Preliminary release of my perl scripts for argus-2.0

Russell Fulton r.fulton at auckland.ac.nz
Mon Jan 8 22:40:49 EST 2001


On Mon, 8 Jan 2001 15:05:25 -0500 Carter Bullard <carter at qosient.com> 
wrote:

> 
> If anyone has any code that they would like included
> in the release, please get that to me this week.
> 

OK the time has come to byte the bullet.  Here are my perl scripts and 
support modules in the uuencoded inclusion.  These scripts are still 
under active developement as I find out more about new features in 
Argus 2.0 so I hope there will be some mechanism for updating them in 
the distribution independent of argus releases.

Both the major scripts (watcher and scan_watch) have had major work 
done on them in the last few weeks so treat them with caution.  Watcher 
had a few lines of code added today to track fragments, this is work in 
progress.

Look_for script takes a supplied filter and runs ra with the filter 
over archived data, you can specify dates to start and finish or you 
can specify things like today, yesterday, thisweek, lastweek etc.

the scan detection scripts.

Why have two scripts for detecting scans?  Well partly belts and braces 
but mostly because this is an ongoing research project and the two 
scripts use somewhat different strategies to detect scans.

Watcher is a 'real time' script that watches output from a live server, 
scan_watch is an overnight job that processes a days logs in one go.  
It maintains records of activity for a long time (up to 7 days be 
default) and thus is capable of spotting very slow scans (I regularly 
find scans with below 10 probes per day -- there are currently about 
80 probing udp-137).  Over the last two weeks I have added udp scan 
detection.  This is a mixed blessing because there are so many machines 
infected by worms that scan on port udp-137.  These scans are typically 
about 10 probes per day but the sheer number of them tends to overwhelm 
everything else.  You can stop it looking at udp by altering the ra 
filter to ignore udp.  

These scripts have been tuned over the last two years to our network 
traffic volumes, if you put them on a very busy network you will have 
to tweak the parameters to get the resource usage and sensitivity 
approriate.  I suspect that scan-watch will not work for those of you 
who have OC3s, it will simply consume too much memory, but then you may 
have machines with much more memory than I have. 

The distribution has two directories: bin and lib,  bin has the 
executable scripts and lib has the perl modules.  I have tried to move 
all site specific configuration out into the module files: 
Argus.pm Argus/Watcher.pm and Argus/Slowscan.pm

I hope that others will adopt this scheme and convert your perl scripts 
to use this scheme and, of course, add them to the contrib distribution.
One thing that made me reluctant in the past to distribute my code was 
that a good deal of it is necessarily site specific, particularly 
anything that accesses archived data.  I have attempted to deal with 
this problem (see Argus::Archive below).

Argus.pm contains all the generic site specific information (what your 
local IP address are, where is your usual argus server, etc.)

Argus/Watcher.pm has addition configuration information for watcher and
Argus/Slowscan.pm has stuff for scan_watch (you have noticed I can't 
decide whether to call it slowscan or scanwatch ;-)

Both scan_watch and look_for read archived argus data and they do this 
by calling module Argus/Archive.pm.  The idea is that you will need to 
modify this module to match the layout of your own archive.

There is also Argus/Support.pm which contains a lot of code that is 
common to the two major scripts.  Much of this code is to do with 
formating long lists of IP addresses and port numbers.

The scripts use a few CPAN modules:

use Date::Manip;  # handles dates and times
use Net::SMTP;    # so we can mail reports  -- this is part of libnet 
                  # bundle which is installed by default on many systems
use Data::Dumper; # store data structures to disk

I am not aware of any perl version dependencies -- should run with any 
reasonably recent version of perl 5.

I think that about wraps it up.  There are bound to be details I have 
fogotten so if you have any problems drop me a line.  I will be away 
from work for the rest of the week (on babysitting duty -- if you can 
describe keeping an bored 12 yearold out of mischief during school 
holidays babysitting ;-) I will be checking my mail at least once a day 
but don't expect lightning response.

As always comments (positive and negative) welcome.  I particularly 
want to know what needs to be better documented.  I would also like 
suggestions on how to automatically set things like the bin dir for ra 
and lib directory.  Could this be done via make install or configure?

I would put "enjoy" but I see that a certain large US multinational has 
now adopted this as their main marketing slogan.  I would not like to 
give the impression that I support such cultural imperialism ;-) ;-)

Russell Fulton, Computer and Network Security Officer
The University of Auckland,  New Zealand

