From ietfdbh@comcast.net Tue Jul 14 21:28:38 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 980F03A67FE for ; Tue, 14 Jul 2009 21:28:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.562 X-Spam-Level: X-Spam-Status: No, score=-2.562 tagged_above=-999 required=5 tests=[AWL=0.038, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gZOGWDNnA1v1 for ; Tue, 14 Jul 2009 21:28:38 -0700 (PDT) Received: from QMTA05.westchester.pa.mail.comcast.net (qmta05.westchester.pa.mail.comcast.net [76.96.62.48]) by core3.amsl.com (Postfix) with ESMTP id B8E133A67FA for ; Tue, 14 Jul 2009 21:28:37 -0700 (PDT) Received: from OMTA12.westchester.pa.mail.comcast.net ([76.96.62.44]) by QMTA05.westchester.pa.mail.comcast.net with comcast id G4Km1c0070xGWP8554U0wA; Wed, 15 Jul 2009 04:28:00 +0000 Received: from Harrington73653 ([202.106.79.2]) by OMTA12.westchester.pa.mail.comcast.net with comcast id G4Tl1c00402zSRE3Y4TrV2; Wed, 15 Jul 2009 04:27:58 +0000 From: "David Harrington" To: Date: Wed, 15 Jul 2009 00:27:40 -0400 Message-ID: <19d101ca0504$9f167e60$0600a8c0@china.huawei.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 Thread-Index: AcoFBJZXVrVhs4GaSBqAQzFDF4k6zA== Subject: [Syslog] syslog ietf75 agenda X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Jul 2009 04:28:38 -0000 Hi I have posted the agenda for the IETF75 syslog session. It is available through https://datatracker.ietf.org/meeting/75/agenda.html We will be meeting Tuesday morning at 09:00 The primary topic in the current agenda is the possible rechartering of the WG. If anybody wishes time to present additional material, please let Chris and I know. David Harrington dbharrington@comcast.net ietfdbh@comcast.net dharrington@huawei.com From ietfdbh@comcast.net Thu Jul 23 06:04:56 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BE17F3A672F for ; Thu, 23 Jul 2009 06:04:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.102 X-Spam-Level: X-Spam-Status: No, score=-0.102 tagged_above=-999 required=5 tests=[AWL=-1.118, BAYES_40=-0.185, HTML_MESSAGE=0.001, J_CHICKENPOX_42=0.6, J_CHICKENPOX_47=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jlhN6jT3YCT3 for ; Thu, 23 Jul 2009 06:04:49 -0700 (PDT) Received: from QMTA05.westchester.pa.mail.comcast.net (qmta05.westchester.pa.mail.comcast.net [76.96.62.48]) by core3.amsl.com (Postfix) with ESMTP id 77BB53A67B3 for ; Thu, 23 Jul 2009 06:04:47 -0700 (PDT) Received: from OMTA14.westchester.pa.mail.comcast.net ([76.96.62.60]) by QMTA05.westchester.pa.mail.comcast.net with comcast id KQEL1c0021HzFnQ55R4Dkj; Thu, 23 Jul 2009 13:04:13 +0000 Received: from Harrington73653 ([24.147.240.21]) by OMTA14.westchester.pa.mail.comcast.net with comcast id KR4A1c00o0UQ6dC3aR4A7A; Thu, 23 Jul 2009 13:04:12 +0000 From: "David Harrington" To: "'Eric Hibbard'" , References: <7F7CAF4EB3DAC74E8AB07E95FA70328631F625458B@USINDEVS01.corp.hds.com> Date: Thu, 23 Jul 2009 09:04:09 -0400 Message-ID: <1e2901ca0b96$11bba2f0$0600a8c0@china.huawei.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_1E2A_01CA0B74.8AAA02F0" X-Mailer: Microsoft Office Outlook 11 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 In-reply-to: <7F7CAF4EB3DAC74E8AB07E95FA70328631F625458B@USINDEVS01.corp.hds.com> Thread-Index: AcoG+wW7KgbiChK4RVi0HSeaEgEotAElht6g X-Mailman-Approved-At: Thu, 23 Jul 2009 06:31:56 -0700 Cc: snia-ssif@snia.org, syslog@ietf.org, snia-security@snia.org Subject: Re: [Syslog] [snia-security] Audit Logging SIG/TWG X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Jul 2009 13:04:56 -0000 This is a multi-part message in MIME format. ------=_NextPart_000_1E2A_01CA0B74.8AAA02F0 Content-Type: multipart/alternative; boundary="----=_NextPart_001_1E2B_01CA0B74.8AAC73F0" ------=_NextPart_001_1E2B_01CA0B74.8AAC73F0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi, The IETF Syslog WG has been chartered to address security issues. The WG has almost completed its current work plan. Some of the features that have been included in the IETF syslog standards will probably be useful for audit logging purposes, such as increased message sizes, secure transport, structured data elements, and digitally signed messages, http://www.ietf.org/dyn/wg/charter/syslog-charter.html The WG is considering re-chartering to do additional work. Much of the proposed work relates to standardizing how syslog is used, and for standardizing some types of logging content. The Syslog WG will be meeting at the upcoming IETF meeting (http://www.ietf.org/meeting/75/). Attached is a Powerpoint presentation that shows what topics are expected to be discussed. Proposals for additional work are welcome. In the IETF, official work is done using mailing lists rather than face-to-face meetings. If anybody wishes to monitor or contribute to the discussion, here is where the official discussions occur: General Discussion: syslog@ietf.org To Subscribe: syslog-request@ietf.org In Body: subscribe Archive: http://www.ietf.org/mail-archive/web/syslog Your input is welcome. David Harrington co-chair, Syslog WG Standards Manager, HuaweiSymantec Technologies dbharrington@comcast.net ietfdbh@comcast.net dharrington@huawei.com _____ From: Eric Hibbard [mailto:Eric.Hibbard@hds.com] Sent: Friday, July 17, 2009 12:24 PM To: mpeterson@snia-dmf.org Cc: snia-security@snia.org; snia-ssif@snia.org Subject: [snia-security] Audit Logging SIG/TWG Michael, I understand that you have expressed some interest in the area of audit logging and have floated the idea of forming a SIG or TWG for such an activity. I have a mixed reaction to this.on the one hand, the Security TWG has been advocating that storage ecosystems must participate in audit logging (as opposed to just health and fault logging).on the flip side, we don't see SNIA being a serious leader in this space (we're about 3 years too late for that).more like a consumer. However, the Security TWG considers this an important area and we're more than happy to participate and/or support whatever surfaces. In the spirit of sharing, you might want to take a look at the following resources: . SNIA docs - Storage Security best practices (http://www.snia.org/forums/ssif/programs/SNIATechnicalProposal-Securi ty-BCPs.20080904.pdf) and the SNIA Logging Whitepaper (http://www.snia.org/forums/ssif/knowledge_center/white_papers/forums/ ssif/knowledge_center/white_papers/SNIA-Logging-WP.050921.pdf); the whitepaper is being rewritten as week speak . IETF Syslog WG (http://tools.ietf.org/wg/syslog/) - The IETF has finally published multiple standards-track RFC related to Syslog, which is the primary protocol for all external/centralized logging. These RFC cover architecture, protocol, and security. . Mitre - Mitre has done some work with its Common Even Expression Taxonomy (CEET), which the Security TWG has been investigating as a possible way of "standardizing" message events so that the event log vendors could parse and react to them. Check out http://cee.mitre.org/ceelanguage.html With the possible exception of PCI DSS, most of the drivers for this technology are indirect (i.e., monitor and respond, or establish and maintain accountability and traceability). This means that a certain amount of interpretation is required, and of course this leads to vendor hype and organizational indecision. Best regards, -Eric Eric A. Hibbard, CISSP, CISA, ISSAP, ISSMP, ISSEP CTO Security and Privacy International Representative, INCITS TC CS1 Cyber Security Vice Chair, American Bar Association - SciTech Law - eDiscovery & Digital Evidence Committee Vice Chair, IEEE Information Assurance Standards Committee (IASC) Member, SNIA Technical Council Chair, SNIA Security Technical Work Group Vice Chair, IEEE Security in Storage Work Group (P1619) HITACHI DATA SYSTEMS 750 Central Expressway Santa Clara, CA 95050-2627 P 408.970.7979/ C 408.314.0515 eric.hibbard @hds.com ------=_NextPart_001_1E2B_01CA0B74.8AAC73F0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Hi,
 
The IETF Syslog WG has been chartered to = address security=20 issues. The=20 WG has almost completed its current work plan. Some of the features that = have=20 been included in the IETF syslog standards will probably be useful for = audit=20 logging purposes, such as increased message sizes, secure = transport,=20 structured data elements, and digitally signed messages,  http://ww= w.ietf.org/dyn/wg/charter/syslog-charter.html
 
The WG is considering re-chartering to do = additional=20 work. Much of the proposed work relates = to=20 standardizing how syslog is used, and for standardizing some types of = logging=20 content.
 
 
In the=20 IETF, official work is done using mailing lists rather than face-to-face = meetings. If anybody wishes to monitor or contribute to the discussion, = here is=20 where the official discussions occur:
General Discussion: = syslog@ietf.org
To=20 Subscribe: syslog-request@ietf.org
In= Body:=20 subscribe
Archive: http://www.ietf.org/= mail-archive/web/syslog
 
Your=20 input is welcome.
 
David Harrington=20
co-chair, Syslog=20 WG

Standards Manager, HuaweiSymantec=20 Technologies
dbharrington@comcast.net
ietfdbh@comcast.netdharrington@huawei.com


 


From: Eric Hibbard=20 [mailto:Eric.Hibbard@hds.com]
Sent: Friday, July 17, 2009 = 12:24=20 PM
To: mpeterson@snia-dmf.org
Cc: = snia-security@snia.org;=20 snia-ssif@snia.org
Subject: [snia-security] Audit Logging=20 SIG/TWG

Michael,

 

I understand that you have expressed some = interest in the=20 area of audit logging and have floated the idea of forming a SIG or = TWG for=20 such an activity. I have a mixed reaction to this…on the one = hand, the=20 Security TWG has been advocating that storage ecosystems must = participate in=20 audit logging (as opposed to just health and fault logging)…on = the flip side,=20 we don’t see SNIA being a serious leader in this space = (we’re about 3 years=20 too late for that)…more like a consumer. However, the Security = TWG considers=20 this an important area and we’re more than happy to participate = and/or support=20 whatever surfaces.

 

In the spirit of sharing, you might want to take = a look at=20 the following resources:

 

·        =20 SNIA docs – Storage Security best = practices=20 = (http://www.snia.org/forums/ssif/programs/SNIATechnicalProposal-Security-= BCPs.20080904.pdf)=20 and the SNIA Logging Whitepaper=20 = (http://www.snia.org/forums/ssif/knowledge_center/white_papers/forums/ssi= f/knowledge_center/white_papers/SNIA-Logging-WP.050921.pdf);=20 the whitepaper is being rewritten as week speak

·        =20 IETF Syslog WG=20 (http://tools.ietf.org/wg/syslog/) – The IETF has finally = published multiple=20 standards-track RFC related to Syslog, which is the primary protocol = for all=20 external/centralized logging. These RFC cover architecture, protocol, = and=20 security.

·        =20 Mitre – Mitre has done some work = with its=20 Common Even Expression Taxonomy (CEET), which the Security TWG has = been=20 investigating as a possible way of “standardizing” message = events so that the=20 event log vendors could parse and react to them. Check out=20 http://cee.mitre.org/ceelanguage.html

 

With the possible exception of PCI DSS, most of = the drivers=20 for this technology are indirect (i.e., monitor and respond, or = establish and=20 maintain accountability and traceability). This means that a certain = amount of=20 interpretation is required, and of course this leads to vendor hype = and=20 organizational indecision.

 

Best regards,

 

-Eric

 

Eric A.=20 Hibbard, CISSP, CISA, ISSAP, ISSMP, ISSEP
CTO Security=20 and Privacy

 

International=20 Representative, INCITS TC CS1 Cyber Security

Vice Chair,=20 American Bar Association – SciTech Law – eDiscovery & = Digital Evidence=20 Committee

Vice Chair,=20 IEEE Information Assurance Standards Committee (IASC)

Member, SNIA=20 Technical Council

Chair, SNIA=20 Security Technical Work Group

Vice Chair,=20 IEEE Security in Storage Work Group (P1619)

 

HITACHI DATA=20 SYSTEMS
750 Central=20 Expressway
Santa Clara,=20 CA 95050-2627
P=20 408.970.7979/ C 408.314.0515
eric.hibbard@hds.com

 

