From f8f46d28bea92eda49b47ce728a0300dfb9bd37a Mon Sep 17 00:00:00 2001 From: ahrenholz Date: Thu, 29 Aug 2013 14:21:13 +0000 Subject: [PATCH] initial import (Boeing r1752, NRL r878) --- Changelog | 194 + LICENSE | 22 + Makefile.am | 71 + README | 61 + README-Xen | 87 + bootstrap.sh | 48 + configure.ac | 368 + daemon/CORE.e4p | 223 + daemon/MANIFEST.in | 4 + daemon/Makefile.am | 51 + daemon/core/__init__.py | 23 + daemon/core/addons/__init__.py | 6 + daemon/core/api/__init__.py | 0 daemon/core/api/coreapi.py | 630 ++ daemon/core/api/data.py | 327 + daemon/core/broker.py | 858 ++ daemon/core/bsd/__init__.py | 0 daemon/core/bsd/netgraph.py | 70 + daemon/core/bsd/nodes.py | 197 + daemon/core/bsd/vnet.py | 216 + daemon/core/bsd/vnode.py | 393 + daemon/core/conf.py | 373 + daemon/core/constants.py.in | 19 + daemon/core/coreobj.py | 445 + daemon/core/emane/__init__.py | 0 daemon/core/emane/bypass.py | 65 + daemon/core/emane/commeffect.py | 124 + daemon/core/emane/emane.py | 844 ++ daemon/core/emane/ieee80211abg.py | 119 + daemon/core/emane/nodes.py | 281 + daemon/core/emane/rfpipe.py | 106 + daemon/core/emane/universal.py | 113 + daemon/core/location.py | 246 + daemon/core/misc/LatLongUTMconversion.py | 216 + daemon/core/misc/__init__.py | 0 daemon/core/misc/event.py | 160 + daemon/core/misc/ipaddr.py | 230 + daemon/core/misc/quagga.py | 116 + daemon/core/misc/utils.py | 228 + daemon/core/misc/utm.py | 259 + daemon/core/misc/xmlutils.py | 776 ++ daemon/core/mobility.py | 929 +++ daemon/core/netns/__init__.py | 0 daemon/core/netns/nodes.py | 401 + daemon/core/netns/vif.py | 168 + daemon/core/netns/vnet.py | 496 ++ daemon/core/netns/vnode.py | 402 + daemon/core/netns/vnodeclient.py | 221 + daemon/core/phys/__init__.py | 0 daemon/core/phys/pnodes.py | 268 + daemon/core/pycore.py | 27 + daemon/core/sdt.py | 202 + daemon/core/service.py | 760 ++ daemon/core/services/__init__.py | 6 + daemon/core/services/bird.py | 249 + daemon/core/services/nrl.py | 191 + daemon/core/services/quagga.py | 589 ++ daemon/core/services/security.py | 129 + daemon/core/services/ucarp.py | 189 + daemon/core/services/utility.py | 676 ++ daemon/core/services/xorp.py | 472 ++ daemon/core/session.py | 1029 +++ daemon/core/xen/__init__.py | 0 daemon/core/xen/xen.py | 818 ++ daemon/core/xen/xenconfig.py | 265 + daemon/data/core.conf | 40 + daemon/data/xen.conf | 35 + daemon/doc/Makefile.am | 151 + daemon/doc/conf.py.in | 256 + daemon/examples/controlnet_updown | 53 + daemon/examples/emanemodel2core.py | 187 + daemon/examples/findcore.py | 78 + daemon/examples/myservices/README.txt | 26 + daemon/examples/myservices/__init__.py | 7 + daemon/examples/myservices/sample.py | 64 + daemon/examples/netns/basicrange.py | 74 + daemon/examples/netns/emane80211.py | 99 + daemon/examples/netns/howmanynodes.py | 209 + .../examples/netns/iperf-performance-chain.py | 109 + daemon/examples/netns/iperf-performance.sh | 284 + daemon/examples/netns/ospfmanetmdrtest.py | 572 ++ daemon/examples/netns/switch.py | 78 + daemon/examples/netns/switchtest.py | 97 + daemon/examples/netns/twonodes.sh | 33 + daemon/examples/netns/wlanemanetests.py | 772 ++ daemon/examples/netns/wlantest.py | 98 + daemon/examples/services/sampleFirewall | 30 + daemon/examples/services/sampleIPsec | 119 + daemon/examples/services/sampleVPNClient | 63 + daemon/examples/services/sampleVPNServer | 147 + daemon/examples/stopsession.py | 45 + daemon/ns3/LICENSE | 339 + daemon/ns3/Makefile.am | 40 + daemon/ns3/corens3/__init__.py | 22 + daemon/ns3/corens3/constants.py.in | 18 + daemon/ns3/corens3/obj.py | 503 ++ daemon/ns3/examples/ns3lte.py | 110 + daemon/ns3/examples/ns3wifi.py | 122 + daemon/ns3/examples/ns3wifirandomwalk.py | 131 + daemon/ns3/examples/ns3wimax.py | 95 + daemon/ns3/setup.py | 28 + daemon/sbin/core-cleanup | 58 + daemon/sbin/core-daemon | 1636 ++++ daemon/sbin/core-xen-cleanup | 73 + daemon/sbin/coresendmsg | 336 + daemon/setup.py | 46 + daemon/src/MANIFEST.in | 2 + daemon/src/Makefile.am | 71 + daemon/src/myerr.h | 80 + daemon/src/netns.c | 110 + daemon/src/netns.h | 20 + daemon/src/netns_main.c | 127 + daemon/src/netnsmodule.c | 146 + daemon/src/setup.py | 30 + daemon/src/vcmd_main.c | 439 + daemon/src/vcmdmodule.c | 875 ++ daemon/src/version.h.in | 16 + daemon/src/vnode_chnl.c | 114 + daemon/src/vnode_chnl.h | 18 + daemon/src/vnode_client.c | 509 ++ daemon/src/vnode_client.h | 77 + daemon/src/vnode_cmd.c | 483 ++ daemon/src/vnode_cmd.h | 71 + daemon/src/vnode_io.c | 173 + daemon/src/vnode_io.h | 61 + daemon/src/vnode_msg.c | 262 + daemon/src/vnode_msg.h | 148 + daemon/src/vnode_server.c | 388 + daemon/src/vnode_server.h | 45 + daemon/src/vnode_tlv.h | 41 + daemon/src/vnoded_main.c | 227 + doc/Makefile.am | 159 + doc/conf.py.in | 256 + doc/constants.txt | 25 + doc/credits.rst | 26 + doc/devguide.rst | 331 + doc/emane.rst | 293 + doc/figures/Makefile.am | 54 + doc/figures/core-architecture.dia | Bin 0 -> 1829 bytes doc/figures/core-architecture.jpg | Bin 0 -> 38352 bytes doc/figures/core-workflow.dia | Bin 0 -> 2294 bytes doc/figures/core-workflow.jpg | Bin 0 -> 21243 bytes doc/index.rst | 32 + doc/install.rst | 756 ++ doc/intro.rst | 256 + doc/machine.rst | 91 + doc/man/Makefile.am | 37 + doc/man/core-cleanup.1 | 30 + doc/man/core-daemon.1 | 52 + doc/man/core-gui.1 | 38 + doc/man/core-xen-cleanup.1 | 28 + doc/man/coresendmsg.1 | 85 + doc/man/netns.1 | 30 + doc/man/vcmd.1 | 42 + doc/man/vnoded.1 | 44 + doc/ns3.rst | 314 + doc/performance.rst | 60 + doc/scripting.rst | 137 + doc/usage.rst | 1729 ++++ gui/Makefile.am | 70 + gui/addons/ipsecservice.tcl | 334 + gui/annotations.tcl | 842 ++ gui/api.tcl | 3178 ++++++++ gui/canvas.tcl | 411 + gui/cfgparse.tcl | 1152 +++ gui/configs/sample1-bg.gif | Bin 0 -> 319126 bytes gui/configs/sample1.imn | 510 ++ gui/configs/sample1.scen | 28 + gui/configs/sample10-kitchen-sink.imn | 848 ++ gui/configs/sample2-ssh.imn | 248 + gui/configs/sample3-bgp.imn | 754 ++ gui/configs/sample4-bg.jpg | Bin 0 -> 201030 bytes gui/configs/sample4-nrlsmf.imn | 537 ++ gui/configs/sample4.scen | 2791 +++++++ gui/configs/sample5-mgen.imn | 131 + gui/configs/sample6-emane-rfpipe.imn | 271 + gui/configs/sample7-emane-ieee80211abg.imn | 274 + gui/configs/sample8-ipsec-service.imn | 967 +++ gui/configs/sample9-vpn.imn | 850 ++ gui/core-bsd-cleanup.sh | 60 + gui/core-gui.in | 164 + gui/core.tcl | 280 + gui/debug.tcl | 54 + gui/editor.tcl | 5149 ++++++++++++ gui/exceptions.tcl | 209 + gui/exec.tcl | 857 ++ gui/filemgmt.tcl | 621 ++ gui/gpgui.tcl | 524 ++ gui/graph_partitioning.tcl | 1651 ++++ gui/help.tcl | 122 + gui/icons/Makefile.am | 111 + gui/icons/core-gui.desktop | 12 + gui/icons/core-gui.xpm | 294 + gui/icons/normal/antenna.gif | Bin 0 -> 230 bytes gui/icons/normal/ap.gif | Bin 0 -> 419 bytes gui/icons/normal/core-icon.png | Bin 0 -> 2931 bytes gui/icons/normal/core-icon.xbm | 14 + gui/icons/normal/core-logo-275x75.gif | Bin 0 -> 6118 bytes gui/icons/normal/document-properties.gif | Bin 0 -> 1162 bytes gui/icons/normal/gps-diagram.xbm | 116 + gui/icons/normal/host.gif | Bin 0 -> 1727 bytes gui/icons/normal/hub.gif | Bin 0 -> 719 bytes gui/icons/normal/lanswitch.gif | Bin 0 -> 744 bytes gui/icons/normal/mdr.gif | Bin 0 -> 1598 bytes gui/icons/normal/oval.gif | Bin 0 -> 174 bytes gui/icons/normal/pc.gif | Bin 0 -> 1854 bytes gui/icons/normal/rj45.gif | Bin 0 -> 755 bytes gui/icons/normal/router.gif | Bin 0 -> 1443 bytes gui/icons/normal/router_black.gif | Bin 0 -> 1406 bytes gui/icons/normal/router_green.gif | Bin 0 -> 1433 bytes gui/icons/normal/router_purple.gif | Bin 0 -> 1443 bytes gui/icons/normal/router_red.gif | Bin 0 -> 1432 bytes gui/icons/normal/router_yellow.gif | Bin 0 -> 1443 bytes gui/icons/normal/simple.xbm | 228 + gui/icons/normal/text.gif | Bin 0 -> 127 bytes gui/icons/normal/thumb-unknown.gif | Bin 0 -> 9517 bytes gui/icons/normal/tunnel.gif | Bin 0 -> 799 bytes gui/icons/normal/wlan.gif | Bin 0 -> 259 bytes gui/icons/normal/xen.gif | Bin 0 -> 1684 bytes gui/icons/svg/ap.svg | 270 + gui/icons/svg/cel.svg | 109 + gui/icons/svg/hub.svg | 197 + gui/icons/svg/lanswitch.svg | 190 + gui/icons/svg/mdr.svg | 178 + gui/icons/svg/otr.svg | 181 + gui/icons/svg/rj45.svg | 172 + gui/icons/svg/router.svg | 158 + gui/icons/svg/router_black.svg | 158 + gui/icons/svg/router_green.svg | 158 + gui/icons/svg/router_purple.svg | 158 + gui/icons/svg/router_red.svg | 158 + gui/icons/svg/router_yellow.svg | 158 + gui/icons/svg/start.svg | 215 + gui/icons/svg/tunnel.svg | 192 + gui/icons/svg/vlan.svg | 180 + gui/icons/svg/xen.svg | 181 + gui/icons/tiny/ap.gif | Bin 0 -> 667 bytes gui/icons/tiny/arrow.down.gif | Bin 0 -> 337 bytes gui/icons/tiny/arrow.gif | Bin 0 -> 54 bytes gui/icons/tiny/arrow.up.gif | Bin 0 -> 334 bytes gui/icons/tiny/blank.gif | Bin 0 -> 55 bytes gui/icons/tiny/button.play.gif | Bin 0 -> 915 bytes gui/icons/tiny/button.stop.gif | Bin 0 -> 922 bytes gui/icons/tiny/cel.gif | Bin 0 -> 666 bytes gui/icons/tiny/delete.gif | Bin 0 -> 137 bytes gui/icons/tiny/document-new.gif | Bin 0 -> 1054 bytes gui/icons/tiny/document-properties.gif | Bin 0 -> 635 bytes gui/icons/tiny/document-save.gif | Bin 0 -> 1049 bytes gui/icons/tiny/edit-delete.gif | Bin 0 -> 1006 bytes gui/icons/tiny/eraser.gif | Bin 0 -> 428 bytes gui/icons/tiny/fileopen.gif | Bin 0 -> 1095 bytes gui/icons/tiny/folder.gif | Bin 0 -> 1095 bytes gui/icons/tiny/host.gif | Bin 0 -> 1189 bytes gui/icons/tiny/hub.gif | Bin 0 -> 719 bytes gui/icons/tiny/lanswitch.gif | Bin 0 -> 744 bytes gui/icons/tiny/link.gif | Bin 0 -> 86 bytes gui/icons/tiny/marker.gif | Bin 0 -> 375 bytes gui/icons/tiny/mdr.gif | Bin 0 -> 1276 bytes gui/icons/tiny/mobility.gif | Bin 0 -> 167 bytes gui/icons/tiny/moboff.gif | Bin 0 -> 109 bytes gui/icons/tiny/observe.gif | Bin 0 -> 1149 bytes gui/icons/tiny/oval.gif | Bin 0 -> 174 bytes gui/icons/tiny/pc.gif | Bin 0 -> 1300 bytes gui/icons/tiny/ping.gif | Bin 0 -> 112 bytes gui/icons/tiny/plot.gif | Bin 0 -> 265 bytes gui/icons/tiny/rectangle.gif | Bin 0 -> 160 bytes gui/icons/tiny/rj45.gif | Bin 0 -> 755 bytes gui/icons/tiny/router.gif | Bin 0 -> 1152 bytes gui/icons/tiny/router_black.gif | Bin 0 -> 741 bytes gui/icons/tiny/router_green.gif | Bin 0 -> 753 bytes gui/icons/tiny/router_purple.gif | Bin 0 -> 1171 bytes gui/icons/tiny/router_red.gif | Bin 0 -> 1161 bytes gui/icons/tiny/router_yellow.gif | Bin 0 -> 1171 