begin 644 argus-perl-scripts.tar.gz
M'XL("+.%6CH"`V%R9W5S+7!E<FPM<V-R:7!T<RYT87(`[%M[5QM'LO>_Z%.T
M!1Q),7J`P4XD("'&Q.PZ-A><]2:VPQG-M*191C/R=`M%L<EGO[^JZGE(R(_=
M37;O/2?C8R3-=%=7U[NJ:_IAW+[S!U]JM_-P;T_=46K[X=YV^3.[.DH]W-G9
MW=O>[>P^P./._<[N';5WYS]P38WU4J7N>.EP:CXR[E//_Y]>??!_YEE_I-,_
M;(WM3N?A[NZ'^+_S$%QG_C_8??AP]^$>'N]T=A[<49T_^?^'7^MWVU.3MDD,
M)CJ-5'-665]7!__N14!>BEBI9K.I!F$<*#,UD]`/DZE1$\^_TE;9U/.U46&L
MCHB\O\_2E75E1Z%1)AG8F9=JE>JWTS#%.I[RDSC6O at V36%V'GDH]91/EN>6;
M.ZV.,CJ]UFFK at .*GX<0JSUH]GEA#XP-M`4.9N<$]SX:^FJ0)*#A4R4!Y08"E
MC$IB0/!4K.TL2:]4DJI)DEJZC[NCQ%@U2),QUDXL$<E-:U76:>$$E)GC62"$
MPP at UT]Z5,N$P]B*BEQ=%?#N#'R>AT2H$U,2?&@U2TDK6GY2V#.1'GE5!&&"X
M54,P0$/Z^U%H1CK at Y2PPTS(,O(G-0*>`%(-&DTD4^AY3+O"LUU+J)=8;Q at D(
M?.VES%5_Y`T&2@];*DIBK<XO7C#0BQ^?W3MZ]%<`FHU"?Z2()T,=Z]2S6+8_
M5\?)!1$8,L'T`=W3`"*2VA!,FX$\6B735)V>$4F%4/2`[IM)D at QT`'1.59#$
M-:NNXF3&C(CG(&02N5V#*!!`?P00(GP&I$I!2OP=R[Z&'K$"?'3<USGS(Y-`
M5D(F#<D3L9+X;4?`991$`<,R/BCF\*5Q`!*`P&$LX`O,04P-HP,"!Q`!W0+!
M3A_]#T3/&&93&%\GT;7&_-$TQJ3`T(9*C&0$O[(C]1?(;F=;J9,P-<198].P
M/^7EH'4VU<1($F//J+ZV7JX4LD$@RHHR!@\U)"[6,RP3:$6/0-/GN*O^/L;D
M4R#E!?AIO=A&<]5/DRL'1&8PD6?A1(NXUL9ZG*3SFH)5"9,`HA-%3J*3*0N:
M9W,B>]A8"OQ\#XB,P20U)K$R.C:A#:\U[65&\,TTG:1 at 0Z`P<.:9#`SD_DJ#
M4>DTCHDOQ`T/`J*O`'5`L$[551A%F!A:[.O(.AD/QZPT``4H4T-SO7XRM6JO
M\_VW2O;`LC7R@`8X"`B\7=J)Q_2"G`)MRXH"Q067;)I$4/&9&I,,GI[E-H%W
MRU8#E"(%AOF[`O at 7N`\EM&`&B><T'6*9!<*QU8BTAS&I]C6SP&@=J[YG0M-2
M2P)+3+6T`DA-QL5G*@;Z6D?)1(\Q7S%/]2^3*!%I)37';@:0F"G92@@<&T4%
MHU@!^&\??W?Z3+W+C*FJM4<0FS:[Q?9,]]M1V&^',<@[B6H]=5-9)XT[C?TP
MP'*F5ZG0;PQ:G$DB2U,Q1:EUPH$$*`';L#]+WT2?YLD4A+&\27)4%?6Q"X#,
M=$):"DD*IA'V`Q$":P;A$+O#MRET=I)`W_K1_-.PM&B1[.'L^<7IW]7;61W*
M-B`):O3X/NF>;^7[=]HF$]OM7MA`;KS`N&[W:0)VR at TF;NEKM^O\)2A5V7C\
M[&_OCLZ_^^'BR?/O']^H`[7A!ETP at R^?@(*.I#"^AK#92.B^XH\3^3B3CY?R
M8>4C5!OG;,`NX5KT+PK85X:,KJE70_ND>]9]V3WI5AOJ_7M8%*VJI_&U%\%I
M8`B;)];@:H]DKFG+I+)L[89$:UC%U.K8+!G,,(:B`!KK3Y3`A!LRDXO7"OM*
M>M$,RX..V=@/P@@*[(3,332J3 at R#7VG:!LU[HO;)X<90TT/UA%POV0DV%"R$
M4(R!-XVLJD;$'QI;I7EG:I]%*)Z.#U7VK0]](O],YD-F0]E(>34#9+???*GV
M$1F$4:;YA_"6HX3FP:;!>-$CF]#($[7/>Q#D8*\#%Q<P:'[4PH6PH++^\LES
M<MHFVR?=KXSG:H,>'&2\)JYIA`W0(\?VKW/I>9;8<#"_)#ZI[M+=GL!ZX7AX
MH++IX6`)($:&@_KBS9`BG/Q.!B1)6;=*8Q=$#T)P5S4'BW<;J@$SHW*E)!.V
M-(1MA7/WLS2T.N<\16>AN:K<*-D-[Y!9[NCSA.B3;?Q8#R[I8:\8>T9L/LC4
M9VDL/23UI-&4-M!(,@`\?], at 1J%H=N'7I0LVY*:@R=^_,=/Q&'&3-H[PCY[_
M\.P%`'8$FY,7I]\_QL]M^7GN?N[(SZ?NYWWY^>+'L\<*/W=9*1'5CCR*=L5_
MD=^X4G7H`Z(11&P-A)&QSW[/]V!Q#`>3IV?&18`ZA,<P?AB23Z$@,/(DZ."0
M+]6R<]9KCR)?7\)=0/00&LY9RF%."/XP36:0`_:,L.GA4`2VOH%Q6VK#DO$A
M_&&/8UOL?<#13+[WC+#\O%*!/Z_W>BPDZ[`A6(D\/$4J0\2I*8<7C`[\!"'$