------=_NextPart_001_1E2B_01CA0B74.8AAC73F0-- ------=_NextPart_000_1E2A_01CA0B74.8AAA02F0 Content-Type: application/vnd.ms-powerpoint; name="Syslog WG IETF75 Agenda.ppt" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="Syslog WG IETF75 Agenda.ppt" 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAADAAAAGQEAAAAAAAAA EAAAGwEAAAEAAAD+////AAAAABIBAAATAQAAGgEAAP////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////8A bh7wlw8AAMcQwFA0U5cw43guVJdXoij/iVBORw0KGgoAAAANSUhEUgAAARgAAACgCAMAAADgvoMS AAAAwFBMVEUpKSkxMTE5OTlCQkJKSkpSUlJaWlpjY2Nra2tzc3N7e3uEhISMjIyUlJScnJylpaWt ra21tbXAwMDOzs7/3kJzc4xzc5Rra4xjY4RaWntaWoRSUntKSnNCQmtCQnM5OWsxMWMAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAznc7SAAAAE3RSTlP///////////////////// //8Asn3cCAAAAAxjbVBQSkNtcDA3MTIAAAADSABzvAAADkpJREFUeF7tXIli2zgObezE8a3YadrZ naYd//9PLkgcBChSJGNpewyV2Y1bQxTw9PAAQpr5dO1HEoFPHZc0Ah2YDDM6MB2YNtHojOmM6Yxp Q6Azpg2vrjGdMZ0xbQh0xrTh1TWmM6Yzpg2Bzpg2vJbXmHO1Q9WW1YbVlx4bLg7M+VwbRrVlteEd uFyXBuZ8HiqRqbasNrwHl6WB8UEM59eyj9WW1Ybla05ZLMsYID0iU3Sy2rLasHjJaYNFgQFEPCxl ZKotqw3vxGXRVHI3l3Ap6Ey1ZbXhvbgsCYzDJFBmmHC12rLa8G5cFgSGsoh/TXCm2rLa8H5clgMG xUU0xlEn4261ZbXhDLgsBgzJC8VCGCUdrrasNpwDl6WAQTFAxojQnFM6U21ZbTgLLgsBYwAJGZXQ mWrLasN5cFkGGKMuQhvPnMjtastqw5lwWQQY1b54jQlVO0am2rLacC5clgBGiwomgPR5DifleoXl zZtXGF7RcrZj/i0BVmhdWlGHRYvF9wrL22cXr678fFK8JFrOd8wODBdo6WBMM6N1psLy9vkzxKsB VPWfb4D7+oqWMx5zAyPNBu8ehT2qelN6UCXPW7poId4YDLMk0pEsf2FgrqF/kYB1/+vDePG6UbTE aAGZKcp4dMVyPmTmZowWSkZGUcKjsTtd3ORKtX5JS46WkAnwasZ4dJXlbMjUAFM5m3ShXq+vF71F EslV9HncHl58P2N7E041tgzRIjIaXgOSwqVKZ8pTM+dcBTBONqpuhHP39fpysm5HIQ2rx+eD62de IesmLAkX/mVwsUtGliVX414qY18GBotv6XJcVIfLcDpEAZvwH9abnVfo62U45MklgMiHHGVGltOu 4rXLRxEYTIaKtULrctzHqhKCWq2fnj3Sw/nlfHKGOmA5TxEliUy4QMJyKmrqscrT+RIw1CxAIAWQ g36eTsddThAeEBdq907HfZoHHK1fJoFMQDNpmXdVes0iZQrAcDfv/J9cS+48+AzImIADSgaX4ewN I8ZoKEiPTfC2dKuv9Ik5V9XupITMNDA8A8F7PLGWatrBNgpYYne4EAWRNmgYoMHrBYpQMRorMJ2T tUy7isvTfSogMwkMh8sb5Oxa+oru0hYZZgzionqWETKeIgoGlqARMrjIhGXKVbl7+GEamSlghLXI wDxnWKBFPAxnmBFed1XK+bMchJJqHl8NAp+qIcCLuXMmLcdhs7bRvSlU2glg6PreC6JgGmU0ZF3D TzpgjIT5gjDImkaQLAuE9ia9OBcjsGRZhitGhuWScZ3WhokGj/QlmiAk+KeEyF8UA3e1idLGG3jd DXebPhJnhBkjanAyyRcEgOULU9V/mUZGwtEfJrIpyxgVg9wMF/RoLTHkzKNbSsJKTCLdFRKQEZOL kBlnB1NxJMmjPBpbaldFFqRg+5uYRyYHjC4eOjlHmSnMDkpBZNVJ4vRF7rUuQ6wzyCBTmGXlqAQZ WgQ/ka0ZzvC1R3cxi0wGGJWQQTsIILMWJY7avci9UQosddoyhtWGBck2LJyIMp5INLmBzKxb3qE4 mygckV2lDzlkImBufFjGqbsB11VrRRVQJ51U7fNA9ShHGS/VIEimKwk0DVmQ2EAF9OgTxmyRYRUU zWNqAYR8xADlgAkZS59EBXVmBlmxlKab7AO+3dZqH6CoJTJDUm1Uw1CBcjPEqwZYI2RsKXfxhjKo ZJCSqhkYOWHigxs14frKO/4rrtoQ7u1pI7dTbLmQUOU+naImLpyh5Y6M9GBPKVbCsiYObwNjEHPk GENTxclfND4S3SD2h7abs/02iDInxAghsrhYYingAzIy8FRr61ukMcyHIcCd/VQxHPcAw8NYRQej /vCHBA3iO4wCEBtqEhqUOF7CxdI1aTl9cxmZQ1S67wJmhIzIPnW2ctfMPDvKEhdb3JWIosVawxD6 BU1rmbOc5r4wZnu6zMcYGeBzCdECE8LFSb+0EJr6VGQZl9UK89K0qRHFPjnj24OqNKoWanQeHiqy SYB5PryYXMoxpixaXBm08JoizzWTDJUyGlVQCbdar9YKFNZng+TDagUPHeH/CVMj/IGxw/lhtV6X oxCLTSUwUqR5A6l+g1fr9aPtxjjssU7eJsuwbjrOw/oRC5hqYqJyDOE+DrcBrv8oFBzXRFjiwa31 vHl68obZn3ZgfBVOHs63p83madSPhcbEyukYGdZo/1t/vXnebmPd1UUYwt34TIOgcXYcMKRqiH/h eu3dYb/fbQGcfCyhwSuk0vVy3D09rtfrPMar1dNmu9vBJUecoabG/1JfRgMlLawKF4x/B7FI6uj1 /Fm45fJ4gAtbWw5Vi+RxOZyGYTgdD+BpPpoHoL/j/9PuOCm+0CYeds9AB4ey4nT47C65P56hMznu kz2Z7clxjXTz5t2N9kfn45HHFWpnQ77g6IL+sIeQiVwsbcItMNwezj7Sy4vzNBsNQA3s3wC7pss1 PEg8Hw8Hh3ISFkhdd0n/8PnlfAjZFOlpnGaxIeeAne96pGQsqrs1vzyN0tmxI4/SQ90m2fFO8pYO ag14monGs3+/PxyOhQYPHrECxi+OD8Do8Q8A7C7pC9srsCuDjGII3fc0Mnb+4pyHg5GRlCNeyOiC 3QqGOvk8gNuj3uo6TzPRIPtfXi6FLYHvcV5fEeWxZplbAZZDCpl4GIvsGEm1++txihnOaGlFvrDq 4IdArgDicKabZ7c+Qy4ax34fcHRkJ3jwaNk9YjY/40sGZNRNi6qQJ0JyM5TYH0nAlgRhZCweuTVp kMMKyAkX8ihEOwAzEtG4Z+jJY+opgUdGaXDMF7eg4gyHEtFAFNG2/bBuan+Ei6iBMeYXjdKVN8gd Ngz1aZRHHHZNNPlN5Ih/CpkULglkYhqQIFog4n2jNPgUoXow5UWK80iSi+Gm+ansHtNO+rAsMhOG 3nr6SaTLTE7fZOqOOROXXyGM6m1MaikDtaPQtYlGgJSSpDPMT565o0JPhlsTjTCj8OzavamBdyN/ Sa3AUVuCkXJtNjqTBJCIwwpMmOGjF3YEV2NcWGdKThJnytEwMsW3HbyaJ0qgSjqlwOPao4LQChwb Bq2lwuMe8/oHU0pfIrIQ6vR2RcFJzqZiNBRYCRjITOdcLo9wlYDMaBirGONjZ0ASU1tFBRZW39ri KN0SRjEGFbjspHCmFA3GVATGaxZsGlMlUFgjyJhhLIEiZNDIxIYiL6MkeXzc4KsAISNDDULAUIFL TooCVxmWgbkOR9ii7kwrOar8GhkeOoZYTJ6E6ZEyRFtzBgW85f12Chc+xSGzfS45ichURFPHGFjr dDie/PYofwRkbLgROg4iRmZsaPUITE8Q8cF0UzHaVDW9YdFJRKYimqpUAiPYPdk9eQIgRkaGsVoG AmUCMjlDThkNAQlMgjS4sv9iGIpOer9roqnRGLdWYi+RySZ8v125K9oQArVT22CrCzF+hpHK5Xrh PVsiNxnx/cnduvIrh97rmmgqxHc6hdS3jjO31UNQCgNPiAqntjAfspwQcQ0LbHYug90LweEnCK8S dTSc9agQ3+rrATIbN2LlyDQDQjK5YezT7ckdttawiZjCG8H4cj3MmqiFSSuwGFa7WjacExhQ/P0W ikOEjE4m15U8usnoFv6Hs0kVa5AXB87qcbOnsRp9kanZyrAccK3FrMDAEOcIVYSGtpH64h/dzmJ/ hCLijvAya0Qu6nd3R0qQFzcz4IquUsifBkuKYW3YZbt5gYHxH8xYT+4t37CdCbMCxMVPRi8XEEsc OSoeBPZEezOYpqhqZaApbZPLGCQt5gUGJR/+JQEconAwEggFwdWDhmEKDok+Hqv4nUmqLGXnLx8E hE+bHRiHjd9gRYEQ6eNhLA5JuMbL5zENMsgsxJfaPqYZfQ4jFCMUg/GOi4YkJCFEitSeVUEYSvb0 5rbZbXXCEoxxy0dhOMnJ3NyAIbGMlGj0b3U4nSEaMjJL5REEsBQwAZliEIIh61Iu3DCBIyIulkdL AiPIkH4Uh7FSyPLpgciIBC+Jy3KM8dkkPfD0pCtwBoKeChenZsTB5fTFacFiqeR1hlt5ry8TEx2F YWlWKC3SonxZFpjwwKIYhBTjEg3oGQhK+fTw7J6atDAw/DCzFC1XsczjVRMhPR8tQn0fLEsD43Xm DNvpyYmxj6Ha0iNTteRd2CypMRjvAK+fFCbGhIy3lNc3smFBP1O55D3ILA2MG0Xs9lViUG1ZbfhL AwNbaPqvXBTdrLasNixeMm+wOGNqB7F+81l5VBtWrpcyWx6YO5z7mad2YDLod2A6MG2J2RnTGdMZ 04ZAZ0wbXl1jOmM6Y9oQ6Ixpw6trTAtjfoTj/Xsb0N5anW8/Nq6VXcd98d64WNKr9/dv374lF0oy 5sc/4fjRen0HjDpff2xdK7eOX7MdmIxXfxowzVTOwZxGuDPmnzSPf19gZmPMnwbMbBrTgWkqCb9v KrWWuMZa2YH5WeJrmrTGnmiyj7mPMdqtn9PgNfuv3BTvTZfIf9uIsk2loluLp5K6Na2RiL1hTjGk 3GXaVlkcmPs2FxhkW0h1wIQblrb/twJTvF8dmExq/h+BaW5Vl9SYX4kxzZubfwsw6blHTalaQHx/ JcZ0YDK7kg6MAQb7hff3799/KWCcT+CVO35SH/PhRlX5+37P4PiDEr54uZ4DmG9/JDDFfWy5Lv39 JwIzR0z/mWORxh3X4qk0R0xf51jkTwTmrQOT1psOTEaHDTAf3ou2bSx+C435olPpdwbGNGQqqI/G ZID5cAM9B2Pu7D3g1Qo4/nY/7sBP8PPRmN7evrx9gX/evn7966//lvuetEXbGyn9xaEMzh2YDkxb CnbGdMZ0xrQh0BnThlfXmM6Yzpg2BDpj2vDqGtMZ0xnThkBnTBteXWMyeP0Pit9jvbMpHpcAAAAA SUVORK5CYIIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwDoA0gQAAAB AOkDKAAAAIAWAADgEAAA4BAAAIAWAAAFAAAACgAAAAIAAAAAAAAAAQAAAAABAAEPAPIDZgEAAC8A yA8MAAAAMADSDwQAAAABAAAADwDVB5gAAAAAALcPRAAAAEEAcgBpAGEAbAAAAMMwrzAAABMw1JYT AAAAAAAwANIPbKkTAGypEwCwg4oA9JYTAOKFEzD0lhMAAAAAAA8A1QcAAAQAEAC3D0QAAAAt/zP/ IAAw/7QwtzDDMK8wAAATMNSWEwAAAAAAMADSD2ypEwBsqRMAsIOKAPSWEwDihRMw9JYTAAAAAAAP ANUHgAAEkAAApA8KAAAAgABCAAAAAAASAAAApQ8QAAAAAAAgCC4AAAAA/wAABwAAAAAAqQ8KAAAA BwAAAAIACQQAAEAAow9uAAAABQD//T8AAAAiIAAAZAAAAAAAAABkAAAAAAAAAAAAQAIAAAAAAgAA AP//7wAAAAAAAQAAAP//GAAAAAABAAAABQAAIAEgAQAAAAAABQAAQAJAAgAAAAAABQAAYANgAwAA AAAABQAAgASABAAAAAAPAAsE+AEAAA8AAPDwAQAAAAAG8FgBAAAEpAAAKgAAAIQAAAAeAAAAAQAA AAcAAAACAAAAAgAAAAMAAAACAAAABAAAAAIAAAAFAAAAAgAAAAYAAAACAAAABwAAAAIAAAAIAAAA AgAAAAkAAAACAAAACgAAAAIAAAALAAAAAgAAAAwAAAACAAAADQAAAAgAAAAOAAAABQAAAA8AAAAF AAAAEAAAAAUAAAARAAAABQAAABIAAAAFAAAAEwAAAAUAAAAUAAAABQAAABUAAAAFAAAAFgAAAAUA AAAXAAAABQAAABgAAAAFAAAAGQAAAAUAAAAaAAAABQAAABsAAAAFAAAAHAAAAAUAAAAdAAAABQAA AB4AAAAFAAAAHwAAAAUAAAAgAAAABQAAACEAAAAFAAAAIgAAAAUAAAAjAAAABQAAACQAAAAFAAAA JQAAAAQAAAAmAAAABQAAACcAAAAEAAAAKAAAAAQAAAApAAAABAAAAB8AAfAsAAAAYgAH8CQAAAAG BscQwFA0U5cw43guVJdXoij/AJ8PAAABAAAAAAAAAAAAAACDAAvwMAAAAIEBBAAACIMBAAAACIbB AAAAAL8BEAAQAMABAQAACMXBAAAAAP8BCAAIAAECAgAACBAAGvEEAAAAMzPMAEAAHvEQAAAABAAA CAEAAAgCAAAI9wAAEB8A8A8cAAAAAADzAxQAAAADAAAAAAAAAAAAAAAAAACAAAAAAA8A0AdkAQAA HwATBDwAAAAAAP0DNAAAAGQAAABkAAAAZAAAAGQAAAA4lxMAvDETMCSXEwA8lxMAAAAAAAAAAAAA AAAAAAAAAAABEwAPAPoDZwAAAAAA/gMDAAAAAAEAAAD9AzQAAAAzAAAAZAAAADMAAABkAAAAAAAA AEyQigAMlxMA4oUTMAAAAAAAAAAADv7//6z///8BABMAcAD7AwgAAAAAAAAAcAgAAHAA+wMIAAAA AQAAAEALAAAfAP8DFAAAAAIAAAQMAAAAAAAAAAAAAAACAAAAHwAUBBwAAAAAABUEFAAAALqTsPYA ypo7rQeUxwDKmjsBAQAADwCIE2kAAAAPAIoTKQAAAAAAug8QAAAAXwBfAF8AUABQAFQAMQAyAAAA ixMJAAAAAAAlBAEAAAAADwCKEzAAAAAAALoPEAAAAF8AXwBfAFAAUABUADEAMAAAAIsTEAAAAAAA DQQIAAAAAMAAAADAAAA/ANkPDAAAAAAA2g8EAAAAAAACAE8A2Q8MAAAAAADaDwQAAAAAAAIADwDw D4gBAAAAAPMDFAAAAAQAAAAEAAAAAAAAAAMBAAAAAAAAAADzAxQAAAAFAAAABAAAAAAAAAApAQAA AAAAAAAA8wMUAAAABgAAAAQAAAAAAAAAJgEAAAAAAAAAAPMDFAAAAAcAAAAEAAAAAAAAABoBAAAA AAAAAADzAxQAAAAIAAAABAAAAAAAAAAgAQAAAAAAAAAA8wMUAAAACQAAAAQAAAAAAAAAIQEAAAAA AAAAAPMDFAAAAAoAAAAEAAAAAAAAACcBAAAAAAAAAADzAxQAAAALAAAABAAAAAAAAAAVAQAAAAAA AAAA8wMUAAAADAAAAAQAAAAAAAAAIgEAAAAAAAAAAPMDFAAAAA0AAAAEAAAAAAAAACMBAAAAAAAA AADzAxQAAAAOAAAABAAAAAAAAAAkAQAAAAAAAAAA8wMUAAAADwAAAAQAAAAAAAAAJQEAAAAAAAAA APMDFAAAABAAAAAEAAAAAAAAACgBAAAAAAAAAADzAxQAAAARAAAABAAAAAAAAAASAQAAAAAAAC8A 8A+IAQAAAADzAxQAAAASAAAABAAAAAAAAAAAAQAAAAAAAAAA8wMUAAAAEwAAAAQAAAAAAAAAAQEA AAAAAAAAAPMDFAAAABQAAAAEAAAAAAAAAAIBAAAAAAAAAADzAxQAAAAVAAAABAAAAAAAAAADAQAA AAAAAAAA8wMUAAAAFgAAAAQAAAAAAAAABAEAAAAAAAAAAPMDFAAAABcAAAAEAAAAAAAAAAUBAAAA AAAAAADzAxQAAAAYAAAABAAAAAAAAAAGAQAAAAAAAAAA8wMUAAAAGQAAAAQAAAAAAAAABwEAAAAA AAAAAPMDFAAAABoAAAAEAAAAAAAAAAgBAAAAAAAAAADzAxQAAAAbAAAABAAAAAAAAAAJAQAAAAAA AAAA8wMUAAAAHAAAAAQAAAAAAAAACgEAAAAAAAAAAPMDFAAAAB4AAAAAAAAAAAAAAAsBAAAAAAAA AADzAxQAAAAfAAAAAAAAAAAAAAAMAQAAAAAAAAAA8wMUAAAAIAAAAAAAAAAAAAAADQEAAAAAAAAA AOoDAAAAAA8AKATCBwAAUEsDBBQABgAIAAAAIQBKGa7C9wAAAKkBAAATAAgCW0NvbnRlbnRfVHlw ZXNdLnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAB8kMtOwzAQRfdI/IPlLYodWCCEknTBYwlIlA8YnEli1S95plX79zhpkRCq uhrN4957NM1q753YYSYbQytvVS0FBhN7G8ZWfq1fqwcpiCH04GLAVh6Q5Kq7vmrWh4QkijpQKyfm 9Kg1mQk9kIoJQ9kMMXvg0uZRJzAbGFHf1fW9NjEwBq549pBd84wDbB2Ll30ZH0mKXIqn490c1UpI yVkDXED1vNVd817As+1RfEDmN/DlSjN8O/zkg0NSl012of9HWsVhsAb7aLa+8KmUkUpdMr1Tf6xv TgRnyDM6uoB+JvX0G1WUSxRNNtFvgl4e3f0AAAD//wMAUEsDBBQABgAIAAAAIQDt5AxLuwAAACYB AAALAAgCX3JlbHMvLnJlbHMgogQCKKAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhI/NCsIwEITvgu8Q9m5TPYhI015E8Kr1AdZ0+4NpEpJV 7NubYwuCx9lhvtkpqs9oxJtCHJxVsM1yEGS1awbbKbjX580BRGS0DRpnScFEEapyvSquZJBTKPaD jyJRbFTQM/ujlFH3NGLMnCebnNaFETnJ0EmP+okdyV2e72WYM6BcMMWlURAuzRZEPfnU/J/t2nbQ dHL6NZLlHxWS8WHoxpNJK0SNoSNWMDtm6VuQZSEX68ovAAAA//8DAFBLAwQUAAYACAAAACEA2P2N j6wAAAC2AAAADwAAAHRhYmxlU3R5bGVzLnhtbAzMSQ6CMBhA4b2Jd2j+fS1DUSQUwiArd+oBKpQh 6UBooxLj3WX58pIvzT9KopdY7GQ0A//gARK6Nd2kBwaPe4NjQNZx3XFptGCwCgt5tt+lPHFPeXOr FFfr0KZom3AGo3NzQohtR6G4PZhZ6O31ZlHcbbkMpFv4e9OVJIHnHYnikwbUiZ7BN6qCIKK0wKfL 5YhpSANcejTGcVTW1bmp/SosfkCyPwAAAP//AwBQSwECLQAUAAYACAAAACEAShmuwvcAAACpAQAA EwAAAAAAAAAAAAAAAAAAAAAAW0NvbnRlbnRfVHlwZXNdLnhtbFBLAQItABQABgAIAAAAIQDt5AxL uwAAACYBAAALAAAAAAAAAAAAAAAAADADAABfcmVscy8ucmVsc1BLAQItABQABgAIAAAAIQDY/Y2P rAAAALYAAAAPAAAAAAAAAAAAAAAAABwGAAB0YWJsZVN0eWxlcy54bWxQSwUGAAAAAAMAAwC3AAAA 9QYAAAAADwD4Ay+GAAACAO8DGAAAAAEAAAABAgcJCAAAAAAAAAAAAAAAAgATMGAA8AcgAAAA//// AAAAAACAgIAAAAAAALvg4wAzM5kAAJmZAJnMAABgAPAHIAAAAP///wAAAAAAlpaWAAAAAAD731MA /5lmAMwzAACZZgAAYADwByAAAAD///8AAAAAAICAgAAAAAAAmcz/AMzM/wAzM8wAr2f/AGAA8Acg AAAA3vbxAAAAAACWlpYAAAAAAP///wCNxv8AAGbMAACoAABgAPAHIAAAAP//2QAAAAAAd3d3AAAA AAD///cAM8zMAP9QUAD/mQAAYADwByAAAAAAgIAA////AABaWAD//5kAAGRiAG1vxwAA//8AAP8A AGAA8AcgAAAAgAAAAP///wBcHwAA39KTAMwzAAC+eWAA//+ZANOiGQBgAPAHIAAAAAAAmQD///8A ADNmAMz//wAzZswAALAAAGbM/wD/5wEAYADwByAAAAAAAAAA////ADNmmQDj6/EAADOZAEaKSwBm zP8A8OUAAGAA8AcgAAAAaGtdAP///wB3d3cA0dHLAJCQggCAnqgA/8xmAOncuQBgAPAHIAAAAGZm mQD///8APj5cAP///wBgWXsAZmb/AJnM/wD//5kAYADwByAAAABSPiYA////AC0gFQDfwI0AjHtw AI9fLwDMtAAAjJ6gAAAAow8+AAAAAQD//T8AAAAiIAAAZAAAAAAAAQBkAAAAAAAAAAAAQAIAAAAA AgAAAP//7wAAAAAAAQAAAP//LAAAAAADAAAQAKMPfAAAAAUA//0/AAEAIiAAAGQAAAAAAAAAZAAU AAAA2AAAAEACAAAAAAIAAAD//+8AAAAAAAEAAAD//yAAAAAAAQAAgAUAABMg1AEgAQAAAgAcAIAF AAAiINACQAIAAAIAGACABQAAEyDwA2ADAAACABQAgAUAALsAEAWABAAAAAAgAKMPbgAAAAUA//0/ AAAAIiAAAGQAAAAAAAAAZAAeAAAAAAAAAEACAAAAAAIAAAD//+8AAAAAAAEAAAD//wwAAAAAAQAA AAUAACABIAEAAAAAAAUAAEACQAIAAAAAAAUAAGADYAMAAAAAAAUAAIAEgAQAAAAAQACjD24AAAAF AP/9PwAAACIgAABkAAAAAAAAAGQAAAAAAAAAAAAgAQAAAAAHAAAA///vAAAAAAABAAAA//8SAAAA AAEAAAAFAAAgASABAAAAAAAFAABAAkACAAAAAAAFAABgA2ADAAAAAAAFAACABIAEAAAAAFAAow9S AAAABQAAAAEJAAAAAAEAAAAAAAAAAQABCQAAAAABACABAAAAAAIAAQkAAAAAAQBAAgAAAAADAAEJ AAAAAAEAYAMAAAAABAABCQAAAAABAIAEAAAAAGAAow8MAAAAAQAAAAAAAAAAAAAAcACjDz4AAAAF AAAAAAAAAAAAAgAcAAEAAAAAAAAAAgAYAAIAAAAAAAAAAgAUAAMAAAAAAAAAAgASAAQAAAAAAAAA AgASAIAAow8+AAAABQAAAAAAAAAAAAIAGAABAAAAAAAAAAIAFAACAAAAAAAAAAIAEgADAAAAAAAA AAIAEAAEAAAAAAAAAAIAEAAPAAwEKiEAAA8AAvAiIQAAEAAI8AgAAAAGAAAABgQAAA8AA/DAIAAA DwAE8CgAAAABAAnwEAAAAAAAAABQBwAAAACYBwAAAAACAArwCAAAAAAEAAAFAAAADwAE8OoAAAAS AArwCAAAAAIEAAAACgAAkwAL8E4AAAB/AAEA7wGAAJDgigCHAAEAAAC/AAQABAC/AQEAEQD/AQEA GQA/AwAACACAwxgAAAC/AwAAAgBSAGUAYwB0AGEAbgBnAGwAZQAgADIAAAAAABDwCAAAAK0AIAFg FX0DDwAR8BAAAAAAAMMLCAAAAAAAAAABAIoADwAN8FQAAAAAAJ8PBAAAAAAAAAAAAKgPIAAAAENs aWNrIHRvIGVkaXQgTWFzdGVyIHRpdGxlIHN0eWxlAACiDwYAAAAhAAAAAAAAAKoPCgAAACEAAAAB AAAAAAAPAATwLgEAABIACvAIAAAAAwQAAAAKAACDAAvwSAAAAH8AAQDvAYAAcOOKAL8ABAAEAL8B AQARAP8BAQAZAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBjAHQAYQBuAGcAbABlACAAMwAAAAAAEPAI AAAA8AMgAWAVEw8PABHwEAAAAAAAwwsIAAAAAQAAAAIAigAPAA3wngAAAAAAnw8EAAAAAQAAAAAA qA9SAAAAQ2xpY2sgdG8gZWRpdCBNYXN0ZXIgdGV4dCBzdHlsZXMNU2Vjb25kIGxldmVsDVRoaXJk IGxldmVsDUZvdXJ0aCBsZXZlbA1GaWZ0aCBsZXZlbAAAog8eAAAAIQAAAAAADQAAAAEADAAAAAIA DQAAAAMADAAAAAQAAACqDwoAAABTAAAAAQAAAAAADwAE8OwJAAASAArwCAAAAAQEAAAACgAAgwAL 8EgAAAB/AAEA7wGAANTwigC/AAQABAC/AQEAEQD/AQEAGQA/AwAACACAwxgAAAC/AwAAAgBSAGUA YwB0AGEAbgBnAGwAZQAgADQAAAATACLx+AcAAKmD8gcAAFBLAwQUAAYACAAAACEADIGFu/4AAADi AQAAEwAAAFtDb250ZW50X1R5cGVzXS54bWyUUcFOwzAMvSPxD1GuqEnHASHUdgc6joBgfICVuG1E m0RxKNvf427sgISGONp+7/n5uVrvplHMmMgFX8uVKqVAb4J1vq/l2/ahuJWCMngLY/BYyz2SXDeX F9V2H5EEsz3Vcsg53mlNZsAJSIWIniddSBNkLlOvI5h36FFfl+WNNsFn9LnIi4ZsqhY7+Biz2Oy4 fXTCdCnuj7hlVS0hxtEZyGxUL1PdVE9sPDmL4hlSfoSJUdom0jRARMao8yqzt2qiInSdM6jaRK8L 7+oPcRs+fcL5v9ot015wPqn/cnLCkc7cvLj9GWzxHapi5iEXGlyk0wZ9+FDzBQAA//8DAFBLAwQU AAYACAAAACEAMd1fYdIAAACPAQAACwAAAF9yZWxzLy5yZWxzpJDBasMwDIbvg72D0b1x2kMZo05v hV5LB7sKW0lMY8tYJm3fvqYwWEZvO+oX+j7x7/a3MKmZsniOBtZNC4qiZefjYODrfFh9gJKC0eHE kQzcSWDfvb/tTjRhqUcy+iSqUqIYGEtJn1qLHSmgNJwo1k3POWCpYx50QnvBgfSmbbc6/2ZAt2Cq ozOQj24D6nxP1fyHHbzNLNyXxnLQ3PfevqJqx9d4orlSMA9UDLgszzDT3NTnQL/2rv/plRETfVf+ QvxMq/XHrBc1dg8AAAD//wMAUEsDBBQABgAIAAAAIQD+JlH4iwMAAJoIAAAQAAAAZHJzL3NoYXBl eG1sLnhtbKxV224bNxB9L9B/IPhaOLpEchIh68A26rSAagiWgz7PcrleVlxyS3J18ddnZriy3CAI iqp6kIbicObMmdvHT/vWiq0O0XhXyMmbsRTaKV8Z91TIL493F++liAlcBdY7XciDjvLT1c8/fewW sRP42MVFV8gmpW4xGkXV6BbiG99ph3e1Dy0kPIanURd01C5BQketHU3H48tRC8bJKzTltutuFUhS 99tVEKZCLOMp+nbQotcHrRDDk9ViJkeDWn4BCGPp1SYOWODfYKkC7DDAf8AQzn8OGMkEffrbBr3p 6xD8rtFQRfob/Y4Y3xGqQ6SEpWtEOnSIskrI1TMCAFtLjGFfyOnwLOvi+1OkESMW5e4PX+FT6JNH JmCxr0N7bihkx9e1QP+z+TtkWopDIS+ns/l0OidAsND7JBThm7x9e0kKCjVm7y6n8zEjzkBIswsx fdb+bFCCDBUyYCY5UNguYyJOTy7InfN3xtpzGeAYrTvXjNgV8sMcOTshY8utSToIa9pCvh/TJ5NK pfKrq1glgbFZxgCtY87rGoPHqM+FRaxR++XyS/sbXx3IQYm/WFO5Kf97I+A0wEQ1PjxLsQuAPRH/ 7iFoKezvDlvhw2Q2w4pJfOACkyK8vilf37i+vfWW+wqcQquFxDbJ4m3CExWfbztIS7fuFClSLFQt j/s/IXRD4SQs2Xu/bqDT36ufrMvllGkgIzamdTrg1DiTEra1tRNmHBaVrh+QZ2r1ySwnn5J8VCB5 cMyR/B/eaVa0EJZMFwoPLKBL/jWuwtHKItgnnONWCgT5COUaMXK+kOWQsraGpbsJG05J7V265icl RMowzmc3XOMTGoM4KFe9U2g+Z8ZSmiiw2KmVSmILlN2XNuByP2nc6Ppb3eOEwfen2+s6/UBvuC37 Wxse99xgZb9+fhHvMIyXwz0uqqEHS+w2FnPKqHGwtKhvcAS6agUBKJObvjWt/8tkUjHmQmp38WWd xznnWJSZaf7uC+nQCW3GYDY4vp1fsyTFRgfaozx0FfXOoEiVjYQ62ojWPOvf+EikW0N7le9Wwfua ZMKXh0aehxl4/id6ayoakswXLVyNrOQ0pH3eU5ic11r6OHmYi37pBq56MjPInHleZDUoBHQdDGAZ dSap5g5aY3FBXEwmU+zWBkLUXG5sT8OrZ7+07kJDnocqfnOh4rBcTtznjPBAOw4ynm1XXwEAAP// AwBQSwMEFAAGAAgAAAAhAEP6Mr3XAAAA/AAAAA8AAABkcnMvZG93bnJldi54bWxEj1FLwzAQgN8F /0M4wZfhEovorMvGFETBwegUxLfYXNpicylJ3Np/7+GDPh7f8d19y/Xoe3HAmLpAGi7nCgRSHWxH jYa318eLBYiUDVnTB0INEyZYr05Plqa04UgVHva5ESyhVBoNbc5DKWWqW/QmzcOAxMyF6E3mMTbS RnNkue9lodS19KYjvtCaAR9arL/2316Dq3Yvaube72nnr4rZjZKbKTitz8/GzR2IjGP+X/7Yqtu0 +IO/qmfLLarg393T9Bk7W5mUMWrgPI5lCHL1AwAA//8DAFBLAQItABQABgAIAAAAIQAMgYW7/gAA AOIBAAATAAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9UeXBlc10ueG1sUEsBAi0AFAAGAAgAAAAh ADHdX2HSAAAAjwEAAAsAAAAAAAAAAAAAAAAALwEAAF9yZWxzLy5yZWxzUEsBAi0AFAAGAAgAAAAh AP4mUfiLAwAAmggAABAAAAAAAAAAAAAAAAAAKgIAAGRycy9zaGFwZXhtbC54bWxQSwECLQAUAAYA CAAAACEAQ/oyvdcAAAD8AAAADwAAAAAAAAAAAAAAAADjBQAAZHJzL2Rvd25yZXYueG1sUEsFBgAA AAAEAAQA9QAAAOcGAAAAAAAAEPAIAAAAXg8gAWAGihAPABHwLAEAAAAAwwsIAAAAAgAAAAcBigAA ABkQFAEAAAAAAAgMAQAAAgAAAAwBAAAAAAAAFAAAACAAAAABAAAAAQAAAAAAAAABAAAA6AAAAAgA AAAEAAAAAAAAAAABAAABAAAAAAAAAAEBAAABAAAAAAAAAAIBAAABAAAAAAAAAAMBAAABAAAAAAAA AAQBAAABAAAAAAAAAAUBAABoAAAAZG1hbmAAAAACAAAABAAAAAMAAAABAAAACQQAAAoAAABBAHIA aQBhAGwAAAAIAAAAAAAAAAMAAAAAAAAAJgAAAE0AbwBuAG8AdAB5AHAAZQAgAFQAeQBwAG8AZwBy AGEAcABoAHkAAAAGAQAABAAAAAAAGAAHAQAABgAAAAAAAAAAAAAABAAAAA4ACQARAAAAGgABAA8A DfBAAAAAAACfDwQAAAAEAAAAAAChDxoAAAABAAAAAAAgAAoAAAAA/wcAAQAAAAAAAgAOAAAAqg8K AAAAAQAAAAEAAAAAAA8ABPD5CQAAEgAK8AgAAAAFBAAAAAoAAIMAC/BIAAAAfwABAO8BgACk8ooA vwAEAAQAvwEBABEA/wEBABkAPwMAAAgAgMMYAAAAvwMAAAIAUgBlAGMAdABhAG4AZwBsAGUAIAA1 AAAAEwAi8QMIAACpg/0HAABQSwMEFAAGAAgAAAAhAAyBhbv+AAAA4gEAABMAAABbQ29udGVudF9U eXBlc10ueG1slFHBTsMwDL0j8Q9RrqhJxwEh1HYHOo6AYHyAlbhtRJtEcSjb3+Nu7ICEhjjafu/5 +bla76ZRzJjIBV/LlSqlQG+Cdb6v5dv2obiVgjJ4C2PwWMs9klw3lxfVdh+RBLM91XLIOd5pTWbA CUiFiJ4nXUgTZC5TryOYd+hRX5fljTbBZ/S5yIuGbKoWO/gYs9jsuH10wnQp7o+4ZVUtIcbRGchs VC9T3VRPbDw5i+IZUn6EiVHaJtI0QETGqPMqs7dqoiJ0nTOo2kSvC+/qD3EbPn3C+b/aLdNecD6p /3JywpHO3Ly4/Rls8R2qYuYhFxpcpNMGffhQ8wUAAP//AwBQSwMEFAAGAAgAAAAhADHdX2HSAAAA jwEAAAsAAABfcmVscy8ucmVsc6SQwWrDMAyG74O9g9G9cdpDGaNOb4VeSwe7CltJTGPLWCZt376m MFhGbzvqF/o+8e/2tzCpmbJ4jgbWTQuKomXn42Dg63xYfYCSgtHhxJEM3Elg372/7U40YalHMvok qlKiGBhLSZ9aix0poDScKNZNzzlgqWMedEJ7wYH0pm23Ov9mQLdgqqMzkI9uA+p8T9X8hx28zSzc l8Zy0Nz33r6iasfXeKK5UjAPVAy4LM8w09zU50C/9q7/6ZURE31X/kL8TKv1x6wXNXYPAAAA//8D AFBLAwQUAAYACAAAACEAFvmwwJUDAACsCAAAEAAAAGRycy9zaGFwZXhtbC54bWysVU1v4zYQvRfo fyB4LbK2VTubGKsskqDZFnADI86i57FExawpUiUpx86v7xtSidNFURR1c3CG4nDmzZuvT5/3rRE7 5YN2tpSTD2MplK1cre1TKb8+3p1dSBEi2ZqMs6qUBxXk56vvv/vUzUMn8NiGeVfKTYzdfDQK1Ua1 FD64TlncNc63FHH0T6POq6BspAhHrRkV4/H5qCVt5RVM2d2qW3qWqvvd0gtdA8u4uJTCUguvD6oC hiejxEyOBrX8ggBj4aptGLDQv8FSe3pGgH+BIaz74hHJBD7d7Qbe1LX37nmjqA78GX5HCd8rVAuk jKXbiHjogLKJHmS9lPKPnnxUOOh6X8ofh6dZHzaO0QZELdbPv7oaz6mPDmzQfN/49tRw2I5rGsH+ J8UUdEtxKOV5MZ0VRSKR5mofRQWF4uJyds4KFTSmH8+L2ThBzkjYUudD/KLcyagEGyqlRzpTpLRb hMjEHl2wO+vutDGnUgC7NDf2VDPiuZSXM3B2RJYstxopFka3pbwY8x9zRnOul59sneRI2mQZARrL 16ppEDyiPhUWHKCUuIC4BuP+xtUHdrDGfxRV7sz/3g0YCUjUxvkXKZ49oTECV7WSwvxi0Q+Xk+kU FRPTYTr7WODg39+s39/Yvr11JjUX2QpWSxmlyOJtxImLz7UdxYVddRUrcixcLY/738h3Q+FElOy9 W22oU39XP1k3lVOmgY2YEFfxgNFxIiXJ1s5MuGXJPGFaVuh3/lqr5gEfufMn01wHnO+sm9C8YkhB /R9AGERLfpGYg/CQBLhM/7WtMWqTeEQqAPOR1iugTMnjhMWsr2hhb/w25adxNl6n8NYUON2Y2Ha4 xhMejBidy95WcJDTZDhnHFroqmUVxY441W89kWr/qHGjmm91X8cN3h9vr5v4D3rD7bq/Nf5xn7pt 3a9e3sQ7hPF2uMfqGhpyjdZLYk4adxHqjJsIvWnrJXniXG77Vrfud51pRcylVPbs6yrP95Rlsc5c p9++lBZOeFd6vcUwt26VJCm2yvNmTRO44kYaFLnMQajlHWn0i/o5HZl0o3nTpruld65hmfHlCZKH YwaevwRndM0TM/HFK1iBlZyGuM+bC8l5r/U2hhIX/cIOXPVsZpBT5tNqa6gCoGuvyUjR6Vht7qjV BtvibDIp0Lob8kGlgkv2FL179kNrzxTl4ViFby6qMGyaI/c5I/g9TrU06K7+BAAA//8DAFBLAwQU AAYACAAAACEAUKhFL9gAAAD8AAAADwAAAGRycy9kb3ducmV2LnhtbESPT0sDMRBH74LfIYzgpbSJ i1hdm5YqiEqFsq3gddzM/sHNZE1iu/vtGzzocXjD+/EWq8F24kA+tI41XM0UCOLSmZZrDe/7p+kt iBCRDXaOScNIAVbL87MF5sYduaDDLtYiSTjkqKGJsc+lDGVDFsPM9cSJVc5bjOn0tTQej0luO5kp dSMttpwWGuzpsaHya/djNVTFdqMm1ccDb+11NpkruR5dpfXlxbC+BxFpiP/PPP9+fdv8wV/Vi0kt KrsDUT2Pn741BYZIXkPKS7EJglyeAAAA//8DAFBLAQItABQABgAIAAAAIQAMgYW7/gAAAOIBAAAT AAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9UeXBlc10ueG1sUEsBAi0AFAAGAAgAAAAhADHdX2HS AAAAjwEAAAsAAAAAAAAAAAAAAAAALwEAAF9yZWxzLy5yZWxzUEsBAi0AFAAGAAgAAAAhABb5sMCV AwAArAgAABAAAAAAAAAAAAAAAAAAKgIAAGRycy9zaGFwZXhtbC54bWxQSwECLQAUAAYACAAAACEA UKhFL9gAAAD8AAAADwAAAAAAAAAAAAAAAADtBQAAZHJzL2Rvd25yZXYueG1sUEsFBgAAAAAEAAQA 9QAAAPIGAAAAAAAAEPAIAAAAXg+wB9AOihAPABHwLAEAAAAAwwsIAAAAAwAAAAkCigAAABkQFAEA AAAAAAgMAQAAAgAAAAwBAAAAAAAAFAAAACAAAAABAAAAAQAAAAAAAAABAAAA6AAAAAgAAAAEAAAA AAAAAAABAAABAAAAAAAAAAEBAAABAAAAAAAAAAIBAAABAAAAAAAAAAMBAAABAAAAAAAAAAQBAAAB AAAAAAAAAAUBAABoAAAAZG1hbmAAAAACAAAABAAAAAMAAAABAAAACQQAAAoAAABBAHIAaQBhAGwA AAAIAAAAAAAAAAMAAAAAAAAAJgAAAE0AbwBuAG8AdAB5AHAAZQAgAFQAeQBwAG8AZwByAGEAcABo AHkAAAAGAQAABAAAAAAAGAAHAQAABgAAAAAAAAAAAAAABAAAAA4ACQARAAAAGgABAA8ADfBCAAAA AACfDwQAAAAEAAAAAAChDxwAAAABAAAAAAAgCAoAAAAA/wEABwABAAAAAAACAA4AAACqDwoAAAAB AAAAAQAAAAAADwAE8GsKAAASAArwCAAAAAYEAAAACgAAgwAL8EgAAAB/AAEA7wGAAJj8igC/AAQA BAC/AQEAEQD/AQEAGQA/AwAACACAwxgAAAC/AwAAAgBSAGUAYwB0AGEAbgBnAGwAZQAgADYAAAAT ACLxXwgAAKmDWQgAAFBLAwQUAAYACAAAACEADIGFu/4AAADiAQAAEwAAAFtDb250ZW50X1R5cGVz XS54bWyUUcFOwzAMvSPxD1GuqEnHASHUdgc6joBgfICVuG1Em0RxKNvf427sgISGONp+7/n5uVrv plHMmMgFX8uVKqVAb4J1vq/l2/ahuJWCMngLY/BYyz2SXDeXF9V2H5EEsz3Vcsg53mlNZsAJSIWI niddSBNkLlOvI5h36FFfl+WNNsFn9LnIi4ZsqhY7+Biz2Oy4fXTCdCnuj7hlVS0hxtEZyGxUL1Pd VE9sPDmL4hlSfoSJUdom0jRARMao8yqzt2qiInSdM6jaRK8L7+oPcRs+fcL5v9ot015wPqn/cnLC kc7cvLj9GWzxHapi5iEXGlyk0wZ9+FDzBQAA//8DAFBLAwQUAAYACAAAACEAMd1fYdIAAACPAQAA CwAAAF9yZWxzLy5yZWxzpJDBasMwDIbvg72D0b1x2kMZo05vhV5LB7sKW0lMY8tYJm3fvqYwWEZv O+oX+j7x7/a3MKmZsniOBtZNC4qiZefjYODrfFh9gJKC0eHEkQzcSWDfvb/tTjRhqUcy+iSqUqIY GEtJn1qLHSmgNJwo1k3POWCpYx50QnvBgfSmbbc6/2ZAt2CqozOQj24D6nxP1fyHHbzNLNyXxnLQ 3PfevqJqx9d4orlSMA9UDLgszzDT3NTnQL/2rv/plRETfVf+QvxMq/XHrBc1dg8AAAD//wMAUEsD BBQABgAIAAAAIQA7MD428gMAANELAAAQAAAAZHJzL3NoYXBleG1sLnhtbOxW227jNhB9L9B/IPha eH13HGOVhe3G2wJuYMRZ9LGgJSpWTZEqSfmSov/eM6Qcp4uiKOrt2+ZBHonDmTOXM5P3H46lYntp XWF0wrvvOpxJnZqs0M8J//S0aI05c17oTCijZcJP0vEPd99+876auIrhsnaTKuFb76tJu+3SrSyF e2cqqXGWG1sKj1f73K6sdFJ74eGoVO1epzNql6LQ/A6m9H5drSxJ6cN+ZVmRAUunDzBalPD6KFNg eFaSjXi7UYs3BGAsTbpzDRbxb7BkVhwQ4F9gMG0+WkTShU8z38KbnFprDlspMkef4bcd8J2haiAl LNWW+VMFlE5lD3WJfL0k/LdaWC8tRyjHhA+a2/EKzFwCdgicbQ4/mQwWRO0NEiImx9yW10ZEdkye M/gfDYd9ZJyzE+TeYNjrDQmRmMijZykUet1+f0QKKTQGN6PesBMgRySkWVnnP0pzNSpGhhJuUdEQ qdgvnafcXlyQO20WhVLXpiDEqPS1Ztgh4bdD5OyCLFguC5SYqaJM+LhDfzGp1DL3OgsqXhQqyghQ 6ZDzPEfwiPpaWJQ1omFsQ3+cmexEDjb4RVNFcv53QmAqoFBbY184O1gBbjjqasmZ+lGDErfdwQAd 48PLYHjTw4t9e7J5e6Lrcm5U4JfQKawm3HMWxbnHGzWfKSvhl3pdpaRIsVC3PB1/FrZqGsejZR/M eisq+Xf9E3VDO8U0kBHl/NqfMD2uTEmwtVddoqxQzxiYNmDIZP6IT8T77iB2AVU7agYsZwQhpC8B gyCUwi5D3iA8BgEuw2+hM8zaIJ5xMoB8Eps1MIbCUbF81JZiqWd2F2qTG+2nIbSNcFRqDGzdHOMK zUVMzlWtU5iPJVJULwrMVekq9WwvqMyvfAh9f9GYyfxz3fOowf3L6TT3/6DXnG7qubJPx8C0Tb1+ eRUXCOP15QGbqyHjBrQLYiwZMQg9RgQSk1xlYfH8Pru5nXUH9/PW99P5tNUfDzqt8Xw8bd0P0fCz 2W1/Mej+gcZvhn6BXGPskwmLquzqsijNr0UsCPKVcKlbn9ZxL4T+YJtYpfCsE64BkNasLXZYAtqs g8TZTlpaymFyp0TARpHogWJoWq+qeJE/hFcqmCpoSYezlTUmJ5mAxckTh2oMOn5xRhUZTdqQa9re EhmNJfTHuPRQ2Lda8jy+Qh7rpW7yXJOZRg5dExKUixSAprYQirOq8Ol2IcpCYcu0ut0eKL8V1snQ qsGeFG+ufVfqlhRxqKbus4PUNRsKSSf0XxlBWfiijPB3vxA/QEQ8QQ9yIHW2ElbQvPva6SAWzcc3 nfm/dvol93Fu4VlNzns//Ctw9ycAAAD//wMAUEsDBBQABgAIAAAAIQDgf51B1wAAAPwAAAAPAAAA ZHJzL2Rvd25yZXYueG1sRI/BSgMxEEDvgv8QRvBSbGIVlbVpqUJV6KFuFb1ON5Pdxc1kSWK7+/cG D3qcecMb3nw5uE4cKMTWs4bLqQJBXHnTcq3h/W19cQciJmSDnWfSMFKE5eL0ZI6F8Ucu6bBLtcgS jgVqaFLqCylj1ZDDOPU9cWbWB4cpj6GWJuAxy10nZ0rdSIct5w8N9vTYUPW1+3YabLndqIn9fOCt u55NbpVcjd5qfX42rO5BJBrS//H+I6xfn/7gr+rF5BZ1lWPs87gPrSkxJgoa8ibHZghy8QMAAP// AwBQSwECLQAUAAYACAAAACEADIGFu/4AAADiAQAAEwAAAAAAAAAAAAAAAAAAAAAAW0NvbnRlbnRf VHlwZXNdLnhtbFBLAQItABQABgAIAAAAIQAx3V9h0gAAAI8BAAALAAAAAAAAAAAAAAAAAC8BAABf cmVscy8ucmVsc1BLAQItABQABgAIAAAAIQA7MD428gMAANELAAAQAAAAAAAAAAAAAAAAACoCAABk cnMvc2hhcGV4bWwueG1sUEsBAi0AFAAGAAgAAAAhAOB/nUHXAAAA/AAAAA8AAAAAAAAAAAAAAAAA SgYAAGRycy9kb3ducmV2LnhtbFBLBQYAAAAABAAEAPUAAABOBwAAAAAAABDwCAAAAF4PIBBgFYoQ DwAR8CwBAAAAAMMLCAAAAAQAAAAIAooAAAAZEBQBAAAAAAAIDAEAAAIAAAAMAQAAAAAAABQAAAAg AAAAAQAAAAEAAAAAAAAAAQAAAOgAAAAIAAAABAAAAAAAAAAAAQAAAQAAAAAAAAABAQAAAQAAAAAA AAACAQAAAQAAAAAAAAADAQAAAQAAAAAAAAAEAQAAAQAAAAAAAAAFAQAAaAAAAGRtYW5gAAAAAgAA AAQAAAADAAAAAQAAAAkEAAAKAAAAQQByAGkAYQBsAAAACAAAAAAAAAADAAAAAAAAACYAAABNAG8A bgBvAHQAeQBwAGUAIABUAHkAcABvAGcAcgBhAHAAaAB5AAAABgEAAAQAAAAAABgABwEAAAYAAAAA AAAAAAAAAAQAAAAOAAkAEQAAABoAAQAPAA3wWAAAAAAAnw8EAAAABAAAAAAAoA8CAAAAKgAAAKEP HAAAAAIAAAAAACAICgAAAAD/AgAHAAIAAAAAAAIADgAAANgPBAAAAAAAAAAAAKoPCgAAAAIAAAAB AAAAAAAPAATwQgAAABIACvAIAAAAAQQAAAAMAABzAAvwKgAAAIEBAAAACJMBjp+LAJQB3r1oAL8B EgASAP8BAAAIAAQDCQAAAD8DAQABABAA8AcgAAAA////AAAAAACAgIAAAAAAALvg4wAzM5kAAJmZ AJnMAAAPAIgTaQAAAA8AihMpAAAAAAC6DxAAAABfAF8AXwBQAFAAVAAxADIAAACLEwkAAAAAACQE AQAAAAgPAIoTMAAAAAAAug8QAAAAXwBfAF8AUABQAFQAMQAwAAAAixMQAAAAAADrLggAAADFpcYB ICgAxQAAHAQEAAAAAQAAABAAHgRpBgAAUEsDBBQABgAIAAAAIQDzFsBh/QAAALsBAAATAAAAW0Nv bnRlbnRfVHlwZXNdLnhtbHyQy07DMBBF90j8g+Utip2yQAgl6YLHCgGL8gEje5JY+CWPUzV/j5MW CVDV1Wged+6ZabYHZ9keE5ngW74RNWfoVdDGDy3/3L1U95xRBq/BBo8tn5H4tru+anZzRGJF7anl Y87xQUpSIzogESL60ulDcpBLmgYZQX3BgPK2ru+kCj6jz1VedvCuecIeJpvZ86GUjyRFztnjcW6x ajnEaI2CXEDl0pVd817Ak9HIPiDlN3BlSupEkmwpvsIcpvwn2YjLa/de/2OvQt8bhTqoyRViERNS iSuFs+KX0c2J6cwtCS1dOOaM6+lboihXKxpNpB8Hub6++wYAAP//AwBQSwMEFAAGAAgAAAAhAHDw ONy+AAAAOAEAAAsAAABfcmVscy8ucmVsc4SPwQrCMBBE74L/EPZu03oQkaa9iCB4Ev2AJdm2wTYJ 2Sj2783RguBxGObNTN2+p1G8KLL1TkFVlCDIaW+s6xXcb6fNHgQndAZH70jBTAxts17VVxox5RAP NrDIFMcKhpTCQUrWA03IhQ/kstP5OGHKMvYyoH5gT3JbljsZvxnQLJjibBTEs6lA3OaQm/+zfddZ TUevnxO59KNC8mgNXXD2z5SxGHtKCkzkb2MhqiLvB9nUcvG3+QAAAP//AwBQSwMEFAAGAAgAAAAh AOSwRAA2AwAAWgkAACEAAABkcnMvc2xpZGVMYXlvdXRzL3NsaWRlTGF5b3V0MS54bWyslmtv2yAU hr9P2n9A/jgpc+xc7FpJqq27aFIv0dL+AIJJYhUwAuwl/36Hi5O066TI6pcEw+GB874c7Nn1njPU UqWrWsyj5PMwQlSQuqzEdh49Pf4Y5BHSBosSs1rQeXSgOrpefPwwk4Vm5S0+1I1BwBC6wPNoZ4ws 4liTHeVYf64lFTC2qRXHBh7VNi4V/gNszuJ0OJzGHFciCvPVJfPrzaYi9FtNGk6F8RBFGTawf72r pO5onFyC41g9N3JAai4Bsa5YZQ4OesS086hRoggpDXhFVK3rjbFzCo5J0XIWIU6KX1tRK7xmIBJv Xc9SUU1VS78Yo6p1Y6i2Q8Wnji0v2aG0EGFcgi9VMwcJa5nKMBohFwZrgYfRAswhK1YigTl0PNoI tGJVSd2Qlo+KUhsk2p9KruRSuRn37VKhqrSEMDOKw0AIc48CwqARv5q+7Ui42G8UX8xwAV6h/TyC I3WwvzAJF3RvEPGd5NRLdg9vxJLd9zei424B2MFxUTiN0mf0bzppl44XIjlm5UMxTL2tybNGooY8 bfo+PXLfdjCbs8XLHfKqE6McLYT6cSdJN0U7Wbu9HsWY5pN86BVJk9FwnE5e6pJlWTq2AVadZJwN hz7iPGuPloXZf63Lg1V1Df/OFVwwbVbmwKhTGzTBBewcfsBbhm1RUzF4WkFRc3PDKIaiD86YxQ2r yDMyNaJlZdAd1oYqZNzp0RY5g00YcD4gqSiXWOHfr8hWPFzAyiBHt0Noen/+79Koc2nVrP2a6XsY pZu1NwpONhy7ztvLDUtGWTINjo3yfArX1kvHpmCXs9Q5lk1SG+1F8IXgkvfnp9PjTcesTaxlCRwc BPfSraucSpRQ/a6J2RbcgpMHVQyA5h4uZOdySTdggl8yAAIrPbHGk8xuHfUAWkoAjk7Aq2TsDmoP oKUE4PgEPCrdg2gxgTg5I+Zp7qzpQbSYQJyeiGmag739ZLSYQMzOiNl41NcYiwnE/ES0uL7OWEwg Xp0Rp5PM1UAPHS3G3QjdxWTx73AvQWG/59XkitS/F6Fp357u1cfUHZYPrdMEvmjgQrxxXRK+YWzB QegpxDK6b6LFXwAAAP//AwBQSwECLQAUAAYACAAAACEA8xbAYf0AAAC7AQAAEwAAAAAAAAAAAAAA AAAAAAAAW0NvbnRlbnRfVHlwZXNdLnhtbFBLAQItABQABgAIAAAAIQBw8DjcvgAAADgBAAALAAAA AAAAAAAAAAAAAC4BAABfcmVscy8ucmVsc1BLAQItABQABgAIAAAAIQDksEQANgMAAFoJAAAhAAAA AAAAAAAAAAAAABUCAABkcnMvc2xpZGVMYXlvdXRzL3NsaWRlTGF5b3V0MS54bWxQSwUGAAAAAAMA AwDJAAAAigUAAAAAIAAeBM0FAABQSwMEFAAGAAgAAAAhAPMWwGH9AAAAuwEAABMAAABbQ29udGVu dF9UeXBlc10ueG1sfJDLTsMwEEX3SPyD5S2KnbJACCXpgscKAYvyASN7klj4JY9TNX+PkxYJUNXV aB537plptgdn2R4TmeBbvhE1Z+hV0MYPLf/cvVT3nFEGr8EGjy2fkfi2u75qdnNEYkXtqeVjzvFB SlIjOiARIvrS6UNykEuaBhlBfcGA8rau76QKPqPPVV528K55wh4mm9nzoZSPJEXO2eNxbrFqOcRo jYJcQOXSlV3zXsCT0cg+IOU3cGVK6kSSbCm+whym/CfZiMtr917/Y69C3xuFOqjJFWIRE1KJK4Wz 4pfRzYnpzC0JLV045ozr6VuiKFcrGk2kHwe5vr77BgAA//8DAFBLAwQUAAYACAAAACEAcPA43L4A AAA4AQAACwAAAF9yZWxzLy5yZWxzhI/BCsIwEETvgv8Q9m7TehCRpr2IIHgS/YAl2bbBNgnZKPbv zdGC4HEY5s1M3b6nUbwosvVOQVWUIMhpb6zrFdxvp80eBCd0BkfvSMFMDG2zXtVXGjHlEA82sMgU xwqGlMJBStYDTciFD+Sy0/k4Ycoy9jKgfmBPcluWOxm/GdAsmOJsFMSzqUDc5pCb/7N911lNR6+f E7n0o0LyaA1dcPbPlLEYe0oKTORvYyGqIu8H2dRy8bf5AAAA//8DAFBLAwQUAAYACAAAACEA0J7O xJoCAABCBwAAIQAAAGRycy9zbGlkZUxheW91dHMvc2xpZGVMYXlvdXQxLnhtbKyV227bMAyG7wfs HQRfDkjdwzAMQpJiy9ZhQA9Bkz4AIyuxVp0gMV789qNkO0W7DkjQ3TiORH4if5Ly+HJnNGtkiMrZ SXF2clowaYWrlN1Miofl1ehzwSKCrUA7KydFK2NxOX3/bux51NU1tG6LjBg2cpgUNaLnZRlFLQ3E E+elpb21CwaQ/oZNWQX4TWyjy/PT00+lAWWL3j8c4u/WayXkNye2RlrsIEFqQIo/1srHgWbEITgD 4XHrR8IZT4iV0grbDN1jmkmxDZb3KY2MEsFFt8bkww0I3hhdMCP4z411AVaaRDJNXpkHGWVo5BfE oFZblDFt8Q8D2x8SoU8QiznB56ph6+kst/pVsGxEJ1EFiymVRix0xSwYWlgq1JJRAdnMWSRSNoh+ GaRMprb5EfzCz0P2u23mgakqcXr/ouw3erP815IZvZQv3DcDCfhuHcx0DJzqxXaTgtqqTU9yAi53 yES3KJ5WRX33iq2ov79iXQ4HUAT7Q6kjfZfR3+mcD+l0cpzts+pMgVyvnXiMzDrKM6XfpSdumwGW ck54X7NOeUzK9nbdZtZjsI+kaRYLd19d1abEV/SbF4HriAtstcyCUNjACU4Pkl9Dmj1pRw8Lmj2D My2BZrMXD6czrcQjQ8dkpZDdQEQZWA6GJpWQY1IHqTg9UtpqDgHuX5BTfsDpZAp6iJBeOwn/LeTF IGTfTWyuQcja6YqCOH+brKqiphiU/w+KUgGYbvReujcqnNo2CxyfKdypmKWkx3BkTuOIoi6kcDSj WjZSH4DPSh+BX9YqHE6/SHU8gn7ltgHrg4P/eCxerV+l001ydG/nFu/uPnpN92S+3nS4AX/X5A6h LxdN1CwvefpWpUkh0yeTxBi+fdM/AAAA//8DAFBLAQItABQABgAIAAAAIQDzFsBh/QAAALsBAAAT AAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9UeXBlc10ueG1sUEsBAi0AFAAGAAgAAAAhAHDwONy+ AAAAOAEAAAsAAAAAAAAAAAAAAAAALgEAAF9yZWxzLy5yZWxzUEsBAi0AFAAGAAgAAAAhANCezsSa AgAAQgcAACEAAAAAAAAAAAAAAAAAFQIAAGRycy9zbGlkZUxheW91dHMvc2xpZGVMYXlvdXQxLnht bFBLBQYAAAAAAwADAMkAAADuBAAAAAAwAB4EtAYAAFBLAwQUAAYACAAAACEA8xbAYf0AAAC7AQAA EwAAAFtDb250ZW50X1R5cGVzXS54bWx8kMtOwzAQRfdI/IPlLYqdskAIJemCxwoBi/IBI3uSWPgl j1M1f4+TFglQ1dVoHnfumWm2B2fZHhOZ4Fu+ETVn6FXQxg8t/9y9VPecUQavwQaPLZ+R+La7vmp2 c0RiRe2p5WPO8UFKUiM6IBEi+tLpQ3KQS5oGGUF9wYDytq7vpAo+o89VXnbwrnnCHiab2fOhlI8k Rc7Z43FusWo5xGiNglxA5dKVXfNewJPRyD4g5TdwZUrqRJJsKb7CHKb8J9mIy2v3Xv9jr0LfG4U6 qMkVYhETUokrhbPil9HNienMLQktXTjmjOvpW6IoVysaTaQfB7m+vvsGAAD//wMAUEsDBBQABgAI AAAAIQBw8DjcvgAAADgBAAALAAAAX3JlbHMvLnJlbHOEj8EKwjAQRO+C/xD2btN6EJGmvYggeBL9 gCXZtsE2Cdko9u/N0YLgcRjmzUzdvqdRvCiy9U5BVZQgyGlvrOsV3G+nzR4EJ3QGR+9IwUwMbbNe 1VcaMeUQDzawyBTHCoaUwkFK1gNNyIUP5LLT+ThhyjL2MqB+YE9yW5Y7Gb8Z0CyY4mwUxLOpQNzm kJv/s33XWU1Hr58TufSjQvJoDV1w9s+UsRh7SgpM5G9jIaoi7wfZ1HLxt/kAAAD//wMAUEsDBBQA BgAIAAAAIQDlyVebgQMAAK4JAAAhAAAAZHJzL3NsaWRlTGF5b3V0cy9zbGlkZUxheW91dDEueG1s nJbbjto8EIDvK/UdrFxW2pKEQ9hooWq3p1/ablHZPoBxDETrk2yTwv/0nXEcDu1WiriBYM98cx5y 924vBWm4dbVWsyR7myaEK6arWm1myc+nzzfThDhPVUWFVnyWHLhL3s1fv7ozpRPVAz3onSfAUK6k s2TrvSkHA8e2XFL3Vhuu4G6traQeftrNoLL0F7ClGORpOhlIWqsk6ts++nq9rhn/qNlOcuVbiOWC evDfbWvjOppkfXCS2ueduWFaGkCsalH7Q4AeMc0s2VlVxpBuZM2sdnrtUaeUlJWNFAmRrPxvo7Sl KwFJkk04WVjuuG34e+9tvdp57vCqfNOxTR8PDUKUDwFeZs0fDNhynH3ltEpIEARrUMVkDuVhS1ER RSUcLDnD/BAU5DbcOvNkOUc51XyxZmkWNig9NgtL6gohUTkZxIsoFn4qEIOHwR/qm45Ey/3ayvkd LaFgZD9LoK8O+AlKtOR7T1h7yE6nbPv9BVm2/fSC9KAzAB4cjUJLmjaiv8PJu3Ceai84yY5RtaIU VB80e3ZEaYgTw2/DY49NB8OYEW+2pE29R1SUay9DPjp5F3LaOXrMRJHnw2wY0jEapZPb9I+kFEWR j+CQYGqy4SRPi3Ew0pHASIs2pd9/0NUBU7qCb6gcVWyrYZA8atBSOL/0BwF1hudGZOARoWIDky6g C2hZ8fUPOHL/zxIwCTZXofCMQgaoENFs1IRyXxIh2bSElMAHQATFlcHVzc8lrAzp7wWnYChG5+f3 ombPxGvCq9qTb9R5bklIISwY8BHpPtgISK6qBbUU3TsnY1VoCZYhC130ISFYmX+XH/LdjsIT9t5C UMa3WsAwkByDhGnp6nxVJ2D2Exgb6Omuca5qiPw2nRTQHKF43ZRcNsQ4TbNpESvTDlmfhli1zJca AnbgQxjQWlWwafARa7raPcLGD56ctQls7VBRbIW2oVAWHnPsrRY1GhcgBvnowcum5zyERN7wxLvN YFD68ibnPIRE3ujEy4ZFhmL9HETTbddBlEiJwPEZcJpPMY4rgEiJwMkJmOdTcPAqIFIisDgDFqNh /5pchIyUCJyegEjrX5QLIFIi8PYMOBkXVxYFKS8vJ8RD1Y5bKNi9flnhRIZd5S6W1b8WUpjL9m8W HvH/OGwaYb9R870JvsBbEqzB+3Bk4L0IGw1ETyLI6N6z5r8BAAD//wMAUEsBAi0AFAAGAAgAAAAh APMWwGH9AAAAuwEAABMAAAAAAAAAAAAAAAAAAAAAAFtDb250ZW50X1R5cGVzXS54bWxQSwECLQAU AAYACAAAACEAcPA43L4AAAA4AQAACwAAAAAAAAAAAAAAAAAuAQAAX3JlbHMvLnJlbHNQSwECLQAU AAYACAAAACEA5clXm4EDAACuCQAAIQAAAAAAAAAAAAAAAAAVAgAAZHJzL3NsaWRlTGF5b3V0cy9z bGlkZUxheW91dDEueG1sUEsFBgAAAAADAAMAyQAAANUFAAAAAEAAHgSYBgAAUEsDBBQABgAIAAAA IQDzFsBh/QAAALsBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbHyQy07DMBBF90j8g+Utip2yQAgl 6YLHCgGL8gEje5JY+CWPUzV/j5MWCVDV1Wged+6ZabYHZ9keE5ngW74RNWfoVdDGDy3/3L1U95xR Bq/BBo8tn5H4tru+anZzRGJF7anlY87xQUpSIzogESL60ulDcpBLmgYZQX3BgPK2ru+kCj6jz1Ve dvCuecIeJpvZ86GUjyRFztnjcW6xajnEaI2CXEDl0pVd817Ak9HIPiDlN3BlSupEkmwpvsIcpvwn 2YjLa/de/2OvQt8bhTqoyRViERNSiSuFs+KX0c2J6cwtCS1dOOaM6+lboihXKxpNpB8Hub6++wYA AP//AwBQSwMEFAAGAAgAAAAhAHDwONy+AAAAOAEAAAsAAABfcmVscy8ucmVsc4SPwQrCMBBE74L/ EPZu03oQkaa9iCB4Ev2AJdm2wTYJ2Sj2783RguBxGObNTN2+p1G8KLL1TkFVlCDIaW+s6xXcb6fN HgQndAZH70jBTAxts17VVxox5RAPNrDIFMcKhpTCQUrWA03IhQ/kstP5OGHKMvYyoH5gT3JbljsZ vxnQLJjibBTEs6lA3OaQm/+zfddZTUevnxO59KNC8mgNXXD2z5SxGHtKCkzkb2MhqiLvB9nUcvG3 +QAAAP//AwBQSwMEFAAGAAgAAAAhAGEsp7VlAwAAFA4AACEAAABkcnMvc2xpZGVMYXlvdXRzL3Ns aWRlTGF5b3V0MS54bWzsV1tv2jAUfp+0/2DlcRILl0BpBFQbW6dJvaBBf4BxHJLVl8g2KezX79iJ KaV0gLpHXsBxPn8+5zsXO4OrFWeopErnUgyD1udmgKggMsnFYhg8zK4b/QBpg0WCmRR0GKypDq5G Hz8Miliz5Aav5dIg4BA6xsMgM6aIw1CTjHKsP8uCCniXSsWxgUe1CBOFn4Cbs7DdbPZCjnMR1OvV MetlmuaEfpNkyakwFYmiDBuwX2d5oT0bJ8fQcawel0WDSF4AxTxnuVk70g1NOQyWSsS1Sw2eEyW1 TI1dE3NM4pKzAHES/1wIqfCcgUi8dDMTRTVVJf1ijMrnS0O1fRV/8tzFMRYWlkQY5+BL1cy6gL3M k7yf/w6Qw8FmEMRgBNEhU5YggTlMzJ4kGkthgMa90sVMUWpBovyhimkxUW7FXTlRKE8sQ70yCOsX Ncw9CoDBINxZvvBMOF6lio8GOIZgodUwgJxa219YhGO6MohUk+R5lmT3e7Ak+74HHfoNwILNppCO ReXRa3fa3p1ZbhhFrY1XFRTD0htJHjUSEvy07lfukbvSk1mfLX2RoVp2S1XjqpdOD4/XoKkTy6y+ ymRtHZ/Dv5vEMdNmataMOkHAbBwDOfyA/AzbwqOi8TCFwuNmzCiGwqzFM6Mxy8kjMhLRJDfoFmtD FTLOL20pB6COgeDUlFQkE6zwrx1m6x+OYWcw2lsIw0rCt4XseCHrbEIThgnNJEvAiPb7ZNV/oBow SwPIQEgPH4M3tLVy7WRZ1L2AluJSrdVrNu3Y6esTLmp2+jAfIJt2Ubfdvex1XAA9kxOgCrPXZG/U 7N6sZC1XNjhOaGrltfa3+9WmoO0WAIbtPdhoG+sBgO3swTa3sR4A2Og1tvXCBg8AbPcQ1gMA2zuE 9QDAXhzCegBg+4ewHgDYy0PYCmC1rsvJBsZVE6xEwLApm3dWl80gV1z6RXVVFbS7pUvcEwp6SokU CWK0pOwIeldlJ9DPslwdz+4K4gT2a7lUJjva+KiqyKPDcZ2ne9nhFPmvfS36V19zmsB56g+DE4+L nb7m4ueOCttp3GD7zNjX13pR/9zY4EQ4N7b43Ng2F6FzY6svbO6vutDD0F773Z2dqVtc3Jeu18K3 GFwTx26qgK8ve/0D6DPEcvivudFfAAAA//8DAFBLAQItABQABgAIAAAAIQDzFsBh/QAAALsBAAAT AAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9UeXBlc10ueG1sUEsBAi0AFAAGAAgAAAAhAHDwONy+ AAAAOAEAAAsAAAAAAAAAAAAAAAAALgEAAF9yZWxzLy5yZWxzUEsBAi0AFAAGAAgAAAAhAGEsp7Vl AwAAFA4AACEAAAAAAAAAAAAAAAAAFQIAAGRycy9zbGlkZUxheW91dHMvc2xpZGVMYXlvdXQxLnht bFBLBQYAAAAAAwADAMkAAAC5BQAAAABQAB4E8gcAAFBLAwQUAAYACAAAACEA8xbAYf0AAAC7AQAA EwAAAFtDb250ZW50X1R5cGVzXS54bWx8kMtOwzAQRfdI/IPlLYqdskAIJemCxwoBi/IBI3uSWPgl j1M1f4+TFglQ1dVoHnfumWm2B2fZHhOZ4Fu+ETVn6FXQxg8t/9y9VPecUQavwQaPLZ+R+La7vmp2 c0RiRe2p5WPO8UFKUiM6IBEi+tLpQ3KQS5oGGUF9wYDytq7vpAo+o89VXnbwrnnCHiab2fOhlI8k Rc7Z43FusWo5xGiNglxA5dKVXfNewJPRyD4g5TdwZUrqRJJsKb7CHKb8J9mIy2v3Xv9jr0LfG4U6 qMkVYhETUokrhbPil9HNienMLQktXTjmjOvpW6IoVysaTaQfB7m+vvsGAAD//wMAUEsDBBQABgAI AAAAIQBw8DjcvgAAADgBAAALAAAAX3JlbHMvLnJlbHOEj8EKwjAQRO+C/xD2btN6EJGmvYggeBL9 gCXZtsE2Cdko9u/N0YLgcRjmzUzdvqdRvCiy9U5BVZQgyGlvrOsV3G+nzR4EJ3QGR+9IwUwMbbNe 1VcaMeUQDzawyBTHCoaUwkFK1gNNyIUP5LLT+ThhyjL2MqB+YE9yW5Y7Gb8Z0CyY4mwUxLOpQNzm kJv/s33XWU1Hr58TufSjQvJoDV1w9s+UsRh7SgpM5G9jIaoi7wfZ1HLxt/kAAAD//wMAUEsDBBQA BgAIAAAAIQCHWGZ8vwQAAOMXAAAhAAAAZHJzL3NsaWRlTGF5b3V0cy9zbGlkZUxheW91dDEueG1s 7FjbbuM2EH0v0H8g9Fgga8uWLxFiL9q0WxTIJkHj/QBaoiM1FKlStGLv13dmJNrybaF4F9gF6heb lg4P58I5HPPm/SqTrBSmSLWaeP67rseEinScqueJ92n24WrsscJyFXOplZh4a1F476c//3STh4WM 7/haLy0DDlWEfOIl1uZhp1NEich48U7nQsG7hTYZt/DTPHdiw1+BO5OdXrc77GQ8VV4937SZrxeL NBK/62iZCWUrEiMkt2B/kaR54diyqA1dxs3LMr+KdJYDxTyVqV0T6YamnHhLo8LapassjYwu9MLi nDDjUVhm0mNZFP71rLThcwlBykp68mhEIUwpfrXWpPOlFQW+Cn9x3HkbC3MkUZYc3I2aXeewln3V s9XsVT/M//EYgWFFyKQ3hRRFTzJmimfw4BZdNGmhFb0p8pkRAjGq/NPkT/mjoQn35aNhaYwE9USv U7+oYfRTAQwGnb3pz46Jh6uFyaY3PISEsdXEg321xk+YxEOxsiyqHkbbp1HycAQbJX8cQXfcAmDB ZlHYknnl0aE7PefOLLVSMH/jVQXlMPVORy8FUxr8RPcr96L70pGhz0ifJ6wOPVLVuOolxcPhC4gp BcuuftPxGh2fwzc95KEs7JNdS0gBjEvpUwJ4GIvF31VoG4/B2yYcnOQhmAIfkCzJsVSFuvr0BKWa 2VspOJRyHWo7vZVp9MKsZiJOLfvICysMsxSFAg24AXYLqawphYofueFgxA4zRoOHsDK46PyBYRXw 02Hvb8KOOX+UPBKJljFY0PsWGcB4erBdYS+5hJ1IBEZrb0sGgxFoEO1Lf9Af+H4fTdruzqAbdP0x 6B/u0WH/ejQkmyEMFRG5X20JFxGXYcZVlGgQtHlF2cxenWwG0nNHdZGqGAoch7j6fHkPQkuGVHuB FZ8nXi9AS+fOzcbeoGEPdk9N6Lxqxdo9ZEUqtAPM7G9Zr/2ALGjD6o8PWZGqZg22rH5/5A8R3IqW kLshQK6adtCgHffGZMO5tMhV0w63tL3eGEz4CmuRq6YdNWhHQZ/24bnWIldNO97SImf7lB2JLXLV tNcN2uFg9FUpQy7SkmZNkKLhIrDrNtJFq5+vcCg4JHDFjsKdo2KBU7FbrSzU6o6QkWrAUesOijce JVjdCZeLWsYqicFjlcKEg+Z5ggk5LWM9fxSMR4MvyFj/euBDcSCijY6RDDUTdXBSbdWpomwAYOjE pKlkWEIbrAMA1klEA0tKssE6AGBd3TexuCs3WAcArCvmk1gHAKyr0JNYBwCsK7uTWAcArKulk1gH AGxVIK4ToPiSSG58+zEqiJoB+HBFS+fvG9qSJxFpFTMpSiGPFOg+PdXFG+hnSWras9cnf2vF+aCX xiatjQ+qimxPny6OskNv8k27s4HTtdl+d0YWny9qVX9cdWcocP8uuYG2s9Y4ija1yq01bhgMuj0w FzqxU72aPwLlu/RqE+/Sq0G/fOnVJl7//9irDZ2mHevVqDU6X9YOpYx08mwpO9WvbaXs0q9hzHf7 n0u/duJO54v/ePYbqku/hldo1b/B/dh8z36NbpWqu1kY4gUuXb9K85HnDyW1kHC1Ds3ULT3K4TId /xkAdAtBDnc5P/0PAAD//wMAUEsBAi0AFAAGAAgAAAAhAPMWwGH9AAAAuwEAABMAAAAAAAAAAAAA AAAAAAAAAFtDb250ZW50X1R5cGVzXS54bWxQSwECLQAUAAYACAAAACEAcPA43L4AAAA4AQAACwAA AAAAAAAAAAAAAAAuAQAAX3JlbHMvLnJlbHNQSwECLQAUAAYACAAAACEAh1hmfL8EAADjFwAAIQAA AAAAAAAAAAAAAAAVAgAAZHJzL3NsaWRlTGF5b3V0cy9zbGlkZUxheW91dDEueG1sUEsFBgAAAAAD AAMAyQAAABMHAAAAAGAAHgRaBQAAUEsDBBQABgAIAAAAIQDzFsBh/QAAALsBAAATAAAAW0NvbnRl bnRfVHlwZXNdLnhtbHyQy07DMBBF90j8g+Utip2yQAgl6YLHCgGL8gEje5JY+CWPUzV/j5MWCVDV 1Wged+6ZabYHZ9keE5ngW74RNWfoVdDGDy3/3L1U95xRBq/BBo8tn5H4tru+anZzRGJF7anlY87x QUpSIzogESL60ulDcpBLmgYZQX3BgPK2ru+kCj6jz1VedvCuecIeJpvZ86GUjyRFztnjcW6xajnE aI2CXEDl0pVd817Ak9HIPiDlN3BlSupEkmwpvsIcpvwn2YjLa/de/2OvQt8bhTqoyRViERNSiSuF s+KX0c2J6cwtCS1dOOaM6+lboihXKxpNpB8Hub6++wYAAP//AwBQSwMEFAAGAAgAAAAhAHDwONy+ AAAAOAEAAAsAAABfcmVscy8ucmVsc4SPwQrCMBBE74L/EPZu03oQkaa9iCB4Ev2AJdm2wTYJ2Sj2 783RguBxGObNTN2+p1G8KLL1TkFVlCDIaW+s6xXcb6fNHgQndAZH70jBTAxts17VVxox5RAPNrDI FMcKhpTCQUrWA03IhQ/kstP5OGHKMvYyoH5gT3JbljsZvxnQLJjibBTEs6lA3OaQm/+zfddZTUev nxO59KNC8mgNXXD2z5SxGHtKCkzkb2MhqiLvB9nUcvG3+QAAAP//AwBQSwMEFAAGAAgAAAAhANzs P+wnAgAAZQQAACEAAABkcnMvc2xpZGVMYXlvdXRzL3NsaWRlTGF5b3V0MS54bWyMVMtu2zAQvBfo PxA8FnDk5FAUhOWgdR8okMRG7XzAmqJtwnyBXKvW33dJSU6b5uCLRC1nZ3eGXM3uz9awVsWkvav5 7c2UM+Wkb7Tb1/x5833yibOE4Bow3qmadyrx+/n7d7MgkmkeoPMnZMThkoCaHxCDqKokD8pCuvFB Odrb+WgB6TPuqybCb+K2prqbTj9WFrTjQ368Jt/vdlqqr16erHLYk0RlAKn/dNAhjWxWXkNnIR5P YSK9DUSx1UZjV0gvNG3NT9GJQdLEahl98jvMOcKCFK01nFkpfu6dj7A1ZJJtS2QVVVKxVZ8Ro96e UKW8JT6M3OGaDkMmcVgE/usadoFqoUajls50nBUo1aNz5HM6ILk2DXNgKbDJKFZgeSeFTVQqr1z7 I4Z1WMWS8NSuItNNJhgSeTVsDLDy6QhGi+pV+n5kAnHeRTufgaDjYuea063q8pOSQKgzMtkH5UtU HpZvYOXh2xvoaixAHVyKZlW9ov/l3I1yeh9uL6p6KFDqg5fHxJwnnVl+L08+tSNZ1pzpw4H9ZfyA 6zeLHyM+kafFLDx/8U2XhW/pXYIgTMI1dkYVQ6htEEROD7LfQB495SbPaxo9iwujgEZzMA/nC6Pl kaFnqtHIHiGhiqzcAhpUopyRO0iHM1Aq16wgwq9XzFkfCKpMTY8d0jJbWF79/aBlvkTlCpj4CGHZ lj5puKnqooQCjfPg1gskc4y/h/kfAAAA//8DAFBLAQItABQABgAIAAAAIQDzFsBh/QAAALsBAAAT AAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9UeXBlc10ueG1sUEsBAi0AFAAGAAgAAAAhAHDwONy+ AAAAOAEAAAsAAAAAAAAAAAAAAAAALgEAAF9yZWxzLy5yZWxzUEsBAi0AFAAGAAgAAAAhANzsP+wn AgAAZQQAACEAAAAAAAAAAAAAAAAAFQIAAGRycy9zbGlkZUxheW91dHMvc2xpZGVMYXlvdXQxLnht bFBLBQYAAAAAAwADAMkAAAB7BAAAAABwAB4EwwQAAFBLAwQUAAYACAAAACEA8xbAYf0AAAC7AQAA EwAAAFtDb250ZW50X1R5cGVzXS54bWx8kMtOwzAQRfdI/IPlLYqdskAIJemCxwoBi/IBI3uSWPgl j1M1f4+TFglQ1dVoHnfumWm2B2fZHhOZ4Fu+ETVn6FXQxg8t/9y9VPecUQavwQaPLZ+R+La7vmp2 c0RiRe2p5WPO8UFKUiM6IBEi+tLpQ3KQS5oGGUF9wYDytq7vpAo+o89VXnbwrnnCHiab2fOhlI8k Rc7Z43FusWo5xGiNglxA5dKVXfNewJPRyD4g5TdwZUrqRJJsKb7CHKb8J9mIy2v3Xv9jr0LfG4U6 qMkVYhETUokrhbPil9HNienMLQktXTjmjOvpW6IoVysaTaQfB7m+vvsGAAD//wMAUEsDBBQABgAI AAAAIQBw8DjcvgAAADgBAAALAAAAX3JlbHMvLnJlbHOEj8EKwjAQRO+C/xD2btN6EJGmvYggeBL9 gCXZtsE2Cdko9u/N0YLgcRjmzUzdvqdRvCiy9U5BVZQgyGlvrOsV3G+nzR4EJ3QGR+9IwUwMbbNe 1VcaMeUQDzawyBTHCoaUwkFK1gNNyIUP5LLT+ThhyjL2MqB+YE9yW5Y7Gb8Z0CyY4mwUxLOpQNzm kJv/s33XWU1Hr58TufSjQvJoDV1w9s+UsRh7SgpM5G9jIaoi7wfZ1HLxt/kAAAD//wMAUEsDBBQA BgAIAAAAIQC4yP6QkAEAABMDAAAhAAAAZHJzL3NsaWRlTGF5b3V0cy9zbGlkZUxheW91dDEueG1s jFLbTuMwEH1H4h8sP65UUvYBraymaJebkBaoBPsBU8dpLHzT2AnN3zN2ExArHvpijc+cc2bG49Xl 3ho2KIzau5qfny05U076Rrtdzf+93C5+cRYTuAaMd6rmo4r8cn16sgoimuYvjL5PjDxcFFDzLqUg qirKTlmIZz4oR7nWo4VEV9xVDcIbeVtT/VwuLyoL2vFJj8fofdtqqa697K1y6WCCykCi/mOnQ5zd rDzGzgK+9mEhvQ1ksdVGp7GYftgMNe/RiWmkhdUSffRtyhphQYrBGs6sFPc75xG2hh7JDgXZoIoK B/U7JdTbPqmYU+LH7B2O6TBkE5fKgF9fLY2Bam0NuFfOCo1q0Q75mpYjn03DHFgC/hRGBmN4QaVy 5IY7DM9hg4X7OGyQ6SZrJw2vpsREK1dHNAqq/+S72QnEvkW7XoGgLbF9zekzjfkkEQi1T0weQPmJ yu7pG67sbr5hV3MB6uCjKMXzWBTmsUvnBh8gPA00H9CWYlJ4VaBAn+8wg/ykZI/5M6/fAQAA//8D AFBLAQItABQABgAIAAAAIQDzFsBh/QAAALsBAAATAAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9U eXBlc10ueG1sUEsBAi0AFAAGAAgAAAAhAHDwONy+AAAAOAEAAAsAAAAAAAAAAAAAAAAALgEAAF9y ZWxzLy5yZWxzUEsBAi0AFAAGAAgAAAAhALjI/pCQAQAAEwMAACEAAAAAAAAAAAAAAAAAFQIAAGRy cy9zbGlkZUxheW91dHMvc2xpZGVMYXlvdXQxLnhtbFBLBQYAAAAAAwADAMkAAADkAwAAAACAAB4E cAcAAFBLAwQUAAYACAAAACEA8xbAYf0AAAC7AQAAEwAAAFtDb250ZW50X1R5cGVzXS54bWx8kMtO wzAQRfdI/IPlLYqdskAIJemCxwoBi/IBI3uSWPglj1M1f4+TFglQ1dVoHnfumWm2B2fZHhOZ4Fu+ ETVn6FXQxg8t/9y9VPecUQavwQaPLZ+R+La7vmp2c0RiRe2p5WPO8UFKUiM6IBEi+tLpQ3KQS5oG GUF9wYDytq7vpAo+o89VXnbwrnnCHiab2fOhlI8kRc7Z43FusWo5xGiNglxA5dKVXfNewJPRyD4g 5TdwZUrqRJJsKb7CHKb8J9mIy2v3Xv9jr0LfG4U6qMkVYhETUokrhbPil9HNienMLQktXTjmjOvp W6IoVysaTaQfB7m+vvsGAAD//wMAUEsDBBQABgAIAAAAIQBw8DjcvgAAADgBAAALAAAAX3JlbHMv LnJlbHOEj8EKwjAQRO+C/xD2btN6EJGmvYggeBL9gCXZtsE2Cdko9u/N0YLgcRjmzUzdvqdRvCiy 9U5BVZQgyGlvrOsV3G+nzR4EJ3QGR+9IwUwMbbNe1VcaMeUQDzawyBTHCoaUwkFK1gNNyIUP5LLT +ThhyjL2MqB+YE9yW5Y7Gb8Z0CyY4mwUxLOpQNzmkJv/s33XWU1Hr58TufSjQvJoDV1w9s+UsRh7 SgpM5G9jIaoi7wfZ1HLxt/kAAAD//wMAUEsDBBQABgAIAAAAIQDXlCmAPQQAAG4OAAAhAAAAZHJz L3NsaWRlTGF5b3V0cy9zbGlkZUxheW91dDEueG1szFfdjuI2GL2v1HewcllpFkIIMNHAqqXdqtLs LCrsA5jEkHQcO3JMFvbpe+zETGDZJcz0ojdMxjk+/n7P5zy83+ecVEyVmRRTz3/X9wgTsUwysZ16 n1cf7iYeKTUVCeVSsKl3YKX3fvbzTw9FVPLkkR7kThNwiDKiUy/Vuoh6vTJOWU7Ld7JgAu82UuVU 41+17SWKfgF3znuDfn/Uy2kmvGa/6rJfbjZZzH6X8S5nQtckinGqYX+ZZkXp2PK4C11O1fOuuItl XoBinfFMHyzpkaaaejslosaluzyLlSzlRps9UU7jqMq5R/I4+msrpKJrjiDllV1ZKFYyVbFftVbZ eqdZaV5FvzjuoouFhSER2jp4GjV9KHCWXP+z2nvEwnAWcujNkJx4yRMiaI6FuRQaDORLplMyp4UJ lcWUxUoxZtCi+lMVy2Kh7NanaqFIlhiqhsLrNS8amP1XAIaH3tn2rWOi0X6j8tkDjZA0sp96qK2D +cUmGrG9JnG9GL+sxumnC9g4/eMCuucOgAXHQ1GWRe3Rt+4MnDurTHNG/KNXNZRi66OMn0siJPw0 7tfuxU+VIzM+G/oiJXX4taFqcPVLGw+HL21MnaHHSAzDMcrfhmMwDvrhWUyCfn8S+IFHTGR8fzRo EG2Pa+Yi0vvfZHIwEV3jLxJHRZxK9NK6jjMv9VIfONJMI15xHwYRyrdodo4ioFHCNn9jqfw69WAS bFo7x4945BjPLR5EmEaIA36wlVOjFUzcfV5CK3I954yCvvFJz+Y8i5+JloQlmSYfaamZIjZuUBZY Zti1PcNSMpEsqKLGqDazSQWNcDLi63zGY53t7+ccQTztggWnMUslT2DE4G0VkCWoX1ck3ZMfhOPQ JNQ0w6Xsh77vA1FnP5yEgY9SqN2vG8q6Xdehi4TLvm2tdqqalJ9lOjDVV1O2AHgcNPXaropJG+sA wAYXsMM21gGAHV7Ammo72uAAwIbXsA4A7Oga1gGAHV/DOgCwk2tYBwD2/hq2BlzqIewkYDg2yxt7 ymiqbanypKfqvrHNgx93pC3cG9p4yWIpEsJZxXgHettbN9Cv0kx1Z7cNcQP7B7lTmH5djR+awryF PttcZMeY+0/VbOjUbGVS3ZYyGxCMfTeqXjXMzASBhGMUpJRvPNwBIHA2kXaoGcmxD0tb8UZ8zdKP pps/DEK/7vOXkX8y3oaje78/erPAEdzkHu0VIxMJbjvm0Zi23j3h3mqz2dI0/0SnzEw0WHSikbeG ys3oTnwnenqmkQ3fvT80p5JOfCfaeKajDZ8fjP1RV8L7H2it45sMJkbqOxl4wnemxw3fYDCBea/h O9Nsxzce2rF1u31nut7wGbLOCTnx90z7Hd8oHL8uH/+P+YDOdrcJe8Gwve4+EbBivijsVwBXH2nx qbItg6883ObmdqnAd52Z54C+QAyV+06c/QsAAP//AwBQSwECLQAUAAYACAAAACEA8xbAYf0AAAC7 AQAAEwAAAAAAAAAAAAAAAAAAAAAAW0NvbnRlbnRfVHlwZXNdLnhtbFBLAQItABQABgAIAAAAIQBw 8DjcvgAAADgBAAALAAAAAAAAAAAAAAAAAC4BAABfcmVscy8ucmVsc1BLAQItABQABgAIAAAAIQDX lCmAPQQAAG4OAAAhAAAAAAAAAAAAAAAAABUCAABkcnMvc2xpZGVMYXlvdXRzL3NsaWRlTGF5b3V0 MS54bWxQSwUGAAAAAAMAAwDJAAAAkQYAAAAAkAAeBMYIAABQSwMEFAAGAAgAAAAhAPMWwGH9AAAA uwEAABMAAABbQ29udGVudF9UeXBlc10ueG1sfJDLTsMwEEX3SPyD5S2KnbJACCXpgscKAYvyASN7 klj4JY9TNX+PkxYJUNXVaB537plptgdn2R4TmeBbvhE1Z+hV0MYPLf/cvVT3nFEGr8EGjy2fkfi2 u75qdnNEYkXtqeVjzvFBSlIjOiARIvrS6UNykEuaBhlBfcGA8rau76QKPqPPVV528K55wh4mm9nz oZSPJEXO2eNxbrFqOcRojYJcQOXSlV3zXsCT0cg+IOU3cGVK6kSSbCm+whym/CfZiMtr917/Y69C 3xuFOqjJFWIRE1KJK4Wz4pfRzYnpzC0JLV045ozr6VuiKFcrGk2kHwe5vr77BgAA//8DAFBLAwQU AAYACAAAACEAcPA43L4AAAA4AQAACwAAAF9yZWxzLy5yZWxzhI/BCsIwEETvgv8Q9m7TehCRpr2I IHgS/YAl2bbBNgnZKPbvzdGC4HEY5s1M3b6nUbwosvVOQVWUIMhpb6zrFdxvp80eBCd0BkfvSMFM DG2zXtVXGjHlEA82sMgUxwqGlMJBStYDTciFD+Sy0/k4Ycoy9jKgfmBPcluWOxm/GdAsmOJsFMSz qUDc5pCb/7N911lNR6+fE7n0o0LyaA1dcPbPlLEYe0oKTORvYyGqIu8H2dRy8bf5AAAA//8DAFBL AwQUAAYACAAAACEA1g16QJMFAABUEQAAIQAAAGRycy9zbGlkZUxheW91dHMvc2xpZGVMYXlvdXQx LnhtbKxYXW/bNhR9H7D/IOhxQ+r42xHqFG22bgXc1Khd7JmmqVgzRWok5dj59TuXomwpSwfDzYsj kZeHvPeeey6Vt+/2uYx2wthMq2ncfXMdR0Jxvc7UwzT+tvx4NYkj65haM6mVmMYHYeN3tz//9LZI rFzP2EGXLgKGsgmbxhvniqTTsXwjcmbf6EIozKXa5Mzh1Tx01oY9AjuXnd719aiTs0zFYb05Z71O 04yL3zQvc6FcBWKEZA7nt5ussDVazs+By5nZlsUV13kBiFUmM3fwoEeY3TQujUqCS1d5xo22OnW0 JskZT3a5jKOcJ58elDZsJRGkfOdH5kZYYXbivXMmW5VOWJpKfqmxi3NOWBCIct7BdtTcocBeRcaX +zjyZtgLOYxvkRy+kOtIsRwD84y70ojoMXOb6I4VFCpvY4ulEYKs1e4PUyyKufFL73dzE2VrggoQ cSdMBDP/qmCGh86z5Q81Ekv2qclv37IESYv20xjcOtAvFrFE7F3Eq0F+GuWbLy/Y8s3vL1h36g1w guOmoGVRefRfd3q1O8vMSRF1j15VpgxLZ5pvbaQ0/CT3K/f4/a4GI58JvthEVfgdQQW7atLHo7a3 Pqb1QY+R6I5ver0JSgueDyYohOtnURkOJqMBBiOKzXA0GvcnfpMaCZtU0EXi9h/0+kAhXeEvMscU 32gU04pWsERat3AHiTzjeSe7OFHE5AOqXYIFLFmL9CuG7NM0Rkliy1Xt+dEeSW7jIMQsQSDwg6WS