœuð`øüþ€J¢‡@pŒ3BKŽsC[#Ú^7¨Q‘x_ ¹o~~ûöíCîsµúd€_þ‡´4¬x»…‰û³)I-2šÊö5eÉTÈWž*<ô¥Âòùâñýo,¼õ ÷<ü¥Â®› ¯mñøÔ7 _ÿ—Âë_SصCÂ[}mÏ;nÈ^ÂæþxO ?:+“kt$úìÃ/=xƒ3ƒG:˜§ÑõÑ®ðããŒ÷ÞÙ›þ¥ð^¦~b ãÊZåfÂ7Bi™ÙE×?Xm¦±‹q Ëcrr’ÿæÊ8›™™**öÜ\WW×ÔÔTI»*=¿H¸çMáOƒ}U!'Ïœ>=Oe—"£‘ðTóÁ²Ìîl¼ËAK+áAØIa£ŸÄ%6ù* NxúÄ&DÏŽÃÃNâ"FÑá] 1 ‡–í3­mÏ!ô]ÇÇÇM=p€ñMaýÇ=…«pK8œÉ»DoŽ«&gðõÙó>_„5™ïS˸«<_2ªläÃ^ô>óG7t2컵è9Àa€Sqƒ–îˆ>¦B—# Nân5Òöœº–¯ÞÈZþºÇþù<‡ð,ˆ¡û††ï‹u'èQTþvö´ýI~;þ¬£õZŸ—«Éûx çGgG[F[F ?…ƒ¦w*Ì•7‡>?Ú~ìXñ“õ÷÷‡íííífƒ¶µµutttuuµ¶¶º†NKK þÅy^Åm Ó¬%œáS£££¸Ù,u„ÙÀ§8Þƒ—`ñàþ®{Gõðv Ì:ñ1›‰·áÕŒßé½XÂñÜg÷ĉ‚‘±XÙ¢Ê/|»Å?9Ú£JÁâ¥ê Á -ógZ#Úž7ð½ ŠáÜû’ç/ÅõžA… =¬p˜æ{;#L¢ûáQ¸]°ïñùìu#ìô´÷¾glv ç§~bêÚÀ5Ž¶‚ q½ò˜„ka—&Ÿ°§àT æ8ÉK…•>–æ΄æЛçDÛgffâ&Yö˜i‹{™©©)œxYFG:„KeÖ-îÍŠûy‰vŒ™ËÝÝÝ°Ý-LÜÉ0q‰C5˜v3îm49nîééñšWñ¬¥ÅÅE<244„]sQ‚}ÆÁ€K ‡LBdËkœ(8 $<2Q¥mw$ .ÚààÁƒø—®bˆ«&:ŠñIBæÏ´v´=oÄMýçÉäù0Лìäåè„©ùÖõ“¡ÌT dÉMf>‚A ñ5*ç:çˆÕìì,³-^Ä<ˆ_<599iOq^‡ÊvY2qÀ܇}ÿ£¯ÞôWÀ臿ñ;¿X<ÆïïüBqXÜü^St6æŸ*<ñ·… _.þ‚_úÏÅ_NÉØ÷}×/áæOL>twx!ˆÊµ=î„ÛEhžýZ^^)û`²w}´‹mÒ†{ïìu׆ò°›í/2 ¾ÄáW¶þ£µðéÛ¸^ÎÐÕÁïøã Ñh2ŸÞÓáügEÏaù|±·áýÿ®xrù;ÅÞ ojîÜu“_Cm¯ë²å:áC|ÿÎý‘«3M<>Á(j÷ö“çNö=ØwøÕ‡~zañgÝ…héW¸Á½ÉÖ¸sò“xjö=³ì¬hîÙØ ‹®º¶Ã ‰\æäÉ“0JöíÛG™Àž„äõImÕË—ÕÀiÅÄU<>‚v®Âxš]\\är4Éý#cXáò©\`’q³l¢Hm.r8§F$rÉÿêÆ­)µ=wMB¶Ãm_âÔˆ avvvrKʈB;X(Ìí^p†Ú²k×®ô9:}Fã ¾…€ááá£*ÛE0ý_ÿÚëk¶†ùoS¼!MOîù«ÿRø—™âÒ±÷_yªè6컵¸I…÷9í[ä\«×Užª<¬w»ê Ý74}zúèã7”Ë0Íqf c ¦¯æÎÙ=wöØ*›®Íž oúµ·þA«Í½ÆýýžïѬù0³ºÖTÛ{{{¹$¥g%à ¬Å2ð²¿:1Qr'f¶©»Ó¯]—6 —µq¯¶´´à €²¦PÄA%´†µ ûÉî¡9Uù®[‡ÜÙÌÙD‘m×—èêê2±¸ã¬Ò,¯Yݸ5¥¶ç Nbá€4÷<ÎÄ­ø”Fi‘_"ç:s/ w|ëÉP–“ çhz¿îˆ©Hº»»;::,Éìfἕí²dâøàûŠ¦¿;$‰<ü¥¢›«%ù¾Î—ד…«ðþ÷–¿SxGW1dw}X¸ÛîÖŠ±µÕö±A_¥:¶à½3§gúìÃ/,ûB0‡atvÔÌôÚAŸŽÁ‘Î#pÆfÇØçâàÞƒ8‰Xu}´ ÇÞÖˆ3bˆg;÷vÂ'Áƒªé§Oä™ÉÉI.ìˆj•=çVÂP°™Í°?p6o€=«xªdÈGŽƒÀ¹žŒkßX˜°™&·fà´c.®Š×!°x¼×ÁTr[X Á8ÄŸ¡‚–ÝBêÁ!%“`–PQ°#Å[s)¶9`hÉd´a–!]°Ø8ë çÖÈü47Ý‘*‚ë2eþLbÁ'æ¶ÓP~Úåøpî@Î…p®s W3ÃïÔÔ”ÛéAUð^f@6.$h2T‹[ìá<×*€ÆzÓ–Âàæîè9ô DRæ±fyÇÁâØ$ø;]œüÀiÓŸ˜º¾€,.•ä?¼£xó®ÅLp>üçקkãÇïú…b ö¡/Ý “ù§Šg쥢1\œ4\¹råâÅ‹.\@ItöìÙo|ãO=õÔüüüÃ?|âĉkkƒñÿwüà?wéÀŸ(AÕTÀÁð? »WgŸÅƒø­üE``z<žüÚäþ?Þ—â/]X^Øýû»ñ/¯N}cêðßFP½Ÿé]|qç1#Þ‰?܃›ûÛ}úÓŸ†®Bc¡·Ð^è04ú ­†nçAÛ`ÐÎÀ/,Z®öh,..Z³% ®ùH¸ ×Ëú3>Ž3ö/Ì<ÈU†¸ƒ/¬ Ó^ÊÝܧl49.qaJ[2•Fbˆ`-ž8°GÜø{·u8 R^ZÜÙùQà˜É™ °÷zqpCs£MYPL)%cÛ“{BðBËü™Ö”¶¯‘Úů†Olv;JÛ¥íBÚž w¢Þr#ëôó ü‡Z/VÛ(PQ=ísë›LÛ9T: m_ ÚÞ@pCkÉAÚ.D-´=§îDØ1²øû¿ÿû_ûÚ×ô™EÎMêŸýÙŸµ|XHÑ%mÒvi»¶ ѸڞSwÂsë™ ¯^½úüóÏ_ ¸ºÂµk×ø«­aDÝ0µ4åën»í6Ï­—¶ i»´]HÛ¥í¢éµ½¶.+{pÁæË+¼ôÒK/¾ø"~¿ûÝï^¸pá;ßùÎ /¼€ßW¸téÒÅ‹q's¦²¢¨uöc~Û°aæM›6nܸe…›nºiëÖ­øݶmÛöíÛ7oÞŒ“øÝ°žòò¤´]HÛ¥íBÚ.m«íu£ÒÁN–f®z‹œ†,gN2!N*ŠúgBê¤e6Àli 3gè—¶ i»´]HÛõEDci{݉ð¼%7"³!©v'N""²ÇPZ"j ’Úˆ_7û¹90<“IÚ.¤íÒv!m—¶‹&Óöœº®óäùOH*28ÉžDƒ(õÉ„ž[Ít}z7+¦É~Òv!m—¶ i»´]4®¶çÎðz$¹ iã\%&‰é„7eMcuÀ4sý ¶óü–-[6à /¥™É$mÒvi»¶KÛEãj{NÝ /2"‘…`zÏÃg&Ä%סOÈ„ÊŸ"½ú%_²ê¿Ö3¸i:ô6è0åøÚêj»ÕÊÒv!m—¶ i{C.ëæ@s˜&k&„—ZKSùSTîNœÎkóì™ë˜ý˜!½iLiªœ²´ýÚ úX¢Ö-Xnóª´]HÛ¥íBÚÞî„»ñÀ|…ô˜7o+73r96קˊʟ¢wÂõÎ-â_sß7ÜHš9LÙ´Ý4\*-ꨊÒv!m—¶ i{ƒíŠM‹ 9Ͷ£·TÑ…¢ vèÝ> ϯPþÜ ooy7S¹…6ÑUTÛ¦*Úînu$}u®uÜ­Ž¤íBÚ.mÒöÆp'ÌbóÏä™;a™Ðœ 7Oº™SYT”›Í ¡…ý]$éÓ[–s½ ס¯\Û]=—2‹úg‡°ÎKÛ…´]Ú.¤íõ‹p†ìaž€ë$¸N<¬sðòåËvÛ?üÃ?¸}Ì¢ZyM”K«˜Ù~ðÐò|w·£Ð²œ×3È’³bm·«Rf±ZÙÁôYÚ.¤íÒv!mowÂÍW^ÏÎx=áÉÏþó?ù“?)µà¯ÿú¯ßüæ7»¼çÖ›£o'Ý›YÛ 7vµ©ùJÔ»wúèl"©´]HÛ¥íBÚ^7*š;Q¸q&ŽùËÁˆ\¼™Ø xäÈ‘#¢ˆj177788îô< ô90AÛí_Ù«[ën\@Ú.¤íÒv!mÏ»;ÁØ3ƒ1ïY~ ûô¨èëø”–ˆZd…<y &µ—+y=L¸›@hoݪ¹Q ˆIúh‹’²ÊP,g{Q? 3odQ6;;‹K‡ž  _azÅR9…%Žã²XB͘¾¦¨Ã'.Kòª\6Ô´ÓÃ6•d—ИQ#¨`ëÖ­ƒ²Ù|‰Ž¯ëëëCEó…°8žžždÙÍF xGî™’]É£££(å«;Ž"n, »Âݾ4¿âùpê!wDª®¶¶¶‘‘Ú¬Éã ’¯²Ÿ=î)&3|Ռť"2 B+yµáÀ× ÎvG$ ƒö÷÷WÒõŸüÓ Æ«¢ûÉ"ïGFƒÁäæJz¸¿»»ûèÑ£tøS~Çp$¢”pµ¤&™C›IýêO¹År°Óð„x W\©e:î+'¡‘¹cllŒ5”õݵ¶¶NLL ×# —˜;øF”ä(2ixTUÊš¢*ňIÏ.%äÍlU@rfofjÔ;ñâ‹/ž?N»&ž~úé'Ÿ|òÿøÕ;!jÔ;í‚ŽAÓØA݃BsÕ;ÁJ†rd*¬•‘m$L—Ûô˜Ðv‚ÝmF-ÙÆCÛñqïg33; ¬¬ç #¯)Ô ßóx¿ÝC™X}ÙÂÙÀÑ&:·ŠrÛÀø¯ë(Ç] »† µ¦ó’:ãS®¨Ý±6u›']Y™¬Æu19x"-ÙlÜ(ùÎÕ±­+Ùì—þ#òÓÄ5É'¨b\­G­ˆû"\;$î;2|oL£WDFÉÊ Wm\Ej`Y½î¥Èмh«*IÓt\,{—\Màm¦ÉÔp³8Ý2·y+Ö¸Å]\©eúÉ«‘µOdêká 徵ݮìJÞìê!ÞëõH$×8ƒø»êíVyH5û·KÖ”9#é¶ ˜ØÓg@7½ÉÙy-PswâÙgŸýÆ7¾ñOÿôOÿøÿø‡ø‡*¶DÌht š}ƒÖ­®;1‚6D‚éi{±Ds«™¸ ¨[XÕŽ‰Õ x„ű{l†ïä #+Ä#Ý w¨îg³“{N2áø5[Ê8|øpÉñ$ˆ!{( „éöª›«`°qîtÓbI k‡c~Æu*lóúp1ä°+9??ÿ{¿÷{%Ý ~ã4ƒ>E>aSÏú‰YÚƒ¦Aß uÐ=h ôpU܉È^òk)fVxõ G««âÜ ¶¹%WÂTlïD‰e¥•¿áÆ0 <Ò°ZÁéY²‡­ílíÖ‘íǬѩcÚY…{cy™&xï5ÇÆIŒ÷âŒ[I„ë’°IJCÍuíÊJrþ‰Tæw"RíælÑÃSEæ טˆ‹[Âç°˜$g 7/òqQâm®ÙäµûFj`w"!4ÍÈàN$ËÉkkwafq+P+LJ­p·Iú"4MÅÙÞï†ù8u ›×”5…Û·Ð(%û—Â,YS¸ÑóZ²˜7Ýšºd »‘Ùy°®¦c¨ +›MÚ$Šä…ÝÝÝ­­­]mmmø[ì²äBZ‘ ÀrGG.Åw>%xe___Üêi$_Ö¤‚Ù…UÝÇ4Îç)›V‘üqù½ÂƒD# e×ÃAQ;::zìØ1wèìì´c.ØÊÕ3ㆨ:tÈqÎú¯Šòœ™™aK°áMQ#_¹yqsŸåàã)ËäC“!y®X’kT¥ XÏÐDÊb9³W˜$—ZÉù(CZ†B@[Ü^Dncj–KiO—ØL™ìÕXÒ·]ÂgÀëØlj I¹ÿ–•Ìț݅”eÊ¢ƒ\"òfÙÐWÏ­dS“y„È (+`ÙT2Þ)²Â¨Š¬˜–——Ëz*ò~6áÔG°a_"‡Nd˦¯5g  ¶ÍVø)dhN\*…\î v”£ÄDep,À.Áá±cžsS¹Üž{?ü¢²FB H`¸g8õ<·<¹.dÜp§›dW9½Þ<Õ£ CÁ~ÉO€Ð, 8À¿Í½"'Çc¸âåG©nwXÁâú`ßÕ ²UÜðWðldK3¬%æÙ Y£’(eÐÀº…&’‹eW‹2ApÍ·µ%¡Ô*é3g(B©ÃÞ¹Ê*|¸ él¯–)wn U 3ÿE©ncÃÊJ&;7ì{¹2W–É@ {'ܲfçEޙЦÅEÊšFÜ48zzzXÍ WTkü›„ËíšHø–“V(Ú`s’Ïg›3Yß¼Í#WëC{CK ¾;Ä‚/Îq¥Pl å¶O°>q3nKp Q§NòNâ-õ¾‹Qø0œ2WãNŽ|5§çq'¦Å÷jB«ËîçzJá;¡ð(¯Ã]U“““ŠoŽO…2ãNÄÐÝÃ#8ƒ"ž7 ¶¸š¦Ó’qCà^ÍQöE~D˜ÜÕ•od˜8ÓeÆ#xnÀI×ÕqÄ34ÄŸ0¥<ÙÜõQا‡Ú$||úÈ|QRJüˆ”9²e›ÜŒÅ×!_¤é…¦áÛÁ,ÃÍü²xœêêö¸&g Ä otõ$s”Jj`¸ÄvÙ·oŸûŠäÐ,ÚšMQ.ábU04µ'„ ýÉÜÀÇ OØÆÊp˜MJ­’­6ÙŠPÜoÊÃ’Í„?€8Ì„kº„š‘S ¸ÄÕLávzÿ–•L܃ª7³¯ÞrzYPDýÕZÙéâÅ‹ßýîw¿õ­o}ýë_ꩧ¾üå/?òÈ#¿ýÛ¿]ˆššr¹›2Ö«Š¡Ü5jã"–9Âî欇2'¹hxjÊç)k© .0jp8w)’ôx«h#TÒÙÖwŠ[)ae'ht š}ƒÖA÷ðjè!´±ž+;!Éc°Y%\JÒ \N_óÖ¦ ¯žÇ9y:náWxs$\U_Ç]HšƒK\X–œõ»o´Ç¾¥'­/ÞÖ²ðî±Öµ¸Á¨{…•}o¡@®Ög¾“+1‹•û \õ`/,8«màqaºsÓÙqoñäy.eè&¦ÿnü½Ûâ¾oã.Kpl@Âr«q ™æ#š‚Q’ÞÍ^4Uôv¹NxÊr¥[‚!ÎîãÉYÃF#zq‘÷¢äÝæÅ0N#—ò`ÄÒ„æF[k7%“¦X濦î'öOø—ÇÖ˜‚ïå~¸R+\΄5<®¸ «b\ÍÎQèÉ™:2|…m áeÕNä¿eÕn¡ÍSݯ&º1OÎÎk–ª·àrîõ¥K—.¼ôÒK/¼ð¬º .|þóŸÿå_þe|¯++øjÅ¡¥¥¥vØ•ŒÛ"1¡92bÙ" ·µµÕF²Á5AÊJ ×‡c¸Ñåŵ³Ü§¸ 'b˜¹Û„C×fffØ­Ï|Xîô,J8ܳÙ~!!p'Þüæ7oÛ¶mûöí[·nݼyó¦€7®_¿~ݺuÍÝ.íjkkCXá 3œI›($¤dÛ¸ ¡¬!„•³¡Ö/HÓi°oß¾BÌÌE¦Æ äp*6G NLLxÍÝ}Ó{¨*C)ÂS¦úúúFGG9"+C€ì— ¹F—ipp0[Ëý‚yæ´Zp¢G‘ª\3àÀÛÚ……•®v‰H!„¨"¹h²µi=áK°D+\Pµè焇?âL†a¦\º‡ã.ŒUL]ìÕ)wÐ'W˜öN2±Õq.âà¤=‰Âà,sî…½Ylä‰B!ªÂ†Å™rØžÍXÉ—HÿëãK¼¬ÊžÖÕ?ùƒƒƒðmÂíÊ A=z”ÇsssÝÝÝœïž-´„8WZ___¹{r» üdmmmÜ®»ßÅcttÔ}·ŒÄîábeŒjkk+®• +÷&k2VWÃË}#ôÄU›UÿÔŸJ2B\J¡r{Ý¡·á䭄ϧ ¢”OXΑÚ¹5xÂuÉ\˜ÜÜ”æÈ$<ê!¹|(Wæ™sGYeox •º‘2uƒ¨œZÍ0cŽÞº˜£$wQÝZÜÜ Ó·Õò(n¸1;;ë:T)Õ>aKÔRÜß­òHV}ýÎÎNTŠÙ†&âA˜G¶Õ §Ü òðXùwñ¶Y¥=:11aû¢Ð&NØÆ÷/çæ_Üä„fèBNB_7 ÜãíP‹ó”_ Ìjj366Æ•»ê¹©M±ÌƒrÓ€tíÀñ©S§¦ 4WåxÞµ¹É=·â‚¸Ž?Ž3*AÛqâdš‚÷ÛáÙly1Á/“‰Hæp;ùööv“ M[S3®™¦|(WæÙrGYxš#Dvj´+ö… –——Ÿ{î¹3gÎ|ík_ûêW¿zâĉÌ;£ Qht š}ƒÖA÷ ÐÃ:ïŠm]X¶õ²»ymæØi¨yaf†ÖO¹›Ä'“¼)r üvÞV£…`ÝÛê~—°ü)‹v²Xh{i\\\DÂm«û5¾ mß›p[aeR–'ÞlZÍÎÏðæ»t¶¥zæ÷4ùºñº)bùÀà¸rƒj ›5¼ƒ¯{>RÛ½‘üA½‡¼À5K*)Ž¼ôæ“Èž¦|(WæU,ó3Ô8B”EMz'ÜÑ&Ö5±~ýzdªßú­ßâ>ÙÜ0¿—`ð] Y,â0EÚ°iÓ&n}Í=°¡]œ#aCžLëOÔ0kPL:t(®¡nzzzbb‚ëêöôôØjfl(éììäêÉ8À=¸Ùšx‡††¼æ1ü{üøñ¥¥%¼®¿¿ßš¾þØØ;F.¡¾ç« ÁŽŠlßM#ÃæR\µyǸ¡Ü†a›fãž<àöç°í7ãux‘ÛbÇNÞ I–†sêÔ©”G¸ß Ÿ»r˜Çì `gZÊ›!:vb$ô;Eæ‹ð=æWXà8‰Kˆ‚B ¦ðžzÄ)³G8ÈÂ|Ä2"†“ô[¸r¸]ßÈ,ÆgnZÊp˜ê’ó$^Ýîwww7ûô"¡oïGŠ† ±qýoeå.œèŽí‰šug!í,FÚÛ۽“_°áòB¶ò¡¤Ì]Y¹ý6 EŸ«{x¯·)-4‡—¨´^/núL‘ Ôˆ£pðMùR/X«é’3…ÝÆ}Y× ªÐäVsøu«¤ðÈáwA°Œs„…™ADµìD_b}ì¿7Þ}÷Ý/¾øâw¿û]üÂÀ¯çQ蓈wÂõ%¶lÙ/¿Û·oçÄkœ§²yEýAyd–Søª E`ÑÖÕÕÅóóó¬ŒQ²Õ?}€ÂÊòÇœ.K[ëaGY4/凎Ž¶âx4`aa[ °æ`ÉÞ…¬§1Á‚ÂU‚ÝU€Qa –kU³Ôæ¾éÜ8Ù—ŒÂ¿nê•ô›oPÚ6V!Ž¤Eö¯Úðk¡€ô~¾2¾nŽ”d\¾ðn£%)s®åj™Q‚òð$þEàÈb|u‚RÑr·Ðaê,SàAå¢Ã  Ç8OÿߎÅ<6¬Î‹žEÄâRÄá[ÞÉÑž‡ÓÄ} D—8Þ&!GìÚµ+›>¸» Å ÍûиäMA$Y 4PF¨¤|H–9ô„2Õ/JSôAÚˆuCÂ6´ÕJxÐî´²2EnMÁOÏuYø¹,ª!ëÃ|]B¦°Ûà!ð669!!6ŠÕv¾¢æðN׈{gð˜ÿâíì%yq'øk#ÚÍ£€Û€_ëËÃ%úr'Dw‚Š´)îÄÆèK¸3(V¥kÂÌjœ4éµ ²è‡`ƒÈQ°Ú@g<ˆ’ΊÍe”‘šÞ¨b|(þð ßÒÓÓÓÖÖ†zg¸1]‹B0½Áêœq÷x‰ ïÂmxÊÊVhMË(‘­Öç[`ê•ëN „U#âÃ$ o„pÜŠ¡½½÷³Û—(^Bò+ËÈ*ß%Ì6-nTïÞ†À½¶s„•®¶0«k ÷šK“ó…gÁ@‡”#X¨¥{ÆÔáàÕl¿LP*¾Âõd‹qLUÇ#Ð1zõÙ;áj{‘Y˜L„ŒŒéZÉxSŠpp '¬´ 0Rëô械¥€½ˆ‘ÂñÂÝ>@æÛd)ó`IfS´Û¾'4~h÷’·v±:L¨"cÊò¡,™{E.ËgzqEçï™C÷Z[[a^ÓLwçQ-Ó”´áLQÒ¿b´ùvþk‘AìXK“)˜X{jæÆ*ÒýŽ«zø.$uJ>È×fosÝ wŒ©W¾çWÐò3n0Cˆ8¥¢ÛÀE`éNpÈ= à*Þ*vP ìŽlAd‹¦ë pdcI†ÝÖØWkºƒð^94ÆÍí©w÷Na­ï%9ÃB l½CòQáA8´m#ŠËÝ57£’ÃmlúrÍ)6YÅUB\V%l–yÎCXh¸!Ÿ«Í4"Üï2ÜqWÝ|᪩T|—·}*t¬ÜÁÜhÈ,.¢àºßnÄÂY©¤‘ÊŒs%Ë3xKºY¾Kó,ûB½¦óâ„ù¡]w‚!$; MY2,rénÅ}Ü*Rmp7çuÕ’1¡¤ÌÉX´ù뾿ËËË%sk\¦‡æþ›¾ ¶w1ï_ø¹p'`½Ñ%pgMX‹2/'mF!Î\ºtɺ&äNˆ’îՉνˆÍ8v;YEaõú("[ççç=•n\ [²¡Ë«6¬lE°ìhfG|šò1šw‹ÚäF©l²âøÂʨ_¸aˆ9*EŠ«µµÕ»⢱…Û–VœƒçvûœÄ}œÁaœ¾hªV¦¢NîDáÆ©Ø0øè$ÐaàIx8oýD¾„HV*w*ŽõQlt°ñN«;Û°D[9žË˜¸ýt6â†;—¬Æ¼ý}úúú¸6…»™ƒ½¥ÜÐ8í5½ý‘¡î±uô#¯R\\4†gàœ†g÷Y¤Ú½¹Šp ,Ö3 mpY.Öqç}è4ù‚“þ9AȻĹ˜î wÌ i[G(R©Âß‘“P]s;$”ÌJÞÀ?$§\;žÝ ¯³¹(®ËQUáÕi¸P}t5Ah”¿›åa…Ç¥½¨gù\ôqJ˜ &tûL8_9ìa&—´MP¸i»³:Pý]±½°Ýe8Ø}KÀÖ­[·¯pSÀŽ;vîܹCˆ(¨TÓhÕÉ>á-îTX½ÁNf9ÙbJ¬PdÛN¨,²¹¼[ñ§ œëÉX ÁÑ̬‰Ý1!ÜPÉ{6ü†fFžŠ›Ö瘭6Pò±e¿¼Ž½—3OÜÈãfØO8Éù‹\µÖm¬Ñwä¸öf˜¹ëmwÝÊ9øvp\7M¾0— ¯Kƒ3p¡ÝGL=¨Øl/OPªpT¹äŽ}t¼×SìÈÜJ›Þˆ<^—3Õ˜œè6¸’¤—ÕÝÝíNH ®â7ýŠIîLërI?´};Üià6ÜDØz–ÉE§¸jï–ðgòÔÆ>qY™‚Ÿiu7¡OãŠ[êÂÕŸ¨:5ßw‚Cž`äqN…9W¯^µ~ œ×H'‘R¯Ü}ÖmB¿y­á­'V½ƒ‚Ö-݈²~rr•}[[›5aZ3 ÁÖÖÖäqÉ®û•{åÂM4ÄaW!9àÚ‘¸ÊµeXCpM@·w›«Kqt§^ †)wŸôÆ”³Æ*¹[0â†{Ltê6{/Ä…J2áªö\=†Iàh%\Â{9F¹¬e[ÙŽÈ5OÒ|G‹ªÍeôšuÎh­[s¡´Vß'狰郕K‘RøTŒp®A°‘&(U8žxnætHmh8÷œ†%‡BÆ‹*¢7r̉—1Ër'~ÉIÉœ‹â&yvveNî ]Å)¿é[šñu¸‡Z¶› 4®ˆ…¢‰©³ÙÀV’Ô¨ƒ±Öå|=ˇ„¢¯¿¿ß/µ• Ô‚nà[@ȼj¾húLAÇ)e%µ*°‘äÊ°*¢ëa¡Õ‚w÷És݆+WÜGôID‚;aî»|Óz×ÍX"n1ßv ñååeñîÚlg:uê·ÀÃS®A`ÇÞ[ð/G%q•U÷¥°•ax±FÁççç¹Í/µ··ãR\h¼ê†f0Îõð Ue­œÈv2΄@ÂcP_âˆÅÒùl¾ ßż ”“ªíu›Z•7=eˆlËt•Ç>+熺J—/Âp}Sï~®pO…tsAI¥ « —@¬˜#ØsBãÌ.qIO"53¬f ™F9±+qræŒgï< åTÚpÖ(©í\« n—Èê…'4÷C£8¢]k1ŒûóÜã—\¸%”å.Û\ä&}Ü©ÍγH·ÚÿBí©Àn˜é3Åèè(>_ägò¢ð¯'g »Í“@ò¿žƽ+ù_±Êî„ëXçׇõ~½ýä…HïTxÞ¯u_ä¤wb-€"¸­­Míô"?˜;ÑÐ:¹Š9‹‹7”ì`¬úWãF72ær]¯½I¬q6Ô4tìTXÈÄñNð%ð[X™œ-wB”ëN‚ þK/"ìHHVucllŒKHIBTN2áê:¿úرc):V×HånžúôùwtåKˆz¸4æà$˜åÇcz4Õ5!*ñ(Ü™Öa\ÇCÔš]»vÕßò"ÙoŽ¡h‘’f9©ª¿·þê¡C‡êÿ^‘øÂ7ÌjmÊ›·àVú% š~-*ðW N…ë?È‘B!„hw¢à s Ÿ¢Z~…û¯| !„Bˆæq'Ö‚Áõaqy»fõ+„B!DXWç÷µ4ËË˃ƒƒ¯xÅ+þMÀÝwß}Ûm·?~<‡ñœ™™Á/ÿel«øÈȈ·*ë©S§p¢pOB,89ÀƒÊ_”ŸÍ%ò7ŸJ¿^%áp¥NÞ“rߺBeÛcÅ9óÜPÉOÝp_š´U‰[®\â’Ÿp)%éuOT«„‘ò)«j•ÿq-n÷º„K)skJYe©Ê‡:qMT'_\\Ä¿ \ë`rr2Wñäbøå¿ã5 œáS» ;É}Ü(%»—Rb!ähBoo/'Mîß¿``€ºáqðàÁÙÙÙp¹7wôÂLÐ.\¢äÝÏ‘”ḟþ`@¿#‚å.Z%Ah¼3¬ŠuÎ\ I[•¸Õwß\hi¤¶[§4´Ú;oÛT"™ôº'<2Ô Qç'wÔSV å62ÚÁ gÆ4­ì¾Äê)M‰íæVWýRÊ*ƒH«^> TXm5ëäPefdd„ûvy¦·¯¯/Ï1Ï°?k,bfffìÌñãÇyÒ¶Ûd$OBJCCCé7gm,ðé‘j$Š1::Êý¡]p2Ü€uÂy<‚QTágx©»»a¢ØÅ%åü7òíccc,ë+\V²ZáT4ʶObéééÉÃ×G4ê¼NÿêÝÆ7¢ÒB?¹ÕCÂýa½åf[r$@UR&¤äÍAB¹Íz×hooÏÜGáõB _gëqÕ¯Qôj4 ®»#}µÕ|ÈÈÎÑ£GQ†'KÀ”ä>”–Ó:::ZZZZ[[akZ®Ãã¨zq~yÕÌÇÂÊB<:êëÖÓø·­­Íž²0q€Wà$.áˆÑ¢ pÌehöˆÙ ñ·«qV,·œô<àú8yèÐ!FLxz!Wt ÑfP ß¾E²¹SyG3^Á¦ $š€ÄÁ®BžP†°ƒ¤¡ ‚I„Gø T‹²—¸±üUxb €·š$ÇØÄ•}ˆRÜ¥ª¯JÉ1- ý×iú£#»Ôûhg¹¬TÄÕˆFäÎÄÍ:Ɖ0•ð(^Sx”Ša}C~‰œo–~ìCÂÜ—A ¼¡#^˜‘0ÇEÞ– ÉcT¦I#áædýLȃés\XÉ3ç—f"á»W«xIó)ãÊíS§N! 9dkRdFó,ãÇW>k4R¯¨ê)Ër³s6W Õw¹•cuS‘_Ô™……H¯d71;aÂíÆ1«=Ž  ‹,ÄVgŽ’âÜÀ;ñ/Q}­³ÿâ—-‚\^—p'{HØãƲ™¼tJ0ÂnßìÝBÐGi¡á6ë"ääòÉŽìŠL&›ÝÑ øånDîH¦.<8$RîX2»do‰‹6DWpº\ù”ûoME°CÙÅÄxšÎ ðsxÃà „”ƒd –ÈT¸ùš÷óíVX[ÄL7h‹'‡ãõ»ñI9Ø ïµòÑàG±q\î^H&=·^áçÃy×g€,9…¨ÁNÙ ÄM~Tc÷6Šˆg¨f® ÍŒ7؉¹ØêøðGot"‡ob<ð%8¶p+·®±d²‚p?‚5©ZüÃ%†—mÝ8»5—;úÅóí“ãÓ $îwwõ*¬TqÙ'½¸Ü‚ÈÕ±ä¯ µ±š½ÂQ…ÊïÄÍÝ„—Ì\á‡ïq¥jå†Ýf¥G¸< G›•f84¯H‰<ãŽdææ¸Ê.\myÕe¢¦DîD5«Ò0t¸='„êÎ\aõk³œrk,ë‘n =j^FñÁlãÅÖ2Csq‹HfÓ~¾(2ÉæB˜·c'yصpͯ!¸Å·'„„h›Ìé¹ÿ†Ëšš*‰g?Å)K(:~´cÜ«H8RA}`©éÇr(À$IÙ2½6û‚¸^\ØÈö©Ð@ü nü­Ú`ÍÄpŽéV!VfóAvA𘂵B?Ò€H-½øõrb\mQ¸q|¿UœL…¹LeçNÐØ5AÑh&w¢ †xº©œüFø¦®Û Qãßpé÷¡)vî±çNاñ†’ó_+m’-žÂÊTº1v3ÿ9í†OÿÞN‚ž›¢º—³+{ïÔ Ì°”|B|WÛã W8,iÝÚ0;‘^\|Ê&)¹¹ ùk²Zaý‚˜gûL‚gŸPí½J9;Ya¹Ð+og÷6ÖŒÞ[®¾MùסüX&®„Ìýâq•]dµååîÈ™'r'äN”0"{0̺ Ï(²öþ­‘›9yêFìAä.ë¸Hˆ­e†°ßâôÉ­)f©³´²“–";™!>K\á±Ä•)݉ôârã`Å©Ý™ü5™¬~ÉÐYÁð™vˤVS—ëNxÇaw«5ø÷6V.–#pCdÇBBhf$¸¾}\÷”Õæ röœíÈÆß¼-ÕS-6h Dæq~9Nnbb¢§§‡W½QÝiFÝ---y·Ù¿§NÂoÜ”M###Th¶ê%Ozfhî ™GÌs¦J–ééiëG8/ynn®¿¿¿Üá†ÉBˆ‹6ËŽQfùÒ××ÇÙ˜QõÀ×ïììÄÇÆÆ:::¬3yP&JFëîîDä¡ øÜöŠ@8Ó )r‡@D††9YÅDɸã¶ë3ͦqæb48ö—k»ÌÏÏ»#CL·m­UÜÀ›¬T[[t²½½vÉØBbÐXÎñÁlmbš EJŽlfJÝGGG›uÔ8ðFEN²ÂUÎ/â„Näo(sò‡†Ú#C!w0G$ ïöÊêlcÄË Y¿®Ê1†üî‘zixù4¬ùibqá6oâ™›Ù3”{È/œrŠÄ0a¨½•QV(•ŒO#W8°ÕŸE.~½¯œrÊDJqáNïC@aÒÌýÅ=ˆ¿Õ/\#•rÅ iqüøqÆ„U|Õ¥Íöµädâ$§w¢<Ἤ83#\Y×2”›–p´)œ¸XÖgõr4#+¸&@S±³»´í—`ArÀOJW!¥m<ã…ù™ÃWØòì‘aæ1«ö]»v•CZÏÌ?f·ñ$í† Æ«gg$Ì r£Í‚•·Mÿ°ë¦úIÛ(nrªWzº%;Í,ˆŽu gp–6´ &Ïë¢@ª>:›­wiyy¹°2§Ð@÷íÛ¾¥ykk+ôKɤqq-ˆ'¬Oo–Æ™î¨clÚ &XŠøE/9™I[ p©($ÔÒüá RŠ¿‘î}ò‡Þù{öA@”¸V8dÂ%1¸€DYzž9—Ñ×5*o/à´4Z¢pá–â@þ¢§g_¤ñYuâ h)„Aiq¾¦Ÿ/›ýPXY!ÆM SQ‰g…Èð·Æqšd²¡FåÌ[H††ŠëÛ»ÎÇæʧÙGˆ?oŔ܉<ÂE{¼&ÚŽ,wX¸9–4±’«%WS™i-n\Wa¢c«‰­b„Ž9B—½dsš3”ûÈ“ì–a}o )K0eè`Sº›]m!‹’Ѧï´#KŠ*‚”zêQ%K¯%Æ-ƒ Uï*•üeÍöœÒÊ×ç-wY ÄÄ‹ªýK÷+¸„ÛA‘§à@¥9–=e+ÂÂ#ª«(Mû(ÍAf:[–¦-;©Zr×%ÍMxS.ëï‚ŠÃGIÙB‰<Èj;²!°ä‡f{9LX«±>Šgß@7èöƒ=çÓl‰bƒñTˆÊ h›v‚WD.€Ž¬Ái·„¯Q|VÈÂYéµ…FRöû=½¸ØUy©^¡Ëœ !pM§’ȹÂÉŒŒ3¾¿lËPiB³8³åÐz‰tHèìu­ÀFRwÑÈ„ZÀ}5k*¶#ÈhØQ•²¶g[vÝjVn À I(Žm— ß¸N‚×ÃÀ©Üò‚a¢,c4W§Å+¨²8Ƴ®c'ÞÓ~>Åú€ñGÈ<™¡ž‰@/‹FJ(¤Ž¹‘ö\ÊhÓd±VØßtÏjÝ<Æ•¼½Ý6ì|²_ç-$‡¢)dè¹U”Cò7¢â®'ËðKº²%Ëâr´ðFwyP6êxu’IøcáÎoãÀÖBº\aÙ¤Á:>M­ÆaŠÐ(Öñ®Sgÿ–\2¼ïJæ†ÀÜarß oÍ«’†n†x9Ò©¬Íï‚«t3*ßÞÇÕ‡¸¦÷ô °êèè°¢µÀòòr‚ž‡óiš>´83×=ÃδÌiØC ““ßÂÙ‡îtÀ3ªŸœW8pªƒÕ³å¤éÅ…‚ÅÝävpÉz ß_Ó­_XÆfn_³ñN®[UÝÌåînÁZ#ÒЧ5566†û’Í„ÆqLK\çFÜÜÂdÉóª[1§7z7]š;‘ÎD…Ú` 䮯‡…{Að.cR²êåm™È¬\mà ªR¯Þ²0yÉŠ!ÌÊJ ! ym|Ä<6èfžEÎñ Vv2d°b™.D v!áo–&Úø×uxP‡Ñ¬T8ÂñçF®šð ¢‡äp® *$H’óÌ`Ó¥´¹‚Ù[ à~*§UˆI†µÆQF#<Žˆ·—[1à(Cñ±8•ÍÝ&…3q8ÎpSŠË$Î Ô7-fkƹUÜCo¤?à ž¨ &‰]8î¨àžDöáô~šq}LãɺªÂésˆuú{0ž\_BÛ!ÀÈËäÍæšé(ÙðqCæqÛŒ\}Ä$Ͷ4¶fwò,›K[œLÖsä ¤ iñ:¥ËB@ÆÄ«Ù ƒä ¨”%9GT2ž®»Eîa±ã5ÙÚü®p[ƒÌñÉ3q…Î@‘貄 M izqáNÎbûît›/ a¼—O±~A„ÍB.@´Ëí;BrhÕDÖné3—©_¤Τ±Öˆìö¡câ>¡žeÓ$ëPÆÇÞÎWTk;TV[\–!///ó£35ë¾ZÙ©j &F®ÎfK|àj%k …H“‘ñ.1’qË¥s½¿¸««¾ˆVœèrm[’ÕÌå°V„— âƒæ$Ø»ß J\JX¡ˆ;蹋±°äbŸ˜ÅÄ[Š$9[ú°°²ƒŠEÞMˆ÷j/iŒ?}Zïí8I®îZpV¦pl#”ÂÊ"W¶WžŒ¹»Hò*Ox£÷å.ŠÂ5jþöÞæ·Žä:ÿ¿ÔÈ3ã·/‡pvYpè첡¯ƒ,‘E– [³ËŠ¢wP ²™EàHÿCfeFŒqSt$N Kò ¿ÀãÁÌXšýž_“£ªîºÍË{ɾ—çY\ôí®·®>UuNÕyáC{/O‰c¨¦¿Ô á)»ÿv 1—ÿ&”c¼‚y†-Ó9†÷{ÎY¶'§ò_?KÐuM³o¿™Î甉ˆqc6•Y½”œ£ÜžIG>9xBâ ¦c|bR˜HÏÕ]ÞB‰¹¨ eêkZíÉ"2p9hZ Ø‹ .O~> „ä§{ͼµfáSn¶¢úÒ¼Îö1©Êýì—-¿ ”×î)ÀÌ‹—ƒ‰ºv l¤Ihî÷ûL1Ñ9ÀqppðèÑ£d«5èD™ b}† ZLÐ;hy`"~i}}ÝøøtW…':º¢H~0+ I¸©‰Î .¾VÙ¹M pµ˜››óºšbŒ4á_„7 ®8‘;)¸’çŒ"04Âv¢‹ÐBr||Œe¯:ÐDå1z&¸8B–tØN,,,`m%}-¥ñHo¼ñÆЊ§+T?.Ž8@àÊ€ÛÜÓÓÓÙÙYÂGŸ®3Úx/ìEkÍݬŸkèá46]ˆ@ @ ĉ@ @ âÄEðàÁƒýý}ιÞ|ó͵µµ–ñ>pLþÆoœËX™“²Ús®6G`÷ïßÏÖ,..pgö—ã[``]¸Ö¶3ħ¡××ÛÛÛóóó¾|bfãÝ<Õ”œò H;Æ «Ú@ ðºã³¿¸„Ç¡8üîÀŒß­wfÄ<0‹4׫âÄå>ò~Í õ&.·y…¦,ex§ÝãF¹®Ü}~áÓàQÁ0‡ ‰»nKÆ—òýÆçðžéugš\2'd´)[¢WôÉ]VU&00ú„ÅLhr–ŸÏ6LÉôÎTûúy9‡u]m]µ§°zïT@äæ[@?"']$ü§çó© Kfº‚þx0¡+þÆžÍõ9¬À ªö)öFbܪ`SlxÚc®N¨×i“GžüHé ÄlSò€ÿ›Ïöè jy­vSÞGÌØ~ìØ8õ¯Y‰Žß$FQžrš>Ÿþ¢×§ßDaø…32„Ñó׬5Ê$M²¤…V è"xýê ê‹k|ù¿1ÉN=ÌG6;5’os±:QÈ Â`¾ã¢_QKË(Cž2k ›GMË´Ù3Që/3þ–)–s Ò ò.<|ø0¯ÎÞÛ'ØÁ¦‘Þr$®§§§ yb»Èç«-“1¢25d4š#9cÃö_›ÍÐœD)Í’Âz´A'N'Xiö÷÷“ûš5 æwce|ì€m‰ßBÓÆv¾ ]—pfÜ÷»e^úo?­ûqH±jÌ–ƒXm†±ž&{Ò£%Û¤W®dÃ~¯Â¨êB âÓ¨jvG|wé¦ û° <¬^¹Þyç|ÝÖZvbf'A‹SéB<ÁÚ#c:³M]µðs~ Ÿ¨,½^6zQ¢ão„úšnäfšeÓ §žžœœ°Kj„aÔrÞ ¤~»§éoþ¢eâ¢^œFø¿y^-"333ùêÃ1E¹…Øìj6öFSµn$® ɧÉçƒJY…ý)H¨°Fä DUvˆf„D˜Hq¥@Øb_¼‘9i‚å²Udww— $þJ„Ð_•p÷î]öƒYõXØ vËTˆ=ÒµY;/Ø€÷¼8~H˜ XGmJ²í«Þ˛Ǭsv­ÕÕ+w Cו¯‘^ jÿièsõpP%èf¢ ÕO"ƒ¢Sž3x¶Mbg’¯L „8ײ;ø÷Pú–uY®\äæ£$‡Úâ~90[>g&Æx!IÚ‰œý£‰©G2‘B~M'¢srÔ)jQ ¢®!¨ÅûŽë¹ÕöÈ&yÛ^ažg ‰ûü­mÆââ"£;g(™ÖTˆbº/ñƒôjÆí ¼uím9W¦;ÿ•mµ½àçó“ý¸ Õ‡Së_E€„ö¼CËd°ø±°° æaàôÞ´ŽƒåÚ+t›Ñ6AÓ=^ãGY(!ñ_d{„\=>>V¶QuÇ¢/ùxÌÖ ¦‰¦@EMfÊ=çy R˜úaDk>¬öÈ[Dñú¬C,~ö³?ù‡®+AÞí-? =™˜²<'¶ì½:ëvúÓ›óY'È s3ËÁ\‡Wàítça#¥4›~ߤ4ƒ9º…¸ŠÞõGm]9AÚw!è»wßdÁ¹,îon'ÊØá‹«%æ0ÍÛZèCÓ3ÿfÊ.>¦§&¾,QD ÖØ}ïåF-~>IL±ýLå [±:ÅW½³Ó<œp蚶™#µÄ¥• …'žåj½â˜¿&ïf-¦jýàC¦âx§vˆFb #H<#%Ÿ²éóA±J3扔¢œd]ft@BÉè`0¯^ƒæ–æIßÂÂôaCäÞ{Ù»ÖaÌ‹3‡„>ËüP¦Ýrãˆ-)DÙžÿ½²÷£îª»|2‹û†GW*Â&8a i†~ AO›B·jXê¾÷7Bó0ÒðãÜZ¿H$ËåÛàñjÖK¾ÀáêÊåºÜ!O›OC‡$joÖN.¬Ð>îl¯Áói—ëm’ƒo/]ؾ³6¼E’RýØÃØgmª+'Ð÷³'OÕ¬%öȨÂó:¶üر[2.¼C§üïpÑš!?{â4¶¦ $Nxï;õ\âD¢;dSŸ¥ô'¢ÞMÂ'åkW™DÛDïâ×ß?@ÌHïÌÞÉØÐdCªi$º#? ؤìW柩»W§¶j~Þ½)Z2:ØóÄ,&H7MÎ~´z—¾……éÝîÅò²8a  zŽPè>f^4xí \g•Ð……vJ®°غ”ƒv¦t‘àCƒÝ#ûkiЀ2ŸÒžæÖMu5©¦ôêŒX¬²} ­NÇ=0Åh"ÎËnMµCó~(ch—Ç÷màä£û¼#1Ь®®1© HB!6M¼Ñä$Ô~rn…àçD~E \„8¨Áöö6†ÂW(Òôû}Îgãs@àjefqö[[[ÆK–kÞävrT¢²ÖÁ·ß~û‚¦Õ@ˆ«! LÓ÷ò±³³ƒ¢g|‹@ \9ÄÙ?zôÛEœ h‰ß"…Ë ­Å±­q"@`â!Î~oo'Ho¾ùæÚÚÚX5yp ¥ZÂÝv ĉ@ @ âD @ tYœð‰<:ëIÆGMJøp NS¯ŠvyëÖ­ÜÛOîóûµg©<ª­·ì{¡PæÀU…ªI? ,$‰~@ è:£MÑÖ¼fä ‹Òr®z 'œ„€Ó-‡Q3÷Ï9,—y‘Ó¯E×öÐqÏœ‡OjŠ‘—„,HPví_(sˆ!z—öÃÀBôeÃqu 0¹ðQqòh?å)z„AF[Z6§é¥ôÔ‚Ã~`#%%QA¯êí@`ß)qb~‘`gš 5#ã‰h ø‘g÷L6¡ÁX|ÜÓ&q¢°(&Qc“òÙ ©e 81DPœÐK%qÄ/Ø Á»EDVº üJ7 ažj¸Sà\M$‘ì†X#”Ý"s]°´òìZW›…éÍ7ß”4¥døòËò™Y8j.‡y_À5'Й±¿I Ê24e£®ã§rŽ8쯀Úõm8`<ÊåyYN,ø¼®IÙv8©@ë…¸O2ê¦Õ.Ty®ÚÕÑ÷ùHú¡Màä·+Ä  º ¸[;„ÙPH/F›Ý÷ ²È—”]SbÞûÅÙŽUòît—ISÉ”>´,âD ¸*ܘte­ƒƒïø™M¯£££^NrffÆ4òïß¿¯¿8_ëëëš²%0xû§OŸ®­­Ù•••‚Z›¶åÆ [[[Z?T¬Ýa«ž8Ð#±jXXXè÷ûËËËsssêÿtooO7õH |å\êCúyäýP†¾…ß>} ¸¦¦àÎ’ø¸~^…ÃVŒ©¬ pM/;;;…a^Hfl¢xôè³÷ƒ µ%ö&|š¸¶+4Ùªù…ƒ¸Ÿšå”+™-õšIHPI Zw”2/YÍ&à€)ñ–;¡<%ꛌ@`jm'P¨MPØ)gãçwÞ©ÝžáðÓg ÄÁs àw†`ë“›ŽMØôR–¼ÍMm+5p®bDO'òJÙÊJ4‹HL±vïÑÂ$—JCÐÊkW‚d«o$ýP.Ä‹Ð :ÍÛš: 'õ;ôÜ· x]pVŒm•.l¤û÷B2¶üyÄ…îxK3 ±ÒüéhrÖ­›8~Ð/<}ídè{€Œv1pùàˆØŸQÛ¹„J(ŸKø7¥jU¹ab —ÁÃwJœ8¯yqí)¶ŸOI€ª®×&ò<®gÜk™ø²8Ñ$¤µ0™Ð¼Ú’gýR2jì‹çffÖ €µ[n<öøñãd×£))ýÑí å&á~šÙOrÊN¬ »»»^*Pš& eT. ¤wd÷j¸Í)Õ¾ººª‰QBBm:Á¿)½j}¥fH2Qƒc^ —†É6ņCezõLªD[$< Dd‹f[ÌÝÀÞÞ^¯ÚÒâAFo»Æõ'$xô††U$öºv®×¢û±É&®œ¿“[¶ÉÅÒX±ÆÚ@ ãÐÌ©ñ«Ž½2Ì·~™Qó?'ˆ~çwÄÍ#QØ|î!FßfòdÚo“¬ ظ÷Ïî>G²Æ£ûZ$™ÔîòhžÄ¢ÚN8+¨]¡¬÷¼§d z!gècXÕÎM˃î@ ¸8&þtB“¯æeÛÈa%³­aZ'îÝ»§)^<º¦x"Tø”%+[ê´"šü kóx^¨UªTMò»wZ$t§ŠN­í÷û~•=´²²¼™f—V8l%æòÌ=/ž‹¬Üç†ë‡¦•2Žï»†¡Eîq )Ìü«7\\çïŽ)°q½ìGÐ3IJÝäÐ5ù(öw~~æÞ'ÈOŒ ÉØþ°yûâã›öø­úˆlvàÊÖZ¥‰.™¯jK@lÀTÃn.,,pÖÁ¸ð+”ßLIV+A F’‘NðoJÛMÜB;K3¿Ö‘G4@ 0mâD­K;ÍžRÓ´˜ïÕÕÕ ´r±¢£4M¦˜L¨Mßš 9©(ó¾*DY´œh5ÒJà r¨Ø|óIy™ÓõH•ê—-]¨IZBÔÚ¦ñ!8Pœð»}Õ›ªCXÀHV¨(×îî.¹ÐVïÕ¾8럺:á¥FÒ…Bzgú¶jj©Bk’$*Û¨±A'eÞKãBŸÏwñ1¢ôÅõ}•]ßZ7õ›”=ÄâÌî[bffÆHBU›¾œÚ Ñ#³‰€õÅ:AzÚFÅç2&_4÷PõQ÷ꦋҫ:ÛÈP ½ÙOÞ½lØ«+ò^Æ¿‘:ØÏù¦Ïf?¥àê”Ä$ÙXi~Ðõ— É(ÇñuÚôª¦ ¥TzûvªQ¥©({;}q­2’ˆòEiоɅ-œÚ£nT,žª»ï±^®PG©FtA“§¼©êµGºF´K’©ý*¡ÖIw Œݱ «=ù˜îÄ·©¦QuõáÇp¹g’$îmüõ5µÙç‚á0^<17ÏkÇLjZÞˆ,µ0_±¶4úp°y]¾©>n›^œãøÑöC›BàŒË!ö®99ì¿T›0ayƦšØÊ£²bÃP_‡‹B ­‘Ì9¾<‡rá=AÛ`Oš=Ð gÓËB~J±7åÝU²gòš…î­­hQöbëì#CÓc~v‚·¸Ñ6ÉäÎOk“ñM!ï>Næ. ô†C§¤åxbeš"’©÷¤ä“õê¼'%÷íÝ!ø~¿TÕúñóŽ¼ H èEiµNu½{«@ +zÑ!ø†+aëY>£ÿÛKüʼn>ôí©¸Lcá¹-#Þ`Lüã¬Ìd9ýõ¼x"®ÀÐW¹òzÑ»0G–¾ü¡Å “j+Œ,VÈùõäÎ%NäyIƒ\£Ü$NÐÆÔ’Å÷ªîÓWÞê>ILè$ïÈƹÞ=yMõ‰îë©z ى𛒽¨ü´²£¾%ô¿Qx’Kó‰Å·VD^ûEÔÆWíHô’€/M iQN­ØдàßÔ—–¼’5µ0Fˆ—Nä–X]]ßSÖ¹"Üúú:»†Ñÿ¥G¡Q†îŸzìàààääDLÆÓ§Oçææ4ä÷ööÅjè΂Ò`G;??tt¤”˜–ÒÛêöÅÅEñ@º£/îu*ðG‰~ÑÒÒZ¦Æ³³³“ÔkZ@µåŸKÙéE*‘’1¢]YYá4L™)ZæeõESvJ 0T~Ro¢¹¤bÕ™–æ-TŸRiØ®¦—èUú]m½±b‚ž@ 0¸]wïÞ´±±qiÌ=jÄ!K „8u³?Aõ\œ:®fˆÒ«\["r¨?ÍÜ[|t?tmV¶âõ•¾–Ý߬ìxÅ‘@²»» C òz -Ë?/¶*`¼!úD7‰*-$/‰Z:°\-A„fTù󧦈)QâŒHyÕW’(°:®±ÙèfffBœL{™5^Ü~÷š@lzrj´··'F_òƒw l «qÌú¦JCô«ÓÓS/–4BÁ;>.q„~¿ï½)äõZ–ß$Ùšƒ)t¨T)f²½3§Ÿ$~üø±¤—6r‚Ïew¼(¢WÐ+›ò}¯ÒéW¥C¸ec@IÊRŸ`²ÜOYÀõ‘¼ü²D ã×Ý‘1Bœ¦øY{jq¸Ä‹m…aE?§wæRLÅ1/..걤öxÁó»Õ;ó%eµäõZ–߸ùǧwñLcjÓ-½HZ@©É^0?TÁÑsm½¼¯]$‘ä WÔlû:@à2‰Üö©6} pibƒÝvíI± BEˆÀ”ceeessS¬01`gWWWq¼‹}°%–€ºÎáááúúºÒ‹Ý‡&À¢®m{^×æ(VÉ`…{g6y½ˆÛ>>>ÎË?–——=ß;S"Ò}‚y‘@Í0G±í£8[.ë¼H[Ä´Ir™ó¢ä>®K{gáìÇzU½dgqÀåÈ^øä“OtÁoîø!º+p%r…!¸¾qã¿^¨¸r‰"L±é‡XUB.ø`çâh˱Ø,W¹p8c:µ©÷¼åŸ c17t¤'Bµ³PaÏìÎ;xàåbÜ­eï9¦Ê@¢ã„8ññÇík_ûÅ/~ýè2¾ð…/ˆVmjE¢€˜¯ð€bâm'$ h=# ®þJH@]» -€CFB_Áý¯VÀUúͺV z$N½Éóc \g`<ƒ5ÎyóÝ?*˜5<‡É’%r÷_ã€$ÆÅ· ôª 'ÄŸ}ôÑG¿û»¿ûû¿ÿûÑ3.ãW¿úÕóçÏEº¯¼ò B…øj&¦AœØÛÛÓâd§[[[{nß¾­ßÇÛŽ—dƒÝÝÝÅÅEÎ ÌL“M5-ŠZµ¶é—PµöHFKGõµÍëUÊÐ{VVVXhwvvU¸ÖTýY#qð’oõQŽþ§LíTZK26[Ú˜Àű¹¹©I‰}ÍH4Aå³Pr ‰+¹s™1ž³´6Yqþ,è2D¨þ •' {U­º1Ñ}ŠkI~¡ð;©‹;wî1·Wcè/›a‰7Cn+ɲÇý!@l/­²æ+S‰Z‚k|-ÆúkN`úý>gñ'8±r”Kw°1UJ<Û(1mÓïE¼m£˜t‡5IA¢8Të¸ 4›±c"šAyuuuUëâÜÜœîë¯&Fý]XXÐÔçk'™@.?“Û#å%—¦Sj±êp·¥Z(\ LI•4ºÃS¢¿[«lY±”ºCJý Êï¾,Q+Q|T!ú'Ðq<{öL„*Š5=½Nø xÑ ÀR·¿8Cׯ¿ùV®ñ ||ÌþÙÝ»wóBž|håèEx„{Jþ65#¸ˆ8‘ä5útaD;¾©C£ãí·ßÖJ îÖ­[ãnÃІy>è+¦ò[ãù—ž×/Çå,µÓ©Ýd6c&4{0«¾å/µM˜œèñ mäÑ»x¤‰T…P …+N8(œÉ_w¬Iz¤¼zÄ:b­²e%O‰eýÍ©1Ð <ˆ'ûðÃß{ï=É¿úÕ¯~ö³Ÿ=~üø§?ýiôO ãøïÿþoѪ(Vt+ê ‹’EÏWÕª)'l…cu©-³Xqˆ*ßá˜ß'F1À$ ¿m()ÇWâD S𼔎ج±Š.”§è‰}ÔXSKÄöq1¦6À§jx泄*ոƴ`*¿5}Ëìªß6Òcq¤/þZz?×ås©>ÄL‰lÕÎð¾®díà˜Ú§ôÑ· Ç ¼Ú­«@×ĉ÷ßÿ7¿ùͯýëŸÿüç?ùÉO~ðƒà%6è2þýßÿ]´*ŠÝŠzEâä+'¦<ŒV8Më«««½*äV¢ÁÙ·Ö ³äSüé|¢deQUš››K²Ÿžžæå×a@mll ý"Â6Ñ}aaAƒ±ßï‹“{ðàضñyA$i6•ÑT±a¢Gªå@áþýûìRãe?~\;<Õkœ:Lå‡6“-´L5Ú¹VVVüßZ+m¼ùy'}eT˜˜T×××·¶¶øúM¾4^œ)èAŠ~~N¦@¢HS6¥«ÆÃÃÃaú)Ü›g´iX{î?á3òeＡ²«…Æ”xv¬5Ý3èô«•¶Þb̉k”´:ܪà}$àÙÙÊѵq¥z¤ågLâ[ÚM”T½²WµŸè½vvvôoÖÖòBð {F„S¶}=ŸÖï÷mÚGÓõ:ÞÄgD ›)ö¢+#‡õØ›ÙÙt_à3e%0$R¯íf±à‰@µ¼‰ÜáÝqÿªb'$Ôåw¼¸®m:²‡‡‡É}¼6ÕwÀñ$/h+1ëÐ[gPb½Úp¦ÀUAcíáÇZT$œoVèUǺsjšñÓºy?Ý`âõ{ð\_šOˆZT#-1(›éZ)ó½U ¾E~J#ŠUâQQ=O„,a^¢Àÿ5ÄÖËwÔ«Îx}MÝ[`c$KÜ«€n§8+• ~‘>¯+¶X1i™èU.ИÕV!*G½Ê+¦8(îóH£¸vOaºñüùs/Kxbq¢gžŽ<÷ éóQ Q¡ˆÉxt• å½1¼vˆ²µÈaÖ eC|æ 6‘OpÆj‚~›v›ôHLÄdôÚô+++´êi]Øûr¢çw1õ.æŠ*°ÀD€=c†’Æf| Þ™·4S-<#ܺözD^Ó)T8ÿ ºÔÏØt8g¼— µ&ÛOš<Ñkâø Téò}Ä!Œ[jºÛ÷½©D_+ÐM‰Âë;™D=ÃØѤÝrDhè!B$%pÔ0ÐÑÒˆkˆ‰RF›Ì9aˆªU¶½K?¾n_'‘%’Í”ë.N0­‹€–+ÌÍÍÁO—™‘h«ßï+‹òŠÍF‚ (ò¢upPA«ˆf|œúy žfè닦ÚõHÍSJkçMnÔ±Tæ*h˜ù½=µ\mÐ}ŠBÜ(N@ë(+h pµðÞ6ua¬©ñ~„ú{¦=|îw——––ìÜr|†×D ÕÌÏU8øK¨}ccCó§„UˆMZ, têì8Zó­×‚ãŽZ‹ØƒôKã‡'h å Fô6AÅ'gq"Ùj3Wägü¤•ýØW#Äe æÚƒLæ⸼i“ÿåì_t ÞK¬IWÞª™bãDôݬ­­µä<Þ}÷]Ls«Ñ· ±¿¢WÔ“Äës¦–¢§˜){9À62€Æ’š}zzª ¤äå|€©LäuNB|>|Xk””ƒq¡5X×ê´Z@à’G±hUÒµèu[#]&1|µCohh,‹ ÔØרIƈ@äb#„ Ò8¾µfõÿ‚¿s9–l͘63<û8šE eɇGèÁªÍhiïïï¯W û "›ójc«üÝÝ]Z¢×Wö · 'zNåéÅu˜î•,4ukhè7™®QCòw4ÐÚ‡VdÔØl“A,÷­THй†Ñ{½ áÉøj1smÏUX»WÙ±üDç¦ìWõ^6:bã7š#¯Ë\‚ä#®É)0*¨ÿÑ4»’~† b«¨–ÚÀ¾ÎÒÓxû;ÁÌÌÌ œ íäÆžWxöìÙoûÛ>øàÃ?üÍo~óÚk¯}ùË_¾V½A„ßü¾Øt; mköÎM±×ÖÖ˜Ø-J̹ ¼ ‰GAbõ„I·Ä†Ää[mf~‚½\«Oö­o}볟ýìç?ÿù×_ýÓŸþ´ˆöÕW_ýT…®¤U7cf¹dhÜj ôïîî2l¢[Ó< ø;Z zƒ#¬Ë#x»KÀÕ®åMŸ¸‰0é"iüE&ˆmâðÂîˆúÕv…‰âî---yF‘$£šæeÂñ碾—dô(9^Gä•· EšdD´@’QS¯Û†¬§ÕW û 7bB¹ä•OC…1 èCÀè™ÀÔsœ8X‹®âž‰":ú½vVÎäÞÁ¦§M~b.‘«*¡¯ñðáC<8é×IüðJYø€öw® ¼šSª/q:qÙ¸U!ú!pÝĉè„ÀTâÎ;µö'`„81p°éÝ1 5ÙI–D‘»î”Ì@|:³£xðàâÍÎζp^&¹ža^:H«q:ÀÀ»`ôä3gÑ ½ÊžÁL¨Í~“—Ë^u Aùä¾$sˆÚ•y¸Á=´yžÕ…_çýÙNÑmˆ@à%à‘i ³ð@ L+Þxã–zD¸tÓÂaŽþu!¾sê¦\*¼öÔúÞ½{˜hSŽMô*GRª ¿ü8èÇ[|¬'êßÕÉêÇs±_j â t{{{š£ŽŽö÷÷™Ê‡–Ifff ñJqrñooo« 2à¡õLVWWÇ*±§Š¼Óç$A’9º€µµµZSfÝÜÚÚ2?°æ›¾¸¹G~À‰³þ–Ï ”¦VPöããcý”@צ.% G­–w+\Oe§.âE÷éˆhZ¦7*ÇEÀ“'OÚ×%‚¾}ûvr ™ûÎ; Á÷¥joY)NÙ^݃ÈØFA$‡+GƒH£²Ç‚l­Æ/Uù8•¿zV£sM ç‚æ½,Ét¡Jñµpñ7 £ÂÇüìÙ³÷ß_¼ò/ùËÿøÇßÿþ÷ONN¾ýíoç;߉þ tßøÆ7D«¢XÑ­¨W4,J=‹ªEÛWÕªÎN¯TËÿþþ~Ë£ŒååeÎÚ´¨+ûêêjûmÅííídçrgggssSœ „?hÚt4ìî)50é0ý×­­- ¹¹9{¤ëû÷ï÷û}|ù-,,Ô:îÐø%Ê»=U9vHí£1„›¼ zèæj¨@À?Rû‰!@˜ä1MhÔÛ^Õ%3€žjÆͳ@ ã˜qˆÞLÅv§I'ÙÔlÉš‹×'ŽÉ[o½EÔ•ûʹöööæš_¤@•ÃA›~Å(HÀ(ó:jª¬f«ñµÌ™Ú“WtAâû%T£ÛŠ×pÆ£„üú‰ž•’†\£É‡ù¬b-‹‰èJ©Š4~‡ã¹qjε.üÖ@òHlý8º«Ðz@sHîº$\97˜P4ª»Zªî–8AÔôµ - ¿ÅèêáYlŠ:×x•¦¿ÆÇhí—¨¸0c3Õ/ÿ+++]µ©j*mÆñ™¶oí7Kt§_a¸ÝÙ@`´ÐBv~~~³B¯ÚwGTfxö\b ÓÓSb—šSpI,..r̨dÁ†7*ô΂q†=®D¨°^qi!f&‚n¡U; èÝv+î™bh\*F¤ì€._,‹¿©,âc¶*¨ÀõõõããcÌ%‰¥Õ«T#L~È ôöF4@òISKÄfáìL,‘x//Þ`Êv,†§J`> LÞèU6OÁQ®Èð"`‘´„m]ÌÍÍݽ{WCR¢2@Å!FRý£ Þ;8r…HnÑÀÚÓŸŠ²’ä<²&éh=–Ô£8˜ )¢÷²š“X´Ÿýìgá(%Ðqüò—¿üüç?Ÿhè]¹\Ñ-qBò²BÅÞÞžg¾s°7-áDvÄã zÕ#±Ÿžž ¬m€8'D„ Iˆø§ÂB±D÷•Ø¿‘©%‚$^ =cÐÍ'h[äŠD‘­“%ü_ }ÊTÉ×’4ÖÖÖ” ;;;˜œêjðÓ ~#`iiIµ ¨(ä–qt—j4a‰– $Wv£‚&®ï~÷»Ñ3.ãË_þò×¾ö5;LëˆE‡Ä vFÛ·!&³„¡Ë·aÆ*¹):ãÐ@»ÉZ¨6~Å6ûÆß«àe 3‡,è4@îÞ½Ûï÷Åý}Âù‰¶E±m˜rIÔ^]Œ†*juu[ •c›úZ¿%ó«Æ!‚òªÌ““ ¥Äç  ä<(ª#ûÕ«ŠØþ¸aº&N HpñÕ¯~õ‡?üᇞ={öÛßþV¿Uø¸BDÎ\Y¾Ráf…W_}õµ×^Óïë¾øÅ/ÅšÖÓÕ7»;c{{ªZ¤  DhÙMÝ_b¹Ì×Ó“'Or~Åt|’>ÑwÇP»{ªìùÁ(‰k‹òµ %^?³@G`ÆB~Xq¤P>-l³e ˜ÝÅ[‹zdía6cÝ ù{1_±‚„„çÏŸÿö ï¿ÿþ|ðÞ{ïI–ЯîèB¿ÏÏðI…'ã'>uÉ’"ôû¹Ï}Núýô§?ý™Ï|æµ3(¤$«-:t:A°t¯MqxxÈÁBÓ"]kØà·T-B»Ž6{«KKK”`"-ÔNpœ"Á€\&*ìïïKœ˜í½¬N ÏaEYIe)¢.¢Ø„à±±¾ ,Ñ«N?F~J·6Ÿ"Æq¼W ¸Ü8›ÁâÌ$i¼úê«$àQˆË'8š@œàtéÉÁè¶#ÍîŠ8+U‰~ù× ¾“÷Ý”cÇñYi*FbƒPsRù(•U§T»¸o®kÇóĸ¬IüÒè-T‘‰ ¾ñî=>>66H¸S=òEnBsh ˜&ŽÍk:™V Š%’$Q F¢Gq"z/p9"®§IÄ `÷M¨èBŠ®ˆbÍÅ['¼>|¼¹º¯… "j‰­¿¹¹iî_%BH!ĵJP9bè -Q*DY0åDÏ»6%Ç)Iiº£ZT—ÊQ¥øÙTi»»»µö j¶ÊQ–кt—³ÇW(N|êSŸB ª#V`;ñâÅ‹8\qš(‹Ì "Dxýõ×¹HÎ(Bœø?<}ú´Ö8AܶX󂾓ä 1ââÚ1™ošNø‰²bïÝ»'®]¼»¯(?v੸ÿ;wîH P®Ú BwçªÔ•@Ð:åÅ{,r$KPÔüü¼ñgJ #lÓÀå@|˜ÄÄ ]ˆEÃÒþ Å3¶£‰'ã'zgfÍ¡„Qˆ2yd6ÙWßì@` ¨vÓF€dlÌ—££Àe™ñÀl²…gÏž™Õµ9tBœøä Á2.G¢HLzLëÉì³MëÉ䊫õòâD =$*,,,4¹DCØØÞÞ¾ ŽŸdü¶a"U+œ¨cuž†›¤¦Äïs›æuŸñª½ºÃxÕ^—`à% AR¾žøµû‰,!p $H¦z‡V¿vß;;¾²fÇÀ#:~bµÍ÷@ïe‡ª^œÀÓë^VUB¯²wR bܱAOôh¬³Üòò²@0¾““ïÿªÜ¼‰"<ÿ¼T ›\W/ ^‚D¿ßÇʨW¹.ØÝÝÅWç¹/ÑÂ"DZñou¥ Ä–¼÷g½š^°}óº,K$òƒ¿H$@àJ8­ž3§¶kÑd{‰‚4XJI{ûl/H„8¸*q¢ö˜Â ¨7¢bé”%8‚xûí·u¾ÓæææÇus~~^l7f.Ï3èºHøõKðm7 }óº óƒi,ºƒÇ›Dºj\2›åå‡^å©WÙ­š$€àå„&A‚ô1Ùñ{óæMïÇ)¤ˤvOØvá°ý q"LŸ>}º½½M¨G‰Þ,ûí ºó BÄpìŒaò‚Äßþíßþã?þc/Û— î*pU w>|Alnn&ª°t©× ©íö^¥ bmÖ[(Íáá¡®•Q%ˆƒª= VuâëjK£FÓ[™ŸŸó™p’(Âô*=Þ‚«q÷jwDNÛNèCê{$ÎRò.ʳm?ÑÐ^pý>~üØørÑ>ðâââÓ ö™•WD³³³CJÉâæ¡!41ô·}›¡0ÕKÛz•á)ØŽÕt•«"ýÕM¨?™ƒj§ Ñ"Œ¹¦Q½„ئ t’{M¯ +ˆ–úNíy5-ëGGGžÐòý•¯|Eü%k½žj½î&«W µÿÏþìÏÄÿˆ ºH³k·VÛ@]§^õÌxž¿ù›¿ùú׿n*y·±û´YÙÅ,é—ÃaÎÿüå/×ê•è{©µyKh¼¾#GÍpžJì é÷ûèµöªl¥¯=÷U¯Nä*Ò¨1¢˜ä¦8o}•¦,Ožº>ï®É}‰Ü«GíZshqé¾uþ#â›üp õ.--õü¶™Š%º7^7A%˜ºË=Ž¶•~mmÍï÷ ô%mllˆÏQáp¢^q&T§G”IàFô¦¥6eïLÕBô¿½½(SÔ–c/˜¿Å@xà” á¸Ôxõ9;L(dW#ÙV÷z½ö…çææ(DÁƒGªQåç=)ÑÂïÿr3oä¹z£Ð«“½„tSÙiˆ#¶äøŒ³°^åH®é|ÍÊAH…í´«W©H q¤UPvR&&a¯cÍKú¡|Ò#Qv7öᇢéôóŸÿüG?úÑ~ðƒï}ï{ÿñÿ1ÝƒæaTV¼nƒMŵZ—¼Þ ø—ùѪ(Vt+êEßIô,ª­²Ó»"øûä›æ¼‡]ùõ‹35l®Uš×m6Õëry#‡¶=¥Aغ/¶œv¥V·§¶¯2äõÁr ¿š<à Æ‘ý­ W+Bl³¿^éÀ&ãTQ˜÷Œâp½QîՉÉ–…LI)‘½H*aÝ‹˜½—#OyiX¹Ø.JN»zU”ßѶœ!