MDD0K`D"=-9QX5F?+W7AU_TU/!I1PX!L0^R49/U%NT9*:LHIFL at K?&M?/C[94
M-9.:\R.EFC_!^Z09B%R at G+FG,9<G802[^)YM;F4-D-CN/O)(P`FHJLGL[L;=
MJJ![@_\Z at OEGA%QHR,D,C-&U=FE,AACMY>YJ]!B[4]6\*"L+3%])':JJ55E;
M$TC5CZ,/`C'^;A`9NCK;)RR:Y8,#W!0G+Y($*8+#T+^$9#)>QU7(!(&@&[UL
M`S>R:>$,LHA(U_?/CP[+_*"L1)AR?E19<^R\=P_`?,0;$WQ"*E,-="[9YZT1
M4>IU$C![P,*@FDZM&^KP-IO..![+=XAD1_M7ETXVZPYI%5&(1M:1!0Y)4$GB
M-BS+&U8GI!.2V'$8Q.%P9,F4KV6;9. at 1$C$P"V/7.71%0(848)JF[.ARQ<MD
MM9X+,"28Y933-B8*D>=N9>V?X$G;:7EU2U4RQJ<$"+$AJ0,@(PQ-TL#<9EW!
MMQLR1A/XVLP^2Y"+&<%T/%&DLHBJR$T0*<1XP-?+EI at ON7WE6Z3F'B4'>!1.
MH)U7>FXRHRJ,"72$4%QMR+UW&';#PE^^T3Q\)?;S#3&<F?WE@]U.IT":G71N
MGV7Q5=1SA3/@H2<PHM`[)MB:JOYE:E@;4SVF!)ZBU]/:V`7E'-#R7*':5LD9
M-`0+<7H+/@*("6DKZ[_+1<QAC5#6N^+BB/7Z,'A1.`XI+Y<(1-B<>888^784
MPL_"MB.42RAVP_["ZS"8(JBC.H#71[2])8(7<@0#TZ"#K!HQB+RA<=G3`/D&
M5S^DUA+C05T/I2@$,XXHI:%X*.=^*454,8=;@A0E<W&6:.?>%YYO!"]CIGVW
MNW<5D:;ZAD>R!+?#..`3*F23K<R_T)<)_ at 1ABK_'4`#Z at 3ML%"S,PT%FC9@(
MJMY^;=M;B'3#@16VD6!2QB_R2DIYM_`@#(0U,P?#`-K#W,HAMX4&7[PX?GQ^
M#DM["=G at 9VP21/E(FAW"2K]5U9V]O5;I?Y5-BRO+($?W`A\&R1"OW4U0=S`(
M?4Z1\U12M(.8GM4H*@M+UO-=9'HD*-PP>Q;S)W:LI%E+0TGM.(IYTU#[*[R@
ME at BO41!/&*4.?E/MDW;F>P>I-Z0$UF2K at D<P$S6Z7W/4PFZ9#QP&47T'T4V+
MN>TG4;,<R7.Q:OM^I[6S_:"UC7^0T>:7G9)5Y6E$ZAH>U9QE=;3D*A?H13$Y
M$2*F4E*D3DZ?F=QN+B63(OKQ7`S?++0C*(*9Q_>._*O*6IG'+"ZT]Y]/7L^^
M.'K_\_G[GR^.VCU`ELVU#B`C)*>,-,B0AP8(#)9PGP8.]TIID3K3#EL0XC%J
M=.=0W>_ at POB>*LM-II65VQ@`?AF#VPB$_CBGWJF#"#D!/"'=-&;;SM:#0*R@
M!8&!_-0HTRB3YX?SE42A%9LR#FBM?P at OAQ70&I/-[E,4F\D8!&FE2JZ[Q;"\
M::O7P;V-=JNYW>X)AZD.,.'*'P-RHI9/`H8UP=")[/IMU!=8Z4R8$_;%D;*3
M:J\4'I4=9[U1"F;OPGW`%N3Q=*Z9;O]<3\K-`P52KHQ.@[X&@=T\CJEN`<&*
M[VY6/6@>OJ/B!Q<Q[`<&G.0CV$;W1-&!@5CZ(BY:-?EI&?P'QC#=W!B2KHJK
M[#R/J9#&?J)<%7;>B)-\KOR-/"I76"Z+33RD)P59#<([+W6QR+M;B]]`G9"T
M7W+E`TA<YC6-NAO2X,AE%8>RY+',*;$K'QR!+;Y"1H-8DB&J;]Y]<.C-*C-\
MQH,N+[#I?+')U(SJ'P,D08]A71G4JYO;7X$4N_B_O6>ZF\T'T.C-^^6?FZ:Z
MY=PQ9JY]S!7+\Y([SAPIQ9HWI1QH[&5^3`*LKP5YN54O05YBT-9'R.V"^BRJ
M7)ZZ^O$M,+TBM&??-$-ZED?#'$8]Y<KN>>:.+T at 3*<)),9`C:"F&P0;&`9\J
MT()26QM$R<Q)ZDR+L-+A#BNSI$209Y%I=EA#4)+"<LYF7)P$9"(K1L99W6*K
MW6Z_I&3[!X<+S[S2LY[LSI_[$564X2N&(UX5$?HXL9I#,S;VCDU4'3<A;803
M`!K*E>K0SCDBS,Y6:(JD$=85R at 7OA0S,&4FN)D at 6GV<1+AU93A^8![)WI[T.
M%`O^AL]V;C$-62/O\2&%1VKQ,64/)T5ZG$DE(5(628!8)8ZX_4%1I`SG4W*(
M,9FR<#+DK\IO+QP=G3<(0NP3D?]3*F$H]?NLKG/[9;G*5H:3"U))79;];\;K
M#7]+<4ZMD#QE97 at 8'D]M!FJSKS9_5-"'S2?=S>]5??.G1G4+7I8,23D91S:.
M'(X=NE2`RB4]\IPW(F9.6G/YJI>9=IM=(."!^N:R)'^$9P%5;H/ULQ%;/"J4
MCV)*1ZY<?C)#HD7&;IIRX0U?Z:04'[`#!+]7A*>WXG)BB., at .Q,R'!#FU>GO
M at 2#7*\>$]8WE^-W-<;'[_L<B]X6896'5S"\M0^6JYQM1V%L/3Y;0+,HCPK"5