bytes gui/icons/tiny/run.gif | Bin 0 -> 324 bytes gui/icons/tiny/script_pause.gif | Bin 0 -> 117 bytes gui/icons/tiny/script_play.gif | Bin 0 -> 111 bytes gui/icons/tiny/script_stop.gif | Bin 0 -> 113 bytes gui/icons/tiny/select.gif | Bin 0 -> 925 bytes gui/icons/tiny/start.gif | Bin 0 -> 1131 bytes gui/icons/tiny/stock_connect.gif | Bin 0 -> 331 bytes gui/icons/tiny/stock_disconnect.gif | Bin 0 -> 214 bytes gui/icons/tiny/stop.gif | Bin 0 -> 1204 bytes gui/icons/tiny/text.gif | Bin 0 -> 127 bytes gui/icons/tiny/trace.gif | Bin 0 -> 151 bytes gui/icons/tiny/tunnel.gif | Bin 0 -> 799 bytes gui/icons/tiny/twonode.gif | Bin 0 -> 220 bytes gui/icons/tiny/view-refresh.gif | Bin 0 -> 592 bytes gui/icons/tiny/wlan.gif | Bin 0 -> 146 bytes gui/icons/tiny/xen.gif | Bin 0 -> 905 bytes gui/initgui.tcl | 816 ++ gui/ipv4.tcl | 386 + gui/ipv6.tcl | 471 ++ gui/linkcfg.tcl | 911 +++ gui/mobility.tcl | 563 ++ gui/nodecfg.tcl | 2023 +++++ gui/nodes.tcl | 726 ++ gui/ns2imunes.tcl | 399 + gui/plugins.tcl | 1560 ++++ gui/services.tcl | 1161 +++ gui/tooltips.tcl | 390 + gui/topogen.tcl | 382 + gui/traffic.tcl | 617 ++ gui/util.tcl | 1285 +++ gui/version.tcl.in | 10 + gui/widget.tcl | 2165 +++++ gui/wlan.tcl | 669 ++ gui/wlanscript.tcl | 209 + kernel/core-kernel-2.6.38/Makefile | 62 + kernel/core-kernel-2.6.38/README.txt | 9 + kernel/core-kernel-2.6.38/config.core | 1 + .../patches/00-linux-2.6.38.flow-cache.patch | 31 + .../patches/00-linux-2.6.38.ifindex.patch | 52 + .../patches/00-linux-2.6.38.nfnetlink.patch | 1662 ++++ kernel/core-kernel-3.0/Makefile | 62 + kernel/core-kernel-3.0/README.txt | 9 + kernel/core-kernel-3.0/config.core | 1 + .../patches/00-linux-3.0.flow-cache.patch | 49 + .../patches/00-linux-3.0.ifindex.patch | 51 + .../00-linux-3.0.nfnetlink_queue.patch | 351 + .../01-linux-3.0.nfnetlink_queue.patch | 516 ++ kernel/core-kernel-3.2/Makefile | 62 + kernel/core-kernel-3.2/README.txt | 8 + kernel/core-kernel-3.2/config.core | 1 + .../patches/00-linux-3.2.ifindex.patch | 60 + .../00-linux-3.2.nfnetlink_queue.patch | 351 + .../01-linux-3.2.nfnetlink_queue.patch | 544 ++ kernel/core-kernel-3.5/Makefile | 70 + kernel/core-kernel-3.5/config.core | 1 + .../core-kernel-3.5/patches/00-ifindex.patch | 60 + .../patches/00-nfnetlink_queue.patch | 351 + .../patches/01-nfnetlink_queue.patch | 494 ++ kernel/core-kernel-3.8/Makefile | 70 + kernel/core-kernel-3.8/config.core | 1 + .../core-kernel-3.8/patches/00-ifindex.patch | 29 + .../patches/00-nfnetlink_queue.patch | 307 + .../patches/01-nfnetlink_queue.patch | 475 ++ kernel/freebsd/4.11-R-CORE.diff | 7150 +++++++++++++++++ kernel/freebsd/README.txt | 24 + kernel/freebsd/freebsd7-config-CORE | 20 + kernel/freebsd/freebsd7-config-COREDEBUG | 22 + kernel/freebsd/freebsd8-config-CORE | 11 + kernel/freebsd/imunes-8.0-RELEASE.diff | 372 + kernel/freebsd/ng_pipe/Makefile | 27 + kernel/freebsd/ng_pipe/README | 21 + kernel/freebsd/ng_pipe/ng_pipe.c | 1170 +++ kernel/freebsd/ng_pipe/ng_pipe.h | 171 + kernel/freebsd/ng_pipe/ng_pipe_freebsd4.c | 1277 +++ kernel/freebsd/ng_wlan/Makefile | 27 + kernel/freebsd/ng_wlan/README | 50 + kernel/freebsd/ng_wlan/ng_wlan.c | 1315 +++ kernel/freebsd/ng_wlan/ng_wlan.h | 109 + kernel/freebsd/ng_wlan/ng_wlan_tag.h | 60 + kernel/freebsd/symlinks-8.1-RELEASE.diff | 78 + kernel/freebsd/vimage/Makefile | 14 + kernel/freebsd/vimage/vimage.8 | 195 + kernel/freebsd/vimage/vimage.c | 390 + kernel/freebsd/vimage_7-CORE.diff | 3077 +++++++ packaging/bsd/core-kernel-deinstall-4.11.sh | 7 + packaging/bsd/core-kernel-deinstall-8.x.sh | 21 + packaging/bsd/core-kernel-pkgcreate.sh | 96 + packaging/bsd/core-kernel-preinstall-4.11.sh | 18 + packaging/bsd/core-kernel-preinstall-8.x.sh | 27 + packaging/bsd/core-kernel.pkgdesc | 1 + packaging/bsd/core-kernel.pkgdesclong | 1 + packaging/bsd/core-pkgcreate.sh | 68 + packaging/bsd/core.pkgdesc | 1 + packaging/bsd/core.pkgdesclong | 3 + packaging/deb/changelog | 47 + packaging/deb/compat | 1 + packaging/deb/control | 27 + packaging/deb/copyright | 35 + packaging/deb/core-daemon.install.in | 22 + packaging/deb/core-gui.install.in | 11 + packaging/deb/core.postrm | 12 + packaging/deb/rules | 18 + packaging/rpm/core.spec.in | 365 + packaging/rpm/specfiles.sh | 41 + scripts/Makefile.am | 61 + scripts/core-daemon-init.d | 142 + scripts/core-daemon-init.d-SUSE | 264 + scripts/core-daemon-rc.d | 50 + scripts/core-daemon.service | 11 + scripts/perf/Makefile.am | 22 + scripts/perf/configuration_hook.sh | 6 + scripts/perf/datacollect_hook.sh | 7 + scripts/perf/perflogserver.conf | 37 + scripts/perf/perflogserver.py | 588 ++ scripts/perf/perflogstart.sh | 10 + scripts/perf/perflogstop.sh | 11 + scripts/perf/sessiondatacollect.sh | 52 + scripts/perf/timesyncstart.sh | 26 + scripts/perf/timesyncstop.sh | 51 + scripts/xen/Makefile.am | 15 + scripts/xen/vif-core | 48 + 394 files changed, 99738 insertions(+) create mode 100644 Changelog create mode 100644 LICENSE create mode 100644 Makefile.am create mode 100644 README create mode 100644 README-Xen create mode 100755 bootstrap.sh create mode 100644 configure.ac create mode 100644 daemon/CORE.e4p create mode 100644 daemon/MANIFEST.in create mode 100755 daemon/Makefile.am create mode 100644 daemon/core/__init__.py create mode 100644 daemon/core/addons/__init__.py create mode 100644 daemon/core/api/__init__.py create mode 100644 daemon/core/api/coreapi.py create mode 100644 daemon/core/api/data.py create mode 100644 daemon/core/broker.py create mode 100644 daemon/core/bsd/__init__.py create mode 100644 daemon/core/bsd/netgraph.py create mode 100644 daemon/core/bsd/nodes.py create mode 100644 daemon/core/bsd/vnet.py create mode 100644 daemon/core/bsd/vnode.py create mode 100644 daemon/core/conf.py create mode 100644 daemon/core/constants.py.in create mode 100644 daemon/core/coreobj.py create mode 100644 daemon/core/emane/__init__.py create mode 100644 daemon/core/emane/bypass.py create mode 100755 daemon/core/emane/commeffect.py create mode 100644 daemon/core/emane/emane.py create mode 100644 daemon/core/emane/ieee80211abg.py create mode 100644 daemon/core/emane/nodes.py create mode 100644 daemon/core/emane/rfpipe.py create mode 100644 daemon/core/emane/universal.py create mode 100644 daemon/core/location.py create mode 100755 daemon/core/misc/LatLongUTMconversion.py create mode 100644 daemon/core/misc/__init__.py create mode 100644 daemon/core/misc/event.py create mode 100644 daemon/core/misc/ipaddr.py create mode 100644 daemon/core/misc/quagga.py create mode 100644 daemon/core/misc/utils.py create mode 100644 daemon/core/misc/utm.py create mode 100644 daemon/core/misc/xmlutils.py create mode 100644 daemon/core/mobility.py create mode 100644 daemon/core/netns/__init__.py create mode 100644 daemon/core/netns/nodes.py create mode 100644 daemon/core/netns/vif.py create mode 100644 daemon/core/netns/vnet.py create mode 100644 daemon/core/netns/vnode.py create mode 100644 daemon/core/netns/vnodeclient.py create mode 100644 daemon/core/phys/__init__.py create mode 100644 daemon/core/phys/pnodes.py create mode 100644 daemon/core/pycore.py create mode 100644 daemon/core/sdt.py create mode 100644 daemon/core/service.py create mode 100644 daemon/core/services/__init__.py create mode 100644 daemon/core/services/bird.py create mode 100644 daemon/core/services/nrl.py create mode 100644 daemon/core/services/quagga.py create mode 100644 daemon/core/services/security.py create mode 100755 daemon/core/services/ucarp.py create mode 100644 daemon/core/services/utility.py create mode 100644 daemon/core/services/xorp.py create mode 100644 daemon/core/session.py create mode 100644 daemon/core/xen/__init__.py create mode 100644 daemon/core/xen/xen.py create mode 100644 daemon/core/xen/xenconfig.py create mode 100644 daemon/data/core.conf create mode 100644 daemon/data/xen.conf create mode 100644 daemon/doc/Makefile.am create mode 100644 daemon/doc/conf.py.in create mode 100644 daemon/examples/controlnet_updown create mode 100755 daemon/examples/emanemodel2core.py create mode 100755 daemon/examples/findcore.py create mode 100644 daemon/examples/myservices/README.txt create mode 100644 daemon/examples/myservices/__init__.py create mode 100644 daemon/examples/myservices/sample.py create mode 100755 daemon/examples/netns/basicrange.py create mode 100755 daemon/examples/netns/emane80211.py create mode 100755 daemon/examples/netns/howmanynodes.py create mode 100755 daemon/examples/netns/iperf-performance-chain.py create mode 100755 daemon/examples/netns/iperf-performance.sh create mode 100755 daemon/examples/netns/ospfmanetmdrtest.py create mode 100755 daemon/examples/netns/switch.py create mode 100755 daemon/examples/netns/switchtest.py create mode 100755 daemon/examples/netns/twonodes.sh create mode 100755 daemon/examples/netns/wlanemanetests.py create mode 100755 daemon/examples/netns/wlantest.py create mode 100644 daemon/examples/services/sampleFirewall create mode 100644 daemon/examples/services/sampleIPsec create mode 100644 daemon/examples/services/sampleVPNClient create mode 100644 daemon/examples/services/sampleVPNServer create mode 100755 daemon/examples/stopsession.py create mode 100644 daemon/ns3/LICENSE create mode 100755 daemon/ns3/Makefile.am create mode 100644 daemon/ns3/corens3/__init__.py create mode 100644 daemon/ns3/corens3/constants.py.in create mode 100644 daemon/ns3/corens3/obj.py create mode 100755 daemon/ns3/examples/ns3lte.py create mode 100755 daemon/ns3/examples/ns3wifi.py create mode 100755 daemon/ns3/examples/ns3wifirandomwalk.py create mode 100755 daemon/ns3/examples/ns3wimax.py create mode 100644 daemon/ns3/setup.py create mode 100755 daemon/sbin/core-cleanup create mode 100755 daemon/sbin/core-daemon create mode 100755 daemon/sbin/core-xen-cleanup create mode 100755 daemon/sbin/coresendmsg create mode 100644 daemon/setup.py create mode 100644 daemon/src/MANIFEST.in create mode 100755 daemon/src/Makefile.am create mode 100644 daemon/src/myerr.h create mode 100644 daemon/src/netns.c create mode 100644 daemon/src/netns.h create mode 100644 daemon/src/netns_main.c create mode 100644 daemon/src/netnsmodule.c create mode 100644 daemon/src/setup.py create mode 100644 daemon/src/vcmd_main.c create mode 100644 daemon/src/vcmdmodule.c create mode 100644 daemon/src/version.h.in create mode 100644 daemon/src/vnode_chnl.c create mode 