$¡Bås~²°°§@àÊw—¸0e'ïÎ*Á¬&d¿1)ŽÛ¶dZö×ùf§P;óè\§%Mµ´ÉèëÍ=çL%>ª`–½±Å±^v嘋HD1¦W…ß±}ë­­­ ÃÍwÓ0o3¸öFË^L¼8!H`ðs½€:£fé[ŠPD¦LôzJ2/r˜›°ÜœÉyº]oooïB‹Ö;8¶ †&\¹Pñɢî÷%þ`>ÿkáHÄ -" bzôëõ7TÂÜÜüiz÷\‹=ÒE­Ö‡nÎÌÌðH«€Jè÷û¥_ õBi¼¨@™\ë‘X[ôµt­-êåÎÔ­é8™¦ÓXEn¯þS΃ >€±ÅŸoAßIÐ#±(–QÜ­Òp_YŒZÊ6ñ-½Êu’~E –‘2§§§I–)[Æ¢¿¥‹”ž×hr‚ïOIPÊ«–ÈÒ[¬Iµ»_Ø¢Õ Mì£TÚ»ï¾K ½¾žxö`.*@ì‹„<qbÄÐ2 !gŒ8z‡D¹&<&ëØ6 ƒ(¯J@(G /Q™%ËpÒŽ99ÆM­_~T²Ñ:#'Ìò@d ïîiºO'˜¢m*™À½Á+¬ü“ ~Š]L­2¨g „À*‹’)1¹´å|¾)-T‘®U#E‰qÁ£Í‹ˆ+][[ƒÁ¥Iºà¯ iÚž&qÂ;q«Dщ€­”´ ^V_Yü†nz¨"ñ©Üàf`‘gdü")ÇÜáô2­“¦NîUÛÁµ"º‰â98úË_ GI ¨¾k,›¶ [À¾°ç:rœzL¼8¡ï­9Úörôuí›}³X*H–ÐM¥dïGyß®1é‘Ѷ °ÔŽÑ±"éR”?žÓ€ÁšŠG-Ðz Š W(K¼ÈP¼˜ê¸0möY8Þ¨ÀöÛXø–ÑúB!’+Ä"èW³ºå‚Oòœ=!Õ}ØSÜÈP”ŠÕ£66©p¢há³ù¥YqøË.ét‹Þ»76e§–²¦·}Pq½¦!s¯‚¾—ù]E˜È §ö0¬…Ë-Y\\„t-£ŠRÆœYoŸ²M^Õ‚¯•Ø/6”ó~ÐÐãl¡6×þþ>& þ¦õ?zeÊ »È8+˜øNP¥çKî«E‡Å&ª«çÊH¨ÂÄ»ŸD‹Ç,oÓ4Fˆ}¨…ÁS³0rwùöCa{@åHÀ5{ |„‘^4YP Mµr’~P–©¤¼@ Ð)AÂK‰—§èŸ^³—XÔV½‚“i®ê‘WŒÆvÖËâQåi- º©Gº8—ïÈZïç׊€s“k{tÉÑÄÄTìT@ÀCQz_ãÑE!¦Ñ„%´Wè7ÿ³… ™*AÄiÛ¬›››ª]áR–%ssW…z=£«Ù&^^^Vuô•jTíåêöZ•ßÿHæTéU‘> ­–z+—ÜØŽ Àµ>aßÿ}-x¿üå/üãÿ×ý×÷¾÷½ú§ú×ý×évëÔËb¡š‡ö}^ÝôÁ»×zžé5»o²M®^æÚÅ»GWÉè,åNl|“’ŠÊ§ßüæ7E«¢XÑ­¨W4,J=ã=v„žZzë2µJÁüCòqÙþÇ•SïÌ„€ó+Ÿ+‰›V[`¹‘Ä°b—†Ûè-!ªBʲg39Ìá’•ShjS±Jì{r`·+=­µsQShmí÷ýß{Ù®ƒ€wV æ~ªÉ³S¹7Fî/îjq³8 ˜j¥¦&hu÷pxx˜G%Úßß‹nݺUi”ýÈd[Ô¢×aÔÇfª5dÊ·ÛÛÛX_ÔnO“瘨w„T=PSÀkx5eôßWÉööö?~¢ï†BZí¸öýŸè­ X-¨Ù7µÇ—_èi OÛr@ §Ïž=ó§ßÿþ÷µp~ûÛßþÎw¾3ÝïξorDl‘N'Äç%ØÜ}‘ û¦V8žéñaO¥~cÕ¶f}^ÛaÓ Ã7¾ñ Ѫ(VtëO'DÕ£:q:@ ÄÊ­¯¯ëg/ºÀªÁ»áoÚÛ«««Ê+Á`ww×<‚èÑòò²©œGmnnªÌä¨AY”L”Ôâq hêòl¸š…†.âh"t!N@àZãÞ½{KKK’°‹%"·sMT#Lºw¦é!þžPJ)Y™µs÷)¹ÅÔ”Ý\6©. 0ûûûÄD“hOsN-¬j¤©zgM¾´@`䘹žú²@ 0X ìgÏž=þüÃ?|ÿý÷õû?ÿó?¯½öÚþáFºŒo~ó›Ÿýìgÿßÿû¯¿þúg>óý~êSŸzõÕWoÞ¼ùÊ+¯Ü¸q#º(+ºr:aáÞ<:îK+ ­ š¢kÀȸÑ Ú@ 0]Ù777—3ÌÍÍ™Kæîß¿ßï÷‰ o‘JËÀ™ñä•·)b¨„5Ç ñØß߯móÀ¸ëÁ^… Ü@ 0rV,ø³À” A½Àõ'z/»øÅßÅ­[·$4qóžãG{õîÝ»˜Ä ¬KÅŠ)Wz<»)K,]"÷ËòIî·˜p3cê¥ý A¸×ÛÛÛ~DˆŒÛD-U2³F ñ}ÆÝH;l¼_a¬uh¶ðRå d$PíMÅÀæu\ºq"0YâÄå+C~r»k¬í×”{¿—0_Z?0··Ù¿¾.與©Úp*{¸K<ñáOÃÇú© zÒ{Ù- 1Õó’Q[j*­)ºJ^š^äÝ µUt¿6È‹nê‘ ì¨ÀõAï,¶®ÑC™Ú…Û·o¿ýöÛÜA~® ¾3ÚáL«šÈ~TÐèÐëh$jÐ%Ž>mèiõe5ç¨vµA-IòÀæuŸ|ò aìNOOõ«_ýä'?ùÁ~ðoÿöoÿüÏÿüÝï~7Æ] ãøÖ·¾%ZÅŠnE½¢aQ2aìòhÙC;¶Q<0¶ZÇѲýšÁ”2aBÚÌÿ-w'¥j‘G– G±ÝE#„ƒƒàOãèèHT»¹¹¹³³£§’#———-1q‚,—/DPF¥¿{÷.6.Òìíím+\¼…ʤ‘vúaàKîý± þ@T¬í»è‚ˆ­!_CˆHDTÞí »,(ÇbÙ}µtccCT'"±hii ZÚÛÛSázêË!pþîïïS©hˆÍÏÏÛ " Q™D·ªT‰}3òºô ”9;;«r†³8¢”]/µ°°àµ ñ~ ;ˆšgÒÕv4Ú4¯ã[¼Â ÿ÷/-Æ] ËÐü«¿ú+‘kBÃ#¬½€îâÑnÞ‹{Ѥí'óðAèðiæït cä•â¦px×'PZYY)œ©é—@Œ^ü±UAŒørIâft¡¯›bâ €ž” FGÅŠE[0‹Ã1ŸyDñéÞ½{šƒ0ØPíìY¢µÂµ-Š(¢NÄ ¼ ê‘JC}K…è)†*?ˆøÚB”Ðï÷½Øý@u¢%0òÐHüÜ[ô_ea2)ª‘(ªtâ}%h¼ˆÞD½’tGi$l0¦t­º•Fu‘]E)%µkàhTêWw’y]Z¥Èµ»»+é%‘ŽZBá­‰mœÄ0f «òƒj¤j^3Ù}(7¯ãB…‰Ÿ|òɯýë+|r4ìÄ,¸4ÊDf¸q†W*|ñ‹_ä¯Qïå4Ië5“@>´Ñù´ è°ë‘ïâžš÷ª«Ýd,—ã_¤×Â¥Õ¾òEæÏ=ÆÓÜÛM!/e’C Mr5•–¿5Þ¢[~Ê6OCœåÂŒ ë?žgŒj@¯ùC÷•]e¸+1ì…. rܼX.1am¶6}›¡]±JƱ©jTM¬=â0Ä?‰ÉðT®_=‚÷Ó¦ràÉ <‚)‹y:s‰ë Ñ€ø{Ø}tÇN½ô—@¿‚8õZjŠê T]ˆŒ¡Rʱó:ÅÖ»€6àõWD¸°°€îé[g`‹9×êmª‹3·ÞÙ.þpk¹Õ¢‹ËWc-7àÊ›7ÇvÃAŒÚ_þå_þÅ_üÅ|ðÞ{ï}x†çÏŸ?{öì£>BÆ¡"p d)j¼yó櫯¾ú©O}êõ3|îsŸûô§?­_ÂF+Q$ª\kJ´Íi6ë6éäŪ-îÆÉ(sc¢¼@@J€å° ¾Âlê°#…¯ ¥¦b3æÔ$l{µ:vS堿ʶ¬¹®ÑÍáv6ý+¨ Mþj¼Þ×lÌÐ¥du¸šÍF­½/‹]’Ëz‰–+™}]Òr_)™¾šJkR$AáÅôDš>%ÉôW‹)…ûoâĸ˜$Ï%«ßõyô.r¶¨EˆK0èm¾ŸèRh_…çÐ-Ñð`3’;Ê”×´=Ñ1*‹‹‹"nŠ’PAhUßÐzH[lr„6ìO„çõggg?~œoœœœØ2Àù˜Ñg²%c¯_)=Ák°ˆÂ5鋆 *œ e].0m¦(bÜþû%3Hx°ía‰ºâDàòÅ hòµ×^“,ñZ 11e§D5€½?-Ó¦k Õ\“0J¤MúI™z¤¹Ô‚®WÐ*{Í´°ªš0q¤Ù'1‡S]ý~_OU»ž*¥þ²_i)5ÍbB&FH¯ f#á©št(4™kù°­LZ¨*|«H9D™‚7}KgÒc^qTÍÃqçðz„0 ö`±¦·ƒk×»ÛÎ_GTšR* 渞ÚJkR$iú”t5œ¤ÕÂë ;CÉí™Ì'Î "}ú;¢{}6ÓA:—db×KKKˆæ9õä¹$ÀˆEÓ¸‚å‚ïo:ÊI›55žÑ2GNE•Ü¿&E)qX‘vTqXŸVHFì\"šŒðiÖ{yçۣ͞~æbyðbF’%§—lŸŒ6NuÝÂ| µ¬kh(™Ñ•¨Ñ[ “\yó†%¼š“—($6ˆi³”º)‰BâºO1ã 5ê× ^–HTžF%QԪإn1ô'''šý úÉ"®ÕÅ›Ò*Àtê>uÁi7ÍUö׹Ь¢I>î"ñžd-ƒ!Î$ߢ-èP0e}©‚ŠÕ}ÛŒ§åøÙÈ\5Ih¾CØ„¥ÇT?ËUùv¸¢¬M¹ºoýœlöuèOëvrk%œÚÒšI Ÿ’®öB‹ÞŽ~ã¿k®¦Mœ¨]ªŽðÞ™áµyBÔæã‰ÑAØ͉‰UwxxˆêŸRBK["ßfèRdÔ4Ø ,èÕ¶7P%ì¬éR ;£C+¢²„XÑ´”l{àgL$m»&¢t¤Œv7ê¾è »Ãž {H>Ô_ôÞ¨`cÊÆ‚è¿M]C@%£Ù¥%Ü\±]&˜7T;ݲ±±Ñ©æ ½ œì‹iÃLŽM7?ª`Ö1—#N$¢L:á…ŠK0Ÿ¨eQÚëpÈà·9åË7@¹F\Éë-lÐ$–¹×™²EÒZÞ.a¦­Uçí:ß04©ð»ª“Í—&VPý©¾¢cÅ;%+Kû^*—Ö¤HRø”yW_c×›“þlØÚ„þ€‰}Ž¢£E(úÌp–‹,p{ñºqC Q°Dk#¢Ô_5innÎN9•RŒˆš§jGŠFýHœµÅ¢rÍág(Ñ*Â'„!æ^mÄoÒw¢W96@RE”¢›ìýxón*}*¯ÖŒ°¹£\ìA‚0”\Fd¯’qrP[—WÕ­U‘jN¢iLÓÙqíFÔ¡WÓëïïï«Û“¥Mó:%Hø£ ±e’Ä¥au sÇöüùóÏÙK#N3¼rE¯¿þú«t‡GWb“mh¯_ÐdÆyzzÚ‘.èÀBÊ:y«ò÷šŸŸ¿x;ñÃiU·|w-@Zž4÷Þ©à=g¦ÒšIÚ|Êk… 'Êö‹ú¨èŠ×xQêKÉîQ¹ã€LT‚b¢ˆU$‚®ž‰JTÅp– Û¬ÚaòÄEé&ÔÅÖ²‰RÕr5ƒä^µÁÌ©yâäDÙöR½³£ŒÄhàšÀ*ƒÉÕ…iôí ¹¸ë½šö^öHÉ’~•F÷“sÛ¤É)3‡ã~C(¯ËJ`x^¤Cʃw´C»vÁε¢Û7¯³â„ص^å—û}ôâ„ù£‰'ã¦Ìž; Ð¯é8½zŽ&Ì|âª"0¶×/ÈÝ3ˆiQÞÙÙÙ„C…ׂqOÊÇ7Q.ot( ´j8—eˆ‰‡U3áÞÃM¶´ár°VÛ¶=šJ«U$)ÊѪõ†8qÔžÁ^‹Ÿ.ЮmsÔöû{•—hS¹ëU{´ÃÖ>>V^l•Æt^r%—i5Ëž‰• vÔ`Ò‚H˜Á‰„%Y"pù…I œQx)ÂÛa#N\•ÊS€”^"—ƒ8& ÛÛÛ+++¶½±··‡××r.%ÃÕªŸã6ÃQ7Á€z—ĽéXœ(NãÞ zT¡Ö! Göæ}«û¼šÄ; €ãÚ “7¸ˆ!¸L˜À…¼ŽSÈ@ˆ@ ø8¶@¤ûûûYUÎÜ f„ñ?Ç×HÕ˜û«ôR’²òM¸~¿OôÖ²ó¥  ·nÝ"²]¡JìIq# ¸1>‰9ÁäoÒúñÇ¿òÊ+Þ^"Ž&—O¢IÐkÜxAÂE!N .QÆç*¾öôô4ñ Ì}?Ä^‹¯Å¿Þ'?~¼´´d¾DT¸žúr”æääD‰õû~tt4??oü1itGÅâK9Çš‘×…E£’ÍÎΚÀó‚ð”y|({”\%WŒ/(5 ¾zÙÅÅE½”÷‡ËgÒ۩ω‚Ô}êâh¢÷²M6b†ý “‰ÀÕJ=çë©÷r@w!Fn;1qè~¬›@ˆcj½,hb—A\ÉÞ¥(u÷îÝìÅvÁÍ‚M ŒuÎÝÕ™ï "U‹¿׋ãŽý â}%ˆM—¼³³#ÉAw”†x‘lƨNið¹¬ì*J)©]#W¼µ~‰Ÿªq‘×uçÎríîîJzÎ pœN$Ô”.é:r$µ$ÎÈËO»Ï¨ù¿€¢i&”Ê÷Õ$ìIŽÈ\£21÷‘ßlbiLLïRÛ¶«…o¶^D’9¬/›9êiÎÂ^þ§ )"¸rtå4P“˜ ýs˜.–EKT¿ß/¯Á„\QJ\q‰Ç"Üub_p´Œ4Õbs«x&µD±p]¯Ð4§«%{øð¡üäɱDbÂðŒ°æøïë½lˆ,¢õŒÂììlxUóW›%a,’ÊŽgC¬H*ÐM-ä¢üÚÑÚ²®@7å w"qç/üÃ?üþð…?ÿó?ÿÇ _ùÊW~ï÷~ïë_ÿº%ø“?ùÿ÷‚øÞ÷¾§õ;Óa¨þàþ@íUêØ¿ù›¿a—*ûŸ4úú*è«÷w§/«WK¾EÃ?w9MÆ€ ® /ºTÄ‘û›h!ß»w¯­kËH9ð÷M@\|?•W,ŽÊá/2†%f—÷ÝwßÍ˹uë–˜¤ä&|^¹Àа1‹95®ÄqnkÄL2‘·/,)¢U¤å©S‘ .F¿Cáºæ—«§¾œ;jë²Á³øEú¤¶Õ¨zm¨ZÿŒzq^™ÞH&t±lbIæ·)çc¢7{5]pôä É&ÛQÕX;!wjÁúNá“î [ì+byµ¯™ ûúFöÓu‚ßQo\í¸ÖÔWË#鼕AdÙÁYˆ¦hF/¨n¯}#ƒe× úDbM–†$¯_ DÏ£¼×]9¨UEÐ7xXLÈwÛæd.#"ýöö6¨¶Ïª¿;;;ìéZlH¢± ÈÁ µI¨€ç#ù͵µ5µ™S`UgûÇÖ€½ º ÁÌÌÌÜÜ\®ù”A8R” DuD¦Xò°\̨œ%3}¥ºž¾ÓÑÜŒ×é"V~J¬!šÉ§MÝáĬvŽÕý\£¦j)hò4ÁWD½ )4¯ü­Ëlê(Cîš–´éÒ–àóY(.;Åê©©mzkDô£¦ zë~¿¯ŒíxÉžÍúRâ†û^Êõøñã&âD+0S ×Z½õøhjS«t_ÔÈüiï¢÷JÞŽ§±ƒºŠ¦b¾±®½Ž +‚'TÅêê*Ó8+;q:щ].äÈöû.ì˜&¢'aêyŠ¨`B<„š’ýZŽA$Ý*‹æJߪ°mÎ|S¹¶Vâ÷µÛÖŽj!£Ú –³µ<ÝÛ9ÑîSú½@#Wa²Ë’ìî0ozJÉ!±ÛM?ú¬"ÝÔµÛt¡¿Ê¥qÑ2¦¨;¹ŠbB¯­ËÊW²ò d›y ¶등.{ýÚ=xë«é;š€$jéMÝz6Ô6t5+úÏÁdh{½¾4óÀ#r%;âì%ÕyÞWÝNŸç»ï¶ÅNiÞBÏG&.Ÿ«šWX^9Âòâºe;hj½á÷ÔhOSûviûÓ ìkÇšÍ9M'E£=êÔ! õÚ(¸à~öEÎÜšz»¶Ln1ßÖÉå9¾]¡e–/UH&[F´ –ÂüÇØB6D‚Ù87)v§)Þe;ÚGú¨å5¸–¤<­1H™Siªv¦ò& GÅú35Í)ùrh¯`ÊQ4ÆR*Á´Î¿I‡ñI¢O/µªµìŽíÈ êf*aðÁ07¦'ÃdË$és±Àû¹ÚËp&BŒIu 8¡B(мІdϹ+šGËUˆréÚÀj®qdì¸r«ÔÔQzAÓ#cÞ~ý¥ºB—¶ç ‚âÀuªè¸6Úp»MË4_ßw û Ü« oaO øLð<–’-cýuÁŽŒÈÒÐs‰ ñ ©¥zMªm<»Qdô7kÛSèÕ%ò°-Yq‚ýÜ|?¨6 ûµå0î âD2 l&Rœð À£–«â„ ~ÿ ¥8ûš6T%Z×Ø0e[˜”mf·¥¢°¼¬Lg•nWˆ––áÖæ‚ö‰mSÜóÙ/ÎlØD6WÃ7{>#Ù$†'{ÑîtÂ/6Ḝ¤yLïV{Ó|N›ý8ò"Y¡£’WHÚïë*tiûïØr³Üt ¼ Š_§ ¦ÂPN¡rV‰`äDÿà㎃$dóëÍŽ$)qezÿ&opÚé)ÿ\â„׶à»Ó*êmj¼™"˜F¡=¾„äR9/¥Ò؇5î®@o¤lùvôêÀOY+N$2¡þÆöÙyѹ¸œK@¬«««›››‰h»µµ…†wû.=Z__Çý%Ç^µØ™P9ÝÙÙYZZÒ+è¦òé#Š1)pã³Ð_<éÀõ¡¢Z <ƒyË1­è*èÑÊÊŠW bQ@§yooÏëPÁÁhî%¦a{áyóNøyóÐêh㡵@)1§±µ†a¼†  åf`—Žõãú[\\œÊe?ÈådZþËç&héÓ˜¶›:Šœlž8ÈÛtŸ}Uh^ÔŽC ciÄYpÒ2­zbí! {j‡5/41˜£‰r{’BôhaaAÔˆ™c¯OdÏÜݹâµì“Øê-Aÿ7Ð]1ÅÆïdr“£´‚=¤“Ì•Iˆ\‘2#ÙfXåʳôÎœmëï´¨}––™™™Ü„¡ÅL£0B…^sû¹@ ˜Pˆʧ_€}êÀ½wfvl`Ï’Gkf„^1ŒÙyôRk“ý1ž6ŒÙeSß+Êi#%Š__>æȨØ%K›Æ{滩=y!èDõΪz*ãŽF"!œ 8Â1°7ᛈ>V9|úÐ•Ó Q kCÂpëN˜8 qeCͶo¤2uGãçèèHkŒî+½…û&u¨› %á}•ÚLœà¤Á½ÊÙ?%‚«.%Ó°‰]Þ@ 05`fÖä™OÑ»»»™&ØZ”UÜsZ½Îó(šÃ}0Çž;Ä v»žæ…_<˜ -OÊA0˜Ñ6ƒÇB—ž·µÓ/¬†ýýýI î>Z°¦ûÀ”þÓóõó øs\Ù^nô)ó/‹"8ÑnSÑÀÆ·iO^šEäJÈR¹¾Â¹F«Þ¥à-Í7 ß\-åó@KtåtBl·HA¬¼Ì¥¿"ŽÄ÷bMZTIJ3ª%‹£wÈ_­(øÊ î5Ò9"²E³F´ ¶‹$u$<µ4ªªu_4í,˜È·¡é¦(¦¢_äï³1Tž·{gJ2Þ£¨ï¹¹9ÍÒèXûG’Oüq<„ ô.X/ffflù ²{"Ø,}q9J À¹mcé•Mé¨ ¬,~5ÁÿænmÏÛ¥ç-Š…•¾õ<û¸×Vx®õ*^bˆŒã¡ï—?Òìá• Ó,N°gƒDAxK"U”­µfܹsGãYYz•Ýáœ`Q-Rƒ³ç @é• í=j!¾„ý5ø•ÃW­ºPŽ¢Íj<žpüÖç€>8F LîÞ½‹Ú·æUv^4yjFÅ|¿Mv±§6—ÀÀŒÍ#ŠÕ¯&yì,}v¼+»ÔHT»r±Á$ÀørX9e^üÅÕH5ØÊDh­Aîý{µT‚¥£†îÒssöóe‰ã¤ö§è*ç,©wTïzuêÈ®åÌ6\²¿ƒÄØfˆµGûÆÚ“¢a(‚¯Í¥ò¾B› Ïk±õÜ׈P!>S{¾4&ùs ƒž0Z8—Üó×»<~B.ršü`´ô‚ŸØº+þ q0šDíeïÆO¦D17Þ[Q@Wë…3ѵ£Ûms»²#Š§Üš””Vþ›ûð±æ%qEš¿p^e{gæžm: ¿±½3Ÿ šŠmû·cÁ‡WbŸ:ñöÙDð¾sÚ8‰ ¼ä1/º`Üh@ &UZxfPæ•\ØÓ‚8a>šHó»Lº÷²ýQ‰åÆ›å'uÚƒQûißìÑM"*4•?×ÛYôÓ{W½‰´?%C[2þ\˜yq='0rpâüàÁƒ*[@ :Ž§OŸà¼qii)_ÙQ:==ŸŸ·hT½Ìؼ @¬ÂÑÑnv“”–¢Ä/λrµœ¤üfAÞ¦ñ¨ é­ñgShORH¢¨û˜k[9å¦êÑ‚¹‡jùvÖ€ÙÙY*|OöŠ>±8 ¶í¼qbŒ`øÕÎ8@ 0 Ÿ?´.ÔâD @ 0.p@q9Û²œ‡‡öyq#º @ ÐA¼óÎ;—âÑ£Gæe!p.ÄéD @ ˜|qS¤ü~nÍ“»‚d·¯‘ˆ'[¥Rlm<Š^åç›@[@ L.nv§)’%îܹ“«Ç ”Äõ›o¾é½n‰õõu ªrûömŸy⺠nIœP½µÒˆÄ $'@àú@ËÊæ榔sím]ÏV'Æ…óZÓ‹éO¯YR"øûÕ æŹ Ì&6ÐÎÎŽæÙÅÅEÏú«¨–ÁSUu­…P¸N½§±žÉ?}úôþýû—¦ê=Ñ­š8¨÷ööpúÆo¬¬¬ŒuÇPäê=Câ+rmmà裪:4)#ÁÄ›bk¼i°Yà’{÷îI`xkKŽÆä“'O’…rhÏÀÚ9÷ôÐ\ŸÔÂß¾ä@`„ŠWàZC@AãbÜ52šVk]z#\8Ô>e×pÜ—F7›ª.™"tS¿Jpûöí)£+ø`{eý»wïæs,)!Bõƒæd¦b›EI̵8ÿílæä/³k>cÄÙ|k³½#>pîõ„®ò† *Ÿ¿JÆã‰?_M¬aJl#‚b©Q÷=…Xùð¯ö.Œ_ªË;Áº½Ü*DýäØ‹šómýfdoŸ"Aæ„;·O \|{dŸ[¸cšö-Œ=φœiã 9P)߷Њµ €;¾4‚7*Ð]0âHö%Ëü/¹vMœ8W–â„`.›ü¨¡8Q»läâ“BˆËçù4õ't Ñê‘V;Q©§V8-NZMÐʤ›ú+fÎèö]yY·,î¨L•ÀºË5Kc^—•©ê†9T,‹\íÂÆ÷X3neÞ?Ò«·=}Cþ;ÿ|0â‰dÅ>.Œ²gs¹ãŠ˘L°þ¯è-¡j/lx^-™o s¯š­Â=㞈þlz§^ß°wMâ„—I¼ØÀÉséf"ˆ"•Å‰B«x/¤¾¼ì‡y,ÿXÆî{ÞÃ(Öïãx"AÜõü‰I¿žsð…]#ÃÛ€‚$ø¸ úÆ$”ãKV#½@‚tdû°^Ôa({·(0A˜lSlŽáoèž–såYïã´*0e8<éÅ–k ˆ‰w‹!”mhÄjhÙxФŒ{-<Nl‚òT)mT_‚±f p%˜ŸŸO6´À`KgkC~^—³z¶bÝe¹7µ€‰ƒÔàš››«=ghYW`² V†Ã+ͨš`%Ibm<½·(3†&Ùy5ÃÐóÊÊèËg_é"¤…Pñ…Z/¼jxLòòpÙ‡Gò²fYË¡Ÿ^Dµ« lñ¦¸f2 ½— /´ÊüŽø1W$]€}#Ï÷‹ì5ûå.雈ÖG}â±J‰¸¼Ç1½ª'âÄ°AÕï÷ñÊLH;V±MHhr3zõ‡ƒ¸jUzåR^ü5¦¢|Îâ<Û¤›^ÌРhÚÖÅŒgMˆî‚ÑÊÊŠ*=ú+†ÒÛùÕŠ4…º&´{­gt‘ë•ÙSÇMi‰¨ô¹M-çiÌ7Å»à Õ84ÜØÍÁàhÑtˆª5]ãɪÖd®ZZîžÖJº<2•¼6 ŒZGL•«àÙ©W+>¡xJ• žô¢¸©„éM}](£)ñ@è•  ­b5ôœ1õÆHjÏņ„ä’½ø Ò,--m9hòÄCL’+—[ °ùÙK I°ÆAª.q€Ù´÷”4Â+ø>þÝ1ãÑ{{ås¹vÁÔ>b{ä Îðc ð*ˆ˜‘øjhÙ˜§&S$3BÅhÉ›m ý¦Àp„8á‰æ¡=܉h€x—Dfm¦ÃäUeî <àõÒ,³¹ƒIš ¡¶.›|r æ!¦ŽB ãžå4˜g§Ä:Sojž¦rÈCl»öœ?%ï¬&qqCÙ„¾7Å®µ½Îÿz‡6ø¢1cÖ^³ë SÉ?å[h·›ðÜk0z~qæ Çgì5›b7ùða_Ì¿Ž•@ÖÉÞRÖîÚ´Šs¤Úf €nÁ+#­YˆÍ¦ÖÜ×Dh®|-M±{kŠ…íé½ì€¡Z6ÅFUÕçÂL¼Ö%fÙMàbæÅË>ÈÀôˆW½JI×ûÇ?ºÝd/Ã=ôp|Î^i¿ßÇ-ŒÅR0´§fggY~0aBO£wfè™Ôeúè_äÈ¢\Â%(r\Û¸=çØ>ñRïyª3‚pg„A?fúùØ(üí9wûIÕæ­ß×eŸ†•7)&x&ÐgåÚW4[K8jHfffÄ*M>{gŽt‘ðòÀ@÷›Âä­²Øy]&¯ƒ6æ4~ž3ºõ} x‚5?yñ Ådhñx„(x¿‚²XñÖ†Ir½¾¾®fX°+–ó:ÌÁ¹¯’• ëj”2PSô¥íוøÆødŒ2‹Ž’DJ \O„8¡E¦gwwWËO“¥@ ½èÕs‘ ÅÙÌÍÍÏ4åË­ã“7]lºDM/Œñ}%Ú™¸èâ,9Øy1AE°766Œ)÷áÛýÀIQmÐt5UeŠÑ·Àç’T>°©ÀV§)˜z=I惲çÚ!NÀKË'»˜ù¶h 0ÄÇ '>IÔ…š8ažCœÄ÷ &7£ @Lë: `¶p)Û«ôFîÝ»wM65q4¦PœŽÓ‰@  ±Sq:q"@ ΋ÑÀ%`{{{aaaÙ¡}ô®™™™î4¦ƒ(G À»ÿXkWêÃÚ~½ó1@ ĉ@ Т€µµµ&î3Ç8Ž‡nL׉ƒƒqóµâÐýû÷ÅÇ[œµ1AU,..ª‰?Õ¾ySõpËx[CCå· 9ÜúÝÊN˜êÚŽõ÷ ÆìQ ³Ñvc¡{‡ õKhX q"˜Bග¸ßïsD`yù«û,´œNøû¬Ù«««ìV<«®óÒÄà*ÙÂÂBaÍ.4F¼¸¯T…èB’Ìr% Ó5öª—&åp§_á";÷jÀÉÉIîà5=­<ƒ;H·oÞ@Ÿ˜ãƒÊÇáýH„‘îh?‡!¡øÄÉamÇúû8Ë/ƒU+/°Ë¢õÃYm›ÐíŒ@ ðˆH~À%àÎ;þ@À‚C‹•'š/Ѧ DJXS%ÓS‹ël÷>|HØT‚.S>±KóÒToɵ}c,$*A¯‰aD$xñÐÕ•\Ö°·Þz‹Gv')G÷­Uö^“;©º¶®‹‡ýî,zuá¥G>pFõEç#ÿœ„ Õû&¶¶Ãóª‰_ÆÈ_7Ž¼7˜%˜UÀ„"N'K£GŽÎÐ;‹òK iâø²·m!Nµ0Qè¾ø!´qJ\bß*1Q’Òz•^S¾#Û²1ºà Dx,QE¸õ\YYA¿‚ØÆ$¦…º^ZZòçI94˜ãŽÅÅEb0&|Ê|_rj:ãQínz!z;MJ5º_«&´··§Šr¯Çõ\U45 œ±MÕ½ÊAó_AcJ/˜‘Õ6¯¶ñ…Ž-¼T¡@{Ç&8^ŸðÌq@L4"îD pI )×⡉3­Õ†ž}G–gc&,")÷-¥…bÕ…¸‡“““µµµ§’Ò.ؘããc•¯›ËËËâTf¢ ë“”cò OÕø ý¦`çêŠ)ƒÞÚØôúvñˆˆu\RÝ"!Š¹ßÜÜ´®#ú½‡îœI¡VZïÌêÝØeÑ0!~{•é‰h‘;ëTc|Æ™™™Û·oÃìÒre†Úfj„Œ äÔT5Cµ{­Ò8ƒò“2&[Òµ1Ùj ñæõ¦ß8œËÑ2ªsÌ3f»…Ž-ôFR rù! wôVCBò”ÎG¡ßVVVÔ!– Lâ€&¸e'¯Â"úäÉt8ñGKA«¸žrÇ+;é>:E‚R¢ ;ˆº®--©÷¼á¾¥A›Â O@.ÒX ¤ôú?I9ï¼óŽ©dèú‚ 3W¨ìäõ¸ô"â™®›²“`:xpÿ<‚5D¹HýW ÑB'"ú NšBx¤BHÉ#û‚ÊâG‡®¡|ŒŒú ¹ÚŒî¨£Ik9„—4¾äCéH•ê½tÙ‰&)¥ªÖSôõW­5ÚðHÞ‘1¥¡Äp¦:ݬUþé•Pw¬%6Zn•ò—¦–;¶Ð<Ò'ìLÕZbÓïh£±GOé7»9rU´@ pyËAtA p%âÆZA±4€G¥Ðr®;¦ê ;e÷Qi°¢”^äEeó”ÖRœhjŒJ¶;b>L9[÷ÕX¥Lœ‹I9/*“ A÷ÍôbBÅ {}½H- 8Ýâ„×Ô÷ ú¢“„ð<Ó¬ñÝVäÏ‚³GN®D$àä„8Ñdr£ïŸÂ[{FœSDþóY½¼ oƒçé³fBIcxGS~2–qB¯ü–lzíh²ÃƼ¨rÇz!$éC#Lú÷_Ö’yøy,LBÙ)¸ $z ZMÙ1KÙÃÆÆýl>xð`mm &ã~’û€rL£ )­V_¢}cÄà[“Jïß¿¯fè¦ÒØÎqž žÃö•ór؉䎕s-2¯–ÀŽõË毮æM:¼2’WæÑ—M<çªsP}’ÑÔ×ïÉɉ¥9::‚K¶;âYÉ…Yû”-&Û¤*CÉSÿQàË©A—WÐoR]’ÑUÀ……e_\\T«jGŸ dûß¬à–í¼tB³}9¦Ùþc•;¶Ðʈ ”7§j»»»öÍ.{ÇüMÕìiõ§\„8\1Þ¬PàÞ/—vÁÆä,Hž¦M¥y9µÌÍt|Ákó ìmpÍBOWWWábQJ2Öâôô´—Å(Ðp˜ŸŸ®‘M²‡7lHd›b­ÄrIPÖ××½Á€ÇQY˜ƒ„‹ Ü±…Þ(|,ì¸ò2Ã4"q"\wp4ýhé‹ÓõÖφÍÍM1©ØÏpÇB7Ø †Á’ÙÙÙ^¥3*–4á†U‚ ±)Ð-„Ï.ûJJø{ì›UÚþþþ;wý>ï˜x:âïUI¤åŽ-ôFí‹ðz¤ J¦á(6œƒMœš#…ÀXÅNq“Þÿ¯x÷¹¹9¼Á¸›,á÷°—––¼V¿ÃMzÏÙëÑÌÌL›(r¨!%‚Š/Šƒ”••š‡Ure§&ÞÑä Î ØûO“D–àq…\åŽ-ô¾­L*ó‡QêÉälj{{[eb¨ëÑëS8Àˆq÷î]6¶ÅYŠãĈÂB—ܹsgggGLªØSc[…·ß~[¼µù U.ãV1ÕŽ¬2*±®uQë‰5ozîüÁøWU´±±aEÁX«yjÛâ⢠ÆÀg‹9n¤õHí\«°ZAeª‘Ê«r'Èjðîî®’©7ôRJ&¦cñ+A¹c ½¡ö///ó"Ê«\v¾a郞PùúÊ8‚k™°´Q-1pIEX£W¢SG?& DZôN®¼Ç¢¶Û¸¹2§¢vu óF [o¨¤L|h‘Ô†‹–——}`Í@ 0qe§@à*£ÉVåÒÒ’8ž!ĉ! Z|h[5ã Õ-."HˆMÜß߯u2£G‡‡‡z»±Š8<ÝÝÝÍÍŽËÍ \&p׫ÏJø944T%y¨þâ[±]NvwwãdëñLíÿnâÞ•Þ&ñýûw¢½µµ%—øIäûûû#Âüýû÷;]^ÝÈßö>{àoþoÂcŒ1¦ ¤Þä䤴;B‰¼xñb»šÿÕKH'Nf¤…hV¤'Ê'¥2É(8À Q±÷ïߧ-®â€D JvDwè]j„ú===­;C6Â%ùVQŸF«Ó m-·±ÙÑ®¤ö7»Þ;’«f³yëÖ­4&Ü :…D/ÍÇ~©;žHˆ¿ŽŽŽú? cŒ1Ƙ"’àúyäÈ‘Ó§OøðáÂ… ˆÂÇ¿yóÁG‚¡wü¨óZ­Fù»wï¨|êÔ©å êË‚*,,,p1½µµÅÙcÇŽ?~\¯±1(Q®Bê Ô1øöí[šÀ upàÓ§OgÏž¥B¸úàÁ\ÅêPN}$¸Rˆ3ØÿöíF8E¿èTWWÇô(t-ír-Þ¶8!Gã$ˆæK—.©Wq˜Þa\ùØÓ§O©Æ1>p@É—/_pK¤@¹T!Í1¨¶¹¹I¨±Æ_Lº••œÄC®¥²šæì½{÷øKdŸæâ’¸G¸ÊÏŸ?âg+)JzC ×>þ·Õ;îEÜ&Jø÷]—OMM)m ÂÌÌ np hýòå˘ÂsìcíóçÏr¦"\_2¸G8@/¸û4D ©IÓz¢x~è5gå€rb"ƒÅlG>p ¹øauŠ>âÿNû‹ÿ§0ÆcŒ)‚´* ž5÷!È)„/‡††ÐpÙ»dTòµk×PŠÓÓÓ¨1Ä(ŠPgÑvØD·!9K¬qLR¡qD.#)T‹2ˆ’«×ëTã€jú›:6<<%¨ÃÎÎÎœÿèݵŒthôþ›ÊG´ï¯.¡š##éòУîîn‚ Ü#PÎPú~}m%cR±¤FªO‹„‚>bdccË”O~Òµ°¯{„3é=RþF„[|¯¯ÚÓÓƒ›7oÊå]ëÞ©&Ñ»–¡û®» •Ô§¤Ñh`‡˜"ž<îëou¸”mª²mÔÈÚås-jx kà’ ª0‚‰Anœ ¦ñ¡8S \«ç¤Ov2ÆcŒ)iµ“¶F¨I§J‘£Ì(‘êiñˆ×¥¥¥ÁÁA JÎ"Èâý.9I*ë©€Ê ƒR®"fÅèU4gõê=ç›4¾ÎÏù¯c*”ÎÌÌàR‹K&rдæ;á!êSÒ´‡¾S?#Ï)ÆÂWi˜þFÂDŽcà3PÈO*YÖß\Hi÷è §¸)­÷.âOðežFƒ;wî¨u¸ïJuTÂO½:"”iD÷õ·:\¹ôööæ|  =]X&7 &a ¯…Ö´D}bklôÈÉ`ćü„úªÀåé3étÂcŒ1fw:;;%dS(Au­¯¯§:XQÇ¡È9@ÑJç­¬¬ Ëø‰¼Ku| Ù&©ÁÒãj°?;;K}-öˆAƒ]AwÍà:Hïr ŠåÑ¥+†I!è "[/×5\ºNï0+IÝ éš\B7®®..÷ÒàXz=11‘3B5 nä"Yš"Vt0âP=nÕ⾟¢¡RƒŬ¬:\éãųšØ¦Tä‘…ÿ2Ýäg8Yý:0ÆcŒ)A² R-…àSIª9.ê- ”ÙËlä£DpÅëÿÔ`ñå÷®hŠËàà`ä9µZ-UÞš‰„KKKi!’QóX4& ·øhÊ´G;}wHÐA}n¦SG6×­fÕŒ¯½Ý ,@½^À+J4"¡ á-Êç‹ £‹_…Ú)Ūî`+Ä°OÜwBÝl6ùIȈ4F¡ó„¥8,óKáŠV*<ùùùŠ,(÷ c0ænå*T?^;aŒ1ÆSú!¢ ÅŒÎCðéM|LÅAÑÆÌ¥‚ÈG-ØÕÄžŠ•¬Rä‘úWƲ«šÌ• §'''S‘ª9Qz=/'cµ†â¯fO¡¹Ç·á~¶þ%¥ýt0d‡%€rI/ìKUlu7Ñß„Q‡¤Â×3TazzšBå yÙÌÝ£¡¡¡t¤¢í„qî{Äîã!ž7ááa\â`§e»†‹&tL÷sÃYðêÕ«¨&#z¨¢07RÁÙH,5*•3¨4øGFnÝENcŒ1Æ”ƒòCKõööêËBh8­…ØBŸ¡ÀÐvzkºM²’˜¯¢ 91Ó©ˆDüÈȈ[+©Ðîõz}bb"’ä ¾ágÔÁ¹A?6ñG —UŸNés·ò¼-ó! Óœ*Ä4"^3Á$mù‹cwïÞÕÊŽñ¹82n=A4ˆ›œÄ„ˆŽO,Ä’ -¢ÈÙ‡¸GœÒ§Š~Ó£²ººªû^«Õ"S@ôy¨ø|Ç¥;iT‡Kùat§¸üƒPpVñÑ@ ut÷•«¨0¶ªÐì;.¡E –Žíè¡R0+’1ocgŒ1ÆSEliœ› ¢-ÉÒeÚÎLÛÆ¥ïz•cTlS \%.A䥨ݿó¹µòülòNÜô«ý´U§ZÙ\¢xÚHn ŠùlŠCÇnbT„+ö)½qòD³•rMTo„§KïK¬ÌÖ1M4R#0ÆcŒ©¥UªÆŠŸ‘¹ÊÚW[/Ñ«µ)bQë¡K7½n£ó;yÞvRm½ÿ­åÂÂNw¤õ{´49-]ÀP±0¦ÅOfí®êR¨ ÇÈ[êõºFØèlŧu=:aŒ1ÆÓJ·y¦°•´µ¼ASØÛ¸ë¶ùMhÁú»SÕƒ Z/ÑöÄIëò;²Y[‰‡Ó cŒ1ÆcÌq:aŒ1ÆcŒq:aŒ1ÆcŒq:aŒ1ÆcŒ9üG€Ó»`_ÈIEND®B`‚natlog-2.00.00/documentation/README.conntrack0000644000175000017500000000600113236662052017635 0ustar frankfrankConntrack byte counts add the sizes of the IP headers (usually 20 bytes) to the byte counts. So, icmp packets are usually reported as having size 84, even though ping etc reports the payload (64 bytes). Since the actual size of the IP headers cannot be determined from conntrack's output, the sizes reported via natlog's conntrack mode are as reported, and are therefore not corrected for IP header lengths. Example conntrack lines: The 'maybe' entries appear if the command $ echo 1 > /proc/sys/net/netfilter/nf_conntrack_acct has been issued before starting natlog. [1338987414.52626 ] [NEW] tcp 6 120 SYN_SENT src=192.168.1.4 dst=129.125.14.80 sport=59783 dport=22 [UNREPLIED] src=129.125.14.80 dst=129.125.100.246 sport=22 dport=59783 [1387190223.487711] [DESTROY] tcp 6 src=192.168.17.21 dst=192.87.23.111 sport=50029 dport=443 packets=7 bytes=450 <-- maybe src=192.87.23.111 dst=129.125.100.246 sport=443 dport=50029 packets=5 bytes=1679 <-- maybe [ASSURED] [1515751941.057688] [NEW] tcp 6 120 SYN_SENT src=192.168.17.6 dst=129.125.3.162 sport=49590 dport=22 [UNREPLIED] src=129.125.3.162 dst=192.168.8.17 sport=22 dport=49590 [1515752071.886964] [DESTROY] tcp 6 src=192.168.17.6 dst=129.125.3.162 sport=49590 dport=22 packets=29 bytes=4840 src=129.125.3.162 dst=192.168.8.17 sport=22 dport=49590 packets=30 bytes=5132 [ASSURED] With conntrack records the source port and unique port combinations (1st line) are unique and are used as the key. ------------------------------------------------------------------------------- [1387190207.172139] [NEW] udp 17 30 src=10.4.0.6 dst=129.125.4.6 sport=42998 dport=53 [UNREPLIED] src=129.125.4.6 dst=129.125.100.246 sport=53 dport=42998 [1387190187.423829] [DESTROY] udp 17 src=10.4.0.6 dst=216.239.34.10 sport=60840 dport=53 packets=1 bytes=138 <-- maybe src=216.239.34.10 dst=129.125.100.246 sport=53 dport=60840 packets=1 bytes=524 <-- maybe Note that the tcp and udp lines are identically organized With conntrack records the source port and unique port combinations (1st line) are unique and are used as the key. ------------------------------------------------------------------------------- [1387190207.153486] [NEW] icmp 1 30 src=192.168.17.7 dst=129.125.3.162 type=8 code=0 id=7016 [UNREPLIED] src=129.125.3.162 dst=129.125.100.246 type=0 code=0 id=7016 [1387190237.151720] [DESTROY] icmp 1 src=192.168.17.7 dst=129.125.3.162 type=8 code=0 id=7016 packets=1 bytes=84 <-- maybe src=129.125.3.162 dst=129.125.100.246 type=0 code=0 id=7016 packets=1 bytes=84 <-- maybe With conntrack records the IDs are unique and are used as the key. ------------------------------------------------------------------------------- natlog-2.00.00/documentation/README.tcpdump0000644000175000017500000002025713236662052017340 0ustar frankfrankhttp://www.kroosec.com/2012/10/a-look-at-pcap-file-format.html Hani's blog Software/Security Engineering, Linux, Open Source and /dev/random Saturday, October 13, 2012 A look at the pcap file format A couple of days ago, someone came on #Nmap IRC channel asking about pcap file format. He was writing a parser in Haskell but had some issues, especially with extracting the timestamp values of the each packet. As I walked him through the file format, I decided to write this blog post as a quick reference, a reminder, or a clearer explanation depending on who is reading it. While detailing the file format, we will have a closer look at this capture file. A pcap file is structured in this way: Global Header | Header1 | Data1 | Header2 | Data2 | ... | HeaderN | DataN The parts in blue are added by libpcap/capture software, while the parts in red are the actual data captured on the wire. The first part of the file is the global header, which is inserted only once in the file, at the start. The global header has a fixed size of 24 bytes. kroosec@dojo:~$ hexdump -n 24 -C connection\ termination.cap | cut -c 11-59 d4 c3 b2 a1 02 00 04 00 00 00 00 00 00 00 00 00 ff ff 00 00 01 00 00 00 The first 4 bytes d4 c3 b2 a1 constitute the magic number which is used to identify pcap files. The next 4 bytes 02 00 04 00 are the Major version (2 bytes) and Minor Version (2 bytes), in our case 2.4. Why is 2 written on 2 bytes as 0x0200 and not 0x0002 ? This is called little endianess in which, the least significant byte is stored in the least significant position: This means that 2 would be written on 2 bytes as 02 00. How do we know that we are not using Big Endianness instead ? The magic number is also used to distinguish between Little and Big Endianness. The "real" value is 0xa1b2c3d4, if we read it as as a1 b2 c3 d4, it means Big E. Otherwise (0xd4c3b2a1), it means Little E. Following are the GMT timezone offset minus the timezone used in the headers in seconds (4 bytes) and the accuracy of the timestamps in the capture (4 bytes). These are set to 0 most of the time which gives us the 00 00 00 00 00 00 00 00. Next is the Snapshot Length field (4 bytes) which indicates the maximum length of the captured packets (dataX) in bytes. In our file it is set to ff ff 00 00 which equals to 65535 (0xffff), the default value for tcpdump and wireshark. The last 4 bytes in the global header specify the Link-Layer Header Type. Our file has the value of 0x1 ( 01 00 00 00 ), which indicates that the link-layer protocol is Ethernet. There are many other types such as PPPoE, USB, Frame Relay etc,. The complete list is available here. After the Global header, we have a certain number of packet header / data pairs. Taking a closer look at the first packet header: kroosec@dojo:~$ hexdump -C connection\ termination.cap -s 24 -n 16 | cut -c 11-59 c2 ba cd 4f b6 35 0f 00 36 00 00 00 36 00 00 00 The first 4 bytes are the timestamp in Seconds. This is the number of seconds since the start of 1970, also known as Unix Epoch. The value of this field in our pcap file is 0x4fcdbac2. An easy way to convert it to a human readable format: kroosec@dojo:~$ calc 0x4fcdbac2 1338882754 kroosec@dojo:~$ date --date='1970-01-01 1338882754 sec GMT' Tue Jun 5 08:52:34 CET 2012 FBB: Note that the time stamps are already in host by order. The second field (4 Bytes) is the microseconds part of the time at which the packet was captured. In our case it equals to b6 35 0f 00 or 996790 microseconds. FBB:: Note that size(pcap_pkthdr) is/can be 24. struct timeval holds at least time_t tv_sec seconds suseconds_t tv_usec microseconds where time_t is a signed int, 32 or 64 bits long, and suseconds_t probably of the same type. Also, the values written to the binary file are in host byte order. The third field is 4 bytes long and contains the size of the saved packet data in our file in bytes (the part in red following the header). The Fourth field is 4 bytes long too and contains the length of the packet as it was captured on the wire. Both fields' value is 36 00 00 00 (54 Bytes) in our file but these may have different values in cases where we set the maximum packet length (whose value is 65535 in the global header of our file) to a smaller size. After the packet header comes the data! Starting from the lower layer we see the Ethernet destination address 00:12:cf:e5:54:a0 followed by the source address 00:1f:3c:23:db:d3. To sum it up here is our file. kroosec@dojo:~$ hexdump -C connection\ termination.cap | cut -c 11-59 global header: d4 c3 b2 a1 02 00 04 00 00 00 00 00 00 00 00 00 ff ff 00 00 01 00 00 00 packet hdr: c2 ba cd 4f b6 35 0f 00 36 00 00 00 36 00 00 00 |<--------- 0x36 bytes beyond the next packet starts data: Ethernet_Header: destmac: 00 12 cf e5 54 a0 srcmac: 00 1f 3c 23 db d3 ethertype: 08 00 IP_Header: hdrLength,version: 45 tos 00 |<--------- 0x10 length: 00 28 0x28 bytes beyond the IP header's begin the next packet starts ident: 4a a6 fragmentOffset: 40 00 TTL: 40 protocol: 06 (TCP) checksum: 58 eb sourceaddr: c0 a8 0a e2 |<-- 0x10 (wrt IP_Header) destaddr: c0 a8 0b 0c |<--------- 0x20 TCP_Header: src port: 4c fb dst port: 00 17 sequence: e7 ca f8 58 ackNr: 26 13 45 de |<-- 0x20 (wrt IP_Header) data offset 50 flags: 11 |<--------- 0x30 window: 40 c7 checksum: 3e a6 urgentPtr: 00 00 packet hdr: c3 ba cd 4f 60 04 00 00 3c 00 00 00 3c 00 00 00 00 data: 1f 3c 23 db d3 00 12 cf e5 54 a0 08 00 45 00 00 28 8a f7 00 00 40 06 58 9a c0 a8 0b 0c c0 a8 0a e2 00 17 4c fb 26 13 45 de e7 ca f8 59 50 10 01 df 7d 8e 00 00 00 00 00 00 00 00 packet hdr: c3 ba cd 4f 70 2f 00 00 3c 00 00 00 3c 00 00 00 data: 00 1f 3c 23 db d3 00 12 cf e5 54 a0 08 00 45 00 00 28 26 f9 00 00 40 06 bc 98 c0 a8 0b 0c c0 a8 0a e2 00 17 4c fb 26 13 45 de e7 ca f8 59 50 11 01 df 7d 8d 00 00 00 00 00 00 00 00 packet hdr: c3 ba cd 4f db 2f 00 00 36 00 00 00 36 00 00 00 data: 00 12 cf e5 54 a0 00 1f 3c 23 db d3 08 00 45 00 00 28 4a a7 40 00 40 06 58 ea c0 a8 0a e2 c0 a8 0b 0c 4c fb 00 17 e7 ca f8 59 26 13 45 df 50 10 40 c7 3e a5 00 00 And here is what the file utility thinks of it kroosec@dojo:~$ type file file is /usr/bin/file kroosec@dojo:~$ file connection\ termination.cap connection termination.cap: tcpdump capture file (little-endian) - version 2.4 (Ethernet, capture length 65535) A hexdump of a file written by tcpdump is in the file br0.hex in the current directory. natlog-2.00.00/etc/0000755000175000017500000000000013236662052012701 5ustar frankfranknatlog-2.00.00/etc/natlog.conf0000644000175000017500000000344613236662052015043 0ustar frankfrank# This configuration file shows the default option values. # all options and values are case sensitive # see `man natlog' for further details # the path and options of the conntrack program: # when no filtering options are specified, the tcp # protocol is monitored # the default command is shown: #conntrack-command: /usr/sbin/conntrack -p tcp -E -n -o timestamp \ -e NEW,DESTROY" # the device used by conntrack #conntrack-device: /proc/net/nf_conntrack # correction for the IP header size # (standard IP header size is 20 bytes) #conntrack-ip-header-size: 0 # max. number of conntrack restarts #conntrack-restart: 10 # data file for tabular logs (specify path, default: # data file is not used) #log-data: # flush the log-data file after writing log-data-flush lines #log-data-flush: 32 # do not run as a daemon (by default: natlog runs as a daemon) #no-daemon # do not write messages handled by syslog #no-syslog # the path to the pid-file of natlog's daemon process #pid-file: /run/natlog.pid # the protocols that are scanned with the 'conntrack' command: # protocol: all - monitors tcp, udp, icmp # protocol: udp:tcp - monitors upd and tcp (any non-empty subset, # possibly including icmp is OK) # ignored when conntrack-command is specified #protocol: tcp # write messages to stdout (ignored by daemons) #stdout # the default syslog facility: #syslog-facility: DAEMON # the default syslog priority: #syslog-priority: NOTICE # the default syslog tag: #syslog-tag: NATLOG # the time specification: #time: raw # ttl: time to live (seconds) for udp/icmp connections #ttl: 60 # end of the configuration file natlog-2.00.00/icmake/0000755000175000017500000000000013235103631013347 5ustar frankfranknatlog-2.00.00/icmake/setopt0000644000175000017500000000034113226660045014615 0ustar frankfrankstring setOpt(string install_im, string envvar) { list optvar; string ret; optvar = getenv(envvar); if (optvar[0] == "1") ret = optvar[1]; else ret = install_im; return ret; } natlog-2.00.00/icmake/manpage0000644000175000017500000000045513226660045014715 0ustar frankfrank#define MANPAGE "../../tmp/man/" ${PROGRAM} ".1" #define MANHTML "../../tmp/manhtml/" ${PROGRAM} "man.html" void manpage() { md("tmp/man tmp/manhtml"); chdir("documentation/man"); run("yodl2man -o " MANPAGE " " PROGRAM); run("yodl2html -o " MANHTML " " PROGRAM); exit(0); } natlog-2.00.00/icmake/findall0000644000175000017500000000107413226660045014714 0ustar frankfrank// assuming we're in g_cwd, all entries of type 'type' matching source/pattern // are returned w/o final \n list findAll(string type, string source, string pattern) { string cmd; list entries; list ret; int idx; chdir(source); cmd = "find ./ -mindepth 1 -maxdepth 1 -type " + type; if (pattern != "") pattern = "-name '" + pattern + "'"; entries = backtick(cmd + " " + pattern + " -printf \"%f\\n\""); for (idx = listlen(entries); idx--; ) ret += (list)cutEoln(entries[idx]); chdir(g_cwd); return ret; } natlog-2.00.00/icmake/log0000755000175000017500000000063213226660045014066 0ustar frankfrank#!