M&"X.7[T>J;8K"SHB.P9Q"8CYF84M/0F-_"0.C"N<9D9*:B4ZN!4EPKJP1"+0
MRX%)B%,KQ`TRL$%%T#%S.,#_$?TBD6 at 4NE$*CGX#(]L_[W3J"#@;S:6_KX-&
M=^&CG>U0Q,KMC^4?SM"M-'(K`X?F-KO:C3FB at KT.G1G,[VTC">CBRT(4F8E<
M#OG]^](J!ZJY+6:.Q7AA(P4]>:Q4>5TG"/FKTAPYF.6J92[B]`PI24D*G///
M9SDDH+>5VQ:IA`"S-*$B1I#`FI"_9(L]@!?BE(R\PFH0)P4,L9+6)JM'/ETU
M<L%'K70D0B#N8:#8M$C(W<QO(C)1)3O&9"FLC=2YRT;QQ];FN+49P%+2Y-)0
M`E0:]Z35Z12#UN6DC,ZEG+;!7F$"W!L=D/7GA%F=N%>O/=JM;4E1I-Y^W6IO
MD5LCX[K#9X at UY#AKF<42*$C;,C/"1Z*704+%G<M4MQ,1'F<6::LZ'MH13Z12
MW0[))LPR$.=[6YVMG4ZC5?NBIKK.M^!ND8?J3T/#W%898A,`(?>WH.6$8^J3
MP*W<#/']IR36M)LPTT(:26G;*Y#FC<O7<K2R!^Y^P4MM_-3=6U?]:1CEL5,_
M">9TQ.DJA"8+$.F(Q_6;9"<Z?#)6B`^4B8Y2',8435V&$R-.[;4LR99@[14'
M2&X<DFD,6Y95]:;1<Q'M/RA[EL,XSV$UEZX8ZBZQ\XGT%.0!GKI=(<M.#:4.
M08 at P<:4`X0I`E37.1DJET2WUF1'`<@#`BM-0+545]C1)*YMN95?,%K^8\7_-
MN10N/=#H=N%`>J5S&#XEI],G\1N.V^*]P>KB2;7DR at 7LOLK,)__\XD`]8,^X
M,'D<QE.N:A1B^4]"&(%_GSU_9_?6?%B9A:(#BY83S8P2X,K4MZ4&@$*X):.4
MNXC!J/\ESU7<"1[7'MB<^UY,91GI&PICX<QM**KZFVLI`:0VV4%I,6G2U]:&
M;0U_?5V:O!+"2V1FWDS$P7K1%97PP6;6H'9NBNNF4<#A+-M9!!=XN:JTW*,M
M_$IUPJ8[L.Y+PQ_[F1]>/'("74("JEN%5'Z^4*^M%.KR9HN8[%]<#(CFJPW'
M'UKJ%O1F\_??RH>XEY<?'A4]GBS!WF22)K_0NB+##,T%U8TLM%F$Y8P>0[SL
M`Z>K>F8Y\QE\[OX3G5+O($RZMW#0)ZB_^O*-^D)M=\HGRL5QP&+6T+C-'-[V
M!5E/XXTGD5YJFJ7VQZZ<S<H!'?<8&9(I=8\PRYS2D>_#1OGS%1SZ1Q+&]2J3
MHP87?KO&<T,/&HW"`$H!FQM80E+H\K&8.Q7+W5K)EFYEUD'\A;@EZ;YR3B.T
M>?.&*MK&NEUH7;U*"OG:,EFKM()H-#%1_%4.O9*?=Z_L.'&J3P$B97:K4_52
M)2&D"(G.=WH+Q9'E#.C;J9E??N_1>1XGLS?E$Q'@DI7U/CEO89DZ+7\K4CH]
M<U'2UY37+4-T8[(]O<CWU%TQ^)S+,BM&<^K[^S1CW_GS^C___D>4)%>7<+W_
MG?<_U,[#AZ7W?^YWZ/V/[?M_OO_Q'[DJ*UX`4?P2 at IH:;TA1C`B'>K7O^C\/
MWW#3D^&.OS"%JTTH#L_:%+,VWVJYS1<WJJZ2PIV912ONU[@JG^Z?O=TN>Y3"
M;EZO[((=+'3!&ODXEH_$]36^76B1G:F*]#8N=,,>=TUWT$VZ)]VWLZ[MGGUF
M4ZPZ5OL98>:'B(&.LQ^NF3EKCACIB,KYRF`\@I%#5@>,O^!")-VBIX.EIR=A
M')I1_MAUD.:/I3F-VR[D#$T>T]!$Y3SDH07N]#("!R?<!]N,?6J<56=+H`?3
M6.(J>.H)O\+"R]#0F0R5-E8,?3ZUW*Z=J.PVC7I;/@O'J+=3<OWC)."G5NUG
MT3+#D*J:Y:@FU=2%>*VYQ8T6C2FTRX-K/>18FML%B7?PVPNM>PG<9;4I7ZO(
M[6O-7V._!F[E[9U at R>5YDN3-G\>W^EZ/>\IUE3KJ'BRW!](:3NA.:!4.KVJ*
M(JNC\^_^UN#&V5(,R)+7</$&=^<]_^$%XIM#>5*2MJ(_J]0..*M)/^#"*7$9
M3/,C$(P-DJG-(*SHZ)6.*LY<J1O]Q4\W&6FL'/4XY3I0M3FB!YTB**NI:1Q1
M.^@")-?A^HU8C8,E!>YVH>S40J at OGR),$@VF`J5H<L-U&Q=U`@<GPXYWE['Q
M<9HFJ6RH?-PSB.DHM)A7*;IMJGB(`)6X?7<1[;<N;&>*7KQ<:IM,&:H(6R80
M[ZN*.SC+4L[H^44G9^H)R8M.1E7?OWAYV"B=\M_BQ9DJ/Z8KUK]P9S:IX:4L
M7]^X;.2M1*J(066?$(E><0A9*?M_>@'GDOO1_CC_CQ3I`_Z?OC^4]S_W.CL[
MV_3^[\[N@\Z?_O^_]?[GO7_WHFIE(51DRG\7H$NO9%)S%Q<7Z0P9^@+MXK=`
MLE>8MBBG](R9CK4IOZ]!WI?[@;RVO"B5I-)**/8AZ\G2]&(7`<Z=-[E)-BG<
MJ)H*S.SM%>JA+VI8/"3D-UL].C4:1IK!MWAXOTVJR^5:;V[R<(`'%\MQOZ6`