100644 daemon/src/vnode_chnl.h create mode 100644 daemon/src/vnode_client.c create mode 100644 daemon/src/vnode_client.h create mode 100644 daemon/src/vnode_cmd.c create mode 100644 daemon/src/vnode_cmd.h create mode 100644 daemon/src/vnode_io.c create mode 100644 daemon/src/vnode_io.h create mode 100644 daemon/src/vnode_msg.c create mode 100644 daemon/src/vnode_msg.h create mode 100644 daemon/src/vnode_server.c create mode 100644 daemon/src/vnode_server.h create mode 100644 daemon/src/vnode_tlv.h create mode 100644 daemon/src/vnoded_main.c create mode 100644 doc/Makefile.am create mode 100644 doc/conf.py.in create mode 100644 doc/constants.txt create mode 100644 doc/credits.rst create mode 100644 doc/devguide.rst create mode 100644 doc/emane.rst create mode 100644 doc/figures/Makefile.am create mode 100644 doc/figures/core-architecture.dia create mode 100644 doc/figures/core-architecture.jpg create mode 100644 doc/figures/core-workflow.dia create mode 100644 doc/figures/core-workflow.jpg create mode 100644 doc/index.rst create mode 100644 doc/install.rst create mode 100644 doc/intro.rst create mode 100644 doc/machine.rst create mode 100755 doc/man/Makefile.am create mode 100644 doc/man/core-cleanup.1 create mode 100644 doc/man/core-daemon.1 create mode 100644 doc/man/core-gui.1 create mode 100644 doc/man/core-xen-cleanup.1 create mode 100644 doc/man/coresendmsg.1 create mode 100644 doc/man/netns.1 create mode 100644 doc/man/vcmd.1 create mode 100644 doc/man/vnoded.1 create mode 100644 doc/ns3.rst create mode 100644 doc/performance.rst create mode 100644 doc/scripting.rst create mode 100644 doc/usage.rst create mode 100755 gui/Makefile.am create mode 100644 gui/addons/ipsecservice.tcl create mode 100644 gui/annotations.tcl create mode 100755 gui/api.tcl create mode 100755 gui/canvas.tcl create mode 100755 gui/cfgparse.tcl create mode 100644 gui/configs/sample1-bg.gif create mode 100644 gui/configs/sample1.imn create mode 100644 gui/configs/sample1.scen create mode 100644 gui/configs/sample10-kitchen-sink.imn create mode 100644 gui/configs/sample2-ssh.imn create mode 100644 gui/configs/sample3-bgp.imn create mode 100644 gui/configs/sample4-bg.jpg create mode 100644 gui/configs/sample4-nrlsmf.imn create mode 100644 gui/configs/sample4.scen create mode 100644 gui/configs/sample5-mgen.imn create mode 100644 gui/configs/sample6-emane-rfpipe.imn create mode 100644 gui/configs/sample7-emane-ieee80211abg.imn create mode 100644 gui/configs/sample8-ipsec-service.imn create mode 100644 gui/configs/sample9-vpn.imn create mode 100755 gui/core-bsd-cleanup.sh create mode 100755 gui/core-gui.in create mode 100755 gui/core.tcl create mode 100644 gui/debug.tcl create mode 100755 gui/editor.tcl create mode 100644 gui/exceptions.tcl create mode 100755 gui/exec.tcl create mode 100755 gui/filemgmt.tcl create mode 100644 gui/gpgui.tcl create mode 100644 gui/graph_partitioning.tcl create mode 100755 gui/help.tcl create mode 100755 gui/icons/Makefile.am create mode 100644 gui/icons/core-gui.desktop create mode 100644 gui/icons/core-gui.xpm create mode 100755 gui/icons/normal/antenna.gif create mode 100755 gui/icons/normal/ap.gif create mode 100644 gui/icons/normal/core-icon.png create mode 100644 gui/icons/normal/core-icon.xbm create mode 100644 gui/icons/normal/core-logo-275x75.gif create mode 100644 gui/icons/normal/document-properties.gif create mode 100755 gui/icons/normal/gps-diagram.xbm create mode 100644 gui/icons/normal/host.gif create mode 100644 gui/icons/normal/hub.gif create mode 100644 gui/icons/normal/lanswitch.gif create mode 100755 gui/icons/normal/mdr.gif create mode 100644 gui/icons/normal/oval.gif create mode 100644 gui/icons/normal/pc.gif create mode 100644 gui/icons/normal/rj45.gif create mode 100644 gui/icons/normal/router.gif create mode 100644 gui/icons/normal/router_black.gif create mode 100644 gui/icons/normal/router_green.gif create mode 100755 gui/icons/normal/router_purple.gif create mode 100644 gui/icons/normal/router_red.gif create mode 100755 gui/icons/normal/router_yellow.gif create mode 100644 gui/icons/normal/simple.xbm create mode 100644 gui/icons/normal/text.gif create mode 100644 gui/icons/normal/thumb-unknown.gif create mode 100644 gui/icons/normal/tunnel.gif create mode 100644 gui/icons/normal/wlan.gif create mode 100755 gui/icons/normal/xen.gif create mode 100644 gui/icons/svg/ap.svg create mode 100644 gui/icons/svg/cel.svg create mode 100644 gui/icons/svg/hub.svg create mode 100644 gui/icons/svg/lanswitch.svg create mode 100644 gui/icons/svg/mdr.svg create mode 100644 gui/icons/svg/otr.svg create mode 100644 gui/icons/svg/rj45.svg create mode 100644 gui/icons/svg/router.svg create mode 100644 gui/icons/svg/router_black.svg create mode 100644 gui/icons/svg/router_green.svg create mode 100644 gui/icons/svg/router_purple.svg create mode 100644 gui/icons/svg/router_red.svg create mode 100644 gui/icons/svg/router_yellow.svg create mode 100644 gui/icons/svg/start.svg create mode 100644 gui/icons/svg/tunnel.svg create mode 100644 gui/icons/svg/vlan.svg create mode 100644 gui/icons/svg/xen.svg create mode 100755 gui/icons/tiny/ap.gif create mode 100644 gui/icons/tiny/arrow.down.gif create mode 100644 gui/icons/tiny/arrow.gif create mode 100644 gui/icons/tiny/arrow.up.gif create mode 100644 gui/icons/tiny/blank.gif create mode 100644 gui/icons/tiny/button.play.gif create mode 100644 gui/icons/tiny/button.stop.gif create mode 100755 gui/icons/tiny/cel.gif create mode 100644 gui/icons/tiny/delete.gif create mode 100644 gui/icons/tiny/document-new.gif create mode 100644 gui/icons/tiny/document-properties.gif create mode 100644 gui/icons/tiny/document-save.gif create mode 100644 gui/icons/tiny/edit-delete.gif create mode 100755 gui/icons/tiny/eraser.gif create mode 100644 gui/icons/tiny/fileopen.gif create mode 100644 gui/icons/tiny/folder.gif create mode 100644 gui/icons/tiny/host.gif create mode 100644 gui/icons/tiny/hub.gif create mode 100644 gui/icons/tiny/lanswitch.gif create mode 100644 gui/icons/tiny/link.gif create mode 100644 gui/icons/tiny/marker.gif create mode 100755 gui/icons/tiny/mdr.gif create mode 100644 gui/icons/tiny/mobility.gif create mode 100644 gui/icons/tiny/moboff.gif create mode 100755 gui/icons/tiny/observe.gif create mode 100644 gui/icons/tiny/oval.gif create mode 100644 gui/icons/tiny/pc.gif create mode 100644 gui/icons/tiny/ping.gif create mode 100755 gui/icons/tiny/plot.gif create mode 100644 gui/icons/tiny/rectangle.gif create mode 100644 gui/icons/tiny/rj45.gif create mode 100644 gui/icons/tiny/router.gif create mode 100755 gui/icons/tiny/router_black.gif create mode 100755 gui/icons/tiny/router_green.gif create mode 100755 gui/icons/tiny/router_purple.gif create mode 100755 gui/icons/tiny/router_red.gif create mode 100755 gui/icons/tiny/router_yellow.gif create mode 100644 gui/icons/tiny/run.gif create mode 100755 gui/icons/tiny/script_pause.gif create mode 100755 gui/icons/tiny/script_play.gif create mode 100755 gui/icons/tiny/script_stop.gif create mode 100644 gui/icons/tiny/select.gif create mode 100644 gui/icons/tiny/start.gif create mode 100644 gui/icons/tiny/stock_connect.gif create mode 100644 gui/icons/tiny/stock_disconnect.gif create mode 100644 gui/icons/tiny/stop.gif create mode 100644 gui/icons/tiny/text.gif create mode 100644 gui/icons/tiny/trace.gif create mode 100644 gui/icons/tiny/tunnel.gif create mode 100644 gui/icons/tiny/twonode.gif create mode 100644 gui/icons/tiny/view-refresh.gif create mode 100644 gui/icons/tiny/wlan.gif create mode 100755 gui/icons/tiny/xen.gif create mode 100755 gui/initgui.tcl create mode 100755 gui/ipv4.tcl create mode 100755 gui/ipv6.tcl create mode 100755 gui/linkcfg.tcl create mode 100755 gui/mobility.tcl create mode 100755 gui/nodecfg.tcl create mode 100644 gui/nodes.tcl create mode 100755 gui/ns2imunes.tcl create mode 100644 gui/plugins.tcl create mode 100644 gui/services.tcl create mode 100755 gui/tooltips.tcl create mode 100644 gui/topogen.tcl create mode 100644 gui/traffic.tcl create mode 100644 gui/util.tcl create mode 100644 gui/version.tcl.in create mode 100755 gui/widget.tcl create mode 100755 gui/wlan.tcl create mode 100755 gui/wlanscript.tcl create mode 100644 kernel/core-kernel-2.6.38/Makefile create mode 100644 kernel/core-kernel-2.6.38/README.txt create mode 100644 kernel/core-kernel-2.6.38/config.core create mode 100644 kernel/core-kernel-2.6.38/patches/00-linux-2.6.38.flow-cache.patch create mode 100644 kernel/core-kernel-2.6.38/patches/00-linux-2.6.38.ifindex.patch create mode 100644 kernel/core-kernel-2.6.38/patches/00-linux-2.6.38.nfnetlink.patch create mode 100644 kernel/core-kernel-3.0/Makefile create mode 100644 kernel/core-kernel-3.0/README.txt create mode 100644 kernel/core-kernel-3.0/config.core create mode 100644 kernel/core-kernel-3.0/patches/00-linux-3.0.flow-cache.patch create mode 100644 kernel/core-kernel-3.0/patches/00-linux-3.0.ifindex.patch create mode 100644 kernel/core-kernel-3.0/patches/00-linux-3.0.nfnetlink_queue.patch create mode 100644 kernel/core-kernel-3.0/patches/01-linux-3.0.nfnetlink_queue.patch create mode 100644 kernel/core-kernel-3.2/Makefile create mode 100644 kernel/core-kernel-3.2/README.txt create mode 100644 kernel/core-kernel-3.2/config.core create mode 100644 kernel/core-kernel-3.2/patches/00-linux-3.2.ifindex.patch create mode 100644 kernel/core-kernel-3.2/patches/00-linux-3.2.nfnetlink_queue.patch create mode 100644 kernel/core-kernel-3.2/patches/01-linux-3.2.nfnetlink_queue.patch create mode 100644 kernel/core-kernel-3.5/Makefile create mode 100644 kernel/core-kernel-3.5/config.core create mode 100644 kernel/core-kernel-3.5/patches/00-ifindex.patch create mode 100644 kernel/core-kernel-3.5/patches/00-nfnetlink_queue.patch create mode 100644 kernel/core-kernel-3.5/patches/01-nfnetlink_queue.patch create mode 100644 kernel/core-kernel-3.8/Makefile create mode 100644 kernel/core-kernel-3.8/config.core create mode 100644 kernel/core-kernel-3.8/patches/00-ifindex.patch create mode 100644 kernel/core-kernel-3.8/patches/00-nfnetlink_queue.patch create mode 100644 kernel/core-kernel-3.8/patches/01-nfnetlink_queue.patch create mode 100644 kernel/freebsd/4.11-R-CORE.diff create mode 100644 kernel/freebsd/README.txt create mode 100644 kernel/freebsd/freebsd7-config-CORE create mode 100644 