kVgIdfVtAbHI3Z0UDPDBJXd7JzO+jZyOxDpz0WdmnTCRDxykBScjdOf38JBCrefMMDpUE5lywRLs DN9rn30YKB/fT3q/TnpdBnPJuNhoucYhehQiFEud4IsogAqMUS7gck2Yy4gw6vbG42GVtLo6WjwY dLtElrOJAFl3kBhtnuLo0TAw2v5TMiPiSH5S0KKb7mCAfDv/MhiOe3gxzZlVc0aV+Z2WXhRqhrk4 kO3OgW/EVq+jM7UooL4kREiYsW65/4uZAhplcR4H3+71YsMK4Q3YbmZdSO7R1ue64jOBvMRhSPfM b5qpNQSSHsl0Vd6jUXnmN5jdB7VD3EINeNid7FE5VFA+AnDiHLzeKQ/AI5CA1z/h+fCei0fFXgUB eAQS8AYnvG5/3CWhOO+AVMpHQEIJgMMG4AQadBkgoQTA0QkQmoYDXnRCQgmA4wbgeOAzd4HLhBIA JydAQvO6elaSWzEklAB40wAcDccXJoVQPM+b7PbKeoJHLEHOr57nIMYzvh91PALVl2y1gIbXrDOu shZspj6Yra/bVCv33kv/ilmSAdwqVJjGThvoOO5m81JxlFNVvpJqmdy2BZ9zF+0YSQACc6JXw+KD SJ/bUk+pmQiMk8X7FJrfxm3YhdlVeSfNcu/LeVUuno6PH+HK8eVY8Y6tKjGp21pVASFzjcayLfMs 139nVWBb/QsxrDiHPkhU9r/lNFaQFboLm2yLS5XSC/8UR1thfLOLOClssCL9w2LcCHMmsyfxp3+l qMuMrtF+bm60Tv1zs2l6jin6VfpjJmUoYj9itczWNOgjR7dsgfhUSXH7qv0gpE0rkaaCuzoq5UyF qJUEE549D/yFJkVvnMa/5upKOpIP3NPYswnBqglun01wGwTnFOfLWvagbtlLaoPNft2nHX60X1Nb QSKR5w2TaWjd/iaA68RlrXvYxw2tuqKdbrat3j25xo2u2uSMO5yPfFMWQtMKnYpoeUbT67aaCl38 PLcubnrdVhP98aZHMhIo8zpN76aJ9wo9r4X3Ci2vhfcKHa+F9woNr4X3Cv2uhff/7S40N098T9PL PyxINPx3hW19WHzv48F/Q1Qfwnik72YvMdJ8ZsWXnT8L/peBTxYoLYYKdEickkxPJoRR/zfk9l8A AAD//wMAUEsBAi0AFAAGAAgAAAAhAPMWwGH9AAAAuwEAABMAAAAAAAAAAAAAAAAAAAAAAFtDb250 ZW50X1R5cGVzXS54bWxQSwECLQAUAAYACAAAACEAcPA43L4AAAA4AQAACwAAAAAAAAAAAAAAAAAu AQAAX3JlbHMvLnJlbHNQSwECLQAUAAYACAAAACEA1g16QJMFAABUEQAAIQAAAAAAAAAAAAAAAAAV AgAAZHJzL3NsaWRlTGF5b3V0cy9zbGlkZUxheW91dDEueG1sUEsFBgAAAAADAAMAyQAAAOcHAAAA AKAAHgToBQAAUEsDBBQABgAIAAAAIQDzFsBh/QAAALsBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnht bHyQy07DMBBF90j8g+Utip2yQAgl6YLHCgGL8gEje5JY+CWPUzV/j5MWCVDV1Wged+6ZabYHZ9ke E5ngW74RNWfoVdDGDy3/3L1U95xRBq/BBo8tn5H4tru+anZzRGJF7anlY87xQUpSIzogESL60ulD cpBLmgYZQX3BgPK2ru+kCj6jz1VedvCuecIeJpvZ86GUjyRFztnjcW6xajnEaI2CXEDl0pVd817A k9HIPiDlN3BlSupEkmwpvsIcpvwn2YjLa/de/2OvQt8bhTqoyRViERNSiSuFs+KX0c2J6cwtCS1d OOaM6+lboihXKxpNpB8Hub6++wYAAP//AwBQSwMEFAAGAAgAAAAhAHDwONy+AAAAOAEAAAsAAABf cmVscy8ucmVsc4SPwQrCMBBE74L/EPZu03oQkaa9iCB4Ev2AJdm2wTYJ2Sj2783RguBxGObNTN2+ p1G8KLL1TkFVlCDIaW+s6xXcb6fNHgQndAZH70jBTAxts17VVxox5RAPNrDIFMcKhpTCQUrWA03I hQ/kstP5OGHKMvYyoH5gT3JbljsZvxnQLJjibBTEs6lA3OaQm/+zfddZTUevnxO59KNC8mgNXXD2 z5SxGHtKCkzkb2MhqiLvB9nUcvG3+QAAAP//AwBQSwMEFAAGAAgAAAAhAMlVaCe1AgAAeQcAACEA AABkcnMvc2xpZGVMYXlvdXRzL3NsaWRlTGF5b3V0MS54bWysVduK2zAQfS/0H4QeC1nvpZRikizt tlsKewlNtu8TWYnF6oY0ceO/70i2s2SbQkL74jjSzNGcc2bk8fXWaNbIEJWzE35xds6ZtMJVyq4n /GlxO/rIWUSwFWhn5YS3MvLr6ds3Y19GXd1B6zbICMPGEia8RvRlUURRSwPxzHlpaW/lggGkv2Fd VAF+EbbRxeX5+YfCgLK8zw/H5LvVSgn5xYmNkRY7kCA1INUfa+XjgGbEMXAGwvPGj4QzniCWSits M+gOppnwTbBlT2lklAguuhWmnNKAKBujOTOi/L62LsBSk0imySuzIKMMjfyEGNRygzKmrfLdgO2P qdAnEIuZ4L5q2Ho6i7zDxZazHEeHkYl8Su6Iua6YBUMLC4VaMvKQ/aRgJUCzhdxiDot+EaRMCbb5 Fvzcz0LOfmhmgakqofUovOg3+rD811IYvRSv0tcDEpTbVTDTMZRkHNtOOPVXm56UBCUVwUS3KF5W Rf14IFbUXw9EF8MBVMHuUGpN3zH6k87lQKcT5WLHqgsFSr1z4jky64hnot/REw/NAJY4J3hfs84C TPr2cd1m1mOIj6RpFgu3n13VJuJL+s2LUOqIc2y1zIJQ2VASOD1Ifg1pCKUdPc1pCA3eaAk0pL14 OL3RSjwzdExWCtk9RJSB5WJoZAlyTOogmdNDSlvNIMCPV8iJH5R0MhU9VEivnYR/F/JqEHKvp9hM g5C10xWVcvk/xE1SceaCoiHoup1TX1LTDM6coni66QhFQio6VXdIf7KL6UbvhP5HP1KTZzvinh+d 5ll4egxHZlIntMBcCkdzrWUj9RHw2ZET4Be1CsejX3WKHq3XrdsErI8u/v2p8Gp1EJ3unZMnIQ9E d1PSa7pb82Wowz34xyYzpg8ezd9NXvL0iUtzRaEvIQlj+GROfwMAAP//AwBQSwECLQAUAAYACAAA ACEA8xbAYf0AAAC7AQAAEwAAAAAAAAAAAAAAAAAAAAAAW0NvbnRlbnRfVHlwZXNdLnhtbFBLAQIt ABQABgAIAAAAIQBw8DjcvgAAADgBAAALAAAAAAAAAAAAAAAAAC4BAABfcmVscy8ucmVsc1BLAQIt ABQABgAIAAAAIQDJVWgntQIAAHkHAAAhAAAAAAAAAAAAAAAAABUCAABkcnMvc2xpZGVMYXlvdXRz L3NsaWRlTGF5b3V0MS54bWxQSwUGAAAAAAMAAwDJAAAACQUAAAAAsAAeBC4GAABQSwMEFAAGAAgA AAAhAPMWwGH9AAAAuwEAABMAAABbQ29udGVudF9UeXBlc10ueG1sfJDLTsMwEEX3SPyD5S2KnbJA CCXpgscKAYvyASN7klj4JY9TNX+PkxYJUNXVaB537plptgdn2R4TmeBbvhE1Z+hV0MYPLf/cvVT3 nFEGr8EGjy2fkfi2u75qdnNEYkXtqeVjzvFBSlIjOiARIvrS6UNykEuaBhlBfcGA8rau76QKPqPP VV528K55wh4mm9nzoZSPJEXO2eNxbrFqOcRojYJcQOXSlV3zXsCT0cg+IOU3cGVK6kSSbCm+whym /CfZiMtr917/Y69C3xuFOqjJFWIRE1KJK4Wz4pfRzYnpzC0JLV045ozr6VuiKFcrGk2kHwe5vr77 BgAA//8DAFBLAwQUAAYACAAAACEAcPA43L4AAAA4AQAACwAAAF9yZWxzLy5yZWxzhI/BCsIwEETv gv8Q9m7TehCRpr2IIHgS/YAl2bbBNgnZKPbvzdGC4HEY5s1M3b6nUbwosvVOQVWUIMhpb6zrFdxv p80eBCd0BkfvSMFMDG2zXtVXGjHlEA82sMgUxwqGlMJBStYDTciFD+Sy0/k4Ycoy9jKgfmBPcluW Oxm/GdAsmOJsFMSzqUDc5pCb/7N911lNR6+fE7n0o0LyaA1dcPbPlLEYe0oKTORvYyGqIu8H2dRy 8bf5AAAA//8DAFBLAwQUAAYACAAAACEAUy7orvsCAABZCAAAIQAAAGRycy9zbGlkZUxheW91dHMv c2xpZGVMYXlvdXQxLnhtbLRWbW/aMBD+Pmn/wfLHSTRAeWsEVF23TpP6ggbdd+MYYtVvsk1G/v3O TkJVyqSwaV9CYt89d/c85zPT670UqGDWca1muHfRxYgpqjOutjP8vLrrTDBynqiMCK3YDJfM4ev5 xw9TkzqR3ZNS7zwCDOVSMsO59yZNEkdzJom70IYp2NtoK4mHT7tNMkt+AbYUSb/bHSWScIVrf9vG X282nLIvmu4kU74CsUwQD/m7nBvXoEnaBk4S+7IzHaqlAYg1F9yXEfQAU8zwzqq0LqkjObXa6Y0P PqkkNC2kwEjS9PtWaUvWAkiSRVxZWOaYLdiN95avd565sJV+arBNmwxNAFE+FviWNV8aiAXa+RX3 gt2obLXHKNpDUBATz0EluhQZUkTCwk8w5ZQIFO0RiIpWbO+jmTMry1hwUMU3a5ZmYaP3Y7GwiGcB rUbBSb1Rm8VPBWbwkhy5bxskku43Vs6nJAUB0X6Goc/K8AQnkkISiFaL9HWV5k8nbGn+9YR10gSA DA5BoUVNVdH7cvpNOUek9A7lVT4EMO41fXFIaSg48FDVSR+LBjUUH+KYHFWa+KAHRtpyUK6SqPaq TCNNjbeLVDf5HwgajfpXg25FU388GF1O3nLV7w7HcT8wNpwMe8P+MAZpkCBIBW1Sv/+sszIwvYZf EDQ0zQwzEoqvYIXzS18KFvUA1kgKJcEDjAUJs4CpzvMSZoH0t4IRmBW1dn5+Kzh9QV4jlnGPHojz zKJIAUwOgJyCOB56o4ZkKlsQS34cIQdWSQqRIe8m31hCYPbPOl6+1zF000IQynItMkilHyqEg9AI 9leSBuKOFIVjAT3b9EN7ZQfDMcy+2P+nhB11e1eTsP+/hIV+Q6IQBwX/UehAd9TZvRG6EjMqCo8m ZGTrjN5aMqphTAlWMNECPkp9Bvwq57Y9+mV1VFrzdad31uetkx+cC883J9Fhnp59xOJJq24AeA13 Rjwywj4Q81TEiuFCh4N9G5cMXOH1GHw1CRjNX4L5bwAAAP//AwBQSwECLQAUAAYACAAAACEA8xbA Yf0AAAC7AQAAEwAAAAAAAAAAAAAAAAAAAAAAW0NvbnRlbnRfVHlwZXNdLnhtbFBLAQItABQABgAI AAAAIQBw8DjcvgAAADgBAAALAAAAAAAAAAAAAAAAAC4BAABfcmVscy8ucmVsc1BLAQItABQABgAI AAAAIQBTLuiu+wIAAFkIAAAhAAAAAAAAAAAAAAAAABUCAABkcnMvc2xpZGVMYXlvdXRzL3NsaWRl TGF5b3V0MS54bWxQSwUGAAAAAAMAAwDJAAAATwUAAAAAAAAPBDoBAAA8P3htbCB2ZXJzaW9uPSIx LjAiIGVuY29kaW5nPSJVVEYtOCIgc3RhbmRhbG9uZT0ieWVzIj8+DQo8YTpjbHJNYXAgeG1sbnM6 YT0iaHR0cDovL3NjaGVtYXMub3BlbnhtbGZvcm1hdHMub3JnL2RyYXdpbmdtbC8yMDA2L21haW4i IGJnMT0ibHQxIiB0eDE9ImRrMSIgYmcyPSJsdDIiIHR4Mj0iZGsyIiBhY2NlbnQxPSJhY2NlbnQx IiBhY2NlbnQyPSJhY2NlbnQyIiBhY2NlbnQzPSJhY2NlbnQzIiBhY2NlbnQ0PSJhY2NlbnQ0IiBh Y2NlbnQ1PSJhY2NlbnQ1IiBhY2NlbnQ2PSJhY2NlbnQ2IiBobGluaz0iaGxpbmsiIGZvbEhsaW5r PSJmb2xIbGluayIvPgAADgTFDgAAUEsDBBQABgAIAAAAIQBLnfYYAAEAABwCAAATAAAAW0NvbnRl bnRfVHlwZXNdLnhtbKyRy2rDMBBF94X+g9C22HK6KKXYzqKPXR+L9AMGeWyL2iMhTULy9x07DpQS QhfdCKSZuffcUbnej4PaYUzOU6VXeaEVkvWNo67Sn5uX7F6rxEANDJ6w0gdMel1fX5WbQ8CkZJpS pXvm8GBMsj2OkHIfkKTS+jgCyzV2JoD9gg7NbVHcGeuJkTjjSUPX5RO2sB1YPe/l+Ugi41o9Hvsm q0pDCIOzwAJqpqqpy3cBj65B9QGR32CULsOCgD/PVX5Za0fNL+DMt62z2Hi7HQUznyVvFs8zrBGH dAH2jMGyjVwm50CpdyGdHP6U6hVI1hn/J9sidgIw89/W3wAAAP//AwBQSwMEFAAGAAgAAAAhAKXW p+fAAAAANgEAAAsAAABfcmVscy8ucmVsc4SPz2rDMAyH74W9g9F9UdLDGCV2L6WQQy+jfQDhKH9o IhvbG+vbT8cGCrsIhKTv96k9/q6L+eGU5yAWmqoGw+JDP8to4XY9v3+CyYWkpyUIW3hwhqN727Vf vFDRozzNMRulSLYwlRIPiNlPvFKuQmTRyRDSSkXbNGIkf6eRcV/XH5ieGeA2TNP1FlLXN2Cuj6jJ /7PDMMyeT8F/ryzlRQRuN5RMaeRioagv41O9kKhlqtQe0LW4+db9AQAA//8DAFBLAwQUAAYACAAA ACEAa3mWFoMAAACKAAAAHAAAAHRoZW1lL3RoZW1lL3RoZW1lTWFuYWdlci54bWwMzE0KwyAQQOF9 oXeQ2TdjuyhFYrLLrrv2AEOcGkHHoNKf29fl44M3zt8U1ZtLDVksnAcNimXNLoi38Hwspxuo2kgc xSxs4ccV5ul4GMm0jRPfSchzUX0j1ZCFrbXdINa1K9Uh7yzdXrkkaj2LR1fo0/cp4kXrKyYKAjj9 AQAA//8DAFBLAwQUAAYACAAAACEAiuLgV0wJAAC2OQAAFgAAAHRoZW1lL3RoZW1lL3RoZW1lMS54 bWzsW+uPm0YQ/16p/wPie3I8DIZTnIinWqlRq1yqfuZsbJNgsIC8/vvO7MussRf7DjWp4jsph9ez s7Mz85uZnSWv3nzdldrnvGmLulro5ktD1/JqWa+KarPQ/36fvvB0re2yapWVdZUv9G95q795/esv r7L7bpvvcg3mV+19ttC3Xbe/v7trlzCctS/rfV7Bd+u62WUdfGw2d6sm+wJ8d+WdZRju3S4rKl2r sh2w/f3h7YP2e/I+nc/015x3UsICVdfiwLJsHpBzPpygmWTK6qOJhG2zeYzKRvuclQvdID/63etX d9k9Iyi7IV1KfhgdI1h9tMb4EYKyG9J5Bv4KfoQgWy5hM8O1wzAxEpvR9ojo45C3DT++L9H3+NsD maW9UaaEiD7OBvSSznpE9NEZ0MdBEiepJA8hovTugN6KrdgLJHpCtC2L6uOA2jB8+GHUgmRdl7+d JPf9KDK44g9UYH3hQLjEuq66c+6kI8Eu+1A3KVDhhzLrikrrvu3zdbYEZw2aIitRpOw+z3rjdGjZ Hg3B4hK7XVFNyvvADlY67Izscydv88/1uljmZIfroiwfum9l/kdLNtnWZbFKYRDnERDnAkb7LTwy G0h0myYjc7Sm7v4puu3DNtuDgiggNy1jvWm1fd0CGsnCJ3njoqDkjsLWQR+k2myz7m29osN2H82C DcH2hgQJvpCNDC5dzJ4/bzGTSnVWbfLWTCIa8R1pa2LLYMPh1mBQaBP8XsswOpsuhFGUXWuXWZmv UO800nGz4NL8eWITsV3TjWyzVU5NJA33TGcS23EXIoEcXOqE6a7TptAaKG1cCOIWPDg8WcmcAVcs 2cQxmsqqj62y0r4sdN+xHF1bZvuFvoaQAo+7PRitrTa6lpUbSL/LrqFeO4pF4m2HHfunvco0+PjA qyQY75u2i7N2S21IvmKmKitcicpvOTN0tmk2QB31CVLYHrjId5MC9CibNl+v82XXN3ZvBHVHP7JI WH/q8uZhu/qiPZafmncZmB90ivtZFW230Amg8UOz0FHb5Cs5trK4dqLKwdWycr/NWLT0cDbTMyUn ripkIJ964sHeTspONnf9VhDxU22l78Y/2VYwHeRVbq/QAksolptMQ7wu9LrptjVEof22WKYN1Cok doC3aBBdMNtqULKTv03+Gf9SX6A8kFtZbLbdu2KjNQWkk27b5PlfEJaI940wM1nqoSw5I+JRPXHb PRX7Mf+cl+8xBroYg3VtC65OoglzT0J37H/yZ4agxw3WKH28STFERHWKgf+6cKFghk2B1XrZbyTx YHKnFRKdT6bzHNnfCH5xqJJmHBVS8vN9BvsninBJAu7lWhqxBju2HC4cWFEYhfgHlmowKOqZfdZt NfwH8l/RLMtDefq+fgexVYNzHDIDtwGvfoFRDR4xQNKnR6h76CB1JmRFV2DFKWqNJ+uJqyCx7pGy UTKOt+HuD/a+UtmiiJKXk7A4XO7pymYalnRNx86qGhY7higMrfk5hBiGNA76h/v68QMYOobj1aeS HvfbPXwiONj/1RDveqxX39hj2dKES70OzzBIWVbv8rVWrL7y84fQBIUQPY/yEplQ4zSs3MRE+9Sh QZ7I6HEqzZZisjU+WcwgK0PIFpPJofAUA+hGsMCNRzugJyps6a5BtUJTZfUclV0g/GmVnTxnXaoy elBUGuoJKuu+qlXGNAXKGzpe/rVrMjiaPJD4y5KOPIi2W3KKWzvq1o6Cpsvz2lHgTW+zvfa4MRc6 4l0DD17o0K/UYczCMQvH4AmaknBYpJ3Ehc5hxkbgezoiaGw+YvNZMz4y4yMOH4HDKZ3u8hEXKjVs s0FzF//oGt8onGDZlllsGiJkOKLCDA0/P1IL13fxl22P9XiZvjEASG3mNIxT54oWbpr6vst5M5Mh U/r437dw0ziJQll+ZQs3mXuBEzHdMJ9B+UV/VtJOFNlQuDBqQcIdaKBMVI0gP1BBtBYOhHNumKHF yo+EmWuuPbBTn8rXBuRupAeHIy8a0FvfEzNRkFhH8isxE/qhn8wvxQxe8kQcYeOYCVJ3LoS5Yeb8 VSG9XXwOZuCuy015fTnBVeFVeaZ/TUmBosSMF0eucIsesOjjMM8kURqkso8SIkr//KvCE1eRSszM 09C+HDNwp+xegRnDCOD4zgB5w8x5zDjkWPoczKDdY36JOwFm5uSHmW6sNsPFZZ9WYgbjrvCiCzCD 7BO+tx6wJsVMIOUNJWasGDONRK+4Xk9TB+6IGPV4nsHC9YYZeAuFVaC0S3CiB+AqMOMEjsc0zkDF ICHVO+hXInYrMdN71YS9s3LqlRTkJl6kGMEMRNKZa0k+pMSMG7tpJGNMWZsFQWRE3OsuwEwc4K8k D0lGdCqBg6S7IAi9UJZHiRnXcmfhTOKvwIxh9CwzjhkkvxIz5JRPegBgeNYDAFdhPQAwHj+pQ5eA 6gC+ow//4x7A/CxmnMg8qHACzJC2Pfc/BWbiNLZ8fi4ewYx0ymVGOZxPCBwkHw2Tue9yGZjtDvTD 2iwyAviRfFRZm12LmcQCiMn8lZgJIjd25B6GAjNS9BnHTGwHlsmT2GW12c+JGe8sZgzDtkWPaQLM 4I2WyB8KzOApvZe3enmApBAJAyjhUa2lzDOGER7u1S7ADCImkn16UswEceglcp5UYgY0eIhjVH4F ZlA3QpPjmIEydG6YLEDcMHP+POOfxQz6Y8/HiS8+rzZD1DCTKDCT2EnY6ykoMYO4FjJekGdmrhfM Qilv9PgP8wxi5igPTIuZIIiPMKnEjJ3O4xnPwZNjxkjgPvuGmXzsPGPSa16WR6QgLh3GJ0g0rueG TjwOmtiMzYg79khx5hu+4cmBWploPMNPAn5IuyDRwJE7COViaFLQRC788thO5VGCZm57qS/Lr0g0 aRpFolQYTzSJH0eiw3BLNOcTjXn+P6bYEPLFDdoUoHGlzEUiPMOEBFaszURNMQIa13D8OQfYBZkG RHAF70tA44XeUSaYFDQhxJFQvmFSgsaJnOjybrN0fzUOGlS7SNs30ChAc/5VAPifQ4bpiMzw7PLM sezE4lFbUZ7FaWR4PCONgMaL5uGcVxQXgMZLndSSnVRZnoV2kAb8YpDynxQ0EUAmlEGvBI1nOo4l H7EUmSaKQnjFlVlwHDReBGmYk/9MoIGXHeT3Z8iLaDBKXp18/S8AAAD//wMAUEsDBBQABgAIAAAA IQAN0ZCftgAAABsBAAAnAAAAdGhlbWUvdGhlbWUvX3JlbHMvdGhlbWVNYW5hZ2VyLnhtbC5yZWxz hI9NCsIwFIT3gncIb2/TuhCRJt2I0K3UA4TkNQ02PyRR7O0NriwILodhvplpu5edyRNjMt4xaKoa CDrplXGawW247I5AUhZOidk7ZLBggo5vN+0VZ5FLKE0mJFIoLjGYcg4nSpOc0IpU+YCuOKOPVuQi o6ZByLvQSPd1faDxmwF8xSS9YhB71QAZllCa/7P9OBqJZy8fFl3+UUFz2YUFKKLGzOAjm6pMBMpb urrE3wAAAP//AwBQSwECLQAUAAYACAAAACEAS532GAABAAAcAgAAEwAAAAAAAAAAAAAAAAAAAAAA W0NvbnRlbnRfVHlwZXNdLnhtbFBLAQItABQABgAIAAAAIQCl1qfnwAAAADYBAAALAAAAAAAAAAAA AAAAADEBAABfcmVscy8ucmVsc1BLAQItABQABgAIAAAAIQBreZYWgwAAAIoAAAAcAAAAAAAAAAAA AAAAABoCAAB0aGVtZS90aGVtZS90aGVtZU1hbmFnZXIueG1sUEsBAi0AFAAGAAgAAAAhAIri4FdM CQAAtjkAABYAAAAAAAAAAAAAAAAA1wIAAHRoZW1lL3RoZW1lL3RoZW1lMS54bWxQSwECLQAUAAYA CAAAACEADdGQn7YAAAAbAQAAJwAAAAAAAAAAAAAAAABXDAAAdGhlbWUvdGhlbWUvX3JlbHMvdGhl bWVNYW5hZ2VyLnhtbC5yZWxzUEsFBgAAAAAFAAUAXQEAAFINAAAAAAAAIwQ+BwAAUEsDBBQABgAI AAAAIQAasRoD/AAAALsBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbHyQyWrDQAyG74W+wzDX4hmn h1KK7Ry63Loc0gcQY9keOhujSUjevrKTQighJ6Hl1/9JzXrvndhhJhtDK1eqlgKDib0NYyu/N2/V oxRUIPTgYsBWHpDkuru9aTaHhCRYHaiVUynpSWsyE3ogFRMG7gwxeyic5lEnMD8wor6v6wdtYigY SlXmHbJrXnCArSvidc/lIwnLpXg+zs1WrYSUnDVQGFTPXd01nwyebY/iC3L5AM9Tus+kyXHxHajw XefJSl1fuwv9P/YqDoM12Eez9UysUkbiuFB4p86M7k5MF27J6OjKMRdcT99SrFysaLKJ/hz08vru FwAA//8DAFBLAwQUAAYACAAAACEAjuoq+r4AAAA4AQAACwAAAF9yZWxzLy5yZWxzhI/BCsIwEETv gv8Q9m7TehCRpr2I0IMX0Q9Ykm0bbJOQjaJ/b44WBI/DMG9m6vY1T+JJka13CqqiBEFOe2PdoOB2 PW32IDihMzh5RwrexNA261V9oQlTDvFoA4tMcaxgTCkcpGQ90oxc+EAuO72PM6Ys4yAD6jsOJLdl uZPxmwHNgik6oyB2pgJxfYfc/J/t+95qOnr9mMmlHxWSJ2vojJwoZizGgZICE/nbWIiqyPtBNrVc /G0+AAAA//8DAFBLAwQUAAYACAAAACEAY9yf+AwEAACyIwAAIQAAAGRycy9zbGlkZU1hc3RlcnMv c2xpZGVNYXN0ZXIxLnhtbOyaTW7jNhTH9wP0DgKXLTS25A8pQuRBZooAA8zCaGYOQNNUrIaiBJJ2 41kNkiPMDWZftEALdNGsepTmALlCHynKlh07cKcp4MTaSSL5SP34/Ph/Tz5+dZkxZ0aFTHMeI+9l GzmUk3yc8vMYfXh/6obIkQrzMWY5pzGaU4leDb55cVxE6vJMzRmVDpjgMsIxmihVRK2WJBOaYfky LyiHtiQXGVZwK85bY4F/AtMZa/ntdr+V4ZQjO17sMj5PkpTQ73MyzShXpRFBGVawfDlJC1lZy8gu 5jIsLqaFS/KsABOjlKVqbowuzMxiNBU8sq/kZikRucwTpcdEGSbRLGPIyUj09pznAo8YMMpm5slQ UEnFjJ4oJdLRVFGpm6JvK9vFLisstBGuzAuuUBvoHUgVo2YTBsc4YjPmFUPhYHYOW0mUQI5QLEaw pUnO1Yl5PMKSIt1bFuQ1TezVkChnhk3f1uC4tdZ6kqgH+tnWMU1+gMnlxxh1u+12OUfO0vFpypgZ rr2CvmGinEld+sjOVe+lt5I7al7QBBNg+V32o8uU7okjitcaKC4biFxrINLaLldlXsni0Ybg0n92 pE5EisEVi1SRySnOUjaPket5PnLIBAtJlfaEkvgqFY3CUuk0VCpf0SgslW5DpaKiUVgqvYZKRUWj sFT6mgocK+8gDPYCOOTQ84rHXx1lNBjLKFgyOvLMYdEwMoeSBmMZhUtGXifw+o0jVT82TcZCOqpB Cv0wbCBVkDQZuF6ViEU0ysfze3qxjFadrn+k+aV8DHoTpEP1oJSToCz+tZiE6AcWv1ZQjqZvQLcY 8RKjvz99KaVeTWZ2dHTVniDrAtIo9brM9KoV1Hvdl5l8m8zk7haZyd0dZWYJOADAvTpgP+wF+sGe AP58D7Cvf1D/N+C7m5/vbn5z7m5+vb36/fbqj9vr69urXx7Wsa7nh3ZXH5ayJXnP63a0Jy592/fD WkTdQ9/2d0uh/ptvPyr6db1s0QNmI4IWYWXP0G/weu0qT8rr10V5id5v9wLtRXvq9X/9eT/ePDny m4W/3/O6Jrzsp9M/C/Kb0wn/KPCMCmzI12tljxroNycppVpsos1alfJRyW/OfDph2N/jI/ZZRJtF OlVLoIooVxMqFukUKNFhmZnaHIVh/Q2FcvfD2VKs2i5Vrb48qutJAAx+j0dnuoxu60dV3kXxO/5a XMBXGuSY/MXewugJTAWfVYZTTiB184x8savQBfkyJl5QoT/xPK2sqYKwSJIOls96mb50ndUCGmQy B8tnSwKyWjw7ZECb0wRvtXB2yIC2qHlTK2hCNBxZW0R30DWluGUh62Bj0BZtDEeuycSbQ2yLhO33 gtV63MF60EJp1sWlruPbP9sM/gEAAP//AwBQSwECLQAUAAYACAAAACEAGrEaA/wAAAC7AQAAEwAA AAAAAAAAAAAAAAAAAAAAW0NvbnRlbnRfVHlwZXNdLnhtbFBLAQItABQABgAIAAAAIQCO6ir6vgAA ADgBAAALAAAAAAAAAAAAAAAAAC0BAABfcmVscy8ucmVsc1BLAQItABQABgAIAAAAIQBj3J/4DAQA ALIjAAAhAAAAAAAAAAAAAAAAABQCAABkcnMvc2xpZGVNYXN0ZXJzL3NsaWRlTWFzdGVyMS54bWxQ SwUGAAAAAAMAAwDJAAAAXwYAAAAAIAC6DxYAAABJAFMATQBTACAASQBFAFQARgA3ADQADwDwA71H AAABAPEDCAAAAAAAAIACABMwDwAMBK8zAAAPAALwpzMAANAACPAIAAAABwAAAAc0AAAPAAPwRTMA AA8ABPAoAAAAAQAJ8BAAAAAAAAAAAAAAAAAAAAAAAAAAAgAK8AgAAAAANAAABQAAAA8ABPDzCQAA EgAK8AgAAAACNAAAAAoAAIMAC/BIAAAAfwABAO8BgADcydMEvwAEAAQAvwEBABEA/wEBABkAPwMA AAgAgMMYAAAAvwMAAAIAUgBlAGMAdABhAG4AZwBsAGUAIAAyAAAAEwAi8esHAACpg+UHAABQSwME FAAGAAgAAAAhAAyBhbv+AAAA4gEAABMAAABbQ29udGVudF9UeXBlc10ueG1slFHBTsMwDL0j8Q9R rqhJxwEh1HYHOo6AYHyAlbhtRJtEcSjb3+Nu7ICEhjjafu/5+bla76ZRzJjIBV/LlSqlQG+Cdb6v 5dv2obiVgjJ4C2PwWMs9klw3lxfVdh+RBLM91XLIOd5pTWbACUiFiJ4nXUgTZC5TryOYd+hRX5fl jTbBZ/S5yIuGbKoWO/gYs9jsuH10wnQp7o+4ZVUtIcbRGchsVC9T3VRPbDw5i+IZUn6EiVHaJtI0 QETGqPMqs7dqoiJ0nTOo2kSvC+/qD3EbPn3C+b/aLdNecD6p/3JywpHO3Ly4/Rls8R2qYuYhFxpc pNMGffhQ8wUAAP//AwBQSwMEFAAGAAgAAAAhADHdX2HSAAAAjwEAAAsAAABfcmVscy8ucmVsc6SQ wWrDMAyG74O9g9G9cdpDGaNOb4VeSwe7CltJTGPLWCZt376mMFhGbzvqF/o+8e/2tzCpmbJ4jgbW TQuKomXn42Dg63xYfYCSgtHhxJEM3Elg372/7U40YalHMvokqlKiGBhLSZ9aix0poDScKNZNzzlg qWMedEJ7wYH0pm23Ov9mQLdgqqMzkI9uA+p8T9X8hx28zSzcl8Zy0Nz33r6iasfXeKK5UjAPVAy4 LM8w09zU50C/9q7/6ZURE31X/kL8TKv1x6wXNXYPAAAA//8DAFBLAwQUAAYACAAAACEAoEiEDX0D AACLCAAAEAAAAGRycy9zaGFwZXhtbC54bWysVdtu4zYQfS/QfyD4WmRtGUk3MVZZJEGzLeAGRpxF n0cUFbGmSJWkfMnXd2Yo2+miKIq6fpBH4nCuZ858+rzrrNjoEI13pSw+TKXQTvnauNdSfn15vLiW IiZwNVjvdCn3OsrPt99/96mfx17gZRfnfSnblPr5ZBJVqzuIH3yvHZ41PnSQ8DW8Tvqgo3YJEjrq 7GQ2nf446cA4eYum3GbVLwNJ6mmzDMLUpbwubi6lcNCh12etMIZXq8VMTka1fAMwjIVX6zjGAv8m ljrAFhP8SxjC+S8BMynQp39o0Zu+C8FvWw11pM/od8LxHUJ1GCnF0rci7XuMsq0DFuutlH8MEJIO 45Wsh3dPWUbMVlTbX32N12BIHqsA810TunPTIDu+acSulNjKPT0xcJjrXRIKP85uPhbXUzxSeHZ5 9RH7wGFm76TZh5i+aH92JIIMlTJg6zg72CxioiKeXJA75x+NteemzTlad64ZsS3lzdXsigPOkbHl zmA7hTUdwnJKv1xUwsZPrmaVBMZmGRO0jmveNJg8Zn1uWFQ1mreMt7S79/WeHFT4j0DKU/jfkY/j j41qfXiTYhsAhyASgrUU9heH2L8pLi8RMYlfGDNShPcn1fsTN3QP3vIggVNotZRJiiw+JHwj8Pmu h7Rwq16R4gF2L7vfIPQjcBJC9smvWuj13+En6zKcchnIiI1plfZIE2eWhG1tbMEVh3mtm2esM412 cRoYe1Cgho+OOZP/wzsRRAdhweVC4ZkFdMn/xtXIpSyCfUXitlJgkC9QrTBG7hdWOaSsrWHh7sOa W9J4l+74SgWROoyE7MZjvEK8h8y4HJxC87kzltpEicVeLVUSG6DuHseA4X7SuNfNt7oHhsH7p9O7 Jv2D3nhaDQ82vOx4wKph9XYUHzGN48sTbqZxBiucNhZzy2hwkG5obpACXb2EANTJ9dCZzv9uclEx 51Jqd/F1lembeyyqXGl+DqV06IRWYTBr5GznVyxJsdaBFifBQiianVGRkI2fHK1Aa970z/xKRbeG FimfLYP3DckUXyaNI+scaSR6a2oiSa4XbViNVcltSLu8mLA577X0gXm4FsPCjbUayMwoc+d5czWg MKC7YABh1Juk2kfojMUFcVEUM0yrhRA1w43taXh37YfOXWjIfKjiNwcqjsvlVPvcESa0A5Ext93+ CQAA//8DAFBLAwQUAAYACAAAACEA1DIaLtgAAAD8AAAADwAAAGRycy9kb3ducmV2LnhtbESPUUvD MBSF3wX/Q7iCL8OlG0NnXTamIAo+lE7B12tz05Q1NyWJW/vvDT7o4+EcvsO32Y2uFycKsfOsYDEv QBA3XnfcKvh4f75Zg4gJWWPvmRRMFGG3vbzYYKn9mWs6HVIrMoRjiQpsSkMpZWwsOYxzPxDnzvjg MOUYWqkDnjPc9XJZFLfSYcf5weJAT5aa4+HbKTB19VbMzOcjV261nN0Vcj95o9T11bh/AJFoTP9j W3lzlH/lL+pVK1gv7lcgzMv0FTpdY0wUFGS9LJtFQW5/AAAA//8DAFBLAQItABQABgAIAAAAIQAM gYW7/gAAAOIBAAATAAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9UeXBlc10ueG1sUEsBAi0AFAAG AAgAAAAhADHdX2HSAAAAjwEAAAsAAAAAAAAAAAAAAAAALwEAAF9yZWxzLy5yZWxzUEsBAi0AFAAG AAgAAAAhAKBIhA19AwAAiwgAABAAAAAAAAAAAAAAAAAAKgIAAGRycy9zaGFwZXhtbC54bWxQSwEC LQAUAAYACAAAACEA1DIaLtgAAAD8AAAADwAAAAAAAAAAAAAAAADVBQAAZHJzL2Rvd25yZXYueG1s UEsFBgAAAAAEAAQA9QAAANoGAAAAAAAAEPAIAAAAAAAAAFAHIAEPABHwLAEAAAAAwwsIAAAAAAAA AAoC0wQAABkQFAEAAAAAAAgMAQAAAgAAAAwBAAAAAAAAFAAAACAAAAABAAAAAQAAAAAAAAABAAAA 6AAAAAgAAAAEAAAAAAAAAAABAAABAAAAAAAAAAEBAAABAAAAAAAAAAIBAAABAAAAAAAAAAMBAAAB AAAAAAAAAAQBAAABAAAAAAAAAAUBAABoAAAAZG1hbmAAAAACAAAABAAAAAMAAAABAAAACQQAAAoA AABBAHIAaQBhAGwAAAAIAAAAAAAAAAMAAAAAAAAAJgAAAE0AbwBuAG8AdAB5AHAAZQAgAFQAeQBw AG8AZwByAGEAcABoAHkAAAAGAQAABAAAAAAAGAAHAQAABgAAAAAAAAAAAAAABAAAAA4ACQARAAAA GgABAA8ADfBUAAAAAACfDwQAAAAEAAAAAAChDxoAAAABAAAAAAAgAAoAAAAA/wcAAQAAAAAAAgAM AAAAqg8KAAAAAQAAAAEAAAAAAAAApg8MAAAA8AAAAFZdOH9YgHiBDwAE8PwJAAASAArwCAAAAAM0 AAAACgAAgwAL8EgAAAB/AAEA7wGAAPjN0wS/AAQABAC/AQEAEQD/AQEAGQA/AwAACACAwxgAAAC/ AwAAAgBSAGUAYwB0AGEAbgBnAGwAZQAgADMAAAATACLx8gcAAKmD7AcAAFBLAwQUAAYACAAAACEA DIGFu/4AAADiAQAAEwAAAFtDb250ZW50X1R5cGVzXS54bWyUUcFOwzAMvSPxD1GuqEnHASHUdgc6 joBgfICVuG1Em0RxKNvf427sgISGONp+7/n5uVrvplHMmMgFX8uVKqVAb4J1vq/l2/ahuJWCMngL Y/BYyz2SXDeXF9V2H5EEsz3Vcsg53mlNZsAJSIWIniddSBNkLlOvI5h36FFfl+WNNsFn9LnIi4Zs qhY7+Biz2Oy4fXTCdCnuj7hlVS0hxtEZyGxUL1PdVE9sPDmL4hlSfoSJUdom0jRARMao8yqzt2qi InSdM6jaRK8L7+oPcRs+fcL5v9ot015wPqn/cnLCkc7cvLj9GWzxHapi5iEXGlyk0wZ9+FDzBQAA //8DAFBLAwQUAAYACAAAACEAMd1fYdIAAACPAQAACwAAAF9yZWxzLy5yZWxzpJDBasMwDIbvg72D 0b1x2kMZo05vhV5LB7sKW0lMY8tYJm3fvqYwWEZvO+oX+j7x7/a3MKmZsniOBtZNC4qiZefjYODr fFh9gJKC0eHEkQzcSWDfvb/tTjRhqUcy+iSqUqIYGEtJn1qLHSmgNJwo1k3POWCpYx50QnvBgfSm bbc6/2ZAt2CqozOQj24D6nxP1fyHHbzNLNyXxnLQ3PfevqJqx9d4orlSMA9UDLgszzDT3NTnQL/2 rv/plRETfVf+QvxMq/XHrBc1dg8AAAD//wMAUEsDBBQABgAIAAAAIQBNAD8WggMAAJQIAAAQAAAA ZHJzL3NoYXBleG1sLnhtbKxV227jNhB9L9B/IPhaZG3lsusYqyySoNkWcAMjzqLPlETFqilSJSlf 8vV7Zijb6WKxKOr6QR6Jw5lz5vrx07Y1Yq19aJzNZfZuLIW2pasa+5LLL88PZxMpQlS2UsZZncud DvLTzc8/feymoRO4bMO0y+Uyxm46GoVyqVsV3rlOW5zVzrcq4tW/jDqvg7ZRRThqzeh8PH4/alVj 5Q1M2fWim3uSysf13IumyuUku76SwqoWXp90CQwvRosLORrU0g0FGDNXrsKARf0bLJVXGxD8Bwxh 3WcPJhl8uvslvOlb791mqVUV6DP8jhjfHqoFUsLSLUXcdUBZRQnk26Ny0sCtI78AnqLY/OEqXFB9 dOCvptvat6cSIDuurgX8X0wml++zCyl2uRwTcDXV2yhKHJ1ff8gmY2S5xNnl1QfkgZklDKTZ+RA/ a3cyHkGGcumROuao1rMQKYhHF+TOuofGmFPJM0djTzUjNrm8vjq/YsAJGVtum6i9ME2LshzTLwWV auNXW7FKVI1JMggayzGva5AH61NhUdSo31K9xe2dq3bkoMA/yil14X+vfLQ/ErV0/lWKjVdogvB3 r7yWwvxuUfvX2eUlKibyC9eMFP7tSfH2xPbtvTPcSMqWsJpL9EUS7yPeqPhc26k4s4uuJMV92T1v /1S+GwonomQf3WKpOv29+km6XE4pDGTEhLiIO4yJE0PCttYmo2ZV5gWT0TOGStdP+BRegfrYOSZp MpY9Aqb0f8AgCK3yM44bhCcW4JL/G1thqLK4xykA8lkVC2DkxCHcPiZtrWb2zq84N7Wz8ZapFSpQ qjGZ7XCMKzQAMSLnvS1hPqXIUL6IWOjKeRnFWlGaD/3AdX/UuNP1t7r7UYP7x9PbOv5Abzgt+nvj n7fcaUW/eD2ID6BxeHnEihqasUDbsZhSRh2EuUMNhFloq7nyijK56tumdX81KajgnEttz74ssPT2 ORZFijQ/+1xaOKGd6JsVRrh1C5akWGlPG5TKQpTURIMilTg+WdqFpnnVv/ErBd00tFH5bO6dq0km fGl6HMbPYZ4EZ5qKpiXHi1atRlRSGuI2bSgk562W3o8gjkU/s0OsejIzyJx5XmG1KgHo1jfKSNE1 sVw+qLYx2BRnWXYOWkvlg+ZyY3tavbn2S2vPtEqDsQzfHJRh2DLH2KeM4NlN9xONh9zNVwAAAP// AwBQSwMEFAAGAAgAAAAhAMod3/DaAAAA/AAAAA8AAABkcnMvZG93bnJldi54bWxEj0tLAzEUhfeC /yFcwU1pk7Y+6ti0tIJYcFGmVdxeJ3ceOLkZktjO/HuDC10ezuE7fMt1b1txIh8axxqmEwWCuHCm 4UrD2/F5vAARIrLB1jFpGCjAenV5scTMuDPndDrESiQIhww11DF2mZShqMlimLiOOHWl8xZjir6S xuM5wW0rZ0rdSYsNp4caO3qqqfg6fFsNZb5/VaPyY8t7ezMb3Su5GVyp9fVVv3kEEamP/+N5/j5v t3/lL2pnNCymD7cgypfh0zcmxxDJa0h6STaJglz9AAAA//8DAFBLAQItABQABgAIAAAAIQAMgYW7 /gAAAOIBAAATAAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9UeXBlc10ueG1sUEsBAi0AFAAGAAgA AAAhADHdX2HSAAAAjwEAAAsAAAAAAAAAAAAAAAAALwEAAF9yZWxzLy5yZWxzUEsBAi0AFAAGAAgA AAAhAE0APxaCAwAAlAgAABAAAAAAAAAAAAAAAAAAKgIAAGRycy9zaGFwZXhtbC54bWxQSwECLQAU AAYACAAAACEAyh3f8NoAAAD8AAAADwAAAAAAAAAAAAAAAADaBQAAZHJzL2Rvd25yZXYueG1sUEsF BgAAAAAEAAQA9QAAAOEGAAAAAAAAEPAIAAAAAACPCd8QIAEPABHwLAEAAAAAwwsIAAAAAQAAAAcA 0wQAABkQFAEAAAAAAAgMAQAAAgAAAAwBAAAAAAAAFAAAACAAAAABAAAAAQAAAAAAAAABAAAA6AAA AAgAAAAEAAAAAAAAAAABAAABAAAAAAAAAAEBAAABAAAAAAAAAAIBAAABAAAAAAAAAAMBAAABAAAA AAAAAAQBAAABAAAAAAAAAAUBAABoAAAAZG1hbmAAAAACAAAABAAAAAMAAAABAAAACQQAAAoAAABB AHIAaQBhAGwAAAAIAAAAAAAAAAMAAAAAAAAAJgAAAE0AbwBuAG8AdAB5AHAAZQAgAFQAeQBwAG8A ZwByAGEAcABoAHkAAAAGAQAABAAAAAAAGAAHAQAABgAAAAAAAAAAAAAABAAAAA4ACQARAAAAGgAB AA8ADfBWAAAAAACfDwQAAAAEAAAAAAChDxwAAAABAAAAAAAgCAoAAAAA/wIABwABAAAAAAACAAwA AACqDwoAAAABAAAAAQAAAAAAAACmDwwAAADwAAAAVl04f1iAeIEPAATwiAAAABIACvAIAAAABDQA AAAKAACDAAvwSAAAAH8ABAHvAYcAAQAAAL8ABAAEAL8BAQARAP8BCQAZAD8DAAAIAIDDGAAAAL8D AAACAFIAZQBjAHQAYQBuAGcAbABlACAANAAAAAAAEPAIAAAAsAHQAhAOIAoPABHwEAAAAAAAwwsI AAAAAgAAAAUA0wQPAATw4wkAABIACvAIAAAABTQAAAAKAACDAAvwSAAAAH8AAQDvAYAAkNbTBL8A BAAEAL8BAQARAP8BAQAZAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBjAHQAYQBuAGcAbABlACAANQAA ABMAIvGtCAAAqYOnCAAAUEsDBBQABgAIAAAAIQAMgYW7/gAAAOIBAAATAAAAW0NvbnRlbnRfVHlw ZXNdLnhtbJRRwU7DMAy9I/EPUa6oSccBIdR2BzqOgGB8gJW4bUSbRHEo29/jbuyAhIY42n7v+fm5 Wu+mUcyYyAVfy5UqpUBvgnW+r+Xb9qG4lYIyeAtj8FjLPZJcN5cX1XYfkQSzPdVyyDneaU1mwAlI hYieJ11IE2QuU68jmHfoUV+X5Y02wWf0uciLhmyqFjv4GLPY7Lh9dMJ0Ke6PuGVVLSHG0RnIbFQv U91UT2w8OYviGVJ+hIlR2ibSNEBExqjzKrO3aqIidJ0zqNpErwvv6g9xGz59wvm/2i3TXnA+qf9y csKRzty8uP0ZbPEdqmLmIRcaXKTTBn34UPMFAAD//wMAUEsDBBQABgAIAAAAIQAx3V9h0gAAAI8B AAALAAAAX3JlbHMvLnJlbHOkkMFqwzAMhu+DvYPRvXHaQxmjTm+FXksHuwpbSUxjy1gmbd++pjBY Rm876hf6PvHv9rcwqZmyeI4G1k0LiqJl5+Ng4Ot8WH2AkoLR4cSRDNxJYN+9v+1ONGGpRzL6JKpS ohgYS0mfWosdKaA0nCjWTc85YKljHnRCe8GB9KZttzr/ZkC3YKqjM5CPbgPqfE/V/IcdvM0s3JfG ctDc996+omrH13iiuVIwD1QMuCzPMNPc1OdAv/au/+mVERN9V/5C/Eyr9cesFzV2DwAAAP//AwBQ SwMEFAAGAAgAAAAhAFfG7mw9BAAAcBYAABAAAABkcnMvc2hhcGV4bWwueG1s7FjNTiNHEL5Hyju0 +hqxZvwDxtphBShsIjnIwqxyRO2ZHjyhp3vS02MMR/Z5okTalXLhbXgAXiFfdY8BoyRK1pHDwUYa 17irq6u+qq9qmLfv5oViM2mr3OiYR2+2OZM6MWmuL2L+4ex4q89Z5YROhTJaxvxaVvzd/tdfvS0H VcmwWVeDMuZT58pBq1UlU1mI6o0ppcZaZmwhHG7tRau0spLaCYeDCtVqb2/vtAqRa74PU3o2LkeW pORkNrIsT2Pej/Z2OdOiwKmnMoEPF0qyHm81amGHgBtDk1xWjS/in/iSWnGFAJfcYNq8t4gkwpnm aIrT5IG15moqRVrRzzi35f1buKrhKflSTpm7LuHlxKTXQOsm5j/XwjppOQKZx7zT7A0bYOQp3Aph s8nVDybFflE7AzjEYJ7ZYtV4yI7JMobzd/q9/jYSex3zbgd/kBGMGMi5YwnWe93+Dv3IEtKIoi5p U7jBE1ItbeXeS7OyV4wMxdwinz5SMRtWLhy1OIKO0+Y4V2pVCHyQSq9qhl3FfK/X7nmHg2fecpEj xUzlBWp1mz4BVSqYb3XqVZzIVZCBpdIe9CxD8Ih6VbcINSJhKEI3P0T10QFUhSiqQM0vpwN6AhI1 NfaGsysrwIyKqlpypr7XIMRe1O2iZJy/6fZ227ixz1cmz1d0XRwZ5dkldAKrMXecBfHI4Y6qzxSl cEM9LhNSXJTd2fxHYcumcBxq9sSMp6KUf1Y/QddXboCBjKjKjd01eseKkPiMLnreFwPrw0J+CmGH PmwIp15QMwAEHHKdolF6UagLdGXFWSqzMzEZo7V43AlrF7SlGOpDe+mhzYx2B37LRFSUKXRb3Sxj CzU1tL1RrROYDwgrgpt8qspklDg2E5Slx3L2ZfukcSizl7qdReVDFTaeNA4y91J30VWg16xO6iNl z+Ye2kk9vnkUjxHK480JRk/Dp0noF2IARE5HlkiA7kQcEINwAbaXdZEX5qc8wIqoYy711odxaM4R Zg9nk4C1v9Yx1ziCJp3NL9GJtRl7ibNLaWku+i0JsaBRpBqFFU0TTuU38jt/S7CrnOakXxtZYzKS ybtA/8f+8dgQKqPylNqdR4sGqAQmIRFuHuYOoH2uJRc9xINSD3WDVE1mGtnn3g+mTCRw6MDmAoVU 5i6ZHosiV+j1W1HUBu+mwlbSF5y3J8Wzbd8UekuK0NmS6sVCUjVjwoYEuH12jg8u4dtfG5kWzs8p WygLXJEsyhwF/R9zyjcj4L9MLMz1DbEGk3pDLOpw/z+xHu5+ebj7xB7ufru//Xx/+/v9x4/3t7/+ PUG3onb/31ExkG8ttFsMpmXaob9saLeh3auZZ+uhXRh86xh2UWc32qHnmWXadTa0w4PFZtq9lsfI 9dBujdMu6rf7/qXKMu+6G95tePeK/n1bD+/+ctzhBdXixZR/V7X/BwAAAP//AwBQSwMEFAAGAAgA AAAhADLHhaXaAAAA/AAAAA8AAABkcnMvZG93bnJldi54bWxEj1FLwzAUhd8F/0O4gi/DpRvFzbps TIco7GF0E3y9NjdtsbkpSdzaf2/wQR8P5/AdvtVmsJ04kw+tYwWzaQaCuHK65VrB++nlbgkiRGSN nWNSMFKAzfr6aoWFdhcu6XyMtUgQDgUqaGLsCylD1ZDFMHU9ceqM8xZjir6W2uMlwW0n51l2Ly22 nB4a7Om5oerr+G0VmPKwzybm44kPNp9PFpncjs4odXszbB9BRBri/3i/y/PT7q/8Rb1pBcvZwwKE eR0/fatLDJG8gqSXZJMoyPUPAAAA//8DAFBLAQItABQABgAIAAAAIQAMgYW7/gAAAOIBAAATAAAA AAAAAAAAAAAAAAAAAABbQ29udGVudF9UeXBlc10ueG1sUEsBAi0AFAAGAAgAAAAhADHdX2HSAAAA jwEAAAsAAAAAAAAAAAAAAAAALwEAAF9yZWxzLy5yZWxzUEsBAi0AFAAGAAgAAAAhAFfG7mw9BAAA cBYAABAAAAAAAAAAAAAAAAAAKgIAAGRycy9zaGFwZXhtbC54bWxQSwECLQAUAAYACAAAACEAMseF pdoAAAD8AAAADwAAAAAAAAAAAAAAAACVBgAAZHJzL2Rvd25yZXYueG1sUEsFBgAAAAAEAAQA9QAA AJwHAAAAAAAAEPAIAAAAsAqwATAP0BQPABHwEAAAAAAAwwsIAAAAAwAAAAYC0wQPAA3wngAAAAAA nw8EAAAAAgAAAAAAqA9SAAAAQ2xpY2sgdG8gZWRpdCBNYXN0ZXIgdGV4dCBzdHlsZXMNU2Vjb25k IGxldmVsDVRoaXJkIGxldmVsDUZvdXJ0aCBsZXZlbA1GaWZ0aCBsZXZlbAAAog8eAAAAIQAAAAAA DQAAAAEADAAAAAIADQAAAAMADAAAAAQAAACqDwoAAABTAAAAAQAAAAAADwAE8AUKAAASAArwCAAA AAY0AAAACgAAkwAL8E4AAAB/AAEA7wGAAPzc0wSHAAIAAAC/AAQABAC/AQEAEQD/AQEAGQA/AwAA CACAwxgAAAC/AwAAAgBSAGUAYwB0AGEAbgBnAGwAZQAgADYAAAATACLx9wcAAKmD8QcAAFBLAwQU AAYACAAAACEADIGFu/4AAADiAQAAEwAAAFtDb250ZW50X1R5cGVzXS54bWyUUcFOwzAMvSPxD1Gu qEnHASHUdgc6joBgfICVuG1Em0RxKNvf427sgISGONp+7/n5uVrvplHMmMgFX8uVKqVAb4J1vq/l 2/ahuJWCMngLY/BYyz2SXDeXF9V2H5EEsz3Vcsg53mlNZsAJSIWIniddSBNkLlOvI5h36FFfl+WN NsFn9LnIi4ZsqhY7+Biz2Oy4fXTCdCnuj7hlVS0hxtEZyGxUL1PdVE9sPDmL4hlSfoSJUdom0jRA RMao8yqzt2qiInSdM6jaRK8L7+oPcRs+fcL5v9ot015wPqn/cnLCkc7cvLj9GWzxHapi5iEXGlyk 0wZ9+FDzBQAA//8DAFBLAwQUAAYACAAAACEAMd1fYdIAAACPAQAACwAAAF9yZWxzLy5yZWxzpJDB asMwDIbvg72D0b1x2kMZo05vhV5LB7sKW0lMY8tYJm3fvqYwWEZvO+oX+j7x7/a3MKmZsniOBtZN C4qiZefjYODrfFh9gJKC0eHEkQzcSWDfvb/tTjRhqUcy+iSqUqIYGEtJn1qLHSmgNJwo1k3POWCp Yx50QnvBgfSmbbc6/2ZAt2CqozOQj24D6nxP1fyHHbzNLNyXxnLQ3PfevqJqx9d4orlSMA9UDLgs zzDT3NTnQL/2rv/plRETfVf+QvxMq/XHrBc1dg8AAAD//wMAUEsDBBQABgAIAAAAIQDQ6jmNiQMA AJkIAAAQAAAAZHJzL3NoYXBleG1sLnhtbKxV224bNxB9L5B/IPgaONKqtmMLWQe2UacFVEOwHPSZ u8u1NuKSW5Kri7++Z4YryQ2KIqiqB2koDudyZubMp8/b1oi19qFxNpfZh7EU2pauauxLLr8+P5xd SRGispUyzupc7nSQn2/e/fSpm4ZO4LEN0y6Xyxi76WgUyqVuVfjgOm1xVzvfqoijfxl1Xgdto4pw 1JrRZDy+HLWqsfIGpux60c09SeXjeu5FU+XyKruGb6taeH3SJWJ4MVpcytGgll4ohDFz5SoMsagf iaXyaoME/xaGsO6LRyYZfLr7JbzpW+/dZqlVFehv+B1xfPtQLSKlWLqliLsOUdbRA6zXXP7ZKx81 Dk21zeX58DTpw8Yx24CsRbH53VV4rvrogIaabmvfnpoO2XF1LeAfJd0Bzsuri0n2M8WipnobRYmr yfXH7GoMhRIa5xcfURUONsVAmp0P8Yt2J8cjyFAuPQrJOar1LESC9OiC3Fn30BhzavKco7GnmhGb XF5fTC444BQZW24bFFeYpgWqY/okUKlTfrEVq0TVmCQjQWMZ87pG8sj61LAINZq+1H1xe+eqHTko 8It2SjP53+cAZIBCLZ1/lWLjFUYiUD9rKcxvFpNwnZ2fo2MiH7hnpPBvb4q3N7Zv753hsVK2hNVc FlIk8T7iRM3n2k7FmV10JSnu2+55+4fy3dA4ES376BZL1el/6p+ky+2UYCAjJsRF3IE0ToSEba1N xoiraaXrJ+BMg54dB8bsFajgg2PO5P/wTjTRKj9juCA8sQCX/NvYCszKojIvoHEjBYJ8VsUCMXK9 gLKPSVurmb3zKy5J7Wy85SeFClRh0LMdrvGEWBA8Oe9tCfOpMobKRImFrpyXUawVVfcwBtzuR407 XX+vu2cYvD/e3tbxX/SG26K/N/55ywNW9IvXg/iANA6HR+ypYQYLTBuLqWQ0OKAbmhtQoK3myiuq 5Kpvm9Z9axKoyDmX2p59XSQy5xqLIiHN330uLZzQYvTNCsxt3YIlKVba0xqlthAlzc6gSJ2Nvywt RNO86l/5SKCbhtYq3829czXJFF8ijQPrHGgkONNURJKMF+1bDVRSGeI2rSkU562W3jMPY9HP7IBV T2YGmSvPe6xWJQK69Y1CG3VNLJcPqm0MFsRZlk2Q1lL5oLnd2J5Wb569b+2ZVokPy/DdRRmG5XLE PlWECW1PZMxtN38BAAD//wMAUEsDBBQABgAIAAAAIQC3zZn52AAAAPwAAAAPAAAAZHJzL2Rvd25y ZXYueG1sRI/LTsMwEEX3SPyDNUjsqJMsqhLqVogWlU0FfWzYTeNJbDW2I9uk7t9jsaDL0R2de898 mUzPRvJBOyugnBTAyDZOatsJOB7en2bAQkQrsXeWBFwpwHJxfzfHWrqL3dG4jx3LEBtqFKBiHGrO Q6PIYJi4gWzOWucNxnz6jkuPlww3Pa+KYsoNapsbFA70pqg573+MgHFaxdVJf2+3X2W7rspN8lWR hHh8SK8vwCKleHtWn6498//wD/UhBczK57y93VxPXssdhkheQNbLslkU+OIXAAD//wMAUEsBAi0A FAAGAAgAAAAhAAyBhbv+AAAA4gEAABMAAAAAAAAAAAAAAAAAAAAAAFtDb250ZW50X1R5cGVzXS54 bWxQSwECLQAUAAYACAAAACEAMd1fYdIAAACPAQAACwAAAAAAAAAAAAAAAAAvAQAAX3JlbHMvLnJl bHNQSwECLQAUAAYACAAAACEA0Oo5jYkDAACZCAAAEAAAAAAAAAAAAAAAAAAqAgAAZHJzL3NoYXBl eG1sLnhtbFBLAQItABQABgAIAAAAIQC3zZn52AAAAPwAAAAPAAAAAAAAAAAAAAAAAOEFAABkcnMv ZG93bnJldi54bWxQSwUGAAAAAAQABAD1AAAA5gYAAAAAAAAQ8AgAAABfFQAAUAd/Fg8AEfAsAQAA AADDCwgAAAAEAAAACQLTBAAAGRAUAQAAAAAACAwBAAACAAAADAEAAAAAAAAUAAAAIAAAAAEAAAAB AAAAAAAAAAEAAADoAAAACAAAAAQAAAAAAAAAAAEAAAEAAAAAAAAAAQEAAAEAAAAAAAAAAgEAAAEA AAAAAAAAAwEAAAEAAAAAAAAABAEAAAEAAAAAAAAABQEAAGgAAABkbWFuYAAAAAIAAAAEAAAAAwAA AAEAAAAJBAAACgAAAEEAcgBpAGEAbAAAAAgAAAAAAAAAAwAAAAAAAAAmAAAATQBvAG4AbwB0AHkA cABlACAAVAB5AHAAbwBnAHIAYQBwAGgAeQAAAAYBAAAEAAAAAAAYAAcBAAAGAAAAAAAAAAAAAAAE AAAADgAJABEAAAAaAAEADwAN8FQAAAAAAJ8PBAAAAAQAAAAAAKEPGgAAAAEAAAAAACAACgAAAAD/ BwABAAAAAAACAAwAAACqDwoAAAABAAAAAQAAAAAAAACmDwwAAADwAAAAVl04f1iAeIEPAATwhgoA ABIACvAIAAAABzQAAAAKAACTAAvwTgAAAH8AAQDvAYAA5O7TBIcAAgAAAL8ABAAEAL8BAQARAP8B AQAZAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBjAHQAYQBuAGcAbABlACAANwAAABMAIvFgCAAAqYNa CAAAUEsDBBQABgAIAAAAIQAMgYW7/gAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJRRwU7D MAy9I/EPUa6oSccBIdR2BzqOgGB8gJW4bUSbRHEo29/jbuyAhIY42n7v+fm5Wu+mUcyYyAVfy5Uq pUBvgnW+r+Xb9qG4lYIyeAtj8FjLPZJcN5cX1XYfkQSzPdVyyDneaU1mwAlIhYieJ11IE2QuU68j mHfoUV+X5Y02wWf0uciLhmyqFjv4GLPY7Lh9dMJ0Ke6PuGVVLSHG0RnIbFQvU91UT2w8OYviGVJ+ hIlR2ibSNEBExqjzKrO3aqIidJ0zqNpErwvv6g9xGz59wvm/2i3TXnA+qf9ycsKRzty8uP0ZbPEd qmLmIRcaXKTTBn34UPMFAAD//wMAUEsDBBQABgAIAAAAIQAx3V9h0gAAAI8BAAALAAAAX3JlbHMv LnJlbHOkkMFqwzAMhu+DvYPRvXHaQxmjTm+FXksHuwpbSUxjy1gmbd++pjBYRm876hf6PvHv9rcw qZmyeI4G1k0LiqJl5+Ng4Ot8WH2AkoLR4cSRDNxJYN+9v+1ONGGpRzL6JKpSohgYS0mfWosdKaA0 nCjWTc85YKljHnRCe8GB9KZttzr/ZkC3YKqjM5CPbgPqfE/V/IcdvM0s3JfGctDc996+omrH13ii uVIwD1QMuCzPMNPc1OdAv/au/+mVERN9V/5C/Eyr9cesFzV2DwAAAP//AwBQSwMEFAAGAAgAAAAh AK+4gSrxAwAA0QsAABAAAABkcnMvc2hhcGV4bWwueG1s7Fbfj+I2EH6v1P/B8mvFQThgAV32BPT2 Womu0LKnPlYmcZYUx05tB9it+r/3GzvA9lRVVbm+3T6ESTye+ebHN7Pv3h8rxfbSutLolCdvepxJ nZm81E8p//R41xlz5rzQuVBGy5Q/S8ff3377zbt66mqGy9pN65Rvva+n3a7LtrIS7o2ppcZZYWwl PF7tU7e20knthYejSnX7vd6oW4lS81uY0vt1vbIkZff7lWVlnvJxMplwpkUFrw8yA4YnJdkN77Zq 8YYAjKXJdq7FIv4NltyKAwL8CwymzUeLSBL4NIstvMmZteawlSJ39Bl+uwHfCaoGUsJSb5l/roHS qfy+qZCvl5T/1gjrpeUI5ZjyYXs7XoGZS8AOgbPN4SeTw4JovEFCxPRY2OraiMiOKQoG/2/H48Eo ecvZM/I6Gg/7kBGPmMqjZxkU+pObZNxD8TNoDIY3KE+AHJGQZm2d/yjN1agYGUq5RUVDpGK/dJ5y e3FB7rS5K5W6NgUhRqWvNcMOKZ8M+8MAOCILlqsSJWaqrJDVHv3FpFLLfNB5UPGiVFFGgEqHnBcF gkfU18KirBENYxv649zkz+Rgg180VSTnfycEpgIKtTX2hbODFeCGo66WnKkfNSgxSQYDdIwPL6Fn OLOvTzavT3RTLYwK/BI6g9WUbziL4sLjjZrPVLXwS72uM1I8td3j8Wdh67ZxPFr23qy3opZ/1z9R N7RTTAMZUc6v/TOmx5UpCbb2KiHKCvWEgWkDhlwWD/hEvE8uzFFRM2A5IQghfQkYBKESdhnyBuEh CHAZfkudY9YG8YSTAeSj2KyBMRQO6bY+akux1HO7C7UpjPazENpGOCo1BrZuj3GF5iIm56rRGczH EimqFwXm6myVebYXVOYzH0LfXzTmsvhc9zRqcP9yOiv8P+i1p5tmoezjMTBt06xfzuIdwji/3GNz tWTcgHZBjCUjBmHuEIHEtFB5WDy/92eDSXIzmneGo2TWmXwYYAsm3w86g+F8MblZ9JPZqPcHGr8d +iVyjbFPJiyqsmuqsjK/lrEgyFfKpe58Wse9EPqDbWKVwrNJuQZAWrO23GEJaLMOEmc7aWkpU0ux jAjYKhI98EnTelXli/whvFLBVElLOpytrDEFyQQsTp7z6DrPImdUmdOkDbmm7S2R0VhCf4xLD4V9 rSVP4yvksVnqNs8NmWnl0DUhQYXIAGhmS6E4q0ufbe9EVSpsmU6S9BHWVlgnQ6sGe1K8uvZdpTtS xKGauc8OMtduKCSd0H9lBGXhizLC3/5C/AAR8QQ9yIHU+UpYQfPua6eDWDQfX3Xm/9rpl9zHuYVn PT3t/fCvwO2fAAAA//8DAFBLAwQUAAYACAAAACEA7eh2ANkAAAD8AAAADwAAAGRycy9kb3ducmV2 LnhtbESPsW7CMBRF90r9B+tV6lacZEAhxSDUFtEFqVAYuj3il8QitlPbBPP3tTq049W9Oldnvoy6 ZyM5r6wRkE8yYGRqK5VpBRw+108lMB/QSOytIQE38rBc3N/NsZL2anY07kPLEsT4CgV0IQwV577u SKOf2IFM6hrrNIYUXculw2uC654XWTblGpVJDx0O9NJRfd5ftIBxWoTXk/rabj/y5q3IN9EVWRTi 8SGunoEFiuF/fFl/1+Xxr/xFvUsBZT6bAWs2t5NTcoc+kBOQ9JJsEgW++AEAAP//AwBQSwECLQAU AAYACAAAACEADIGFu/4AAADiAQAAEwAAAAAAAAAAAAAAAAAAAAAAW0NvbnRlbnRfVHlwZXNdLnht bFBLAQItABQABgAIAAAAIQAx3V9h0gAAAI8BAAALAAAAAAAAAAAAAAAAAC8BAABfcmVscy8ucmVs c1BLAQItABQABgAIAAAAIQCvuIEq8QMAANELAAAQAAAAAAAAAAAAAAAAACoCAABkcnMvc2hhcGV4 bWwueG1sUEsBAi0AFAAGAAgAAAAhAO3odgDZAAAA/AAAAA8AAAAAAAAAAAAAAAAASQYAAGRycy9k b3ducmV2LnhtbFBLBQYAAAAABAAEAPUAAABPBwAAAAAAABDwCAAAAF8VjwnfEH8WDwAR8CwBAAAA AMMLCAAAAAUAAAAIAtMEAAAZEBQBAAAAAAAIDAEAAAIAAAAMAQAAAAAAABQAAAAgAAAAAQAAAAEA AAAAAAAAAQAAAOgAAAAIAAAABAAAAAAAAAAAAQAAAQAAAAAAAAABAQAAAQAAAAAAAAACAQAAAQAA AAAAAAADAQAAAQAAAAAAAAAEAQAAAQAAAAAAAAAFAQAAaAAAAGRtYW5gAAAAAgAAAAQAAAADAAAA AQAAAAkEAAAKAAAAQQByAGkAYQBsAAAACAAAAAAAAAADAAAAAAAAACYAAABNAG8AbgBvAHQAeQBw AGUAIABUAHkAcABvAGcAcgBhAHAAaAB5AAAABgEAAAQAAAAAABgABwEAAAYAAAAAAAAAAAAAAAQA AAAOAAkAEQAAABoAAQAPAA3wbAAAAAAAnw8EAAAABAAAAAAAoA8CAAAAKgAAAKEPHAAAAAIAAAAA ACAICgAAAAD/AgAHAAIAAAAAAAIADAAAANgPBAAAAAAAAAAAAKoPCgAAAAIAAAABAAAAAAAAAKYP DAAAAPAAAABWXTh/WIB4gQ8ABPBCAAAAEgAK8AgAAAABNAAAAAwAAHMAC/AqAAAAgQEAAAAIkwHe vWgAlAGOn4sAvwESABIA/wEAAAgABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAA u+DjADMzmQAAmZkAmcwAAA8AiBM4AAAADwCKEzAAAAAAALoPEAAAAF8AXwBfAFAAUABUADEAMAAA AIsTEAAAAAAA6y4IAAAAxqXGAVDT85UAACcE4QUAAFBLAwQUAAYACAAAACEAGrEaA/wAAAC7AQAA EwAAAFtDb250ZW50X1R5cGVzXS54bWx8kMlqw0AMhu+FvsMw1+IZp4dSiu0cuty6HNIHEGPZHjob o0lI3r6yk0IoISeh5df/Sc16753YYSYbQytXqpYCg4m9DWMrvzdv1aMUVCD04GLAVh6Q5Lq7vWk2 h4QkWB2olVMp6UlrMhN6IBUTBu4MMXsonOZRJzA/MKK+r+sHbWIoGEpV5h2ya15wgK0r4nXP5SMJ y6V4Ps7NVq2ElJw1UBhUz13dNZ8Mnm2P4gty+QDPU7rPpMlx8R2o8F3nyUpdX7sL/T/2Kg6DNdhH s/VMrFJG4rhQeKfOjO5OTBduyejoyjEXXE/fUqxcrGiyif4c9PL67hcAAP//AwBQSwMEFAAGAAgA AAAhAI7qKvq+AAAAOAEAAAsAAABfcmVscy8ucmVsc4SPwQrCMBBE74L/EPZu03oQkaa9iNCDF9EP WJJtG2yTkI2if2+OFgSPwzBvZur2NU/iSZGtdwqqogRBTntj3aDgdj1t9iA4oTM4eUcK3sTQNutV faEJUw7xaAOLTHGsYEwpHKRkPdKMXPhALju9jzOmLOMgA+o7DiS3ZbmT8ZsBzYIpOqMgdqYCcX2H 3Pyf7fveajp6/ZjJpR8Vkidr6IycKGYsxoGSAhP521iIqsj7QTa1XPxtPgAAAP//AwBQSwMEFAAG AAgAAAAhAOIgsSyvAgAANQ4AACEAAABkcnMvc2xpZGVNYXN0ZXJzL3NsaWRlTWFzdGVyMS54bWzs l99q2zAUxu8Hewejy43UsZMmrqlT0o3CoBdh7R5AUeRYVH+MpHjNLtvnGR1ssJu+TR6gr7AjR16c MEYHo71ofCX5SEc630/2Zx+fXAseVFQbpmSGooMuCqgkasbkPEOfLs86CQqMxXKGuZI0Q0tq0Mno 9avjMrXXF3bJqQkghTQpzlBhbZmGoSEFFdgcqJJKiOVKC2yhq+fhTOPPkFrwMO52B6HATCI/Xz9m vspzRuh7RRaCSrtOoinHFrZvClaaJpsgj0knsL5alB2iRAkppowzu6yT/k5TZWihZepL6ghGtDIq t25OKjBJK8FRIEj6YS6VxlMOGomqvjPR1FBd0bG1mk0XlhoXSt80ucvH7LB0SaStC9xSbeQIMMtp DSF03amaLeve6BinvOJROdEB5nMAC3vUlmcI8OZK2nF9c4oNRW6sKckpzX1rQmxQYRjb68KFIHO4 M2Kc292xrXE+OqP5R1jefIFTBaxRcEW1O2GuXc9WnM3OGOd1x50Y+o7r9cr2OmrWbY9ymGVglyXN MQGdx5phKKxklhRnWDC+zFAnimIUkAJrQ62rF/aPU4pb094K2aF4HSBmJ0CMX3m9/7p4L6VLBM3Y qQoH5zxD/cNhXdpe412NH+6/Ptx/Dx7uv61ufqxufq5ub1c3d39n1Yni5N+oOBSeSm9D5Sjq992B 21N5HioOhafS31CJesNosMfypxfS0zwsjoXHctjCksRJssfyfFgcC49lsMESxwk8LO2XGPjRJZ5e gJ02rtMYOsXn8lRfgbeioLZI34XZBZZz+NyaLCQBM4yQW+gJjNk5LLf/yXqdKl6gYUugYb+37b0v ViCnihco2Qjk1Nm2wRcrkFPFC3TUEmhwONw2pBcrkFMFvnS3/iDKVNmC6ubvAoLN/97oFwAAAP// AwBQSwECLQAUAAYACAAAACEAGrEaA/wAAAC7AQAAEwAAAAAAAAAAAAAAAAAAAAAAW0NvbnRlbnRf VHlwZXNdLnhtbFBLAQItABQABgAIAAAAIQCO6ir6vgAAADgBAAALAAAAAAAAAAAAAAAAAC0BAABf cmVscy8ucmVsc1BLAQItABQABgAIAAAAIQDiILEsrwIAADUOAAAhAAAAAAAAAAAAAAAAABQCAABk cnMvc2xpZGVNYXN0ZXJzL3NsaWRlTWFzdGVyMS54bWxQSwUGAAAAAAMAAwDJAAAAAgUAAAAAAAAP BDoBAAA8P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJVVEYtOCIgc3RhbmRhbG9uZT0ieWVz Ij8+DQo8YTpjbHJNYXAgeG1sbnM6YT0iaHR0cDovL3NjaGVtYXMub3BlbnhtbGZvcm1hdHMub3Jn L2RyYXdpbmdtbC8yMDA2L21haW4iIGJnMT0ibHQxIiB0eDE9ImRrMSIgYmcyPSJsdDIiIHR4Mj0i ZGsyIiBhY2NlbnQxPSJhY2NlbnQxIiBhY2NlbnQyPSJhY2NlbnQyIiBhY2NlbnQzPSJhY2NlbnQz IiBhY2NlbnQ0PSJhY2NlbnQ0IiBhY2NlbnQ1PSJhY2NlbnQ1IiBhY2NlbnQ2PSJhY2NlbnQ2IiBo bGluaz0iaGxpbmsiIGZvbEhsaW5rPSJmb2xIbGluayIvPgAADgRbDAAAUEsDBBQABgAIAAAAIQBL nfYYAAEAABwCAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbKyRy2rDMBBF94X+g9C22HK6KKXYzqKP XR+L9AMGeWyL2iMhTULy9x07DpQSQhfdCKSZuffcUbnej4PaYUzOU6VXeaEVkvWNo67Sn5uX7F6r xEANDJ6w0gdMel1fX5WbQ8CkZJpSpXvm8GBMsj2OkHIfkKTS+jgCyzV2JoD9gg7NbVHcGeuJkTjj SUPX5RO2sB1YPe/l+Ugi41o9Hvsmq0pDCIOzwAJqpqqpy3cBj65B9QGR32CULsOCgD/PVX5Za0fN L+DMt62z2Hi7HQUznyVvFs8zrBGHdAH2jMGyjVwm50CpdyGdHP6U6hVI1hn/J9sidgIw89/W3wAA AP//AwBQSwMEFAAGAAgAAAAhAKXWp+fAAAAANgEAAAsAAABfcmVscy8ucmVsc4SPz2rDMAyH74W9 g9F9UdLDGCV2L6WQQy+jfQDhKH9oIhvbG+vbT8cGCrsIhKTv96k9/q6L+eGU5yAWmqoGw+JDP8to 4XY9v3+CyYWkpyUIW3hwhqN727VfvFDRozzNMRulSLYwlRIPiNlPvFKuQmTRyRDSSkXbNGIkf6eR cV/XH5ieGeA2TNP1FlLXN2Cuj6jJ/7PDMMyeT8F/ryzlRQRuN5RMaeRioagv41O9kKhlqtQe0LW4 +db9AQAA//8DAFBLAwQUAAYACAAAACEAa3mWFoMAAACKAAAAHAAAAHRoZW1lL3RoZW1lL3RoZW1l TWFuYWdlci54bWwMzE0KwyAQQOF9oXeQ2TdjuyhFYrLLrrv2AEOcGkHHoNKf29fl44M3zt8U1ZtL DVksnAcNimXNLoi38Hwspxuo2kgcxSxs4ccV5ul4GMm0jRPfSchzUX0j1ZCFrbXdINa1K9Uh7yzd Xrkkaj2LR1fo0/cp4kXrKyYKAjj9AQAA//8DAFBLAwQUAAYACAAAACEA56t0FuIGAABpHQAAFgAA AHRoZW1lL3RoZW1lL3RoZW1lMS54bWzsWc1vHDUUvyPxP1hzb7MfTchG3VTJ7qaBNm2U3Rb16J31 zrjxjEe2N8neUHtEQkIUxAWJGwcEVGolLuWvCRRBkfov8GzPTMYZp/kgAgTdSs2M5/ee3/d7nrl+ 4yBhaI8ISXnaDZpXGwEiacgnNI26wb3RxpXlAEmF0wlmPCXdYE5kcGP13Xeu4xUVk4QgoE/lCu4G sVLZysKCDGEZy6s8Iyk8m3KRYAW3IlqYCLwPfBO20Go0lhYSTNMApTgBtnenUxoSNNIsg9WC+YDB baqkXgiZGGrWJKcwqMluUz+TIhr3mEB7mHWDhvkFC6vXF/BKDmCqjtswvxyXAya7rdP4GQBTddxy Q/8r+RkADkOQv773+vqgMWjn2ArIXtZ5t+HX6Tj4Cv92TWZHN8vUgOzltRresVkFZC8Xa/j+2qA/ 2HDkMSCLX6rhW/1Wf3nNwRtQzGi6W0M3Gh345egSMuVs0wvvdHq9RmH4IxR4v4wZvcWUp8qJIBtz gX6W4IdcbABA3zCsaIrUPCNTHEJs9jCjY0G1PHiF4MoTuxTK2pLeC8lQ0Ex1gw8yDHF+xO/1i+9e v3iGXr94evjo+eGjHw8fPz589IPl5RBu4jSqEr765tM/vvoI/f7s61dPPvfjZRX/y/cf//zTZ36g qgJffvH01+dPX375yW/fPvHA1wQeV+EjmhCJ7pB9tMMT0M0YxpWcjMX5KEYxplWKtTSSOMV6Fw// gYod9J05ZtiDWyeuBe8LCpXMA7w5e+gIPIzFTOUudzS7FScOcItzts6F1wq39F4Vx49maeTfXMyq uB2M93x793Dq+Hcwy6AgUh/LXkwcMbcZThWOSEoU0s/4LiEeMzyg1LHrFg0Fl3yq0AOK1jH1mmRE x040HRFt0gT8MvcJCP52bLN1H61z5tO6T/ZcJGQFZh7hR4Q5ZryJZwonPpYjnLCqwW9jFfuEHM5F WMUNpAJPR4RxNJgQKX00dwXoW3H6LagefrdvsXniIoWiuz6etzHnVWSf7/ZinGQ+7JCmcRX7vtyF EMVomysffIu7GaLvwQ84PdHd9ylx3H16NbhHI0ekowDRT2ZC+xKqtVOEE5q+rchnrshrgnpTYvNY HT4Jd7z69riY0H9/8e3jWbpNIN7rHeht7X1be4P/fO09KZ/PWnGPiizUXz3n2AHZjMvJidPylDI2 VHNGbkszMEtoGJMNWNR05vxHytNYFsNlXuAdXCSwoUGCqw+piocxzmDYbpp5PJI560iijEs41Jll L2+9KQzsyp7+FvVRxtYDidUWn9jldvVQWLIxbScyx8tio7ZmcNbN2u/9tc2aVqoTzeaq1jSimVLn qFaqDD6sqwaLpTVhEkEwv4CVl+AErmWHQwpmZKLtbptw4Ra9dXF9yS7KtbaKxHhCrIuc5YrrmsZ3 RQiZVwAQUh7Xnc+apdXAaKcLYcKiOGNe2MgFg8KwRonj2cTSam6xFO13g85iazFAIc66wRSOp3CZ ZOA0qWc3zCJ4cxMqYaP21Fw00XakcccfVc1GsV6LKieNMyFVH8vY+tA8yl3FUr2Tlb+1eE0H2+Uo YAP1AlK0lyFE/jEpwI6ua8l0SkJVdXZlRdvO3uaVkM8UEcN4so/GbCZ2MLgfbKr1mVAJbxlMQusb 0Q20tc0jt7bmdc3zskzvhlkW47xaLmvq3M4WbkK1lMHcVcQD3byyG+XOr4rO+MtSpRrG/zNVdDuA E397oj0QwntWgZHO127AhYo5VKEspuGGgL5vagdEC4Lqorstgre95q8ge/qvjQXLQ3NjcHBTOzRC gkI7UbEgZBvKkom+U5g189ZjWRaMTERVxJWZFXtM9ggb6Rq4pGtwgGIIdVNN8vA0uOPx597nGTSO 9IxSzTenhpRV3ebA3z242GQGpcBrle53SuPRzd1OSJbekBc9sqqIfnA0JV0rssJpfp1OnvYXFOEs DbjSa23FqmncWiyEAy+WTjHxoUc1WCznmQze2yD9H/Q/KkJmPx3ohjriO1BbEXwO0MwgbCCqr+iq Bpe6QNqrMcw9dtEGk2Zld8iHU221ollf8hRU7nvM2FqyIt/q2h/5+5zGLocodzsnF+vbXdzYuYUd W9u1E00Nmx1PUViaFucQ4xjzzan6WYiPH4Kj+/CqfsbshyKZwZ3Jg2xbmOga88k8v2TSNlwbdfoM o5Es3SFTRCcHxfmjtIRNIftZoxiRDVqT6UArCdu+Q4NLmOM1qe2WJXHrdOKSwuwMJbskNq/KfAzg o1ZeuPXRDvDGhNJqDaYtLcXSv2KyMwjvN5n3nHVWk9mD4hsddQGTqYM3myy3FBivHnjkAN4Ow9Fk aOovNB0b6SZkV/8EAAD//wMAUEsDBBQABgAIAAAAIQAN0ZCftgAAABsBAAAnAAAAdGhlbWUvdGhl bWUvX3JlbHMvdGhlbWVNYW5hZ2VyLnhtbC5yZWxzhI9NCsIwFIT3gncIb2/TuhCRJt2I0K3UA4Tk NQ02PyRR7O0NriwILodhvplpu5edyRNjMt4xaKoaCDrplXGawW247I5AUhZOidk7ZLBggo5vN+0V Z5FLKE0mJFIoLjGYcg4nSpOc0IpU+YCuOKOPVuQio6ZByLvQSPd1faDxmwF8xSS9YhB71QAZllCa /7P9OBqJZy8fFl3+UUFz2YUFKKLGzOAjm6pMBMpburrE3wAAAP//AwBQSwECLQAUAAYACAAAACEA S532GAABAAAcAgAAEwAAAAAAAAAAAAAAAAAAAAAAW0NvbnRlbnRfVHlwZXNdLnhtbFBLAQItABQA BgAIAAAAIQCl1qfnwAAAADYBAAALAAAAAAAAAAAAAAAAADEBAABfcmVscy8ucmVsc1BLAQItABQA BgAIAAAAIQBreZYWgwAAAIoAAAAcAAAAAAAAAAAAAAAAABoCAAB0aGVtZS90aGVtZS90aGVtZU1h bmFnZXIueG1sUEsBAi0AFAAGAAgAAAAhAOerdBbiBgAAaR0AABYAAAAAAAAAAAAAAAAA1wIAAHRo ZW1lL3RoZW1lL3RoZW1lMS54bWxQSwECLQAUAAYACAAAACEADdGQn7YAAAAbAQAAJwAAAAAAAAAA AAAAAADtCQAAdGhlbWUvdGhlbWUvX3JlbHMvdGhlbWVNYW5hZ2VyLnhtbC5yZWxzUEsFBgAAAAAF AAUAXQEAAOgKAAAAAA8A7gPXBAAAAgDvAxgAAAAQAAAAAAAAAAAAAAAAAACAAAEAAAcAEzAPAAwE 0gMAAA8AAvDKAwAA4AAI8AgAAAAEAAAABDgAAA8AA/B0AwAADwAE8CgAAAABAAnwEAAAAAAAAAAA AAAAAAAAAAAAAAACAArwCAAAAAA4AAAFAAAADwAE8B4BAAASAArwCAAAAAI4AAAgAgAAAwEL8HgA AAAEAAAAAAB/AAEA7wGAACCM0wSBADBlAQCCAJiyAACDADBlAQCEAJiyAACFAAAAAACHAAEAAACI AAAAAAC/AAQABAD/AQAAEQABAwIEAAA/AwAACACAwxgAAAC/AwAAAgBSAGUAYwB0AGEAbgBnAGwA ZQAgADQAAAAAABDwCAAAAD4FsAHQFNwIDwAR8BwAAAAAAMMLCAAAAP////8PANMEAAAfBAQAAAAC AAAADwAN8FIAAAAAAJ8PBAAAAAYAAAAAAKgPEAAAAFN5c2xvZyBXRyBJRVRGNzUAAKEPFAAAABEA AAAAAAAACgAHABEAAAAAAAAAAACqDwoAAAARAAAAAQAAAAAADwAE8GQBAAASAArwCAAAAAM4AAAg AgAAAwEL8HgAAAAEAAAAAAB/AAEA7wGAAJyP0wSBADBlAQCCAJiyAACDADBlAQCEAJiyAACFAAAA AACHAAAAAACIAAAAAAC/AAQABAD/AQAAEQABAwMEAAA/AwAACACAwxgAAAC/AwAAAgBSAGUAYwB0 AGEAbgBnAGwAZQAgADUAAAAAABDwCAAAAJAJYAMgE+ANDwAR8BwAAAAAAMMLCAAAAP////8QANME AAAfBAQAAAADAAAADwAN8JgAAAAAAJ8PBAAAAAUAAAAAAKgPHgAAAERhdmlkIEhhcnJpbmd0b24N Q2hyaXMgTG9udmljawAAoQ8oAAAAHwAAAAAAAAAKAAcABgAAAAAAAAAYAAAAAAQAAAAEAQAAAAAI AAAACAAAqg8aAAAAFwAAAAAAAAAHAAAAAQAAAAEAAQAAAAAAAAAAAKYPDAAAAPAAAABWXTh/WIB4 gQ8ABPCqAAAAsgQK8AgAAAAEOAAAAAoAALMAC/CCAAAAfwCAAPsBvwAEAAQABEEBAAAABcEWAAAA PwEAAAYAvwEAABEA/wEAABgAPwMQABgAgMMUAAAAgcMWAAAAvwMAAAIAaQBlAHQAZgBsAG8AZwBv ADIAZQAAAFAAaQBjAHQAdQByAGUAIAA2AAAAaQBlAHQAZgBsAG8AZwBvADIAZQAAAAAAEPAIAAAA sAGwB0AOcAUPAATwNgAAABIACvAIAAAAATgAAAAMAABTAAvwHgAAAJMBjp+LAJQB3r1oAL8BAgAC AAQDCQAAAD8DAQABABAA8AcgAAAA////AAAAAACAgIAAAAAAALvg4wAzM5kAAJmZAJnMAAAPAIgT kQAAAA8AihOJAAAAAAC6DxAAAABfAF8AXwBQAFAAVAAxADAAAACLE2kAAAAAAOsuCAAAAMalxgEw f5B8AAAAKwQAAAAAAAAAHwBE8T0AAAAAACfxIAAAAAAAAAADAAAAAAAAAAAAAAAAAAAAAACzBf// //8SAAAADwA98Q0AAABAAULxBQAAAAEJAAAADwACKwAAAAAAACIECAAAAAEAAAABAAAAAAAdEAQA AAAAAAAADwDuA7YFAAACAO8DGAAAABAAAAAAAAAAAAAAAAAAAIALAQAABwATMA8ADAQWBQAADwAC 8A4FAAAAAQjwCAAAAAQAAAAEQAAADwAD8LgEAAAPAATwKAAAAAEACfAQAAAAAAAAAAAAAAAAAAAA AAAAAAIACvAIAAAAAEAAAAUAAAAPAATw/gAAABIACvAIAAAAAkAAACACAAADAQvwcAAAAAQAAAAA AH8AAQDvAYAAdLjTBIEAMGUBAIIAmLIAAIMAMGUBAIQAmLIAAIUAAAAAAIcAAQAAAIgAAAAAAL8A BAAEAP8BEAARAAEDAgQAAD8DAAAIAIDDEAAAAL8DAAACAFQAaQB0AGwAZQAgADEAAAAAABDwCAAA AK0AIAFgFX0DDwAR8BwAAAAAAMMLCAAAAP////8NAD0FAAAfBAQAAAACAAAADwAN8DoAAAAAAJ8P BAAAAAAAAAAAAKgPCgAAAE9wZXJhdGlvbnMAAKEPFAAAAAsAAAAAAAAACgAHAAsAAAAAAAAADwAE 8EMBAAASAArwCAAAAANAAAAgAgAAEwEL8JIAAAAEAAAAAAB/AAEA7wGAAKBPPQWBADBlAQCCAJiy AACDADBlAQCEAJiyAACFAAAAAACHAAAAAACIAAAAAAC/AAQABAC/AQEAAQD/ARAAEQABAwMEAAA/ AwAACACAwywAAAC/AwAAAgBDAG8AbgB0AGUAbgB0ACAAUABsAGEAYwBlAGgAbwBsAGQAZQByACAA MgAAAAAAEPAIAAAA8AMgAWAVEw8PABHwHAAAAAAAwwsIAAAA/////xMAPQUAAB8EBAAAAAMAAAAP AA3wXQAAAAAAnw8EAAAAAQAAAAAAqA8ZAAAAQmx1ZSBTaGVldHMNU2NyaWJlDUphYmJlcgAAoQ8U AAAAGgAAAAAAAAAKAAcAGgAAAAAAAAAAAKYPDAAAAPAAAABWXTh/WIB4gQ8ABPAvAgAAogwK8AgA AAAEQAAAAAoAAIMAC/BmAAAAfwABAO8BgACUYD0FvwAEAAQAvwEBABEA/wEQABgAPwMAAAgAgMM2 AAAAvwMAAAIAUwBsAGkAZABlACAATgB1AG0AYgBlAHIAIABQAGwAYQBjAGUAaABvAGwAZABlAHIA IAAzAAAAAAAQ8AgAAABeDyAQYBWKEA8AEfAlAQAAAAAgBAEAAAAIAAAZEBQBAAAAAAAIDAEAAAIA AAAMAQAAAAAAABQAAAAgAAAAAQAAAAEAAAAAAAAAAQAAAOgAAAAIAAAABAAAAAAAAAAAAQAAAQAA AAAAAAABAQAAAQAAAAAAAAACAQAAAQAAAAAAAAADAQAAAQAAAAAAAAAEAQAAAQAAAAAAAAAFAQAA aAAAAGRtYW5gAAAAAgAAAAQAAAADAAAAAQAAAAkEAAAKAAAAQQByAGkAYQBsAAAACAAAAAAAAAAD AAAAAAAAACYAAABNAG8AbgBvAHQAeQBwAGUAIABUAHkAcABvAGcAcgBhAHAAaAB5AAAABgEAAAQA AAAAABgABwEAAAYAAAAAAAAAAAAAAAQAAAAOAAkAEQAAABoAAQAPAA3wbAAAAAAAnw8EAAAABAAA AAAAoA8CAAAAKgAAAKEPHAAAAAIAAAAAACAICgAAAAD/AgAHAAIAAAAAAAIADgAAANgPBAAAAAAA AAAAAKoPCgAAAAIAAAABAAAAAAAAAKYPDAAAAPAAAABWXTh/WIB4gQ8ABPA2AAAAEgAK8AgAAAAB QAAAAAwAAFMAC/AeAAAAkwGOn4sAlAHevWgAvwECAAIABAMJAAAAPwMBAAEAEADwByAAAAD///8A AAAAAICAgAAAAAAAu+DjADMzmQAAmZkAmcwAAA8AiBM4AAAADwCKEzAAAAAAALoPEAAAAF8AXwBf AFAAUABUADEAMAAAAIsTEAAAAAAA6y4IAAAA5APKAUD9xE4AACIECAAAAAEAAAACAAAADwDuAxQR AAACAO8DGAAAABAAAAAAAAAAAAAAAAAAAIAMAQAABwATMA8ADAR0EAAADwAC8GwQAAAQAQjwCAAA AAQAAAAERAAADwAD8BYQAAAPAATwKAAAAAEACfAQAAAAAAAAAAAAAAAAAAAAAAAAAAIACvAIAAAA AEQAAAUAAAAPAATwAwEAABIACvAIAAAAAkQAACACAAADAQvwcAAAAAQAAAAAAH8AAQDvAYAAcGg9 BYEAMGUBAIIAmLIAAIMAMGUBAIQAmLIAAIUAAAAAAIcAAQAAAIgAAAAAAL8ABAAEAP8BEAARAAED AgQAAD8DAAAIAIDDEAAAAL8DAAACAFQAaQB0AGwAZQAgADEAAAAAABDwCAAAAK0AIAFgFX0DDwAR 8BwAAAAAAMMLCAAAAP////8NAD0FAAAfBAQAAAACAAAADwAN8D8AAAAAAJ8PBAAAAAAAAAAAAKgP