/bin/bash find tmp/install -type f -exec md5sum "{}" \; | sed 's|tmp/install|'$1'|' > $2 find tmp/install -type l -exec printf "link %s\n" "{}" \; | sed 's|tmp/install|'$1'|' >> $2 find tmp/install -type d -exec printf "dir %s\n" "{}" \; | sed 's|tmp/install|'$1'|' >> $2 natlog-2.00.00/icmake/pathfile0000644000175000017500000000055213226660045015077 0ustar frankfranklist path_file(string path) { list ret; int len; int idx; for (len = strlen(path), idx = len; idx--; ) { if (path[idx] == "/") { ret = (list)substr(path, 0, idx) + (list)substr(path, idx + 1, len); return ret; } } ret = (list)"" + (list)path; return ret; } natlog-2.00.00/icmake/clean0000644000175000017500000000107513226660045014366 0ustar frankfrankvoid clean(int dist) { run("rm -rf " "build-stamp configure-stamp " "options/SKEL " "tmp/*.o" + " o */o release.yo tmp/lib*.a " "parser/grammar.output" ); if (dist) run("rm -rf tmp *.ih.gch */*.ih.gch"); chdir("documentation"); run("rm -rf " "man/*.1 " "man/*.3* " "man/*.html " "manual/*.html " "manual/invoking/usage " "manual/invoking/usage.txt " "usage/usage " ); exit(0); } natlog-2.00.00/icmake/uninstall0000644000175000017500000000045613226660045015317 0ustar frankfrankvoid uninstall(string logfile) { int idx; list entry; string dir; list line; if (!exists(logfile)) { printf("installation log file " + logfile + " not found\n"); exit(0); } run("icmake/remove " + logfile + " " + (string)g_echo); exit(0); } natlog-2.00.00/icmake/cuteoln0000644000175000017500000000023313226660045014750 0ustar frankfrankstring cutEoln(string text) { int len; len = strlen(text) - 1; if (text[len] == "\n") text = substr(text, 0, len); return text; } natlog-2.00.00/icmake/run0000644000175000017500000000015113226660045014102 0ustar frankfrankvoid run(string cmd) { if (g_echo == OFF) cmd += "> /dev/null 2>&1"; system(0, cmd); } natlog-2.00.00/icmake/github0000644000175000017500000000022213226660045014557 0ustar frankfrankvoid github() { run("cp -r release.yo tmp/manhtml/natlogman.html ../../wip"); run("cp changelog ../../wip/changelog.txt"); exit(0); } natlog-2.00.00/icmake/md0000644000175000017500000000074013226660045013702 0ustar frankfrank// md: target should be a series of blank-delimited directories to be created // If an element is a whildcard, the directory will always be created, // using mkdir -p. // // uses: run() void md(string target) { int idx; list paths; string dir; if (!exists(target)) run("mkdir -p " + target); else if (((int)stat(target)[0] & S_IFDIR) == 0) { printf(target + " exists, but is not a directory\n"); exit(1); } } natlog-2.00.00/icmake/remove0000755000175000017500000000117013226660045014600 0ustar frankfrank#!/bin/bash g_echo=$2 rm_f() { [ $g_echo -ne 0 ] && echo rm $1 rm -f $1 } rm_dir() { [ $g_echo -ne 0 ] && echo rmdir $1 rmdir --ignore-fail-on-non-empty -p $1 } IFS=" " for line in `cat $1` do field1=`echo $line | awk '{printf $1}'` field2=`echo $line | awk '{printf $2}'` if [ $field1 == "link" ] ; then rm_f $field2 elif [ $field1 == "dir" ] ; then rm_dir $field2 elif [ -e "$field2" ] ; then if [ "$field1" != "`md5sum $field2 | awk '{printf $1}'`" ] ; then echo $field2 changed, not removed else rm_f $field2 fi fi done rm_f $1 natlog-2.00.00/icmake/precompileheaders0000644000175000017500000000133613226660045016777 0ustar frankfrankstring g_compiler; int g_gch = 1; void _precompile(string class) { string classIH; classIH = class + ".ih"; if (classIH younger class + ".ih.gch") run(g_compiler + " -x c++-header " + classIH); } void precompileHeaders() { int idx; list classes; string class; if (!g_gch) return; classes = makelist(O_SUBDIR, "*"); g_compiler = setOpt(CXX, "CXX") + " " + setOpt(CXXFLAGS, "CXXFLAGS") + " "; _precompile("main"); // precompile the main program .ih file for (idx = listlen(classes); idx--; ) { class = classes[idx]; chdir(class); _precompile(class); chdir(g_cwd); } } natlog-2.00.00/icmake/backtick0000644000175000017500000000016013226660045015051 0ustar frankfranklist backtick(string arg) { list ret; echo(OFF); ret = `arg`; echo(g_echo); return ret; } natlog-2.00.00/icmake/install0000644000175000017500000000317213226660045014752 0ustar frankfrank void install(string request, string dest) { string target; int components = 0; list pathsplit; string base; base = "tmp/install/"; md(base); if (request == "x") components = 63; else { if (strfind(request, "b") != -1) components |= 2; if (strfind(request, "d") != -1) components |= 4; if (strfind(request, "m") != -1) components |= 8; } if (components & 2) { target = base + BINARY; pathsplit = path_file(target); printf(" installing the executable `", target, "'\n"); logFile("tmp/bin", "binary", pathsplit[0], pathsplit[1]); } if (components & (4 | 8)) { target = base + DOC "/"; if (components & 4) { printf(" installing the changelog at `", target, "\n"); logZip("", "changelog", target ); } if (components & 8) { printf(" installing the html-manual page at `", target, "\n"); logInstall("tmp/manhtml", "", target); } } if (components & 8) { target = base + MAN "/"; printf(" installing the manual page below `", target, "'\n"); logZip("tmp/man", "natlog.1", target); } chdir(g_cwd); if (dest == "") dest = "/"; else md(dest); dest = cutEoln(backtick("realpath " + dest)[0]); if (g_logPath != "") backtick("icmake/log " + dest + " " + g_logPath); run("tar cf - -Ctmp/install . | tar xf - -C" + dest); printf("\n Installation completed\n"); exit(0); } natlog-2.00.00/icmake/logfile0000644000175000017500000000025713226660045014726 0ustar frankfrankvoid logFile(string srcdir, string src, string destdir, string dest) { chdir(g_cwd); md(destdir); run("cp " + srcdir + "/" + src + " " + destdir + "/" + dest); } natlog-2.00.00/icmake/loginstall0000644000175000017500000000156513226660045015460 0ustar frankfrank// source and dest, absolute or reachable from g_cwd, should exist. // files and links in source matching dest (if empty: all) are copied to dest // and are logged in g_log // Before they are logged, dest is created void logInstall(string src, string pattern, string dest) { list entries; int idx; chdir(g_cwd); md(dest); src += "/"; dest += "/"; if (listlen(makelist(O_DIR, src)) == 0) { printf("Warning: ", src, " not found: can't install ", src, pattern, " at ", dest, "\n"); return; } entries = findAll("f", src, pattern); for (idx = listlen(entries); idx--; ) run("cp " + src + entries[idx] + " " + dest); chdir(g_cwd); entries = findAll("l", src, pattern); for (idx = listlen(entries); idx--; ) run("cp " CPOPTS " " + src + entries[idx] + " " + dest); } natlog-2.00.00/icmake/special0000644000175000017500000000042113226660045014716 0ustar frankfrankvoid special() { if (! exists("release.yo") || "VERSION" newer "release.yo") { system("touch version.cc"); run("gcc -E VERSION.h | grep -v '#' | sed 's/\\\"//g' > " "release.yo"); } } natlog-2.00.00/icmake/logzip0000644000175000017500000000165613226660045014615 0ustar frankfrank// names may be a series of files in src, not a wildcard. // if it's empty then all files in src are used. // the files are gzipped and logged in dest. // src and dest do not have to end in / void logZip(string src, string names, string dest) { list files; int idx; string file; chdir(g_cwd); md(dest); dest += "/"; if (src != "") { if (listlen(makelist(O_DIR, src)) == 0) { printf("Warning: ", src, " not found: can't install ", src, names, " at ", dest, "\n"); return; } chdir(src); } if (names == "") files = makelist("*"); else files = strtok(names, " "); for (idx = listlen(files); idx--; ) { file = files[idx]; run("gzip -n -9 < " + file + " > " + file + ".gz"); } run("tar cf - *.gz | (cd " + g_cwd + "; cd " + dest + "; tar xf -)"); run("rm *.gz"); } natlog-2.00.00/icmconf0000644000175000017500000000110613231663047013465 0ustar frankfrank#include "INSTALL.im" // For more information about this file: 'man 7 icmconf' #define MAIN "main.cc" #define REFRESH #define LIBRARY "modules" #define SHAREDREQ "" #define SOURCES "*.cc" #define ADD_LIBRARIES "bobcat pcap" #define ADD_LIBRARY_PATHS "" #define USE_ECHO ON #define TMP_DIR "tmp" #define OBJ_EXT ".o" #define USE_VERSION #define USE_ALL "a" #define IH ".ih" #define PRECOMP "-x c++-header" #define DEFCOM "program" natlog-2.00.00/INSTALL0000644000175000017500000000750313226656470013172 0ustar frankfrankTo install natlog by hand instead of using a binary distribution perform the following steps: 0. natlog and its construction depends, in addition to the normally standard available system software on specific software and versions which is documented in the file `required'. (If you compile the bobcat library yourself, note that natlog does not use the SSL, Milter and Xpointer classes; they may --as far as natlog is concerned-- be left out of the library by running './build light') 1. It is expected you use icmake for the package construction. For this a top-level script (build) and support scripts in the ./icmake/ directory are available. By default, the 'build' script echoes the commands it executes to the standard output stream. By specifying the option -q (e.g., ./build -q ...) this is prevented, significantly reducing the output generated by 'build'. 2. Inspect the values of the variables in the file INSTALL.im Modify these when necessary. 3. Run ./build program [strip] to compile natlog. The argument `strip' is optional and strips symbolic information from the final executable. 4. If you installed Yodl then you can create the documentation: ./build man builds the man-page. 5. Before installing the components of natlog, consider defining the environment variable NATLOG, defining its value as the (preferably absolute) filename of a file on which installed files and directories are logged. Defining the NATLOG environment variable as ~/.natlog usually works well. 6. Run (probably as root) ./build install 'what' 'base' to install. Here, 'what' specifies what you want to install. Specify: x, to install all components, or specify a combination of: b (binary program), d (standard documentation), m (man-pages) E.g., use ./build install bm 'base' if you only want to be able to run natlog, and want its man-page to be installed below 'base'. ./build install's last argument 'base' is optional: the base directory below which the requested files are installed. This base directory is prepended to the paths #defined in the INSTALL.im file. If 'base' is not specified, then INSTALL.im's #defined paths are used as-is. When requesting non-existing elements (e.g., './build install x' was requested, but the man-pages weren't constructed) then these non-existing elements are silently ignored by the installation process. If the environment variable NATLOG was defined when issuing the `./build install ...' command then a log of all installed files is written to the file indicated by the NATLOG environment variable (see also the next item). Defining the NATLOG environment variable as ~/.natlog usually works well. 7. Uninstalling previously installed components of natlog is easy if the environment variable NATLOG was defined before issuing the `./build install ...' command. In that case, run the command ./build uninstall logfile where 'logfile' is the file that was written by ./build install. Modified files and non-empty directories are not removed, but the logfile itself is removed following the uninstallation. 8. Following the installation nothing in the directory tree which contains this file (i.e., INSTALL) is required for the proper functioning of natlog, so consider removing it. If you only want to remove left-over files from the build-process, just run ./build distclean natlog-2.00.00/INSTALL.im0000644000175000017500000000356113230615456013570 0ustar frankfrank // The name of the program and the support directories as installed by // the 'build install' command. Normally there is no reason for changing // this #define #define PROGRAM "natlog" // The CXX, CXXFLAGS, and LDFLAGS #defines are overruled by identically // named environment variables: // the compiler to use. #define CXX "g++" // the compiler options to use. #define CXXFLAGS "--std=c++17 -Wall -O2 -pthread -fdiagnostics-color=never" // flags passed to the linker #define LDFLAGS "" // The following /bin/cp option is used to keep, rather than follow // symbolic references. If your installation doesn't support these flags, // then change them into available ones. // -P, --no-dereference // never follow symbolic links in SOURCE // --preserve[=ATTR_LIST] // preserve the specified attributes (default: // mode,ownership,timestamps), if possible additional // attributes: context, links, all // -d same as --no-dereference --preserve=links #define CPOPTS "-d" // COMPONENTS TO INSTALL // ===================== // For an operational non-Debian installation, you probably must be // `root'. // If necessary, adapt DOC, HDR, LIB and MAN (below) to your situation. // The provided locations are used by Debian Linux. // With 'build install' you can dynamically specify a location to prepend // to the locations configured here, and select which components you want // to install // ONLY USE ABSOLUTE DIRECTORY NAMES: // the final program #define BINARY "/usr/bin/"${PROGRAM} // the directory where the standard documentation is stored #define DOC "/usr/share/doc/"${PROGRAM} // the directory whre the manual page is stored #define MAN "/usr/share/man/man1" natlog-2.00.00/iptypes/0000755000175000017500000000000013236662052013623 5ustar frankfranknatlog-2.00.00/iptypes/iptypes.h0000644000175000017500000001125013236662052015470 0ustar frankfrank#ifndef INCLUDED_IPSTRUCTS_ #define INCLUDED_IPSTRUCTS_ #include // struct ifaddrs { // struct ifaddrs *ifa_next; /* Next item in list */ // char *ifa_name; /* Name of interface */ // unsigned int ifa_flags; /* Flags from SIOCGIFFLAGS */ // struct sockaddr *ifa_addr; /* Address of interface */ // struct sockaddr *ifa_netmask; /* Netmask of interface */ // union { // struct sockaddr *ifu_broadaddr; // /* Broadcast address of interface */ // struct sockaddr *ifu_dstaddr; // /* Point-to-point destination address */ // }; // #define ifa_broadaddr ifa_ifu.ifu_broadaddr // #define ifa_dstaddr ifa_ifu.ifu_dstaddr // void *ifa_data; /* Address-specific data */ // }; // // struct sockaddr { // unsigned short sa_family; // address family, AF_xxx // char sa_data[14]; // 14 bytes of protocol address // }; // // // // IPv4 AF_INET sockets: // // struct sockaddr_in { // short sin_family; // e.g. AF_INET, AF_INET6 // unsigned short sin_port; // e.g. htons(3490) // struct in_addr sin_addr; // see struct in_addr, below // char sin_zero[8]; // zero this if you want to // }; // // typedef uint32_t in_addr_t; // // struct in_addr { // uint32_t s_addr; // load with inet_aton() // }; struct IP_Types { enum Protocol // update record/protocolstr.cc when modified { ICMP = 1, TCP = 6, UDP = 17 }; enum TCP_Flags { FIN = 0x01, SYN = 0x02, RST = 0x04, PUSH = 0x08, ACK = 0x10, URG = 0x20, ECE = 0x40, CWR = 0x80, TCP_Flags_MASK = (CWR << 1) - 1 }; enum class IP_Fragment { RESERVED = 0x8000, DONT_FRAGMENT = 0x4000, MORE_FRAGMENTS = 0x2000, MASK = 0x1fff }; struct Ethernet_Header // http://en.wikipedia.org/wiki/EtherType { u_char destMac[6]; // Destination host MAC address u_char srcMac[6]; // Source host MAC address u_short ether_type; // IP? ARP? RARP? etc }; struct IP_Header { u_char hdrLength:4, // in 4-byte words version:4; u_char tos; // type of service u_short length; // total length u_short identification; u_short fragmentOffset; u_char timeToLive; u_char protocol; u_short checkSum; struct in_addr sourceAddr; struct in_addr destAddr; }; struct TCP_Header { u_short sourcePort; u_short destPort; uint32_t sequenceNr; uint32_t ackNumber; u_char dataOffset; // data offset, // (((th)->th_offx2 & 0xf0) >> 4) u_char flags; u_short window; u_short checkSum; u_short urgentPtr; }; struct UDP_Header // udp header length: 8 bytes { u_short sourcePort; u_short destPort; u_short length; u_short checkSum; }; struct ICMP_Header { u_char type; u_char code; u_short chksum; u_short ident; u_short seqnum; }; // icmp header length: 8 bytes enum Offsets // offsets to the various headers { // the Ethernet header starts at `d_packet' ETHER_OFFSET = 0, IP_OFFSET = ETHER_OFFSET + sizeof(Ethernet_Header), TCP_OFFSET = IP_OFFSET + sizeof(IP_Header), UDP_OFFSET = TCP_OFFSET, ICMP_OFFSET = TCP_OFFSET, }; enum SizeofTCPheader { SIZEOF_ETHERNET_HEADER = IP_OFFSET, }; template static Type const &get(u_char const *packet); }; //static template <> inline IP_Types::IP_Header const &IP_Types::get(u_char const *packet) { return *reinterpret_cast(packet + IP_OFFSET); } //static template <> inline IP_Types::TCP_Header const &IP_Types::get(u_char const *packet) { return *reinterpret_cast(packet + TCP_OFFSET); } //static template <> inline IP_Types::UDP_Header const &IP_Types::get(u_char const *packet) { return *reinterpret_cast(packet + UDP_OFFSET); } //static template <> inline IP_Types::ICMP_Header const &IP_Types::get(u_char const *packet) { return *reinterpret_cast(packet + ICMP_OFFSET); } #endif natlog-2.00.00/LICENSE0000644000175000017500000010451313237114312013127 0ustar frankfrank GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright (C) 2007 Free Software Foundation, Inc. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The GNU General Public License is a free, copyleft license for software and other kinds of works. The licenses for most software and other practical works are designed to take away your freedom to share and change the works. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change all versions of a program--to make sure it remains free software for all its users. We, the Free Software Foundation, use the GNU General Public License for most of our software; it applies also to any other work released this way by its authors. You can apply it to your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for them if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs, and that you know you can do these things. To protect your rights, we need to prevent others from denying you these rights or asking you to surrender the rights. Therefore, you have certain responsibilities if you distribute copies of the software, or if you modify it: responsibilities to respect the freedom of others. For example, if you distribute copies of such a program, whether gratis or for a fee, you must pass on to the recipients the same freedoms that you received. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. Developers that use the GNU GPL protect your rights with two steps: (1) assert copyright on the software, and (2) offer you this License giving you legal permission to copy, distribute and/or modify it. For the developers' and authors' protection, the GPL clearly explains that there is no warranty for this free software. For both users' and authors' sake, the GPL requires that modified versions be marked as changed, so that their problems will not be attributed erroneously to authors of previous versions. Some devices are designed to deny users access to install or run modified versions of the software inside them, although the manufacturer can do so. This is fundamentally incompatible with the aim of protecting users' freedom to change the software. The systematic pattern of such abuse occurs in the area of products for individuals to use, which is precisely where it is most unacceptable. Therefore, we have designed this version of the GPL to prohibit the practice for those products. If such problems arise substantially in other domains, we stand ready to extend this provision to those domains in future versions of the GPL, as needed to protect the freedom of users. Finally, every program is threatened constantly by software patents. States should not allow patents to restrict development and use of software on general-purpose computers, but in those that do, we wish to avoid the special danger that patents applied to a free program could make it effectively proprietary. To prevent this, the GPL assures that patents cannot be used to render the program non-free. The precise terms and conditions for copying, distribution and modification follow. TERMS AND CONDITIONS 0. Definitions. "This License" refers to version 3 of the GNU General Public License. "Copyright" also means copyright-like laws that apply to other kinds of works, such as semiconductor masks. "The Program" refers to any copyrightable work licensed under this License. Each licensee is addressed as "you". "Licensees" and "recipients" may be individuals or organizations. To "modify" a work means to copy from or adapt all or part of the work in a fashion requiring copyright permission, other than the making of an exact copy. The resulting work is called a "modified version" of the earlier work or a work "based on" the earlier work. A "covered work" means either the unmodified Program or a work based on the Program. To "propagate" a work means to do anything with it that, without permission, would make you directly or secondarily liable for infringement under applicable copyright law, except executing it on a computer or modifying a private copy. Propagation includes copying, distribution (with or without modification), making available to the public, and in some countries other activities as well. To "convey" a work means any kind of propagation that enables other parties to make or receive copies. Mere interaction with a user through a computer network, with no transfer of a copy, is not conveying. An interactive user interface displays "Appropriate Legal Notices" to the extent that it includes a convenient and prominently visible feature that (1) displays an appropriate copyright notice, and (2) tells the user that there is no warranty for the work (except to the extent that warranties are provided), that licensees may convey the work under this License, and how to view a copy of this License. If the interface presents a list of user commands or options, such as a menu, a prominent item in the list meets this criterion. 1. Source Code. The "source code" for a work means the preferred form of the work for making modifications to it. "Object code" means any non-source form of a work. A "Standard Interface" means an interface that either is an official standard defined by a recognized standards body, or, in the case of interfaces specified for a particular programming language, one that is widely used among developers working in that language. The "System Libraries" of an executable work include anything, other than the work as a whole, that (a) is included in the normal form of packaging a Major Component, but which is not part of that Major Component, and (b) serves only to enable use of the work with that Major Component, or to implement a Standard Interface for which an implementation is available to the public in source code form. A "Major Component", in this context, means a major essential component (kernel, window system, and so on) of the specific operating system (if any) on which the executable work runs, or a compiler used to produce the work, or an object code interpreter used to run it. The "Corresponding Source" for a work in object code form means all the source code needed to generate, install, and (for an executable work) run the object code and to modify the work, including scripts to control those activities. However, it does not include the work's System Libraries, or general-purpose tools or generally available free programs which are used unmodified in performing those activities but which are not part of the work. For example, Corresponding Source includes interface definition files associated with source files for the work, and the source code for shared libraries and dynamically linked subprograms that the work is specifically designed to require, such as by intimate data communication or control flow between those subprograms and other parts of the work. The Corresponding Source need not include anything that users can regenerate automatically from other parts of the Corresponding Source. The Corresponding Source for a work in source code form is that same work. 2. Basic Permissions. All rights granted under this License are granted for the term of copyright on the Program, and are irrevocable provided the stated conditions are met. This License explicitly affirms your unlimited permission to run the unmodified Program. The output from running a covered work is covered by this License only if the output, given its content, constitutes a covered work. This License acknowledges your rights of fair use or other equivalent, as provided by copyright law. You may make, run and propagate covered works that you do not convey, without conditions so long as your license otherwise remains in force. You may convey covered works to others for the sole purpose of having them make modifications exclusively for you, or provide you with facilities for running those works, provided that you comply with the terms of this License in conveying all material for which you do not control copyright. Those thus making or running the covered works for you must do so exclusively on your behalf, under your direction and control, on terms that prohibit them from making any copies of your copyrighted material outside their relationship with you. Conveying under any other circumstances is permitted solely under the conditions stated below. Sublicensing is not allowed; section 10 makes it unnecessary. 3. Protecting Users' Legal Rights From Anti-Circumvention Law. No covered work shall be deemed part of an effective technological measure under any applicable law fulfilling obligations under article 11 of the WIPO copyright treaty adopted on 20 December 1996, or similar laws prohibiting or restricting circumvention of such measures. When you convey a covered work, you waive any legal power to forbid circumvention of technological measures to the extent such circumvention is effected by exercising rights under this License with respect to the covered work, and you disclaim any intention to limit operation or modification of the work as a means of enforcing, against the work's users, your or third parties' legal rights to forbid circumvention of technological measures. 4. Conveying Verbatim Copies. You may convey verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice; keep intact all notices stating that this License and any non-permissive terms added in accord with section 7 apply to the code; keep intact all notices of the absence of any warranty; and give all recipients a copy of this License along with the Program. You may charge any price or no price for each copy that you convey, and you may offer support or warranty protection for a fee. 5. Conveying Modified Source Versions. You may convey a work based on the Program, or the modifications to produce it from the Program, in the form of source code under the terms of section 4, provided that you also meet all of these conditions: a) The work must carry prominent notices stating that you modified it, and giving a relevant date. b) The work must carry prominent notices stating that it is released under this License and any conditions added under section 7. This requirement modifies the requirement in section 4 to "keep intact all notices". c) You must license the entire work, as a whole, under this License to anyone who comes into possession of a copy. This License will therefore apply, along with any applicable section 7 additional terms, to the whole of the work, and all its parts, regardless of how they are packaged. This License gives no permission to license the work in any other way, but it does not invalidate such permission if you have separately received it. d) If the work has interactive user interfaces, each must display Appropriate Legal Notices; however, if the Program has interactive interfaces that do not display Appropriate Legal Notices, your work need not make them do so. A compilation of a covered work with other separate and independent works, which are not by their nature extensions of the covered work, and which are not combined with it such as to form a larger program, in or on a volume of a storage or distribution medium, is called an "aggregate" if the compilation and its resulting copyright are not used to limit the access or legal rights of the compilation's users beyond what the individual works permit. Inclusion of a covered work in an aggregate does not cause this License to apply to the other parts of the aggregate. 6. Conveying Non-Source Forms. You may convey a covered work in object code form under the terms of sections 4 and 5, provided that you also convey the machine-readable Corresponding Source under the terms of this License, in one of these ways: a) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by the Corresponding Source fixed on a durable physical medium customarily used for software interchange. b) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by a written offer, valid for at least three years and valid for as long as you offer spare parts or customer support for that product model, to give anyone who possesses the object code either (1) a copy of the Corresponding Source for all the software in the product that is covered by this License, on a durable physical medium customarily used for software interchange, for a price no more than your reasonable cost of physically performing this conveying of source, or (2) access to copy the Corresponding Source from a network server at no charge. c) Convey individual copies of the object code with a copy of the written offer to provide the Corresponding Source. This alternative is allowed only occasionally and noncommercially, and only if you received the object code with such an offer, in accord with subsection 6b. d) Convey the object code by offering access from a designated place (gratis or for a charge), and offer equivalent access to the Corresponding Source in the same way through the same place at no further charge. You need not require recipients to copy the Corresponding Source along with the object code. If the place to copy the object code is a network server, the Corresponding Source may be on a different server (operated by you or a third party) that supports equivalent copying facilities, provided you maintain clear directions next to the object code saying where to find the Corresponding Source. Regardless of what server hosts the Corresponding Source, you remain obligated to ensure that it is available for as long as needed to satisfy these requirements. e) Convey the object code using peer-to-peer transmission, provided you inform other peers where the object code and Corresponding Source of the work are being offered to the general public at no charge under subsection 6d. A separable portion of the object code, whose source code is excluded from the Corresponding Source as a System Library, need not be included in conveying the object code work. A "User Product" is either (1) a "consumer product", which means any tangible personal property which is normally used for personal, family, or household purposes, or (2) anything designed or sold for incorporation into a dwelling. In determining whether a product is a consumer product, doubtful cases shall be resolved in favor of coverage. For a particular product received by a particular user, "normally used" refers to a typical or common use of that class of product, regardless of the status of the particular user or of the way in which the particular user actually uses, or expects or is expected to use, the product. A product is a consumer product regardless of whether the product has substantial commercial, industrial or non-consumer uses, unless such uses represent the only significant mode of use of the product. "Installation Information" for a User Product means any methods, procedures, authorization keys, or other information required to install and execute modified versions of a covered work in that User Product from a modified version of its Corresponding Source. The information must suffice to ensure that the continued functioning of the modified object code is in no case prevented or interfered with solely because modification has been made. If you convey an object code work under this section in, or with, or specifically for use in, a User Product, and the conveying occurs as part of a transaction in which the right of possession and use of the User Product is transferred to the recipient in perpetuity or for a fixed term (regardless of how the transaction is characterized), the Corresponding Source conveyed under this section must be accompanied by the Installation Information. But this requirement does not apply if neither you nor any third party retains the ability to install modified object code on the User Product (for example, the work has been installed in ROM). The requirement to provide Installation Information does not include a requirement to continue to provide support service, warranty, or updates for a work that has been modified or installed by the recipient, or for the User Product in which it has been modified or installed. Access to a network may be denied when the modification itself materially and adversely affects the operation of the network or violates the rules and protocols for communication across the network. Corresponding Source conveyed, and Installation Information provided, in accord with this section must be in a format that is publicly documented (and with an implementation available to the public in source code form), and must require no special password or key for unpacking, reading or copying. 7. Additional Terms. "Additional permissions" are terms that supplement the terms of this License by making exceptions from one or more of its conditions. Additional permissions that are applicable to the entire Program shall be treated as though they were included in this License, to the extent that they are valid under applicable law. If additional permissions apply only to part of the Program, that part may be used separately under those permissions, but the entire Program remains governed by this License without regard to the additional permissions. When you convey a copy of a covered work, you may at your option remove any additional permissions from that copy, or from any part of it. (Additional permissions may be written to require their own removal in certain cases when you modify the work.) You may place additional permissions on material, added by you to a covered work, for which you have or can give appropriate copyright permission. Notwithstanding any other provision of this License, for material you add to a covered work, you may (if authorized by the copyright holders of that material) supplement the terms of this License with terms: a) Disclaiming warranty or limiting liability differently from the terms of sections 15 and 16 of this License; or b) Requiring preservation of specified reasonable legal notices or author attributions in that material or in the Appropriate Legal Notices displayed by works containing it; or c) Prohibiting misrepresentation of the origin of that material, or requiring that modified versions of such material be marked in reasonable ways as different from the original version; or d) Limiting the use for publicity purposes of names of licensors or authors of the material; or e) Declining to grant rights under trademark law for use of some trade names, trademarks, or service marks; or f) Requiring indemnification of licensors and authors of that material by anyone who conveys the material (or modified versions of it) with contractual assumptions of liability to the recipient, for any liability that these contractual assumptions directly impose on those licensors and authors. All other non-permissive additional terms are considered "further restrictions" within the meaning of section 10. If the Program as you received it, or any part of it, contains a notice stating that it is governed by this License along with a term that is a further restriction, you may remove that term. If a license document contains a further restriction but permits relicensing or conveying under this License, you may add to a covered work material governed by the terms of that license document, provided that the further restriction does not survive such relicensing or conveying. If you add terms to a covered work in accord with this section, you must place, in the relevant source files, a statement of the additional terms that apply to those files, or a notice indicating where to find the applicable terms. Additional terms, permissive or non-permissive, may be stated in the form of a separately written license, or stated as exceptions; the above requirements apply either way. 8. Termination. You may not propagate or modify a covered work except as expressly provided under this License. Any attempt otherwise to propagate or modify it is void, and will automatically terminate your rights under this License (including any patent licenses granted under the third paragraph of section 11). However, if you cease all violation of this License, then your license from a particular copyright holder is reinstated (a) provisionally, unless and until the copyright holder explicitly and finally terminates your license, and (b) permanently, if the copyright holder fails to notify you of the violation by some reasonable means prior to 60 days after the cessation. Moreover, your license from a particular copyright holder is reinstated permanently if the copyright holder notifies you of the violation by some reasonable means, this is the first time you have received notice of violation of this License (for any work) from that copyright holder, and you cure the violation prior to 30 days after your receipt of the notice. Termination of your rights under this section does not terminate the licenses of parties who have received copies or rights from you under this License. If your rights have been terminated and not permanently reinstated, you do not qualify to receive new licenses for the same material under section 10. 