kernel/freebsd/freebsd7-config-COREDEBUG create mode 100644 kernel/freebsd/freebsd8-config-CORE create mode 100644 kernel/freebsd/imunes-8.0-RELEASE.diff create mode 100644 kernel/freebsd/ng_pipe/Makefile create mode 100644 kernel/freebsd/ng_pipe/README create mode 100644 kernel/freebsd/ng_pipe/ng_pipe.c create mode 100644 kernel/freebsd/ng_pipe/ng_pipe.h create mode 100644 kernel/freebsd/ng_pipe/ng_pipe_freebsd4.c create mode 100644 kernel/freebsd/ng_wlan/Makefile create mode 100644 kernel/freebsd/ng_wlan/README create mode 100644 kernel/freebsd/ng_wlan/ng_wlan.c create mode 100644 kernel/freebsd/ng_wlan/ng_wlan.h create mode 100644 kernel/freebsd/ng_wlan/ng_wlan_tag.h create mode 100644 kernel/freebsd/symlinks-8.1-RELEASE.diff create mode 100644 kernel/freebsd/vimage/Makefile create mode 100644 kernel/freebsd/vimage/vimage.8 create mode 100644 kernel/freebsd/vimage/vimage.c create mode 100644 kernel/freebsd/vimage_7-CORE.diff create mode 100755 packaging/bsd/core-kernel-deinstall-4.11.sh create mode 100755 packaging/bsd/core-kernel-deinstall-8.x.sh create mode 100755 packaging/bsd/core-kernel-pkgcreate.sh create mode 100755 packaging/bsd/core-kernel-preinstall-4.11.sh create mode 100755 packaging/bsd/core-kernel-preinstall-8.x.sh create mode 100644 packaging/bsd/core-kernel.pkgdesc create mode 100644 packaging/bsd/core-kernel.pkgdesclong create mode 100755 packaging/bsd/core-pkgcreate.sh create mode 100644 packaging/bsd/core.pkgdesc create mode 100644 packaging/bsd/core.pkgdesclong create mode 100644 packaging/deb/changelog create mode 100644 packaging/deb/compat create mode 100644 packaging/deb/control create mode 100644 packaging/deb/copyright create mode 100644 packaging/deb/core-daemon.install.in create mode 100644 packaging/deb/core-gui.install.in create mode 100644 packaging/deb/core.postrm create mode 100755 packaging/deb/rules create mode 100644 packaging/rpm/core.spec.in create mode 100755 packaging/rpm/specfiles.sh create mode 100755 scripts/Makefile.am create mode 100755 scripts/core-daemon-init.d create mode 100755 scripts/core-daemon-init.d-SUSE create mode 100755 scripts/core-daemon-rc.d create mode 100644 scripts/core-daemon.service create mode 100755 scripts/perf/Makefile.am create mode 100644 scripts/perf/configuration_hook.sh create mode 100644 scripts/perf/datacollect_hook.sh create mode 100644 scripts/perf/perflogserver.conf create mode 100755 scripts/perf/perflogserver.py create mode 100644 scripts/perf/perflogstart.sh create mode 100644 scripts/perf/perflogstop.sh create mode 100644 scripts/perf/sessiondatacollect.sh create mode 100644 scripts/perf/timesyncstart.sh create mode 100644 scripts/perf/timesyncstop.sh create mode 100755 scripts/xen/Makefile.am create mode 100755 scripts/xen/vif-core diff --git a/Changelog b/Changelog new file mode 100644 index 00000000..9d116ad7 --- /dev/null +++ b/Changelog @@ -0,0 +1,194 @@ +2013-08-12 CORE 4.6 + + * NOTE: cored is now core-daemon, and core is now core-gui (for Debian + acceptance) + * NOTE: /etc/init.d/core is now /etc/init.d/core-daemon (for insserv + compatibility) + * EMANE: + - don't start EMANE locally if no local NEMs + - EMANE poststartup() to re-transmit location events during initialization + - added debug port to EMANE options + - added a basic EMANE 802.11 CORE Python script example + - expose transport XML block generation to EmaneModels + - expose NEM entry to the EmaneModel so it can be overridden by a model + - add the control interface bridge prior to starting EMANE, as some models may + - depend on the controlnet functionality + - added EMANE model to CORE converter + - parse lat/long/alt from node messages, for moving nodes using command-line + - fix bug #196 incorrect distance when traversing UTM zones + + * GUI: + - added Cut, Copy, and Paste options to the Edit menu + - paste will copy selected services and take care of node and interface + - renumbering + - implement Edit > Find dialog for searching nodes and links + - when copying existing file for a service, perform string replacement of: + - "~", "%SESSION%", "%SESSION_DIR%", "%SESSION_USER%", "%NODE%", "%NODENAME%" + - use CORE_DATA_DIR insteadof LIBDIR + - fix Adjacency Widget to work with OSPFv2 only networks + + * BUILD: + - build/packaging improvements for inclusion on Debian + - fix error when running scenario with a mobility script in batch mode + - include Linux kernel patches for 3.8 + - renamed core-cleanup.sh to core-cleanup for Debian conformance + - don't always generate man pages from Makefile; new manpages for + coresendmsg and core-daemon + + * BUGFIXES: + - don't auto-assign IPv4/IPv6 addresses when none received in Link Messages (session reconnect) + - fixed lock view + - fix GUI spinbox errors for Tk 8.5.8 (RHEL/CentOS 6.2) + - fix broker node count for distributed session entering the RUNTIME state when + - (non-EMANE) WLANs or GreTapBridges are involved; + - fix "file exists" error message when distributed session number is re-used + - and servers file is written + - fix bug #194 configuration dialog too long, make dialog scrollable/resizable + - allow float values for loss and duplicates percent + - fix the following bugs: 166, 172, 177, 178, 192, 194, 196, 201, 206, 210, 212, 213, 214, 221 + +2013-04-13 CORE 4.5 + + * GUI: + - improved behavior when starting GUI without daemon, or using File New after connection with daemon is lost + - fix various GUI issues when reconnecting to a session + - support 3D GUI via output to SDT3D + - added "Execute Python script..." entry to the File Menu + - support user-defined terminal program instead of hard-coded xterm + - added session options for "enable RJ45s", "preserve session dir" + - added buttons to the IP Addresses dialog for removing all/selected IPv4/IPv6 + - allow sessions with multiple canvases to enter RUNTIME state + - added "--addons" startup mode to pass control to code included from addons dir + - added "Locked" entry to View menu to prevent moving items + - use currently selected node type when invoking a topology generator + - updated throughput plots with resizing, color picker, plot labels, locked scales, and save/load plot configuration with imn file + - improved session dialog + * EMANE: + - EMANE 0.8.1 support with backwards-compatibility for 0.7.4 + - extend CommEffect model to generate CommEffect events upon receipt of Link Messages having link effects + * Services: + - updated FTP service with root directory for anonymous users + - added HTTP, PCAP, BIRD, RADVD, and Babel services + - support copying existing files instead of always generating them + - added "Services..." entry to node right-click menu + - added "View" button for side-by-side comparison when copying customized config files + - updated Quagga daemons to wait for zebra.vty VTY file before starting + * General: + - XML import and export + - renamed "cored.py" to "cored", "coresendmsg.py" to "coresendmsg" + - code reorganization and clean-up + - updated XML export to write NetworkPlan, MotionPlan, and ServicePlan within a Scenario tag, added new "Save As XML..." File menu entry + - added script_start/pause/stop options to Ns2ScriptedMobility + - "python" source sub-directory renamed to "daemon" + - added "cored -e" option to execute a Python script, adding its session to the active sessions list, allowing for GUI connection + - support comma-separated list for custom_services_dir in core.conf file + - updated kernel patches for Linux kernel 3.5 + - support RFC 6164-style IPv6 /127 addressing + * ns-3: + - integrate ns-3 node location between CORE and ns-3 simulation + - added ns-3 random walk mobility example + - updated ns-3 Wifi example to allow GUI connection and moving of nodes + * fixed the following bugs: 54, 103, 111, 136, 145, 153, 157, 160, 161, 162, 164, 165, 168, 170, 171, 173, 174, 176, 184, 190, 193 + +2012-09-25 CORE 4.4 + + * GUI: + - real-time bandwidth plotting tool + - added Wireshark and tshark right-click menu items + - X,Y coordinates shown in the status bar + - updated GUI attribute option to link messages for changing color/width/dash + - added sample IPsec and VPN scenarios, how many nodes script + - added jitter parameter to WLANs + - renamed Experiment menu to Session menu, added session options + - use 'key=value' configuration for services, EMANE models, WLAN models, etc. + - save only service values that have been customized + - copy service parameters from one customized service to another + - right-click menu to start/stop/restart each service + * EMANE: + - EMANE 0.7.4 support + - added support for EMANE CommEffect model and Comm Effect controller GUI + - added support for EMANE Raw Transport when using RJ45 devices + * Services: + - improved service customization; allow a service to define custom Tcl tab + - added vtysh.conf for Quagga service to support 'write mem' + - support scheduled events and services that start N seconds after runtime + - added UCARP service + * Documentation: + - converted the CORE manual to reStructuredText using Sphinx; added Python docs + * General: + - Python code reorganization + - improved cored.py thread locking + - merged xen branch into trunk + - added an event queue to a session with notion of time zero + - added UDP support to cored.py + - use UDP by default in coresendmsg.py; added '-H' option to print examples + - enter a bash shell by default when running vcmd with no arguments + - fixes to distributed emulation entering runtime state + - write 'nodes' file upon session startup + - make session number and other attributes available in environment + - support /etc/core/environment and ~/.core/environment files + - added Ns2ScriptedMobility model to Python, removed from the GUI + - namespace nodes mount a private /sys + + - fixed the following bugs: 80, 81, 84, 99, 104, 109, 110, 122, 124, 131, 133, 134, 135, 137, 140, 143, 144, 146, 147, 151, 154, 155 + +2012-03-07 CORE 4.3 + + * EMANE 0.7.2 and 0.7.3 support + * hook scripts: customize actions at any of six different session states + * Check Emulation Light (CEL) exception feedback system + * added FTP and XORP services, and service validate commands + * services can flag when customization is required + * Python classes to support ns-3 simulation experiments + * write state, node X,Y position, and servers to pycore session dir + * removed