Tryag File Manager
Home
-
Turbo Force
Current Path :
/
usr
/
lib
/
python2.4
/
site-packages
/
Upload File :
New :
File
Dir
//usr/lib/python2.4/site-packages/auparse.so
ELF P 4 4 ( K K N ^ ^ ? PA N ^ ^ PtdE E E | | Qtd RtdN ^ ^ , , Q PQ U W tf*s|CEqX a : T 5 0 E > % \ 5 " A f ? ) / O % 6 s g A m S ? ` t 8 # ` S C ( p ? 2 y . C t V R B 9 o E " $ % Z " @ P; r 9 C 0 Н 7 Н $< __gmon_start__ _fini __cxa_finalize _Jv_RegisterClasses initauparse PyType_Ready Py_InitModule4 PyModule_AddObject PyErr_NewException PyModule_AddIntConstant auparse_interpret_field Py_BuildValue PyErr_SetString auparse_get_field_int __errno_location _Py_NoneStruct auparse_get_field_type auparse_get_field_str auparse_get_field_name PyArg_ParseTuple auparse_find_field PyExc_EnvironmentError PyErr_SetFromErrno auparse_find_field_next auparse_get_record_text auparse_get_num_fields auparse_next_field _Py_ZeroStruct _Py_TrueStruct auparse_first_field auparse_get_filename auparse_get_line_number auparse_get_type PyExc_LookupError auparse_goto_record_num auparse_next_record auparse_first_record auparse_get_num_records auparse_get_timestamp auparse_next_event ausearch_next_event ausearch_clear ausearch_set_stop PyExc_ValueError ausearch_add_regex ausearch_add_timestamp_item ausearch_add_interpreted_item ausearch_add_item ausearch_add_expression free auparse_reset PyFunction_Type PyMem_Malloc callback_data_destroy auparse_add_callback PyErr_NoMemory PyEval_CallObjectWithKeywords auparse_flush_feed auparse_feed PyString_FromString PyInt_FromLong auparse_destroy PyArg_ParseTupleAndKeywords auparse_init PyFile_Type PyType_IsSubtype PyFile_AsFile PyFile_Name PyString_AsString PyExc_IOError PyErr_SetFromErrnoWithFilename PySequence_Check PySequence_Size PySequence_GetItem PyObject_AsFileDescriptor PyString_Type PyObject_Free PyExc_TypeError localtime strftime __snprintf_chk auparse_timestamp_compare auparse_type_t libauparse.so.0 libaudit.so.0 libc.so.6 __stack_chk_fail _edata __bss_start _end auparse.so GLIBC_2.1.3 GLIBC_2.3.4 GLIBC_2.4 GLIBC_2.0 s i S ti _ ii k ii u ^ ș l x Ԛ ؚ ܚ $ @ D L T X ` h l t | ě ̛ Л ԛ ܛ $ , 0 4 < @ D L P T \ ` d l p t | Ĝ ̜ М Ԝ ܜ $ , 0 4 < @ D L P T \ ` d l p t | _ _ _ _ _ _ Q _ " _ # _ & _ / _ 2 _ : _ H _ N _ P ` ` ` ` ` ` ` ` ` $` (` ,` 0` 4` 8` <` @` D` H` L` P` T` X` \` `` d` h` l` p` ! t` $ x` % |` ' ` ( ` ) ` * ` + ` , ` - ` . ` 0 ` 1 ` 3 ` 4 ` 5 ` 6 ` 7 ` 8 ` 9 ` ; ` < ` = ` > ` ? ` @ ` A ` B ` C ` D ` E ` F ` G ` I ` J ` K a L a M a N a O Ui & h h h h h h( $ h0 ( h8 p, h@ `0 hH P4 hP @8 hX 0< h` @ hh D hp H hx L h P h T h X h \ h ` h d h h h pl h `p h Pt h @x h 0| h h h h h h h h h h( h0 h8 p h@ ` hH P hP @ hX 0 h` hh hp hx h h h h h h h h p h ` h P h @ h 0 h h h h h h h h US [ØF t2X[ÐUVS jF = uWt$p)p= 9v= = 9wƃ= [^]Í US. E tt $҃[]Ë $ÐUVuVt tvV t tTVt t2Vt tF4$ ^]ËFP$RFP$Rf뾋F P$Rf뜋FP$Rfwt& ' UED$ $ t@ É' UWVS D 9 E$ l: <$ , D$ > D$LD$ D$ $p l: |$D$4$XE9 4$D$D$8TD$ D$ $ > D$\D$4$eD$ D$4$!sD$ D$4$D$ D$4$D$ D$4$D$ D$4$D$ D$4$D$ D$4$D$ D$4$kD$ D$4$QD$ D$4$7D$ D$4$ !D$ D$4$4D$ D$4$HD$ D$4$]D$ D$4$qD$ D$4$D$ D$4$D$ D$4$gD$ D$4$MD$ D$4$3D$ D$4$D$ D$4$D$ D$4$D$ D$4$$D$ D$4$6D$ D$4$HD$ D$4$}]D$ D$4$coD$ D$4$ID$ D$4$/D$ D$4$D$ D$4$D$ D$4$D$ D$4$D$ D$4$D$ D$4$ D$ D$4$y D$ D$4$_0D$ D$4$E [^_]É' USE? @t $`D$$[]ÍD$ > $ 1ސ& UE]u`? @tK$kT t ]u]Í& ^t$$]u]ÍD$ > $1뷐& USE> @t $D$^$[]ÍD$ > $01ސ& USEu> @t $PD$$>[]ÍD$ > $1ސ& USEX> @t $PD$$[]ÍD$ > $p1ސ& USû= $EE D$BD$E $1҅t1EPtME$D$t D$$J$[][u/ $[]ÍD$ > $1뾋 $1몍& ' USE(< @t>$`tD$$[]u+ []ÍD$ > $"1ċ $~1밍 USEU< @t$$pt4D$$[]ÍD$ > $1ދ $1USE(; @t8$tD$^$[]Ë $1捃D$ > $(1USEu; @t*$ u []Ë []ÍD$ > $1ύ& ' USEH; @t*$Pu []Ë []ÍD$ > $V1ύ& ' USEÕ: @t3$tD$$Z[]Ë []ÍD$ > $1ϐt& USEh%: @t $D$O$[]ÍD$ > $1ސ& USE9 @tB$tD$^$[]ÍQD$ $1܍D$ > $1 USK9 $ED$^D$E $1҅t'EPt8E$D$ ~$[]u-$[]ÍD$ > $f1ɋ $1뵍v ' USEÕ8 @tA$@ ~ []u []Ë $[1ՍD$ > $1빍& USEX8 @tA$p ~ []u []Ë $1ՍD$ > $O1빍& USEÕ7 @t8$tD$^$Z[]Ë $d1捃D$ > $1UVSEg$7 @tn$tE9 D$ $D: tBFB FB F B$Ѓ[^]Ðt& 0u, [^]ÍD$ > $11뽋 $1멐t& USEe6 @tA$ ~ []u []Ë $+1ՍD$ > $1빍& USE(5 @tA$ ~ []u []Ë $1ՍD$ > $ 1빍& USEe5 @t$ []ÍD$ > $1ސUS^5 $ED$^D$E $v1҅t(EPt:E$D$u $[]Ë $1䍃D$ > $41ȍ US{4 $ED$D$E $1҅t(EPt:E$D$u $[]Ë $ 1䍃D$ > $1ȍ US 3 DED$ED$ED$ ED$[D$E $!1҅t=EPtOE$D$ED$ ED$ED$u D[]Ë $V1䍃D$ > $1fUS^3 4ED$ED$ED$ ED$`D$E $a1҅t=EPtOE$D$ED$ ED$ED$]u 4[]Ë $1䍃D$ > $ 1fUS[2 4ED$ED$ED$ ED$`D$E $1҅t=EPtOE$D$ED$ ED$ED$-u 4[]Ë $1䍃D$ > $J1fUSÛ1 $ED$ ED$bD$E $1҅tSEPtxED$ ED$E$D$rt0Et<D$ $E$1҃$[]Ë $[]Ë $1эD$ > $o1뵍& USEõ0 @t/$u []Ë $1捃D$ > $1ʉ' UVSJ0 uED$ ED$eD$E $1҅ttU9BusF $ t{0EAUQ At L$D$ D$F$| [^]Ít& vD$ $ 1[^]ZōD$ > $1멍 U(uu]}p-/ FD$ E D$D$$D$ ljD$F$Ƌt+t t ]u}]ËF4$Pt& G<$P& Í& ' USEÅ. @t/$u []Ë $]1捃D$ > $1ʉ' US^. $ED$ ED$D$E $o1҅t/EPtAE$D$ED$u $[]Ë $1䍃D$ > $&1ȍ& ' Uuu]`- F$t Vt/F V]Ћu]Ív ]Ћu]É$%1҅FuǍ Uuu]3, NtF V]Ћu]ËF $1҅Fuލt& Uuu]à, F tF V ]Ћu]ËF $1҅F uލt& Uuu]P, FtF V]Ћu]ËF$c1҅Fuލt& UWVSL , <UEuBt$^E@ ED$ED$,; D$ D$ED$E $pt }v!D$ $ <[^_]ËE9u썃8uD$ $ UB <1[^_]9u썃uD$ $ [UBu͋ $pv E싋P9tL$$X E$U D$E$UB\E$$D$ $E$) E$E= U $CE U1 1v ;} |$E$YƉ$/U uF4$P뷋E$t E$bH E$E܃= U܍ $|E M1> 1 ;}' |$E$Ɖ$kUԅz uF4$P뷋E$<hD$E$E싋P9tL$$Iz E$ D$E$UBKt$ $vG U T$E$}UB/ U؉$d1 U T$E$=UB Uԉ$$1V`D$ $StJE؉$ D$ $t Eԉ$F4$P몋F4$Pt& ԍ XD$ $ $낋 $3& Uuu]& Ft$+F4$ ]u]ÐUWVSlEe U1w& P$UP Ux @EEEŋEɋE͋EыEՋEًEEዃE勃E fEEE$ D$ ? ED$D$ 4$uXǃ,> strf,> ǃ0> timeǃ4> retǃ8> urneǃ<> d 0 4$|Ue3 l[^_]ËEUt$,> D$ D$ T$|$D$ D$ D$ 4$뚍,> ǃ,> locaǃ0> ltimǃ4> e erǃ8> ror g fUSE $ D$E$[]Uuu]Ð$ t(F҉t$Vt t"4$]u]ËFP$RfFP$Rt& ̐US^$ UVS=# p@t Ћu[^]ÐUS [# DY[auparse auparse.NoParser AUSOURCE_LOGS AUSOURCE_FILE AUSOURCE_FILE_ARRAY AUSOURCE_BUFFER AUSOURCE_BUFFER_ARRAY AUSOURCE_DESCRIPTOR AUSOURCE_FILE_POINTER AUSOURCE_FEED AUSEARCH_UNSET AUSEARCH_EXISTS AUSEARCH_EQUAL AUSEARCH_NOT_EQUAL AUSEARCH_STOP_EVENT AUSEARCH_STOP_RECORD AUSEARCH_STOP_FIELD AUSEARCH_RULE_CLEAR AUSEARCH_RULE_OR AUSEARCH_RULE_AND AUSEARCH_RULE_REGEX AUPARSE_CB_EVENT_READY AUPARSE_TYPE_UNCLASSIFIED AUPARSE_TYPE_UID AUPARSE_TYPE_GID AUPARSE_TYPE_SYSCALL AUPARSE_TYPE_ARCH AUPARSE_TYPE_EXIT AUPARSE_TYPE_ESCAPED AUPARSE_TYPE_PERM AUPARSE_TYPE_MODE AUPARSE_TYPE_SOCKADDR AUPARSE_TYPE_FLAGS AUPARSE_TYPE_PROMISC AUPARSE_TYPE_CAPABILITY AUPARSE_TYPE_SUCCESS AUPARSE_TYPE_A0 AUPARSE_TYPE_A1 AUPARSE_TYPE_A2 AUPARSE_TYPE_SIGNAL AUPARSE_TYPE_LIST s:find_field I Not found sLii sssi O|O:add_callback callback must be a function OiO s#:feed |iO Invalid source type auparse.AuEvent auparse.AuParser source_type source sec Event seconds milli millisecond of the timestamp serial Serial number of the event host Machine's name flush_feed reset search_add_expression search_add_item search_add_interpreted_item search_add_timestamp_item search_add_regex search_set_stop search_clear search_next_event parse_next_event get_timestamp get_num_records first_record next_record goto_record_num get_type get_line_number get_filename first_field next_field get_num_fields get_record_text find_field_next get_field_name get_field_str get_field_type get_field_int interpret_field object has no parser associated with it source must be None or not passed as a parameter when source_type is AUSOURCE_LOGS source must be a string when source_type is AUSOURCE_FILE members of source sequence must be a string when source_type is AUSOURCE_FILE_ARRAY source must be a sequence when source_type is AUSOURCE_FILE_ARRAY members of source sequence must be a string when source_type is AUSOURCE_BUFFER_ARRAY source must be resolvable to a file descriptor when source_type is AUSOURCE_DESCRIPTOR source must be a file object when source_type is AUSOURCE_FILE_POINTER source must be open file when source_type is AUSOURCE_FILE_POINTER source must be None when source_type is AUSOURCE_FEED %a %b %d %H:%M:%S.