M9,3HM4ERI$&Q)M>WYKA:XW$K"%JC$;Z\:@U_?<,IMIG1:X_<)V#$6<KZ?INC
M!Z.&L+]Q5J]J^BX at X)7<37D[4 at 5!>SRF0QH%1TDI8V at 94M#.*9Q*OZ?T#6EZ
M;6SA?<1R3&FH9X'*>I\94_X+(=7)4CQ"_H7?S?-">4,PCUS,TL at +[@:"G`D3
M$I&Y<A03+<UXFB#BRB84C5/E*<EGA4<!17ISD\=;Q^X,/NNU=D),3(#8)+)3
M?RD\I!]4:7_D>L7[K(-UF_`[%[FKWE+WM]O;.^VOOFI\(#+3=LN5+%T at -B*I
M(+3S-Y8,,P?!5_:"I/)3HG%?8>5TWJVL=]2V^H+_R>7_;WM7VMW$T:7GJ_0K
M*D).2['4UF8,%@(S+(%S at L/!9N:<0<1'UF($6AQ)CG&(__O4?>ZMK;ME(&_"
MO#FC3H!6=VU=RZVZMY[[%/7*MB\<=,[5I:V^ZL3>JNI`[>D,DKH!+=7T at NUB
M>D[.<IG:`G72_?T7O=GXO/TO:"1II>-(]]PC7?@UFL at MW@NY$$=A7KJ:D60K
MC>$XEW/R]-3S-TDJ[(5.KM at I#*:O\>C*14.G8N?I^2FY=K!'#KM`#Q:]RQF/
M=VPJT*[A$L[G_<7%@$M!6]53.,I8.)$@N^V`E6HG;]<1>SO>4OT>Y`>YMT^&
MTR6+I#'\2X>]Y95N90;YS'7(A6XRLFV''RO&/EL;7`R3)V\!EW2IR&^B;,KD
MU9A5*0,%;Q!H=I/`OW'.__0#K>]7LYLG>N%_/7Q5#U2]I_ND[`WV)_M]K?#]
M^B6*WA=[:7Z-RE!,=#3/O^9?0OZKO"S8^XD%>V(/CH.4I=20)9V7NNJ'-*2X
M\OMEEM)>W2`<*R7]J""1(7%T;J]GXX\<>P`82V1VI"/V_BJIXG"Q$$\P`SOJ
M*!>/_GK4F_0E at 4)522<@85F at 74N*7S$^2C;]>.M9O/4B*J<TN0'G-1Y,AI_+
M*-4<CQ?S<S(:2^:`)RI3A(S,I3+T?)5L_,?4^'SGM[S51$5KTF.BK=BE<-'/
M<KV<6%<X?QHR;FG&7YMSFA3:-[G28%P(2OM\?GXQ at 9)-$#Z=M^(-/2TB:4=]
MT3>X'D0BC"T#O8QFXG4J:=2V!<`SFF^,<+,A^3'U%E?YG%\J2*V2VW"6_*X=
MA at Y0-@2;K%S'P6OK!V2B4?%6!H]!;HUC at RU><F+7`4;S*[15ZBG4R#>HF\C2
M.$HBD&T="OV1?KE-)?XF0(!T.K0!4'H33VO5NV^WNX-R5R_N=MH,[Z*-(.$P
M@$0=S;Y*K_5\#&$STA%(-16)P`INV4`W,I5 at .`X^%/=&75B]@DRJPKEU^F^&
M^IO#UQ,JGA`D_2FA[+"I=J*;D2JD5*LH^A_N>^+5Q[&XORQ7B)/R[UGTX<6S
MZ`.W=T7(I\%R59&-,[JG%WHFH, at +W)]>K6A>+H[,C?$!LC at 7\OV!QIUG6"@*
MCE9+>*W(S$.Y``ZEBR%XMVORI+!?*"_7[_G0Q\KH\D1`2D*Q>P6&S+7Z_GL2
MBY\)-/P5Q3-ND=F.&^&>5BEPP7CRZ-4.!O9W7HN%WPZ02\(I(^=M37M^2S.M
M at IP;(`B2L\XT]/D2SUDZUKN[<#P'9M4S-_0&/9'W)@*=UGU_J7^>TH*%G8*`
M\<?V)\<W$@UM?$Z37XDZB[JOZC7^:GJ.6?&6.AW[68@[1=(9J,2]X;YJ-ENU
MF@!>Z,D]_>0VN=ZPCZCO=!,4)=V at A_/#_SPY)+262ZW34?7F7CML!-T*7%-5
M!*)FR*C!M+/38+ at B;_$!NS?I8,\.7[+[5[*2O(ZANP7!`^$4HQ<#KXZ.EVO8
M-DI2YONZS+5&"RG+8+EGGZQEZBAY/D)/?0\A/'@5E5D8F6:0\:V^(V=9YYM%
M_G!:QK,OL0EMD-?N`[_+K/X?9Q>KU7#2@\NBS<H;#D&[W&ZV;HLC\!F!>28Z
MHIG6D`,"<@MDNV_F<J9%(SB`B3=1+L1[Y+QF9S<Q:7,[Z?&(_\YN4F/*A%C@
MYF>W(.<)9-ELF%GG at 7%(L='$$>AZ;<)V,N8<QC,/[&,(0E+)NDA?GCX<?\CO
M!_F(8\\2KEGKT[>1P#^0Q*VO#P]W`6\- at 64?PQ)&;>_'":9!YAFXI1B=0-ZQ
ME^+"`?T"H#J0=<WI6=_0?0G$BE8,#S*6 at G-I,^+U&??'8`DZ'_;'H_%PX,.A
M1\:4/Y?=@Y#L@%?NG!3I7MAJ2D0O\&V5`WN[$-DD.IP.[R\EDXKX-H+9_MG/
M1\?[^=3Z-`.+:)PV>*:AKZ88!$YUD#36P#L<_5/Q5.FXJMB[3J\K$[!8AN9R
M?/=JE/`LF:^"!UNZ'YS`#9]!O'8ZX6(X^^%R%=M$",AHN\,[<%K16".;9D3Q
MM.9YL8K4 at PS0/Q28[[^GZ8C]_HFO!'F]J;W%JA at AR@R+$4H`BU['>*`Q1WQ7
MX@^46CC+ at CZ)]=L")"[#+Y^7[5QO94-.0;P$KC(8%P<*/"$Z&_!07A#/2VK%