over 9,000 lines of unused GUI code + * performance monitoring script + * batch mode improvements and --closebatch option + * export session to EmulationScript XML files + * basic range model moved from GUI to Python, supports 3D coordinates + * improved WLAN dialog with tabs + * added PhysicalNode class for joining real nodes with emulated networks + * fixed the following bugs: 50, 75, 76, 79, 82, 83, 85, 86, 89, 90, 92, 94, 96, 98, 100, 112, 113, 116, 119, 120 + +2011-08-19 CORE 4.2 + + * EMANE 0.7.1 support + - support for Bypass model, Universal PHY, logging, realtime + * configurable MAC addresses + * control interfaces (backchannel between node and host) + * service customization dialog improved (tabbed) + * new testing scripts for MDR and EMANE performance testing + * improved upgrading of old imn files + * new coresendmsg.py utility (deprecates libcoreapi and coreapisend) + * new security services, custom service becomes UserDefined + * new services and Python scripting chapters in manual + * fixes to distributed emulation, linking tunnels/RJ45s with WLANs/hubs/switches + * fixed the following bugs: 18, 32, 34, 38, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 52, 53, 55, 57, 58, 60, 62, 64, 65, 66, 68, 71, 72, 74 + +2011-01-05 CORE 4.1 + * new icons for toolbars and nodes + * node services introduced, node models deprecated + * customizable node types + * traffic flow editor with MGEN support + * user configs moved from /etc/core/`*` to ~/.core/ + * allocate addresses from custom IPv4/IPv6 prefixes + * distributed emulation using GRE tunnels + * FreeBSD 8.1 now uses cored.py + * EMANE 0.6.4 support + * numerous bugfixes + +2010-08-17 CORE 4.0 + * Python framework with Linux network namespace (netns) support (Linux netns is now the primary supported platform) + * ability to close the GUI and later reconnect to a running session (netns only) + * EMANE integration (netns only) + * new topology generators, host file generator + * user-editable Observer Widgets + * use of /etc/core instead of /usr/local/etc/core + * various bugfixes + +2009-09-15 CORE 3.5 + +2009-06-23 CORE 3.4 + +2009-03-11 CORE 3.3 + diff --git a/LICENSE b/LICENSE new file mode 100644 index 00000000..3f375917 --- /dev/null +++ b/LICENSE @@ -0,0 +1,22 @@ +Copyright (c) 2005-2013, the Boeing Company. + +Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions are met: + +1. Redistributions of source code must retain the above copyright notice, + this list of conditions and the following disclaimer. +2. Redistributions in binary form must reproduce the above copyright notice, + this list of conditions and the following disclaimer in the documentation + and/or other materials provided with the distribution. + +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" +AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE +LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR +CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS +INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN +CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) +ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF +THE POSSIBILITY OF SUCH DAMAGE. diff --git a/Makefile.am b/Makefile.am new file mode 100644 index 00000000..96f498d9 --- /dev/null +++ b/Makefile.am @@ -0,0 +1,71 @@ +# CORE +# (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +# Top-level Makefile for CORE project. +# + +if WANT_DOCS + DOCS = doc +endif +if WANT_GUI + GUI = gui +endif +if WANT_DAEMON + DAEMON = scripts daemon +endif + +# keep docs last due to dependencies on binaries +SUBDIRS = ${GUI} ${DAEMON} ${DOCS} + +ACLOCAL_AMFLAGS = -I config + +# extra files to include with distribution tarball +EXTRA_DIST = bootstrap.sh LICENSE README-Xen Changelog kernel \ + packaging/bsd \ + packaging/deb/compat \ + packaging/deb/copyright \ + packaging/deb/changelog \ + packaging/deb/core.postrm \ + packaging/deb/rules \ + packaging/deb/control \ + packaging/deb/core-daemon.install.in \ + packaging/deb/core-gui.install.in \ + packaging/rpm/core.spec.in \ + packaging/rpm/specfiles.sh + +DISTCLEAN_TARGETS = aclocal.m4 config.h.in + +# extra cruft to remove +DISTCLEANFILES = aclocal.m4 config.h.in configure Makefile.in + +# don't include svn dirs in source tarball +dist-hook: + rm -rf `find $(distdir)/kernel -name .svn` + rm -rf $(distdir)/packaging/bsd/.svn + +# build a source RPM using Fedora ~/rpmbuild dirs +.PHONY: rpm +rpm: + rpmdev-setuptree + cp -afv core-*.tar.gz ~/rpmbuild/SOURCES + cp -afv packaging/rpm/core.spec ~/rpmbuild/SPECS + rpmbuild -bs ~/rpmbuild/SPECS/core.spec + +# build a Ubuntu deb package using CDBS +.PHONY: deb +deb: + rm -rf debian + mkdir -p debian + cp -vf packaging/deb/* debian/ + @echo "First create source archive with: dpkg-source -b core-4.5" + @echo "Then build with: pbuilder-dist precise i386 build core*.dsc" + +.PHONY: core-restart +core-restart: + /etc/init.d/core-daemon stop + daemon/sbin/core-cleanup + rm -f /var/log/core-daemon.log + /etc/init.d/core-daemon start diff --git a/README b/README new file mode 100644 index 00000000..5f08b620 --- /dev/null +++ b/README @@ -0,0 +1,61 @@ + +CORE: Common Open Research Emulator +Copyright (c)2005-2013 the Boeing Company. +See the LICENSE file included in this distribution. + +== ABOUT ======================================================================= +CORE is a tool for emulating networks using a GUI or Python scripts. The CORE +project site (1) is a good source of introductory information, with a manual, +screenshots, and demos about this software. Also a supplemental +Google Code page (2) hosts a wiki, blog, bug tracker, and quickstart guide. + + 1. http://cs.itd.nrl.navy.mil/work/core/ + 2. http://code.google.com/p/coreemu/ + + +== BUILDING CORE =============================================================== + +To build this software you should use: + + ./bootstrap.sh + ./configure + make + sudo make install + +Here is what is installed with 'make install': + + /usr/local/bin/core-gui + /usr/local/sbin/core-daemon + /usr/local/sbin/[vcmd, vnoded, coresendmsg, core-cleanup.sh] + /usr/local/lib/core/* + /usr/local/share/core/* + /usr/local/lib/python2.6/dist-packages/core/* + /usr/local/lib/python2.6/dist-packages/[netns,vcmd].so + /etc/core/* + /etc/init.d/core + +See the manual for the software required for building CORE. + + +== RUNNING CORE ================================================================ + +First start the CORE services: + + sudo /etc/init.d/core-daemon start + +This automatically runs the core-daemon program. +Assuming the GUI is in your PATH, run the CORE GUI by typing the following: + + core-gui + +This launches the CORE GUI. You do not need to run the GUI as root. + +== SUPPORT ===================================================================== + +If you have questions, comments, or trouble, please use the CORE mailing lists: +- core-users for general comments and questions + http://pf.itd.nrl.navy.mil/mailman/listinfo/core-users +- core-dev for bugs, compile errors, and other development issues + http://pf.itd.nrl.navy.mil/mailman/listinfo/core-dev + + diff --git a/README-Xen b/README-Xen new file mode 100644 index 00000000..80b742ba --- /dev/null +++ b/README-Xen @@ -0,0 +1,87 @@ +CORE Xen README + +This file describes the xen branch of the CORE development tree which enables +machines based on Xen domUs. When you edit node types, you are given the option +of changing the machine type (netns, physical, or xen) and the profile for +each node type. + +CORE will create each domU machine on the fly, having a bootable ISO image that +contains the root filesystem, and a special persitent area (/rtr/persistent) +using a LVM volume where configuration is stored. See the /etc/core/xen.conf +file for related settings here. + +INSTALLATION + +1. Tested under OpenSUSE 11.3 which allows installing a Xen dom0 during the + install process. + +2. Create an LVM volume group having enough free space available for CORE to + build logical volumes for domU nodes. The name of this group is set with the + 'vg_name=' option in /etc/core/xen.conf. (With 256M per persistent area, + 10GB would allow for 40 nodes.) + +3. To get libev-devel in OpenSUSE, use: + zypper ar http://download.opensuse.org/repositories/X11:/windowmanagers/openSUSE_11.3 WindowManagers + zypper install libev-devel + +4. In addition to the normal CORE dependencies + (see http://code.google.com/p/coreemu/wiki/Quickstart), pyparted-3.2 is used + when creating LVM partitions and decorator-3.3.0 is a dependency for + pyparted. The 'python setup.py install' and 'make install' need to be + performed on these source tarballs as no packages are available. + + tar xzf decorator-3.3.0.tar.gz + cd decorator-3.3.0 + python setup.py build + python setup.py install + + tar xzf pyparted-3.2.tar.gz + cd pyparted-3.2 + ./configure + make + make install + +5. These Xen parameters were used for dom0, by editing /boot/grub/menu.lst: + a) Add options to "kernel /xen.gz" line: + gnttab_max_nr_frames=128 dom0_mem=1G dom0_max_vcpus=2 dom0_vcpus_pin + b) Make Xen default boot by editing the "default" line with the + index for the Xen boot option. e.g. change "default 0" to "default 2" + Reboot to enable the Xen kernel. + +5. Run CORE's ./configure script as root to properly discover sbin binaries. + + tar xzf core-xen.tgz + cd core-xen + ./bootstrap.sh + ./configure + make + make install + +6. Put your ISO images in /opt/core-xen/iso-files and set the "iso_file=" + xen.conf option appropriately. + +7. Uncomment the controlnet entry in /etc/core/core.conf: + # establish a control backchannel for accessing nodes + controlnet = 172.16.0.0/24 + + This setting governs what IP addresses will be used for a control channel. + Given this default setting the host dom0 will have the address 172.16.0.254 + assigned to a bridge device; domU VMs will get interfaces joined to this + bridge, having addresses such as 172.16.0.1 for node n1, 172.16.0.2 for n2, + etc. + + When 'controlnet =' is unspecified in the core.conf file, double-clicking on + a node results in the 'xm console' method. A key mapping is set up so you + can press 'F1' then 'F2' to login as root. The key ctrl+']' detaches from the + console. Only one console is available per domU VM. + +8. When 'controlnet =' is specified, double-clicking on a node results in an + attempt to ssh to that node's control IP address. + Put a host RSA key for use on the domUs in /opt/core-xen/ssh: + + mkdir -p /opt/core-xen/ssh + ssh-keygen -t rsa -f /opt/core-xen/ssh/ssh_host_rsa_key + cp ~/.ssh/id_rsa.pub /opt/core-xen/ssh/authorized_keys + chmod 600 /opt/core-xen/ssh/authorized_keys + + diff --git a/bootstrap.sh b/bootstrap.sh new file mode 100755 index 00000000..d1c2f227 --- /dev/null +++ b/bootstrap.sh @@ -0,0 +1,48 @@ +#!