DwAAAEN1cnJlbnQgQ2hhcnRlcgAAoQ8UAAAAEAAAAAAAAAAKAAcAEAAAAAAAAAAPAATwnAwAABIA CvAIAAAAA0QAACACAAATAQvwkgAAAAQAAAAAAH8AAQDvAYAATG09BYEAMGUBAIIAmLIAAIMAMGUB AIQAmLIAAIUAAAAAAIcAAAAAAIgAAAAAAL8ABAAEAL8BAQABAP8BEAARAAEDAwQAAD8DAAAIAIDD LAAAAL8DAAACAEMAbwBuAHQAZQBuAHQAIABQAGwAYQBjAGUAaABvAGwAZABlAHIAIAAyAAAAEwAi 8TYIAACpgzAIAABQSwMEFAAGAAgAAAAhAAyBhbv+AAAA4gEAABMAAABbQ29udGVudF9UeXBlc10u eG1slFHBTsMwDL0j8Q9RrqhJxwEh1HYHOo6AYHyAlbhtRJtEcSjb3+Nu7ICEhjjafu/5+bla76ZR zJjIBV/LlSqlQG+Cdb6v5dv2obiVgjJ4C2PwWMs9klw3lxfVdh+RBLM91XLIOd5pTWbACUiFiJ4n XUgTZC5TryOYd+hRX5fljTbBZ/S5yIuGbKoWO/gYs9jsuH10wnQp7o+4ZVUtIcbRGchsVC9T3VRP bDw5i+IZUn6EiVHaJtI0QETGqPMqs7dqoiJ0nTOo2kSvC+/qD3EbPn3C+b/aLdNecD6p/3JywpHO 3Ly4/Rls8R2qYuYhFxpcpNMGffhQ8wUAAP//AwBQSwMEFAAGAAgAAAAhADHdX2HSAAAAjwEAAAsA AABfcmVscy8ucmVsc6SQwWrDMAyG74O9g9G9cdpDGaNOb4VeSwe7CltJTGPLWCZt376mMFhGbzvq F/o+8e/2tzCpmbJ4jgbWTQuKomXn42Dg63xYfYCSgtHhxJEM3Elg372/7U40YalHMvokqlKiGBhL SZ9aix0poDScKNZNzzlgqWMedEJ7wYH0pm23Ov9mQLdgqqMzkI9uA+p8T9X8hx28zSzcl8Zy0Nz3 3r6iasfXeKK5UjAPVAy4LM8w09zU50C/9q7/6ZURE31X/kL8TKv1x6wXNXYPAAAA//8DAFBLAwQU AAYACAAAACEAcmc/+MoDAACjEQAAEAAAAGRycy9zaGFwZXhtbC54bWzsWM1u2zgQvi+w70Dwukjt uE5bG5GLxEB2FzAKI0rRY0BLVKw1RWpJyrVz6rPso+2T9BtSspWgh6LtpYV9oIfzQw6/mY+Sffl2 Vym2ldaVRif8/MWQM6kzk5f6IeHv727O3nDmvNC5UEbLhO+l429nv/92WU9dzRCs3bRO+Nr7ejoY uGwtK+FemFpq2ApjK+ExtQ+D2kontRceG1VqMBoOXw0qUWo+w1J6m9ZLS1L2bru0rMwT/pIzLSps OTfaI5Itlcjk2qhcWjbig9Y7BgpkszDZxrUpia9JKbfiI875JBumzZ8WBzqnDQYhny41jcxo03qN /HYJH48m48mr16PJResbHRB0PI7DsUKmfndt8v3sUkxX+MYRI3Tfnidq5nFIYx85+2gFUnb/NsJK ztTf2iV8cj4eo5g+TMYXr0eY2L5l1bfoppobRcdmQmdYNeG+E+ceM0RnpqqFX+i0zsiRzlJb5+92 H4StGYkIkjv/zqRrUcvgILYL5wnJvi9FarTGVeNNUXpWoMBpJhRqPRldDLGVok1uZd5k1C7YbYhP QLnDj9ZQzqd+r+T3Yon8kN73rhIWQWErYRfoXnQHnQSz24Ce2gJeKEqdo5kTftZ5CPWAEyrOclnc iVX62NYOvtbHGCkW+tpuQnkIrKsQshKOqg1G6daMkLXQD+jpZaMzbBKrFNCk9FydLTPPtoIqTZB2 mPY9rmXx3BdkPbhijaPHVeGf+3ZLwq+1rpq5sne7gPKqSR8P4g2Owvy+lgWInfArWwpFRUaNm/la WJZhSPj/n/6LWi9WsZvEFFjdBmZRYxEtxTQOKMCmqcrK/FNG2IFHwqU+e5/iIgO2L3EYzlaxFmFs Eq5xt9E9Z8sNEtEmDRJnG2lRG/hnRLDWi9ofKupgocpH+VeYUjVUSVdksC2tMUWQ89L6fZBc5edK irAiZaw0jdrclEpFjkSNM6rMSUnmcKVKIBjL5nfxZoKh7yWLQma+Q6dZ6BbkhpZp5dApPbz/qPSZ 8hFaKZ4ZpIiGzD0zZI4MgN1G2P2M3bN7fMJAQl+EkvSsMwahVbaOnYkCyTnO+1rGGG2IVqNt42VC 0JwoGxqkT8gDvU+UPVGWLlUi+Zco2ycfkbLHunZ2UJIxmsMXie00CEHGEHX9kQjd6Tsx2g8LBXXP icyty/2J9Kfn9Ok5HSn8Y57TR2q1vDvS7Qu8PPDwSPMDXWGLsdEpTp8S9md4I5MW75f4zfOLvpmh XE9enH6GkvyipYhsifyJnAGDnhKGfsrg5baedv8VQHT17DMAAAD//wMAUEsDBBQABgAIAAAAIQD0 YRjB1gAAAPkAAAAPAAAAZHJzL2Rvd25yZXYueG1sRI/bSsNAFEXfhf7DcAq+2YkVQ4mdFi2oAcFe 4gecZk4uNXMmzIxN+vcOPtjHzd6szVquR9OJMznfWlZwP0tAEJdWt1wr+Cpe7xYgfEDW2FkmBRfy sF5NbpaYaTvwns6HUIsIYZ+hgiaEPpPSlw0Z9DPbE8euss5giNHVUjscItx0cp4kqTTYcnxosKdN Q+X34cco2Pj0pdCLfPs514N8zCtzyvFNqdvp+PwEItAYruOPnS3S4b/8Q+VawQOI6v1ydK3eow/k FES3aBotQa5+AQAA//8DAFBLAQItABQABgAIAAAAIQAMgYW7/gAAAOIBAAATAAAAAAAAAAAAAAAA AAAAAABbQ29udGVudF9UeXBlc10ueG1sUEsBAi0AFAAGAAgAAAAhADHdX2HSAAAAjwEAAAsAAAAA AAAAAAAAAAAALwEAAF9yZWxzLy5yZWxzUEsBAi0AFAAGAAgAAAAhAHJnP/jKAwAAoxEAABAAAAAA AAAAAAAAAAAAKgIAAGRycy9zaGFwZXhtbC54bWxQSwECLQAUAAYACAAAACEA9GEYwdYAAAD5AAAA DwAAAAAAAAAAAAAAAAAiBgAAZHJzL2Rvd25yZXYueG1sUEsFBgAAAAAEAAQA9QAAACUHAAAAAAAA EPAIAAAA8AMgAWAVEw8PABHwHAAAAAAAwwsIAAAA/////xMAPQUAAB8EBAAAAAMAAAAPAA3weAMA AAAAnw8EAAAAAQAAAAAAoA8OAwAAVwBlACAAdwBlAHIAZQAgAG8AcgBpAGcAaQBuAGEAbABsAHkA IABjAGgAYQByAHQAZQByAGUAZAAgAGkAbgAgAHQAaABlACAAUwBlAGMAdQByAGkAdAB5ACAAQQBy AGUAYQAgAHQAbwAgAHMAZQBjAHUAcgBlACAAdABoAGUAIAB0AHIAYQBuAHMAbQBpAHMAcwBpAG8A bgAgAG8AZgAgAGUAdgBlAG4AdAAgAGkAbgBmAG8AcgBtAGEAdABpAG8AbgAuACAAIAANAEEAbABv AG4AZwAgAHQAaABlACAAcABhAHQAaAAsACAAdwBlACAAZgBvAHUAbgBkACAAdABoAGEAdAAgAHcA ZQAgAGgAYQBkACAAdABvACAAcAByAG8AdgBpAGQAZQAgAGEAIABmAG8AcgBtAGEAdAAgAGYAbwBy ACAAdABoAGUAIABtAGUAcwBzAGEAZwBlAHMAIABzAG8AIAB0AGgAYQB0ACAAdwBlACAAYwBvAHUA bABkACAAYQBwAHAAbAB5ACAAYQBwAHAAcgBvAHAAcgBpAGEAdABlACAAbQBlAGMAaABhAG4AaQBz AG0AcwAgAHQAbwAgAHMAZQBjAHUAcgBlACAAdABoAGUAIABpAG4AZgBvAHIAbQBhAHQAaQBvAG4A IABhAGcAYQBpAG4AcwB0ACAAdABoAGUAIAB0AGgAcgBlAGEAdABzAC4ADQBPAHUAcgAgAGMAdQBy AHIAZQBuAHQAIABjAGgAYQByAHQAZQByACAAaABhAHMAIABuAGUAdgBlAHIAIABjAGEAbABsAGUA ZAAgAGYAbwByACAAbQBlAHMAcwBhAGcAZQAgAGMAbwBuAHQAZQBuAHQAIAB0AG8AIABiAGUAIABz AHQAYQBuAGQAYQByAGQAaQB6AGUAZAAgACgAcwBvACAAZABvAG4AGSB0ACAAYgByAGkAbgBnACAA aQB0ACAAdQBwACAAdwByAHQAIABvAHUAcgAgAGMAdQByAHIAZQBuAHQAIABjAGgAYQByAHQAZQBy ACkALgAAAKEPGAAAAIgBAAAAAAAQCgBaAAcAiAEAAAAAAgAeAAAAqg8aAAAAbgEAAAAAAAADAAAA AQAAAAEAFwAAAAAAAAAAAKYPDAAAAPAAAABWXTh/WIB4gQ8ABPAvAgAAogwK8AgAAAAERAAAAAoA AIMAC/BmAAAAfwABAO8BgADsez0FvwAEAAQAvwEBABEA/wEQABgAPwMAAAgAgMM2AAAAvwMAAAIA UwBsAGkAZABlACAATgB1AG0AYgBlAHIAIABQAGwAYQBjAGUAaABvAGwAZABlAHIAIAAzAAAAAAAQ 8AgAAABeDyAQYBWKEA8AEfAlAQAAAAAgBAEAAAAIAAAZEBQBAAAAAAAIDAEAAAIAAAAMAQAAAAAA ABQAAAAgAAAAAQAAAAEAAAAAAAAAAQAAAOgAAAAIAAAABAAAAAAAAAAAAQAAAQAAAAAAAAABAQAA AQAAAAAAAAACAQAAAQAAAAAAAAADAQAAAQAAAAAAAAAEAQAAAQAAAAAAAAAFAQAAaAAAAGRtYW5g AAAAAgAAAAQAAAADAAAAAQAAAAkEAAAKAAAAQQByAGkAYQBsAAAACAAAAAAAAAADAAAAAAAAACYA AABNAG8AbgBvAHQAeQBwAGUAIABUAHkAcABvAGcAcgBhAHAAaAB5AAAABgEAAAQAAAAAABgABwEA AAYAAAAAAAAAAAAAAAQAAAAOAAkAEQAAABoAAQAPAA3wbAAAAAAAnw8EAAAABAAAAAAAoA8CAAAA KgAAAKEPHAAAAAIAAAAAACAICgAAAAD/AgAHAAIAAAAAAAIADgAAANgPBAAAAAAAAAAAAKoPCgAA AAIAAAABAAAAAAAAAKYPDAAAAPAAAABWXTh/WIB4gQ8ABPA2AAAAEgAK8AgAAAABRAAAAAwAAFMA C/AeAAAAkwGOn4sAlAHevWgAvwECAAIABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAA AAAAu+DjADMzmQAAmZkAmcwAAA8AiBM4AAAADwCKEzAAAAAAALoPEAAAAF8AXwBfAFAAUABUADEA MAAAAIsTEAAAAAAA6y4IAAAA4QPKAU+sXp4AACIECAAAAAEAAAACAAAADwDuA+wTAAACAO8DGAAA ABAAAAAAAAAAAAAAAAAAAIABAQAABwATMA8ADATnEgAADwAC8N8SAAAgAQjwCAAAAAQAAAAESAAA DwAD8IkSAAAPAATwKAAAAAEACfAQAAAAAAAAAAAAAAAAAAAAAAAAAAIACvAIAAAAAEgAAAUAAAAP AATwTwMAAKIMCvAIAAAAAkgAAAAKAACDAAvwZgAAAH8AAQDvAYAAxIk9Bb8ABAAEAL8BAQARAP8B EAAYAD8DAAAIAIDDNgAAAL8DAAACAFMAbABpAGQAZQAgAE4AdQBtAGIAZQByACAAUABsAGEAYwBl AGgAbwBsAGQAZQByACAANQAAAAAAEPAIAAAAXg8gEGAVihAPABHwOQIAAAAAIAQBAAAACAAAGRAo AgAAAAAACAwBAAACAAAADAEAAAAAAAAUAAAAIAAAAAEAAAABAAAAAAAAAAEAAADoAAAACAAAAAQA AAAAAAAAAAEAAAEAAAAAAAAAAQEAAAEAAAAAAAAAAgEAAAEAAAAAAAAAAwEAAAEAAAAAAAAABAEA AAEAAAAAAAAABQEAAGgAAABkbWFuYAAAAAIAAAAEAAAAAwAAAAEAAAAJBAAACgAAAEEAcgBpAGEA bAAAAAgAAAAAAAAAAwAAAAAAAAAmAAAATQBvAG4AbwB0AHkAcABlACAAVAB5AHAAbwBnAHIAYQBw AGgAeQAAAAYBAAAEAAAAAAAYAAcBAAAGAAAAAAAAAAAAAAAEAAAADgAJABEAAAAaAAEAAAAACAwB AAACAAAADAEAAAAAAAAUAAAAIAAAAAEAAAABAAAAAAAAAAEAAADoAAAACAAAAAQAAAAAAAAAAAEA AAEAAAAAAAAAAQEAAAEAAAAAAAAAAgEAAAEAAAAAAAAAAwEAAAEAAAAAAAAABAEAAAEAAAAAAAAA BQEAAGgAAABkbWFuYAAAAAIAAAAEAAAAAwAAAAEAAAAJBAAACgAAAEEAcgBpAGEAbAAAAAgAAAAA AAAAAwAAAAAAAAAmAAAATQBvAG4AbwB0AHkAcABlACAAVAB5AHAAbwBnAHIAYQBwAGgAeQAAAAYB AAAEAAAAAAAYAAcBAAAGAAAAAAAAAAAAAAAEAAAADgAJABEAAAAaAAEADwAN8HgAAAAAAJ8PBAAA AAQAAAAAAKAPAgAAACoAAAChDygAAAACAAAAAAAgCAoAAAAA/wIABwABAAAAAAACAA4AAQAAAAAE AgAABA4AAADYDwQAAAAAAAAAAACqDwoAAAACAAAAAQAAAAAAAACmDwwAAADwAAAAVl04f1iAeIEP AATwGwEAABIACvAIAAAAA0gAACACAAADAQvweAAAAAQAAAAAAH8AAQDvAYAAvJk9BYEAMGUBAIIA mLIAAIMAMGUBAIQAmLIAAIUAAAAAAIcAAQAAAIgAAAAAAL8ABAAEAP8BAAARAAEDAgQAAD8DAAAI AIDDGAAAAL8DAAACAFIAZQBjAHQAYQBuAGcAbABlACAAMgAAAAAAEPAIAAAArQAgAWAVfQMPABHw HAAAAAAAwwsIAAAA/////w0APQUAAB8EBAAAAAIAAAAPAA3wTwAAAAAAnw8EAAAAAAAAAAAAqA8N AAAAU3RhdHVzIElFVEY3NQAAoQ8UAAAADgAAAAAAAAAKAAcADgAAAAAAAAAAAKoPCgAAAA4AAAAB AAAAAAAPAATw1w0AABIACvAIAAAABEgAACACAAADAQvweAAAAAQAAAAAAH8AAQDvAYAArLQ9BYEA MGUBAIIAmLIAAIMAMGUBAIQAmLIAAIUAAAAAAIcAAAAAAIgAAAAAAL8ABAAEAP8BAAARAAEDAwQA AD8DAAAIAIDDGAAAAL8DAAACAFIAZQBjAHQAYQBuAGcAbABlACAAMwAAABMAIvFtCwAAqYNnCwAA UEsDBBQABgAIAAAAIQAMgYW7/gAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJRRwU7DMAy9 I/EPUa6oSccBIdR2BzqOgGB8gJW4bUSbRHEo29/jbuyAhIY42n7v+fm5Wu+mUcyYyAVfy5UqpUBv gnW+r+Xb9qG4lYIyeAtj8FjLPZJcN5cX1XYfkQSzPdVyyDneaU1mwAlIhYieJ11IE2QuU68jmHfo UV+X5Y02wWf0uciLhmyqFjv4GLPY7Lh9dMJ0Ke6PuGVVLSHG0RnIbFQvU91UT2w8OYviGVJ+hIlR 2ibSNEBExqjzKrO3aqIidJ0zqNpErwvv6g9xGz59wvm/2i3TXnA+qf9ycsKRzty8uP0ZbPEdqmLm IRcaXKTTBn34UPMFAAD//wMAUEsDBBQABgAIAAAAIQAx3V9h0gAAAI8BAAALAAAAX3JlbHMvLnJl bHOkkMFqwzAMhu+DvYPRvXHaQxmjTm+FXksHuwpbSUxjy1gmbd++pjBYRm876hf6PvHv9rcwqZmy eI4G1k0LiqJl5+Ng4Ot8WH2AkoLR4cSRDNxJYN+9v+1ONGGpRzL6JKpSohgYS0mfWosdKaA0nCjW Tc85YKljHnRCe8GB9KZttzr/ZkC3YKqjM5CPbgPqfE/V/IcdvM0s3JfGctDc996+omrH13iiuVIw D1QMuCzPMNPc1OdAv/au/+mVERN9V/5C/Eyr9cesFzV2DwAAAP//AwBQSwMEFAAGAAgAAAAhAGFq xsj9BgAAYTQAABAAAABkcnMvc2hhcGV4bWwueG1s7FrdTiM3FL6v1HewfFuxIeEnEDGsAIm2UrSK CKterpwZh0zxeKa2Jxu4WrGP0DfofdVKrdQbnqY8AK/Q73hmQkK3gkK2EDq5GPxzbJ9zvnOOj212 Xk8SxcbS2DjVAW++WuVM6jCNYn0S8LfHhytbnFkndCRUqmXAz6Tlr3e//GIn69iMYbC2nSzgI+ey TqNhw5FMhH2VZlKjb5iaRDhUzUkjM9JK7YTDQolqtFZXNxuJiDXfxVR63M96hkrhm3HPsDgKeLu9 1WpzpkWCZY9kCCZOlGRrvFHSFUME+Oim4aktmRH3YSYy4j0knOOD6fRrA1GaWDM9GGE1uWdM+n4k RWSpGes2PIMVrxqsEi/ZiLmzDFwO0uiMg/lJwNdb2+vbm+3W9kY5riDGBDeyWsjshXGTfYzc3REd mgHyF3p9uCgA1EEPqTnn7L0RkMr+kAsjOVPfagiz3VxfB9LOV9Y32i1UzGzPYLZH58lBqrxmhA4x a8AdZ0XxwKGG0WGaZMJ1dT8LiZBkyYx1x5PvhMkYFTFITtybtD8SmfQEYty1jrQ6S0sjNexmL3fp MHZM0ZRHMspDshzMvYqf12mlLRqhrOu7M5jHIzUHbsDMY2fxkwDGRJhuwNdgC2CZakdeV2oMZaIh 1hE8IuArFYVQJ5BQcRbJ4bEY9M9LpAgdV4yRoqv3zakHY5hqt+eHDIQlbOFcuuzGEDJhGHkv1yEW KTDx2iT2bBb2QsfGgnAllVY6naXYl8PbtPDbKSnmuKHYG7rbtNWUoCt7B/mBMscTr+VB3j+fFg8h ineioQjhSHsmFopABsY5fNGwEJ+A//nhp6LViUFhO6IDXR15PyIzIocUneIDAE7zJE7S7+NC7dBH wKVeedtHTINu1yAMZ4MCC//NA64R5ijkmfgUjOi070ucnUoDbEAfkjuVVGTsaCJ7FSo+l9/4KqGh YoqWvq9n0nToy1Fs3Jkv2cQdKCn8jMSx0vTV6WGsVOERRYtNVRxRI3X76CqhwQI2NyliEjpmqeRw iGBZaSfv6lLJOU1Tlr2lzOj7q0SvKFeoVopbHVIUHaG91RFa6oDaTaF2t8sYVWEI1LgcSEgDu0LM f7GIsHdLh8lLxWLZgHhJkeld+XsgBptPtVW8JAzmdE/bNQm34GyrjWxrA/vufLaFAD/NtlpbG22i +H9nW9PUay69+nGB6VVrq/YZn8LOZVTXlz9fX/7Gri9/vbr4/erij6uPH68ufuEsi104OhRJrJAh rjSbLWSayHmtpANCs7X191SL4fepoFY7FjTwdMeY2rGe5qiyUMea26mqs8ydB8qni3hLc3xZKEqf zOnq8FeHv890bfOcc/GFOlYd/m5u3RZ6n7ZQlOrw9/wusevs7wVkf3SyKo9W1V/ytVtRUeqoJ4zA 48Md7wx1WpjJ4l3nH98ZHhkXb6AoXhM/w71S9UY3f6+Ea6TpvVJFUd8rIQTUz3ZL9WxXXSQh3C3d E95zzsop4P2r99PpzvPQzaZ+1L5zs7kfKP/BnlK/VdzvP0OeT1L9FwAAAP//7FbBbtswDP0VQdch c2yka2rUAZoAwQ45GE13LmhbTrTIsiHLXZLTkH7CvmPYgA3YJV+zfEB+YZTsuE133YBuqQ4yKVIM JeY9kS8YJQumZEC7lMRQBFTmEtfKIrZLMlcZCL5mb60aQckEl6yxhSrPUysnXOmVlcpMjwQDG3Fw Cb6QZpb5mAvhDC6dw0qZC56YRWMu4znL2EgocgcioHrp0tr3yIulKYv1pNRoA7+ayJtlLZkwjSxA c0n0qmApxJjnq0x2hDbRwGfwyLDfft5vv5H99utu8323+bG7v99tvlBScB3Px5BxgefpuK6H9zIH VTJtVK/fJKZCZULqwa0ZxJxL29PZ5XoKFVlUGc/y99xejQA5CyiTnXdTvOF1QL1+F689ssbapWoL oBUWx2hTK/3pMjGlAupiGidYLmJrdms/TwrHZBKCguvnXLoTKdlDKSyuCgO3giwzIUsfAjrXuvAd xzIHlK/zgkm0pYavNKpq5iQKPnA5y4TjdbtvnAy4pDYIFjcDNQnoec+7OEMEonZdI/QO2QdRwWXC pAG81z87Nx4gZshogpKEpTcQTRG8F26vZ+CrNO7BL4OJHKqF3Z/mUl/ZLYYxKbGs1JjRdY5EgJmF lYzxR1yblZDTIjbpIfWGsa6J0O2a0VDOY48hS5/64iFbV4zx4HGVIjMdxz2ERL/GGlXIvg2HRtV0 3YpjPEqrjJAJLR0G9OfHTzWraogOlIyXg8ipmbuoCfL5M+GJwKl9sMi/91qZv+//3kcQHPW79Fs/ gb3FC/u9sN/f6ANPAlkGVgZeOKxkpnYJhWYctYI15pzC18thnqywBSnwZR78AgAA//8DAFBLAwQU AAYACAAAACEA9G905NoAAAD9AAAADwAAAGRycy9kb3ducmV2LnhtbESPUU/CMBSF3038D8018U06 MdoxKYSARsFIAuMHXNfLNl3bpa2s/HsbH/Tx5Jx8J990HnXHTuR8a42E21EGjExlVWtqCYfy+SYH 5gMahZ01JOFMHuazy4spFsoOZkenfahZghhfoIQmhL7g3FcNafQj25NJ3dE6jSFFV3PlcEhw3fFx lj1wja1JDw32tGyo+tp/awm92DytV4v7vFyW9m5Tf4rot29SXl/FxSOwQDH8jw/vqyFO/spf1KuS IEQ+FsCOL+cP16od+kBOQvJLtskU+OwHAAD//wMAUEsBAi0AFAAGAAgAAAAhAAyBhbv+AAAA4gEA ABMAAAAAAAAAAAAAAAAAAAAAAFtDb250ZW50X1R5cGVzXS54bWxQSwECLQAUAAYACAAAACEAMd1f YdIAAACPAQAACwAAAAAAAAAAAAAAAAAvAQAAX3JlbHMvLnJlbHNQSwECLQAUAAYACAAAACEAYWrG yP0GAABhNAAAEAAAAAAAAAAAAAAAAAAqAgAAZHJzL3NoYXBleG1sLnhtbFBLAQItABQABgAIAAAA IQD0b3Tk2gAAAP0AAAAPAAAAAAAAAAAAAAAAAFUJAABkcnMvZG93bnJldi54bWxQSwUGAAAAAAQA BAD1AAAAXAoAAAAAAAAQ8AgAAADwAyABYBUTDw8AEfAcAAAAAADDCwgAAAD/////DgA9BQAAHwQE AAAAAwAAAA8ADfCWAQAAAACfDwQAAAABAAAAAACoD84AAAA0IFJGQ3MgUHVibGlzaGVkIA01NDI0 IFByb3RvY29sDTU0MjUgVExTIFRyYW5zcG9ydA01NDI2IFVEUCBUcmFuc3BvcnQNNTQyNyBNSUIg VGV4dHVhbCBDb252ZW50aW9ucw0xIERvY3VtZW50IEluIElFU0cgUmV2aWV3DWRyYWZ0LWlldGYt c3lzbG9nLXNpZ24NSW4gQUQgRXZhbHVhdGlvbiANTmVlZHMgSUVURiBMYXN0IENhbGwgYW5kIElF U0cgZXZhbHVhdGlvbgAAoQ9mAAAAEgAAAAAAABAKAFoABwBRAAAAAQAAEAoAWgAHABoAAAAAAAAQ CgBaAAcAUgAAAAEAABAKAFoABwAQAAAAAAAAAAIAAAAAAAIAJABRAAAAAAAAABoAAAAABAAAAARS AAAAAAgAAAAIAACqDywAAAACAAAAAAAAAAQAAAABAAAAAQB9AAAAAAAAABAAAAABAAAAAQA8AAAA AAAAAAAApg8KAAAA4AAAADh/WIB4gQ8ABPA2AAAAEgAK8AgAAAABSAAAAAwAAFMAC/AeAAAAkwGO n4sAlAHevWgAvwECAAIABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAu+DjADMz mQAAmZkAmcwAAA8AiBORAAAADwCKE4kAAAAAALoPEAAAAF8AXwBfAFAAUABUADEAMAAAAIsTaQAA AAAA6y4IAAAA+fzGAaBb3kMAAAArBAAAAAAAAAAfAETxPQAAAAAAJ/EgAAAAAAAAAAMAAAAAAAAA AAAAAAAAAAAAALMF/////xIAAAAPAD3xDQAAAEABQvEFAAAAAQkAAAAPAAIrAAAAAAAAIgQIAAAA AQAAAAIAAAAAAB0QBAAAAAAAAAAPAO4DaAgAAAIA7wMYAAAAEAAAAAAAAAAAAAAAAAAAgAIBAAAH ABMwDwAMBGMHAAAPAALwWwcAAEABCPAIAAAABAAAAARQAAAPAAPwBQcAAA8ABPAoAAAAAQAJ8BAA AAAAAAAAAAAAAAAAAAAAAAAAAgAK8AgAAAAAUAAABQAAAA8ABPBPAwAAogwK8AgAAAACUAAAAAoA AIMAC/BmAAAAfwABAO8BgAB43T0FvwAEAAQAvwEBABEA/wEQABgAPwMAAAgAgMM2AAAAvwMAAAIA UwBsAGkAZABlACAATgB1AG0AYgBlAHIAIABQAGwAYQBjAGUAaABvAGwAZABlAHIAIAA1AAAAAAAQ 8AgAAABeDyAQYBWKEA8AEfA5AgAAAAAgBAEAAAAIAAAZECgCAAAAAAAIDAEAAAIAAAAMAQAAAAAA ABQAAAAgAAAAAQAAAAEAAAAAAAAAAQAAAOgAAAAIAAAABAAAAAAAAAAAAQAAAQAAAAAAAAABAQAA AQAAAAAAAAACAQAAAQAAAAAAAAADAQAAAQAAAAAAAAAEAQAAAQAAAAAAAAAFAQAAaAAAAGRtYW5g AAAAAgAAAAQAAAADAAAAAQAAAAkEAAAKAAAAQQByAGkAYQBsAAAACAAAAAAAAAADAAAAAAAAACYA AABNAG8AbgBvAHQAeQBwAGUAIABUAHkAcABvAGcAcgBhAHAAaAB5AAAABgEAAAQAAAAAABgABwEA AAYAAAAAAAAAAAAAAAQAAAAOAAkAEQAAABoAAQAAAAAIDAEAAAIAAAAMAQAAAAAAABQAAAAgAAAA AQAAAAEAAAAAAAAAAQAAAOgAAAAIAAAABAAAAAAAAAAAAQAAAQAAAAAAAAABAQAAAQAAAAAAAAAC AQAAAQAAAAAAAAADAQAAAQAAAAAAAAAEAQAAAQAAAAAAAAAFAQAAaAAAAGRtYW5gAAAAAgAAAAQA AAADAAAAAQAAAAkEAAAKAAAAQQByAGkAYQBsAAAACAAAAAAAAAADAAAAAAAAACYAAABNAG8AbgBv AHQAeQBwAGUAIABUAHkAcABvAGcAcgBhAHAAaAB5AAAABgEAAAQAAAAAABgABwEAAAYAAAAAAAAA AAAAAAQAAAAOAAkAEQAAABoAAQAPAA3weAAAAAAAnw8EAAAABAAAAAAAoA8CAAAAKgAAAKEPKAAA AAIAAAAAACAICgAAAAD/AgAHAAEAAAAAAAIADgABAAAAAAQCAAAEDgAAANgPBAAAAAAAAAAAAKoP CgAAAAIAAAABAAAAAAAAAKYPDAAAAPAAAABWXTh/WIB4gQ8ABPAZAQAAEgAK8AgAAAADUAAAIAIA AAMBC/B4AAAABAAAAAAAfwABAO8BgACI5j0FgQAwZQEAggCYsgAAgwAwZQEAhACYsgAAhQAAAAAA hwABAAAAiAAAAAAAvwAEAAQA/wEAABEAAQMCBAAAPwMAAAgAgMMYAAAAvwMAAAIAUgBlAGMAdABh AG4AZwBsAGUAIAAyAAAAAAAQ8AgAAACtACABYBV9Aw8AEfAcAAAAAADDCwgAAAD/////DQA9BQAA HwQEAAAAAgAAAA8ADfBNAAAAAACfDwQAAAAAAAAAAACoDwsAAABTeXNsb2cgU2lnbgAAoQ8UAAAA DAAAAAAAAAAKAAcADAAAAAAAAAAAAKoPCgAAAAwAAAABAAAAAAAPAATwVQIAABIACvAIAAAABFAA ACACAAADAQvweAAAAAQAAAAAAH8AAQDvAYAAOO89BYEAMGUBAIIAmLIAAIMAMGUBAIQAmLIAAIUA AAAAAIcAAAAAAIgAAAAAAL8ABAAEAP8BAAARAAEDAwQAAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBj AHQAYQBuAGcAbABlACAAMwAAAAAAEPAIAAAA8AMgAWAVEw8PABHwHAAAAAAAwwsIAAAA/////w4A PQUAAB8EBAAAAAMAAAAPAA3wiQEAAAAAnw8EAAAAAQAAAAAAqA/vAAAATW9zdCBvZiB0aGUgb3Bl biB0ZWNobmljYWwgaXNzdWVzIGZyb20gdGhlIEFEIFJldmlldyBoYXZlIGJlZW4gY2xvc2VkLg1X YWl0aW5nIGZvciBQYXNpIGFwcHJvdmFsIG9mIHRoZSBsYXRlc3QgY2hhbmdlcywgZm91bmQgaW4g c3lzbG9nLXNpZ24tMjYuDU90aGVyIGlzc3VlcyB3aWxsIG5lZWQgdG8gYmUgYWRkcmVzc2VkIGR1 cmluZyB0aGUgSUVTRyBhcHByb3ZhbCBwcm9jZXNzLCBhbmQgSUVURiBMYXN0IENhbGwuDQ0AAKEP SAAAAO4AAAAAAAAACgAHAAEAAAAAAAEACgAAAAcAAQAAAAAAAAAKAAcABAAAAAAAAgAcAA0AAAAA BAIAAAQcAN8AAAAACAIAAAgcAAAAqg8aAAAAUwAAAAAAAAAEAAAAAQAAAAEAmQAAAAAAAAAAAKYP DAAAAPAAAABWXTh/WIB4gQ8ABPA2AAAAEgAK8AgAAAABUAAAAAwAAFMAC/AeAAAAkwGOn4sAlAHe vWgAvwECAAIABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAu+DjADMzmQAAmZkA mcwAAA8AiBORAAAADwCKE4kAAAAAALoPEAAAAF8AXwBfAFAAUABUADEAMAAAAIsTaQAAAAAA6y4I AAAAI8PHAYD8baEAAAArBAAAAAAAAAAfAETxPQAAAAAAJ/EgAAAAAAAAAAMAAAAAAAAAAAAAAAAA AAAAALMF/////xIAAAAPAD3xDQAAAEABQvEFAAAAAQkAAAAPAAIrAAAAAAAAIgQIAAAAAQAAAAIA AAAAAB0QBAAAAAAAAAAPAO4DQQoAAAIA7wMYAAAAEAAAAAAAAAAAAAAAAAAAgAMBAAAHABMwDwAM BDwJAAAPAALwNAkAAGABCPAIAAAABAAAAARYAAAPAAPw3ggAAA8ABPAoAAAAAQAJ8BAAAAAAAAAA AAAAAAAAAAAAAAAAAgAK8AgAAAAAWAAABQAAAA8ABPBPAwAAogwK8AgAAAACWAAAAAoAAIMAC/Bm AAAAfwABAO8BgAD0I0AFvwAEAAQAvwEBABEA/wEQABgAPwMAAAgAgMM2AAAAvwMAAAIAUwBsAGkA ZABlACAATgB1AG0AYgBlAHIAIABQAGwAYQBjAGUAaABvAGwAZABlAHIAIAA1AAAAAAAQ8AgAAABe DyAQYBWKEA8AEfA5AgAAAAAgBAEAAAAIAAAZECgCAAAAAAAIDAEAAAIAAAAMAQAAAAAAABQAAAAg AAAAAQAAAAEAAAAAAAAAAQAAAOgAAAAIAAAABAAAAAAAAAAAAQAAAQAAAAAAAAABAQAAAQAAAAAA AAACAQAAAQAAAAAAAAADAQAAAQAAAAAAAAAEAQAAAQAAAAAAAAAFAQAAaAAAAGRtYW5gAAAAAgAA AAQAAAADAAAAAQAAAAkEAAAKAAAAQQByAGkAYQBsAAAACAAAAAAAAAADAAAAAAAAACYAAABNAG8A bgBvAHQAeQBwAGUAIABUAHkAcABvAGcAcgBhAHAAaAB5AAAABgEAAAQAAAAAABgABwEAAAYAAAAA AAAAAAAAAAQAAAAOAAkAEQAAABoAAQAAAAAIDAEAAAIAAAAMAQAAAAAAABQAAAAgAAAAAQAAAAEA AAAAAAAAAQAAAOgAAAAIAAAABAAAAAAAAAAAAQAAAQAAAAAAAAABAQAAAQAAAAAAAAACAQAAAQAA AAAAAAADAQAAAQAAAAAAAAAEAQAAAQAAAAAAAAAFAQAAaAAAAGRtYW5gAAAAAgAAAAQAAAADAAAA AQAAAAkEAAAKAAAAQQByAGkAYQBsAAAACAAAAAAAAAADAAAAAAAAACYAAABNAG8AbgBvAHQAeQBw AGUAIABUAHkAcABvAGcAcgBhAHAAaAB5AAAABgEAAAQAAAAAABgABwEAAAYAAAAAAAAAAAAAAAQA AAAOAAkAEQAAABoAAQAPAA3weAAAAAAAnw8EAAAABAAAAAAAoA8CAAAAKgAAAKEPKAAAAAIAAAAA ACAICgAAAAD/AgAHAAEAAAAAAAIADgABAAAAAAQCAAAEDgAAANgPBAAAAAAAAAAAAKoPCgAAAAIA AAABAAAAAAAAAKYPDAAAAPAAAABWXTh/WIB4gQ8ABPAdAQAAEgAK8AgAAAADWAAAIAIAAAMBC/B4 AAAABAAAAAAAfwABAO8BgADgJ0AFgQAwZQEAggCYsgAAgwAwZQEAhACYsgAAhQAAAAAAhwABAAAA iAAAAAAAvwAEAAQA/wEAABEAAQMCBAAAPwMAAAgAgMMYAAAAvwMAAAIAUgBlAGMAdABhAG4AZwBs AGUAIAAyAAAAAAAQ8AgAAACtACABYBV9Aw8AEfAcAAAAAADDCwgAAAD/////DQBABQAAHwQEAAAA AgAAAA8ADfBRAAAAAACfDwQAAAAAAAAAAACoDw0AAABSZS1DaGFydGVyaW5nAAChDygAAAAOAAAA AAAAAAoABwADAAAAAAAAAAoAAAAABAAAAAQBAAAAAAgAAAAIDwAE8CoEAAASAArwCAAAAARYAAAg AgAAAwEL8HgAAAAEAAAAAAB/AAEA7wGAAEA7QAWBADBlAQCCAJiyAACDADBlAQCEAJiyAACFAAAA AACHAAAAAACIAAAAAAC/AAQABAD/AQAAEQABAwMEAAA/AwAACACAwxgAAAC/AwAAAgBSAGUAYwB0 AGEAbgBnAGwAZQAgADMAAAAAABDwCAAAAPADIAFgFRMPDwAR8BwAAAAAAMMLCAAAAP////8OAEAF AAAfBAQAAAADAAAADwAN8F4DAAAAAJ8PBAAAAAEAAAAAAKAPzgIAAFQAaAByAGUAZQAgAG8AcAB0 AGkAbwBuAHMADQBSAGUALQBjAGgAYQByAHQAZQByACAAaQBuACAAdABoAGUAIABTAGUAYwB1AHIA aQB0AHkAIABBAHIAZQBhACAAEyAgAGkAZgAgAHQAaABlACAAUwBlAGMAdQByAGkAdAB5ACAAQQBE AHMAIABmAGUAZQBsACAAdABoAGEAdAAgAHcAZQAgAGgAYQB2AGUAIABzAHUAZgBmAGkAYwBpAGUA bgB0ACAAdwBvAHIAawAgAHQAbwAgAGEAYwBjAG8AbQBwAGwAaQBzAGgAIABhAG4AZAAgAHMAdQBm AGYAaQBjAGkAZQBuAHQAIABjAG8AbQBtAGkAdABtAGUAbgB0ACAAdABvACAAZABvACAAdABoAGUA IAB3AG8AcgBrAC4ADQBSAGUALQBjAGgAYQByAHQAZQByACAAaQBuACAAdABoAGUAIABPAHAAcwAg AEEAcgBlAGEAIAATICAAaQBmACAAdABoAGUAIABPAHAAcwAgAEEARABzACAAZgBlAGUAbAAgAHQA aABlACAAcwBhAG0AZQAuAA0AUwBoAHUAdAAgAGQAbwB3AG4AIAB0AGgAZQAgAFcAbwByAGsAaQBu AGcAIABHAHIAbwB1AHAAIAATICAAaQBmACAAdwBlACAAYwBhAG4AGSB0ACAAYwBvAG0AZQAgAHQA bwAgAGMAbwBuAHMAZQBuAHMAdQBzACAAbwBuACAAYQAgAG4AZQB3ACAAYwBoAGEAcgB0AGUAcgAg AGEAbgBkAC8AbwByACAAaQBmACAAdwBlACAAZABvAG4AGSB0ACAAaABhAHYAZQAgAGUAbgBvAHUA ZwBoACAAYwBvAG0AbQBpAHQAbQBlAG4AdAAgACAAWwB0AGgAaQBzACAAaQBzACAAdABoAGUAIABk AGUAZgBhAHUAbAB0AF0ALgAAAKEPLgAAAA4AAAAAAAAACgAHAFoBAAABAAAACgAHAA4AAAAAAAIA HABaAQAAAAQCAAAEGAAAAKoPLAAAAEAAAAAAAAAAAwAAAAEAAAABAIMAAAAAAAAAAwAAAAEAAAAB AJ8AAAAAAAAAAACmDwoAAADgAAAAOH9YgHiBDwAE8DYAAAASAArwCAAAAAFYAAAADAAAUwAL8B4A AACTAY6fiwCUAd69aAC/AQIAAgAEAwkAAAA/AwEAAQAQAPAHIAAAAP///wAAAAAAgICAAAAAAAC7 4OMAMzOZAACZmQCZzAAADwCIE5EAAAAPAIoTiQAAAAAAug8QAAAAXwBfAF8AUABQAFQAMQAwAAAA ixNpAAAAAADrLggAAAAjw8cBgPxtoQAAACsEAAAAAAAAAB8ARPE9AAAAAAAn8SAAAAAAAAAAAwAA AAAAAAAAAAAAAAAAAAAAswX/////EgAAAA8APfENAAAAQAFC8QUAAAABCQAAAA8AAisAAAAAAAAi BAgAAAABAAAAAgAAAAAAHRAEAAAAAAAAAA8A7gM+CAAAAgDvAxgAAAAQAAAAAAAAAAAAAAAAAACA BAEAAAcAEzAPAAwEOQcAAA8AAvAxBwAAgAEI8AgAAAAEAAAABGAAAA8AA/DbBgAADwAE8CgAAAAB AAnwEAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAAAABgAAAFAAAADwAE8E8DAACiDArwCAAAAAJg AAAACgAAgwAL8GYAAAB/AAEA7wGAADxnQAW/AAQABAC/AQEAEQD/ARAAGAA/AwAACACAwzYAAAC/ AwAAAgBTAGwAaQBkAGUAIABOAHUAbQBiAGUAcgAgAFAAbABhAGMAZQBoAG8AbABkAGUAcgAgADUA AAAAABDwCAAAAF4PIBBgFYoQDwAR8DkCAAAAACAEAQAAAAgAABkQKAIAAAAAAAgMAQAAAgAAAAwB AAAAAAAAFAAAACAAAAABAAAAAQAAAAAAAAABAAAA6AAAAAgAAAAEAAAAAAAAAAABAAABAAAAAAAA AAEBAAABAAAAAAAAAAIBAAABAAAAAAAAAAMBAAABAAAAAAAAAAQBAAABAAAAAAAAAAUBAABoAAAA ZG1hbmAAAAACAAAABAAAAAMAAAABAAAACQQAAAoAAABBAHIAaQBhAGwAAAAIAAAAAAAAAAMAAAAA AAAAJgAAAE0AbwBuAG8AdAB5AHAAZQAgAFQAeQBwAG8AZwByAGEAcABoAHkAAAAGAQAABAAAAAAA GAAHAQAABgAAAAAAAAAAAAAABAAAAA4ACQARAAAAGgABAAAAAAgMAQAAAgAAAAwBAAAAAAAAFAAA ACAAAAABAAAAAQAAAAAAAAABAAAA6AAAAAgAAAAEAAAAAAAAAAABAAABAAAAAAAAAAEBAAABAAAA AAAAAAIBAAABAAAAAAAAAAMBAAABAAAAAAAAAAQBAAABAAAAAAAAAAUBAABoAAAAZG1hbmAAAAAC AAAABAAAAAMAAAABAAAACQQAAAoAAABBAHIAaQBhAGwAAAAIAAAAAAAAAAMAAAAAAAAAJgAAAE0A bwBuAG8AdAB5AHAAZQAgAFQAeQBwAG8AZwByAGEAcABoAHkAAAAGAQAABAAAAAAAGAAHAQAABgAA AAAAAAAAAAAABAAAAA4ACQARAAAAGgABAA8ADfB4AAAAAACfDwQAAAAEAAAAAACgDwIAAAAqAAAA oQ8oAAAAAgAAAAAAIAgKAAAAAP8CAAcAAQAAAAAAAgAOAAEAAAAABAIAAAQOAAAA2A8EAAAAAAAA AAAAqg8KAAAAAgAAAAEAAAAAAAAApg8MAAAA8AAAAFZdOH9YgHiBDwAE8A4BAAASAArwCAAAAANg AAAgAgAAAwEL8HgAAAAEAAAAAAB/AAEA7wGAAExdQAWBADBlAQCCAJiyAACDADBlAQCEAJiyAACF AAAAAACHAAEAAACIAAAAAAC/AAQABAD/AQAAEQABAwIEAAA/AwAACACAwxgAAAC/AwAAAgBSAGUA YwB0AGEAbgBnAGwAZQAgADIAAAAAABDwCAAAAK0AIAFgFX0DDwAR8BwAAAAAAMMLCAAAAP////8N AEAFAAAfBAQAAAACAAAADwAN8EIAAAAAAJ8PBAAAAAAAAAAAAKgPEgAAAFJlLUNoYXJ0ZXIgUHJv Y2VzcwAAoQ8UAAAAEwAAAAAAAAAKAAcAEwAAAAAAAAAPAATwNgIAABIACvAIAAAABGAAACACAAAD AQvweAAAAAQAAAAAAH8AAQDvAYAAUHtABYEAMGUBAIIAmLIAAIMAMGUBAIQAmLIAAIUAAAAAAIcA AAAAAIgAAAAAAL8ABAAEAP8BAAARAAEDAwQAAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBjAHQAYQBu AGcAbABlACAAMwAAAAAAEPAIAAAA8AMgAWAVEw8PABHwHAAAAAAAwwsIAAAA/////w4AQAUAAB8E BAAAAAMAAAAPAA3wagEAAAAAnw8EAAAAAQAAAAAAqA/OAAAATmVlZCB0byBtYWtlIHByb3Bvc2Fs IHRvIEFyZWEgRGlyZWN0b3INTmVlZCBwcm9wb3NlZCBjaGFydGVyDVByb3Bvc2VkIHdvcmsgaXRl bXMNTmVlZCB0byBkZW1vbnN0cmF0ZSBpbnRlcmVzdCBpbiBwcm9wb3NlZCB3b3JrDU5lZWQgdG8g aWRlbnRpZnkgcGVyc29ucyB3aWxsaW5nIHRvIGNvbW1pdCB0byBlZGl0aW5nIGFuZCByZXZpZXdp bmcgZG9jdW1lbnRzDQ0AAKEPbgAAAD0AAAAAAAAACgAHAJEAAAABAAAACgAHAAEAAAAAAAAACgAH AB4AAAAAAAIAHAAJAAAAAAQCAAAEHAAWAAAAAAgCAAAIHACQAAAAAAwCAAAMGAABAAAAABAGAAAQ GAAzM8z+AQAAAAAUAgAAFBwAAACmDwoAAADgAAAAOH9YgHiBDwAE8DYAAAASAArwCAAAAAFgAAAA DAAAUwAL8B4AAACTAY6fiwCUAd69aAC/AQIAAgAEAwkAAAA/AwEAAQAQAPAHIAAAAP///wAAAAAA gICAAAAAAAC74OMAMzOZAACZmQCZzAAADwCIE5EAAAAPAIoTiQAAAAAAug8QAAAAXwBfAF8AUABQ AFQAMQAwAAAAixNpAAAAAADrLggAAAAjw8cBgPxtoQAAACsEAAAAAAAAAB8ARPE9AAAAAAAn8SAA AAAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAswX/////EgAAAA8APfENAAAAQAFC8QUAAAABCQAAAA8A AisAAAAAAAAiBAgAAAABAAAAAgAAAAAAHRAEAAAAAAAAAA8A7gO9CAAAAgDvAxgAAAAQAAAAAAAA AAAAAAAAAACABQEAAAcAEzAPAAwEuAcAAA8AAvCwBwAAoAEI8AgAAAAEAAAABGgAAA8AA/BaBwAA DwAE8CgAAAABAAnwEAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAAAABoAAAFAAAADwAE8E8DAACi DArwCAAAAAJoAAAACgAAgwAL8GYAAAB/AAEA7wGAAKSmQAW/AAQABAC/AQEAEQD/ARAAGAA/AwAA CACAwzYAAAC/AwAAAgBTAGwAaQBkAGUAIABOAHUAbQBiAGUAcgAgAFAAbABhAGMAZQBoAG8AbABk AGUAcgAgADUAAAAAABDwCAAAAF4PIBBgFYoQDwAR8DkCAAAAACAEAQAAAAgAABkQKAIAAAAAAAgM AQAAAgAAAAwBAAAAAAAAFAAAACAAAAABAAAAAQAAAAAAAAABAAAA6AAAAAgAAAAEAAAAAAAAAAAB AAABAAAAAAAAAAEBAAABAAAAAAAAAAIBAAABAAAAAAAAAAMBAAABAAAAAAAAAAQBAAABAAAAAAAA AAUBAABoAAAAZG1hbmAAAAACAAAABAAAAAMAAAABAAAACQQAAAoAAABBAHIAaQBhAGwAAAAIAAAA AAAAAAMAAAAAAAAAJgAAAE0AbwBuAG8AdAB5AHAAZQAgAFQAeQBwAG8AZwByAGEAcABoAHkAAAAG AQAABAAAAAAAGAAHAQAABgAAAAAAAAAAAAAABAAAAA4ACQARAAAAGgABAAAAAAgMAQAAAgAAAAwB AAAAAAAAFAAAACAAAAABAAAAAQAAAAAAAAABAAAA6AAAAAgAAAAEAAAAAAAAAAABAAABAAAAAAAA AAEBAAABAAAAAAAAAAIBAAABAAAAAAAAAAMBAAABAAAAAAAAAAQBAAABAAAAAAAAAAUBAABoAAAA ZG1hbmAAAAACAAAABAAAAAMAAAABAAAACQQAAAoAAABBAHIAaQBhAGwAAAAIAAAAAAAAAAMAAAAA AAAAJgAAAE0AbwBuAG8AdAB5AHAAZQAgAFQAeQBwAG8AZwByAGEAcABoAHkAAAAGAQAABAAAAAAA GAAHAQAABgAAAAAAAAAAAAAABAAAAA4ACQARAAAAGgABAA8ADfB4AAAAAACfDwQAAAAEAAAAAACg DwIAAAAqAAAAoQ8oAAAAAgAAAAAAIAgKAAAAAP8CAAcAAQAAAAAAAgAOAAEAAAAABAIAAAQOAAAA 2A8EAAAAAAAAAAAAqg8KAAAAAgAAAAEAAAAAAAAApg8MAAAA8AAAAFZdOH9YgHiBDwAE8CsBAAAS AArwCAAAAANoAAAgAgAAAwEL8HgAAAAEAAAAAAB/AAEA7wGAADyyQAWBADBlAQCCAJiyAACDADBl AQCEAJiyAACFAAAAAACHAAEAAACIAAAAAAC/AAQABAD/AQAAEQABAwIEAAA/AwAACACAwxgAAAC/ AwAAAgBSAGUAYwB0AGEAbgBnAGwAZQAgADIAAAAAABDwCAAAAK0AIAFgFX0DDwAR8BwAAAAAAMML CAAAAP////8NAEAFAAAfBAQAAAACAAAADwAN8F8AAAAAAJ8PBAAAAAAAAAAAAKgPHQAAAFByb3Bv c2FscyBmb3IgQWRkaXRpb25hbCBXb3JrAAChDxQAAAAeAAAAAAAAAAoABwAeAAAAAAAAAAAAqg8K AAAAHgAAAAEAAAAAAA8ABPCYAgAAEgAK8AgAAAAEaAAAIAIAAAMBC/B4AAAABAAAAAAAfwABAO8B gAAkykAFgQAwZQEAggCYsgAAgwAwZQEAhACYsgAAhQAAAAAAhwAAAAAAiAAAAAAAvwAEAAQA/wEA ABEAAQMDBAAAPwMAAAgAgMMYAAAAvwMAAAIAUgBlAGMAdABhAG4AZwBsAGUAIAAzAAAAAAAQ8AgA AADwAyABYBUTDw8AEfAcAAAAAADDCwgAAAD/////DgBABQAAHwQEAAAAAwAAAA8ADfDMAQAAAACf DwQAAAABAAAAAACoD94AAABGdW5kYW1lbnRhbHMNSG93IGEgc3lzbG9nIHJlbGF5IHNob3VsZCB3 b3JrDU5lZWQgdG8gcmVjb25jaWxlIHJlbGF5IGFuZCBzaWduIHJlcXVpcmVtZW50cw1TWVNMT0cg TUlCDUhvdyBESENQIGNvdWxkIHNwZWNpZnkgc2VydmVyIGFuZCB0cmFuc3BvcnQNTG9nIGV2ZW50 IHRheG9ub215DVdoYXQgdG8gbG9nDURvIHdlIG5lZWQgdG8gcmVkZWZpbmUgc2V2ZXJpdHkgYW5k IGZhY2lsaXR5DQ0AAKEPsAAAAA0AAAAAAAAACgAHAB8AAAABAAAACgAHAC4AAAACAAAACgAHAEoA AAABAAAACgAHAAwAAAACAAAACgAHAC0AAAABAAAACgAHAAEAAAACAAEACgAAAAcAAQAAAAAAAAAK AAcADQAAAAAAAAAfAAAAAAQAAAAELgAAAAAEAAAABEoAAAAACAAAAAgMAAAAAAgAAAAILQAAAAAM AAAADAEAAAAAEAAAABABAAAAABQAAAAUAACqDwoAAADfAAAAAQAAAAAAAACmDwgAAADAAAAAWIB4 gQ8ABPA2AAAAEgAK8AgAAAABaAAAAAwAAFMAC/AeAAAAkwGOn4sAlAHevWgAvwECAAIABAMJAAAA PwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAu+DjADMzmQAAmZkAmcwAAA8AiBORAAAADwCK E4kAAAAAALoPEAAAAF8AXwBfAFAAUABUADEAMAAAAIsTaQAAAAAA6y4IAAAA+fzGAaBb3kMAAAAr BAAAAAAAAAAfAETxPQAAAAAAJ/EgAAAAAAAAAAMAAAAAAAAAAAAAAAAAAAAAALMF/////xIAAAAP AD3xDQAAAEABQvEFAAAAAQkAAAAPAAIrAAAAAAAAIgQIAAAAAQAAAAIAAAAAAB0QBAAAAAAAAAAP AO4DwAcAAAIA7wMYAAAAEAAAAAAAAAAAAAAAAAAAgAYBAAAHABMwDwAMBLsGAAAPAALwswYAAMAB CPAIAAAABAAAAARwAAAPAAPwXQYAAA8ABPAoAAAAAQAJ8BAAAAAAAAAAAAAAAAAAAAAAAAAAAgAK 8AgAAAAAcAAABQAAAA8ABPBPAwAAogwK8AgAAAACcAAAAAoAAIMAC/BmAAAAfwABAO8BgABo7UAF vwAEAAQAvwEBABEA/wEQABgAPwMAAAgAgMM2AAAAvwMAAAIAUwBsAGkAZABlACAATgB1AG0AYgBl AHIAIABQAGwAYQBjAGUAaABvAGwAZABlAHIAIAA1AAAAAAAQ8AgAAABeDyAQYBWKEA8AEfA5AgAA AAAgBAEAAAAIAAAZECgCAAAAAAAIDAEAAAIAAAAMAQAAAAAAABQAAAAgAAAAAQAAAAEAAAAAAAAA AQAAAOgAAAAIAAAABAAAAAAAAAAAAQAAAQAAAAAAAAABAQAAAQAAAAAAAAACAQAAAQAAAAAAAAAD AQAAAQAAAAAAAAAEAQAAAQAAAAAAAAAFAQAAaAAAAGRtYW5gAAAAAgAAAAQAAAADAAAAAQAAAAkE AAAKAAAAQQByAGkAYQBsAAAACAAAAAAAAAADAAAAAAAAACYAAABNAG8AbgBvAHQAeQBwAGUAIABU AHkAcABvAGcAcgBhAHAAaAB5AAAABgEAAAQAAAAAABgABwEAAAYAAAAAAAAAAAAAAAQAAAAOAAkA EQAAABoAAQAAAAAIDAEAAAIAAAAMAQAAAAAAABQAAAAgAAAAAQAAAAEAAAAAAAAAAQAAAOgAAAAI AAAABAAAAAAAAAAAAQAAAQAAAAAAAAABAQAAAQAAAAAAAAACAQAAAQAAAAAAAAADAQAAAQAAAAAA AAAEAQAAAQAAAAAAAAAFAQAAaAAAAGRtYW5gAAAAAgAAAAQAAAADAAAAAQAAAAkEAAAKAAAAQQBy AGkAYQBsAAAACAAAAAAAAAADAAAAAAAAACYAAABNAG8AbgBvAHQAeQBwAGUAIABUAHkAcABvAGcA cgBhAHAAaAB5AAAABgEAAAQAAAAAABgABwEAAAYAAAAAAAAAAAAAAAQAAAAOAAkAEQAAABoAAQAP AA3weAAAAAAAnw8EAAAABAAAAAAAoA8CAAAAKgAAAKEPKAAAAAIAAAAAACAICgAAAAD/AgAHAAEA AAAAAAIADgABAAAAAAQCAAAEDgAAANgPBAAAAAAAAAAAAKoPCgAAAAIAAAABAAAAAAAAAKYPDAAA APAAAABWXTh/WIB4gQ8ABPArAQAAEgAK8AgAAAADcAAAIAIAAAMBC/B4AAAABAAAAAAAfwABAO8B gACI9kAFgQAwZQEAggCYsgAAgwAwZQEAhACYsgAAhQAAAAAAhwABAAAAiAAAAAAAvwAEAAQA/wEA ABEAAQMCBAAAPwMAAAgAgMMYAAAAvwMAAAIAUgBlAGMAdABhAG4AZwBsAGUAIAAyAAAAAAAQ8AgA AACtACABYBV9Aw8AEfAcAAAAAADDCwgAAAD/////DQBABQAAHwQEAAAAAgAAAA8ADfBfAAAAAACf DwQAAAAAAAAAAACoDx0AAABQcm9wb3NhbHMgZm9yIEFkZGl0aW9uYWwgV29yawAAoQ8UAAAAHgAA AAAAAAAKAAcAHgAAAAAAAAAAAKoPCgAAAB4AAAABAAAAAAAPAATwmwEAABIACvAIAAAABHAAACAC AAADAQvweAAAAAQAAAAAAH8AAQDvAYAABAdCBYEAMGUBAIIAmLIAAIMAMGUBAIQAmLIAAIUAAAAA AIcAAAAAAIgAAAAAAL8ABAAEAP8BAAARAAEDAwQAAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBjAHQA YQBuAGcAbABlACAAMwAAAAAAEPAIAAAA8AMgAWAVEw8PABHwHAAAAAAAwwsIAAAA/////w4AQAUA AB8EBAAAAAMAAAAPAA3wzwAAAAAAnw8EAAAAAQAAAAAAqA9PAAAAVXNhZ2UgR3VpZGVzDUhvdyB0 byB1c2UgdGhlIGZpZWxkcyBpbiBhIHN5c2xvZyBtZXNzYWdlDUEgUHJhY3RpY2FsIFVzYWdlIEd1 aWRlDQAAoQ9AAAAADQAAAAAAAAAKAAcAQgAAAAEAAAAKAAcAAQAAAAAAAAAKAAcADQAAAAAAAABC AAAAAAQAAAAEAQAAAAAIAAAACAAAqg8KAAAAUAAAAAEAAAAAAAAApg8KAAAA4AAAADh/WIB4gQ8A BPA2AAAAEgAK8AgAAAABcAAAAAwAAFMAC/AeAAAAkwGOn4sAlAHevWgAvwECAAIABAMJAAAAPwMB AAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAu+DjADMzmQAAmZkAmcwAAA8AiBORAAAADwCKE4kA AAAAALoPEAAAAF8AXwBfAFAAUABUADEAMAAAAIsTaQAAAAAA6y4IAAAA+fzGAaBb3kMAAAArBAAA AAAAAAAfAETxPQAAAAAAJ/EgAAAAAAAAAAMAAAAAAAAAAAAAAAAAAAAAALMF/////xIAAAAPAD3x DQAAAEABQvEFAAAAAQkAAAAPAAIrAAAAAAAAIgQIAAAAAQAAAAIAAAAAAB0QBAAAAAAAAAAPAO4D swgAAAIA7wMYAAAAEAAAAAAAAAAAAAAAAAAAgAcBAAAHABMwDwAMBK4HAAAPAALwpgcAAOABCPAI AAAABAAAAAR4AAAPAAPwUAcAAA8ABPAoAAAAAQAJ8BAAAAAAAAAAAAAAAAAAAAAAAAAAAgAK8AgA AAAAeAAABQAAAA8ABPBPAwAAogwK8AgAAAACeAAAAAoAAIMAC/BmAAAAfwABAO8BgAAkK0IFvwAE AAQAvwEBABEA/wEQABgAPwMAAAgAgMM2AAAAvwMAAAIAUwBsAGkAZABlACAATgB1AG0AYgBlAHIA IABQAGwAYQBjAGUAaABvAGwAZABlAHIAIAA1AAAAAAAQ8AgAAABeDyAQYBWKEA8AEfA5AgAAAAAg BAEAAAAIAAAZECgCAAAAAAAIDAEAAAIAAAAMAQAAAAAAABQAAAAgAAAAAQAAAAEAAAAAAAAAAQAA AOgAAAAIAAAABAAAAAAAAAAAAQAAAQAAAAAAAAABAQAAAQAAAAAAAAACAQAAAQAAAAAAAAADAQAA AQAAAAAAAAAEAQAAAQAAAAAAAAAFAQAAaAAAAGRtYW5gAAAAAgAAAAQAAAADAAAAAQAAAAkEAAAK AAAAQQByAGkAYQBsAAAACAAAAAAAAAADAAAAAAAAACYAAABNAG8AbgBvAHQAeQBwAGUAIABUAHkA cABvAGcAcgBhAHAAaAB5AAAABgEAAAQAAAAAABgABwEAAAYAAAAAAAAAAAAAAAQAAAAOAAkAEQAA ABoAAQAAAAAIDAEAAAIAAAAMAQAAAAAAABQAAAAgAAAAAQAAAAEAAAAAAAAAAQAAAOgAAAAIAAAA BAAAAAAAAAAAAQAAAQAAAAAAAAABAQAAAQAAAAAAAAACAQAAAQAAAAAAAAADAQAAAQAAAAAAAAAE AQAAAQAAAAAAAAAFAQAAaAAAAGRtYW5gAAAAAgAAAAQAAAADAAAAAQAAAAkEAAAKAAAAQQByAGkA YQBsAAAACAAAAAAAAAADAAAAAAAAACYAAABNAG8AbgBvAHQAeQBwAGUAIABUAHkAcABvAGcAcgBh AHAAaAB5AAAABgEAAAQAAAAAABgABwEAAAYAAAAAAAAAAAAAAAQAAAAOAAkAEQAAABoAAQAPAA3w eAAAAAAAnw8EAAAABAAAAAAAoA8CAAAAKgAAAKEPKAAAAAIAAAAAACAICgAAAAD/AgAHAAEAAAAA AAIADgABAAAAAAQCAAAEDgAAANgPBAAAAAAAAAAAAKoPCgAAAAIAAAABAAAAAAAAAKYPDAAAAPAA AABWXTh/WIB4gQ8ABPArAQAAEgAK8AgAAAADeAAAIAIAAAMBC/B4AAAABAAAAAAAfwABAO8BgABE M0IFgQAwZQEAggCYsgAAgwAwZQEAhACYsgAAhQAAAAAAhwABAAAAiAAAAAAAvwAEAAQA/wEAABEA AQMCBAAAPwMAAAgAgMMYAAAAvwMAAAIAUgBlAGMAdABhAG4AZwBsAGUAIAAyAAAAAAAQ8AgAAACt ACABYBV9Aw8AEfAcAAAAAADDCwgAAAD/////DQBCBQAAHwQEAAAAAgAAAA8ADfBfAAAAAACfDwQA AAAAAAAAAACoDx0AAABQcm9wb3NhbHMgZm9yIEFkZGl0aW9uYWwgV29yawAAoQ8UAAAAHgAAAAAA AAAKAAcAHgAAAAAAAAAAAKoPCgAAAB4AAAABAAAAAAAPAATwjgIAABIACvAIAAAABHgAACACAAAD AQvweAAAAAQAAAAAAH8AAQDvAYAAkE5CBYEAMGUBAIIAmLIAAIMAMGUBAIQAmLIAAIUAAAAAAIcA AAAAAIgAAAAAAL8ABAAEAP8BAAARAAEDAwQAAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBjAHQAYQBu AGcAbABlACAAMwAAAAAAEPAIAAAA8AMgAWAVEw8PABHwHAAAAAAAwwsIAAAA/////w4AQgUAAB8E BAAAAAMAAAAPAA3wwgEAAAAAnw8EAAAAAQAAAAAAqA+iAAAAVHJhbnNwb3J0DVN5c2xvZyBvdmVy IERUTFMNMiBkcmFmdHMgZXhpc3QNU3lzbG9nIG92ZXIgVENQDU1hbnkgaW1wbGVtZW50YXRpb25z DVNob3VsZCB3ZSBzdGFuZGFyZGl6ZT8NU3lzbG9nIG92ZXIgQkVFUA1TaG91bGQgd2Ugc3RhbmRh cmRpemU/DVNob3VsZCB3ZSBvYnNvbGV0ZT8NAAChD64AAAAKAAAAAAAAAAoABwARAAAAAQAAAAoA BwAPAAAAAgAAAAoABwAQAAAAAQAAAAoABwAsAAAAAgAAAAoABwARAAAAAQAAAAoABwArAAAAAgAA AAoABwABAAAAAAAAAAoABwAKAAAAAAAAABEAAAAABAAAAAQPAAAAAAQAAAAEEAAAAAAIAAAACCwA AAAACAAAAAgRAAAAAAwAAAAMKwAAAAAQAAAAEAEAAAAAFAAAABQAAKoPPgAAAAoAAAAAAAAABgAA AAEAAAABABoAAAAAAAAABgAAAAEAAAABADYAAAAAAAAABgAAAAEAAAABADcAAAAAAAAAAACmDwgA AADAAAAAWIB4gQ8ABPA2AAAAEgAK8AgAAAABeAAAAAwAAFMAC/AeAAAAkwGOn4sAlAHevWgAvwEC AAIABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAu+DjADMzmQAAmZkAmcwAAA8A iBORAAAADwCKE4kAAAAAALoPEAAAAF8AXwBfAFAAUABUADEAMAAAAIsTaQAAAAAA6y4IAAAA+fzG AaBb3kMAAAArBAAAAAAAAAAfAETxPQAAAAAAJ/EgAAAAAAAAAAMAAAAAAAAAAAAAAAAAAAAAALMF /////xIAAAAPAD3xDQAAAEABQvEFAAAAAQkAAAAPAAIrAAAAAAAAIgQIAAAAAQAAAAIAAAAAAB0Q BAAAAAAAAAAPAO4DKAgAAAIA7wMYAAAAEAAAAAAAAAAAAAAAAAAAgAgBAAAHABMwDwAMBCMHAAAP AALwGwcAAAACCPAIAAAABAAAAASAAAAPAAPwxQYAAA8ABPAoAAAAAQAJ8BAAAAAAAAAAAAAAAAAA AAAAAAAAAgAK8AgAAAAAgAAABQAAAA8ABPBPAwAAogwK8AgAAAACgAAAAAoAAIMAC/BmAAAAfwAB AO8BgADEckIFvwAEAAQAvwEBABEA/wEQABgAPwMAAAgAgMM2AAAAvwMAAAIAUwBsAGkAZABlACAA TgB1AG0AYgBlAHIAIABQAGwAYQBjAGUAaABvAGwAZABlAHIAIAA1AAAAAAAQ8AgAAABeDyAQYBWK EA8AEfA5AgAAAAAgBAEAAAAIAAAZECgCAAAAAAAIDAEAAAIAAAAMAQAAAAAAABQAAAAgAAAAAQAA AAEAAAAAAAAAAQAAAOgAAAAIAAAABAAAAAAAAAAAAQAAAQAAAAAAAAABAQAAAQAAAAAAAAACAQAA AQAAAAAAAAADAQAAAQAAAAAAAAAEAQAAAQAAAAAAAAAFAQAAaAAAAGRtYW5gAAAAAgAAAAQAAAAD AAAAAQAAAAkEAAAKAAAAQQByAGkAYQBsAAAACAAAAAAAAAADAAAAAAAAACYAAABNAG8AbgBvAHQA eQBwAGUAIABUAHkAcABvAGcAcgBhAHAAaAB5AAAABgEAAAQAAAAAABgABwEAAAYAAAAAAAAAAAAA AAQAAAAOAAkAEQAAABoAAQAAAAAIDAEAAAIAAAAMAQAAAAAAABQAAAAgAAAAAQAAAAEAAAAAAAAA AQAAAOgAAAAIAAAABAAAAAAAAAAAAQAAAQAAAAAAAAABAQAAAQAAAAAAAAACAQAAAQAAAAAAAAAD AQAAAQAAAAAAAAAEAQAAAQAAAAAAAAAFAQAAaAAAAGRtYW5gAAAAAgAAAAQAAAADAAAAAQAAAAkE AAAKAAAAQQByAGkAYQBsAAAACAAAAAAAAAADAAAAAAAAACYAAABNAG8AbgBvAHQAeQBwAGUAIABU AHkAcABvAGcAcgBhAHAAaAB5AAAABgEAAAQAAAAAABgABwEAAAYAAAAAAAAAAAAAAAQAAAAOAAkA EQAAABoAAQAPAA3weAAAAAAAnw8EAAAABAAAAAAAoA8CAAAAKgAAAKEPKAAAAAIAAAAAACAICgAA AAD/AgAHAAEAAAAAAAIADgABAAAAAAQCAAAEDgAAANgPBAAAAAAAAAAAAKoPCgAAAAIAAAABAAAA AAAAAKYPDAAAAPAAAABWXTh/WIB4gQ8ABPAgAQAAEgAK8AgAAAADgAAAIAIAAAMBC/B4AAAABAAA AAAAfwABAO8BgAC8e0IFgQAwZQEAggCYsgAAgwAwZQEAhACYsgAAhQAAAAAAhwABAAAAiAAAAAAA vwAEAAQA/wEAABEAAQMCBAAAPwMAAAgAgMMYAAAAvwMAAAIAUgBlAGMAdABhAG4AZwBsAGUAIAAy AAAAAAAQ8AgAAACtACABYBV9Aw8AEfAcAAAAAADDCwgAAAD/////DQBCBQAAHwQEAAAAAgAAAA8A DfBUAAAAAACfDwQAAAAAAAAAAACoDxIAAABGWUkgLSBSZWxhdGVkIFdvcmsAAKEPFAAAABMAAAAA AAAACgAHABMAAAAAAAAAAACqDwoAAAATAAAAAQAAAAAADwAE8A4CAAASAArwCAAAAASAAAAgAgAA AwEL8HgAAAAEAAAAAAB/AAEA7wGAAAgYQgWBADBlAQCCAJiyAACDADBlAQCEAJiyAACFAAAAAACH AAAAAACIAAAAAAC/AAQABAD/AQAAEQABAwMEAAA/AwAACACAwxgAAAC/AwAAAgBSAGUAYwB0AGEA bgBnAGwAZQAgADMAAAAAABDwCAAAAPADIAFgFRMPDwAR8BwAAAAAAMMLCAAAAP////8OAEIFAAAf BAQAAAADAAAADwAN8EIBAAAAAJ8PBAAAAAEAAAAAAKgPmAAAAE9QU0FXRw1BbGFybXMgaW4gU3lz bG9nDUNhdGVnb3JpZXMgdG8gbWF0Y2ggU05NUCBhbmQgSVRVIHVzYWdlDU1hcHBpbmcgYmV0d2Vl biBTTk1QIGFuZCBTeXNsb2cNU05NUCBOb3RpZmljYXRpb25zIHRvIFN5c2xvZw1TeXNsb2cgdG8g U05NUCBOb3RpZmljYXRpb25zAAChD2wAAAAHAAAAAAAAAAoABwARAAAAAQAAAAoABwAnAAAAAgAA AAoABwAgAAAAAQAAAAoABwA6AAAAAgAAAAoABwAHAAAAAAAAABEAAAAABAAAAAQnAAAAAAQAAAAE IAAAAAAIAAAACDoAAAAADAAAAAwAAKoPCgAAAJkAAAABAAAAAAAAAKYPCAAAAMAAAABYgHiBDwAE 8DYAAAASAArwCAAAAAGAAAAADAAAUwAL8B4AAACTAY6fiwCUAd69aAC/AQIAAgAEAwkAAAA/AwEA AQAQAPAHIAAAAP///wAAAAAAgICAAAAAAAC74OMAMzOZAACZmQCZzAAADwCIE5EAAAAPAIoTiQAA AAAAug8QAAAAXwBfAF8AUABQAFQAMQAwAAAAixNpAAAAAADrLggAAAD5/MYBoFveQwAAACsEAAAA AAAAAB8ARPE9AAAAAAAn8SAAAAAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAswX/////EgAAAA8APfEN AAAAQAFC8QUAAAABCQAAAA8AAisAAAAAAAAiBAgAAAABAAAAAgAAAAAAHRAEAAAAAAAAAA8A7gMJ CAAAAgDvAxgAAAAQAAAAAAAAAAAAAAAAAACACQEAAAcAEzAPAAwEBAcAAA8AAvD8BgAAIAII8AgA AAAEAAAABIgAAA8AA/CmBgAADwAE8CgAAAABAAnwEAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAA AACIAAAFAAAADwAE8E8DAACiDArwCAAAAAKIAAAACgAAgwAL8GYAAAB/AAEA7wGAANyyQgW/AAQA BAC/AQEAEQD/ARAAGAA/AwAACACAwzYAAAC/AwAAAgBTAGwAaQBkAGUAIABOAHUAbQBiAGUAcgAg AFAAbABhAGMAZQBoAG8AbABkAGUAcgAgADUAAAAAABDwCAAAAF4PIBBgFYoQDwAR8DkCAAAAACAE AQAAAAgAABkQKAIAAAAAAAgMAQAAAgAAAAwBAAAAAAAAFAAAACAAAAABAAAAAQAAAAAAAAABAAAA 6AAAAAgAAAAEAAAAAAAAAAABAAABAAAAAAAAAAEBAAABAAAAAAAAAAIBAAABAAAAAAAAAAMBAAAB AAAAAAAAAAQBAAABAAAAAAAAAAUBAABoAAAAZG1hbmAAAAACAAAABAAAAAMAAAABAAAACQQAAAoA AABBAHIAaQBhAGwAAAAIAAAAAAAAAAMAAAAAAAAAJgAAAE0AbwBuAG8AdAB5AHAAZQAgAFQAeQBw AG8AZwByAGEAcABoAHkAAAAGAQAABAAAAAAAGAAHAQAABgAAAAAAAAAAAAAABAAAAA4ACQARAAAA GgABAAAAAAgMAQAAAgAAAAwBAAAAAAAAFAAAACAAAAABAAAAAQAAAAAAAAABAAAA6AAAAAgAAAAE AAAAAAAAAAABAAABAAAAAAAAAAEBAAABAAAAAAAAAAIBAAABAAAAAAAAAAMBAAABAAAAAAAAAAQB AAABAAAAAAAAAAUBAABoAAAAZG1hbmAAAAACAAAABAAAAAMAAAABAAAACQQAAAoAAABBAHIAaQBh AGwAAAAIAAAAAAAAAAMAAAAAAAAAJgAAAE0AbwBuAG8AdAB5AHAAZQAgAFQAeQBwAG8AZwByAGEA cABoAHkAAAAGAQAABAAAAAAAGAAHAQAABgAAAAAAAAAAAAAABAAAAA4ACQARAAAAGgABAA8ADfB4 AAAAAACfDwQAAAAEAAAAAACgDwIAAAAqAAAAoQ8oAAAAAgAAAAAAIAgKAAAAAP8CAAcAAQAAAAAA AgAOAAEAAAAABAIAAAQOAAAA2A8EAAAAAAAAAAAAqg8KAAAAAgAAAAEAAAAAAAAApg8MAAAA8AAA AFZdOH9YgHiBDwAE8CABAAASAArwCAAAAAOIAAAgAgAAAwEL8HgAAAAEAAAAAAB/AAEA7wGAAOy7 QgWBADBlAQCCAJiyAACDADBlAQCEAJiyAACFAAAAAACHAAEAAACIAAAAAAC/AAQABAD/AQAAEQAB AwIEAAA/AwAACACAwxgAAAC/AwAAAgBSAGUAYwB0AGEAbgBnAGwAZQAgADIAAAAAABDwCAAAAK0A IAFgFX0DDwAR8BwAAAAAAMMLCAAAAP////8NAEIFAAAfBAQAAAACAAAADwAN8FQAAAAAAJ8PBAAA AAAAAAAAAKgPEgAAAEZZSSAtIFJlbGF0ZWQgV29yawAAoQ8UAAAAEwAAAAAAAAAKAAcAEwAAAAAA AAAAAKoPCgAAABMAAAABAAAAAAAPAATw7wEAABIACvAIAAAABIgAACACAAADAQvweAAAAAQAAAAA AH8AAQDvAYAAbIVCBYEAMGUBAIIAmLIAAIMAMGUBAIQAmLIAAIUAAAAAAIcAAAAAAIgAAAAAAL8A BAAEAP8BAAARAAEDAwQAAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBjAHQAYQBuAGcAbABlACAAMwAA AAAAEPAIAAAA8AMgAWAVEw8PABHwHAAAAAAAwwsIAAAA/////w4AQgUAAB8EBAAAAAMAAAAPAA3w IwEAAAAAnw8EAAAAAQAAAAAAqA+lAAAASW5kaXZpZHVhbCBQcm9wb3NhbHMNU3lzbG9nIERpc2Nh cmQgTWVzc2FnZSBTREVzDVN5c2xvZyBHZW8tbG9jYXRpb24gU0RFcw1JUEZJWCBhcyBhIGdlbmVy YWwgcHVycG9zZSByZXBvcnRpbmcgcHJvdG9jb2wNQ291bGQgYmUgdXNlZCB0byByZXBsYWNlIG9y IHN1cHBsZW1lbnQgc3lzbG9nAAChD0AAAAAVAAAAAAAAAAoABwBjAAAAAQAAAAoABwAuAAAAAgAA AAoABwAVAAAAAAAAAGMAAAAABAAAAAQuAAAAAAgAAAAIAACqDwoAAACmAAAAAQAAAAAAAACmDwgA AADAAAAAWIB4gQ8ABPA2AAAAEgAK8AgAAAABiAAAAAwAAFMAC/AeAAAAkwGOn4sAlAHevWgAvwEC AAIABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAu+DjADMzmQAAmZkAmcwAAA8A iBORAAAADwCKE4kAAAAAALoPEAAAAF8AXwBfAFAAUABUADEAMAAAAIsTaQAAAAAA6y4IAAAA+fzG AaBb3kMAAAArBAAAAAAAAAAfAETxPQAAAAAAJ/EgAAAAAAAAAAMAAAAAAAAAAAAAAAAAAAAAALMF /////xIAAAAPAD3xDQAAAEABQvEFAAAAAQkAAAAPAAIrAAAAAAAAIgQIAAAAAQAAAAIAAAAAAB0Q BAAAAAAAAAAPAO4DAQYAAAIA7wMYAAAAEAAAAAAAAAAAAAAAAAAAgA0BAAAHABMwDwAMBGEFAAAP AALwWQUAAEACCPAIAAAABAAAAASQAAAPAAPwAwUAAA8ABPAoAAAAAQAJ8BAAAAAAAAAAAAAAAAAA AAAAAAAAAgAK8AgAAAAAkAAABQAAAA8ABPADAQAAEgAK8AgAAAACkAAAIAIAAAMBC/BwAAAABAAA AAAAfwABAO8BgADY6UIFgQAwZQEAggCYsgAAgwAwZQEAhACYsgAAhQAAAAAAhwABAAAAiAAAAAAA vwAEAAQA/wEQABEAAQMCBAAAPwMAAAgAgMMQAAAAvwMAAAIAVABpAHQAbABlACAAMQAAAAAAEPAI AAAArQAgAWAVfQMPABHwHAAAAAAAwwsIAAAA/////w0AQgUAAB8EBAAAAAIAAAAPAA3wPwAAAAAA nw8EAAAAAAAAAAAAqA8PAAAARGlzY3Vzc2lvbiBUaW1lAAChDxQAAAAQAAAAAAAAAAoABwAQAAAA AAAAAA8ABPCJAQAAEgAK8AgAAAADkAAAIAIAABMBC/CSAAAABAAAAAAAfwABAO8BgAA070IFgQAw ZQEAggCYsgAAgwAwZQEAhACYsgAAhQAAAAAAhwAAAAAAiAAAAAAAvwAEAAQAvwEBAAEA/wEQABEA AQMDBAAAPwMAAAgAgMMsAAAAvwMAAAIAQwBvAG4AdABlAG4AdAAgAFAAbABhAGMAZQBoAG8AbABk AGUAcgAgADIAAAAAABDwCAAAAPADIAFgFRMPDwAR8BwAAAAAAMMLCAAAAP////8TAEIFAAAfBAQA AAADAAAADwAN8KMAAAAAAJ8PBAAAAAEAAAAAAKgPXwAAAFBsZWFzZSBhcHByb2FjaCB0aGUgbWlj cm9waG9uZSBhbmQgc2hhcmUgeW91ciB0aG91Z2h0cw0oU3RhdGUgeW91ciBuYW1lIGNsZWFybHkg Zm9yIHRoZSBzY3JpYmUpAAChDxQAAABgAAAAAAAAAAoABwBgAAAAAAAAAAAApg8MAAAA8AAAAFZd OH9YgHiBDwAE8C8CAACiDArwCAAAAASQAAAACgAAgwAL8GYAAAB/AAEA7wGAABACQwW/AAQABAC/ AQEAEQD/ARAAGAA/AwAACACAwzYAAAC/AwAAAgBTAGwAaQBkAGUAIABOAHUAbQBiAGUAcgAgAFAA bABhAGMAZQBoAG8AbABkAGUAcgAgADMAAAAAABDwCAAAAF4PIBBgFYoQDwAR8CUBAAAAACAEAQAA AAgAABkQFAEAAAAAAAgMAQAAAgAAAAwBAAAAAAAAFAAAACAAAAABAAAAAQAAAAAAAAABAAAA6AAA AAgAAAAEAAAAAAAAAAABAAABAAAAAAAAAAEBAAABAAAAAAAAAAIBAAABAAAAAAAAAAMBAAABAAAA AAAAAAQBAAABAAAAAAAAAAUBAABoAAAAZG1hbmAAAAACAAAABAAAAAMAAAABAAAACQQAAAoAAABB AHIAaQBhAGwAAAAIAAAAAAAAAAMAAAAAAAAAJgAAAE0AbwBuAG8AdAB5AHAAZQAgAFQAeQBwAG8A ZwByAGEAcABoAHkAAAAGAQAABAAAAAAAGAAHAQAABgAAAAAAAAAAAAAABAAAAA4ACQARAAAAGgAB AA8ADfBsAAAAAACfDwQAAAAEAAAAAACgDwIAAAAqAAAAoQ8cAAAAAgAAAAAAIAgKAAAAAP8CAAcA AgAAAAAAAgAOAAAA2A8EAAAAAAAAAAAAqg8KAAAAAgAAAAEAAAAAAAAApg8MAAAA8AAAAFZdOH9Y gHiBDwAE8DYAAAASAArwCAAAAAGQAAAADAAAUwAL8B4AAACTAY6fiwCUAd69aAC/AQIAAgAEAwkA AAA/AwEAAQAQAPAHIAAAAP///wAAAAAAgICAAAAAAAC74OMAMzOZAACZmQCZzAAADwCIEzgAAAAP AIoTMAAAAAAAug8QAAAAXwBfAF8AUABQAFQAMQAwAAAAixMQAAAAAADrLggAAADkA8oBMLoqIwAA IgQIAAAAAQAAAAIAAAAPAO4D9wUAAAIA7wMYAAAAEAAAAAAAAAAAAAAAAAAAgAoBAAAHABMwDwAM BPIEAAAPAALw6gQAAFACCPAIAAAAAwAAAAOUAAAPAAPwlAQAAA8ABPAoAAAAAQAJ8BAAAAAAAK/G AAAAAAAAAAAAAAAAAgAK8AgAAAAAlAAABQAAAA8ABPAFAQAAEgAK8AgAAAAClAAAIAIAAAMBC/B4 AAAABAAAAAAAfwABAO8BgAB8DEMFgQAwZQEAggCYsgAAgwAwZQEAhACYsgAAhQAAAAAAhwABAAAA iAAAAAAAvwAEAAQA/wEAABEAAQMCBAAAPwMAAAgAgMMYAAAAvwMAAAIAUgBlAGMAdABhAG4AZwBs AGUAIAAyAAAAAAAQ8AgAAABABSABYBVwCw8AEfAcAAAAAADDCwgAAAD/////DQBDBQAAHwQEAAAA AgAAAA8ADfA5AAAAAACfDwQAAAAAAAAAAACoDwkAAABUaGFuayBZb3UAAKEPFAAAAAoAAAAAAAAA CgAHAAoAAAAAAAAADwAE8E8DAACiDArwCAAAAAOUAAAACgAAgwAL8GYAAAB/AAEA7wGAAPQTQwW/ AAQABAC/AQEAEQD/ARAAGAA/AwAACACAwzYAAAC/AwAAAgBTAGwAaQBkAGUAIABOAHUAbQBiAGUA cgAgAFAAbABhAGMAZQBoAG8AbABkAGUAcgAgADUAAAAAABDwCAAAAF4PIBBgFYoQDwAR8DkCAAAA ACAEAQAAAAgAABkQKAIAAAAAAAgMAQAAAgAAAAwBAAAAAAAAFAAAACAAAAABAAAAAQAAAAAAAAAB AAAA6AAAAAgAAAAEAAAAAAAAAAABAAABAAAAAAAAAAEBAAABAAAAAAAAAAIBAAABAAAAAAAAAAMB AAABAAAAAAAAAAQBAAABAAAAAAAAAAUBAABoAAAAZG1hbmAAAAACAAAABAAAAAMAAAABAAAACQQA AAoAAABBAHIAaQBhAGwAAAAIAAAAAAAAAAMAAAAAAAAAJgAAAE0AbwBuAG8AdAB5AHAAZQAgAFQA eQBwAG8AZwByAGEAcABoAHkAAAAGAQAABAAAAAAAGAAHAQAABgAAAAAAAAAAAAAABAAAAA4ACQAR AAAAGgABAAAAAAgMAQAAAgAAAAwBAAAAAAAAFAAAACAAAAABAAAAAQAAAAAAAAABAAAA6AAAAAgA AAAEAAAAAAAAAAABAAABAAAAAAAAAAEBAAABAAAAAAAAAAIBAAABAAAAAAAAAAMBAAABAAAAAAAA AAQBAAABAAAAAAAAAAUBAABoAAAAZG1hbmAAAAACAAAABAAAAAMAAAABAAAACQQAAAoAAABBAHIA aQBhAGwAAAAIAAAAAAAAAAMAAAAAAAAAJgAAAE0AbwBuAG8AdAB5AHAAZQAgAFQAeQBwAG8AZwBy AGEAcABoAHkAAAAGAQAABAAAAAAAGAAHAQAABgAAAAAAAAAAAAAABAAAAA4ACQARAAAAGgABAA8A DfB4AAAAAACfDwQAAAAEAAAAAACgDwIAAAAqAAAAoQ8oAAAAAgAAAAAAIAgKAAAAAP8CAAcAAQAA AAAAAgAOAAEAAAAABAIAAAQOAAAA2A8EAAAAAAAAAAAAqg8KAAAAAgAAAAEAAAAAAAAApg8MAAAA 8AAAAFZdOH9YgHiBDwAE8DYAAAASAArwCAAAAAGUAAAADAAAUwAL8B4AAACTAY6fiwCUAd69aAC/ AQIAAgAEAwkAAAA/AwEAAQAQAPAHIAAAAP///wAAAAAAgICAAAAAAAC74OMAMzOZAACZmQCZzAAA DwCIE5EAAAAPAIoTiQAAAAAAug8QAAAAXwBfAF8AUABQAFQAMQAwAAAAixNpAAAAAADrLggAAAD+ /MYBwDn/7AAAACsEAAAAAAAAAB8ARPE9AAAAAAAn8SAAAAAAAAAAAwAAAAAAAAAAAAAAAAAAAAAA swX/////EgAAAA8APfENAAAAQAFC8QUAAAABCQAAAA8AAisAAAAAAAAiBAgAAAABAAAABgAAAAAA HRAEAAAAAAAAAA8A8AP9BAAAAQDxAwgAAAADAQAABwATMA8ADAR9BAAADwAC8HUEAADwAAjwCAAA AAQAAAAEPAAADwAD8B8EAAAPAATwKAAAAAEACfAQAAAAAAAAAAAAAAAAAAAAAAAAAAIACvAIAAAA ADwAAAUAAAAPAATwFwIAAKIMCvAIAAAAAjwAAAAKAACTAAvwTgAAAH8AAQDvAYAAyBg9BYcAAgAA AL8ABAAEAL8BAQARAP8BAAAYAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBjAHQAYQBuAGcAbABlACAA NwAAAAAAEPAIAAAAXxWPCd8QfxYPABHwJQEAAAAAIAQBAAAACAAAGRAUAQAAAAAACAwBAAACAAAA DAEAAAAAAAAUAAAAIAAAAAEAAAABAAAAAAAAAAEAAADoAAAACAAAAAQAAAAAAAAAAAEAAAEAAAAA AAAAAQEAAAEAAAAAAAAAAgEAAAEAAAAAAAAAAwEAAAEAAAAAAAAABAEAAAEAAAAAAAAABQEAAGgA AABkbWFuYAAAAAIAAAAEAAAAAwAAAAEAAAAJBAAACgAAAEEAcgBpAGEAbAAAAAgAAAAAAAAAAwAA AAAAAAAmAAAATQBvAG4AbwB0AHkAcABlACAAVAB5AHAAbwBnAHIAYQBwAGgAeQAAAAYBAAAEAAAA AAAYAAcBAAAGAAAAAAAAAAAAAAAEAAAADgAJABEAAAAaAAEADwAN8GwAAAAAAJ8PBAAAAAQAAAAA AKAPAgAAACoAAAChDxwAAAACAAAAAAAgCAoAAAAA/wIABwACAAAAAAACAAwAAADYDwQAAAAAAAAA AACqDwoAAAACAAAAAQAAAAAAAACmDwwAAADwAAAAVl04f1iAeIEPAATwsgAAABIACvAIAAAAAzwA ACACAADzAAvwcgAAAAQAAAAAAH8ABAHvAYEAMGUBAIIAmLIAAIMAMGUBAIQAmLIAAIUAAAAAAIcA AQAAAIgAAAAAAL8ABAAEAP8BAQARAAEDBDQAAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBjAHQAYQBu AGcAbABlACAAMgAAAAAAEPAIAAAAsAHQAhAOIAoPABHwEAAAAAAAwwsIAAAAAAAAAAsAPQUPAATw DgEAABIACvAIAAAABDwAACACAAADAQvweAAAAAQAAAAAAH8AAQDvAYAAYBM9BYEAMGUBAIIAmLIA AIMAMGUBAIQAmLIAAIUAAAAAAIcAAAAAAIgAAAAAAL8ABAAEAP8BAQARAAEDBTQAAD8DAAAIAIDD GAAAAL8DAAACAFIAZQBjAHQAYQBuAGcAbABlACAAMwAAAAAAEPAIAAAAsAqwATAP0BQPABHwEAAA AAAAwwsIAAAAAQAAAAwAPQUPAA3wTgAAAAAAnw8EAAAAAgAAAAAAoQ8UAAAAAQAAAAAAAAAKAAcA AQAAAAAAAAAAAKoPCgAAAAEAAAABAAAAAAAAAKYPDAAAAPAAAABWXTh/WIB4gQ8ABPA2AAAAEgAK 8AgAAAABPAAAAAwAAFMAC/AeAAAAkwHevWgAlAGOn4sAvwECAAIABAMJAAAAPwMBAAEAEADwByAA AAD///8AAAAAAICAgAAAAAAAu+DjADMzmQAAmZkAmcwAAA8AiBM4AAAADwCKEzAAAAAAALoPEAAA AF8AXwBfAFAAUABUADEAMAAAAIsTEAAAAAAA6y4IAAAAxqXGAUCO+JUPAPAD/QQAAAEA8QMIAAAA GgEAAAcAEzAPAAwEfQQAAA8AAvB1BAAAMAEI8AgAAAAEAAAABEwAAA8AA/AfBAAADwAE8CgAAAAB AAnwEAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAAAABMAAAFAAAADwAE8BcCAACiDArwCAAAAAJM AAAACgAAkwAL8E4AAAB/AAEA7wGAAPjCPQWHAAIAAAC/AAQABAC/AQEAEQD/AQAAGAA/AwAACACA wxgAAAC/AwAAAgBSAGUAYwB0AGEAbgBnAGwAZQAgADcAAAAAABDwCAAAAF8VjwnfEH8WDwAR8CUB AAAAACAEAQAAAAgAABkQFAEAAAAAAAgMAQAAAgAAAAwBAAAAAAAAFAAAACAAAAABAAAAAQAAAAAA AAABAAAA6AAAAAgAAAAEAAAAAAAAAAABAAABAAAAAAAAAAEBAAABAAAAAAAAAAIBAAABAAAAAAAA AAMBAAABAAAAAAAAAAQBAAABAAAAAAAAAAUBAABoAAAAZG1hbmAAAAACAAAABAAAAAMAAAABAAAA CQQAAAoAAABBAHIAaQBhAGwAAAAIAAAAAAAAAAMAAAAAAAAAJgAAAE0AbwBuAG8AdAB5AHAAZQAg