9. Acceptance Not Required for Having Copies. You are not required to accept this License in order to receive or run a copy of the Program. Ancillary propagation of a covered work occurring solely as a consequence of using peer-to-peer transmission to receive a copy likewise does not require acceptance. However, nothing other than this License grants you permission to propagate or modify any covered work. These actions infringe copyright if you do not accept this License. Therefore, by modifying or propagating a covered work, you indicate your acceptance of this License to do so. 10. Automatic Licensing of Downstream Recipients. Each time you convey a covered work, the recipient automatically receives a license from the original licensors, to run, modify and propagate that work, subject to this License. You are not responsible for enforcing compliance by third parties with this License. An "entity transaction" is a transaction transferring control of an organization, or substantially all assets of one, or subdividing an organization, or merging organizations. If propagation of a covered work results from an entity transaction, each party to that transaction who receives a copy of the work also receives whatever licenses to the work the party's predecessor in interest had or could give under the previous paragraph, plus a right to possession of the Corresponding Source of the work from the predecessor in interest, if the predecessor has it or can get it with reasonable efforts. You may not impose any further restrictions on the exercise of the rights granted or affirmed under this License. For example, you may not impose a license fee, royalty, or other charge for exercise of rights granted under this License, and you may not initiate litigation (including a cross-claim or counterclaim in a lawsuit) alleging that any patent claim is infringed by making, using, selling, offering for sale, or importing the Program or any portion of it. 11. Patents. A "contributor" is a copyright holder who authorizes use under this License of the Program or a work on which the Program is based. The work thus licensed is called the contributor's "contributor version". A contributor's "essential patent claims" are all patent claims owned or controlled by the contributor, whether already acquired or hereafter acquired, that would be infringed by some manner, permitted by this License, of making, using, or selling its contributor version, but do not include claims that would be infringed only as a consequence of further modification of the contributor version. For purposes of this definition, "control" includes the right to grant patent sublicenses in a manner consistent with the requirements of this License. Each contributor grants you a non-exclusive, worldwide, royalty-free patent license under the contributor's essential patent claims, to make, use, sell, offer for sale, import and otherwise run, modify and propagate the contents of its contributor version. In the following three paragraphs, a "patent license" is any express agreement or commitment, however denominated, not to enforce a patent (such as an express permission to practice a patent or covenant not to sue for patent infringement). To "grant" such a patent license to a party means to make such an agreement or commitment not to enforce a patent against the party. If you convey a covered work, knowingly relying on a patent license, and the Corresponding Source of the work is not available for anyone to copy, free of charge and under the terms of this License, through a publicly available network server or other readily accessible means, then you must either (1) cause the Corresponding Source to be so available, or (2) arrange to deprive yourself of the benefit of the patent license for this particular work, or (3) arrange, in a manner consistent with the requirements of this License, to extend the patent license to downstream recipients. "Knowingly relying" means you have actual knowledge that, but for the patent license, your conveying the covered work in a country, or your recipient's use of the covered work in a country, would infringe one or more identifiable patents in that country that you have reason to believe are valid. If, pursuant to or in connection with a single transaction or arrangement, you convey, or propagate by procuring conveyance of, a covered work, and grant a patent license to some of the parties receiving the covered work authorizing them to use, propagate, modify or convey a specific copy of the covered work, then the patent license you grant is automatically extended to all recipients of the covered work and works based on it. A patent license is "discriminatory" if it does not include within the scope of its coverage, prohibits the exercise of, or is conditioned on the non-exercise of one or more of the rights that are specifically granted under this License. You may not convey a covered work if you are a party to an arrangement with a third party that is in the business of distributing software, under which you make payment to the third party based on the extent of your activity of conveying the work, and under which the third party grants, to any of the parties who would receive the covered work from you, a discriminatory patent license (a) in connection with copies of the covered work conveyed by you (or copies made from those copies), or (b) primarily for and in connection with specific products or compilations that contain the covered work, unless you entered into that arrangement, or that patent license was granted, prior to 28 March 2007. Nothing in this License shall be construed as excluding or limiting any implied license or other defenses to infringement that may otherwise be available to you under applicable patent law. 12. No Surrender of Others' Freedom. If conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot convey a covered work so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not convey it at all. For example, if you agree to terms that obligate you to collect a royalty for further conveying from those to whom you convey the Program, the only way you could satisfy both those terms and this License would be to refrain entirely from conveying the Program. 13. Use with the GNU Affero General Public License. Notwithstanding any other provision of this License, you have permission to link or combine any covered work with a work licensed under version 3 of the GNU Affero General Public License into a single combined work, and to convey the resulting work. The terms of this License will continue to apply to the part which is the covered work, but the special requirements of the GNU Affero General Public License, section 13, concerning interaction through a network will apply to the combination as such. 14. Revised Versions of this License. The Free Software Foundation may publish revised and/or new versions of the GNU General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies that a certain numbered version of the GNU General Public License "or any later version" applies to it, you have the option of following the terms and conditions either of that numbered version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of the GNU General Public License, you may choose any version ever published by the Free Software Foundation. If the Program specifies that a proxy can decide which future versions of the GNU General Public License can be used, that proxy's public statement of acceptance of a version permanently authorizes you to choose that version for the Program. Later license versions may give you additional or different permissions. However, no additional obligations are imposed on any author or copyright holder as a result of your choosing to follow a later version. 15. Disclaimer of Warranty. THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 16. Limitation of Liability. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. 17. Interpretation of Sections 15 and 16. If the disclaimer of warranty and limitation of liability provided above cannot be given local legal effect according to their terms, reviewing courts shall apply local law that most closely approximates an absolute waiver of all civil liability in connection with the Program, unless a warranty or assumption of liability accompanies a copy of the Program in return for a fee. END OF TERMS AND CONDITIONS How to Apply These Terms to Your New Programs If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms. To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively state the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. Copyright (C) This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . Also add information on how to contact you by electronic and paper mail. If the program does terminal interaction, make it output a short notice like this when it starts in an interactive mode: Copyright (C) This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'. This is free software, and you are welcome to redistribute it under certain conditions; type `show c' for details. The hypothetical commands `show w' and `show c' should show the appropriate parts of the General Public License. Of course, your program's commands might be different; for a GUI interface, you would use an "about box". You should also get your employer (if you work as a programmer) or school, if any, to sign a "copyright disclaimer" for the program, if necessary. For more information on this, and how to apply and follow the GNU GPL, see . The GNU General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Lesser General Public License instead of this License. But first, please read . natlog-2.00.00/main.cc0000644000175000017500000000335713236662052013371 0ustar frankfrank#include "main.ih" namespace // the anonymous namespace can be used here { Arg::LongOption longOptions[] = { Arg::LongOption("config", 'c'), Arg::LongOption("conntrack-ip-header-size", Arg::Required), Arg::LongOption("conntrack-command", Arg::Required), Arg::LongOption("conntrack-device", Arg::Required), Arg::LongOption("conntrack-restart", Arg::Required), Arg::LongOption("help", 'h'), Arg::LongOption("log", Arg::Required), Arg::LongOption("log-data", Arg::Required), Arg::LongOption("log-rotate", Arg::Required), Arg::LongOption("no-daemon", Arg::None), Arg::LongOption("pid-file", 'p'), Arg::LongOption("protocol", 'P'), Arg::LongOption("stdout", 's'), Arg::LongOption("syslog-facility", Arg::Required), Arg::LongOption("syslog-priority", Arg::Required), Arg::LongOption("syslog-tag", Arg::Required), Arg::LongOption("terminate", Arg::None), Arg::LongOption("time", 't'), Arg::LongOption("ttl", 'T'), Arg::LongOption("verbose", 'V'), Arg::LongOption("version", 'v'), // Arg::LongOption("warn", 'w'), }; auto longEnd = longOptions + size(longOptions); } int main(int argc, char **argv) try { ArgConfig &arg = ArgConfig::initialize("c:hp:P:st:T:vV", longOptions, longEnd, argc, argv); arg.versionHelp(usage, Icmbuild::version, arg.option(0, "terminate") ? 0 : 1); if (Options::instance().kill()) return 0; NatFork natfork; natfork.run(); } catch (exception const &err) { cout << err.what() << endl; return 1; } catch (int x) { return ArgConfig::instance().option("hv") ? 0 : x; } natlog-2.00.00/main.ih0000644000175000017500000000052213233600776013375 0ustar frankfrank#include #include #include #include #include "natfork/natfork.h" #include "options/options.h" namespace Icmbuild { extern char version[]; extern char years[]; extern char author[]; }; void usage(std::string const &progname); using namespace std; using namespace FBB; natlog-2.00.00/natfork/0000755000175000017500000000000013236662052013572 5ustar frankfranknatlog-2.00.00/natfork/parentprocess.cc0000644000175000017500000000042513236662052016772 0ustar frankfrank#include "natfork.ih" // only called by NarFork::fork, starting a daemon by ending // the main program. void NatFork::parentProcess() { // write the daemon's pid-file: ofstream pidFile(Options::instance().pidFile()); pidFile << pid() << endl; } natlog-2.00.00/natfork/setupdaemonmsg.cc0000644000175000017500000000046313236662052017137 0ustar frankfrank#include "natfork.ih" void NatFork::setupDaemonMsg() { if (d_options.log().empty()) { imsg.off(); return; } // verbose msg via syslog, if syslog is active if (d_options.verbose()) imsg.reset(*d_syslog); else imsg.off(); } natlog-2.00.00/natfork/data.cc0000644000175000017500000000042513236662052015013 0ustar frankfrank#include "natfork.ih" Producer *(*NatFork::s_producer[]) (ostream &stdMsg, Storage &storage) = { Producer::alloc, // must match the Options::Mode Producer::alloc, // enum entries Producer::alloc }; natlog-2.00.00/natfork/natfork.h0000644000175000017500000000257413236662052015417 0ustar frankfrank#ifndef INCLUDED_NATFORK_ #define INCLUDED_NATFORK_ #include #include #include #include #include "../options/options.h" #include "../rotatingstream/rotatingstream.h" namespace FBB { class SyslogStream; } class Producer; class Storage; class NatFork: public FBB::Fork { Options &d_options; std::unique_ptr d_syslog; RotatingStream d_log; FBB::MultiStreambuf d_multiStreambuf; std::ostream d_stdMsg; Options::Mode d_mode; static Producer *(*s_producer[]) (std::ostream &stdMsg, Storage &storage); public: NatFork(); // configure and initialize data ~NatFork() override; void run(); // dameonize when running in the // background, otherwise call // 'childProcess' private: void specifications(); void setupStdMsg(); void checkSyslogParam(char const *label, std::string const &actual, std::string const &err); void setupDaemonMsg(); void setupNonDaemonMsg(); void handleChildStatus(); void conntrackMode(); void parentProcess() override; void childProcess() override; void cleanupPidFile() const; }; #endif natlog-2.00.00/natfork/run.cc0000644000175000017500000000077313236662052014714 0ustar frankfrank#include "natfork.ih" void NatFork::run() { switch (d_mode) { case Options::CONNTRACK: conntrackMode(); break; case Options::DEVICE: break; case Options::TCPDUMP: if (d_options.daemon()) d_stdMsg << "TCPDUMP processing cannot be used in daemon mode" << endl; break; } if (d_options.daemon()) fork(); else childProcess(); } natlog-2.00.00/natfork/childprocess.cc0000644000175000017500000000147713236662052016574 0ustar frankfrank#include "natfork.ih" void NatFork::childProcess() { ShowSeconds::setFormat(); Storage storage; // Constructing of the producers may fail. At that point messages can // still be written to cout since we're busy starting the daemon. // Once the producers have been constructed, messages to cout are // suppressed by prepareDaemon below unique_ptr producer { (*s_producer[d_mode]) (d_stdMsg, storage) }; ConnectionsConsumer connections{ d_stdMsg, storage }; if (d_options.daemon()) prepareDaemon(); thread producerThread{ Producer::process, producer.get(), ref(storage) }; connections.run(); producerThread.join(); RotatingStreambuf::notify(); // ends the log-rotating threads. } natlog-2.00.00/natfork/cleanuppidfile.cc0000644000175000017500000000037013236662052017065 0ustar frankfrank#include "natfork.ih" void NatFork::cleanupPidFile() const { ifstream pidFile(d_options.pidFile()); pid_t pid; if (pidFile >> pid && pid == getpid()) { pidFile.close(); unlink(d_options.pidFile().c_str()); } } natlog-2.00.00/natfork/natfork1.cc0000644000175000017500000000102313236662052015622 0ustar frankfrank#include "natfork.ih" NatFork::NatFork() : d_options(Options::instance()), d_stdMsg(&d_multiStreambuf), d_mode(d_options.mode()) { setupStdMsg(); if (not d_options.daemon()) setupNonDaemonMsg(); else { if (not (d_options.mode() == Options::TCPDUMP)) setupDaemonMsg(); else { d_options.foreground(); setupNonDaemonMsg(); d_stdMsg << "mode TCPDUMP: ignoring daemon mode" << endl; } } specifications(); } natlog-2.00.00/natfork/natfork.ih0000644000175000017500000000114113236662052015555 0ustar frankfrank#include "natfork.h" #include #include #include #include //TMP #define CERR cerr << __FILE__": " #include #include #include #include #include #include "../showseconds/showseconds.h" #include "../storage/storage.h" #include "../devicesproducer/devicesproducer.h" #include "../conntrackproducer/conntrackproducer.h" #include "../tcpdumpproducer/tcpdumpproducer.h" #include "../connectionsconsumer/connectionsconsumer.h" using namespace std; using namespace FBB; natlog-2.00.00/natfork/checksyslogparam.cc0000644000175000017500000000047313226660045017443 0ustar frankfrank#include "natfork.ih" void NatFork::checkSyslogParam(char const *label, string const &actual, string const &err) { if (err.length()) d_stdMsg << "[Warning] using syslog " << label << '`' << actual << "', ignoring unsupported " << label << '`' << endl; } natlog-2.00.00/natfork/conntrackmode.cc0000644000175000017500000000073113236662052016731 0ustar frankfrank#include "natfork.ih" void NatFork::conntrackMode() // check the availability of the { // conntrack device string conntrack = d_options.conntrackCommand(); size_t pos = conntrack.find_first_of(" \t"); if (pos != string::npos) conntrack.resize(pos); if (access(conntrack.c_str(), R_OK | X_OK) != 0) { d_stdMsg << "[Fatal] can't execute " << conntrack << endl; throw 1; } } natlog-2.00.00/natfork/specifications.cc0000644000175000017500000001123513236662052017106 0ustar frankfrank#include "natfork.ih" #include void NatFork::specifications() { if (d_options.verbose() >= 2) { d_stdMsg << left; switch (d_mode) { case Options::CONNTRACK: d_stdMsg << "CONNTRACK mode" << endl; d_stdMsg << setw(25) << setw(25) << "command: `" << d_options.conntrackCommand() << '\'' << endl; d_stdMsg << setw(25) << "conntrack device: " << d_options.conntrackDevice() << endl; if (d_options.IPheaderSize() != 0) d_stdMsg << setw(25) << "conntrack IP header size correction: " << d_options.IPheaderSize() << " bytes" << endl; else d_stdMsg << setw(25) << "no conntrack IP header size correction" << endl; d_stdMsg << setw(25) << "max # conntrack restarts: " << d_options.conntrackRestart() << endl; break; case Options::DEVICE: d_stdMsg << "DEVICE mode" << endl; d_stdMsg << setw(25) << "devices: " << d_options[0] << ' ' << d_options[1] << endl; break; case Options::TCPDUMP: d_stdMsg << "TCPDUMP mode" << endl; d_stdMsg << setw(25) << "specifications: " << d_options[0] << ' ' << d_options[1] << ' ' << d_options[2] << ' ' << d_options[3] << ' ' << d_options[4] << ' ' << d_options[5] << endl; break; } d_stdMsg << setw(25) << boolalpha; d_stdMsg << setw(25) << "config file: " << d_options.configPath() << endl; if (string const &logData = d_options.logData(); not logData.empty()) d_stdMsg << setw(25) << "log data: " << logData << endl; if (d_options.rotateFreq() != 0 and d_options.nRotations() != 0) { d_stdMsg << setw(25) << "rotating log files: " << "every"; if (d_options.rotateFreq() != 1) d_stdMsg << ' ' << d_options.rotateFreq(); d_stdMsg << d_options.rotateTimeSpec() << endl; d_stdMsg << setw(25) << "number of rotated files: " << d_options.nRotations() << endl; } d_stdMsg << setw(25) << "daemon: " << d_options.daemon() << endl; if (d_options.daemon()) d_stdMsg << setw(25) << "PID file: " << d_options.pidFile() << endl; d_stdMsg << setw(25) << "protocol(s): " << d_options.protocolNames() << endl; if (not d_options.log().empty()) { d_stdMsg << setw(25) << "using log: " << d_options.log() << endl; if (d_options.log() == "syslog") { d_stdMsg << setw(25) << " facility: " << d_options.facility() << endl; d_stdMsg << setw(25) << " priority: " << d_options.priority() << endl; d_stdMsg << setw(25) << " tag: " << d_options.syslogTag() << endl; } } d_stdMsg << setw(25) << "using stdout: " << d_options.stdout() << endl; d_stdMsg << setw(25) << "time type: " << d_options.timeTxt() << endl; if (d_mode != Options::CONNTRACK) { d_stdMsg << setw(25) << "ttl (udp, icmp): " << d_options.ttl() << " seconds" << endl; d_stdMsg << setw(25) << "ttl (tcp): " << d_options.ttlTCP() << " seconds" << endl; } d_stdMsg << setw(25) << "verbosity: " << d_options.verbose() << endl; d_stdMsg << setw(25) << noboolalpha; } if (d_options.timeSpecError().length() != 0) d_stdMsg << setw(25) << "Time specifcation `" << d_options.timeSpecError() << "' not supported. Using `" << d_options.timeTxt() << "' instead" << endl; else if (d_options.verbose() < 2) imsg << "Using time type `" << d_options.timeTxt() << '\'' << endl; if (d_options.verbose() == 2) throw 0; } natlog-2.00.00/natfork/icmconf0000777000175000017500000000000013236662052020377 2../options/icmconfustar frankfranknatlog-2.00.00/natfork/setupnondaemonmsg.cc0000644000175000017500000000025513236662052017651 0ustar frankfrank#include "natfork.ih" void NatFork::setupNonDaemonMsg() { if (not d_options.verbose()) imsg.off(); // if (not d_options.warnings()) // wmsg.off(); } natlog-2.00.00/natfork/destructor.cc0000644000175000017500000000010513236662052016273 0ustar frankfrank#include "natfork.ih" NatFork::~NatFork() { cleanupPidFile(); } natlog-2.00.00/natfork/frame0000644000175000017500000000004513226660045014605 0ustar frankfrank#include "natfork.ih" NatFork:: { } natlog-2.00.00/natfork/setupstdmsg.cc0000644000175000017500000000172013236662052016463 0ustar frankfrank#include "natfork.ih" void NatFork::setupStdMsg() { if (d_options.stdout()) // if --stdout, then messages also go d_multiStreambuf.insert(cout); // to stdout if (d_options.log().empty()) // no messages return; if (d_options.log() == "syslog") { d_syslog.reset( new SyslogStream( d_options.syslogTag().c_str(), d_options.syslogPriority(), d_options.syslogFacility() ) ); d_multiStreambuf.insert(*d_syslog); checkSyslogParam("facility", d_options.facility(), d_options.syslogFacilityError()); checkSyslogParam("priority", d_options.priority(), d_options.syslogPriorityError()); return; } // a log-file path was specified: create rotating stream d_log.open(d_options.log()); d_multiStreambuf.insert(d_log); } natlog-2.00.00/nic/0000755000175000017500000000000013236662052012677 5ustar frankfranknatlog-2.00.00/nic/data.cc0000644000175000017500000000003613236662052014116 0ustar frankfrank#include "nic.ih" NIC g_nic; natlog-2.00.00/nic/nic.ih0000644000175000017500000000041013236662052013765 0ustar frankfrank#include "nic.h" #include #define CERR std::cerr << __FILE__": " #include #include #include #include #include #include using namespace std; using namespace FBB; natlog-2.00.00/nic/interfaces.demo/0000755000175000017500000000000013236662052015745 5ustar frankfranknatlog-2.00.00/nic/interfaces.demo/icmconf0000644000175000017500000000225313236662052017310 0ustar frankfrank#define CLS //#define LIBRARY "modules" #define MAIN "main.cc" #define SOURCES "*.cc" #define OBJ_EXT ".o" //#define SHARED #define SHAREDREQ "" #define TMP_DIR "tmp" //#define USE_ALL "a" #define USE_ECHO ON // #define USE_VERSION #define CXX "g++-7" //#define CC "gcc" #define CXXFLAGS " --std=c++17 -Wall -O2" \ " -fdiagnostics-color=never " //#define CFLAGS " -Wall -O2" #define IH ".ih" //#define PRECOMP "-x c++-header" #define REFRESH #define LDFLAGS "" #define ADD_LIBRARIES "" #define ADD_LIBRARY_PATHS "" #define PARSER_DIR "" #define PARSGEN "bisonc++" #define PARSFLAGS "-V" #define PARSSPEC "grammar" //#define PARSFILES "" #define PARSOUT "parse.cc" #define SCANNER_DIR "" #define SCANGEN "flexc++" #define SCANFLAGS "" #define SCANSPEC "lexer" //#define SCANFILES "" #define SCANOUT "lex.cc" #define DEFCOM "program" natlog-2.00.00/nic/interfaces.demo/main.cc0000644000175000017500000000277113236662052017207 0ustar frankfrank#include #include #include #include #include #include #include using namespace std; int main(int argc, char **argv) { if (argc == 1) { cout << "provide name(s) of interface(s) to inspect\n"; return 0; } ifaddrs *ifaddr; if (getifaddrs(&ifaddr) == -1) { cout << "getifaddrs failed\n"; return 1; } cout << hex; size_t n = 0; for (ifaddrs *ifa = ifaddr; ifa != NULL; ifa = ifa->ifa_next, ++n) { if (ifa->ifa_addr == 0) continue; string name = ifa->ifa_name; bool requested = false; for (size_t idx = 1, end = argc; idx != end; ++idx) { if (name == argv[idx]) { requested = true; break; } } if (not requested) continue; size_t family = ifa->ifa_addr->sa_family; if (family != AF_INET) continue; auto ptr = reinterpret_cast(ifa->ifa_addr); cout << name << "\n" " address = " << ntohl(ptr->sin_addr.s_addr) << ' ' << inet_ntoa(ptr->sin_addr) << '\n'; ptr = reinterpret_cast(ifa->ifa_netmask); cout <<" mask = " << ntohl(ptr->sin_addr.s_addr) << ' ' << inet_ntoa(ptr->sin_addr) << '\n'; } freeifaddrs(ifaddr); } natlog-2.00.00/nic/set1.cc0000644000175000017500000000175213236662052014067 0ustar frankfrank#include "nic.ih" void NIC::set(Record::Type type, string const &name) try { ifaddrs *ifaddr; if (getifaddrs(&ifaddr) == -1) throw 1; for (ifaddrs const *ifa = ifaddr; ifa != 0; ifa = ifa->ifa_next) { // find the requested name if ( // and family ifa->ifa_addr == 0 || name != ifa->ifa_name || ifa->ifa_addr->sa_family != AF_INET ) continue; d_nic[type] = // found it. { reinterpret_cast( ifa->ifa_addr)->sin_addr.s_addr, reinterpret_cast( ifa->ifa_netmask)->sin_addr.s_addr }; freeifaddrs(ifaddr); return; } throw 