/bin/sh +# +# (c)2010-2012 the Boeing Company +# +# author: Jeff Ahrenholz +# +# Bootstrap the autoconf system. +# + +if [ x$1 = x ]; then # PASS + echo "Bootstrapping the autoconf system..." +# echo " These autotools programs should be installed for this script to work:" +# echo " aclocal, libtoolize, autoheader, automake, autoconf" + echo "(Messages below about copying and installing files are normal.)" +elif [ x$1 = xclean ]; then # clean - take out the trash + echo "Cleaning up the autoconf mess..." + rm -rf autom4te.cache config BSDmakefile + exit 0; +else # help text + echo "usage: $0 [clean]" + echo -n " Use this script to bootstrap the autoconf build system prior to " + echo "running the " + echo " ./configure script." + exit 1; +fi + +# try to keep everything nice and tidy in ./config +if ! [ -d "config" ]; then + mkdir config +fi + +# on FreeBSD, discourage use of make +UNAME=`uname` +if [ x${UNAME} = xFreeBSD ]; then + echo "all:" > BSDmakefile + echo ' @echo "Please use GNU make instead by typing:"' >> BSDmakefile + echo ' @echo " gmake"' >> BSDmakefile + echo ' @echo ""' >> BSDmakefile +fi + +# bootstrapping +echo "(1/4) Running aclocal..." && aclocal -I config \ + && echo "(2/4) Running autoheader..." && autoheader \ + && echo "(3/4) Running automake..." \ + && automake --add-missing --copy --foreign \ + && echo "(4/4) Running autoconf..." && autoconf \ + && echo "" \ + && echo "You are now ready to run \"./configure\"." diff --git a/configure.ac b/configure.ac new file mode 100644 index 00000000..d3d9967a --- /dev/null +++ b/configure.ac @@ -0,0 +1,368 @@ +# +# Copyright (c) 2010-2013 the Boeing Company +# See the LICENSE file included in this distribution. +# +# CORE configure script +# +# author: Jeff Ahrenholz +# +# -*- Autoconf -*- +# Process this file with autoconf to produce a configure script. + +# +# this defines the CORE version number, must be static for AC_INIT +# +AC_INIT(core, 4.5svn5, core-dev@pf.itd.nrl.navy.mil) +VERSION=$PACKAGE_VERSION +CORE_VERSION=$PACKAGE_VERSION +CORE_VERSION_DATE=20130816 +COREDPY_VERSION=$PACKAGE_VERSION + +# +# autoconf and automake initialization +# +AC_CONFIG_SRCDIR([daemon/src/version.h.in]) +AC_CONFIG_AUX_DIR(config) +AC_CONFIG_MACRO_DIR(config) +AC_CONFIG_HEADERS([config.h]) +AM_INIT_AUTOMAKE + +AC_SUBST(CORE_VERSION) +AC_SUBST(CORE_VERSION_DATE) +AC_SUBST(COREDPY_VERSION) + +# +# some of the following directory variables are not expanded at configure-time, +# so we have special checks to expand them +# + +# CORE GUI files in LIBDIR +# AC_PREFIX_DEFAULT is /usr/local, but not expanded yet +if test "x$prefix" = "xNONE" ; then + prefix="/usr/local" +fi +if test "$libdir" = "\${exec_prefix}/lib" ; then + libdir="${prefix}/lib" +fi +# this can be /usr/lib or /usr/lib64 +LIB_DIR="${libdir}" +# don't let the Tcl files install to /usr/lib64/core +CORE_LIB_DIR="${prefix}/lib/core" +AC_SUBST(LIB_DIR) +AC_SUBST(CORE_LIB_DIR) +SBINDIR="${prefix}/sbin" +AC_SUBST(SBINDIR) +BINDIR="${prefix}/bin" +AC_SUBST(BINDIR) + +# CORE daemon configuration file (core.conf) in CORE_CONF_DIR +if test "$sysconfdir" = "\${prefix}/etc" ; then + sysconfdir="/etc" + CORE_CONF_DIR="/etc/core" +else + CORE_CONF_DIR="$sysconfdir/core" +fi +AC_SUBST(CORE_CONF_DIR) +if test "$datarootdir" = "\${prefix}/share" ; then + datarootdir="${prefix}/share" +fi +CORE_DATA_DIR="$datarootdir/core" +AC_SUBST(CORE_DATA_DIR) + +# CORE GUI configuration files and preferences in CORE_GUI_CONF_DIR +# scenario files in ~/.core/configs/ +#AC_ARG_VAR(CORE_GUI_CONF_DIR, [GUI configuration directory.]) +AC_ARG_WITH([guiconfdir], + [AS_HELP_STRING([--with-guiconfdir=dir], + [specify GUI configuration directory])], + [CORE_GUI_CONF_DIR="$with_guiconfdir"], + [CORE_GUI_CONF_DIR="\${HOME}/.core"]) +AC_SUBST(CORE_GUI_CONF_DIR) +AC_ARG_ENABLE([gui], + [AS_HELP_STRING([--enable-gui[=ARG]], + [build and install the GUI (default is yes)])], + [], [enable_gui=yes]) +AC_SUBST(enable_gui) +AC_ARG_ENABLE([daemon], + [AS_HELP_STRING([--enable-daemon[=ARG]], + [build and install the daemon with Python modules + (default is yes)])], + [], [enable_daemon=yes]) +AC_SUBST(enable_daemon) +if test "x$enable_daemon" = "xno"; then + want_python=no + want_bsd=no + want_linux_netns=no +fi + +# CORE state files +if test "$localstatedir" = "\${prefix}/var" ; then + # use /var instead of /usr/local/var (/usr/local/var/log isn't standard) + CORE_STATE_DIR="/var" +else + CORE_STATE_DIR="$localstatedir" +fi +AC_SUBST(CORE_STATE_DIR) + +# default compiler flags +# _GNU_SOURCE is defined to get c99 defines for lrint() +CFLAGS="$CFLAGS -O3 -Werror -Wall -D_GNU_SOURCE" +# debug flags +#CFLAGS="$CFLAGS -g -Werror -Wall -D_GNU_SOURCE" + +# Checks for programs. +AC_PROG_AWK +AC_PROG_CC +AC_PROG_INSTALL +AC_PROG_MAKE_SET +AC_PROG_RANLIB + +AM_PATH_PYTHON(2.6, want_python=yes, want_python=no) +SEARCHPATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/sbin:/usr/local/bin" +# +# daemon dependencies +# +if test "x$enable_daemon" = "xyes" ; then + AC_CHECK_PROG(brctl_path, brctl, $as_dir, no, $SEARCHPATH) + AC_CHECK_PROG(sysctl_path, sysctl, $as_dir, no, $SEARCHPATH) + AC_CHECK_PROG(ebtables_path, ebtables, $as_dir, no, $SEARCHPATH) + AC_CHECK_PROG(ip_path, ip, $as_dir, no, $SEARCHPATH) + AC_CHECK_PROG(tc_path, tc, $as_dir, no, $SEARCHPATH) + AC_CHECK_PROG(ifconfig_path, ifconfig, $as_dir, no, $SEARCHPATH) + AC_CHECK_PROG(ngctl_path, ngctl, $as_dir, no, $SEARCHPATH) + AC_CHECK_PROG(vimage_path, vimage, $as_dir, no, $SEARCHPATH) + AC_CHECK_PROG(mount_path, mount, $as_dir, no, $SEARCHPATH) + AC_CHECK_PROG(umount_path, umount, $as_dir, no, $SEARCHPATH) + AC_CHECK_PROG(convert, convert, yes, no, $SEARCHPATH) +fi + +#AC_CHECK_PROG(dia, dia, yes, no) +AC_CHECK_PROG(help2man, help2man, yes, no, $SEARCHPATH) +if test "x$convert" = "xno" ; then + AC_MSG_WARN([Could not locate ImageMagick convert.]) + #want_docs_missing="convert" +fi +#if test "x$dia" = "xno" ; then +# AC_MSG_WARN([Could not locate dia.]) +# want_docs_missing="dia" +#fi +if test "x$help2man" = "xno" ; then + AC_MSG_WARN([Could not locate help2man.]) + want_docs_missing="$want_docs_missing help2man" +fi +if test "x$want_docs_missing" = "x" ; then + want_docs=yes +else + AC_MSG_WARN([Could not find required helper utilities (${want_docs_missing}) so the CORE documentation will not be built.]) + want_docs=no +fi + +#AC_PATH_PROGS(tcl_path, [tclsh tclsh8.5 tclsh8.4], no) +#if test "x$tcl_path" = "xno" ; then +# AC_MSG_ERROR([Could not locate tclsh. Please install Tcl/Tk.]) +#fi +#AC_PATH_PROGS(wish_path, [wish wish8.5 wish8.4], no) +#if test "x$wish_path" = "xno" ; then +# AC_MSG_ERROR([Could not locate wish. Please install Tcl/Tk.]) +#fi + +if test "x$enable_daemon" = "xyes" ; then + # Checks for libraries. + AC_CHECK_LIB([netgraph], [NgMkSockNode]) + + # Checks for header files. + AC_CHECK_HEADERS([arpa/inet.h fcntl.h limits.h stdint.h stdlib.h string.h sys/ioctl.h sys/mount.h sys/socket.h sys/time.h termios.h unistd.h]) + + # Checks for typedefs, structures, and compiler characteristics. + AC_C_INLINE + AC_TYPE_INT32_T + AC_TYPE_PID_T + AC_TYPE_SIZE_T + AC_TYPE_SSIZE_T + AC_TYPE_UINT32_T + AC_TYPE_UINT8_T + + # Checks for library functions. + AC_FUNC_FORK + AC_FUNC_MALLOC + AC_FUNC_REALLOC + AC_CHECK_FUNCS([atexit dup2 gettimeofday memset socket strerror uname]) +fi + +# simple architecture detection +if test `uname -m` = "x86_64"; then + ARCH=amd64 +else + ARCH=i386 +fi +AC_MSG_RESULT([using architecture $ARCH]) +AC_SUBST(ARCH) + +# Host-specific detection +want_linux_netns=no +want_bsd=no +if test `uname -s` = "FreeBSD"; then + want_bsd=yes + AC_CHECK_PROGS(gmake) + # FreeBSD fix for linking libev port below + CFLAGS="$CFLAGS -L/usr/local/lib" +else + want_linux_netns=yes +fi +if test "x$want_python" = "xno"; then + want_bsd=no + want_linux_netns=no +fi + +if test "x$want_python" = "xyes"; then + CFLAGS_save=$CFLAGS + CPPFLAGS_save=$CPPFLAGS + if test "x$PYTHON_INCLUDE_DIR" = "x"; then + PYTHON_INCLUDE_DIR=`$PYTHON -c "import distutils.sysconfig; print distutils.sysconfig.get_python_inc()"` + fi + CFLAGS="-I$PYTHON_INCLUDE_DIR" + CPPFLAGS="-I$PYTHON_INCLUDE_DIR" + AC_CHECK_HEADERS([Python.h], [], + AC_MSG_ERROR([Python bindings require Python development headers (try installing your 'python-devel' or 'python-dev' package)])) + CFLAGS=$CFLAGS_save + CPPFLAGS=$CPPFLAGS_save + PKG_CHECK_MODULES(libev, libev, + AC_MSG_RESULT([found libev using pkgconfig OK]) + AC_SUBST(libev_CFLAGS) + AC_SUBST(libev_LIBS), + AC_MSG_RESULT([did not find libev using pkconfig...]) + AC_CHECK_LIB([ev], ev_set_allocator, + AC_MSG_RESULT([found libev OK]) + AC_SUBST(libev_CFLAGS) + AC_SUBST(libev_LIBS, [-lev]), + AC_MSG_ERROR([Python bindings require libev (try installing your 'libev-devel' or 'libev-dev' package)]))) +else + # Namespace support requires Python support + want_linux_netns=no +fi + +progs_missing="" +if test "x$want_linux_netns" = "xyes"; then + if test "x$brctl_path" = "xno" ; then + progs_missing="${progs_missing}brctl " + brctl_path="/usr/sbin" + AC_MSG_ERROR([Could not locate brctl (from bridge-utils package).]) + fi + if test "x$ebtables_path" = "xno" ; then + progs_missing="${progs_missing}ebtables " + ebtables_path="/sbin" + AC_MSG_ERROR([Could not locate ebtables (from ebtables package).]) + fi + if test "x$ip_path" = "xno" ; then + progs_missing="${progs_missing}ip " + ip_path="/sbin" + AC_MSG_ERROR([Could not locate ip (from iproute package).]) + fi + if test "x$tc_path" = "xno" ; then + progs_missing="${progs_missing}tc " + tc_path="/sbin" + AC_MSG_ERROR([Could not locate tc (from iproute package).]) + fi +fi +if test "x$want_bsd" = "xyes"; then + if test "x$ifconfig_path" = "xno" ; then + AC_MSG_ERROR([Could not locate the 'ifconfig' utility.]) + fi + if test "x$ngctl_path" = "xno" ; then + AC_MSG_ERROR([Could not locate the 'ngctl' utility.]) + fi + if test "x$vimage_path" = "xno" ; then + AC_MSG_ERROR([Could not locate the 'vimage' utility.]) + fi +fi + +AC_ARG_WITH([startup], + [AS_HELP_STRING([--with-startup=option], + [option=systemd,suse,none to install systemd/SUSE init scripts])], + [with_startup=$with_startup], + [with_startup=initd]) +AC_SUBST(with_startup) +AC_MSG_RESULT([using startup option $with_startup]) + +# Variable substitutions +AM_CONDITIONAL(WANT_GUI, test x$enable_gui = xyes) +AM_CONDITIONAL(WANT_DAEMON, test x$enable_daemon = xyes) +AM_CONDITIONAL(WANT_BSD, test x$want_bsd = xyes) +AM_CONDITIONAL(WANT_DOCS, test x$want_docs = xyes) +AM_CONDITIONAL(WANT_PYTHON, test x$want_python = xyes) +AM_CONDITIONAL(WANT_NETNS, test x$want_linux_netns = xyes) + +AM_CONDITIONAL(WANT_INITD, test x$with_startup = xinitd) +AM_CONDITIONAL(WANT_SYSTEMD, test x$with_startup = xsystemd) +AM_CONDITIONAL(WANT_SUSE, test x$with_startup = xsuse) + +if test $cross_compiling = no; then + AM_MISSING_PROG(HELP2MAN, help2man) +else + HELP2MAN=: +fi + + +# Output files +AC_CONFIG_FILES([Makefile + gui/core-gui + gui/version.tcl + gui/Makefile + gui/icons/Makefile + scripts/Makefile + scripts/perf/Makefile + scripts/xen/Makefile + doc/Makefile + doc/conf.py + doc/man/Makefile + doc/figures/Makefile + daemon/Makefile + daemon/src/Makefile + daemon/src/version.h + daemon/core/constants.py + daemon/ns3/Makefile + daemon/ns3/corens3/constants.py + daemon/doc/Makefile + daemon/doc/conf.py + packaging/deb/core-daemon.install + packaging/deb/core-gui.install + packaging/rpm/core.spec],) +AC_OUTPUT + +# Summary text +echo \ +"------------------------------------------------------------------------ +${PACKAGE_STRING} Configuration: + + Host System Type: ${host} + C Compiler and flags: ${CC} ${CFLAGS} + Install prefix: ${prefix} + Build GUI: ${enable_gui} + GUI path: ${CORE_LIB_DIR} + GUI config: ${CORE_GUI_CONF_DIR} + Daemon path: ${SBINDIR} + Daemon config: ${CORE_CONF_DIR} + Python modules: ${pythondir} + Logs: ${CORE_STATE_DIR}/log + +Features to build: + Python bindings: ${want_python} + Linux Namespaces emulation: ${want_linux_netns} + FreeBSD Jails emulation: ${want_bsd} + Documentation: ${want_docs} + +------------------------------------------------------------------------" +if test "x${want_bsd}" = "xyes" ; then + # TODO: more sophisticated checks of gmake vs make + echo ">>> NOTE: on FreeBSD you should use 'gmake' instead of 'make' +------------------------------------------------------------------------" +fi +if test "x${want_linux_netns}" = "xyes" ; then + echo "On this platform you should run core-gui as a normal user. +------------------------------------------------------------------------" +fi +if test "x${progs_missing}" != "x" ; then + echo ">>> NOTE: the following programs could not be found:" + echo " $progs_missing +------------------------------------------------------------------------" +fi diff --git a/daemon/CORE.e4p b/daemon/CORE.e4p new file mode 100644 index 00000000..abf05a3c --- /dev/null +++ b/daemon/CORE.e4p @@ -0,0 +1,223 @@ + + + + + + + en + Python + Console + + 4.0 + + + + setup.py + examples/netns/switchtest.py + examples/netns/ospfmanetmdrtest.py + examples/netns/switch.py + examples/netns/wlantest.py + examples/stopsession.py + src/setup.py + core/emane/__init__.py + core/emane/emane.py + core/emane/ieee80211abg.py + core/emane/rfpipe.py + core/emane/nodes.py + core/netns/vif.py + core/netns/vnet.py + core/netns/__init__.py + core/netns/vnode.py + core/netns/vnodeclient.py + core/netns/nodes.py + core/service.py + core/__init__.py + core/addons/__init__.py + core/broker.py + core/services/__init__.py + core/services/quagga.py + core/misc/LatLongUTMconversion.py + core/misc/__init__.py + core/misc/ipaddr.py + core/misc/quagga.py + core/misc/utils.py + core/pycore.py + core/coreobj.py + core/location.py + core/session.py + core/api/__init__.py + core/api/data.py + core/api/coreapi.py + core/services/nrl.py + core/services/utility.py + core/bsd/netgraph.py + core/bsd/__init__.py + core/bsd/nodes.py + core/bsd/vnet.py + core/bsd/vnode.py + core/xen/xen.py + core/xen/xenconfig.py + core/xen/__init__.py + examples/myservices/sample.py + examples/myservices/__init__.py + core/services/security.py + core/emane/universal.py + examples/netns/wlanemanetests.py + core/services/xorp.py + core/misc/xmlutils.py + core/mobility.py + core/phys/pnodes.py + core/phys/__init__.py + ns3/setup.py + ns3/corens3/__init__.py + ns3/corens3/constants.py + ns3/corens3/obj.py + ns3/examples/ns3wifi.py + ns3/examples/ns3lte.py + ns3/examples/ns3wimax.py + core/emane/commeffect.py + core/services/ucarp.py + core/emane/bypass.py + core/conf.py + core/misc/event.py + core/sdt.py + core/services/bird.py + examples/netns/basicrange.py + examples/netns/howmanynodes.py + sbin/core-daemon + sbin/coresendmsg + sbin/core-cleanup + sbin/core-xen-cleanup + ns3/examples/ns3wifirandomwalk.py + core/misc/utm.py + + + + + + + + + + + + + Subversion + + + + add + + + + + + + + checkout + + + + + + + + commit + + + + + + + + diff + + + + + + + + export + + + + + + + + global + + + + + + + + history + + + + + + + + log + + + + + + + + remove + + + + + + + + status + + + + + + + + tag + + + + + + + + update + + + + + + + + + + + + standardLayout + + + True + + + + + + + + + + + diff --git a/daemon/MANIFEST.in b/daemon/MANIFEST.in new file mode 100644 index 00000000..f5aa698b --- /dev/null +++ b/daemon/MANIFEST.in @@ -0,0 +1,4 @@ +recursive-include sbin *.sh *.py +include data/core.conf +recursive-include examples/netns *.py *.sh +recursive-exclude examples/netns *.pyc *.pyo diff --git a/daemon/Makefile.am b/daemon/Makefile.am new file mode 100755 index 00000000..34449264 --- /dev/null +++ b/daemon/Makefile.am @@ -0,0 +1,51 @@ +# CORE +# (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +# Makefile for building netns components. +# + +if WANT_NETNS + SUBDIRS = src ns3 +endif + +# Python package build +noinst_SCRIPTS = build +build: + $(PYTHON) setup.py build + +# Python package install +install-exec-hook: + CORE_CONF_DIR=${DESTDIR}/${CORE_CONF_DIR} $(PYTHON) setup.py install --prefix=${DESTDIR}/${prefix} --install-purelib=${DESTDIR}/${pythondir} --install-platlib=${DESTDIR}/${pyexecdir} --no-compile + +# Python package uninstall +uninstall-hook: + rm -f ${SBINDIR}/core-daemon + rm -f ${SBINDIR}/coresendmsg + rm -f ${SBINDIR}/core-cleanup + rm -f ${SBINDIR}/core-xen-cleanup + rm -f ${pythondir}/core_python-${COREDPY_VERSION}-py${PYTHON_VERSION}.egg-info + rm -f ${pythondir}/core_python_netns-1.0-py${PYTHON_VERSION}.egg-info + rm -rf ${pythondir}/core + rm -rf ${prefix}/share/core + +# Python package cleanup +clean-local: + -rm -rf build + +# Python RPM package +rpm: + $(PYTHON) setup.py bdist_rpm + +# because we include entire directories with EXTRA_DIST, we need to clean up +# the source control files +dist-hook: + rm -rf `find $(distdir)/ -name .svn` `find $(distdir)/ -name '*.pyc'` + +DISTCLEANFILES = Makefile.in core/*.pyc MANIFEST doc/Makefile.in doc/Makefile \ + doc/conf.py core/addons/*.pyc + +# files to include with distribution tarball +EXTRA_DIST = setup.py MANIFEST.in CORE.e4p core data examples sbin doc diff --git a/daemon/core/__init__.py b/daemon/core/__init__.py new file mode 100644 index 00000000..58b68b5e --- /dev/null +++ b/daemon/core/__init__.py @@ -0,0 +1,23 @@ +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. + +"""core + +Top-level Python package containing CORE components. + +See http://cs.itd.nrl.navy.mil/work/core/ and +http://code.google.com/p/coreemu/ for more information on CORE. + +Pieces can be imported individually, for example + + import core.netns.vnode + +or everything listed in __all__ can be imported using + + from core import * +""" + +__all__ = [] + +# Automatically import all add-ons listed in addons.__all__ +from addons import * diff --git a/daemon/core/addons/__init__.py b/daemon/core/addons/__init__.py new file mode 100644 index 00000000..1250143e --- /dev/null +++ b/daemon/core/addons/__init__.py @@ -0,0 +1,6 @@ +"""Optional add-ons + +Add on files can be put in this directory. Everything listed in +__all__ is automatically loaded by the main core module. +""" +__all__ = [] diff --git a/daemon/core/api/__init__.py b/daemon/core/api/__init__.py new file mode 100644 index 00000000..e69de29b diff --git a/daemon/core/api/coreapi.py b/daemon/core/api/coreapi.py new file mode 100644 index 00000000..d250451e --- /dev/null +++ b/daemon/core/api/coreapi.py @@ -0,0 +1,630 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: Tom Goff +# Jeff Ahrenholz +# +''' +coreapi.py: uses coreapi_data for Message and TLV types, and defines TLV data +types and objects used for parsing and building CORE API messages. +''' + +import struct + +from core.api.data import * +from core.misc.ipaddr import * + + +class CoreTlvData(object): + datafmt = None + datatype = None + padlen = None + + @classmethod + def pack(cls, value): + "return: (tlvlen, tlvdata)" + tmp = struct.pack(cls.datafmt, value) + return len(tmp) - cls.padlen, tmp + + @classmethod + def unpack(cls, data): + return struct.unpack(cls.datafmt, data)[0] + + @classmethod + def packstring(cls, strvalue): + return cls.pack(cls.fromstring(strvalue)) + + @classmethod + def fromstring(cls, s): + return cls.datatype(s) + +class CoreTlvDataObj(CoreTlvData): + @classmethod + def pack(cls, obj): + "return: (tlvlen, tlvdata)" + tmp = struct.pack(cls.datafmt, cls.getvalue(obj)) + return len(tmp) - cls.padlen, tmp + + @classmethod + def unpack(cls, data): + return cls.newobj(struct.unpack(cls.datafmt, data)[0]) + + @staticmethod + def getvalue(obj): + raise NotImplementedError + + @staticmethod + def newobj(obj): + raise NotImplementedError + +class CoreTlvDataUint16(CoreTlvData): + datafmt = "!H" + datatype = int + padlen = 0 + +class CoreTlvDataUint32(CoreTlvData): + datafmt = "!2xI" + datatype = int + padlen = 2 + +class CoreTlvDataUint64(CoreTlvData): + datafmt = "!2xQ" + datatype = long + padlen = 2 + +class CoreTlvDataString(CoreTlvData): + datatype = str + + @staticmethod + def pack(value): + if not isinstance(value, str): + raise ValueError, "value not a string: %s" % value + if len(value) < 256: + hdrsiz = CoreTlv.hdrsiz + else: + hdrsiz = CoreTlv.longhdrsiz + padlen = -(hdrsiz + len(value)) % 4 + return len(value), value + '\0' * padlen + + @staticmethod + def unpack(data): + return data.rstrip('\0') + +class CoreTlvDataUint16List(CoreTlvData): + ''' List of unsigned 16-bit values. + ''' + datatype = tuple + + @staticmethod + def pack(values): + if not isinstance(values, tuple): + raise ValueError, "value not a tuple: %s" % values + data = "" + for v in values: + data += struct.pack("!H", v) + padlen = -(CoreTlv.hdrsiz + len(data)) % 4 + return len(data), data + '\0' * padlen + + @staticmethod + def unpack(data): + datafmt = "!