%%ld %Y serial=%%ld host=%%s +c E ;x . ( h ( XD ` | x X 8$ @ \ x 8 8 h $ h@ \ Xx x 8 @ Hd h ( x < H\ | 8 zR | AB D 8 ' AB T 4 AB C t X AB D X AB L X AB D X AB D PX AB D AB A H AB D < p AB D X p AB D t db AB D b AB D k AB D `X AB D z AB D AB A y AB D 8 y AB D T dp AB D p AB E Xy AB D y AB D O AB D T AB A AB A \ AB A 8 AB A T AB A p H AB A g AB D ` AB B P AB FI g AB D 0 AB A $ j AB FF D L AB FF d DL AB FF tL AB FF 9 AB C ? AB FF AB F 0 AB D r AB FF @ AB A ^ H $< o 8 _ L p o o oH o ^ * : J Z j z * : J Z j z * : J Z j z * : J Z j z * : Parsing library for audit messages. The module defines the following exceptions: NoParser: Raised if the underlying C code parser is not bound to the AuParser object. An internal object which encapsulates the timestamp, serial number and host information of an audit event. The object cannot be instantiated from python code, rather it is returned from the audit parsing API. AuParser(source_type, source) Construct a new audit parser object and bind it to input data. source_type: one of the AUSOURCE_* constants. source: the input data, dependent on the source_type as follows: AUSOURCE_LOGS: None (system log files will be parsed) AUSOURCE_FILE: string containing file path name AUSOURCE_FILE_ARRAY: list or tuple of strings each containing a file path name AUSOURCE_BUFFER: string containing audit data to parse AUSOURCE_BUFFER_ARRAY: list or tuple of strings each containing audit data to parse AUSOURCE_DESCRIPTOR: integer file descriptor (e.g. fileno) AUSOURCE_FILE_POINTER: file object (e.g. types.FileType) AUSOURCE_FEED: None (data supplied via feed() feed(data) supplies new data for the parser to consume. AuParser() must have been called with a source type of AUSOURCE_FEED. The parser consumes as much data as it can invoking a user supplied callback specified with add_callback() with a cb_event_type of AUPARSE_CB_EVENT_READY each time the parser recognizes a complete event in the data stream. Data not fully parsed will persist and be prepended to the next feed data. After all data has been feed to the parser flush_feed() should be called to signal the end of input data and flush any pending parse data through the parsing system. Returns None. Raises exception (EnvironmentError) on error flush_feed() flush any unconsumed feed data through parser flush_feed() should be called to signal the end of feed input data and flush any pending parse data through the parsing system. Returns None. Raises exception (EnvironmentError) on error add_callback(callback, user_data) add a callback handler for notifications. auparse_add_callback adds a callback function to the parse state which is invoked to notify the application of parsing events. The signature of the callback is: callback(au, cb_event_type,user_data) When the callback is invoked it is passed: au: the AuParser object cb_event_type: enumerated value indicating the reason why the callback was invoked user_data: user supplied private data The cb_event_type argument indicates why the callback was invoked. It's possible values are: AUPARSE_CB_EVENT_READY A complete event has been parsed and is ready to be examined. This is logically equivalent to the parse state immediately following auparse_next_event() Returns None. Raises exception (EnvironmentError) on error reset() Reset audit parser instance reset resets all internal cursors to the beginning. It closes files and descriptors. Returns None. Raises exception (EnvironmentError) on error search_add_expression(expression, how) Build up search expression ausearch_add_item adds an expression to the current audit search expression. The search