1; } catch (int) { throw Exception() << "cannot retrieve NIC info for `" << name << '\''; } natlog-2.00.00/nic/set2.cc0000644000175000017500000000065013236662052014064 0ustar frankfrank#include "nic.ih" void NIC::set(Record::Type type, string const &address, string const &maskStr) { uint32_t mask = maskStr[0] == '/' ? ~((1 << stoul(maskStr.substr(1))) - 1) : inet_network(maskStr.c_str()); d_nic[type] = // found it. { ntohl(inet_network(address.c_str())), ntohl(mask) }; } natlog-2.00.00/nic/icmconf0000777000175000017500000000000013236662052017504 2../options/icmconfustar frankfranknatlog-2.00.00/nic/mask.cc0000644000175000017500000000031113236662052014134 0ustar frankfrank#include "nic.ih" bool NIC::mask(Record::Type type, size_t address) const { return (d_nic[type].address & d_nic[type].mask) == (address & d_nic[type].mask); } natlog-2.00.00/nic/frame0000644000175000017500000000003513236662052013712 0ustar frankfrank#include "nic.ih" NIC:: { } natlog-2.00.00/nic/nic.h0000644000175000017500000000140213236662052013616 0ustar frankfrank#ifndef INCLUDED_NIC_ #define INCLUDED_NIC_ #include #include "../record/record.h" class NIC { struct Addresses { size_t address = 0; size_t mask = 0; }; Addresses d_nic[Record::nTypes]; // modify when Record::Type is // modified public: void set(Record::Type, std::string const &name); void set(Record::Type, std::string const &address, std::string const &mask); size_t address(Record::Type) const; bool mask(Record::Type, size_t address) const; private: }; inline size_t NIC::address(Record::Type type) const { return d_nic[type].address; } extern NIC g_nic; #endif natlog-2.00.00/options/0000755000175000017500000000000013236662052013621 5ustar frankfranknatlog-2.00.00/options/instance.cc0000644000175000017500000000053013233363225015727 0ustar frankfrank#include "options.ih" Options &Options::instance() { if (s_options == 0) s_options = new Options; // yes, it exists until the program ends // and memory is claimed back by the // operaring system return *s_options; } natlog-2.00.00/options/data.cc0000644000175000017500000000401613236662052015042 0ustar frankfrank#include "options.ih" char const Options::s_defaultConfigPath[] = "/etc/natlog.conf"; char const Options::s_defaultConntrackCommand[] = "/usr/sbin/conntrack"; char const Options::s_defaultConntrackDevice[] = "/proc/net/nf_conntrack"; char const Options::s_defaultConntrackArgs[] = " -E -n -o timestamp -e NEW,DESTROY"; char const Options::s_defaultSyslogIdent[] = "NATLOG"; char const Options::s_defaultSyslogFacility[] = "DAEMON"; char const Options::s_defaultSyslogPriority[] = "NOTICE"; char const Options::s_defaultPIDfile[] = "/run/natlog.pid"; unordered_map const Options::s_time = { {"raw", RAW}, {"utc", UTC}, {"local", LT}, }; unordered_map const Options::s_syslogFacilities = { {"DAEMON", Facility::DAEMON}, {"LOCAL0", Facility::LOCAL0}, {"LOCAL1", Facility::LOCAL1}, {"LOCAL2", Facility::LOCAL2}, {"LOCAL3", Facility::LOCAL3}, {"LOCAL4", Facility::LOCAL4}, {"LOCAL5", Facility::LOCAL5}, {"LOCAL6", Facility::LOCAL6}, {"LOCAL7", Facility::LOCAL7}, {"USER", Facility::USER} }; unordered_map const Options::s_syslogPriorities = { {"EMERG", Priority::EMERG}, {"ALERT", Priority::ALERT}, {"CRIT", Priority::CRIT}, {"ERR", Priority::ERR}, {"WARNING", Priority::WARNING}, {"NOTICE", Priority::NOTICE}, {"INFO", Priority::INFO}, {"DEBUG", Priority::DEBUG} }; unordered_map const Options::s_name2protocol = { { "icmp", IP_Types::ICMP }, { "tcp", IP_Types::TCP }, { "udp", IP_Types::UDP }, }; unordered_map const Options::s_protocol2name = { { IP_Types::ICMP, "icmp" }, { IP_Types::TCP, "tcp" }, { IP_Types::UDP, "udp" }, }; Options *Options::s_options = 0; natlog-2.00.00/options/options1.cc0000644000175000017500000000076013236662052015707 0ustar frankfrank#include "options.ih" // at this time we're not running as a daemon, and all messages are sent to // cout Options::Options() : d_arg(ArgConfig::instance()) { d_terminate = d_arg.option(0, "terminate"); openConfig(); if (d_terminate) return; setMode(); setProtocol(); if (d_mode == CONNTRACK) setConntrack(); setLogParams(); d_verbose = d_arg.option('V'); // not a bool, but a size_t setBoolMembers(); setTimeSpec(); } natlog-2.00.00/options/setboolmembers.cc0000644000175000017500000000036013236662052017151 0ustar frankfrank#include "options.ih" void Options::setBoolMembers() { // d_useSyslog is set in `setSyslogParams' d_daemon = not d_arg.option(0, "no-daemon"); d_stdout = d_verbose || d_arg.option('s'); // d_warnings = d_arg.option('w'); } natlog-2.00.00/options/kill.cc0000644000175000017500000000064713236662052015072 0ustar frankfrank#include "options.ih" bool Options::kill() const { if (not d_terminate) return false; ifstream in; Exception::open(in, d_PIDfile); pid_t pid; if (not (in >> pid)) throw Exception() << "no PID found in " << d_PIDfile; if (::kill(pid, SIGTERM) != 0) throw Exception() << "terminating " << d_arg.basename() << " failed: " << errnodescr; return true; } natlog-2.00.00/options/settimetype.cc0000644000175000017500000000033213236662052016502 0ustar frankfrank#include "options.ih" void Options::setTimeType(string const &spec) { d_time = s_time.find(spec); if (d_time == s_time.end()) { d_time = s_time.find("raw"); d_timeSpecError = spec; } } natlog-2.00.00/options/openconfig.cc0000644000175000017500000000064713236662052016266 0ustar frankfrank#include "options.ih" void Options::openConfig() { // the config file is: // - where specified at 'c', or: // - ~/.natlogrc if (not d_arg.option(&d_configPath, 'c')) d_configPath = s_defaultConfigPath; if (access(d_configPath.c_str(), R_OK) == 0) d_arg.open(d_configPath); if (not d_arg.option(&d_PIDfile, 'p')) d_PIDfile = s_defaultPIDfile; } natlog-2.00.00/options/hasprotocol.cc0000644000175000017500000000036513236662052016471 0ustar frankfrank#include "options.ih" bool Options::hasProtocol(std::string const &name) const { auto iter = s_name2protocol.find(name); return iter != s_name2protocol.end() and d_protocols.find(iter->second) != d_protocols.end(); } natlog-2.00.00/options/setlogparams.cc0000644000175000017500000000305413236662052016633 0ustar frankfrank#include "options.ih" void Options::setLogParams() { string value; if (not d_arg.option(&d_log, "log")) { d_log = "syslog"; if (not d_arg.option(&d_syslogTag, "syslog-tag")) d_syslogTag = s_defaultSyslogIdent; setSyslogFacility(); setSyslogPriority(); } else if (d_log == "off") // no logging d_log.clear(); d_arg.option(&d_logData, "log-data"); // { // if (d_arg.option(&value, "log-data-flush")) // d_logDataFlush = max(1LU, stoul(value)); // } if (d_arg.option(&value, "log-rotate")) // log file rotation in days { istringstream in{ value }; in >> d_rotateFreq; switch (in.get()) { case 'd': d_rotateFactor = 24 * 60; d_rotateTimeSpec = " days"; break; case 'h': d_rotateFactor = 60; d_rotateTimeSpec = " hours"; break; case 'm': d_rotateTimeSpec = " minutes"; break; default: throw Exception{} << "`log-rotate " << value << "' not supported"; } if (d_rotateFreq == 1) d_rotateTimeSpec.pop_back(); if (isdigit(in.peek())) in >> d_nRotations; else if (in.peek() == EOF) d_nRotations = 1; else throw Exception{} << "`--log-rotate " << value << "' not supported"; } } natlog-2.00.00/options/setmode.cc0000644000175000017500000000045013236662052015567 0ustar frankfrank#include "options.ih" void Options::setMode() { if (d_arg[0] == "conntrack"s) d_mode = CONNTRACK; else if (d_arg.nArgs() == 2) d_mode = DEVICE; else if (d_arg.nArgs() == 6) d_mode = TCPDUMP; else throw Exception() << "Mode specification error"; } natlog-2.00.00/options/setconntrack.cc0000644000175000017500000000142713236662052016632 0ustar frankfrank#include "options.ih" void Options::setConntrack() { if (not d_arg.option(&d_conntrackDevice, "conntrack-device")) d_conntrackDevice = s_defaultConntrackDevice; if (not d_arg.option(&d_conntrackCommand, "conntrack-command")) d_conntrackCommand = s_defaultConntrackCommand; d_conntrackCommand += ( d_protocols.size() == 1 ? " -p " + s_protocol2name.find(*d_protocols.begin())->second : ""s ) + s_defaultConntrackArgs; string value; if (d_arg.option(&value, "conntrack-restart")) d_conntrackRestart = stoul(value); if (d_arg.option(&value, "conntrack-ip-header-size")) d_IPheaderSize = stoul(value); } natlog-2.00.00/options/icmconf0000644000175000017500000000110613236662052015160 0ustar frankfrank#define CLS #define LIBRARY "modules" #define SOURCES "*.cc" #define OBJ_EXT ".o" #define SHAREDREQ "" #define TMP_DIR "tmp" #define USE_ECHO ON #define CXX "g++-7" #define CXXFLAGS " --std=c++17 -Wall -O2" \ " -fdiagnostics-color=never " #define IH ".ih" //#define PRECOMP "-x c++-header" #define REFRESH #define LDFLAGS "" #define ADD_LIBRARIES "" #define ADD_LIBRARY_PATHS "" #define DEFCOM "library" natlog-2.00.00/options/options.h0000644000175000017500000002312513236662052015470 0ustar frankfrank#ifndef INCLUDED_OPTIONS_ #define INCLUDED_OPTIONS_ #include #include #include #include #include // for the enums #include "../iptypes/iptypes.h" struct Options: public IP_Types { enum Time { RAW, UTC, LT }; enum ExitStatus { OK, FAILED, TERM_SIGNAL, }; enum Mode // working mode: conntrack, pcap, or tcpdump { CONNTRACK, // when modified: update producer/data.cc DEVICE, TCPDUMP, }; enum { TTL = 60, // default TTL in seconds TTL_TCP = 3000 // TTL for TCP }; private: FBB::ArgConfig &d_arg; bool d_daemon; bool d_stdout; bool d_terminate; Mode d_mode; size_t d_IPheaderSize = 0; size_t d_verbose; size_t d_conntrackRestart = 10; size_t d_rotateFreq = 0; // rotate non-syslog logs size_t d_rotateFactor = 1; // after spec * factor minutes std::string d_rotateTimeSpec; // e.g., ' minutes' size_t d_nRotations = 0; // rotate #files time_t d_ttl = TTL; time_t d_ttlTCP = TTL_TCP; std::unordered_map::const_iterator d_time; std::string d_conntrackCommand; std::string d_conntrackDevice; std::string d_configPath; std::string d_syslogTag; std::string d_PIDfile; std::string d_timeSpecError; std::string d_syslogPriorityError; std::string d_syslogFacilityError; std::string d_log; std::string d_logData; std::unordered_set d_protocols; std::unordered_map::const_iterator d_syslogFacility; std::unordered_map::const_iterator d_syslogPriority; // default values: static char const s_defaultConfigPath[]; static char const s_defaultConntrackCommand[]; static char const s_defaultConntrackDevice[]; static char const s_defaultConntrackArgs[]; static char const s_defaultSyslogIdent[]; static char const s_defaultSyslogFacility[]; static char const s_defaultSyslogPriority[]; static char const s_defaultPIDfile[]; static std::unordered_map const s_time; static std::unordered_map const s_syslogFacilities; static std::unordered_map const s_syslogPriorities; static std::unordered_map const s_name2protocol; static std::unordered_map const s_protocol2name; static Options *s_options; public: static Options &instance(); Options(Options const &other) = delete; bool daemon() const; void foreground(); // undo a default daemon request bool realTime() const; // true if the packets are received // real-time; when recorded: false. bool stdout() const; bool kill() const; size_t IPheaderSize() const; size_t verbose() const; size_t rotateFreq() const; size_t rotateFactor() const; size_t nRotations() const; std::string const &rotateTimeSpec() const; time_t ttl() const; time_t ttlTCP() const; Time time() const; std::string const &timeTxt() const; Mode mode() const; std::string const &configPath() const; std::string const &timeSpecError() const; std::string const &pidFile() const; std::unordered_set const &protocolSet() const; bool hasProtocol(std::string const &protoName) const; bool hasProtocol(size_t protocol) const; std::string const &conntrackCommand() const; char const *conntrackDevice() const; std::string const &syslogTag() const; std::string const &log() const; std::string const &logData() const; FBB::Priority syslogPriority() const; FBB::Facility syslogFacility() const; std::string const &priority() const; std::string const &facility() const; std::string syslogPriorityError() const; std::string syslogFacilityError() const; char const *operator[](size_t idx) const; // forwards ArgConfig's size_t nArgs() const; // values. std::string const &basename() const; size_t conntrackRestart() const; std::string protocolNames() const; static std::string const &protocolName(Protocol protocol); static char const *defaultConfigPath(); static char const *defaultConntrackCommand(); static char const *defaultConntrackDevice(); static char const *defaultConntrackArgs(); static char const *defaultSyslogIdent(); static char const *defaultSyslogFacility(); static char const *defaultSyslogPriority(); static char const *defaultPIDfile(); private: Options(); void openConfig(); void setBoolMembers(); void setConntrack(); void setMode(); void setLogParams(); void setSyslogFacility(); void setSyslogPriority(); void setTimeType(std::string const &time); void setTimeSpec(); void setProtocol(); }; inline Options::Mode Options::mode() const { return d_mode; } inline bool Options::realTime() const { return d_mode != TCPDUMP; } inline bool Options::stdout() const { return d_stdout; } inline size_t Options::verbose() const { return d_verbose; } inline bool Options::daemon() const { return d_daemon; } inline void Options::foreground() { d_daemon = false; } inline std::string const &Options::log() const { return d_log; } inline size_t Options::rotateFreq() const { return d_rotateFreq; } inline size_t Options::rotateFactor() const { return d_rotateFactor; } inline std::string const &Options::rotateTimeSpec() const { return d_rotateTimeSpec; } inline size_t Options::nRotations() const { return d_nRotations; } inline time_t Options::ttl() const { return d_ttl; } inline time_t Options::ttlTCP() const { return d_ttlTCP; } inline size_t Options::IPheaderSize() const { return d_IPheaderSize; } inline Options::Time Options::time() const { return d_time->second; } inline std::string const &Options::timeTxt() const { return d_time->first; } inline std::string const &Options::configPath() const { return d_configPath; } inline std::string const &Options::syslogTag() const { return d_syslogTag; } inline std::string const &Options::logData() const { return d_logData; } //inline size_t Options::logDataFlush() const //{ // return d_logDataFlush; //} inline std::string const &Options::pidFile() const { return d_PIDfile; } inline std::string const &Options::timeSpecError() const { return d_timeSpecError; } inline FBB::Priority Options::syslogPriority() const { return d_syslogPriority->second; } inline std::string const &Options::priority() const { return d_syslogPriority->first; } inline std::string Options::syslogPriorityError() const { return d_syslogPriorityError; } inline FBB::Facility Options::syslogFacility() const { return d_syslogFacility->second; } inline std::string Options::syslogFacilityError() const { return d_syslogFacilityError; } inline char const *Options::defaultPIDfile() { return s_defaultPIDfile; } inline char const *Options::defaultConfigPath() { return s_defaultConfigPath; } inline std::string const &Options::facility() const { return d_syslogFacility->first; } inline std::string const &Options::conntrackCommand() const { return d_conntrackCommand; } inline char const *Options::conntrackDevice() const { return d_conntrackDevice.c_str(); } inline char const *Options::operator[](size_t idx) const { return d_arg[idx]; } inline size_t Options::nArgs() const { return d_arg.nArgs(); } inline std::string const &Options::basename() const { return d_arg.basename(); } inline char const *Options::defaultConntrackCommand() { return s_defaultConntrackCommand; } inline char const *Options::defaultConntrackDevice() { return s_defaultConntrackDevice; } inline char const *Options::defaultSyslogIdent() { return s_defaultSyslogIdent; } inline char const *Options::defaultSyslogFacility() { return s_defaultSyslogFacility; } inline char const *Options::defaultSyslogPriority() { return s_defaultSyslogPriority; } inline size_t Options::conntrackRestart() const { return d_conntrackRestart; } inline std::unordered_set const &Options::protocolSet() const { return d_protocols; } inline std::string const &Options::protocolName(Protocol protocol) { return s_protocol2name.find(protocol)->second; } inline bool Options::hasProtocol(size_t protocol) const { return d_protocols.find(static_cast(protocol)) != d_protocols.end(); } #endif natlog-2.00.00/options/setsyslogfacility.cc0000644000175000017500000000066213236662052017715 0ustar frankfrank#include "options.ih" void Options::setSyslogFacility() { d_syslogFacility = s_syslogFacilities.find(s_defaultSyslogFacility); string option; if (d_arg.option(&option, "syslog-facility")) { auto facility = s_syslogFacilities.find(option); if (facility != s_syslogFacilities.end()) d_syslogFacility = facility; else d_syslogFacilityError = option; } } natlog-2.00.00/options/settimespec.cc0000644000175000017500000000157113236662052016461 0ustar frankfrank#include "options.ih" void Options::setTimeSpec() { string value; if (not d_arg.option(&value, 't')) d_time = s_time.find("raw"); else setTimeType(value); if (d_mode == CONNTRACK) // no TTL for conntrack d_ttl = ::time(0); else if (d_arg.option(&value, 'T')) { istringstream in{ value }; for (size_t count = 0; count != 2; ++count) { size_t seconds; in >> seconds; switch (in.get()) { case 'u': d_ttl = seconds; break; case 't': d_ttlTCP = seconds; break; case EOF: return; default: throw Exception{} << "`--ttl " << value << "' not supported"; } } } } natlog-2.00.00/options/options.ih0000644000175000017500000000043513236662052015640 0ustar frankfrank#include "options.h" //TMP #include #define CERR cerr << __FILE__": " #include #include #include #include #include #include #include using namespace std; using namespace FBB; natlog-2.00.00/options/setprotocol.cc0000644000175000017500000000170113236662052016504 0ustar frankfrank#include "options.ih" void Options::setProtocol() { string spec; if (not d_arg.option(&spec, 'P')) d_protocols.insert(TCP); else if (spec == "all") d_protocols = { TCP, UDP, ICMP }; else { size_t pos = 0; size_t colon; while (true) { colon = spec.find(':', pos); string protocol = spec.substr(pos, colon - pos); auto iter = s_name2protocol.find(protocol); if (iter == s_name2protocol.end()) fmsg << "protocol `" << protocol << "' currently not supported" << noid; d_protocols.insert(iter->second); if (colon == string::npos) break; pos = colon + 1; } if (d_mode == CONNTRACK and pos != 0) fmsg << "multiple protocols not supported with 'conntrack'" << noid; } } natlog-2.00.00/options/protocolnames.cc0000644000175000017500000000040313236662052017012 0ustar frankfrank#include "options.ih" string Options::protocolNames() const { string ret; for (Protocol protocol: protocolSet()) (ret += protocolName(protocol)) += " or "; ret.resize(ret.length() - 4); // remove final ' or ' return ret; } natlog-2.00.00/options/frame0000644000175000017500000000004513226660045014634 0ustar frankfrank#include "options.ih" Options:: { } natlog-2.00.00/options/setsyslogpriority.cc0000644000175000017500000000066613236662052017776 0ustar frankfrank#include "options.ih" void Options::setSyslogPriority() { d_syslogPriority = s_syslogPriorities.find(s_defaultSyslogPriority); string option; if (not d_arg.option(&option, "syslog-priority")) { auto priority = s_syslogPriorities.find(option); if (priority != s_syslogPriorities.end()) d_syslogPriority = priority; else d_syslogPriorityError = option; } } natlog-2.00.00/pcap/0000755000175000017500000000000013236662052013051 5ustar frankfranknatlog-2.00.00/pcap/pcap.h0000644000175000017500000000125613236662052014151 0ustar frankfrank#ifndef INCLUDED_PCAP_ #define INCLUDED_PCAP_ #include class Pcap { pcap_t *d_pcap; struct bpf_program d_pcapFilter; bpf_u_int32 d_net; int d_shift; public: Pcap(char const *device, bool promisc = false, size_t snapLen = 1500, size_t timeOutMs = 1000); void loop(void *pcapFilterPtr, pcap_handler callback); void stop(); int shiftPacketBegin() const; private: void filterProtocols(); // filter interesting prot's. void computeShift(char const *device); // from Pcap(): sets d_shift }; inline int Pcap::shiftPacketBegin() const { return d_shift; } #endif natlog-2.00.00/pcap/callback.demo0000644000175000017500000000011613236662052015451 0ustar frankfrankSee pcapfilter/driver/main.cc for a program reading ICMP, UDP or TCP packets. natlog-2.00.00/pcap/stop.cc0000644000175000017500000000016713236662052014351 0ustar frankfrank#include "pcap.ih" void Pcap::stop() { pcap_breakloop(d_pcap); // ends pcap_loop, pcap_close(d_pcap); } natlog-2.00.00/pcap/filterprotocols.cc0000644000175000017500000000110413236662052016606 0ustar frankfrank#include "pcap.ih" void Pcap::filterProtocols() { enum { OPTIMIZE = true }; string filterExpr = Options::instance().protocolNames(); if (pcap_compile(d_pcap, &d_pcapFilter, filterExpr.c_str(), OPTIMIZE, d_net) == -1) fmsg << "Pcap compilation of `" << filterExpr << "' failed: " << pcap_geterr(d_pcap) << endl; if (pcap_setfilter(d_pcap, &d_pcapFilter) == -1) fmsg << "Couldn't install filter `" << filterExpr << ": " << pcap_geterr(d_pcap) << endl; } natlog-2.00.00/pcap/loop.cc0000644000175000017500000000077113236662052014336 0ustar frankfrank#include "pcap.ih" void Pcap::loop(void *pcapFilterPtr, pcap_handler callback) { pcap_loop(d_pcap, -1, callback, reinterpret_cast(pcapFilterPtr)); } // Pcap::loop: merely calls pcap_loop: // * 1st argument pointer to the PcapFilter object defining the current // Pcap object as data member // * 2nd arg: continue until the program ends // * 3rd arg: PcapFilter::callback // * 4th arg. the address of the PcapFilter object is passed to callback natlog-2.00.00/pcap/computeshift.cc0000644000175000017500000000120613236662052016071 0ustar frankfrank#include "pcap.ih" void Pcap::computeShift(char const *device) { // see the posting by user175104 on // http://stackoverflow.com/questions/1779715/ // how-to-get-mac-address-of-your-machine-using-a-c-program ifstream mac(("/sys/class/net/"s + device) + "/address"); string address; d_shift = (mac >> address) ? 