AFQAeQBwAG8AZwByAGEAcABoAHkAAAAGAQAABAAAAAAAGAAHAQAABgAAAAAAAAAAAAAABAAAAA4A CQARAAAAGgABAA8ADfBsAAAAAACfDwQAAAAEAAAAAACgDwIAAAAqAAAAoQ8cAAAAAgAAAAAAIAgK AAAAAP8CAAcAAgAAAAAAAgAMAAAA2A8EAAAAAAAAAAAAqg8KAAAAAgAAAAEAAAAAAAAApg8MAAAA 8AAAAFZdOH9YgHiBDwAE8LIAAAASAArwCAAAAANMAAAgAgAA8wAL8HIAAAAEAAAAAAB/AAQB7wGB ADBlAQCCAJiyAACDADBlAQCEAJiyAACFAAAAAACHAAEAAACIAAAAAAC/AAQABAD/AQEAEQABAwQ0 AAA/AwAACACAwxgAAAC/AwAAAgBSAGUAYwB0AGEAbgBnAGwAZQAgADIAAAAAABDwCAAAALAB0AIQ DiAKDwAR8BAAAAAAAMMLCAAAAAAAAAALAD0FDwAE8A4BAAASAArwCAAAAARMAAAgAgAAAwEL8HgA AAAEAAAAAAB/AAEA7wGAAESvPQWBADBlAQCCAJiyAACDADBlAQCEAJiyAACFAAAAAACHAAAAAACI AAAAAAC/AAQABAD/AQEAEQABAwU0AAA/AwAACACAwxgAAAC/AwAAAgBSAGUAYwB0AGEAbgBnAGwA ZQAgADMAAAAAABDwCAAAALAKsAEwD9AUDwAR8BAAAAAAAMMLCAAAAAEAAAAMAD0FDwAN8E4AAAAA AJ8PBAAAAAIAAAAAAKEPFAAAAAEAAAAAAAAACgAHAAEAAAAAAAAAAACqDwoAAAABAAAAAQAAAAAA AACmDwwAAADwAAAAVl04f1iAeIEPAATwNgAAABIACvAIAAAAAUwAAAAMAABTAAvwHgAAAJMB3r1o AJQBjp+LAL8BAgACAAQDCQAAAD8DAQABABAA8AcgAAAA////AAAAAACAgIAAAAAAALvg4wAzM5kA AJmZAJnMAAAPAIgTOAAAAA8AihMwAAAAAAC6DxAAAABfAF8AXwBQAFAAVAAxADAAAACLExAAAAAA AOsuCAAAAPz8xgHQU3i/DwDwA/0EAAABAPEDCAAAACABAAAHABMwDwAMBH0EAAAPAALwdQQAAFAB CPAIAAAABAAAAARUAAAPAAPwHwQAAA8ABPAoAAAAAQAJ8BAAAAAAAAAAAAAAAAAAAAAAAAAAAgAK 8AgAAAAAVAAABQAAAA8ABPAXAgAAogwK8AgAAAACVAAAAAoAAJMAC/BOAAAAfwABAO8BgAB8pD0F hwACAAAAvwAEAAQAvwEBABEA/wEAABgAPwMAAAgAgMMYAAAAvwMAAAIAUgBlAGMAdABhAG4AZwBs AGUAIAA3AAAAAAAQ8AgAAABfFY8J3xB/Fg8AEfAlAQAAAAAgBAEAAAAIAAAZEBQBAAAAAAAIDAEA AAIAAAAMAQAAAAAAABQAAAAgAAAAAQAAAAEAAAAAAAAAAQAAAOgAAAAIAAAABAAAAAAAAAAAAQAA AQAAAAAAAAABAQAAAQAAAAAAAAACAQAAAQAAAAAAAAADAQAAAQAAAAAAAAAEAQAAAQAAAAAAAAAF AQAAaAAAAGRtYW5gAAAAAgAAAAQAAAADAAAAAQAAAAkEAAAKAAAAQQByAGkAYQBsAAAACAAAAAAA AAADAAAAAAAAACYAAABNAG8AbgBvAHQAeQBwAGUAIABUAHkAcABvAGcAcgBhAHAAaAB5AAAABgEA AAQAAAAAABgABwEAAAYAAAAAAAAAAAAAAAQAAAAOAAkAEQAAABoAAQAPAA3wbAAAAAAAnw8EAAAA BAAAAAAAoA8CAAAAKgAAAKEPHAAAAAIAAAAAACAICgAAAAD/AgAHAAIAAAAAAAIADAAAANgPBAAA AAAAAAAAAKoPCgAAAAIAAAABAAAAAAAAAKYPDAAAAPAAAABWXTh/WIB4gQ8ABPCyAAAAEgAK8AgA AAADVAAAIAIAAPMAC/ByAAAABAAAAAAAfwAEAe8BgQAwZQEAggCYsgAAgwAwZQEAhACYsgAAhQAA AAAAhwABAAAAiAAAAAAAvwAEAAQA/wEBABEAAQMENAAAPwMAAAgAgMMYAAAAvwMAAAIAUgBlAGMA dABhAG4AZwBsAGUAIAAyAAAAAAAQ8AgAAACwAdACEA4gCg8AEfAQAAAAAADDCwgAAAAAAAAACwBA BQ8ABPAOAQAAEgAK8AgAAAAEVAAAIAIAAAMBC/B4AAAABAAAAAAAfwABAO8BgAC4AkAFgQAwZQEA ggCYsgAAgwAwZQEAhACYsgAAhQAAAAAAhwAAAAAAiAAAAAAAvwAEAAQA/wEBABEAAQMFNAAAPwMA AAgAgMMYAAAAvwMAAAIAUgBlAGMAdABhAG4AZwBsAGUAIAAzAAAAAAAQ8AgAAACwCrABMA/QFA8A EfAQAAAAAADDCwgAAAABAAAADABABQ8ADfBOAAAAAACfDwQAAAACAAAAAAChDxQAAAABAAAAAAAA AAoABwABAAAAAAAAAAAAqg8KAAAAAQAAAAEAAAAAAAAApg8MAAAA8AAAAFZdOH9YgHiBDwAE8DYA AAASAArwCAAAAAFUAAAADAAAUwAL8B4AAACTAd69aACUAY6fiwC/AQIAAgAEAwkAAAA/AwEAAQAQ APAHIAAAAP///wAAAAAAgICAAAAAAAC74OMAMzOZAACZmQCZzAAADwCIEzgAAAAPAIoTMAAAAAAA ug8QAAAAXwBfAF8AUABQAFQAMQAwAAAAixMQAAAAAADrLggAAAAkw8cBkPExWg8A8AP9BAAAAQDx AwgAAAAhAQAABwATMA8ADAR9BAAADwAC8HUEAABwAQjwCAAAAAQAAAAEXAAADwAD8B8EAAAPAATw KAAAAAEACfAQAAAAAAAAAAAAAAAAAAAAAAAAAAIACvAIAAAAAFwAAAUAAAAPAATwFwIAAKIMCvAI AAAAAlwAAAAKAACTAAvwTgAAAH8AAQDvAYAAeElABYcAAgAAAL8ABAAEAL8BAQARAP8BAAAYAD8D AAAIAIDDGAAAAL8DAAACAFIAZQBjAHQAYQBuAGcAbABlACAANwAAAAAAEPAIAAAAXxWPCd8QfxYP ABHwJQEAAAAAIAQBAAAACAAAGRAUAQAAAAAACAwBAAACAAAADAEAAAAAAAAUAAAAIAAAAAEAAAAB AAAAAAAAAAEAAADoAAAACAAAAAQAAAAAAAAAAAEAAAEAAAAAAAAAAQEAAAEAAAAAAAAAAgEAAAEA AAAAAAAAAwEAAAEAAAAAAAAABAEAAAEAAAAAAAAABQEAAGgAAABkbWFuYAAAAAIAAAAEAAAAAwAA AAEAAAAJBAAACgAAAEEAcgBpAGEAbAAAAAgAAAAAAAAAAwAAAAAAAAAmAAAATQBvAG4AbwB0AHkA cABlACAAVAB5AHAAbwBnAHIAYQBwAGgAeQAAAAYBAAAEAAAAAAAYAAcBAAAGAAAAAAAAAAAAAAAE AAAADgAJABEAAAAaAAEADwAN8GwAAAAAAJ8PBAAAAAQAAAAAAKAPAgAAACoAAAChDxwAAAACAAAA AAAgCAoAAAAA/wIABwACAAAAAAACAAwAAADYDwQAAAAAAAAAAACqDwoAAAACAAAAAQAAAAAAAACm DwwAAADwAAAAVl04f1iAeIEPAATwsgAAABIACvAIAAAAA1wAACACAADzAAvwcgAAAAQAAAAAAH8A BAHvAYEAMGUBAIIAmLIAAIMAMGUBAIQAmLIAAIUAAAAAAIcAAQAAAIgAAAAAAL8ABAAEAP8BAQAR AAEDBDQAAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBjAHQAYQBuAGcAbABlACAAMgAAAAAAEPAIAAAA sAHQAhAOIAoPABHwEAAAAAAAwwsIAAAAAAAAAAsAQAUPAATwDgEAABIACvAIAAAABFwAACACAAAD AQvweAAAAAQAAAAAAH8AAQDvAYAAPFhABYEAMGUBAIIAmLIAAIMAMGUBAIQAmLIAAIUAAAAAAIcA AAAAAIgAAAAAAL8ABAAEAP8BAQARAAEDBTQAAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBjAHQAYQBu AGcAbABlACAAMwAAAAAAEPAIAAAAsAqwATAP0BQPABHwEAAAAAAAwwsIAAAAAQAAAAwAQAUPAA3w TgAAAAAAnw8EAAAAAgAAAAAAoQ8UAAAAAQAAAAAAAAAKAAcAAQAAAAAAAAAAAKoPCgAAAAEAAAAB AAAAAAAAAKYPDAAAAPAAAABWXTh/WIB4gQ8ABPA2AAAAEgAK8AgAAAABXAAAAAwAAFMAC/AeAAAA kwHevWgAlAGOn4sAvwECAAIABAMJAAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAu+Dj ADMzmQAAmZkAmcwAAA8AiBM4AAAADwCKEzAAAAAAALoPEAAAAF8AXwBfAFAAUABUADEAMAAAAIsT EAAAAAAA6y4IAAAAJMPHAZDxMVoPAPAD/QQAAAEA8QMIAAAAJwEAAAcAEzAPAAwEfQQAAA8AAvB1 BAAAkAEI8AgAAAAEAAAABGQAAA8AA/AfBAAADwAE8CgAAAABAAnwEAAAAAAAAAAAAAAAAAAAAAAA AAACAArwCAAAAABkAAAFAAAADwAE8BcCAACiDArwCAAAAAJkAAAACgAAkwAL8E4AAAB/AAEA7wGA AGSRQAWHAAIAAAC/AAQABAC/AQEAEQD/AQAAGAA/AwAACACAwxgAAAC/AwAAAgBSAGUAYwB0AGEA bgBnAGwAZQAgADcAAAAAABDwCAAAAF8VjwnfEH8WDwAR8CUBAAAAACAEAQAAAAgAABkQFAEAAAAA AAgMAQAAAgAAAAwBAAAAAAAAFAAAACAAAAABAAAAAQAAAAAAAAABAAAA6AAAAAgAAAAEAAAAAAAA AAABAAABAAAAAAAAAAEBAAABAAAAAAAAAAIBAAABAAAAAAAAAAMBAAABAAAAAAAAAAQBAAABAAAA AAAAAAUBAABoAAAAZG1hbmAAAAACAAAABAAAAAMAAAABAAAACQQAAAoAAABBAHIAaQBhAGwAAAAI AAAAAAAAAAMAAAAAAAAAJgAAAE0AbwBuAG8AdAB5AHAAZQAgAFQAeQBwAG8AZwByAGEAcABoAHkA AAAGAQAABAAAAAAAGAAHAQAABgAAAAAAAAAAAAAABAAAAA4ACQARAAAAGgABAA8ADfBsAAAAAACf DwQAAAAEAAAAAACgDwIAAAAqAAAAoQ8cAAAAAgAAAAAAIAgKAAAAAP8CAAcAAgAAAAAAAgAMAAAA 2A8EAAAAAAAAAAAAqg8KAAAAAgAAAAEAAAAAAAAApg8MAAAA8AAAAFZdOH9YgHiBDwAE8LIAAAAS AArwCAAAAANkAAAgAgAA8wAL8HIAAAAEAAAAAAB/AAQB7wGBADBlAQCCAJiyAACDADBlAQCEAJiy AACFAAAAAACHAAEAAACIAAAAAAC/AAQABAD/AQEAEQABAwQ0AAA/AwAACACAwxgAAAC/AwAAAgBS AGUAYwB0AGEAbgBnAGwAZQAgADIAAAAAABDwCAAAALAB0AIQDiAKDwAR8BAAAAAAAMMLCAAAAAAA AAALAEAFDwAE8A4BAAASAArwCAAAAARkAAAgAgAAAwEL8HgAAAAEAAAAAAB/AAEA7wGAABh50wSB ADBlAQCCAJiyAACDADBlAQCEAJiyAACFAAAAAACHAAAAAACIAAAAAAC/AAQABAD/AQEAEQABAwU0 AAA/AwAACACAwxgAAAC/AwAAAgBSAGUAYwB0AGEAbgBnAGwAZQAgADMAAAAAABDwCAAAALAKsAEw D9AUDwAR8BAAAAAAAMMLCAAAAAEAAAAMAEAFDwAN8E4AAAAAAJ8PBAAAAAIAAAAAAKEPFAAAAAEA AAAAAAAACgAHAAEAAAAAAAAAAACqDwoAAAABAAAAAQAAAAAAAACmDwwAAADwAAAAVl04f1iAeIEP AATwNgAAABIACvAIAAAAAWQAAAAMAABTAAvwHgAAAJMB3r1oAJQBjp+LAL8BAgACAAQDCQAAAD8D AQABABAA8AcgAAAA////AAAAAACAgIAAAAAAALvg4wAzM5kAAJmZAJnMAAAPAIgTOAAAAA8AihMw AAAAAAC6DxAAAABfAF8AXwBQAFAAVAAxADAAAACLExAAAAAAAOsuCAAAACTDxwGQ8TFaDwDwA/0E AAABAPEDCAAAABUBAAAHABMwDwAMBH0EAAAPAALwdQQAALABCPAIAAAABAAAAARsAAAPAAPwHwQA AA8ABPAoAAAAAQAJ8BAAAAAAAAAAAAAAAAAAAAAAAAAAAgAK8AgAAAAAbAAABQAAAA8ABPAXAgAA ogwK8AgAAAACbAAAAAoAAJMAC/BOAAAAfwABAO8BgACovUAFhwACAAAAvwAEAAQAvwEBABEA/wEA ABgAPwMAAAgAgMMYAAAAvwMAAAIAUgBlAGMAdABhAG4AZwBsAGUAIAA3AAAAAAAQ8AgAAABfFY8J 3xB/Fg8AEfAlAQAAAAAgBAEAAAAIAAAZEBQBAAAAAAAIDAEAAAIAAAAMAQAAAAAAABQAAAAgAAAA AQAAAAEAAAAAAAAAAQAAAOgAAAAIAAAABAAAAAAAAAAAAQAAAQAAAAAAAAABAQAAAQAAAAAAAAAC AQAAAQAAAAAAAAADAQAAAQAAAAAAAAAEAQAAAQAAAAAAAAAFAQAAaAAAAGRtYW5gAAAAAgAAAAQA AAADAAAAAQAAAAkEAAAKAAAAQQByAGkAYQBsAAAACAAAAAAAAAADAAAAAAAAACYAAABNAG8AbgBv AHQAeQBwAGUAIABUAHkAcABvAGcAcgBhAHAAaAB5AAAABgEAAAQAAAAAABgABwEAAAYAAAAAAAAA AAAAAAQAAAAOAAkAEQAAABoAAQAPAA3wbAAAAAAAnw8EAAAABAAAAAAAoA8CAAAAKgAAAKEPHAAA AAIAAAAAACAICgAAAAD/AgAHAAIAAAAAAAIADAAAANgPBAAAAAAAAAAAAKoPCgAAAAIAAAABAAAA AAAAAKYPDAAAAPAAAABWXTh/WIB4gQ8ABPCyAAAAEgAK8AgAAAADbAAAIAIAAPMAC/ByAAAABAAA AAAAfwAEAe8BgQAwZQEAggCYsgAAgwAwZQEAhACYsgAAhQAAAAAAhwABAAAAiAAAAAAAvwAEAAQA /wEBABEAAQMENAAAPwMAAAgAgMMYAAAAvwMAAAIAUgBlAGMAdABhAG4AZwBsAGUAIAAyAAAAAAAQ 8AgAAACwAdACEA4gCg8AEfAQAAAAAADDCwgAAAAAAAAACwBABQ8ABPAOAQAAEgAK8AgAAAAEbAAA IAIAAAMBC/B4AAAABAAAAAAAfwABAO8BgAAw10AFgQAwZQEAggCYsgAAgwAwZQEAhACYsgAAhQAA AAAAhwAAAAAAiAAAAAAAvwAEAAQA/wEBABEAAQMFNAAAPwMAAAgAgMMYAAAAvwMAAAIAUgBlAGMA dABhAG4AZwBsAGUAIAAzAAAAAAAQ8AgAAACwCrABMA/QFA8AEfAQAAAAAADDCwgAAAABAAAADABA BQ8ADfBOAAAAAACfDwQAAAACAAAAAAChDxQAAAABAAAAAAAAAAoABwABAAAAAAAAAAAAqg8KAAAA AQAAAAEAAAAAAAAApg8MAAAA8AAAAFZdOH9YgHiBDwAE8DYAAAASAArwCAAAAAFsAAAADAAAUwAL 8B4AAACTAd69aACUAY6fiwC/AQIAAgAEAwkAAAA/AwEAAQAQAPAHIAAAAP///wAAAAAAgICAAAAA AAC74OMAMzOZAACZmQCZzAAADwCIEzgAAAAPAIoTMAAAAAAAug8QAAAAXwBfAF8AUABQAFQAMQAw AAAAixMQAAAAAADrLggAAAD8/MYB0FN4vw8A8AP9BAAAAQDxAwgAAAAiAQAABwATMA8ADAR9BAAA DwAC8HUEAADQAQjwCAAAAAQAAAAEdAAADwAD8B8EAAAPAATwKAAAAAEACfAQAAAAAAAAAAAAAAAA AAAAAAAAAAIACvAIAAAAAHQAAAUAAAAPAATwFwIAAKIMCvAIAAAAAnQAAAAKAACTAAvwTgAAAH8A AQDvAYAAzB1CBYcAAgAAAL8ABAAEAL8BAQARAP8BAAAYAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBj AHQAYQBuAGcAbABlACAANwAAAAAAEPAIAAAAXxWPCd8QfxYPABHwJQEAAAAAIAQBAAAACAAAGRAU AQAAAAAACAwBAAACAAAADAEAAAAAAAAUAAAAIAAAAAEAAAABAAAAAAAAAAEAAADoAAAACAAAAAQA AAAAAAAAAAEAAAEAAAAAAAAAAQEAAAEAAAAAAAAAAgEAAAEAAAAAAAAAAwEAAAEAAAAAAAAABAEA AAEAAAAAAAAABQEAAGgAAABkbWFuYAAAAAIAAAAEAAAAAwAAAAEAAAAJBAAACgAAAEEAcgBpAGEA bAAAAAgAAAAAAAAAAwAAAAAAAAAmAAAATQBvAG4AbwB0AHkAcABlACAAVAB5AHAAbwBnAHIAYQBw AGgAeQAAAAYBAAAEAAAAAAAYAAcBAAAGAAAAAAAAAAAAAAAEAAAADgAJABEAAAAaAAEADwAN8GwA AAAAAJ8PBAAAAAQAAAAAAKAPAgAAACoAAAChDxwAAAACAAAAAAAgCAoAAAAA/wIABwACAAAAAAAC AAwAAADYDwQAAAAAAAAAAACqDwoAAAACAAAAAQAAAAAAAACmDwwAAADwAAAAVl04f1iAeIEPAATw sgAAABIACvAIAAAAA3QAACACAADzAAvwcgAAAAQAAAAAAH8ABAHvAYEAMGUBAIIAmLIAAIMAMGUB AIQAmLIAAIUAAAAAAIcAAQAAAIgAAAAAAL8ABAAEAP8BAQARAAEDBDQAAD8DAAAIAIDDGAAAAL8D AAACAFIAZQBjAHQAYQBuAGcAbABlACAAMgAAAAAAEPAIAAAAsAHQAhAOIAoPABHwEAAAAAAAwwsI AAAAAAAAAAsAQgUPAATwDgEAABIACvAIAAAABHQAACACAAADAQvweAAAAAQAAAAAAH8AAQDvAYAA nBFCBYEAMGUBAIIAmLIAAIMAMGUBAIQAmLIAAIUAAAAAAIcAAAAAAIgAAAAAAL8ABAAEAP8BAQAR AAEDBTQAAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBjAHQAYQBuAGcAbABlACAAMwAAAAAAEPAIAAAA sAqwATAP0BQPABHwEAAAAAAAwwsIAAAAAQAAAAwAQgUPAA3wTgAAAAAAnw8EAAAAAgAAAAAAoQ8U AAAAAQAAAAAAAAAKAAcAAQAAAAAAAAAAAKoPCgAAAAEAAAABAAAAAAAAAKYPDAAAAPAAAABWXTh/ WIB4gQ8ABPA2AAAAEgAK8AgAAAABdAAAAAwAAFMAC/AeAAAAkwHevWgAlAGOn4sAvwECAAIABAMJ AAAAPwMBAAEAEADwByAAAAD///8AAAAAAICAgAAAAAAAu+DjADMzmQAAmZkAmcwAAA8AiBM4AAAA DwCKEzAAAAAAALoPEAAAAF8AXwBfAFAAUABUADEAMAAAAIsTEAAAAAAA6y4IAAAA/PzGAdBTeL8P APAD/QQAAAEA8QMIAAAAIwEAAAcAEzAPAAwEfQQAAA8AAvB1BAAA8AEI8AgAAAAEAAAABHwAAA8A A/AfBAAADwAE8CgAAAABAAnwEAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAAAAB8AAAFAAAADwAE 8BcCAACiDArwCAAAAAJ8AAAACgAAkwAL8E4AAAB/AAEA7wGAAJA9QgWHAAIAAAC/AAQABAC/AQEA EQD/AQAAGAA/AwAACACAwxgAAAC/AwAAAgBSAGUAYwB0AGEAbgBnAGwAZQAgADcAAAAAABDwCAAA AF8VjwnfEH8WDwAR8CUBAAAAACAEAQAAAAgAABkQFAEAAAAAAAgMAQAAAgAAAAwBAAAAAAAAFAAA ACAAAAABAAAAAQAAAAAAAAABAAAA6AAAAAgAAAAEAAAAAAAAAAABAAABAAAAAAAAAAEBAAABAAAA AAAAAAIBAAABAAAAAAAAAAMBAAABAAAAAAAAAAQBAAABAAAAAAAAAAUBAABoAAAAZG1hbmAAAAAC AAAABAAAAAMAAAABAAAACQQAAAoAAABBAHIAaQBhAGwAAAAIAAAAAAAAAAMAAAAAAAAAJgAAAE0A bwBuAG8AdAB5AHAAZQAgAFQAeQBwAG8AZwByAGEAcABoAHkAAAAGAQAABAAAAAAAGAAHAQAABgAA AAAAAAAAAAAABAAAAA4ACQARAAAAGgABAA8ADfBsAAAAAACfDwQAAAAEAAAAAACgDwIAAAAqAAAA oQ8cAAAAAgAAAAAAIAgKAAAAAP8CAAcAAgAAAAAAAgAMAAAA2A8EAAAAAAAAAAAAqg8KAAAAAgAA AAEAAAAAAAAApg8MAAAA8AAAAFZdOH9YgHiBDwAE8LIAAAASAArwCAAAAAN8AAAgAgAA8wAL8HIA AAAEAAAAAAB/AAQB7wGBADBlAQCCAJiyAACDADBlAQCEAJiyAACFAAAAAACHAAEAAACIAAAAAAC/ AAQABAD/AQEAEQABAwQ0AAA/AwAACACAwxgAAAC/AwAAAgBSAGUAYwB0AGEAbgBnAGwAZQAgADIA AAAAABDwCAAAALAB0AIQDiAKDwAR8BAAAAAAAMMLCAAAAAAAAAALAEIFDwAE8A4BAAASAArwCAAA AAR8AAAgAgAAAwEL8HgAAAAEAAAAAAB/AAEA7wGAAJBjQgWBADBlAQCCAJiyAACDADBlAQCEAJiy AACFAAAAAACHAAAAAACIAAAAAAC/AAQABAD/AQEAEQABAwU0AAA/AwAACACAwxgAAAC/AwAAAgBS AGUAYwB0AGEAbgBnAGwAZQAgADMAAAAAABDwCAAAALAKsAEwD9AUDwAR8BAAAAAAAMMLCAAAAAEA AAAMAEIFDwAN8E4AAAAAAJ8PBAAAAAIAAAAAAKEPFAAAAAEAAAAAAAAACgAHAAEAAAAAAAAAAACq DwoAAAABAAAAAQAAAAAAAACmDwwAAADwAAAAVl04f1iAeIEPAATwNgAAABIACvAIAAAAAXwAAAAM AABTAAvwHgAAAJMB3r1oAJQBjp+LAL8BAgACAAQDCQAAAD8DAQABABAA8AcgAAAA////AAAAAACA gIAAAAAAALvg4wAzM5kAAJmZAJnMAAAPAIgTOAAAAA8AihMwAAAAAAC6DxAAAABfAF8AXwBQAFAA VAAxADAAAACLExAAAAAAAOsuCAAAAPz8xgHQU3i/DwDwA/0EAAABAPEDCAAAACQBAAAHABMwDwAM BH0EAAAPAALwdQQAABACCPAIAAAABAAAAASEAAAPAAPwHwQAAA8ABPAoAAAAAQAJ8BAAAAAAAEYC AAAAAAAAAAAAAAAAAgAK8AgAAAAAhAAABQAAAA8ABPAXAgAAogwK8AgAAAAChAAAAAoAAJMAC/BO AAAAfwABAO8BgAAEoUIFhwACAAAAvwAEAAQAvwEBABEA/wEAABgAPwMAAAgAgMMYAAAAvwMAAAIA UgBlAGMAdABhAG4AZwBsAGUAIAA3AAAAAAAQ8AgAAABfFY8J3xB/Fg8AEfAlAQAAAAAgBAEAAAAI AAAZEBQBAAAAAAAIDAEAAAIAAAAMAQAAAAAAABQAAAAgAAAAAQAAAAEAAAAAAAAAAQAAAOgAAAAI AAAABAAAAAAAAAAAAQAAAQAAAAAAAAABAQAAAQAAAAAAAAACAQAAAQAAAAAAAAADAQAAAQAAAAAA AAAEAQAAAQAAAAAAAAAFAQAAaAAAAGRtYW5gAAAAAgAAAAQAAAADAAAAAQAAAAkEAAAKAAAAQQBy AGkAYQBsAAAACAAAAAAAAAADAAAAAAAAACYAAABNAG8AbgBvAHQAeQBwAGUAIABUAHkAcABvAGcA cgBhAHAAaAB5AAAABgEAAAQAAAAAABgABwEAAAYAAAAAAAAAAAAAAAQAAAAOAAkAEQAAABoAAQAP AA3wbAAAAAAAnw8EAAAABAAAAAAAoA8CAAAAKgAAAKEPHAAAAAIAAAAAACAICgAAAAD/AgAHAAIA AAAAAAIADAAAANgPBAAAAAAAAAAAAKoPCgAAAAIAAAABAAAAAAAAAKYPDAAAAPAAAABWXTh/WIB4 gQ8ABPCyAAAAEgAK8AgAAAADhAAAIAIAAPMAC/ByAAAABAAAAAAAfwAEAe8BgQAwZQEAggCYsgAA gwAwZQEAhACYsgAAhQAAAAAAhwABAAAAiAAAAAAAvwAEAAQA/wEBABEAAQMENAAAPwMAAAgAgMMY AAAAvwMAAAIAUgBlAGMAdABhAG4AZwBsAGUAIAAyAAAAAAAQ8AgAAACwAdACEA4gCg8AEfAQAAAA AADDCwgAAAAAAAAACwBCBQ8ABPAOAQAAEgAK8AgAAAAEhAAAIAIAAAMBC/B4AAAABAAAAAAAfwAB AO8BgAC0qkIFgQAwZQEAggCYsgAAgwAwZQEAhACYsgAAhQAAAAAAhwAAAAAAiAAAAAAAvwAEAAQA /wEBABEAAQMFNAAAPwMAAAgAgMMYAAAAvwMAAAIAUgBlAGMAdABhAG4AZwBsAGUAIAAzAAAAAAAQ 8AgAAACwCrABMA/QFA8AEfAQAAAAAADDCwgAAAABAAAADABCBQ8ADfBOAAAAAACfDwQAAAACAAAA AAChDxQAAAABAAAAAAAAAAoABwABAAAAAAAAAAAAqg8KAAAAAQAAAAEAAAAAAAAApg8MAAAA8AAA AFZdOH9YgHiBDwAE8DYAAAASAArwCAAAAAGEAAAADAAAUwAL8B4AAACTAd69aACUAY6fiwC/AQIA AgAEAwkAAAA/AwEAAQAQAPAHIAAAAP///wAAAAAAgICAAAAAAAC74OMAMzOZAACZmQCZzAAADwCI EzgAAAAPAIoTMAAAAAAAug8QAAAAXwBfAF8AUABQAFQAMQAwAAAAixMQAAAAAADrLggAAAD8/MYB 0FN4vw8A8AP9BAAAAQDxAwgAAAAlAQAABwATMA8ADAR9BAAADwAC8HUEAAAwAgjwCAAAAAQAAAAE jAAADwAD8B8EAAAPAATwKAAAAAEACfAQAAAAAAAAAAAAAAAAAAAAAAAAAAIACvAIAAAAAIwAAAUA AAAPAATwFwIAAKIMCvAIAAAAAowAAAAKAACTAAvwTgAAAH8AAQDvAYAAENNCBYcAAgAAAL8ABAAE AL8BAQARAP8BAAAYAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBjAHQAYQBuAGcAbABlACAANwAAAAAA EPAIAAAAXxWPCd8QfxYPABHwJQEAAAAAIAQBAAAACAAAGRAUAQAAAAAACAwBAAACAAAADAEAAAAA AAAUAAAAIAAAAAEAAAABAAAAAAAAAAEAAADoAAAACAAAAAQAAAAAAAAAAAEAAAEAAAAAAAAAAQEA AAEAAAAAAAAAAgEAAAEAAAAAAAAAAwEAAAEAAAAAAAAABAEAAAEAAAAAAAAABQEAAGgAAABkbWFu YAAAAAIAAAAEAAAAAwAAAAEAAAAJBAAACgAAAEEAcgBpAGEAbAAAAAgAAAAAAAAAAwAAAAAAAAAm AAAATQBvAG4AbwB0AHkAcABlACAAVAB5AHAAbwBnAHIAYQBwAGgAeQAAAAYBAAAEAAAAAAAYAAcB AAAGAAAAAAAAAAAAAAAEAAAADgAJABEAAAAaAAEADwAN8GwAAAAAAJ8PBAAAAAQAAAAAAKAPAgAA ACoAAAChDxwAAAACAAAAAAAgCAoAAAAA/wIABwACAAAAAAACAAwAAADYDwQAAAAAAAAAAACqDwoA AAACAAAAAQAAAAAAAACmDwwAAADwAAAAVl04f1iAeIEPAATwsgAAABIACvAIAAAAA4wAACACAADz AAvwcgAAAAQAAAAAAH8ABAHvAYEAMGUBAIIAmLIAAIMAMGUBAIQAmLIAAIUAAAAAAIcAAQAAAIgA AAAAAL8ABAAEAP8BAQARAAEDBDQAAD8DAAAIAIDDGAAAAL8DAAACAFIAZQBjAHQAYQBuAGcAbABl ACAAMgAAAAAAEPAIAAAAsAHQAhAOIAoPABHwEAAAAAAAwwsIAAAAAAAAAAsAQgUPAATwDgEAABIA CvAIAAAABIwAACACAAADAQvweAAAAAQAAAAAAH8AAQDvAYAACOZCBYEAMGUBAIIAmLIAAIMAMGUB AIQAmLIAAIUAAAAAAIcAAAAAAIgAAAAAAL8ABAAEAP8BAQARAAEDBTQAAD8DAAAIAIDDGAAAAL8D AAACAFIAZQBjAHQAYQBuAGcAbABlACAAMwAAAAAAEPAIAAAAsAqwATAP0BQPABHwEAAAAAAAwwsI AAAAAQAAAAwAQgUPAA3wTgAAAAAAnw8EAAAAAgAAAAAAoQ8UAAAAAQAAAAAAAAAKAAcAAQAAAAAA AAAAAKoPCgAAAAEAAAABAAAAAAAAAKYPDAAAAPAAAABWXTh/WIB4gQ8ABPA2AAAAEgAK8AgAAAAB jAAAAAwAAFMAC/AeAAAAkwHevWgAlAGOn4sAvwECAAIABAMJAAAAPwMBAAEAEADwByAAAAD///8A AAAAAICAgAAAAAAAu+DjADMzmQAAmZkAmcwAAA8AiBM4AAAADwCKEzAAAAAAALoPEAAAAF8AXwBf AFAAUABUADEAMAAAAIsTEAAAAAAA6y4IAAAA/PzGAdBTeL8PAPAD/QQAAAEA8QMIAAAAEgEAAAcA EzAPAAwEfQQAAA8AAvB1BAAAYAII8AgAAAAEAAAABJgAAA8AA/AfBAAADwAE8CgAAAABAAnwEAAA AAAAAAAAAAAAAAAAAAAAAAACAArwCAAAAACYAAAFAAAADwAE8BcCAACiDArwCAAAAAKYAAAACgAA kwAL8E4AAAB/AAEA7wGAAOAsQwWHAAIAAAC/AAQABAC/AQEAEQD/AQAAGAA/AwAACACAwxgAAAC/ AwAAAgBSAGUAYwB0AGEAbgBnAGwAZQAgADcAAAAAABDwCAAAAF8VjwnfEH8WDwAR8CUBAAAAACAE AQAAAAgAABkQFAEAAAAAAAgMAQAAAgAAAAwBAAAAAAAAFAAAACAAAAABAAAAAQAAAAAAAAABAAAA 6AAAAAgAAAAEAAAAAAAAAAABAAABAAAAAAAAAAEBAAABAAAAAAAAAAIBAAABAAAAAAAAAAMBAAAB AAAAAAAAAAQBAAABAAAAAAAAAAUBAABoAAAAZG1hbmAAAAACAAAABAAAAAMAAAABAAAACQQAAAoA AABBAHIAaQBhAGwAAAAIAAAAAAAAAAMAAAAAAAAAJgAAAE0AbwBuAG8AdAB5AHAAZQAgAFQAeQBw AG8AZwByAGEAcABoAHkAAAAGAQAABAAAAAAAGAAHAQAABgAAAAAAAAAAAAAABAAAAA4ACQARAAAA GgABAA8ADfBsAAAAAACfDwQAAAAEAAAAAACgDwIAAAAqAAAAoQ8cAAAAAgAAAAAAIAgKAAAAAP8C AAcAAgAAAAAAAgAMAAAA2A8EAAAAAAAAAAAAqg8KAAAAAgAAAAEAAAAAAAAApg8MAAAA8AAAAFZd OH9YgHiBDwAE8LIAAAASAArwCAAAAAOYAAAgAgAA8wAL8HIAAAAEAAAAAAB/AAQB7wGBADBlAQCC AJiyAACDADBlAQCEAJiyAACFAAAAAACHAAEAAACIAAAAAAC/AAQABAD/AQEAEQABAwQ0AAA/AwAA CACAwxgAAAC/AwAAAgBSAGUAYwB0AGEAbgBnAGwAZQAgADIAAAAAABDwCAAAALAB0AIQDiAKDwAR 8BAAAAAAAMMLCAAAAAAAAAALAEMFDwAE8A4BAAASAArwCAAAAASYAAAgAgAAAwEL8HgAAAAEAAAA AAB/AAEA7wGAAMw1QwWBADBlAQCCAJiyAACDADBlAQCEAJiyAACFAAAAAACHAAAAAACIAAAAAAC/ AAQABAD/AQEAEQABAwU0AAA/AwAACACAwxgAAAC/AwAAAgBSAGUAYwB0AGEAbgBnAGwAZQAgADMA AAAAABDwCAAAALAKsAEwD9AUDwAR8BAAAAAAAMMLCAAAAAEAAAAMAEMFDwAN8E4AAAAAAJ8PBAAA AAIAAAAAAKEPFAAAAAEAAAAAAAAACgAHAAEAAAAAAAAAAACqDwoAAAABAAAAAQAAAAAAAACmDwwA AADwAAAAVl04f1iAeIEPAATwNgAAABIACvAIAAAAAZgAAAAMAABTAAvwHgAAAJMB3r1oAJQBjp+L AL8BAgACAAQDCQAAAD8DAQABABAA8AcgAAAA////AAAAAACAgIAAAAAAALvg4wAzM5kAAJmZAJnM AAAPAIgTOAAAAA8AihMwAAAAAAC6DxAAAABfAF8AXwBQAFAAVAAxADAAAACLExAAAAAAAOsuCAAA AAn9xgGggNbFDwDwAwwCAAABAPEDCAAAACkBAAAHABMwDwAMBIwBAAAPAALwhAEAAHACCPAIAAAA AwAAAAOcAAAPAAPwHAEAAA8ABPAoAAAAAQAJ8BAAAAAAAAAAAAAAAAAAAAAAAAAAAgAK8AgAAAAA nAAABQAAAA8ABPBYAAAAEgAK8AgAAAACnAAAIAIAAEMAC/AYAAAAfwAEAAQAvwEBAAEA/wEBAAEA AQMENAAAAAAQ8AgAAACwAdACEA4gCg8AEfAQAAAAAADDCwgAAAAAAAAACwBDBQ8ABPCEAAAAEgAK 8AgAAAADnAAAIAIAAFMAC/AeAAAAfwAAAAQAgAAYIkMFvwEBAAEA/wEBAAEAAQMFNAAAAAAQ8AgA AACwCrABMA/QFA8AEfAQAAAAAADDCwgAAAABAAAADABDBQ8ADfAeAAAAAACfDwQAAAACAAAAAACq DwoAAAABAAAAAQAAAAAADwAE8EgAAAASAArwCAAAAAGcAAAADAAAgwAL8DAAAACBAQAAAAiDAQUA AAiTAd69aACUAY6fiwC/ARIAEgD/AQAACAAEAwkAAAA/AwEAAQAQAPAHIAAAAP///wAAAAAAgICA AAAAAAC74OMAMzOZAACZmQCZzAAADwCIEzgAAAAPAIoTMAAAAAAAug8QAAAAXwBfAF8AUABQAFQA MQAwAAAAixMQAAAAAADrLggAAAAOBMoBEJ5uNw8A8AMMAgAAAQDxAwgAAAAmAQAABwATMA8ADASM AQAADwAC8IQBAACAAgjwCAAAAAMAAAADoAAADwAD8BwBAAAPAATwKAAAAAEACfAQAAAAAAAAAAAA AAAAAAAAAAAAAAIACvAIAAAAAKAAAAUAAAAPAATwWAAAABIACvAIAAAAAqAAACACAABDAAvwGAAA AH8ABAAEAL8BAQABAP8BAQABAAEDBDQAAAAAEPAIAAAAsAHQAhAOIAoPABHwEAAAAAAAwwsIAAAA AAAAAAsAQwUPAATwhAAAABIACvAIAAAAA6AAACACAABTAAvwHgAAAH8AAAAEAIAAwLNDBb8BAQAB AP8BAQABAAEDBTQAAAAAEPAIAAAAsAqwATAP0BQPABHwEAAAAAAAwwsIAAAAAQAAAAwAQwUPAA3w HgAAAAAAnw8EAAAAAgAAAAAAqg8KAAAAAQAAAAEAAAAAAA8ABPBIAAAAEgAK8AgAAAABoAAAAAwA AIMAC/AwAAAAgQEAAAAIgwEFAAAIkwHevWgAlAGOn4sAvwESABIA/wEAAAgABAMJAAAAPwMBAAEA EADwByAAAAD///8AAAAAAICAgAAAAAAAu+DjADMzmQAAmZkAmcwAAA8AiBM4AAAADwCKEzAAAAAA ALoPEAAAAF8AXwBfAFAAUABUADEAMAAAAIsTEAAAAAAA6y4IAAAADgTKATAqKToPAPADDAIAAAEA 8QMIAAAAKAEAAAcAEzAPAAwEjAEAAA8AAvCEAQAAkAII8AgAAAADAAAAA6QAAA8AA/AcAQAADwAE 8CgAAAABAAnwEAAAAAAAAAAAAAAAAAAAAAAAAAACAArwCAAAAACkAAAFAAAADwAE8FgAAAASAArw CAAAAAKkAAAgAgAAQwAL8BgAAAB/AAQABAC/AQEAAQD/AQEAAQABAwQ0AAAAABDwCAAAALAB0AIQ DiAKDwAR8BAAAAAAAMMLCAAAAAAAAAALAEMFDwAE8IQAAAASAArwCAAAAAOkAAAgAgAAUwAL8B4A AAB/AAAABACAAFzaQwW/AQEAAQD/AQEAAQABAwU0AAAAABDwCAAAALAKsAEwD9AUDwAR8BAAAAAA AMMLCAAAAAEAAAAMAEMFDwAN8B4AAAAAAJ8PBAAAAAIAAAAAAKoPCgAAAAEAAAABAAAAAAAPAATw SAAAABIACvAIAAAAAaQAAAAMAACDAAvwMAAAAIEBAAAACIMBBQAACJMB3r1oAJQBjp+LAL8BEgAS AP8BAAAIAAQDCQAAAD8DAQABABAA8AcgAAAA////AAAAAACAgIAAAAAAALvg4wAzM5kAAJmZAJnM AAAPAIgTOAAAAA8AihMwAAAAAAC6DxAAAABfAF8AXwBQAFAAVAAxADAAAACLExAAAAAAAOsuCAAA AA4EygHQokF8AAByF4QAAAABAMABAAAAAIeWAABQEAAATN4AACvjAADp6AAABfoAAPkNAQBpFgEA siABAPgoAQC9MQEAhTkBAEBCAQBwSgEAgVIBAIpYAQCJXgEAjmMBAJNoAQCYbQEAnXIBAKJ3AQCn fAEArIEBALGGAQC2iwEAu5ABAB4AMADAlQEA1JcBAOiZAQAAAPUPHAAAAAMBAADHHwADAAAAAPyb AQABAAAAIAAAAA8AxTEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAA/v8AAAUBAgAAAAAAAAAAAAAAAAAAAAAAAQAAAOCFn/L5T2gQq5EIACsns9kw AAAA5FQAAAwAAAABAAAAaAAAAAIAAABwAAAABAAAAIwAAAAHAAAAqAAAAAgAAAC8AAAACQAAANgA AAASAAAA5AAAAAoAAAAIAQAADAAAABQBAAANAAAAIAEAAA8AAAAsAQAAEQAAADQBAAACAAAA5AQA AB4AAAAUAAAAU3lzbG9nIFdHIElFVEY3NAAAAAAeAAAAFAAAAERhdmlkIEhhcnJpbmd0b24AAAAA HgAAAAwAAABJU01TIElFVEY3NAAeAAAAFAAAAERhdmlkIEhhcnJpbmd0b24AAAAAHgAAAAQAAAA1 AAAAHgAAABwAAABNaWNyb3NvZnQgT2ZmaWNlIFBvd2VyUG9pbnQAQAAAAFBC+fRpAQAAQAAAAK8C nXzhA8oBQAAAAGDzwtQCBcoBAwAAALYBAABHAAAAqFMAAP////8DAAAACACJEGcMAAABAAkAAAPM KQAAAQChJwAAAAAEAAAAAwEIAAUAAAALAgAAAAAFAAAADALRAsEDCQIAAPcAAAMCAQAAAACAAAAA AIAAAICAAAAAAIAAgACAAACAgADAwMAAwNzAAKbK8AAEBAQACAgIAAwMDAAREREAFhYWABwcHAAi IiIAKSkpAFVVVQBNTU0AQkJCADk5OQD/fIAA/1BQANYAkwDM7P8A79bGAOfn1gCtqZAAMwAAAGYA AACZAAAAzAAAAAAzAAAzMwAAZjMAAJkzAADMMwAA/zMAAABmAAAzZgAAZmYAAJlmAADMZgAA/2YA AACZAAAzmQAAZpkAAJmZAADMmQAA/5kAAADMAAAzzAAAZswAAJnMAADMzAAA/8wAAGb/AACZ/wAA zP8AAAAAMwAzADMAZgAzAJkAMwDMADMA/wAzAAAzMwAzMzMAZjMzAJkzMwDMMzMA/zMzAABmMwAz ZjMAZmYzAJlmMwDMZjMA/2YzAACZMwAzmTMAZpkzAJmZMwDMmTMA/5kzAADMMwAzzDMAZswzAJnM MwDMzDMA/8wzADP/MwBm/zMAmf8zAMz/MwD//zMAAABmADMAZgBmAGYAmQBmAMwAZgD/AGYAADNm ADMzZgBmM2YAmTNmAMwzZgD/M2YAAGZmADNmZgBmZmYAmWZmAMxmZgAAmWYAM5lmAGaZZgCZmWYA zJlmAP+ZZgAAzGYAM8xmAJnMZgDMzGYA/8xmAAD/ZgAz/2YAmf9mAMz/ZgD/AMwAzAD/AACZmQCZ M5kAmQCZAMwAmQAAAJkAMzOZAGYAmQDMM5kA/wCZAABmmQAzZpkAZjOZAJlmmQDMZpkA/zOZADOZ mQBmmZkAmZmZAMyZmQD/mZkAAMyZADPMmQBmzGYAmcyZAMzMmQD/zJkAAP+ZADP/mQBmzJkAmf+Z AMz/mQD//5kAAADMADMAmQBmAMwAmQDMAMwAzAAAM5kAMzPMAGYzzACZM8wAzDPMAP8zzAAAZswA M2bMAGZmmQCZZswAzGbMAP9mmQAAmcwAM5nMAGaZzACZmcwAzJnMAP+ZzAAAzMwAM8zMAGbMzACZ zMwAzMzMAP/MzAAA/8wAM//MAGb/mQCZ/8wAzP/MAP//zAAzAMwAZgD/AJkA/wAAM8wAMzP/AGYz /wCZM/8AzDP/AP8z/wAAZv8AM2b/AGZmzACZZv8AzGb/AP9mzAAAmf8AM5n/AGaZ/wCZmf8AzJn/ AP+Z/wAAzP8AM8z/AGbM/wCZzP8AzMz/AP/M/wAz//8AZv/MAJn//wDM//8A/2ZmAGb/ZgD//2YA Zmb/AP9m/wBm//8ApQAhAF9fXwB3d3cAhoaGAJaWlgDLy8sAsrKyANfX1wDd3d0A4+PjAOrq6gDx 8fEA+Pj4AP/78ACgoKQAgICAAP8AAAAA/wAA//8AAAAA/wD/AP8A////AAAAAAAAAAAAkAEVAAQA AAA0AgAABAAAAAcBAwChJwAAQQsgAMwAeACgAAAAAADQAsADAAAAACgAAACgAAAAeAAAAAEACAAA AAAAAEsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAwMDAAMDc wADwyqYABAQEAAgICAAMDAwAERERABYWFgAcHBwAIiIiACkpKQBVVVUATU1NAEJCQgA5OTkAgHz/ AFBQ/wCTANYA/+zMAMbW7wDW5+cAkKmtAAAAMwAAAGYAAACZAAAAzAAAMwAAADMzAAAzZgAAM5kA ADPMAAAz/wAAZgAAAGYzAABmZgAAZpkAAGbMAABm/wAAmQAAAJkzAACZZgAAmZkAAJnMAACZ/wAA zAAAAMwzAADMZgAAzJkAAMzMAADM/wAA/2YAAP+ZAAD/zAAzAAAAMwAzADMAZgAzAJkAMwDMADMA /wAzMwAAMzMzADMzZgAzM5kAMzPMADMz/wAzZgAAM2YzADNmZgAzZpkAM2bMADNm/wAzmQAAM5kz ADOZZgAzmZkAM5nMADOZ/wAzzAAAM8wzADPMZgAzzJkAM8zMADPM/wAz/zMAM/9mADP/mQAz/8wA M///AGYAAABmADMAZgBmAGYAmQBmAMwAZgD/AGYzAABmMzMAZjNmAGYzmQBmM8wAZjP/AGZmAABm ZjMAZmZmAGZmmQBmZswAZpkAAGaZMwBmmWYAZpmZAGaZzABmmf8AZswAAGbMMwBmzJkAZszMAGbM /wBm/wAAZv8zAGb/mQBm/8wAzAD/AP8AzACZmQAAmTOZAJkAmQCZAMwAmQAAAJkzMwCZAGYAmTPM AJkA/wCZZgAAmWYzAJkzZgCZZpkAmWbMAJkz/wCZmTMAmZlmAJmZmQCZmcwAmZn/AJnMAACZzDMA ZsxmAJnMmQCZzMwAmcz/AJn/AACZ/zMAmcxmAJn/mQCZ/8wAmf//AMwAAACZADMAzABmAMwAmQDM AMwAmTMAAMwzMwDMM2YAzDOZAMwzzADMM/8AzGYAAMxmMwCZZmYAzGaZAMxmzACZZv8AzJkAAMyZ MwDMmWYAzJmZAMyZzADMmf8AzMwAAMzMMwDMzGYAzMyZAMzMzADMzP8AzP8AAMz/MwCZ/2YAzP+Z AMz/zADM//8AzAAzAP8AZgD/AJkAzDMAAP8zMwD/M2YA/zOZAP8zzAD/M/8A/2YAAP9mMwDMZmYA /2aZAP9mzADMZv8A/5kAAP+ZMwD/mWYA/5mZAP+ZzAD/mf8A/8wAAP/MMwD/zGYA/8yZAP/MzAD/ zP8A//8zAMz/ZgD//5kA///MAGZm/wBm/2YAZv//AP9mZgD/Zv8A//9mACEApQBfX18Ad3d3AIaG hgCWlpYAy8vLALKysgDX19cA3d3dAOPj4wDq6uoA8fHxAPj4+ADw+/8ApKCgAICAgAAAAP8AAP8A AAD//wD/AAAA/wD/AP//AAD///8A//////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////wAA//8A//8A AP8A/wAA//////8AAAD/AAD/AP//AAAAAAD//wAAAAD/AP////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////wD//wD/AP//AAD/AP///wD///// AP//AP//AAD//wAA/wAA/wD///8AAP////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////8A/////wD//wAA/wD/AAD//////wD//wD//wAA//8A AP8AAP8A////AAD///////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////////////////////AP//AP8AAAD/AAAA//8AAP////8A////AAD/AAAA/wD/AAD//wAAAAD/ AP////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////8AAP//AP//////AP//////////AP////////////////8A//////8A//////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////8AAAD///////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////wAA//8AAAAAAAAAAP8AAAD///// AP8A/wAAAAAA/wD/AP8A//8AAAAA//8A/wAA/wD//wD///////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////8A/wD/AP//AAD/AAD/AP8A/////wD/AP8A//8AAP8A /wD/AP//AAD/AP//AAD//wAA//8A//////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////////////////////AP8A//8AAAAA/wAA/wD/AP////8AAAD//wAAAAD/AP8A/wD//wAA/wD/ /wAA//8AAP//AP////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////wD/AP8AAAAAAP8AAP8AAAD/////AP8A/wAAAAAAAAAAAP8AAAD/AAAA//8A/wAA/wAAAP// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////8AAP////// /////wD///8A/////wD/AP///////////wD/////////////AP////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////8A//////////// //////////8AAP////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////wD///////////////////8A//8A //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////wAAAP////8A//8AAAD//wD///8AAP///wAAAP///////wD///8A //////8AAP///////wD//wAAAAAA////AP////8A/////wD//////wAAAP////////////////// //////////////////////////////////////////////////////////////////////////// /////////wD///8A//8A/wD/////AP8A//8A//8A/wD//wD//////wD/AP8A/wD///8A//8A//// //8A//8A/////////wD/////AP////8A/////wD///8A//////////////////////////////// //////////////////////////////////////////////////////////////////////////// AP//AP8A//8AAP//AP//AP//AP8A//8A//////8A/wD/AP8A//8A/////wD/////AP//AP////// //8A/////wD//////wD/////////AP////////////////////////////////////////////// /////////////////////////////////////////////////////////wAAAP///wD/AP8A//// /wD//wD//wD/AP//AP//////AP8A/wD/AP//AP//AAAA/////wD//wAAAAAA////AP////8AAAD/ //8A////AP///wD///////////////////////////////////////////////////////////// /////////////////////////////////////////wD//////wD///8A/wAAAP8A////AAD///8A AAD//////wD/AP8A/wD//wD///////////8A//8A/////////wD/////AP///////wD//wAAAAD/ //////////////////////////////////////////////////////////////////////////// //////////////////////////8A////AP//////////////AP///////////////////wD//wD/ AP//AP//AP//AP//////AP//AP////////8A/////wD///////8A////AP////////////////// //////////////////////////////////////////////////////////////////////////// /////////////wAAAP///////////////wD///////////////////8A////AP///wD///8AAP// /////wD//wAAAAAA/wAAAAAA//8AAAAAAAAAAAD//wAAAAD///////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////7y8////////////vN283f///////////928//////////// 3d28//////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////908Zrz/////////kmZDZm3///////////9mZpL//////////7xmZrz///////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////+8 Zmb//////////7xmZq68////////////rma8//////////+8Zma1tf////////////////////// //////////////////////////////////////////////////////////////////////////// ////////////////////////////////////////////////////////////vGZmvP////////+S ZmZmkv///////////2Zmkv//////////vGZmZq7///////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////7xmZv//////////vGZmZrX///////// 3W1mZq6S/////////7xmZq6u//////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ///////////////////////////////dZma8/////////5JmZmZt/////////7VmZmZmrv////// //+8ZmZmbf////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////+8////////////vP+8////////////vP+8/93///////////+8/93///// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////7z//////7y8////////vP////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////5KSkv///7yS bZL///+8kpKS//////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////5KSkpKS/7y8kpJtvP//krySkpL/ //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////+8//////+8dJKSkpKSbkqSkpKSkm28kpKSkpKSvP////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////////kpL///+8eVh5krySklJ6dJKSvJKSkpKSkpK8kpKS//////+SvP////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////+8kpKSkv+8 eVGSUXSSklF0bXRRkpKSkpJtkpKSbZKSkpL//7ySkm28vP////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////9tc3OSknNteXSSkpJ0eVJ5krWS eXOSkrySkm2SbZKSvJKSkpJzknOSQ5L///////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////+8AEp0UVJRdHOSkpKSklF0kpKSkpJSUZKSkpKSUXOS kpKSklJRdFF0UUNt//////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////7y8kpKSvP//vLySkpKSbZKSvJKSknlzkpKTUnlSeZK1knma/5K8kpKS //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////7ySvLz///+SkpKSkpJtkpKSkpJudHOSUXOSklF0c3mZ////kpK8//////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////7y8kpKSvJK8krySkpJ5WJmSvJKSUnmZ//////+8//////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////////////////////////////////////////////////////////////////////kpKSkpK8 /7ySkpKSkr2SvJKSkryZ//////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////+8vJK8////B5K8vP///7y8 kv////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////5K8//////8Hkv//////krz///////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////////////////AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+/wAABQECAAAAAAAAAAAAAAAAAAAAAAACAAAAAtXN 1ZwuGxCTlwgAKyz5rkQAAAAF1c3VnC4bEJOXCAArLPmuRAMAAAADAAAQAAAAAQAAAIgAAAADAAAA kAAAAA8AAACoAAAABAAAANAAAAAGAAAA2AAAAAcAAADgAAAACAAAAOgAAAAJAAAA8AAAAAoAAAD4 AAAAFwAAAAABAAALAAAACAEAABAAAAAQAQAAEwAAABgBAAAWAAAAIAEAAA0AAAAoAQAADAAAAJ4C AAACAAAA6f0AAB4AAAAQAAAAT24tc2NyZWVuIFNob3cAAB4AAAAgAAAASHVhd2VpIFRlY2hub2xv Z2llcyBDby4sTHRkLgAAAAADAAAArKwBAAMAAABkAAAAAwAAAA4AAAADAAAADgAAAAMAAAAAAAAA AwAAAAAAAAADAAAAxB8LAAsAAAAAAAAACwAAAAAAAAALAAAAAAAAAAsAAAAAAAAAHhAAABEAAAAG AAAAQXJpYWwAFwAAAO+8re+8syDvvLDjgrTjgrfjg4Pjgq8ADAAAAElTTVMgSUVURjc0ABEAAABT eXNsb2cgV0cgSUVURjc1AAsAAABPcGVyYXRpb25zABAAAABDdXJyZW50IENoYXJ0ZXIADgAAAFN0 YXR1cyBJRVRGNzUADAAAAFN5c2xvZyBTaWduAA4AAABSZS1DaGFydGVyaW5nABMAAABSZS1DaGFy dGVyIFByb2Nlc3MAHgAAAFByb3Bvc2FscyBmb3IgQWRkaXRpb25hbCBXb3JrAB4AAABQcm9wb3Nh bHMgZm9yIEFkZGl0aW9uYWwgV29yawAeAAAAUHJvcG9zYWxzIGZvciBBZGRpdGlvbmFsIFdvcmsA EwAAAEZZSSAtIFJlbGF0ZWQgV29yawATAAAARllJIC0gUmVsYXRlZCBXb3JrABAAAABEaXNjdXNz aW9uIFRpbWUACgAAAFRoYW5rIFlvdQAMEAAABgAAAB4AAAALAAAARm9udHMgVXNlZAADAAAAAgAA AB4AAAAQAAAARGVzaWduIFRlbXBsYXRlAAMAAAABAAAAHgAAAA0AAABTbGlkZSBUaXRsZXMAAwAA AA4AAAAAAFAAAAADAAAAAAAAACAAAAABAAAAMgAAAAIAAAA6AAAAAQAAAAIAAAAGAAAAc2ZsYWcA AgAAAOn9AAAeAAAADAAAADEyNDc1MjYyMjMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAD2DygAAAAUAAAAX8CR44icAQAQAPQDAwAAAERhdmlkIEhhcnJp bmd0b24IAAAARABhAHYAaQBkACAASABhAHIAcgBpAG4AZwB0AG8AbgAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAEAAAACAAAAAwAAAAQAAAAFAAAABgAAAAcAAAD+////CQAAAAoAAAALAAAADAAA AA0AAAAOAAAADwAAABAAAAARAAAAEgAAABMAAAAUAAAAFQAAABYAAAAXAAAAGAAAABkAAAAaAAAA GwAAABwAAAAdAAAAHgAAAB8AAAAgAAAAIQAAACIAAAAjAAAAJAAAACUAAAAmAAAAJwAAACgAAAAp AAAAKgAAACsAAAAsAAAALQAAAC4AAAAvAAAAMAAAADEAAAAyAAAAMwAAADQAAAA1AAAANgAAADcA AAA4AAAAOQAAADoAAAA7AAAAPAAAAD0AAAA+AAAAPwAAAEAAAABBAAAAQgAAAEMAAABEAAAARQAA AEYAAABHAAAASAAAAEkAAABKAAAASwAAAEwAAABNAAAATgAAAE8AAABQAAAAUQAAAFIAAABTAAAA VAAAAFUAAABWAAAAVwAAAFgAAABZAAAAWgAAAFsAAABcAAAAXQAAAF4AAABfAAAAYAAAAGEAAABi AAAAYwAAAGQAAABlAAAAZgAAAGcAAABoAAAAaQAAAGoAAABrAAAAbAAAAG0AAABuAAAAbwAAAHAA AABxAAAAcgAAAHMAAAB0AAAAdQAAAHYAAAB3AAAAeAAAAHkAAAB6AAAAewAAAHwAAAB9AAAAfgAA AH8AAACAAAAAgQAAAIIAAACDAAAAhAAAAIUAAACGAAAAhwAAAIgAAACJAAAAigAAAIsAAACMAAAA jQAAAI4AAACPAAAAkAAAAJEAAACSAAAAkwAAAJQAAACVAAAAlgAAAJcAAACYAAAAmQAAAJoAAACb AAAAnAAAAJ0AAACeAAAAnwAAAKAAAAChAAAAogAAAKMAAACkAAAApQAAAKYAAACnAAAAqAAAAKkA AACqAAAAqwAAAKwAAACtAAAArgAAAK8AAACwAAAAsQAAALIAAACzAAAAtAAAALUAAAC2AAAAtwAA ALgAAAC5AAAAugAAALsAAAC8AAAAvQAAAL4AAAC/AAAAwAAAAMEAAADCAAAAwwAAAMQAAADFAAAA xgAAAMcAAADIAAAAyQAAAMoAAADLAAAAzAAAAM0AAADOAAAAzwAAANAAAADRAAAA0gAAANMAAADU AAAA1QAAANYAAAD+////2AAAANkAAADaAAAA2wAAANwAAADdAAAA3gAAAN8AAADgAAAA4QAAAOIA AADjAAAA5AAAAOUAAADmAAAA5wAAAOgAAADpAAAA6gAAAOsAAADsAAAA7QAAAO4AAADvAAAA8AAA APEAAADyAAAA8wAAAPQAAAD1AAAA9gAAAPcAAAD4AAAA+QAAAPoAAAD7AAAA/AAAAP0AAAD+AAAA /wAAAAABAAABAQAA/v///wMBAAAEAQAABQEAAAYBAAAHAQAACAEAAAkBAAD+////CwEAAAwBAAAN AQAADgEAAA8BAAAQAQAAEQEAAP7////9/////f////3///8WAQAA/v////7////+//////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////1IAbwBvAHQAIABFAG4AdAByAHkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAWAAUB//////////8DAAAAEI2BZJtPzxGG6gCqALkp6AAAAAAAAAAAAAAA APCyVTFGBcoBGAEAAIAAAAAAAAAAUABpAGMAdAB1AHIAZQBzAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIAAgH///////////////8AAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAABDAHUAcgByAGUAbgB0ACAAVQBzAGUA cgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGgACAAEAAAD///////// /wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoBAAAAEAAAAAAAAAUAUwB1AG0A bQBhAHIAeQBJAG4AZgBvAHIAbQBhAHQAaQBvAG4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo AAIBBgAAAAUAAAD/////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1wAAABRV AAAAAAAAUABvAHcAZQByAFAAbwBpAG4AdAAgAEQAbwBjAHUAbQBlAG4AdAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAACgAAgH///////////////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAIAAAArJwBAAAAAAAFAEQAbwBjAHUAbQBlAG4AdABTAHUAbQBtAGEAcgB5AEkAbgBm AG8AcgBtAGEAdABpAG8AbgAAAAAAAAAAAAAAOAACAQQAAAD//////////wAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBAAAAEAAAAAAAAEkAcgBtAFQAbwBvAGwASQBuAGYAbwBT AHQAcgBlAGEAbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkAAIBAgAAAAcAAAD///// AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAAAAAAAAASQByAG0AVABv AG8AbABTAEwAZQB2AGUAbABJAG4AZgBvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQA AgD///////////////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAEAAA AAAAAAD+/////v////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////8gbMgEMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAADIGzIBEAAAAAAAAAAGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAUgBvAG8AdAAgAEUAbgB0AHIAeQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAABYABQH//////////wMAAAAQjYFkm0/PEYbqAKoAuSnoAAAAAAAAAAAAAAAA4KGR EJYLygEfAQAAQAQAAAAAAABQAGkAYwB0AHUAcgBlAHMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgACAf///////////////wAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAEMAdQByAHIAZQBuAHQAIABVAHMAZQByAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaAAIAAQAAAP//////////AAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgEAAAAQAAAAAAAABQBTAHUAbQBtAGEA cgB5AEkAbgBmAG8AcgBtAGEAdABpAG8AbgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAgEG AAAABQAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXAAAAFFUAAAAA AAABAQAA/v//////////////////////////////////////////////CwEAAAwBAAANAQAADgEA AA8BAAAQAQAAEQEAAP7////9/////f//////////////////////////////HgEAAP3////+//// HQEAAP7////+////HAEAAP////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //7////+////AwAAAAQAAAAFAAAABgAAAAcAAAAIAAAACQAAAAoAAAALAAAADAAAAA0AAAAOAAAA DwAAABAAAAD+//////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// AADvvK3vvLMg77yw44K044K344OD44KvAAwAAABJU01TIElFVEY3NAARAAAAU3lzbG9nIFdHIElF VEY3NQALAAAAT3BlcmF0aW9ucwAQAAAAQ3VycmVudCBDaGFydGVyAA4AAABTdGF0dXMgSUVURjc1 AAwAAABTeXNsb2cgU2lnbgAOAAAAUmUtQ2hhcnRlcmluZwATAAAAUmUtQ2hhcnRlciBQcm9jZXNz AB4AAABQcm9wb3NhbHMgZm9yIEFkZGl0aW9uYWwgV29yawAeAAAAUHJvcG9zYWxzIGZvciBBZGRp dGlvbmFsIFdvcmsAHgAAAFByb3Bvc2FscyBmb3IgQWRkaXRpb25hbCBXb3JrABMAAABGWUkgLSBS ZWxhdGVkIFdvcmsAEwAAAEZZSSAtIFJlbGF0ZWQgV29yawAQAAAARGlzY3Vzc2lvbiBUaW1lAAoA AABUaGFuayBZb3UADBAAAAYAAAAeAAAACwAAAEZvbnRzIFVzZWQAAwAAAAIAAAAeAAAAEAAAAERl c2lnbiBUZW1wbGF0ZQADAAAAAQAAAB4AAAANAAAAU2xpZGUgVGl0bGVzAAMAAAAOAAAAAABQAAAA AwAAAAAAAAAgAAAAAQAAADQAAAACAAAAPAAAAAEAAAACAAAABgAAAHNmbGFnAAIAAgAAAOn9AAAe AAAADAAAADEyNDc1MjYyMjMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAA bwB3AGUAcgBQAG8AaQBuAHQAIABEAG8AYwB1AG0AZQBuAHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAoAAIB////////////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA CAAAAKycAQAAAAAABQBEAG8AYwB1AG0AZQBuAHQAUwB1AG0AbQBhAHIAeQBJAG4AZgBvAHIAbQBh AHQAaQBvAG4AAAAAAAAAAAAAADgAAgEEAAAA//////////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAACAAAAlAMAAAAAAABJAHIAbQBUAG8AbwBsAEkAbgBmAG8AUwB0AHIAZQBh AG0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJAACAQIAAAAHAAAA/////wAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAAAAAAAAAEkAcgBtAFQAbwBvAGwAUwBM AGUAdgBlAGwASQBuAGYAbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkAAIA//////// ////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAABAAAAAAAAAAyBsy AQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAMgbMgEQAAAAAAAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAD+/wAABQECAAAAAAAAAAAAAAAAAAAAAAACAAAAAtXN1ZwuGxCTlwgAKyz5rkQA AAAF1c3VnC4bEJOXCAArLPmuRAMAAAADAAAQAAAAAQAAAIgAAAADAAAAkAAAAA8AAACoAAAABAAA ANAAAAAGAAAA2AAAAAcAAADgAAAACAAAAOgAAAAJAAAA8AAAAAoAAAD4AAAAFwAAAAABAAALAAAA CAEAABAAAAAQAQAAEwAAABgBAAAWAAAAIAEAAA0AAAAoAQAADAAAAJ4CAAACAAAA6f0AAB4AAAAQ AAAAT24tc2NyZWVuIFNob3cAAB4AAAAgAAAASHVhd2VpIFRlY2hub2xvZ2llcyBDby4sTHRkLgAA AAADAAAArKwBAAMAAABkAAAAAwAAAA4AAAADAAAADgAAAAMAAAAAAAAAAwAAAAAAAAADAAAAxB8L AAsAAAAAAAAACwAAAAAAAAALAAAAAAAAAAsAAAAAAAAAHhAAABEAAAAGAAAAQXJpYWwAFwA= ------=_NextPart_000_1E2A_01CA0B74.8AAA02F0-- From Eric.Hibbard@hds.com Thu Jul 23 07:02:38 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1E40B3A6AFC for ; Thu, 23 Jul 2009 07:02:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bvz9oLUYAnxy for ; Thu, 23 Jul 2009 07:02:30 -0700 (PDT) Received: from usindmx02.hds.com (usindmx02.hds.com [207.126.252.13]) by core3.amsl.com (Postfix) with ESMTP id DD7B63A6AAF for ; Thu, 23 Jul 2009 07:02:29 -0700 (PDT) Received: from usindmail02.hds.com (usindmail02.hds.com [207.126.252.21]) by usindmx02.hds.com (8.14.1/8.14.1) with ESMTP id n6NDhl8i016406; Thu, 23 Jul 2009 09:43:47 -0400 (EDT) Received: from usindeht02.corp.hds.com (usindnetf5-vlan4float.corp.hds.com [10.74.12.196]) by usindmail02.hds.com (8.14.1/8.14.1) with ESMTP id n6NDm7cr020608; Thu, 23 Jul 2009 10:00:36 -0400 (EDT) Received: from USINDEVS01.corp.hds.com ([10.74.24.187]) by usindeht02.corp.hds.com ([10.74.24.185]) with mapi; Thu, 23 Jul 2009 09:58:53 -0400 From: Eric Hibbard To: David Harrington , "mpeterson@snia-dmf.org" Date: Thu, 23 Jul 2009 09:58:47 -0400 Thread-Topic: [snia-security] Audit Logging SIG/TWG Thread-Index: AcoG+wW7KgbiChK4RVi0HSeaEgEotAElht6gAAL5qlA= Message-ID: <7F7CAF4EB3DAC74E8AB07E95FA703286320905C09E@USINDEVS01.corp.hds.com> References: <7F7CAF4EB3DAC74E8AB07E95FA70328631F625458B@USINDEVS01.corp.hds.com> <1e2901ca0b96$11bba2f0$0600a8c0@china.huawei.com> In-Reply-To: <1e2901ca0b96$11bba2f0$0600a8c0@china.huawei.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/alternative; boundary="_000_7F7CAF4EB3DAC74E8AB07E95FA703286320905C09EUSINDEVS01cor_" MIME-Version: 1.0 Cc: "snia-ssif@snia.org" , "syslog@ietf.org" , "snia-security@snia.org" Subject: Re: [Syslog] [snia-security] Audit Logging SIG/TWG X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Jul 2009 14:02:38 -0000 --_000_7F7CAF4EB3DAC74E8AB07E95FA703286320905C09EUSINDEVS01cor_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable David, Thank you for the feedback. A couple of us within SNIA and the INCITS/CS1 o= rganizations have been monitoring the progress. We are definitely pleased t= o have the new standards-track RFCs for syslog. -Eric From: David Harrington [mailto:ietfdbh@comcast.net] Sent: Thursday, July 23, 2009 6:04 AM To: Eric Hibbard; mpeterson@snia-dmf.org Cc: snia-security@snia.org; snia-ssif@snia.org; 'Chris Lonvick'; syslog@iet= f.org Subject: RE: [snia-security] Audit Logging SIG/TWG Hi, The IETF Syslog WG has been chartered to address security issues. The WG ha= s almost completed its current work plan. Some of the features that have be= en included in the IETF syslog standards will probably be useful for audit = logging purposes, such as increased message sizes, secure transport, struct= ured data elements, and digitally signed messages, http://www.ietf.org/dyn= /wg/charter/syslog-charter.html The WG is considering re-chartering to do additional work. Much of the prop= osed work relates to standardizing how syslog is used, and for standardizin= g some types of logging content. The Syslog WG will be meeting at the upcoming IETF meeting (http://www.ietf= .org/meeting/75/). Attached is a Powerpoint presentation that shows what to= pics are expected to be discussed. Proposals for additional work are welcom= e. In the IETF, official work is done using mailing lists rather than face-to-= face meetings. If anybody wishes to monitor or contribute to the discussion= , here is where the official discussions occur: General Discussion: syslog@ietf.org To Subscribe: syslog-request@ietf.org In Body: subscribe Archive: http://www.ietf.org/mail-archive/web/syslog Your input is welcome. David Harrington co-chair, Syslog WG Standards Manager, HuaweiSymantec Technologies dbharrington@comcast.net ietfdbh@comcast.net dharrington@huawei.com ________________________________ From: Eric Hibbard [mailto:Eric.Hibbard@hds.com] Sent: Friday, July 17, 2009 12:24 PM To: mpeterson@snia-dmf.org Cc: snia-security@snia.org; snia-ssif@snia.org Subject: [snia-security] Audit Logging SIG/TWG Michael, I understand that you have expressed some interest in the area of audit log= ging and have floated the idea of forming a SIG or TWG for such an activity= . I have a mixed reaction to this...on the one hand, the Security TWG has b= een advocating that storage ecosystems must participate in audit logging (a= s opposed to just health and fault logging)...on the flip side, we don't se= e SNIA being a serious leader in this space (we're about 3 years too late f= or that)...more like a consumer. However, the Security TWG considers this a= n important area and we're more than happy to participate and/or support wh= atever surfaces. In the spirit of sharing, you might want to take a look at the following re= sources: * SNIA docs - Storage Security best practices (http://www.snia.org/= forums/ssif/programs/SNIATechnicalProposal-Security-BCPs.20080904.pdf) and = the SNIA Logging Whitepaper (http://www.snia.org/forums/ssif/knowledge_cent= er/white_papers/forums/ssif/knowledge_center/white_papers/SNIA-Logging-WP.0= 50921.pdf); the whitepaper is being rewritten as week speak * IETF Syslog WG (http://tools.ietf.org/wg/syslog/) - The IETF has = finally published multiple standards-track RFC related to Syslog, which is = the primary protocol for all external/centralized logging. These RFC cover = architecture, protocol, and security. * Mitre - Mitre has done some work with its Common Even Expression = Taxonomy (CEET), which the Security TWG has been investigating as a possibl= e way of "standardizing" message events so that the event log vendors could= parse and react to them. Check out http://cee.mitre.org/ceelanguage.html With the possible exception of PCI DSS, most of the drivers for this techno= logy are indirect (i.e., monitor and respond, or establish and maintain acc= ountability and traceability). This means that a certain amount of interpre= tation is required, and of course this leads to vendor hype and organizatio= nal indecision. Best regards, -Eric Eric A. Hibbard, CISSP, CISA, ISSAP, ISSMP, ISSEP CTO Security and Privacy International Representative, INCITS TC CS1 Cyber Security Vice Chair, American Bar Association - SciTech Law - eDiscovery & Digital E= vidence Committee Vice Chair, IEEE Information Assurance Standards Committee (IASC) Member, SNIA Technical Council Chair, SNIA Security Technical Work Group Vice Chair, IEEE Security in Storage Work Group (P1619) HITACHI DATA SYSTEMS 750 Central Expressway Santa Clara, CA 95050-2627 P 408.970.7979/ C 408.314.0515 eric.hibbard@hds.com --_000_7F7CAF4EB3DAC74E8AB07E95FA703286320905C09EUSINDEVS01cor_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