conditions can then be used to scan logs, files, or buffers for something of interest. The expression parameter contains an expression, as specified in ausearch-expression(5). The how parameter determines how this search expression will affect the existing search expression, if one is already defined. The possible values are: AUSEARCH_RULE_CLEAR: Clear the current search expression, if any, and use only this search expression. AUSEARCH_RULE_OR: If a search expression E is already configured, replace it by (E || this_search_expression). AUSEARCH_RULE_AND: If a search expression E is already configured, replace it by (E && this_search_expression). No Return value, raises exception (EnvironmentError) on error. search_add_item(field, op, value, how) Build up search rule search_add_item() adds one search condition to the current audit search expression. The search conditions can then be used to scan logs, files, or buffers for something of interest. The field value is the field name that the value will be checked for. The op variable describes what kind of check is to be done. Legal op values are: 'exists': Just check that a field name exists '=': locate the field name and check that the value associated with it is equal to the value given in this rule. '!=': locate the field name and check that the value associated with it is NOT equal to the value given in this rule. The value parameter is compared to the uninterpreted field value. The how parameter determines how this search expression will affect the existing search expression, if one is already defined. The possible values are: AUSEARCH_RULE_CLEAR: Clear the current search expression, if any, and use only this search expression. AUSEARCH_RULE_OR: If a search expression E is already configured, replace it by (E || this_search_expression). AUSEARCH_RULE_AND: If a search expression E is already configured, replace it by (E && this_search_expression). No Return value, raises exception (EnvironmentError) on error. search_add_interpreted_item(field, op, value, how) Build up search rule search_add_interpreted_item() adds one search condition to the current audit search expression. The search conditions can then be used to scan logs, files, or buffers for something of interest. The field value is the field name that the value will be checked for. The op variable describes what kind of check is to be done. Legal op values are: 'exists': Just check that a field name exists '=': locate the field name and check that the value associated with it is equal to the value given in this rule. '!=': locate the field name and check that the value associated with it is NOT equal to the value given in this rule. The value parameter is compared to the interpreted field value (the value that would be returned by AuParser.interpret_field). The how parameter determines how this search expression will affect the existing search expression, if one is already defined. The possible values are: AUSEARCH_RULE_CLEAR: Clear the current search expression, if any, and use only this search expression. AUSEARCH_RULE_OR: If a search expression E is already configured, replace it by (E || this_search_expression). AUSEARCH_RULE_AND: If a search expression E is already configured, replace it by (E && this_search_expression). No Return value, raises exception (EnvironmentError) on error. search_add_timestamp_item(op, sec, milli, how) Build up search rule search_add_timestamp_item adds an event time condition to the current audit search expression. The search conditions can then be used to scan logs, files, or buffers for something of interest. The op parameter specifies the desired comparison. Legal op values are "<", "<=", ">=", ">" and "=". The left