0 : PcapRecord::SIZEOF_ETHERNET_HEADER; if (d_shift == 0) imsg << "Device " << device << " has MAC address " << address << endl; else imsg << "Device " << device << " has no MAC address: packets lack " "Ethernet headers" << endl; } natlog-2.00.00/pcap/icmconf0000777000175000017500000000000013236662052017656 2../options/icmconfustar frankfranknatlog-2.00.00/pcap/pcap.ih0000644000175000017500000000042413236662052014316 0ustar frankfrank#include "pcap.h" #include #include //TMP //#define CERR std::cerr << __FILE__": " #include #include #include "../options/options.h" #include "../pcaprecord/pcaprecord.h" using namespace std; using namespace FBB; natlog-2.00.00/pcap/frame0000644000175000017500000000003713226660266014072 0ustar frankfrank#include "pcap.ih" Pcap:: { } natlog-2.00.00/pcap/pcap1.cc0000644000175000017500000000125213236662052014364 0ustar frankfrank#include "pcap.ih" Pcap::Pcap(char const *device, bool promisc, size_t snapLen, size_t timeOutMs) { computeShift(device); // determine device's MAC address char errBuf[PCAP_ERRBUF_SIZE]; // pcap-predefined constant d_pcap = pcap_open_live(device, snapLen, promisc, timeOutMs, errBuf); if (d_pcap == 0) throw Exception() << errBuf; bpf_u_int32 netMask; // The netmask of our sniffing device if (pcap_lookupnet(device, &d_net, &netMask, errBuf) == -1) throw Exception() << "Can't get network address of device " << device; filterProtocols(); // filter interesting protocols } natlog-2.00.00/pcapfilter/0000755000175000017500000000000013236662052014257 5ustar frankfranknatlog-2.00.00/pcapfilter/stop.cc0000644000175000017500000000013513236662052015552 0ustar frankfrank#include "pcapfilter.ih" void PcapFilter::stop() { d_stop = true; d_pcap.stop(); } natlog-2.00.00/pcapfilter/callback.cc0000644000175000017500000000116513236662052016325 0ustar frankfrank#include "pcapfilter.ih" // static void PcapFilter::callback(PcapFilter *pf, struct pcap_pkthdr const *hdr, u_char const *packet) { if (pf->d_stop) return; // packet begin is subtracted because the ethernet header is assumed // present. If it's not then a correction the size of the ethernet // header is required when using the offsets below packet -= pf->shiftPacketBegin(); if (pf->d_options.hasProtocol( IP_Types::get(packet).protocol) ) pf->d_storage.push( PcapRecord{ pf->d_type, *hdr, packet } ); } natlog-2.00.00/pcapfilter/pcapfilter.ih0000644000175000017500000000043713236662052016736 0ustar frankfrank#include "pcapfilter.h" #include //TMP //#define CERR cerr << __FILE__": " #include "../storage/storage.h" #include "../options/options.h" using namespace std; using namespace FBB; inline int PcapFilter::shiftPacketBegin() const { return d_pcap.shiftPacketBegin(); } natlog-2.00.00/pcapfilter/pcapfilter1.cc0000644000175000017500000000047513236662052017006 0ustar frankfrank#include "pcapfilter.ih" PcapFilter::PcapFilter(char const *device, Record::Type type, std::ostream &stdMsg, Storage &storage) : d_options(Options::instance()), d_stdMsg(stdMsg), d_storage(storage), d_type(type), d_pcap(device) // see pcap.h for default arg. specs. {} natlog-2.00.00/pcapfilter/icmconf0000777000175000017500000000000013236662052021064 2../options/icmconfustar frankfranknatlog-2.00.00/pcapfilter/pcapfilter.h0000644000175000017500000000137013236662052016562 0ustar frankfrank#ifndef INCLUDED_PCAPFILTER_ #define INCLUDED_PCAPFILTER_ #include #include #include #include "../pcap/pcap.h" #include "../pcaprecord/pcaprecord.h" class Storage; class Options; class PcapFilter { Options const &d_options; std::ostream &d_stdMsg; Storage &d_storage; Record::Type d_type; Pcap d_pcap; bool d_stop = false; public: PcapFilter(char const *device, Record::Type, std::ostream &stdMsg, Storage &storage); void operator()(); void stop(); private: static void callback(PcapFilter *pf, struct pcap_pkthdr const *hdr, u_char const *bytes); int shiftPacketBegin() const; }; #endif natlog-2.00.00/pcapfilter/frame0000644000175000017500000000005313226660266015276 0ustar frankfrank#include "pcapfilter.ih" PcapFilter:: { } natlog-2.00.00/pcapfilter/operatorfun.cc0000644000175000017500000000070013236662052017127 0ustar frankfrank#include "pcapfilter.ih" void PcapFilter::operator()() { // The current PcapFilter object is passed as 1st argument to the // callback function, so that PcapFilter::callback can access its // object's data. the 'callback' cast is used because Pcap has no // knowledge about PcapFilter, and only needs to call the C function // pcap_loop. d_pcap.loop(this, reinterpret_cast(callback)); } natlog-2.00.00/pcapfilter/driver/0000755000175000017500000000000013236662052015552 5ustar frankfranknatlog-2.00.00/pcaprecord/0000755000175000017500000000000013236662052014250 5ustar frankfranknatlog-2.00.00/pcaprecord/pcaprecord.h0000644000175000017500000000045113236662052016543 0ustar frankfrank#ifndef INCLUDED_PCAPRECORD_ #define INCLUDED_PCAPRECORD_ #include #include #include "../record/record.h" class PcapRecord: public Record { public: PcapRecord(Type inOut, struct pcap_pkthdr const &hdr, u_char const *packet); }; #endif natlog-2.00.00/pcaprecord/icmconf0000777000175000017500000000000013236662052021055 2../options/icmconfustar frankfranknatlog-2.00.00/pcaprecord/pcaprecord.ih0000644000175000017500000000024013236662052016710 0ustar frankfrank#include "pcaprecord.h" //TMP //#include //#define CERR cerr << __FILE__": " #include using namespace std; using namespace FBB; natlog-2.00.00/pcaprecord/frame0000644000175000017500000000005313226660266015267 0ustar frankfrank#include "pcaprecord.ih" PcapRecord:: { } natlog-2.00.00/pcaprecord/pcaprecord1.cc0000644000175000017500000000032113236662052016756 0ustar frankfrank#include "pcaprecord.ih" PcapRecord::PcapRecord(Type inOut, struct pcap_pkthdr const &hdr, u_char const *packet) : Record(inOut, hdr.ts.tv_sec, hdr.ts.tv_usec, packet) {} natlog-2.00.00/producer/0000755000175000017500000000000013236662052013751 5ustar frankfranknatlog-2.00.00/producer/icmconf0000777000175000017500000000000013236662052020556 2../options/icmconfustar frankfranknatlog-2.00.00/producer/producer.ih0000644000175000017500000000011613236662052016114 0ustar frankfrank#include "producer.h" #include "../storage/storage.h" using namespace std; natlog-2.00.00/producer/producer.h0000644000175000017500000000107713236662052015752 0ustar frankfrank#ifndef INCLUDED_PRODUCER_ #define INCLUDED_PRODUCER_ #include class Storage; class Producer { public: virtual ~Producer(); static void process(Producer *producer, Storage &storage); template static Producer *alloc(Params &&...params); private: virtual void run() = 0; }; // static template inline Producer *Producer::alloc(Params &&...params) { return new Derived{ std::forward(params)... }; } #endif natlog-2.00.00/producer/process.cc0000644000175000017500000000020713236662052015735 0ustar frankfrank#include "producer.ih" void Producer::process(Producer *producer, Storage &storage) { producer->run(); storage.setEmpty(); } natlog-2.00.00/producer/destructor.cc0000644000175000017500000000006113236662052016453 0ustar frankfrank#include "producer.ih" Producer::~Producer() {} natlog-2.00.00/producer/frame0000644000175000017500000000004713236662052014767 0ustar frankfrank#include "producer.ih" Producer:: { } natlog-2.00.00/README0000644000175000017500000000144613236662052013013 0ustar frankfrankIP packet related enum and struct definitions are in iptypes/iptypes.h ------------------------------------------------------------------------------ The organization of the program's flow is described in documentation/README.flow An annotated example of tcp communication is available in documentation/README.tcp Information describing the format of the file written by tcpdump is found in documentation/README.tcpdump An annotated example of udp communication and the instructions of how to set up a demo-udp connection is available in documentation/README.udp The organization of pcap packets is described in documentation/README.packet An example of the information made available by the conntrack program for tcp, udp, and icmp connections is available in documentation/README.conntrack natlog-2.00.00/record/0000755000175000017500000000000013236662052013404 5ustar frankfranknatlog-2.00.00/record/record.ih0000644000175000017500000000061713236662052015210 0ustar frankfrank#include "record.h" #include #include #include #include #include #include #include #include "../showseconds/showseconds.h" using namespace std; using namespace FBB; // static inline size_t Record::ports2key(size_t lowPort, size_t highPort) { return (highPort << sizeof(u_short) * 8) | lowPort; } natlog-2.00.00/record/ntoa.cc0000644000175000017500000000015413236662052014654 0ustar frankfrank#include "record.ih" // static char *Record::ntoa(uint32_t ipAddr) { return inet_ntoa( { ipAddr } ); } natlog-2.00.00/record/addsentbytes.cc0000644000175000017500000000020213236662052016376 0ustar frankfrank#include "record.ih" void Record::addSentBytes(size_t sentBytes) { d_sentBytes += sentBytes; d_lastUsed = ::time(0); } natlog-2.00.00/record/settcpudpkey.cc0000644000175000017500000000033313236662052016436 0ustar frankfrank#include "record.ih" size_t Record::setTCPUDPkey() { return d_key = d_sourcePort < d_destPort ? ports2key(d_sourcePort, d_destPort) : ports2key(d_destPort, d_sourcePort); } natlog-2.00.00/record/reverse.cc0000644000175000017500000000025513236662052015370 0ustar frankfrank//#include "record.ih" // //void Record::reverse() //{ // swap(d_sourceIP, d_destIP); // swap(d_sourcePort, d_destPort); // swap(d_sentBytes, d_receivedBytes); //} natlog-2.00.00/record/opequal.cc0000644000175000017500000000053313236662052015362 0ustar frankfrank#include "record.ih" bool operator==(Record const &lhs, Record const &rhs) { return ( lhs.d_sourcePort == rhs.d_sourcePort and lhs.d_destPort == rhs.d_destPort ) or ( lhs.d_sourcePort == rhs.d_destPort and lhs.d_destPort == rhs.d_sourcePort ); } natlog-2.00.00/record/aton.cc0000644000175000017500000000016013236662052014651 0ustar frankfrank#include "record.ih" // static size_t Record::aton(string const &addr) { return inet_addr(addr.c_str()); } natlog-2.00.00/record/record.h0000644000175000017500000001426613236662052015044 0ustar frankfrank#ifndef INCLUDED_RECORD_ #define INCLUDED_RECORD_ #include #include #include "../iptypes/iptypes.h" // all connection data are available in Record. Derived classes // themselves have no relevant data. struct Record: public IP_Types { // == and != are implemented for use by unordered_maps. They only // compare source and destination ports. friend bool operator==(Record const &lhs, Record const &rhs); enum Type // update ../nic/ when altered. { IN, OUT, NEW, // Conntrack types DESTROY }; enum { nTypes = DESTROY + 1 }; private: Protocol d_protocol; Type d_type; size_t d_key; size_t d_seconds = 0; size_t d_microSeconds = 0; size_t d_inSeconds; size_t d_inMicroSeconds; size_t d_sourceIP; size_t d_viaIP; size_t d_destIP; size_t d_sourcePort = 0; size_t d_viaPort; size_t d_destPort = 0; size_t d_receivedBytes = 0; size_t d_sentBytes = 0; size_t d_payload = 0; size_t d_flags; size_t d_id; // sequence nr for TCP, identification for // UDP time_t d_lastUsed; public: Record() = default; // required for Storage and ConntrackRec. virtual ~Record(); // move and copy operations: all default Protocol protocol() const; char const *protocolStr() const; Type type() const; size_t key() const; size_t setTCPUDPkey(); size_t id() const; // with ICMP size_t inSeconds() const; size_t seconds() const; size_t muSeconds() const; std::string beginTime() const; std::string endTime() const; bool hasEndTime() const; std::string sourceIPstr() const; std::string viaIPstr() const; std::string destIPstr() const; size_t sourceIP() const; size_t viaIP() const; size_t destIP() const; size_t sourcePort() const; size_t viaPort() const; size_t destPort() const; size_t receivedBytes() const; size_t sentBytes() const; size_t payload() const; size_t flags() const; // only with TCP std::string showFlags() const; time_t lastUsed() const; // public modifiers: void addReceivedBytes(size_t receivedBytes); void addSentBytes(size_t sentBytes); void setViaIP(size_t viaIP); // used in connections/udp.cc void setViaPort(size_t viaPort); void setEndTime(Record const &record); // void reverse(); // swap source and dest stuff protected: // used for pcap and tcpdump records Record(Type type, size_t seconds, size_t muSeconds, u_char const *packet); void setProtocol(Protocol protocol); void setType(Type type); void setLastUsed(time_t time); void setKey(size_t key); void setTime(size_t seconds, size_t microSeconds); void setSourceIP(size_t sourceIP); void setDestIP(size_t destIP); void setPorts(size_t sourcePort, size_t destPort); static size_t aton(std::string const &addr); static std::string time(size_t seconds, size_t microSeconds); private: static char *ntoa(uint32_t ipAddr); static size_t ports2key(size_t lowPort, size_t highPort); }; inline size_t Record::key() const { return d_key; } inline size_t Record::id() const { return d_id; } inline Record::Protocol Record::protocol() const { return d_protocol; } inline Record::Type Record::type() const { return d_type; } inline size_t Record::seconds() const { return d_seconds; } inline size_t Record::inSeconds() const { return d_inSeconds; } inline size_t Record::muSeconds() const { return d_microSeconds; } inline std::string Record::sourceIPstr() const { return ntoa(d_sourceIP); } inline size_t Record::sourceIP() const { return d_sourceIP; } inline size_t Record::destIP() const { return d_destIP; } inline size_t Record::viaIP() const { return d_viaIP; } inline std::string Record::viaIPstr() const { return ntoa(d_viaIP); } inline std::string Record::destIPstr() const { return ntoa(d_destIP); } inline size_t Record::sourcePort() const { return d_sourcePort; } inline size_t Record::viaPort() const { return d_viaPort; } inline size_t Record::destPort() const { return d_destPort; } inline size_t Record::receivedBytes() const { return d_receivedBytes; } inline size_t Record::sentBytes() const { return d_sentBytes; } inline size_t Record::payload() const { return d_payload; } inline size_t Record::flags() const // only with TCP { return d_flags; } inline void Record::setProtocol(Protocol protocol) { d_protocol = protocol; } inline void Record::setType(Type type) { d_type = type; } inline void Record::setKey(size_t key) { d_key = key; } inline void Record::setTime(size_t seconds, size_t microSeconds) { d_inSeconds = seconds; d_inMicroSeconds = microSeconds; } inline void Record::setEndTime(Record const &other) { d_seconds = other.d_inSeconds; d_microSeconds = other.d_inMicroSeconds; } inline void Record::setSourceIP(size_t sourceIP) { d_sourceIP = sourceIP; } inline void Record::setViaIP(size_t viaIP) { d_viaIP = viaIP; } inline void Record::setDestIP(size_t destIP) { d_destIP = destIP; } inline void Record::setViaPort(size_t viaPort) { d_viaPort = viaPort; } inline bool operator!=(Record const &lhs, Record const &rhs) { return not (lhs == rhs); } inline time_t Record::lastUsed() const { return d_lastUsed; } inline std::string Record::beginTime() const { return time(d_inSeconds, d_inMicroSeconds); } inline std::string Record::endTime() const { return time(d_seconds, d_microSeconds); } inline bool Record::hasEndTime() const { return d_seconds != 0; } inline void Record::setLastUsed(time_t time) { d_lastUsed = time; } #endif natlog-2.00.00/record/icmconf0000777000175000017500000000000013236662052020211 2../options/icmconfustar frankfranknatlog-2.00.00/record/destructor.cc0000644000175000017500000000005313236662052016107 0ustar frankfrank#include "record.ih" Record::~Record() {} natlog-2.00.00/record/record1.cc0000644000175000017500000000376313236662052015263 0ustar frankfrank#include "record.ih" // #include Record::Record(Type type, size_t seconds, size_t muSeconds, u_char const *packet) : d_protocol(static_cast(get(packet).protocol)), d_type(type), d_seconds(seconds), d_microSeconds(muSeconds), d_inSeconds(seconds), d_inMicroSeconds(muSeconds), d_sourceIP(get(packet).sourceAddr.s_addr), d_destIP(get(packet).destAddr.s_addr), d_lastUsed(::time(0)) { size_t headerLength = size_t(get(packet).hdrLength << 2); size_t ipLength = ntohs(get(packet).length); // 4 most significant bits: # 32 bit words // so: shr 4 to het the # 32 bit words, and // << 2 to multiply by 4 to get the #bytes before the data size_t dataOffset = size_t(get(packet).dataOffset >> 4 << 2); switch (protocol()) { case ICMP: setKey(ntohs(get(packet).ident)); d_payload = ipLength - headerLength; break; case UDP: { setPorts( ntohs(get(packet).sourcePort), ntohs(get(packet).destPort) ); d_id = ntohs(get(packet).identification); d_payload = ntohs(get(packet).length) - sizeof(UDP_Header); } break; case TCP: setPorts( ntohs(get(packet).sourcePort), ntohs(get(packet).destPort) ); d_id = get(packet).sequenceNr; d_flags = get(packet).flags; d_payload = ipLength - headerLength - dataOffset; break; } // cout << // "type: " << type << // ", from " << sourceIPstr() << " to " << destIPstr() << // ", protocol: " << protocolStr() << // ", id: " << d_id << endl; } natlog-2.00.00/record/protocolstr.cc0000644000175000017500000000052713236662052016311 0ustar frankfrank#include "record.ih" char const *Record::protocolStr() const { switch (d_protocol) { case ICMP: return "icmp"; case UDP: return " udp"; case TCP: return " tcp"; } throw Exception() << "Internal error: unexpected protocol value " << d_protocol; } natlog-2.00.00/record/time.cc0000644000175000017500000000036513236662052014655 0ustar frankfrank#include "record.ih" // static string Record::time(size_t seconds, size_t microSeconds) { ostringstream out; out << ShowSeconds{ seconds } << ':' << setfill('0') << setw(6) << microSeconds; return out.str(); } natlog-2.00.00/record/setports.cc0000644000175000017500000000021613236662052015575 0ustar frankfrank#include "record.ih" void Record::setPorts(size_t sourcePort, size_t destPort) { d_sourcePort = sourcePort; d_destPort = destPort; } natlog-2.00.00/record/frame0000644000175000017500000000004313236662052014416 0ustar frankfrank#include "record.ih" Record:: { } natlog-2.00.00/record/addreceivedbytes.cc0000644000175000017500000000022213236662052017215 0ustar frankfrank#include "record.ih" void Record::addReceivedBytes(size_t receivedBytes) { d_receivedBytes += receivedBytes; d_lastUsed = ::time(0); } natlog-2.00.00/record/showflags.cc0000644000175000017500000000125413236662052015712 0ustar frankfrank#include "record.ih" namespace { unordered_map flagName = { { Record::FIN, "FIN " }, { Record::SYN, "SYN " }, { Record::RST, "RST " }, { Record::PUSH, "PUSH " }, { Record::ACK, "ACK " }, { Record::URG, "URG " }, { Record::ECE, "ECE " }, { Record::CWR, "CWR " }, }; } #include string Record::showFlags() const { string ret; for (size_t flag = 1; flag & Record::TCP_Flags_MASK; flag <<= 1) { if (size_t key = flag & d_flags) ret += flagName[key]; } if (ret.length()) ret.pop_back(); return ret; } natlog-2.00.00/required0000644000175000017500000000072013230615456013670 0ustar frankfrankThis file lists non-standard software only. Thus, standard utilities like cp, mv, sed, etc, etc, are not explicitly mentioned. Neither is the g++ compiler explicitly mentioned, but a fairly recent one is assumed. Required software for building the natlog 1.02.00 ------------------------------------------------- libbobcat-dev (>= 4.01.03), To use the provided build-script: icmake (>= 8.00.03) To construct the man-page: yodl (>= 3.06.0) natlog-2.00.00/rotatingstream/0000755000175000017500000000000013236662052015171 5ustar frankfranknatlog-2.00.00/rotatingstream/rotatingstream.ih0000644000175000017500000000016213236662052020555 0ustar frankfrank#include "rotatingstream.h" //#include //#define CERR std::cerr << __FILE__": " using namespace std; natlog-2.00.00/rotatingstream/rotatingstream.h0000644000175000017500000000124613236662052020410 0ustar frankfrank#ifndef INCLUDED_ROTATINGSTREAM_ #define INCLUDED_ROTATINGSTREAM_ #include #include "../rotatingstreambuf/rotatingstreambuf.h" class RotatingStream: private RotatingStreambuf, public std::ostream { public: RotatingStream(void (*header)(std::ostream &) = 0); void open(std::string const &name); static void notify(); }; inline RotatingStream::RotatingStream(void (*header)(std::ostream &)) : RotatingStreambuf(header), std::ostream(this) {} inline void RotatingStream::open(std::string const &name) { RotatingStreambuf::open(name); } inline void RotatingStream::notify() { RotatingStreambuf::notify(); } #endif natlog-2.00.00/rotatingstream/frame0000644000175000017500000000006313236662052016205 0ustar frankfrank#include "rotatingstream.ih" RotatingStream:: { } natlog-2.00.00/rotatingstreambuf/0000755000175000017500000000000013236662052015666 5ustar frankfranknatlog-2.00.00/rotatingstreambuf/lockedoverflow.cc0000644000175000017500000000017013236662052021220 0ustar frankfrank#include "rotatingstreambuf.ih" int RotatingStreambuf::lockedOverflow(int ch) { return d_out.rdbuf()->sputc(ch); } natlog-2.00.00/rotatingstreambuf/notify.cc0000644000175000017500000000020313236662052017500 0ustar frankfrank#include "rotatingstreambuf.ih" void RotatingStreambuf::notify() { s_semaphore.notify(); s_rotateThread.join(); } natlog-2.00.00/rotatingstreambuf/overflow.cc0000644000175000017500000000016113236662052020036 0ustar frankfrank#include "rotatingstreambuf.ih" int RotatingStreambuf::overflow(int ch) { return (this->*d_overflow)(ch); } natlog-2.00.00/rotatingstreambuf/data.cc0000644000175000017500000000026413236662052017110 0ustar frankfrank#include "rotatingstreambuf.ih" vector RotatingStreambuf::s_rotate; Semaphore RotatingStreambuf::s_semaphore{ 0 }; thread RotatingStreambuf::s_rotateThread; natlog-2.00.00/rotatingstreambuf/unlockedoverflow.cc0000644000175000017500000000035713236662052021572 0ustar frankfrank#include "rotatingstreambuf.ih" int RotatingStreambuf::unlockedOverflow(int ch) { d_mutex.lock(); d_locked = true; d_overflow = &RotatingStreambuf::lockedOverflow; d_contents = true; return d_out.rdbuf()->sputc(ch); } natlog-2.00.00/rotatingstreambuf/rotatingstreambuf.ih0000644000175000017500000000042113236662052021745 0ustar frankfrank#include "rotatingstreambuf.h" #include #include #include #define CERR std::cerr << __FILE__": " #include #include #include #include "../options/options.h" using namespace std; using namespace FBB; natlog-2.00.00/rotatingstreambuf/open.cc0000644000175000017500000000071513236662052017141 0ustar frankfrank#include "rotatingstreambuf.ih" void RotatingStreambuf::open(string const &name) { d_name = name; d_overflow = &RotatingStreambuf::unlockedOverflow; bool existing = access(name.c_str(), F_OK) == 0; Exception::open(d_out, name, existing ? ios::in | ios::ate : ios::out); if (not existing and d_header) (*d_header)(d_out); if (s_rotate.empty()) s_rotateThread = thread{ rotateThread }; s_rotate.push_back(this); } natlog-2.00.00/rotatingstreambuf/rotatingstreambuf.h0000644000175000017500000000212013236662052021572 0ustar frankfrank#ifndef INCLUDED_ROTATABLESTREAMBUF_ #define INCLUDED_ROTATABLESTREAMBUF_ #include #include #include #include #include #include class RotatingStreambuf: public std::streambuf { std::mutex d_mutex; bool d_locked = false; volatile bool d_contents = false; std::ofstream d_out; std::string d_name; int (RotatingStreambuf::*d_overflow)(int ch); void (*d_header)(std::ostream &); static std::vector s_rotate; static FBB::Semaphore s_semaphore; static std::thread s_rotateThread; public: RotatingStreambuf(void (*header)(std::ostream &) = 0); void open(std::string const &name); static void notify(); private: int overflow(int ch) override; int sync() override; int unlockedOverflow(int ch); int lockedOverflow(int ch); static void rotateThread(); void rotate(size_t nFiles); }; inline RotatingStreambuf::RotatingStreambuf(void (*header)(std::ostream &)) : d_header(header) {} #endif natlog-2.00.00/rotatingstreambuf/icmconf0000644000175000017500000000110613236662052017225 0ustar frankfrank#define CLS #define LIBRARY "modules" #define SOURCES "*.cc" #define OBJ_EXT ".o" #define SHAREDREQ "" #define TMP_DIR "tmp" #define USE_ECHO ON #define CXX "g++-7" #define CXXFLAGS " --std=c++17 -Wall -O2" \ " -fdiagnostics-color=never " #define IH ".ih" //#define PRECOMP "-x c++-header" #define REFRESH #define LDFLAGS "" #define ADD_LIBRARIES "" #define ADD_LIBRARY_PATHS "" #define DEFCOM "library" natlog-2.00.00/rotatingstreambuf/sync.cc0000644000175000017500000000037413236662052017155 0ustar frankfrank#include "rotatingstreambuf.ih" int RotatingStreambuf::sync() { if (not d_locked) d_mutex.lock(); int ret = d_out.rdbuf()->pubsync(); d_overflow = &RotatingStreambuf::unlockedOverflow; d_mutex.unlock(); return ret; } natlog-2.00.00/rotatingstreambuf/rotatethread.cc0000644000175000017500000000073613236662052020671 0ustar frankfrank#include "rotatingstreambuf.ih" void RotatingStreambuf::rotateThread() { Options const &options = Options::instance(); size_t freq = options.rotateFreq(); size_t nRotations = options.nRotations(); if (freq == 0 || nRotations == 0) return; freq *= options.rotateFactor(); while (s_semaphore.wait_for(chrono::minutes(freq)) == cv_status::timeout) { for (RotatingStreambuf *rs: s_rotate) rs->rotate(nRotations); } } natlog-2.00.00/rotatingstreambuf/rotate.cc0000644000175000017500000000175213236662052017500 0ustar frankfrank#include "rotatingstreambuf.ih" // assume nRotations == 3 // x.2 -> x.3 if x.2 exists, rotate // x.1 -> x.2 if x.1 exists, rotate. // x -> x.1 void RotatingStreambuf::rotate(size_t nRotations) { { lock_guard lg{ d_mutex }; if (not d_contents) // no contents, nothing to return; // rotate } string name = d_name + '.'; string newName = name + to_string(nRotations); for (; --nRotations; ) { string oldName = name + to_string(nRotations); char const *old = oldName.c_str(); if (access(old, F_OK) == 0) // file exists rename(old, newName.c_str()); // rename it. newName = move(oldName); } lock_guard lg{d_mutex}; d_out.close(); rename(d_name.c_str(), newName.c_str()); Exception::open(d_out, d_name); if (d_header) (*d_header)(d_out); d_contents = false; } natlog-2.00.00/rotatingstreambuf/frame0000644000175000017500000000007113236662052016701 0ustar frankfrank#include "rotatingstreambuf.ih" RotatingStreambuf:: { } natlog-2.00.00/rotatingstreambuf/driver/0000755000175000017500000000000013236662052017161 5ustar frankfranknatlog-2.00.00/showseconds/0000755000175000017500000000000013236662052014465 5ustar frankfranknatlog-2.00.00/showseconds/data.cc0000644000175000017500000000023113236662052015701 0ustar frankfrank#include "showseconds.ih" void (*ShowSeconds::s_show)(std::ostream &out, size_t time) = ShowSeconds::rawTime; string ShowSeconds::s_utcMarker; natlog-2.00.00/showseconds/utcformat.cc0000644000175000017500000000022513236662052016777 0ustar frankfrank#include "showseconds.ih" void (*ShowSeconds::utcFormat())(std::ostream &, size_t) { auto ret = s_show; s_show = utcTime; return ret; } natlog-2.00.00/showseconds/showseconds.h0000644000175000017500000000210713236662052017175 0ustar frankfrank#ifndef INCLUDED_SHOWSECONDS_ #define INCLUDED_SHOWSECONDS_ #include class ShowSeconds { friend std::ostream &operator<<(std::ostream &out, ShowSeconds const &showSeconds); size_t d_seconds; static std::string s_utcMarker; static void (*s_show)(std::ostream &out, size_t time); public: ShowSeconds(); ShowSeconds(size_t seconds); static void setFormat(); static std::string const &utcMarker(); static std::string now(); static void (*utcFormat())(std::ostream &, size_t); static void setFormat(void (*show)(std::ostream &, size_t)); private: // all in time.cc static void rawTime(std::ostream &out, size_t seconds); static void utcTime(std::ostream &out, size_t seconds); static void localTime(std::ostream &out, size_t seconds); }; inline std::string const &ShowSeconds::utcMarker() { return s_utcMarker; } inline void ShowSeconds::setFormat(void (*show)(std::ostream &, size_t)) { s_show = show; } #endif natlog-2.00.00/showseconds/showseconds1.cc0000644000175000017500000000012213236662052017407 0ustar frankfrank#include "showseconds.ih" ShowSeconds::ShowSeconds() : d_seconds(time(0)) {} natlog-2.00.00/showseconds/showseconds2.cc0000644000175000017500000000014013236662052017410 0ustar frankfrank#include "showseconds.ih" ShowSeconds::ShowSeconds(size_t seconds) : d_seconds(seconds) {} natlog-2.00.00/showseconds/showseconds.ih0000644000175000017500000000033713236662052017351 0ustar frankfrank#include "showseconds.h" #include #include #include #include #include #include #include "../options/options.h" using namespace std; using namespace FBB; natlog-2.00.00/showseconds/setformat.cc0000644000175000017500000000047413233363225017002 0ustar frankfrank#include "showseconds.ih" void ShowSeconds::setFormat() { Options::Time time = Options::instance().time(); s_show = time == Options::RAW ? rawTime : Options::UTC ? utcTime : localTime; if (time == Options::UTC) s_utcMarker = " (UTC)"; } natlog-2.00.00/showseconds/icmconf0000644000175000017500000000110613236662052016024 0ustar frankfrank#define CLS #define LIBRARY "modules" #define SOURCES "*.cc" #define OBJ_EXT ".o" #define SHAREDREQ "" #define TMP_DIR "tmp" #define USE_ECHO ON #define CXX "g++-7" #define CXXFLAGS " --std=c++17 -Wall -O2" \ " -fdiagnostics-color=never " #define IH ".ih" //#define PRECOMP "-x c++-header" #define REFRESH #define LDFLAGS "" #define ADD_LIBRARIES "" #define ADD_LIBRARY_PATHS "" #define DEFCOM "library" natlog-2.00.00/showseconds/operatorinsert.cc0000644000175000017500000000025113226660664020060 0ustar frankfrank#include "showseconds.ih" ostream &operator<<(ostream &out, ShowSeconds const &showSeconds) { (*ShowSeconds::s_show)(out, showSeconds.d_seconds); return out; } natlog-2.00.00/showseconds/time.cc0000644000175000017500000000154013236662052015732 0ustar frankfrank#include "showseconds.ih" namespace { void insertTime(DateTime::TimeType type, std::ostream &out, size_t seconds) { DateTime dt(static_cast(seconds), type); ostringstream os; os << dt; // E.g., 'Sun Nov 2 13:29:11 2008' // 01234 56789 out << os.str().substr(4, os.str().length() - 9); } } void ShowSeconds::rawTime(ostream &out, size_t seconds) { out << seconds; } void ShowSeconds::utcTime(ostream &out, size_t seconds) { insertTime(DateTime::UTC, out, seconds); } void ShowSeconds::localTime(ostream &out, size_t seconds) { insertTime(DateTime::LOCALTIME, out, seconds); } string ShowSeconds::now() { ostringstream out; out << ShowSeconds{ static_cast(time(0)) } << ":000000"; return out.str(); } natlog-2.00.00/showseconds/frame0000644000175000017500000000005513226660664015510 0ustar frankfrank#include "showseconds.ih" ShowSeconds:: { } natlog-2.00.00/storage/0000755000175000017500000000000013236662052013572 5ustar frankfranknatlog-2.00.00/storage/storage.ih0000644000175000017500000000015513236662052015561 0ustar frankfrank#include "storage.h" //TMP //#include //#define CERR cerr << __FILE__": " using namespace std; natlog-2.00.00/storage/icmconf0000777000175000017500000000000013236662052020377 2../options/icmconfustar frankfranknatlog-2.00.00/storage/storage.h0000644000175000017500000000246313236662052015414 0ustar frankfrank#ifndef INCLUDED_STORAGE_ #define INCLUDED_STORAGE_ #include #include #include "../record/record.h" class Storage { enum { AVAIL = 1000 }; FBB::Semaphore d_available{ AVAIL }; FBB::Semaphore d_filled{ 0 }; Record d_record; // retrieved from the queue std::mutex d_mutex; std::queue d_queue; bool d_empty = false; // indicates no more data will // arrive public: Storage(); // could be default? Storage(Storage const &) = delete; void consumeWait(); void produceNotify(); void push(Record &&src); Record &fetch(); // fetch the next record size_t size() const; bool empty() const; void setEmpty(); // sets d_empty to true }; inline bool Storage::empty() const { return d_empty && d_queue.empty(); } inline void Storage::setEmpty() { d_empty = true; d_filled.notify(); } inline size_t Storage::size() const { return d_queue.size(); } inline void Storage::consumeWait() { d_filled.wait(); } inline void Storage::produceNotify() { d_available.notify(); } #endif natlog-2.00.00/storage/storage1.cc0000644000175000017500000000006213236662052015624 0ustar frankfrank#include "storage.ih" Storage::Storage() //: { } natlog-2.00.00/storage/frame0000644000175000017500000000004513236662052014606 0ustar frankfrank#include "storage.ih" Storage:: { } natlog-2.00.00/storage/fetch.cc0000644000175000017500000000050113236662052015166 0ustar frankfrank#include "storage.ih" Record &Storage::fetch() { lock_guard lg{ d_mutex }; // if this throws, nothing has been removed. d_record = d_queue.front(); // once we reach this point we own the queue's front element and it // can be removed d_queue.pop(); return d_record; } natlog-2.00.00/storage/push.cc0000644000175000017500000000031713236662052015061 0ustar frankfrank#include "storage.ih" void Storage::push(Record &&record) { d_available.wait(); { lock_guard lg{ d_mutex }; d_queue.push(move(record)); } d_filled.notify(); } natlog-2.00.00/tcpdumpproducer/0000755000175000017500000000000013236662052015346 5ustar frankfranknatlog-2.00.00/tcpdumpproducer/store.cc0000644000175000017500000000136713236662052017020 0ustar frankfrank#include "tcpdumpproducer.ih" void TcpdumpProducer::store(Record::Type type, Data &data) { if (data.hdr.len > d_bufLen) // ip header length already in host byte { // order delete[] d_buffer; d_buffer = new char[ d_bufLen = data.hdr.len ]; } if (not data.stream.read(d_buffer, data.hdr.len)) throw Exception{} << ": corrupted tcpdump file `" << (type == Record::IN ? d_inName : d_outName) << '\''; u_char const *buffer = reinterpret_cast(d_buffer); if (d_options.hasProtocol( IP_Types::get(buffer).protocol) ) d_storage.push( TcpdumpRecord{ type, data.hdr, buffer } ); get(data); } natlog-2.00.00/tcpdumpproducer/get.cc0000644000175000017500000000044313236662052016435 0ustar frankfrank#include "tcpdumpproducer.ih" // static void TcpdumpProducer::get(Data &data) { data.stream.read(reinterpret_cast(&data.hdr), sizeof(TcpdumpRecord::PktHdr)); if (not data.stream.good()) data.hdr.seconds = numeric_limits::max(); } natlog-2.00.00/tcpdumpproducer/before.cc0000644000175000017500000000043413236662052017120 0ustar frankfrank#include "tcpdumpproducer.ih" bool TcpdumpProducer::Data::before(Data const &other) { return hdr.seconds < other.hdr.seconds || ( hdr.seconds == other.hdr.seconds && hdr.muSeconds < other.hdr.muSeconds ); } natlog-2.00.00/tcpdumpproducer/tcpdumpproducer.h0000644000175000017500000000160613236662052020742 0ustar frankfrank#ifndef INCLUDED_TCPDUMPPRODUCER_ #define INCLUDED_TCPDUMPPRODUCER_ #include #include "../producer/producer.h" #include "../tcpdumprecord/tcpdumprecord.h" class Options; class Storage; class TcpdumpProducer: public Producer { struct Data { std::ifstream stream; TcpdumpRecord::PktHdr hdr; size_t seconds; bool before(Data const &other); }; Options &d_options; std::ostream &d_stdMsg; Storage &d_storage; char const *d_inName; char const *d_outName; Data d_in; Data d_out; char *d_buffer = 0; size_t d_bufLen = 0; public: TcpdumpProducer(std::ostream &stdMsg, Storage &storage); ~TcpdumpProducer() override; private: void run() override; void process(); static void get(Data &data); void store(Record::Type, Data &data); }; #endif natlog-2.00.00/tcpdumpproducer/run.cc0000644000175000017500000000117313236662052016463 0ustar frankfrank#include "tcpdumpproducer.ih" void TcpdumpProducer::run() { Exception::open(d_in.stream, d_inName); // throw exceptions on failure Exception::open(d_out.stream, d_outName); d_in.stream.ignore(24); // skip the global header, see d_out.stream.ignore(24); // pcapfile.txt d_stdMsg << "starting: reading packets from " << d_inName << " and " << d_outName << endl; get(d_in); // fetch the first packets from get(d_out); // both files. process(); // process all packets. } natlog-2.00.00/tcpdumpproducer/tcpdumpproducer1.cc0000644000175000017500000000062413236662052021160 0ustar frankfrank#include "tcpdumpproducer.ih" TcpdumpProducer::TcpdumpProducer(ostream &stdMsg, Storage &storage) : d_options(Options::instance()), d_stdMsg(stdMsg), d_storage(storage), d_inName(d_options[0]), d_outName(d_options[3]) { // device address mask g_nic.set(Record::IN, d_options[1], d_options[2]); g_nic.set(Record::OUT, d_options[4], d_options[5]); } natlog-2.00.00/tcpdumpproducer/icmconf0000777000175000017500000000000013236662052022153 2../options/icmconfustar frankfranknatlog-2.00.00/tcpdumpproducer/process.cc0000644000175000017500000000060613236662052017335 0ustar frankfrank#include "tcpdumpproducer.ih" void TcpdumpProducer::process() { while (d_in.stream.good() || d_out.stream.good()) { if (d_in.before(d_out)) store(Record::IN, d_in); else if (d_out.before(d_in)) store(Record::OUT, d_out); else { store(Record::IN, d_in); store(Record::OUT, d_out); } } } natlog-2.00.00/tcpdumpproducer/destructor.cc0000644000175000017500000000031313236662052020050 0ustar frankfrank#include "tcpdumpproducer.ih" TcpdumpProducer::~TcpdumpProducer() { delete[] d_buffer; d_stdMsg << "processed all packets from " << d_inName << " and " << d_outName << endl; } natlog-2.00.00/tcpdumpproducer/tcpdumpproducer.ih0000644000175000017500000000044713236662052021115 0ustar frankfrank#include "tcpdumpproducer.h" #include #include #include #include #include "../options/options.h" #include "../storage/storage.h" #include "../nic/nic.h" //TMP //#define CERR std::cerr << __FILE__": " using namespace std; using namespace FBB; natlog-2.00.00/tcpdumpproducer/frame0000644000175000017500000000006513236662052016364 0ustar frankfrank#include "tcpdumpproducer.ih" TcpdumpProducer:: { } natlog-2.00.00/tcpdumpproducer/driver/0000755000175000017500000000000013236662052016641 5ustar frankfranknatlog-2.00.00/tcpdumprecord/0000755000175000017500000000000013236662052015001 5ustar frankfranknatlog-2.00.00/tcpdumprecord/tcpdumprecord.h0000644000175000017500000000125713236662052020032 0ustar frankfrank#ifndef INCLUDED_TCPDUMPRECORD_ #define INCLUDED_TCPDUMPRECORD_ #include "../record/record.h" class TcpdumpRecord: public Record { public: struct PktHdr // this packet hdr is used by captured files. { // pcap_pkthdr uses `struct timeval ts', which is // longer than 2 x uint32_t uint32_t seconds; // time stamp uint32_t muSeconds; // time stamp uint32_t caplen; // length of portion present uint32_t len; // length this packet (off wire) }; TcpdumpRecord(Type inOut, PktHdr const &hdr, u_char const *packet); }; #endif natlog-2.00.00/tcpdumprecord/tcpdump.pcap-fmt.txt0000777000175000017500000000000013236662052027254 2../documentation/pcap/pcapfile.txtustar frankfranknatlog-2.00.00/tcpdumprecord/icmconf0000777000175000017500000000000013236662052021606 2../options/icmconfustar frankfranknatlog-2.00.00/tcpdumprecord/tcpdumprecord.ih0000644000175000017500000000024313236662052020175 0ustar frankfrank#include "tcpdumprecord.h" //TMP //#include //#define CERR cerr << __FILE__": " #include using namespace std; using namespace FBB; natlog-2.00.00/tcpdumprecord/frame0000644000175000017500000000006113236662052016013 0ustar frankfrank#include "tcpdumprecord.ih" TcpdumpRecord:: { } natlog-2.00.00/tcpdumprecord/tcpdumprecord1.cc0000644000175000017500000000031613236662052020244 0ustar frankfrank#include "tcpdumprecord.ih" TcpdumpRecord::TcpdumpRecord(Type inOut, PktHdr const &hdr, u_char const *packet) : Record(inOut, hdr.seconds, hdr.muSeconds, packet) {} natlog-2.00.00/testrun0000755000175000017500000000035413236662052013562 0ustar frankfrank#!/bin/bash if [ $# -eq 0 ] ; then echo "provide (colon separated) protocol specs, or 'all'" echo "followed by 'in' 'out' device spec. or 'conntrack'" exit 0 fi tmp/bin/binary -t utc --no-daemon -s --log off --protocol $* natlog-2.00.00/usage.cc0000644000175000017500000001421213236662052013541 0ustar frankfrank// usage.cc #include "main.ih" void usage(std::string const &progname) { cout << "\n" << progname << " by " << Icmbuild::author << "\n" << progname << " V" << Icmbuild::version << " " << Icmbuild::years << "\n" "\n" "Usage: " << progname << " [options] command\n" "Where:\n" " [options] - optional arguments (short options between parentheses):\n" " --config (-c) path - path: pathname of the configuration file\n" " (default: `" << Options::defaultConfigPath() << "')\n" " --conntrack-command cmd - cmd: `conntrack' program location\n" " (default `" << Options::defaultConntrackCommand() << "')\n" " --conntrack-device dev - dev: `conntrack' data device\n" " (default `" << Options::defaultConntrackDevice() << "')\n" " --conntrack-ip-header-size size - size: assumed IP header sizes\n" " (default: 0, commonly encountered: 20)\n" " --conntrack-restart max - max number of times `conntrack' is\n" " restarted if prematurely ended\n" " (default 10 restarts)\n" " --help (-h) - provide this help\n" " --log type - log information abount connections.\n" " Specify `type' as:\n" " syslog: (default) log messages using syslog\n" " off: no messages are logged\n" " path: messages are logged to the 'path'\n" " --log-data path - write log-data on the file `path'\n" " --log-rotate spec - rotate log- and log-data files. `Spec' is" " either\n" " `time[mhd]' or `time[mhd]nFiles' (m: minutes,\n" " h: hours, d: days. By default (or if 'time' or\n" " `nfiles' are zero) log files are not rotated.\n" " --no-daemon - do not run " << progname << " in the background\n" " --pid-file (-p) path - `path' is the name of the file holding the\n" " daemon's PID\n" " (default `" << Options::defaultPIDfile() << "')\n" " --protocol (-P) spec - spec: protocols handled by " << progname << "\n" " command. Use colon separated combinations of\n" " tcp (default), udp and icmp, or use `all'\n" " --stdout (-s) - write syslog-equivalent messages to the std " "output\n" " (implied by --verbose; only with --no-daemon)\n" " --syslog-tag id - id: identifier prefixed to syslog messages\n" " (default `" << Options::defaultSyslogIdent() << "')\n" " --syslog-facility fac - fac: used syslog facility\n" " (default `" << Options::defaultSyslogFacility() << "')\n" " --syslog-priority pri - pri: used syslog priority\n" " (default `" << Options::defaultSyslogPriority() << "')\n" " --terminate - end a running natlog program using the PID " "found\n" " in the PID-file (see option --pid-file)\n" " --time (-t) spec - time specification:\n" " raw: (default) seconds since the epoch;\n" " utc: date and time in UTC\n" " local: local date and time\n" " --ttl (-T) secs - time-to-live for received connections. Format:\n" " `u' (UDP/ICMP ttl) and/or `t'\n" " (TCP ttl). Default: u" << Options::TTL << 't' << Options::TTL_TCP << "\n" " info about connections is logged if they are " "not\n" " active for `secs' seconds\n" " --verbose (-V) - write additional information:\n" " with --no-daemon: to stdout;\n" " with daemons and --no-syslog not " "specified:\n" " to the syslog daemon\n" " --version (-v) - show version information and terminate\n" " (suppressed by --no-daemon)\n" " command - command to execute:\n" " conntrack: use `conntrack' to find the source-nat connections\n" " in out: in, out: names of network devices (e.g., eth0)\n" " directly capture packets on the `in' and `out' " "devices\n" " in: source natting is applied to its source " "addresses\n" " out: the (natting) device connecting to the\n" " destination addresses\n" " in inAddr inMask out outAddr outMask:\n" " in, out: names of files written by tcpdump\n" " (e.g., tcpdump -i device -w filename)\n" " `in': in-device packages (source natting was applied to\n" " `in')\n" " `out' packages of the device connecting to the " "destination\n" " addresses\n" " `inAddr inMask': address and netmask of the " "in-device\n" " `outAddr outMask': address and netmask of the " "out-device\n"; } natlog-2.00.00/VERSION0000644000175000017500000000015513236662052013177 0ustar frankfrank#define AUTHOR "Frank B. Brokken (f.b.brokken@rug.nl)"; #define VERSION "2.00.00" #define YEARS "2012-2018" natlog-2.00.00/version.cc0000644000175000017500000000027713236655772014143 0ustar frankfrank// version.cc #include "main.ih" #include "VERSION" namespace Icmbuild { char version[] = VERSION; char years[] = YEARS; char author[] = AUTHOR; } natlog-2.00.00/VERSION.h0000644000175000017500000000010413226656470013425 0ustar frankfrank#include "VERSION" SUBST(_CurVers_)(VERSION) SUBST(_CurYrs_)(YEARS)