M#A'^[.'1L\A.Z'Z&)-Y*R=:TD45=R(G<-J+"MI.3#R*Q4Z\Z&44R0UY7CG-!
M6Y?`]F=3("D]NCD<*SL#]CG=Z<:UX@[-2[Q8<X]+W<OMJOY3+N[XWX3&^E2L
M&YE&65KYGPOE&_7&S*+X;CFV\S+K3B?A!8FG976OHQI:Q^5=T$I4"=_N`QAN
M4R*1*.UH:["LMKE$;6O[%WJUY3HB/DX0<[5L1::F:A'#E)QQP"+?PIEUK$FO
ML5D at ZI$6CBX\+ at M@'_1I6#@X_/8L&S!?>-0J5#R\/,/E'5H>M!FDQ%DD==YW
M&BMT9Y0TH.1DJZ7D=:>>543.T.?0:H`V)J6)&#])VS*T81(16^15Q&,0P.VS
M(=MW:2^=<(X6P=T[G?\V!-%44OH<I"KV2.*@Y_EC]%Q/9%HHK(M at QS4JGB8`
MZNX%^D8"Q;-"I-/8"3S#I(IH63J>.-D*`<32S!;[!@$E2N=`E#MQUJ*E:ZD[
M^-2Z[L;D3<-_:^5[1P$4;MIA11/QOC*(X]700(ZQUT*`XP+6CY0QMU+:ZR,E
MLB3\X^&R+[=K,/NJ!)H0,H!18&.+4NI&Y'XJ/\+PLX`D`5Q*ARACCC%3(I>F
MC%4Y2`(2+HVZ5KH$S3384OEIXK'+7;GMB1X]?)C-S9"><LN>CL^84A/D.)!.
MI at XS9HG0SH&`[8R"_:`ODXZ,&ZH[TU`>X5B6`'1+P"#OCLLP</25M5-O at +T*
MD!D"ZSH7(D-CK,/FE;6NP1J#Z1F<C!]!5Q=CM1?"*HQIB7>L('I00'^#1&OZ
MO"MJUREV(%='QHI>!J\C7'T,^H+-A<M8B]2"F?=A`WK\^L5+"U%9>G9RCZV*
MWSD[#[<GQ51<JE*7EFV"5@#5D4+"9<-RHTHP\H3^EZ;DWP5+:71`IK9Z\O+G
M5XR?D<5E=O$B\UK0+[G$RKP>K':X\)RV]>ODA_2+9D-W_>/V_XFU\]^%_YWP
M'ZTZX3]KC;T-__LW:W],%#O_)NW?VM.OZ\W;>YOV_[;M+VX!\?GT;\!_W;X!
M_]W<;32$_[_5:.SI^WJSU=C at O_[CVWR^A3GD23<A>$Z"CUB)/]](K\>P"P\4
M`;&S]R]H1<APK&6P3:]*6X%SBRH*?6+1L`7H.[.Q;3T_0_-N<:TS2W&MYTHB
M!8_-1A6%X(+U(#9"3$WQF`U<//X,T0\<]9:"NP`Q];OQ&?GN.;W3YRE9 at DS,
M$/)/Y[.Q7I<ME;H<GM+NWT?XJL)SBLDY=?A5/X9K+SE`BH%DS*KM=#Z`U2Y+
MQV5(E%[P$JT@(W28-IL49*AS8L7!N0$ZQI`7QF/@L/*)EM%J-^P$!8\&3>M<
M]U5CMU81XYW^J&28%L*T7!CZ,AC?PH!W3=#F[5HEF<AM3J1F$]%]:=B;)H,U
M6C4_()%[ZPJ\T at OD=%Z<Y"[*A8+W^OV,,C4X7',W6:CF;JSE%5[>1G:WAGTZ
M&6!XV;M*A6S4_*I:'[*ET[0!DX5IQJU=O-RK2:'''^/5]$/<N^A_F&A]*.[U
M.4ZCUHB;>_&=.SKCH(F(4>'#.*:C#R;#P=FP>MI;ZHX?]^?Q[/=4W'HB[J(W
M.UL;.6W+Q0!Z+*X"66<AH%L?`W-HV/#96B,;"``!ZAY<8G[BLF"7F.R?+)-S
M`4?BG(WY(E:O>NSA;J1(#S1(9D0SF?ZT]X%[O!YK9XO>-'F&P.D%'P*!QYQS
M/F\2["AUMU9K"]L[DWW`E\)\G>%+NL5DGW1LA+(;"LZV*5\(UWOBGB=#;]Z6
MLP.5F2R]3 at QV:&`D<U:7O;$<W$"43>80`^(EI<+@$_*99O84C;HY.D)_Q07V
M5(T#/A%%<Q%`GR&B$$(0VWM3/AB@)[LS.,N`@CL_:!QP<;'P&T:^0'_ at 6N'=
M4>P2NUZ(4Y`6:LF7WQW5J+4M)3\3M]%S5SIQD\6V+E6QG5\ZJC`^%X;&E>IV
M2ZK'^[CD/2NU5:#'M)>@189*;K\C+IE9,U]VNV7Z0[@GK3K^4]=_1WQ at PC=?
M_]7W:H3Y#]=_>DFX6?]]J_7?X9"PLR^.7[;9X"*2B4DAR;:D5RKD5V/@['10
M3X5Q\N`Y`.7U3!7A?",>0W0;.D\+;P?>$*`&-XYE"PLCR]5[L)J3.78Q')6*
M)V]J;\G=^>`34E,')]=JW\)PEC]4])\T#Z].\SU1HOME$$ACC]8\.AG@(\BV
MZ;*A?'"G<^B2><=2:J)\'1CY;7V5(K/HB3AC;$A;(QVBD'E*Q/)/\[-2X:GU
MPR*;.R5%*9FS?R!X)<U"13U]>/SP)^6\>B@%]35)V*@>D0E,DXJ+5[T/S_T(
MO?L at BY,G*LLI#G[X`L)W,R,43`3[R:BOY71USCP!AFR<IL_HAH0B*;UDO)IS
MK]"QN!J\9`E'SXE&Q=7<1.0M6MUH;@>*4O`3I=Y0>@/*[N/Y/@4GL at +\/N(.
MM&^[DGW#?`9%`Q)YBS*E"L6>&R at 5RI/(=2B\,/*(/"&9Y)L&@TXK<%(39C'T