David,=

 =

Thank you for the feedba= ck. A couple of us within SNIA and the INCITS/CS1 organizations have been monitor= ing the progress. We are definitely pleased to have the new standards-track RFC= s for syslog.

 =

-Eric<= /p>

 =

From: David Harring= ton [mailto:ietfdbh@comcast.net]
Sent: Thursday, July 23, 2009 6:04 AM
To: Eric Hibbard; mpeterson@snia-dmf.org
Cc: snia-security@snia.org; snia-ssif@snia.org; 'Chris Lonvick'; syslog@ietf.org
Subject: RE: [snia-security] Audit Logging SIG/TWG=

 

Hi,

 

The IETF Syslog WG has been chartered to address security issue= s. The WG has almost completed its current work plan. Some of the features tha= t have been included in the IETF syslog standards will probably be useful for audit logging purposes, such as increased message sizes, secure transp= ort, structured data elements, and digitally signed messages,  http://www.= ietf.org/dyn/wg/charter/syslog-charter.html

 

The WG is considering re-chartering to do additional work. Much of the proposed work relates to standardizing how syslog is used, and = for standardizing some types of logging content.

 

The Syslog WG will be meeting at the upcoming IETF meeting (http://www.ietf.org/meeting/75/). Attached is a Powerpoint presentation that shows what topics are expected t= o be discussed. Proposals for additional work are welcome.

 

In the IETF, official work is done using mailing lists rather t= han face-to-face meetings. If anybody wishes to monitor or contribute to the discussion, her= e is where the official discussions occur:

 

Your input is welcome.

 

David Harrington

co-chair, Syslog WG

Standards Manager, HuaweiSymantec Technologies
dbharrington@comcast.net
ietfdbh@comcast.net
dharrington@huawei.com


 

 

From: Eric Hibbard [mailto:Eric.Hibbard@hds.c= om]
Sent: Friday, July 17, 2009 12:24 PM
To: mpeterson@snia-dmf.org
Cc: snia-security@snia.org; snia-ssif@snia.org
Subject: [snia-security] Audit Logging SIG/TWG

Michael,

 

I understand that you have expressed some interest in = the area of audit logging and have floated the idea of forming a SIG or TWG for such an activity. I have a mixed reaction to this…on the one hand, th= e Security TWG has been advocating that storage ecosystems must participate i= n audit logging (as opposed to just health and fault logging)…on the fl= ip side, we don’t see SNIA being a serious leader in this space (we̵= 7;re about 3 years too late for that)…more like a consumer. However, the Security TWG considers this an important area and we’re more than hap= py to participate and/or support whatever surfaces.

 

In the spirit of sharing, you might want to take a loo= k at the following resources:

 

·         SNIA docs – Storage Security best practices (http://www.snia.org/forums/ssif/programs/SNIATechnicalProposal-Security-BC= Ps.20080904.pdf) and the SNIA Logging Whitepaper (http://www.snia.org/forums/ssif/knowledge_= center/white_papers/forums/ssif/knowledge_center/white_papers/SNIA-Logging-= WP.050921.pdf); the whitepaper is being rewritten as week speak

·         IETF Syslog WG (http://tools.ietf.org/wg/syslog/) – The IETF h= as finally published multiple standards-track RFC related to Syslog, which is = the primary protocol for all external/centralized logging. These RFC cover architecture, protocol, and security.

·         Mitre – Mitre has done some work with its Common Even Expressi= on Taxonomy (CEET), which the Security TWG has been investigating as a possibl= e way of “standardizing” message events so that the event log ven= dors could parse and react to them. Check out http://cee.mitre.org/ceelanguage.h= tml

 

With the possible exception of PCI DSS, most of the dr= ivers for this technology are indirect (i.e., monitor and respond, or establish a= nd maintain accountability and traceability). This means that a certain amount= of interpretation is required, and of course this leads to vendor hype and organizational indecision.

 

Best regards,

 

-Eric

 

Eric A. Hibbard, CISSP, CISA, ISSAP, ISSMP, ISSEP
CTO Security and Privacy

 

International Representative, INCITS TC CS1 Cyber Security

Vice Chair, American Bar Association – SciTech Law – eDiscovery &= ; Digital Evidence Committee

Vice Chair, IEEE Information Assurance Standards Committee (IASC)

Member, SNIA Technical Council

Chair, SNIA Security Technical Work Group

Vice Chair, IEEE Security in Storage Work Group (P1619)

 

HITACHI DATA SYSTEMS
750 Central Expressway
Santa Clara, CA 95050-2627
P 408.970.7979/ C 408.314.0515
eric.hibbard@hds.com

 

--_000_7F7CAF4EB3DAC74E8AB07E95FA703286320905C09EUSINDEVS01cor_-- From ietfdbh@comcast.net Thu Jul 23 07:22:03 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5F71E3A6AFC for ; Thu, 23 Jul 2009 07:22:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.385 X-Spam-Level: X-Spam-Status: No, score=-1.385 tagged_above=-999 required=5 tests=[AWL=0.613, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_42=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1GQLyg+x3ESN for ; Thu, 23 Jul 2009 07:21:54 -0700 (PDT) Received: from QMTA11.westchester.pa.mail.comcast.net (qmta11.westchester.pa.mail.comcast.net [76.96.59.211]) by core3.amsl.com (Postfix) with ESMTP id 533DB3A6B79 for ; Thu, 23 Jul 2009 07:21:53 -0700 (PDT) Received: from OMTA15.westchester.pa.mail.comcast.net ([76.96.62.87]) by QMTA11.westchester.pa.mail.comcast.net with comcast id KPDZ1c0021swQuc5BSDp7U; Thu, 23 Jul 2009 14:13:49 +0000 Received: from Harrington73653 ([24.147.240.21]) by OMTA15.westchester.pa.mail.comcast.net with comcast id KSGH1c0010UQ6dC3bSGHHp; Thu, 23 Jul 2009 14:16:18 +0000 From: "David Harrington" To: "'Eric Hibbard'" , References: <7F7CAF4EB3DAC74E8AB07E95FA70328631F625458B@USINDEVS01.corp.hds.com> <1e2901ca0b96$11bba2f0$0600a8c0@china.huawei.com> <7F7CAF4EB3DAC74E8AB07E95FA703286320905C09E@USINDEVS01.corp.hds.com> Date: Thu, 23 Jul 2009 10:13:47 -0400 Message-ID: <1e5601ca0b9f$cc22f8b0$0600a8c0@china.huawei.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_1E57_01CA0B7E.451158B0" X-Mailer: Microsoft Office Outlook 11 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 In-reply-to: <7F7CAF4EB3DAC74E8AB07E95FA703286320905C09E@USINDEVS01.corp.hds.com> Thread-Index: AcoG+wW7KgbiChK4RVi0HSeaEgEotAElht6gAAL5qlAAAGv0sA== Cc: snia-ssif@snia.org, syslog@ietf.org, snia-security@snia.org Subject: Re: [Syslog] [snia-security] Audit Logging SIG/TWG X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Jul 2009 14:22:03 -0000 This is a multi-part message in MIME format. ------=_NextPart_000_1E57_01CA0B7E.451158B0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi, I just read the SNIA Logging white paper, and found some things that are no longer recommended (the BEEP raw and cooked profiles), and some changes to Syslog terminology in order to better address the security issues. You mentioned the white paper is being updated as we speak. Would you like reviewers that have a good knowledge of the IETF Syslog RFCs? David Harrington dbharrington@comcast.net ietfdbh@comcast.net dharrington@huawei.com _____ From: Eric Hibbard [mailto:Eric.Hibbard@hds.com] Sent: Thursday, July 23, 2009 9:59 AM To: David Harrington; mpeterson@snia-dmf.org Cc: snia-security@snia.org; snia-ssif@snia.org; 'Chris Lonvick'; syslog@ietf.org Subject: RE: [snia-security] Audit Logging SIG/TWG David, Thank you for the feedback. A couple of us within SNIA and the INCITS/CS1 organizations have been monitoring the progress. We are definitely pleased to have the new standards-track RFCs for syslog. -Eric From: David Harrington [mailto:ietfdbh@comcast.net] Sent: Thursday, July 23, 2009 6:04 AM To: Eric Hibbard; mpeterson@snia-dmf.org Cc: snia-security@snia.org; snia-ssif@snia.org; 'Chris Lonvick'; syslog@ietf.org Subject: RE: [snia-security] Audit Logging SIG/TWG Hi, The IETF Syslog WG has been chartered to address security issues. The WG has almost completed its current work plan. Some of the features that have been included in the IETF syslog standards will probably be useful for audit logging purposes, such as increased message sizes, secure transport, structured data elements, and digitally signed messages, http://www.ietf.org/dyn/wg/charter/syslog-charter.html The WG is considering re-chartering to do additional work. Much of the proposed work relates to standardizing how syslog is used, and for standardizing some types of logging content. The Syslog WG will be meeting at the upcoming IETF meeting (http://www.ietf.org/meeting/75/). Attached is a Powerpoint presentation that shows what topics are expected to be discussed. Proposals for additional work are welcome. In the IETF, official work is done using mailing lists rather than face-to-face meetings. If anybody wishes to monitor or contribute to the discussion, here is where the official discussions occur: General Discussion: syslog@ietf.org To Subscribe: syslog-request@ietf.org In Body: subscribe Archive: http://www.ietf.org/mail-archive/web/syslog Your input is welcome. David Harrington co-chair, Syslog WG Standards Manager, HuaweiSymantec Technologies dbharrington@comcast.net ietfdbh@comcast.net dharrington@huawei.com _____ From: Eric Hibbard [mailto:Eric.Hibbard@hds.com] Sent: Friday, July 17, 2009 12:24 PM To: mpeterson@snia-dmf.org Cc: snia-security@snia.org; snia-ssif@snia.org Subject: [snia-security] Audit Logging SIG/TWG Michael, I understand that you have expressed some interest in the area of audit logging and have floated the idea of forming a SIG or TWG for such an activity. I have a mixed reaction to this.on the one hand, the Security TWG has been advocating that storage ecosystems must participate in audit logging (as opposed to just health and fault logging).on the flip side, we don't see SNIA being a serious leader in this space (we're about 3 years too late for that).more like a consumer. However, the Security TWG considers this an important area and we're more than happy to participate and/or support whatever surfaces. In the spirit of sharing, you might want to take a look at the following resources: . SNIA docs - Storage Security best practices (http://www.snia.org/forums/ssif/programs/SNIATechnicalProposal-Securi ty-BCPs.20080904.pdf) and the SNIA Logging Whitepaper (http://www.snia.org/forums/ssif/knowledge_center/white_papers/forums/ ssif/knowledge_center/white_papers/SNIA-Logging-WP.050921.pdf); the whitepaper is being rewritten as week speak . IETF Syslog WG (http://tools.ietf.org/wg/syslog/) - The IETF has finally published multiple standards-track RFC related to Syslog, which is the primary protocol for all external/centralized logging. These RFC cover architecture, protocol, and security. . Mitre - Mitre has done some work with its Common Even Expression Taxonomy (CEET), which the Security TWG has been investigating as a possible way of "standardizing" message events so that the event log vendors could parse and react to them. Check out http://cee.mitre.org/ceelanguage.html With the possible exception of PCI DSS, most of the drivers for this technology are indirect (i.e., monitor and respond, or establish and maintain accountability and traceability). This means that a certain amount of interpretation is required, and of course this leads to vendor hype and organizational indecision. Best regards, -Eric Eric A. Hibbard, CISSP, CISA, ISSAP, ISSMP, ISSEP CTO Security and Privacy International Representative, INCITS TC CS1 Cyber Security Vice Chair, American Bar Association - SciTech Law - eDiscovery & Digital Evidence Committee Vice Chair, IEEE Information Assurance Standards Committee (IASC) Member, SNIA Technical Council Chair, SNIA Security Technical Work Group Vice Chair, IEEE Security in Storage Work Group (P1619) HITACHI DATA SYSTEMS 750 Central Expressway Santa Clara, CA 95050-2627 P 408.970.7979/ C 408.314.0515 eric.hibbard@hds.com ------=_NextPart_000_1E57_01CA0B7E.451158B0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Hi,
 
I just read the SNIA Logging white paper, and = found some=20 things that are no longer recommended (the BEEP raw and cooked = profiles), and=20 some changes to Syslog terminology in order to better address the = security=20 issues.
 