operand of the comparison operator is the timestamp of the examined event, the right operand is specified by the sec and milli parameters. The how parameter determines how this search expression will affect the existing search expression, if one is already defined. The possible values are: AUSEARCH_RULE_CLEAR: Clear the current search expression, if any, and use only this search expression. AUSEARCH_RULE_OR: If a search expression E is already configured, replace it by (E || this_search_expression). AUSEARCH_RULE_AND: If a search expression E is already configured, replace it by (E && this_search_expression). No Return value, raises exception (EnvironmentError) on error. search_add_regex(regexp) Add a regular expression to the search criteria. No Return value, raises exception (EnvironmentError) on error. search_set_stop(where) Set where cursor is positioned on search match. search_set_stop() determines where the internal cursor will stop when a search condition is met. The possible values are: AUSEARCH_STOP_EVENT: This one repositions the cursors to the first field of the first record of the event con- taining the items searched for. AUSEARCH_STOP_RECORD: This one repositions the cursors to the first field of the record containing the items searched for. AUSEARCH_STOP_FIELD: This one simply stops on the current field when the evaluation of the rules becomes true. No Return value, raises exception (ValueError) on error. search_clear() Clear search paramters. ausearch_clear clears any search parameters stored in the parser instance and frees memory associated with it. No Return value. search_next_event() Find the next event that meets search criteria. search_next_event() will scan the input source and evaluate whether any record in an event contains the data being searched for. Evaluation is done at the record level. Returns True if a match was found Returns False if a match was not found. Raises exception (EnvironmentError) on error parse_next_event() Advance the parser to the next event. parse_next_event() will position the cursors at the first field of the first record of the next event in a file or buffer. It does not skip events or honor any search criteria that may be stored. Returns True if parser advances to next event. Returns False if there are no more events to parse Raises exception (EnvironmentError) on error get_timestamp() Return current event's timestamp. Returns the current event's timestamp info as an AuEvent object. No Return value, raises exception (EnvironmentError) on error. get_num_records() Get the number of records. Returns the number of records in the current event. Raises exception (EnvironmentError) on error. first_record() Reposition record cursor. first_record() repositions the internal cursors of the parsing library to point to the first record in the current event. Return True for success, False if there is no event data. Raises exception (EnvironmentError) on error. next_record() Advance record cursor. next_record() will move the internal library cursors to point to the next record of the current event. Returns True on success, False if no more records in current event Raises exception (EnvironmentError) on error. goto_record_num() Move record cursor to specific position. goto_record_num() will move the internal library cursors to point to a specific physical record number. Records within the same event are numbered starting from 0. This is generally not needed but there are some cases where one may want precise control over the exact record being looked at. Returns True on success, False if no more records in current event Raises exception (EnvironmentError) on error. get_type() Get record’s type. get_type() will return the integer