M9,-9)T'%O/\IKSQ^.F*W<$1/I8.>#UP#0=/^?L\/<)H1X)0U)7]_SAG8>V]:
M;VGHV`>G]("&SZX>.BWZWENR]:++T]$S=W%,?*,SNMG>-GBRQ.M6^)9Q`J"%
M?5,<OV7VR5.Z=7YNAI-A(3SO`4V(O*S9VAI-5R>TW!T:&FX`#&Q%',S[JWJB
M)CRY at M`Z2".4;!*1GAY\PGL/34"V?KW^*+B]<O^#=[&I2+G25W4ZB(T/M!61
M0Q*@_#7AXH"Z9_W[_KOY.5ZW+>@UBJ,P4M5DN;UMX^&$#2F at +4AV/@+#NR$G
MTT#TTC0#[4^=P.1.>UF.65$/0&`T+T#T2F#!!)FB#C&[8%+V&0>=42CEM0^2
M)7\1'&)C]YA)-)<DM,-W2![;]&K5#][HG_I%WB',*&,_@/Y9!@:06\DDW0`^
MCW_=I_-:<B;F+K^Y`,7V+EYPGO6:7O*;PFUS$)"DX_T#M2;`/@<(=BL`")`Z
M0;'"ZBC at 397KMGI?3W2T_T'MC8%`>Q]FH%((KQ=:((%)C'I"Q2:D>T/!@;*D
M!/>2];PF'4O=4]&3EU9`=`&W!J#V#*)S^JE"M)5ER_;K@*H9.:*E'`9(2SX6
M),1LR\W8SDB5XE31$V^N)HK^^5KB9)*51'G<2W2H/UU%%/OK:H at ZE]20]/WL
M&D(?2Z=*<:H8L3?7$$7_?`UQ,LD:6O6#&L*8_-,U1+&_M(98H'G!F-6,GJX6
M>L:FB%%;16L"YP/1%[P1$6 at V\6GWNR1V at Q,"H]`F/`X99;LJ"&#E&0BCYR,`
M&'78F,\]<?/^$F`6BDG(^3%Y5$%Z*@-)R?FG'-GI;QS\+O$L6.$YK2*TN#32
M]9_W%4',,'\4`X:]A02#>RIJ"\)Y"Z)ZBZ'\!WAT@$<',IX#4D)7(M(H:%'#
MXCMX*C83_WF"[ME`DOPO/`\?Z"]C;P+YCQ<Z_?EDTCO7^I`]JF:9AH^0\4,1
M&3J]-Q!9F)Y,XW#^%H_R_&4^)XS!QA\!3%58U5!B\/#H#K8)8^+]568T5[GZ
MH/3F8?5_X/]1?K##(!Z</^+HPU&S)$PX;S)6/'_TXB6S+N:ENU,-)%`2?!A9
M3F#?5*O)`/2B;2'"#GCHAF%(?7OO/OVG3GM:/>G1<7^VG^N5^0FSW^8\(+^!
M']LFGPT!^`Q'^?*3>7^M.GK)'2X?2EWN6EWN6UWN7)AK)58`[#B`/))[2&^Y
MQX0GN>H"`\_+$&[;'8M(ZSKE)$%H>70%DE<>:;YT^J(PGPGU=?_\$YXP',\S
MWB61DH/Q:#2$$R^ERSR>N9N.]PBRYD54D+5^]-59VWZ5Q$)+-N*H$^1#S[XZ
M(RP9N,OFKBU2Y=K0&',_8)>S+^D`"7"J!R,.$%$\9$`*DLM:_E-?%T9+$0\&
M_RX2(L?+X1:(IUTI:5SI3.#U8D(4S%`R4Q))6$')DF62W6$E?0MU)9"B51B,
MBF1QK26G/I`[@U4 at 6#3QWA4[.W!-/S"@T'D?P=#- at 4$-T^IX:6W7/30IE^@]
M1L,VS?+O">A)Q7HO4WPNYTY!X_3>O\7`YO3>OP74RB!0[;%I(3#5K=G']%TM
M*$KOJ5B[C$=SYYW5 at 7L>H\CC,1^G(3.=_CH"YO(<1XI>X!XACGE:@`E$V$L3
MS<)LB9B=S$18;J/0DD`00&P85L<LF:FSRPU=1DQ+,T_"Q!T[B/526$KO?(NU
MD:ZYUT+WI+HVR@!!R6<$_I[(F<'F&)6,SPP^HL!9%?"=0K+MQ2&/&8^K\DN_
MW#L0SJV+ND*IF>0,&@#Y"&X#7?JE\807$EFW@*5917>]6ES_H6B',:;CV15O
M7\BAH+2)05LR>DT+R"NA"O7P1$8T[1'3]0D]C`0)23*:XUH?KY)[2.9!77>-
M.KOTV,>-M\9[J6RAF.PLEHA86Q\1,7/!:T9:NAG1%IL=LZIJM#JOJG=C$:I#
M87R. at B,?TA\4E,KWNDIFO#;?["S],ZA\B]%2MF!PD^7CN"/>*TO:0</.%SS_
M1(R at E%1V&NOF9]Q0/W`_6%L])3YEO9PH&VC!;=!#WK0W?<#85KBOL2.)J9..
MS!M6\8:5T;UET5YR,3S3A)Z>PF"2%E10"N1GDZV,F0!M?UH$<-G$W';YD/G:
M#9>L$#1^FF(IX-H@?[(WD9*S3ERD9`53.-+9(A4;^ZJR$'_H:;%6D")ON63S
MS$J*%.3,I*`4)Y(**L_9.A))PC*1F28O$+U$68%CP6,-6)Z>%ZF@?MY&*A1H
M"0G*(?]`SZR8-OH#5,A>6;1HM&3"H43DDW0(%T**18\(><A[$ANYTVG/.Z01
M:Q!ZX4Z9'RYC5LZPFT?\.1AV0N2C!>D4_!J7=%3]Y&(ZHX7,AR&S[(S/ZUYD
M\[?X_)[/4N_,SH9[$NY'ZSC;]<Q8X_-&=FK"(DDJLD>_[''R0NU)VE^+^LLO
M)L;2:C7#M+([[7VD;9SFKF?\GE18`S4ZKC=B/WH'`IN5I-7^S+EIT,:R6Z;7
M7\RQ5)Q!$:/.*R<0P+Z'TKB^2\'>%#]B)7F2\CT\F)BEJ=K!GA<CLY+*X,$D