You mentioned the white paper is being updated = as we=20 speak. Would you like reviewers that have a good knowledge of = the IETF=20 Syslog RFCs?
 

David=20 Harrington
dbharrington@comcast.net
ietfdbh@comcast.net
dharring= ton@huawei.com


From: Eric Hibbard=20 [mailto:Eric.Hibbard@hds.com]
Sent: Thursday, July 23, 2009 = 9:59=20 AM
To: David Harrington; = mpeterson@snia-dmf.org
Cc:=20 snia-security@snia.org; snia-ssif@snia.org; 'Chris Lonvick';=20 syslog@ietf.org
Subject: RE: [snia-security] Audit Logging=20 SIG/TWG

David,

 

Thank you for the = feedback. A=20 couple of us within SNIA and the INCITS/CS1 organizations have been = monitoring=20 the progress. We are definitely pleased to have the new = standards-track RFCs=20 for syslog.

 

-Eric

 

From: David = Harrington=20 [mailto:ietfdbh@comcast.net]
Sent: Thursday, July 23, 2009 = 6:04=20 AM
To: Eric Hibbard; mpeterson@snia-dmf.org
Cc:=20 snia-security@snia.org; snia-ssif@snia.org; 'Chris Lonvick';=20 syslog@ietf.org
Subject: RE: [snia-security] Audit Logging=20 SIG/TWG

 

Hi,

 

The=20 IETF Syslog WG has been chartered to address security issues. The WG = has=20 almost completed its current work plan. Some of the features that have = been=20 included in the IETF syslog standards will probably be useful for = audit=20 logging purposes, such as increased message sizes, secure = transport,=20 structured data elements, and digitally signed messages,  http://ww= w.ietf.org/dyn/wg/charter/syslog-charter.html

 

The=20 WG is considering re-chartering to do additional work. Much of = the=20 proposed work relates to standardizing how syslog is used, and for=20 standardizing some types of logging content.

 

The=20 Syslog WG will be meeting at the upcoming IETF meeting (http://www.ietf.org/meeting/75/<= /A>).=20 Attached is a Powerpoint presentation that shows what topics are = expected to=20 be discussed. Proposals for additional work are welcome.

 

In the=20 IETF, official work is done using mailing lists rather than = face-to-face=20 meetings. If anybody wishes to monitor or contribute to the = discussion, here=20 is where the official discussions occur:

General=20 Discussion: syslog@ietf.org
To Subscribe: syslog-request@ietf.org
In= Body:=20 subscribe
Archive: http://www.ietf.org/= mail-archive/web/syslog

 

Your=20 input is welcome.

 

David=20 Harrington

co-chair,=20 Syslog WG

Standards Manager, HuaweiSymantec=20 = Technologies
dbharrington@comcast.net
ietfdbh@comcast.net
dharrington@huawei.com


 

 

From: Eric = Hibbard=20 [mailto:Eric.Hibbard@hds.com]
Sent: Friday, July 17, 2009 = 12:24=20 PM
To: mpeterson@snia-dmf.org
Cc:=20 snia-security@snia.org; snia-ssif@snia.org
Subject:=20 [snia-security] Audit Logging SIG/TWG

Michael,

 

I understand that you have expressed some = interest in the=20 area of audit logging and have floated the idea of forming a SIG or = TWG for=20 such an activity. I have a mixed reaction to this…on the one = hand, the=20 Security TWG has been advocating that storage ecosystems must = participate in=20 audit logging (as opposed to just health and fault logging)…on = the flip=20 side, we don’t see SNIA being a serious leader in this space = (we’re about 3=20 years too late for that)…more like a consumer. However, the = Security TWG=20 considers this an important area and we’re more than happy to = participate=20 and/or support whatever surfaces.

 

In the spirit of sharing, you might want to = take a look=20 at the following resources:

 

·        =20 SNIA docs – Storage Security best practices=20 = (http://www.snia.org/forums/ssif/programs/SNIATechnicalProposal-Security-= BCPs.20080904.pdf)=20 and the SNIA Logging Whitepaper=20 = (http://www.snia.org/forums/ssif/knowledge_center/white_papers/forums/ssi= f/knowledge_center/white_papers/SNIA-Logging-WP.050921.pdf);=20 the whitepaper is being rewritten as week speak

·        =20 IETF Syslog WG (http://tools.ietf.org/wg/syslog/) – The = IETF has=20 finally published multiple standards-track RFC related to Syslog, = which is=20 the primary protocol for all external/centralized logging. These RFC = cover=20 architecture, protocol, and security.

·        =20 Mitre – Mitre has done some work with its Common Even = Expression=20 Taxonomy (CEET), which the Security TWG has been investigating as a = possible=20 way of “standardizing” message events so that the event = log vendors could=20 parse and react to them. Check out=20 http://cee.mitre.org/ceelanguage.html

 

With the possible exception of PCI DSS, most of = the=20 drivers for this technology are indirect (i.e., monitor and respond, = or=20 establish and maintain accountability and traceability). This means = that a=20 certain amount of interpretation is required, and of course this = leads to=20 vendor hype and organizational indecision.

 

Best regards,

 

-Eric

 

Eric A.=20 Hibbard, CISSP, CISA, ISSAP, ISSMP, ISSEP
CTO=20 Security and Privacy

 

International=20 Representative, INCITS TC CS1 Cyber Security

Vice=20 Chair, American Bar Association – SciTech Law – = eDiscovery & Digital=20 Evidence Committee

Vice=20 Chair, IEEE Information Assurance Standards Committee = (IASC)

Member,=20 SNIA Technical Council

Chair,=20 SNIA Security Technical Work Group

Vice=20 Chair, IEEE Security in Storage Work Group = (P1619)

 

HITACHI=20 DATA SYSTEMS
750=20 Central Expressway
Santa=20 Clara, CA 95050-2627
P=20 408.970.7979/ C 408.314.0515
eric.hibbard@hds.com

 

------=_NextPart_000_1E57_01CA0B7E.451158B0-- From Eric.Hibbard@hds.com Thu Jul 23 10:46:47 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2966C3A6BA7 for ; Thu, 23 Jul 2009 10:46:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WQaXfXlC1FFq for ; Thu, 23 Jul 2009 10:46:37 -0700 (PDT) Received: from usindmx03.hds.com (usindmx03.hds.com [207.126.252.14]) by core3.amsl.com (Postfix) with ESMTP id 216F328C1B1 for ; Thu, 23 Jul 2009 10:46:19 -0700 (PDT) Received: from usindmail01.hds.com (usindmail03.hds.com [207.126.252.22]) by usindmx03.hds.com (8.14.1/8.14.1) with ESMTP id n6NHUTFw021818; Thu, 23 Jul 2009 13:30:29 -0400 (EDT) Received: from usindeht02.corp.hds.com (usindnetf5-vlan4float.corp.hds.com [10.74.12.196]) by usindmail01.hds.com (8.14.1/8.14.1) with ESMTP id n6NHj3Mf021600; Thu, 23 Jul 2009 13:45:14 -0400 (EDT) Received: from USINDEVS01.corp.hds.com ([10.74.24.187]) by usindeht02.corp.hds.com ([10.74.24.185]) with mapi; Thu, 23 Jul 2009 13:43:55 -0400 From: Eric Hibbard To: David Harrington , "mpeterson@snia-dmf.org" Date: Thu, 23 Jul 2009 13:43:53 -0400 Thread-Topic: [snia-security] Audit Logging SIG/TWG Thread-Index: AcoG+wW7KgbiChK4RVi0HSeaEgEotAElht6gAAL5qlAAAGv0sAAHeQJQ Message-ID: <7F7CAF4EB3DAC74E8AB07E95FA703286320905C1EA@USINDEVS01.corp.hds.com> References: <7F7CAF4EB3DAC74E8AB07E95FA70328631F625458B@USINDEVS01.corp.hds.com> <1e2901ca0b96$11bba2f0$0600a8c0@china.huawei.com> <7F7CAF4EB3DAC74E8AB07E95FA703286320905C09E@USINDEVS01.corp.hds.com> <1e5601ca0b9f$cc22f8b0$0600a8c0@china.huawei.com> In-Reply-To: <1e5601ca0b9f$cc22f8b0$0600a8c0@china.huawei.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/alternative; boundary="_000_7F7CAF4EB3DAC74E8AB07E95FA703286320905C1EAUSINDEVS01cor_" MIME-Version: 1.0 Cc: "snia-ssif@snia.org" , "syslog@ietf.org" , "snia-security@snia.org" Subject: Re: [Syslog] [snia-security] Audit Logging SIG/TWG X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Jul 2009 17:46:47 -0000 --_000_7F7CAF4EB3DAC74E8AB07E95FA703286320905C1EAUSINDEVS01cor_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable David, We would definitely welcome such input. Please keep in mind that we expect = to change the updated whitepaper from one of educating the storage vendors = to one that is more useful to organizations. -Eric From: David Harrington [mailto:ietfdbh@comcast.net] Sent: Thursday, July 23, 2009 7:14 AM To: Eric Hibbard; mpeterson@snia-dmf.org Cc: snia-security@snia.org; snia-ssif@snia.org; 'Chris Lonvick'; syslog@iet= f.org Subject: RE: [snia-security] Audit Logging SIG/TWG Hi, I just read the SNIA Logging white paper, and found some things that are no= longer recommended (the BEEP raw and cooked profiles), and some changes to= Syslog terminology in order to better address the security issues. You mentioned the white paper is being updated as we speak. Would you like = reviewers that have a good knowledge of the IETF Syslog RFCs? David Harrington dbharrington@comcast.net ietfdbh@comcast.net dharrington@huawei.com ________________________________ From: Eric Hibbard [mailto:Eric.Hibbard@hds.com] Sent: Thursday, July 23, 2009 9:59 AM To: David Harrington; mpeterson@snia-dmf.org Cc: snia-security@snia.org; snia-ssif@snia.org; 'Chris Lonvick'; syslog@iet= f.org Subject: RE: [snia-security] Audit Logging SIG/TWG David, Thank you for the feedback. A couple of us within SNIA and the INCITS/CS1 o= rganizations have been monitoring the progress. We are definitely pleased t= o have the new standards-track RFCs for syslog. -Eric From: David Harrington [mailto:ietfdbh@comcast.net] Sent: Thursday, July 23, 2009 6:04 AM To: Eric Hibbard; mpeterson@snia-dmf.org Cc: snia-security@snia.org; snia-ssif@snia.org; 'Chris Lonvick'; syslog@iet= f.org Subject: RE: [snia-security] Audit Logging SIG/TWG Hi, The IETF Syslog WG has been chartered to address security issues. The WG ha= s almost completed its current work plan. Some of the features that have be= en included in the IETF syslog standards will probably be useful for audit = logging purposes, such as increased message sizes, secure transport, struct= ured data elements, and digitally signed messages, http://www.ietf.org/dyn= /wg/charter/syslog-charter.html The WG is considering re-chartering to do additional work. Much of the prop= osed work relates to standardizing how syslog is used, and for standardizin= g some types of logging content. The Syslog WG will be meeting at the upcoming IETF meeting (http://www.ietf= .org/meeting/75/). Attached is a Powerpoint presentation that shows what to= pics are expected to be discussed. Proposals for additional work are welcom= e. In the IETF, official work is done using mailing lists rather than face-to-= face meetings. If anybody wishes to monitor or contribute to the discussion= , here is where the official discussions occur: General Discussion: syslog@ietf.org To Subscribe: syslog-request@ietf.org In Body: subscribe Archive: http://www.ietf.org/mail-archive/web/syslog Your input is welcome. David Harrington co-chair, Syslog WG Standards Manager, HuaweiSymantec Technologies dbharrington@comcast.net ietfdbh@comcast.net dharrington@huawei.com ________________________________ From: Eric Hibbard [mailto:Eric.Hibbard@hds.com] Sent: Friday, July 17, 2009 12:24 PM To: mpeterson@snia-dmf.org Cc: snia-security@snia.org; snia-ssif@snia.org Subject: [snia-security] Audit Logging SIG/TWG Michael, I understand that you have expressed some interest in the area of audit log= ging and have floated the idea of forming a SIG or TWG for such an activity= . I have a mixed reaction to this...on the one hand, the Security TWG has b= een advocating that storage ecosystems must participate in audit logging (a= s opposed to just health and fault logging)...on the flip side, we don't se= e SNIA being a serious leader in this space (we're about 3 years too late f= or that)...more like a consumer. However, the Security TWG considers this a= n important area and we're more than happy to participate and/or support wh= atever surfaces. In the spirit of sharing, you might want to take a look at the following re= sources: * SNIA docs - Storage Security best practices (http://www.snia.org/= forums/ssif/programs/SNIATechnicalProposal-Security-BCPs.20080904.pdf) and = the SNIA Logging Whitepaper (http://www.snia.org/forums/ssif/knowledge_cent= er/white_papers/forums/ssif/knowledge_center/white_papers/SNIA-Logging-WP.0= 50921.pdf); the whitepaper is being rewritten as week speak * IETF Syslog WG (http://tools.ietf.org/wg/syslog/) - The IETF has = finally published multiple standards-track RFC related to Syslog, which is = the primary protocol for all external/centralized logging. These RFC cover = architecture, protocol, and security. * Mitre - Mitre has done some work with its Common Even Expression = Taxonomy (CEET), which the Security TWG has been investigating as a possibl= e way of "standardizing" message events so that the event log vendors could= parse and react to them. Check out http://cee.mitre.org/ceelanguage.html With the possible exception of PCI DSS, most of the drivers for this techno= logy are indirect (i.e., monitor and respond, or establish and maintain acc= ountability and traceability). This means that a certain amount of interpre= tation is required, and of course this leads to vendor hype and organizatio= nal indecision. Best regards, -Eric Eric A. Hibbard, CISSP, CISA, ISSAP, ISSMP, ISSEP CTO Security and Privacy International Representative, INCITS TC CS1 Cyber Security Vice Chair, American Bar Association - SciTech Law - eDiscovery & Digital E= vidence Committee Vice Chair, IEEE Information Assurance Standards Committee (IASC) Member, SNIA Technical Council Chair, SNIA Security Technical Work Group Vice Chair, IEEE Security in Storage Work Group (P1619) HITACHI DATA SYSTEMS 750 Central Expressway Santa Clara, CA 95050-2627 P 408.970.7979/ C 408.314.0515 eric.hibbard@hds.com --_000_7F7CAF4EB3DAC74E8AB07E95FA703286320905C1EAUSINDEVS01cor_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

David,=

 =

We would definitely welc= ome such input. Please keep in mind that we expect to change the updated whitepaper = from one of educating the storage vendors to one that is more useful to organizations.

 =

-Eric<= /p>

 =

From: David Harring= ton [mailto:ietfdbh@comcast.net]
Sent: Thursday, July 23, 2009 7:14 AM
To: Eric Hibbard; mpeterson@snia-dmf.org
Cc: snia-security@snia.org; snia-ssif@snia.org; 'Chris Lonvick'; syslog@ietf.org
Subject: RE: [snia-security] Audit Logging SIG/TWG=

 

Hi,

 

I just read the SNIA Logging white paper, and found some things that are no longer recommended (the BEEP raw and cooked profiles), and some changes to Syslog terminology in order to better address the security issue= s.

 

You mentioned the white paper is being updated as we speak. Would you like reviewers that have a good knowledge of the IETF Syslog RFCs?

 

David Harrington
dbharrington@comcast.net
ietfdbh@comcast.net
dharrington@huawei.com<= /p>

 

From: Eric Hibbard [mailto:Eric.Hibbard@hds.c= om]
Sent: Thursday, July 23, 2009 9:59 AM
To: David Harrington; mpeterson@snia-dmf.org
Cc: snia-security@snia.org; snia-ssif@snia.org; 'Chris Lonvick'; syslog@ietf.org
Subject: RE: [snia-security] Audit Logging SIG/TWG

David,=

 =

Thank you for the feedba= ck. A couple of us within SNIA and the INCITS/CS1 organizations have been monitor= ing the progress. We are definitely pleased to have the new standards-track RFC= s for syslog.

 =

-Eric<= /p>

 =

From: David Harring= ton [mailto:ietfdbh@comcast.net]
Sent: Thursday, July 23, 2009 6:04 AM
To: Eric Hibbard; mpeterson@snia-dmf.org
Cc: snia-security@snia.org; snia-ssif@snia.org; 'Chris Lonvick'; syslog@ietf.org
Subject: RE: [snia-security] Audit Logging SIG/TWG=

 

Hi,

 

The IETF Syslog WG has been chartered to address security issue= s. The WG has almost completed its current work plan. Some of the features tha= t have been included in the IETF syslog standards will probably be useful for audit logging purposes, such as increased message sizes, secure transp= ort, structured data elements, and digitally signed messages,  http://www.= ietf.org/dyn/wg/charter/syslog-charter.html

 

The WG is considering re-chartering to do additional work. Much of the proposed work relates to standardizing how syslog is used, and = for standardizing some types of logging content.

 

The Syslog WG will be meeting at the upcoming IETF meeting (http://www.ietf.org/meeting/75/). Attached is a Powerpoint presentation that shows what topics are expected t= o be discussed. Proposals for additional work are welcome.

 

In the IETF, official work is done using mailing lists rather t= han face-to-face meetings. If anybody wishes to monitor or contribute to the discussion, here is where the official discussions occur:

 

Your input is welcome.

 

David Harrington

co-chair, Syslog WG

Standards Manager, HuaweiSymantec Technologies
dbharrington@comcast.net
ietfdbh@comcast.net
dharrington@huawei.com


 

 

From: Eric Hibbard [mailto:Eric.Hibbard@hds.c= om]
Sent: Friday, July 17, 2009 12:24 PM
To: mpeterson@snia-dmf.org
Cc: snia-security@snia.org; snia-ssif@snia.org
Subject: [snia-security] Audit Logging SIG/TWG

Michael,

 

I understand that you have expressed some interest in = the area of audit logging and have floated the idea of forming a SIG or TWG for such an activity. I have a mixed reaction to this…on the one hand, th= e Security TWG has been advocating that storage ecosystems must participate i= n audit logging (as opposed to just health and fault logging)…on the fl= ip side, we don’t see SNIA being a serious leader in this space (we̵= 7;re about 3 years too late for that)…more like a consumer. However, the Security TWG considers this an important area and we’re more than hap= py to participate and/or support whatever surfaces.

 

In the spirit of sharing, you might want to take a loo= k at the following resources:

 

·         SNIA docs – Storage Security best practices (http://www.snia.org/forums/ssif/programs/SNIATechnicalProposal-Security-BC= Ps.20080904.pdf) and the SNIA Logging Whitepaper (http://www.snia.org/forums/ssif/knowledge_center/white_papers/forums/ssif/= knowledge_center/white_papers/SNIA-Logging-WP.050921.pdf); the whitepaper is being rewritten as week speak

·         IETF Syslog WG (http://tools.ietf.org/wg/syslog/) – The IETF h= as finally published multiple standards-track RFC related to Syslog, which is = the primary protocol for all external/centralized logging. These RFC cover architecture, protocol, and security.

·         Mitre – Mitre has done some work with its Common Even Expressi= on Taxonomy (CEET), which the Security TWG has been investigating as a possibl= e way of “standardizing” message events so that the event log ven= dors could parse and react to them. Check out http://cee.mitre.org/ceelanguage.h= tml

 

With the possible exception of PCI DSS, most of the dr= ivers for this technology are indirect (i.e., monitor and respond, or establish a= nd maintain accountability and traceability). This means that a certain amount= of interpretation is required, and of course this leads to vendor hype and organizational indecision.

 

Best regards,

 

-Eric

 

Eric A. Hibbard, CISSP, CISA, ISSAP, ISSMP, ISSEP
CTO Security and Privacy

 

International Representative, INCITS TC CS1 Cyber Security

Vice Chair, American Bar Association – SciTech Law – eDiscovery &= ; Digital Evidence Committee

Vice Chair, IEEE Information Assurance Standards Committee (IASC)

Member, SNIA Technical Council

Chair, SNIA Security Technical Work Group

Vice Chair, IEEE Security in Storage Work Group (P1619)

 

HITACHI DATA SYSTEMS
750 Central Expressway
Santa Clara, CA 95050-2627
P 408.970.7979/ C 408.314.0515
eric.hibbard@hds.com

 

--_000_7F7CAF4EB3DAC74E8AB07E95FA703286320905C1EAUSINDEVS01cor_-- From clonvick@cisco.com Thu Jul 23 20:16:24 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 220D13A6CB3 for ; Thu, 23 Jul 2009 20:16:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FZjrQkv6bOQI for ; Thu, 23 Jul 2009 20:16:23 -0700 (PDT) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 222083A67E1 for ; Thu, 23 Jul 2009 20:16:23 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAE/EaEqrR7MV/2dsb2JhbAC4DYglkGgFhA0 X-IronPort-AV: E=Sophos;i="4.43,259,1246838400"; d="scan'208";a="352916820" Received: from sj-dkim-1.cisco.com ([171.71.179.21]) by sj-iport-6.cisco.com with ESMTP; 24 Jul 2009 03:15:19 +0000 Received: from sj-core-3.cisco.com (sj-core-3.cisco.com [171.68.223.137]) by sj-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id n6O3FJ49011477 for ; Thu, 23 Jul 2009 20:15:19 -0700 Received: from sjc-cde-011.cisco.com (sjc-cde-011.cisco.com [171.69.16.68]) by sj-core-3.cisco.com (8.13.8/8.14.3) with ESMTP id n6O3FJM0017223 for ; Fri, 24 Jul 2009 03:15:19 GMT Date: Thu, 23 Jul 2009 20:15:19 -0700 (PDT) From: Chris Lonvick To: syslog@ietf.org Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=2740; t=1248405319; x=1249269319; c=relaxed/simple; s=sjdkim1004; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=clonvick@cisco.com; z=From:=20Chris=20Lonvick=20 |Subject:=20Proposed=20charter |Sender:=20; bh=iaXw+Lt0+v06+bKmJ2LcoSzBv9HfivgTvhCmj6qcde8=; b=Y/A5y2JAJ9LlrL1aydMp+z003c862Cx3Yl2a0E2tdrGXmsICV6x+tAGEL5 05UfZR89QBqmicunRreQPszzmXyfVogoDaUkg0ArgxIRyLTHIQKJlfFGQsp4 GtvM+SW7OEoTb8DooU/f4oAsWsbmJAfaB1XTVZp36GpPutIWeE6kw=; Authentication-Results: sj-dkim-1; header.From=clonvick@cisco.com; dkim=pass ( sig from cisco.com/sjdkim1004 verified; ); Subject: [Syslog] Proposed charter X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Jul 2009 03:16:24 -0000 Hi Folks, David and I discussed and we would like to propose the following as a new charter. The goal that is listed is for what we have commitment at this time. We can add more goals but that will only happen if we have solid commitment for people who will write a document and for people who will review it. If you really want something that's in the ppt (you can find that in the on-line agenda) to be included in this charter, then get your comments to the list. We would appreciate any comments to this draft charter before the WG meeting on Tuesday. ========================================================================== Security Issues in Network Event Logging (syslog) Last Modified: Additional information is available at tools.ietf.org/wg/syslog Chair(s): Security Area Director(s): Tim Polk Pasi Eronen Security Area Advisor: Pasi Eronen Mailing Lists: General Discussion: syslog@ietf.org To Subscribe: syslog-request@ietf.org In Body: in body: (un)subscribe Archive: http://www.ietf.org/mail-archive/web/syslog Description of Working Group: This working group has standardized the syslog protocol (RFC5424), plus a TLS secured transport (RFC5425), and a nonsecure UDP transport (RFC 5426). The WG under this charter will standardize a DTLS transport for syslog, providing a secure transport for syslog messages in cases where a connection-less transport is desired. The threats that this WG will primarily address are modification, disclosure, and masquerade. A secondary threat is message stream modification. These threats are consistent with those addressed in the creation of RFC 5425. The syslog Working Group has the following objective: A document will be produced that uses DTLS as a secure transport for the delivery of syslog messages. The resulting document will be consistent with the threats addressed in Transport Layer Security (TLS) Transport Mapping for Syslog (RFC 5425) so that the DTLS transport may be used with the same assurance of security. draft-feng-syslog-transport-dtls-01 is already similar to RFC5425 in this respect, so this draft will become the starting point for the WG document, which the WG will adjust as needed, and merge desired features from other sources, such as draft-petch-gerhards-syslog-transport-dtls-02. Goals and Milestones: Mar 2010 Submit Syslog DTLS Transport Mapping to the IESG for consideration as a PROPOSED STANDARD ========================================================================== Thanks, Chris & David From glenn@cysols.com Fri Jul 24 00:31:37 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 609233A691E for ; Fri, 24 Jul 2009 00:31:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.09 X-Spam-Level: X-Spam-Status: No, score=-0.09 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I58nW120y1cs for ; Fri, 24 Jul 2009 00:31:36 -0700 (PDT) Received: from niseko.cysol.co.jp (niseko.cysol.co.jp [210.233.3.236]) by core3.amsl.com (Postfix) with ESMTP id 870563A62C1 for ; Fri, 24 Jul 2009 00:31:36 -0700 (PDT) Received: from [127.0.0.1] (Bert.win2004.cysol.co.jp [192.168.0.198]) (authenticated bits=0) by aso.priv.cysol.co.jp (8.14.3/8.14.3) with ESMTP id n6O7U4Qn055003 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 24 Jul 2009 16:30:07 +0900 (JST) (envelope-from glenn@cysols.com) Message-ID: <4A6962F9.6000909@cysols.com> Date: Fri, 24 Jul 2009 16:30:01 +0900 From: "Glenn M. Keeni" User-Agent: Thunderbird 2.0.0.22 (Windows/20090605) MIME-Version: 1.0 To: Chris Lonvick References: In-Reply-To: Content-Type: text/plain; charset=ISO-2022-JP Content-Transfer-Encoding: 7bit Cc: syslog@ietf.org Subject: Re: [Syslog] Proposed charter X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Jul 2009 07:31:37 -0000 Hi, Chris Lonvick wrote: > Hi Folks, > > David and I discussed and we would like to propose the following as a > new charter. > > The goal that is listed is for what we have commitment at this time. We > can add more goals but that will only happen if we have solid commitment > for people who will write a document and for people who will review it. > > If you really want something that's in the ppt (you can find that in the > on-line agenda) to be included in this charter, then get your comments > to the list. > I would strongly recommend that we do the SYSLOG-MIB work. It was waiting on the finalization of the other Syslog protocol components. Now that we have those in place we can wrap this one up. I will volunteer the time and the effort to take this through. Unfortunately, I will not be making it to the Tuesday meeting, but I hope to follow the proceedings online. > We would appreciate any comments to this draft charter before the WG > meeting on Tuesday. Cheers Glenn > From Larry.Hofer@Emulex.Com Thu Jul 23 09:11:46 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EC5413A68B3 for ; Thu, 23 Jul 2009 09:11:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dYefe-1GZSDp for ; Thu, 23 Jul 2009 09:11:38 -0700 (PDT) Received: from emulex.emulex.com (emulex.emulex.com [138.239.112.1]) by core3.amsl.com (Postfix) with ESMTP id 4D6F33A69F2 for ; Thu, 23 Jul 2009 09:11:38 -0700 (PDT) Received: from xcm.ad.emulex.com (xcm.emulex.com [138.239.112.69]) by emulex.emulex.com (8.13.6/8.13.6) with ESMTP id n6NGAbSe023654; Thu, 23 Jul 2009 09:10:37 -0700 (PDT) From: Larry.Hofer@Emulex.Com Received: from exht1.ad.emulex.com ([138.239.113.183]) by xcm.ad.emulex.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 23 Jul 2009 09:10:09 -0700 Received: from exht2.ad.emulex.com (138.239.113.184) by exht1.ad.emulex.com (138.239.113.183) with Microsoft SMTP Server (TLS) id 8.1.340.0; Thu, 23 Jul 2009 09:10:09 -0700 Received: from EXMAIL.ad.emulex.com ([138.239.113.179]) by exht2.ad.emulex.com ([138.239.113.184]) with mapi; Thu, 23 Jul 2009 09:10:09 -0700 To: , , Date: Thu, 23 Jul 2009 09:10:07 -0700 Thread-Topic: [snia-security] Audit Logging SIG/TWG Thread-Index: AcoG+wW7KgbiChK4RVi0HSeaEgEotAElht6gAAL5qlAABLOHMA== Message-ID: References: <7F7CAF4EB3DAC74E8AB07E95FA70328631F625458B@USINDEVS01.corp.hds.com> <1e2901ca0b96$11bba2f0$0600a8c0@china.huawei.com> <7F7CAF4EB3DAC74E8AB07E95FA703286320905C09E@USINDEVS01.corp.hds.com> In-Reply-To: <7F7CAF4EB3DAC74E8AB07E95FA703286320905C09E@USINDEVS01.corp.hds.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/alternative; boundary="_000_CB376E1C24DB4A43A1D596B2BC1BD8287722A1C061EXMAILademule_" MIME-Version: 1.0 X-OriginalArrivalTime: 23 Jul 2009 16:10:09.0313 (UTC) FILETIME=[0CF6C910:01CA0BB0] X-Mailman-Approved-At: Fri, 24 Jul 2009 08:13:33 -0700 Cc: snia-ssif@snia.org, syslog@ietf.org, snia-security@snia.org, Larry.Hofer@Emulex.Com Subject: Re: [Syslog] [snia-security] Audit Logging SIG/TWG X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Jul 2009 16:11:47 -0000 --_000_CB376E1C24DB4A43A1D596B2BC1BD8287722A1C061EXMAILademule_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Eric, Regarding the mitre reference below. It appears that the mitre activities h= aven't gotten far enough to be useful to anyone right now. Do they have a t= imeline in mind? Curious, Larry H ________________________________ From: Eric Hibbard [mailto:Eric.Hibbard@hds.com] Sent: Thursday, July 23, 2009 7:59 AM To: David Harrington; mpeterson@snia-dmf.org Cc: snia-security@snia.org; snia-ssif@snia.org; 'Chris Lonvick'; syslog@iet= f.org Subject: RE: [snia-security] Audit Logging SIG/TWG David, Thank you for the feedback. A couple of us within SNIA and the INCITS/CS1 o= rganizations have been monitoring the progress. We are definitely pleased t= o have the new standards-track RFCs for syslog. -Eric From: David Harrington [mailto:ietfdbh@comcast.net] Sent: Thursday, July 23, 2009 6:04 AM To: Eric Hibbard; mpeterson@snia-dmf.org Cc: snia-security@snia.org; snia-ssif@snia.org; 'Chris Lonvick'; syslog@iet= f.org Subject: RE: [snia-security] Audit Logging SIG/TWG Hi, The IETF Syslog WG has been chartered to address security issues. The WG ha= s almost completed its current work plan. Some of the features that have be= en included in the IETF syslog standards will probably be useful for audit = logging purposes, such as increased message sizes, secure transport, struct= ured data elements, and digitally signed messages, http://www.ietf.org/dyn= /wg/charter/syslog-charter.html The WG is considering re-chartering to do additional work. Much of the prop= osed work relates to standardizing how syslog is used, and for standardizin= g some types of logging content. The Syslog WG will be meeting at the upcoming IETF meeting (http://www.ietf= .org/meeting/75/). Attached is a Powerpoint presentation that shows what to= pics are expected to be discussed. Proposals for additional work are welcom= e. In the IETF, official work is done using mailing lists rather than face-to-= face meetings. If anybody wishes to monitor or contribute to the discussion= , here is where the official discussions occur: General Discussion: syslog@ietf.org To Subscribe: syslog-request@ietf.org In Body: subscribe Archive: http://www.ietf.org/mail-archive/web/syslog Your input is welcome. David Harrington co-chair, Syslog WG Standards Manager, HuaweiSymantec Technologies dbharrington@comcast.net ietfdbh@comcast.net dharrington@huawei.com ________________________________ From: Eric Hibbard [mailto:Eric.Hibbard@hds.com] Sent: Friday, July 17, 2009 12:24 PM To: mpeterson@snia-dmf.org Cc: snia-security@snia.org; snia-ssif@snia.org Subject: [snia-security] Audit Logging SIG/TWG Michael, I understand that you have expressed some interest in the area of audit log= ging and have floated the idea of forming a SIG or TWG for such an activity= . I have a mixed reaction to this...on the one hand, the Security TWG has b= een advocating that storage ecosystems must participate in audit logging (a= s opposed to just health and fault logging)...on the flip side, we don't se= e SNIA being a serious leader in this space (we're about 3 years too late f= or that)...more like a consumer. However, the Security TWG considers this a= n important area and we're more than happy to participate and/or support wh= atever surfaces. In the spirit of sharing, you might want to take a look at the following re= sources: * SNIA docs - Storage Security best practices (http://www.snia.org/= forums/ssif/programs/SNIATechnicalProposal-Security-BCPs.20080904.pdf) and = the SNIA Logging Whitepaper (http://www.snia.org/forums/ssif/knowledge_cent= er/white_papers/forums/ssif/knowledge_center/white_papers/SNIA-Logging-WP.0= 50921.pdf); the whitepaper is being rewritten as week speak * IETF Syslog WG (http://tools.ietf.org/wg/syslog/) - The IETF has = finally published multiple standards-track RFC related to Syslog, which is = the primary protocol for all external/centralized logging. These RFC cover = architecture, protocol, and security. * Mitre - Mitre has done some work with its Common Even Expression = Taxonomy (CEET), which the Security TWG has been investigating as a possibl= e way of "standardizing" message events so that the event log vendors could= parse and react to them. Check out http://cee.mitre.org/ceelanguage.html With the possible exception of PCI DSS, most of the drivers for this techno= logy are indirect (i.e., monitor and respond, or establish and maintain acc= ountability and traceability). This means that a certain amount of interpre= tation is required, and of course this leads to vendor hype and organizatio= nal indecision. Best regards, -Eric Eric A. Hibbard, CISSP, CISA, ISSAP, ISSMP, ISSEP CTO Security and Privacy International Representative, INCITS TC CS1 Cyber Security Vice Chair, American Bar Association - SciTech Law - eDiscovery & Digital E= vidence Committee Vice Chair, IEEE Information Assurance Standards Committee (IASC) Member, SNIA Technical Council Chair, SNIA Security Technical Work Group Vice Chair, IEEE Security in Storage Work Group (P1619) HITACHI DATA SYSTEMS 750 Central Expressway Santa Clara, CA 95050-2627 P 408.970.7979/ C 408.314.0515 eric.hibbard@hds.com --_000_CB376E1C24DB4A43A1D596B2BC1BD8287722A1C061EXMAILademule_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Eric,
 
Regarding the mitre reference below. It appears th= at the=20 mitre activities haven't gotten far enough to be useful to anyone right now= . Do=20 they have a timeline in mind?
 
Curious,
Larry H

From: Eric Hibbard [mailto:Eric.Hibbard= @hds.com]=20
Sent: Thursday, July 23, 2009 7:59 AM
To: David Harrin= gton;=20 mpeterson@snia-dmf.org
Cc: snia-security@snia.org; snia-ssif@snia= .org;=20 'Chris Lonvick'; syslog@ietf.org
Subject: RE: [snia-security] Aud= it=20 Logging SIG/TWG

David,

 

Thank you for the feedb= ack. A=20 couple of us within SNIA and the INCITS/CS1 organizations have been monitor= ing=20 the progress. We are definitely pleased to have the new standards-track RFC= s for=20 syslog.

 

-Eric=

 

From:<= /B> David Harrin= gton=20 [mailto:ietfdbh@comcast.net]
Sent: Thursday, July 23, 2009 6:04= =20 AM
To: Eric Hibbard; mpeterson@snia-dmf.org
Cc:=20 snia-security@snia.org; snia-ssif@snia.org; 'Chris Lonvick';=20 syslog@ietf.org
Subject: RE: [snia-security] Audit Logging=20 SIG/TWG

 

H= i,

 

T= he IETF=20 Syslog WG has been chartered to address security issues. The WG has almost= =20 completed its current work plan. Some of the features that have been includ= ed in=20 the IETF syslog standards will probably be useful for audit logging=20 purposes, such as increased message sizes, secure transport, structure= d=20 data elements, and digitally signed messages,  http://www.= ietf.org/dyn/wg/charter/syslog-charter.html

 

T= he=20 WG is considering re-chartering to do additional work. Much of the pro= posed=20 work relates to standardizing how syslog is used, and for standardizing som= e=20 types of logging content.

 

T= he=20 Syslog WG will be meeting at the upcoming IETF meeting (http://www.ietf.org/meeting/75/).=20 Attached is a Powerpoint presentation that shows what topics are expected t= o be=20 discussed. Proposals for additional work are welcome.

 

I= n the=20 IETF, official work is done using mailing lists rather than face-to-face=20 meetings. If anybody wishes to monitor or contribute to the discussion, her= e is=20 where the official discussions occur:

General=20 Discussion: syslog@ietf.org
To Subscribe: syslog-request@ietf.org
In B= ody:=20 subscribe
Archive: http://www.ietf.org/ma= il-archive/web/syslog

 

Y= our=20 input is welcome.

 

David Har= rington=20

co-chair,= Syslog=20 WG

Standards Manager, HuaweiSymantec=20 Technologies
dbharrington@comcast.net
ietfdbh@comcast.net
<= A=20 href=3D"mailto:dharrington@huawei.com">dharrington@huawei.com


 

&nbs= p;

From: Eric Hibba= rd=20 [mailto:Eric.Hibbard@hds.com]
Sent: Friday, July 17, 2009 12:2= 4=20 PM
To: mpeterson@snia-dmf.org
Cc: snia-security@snia.= org;=20 snia-ssif@snia.org
Subject: [snia-security] Audit Logging=20 SIG/TWG

Michael,

 

I understand that you have expressed some interest i= n the=20 area of audit logging and have floated the idea of forming a SIG or TWG f= or=20 such an activity. I have a mixed reaction to this…on the one hand, = the=20 Security TWG has been advocating that storage ecosystems must participate= in=20 audit logging (as opposed to just health and fault logging)…on the = flip side,=20 we don’t see SNIA being a serious leader in this space (we’re= about 3 years=20 too late for that)…more like a consumer. However, the Security TWG = considers=20 this an important area and we’re more than happy to participate and= /or support=20 whatever surfaces.

 

In the spirit of sharing, you might want to take a l= ook at=20 the following resources:

 

· &n= bsp;      =20 SNIA docs – Storage Security best practices=20 (http://www.snia.org/forums/ssif/programs/SNIATechnicalProposal-Security-= BCPs.20080904.pdf)=20 and the SNIA Logging Whitepaper=20 (http://www.snia.org/forums/ssif/knowledge_center/white_papers/forums/ssi= f/knowledge_center/white_papers/SNIA-Logging-WP.050921.pdf);=20 the whitepaper is being rewritten as week speak

· &n= bsp;      =20 IETF Syslog WG (http://tools.ietf.org/wg/syslog/) – The IETF= has=20 finally published multiple standards-track RFC related to Syslog, which i= s the=20 primary protocol for all external/centralized logging. These RFC cover=20 architecture, protocol, and security.

· &n= bsp;      =20 Mitre – Mitre has done some work with its Common Even Expres= sion=20 Taxonomy (CEET), which the Security TWG has been investigating as a possi= ble=20 way of “standardizing” message events so that the event log v= endors could=20 parse and react to them. Check out=20 http://cee.mitre.org/ceelanguage.html

 

With the possible exception of PCI DSS, most of the = drivers=20 for this technology are indirect (i.e., monitor and respond, or establish= and=20 maintain accountability and traceability). This means that a certain amou= nt of=20 interpretation is required, and of course this leads to vendor hype and=20 organizational indecision.

 

Best regards,

 

-Eric

 

Eric = A.=20 Hibbard, CISSP, CISA, ISSAP, ISSMP, ISSEP
CTO S= ecurity=20 and Privacy

 

Inter= national=20 Representative, INCITS TC CS1 Cyber Security

Vice = Chair,=20 American Bar Association – SciTech Law – eDiscovery & Dig= ital Evidence=20 Committee

Vice = Chair,=20 IEEE Information Assurance Standards Committee (IASC)

Membe= r, SNIA=20 Technical Council

Chair= , SNIA=20 Security Technical Work Group

Vice = Chair,=20 IEEE Security in Storage Work Group (P1619)

 

HITAC= HI DATA=20 SYSTEMS
<= SPAN=20 style=3D"FONT-SIZE: 10pt; FONT-FAMILY: 'Arial Narrow','sans-serif'">750 C= entral=20 Expressway
<= SPAN=20 style=3D"FONT-SIZE: 10pt; FONT-FAMILY: 'Arial Narrow','sans-serif'">Santa= Clara,=20 CA 95050-2627
<= SPAN=20 style=3D"FONT-SIZE: 10pt; FONT-FAMILY: 'Arial Narrow','sans-serif'">P=20 408.970.7979/ C 408.314.0515
<= U>eric.hibbard@hds.com

 

--_000_CB376E1C24DB4A43A1D596B2BC1BD8287722A1C061EXMAILademule_-- From clonvick@cisco.com Sat Jul 25 16:06:16 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B7EFF3A67AF for ; Sat, 25 Jul 2009 16:06:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.598 X-Spam-Level: X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lup9+MMxyn69 for ; Sat, 25 Jul 2009 16:06:15 -0700 (PDT) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id B1DB03A69B5 for ; Sat, 25 Jul 2009 16:06:15 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AswFALYsa0qrR7MV/2dsb2JhbACCIjG0cIgojwcFhA0 X-IronPort-AV: E=Sophos;i="4.43,270,1246838400"; d="scan'208,217";a="353964078" Received: from sj-dkim-1.cisco.com ([171.71.179.21]) by sj-iport-6.cisco.com with ESMTP; 25 Jul 2009 23:06:16 +0000 Received: from sj-core-5.cisco.com (sj-core-5.cisco.com [171.71.177.238]) by sj-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id n6PN6GRx024869; Sat, 25 Jul 2009 16:06:16 -0700 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-5.cisco.com (8.13.8/8.14.3) with ESMTP id n6PN6GNA011700; Sat, 25 Jul 2009 23:06:16 GMT Received: from xmb-sjc-227.amer.cisco.com ([128.107.191.43]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Sat, 25 Jul 2009 16:06:16 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CA0D7C.82DF8204" Date: Sat, 25 Jul 2009 16:06:15 -0700 Message-ID: <1BA601B02314084980FE9D0630FE9793053F8E09@xmb-sjc-227.amer.cisco.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Syslog] Proposed charter Thread-Index: AcoMMJY3Pv67DLqxTaetm4OxxsMpBABS+yrB From: "Chris Lonvick (clonvick)" To: "Glenn M. Keeni" X-OriginalArrivalTime: 25 Jul 2009 23:06:16.0363 (UTC) FILETIME=[834FC7B0:01CA0D7C] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=4282; t=1248563176; x=1249427176; c=relaxed/simple; s=sjdkim1004; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=clonvick@cisco.com; z=From:=20=22Chris=20Lonvick=20(clonvick)=22=20 |Subject:=20Re=3A=20[Syslog]=20Proposed=20charter |Sender:=20; bh=BzrGY+nNMffIXQxemzKWVkVWsF7YRNSjsFxnRWrjZMk=; b=i2ROEkaup9TRaWqT4v9CYIq4fTUQJLgEmFUpTUAW8Vb4l7sXAP0TaKJwsB wJQuVNtn3bwq3Zy+tVGV7puRLvdr4GMexnP5sXblfgvelKXxux7KT+5LeXK4 u3GBcrLdyIE9Q4OaSdaivG0ai0DBDaBdhtbHDExAh3DebuISVApVU=; Authentication-Results: sj-dkim-1; header.From=clonvick@cisco.com; dkim=pass ( sig from cisco.com/sjdkim1004 verified; ); Cc: syslog@ietf.org Subject: Re: [Syslog] Proposed charter X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Jul 2009 23:06:16 -0000 This is a multi-part message in MIME format. ------_=_NextPart_001_01CA0D7C.82DF8204 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Glenn and all, We need to hear from others. IIRC, the concepts were getting a bit = difficult to follow and not everyone was nodding their heads together on = this. All: please respond with your comments on this. The default is to = exclude items from the charter unless we feel that there is a strong = commitment to advance a document. Thanks, Chris -----Original Message----- From: Glenn M. Keeni [mailto:glenn@cysols.com] Sent: Friday, July 24, 2009 12:30 AM Pacific Standard Time To: Chris Lonvick (clonvick) Cc: syslog@ietf.org Subject: Re: [Syslog] Proposed charter Hi, Chris Lonvick wrote: > Hi Folks, >=20 > David and I discussed and we would like to propose the following as a=20 > new charter. >=20 > The goal that is listed is for what we have commitment at this time. = We=20 > can add more goals but that will only happen if we have solid = commitment=20 > for people who will write a document and for people who will review = it. >=20 > If you really want something that's in the ppt (you can find that in = the=20 > on-line agenda) to be included in this charter, then get your comments = > to the list. >=20 I would strongly recommend that we do the SYSLOG-MIB work. It was waiting on the finalization of the other Syslog protocol components. Now that we have those in place we can wrap this one up. I will volunteer the time and the effort to take this through. Unfortunately, I will not be making it to the Tuesday meeting, but I hope to follow the proceedings online. > We would appreciate any comments to this draft charter before the WG=20 > meeting on Tuesday. Cheers Glenn >=20 ------_=_NextPart_001_01CA0D7C.82DF8204 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Re: [Syslog] Proposed charter

Hi Glenn and all,

We need to hear from others.  IIRC, the concepts were getting a bit = difficult to follow and not everyone was nodding their heads together on = this.

All: please respond with your comments on this.  The default is to = exclude items from the charter unless we feel that there is a strong = commitment to advance a document.

Thanks,
Chris



 -----Original Message-----
From:   Glenn M. Keeni [mailto:glenn@cysols.com]
Sent:   Friday, July 24, 2009 12:30 AM Pacific Standard = Time
To:     Chris Lonvick (clonvick)
Cc:     syslog@ietf.org
Subject:        Re: [Syslog] Proposed = charter

Hi,
Chris Lonvick wrote:
> Hi Folks,
>
> David and I discussed and we would like to propose the following as = a
> new charter.
>
> The goal that is listed is for what we have commitment at this = time.  We
> can add more goals but that will only happen if we have solid = commitment
> for people who will write a document and for people who will review = it.
>
> If you really want something that's in the ppt (you can find that = in the
> on-line agenda) to be included in this charter, then get your = comments
> to the list.

>
I would strongly recommend that we do the SYSLOG-MIB work. It was
waiting on the finalization of the other Syslog protocol components.
Now that we have those in place we can wrap this one up. I will
volunteer the time and the effort to take this through. = Unfortunately,
I will not be making it to the Tuesday meeting, but I hope to follow
the proceedings online.

> We would appreciate any comments to this draft charter before the = WG
> meeting on Tuesday.