value for the current record of the current event. Returns record type. Raises exception (LookupError) on error. auparse_get_line_number() get line number where record was found get_line_number will return the source input line number for the current record of the current event. Line numbers start at 1. If the source input type is AUSOURCE_FILE_ARRAY the line numbering will reset back to 1 each time a new life in the file array is opened. auparse_get_filename() get the filename where record was found get_filename() will return the name of the source file where the record was found if the source type is AUSOURCE_FILE or AUSOURCE_FILE_ARRAY. For other source types the return value will be None. first_field() Reposition field cursor. Returns True on success, False if there is no event data next_field() Advance the field cursor. next_field() moves the library’s internal cursor to point to the next field in the current record of the current event. Returns True on success, False if there is no more fields exist get_num_fields() Get the number of fields. Returns the number of fields in the current event. Raises exception (EnvironmentError) on error. get_record_text() Return unparsed record data get_record_text() returns the full unparsed record. Raises exception (EnvironmentError) on error. find_field_next() Get next occurrance of field name find_field_next() returns the value associated next occurrance of field name. Returns value associated with field or None if there is no next field. Raises exception (EnvironmentError) on error. find_field(name) Search for field name. find_field() will scan all records in an event to find the first occurance of the field name passed to it. Searching begins from the cursor’s current position. The field name is stored for subsequent searching. Returns value associated with field or None if not found. get_field_name() Get current field’s name. get_field_name() allows access to the current field name of the current record in the current event. Returns None if the field value is unavailable. get_field_str() get current field’s value get_field_str() allows access to the value in the current field of the current record in the current event. Returns None if the field value is unavailable. get_field_type() Get current field’s data type value. get_field_type() returns a value from the auparse_type_t enum that describes the kind of data in the current field of the current record in the current event. Returns AUPARSE_TYPE_UNCLASSIFIED if the field’s data type has no known description or is an integer. Otherwise it returns another enum. Fields with the type AUPARSE_TYPE_ESCAPED must be interpretted to access their value since those field’s raw value is encoded. get_field_int() Get current field’s value as an integer. get_field_int() allows access to the value as an int of the current field of the current record in the current event. Returns None if the field value is unavailable. interpret_field() Return an interpretation of the current field as a string. If the field cannot be interpreted the field is returned unmodified. Returns None if the field value is unavailable. ? ( @ ; `9 a ȟ ؟ @ ? 9 b 3 ? ? ? 3 ? ? @3 ? @ 2 @ 5@ 2 :@ ? 1 e I@ `1 @h ]? / @i T@ 0/ `l Z@ P. m p@ - p @ , u @ , { @ p+ ` @ * @ * @ * @ @ ) A ( ` A P( %A ' 2A P' >A & NA & WA % gA P% tA $ A p$ A $ A # A # 8? 0" A ! A p! A ! A A auparse.so.debug 6^c .shstrtab .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rel.dyn .rel.plt .init .text .fini .rodata .eh_frame_hdr .eh_frame .ctors .dtors .jcr .data.rel.ro .dynamic .got .got.plt .data .bss .gnu_debuglink o D 8 8 % o H H 2 o P A L L p J S N P Y P P " _ $< $< e @< @< m E E | { F F \ ^ N ^ N ^ N ^ N ^ N _ O < _ O a Q < Ѝ 8 Ѝ