M([6)EI=M;T7)1AJQT>CWMR:>B<8OIDV%C*3V&2T*]8.&^0;/U\CFRG8=Q8$+
MOJM4(NCV-@)'E:B=2D2GH<(T\K[K$D5.NJ85W_4FY*>G*Z-DG18HP?).0UH6
M0?0:VCN^C4.H+=7`LLBSUELB:+N'0;'=*IR.JN.QQ;JX&U at B]\;;7"2N9\)8
MN!:7;NN;K[:JS5TZ`A'_,E,Y5\?XK;OE)-^6TPZJ+L6"C<=J]W5Z8T1",XK]
M'X==V%Q_*?Y#W++^>@#(9_&_38?_KN^U@/_8K6_P'__'^%_+=?;G`,#JP/@#
M;LF!KS[BU](H%3WFA*(CL2 at +F]KS%,K5I*K+(.DF(*_CA0=WQ5F0M*"PI0'>
M5;I>M/PPUEDONG%4\5%T=)#U_&*I^KW!N*<D$&C0#!$'16[4]KIQO=[JQ at W]
MY^Z=2/"4_ST\??2NMXI?/(Y?'\6O9X/A8C9<Q3\OSES<>K/6)?RG3J`;WS:Y
M&P`LR)97YP(4SHQUU\7[BEC=>,_E=7EYZ6-,X]GO[M3BZ!==Y*Y]K>_Z71T@
MJG at A#,KDYF#3Y=FB.EO&V]WXW7Q%<6*]5HHJRM%QL/W='#0,X*@Y3*\W6<W)
M at U9_S]3U)*\-HWKC3ERO->/Z[9K^T]`):VT)'^W0PU'%1PU;?T(*UM*Q6 at T=
M,VXT]M9$MJ$;M=VX?N=NW&S&>[7/!):/LOUWI2Y[8DZE\S!_`_^5QX2'<9&`
M+4*'H9X.;B']+\76_W1+9!"F97VW1(;#H6Z$LO<[<KA&*7FWA-7YG1I%QVV]
MWK3WC5U[N]OLEND_D&/;4=I1#18#`_V$_15[H]5PX:$O064*4-AL;H\1UFEX
MXQMK*,<H8XE/;&A/`'!8CQ1HN#H=SY=\()F)4,(N;;VY5Z:Z?A2`C5.XY.4^
M<W*PO>%8F"'JM;;WE,Z97=89J)MZW@`&-?V\27O[@/72BU?#J4V\U;:/O)03
M#RG99O)ATY3!<X&$RWKJ'$IX,E>,LF/P$L%!(C!^KZ65`FJ'B-G$*<+:GTN&
M5DO=5V&UP8[#&=Y/5!W07SG+R(55[Q=%;9BHF6^;^5Q9I-,^47W0DO<6.=(N
MQX-ALJBN"<+<O';(*N9GHV44T368*R`MI_]YZS\AN/OV_E^M6K.5\O^J-3?K
MOV]R_D=BT1>>JN'3[GIDN"&]KF6$+A7H]BDKPQUU^//AZZ,"-L_Z[X"YT^KQ
MZR.L'J?3G0&\*<C"M832S(S4(,\&9Y&61.QT(:2Y?'`T";0EB2K>;2?C%DB]
M>UQN89&&.U??GBKM'W8=T#?ZPA2;;Q7>[4V>X<M<CAY'HRHNF<RT.#($D(X4
MB&E/'6MJA$>1?VZOMY?.FWX^Y-$0+#)O0>%PS@?-,LLJ*+L+Y10`$IO8"2 at 8
M&.N0/#:I]>QQ.1Q^B%39 at U<NF>.5>;UUY;Q<#'\K%84M.GJAU]T55?>RXP\F
M%PT3XW#X<96,4?,/GJ,/3A9DJN?J=]DE\2JN;I'58=[INE49H5#`H^'J&&>R
MC81]MM'<W[VK_X]N*B)U at G1=C;ZVKI;)NN(8IBA?4%=4D(RZ&GV^KH*\F=76
MY%M5=<6))L\'3,;VJ']1)B^#L)>FN(`1/"J4&5'"Z<D`2/%8R9`+3[@PW^@5
M`231[2#4NE*,W"$YNC`4T95EQ&6Q_)')CP]JV)0\/%?CVMH'5<D0)7?"_B8"
M(JK5]O&_WSC"K#P9FL)X*7@$Q"K:UBV%_FU/+;%X;"R2D]S*RAWWZ[D-J*#:
MJP-'XFK)AG>08,$>84G:RM(_CB"H'4J&R#+TV]+CYZ\JZQ,LI]HUB:@:&5C&
MF5[EEG9^@3R/?R"BV^).1:VE?#323R]7N13E<OE39FC>G8$(7U_2G>*HD.A;
MX3$JY@)=B<DRC)#9DU*]5/E.(*`<*<2?^\RUQ28&DXQBIR<%]T&IKNQ%,!/=
M]<8:_/_,_OLWK/N_</U?W_/Y'VID_VW4ZIOS_[Z9_?<O6\X'ND1X;@8[E[83
M-N+BH\EX2'N\Y#[XZJ&E?"##A/SP3E,WK]D]+),LPIXC3[1>HQ,<88^[EZ"<
M$.WF9$$'O7G^BO82]T0=4@[-)9LTSN*0?T^TDJ*CTLD.JN@=\Y"W9,&DU3R?
MZ5XUF?`Y[,+`VL=GY_,<MZ,B[S22J)WWJX+V[B at 4'<M4T*^\?/!.*A5![#DF
M?`X.J3OQ0FM#?`3'1'\M^T(CHLMC9]$KP,)G:DD7".8?>#.V\Z[2]`HRVKU=
MQS/OD#PI(9D"^=1#,)8FO]7Z2'>LG902\IM9O_G%6*C_:-0:W;BYUXWOW.G&
M-J3?!W1PLC`7H[;*IQI=OTR:HHLN/P[G!V*K-S,NTIG?9V1R-G[S#V"\1.-3
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@YMI<FVMS;:[-M;DVU^;:7)MK<WW#ZW\!80$84@#(``#F
`
end






More information about the argus mailing list