Cheers

Glenn
>

------_=_NextPart_001_01CA0D7C.82DF8204-- From glenn@cysols.com Sat Jul 25 16:55:00 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D499D3A68B0 for ; Sat, 25 Jul 2009 16:55:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.09 X-Spam-Level: X-Spam-Status: No, score=-0.09 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ePr4U-smZAU4 for ; Sat, 25 Jul 2009 16:55:00 -0700 (PDT) Received: from niseko.cysol.co.jp (niseko.cysol.co.jp [210.233.3.236]) by core3.amsl.com (Postfix) with ESMTP id E17C93A6839 for ; Sat, 25 Jul 2009 16:54:59 -0700 (PDT) Received: from [127.0.0.1] (cysvpn16.priv.cysol.co.jp [192.168.0.103]) (authenticated bits=0) by aso.priv.cysol.co.jp (8.14.3/8.14.3) with ESMTP id n6PNrmPF033841 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 26 Jul 2009 08:53:50 +0900 (JST) (envelope-from glenn@cysols.com) Message-ID: <4A6B9B07.8030106@cysols.com> Date: Sun, 26 Jul 2009 08:53:43 +0900 From: "Glenn M. Keeni" User-Agent: Thunderbird 2.0.0.22 (Windows/20090605) MIME-Version: 1.0 To: "Chris Lonvick (clonvick)" References: <1BA601B02314084980FE9D0630FE9793053F8E09@xmb-sjc-227.amer.cisco.com> In-Reply-To: <1BA601B02314084980FE9D0630FE9793053F8E09@xmb-sjc-227.amer.cisco.com> Content-Type: text/plain; charset=ISO-2022-JP Content-Transfer-Encoding: 7bit Cc: syslog@ietf.org Subject: Re: [Syslog] Proposed charter X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Jul 2009 23:55:00 -0000 Hi Chris, Chris Lonvick (clonvick) wrote: > Hi Glenn and all, > > We need to hear from others. IIRC, the concepts were getting a bit difficult > to follow and not everyone was nodding their heads together on this. There was some discussion on a. whether the MIB needed to support multiple syslog entities ( originators, receivers, relays) in a single MIB b. need for additional objects to configure the syslog entities ( e.g. filters) c. terminology Then we decided to wait till the protocol documents to got through. > > All: please respond with your comments on this. The default is to exclude > items from the charter unless we feel that there is a strong commitment to > advance a document. I think that we can very well move ahead from here. I will resend the summary "SIMPLE SyslogMIB" mail to the list for further comments. Glenn > > Thanks, > Chris > > > > -----Original Message----- > From: Glenn M. Keeni [mailto:glenn@cysols.com] > Sent: Friday, July 24, 2009 12:30 AM Pacific Standard Time > To: Chris Lonvick (clonvick) > Cc: syslog@ietf.org > Subject: Re: [Syslog] Proposed charter > > Hi, > Chris Lonvick wrote: >> Hi Folks, >> >> David and I discussed and we would like to propose the following as a >> new charter. >> >> The goal that is listed is for what we have commitment at this time. We >> can add more goals but that will only happen if we have solid commitment >> for people who will write a document and for people who will review it. >> >> If you really want something that's in the ppt (you can find that in the >> on-line agenda) to be included in this charter, then get your comments >> to the list. > > I would strongly recommend that we do the SYSLOG-MIB work. It was > waiting on the finalization of the other Syslog protocol components. > Now that we have those in place we can wrap this one up. I will > volunteer the time and the effort to take this through. Unfortunately, > I will not be making it to the Tuesday meeting, but I hope to follow > the proceedings online. > >> We would appreciate any comments to this draft charter before the WG >> meeting on Tuesday. > > Cheers > > Glenn > From glenn@cysols.com Sat Jul 25 17:59:13 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C93983A6939 for ; Sat, 25 Jul 2009 17:59:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.21 X-Spam-Level: X-Spam-Status: No, score=0.21 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, J_CHICKENPOX_22=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jaqEHbWUvzzH for ; Sat, 25 Jul 2009 17:59:13 -0700 (PDT) Received: from niseko.cysol.co.jp (niseko.cysol.co.jp [210.233.3.236]) by core3.amsl.com (Postfix) with ESMTP id B32333A6839 for ; Sat, 25 Jul 2009 17:59:12 -0700 (PDT) Received: from [127.0.0.1] (cysvpn16.priv.cysol.co.jp [192.168.0.103]) (authenticated bits=0) by aso.priv.cysol.co.jp (8.14.3/8.14.3) with ESMTP id n6Q0x6lr038502 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Sun, 26 Jul 2009 09:59:12 +0900 (JST) (envelope-from glenn@cysols.com) Message-ID: <4A6BAA59.9090205@cysols.com> Date: Sun, 26 Jul 2009 09:59:05 +0900 From: "Glenn M. Keeni" User-Agent: Thunderbird 2.0.0.22 (Windows/20090605) MIME-Version: 1.0 To: syslog References: <1BA601B02314084980FE9D0630FE9793053F8E09@xmb-sjc-227.amer.cisco.com> In-Reply-To: <1BA601B02314084980FE9D0630FE9793053F8E09@xmb-sjc-227.amer.cisco.com> Content-Type: text/plain; charset=ISO-2022-JP Content-Transfer-Encoding: 7bit Subject: Re: [Syslog] Proposed charter X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 26 Jul 2009 00:59:13 -0000 Hi, The Syslog protocols have been defined and are in "proposed standard" stage. Now the working group needs to decide whether it needs Syslog to be manageable. To make it manageable we need to define a Syslog-MIB (Management Information Base) module. This has been an ongoing work for several years which was shelved at some stage to let the WG focus on the core protocol documents. The working group is being rechartered and we are looking for comments/feedback on the Syslog-MIB proposal. In the absence of comments the chairs have threatened to drop the Syslog-MIB proposal from the charter. If that happens, for some time, you will NOT be able to monitor/manage syslog from your management console using the Internet Standard management protocols. So, keep the comments coming. A simple explanation of the current proposed Syslog-MIB is given below. It explains the design principles and more importantly the kind of things that can be done by the Syslog-MIB. If you want to see the actual draft syslog-MIB proposal, please try http://tools.ietf.org/html/draft-ietf-syslog-device-mib-17 Thanks and cheers Glenn ----------------------- Simple SyslogMIB -------------------- Design ======= The basic design principle has been to keep the MIB simple. It has gone through several iterations, each one making it simpler than the earlier version :-) At present the MIB basically allows the NMS (Network Management System) to manage the syslog entity (sender, receiver, relay) by looking at its (a) status ( up/down/suspended/unknown) (b) configuration (Address, protocol, port number etc.) (c) macro statistics total number of messages (sent, received, relayed) total number of exceptions ( drops, discards, malforms) The asynchronous notifications will alert the NMS about changes in the syslog entity's status. That in a nutshell is what one will want to or need to do for basic syslog monitoring/management. The MIB can provide information on multiple syslog entities. [Scenario: two syslogd's are running on a syslog server - one for experiments one for regular operations.] Examples: ========= 1. We may want to get a table like the following on our NMS console: Syslog Status and Statistics Summary ==================================== +-----+-----+--------------+------+-----+-----+---------+ |Index|Type | Description |Status| Messages | | |rsR* | | |Sent | Recd| Dropped | +-----+-----+--------------+------+-----+-----+---------+ | 1 |r-- | SecuritySys | Up | - | 120| - | | 2 |r-- | Operations | Up | - | 1234| - | | 3 |r-- | Experiment-1 | Up | - | 9890| - | | 4 |-s- | SenderExpt-1 | Up | 99| - | 0 | | 4 |rsR | Experiment-2 | Down | 1200| 2345| 0 | +-----+-----+--------------+------+-----+-----+---------+ * r: Receiver , s: Sender, R: Relay Note that this is a sample. Several other columns are possible. In a similar manner the address and port of the syslog receiver, the number of malformed messages received etc. can be obtained. 2. Facility wise statistics can be generated as follows. Facility-wise Syslog Statistics Summary ======================================= +-----+--------+-----+--------------+------+-----+-----+---------+ |Index|Facility|Type | Description |Status| Messages | | | |rsR* | | |Sent | Recd| malformd| +-----+--------+-----+--------------+------+-----+-----+---------+ | 1 | 51 |r-- | SecuritySys | Up | - | 123| - | | 1 | 52 |r-- | SecuritySys | Up | - | 45| 45 | | 1 | 53 |r-- | SecuritySys | Up | - | 6| - | | 2 | 51 |r-- | Operations | Up | - | 789| - | | 2 | 52 |r-- | Operations | Up | - | 10| 10 | +-----+--------+-----+--------------+------+-----+-----+---------+ * r: Receiver , s: Sender, R: relay 3. In a more advanced scenario, i. a syslog entity can be started, from the NMS console, [with a specific address and port, if it is a receiver] or, ii.an existing syslog entity can be stopped or suspended. [I will not try to explain how that can be done.] I think that is as simple as it can be. Let me know if a. it can be made simpler or, b. it is too simple and more detailed information/functions are necessary. From ietfdbh@comcast.net Sat Jul 25 23:29:55 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EAC213A67D1 for ; Sat, 25 Jul 2009 23:29:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_22=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eLoPNxIVXnCd for ; Sat, 25 Jul 2009 23:29:54 -0700 (PDT) Received: from QMTA05.emeryville.ca.mail.comcast.net (qmta05.emeryville.ca.mail.comcast.net [76.96.30.48]) by core3.amsl.com (Postfix) with ESMTP id EE0513A6832 for ; Sat, 25 Jul 2009 23:29:53 -0700 (PDT) Received: from OMTA04.emeryville.ca.mail.comcast.net ([76.96.30.35]) by QMTA05.emeryville.ca.mail.comcast.net with comcast id LWV11c0020lTkoCA5WVvUF; Sun, 26 Jul 2009 06:29:55 +0000 Received: from Harrington73653 ([78.64.88.121]) by OMTA04.emeryville.ca.mail.comcast.net with comcast id LWVf1c0012d57S68QWVif8; Sun, 26 Jul 2009 06:29:53 +0000 From: "David Harrington" To: "'Glenn M. Keeni'" , "'syslog'" References: <1BA601B02314084980FE9D0630FE9793053F8E09@xmb-sjc-227.amer.cisco.com> <4A6BAA59.9090205@cysols.com> Date: Sun, 26 Jul 2009 08:29:40 +0200 Message-ID: <003e01ca0dba$7c6ae9a0$7958404e@china.huawei.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 Thread-Index: AcoNjE4U/uIDEsBWR+Cs/5X4hqPxBQAHFq+Q In-Reply-To: <4A6BAA59.9090205@cysols.com> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 Subject: Re: [Syslog] Proposed charter X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 26 Jul 2009 06:29:56 -0000 Hi, I am in the unenviable position of having to respond to this message from the standpoint of being syslog WG co-chair, a MIB Doctor and OPSDIR member, and a contributor. The things I need to respond are spread throughout Glenn's email. I will try to accurately state my perspective for each set of comments. comments inline. David Harrington dbharrington@comcast.net ietfdbh@comcast.net dharrington@huawei.com > -----Original Message----- > From: syslog-bounces@ietf.org > [mailto:syslog-bounces@ietf.org] On Behalf Of Glenn M. Keeni > Sent: Sunday, July 26, 2009 2:59 AM > To: syslog > Subject: Re: [Syslog] Proposed charter > > Hi, > The Syslog protocols have been defined and are in > "proposed standard" stage. Now the working group needs > to decide whether it needs Syslog to be manageable. As co-chair, I think this is slightly wrong. The IETF needs to make this decision, and the IETF is represented by the syslog WG (which focuses on developing proposed solutions within the scope of its charter), the area directors (who focus on area-wide consensus, and possibly multi-area consensus), the IESG (who focus on IETF-wide consensus), and the WG chairs (who focus on balancing the various inputs and trying to chart a way forward). The WG is not the only entity that needs to make this decision. > To make it manageable we need to define a Syslog-MIB > (Management Information Base) module. As a MIB Doctor and OPSDIR member and co-chair, I know this statement is wrong. syslog has been a defacto standard for many years, and already has solutions to make it manageable. Syslog-conf is widely used for configuration, and there are many proprietary MIB modules for monitoring syslog, and many applications that know how to process syslog messages to sort them, display them to operators, and correlate them with other management information such as SNMP traps. There are many ways to make a protocol manageable; writing a standards-track MIB module is one option. This WG, and the whole IETF, needs to decide whether syslog should have a standards-track solution for managing syslog (or for managing any other IETF standards-track protocol). When the syslog WG was started, it was common practice in the IETF to address manageability by requiring WGs to "write a MIB" to manage and monitor their proposed protocol standards using the Internet-Standard Management Framework (effectively SNMP + MIBs). The philosophy behind that practice has been changing. After significant discussion with the operator and vendor communities, the IETF has been moving toward a philosophy of multi-protocol/multi-solution management, and away from the "write a MIB" approach. The discussion is ongoing, and those interested can follow the discussion mostly in the OPSAWG WG and on the IETF Discuss mailng list. This WG should make a decision about whether they want to propose an IETF standards-track solution for managing syslog. That solution might be a standards-track MIB module, or a non-standards-track MIB module. It might be a proposed standard for syslog-conf, or a best current practices document for using proprietary solutions, or an Informational document that describes how syslog is currently being managed and monitored, and so on. As co-chairs, Chris and I have not seen consensus on what the WG thinks is the right direction to follow. > This has been > an ongoing work for several years which was shelved > at some stage to let the WG focus on the core protocol > documents. As co-chair: It is true that we shelved the proposed MIB module. Part of the reason was to wait until the core documents stabilized, so we had consistent terminology and clearly defined concepts to manage. The other reason for shelving the proposal is the co-chairs did not feel there was WG consensus on how to do management of syslog through a standards-track MIB module. > The working group is being rechartered As co-chair: The working group is considering rechartering. As contributors, Chris and I need to be convinced there is consensus to do so, and that resources are willing to commit to doing the work, and if so the chairs will work with the syslog and IETF communities to establish a new charter proposal with clear objectives and milestones, and then ask the area directors (who may consult with the IESG and IAB) to approve the proposed charter. > and we > are looking for comments/feedback on the Syslog-MIB > proposal. As co-chair and contributor: We are looking for comments/feedback on any proposed work direction for a re-chartered syslog WG. We are looking for commitment from people to do the work. We are looking for an expression of interest from multiple independent resources to produce a vendor-neutral solution. > In the absence of comments the chairs have > threatened to drop the Syslog-MIB proposal from the > charter. As contributor: In the absence of comments and commitments, Chris and I threaten to drop **any** proposal from the charter proposal that we are working to develop and present to the area directors. Chris and I are using our chair experience to help fashion a viable charter. As co-chair: Let me make this clear - anybody can write a proposed charter for a WG and present it to the area directors for approval; you do not need current chairs to do so. Working with the current chairs to fashion a charter makes a difference because the area directors have experience with us, and they know we know how to fashion a charter, and if this is a "re-charter" that might involve retaining the existing chairs. Any proposed WG could be called something other "syslog WG". It could be created in the Security area or the OPS area (and would need to be presented to the appropriate area directors). The current chairs may or may not continue as chairs for (or even be involved in) a rechartered or newly chartered WG. > If that happens, for some time, you will NOT > be able to monitor/manage syslog from your management > console using the Internet Standard management > protocols. As a MIB Doctor and OPSDIR member: If your management console currently supports management of syslog, then its current functionality will not be affected by not having this in the proposed charter. If your management console currently uses the Internet Standard management protocols (SNMPv3) to manage syslog, the current functionality will not be affected. If your current management console uses data from vendor-proprietary MIB modules to manage syslog, and the device you are managing supports the new IETF syslog, and the vendor-proprietary MIB modules do not support the IETF syslog, or the vendor-proprietary MIB modules are changed to support IETF syslog and your console is not changed to match, then your management console may not do a good job of managing that IETF-compliant syslog implementation. If your management console uses proprietary MIB modules from different vendors to manage the new IETF syslog, then your management console may need to present (and operators to understand) multiple different ways to manage IETF syslog, and operators and applications may have some difficulty correlating management information about IETF syslog across vendors. If the devices your management console manages do not support an industry-standard MIB module for managing IETF syslog, then your management application(s) may not be able to take advantage of some features of the IETF syslog solution (and newly emerging extensions to the IETF syslog solution). Having a standards-track MIB module would help enable operators and management applications to manage IETF syslog in a more standardized manner. > So, keep the comments coming. Yes. Please do. > A simple explanation of the current proposed > Syslog-MIB is given below. It explains the design > principles and more importantly the kind of things > that can be done by the Syslog-MIB. > If you want to see the actual draft syslog-MIB > proposal, please try > http://tools.ietf.org/html/draft-ietf-syslog-device-mib-17 As co-chair: Tom Petch, Juergen Schoenwaelder, and Bob Natale (and possibly others) questioned whether the design of the MIB module in this WG proposal represented WG consensus. Chris and I reached the conclusion that there was a lack of consensus on how the MIB module in the WG MIB draft should be designed. If there is no consensus, then it will be impossible for this MIB module to represent such a consensus. As co-chairs, in consultation with the area director, we decided that there was insufficient commitment of resources to reach consensus and continue work on the current MIB draft under the existing charter. As contributors: Chris and I want to see clear statements of interest from a variety of contributors for developing a standards-track MIB module, plus commitments to do the work, including commitment to reach a consensus on the design. We welcome comments about whether a MIB module should be part of a new charter. dbh > Thanks and cheers > > Glenn > > ----------------------- Simple SyslogMIB -------------------- > Design > ======= > The basic design principle has been to keep the MIB simple. > It has gone through several iterations, each one making it > simpler than the earlier version :-) > At present the MIB basically allows the NMS (Network Management > System) to manage the syslog entity (sender, receiver, relay) by > looking at its > (a) status ( up/down/suspended/unknown) > (b) configuration (Address, protocol, port number etc.) > (c) macro statistics > total number of messages (sent, received, relayed) > total number of exceptions > ( drops, discards, malforms) > The asynchronous notifications will alert the NMS about changes > in the syslog entity's status. > That in a nutshell is what one will want to or need to do > for basic syslog monitoring/management. > > The MIB can provide information on multiple syslog entities. > [Scenario: two syslogd's are running on a syslog server - one > for experiments one for regular operations.] > > Examples: > ========= > 1. We may want to get a table like the following on our NMS > console: > > Syslog Status and Statistics Summary > ==================================== > > +-----+-----+--------------+------+-----+-----+---------+ > |Index|Type | Description |Status| Messages | > | |rsR* | | |Sent | Recd| Dropped | > +-----+-----+--------------+------+-----+-----+---------+ > | 1 |r-- | SecuritySys | Up | - | 120| - | > | 2 |r-- | Operations | Up | - | 1234| - | > | 3 |r-- | Experiment-1 | Up | - | 9890| - | > | 4 |-s- | SenderExpt-1 | Up | 99| - | 0 | > | 4 |rsR | Experiment-2 | Down | 1200| 2345| 0 | > +-----+-----+--------------+------+-----+-----+---------+ > * r: Receiver , s: Sender, R: Relay > > Note that this is a sample. Several other columns are possible. > In a similar manner the address and port of the syslog receiver, > the number of malformed messages received etc. can be obtained. > > 2. Facility wise statistics can be generated as follows. > > Facility-wise Syslog Statistics Summary > ======================================= > +-----+--------+-----+--------------+------+-----+-----+---------+ > |Index|Facility|Type | Description |Status| Messages | > | | |rsR* | | |Sent | Recd| malformd| > +-----+--------+-----+--------------+------+-----+-----+---------+ > | 1 | 51 |r-- | SecuritySys | Up | - | 123| - | > | 1 | 52 |r-- | SecuritySys | Up | - | 45| 45 | > | 1 | 53 |r-- | SecuritySys | Up | - | 6| - | > | 2 | 51 |r-- | Operations | Up | - | 789| - | > | 2 | 52 |r-- | Operations | Up | - | 10| 10 | > +-----+--------+-----+--------------+------+-----+-----+---------+ > > * r: Receiver , s: Sender, R: relay > > > 3. In a more advanced scenario, > i. a syslog entity can be started, from the NMS console, > [with a specific address and port, if it is a receiver] or, > ii.an existing syslog entity can be stopped or suspended. > [I will not try to explain how that can be done.] > > I think that is as simple as it can be. Let me know if > a. it can be made simpler or, > b. it is too simple and more detailed information/functions > are necessary. > > _______________________________________________ > Syslog mailing list > Syslog@ietf.org > https://www.ietf.org/mailman/listinfo/syslog > From j.schoenwaelder@jacobs-university.de Sat Jul 25 23:50:43 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C5C4E3A67B8 for ; Sat, 25 Jul 2009 23:50:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.766 X-Spam-Level: X-Spam-Status: No, score=-1.766 tagged_above=-999 required=5 tests=[AWL=0.483, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A7mJY3AK5-Ow for ; Sat, 25 Jul 2009 23:50:43 -0700 (PDT) Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id DCF703A6A96 for ; Sat, 25 Jul 2009 23:50:42 -0700 (PDT) Received: from localhost (demetrius2.jacobs-university.de [212.201.44.47]) by hermes.jacobs-university.de (Postfix) with ESMTP id 815F5C002E; Sun, 26 Jul 2009 08:50:43 +0200 (CEST) X-Virus-Scanned: amavisd-new at jacobs-university.de Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius2.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id kXrfO5NXUpAg; Sun, 26 Jul 2009 08:50:42 +0200 (CEST) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 490B4C002C; Sun, 26 Jul 2009 08:50:42 +0200 (CEST) Received: by elstar.local (Postfix, from userid 501) id C0AD0B6C423; Sun, 26 Jul 2009 08:50:41 +0200 (CEST) Date: Sun, 26 Jul 2009 08:50:41 +0200 From: Juergen Schoenwaelder To: "Chris Lonvick (clonvick)" Message-ID: <20090726065041.GA9371@elstar.local> Mail-Followup-To: "Chris Lonvick (clonvick)" , "Glenn M. Keeni" , "syslog@ietf.org" References: <1BA601B02314084980FE9D0630FE9793053F8E09@xmb-sjc-227.amer.cisco.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1BA601B02314084980FE9D0630FE9793053F8E09@xmb-sjc-227.amer.cisco.com> User-Agent: Mutt/1.5.19 (2009-01-05) Cc: "syslog@ietf.org" Subject: Re: [Syslog] Proposed charter X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: Juergen Schoenwaelder List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 26 Jul 2009 06:50:43 -0000 On Sun, Jul 26, 2009 at 01:06:15AM +0200, Chris Lonvick (clonvick) wrote: > We need to hear from others. IIRC, the concepts were getting a bit > difficult to follow and not everyone was nodding their heads > together on this. > > All: please respond with your comments on this. The default is to > exclude items from the charter unless we feel that there is a strong > commitment to advance a document. My problem with this document has been that was overly ambitious and at the same time too simplistic. For example, the goal seems to be to model sender, receiver, and relays in the same way (the ambitious part - and earlier versions also include much more configuration objects) which at the same time a syslog server is restricted to exactly one transport protocol and one binding address. I would be OK with this MIB work if the MIB module can be reduced to essentially a monitoring MIB (no read-create control table). I also do not think the insights the MIB currently tries to provide about relaying is needed. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 From dromasca@avaya.com Sun Jul 26 01:42:55 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 950613A6858 for ; Sun, 26 Jul 2009 01:42:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.255 X-Spam-Level: X-Spam-Status: No, score=-2.255 tagged_above=-999 required=5 tests=[AWL=0.344, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ALUa2H-Face5 for ; Sun, 26 Jul 2009 01:42:50 -0700 (PDT) Received: from de307622-de-outbound.net.avaya.com (de307622-de-outbound.net.avaya.com [198.152.71.100]) by core3.amsl.com (Postfix) with ESMTP id 7A36D3A67B6 for ; Sun, 26 Jul 2009 01:42:49 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.43,271,1246852800"; d="scan'208";a="152222516" Received: from unknown (HELO co300216-co-erhwest.avaya.com) ([198.152.7.5]) by de307622-de-outbound.net.avaya.com with ESMTP; 26 Jul 2009 04:42:48 -0400 Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.12]) by co300216-co-erhwest-out.avaya.com with ESMTP; 26 Jul 2009 04:42:47 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Sun, 26 Jul 2009 10:42:34 +0200 Message-ID: In-Reply-To: <003e01ca0dba$7c6ae9a0$7958404e@china.huawei.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Syslog] Proposed charter thread-index: AcoNjE4U/uIDEsBWR+Cs/5X4hqPxBQAHFq+QAAh0HIA= References: <1BA601B02314084980FE9D0630FE9793053F8E09@xmb-sjc-227.amer.cisco.com><4A6BAA59.9090205@cysols.com> <003e01ca0dba$7c6ae9a0$7958404e@china.huawei.com> From: "Romascanu, Dan (Dan)" To: "David Harrington" , "Glenn M. Keeni" , "syslog" Subject: Re: [Syslog] Proposed charter X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 26 Jul 2009 08:42:56 -0000 =20 > -----Original Message----- > From: syslog-bounces@ietf.org=20 > [mailto:syslog-bounces@ietf.org] On Behalf Of David Harrington >=20 > As co-chair: Let me make this clear - anybody can write a=20 > proposed charter for a WG and present it to the area=20 > directors for approval; you do not need current chairs to do=20 > so. Working with the current chairs to fashion a charter=20 > makes a difference because the area directors have experience=20 > with us, and they know we know how to fashion a charter, and=20 > if this is a "re-charter" that might involve retaining the=20 > existing chairs. Any proposed WG could be called something=20 > other "syslog WG". It could be created in the Security area=20 > or the OPS area (and would need to be presented to the=20 > appropriate area directors). The current chairs may or may=20 > not continue as chairs for (or even be involved in) a=20 > rechartered or newly chartered WG. >=20 Re-chartering an existing WG and forming a new WG are two different cases. For re-chartering at least in the OPS area we prefer that an existing working group debates and reaches some kind of consensus about a proposed new charter text and then submits it to the AD's. I do not know if the same practice is followed by SEC or other areas but I suspect it might not be that different. New Working Groups follow a different process, which may start by a bar-BOF, or BOF, new or old players proposing a charter, implies mandatory IETF review and other.=20 Dan From glenn@cysols.com Sun Jul 26 08:02:54 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 56C5F3A6A04 for ; Sun, 26 Jul 2009 08:02:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.285 X-Spam-Level: X-Spam-Status: No, score=0.285 tagged_above=-999 required=5 tests=[AWL=-0.225, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, J_CHICKENPOX_22=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9PMcybdqCtjU for ; Sun, 26 Jul 2009 08:02:53 -0700 (PDT) Received: from niseko.cysol.co.jp (niseko.cysol.co.jp [210.233.3.236]) by core3.amsl.com (Postfix) with ESMTP id 92C4C3A695E for ; Sun, 26 Jul 2009 08:02:52 -0700 (PDT) Received: from [127.0.0.1] (cysvpn16.priv.cysol.co.jp [192.168.0.103]) (authenticated bits=0) by aso.priv.cysol.co.jp (8.14.3/8.14.3) with ESMTP id n6QF2YH6098656 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Mon, 27 Jul 2009 00:02:38 +0900 (JST) (envelope-from glenn@cysols.com) Message-ID: <4A6C7008.7080105@cysols.com> Date: Mon, 27 Jul 2009 00:02:32 +0900 From: "Glenn M. Keeni" User-Agent: Thunderbird 2.0.0.22 (Windows/20090605) MIME-Version: 1.0 To: "'syslog'" References: <1BA601B02314084980FE9D0630FE9793053F8E09@xmb-sjc-227.amer.cisco.com> <4A6BAA59.9090205@cysols.com> <003e01ca0dba$7c6ae9a0$7958404e@china.huawei.com> In-Reply-To: <003e01ca0dba$7c6ae9a0$7958404e@china.huawei.com> Content-Type: text/plain; charset=ISO-2022-JP Content-Transfer-Encoding: 7bit Subject: Re: [Syslog] Proposed charter X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 26 Jul 2009 15:02:54 -0000 David, Thanks for the perspective on the comments. The issue still remains open: a. Does the WG want syslog to be manageable using Internet Standard management protocols? b. If the answer is "yes", b-1 Then we retain the Syslog-MIB work item on the WG charter. b-2 Examine the existing work e.g. the draft syslog-MIB proposal, available at http://tools.ietf.org/html/draft-ietf-syslog-device-mib-17, kick off discussion on this work. c. If the answer is "no", then this line of discussion is closed we drop the Syslog-MIB work item from the charter. I would think that it is fair to take discussions on adequacies and inadequacies of the existing Syslog-MIB work as a "yes" response. Glenn David Harrington wrote: > Hi, > > I am in the unenviable position of having to respond to this message > from the standpoint of being syslog WG co-chair, a MIB Doctor and > OPSDIR member, and a contributor. The things I need to respond are > spread throughout Glenn's email. I will try to accurately state my > perspective for each set of comments. > > comments inline. > > David Harrington > dbharrington@comcast.net > ietfdbh@comcast.net > dharrington@huawei.com > >> -----Original Message----- >> From: syslog-bounces@ietf.org >> [mailto:syslog-bounces@ietf.org] On Behalf Of Glenn M. Keeni >> Sent: Sunday, July 26, 2009 2:59 AM >> To: syslog >> Subject: Re: [Syslog] Proposed charter >> >> Hi, >> The Syslog protocols have been defined and are in >> "proposed standard" stage. Now the working group needs >> to decide whether it needs Syslog to be manageable. > > As co-chair, I think this is slightly wrong. The IETF needs to make > this decision, and the IETF is represented by the syslog WG (which > focuses on developing proposed solutions within the scope of its > charter), the area directors (who focus on area-wide consensus, and > possibly multi-area consensus), the IESG (who focus on IETF-wide > consensus), and the WG chairs (who focus on balancing the various > inputs and trying to chart a way forward). The WG is not the only > entity that needs to make this decision. > >> To make it manageable we need to define a Syslog-MIB >> (Management Information Base) module. > > As a MIB Doctor and OPSDIR member and co-chair, I know this statement > is wrong. > > syslog has been a defacto standard for many years, and already has > solutions to make it manageable. Syslog-conf is widely used for > configuration, and there are many proprietary MIB modules for > monitoring syslog, and many applications that know how to process > syslog messages to sort them, display them to operators, and correlate > them with other management information such as SNMP traps. > > There are many ways to make a protocol manageable; writing a > standards-track MIB module is one option. This WG, and the whole IETF, > needs to decide whether syslog should have a standards-track solution > for managing syslog (or for managing any other IETF standards-track > protocol). > > When the syslog WG was started, it was common practice in the IETF to > address manageability by requiring WGs to "write a MIB" to manage and > monitor their proposed protocol standards using the Internet-Standard > Management Framework (effectively SNMP + MIBs). The philosophy behind > that practice has been changing. After significant discussion with the > operator and vendor communities, the IETF has been moving toward a > philosophy of multi-protocol/multi-solution management, and away from > the "write a MIB" approach. The discussion is ongoing, and those > interested can follow the discussion mostly in the OPSAWG WG and on > the IETF Discuss mailng list. > > This WG should make a decision about whether they want to propose an > IETF standards-track solution for managing syslog. That solution might > be a standards-track MIB module, or a non-standards-track MIB module. > It might be a proposed standard for syslog-conf, or a best current > practices document for using proprietary solutions, or an > Informational document that describes how syslog is currently being > managed and monitored, and so on. > > As co-chairs, Chris and I have not seen consensus on what the WG > thinks is the right direction to follow. > >> This has been >> an ongoing work for several years which was shelved >> at some stage to let the WG focus on the core protocol >> documents. > > As co-chair: It is true that we shelved the proposed MIB module. Part > of the reason was to wait until the core documents stabilized, so we > had consistent terminology and clearly defined concepts to manage. The > other reason for shelving the proposal is the co-chairs did not feel > there was WG consensus on how to do management of syslog through a > standards-track MIB module. > >> The working group is being rechartered > > As co-chair: The working group is considering rechartering. > > As contributors, Chris and I need to be convinced there is consensus > to do so, and that resources are willing to commit to doing the work, > and if so the chairs will work with the syslog and IETF communities to > establish a new charter proposal with clear objectives and milestones, > and then ask the area directors (who may consult with the IESG and > IAB) to approve the proposed charter. > >> and we >> are looking for comments/feedback on the Syslog-MIB >> proposal. > > As co-chair and contributor: We are looking for comments/feedback on > any proposed work direction for a re-chartered syslog WG. We are > looking for commitment from people to do the work. We are looking for > an expression of interest from multiple independent resources to > produce a vendor-neutral solution. > >> In the absence of comments the chairs have >> threatened to drop the Syslog-MIB proposal from the >> charter. > > As contributor: In the absence of comments and commitments, Chris and > I threaten to drop **any** proposal from the charter proposal that we > are working to develop and present to the area directors. Chris and I > are using our chair experience to help fashion a viable charter. > > As co-chair: Let me make this clear - anybody can write a proposed > charter for a WG and present it to the area directors for approval; > you do not need current chairs to do so. Working with the current > chairs to fashion a charter makes a difference because the area > directors have experience with us, and they know we know how to > fashion a charter, and if this is a "re-charter" that might involve > retaining the existing chairs. Any proposed WG could be called > something other "syslog WG". It could be created in the Security area > or the OPS area (and would need to be presented to the appropriate > area directors). The current chairs may or may not continue as chairs > for (or even be involved in) a rechartered or newly chartered WG. > >> If that happens, for some time, you will NOT >> be able to monitor/manage syslog from your management >> console using the Internet Standard management >> protocols. > > As a MIB Doctor and OPSDIR member: > > If your management console currently supports management of syslog, > then its current functionality will not be affected by not having this > in the proposed charter. If your management console currently uses the > Internet Standard management protocols (SNMPv3) to manage syslog, the > current functionality will not be affected. > > If your current management console uses data from vendor-proprietary > MIB modules to manage syslog, and the device you are managing supports > the new IETF syslog, and the vendor-proprietary MIB modules do not > support the IETF syslog, or the vendor-proprietary MIB modules are > changed to support IETF syslog and your console is not changed to > match, then your management console may not do a good job of managing > that IETF-compliant syslog implementation. > > If your management console uses proprietary MIB modules from different > vendors to manage the new IETF syslog, then your management console > may need to present (and operators to understand) multiple different > ways to manage IETF syslog, and operators and applications may have > some difficulty correlating management information about IETF syslog > across vendors. > > If the devices your management console manages do not support an > industry-standard MIB module for managing IETF syslog, then your > management application(s) may not be able to take advantage of some > features of the IETF syslog solution (and newly emerging extensions to > the IETF syslog solution). Having a standards-track MIB module would > help enable operators and management applications to manage IETF > syslog in a more standardized manner. > >> So, keep the comments coming. > > Yes. Please do. > >> A simple explanation of the current proposed >> Syslog-MIB is given below. It explains the design >> principles and more importantly the kind of things >> that can be done by the Syslog-MIB. >> If you want to see the actual draft syslog-MIB >> proposal, please try >> http://tools.ietf.org/html/draft-ietf-syslog-device-mib-17 > > As co-chair: > Tom Petch, Juergen Schoenwaelder, and Bob Natale (and possibly others) > questioned whether the design of the MIB module in this WG proposal > represented WG consensus. Chris and I reached the conclusion that > there was a lack of consensus on how the MIB module in the WG MIB > draft should be designed. If there is no consensus, then it will be > impossible for this MIB module to represent such a consensus. > > As co-chairs, in consultation with the area director, we decided that > there was insufficient commitment of resources to reach consensus and > continue work on the current MIB draft under the existing charter. > > As contributors: Chris and I want to see clear statements of interest > from a variety of contributors for developing a standards-track MIB > module, plus commitments to do the work, including commitment to reach > a consensus on the design. We welcome comments about whether a MIB > module should be part of a new charter. > > dbh > >> Thanks and cheers >> >> Glenn >> >> ----------------------- Simple SyslogMIB -------------------- >> Design >> ======= >> The basic design principle has been to keep the MIB simple. >> It has gone through several iterations, each one making it >> simpler than the earlier version :-) >> At present the MIB basically allows the NMS (Network Management >> System) to manage the syslog entity (sender, receiver, relay) by >> looking at its >> (a) status ( up/down/suspended/unknown) >> (b) configuration (Address, protocol, port number etc.) >> (c) macro statistics >> total number of messages (sent, received, relayed) >> total number of exceptions >> ( drops, discards, malforms) >> The asynchronous notifications will alert the NMS about changes >> in the syslog entity's status. >> That in a nutshell is what one will want to or need to do >> for basic syslog monitoring/management. >> >> The MIB can provide information on multiple syslog entities. >> [Scenario: two syslogd's are running on a syslog server - one >> for experiments one for regular operations.] >> >> Examples: >> ========= >> 1. We may want to get a table like the following on our NMS >> console: >> >> Syslog Status and Statistics Summary >> ==================================== >> >> +-----+-----+--------------+------+-----+-----+---------+ >> |Index|Type | Description |Status| Messages | >> | |rsR* | | |Sent | Recd| Dropped | >> +-----+-----+--------------+------+-----+-----+---------+ >> | 1 |r-- | SecuritySys | Up | - | 120| - | >> | 2 |r-- | Operations | Up | - | 1234| - | >> | 3 |r-- | Experiment-1 | Up | - | 9890| - | >> | 4 |-s- | SenderExpt-1 | Up | 99| - | 0 | >> | 4 |rsR | Experiment-2 | Down | 1200| 2345| 0 | >> +-----+-----+--------------+------+-----+-----+---------+ >> * r: Receiver , s: Sender, R: Relay >> >> Note that this is a sample. Several other columns are possible. >> In a similar manner the address and port of the syslog receiver, >> the number of malformed messages received etc. can be obtained. >> >> 2. Facility wise statistics can be generated as follows. >> >> Facility-wise Syslog Statistics Summary >> ======================================= >> +-----+--------+-----+--------------+------+-----+-----+---------+ >> |Index|Facility|Type | Description |Status| Messages | >> | | |rsR* | | |Sent | Recd| malformd| >> +-----+--------+-----+--------------+------+-----+-----+---------+ >> | 1 | 51 |r-- | SecuritySys | Up | - | 123| - | >> | 1 | 52 |r-- | SecuritySys | Up | - | 45| 45 | >> | 1 | 53 |r-- | SecuritySys | Up | - | 6| - | >> | 2 | 51 |r-- | Operations | Up | - | 789| - | >> | 2 | 52 |r-- | Operations | Up | - | 10| 10 | >> +-----+--------+-----+--------------+------+-----+-----+---------+ >> >> * r: Receiver , s: Sender, R: relay >> >> >> 3. In a more advanced scenario, >> i. a syslog entity can be started, from the NMS console, >> [with a specific address and port, if it is a receiver] or, >> ii.an existing syslog entity can be stopped or suspended. >> [I will not try to explain how that can be done.] >> >> I think that is as simple as it can be. Let me know if >> a. it can be made simpler or, >> b. it is too simple and more detailed information/functions >> are necessary. >> >> _______________________________________________ >> Syslog mailing list >> Syslog@ietf.org >> https://www.ietf.org/mailman/listinfo/syslog >> > From clonvick@cisco.com Mon Jul 27 00:27:26 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2516728C13F for ; Mon, 27 Jul 2009 00:27:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GjfJieXVQcqo for ; Mon, 27 Jul 2009 00:27:25 -0700 (PDT) Received: from sj-iport-1.cisco.com (sj-iport-1.cisco.com [171.71.176.70]) by core3.amsl.com (Postfix) with ESMTP id 38D7F28C13D for ; Mon, 27 Jul 2009 00:27:25 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEACX0bEqrR7MV/2dsb2JhbAC4VogojVYFgieBZg X-IronPort-AV: E=Sophos;i="4.43,275,1246838400"; d="scan'208";a="219403895" Received: from sj-dkim-1.cisco.com ([171.71.179.21]) by sj-iport-1.cisco.com with ESMTP; 27 Jul 2009 07:27:26 +0000 Received: from sj-core-5.cisco.com (sj-core-5.cisco.com [171.71.177.238]) by sj-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id n6R7RQ3j021515; Mon, 27 Jul 2009 00:27:26 -0700 Received: from sjc-cde-011.cisco.com (sjc-cde-011.cisco.com [171.69.16.68]) by sj-core-5.cisco.com (8.13.8/8.14.3) with ESMTP id n6R7RQ4O018430; Mon, 27 Jul 2009 07:27:26 GMT Date: Mon, 27 Jul 2009 00:27:26 -0700 (PDT) From: Chris Lonvick To: "Romascanu, Dan (Dan)" In-Reply-To: Message-ID: References: <1BA601B02314084980FE9D0630FE9793053F8E09@xmb-sjc-227.amer.cisco.com><4A6BAA59.9090205@cysols.com> <003e01ca0dba$7c6ae9a0$7958404e@china.huawei.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=2585; t=1248679646; x=1249543646; c=relaxed/simple; s=sjdkim1004; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=clonvick@cisco.com; z=From:=20Chris=20Lonvick=20 |Subject:=20Re=3A=20[Syslog]=20Proposed=20charter |Sender:=20; bh=igYAh2cKykjf+895IIghmYq6ExIyki9WSknJjHPIwJ4=; b=HH3PlHpR7Zx4h0bdSNz7KZMhTrGkz6uR0M8OfViPbCwj0pijn8NL4QbZzH 6YSGgjhUvmTQSbeZ/MugPZHs88XEURgnNx4px06tt+mUMt05pJjE1LlAz0oi Hkh7VdmK5lLRMjKDih8xNEcoaKBqkoQSryot64SDYiAk5x+f1C0dQ=; Authentication-Results: sj-dkim-1; header.From=clonvick@cisco.com; dkim=pass ( sig from cisco.com/sjdkim1004 verified; ); Cc: syslog Subject: Re: [Syslog] Proposed charter X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jul 2009 07:27:26 -0000 Hi, David and I are trying to be pragmatic about the rechartering effort. The slides contain a long list of things that _could_ be done. However, we're not seeing people jump up and state that they are committed to doing any of them, with the exception of the dtls document where we have a starting point, an author, and reviewers. We don't want to present a proposed charter which might look good, but won't have any commitment behind it. If the dtls work is the only thing that's going to go forward, then it makes sense to keep the WG in the security area. We are hoping that OPS people will drop into the room and take up the challenge on some of the items. :-) If not, then we'll drop back to divining consensus and committment from the mailing list which really hasn't had much activity about rechartering. Regards, Chris On Sun, 26 Jul 2009, Romascanu, Dan (Dan) wrote: > > > >> -----Original Message----- >> From: syslog-bounces@ietf.org >> [mailto:syslog-bounces@ietf.org] On Behalf Of David Harrington >> >> As co-chair: Let me make this clear - anybody can write a >> proposed charter for a WG and present it to the area >> directors for approval; you do not need current chairs to do >> so. Working with the current chairs to fashion a charter >> makes a difference because the area directors have experience >> with us, and they know we know how to fashion a charter, and >> if this is a "re-charter" that might involve retaining the >> existing chairs. Any proposed WG could be called something >> other "syslog WG". It could be created in the Security area >> or the OPS area (and would need to be presented to the >> appropriate area directors). The current chairs may or may >> not continue as chairs for (or even be involved in) a >> rechartered or newly chartered WG. >> > > Re-chartering an existing WG and forming a new WG are two different > cases. For re-chartering at least in the OPS area we prefer that an > existing working group debates and reaches some kind of consensus about > a proposed new charter text and then submits it to the AD's. I do not > know if the same practice is followed by SEC or other areas but I > suspect it might not be that different. New Working Groups follow a > different process, which may start by a bar-BOF, or BOF, new or old > players proposing a charter, implies mandatory IETF review and other. > > Dan > _______________________________________________ > Syslog mailing list > Syslog@ietf.org > https://www.ietf.org/mailman/listinfo/syslog > From rgerhards@hq.adiscon.com Mon Jul 27 00:30:49 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5180A28C151 for ; Mon, 27 Jul 2009 00:30:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XhiT8ymHwwMV for ; Mon, 27 Jul 2009 00:30:48 -0700 (PDT) Received: from mailin.adiscon.com (hetzner.adiscon.com [85.10.198.18]) by core3.amsl.com (Postfix) with ESMTP id 2073228C150 for ; Mon, 27 Jul 2009 00:30:48 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mailin.adiscon.com (Postfix) with ESMTP id 26048241C006; Mon, 27 Jul 2009 09:26:27 +0200 (CEST) Received: from mailin.adiscon.com ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 44yR5YcrQ8oM; Mon, 27 Jul 2009 09:26:27 +0200 (CEST) Received: from GRFEXC.intern.adiscon.com (p54AC5898.dip.t-dialin.net [84.172.88.152]) by mailin.adiscon.com (Postfix) with ESMTP id 32048241C002; Mon, 27 Jul 2009 09:26:26 +0200 (CEST) MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Mon, 27 Jul 2009 09:30:45 +0200 Content-class: urn:content-classes:message Message-ID: <9B6E2A8877C38245BFB15CC491A11DA706FC26@GRFEXC.intern.adiscon.com> X-MimeOLE: Produced By Microsoft Exchange V6.5 X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Syslog] Proposed charter Thread-Index: AcoOi8VcaO/oePMwRoKYR3Z1mMK8ogAADF1A References: <1BA601B02314084980FE9D0630FE9793053F8E09@xmb-sjc-227.amer.cisco.com><4A6BAA59.9090205@cysols.com><003e01ca0dba$7c6ae9a0$7958404e@china.huawei.com> From: "Rainer Gerhards" To: "Chris Lonvick" , "Romascanu, Dan \(Dan\)" Cc: syslog Subject: Re: [Syslog] Proposed charter X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jul 2009 07:30:49 -0000 Chris, jumping in very late and without having read through the discussion. I = just want to say that I have been totally tied up with a project for the past = two and a half month and I am off to summer vacation soon. I'll try to read through the doc and provide some feedback from my POV within the next = two days, in the hopes that this may be useful. Rainer > -----Original Message----- > From: syslog-bounces@ietf.org [mailto:syslog-bounces@ietf.org] On = Behalf Of > Chris Lonvick > Sent: Monday, July 27, 2009 9:27 AM > To: Romascanu, Dan (Dan) > Cc: syslog > Subject: Re: [Syslog] Proposed charter >=20 > Hi, >=20 > David and I are trying to be pragmatic about the rechartering effort. > The slides contain a long list of things that _could_ be done. = However, > we're not seeing people jump up and state that they are committed to = doing > any of them, with the exception of the dtls document where we have a > starting point, an author, and reviewers. We don't want to present a > proposed charter which might look good, but won't have any commitment > behind it. >=20 > If the dtls work is the only thing that's going to go forward, then it > makes sense to keep the WG in the security area. >=20 > We are hoping that OPS people will drop into the room and take up the > challenge on some of the items. :-) If not, then we'll drop back to > divining consensus and committment from the mailing list which really > hasn't had much activity about rechartering. >=20 > Regards, > Chris >=20 > On Sun, 26 Jul 2009, Romascanu, Dan (Dan) wrote: >=20 > > > > > > > >> -----Original Message----- > >> From: syslog-bounces@ietf.org > >> [mailto:syslog-bounces@ietf.org] On Behalf Of David Harrington > >> > >> As co-chair: Let me make this clear - anybody can write a > >> proposed charter for a WG and present it to the area > >> directors for approval; you do not need current chairs to do > >> so. Working with the current chairs to fashion a charter > >> makes a difference because the area directors have experience > >> with us, and they know we know how to fashion a charter, and > >> if this is a "re-charter" that might involve retaining the > >> existing chairs. Any proposed WG could be called something > >> other "syslog WG". It could be created in the Security area > >> or the OPS area (and would need to be presented to the > >> appropriate area directors). The current chairs may or may > >> not continue as chairs for (or even be involved in) a > >> rechartered or newly chartered WG. > >> > > > > Re-chartering an existing WG and forming a new WG are two different > > cases. For re-chartering at least in the OPS area we prefer that an > > existing working group debates and reaches some kind of consensus = about > > a proposed new charter text and then submits it to the AD's. I do = not > > know if the same practice is followed by SEC or other areas but I > > suspect it might not be that different. New Working Groups follow a > > different process, which may start by a bar-BOF, or BOF, new or old > > players proposing a charter, implies mandatory IETF review and = other. > > > > Dan > > _______________________________________________ > > Syslog mailing list > > Syslog@ietf.org > > https://www.ietf.org/mailman/listinfo/syslog > > > _______________________________________________ > Syslog mailing list > Syslog@ietf.org > https://www.ietf.org/mailman/listinfo/syslog From glenn@cysols.com Mon Jul 27 03:24:27 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 29B583A6857 for ; Mon, 27 Jul 2009 03:24:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.03 X-Spam-Level: X-Spam-Status: No, score=0.03 tagged_above=-999 required=5 tests=[AWL=0.120, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p6nzLO3PCM9C for ; Mon, 27 Jul 2009 03:24:26 -0700 (PDT) Received: from niseko.cysol.co.jp (niseko.cysol.co.jp [210.233.3.236]) by core3.amsl.com (Postfix) with ESMTP id C5C3A3A67DF for ; Mon, 27 Jul 2009 03:24:23 -0700 (PDT) Received: from [127.0.0.1] (Bert.win2004.cysol.co.jp [192.168.0.254]) (authenticated bits=0) by aso.priv.cysol.co.jp (8.14.3/8.14.3) with ESMTP id n6RAO80c097178 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 27 Jul 2009 19:24:11 +0900 (JST) (envelope-from glenn@cysols.com) Message-ID: <4A6D8047.6090504@cysols.com> Date: Mon, 27 Jul 2009 19:24:07 +0900 From: "Glenn M. Keeni" User-Agent: Thunderbird 2.0.0.22 (Windows/20090605) MIME-Version: 1.0 To: David Harrington References: <1BA601B02314084980FE9D0630FE9793053F8E09@xmb-sjc-227.amer.cisco.com> <4A6BAA59.9090205@cysols.com> <003e01ca0dba$7c6ae9a0$7958404e@china.huawei.com> In-Reply-To: <003e01ca0dba$7c6ae9a0$7958404e@china.huawei.com> Content-Type: text/plain; charset=ISO-2022-JP Content-Transfer-Encoding: 7bit Cc: 'syslog' Subject: Re: [Syslog] Proposed charter X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jul 2009 10:24:27 -0000 Hi, David Harrington wrote: > Hi, [Stuff deleted] >> To make it manageable we need to define a Syslog-MIB >> (Management Information Base) module. > > As a MIB Doctor and OPSDIR member and co-chair, I know this statement > is wrong. > Problem with definitions. I should have made it clearer. My definition of "manageable" is managing the IETF Standard Syslog protocol using IETF Standard management protocols and IETF standard MIBs. In that context your statement is wrong. > Having a standards-track MIB module would > help enable operators and management applications to manage IETF > syslog in a more standardized manner. Yes. That last sentence is well said. Thanks. > >> So, keep the comments coming. > > Yes. Please do. > [Stuff deleted] Glenn From glenn@cysols.com Mon Jul 27 03:32:19 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4B2693A6C62 for ; Mon, 27 Jul 2009 03:32:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.01 X-Spam-Level: X-Spam-Status: No, score=0.01 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PmgnutUAki+z for ; Mon, 27 Jul 2009 03:32:18 -0700 (PDT) Received: from niseko.cysol.co.jp (niseko.cysol.co.jp [210.233.3.236]) by core3.amsl.com (Postfix) with ESMTP id 653593A6BB1 for ; Mon, 27 Jul 2009 03:32:18 -0700 (PDT) Received: from [127.0.0.1] (Bert.win2004.cysol.co.jp [192.168.0.254]) (authenticated bits=0) by aso.priv.cysol.co.jp (8.14.3/8.14.3) with ESMTP id n6RAWFgD097906 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 27 Jul 2009 19:32:15 +0900 (JST) (envelope-from glenn@cysols.com) Message-ID: <4A6D822E.7090102@cysols.com> Date: Mon, 27 Jul 2009 19:32:14 +0900 From: "Glenn M. Keeni" User-Agent: Thunderbird 2.0.0.22 (Windows/20090605) MIME-Version: 1.0 To: "Chris Lonvick (clonvick)" , "Glenn M. Keeni" , "syslog@ietf.org" References: <1BA601B02314084980FE9D0630FE9793053F8E09@xmb-sjc-227.amer.cisco.com> <20090726065041.GA9371@elstar.local> In-Reply-To: <20090726065041.GA9371@elstar.local> Content-Type: text/plain; charset=ISO-2022-JP Content-Transfer-Encoding: 7bit Subject: Re: [Syslog] Proposed charter X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jul 2009 10:32:19 -0000 Juergen, Thanks. I would be more than happy to reduce the MIB to essentially a monitoring MIB and focusing on essentially sender and receiver functions. That is where we started:-) The point about multiple transports for syslog servers is interesting. Lets discuss, if this remains on the charter. Glenn Juergen Schoenwaelder wrote: > On Sun, Jul 26, 2009 at 01:06:15AM +0200, Chris Lonvick (clonvick) wrote: > >> We need to hear from others. IIRC, the concepts were getting a bit >> difficult to follow and not everyone was nodding their heads >> together on this. >> >> All: please respond with your comments on this. The default is to >> exclude items from the charter unless we feel that there is a strong >> commitment to advance a document. > > My problem with this document has been that was overly ambitious and > at the same time too simplistic. For example, the goal seems to be to > model sender, receiver, and relays in the same way (the ambitious part > - and earlier versions also include much more configuration objects) > which at the same time a syslog server is restricted to exactly one > transport protocol and one binding address. > > I would be OK with this MIB work if the MIB module can be reduced to > essentially a monitoring MIB (no read-create control table). I also do > not think the insights the MIB currently tries to provide about > relaying is needed. From muenz@net.in.tum.de Tue Jul 28 01:41:35 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 760E13A69C8; Tue, 28 Jul 2009 01:41:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.599 X-Spam-Level: X-Spam-Status: No, score=-1.599 tagged_above=-999 required=5 tests=[AWL=0.650, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XKw82O23rL3w; Tue, 28 Jul 2009 01:41:31 -0700 (PDT) Received: from mail-out1.informatik.tu-muenchen.de (mail-out1.informatik.tu-muenchen.de [131.159.0.8]) by core3.amsl.com (Postfix) with ESMTP id CECF93A6DB9; Tue, 28 Jul 2009 01:41:30 -0700 (PDT) Received: from phoenix.net.informatik.tu-muenchen.de (phoenix.net.in.tum.de [131.159.14.1]) by services.net.informatik.tu-muenchen.de (Postix Mailer @ mail) with ESMTP id 3F232480F0; Tue, 28 Jul 2009 10:41:29 +0200 (CEST) Received: from [131.159.20.251] (vpn-1.net.in.tum.de [131.159.20.251]) by phoenix.net.informatik.tu-muenchen.de (Postfix) with ESMTP id DCF0E50BD; Tue, 28 Jul 2009 10:41:28 +0200 (CEST) Message-ID: <4A6EB9BB.9040002@net.in.tum.de> Date: Tue, 28 Jul 2009 10:41:31 +0200 From: Gerhard Muenz User-Agent: Thunderbird 2.0.0.22 (Windows/20090605) MIME-Version: 1.0 To: syslog@ietf.org, "ipfix@ietf.org" Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms070108000207050009070503" X-Virus-Scanned: ClamAV using ClamSMTP Cc: Michael Tuexen , Robin Seggelmann , Daniel Mentz Subject: [Syslog] Missing dead peer detection in DTLS X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jul 2009 08:41:35 -0000 This is a cryptographically signed message in MIME format. --------------ms070108000207050009070503 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hi, This mail goes to the ipfix and syslog mailing lists in order to summarize the common issues regarding DTLS. IPFIX specifies support of DTLS as mandatory for transport over UDP and SCTP in RFC5101. In SYSLOG, it is intended to standardize DTLS for transport over UDP. In IPFIX, we have a first implementation of IPFIX-over-DTLS/UDP, and we will have a first implementation of IPFIX-over-DTLS/SCTP very soon. During this implementation effort, we found that the current specification of DTLS/UDP has a severe flaw when used with unidirectional protocols (like IPFIX): The sender cannot recognize if the receiver has crashed and lost the DTLS state. We discuss this issue in a draft: http://tools.ietf.org/html/draft-mentz-ipfix-dtls-recommendations-00 http://www.ietf.org/proceedings/75/slides/ipfix-6.pdf I've had a look at draft-feng-syslog-transport-dtls-01 and draft-petch-gerhards-syslog-transport-dtls-02. It seems that this problem has not yet been covered, although the problem should be the same for SYSLOG. As a solution, the DTLS Heartbeat Extension has been proposed very recent= ly: http://tools.ietf.org/html/draft-seggelmann-tls-dtls-heartbeat-00 A feature patch for OpenSSL is available: http://sctp.fh-muenster.de/dtls-patches.html#features So, I think that we should support this standardization initiative as it solves our problem. For IPFIX and SYSLOG over DTLS/UDP, we then can specify that the DTLS Heartbeat Extension MUST be implemented. Dan suggested to have a single document solving the DTLS issues regarding unidirectional protocols. I think that such a document is not needed if we have DTLS Heartbeat Extension. Regards, Gerhard --=20 Dipl.-Ing. Gerhard M=FCnz Chair for Network Architectures and Services (I8) Department of Informatics Technische Universit=E4t M=FCnchen Boltzmannstr. 3, 85748 Garching bei M=FCnchen, Germany Phone: +49 89 289-18008 Fax: +49 89 289-18033 E-mail: muenz@net.in.tum.de WWW: http://www.net.in.tum.de/~muenz --------------ms070108000207050009070503 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJ6TCC Az8wggKooAMCAQICAQ0wDQYJKoZIhvcNAQEFBQAwgdExCzAJBgNVBAYTAlpBMRUwEwYDVQQI EwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMRVGhhd3RlIENv bnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNpb24xJDAi BgNVBAMTG1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJARYccGVy c29uYWwtZnJlZW1haWxAdGhhd3RlLmNvbTAeFw0wMzA3MTcwMDAwMDBaFw0xMzA3MTYyMzU5 NTlaMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBM dGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQTCBnzAN BgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxKY8VXNV+065yplaHmjAdQRwnd/p/6Me7L3N9Vvy Gna9fww6YfK/Uc4B1OVQCjDXAmNaLIkVcI7dyfArhVqqP3FWy688Cwfn8R+RNiQqE88r1fOC dz0Dviv+uxg+B79AgAJk16emu59l0cUqVIUPSAR/p7bRPGEEQB5kGXJgt/sCAwEAAaOBlDCB kTASBgNVHRMBAf8ECDAGAQH/AgEAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwudGhh d3RlLmNvbS9UaGF3dGVQZXJzb25hbEZyZWVtYWlsQ0EuY3JsMAsGA1UdDwQEAwIBBjApBgNV HREEIjAgpB4wHDEaMBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0xMzgwDQYJKoZIhvcNAQEFBQAD gYEASIzRUIPqCy7MDaNmrGcPf6+svsIXoUOWlJ1/TCG4+DYfqi2fNi/A9BxQIJNwPP2t4WFi w9k6GX6EsZkbAMUaC4J0niVQlGLH2ydxVyWN3amcOY6MIE9lX5Xa9/eH1sYITq726jTlEBpb NU1341YheILcIRk13iSx0x1G/11fZU8wggNPMIICuKADAgECAhAqxerdN2XVRkUZsuk5IKdP MA0GCSqGSIb3DQEBBQUAMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3Vs dGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNz dWluZyBDQTAeFw0wOTAyMTkxMDI5NDVaFw0xMDAyMTkxMDI5NDVaMIGQMQ4wDAYDVQQEEwVN dWVuejEQMA4GA1UEKhMHR2VyaGFyZDEWMBQGA1UEAxMNR2VyaGFyZCBNdWVuejEwMC4GCSqG SIb3DQEJARYhbXVlbnpAaW5mb3JtYXRpay51bmktdHVlYmluZ2VuLmRlMSIwIAYJKoZIhvcN AQkBFhNtdWVuekBuZXQuaW4udHVtLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxC8p+6KRpyQyKvT9LAxUB2m8azrci+c5oQUYac2A4WsjoqiCqi2k/wgCrCIHrN0USQeH LmcbtSWT5O+1kMai28KGUdZG5xmJ7PLuLejKlYIu2TkR8tI1Q4gyu1Gs45yn9Rf+EGWmqa/s ebjMV3tc/zrpEN2b1ls8U9rM2/h0NcUUU+g170e8DlXNOL7+bsQD+tLH5G3nlV9mZntMQ68t PaaLG4MtupHuS99YGoo0yB4rzuTxiWRKTJgqjboQL0eS9+6dxsrT01g7sOc2QtXbO45PBnsG Ra5CAMpGLrqGT1ISZIpqYrGuMH9Rv7HTR3rLygL81WMDtNCa6W5/PPMlSwIDAQABo1MwUTBB BgNVHREEOjA4gSFtdWVuekBpbmZvcm1hdGlrLnVuaS10dWViaW5nZW4uZGWBE211ZW56QG5l dC5pbi50dW0uZGUwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQUFAAOBgQBOkMsohjpIH4Mr 33zNnhc5PkzAi0RZ6UAOB28nTtfjVZ25UVLWqmLgYEszbloTd07y5PcUZhSuPuwGzEwn4XdX i3VWl6qk5VcPpyP7+b5XEY5CU1A8cqeaXS88qWyshu1dXm2ToqueRPv+E2b3GJHAciNt2Qfc T4SNWymkvUyPSjCCA08wggK4oAMCAQICECrF6t03ZdVGRRmy6Tkgp08wDQYJKoZIhvcNAQEF BQAwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA5 MDIxOTEwMjk0NVoXDTEwMDIxOTEwMjk0NVowgZAxDjAMBgNVBAQTBU11ZW56MRAwDgYDVQQq EwdHZXJoYXJkMRYwFAYDVQQDEw1HZXJoYXJkIE11ZW56MTAwLgYJKoZIhvcNAQkBFiFtdWVu ekBpbmZvcm1hdGlrLnVuaS10dWViaW5nZW4uZGUxIjAgBgkqhkiG9w0BCQEWE211ZW56QG5l dC5pbi50dW0uZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELyn7opGnJDIq 9P0sDFQHabxrOtyL5zmhBRhpzYDhayOiqIKqLaT/CAKsIges3RRJB4cuZxu1JZPk77WQxqLb woZR1kbnGYns8u4t6MqVgi7ZORHy0jVDiDK7UazjnKf1F/4QZaapr+x5uMxXe1z/OukQ3ZvW WzxT2szb+HQ1xRRT6DXvR7wOVc04vv5uxAP60sfkbeeVX2Zme0xDry09posbgy26ke5L31ga ijTIHivO5PGJZEpMmCqNuhAvR5L37p3GytPTWDuw5zZC1ds7jk8GewZFrkIAykYuuoZPUhJk impisa4wf1G/sdNHesvKAvzVYwO00Jrpbn888yVLAgMBAAGjUzBRMEEGA1UdEQQ6MDiBIW11 ZW56QGluZm9ybWF0aWsudW5pLXR1ZWJpbmdlbi5kZYETbXVlbnpAbmV0LmluLnR1bS5kZTAM BgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBQUAA4GBAE6QyyiGOkgfgyvffM2eFzk+TMCLRFnp QA4HbydO1+NVnblRUtaqYuBgSzNuWhN3TvLk9xRmFK4+7AbMTCfhd1eLdVaXqqTlVw+nI/v5 vlcRjkJTUDxyp5pdLzypbKyG7V1ebZOiq55E+/4TZvcYkcByI23ZB9xPhI1bKaS9TI9KMYID ZDCCA2ACAQEwdjBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcg KFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3Vpbmcg Q0ECECrF6t03ZdVGRRmy6Tkgp08wCQYFKw4DAhoFAKCCAcMwGAYJKoZIhvcNAQkDMQsGCSqG SIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMDkwNzI4MDg0MTMxWjAjBgkqhkiG9w0BCQQxFgQU tOEFwnKDog7FB4yKUX2Npk55h6gwUgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggq hkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgYUG CSsGAQQBgjcQBDF4MHYwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0 aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1 aW5nIENBAhAqxerdN2XVRkUZsuk5IKdPMIGHBgsqhkiG9w0BCRACCzF4oHYwYjELMAkGA1UE BhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMT I1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAhAqxerdN2XVRkUZsuk5IKdP MA0GCSqGSIb3DQEBAQUABIIBAFTC9aCUItVHApTCoxogSFoiRy/jOO6obyTjAsUNaY5Aq1s0 rKsZZ5v0uRKMuXmWiIfG05tCTHZCigHrvcYcdo4qo+7x+Km2XTNGNP5Wmgz3tpbKul1w4bPn WJJEgXBOpDUueed1dF6FcJO68AGJqMeOFO4wORy2s/3wqMisxYfheOz7lEUSeP4zg36fyLnV ibaOiI0IwhyP8kACPGU4ivJ4QRa4ktGqiMTdmRoJarOqQnQzi4OzpP/zGQPpXLM3Yjh9CmVB DTIgk78xPE4hfQImiO0jhhDSzmoGP/sEAGK7Tc/sfotC7obzhrEBhdN2AxXB8FN8nqtt6bgp 20AsWr0AAAAAAAA= --------------ms070108000207050009070503-- From clonvick@cisco.com Thu Jul 30 06:47:19 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5913E3A6AB1 for ; Thu, 30 Jul 2009 06:47:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K1rdHZmTj890 for ; Thu, 30 Jul 2009 06:47:18 -0700 (PDT) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 5115C3A6994 for ; Thu, 30 Jul 2009 06:47:18 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEADNBcUqrR7MV/2dsb2JhbAC6OIgnNAmGe4hnBYIsDxCBRoQShVMG X-IronPort-AV: E=Sophos;i="4.43,295,1246838400"; d="scan'208";a="357071265" Received: from sj-dkim-1.cisco.com ([171.71.179.21]) by sj-iport-6.cisco.com with ESMTP; 30 Jul 2009 13:47:20 +0000 Received: from sj-core-5.cisco.com (sj-core-5.cisco.com [171.71.177.238]) by sj-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id n6UDlKVk011703 for ; Thu, 30 Jul 2009 06:47:20 -0700 Received: from sjc-cde-011.cisco.com (sjc-cde-011.cisco.com [171.69.16.68]) by sj-core-5.cisco.com (8.13.8/8.14.3) with ESMTP id n6UDlKgS007800 for ; Thu, 30 Jul 2009 13:47:20 GMT Date: Thu, 30 Jul 2009 06:47:19 -0700 (PDT) From: Chris Lonvick To: syslog@ietf.org Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=2560; t=1248961640; x=1249825640; c=relaxed/simple; s=sjdkim1004; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=clonvick@cisco.com; z=From:=20Chris=20Lonvick=20 |Subject:=20[CEE-DISCUSSION-LIST]=20REMINDER=3A=207/31=2010 am-11am=3A=20CEE=20Meeting=20and=0A=20Agenda,=20Hyatt=20Plac e,=20Las=20Vegas=20(fwd) |Sender:=20; bh=DL7EA3bcc14stS/SQfX9lsH99YMBJuHJAg8xI9yOXcA=; b=eAqPxab6Qr8QeHJzFWDOEArlGvoRgPAJGgRgFfWSQDqZP0cKp39sw7tawC Ci0tD2c4lfIi2yoQyheslJ7F1QHOJrqXsHzsXtdxh0ZN9shqido4+gz1q40I 4HoVewMCJUxWAMq3BrX4UdOZji3sjxgO+CNUapEHilRR43hjqq9mw=; Authentication-Results: sj-dkim-1; header.From=clonvick@cisco.com; dkim=pass ( sig from cisco.com/sjdkim1004 verified; ); Subject: [Syslog] [CEE-DISCUSSION-LIST] REMINDER: 7/31 10am-11am: CEE Meeting and Agenda, Hyatt Place, Las Vegas (fwd) X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jul 2009 13:47:19 -0000 Hi, We discussed the CEE effort very briefly in the syslog WG meeting yesterday. I'll be flying and won't be able to listen in on this. If anyone can call in, can you send notes to the WG list? Thanks, Chris ---------- Forwarded message ---------- Date: Thu, 30 Jul 2009 09:38:54 -0400 From: "Heinbockel, Bill" To: CEE-DISCUSSION-LIST@LISTS.MITRE.ORG Subject: [CEE-DISCUSSION-LIST] REMINDER: 7/31 10am-11am: CEE Meeting and Agenda, Hyatt Place, Las Vegas In combination with the BlackHat and DefCon Conferences in Las Vegas next week, CEE will be hosting a meeting to discuss the latest with CEE and log standardization efforts. This meeting is open to the public. During this meeting, we will provide an update on the latest status of CEE and provide a look into the upcoming CEE Specification proposal, which is currently undergoing review by the CEE Editorial Board. I hope you can join us! -------------------------------------- CEE Meeting 31 July 2009 10:00am - 11:00am Pacific Meeting Room Hyatt Place 4520 Paradise Road Las Vegas, NV 89109 702-369-3366 Dial-in information is provided below. ************************************** Agenda: 1 - Introductions 2 - CEE Update + MITRE Status + EMAP: Cooperation with NIST 3 - CEE Specification Update (Board Members will be receiving the Specification under separate cover by COB today) + Dictionary format + Event Taxonomy + XML/Plaintext/Binary Syntaxes 4 - Path Forward + Roadmap for 2010-2012 + Formalized Specification + CEE Library implementation + Vendor support 5 - Open Discussion A closed-door meeting of the CEE Editorial Board will immediately follow the public forum. ************************************** Dial-in Information: Date/Time: July 31, 2009 at 01:00 PM America/New_York, 10:00 AM America/Los_Angeles Length: 90 (minutes) Meeting ID: 233233 TO ATTEND THE AUDIO CONFERENCE: Phone Number: 703-983-6338 (x36338) in Washington 781-271-6338 (x16338) in Bedford or Toll Free 866-648-7367 (866-MITRE-MP) Toll Free number is for North America callers only. Other countries must dial either the Washington or Bedford numbers to attend. Information on MeetingPlace must be unclassified and releasable to all meeting participants William Heinbockel Infosec Engineer, Sr. The MITRE Corporation 202 Burlington Rd. MS S145 Bedford, MA 01730 heinbockel@mitre.org 781-271-2615 From cfinss@dial.pipex.com Thu Jul 30 07:33:28 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B5BE13A700A; Thu, 30 Jul 2009 07:33:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.457 X-Spam-Level: X-Spam-Status: No, score=-2.457 tagged_above=-999 required=5 tests=[AWL=0.098, BAYES_00=-2.599, DATE_IN_PAST_03_06=0.044] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A2ZKdsSUx7Cp; Thu, 30 Jul 2009 07:33:26 -0700 (PDT) Received: from mk-outboundfilter-2.mail.uk.tiscali.com (mk-outboundfilter-2.mail.uk.tiscali.com [212.74.114.38]) by core3.amsl.com (Postfix) with ESMTP id 1489F3A6C50; Thu, 30 Jul 2009 07:33:25 -0700 (PDT) X-Trace: 237566643/mk-outboundfilter-2.mail.uk.tiscali.com/PIPEX/$PIPEX-ACCEPTED/pipex-customers/62.188.105.16/None/cfinss@dial.pipex.com X-SBRS: None X-RemoteIP: 62.188.105.16 X-IP-MAIL-FROM: cfinss@dial.pipex.com X-SMTP-AUTH: X-MUA: Microsoft Outlook Express 6.00.2800.1106Produced By Microsoft MimeOLE V6.00.2800.1106 X-IP-BHB: Once X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ArEGAPtLcUo+vGkQ/2dsb2JhbABEgmk8jFjCdQIHgi6BWgU X-IronPort-AV: E=Sophos;i="4.43,295,1246834800"; d="scan'208";a="237566643" X-IP-Direction: IN Received: from 1cust16.tnt2.lnd9.gbr.da.uu.net (HELO allison) ([62.188.105.16]) by smtp.pipex.tiscali.co.uk with SMTP; 30 Jul 2009 15:33:23 +0100 Message-ID: <000401ca111a$3bb01da0$0601a8c0@allison> From: "tom.petch" To: "Gerhard Muenz" , , , References: <4A6EB9BB.9040002@net.in.tum.de> Date: Thu, 30 Jul 2009 11:44:11 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Cc: Michael Tuexen , Robin Seggelmann , Daniel Mentz Subject: Re: [Syslog] Missing dead peer detection in DTLS X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: "tom.petch" List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jul 2009 14:33:28 -0000 Gerhard Thank you for pointing this out; it had escaped me. What I had thought though was that the lack of flow control with DTLS over UDP is a problem, and that the lack of this with syslog over UDP led the syslog RFC [RFC5424] to make syslog over TLS the RECOMMENDED transport, not, as might be expected, syslog over UDP. This in turn led me to expect that syslog over DTLS over UDP would not be acceptable to the IESG, rather that syslog over DTLS over SCTP would become the RECOMMENDED transport. So; several thoughts. This is an update to the extensions RFC, RFC4366, which itself is being updated by the TLS working group (hence my addition of them to the list) and I would much rather have one extensions RFC rather than several. This is a good concept and fills a need; perhaps the TLS working group would take this on. Flow control remains an issue which I do not think that this extension addresses. Is this a security exposure? or just, like syslog over UDP, an inconvenient truth? The petch-gerhards draft allows the recipient of the unidirectional flow to initiate the DTLS 'connection', and so enables it to re-establish the connection when anything goes wrong. This would seem an alternative to consider. Tom Petch ----- Original Message ----- From: "Gerhard Muenz" To: ; Cc: "Michael Tuexen" ; "Robin Seggelmann" ; "Daniel Mentz" Sent: Tuesday, July 28, 2009 10:41 AM Subject: [Syslog] Missing dead peer detection in DTLS Hi, This mail goes to the ipfix and syslog mailing lists in order to summarize the common issues regarding DTLS. IPFIX specifies support of DTLS as mandatory for transport over UDP and SCTP in RFC5101. In SYSLOG, it is intended to standardize DTLS for transport over UDP. In IPFIX, we have a first implementation of IPFIX-over-DTLS/UDP, and we will have a first implementation of IPFIX-over-DTLS/SCTP very soon. During this implementation effort, we found that the current specification of DTLS/UDP has a severe flaw when used with unidirectional protocols (like IPFIX): The sender cannot recognize if the receiver has crashed and lost the DTLS state. We discuss this issue in a draft: http://tools.ietf.org/html/draft-mentz-ipfix-dtls-recommendations-00 http://www.ietf.org/proceedings/75/slides/ipfix-6.pdf I've had a look at draft-feng-syslog-transport-dtls-01 and draft-petch-gerhards-syslog-transport-dtls-02. It seems that this problem has not yet been covered, although the problem should be the same for SYSLOG. As a solution, the DTLS Heartbeat Extension has been proposed very recently: http://tools.ietf.org/html/draft-seggelmann-tls-dtls-heartbeat-00 A feature patch for OpenSSL is available: http://sctp.fh-muenster.de/dtls-patches.html#features So, I think that we should support this standardization initiative as it solves our problem. For IPFIX and SYSLOG over DTLS/UDP, we then can specify that the DTLS Heartbeat Extension MUST be implemented. Dan suggested to have a single document solving the DTLS issues regarding unidirectional protocols. I think that such a document is not needed if we have DTLS Heartbeat Extension. Regards, Gerhard Dipl.-Ing. Gerhard Münz Chair for Network Architectures and Services (I8) Department of Informatics Technische Universität München Boltzmannstr. 3, 85748 Garching bei München, Germany Phone: +49 89 289-18008 Fax: +49 89 289-18033 E-mail: muenz@net.in.tum.de WWW: http://www.net.in.tum.de/~muenz From clonvick@cisco.com Thu Jul 30 07:50:53 2009 Return-Path: X-Original-To: syslog@core3.amsl.com Delivered-To: syslog@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B03D528C149 for ; Thu, 30 Jul 2009 07:50:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wQHDjtdfcsn7 for ; Thu, 30 Jul 2009 07:50:51 -0700 (PDT) Received: from sj-iport-1.cisco.com (sj-iport-1.cisco.com [171.71.176.70]) by core3.amsl.com (Postfix) with ESMTP id C13E23A6BB6 for ; Thu, 30 Jul 2009 07:50:51 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAMpPcUqrR7O6/2dsb2JhbAC6cognkCIFhBE X-IronPort-AV: E=Sophos;i="4.43,295,1246838400"; d="scan'208";a="221343697" Received: from sj-dkim-2.cisco.com ([171.71.179.186]) by sj-iport-1.cisco.com with ESMTP; 30 Jul 2009 14:50:53 +0000 Received: from sj-core-2.cisco.com (sj-core-2.cisco.com [171.71.177.254]) by sj-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id n6UEorIE026645; Thu, 30 Jul 2009 07:50:53 -0700 Received: from sjc-cde-011.cisco.com (sjc-cde-011.cisco.com [171.69.16.68]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id n6UEorOa008552; Thu, 30 Jul 2009 14:50:53 GMT Date: Thu, 30 Jul 2009 07:50:53 -0700 (PDT) From: Chris Lonvick To: syslog@ietf.org Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=1761; t=1248965453; x=1249829453; c=relaxed/simple; s=sjdkim2002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=clonvick@cisco.com; z=From:=20Chris=20Lonvick=20 |Subject:=20syslog=20WG=20meeting=20minutes=20(proposed) |Sender:=20; bh=4ebzRmQMjVdZ9INdhhN9bXAypoglVC/vRSzjV63AIs8=; b=DsIvkWP6cY8N0YTOKzEo5XI1GNIMT47de7bVWzFA/vdFQTnqaS/ss8YIcV FUC8vNrpDLd4QSC/6uMb2tIE+OpOjEljX4mUWhFijnuxMb6fdIQWfom+jVeM NvcrNVDHU1; Authentication-Results: sj-dkim-2; header.From=clonvick@cisco.com; dkim=pass ( sig from cisco.com/sjdkim2002 verified; ); Cc: pasi.eronen@nokia.com Subject: [Syslog] syslog WG meeting minutes (proposed) X-BeenThere: syslog@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Security Issues in Network Event Logging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jul 2009 14:50:53 -0000 Hi Folks, Here are the meeting minutes that I took. Please send back edits if you want anything changed. === Meeting was started, blue sheets passed around, no one in jabber room other than the people in the room. Chairs went through the slides. Q about syslog/BEEP on slide 10: We're not proposing to standardize this; it's already RFC 3195. Since the uptake on implementation (of this RFC, and of BEEP overall) is low, then the WG should consider moving the RFC to HISTORIC. Jurgen S. gave a review of his thoughts on the proposed new charter items: Slide 8, MIB, OK DHCP, has some operational value don't need an architectural reference to be done in the IETF Slide 9 might be interesting to have a guideline but not sure who would commit the time to do that DTLS, should be done and aligned with RFC 5425 (syslog/tls) syslog/tcp, should be very straightforward and easy to do syslog/BEEP, declare HISTORIC Dan R. - Since syslog WG is proposing to do syslog/DTLS is there enough commonality so that ISMS/DTLS and IPFIX/DTLS can re-use? - Consensus was that this was likely. David also noted that the others are also doing SCTP. Pasi E. - syslog/DTLS should be easy since it will draw directly from syslog/TLS. - IPFIX also working on Dead Peer Detection (DTLS Heartbeet), we should likely support this as well. - There were problems with the previous IPFIX/DTLS but that was because of bad libraries in OpenSSL which have since been fixed. Wes H. - there is not that much commonality between the schemes because of a lot of useage details. Chris and David have asked Joe Saloway to act as WG editor for the DTLS work. Meeting adjurned at 10am. === Thanks, Chris