%dH" % (len(data)/2) + return struct.unpack(datafmt, data) + + @classmethod + def fromstring(cls, s): + return tuple(map(lambda(x): int(x), s.split())) + +class CoreTlvDataIPv4Addr(CoreTlvDataObj): + datafmt = "!2x4s" + datatype = IPAddr.fromstring + padlen = 2 + + @staticmethod + def getvalue(obj): + return obj.addr + + @staticmethod + def newobj(value): + return IPAddr(af = AF_INET, addr = value) + +class CoreTlvDataIPv6Addr(CoreTlvDataObj): + datafmt = "!16s2x" + datatype = IPAddr.fromstring + padlen = 2 + + @staticmethod + def getvalue(obj): + return obj.addr + + @staticmethod + def newobj(value): + return IPAddr(af = AF_INET6, addr = value) + +class CoreTlvDataMacAddr(CoreTlvDataObj): + datafmt = "!2x8s" + datatype = MacAddr.fromstring + padlen = 2 + + @staticmethod + def getvalue(obj): + return obj.addr + + @staticmethod + def newobj(value): + return MacAddr(addr = value[2:]) # only use 48 bits + +class CoreTlv(object): + hdrfmt = "!BB" + hdrsiz = struct.calcsize(hdrfmt) + + longhdrfmt = "!BBH" + longhdrsiz = struct.calcsize(longhdrfmt) + + tlvtypemap = {} + tlvdataclsmap = {} + + def __init__(self, tlvtype, tlvdata): + self.tlvtype = tlvtype + if tlvdata: + try: + self.value = self.tlvdataclsmap[self.tlvtype].unpack(tlvdata) + except KeyError: + self.value = tlvdata + else: + self.value = None + + @classmethod + def unpack(cls, data): + "parse data and return (tlv, remainingdata)" + tlvtype, tlvlen = struct.unpack(cls.hdrfmt, data[:cls.hdrsiz]) + hdrsiz = cls.hdrsiz + if tlvlen == 0: + tlvtype, zero, tlvlen = struct.unpack(cls.longhdrfmt, + data[:cls.longhdrsiz]) + hdrsiz = cls.longhdrsiz + tlvsiz = hdrsiz + tlvlen + tlvsiz += -tlvsiz % 4 # for 32-bit alignment + return cls(tlvtype, data[hdrsiz:tlvsiz]), data[tlvsiz:] + + @classmethod + def pack(cls, tlvtype, value): + try: + tlvlen, tlvdata = cls.tlvdataclsmap[tlvtype].pack(value) + except Exception, e: + raise ValueError, "TLV packing error type=%s: %s" % (tlvtype, e) + if tlvlen < 256: + hdr = struct.pack(cls.hdrfmt, tlvtype, tlvlen) + else: + hdr = struct.pack(cls.longhdrfmt, tlvtype, 0, tlvlen) + return hdr + tlvdata + + @classmethod + def packstring(cls, tlvtype, value): + return cls.pack(tlvtype, cls.tlvdataclsmap[tlvtype].fromstring(value)) + + def typestr(self): + try: + return self.tlvtypemap[self.tlvtype] + except KeyError: + return "unknown tlv type: %s" % str(self.tlvtype) + + def __str__(self): + return "%s " % \ + (self.__class__.__name__, self.typestr(), self.value) + +class CoreNodeTlv(CoreTlv): + tlvtypemap = node_tlvs + tlvdataclsmap = { + CORE_TLV_NODE_NUMBER: CoreTlvDataUint32, + CORE_TLV_NODE_TYPE: CoreTlvDataUint32, + CORE_TLV_NODE_NAME: CoreTlvDataString, + CORE_TLV_NODE_IPADDR: CoreTlvDataIPv4Addr, + CORE_TLV_NODE_MACADDR: CoreTlvDataMacAddr, + CORE_TLV_NODE_IP6ADDR: CoreTlvDataIPv6Addr, + CORE_TLV_NODE_MODEL: CoreTlvDataString, + CORE_TLV_NODE_EMUSRV: CoreTlvDataString, + CORE_TLV_NODE_SESSION: CoreTlvDataString, + CORE_TLV_NODE_XPOS: CoreTlvDataUint16, + CORE_TLV_NODE_YPOS: CoreTlvDataUint16, + CORE_TLV_NODE_CANVAS: CoreTlvDataUint16, + CORE_TLV_NODE_EMUID: CoreTlvDataUint32, + CORE_TLV_NODE_NETID: CoreTlvDataUint32, + CORE_TLV_NODE_SERVICES: CoreTlvDataString, + CORE_TLV_NODE_LAT: CoreTlvDataString, + CORE_TLV_NODE_LONG: CoreTlvDataString, + CORE_TLV_NODE_ALT: CoreTlvDataString, + CORE_TLV_NODE_ICON: CoreTlvDataString, + CORE_TLV_NODE_OPAQUE: CoreTlvDataString, + } + +class CoreLinkTlv(CoreTlv): + tlvtypemap = link_tlvs + tlvdataclsmap = { + CORE_TLV_LINK_N1NUMBER: CoreTlvDataUint32, + CORE_TLV_LINK_N2NUMBER: CoreTlvDataUint32, + CORE_TLV_LINK_DELAY: CoreTlvDataUint64, + CORE_TLV_LINK_BW: CoreTlvDataUint64, + CORE_TLV_LINK_PER: CoreTlvDataString, + CORE_TLV_LINK_DUP: CoreTlvDataString, + CORE_TLV_LINK_JITTER: CoreTlvDataUint32, + CORE_TLV_LINK_MER: CoreTlvDataUint16, + CORE_TLV_LINK_BURST: CoreTlvDataUint16, + CORE_TLV_LINK_SESSION: CoreTlvDataString, + CORE_TLV_LINK_MBURST: CoreTlvDataUint16, + CORE_TLV_LINK_TYPE: CoreTlvDataUint32, + CORE_TLV_LINK_GUIATTR: CoreTlvDataString, + CORE_TLV_LINK_EMUID: CoreTlvDataUint32, + CORE_TLV_LINK_NETID: CoreTlvDataUint32, + CORE_TLV_LINK_KEY: CoreTlvDataUint32, + CORE_TLV_LINK_IF1NUM: CoreTlvDataUint16, + CORE_TLV_LINK_IF1IP4: CoreTlvDataIPv4Addr, + CORE_TLV_LINK_IF1IP4MASK: CoreTlvDataUint16, + CORE_TLV_LINK_IF1MAC: CoreTlvDataMacAddr, + CORE_TLV_LINK_IF1IP6: CoreTlvDataIPv6Addr, + CORE_TLV_LINK_IF1IP6MASK: CoreTlvDataUint16, + CORE_TLV_LINK_IF2NUM: CoreTlvDataUint16, + CORE_TLV_LINK_IF2IP4: CoreTlvDataIPv4Addr, + CORE_TLV_LINK_IF2IP4MASK: CoreTlvDataUint16, + CORE_TLV_LINK_IF2MAC: CoreTlvDataMacAddr, + CORE_TLV_LINK_IF2IP6: CoreTlvDataIPv6Addr, + CORE_TLV_LINK_IF2IP6MASK: CoreTlvDataUint16, + CORE_TLV_LINK_OPAQUE: CoreTlvDataString, + } + +class CoreExecTlv(CoreTlv): + tlvtypemap = exec_tlvs + tlvdataclsmap = { + CORE_TLV_EXEC_NODE: CoreTlvDataUint32, + CORE_TLV_EXEC_NUM: CoreTlvDataUint32, + CORE_TLV_EXEC_TIME: CoreTlvDataUint32, + CORE_TLV_EXEC_CMD: CoreTlvDataString, + CORE_TLV_EXEC_RESULT: CoreTlvDataString, + CORE_TLV_EXEC_STATUS: CoreTlvDataUint32, + CORE_TLV_EXEC_SESSION: CoreTlvDataString, + } + +class CoreRegTlv(CoreTlv): + tlvtypemap = reg_tlvs + tlvdataclsmap = { + CORE_TLV_REG_WIRELESS: CoreTlvDataString, + CORE_TLV_REG_MOBILITY: CoreTlvDataString, + CORE_TLV_REG_UTILITY: CoreTlvDataString, + CORE_TLV_REG_EXECSRV: CoreTlvDataString, + CORE_TLV_REG_GUI: CoreTlvDataString, + CORE_TLV_REG_EMULSRV: CoreTlvDataString, + CORE_TLV_REG_SESSION: CoreTlvDataString, + } + +class CoreConfTlv(CoreTlv): + tlvtypemap = conf_tlvs + tlvdataclsmap = { + CORE_TLV_CONF_NODE: CoreTlvDataUint32, + CORE_TLV_CONF_OBJ: CoreTlvDataString, + CORE_TLV_CONF_TYPE: CoreTlvDataUint16, + CORE_TLV_CONF_DATA_TYPES: CoreTlvDataUint16List, + CORE_TLV_CONF_VALUES: CoreTlvDataString, + CORE_TLV_CONF_CAPTIONS: CoreTlvDataString, + CORE_TLV_CONF_BITMAP: CoreTlvDataString, + CORE_TLV_CONF_POSSIBLE_VALUES: CoreTlvDataString, + CORE_TLV_CONF_GROUPS: CoreTlvDataString, + CORE_TLV_CONF_SESSION: CoreTlvDataString, + CORE_TLV_CONF_NETID: CoreTlvDataUint32, + CORE_TLV_CONF_OPAQUE: CoreTlvDataString, + } + +class CoreFileTlv(CoreTlv): + tlvtypemap = file_tlvs + tlvdataclsmap = { + CORE_TLV_FILE_NODE: CoreTlvDataUint32, + CORE_TLV_FILE_NAME: CoreTlvDataString, + CORE_TLV_FILE_MODE: CoreTlvDataString, + CORE_TLV_FILE_NUM: CoreTlvDataUint16, + CORE_TLV_FILE_TYPE: CoreTlvDataString, + CORE_TLV_FILE_SRCNAME: CoreTlvDataString, + CORE_TLV_FILE_SESSION: CoreTlvDataString, + CORE_TLV_FILE_DATA: CoreTlvDataString, + CORE_TLV_FILE_CMPDATA: CoreTlvDataString, + } + +class CoreIfaceTlv(CoreTlv): + tlvtypemap = iface_tlvs + tlvdataclsmap = { + CORE_TLV_IFACE_NODE: CoreTlvDataUint32, + CORE_TLV_IFACE_NUM: CoreTlvDataUint16, + CORE_TLV_IFACE_NAME: CoreTlvDataString, + CORE_TLV_IFACE_IPADDR: CoreTlvDataIPv4Addr, + CORE_TLV_IFACE_MASK: CoreTlvDataUint16, + CORE_TLV_IFACE_MACADDR: CoreTlvDataMacAddr, + CORE_TLV_IFACE_IP6ADDR: CoreTlvDataIPv6Addr, + CORE_TLV_IFACE_IP6MASK: CoreTlvDataUint16, + CORE_TLV_IFACE_TYPE: CoreTlvDataUint16, + CORE_TLV_IFACE_SESSION: CoreTlvDataString, + CORE_TLV_IFACE_STATE: CoreTlvDataUint16, + CORE_TLV_IFACE_EMUID: CoreTlvDataUint32, + CORE_TLV_IFACE_NETID: CoreTlvDataUint32, + } + +class CoreEventTlv(CoreTlv): + tlvtypemap = event_tlvs + tlvdataclsmap = { + CORE_TLV_EVENT_NODE: CoreTlvDataUint32, + CORE_TLV_EVENT_TYPE: CoreTlvDataUint32, + CORE_TLV_EVENT_NAME: CoreTlvDataString, + CORE_TLV_EVENT_DATA: CoreTlvDataString, + CORE_TLV_EVENT_TIME: CoreTlvDataString, + CORE_TLV_EVENT_SESSION: CoreTlvDataString, + } + +class CoreSessionTlv(CoreTlv): + tlvtypemap = session_tlvs + tlvdataclsmap = { + CORE_TLV_SESS_NUMBER: CoreTlvDataString, + CORE_TLV_SESS_NAME: CoreTlvDataString, + CORE_TLV_SESS_FILE: CoreTlvDataString, + CORE_TLV_SESS_NODECOUNT: CoreTlvDataString, + CORE_TLV_SESS_DATE: CoreTlvDataString, + CORE_TLV_SESS_THUMB: CoreTlvDataString, + CORE_TLV_SESS_USER: CoreTlvDataString, + CORE_TLV_SESS_OPAQUE: CoreTlvDataString, + } + +class CoreExceptionTlv(CoreTlv): + tlvtypemap = exception_tlvs + tlvdataclsmap = { + CORE_TLV_EXCP_NODE: CoreTlvDataUint32, + CORE_TLV_EXCP_SESSION: CoreTlvDataString, + CORE_TLV_EXCP_LEVEL: CoreTlvDataUint16, + CORE_TLV_EXCP_SOURCE: CoreTlvDataString, + CORE_TLV_EXCP_DATE: CoreTlvDataString, + CORE_TLV_EXCP_TEXT: CoreTlvDataString, + CORE_TLV_EXCP_OPAQUE: CoreTlvDataString, + } + + +class CoreMessage(object): + hdrfmt = "!BBH" + hdrsiz = struct.calcsize(hdrfmt) + + msgtype = None + + flagmap = {} + + tlvcls = CoreTlv + + def __init__(self, flags, hdr, data): + self.rawmsg = hdr + data + self.flags = flags + self.tlvdata = {} + self.parsedata(data) + + @classmethod + def unpackhdr(cls, data): + "parse data and return (msgtype, msgflags, msglen)" + msgtype, msgflags, msglen = struct.unpack(cls.hdrfmt, data[:cls.hdrsiz]) + return msgtype, msgflags, msglen + + @classmethod + def pack(cls, msgflags, tlvdata): + hdr = struct.pack(cls.hdrfmt, cls.msgtype, msgflags, len(tlvdata)) + return hdr + tlvdata + + def addtlvdata(self, k, v): + if k in self.tlvdata: + raise KeyError, "key already exists: %s (val=%s)" % (k, v) + self.tlvdata[k] = v + + def gettlv(self, tlvtype): + if tlvtype in self.tlvdata: + return self.tlvdata[tlvtype] + else: + return None + + def parsedata(self, data): + while data: + tlv, data = self.tlvcls.unpack(data) + self.addtlvdata(tlv.tlvtype, tlv.value) + + def packtlvdata(self): + ''' Opposite of parsedata(). Return packed TLV data using + self.tlvdata dict. Used by repack(). + ''' + tlvdata = "" + keys = sorted(self.tlvdata.keys()) + for k in keys: + v = self.tlvdata[k] + tlvdata += self.tlvcls.pack(k, v) + return tlvdata + + def repack(self): + ''' Invoke after updating self.tlvdata[] to rebuild self.rawmsg. + Useful for modifying a message that has been parsed, before + sending the raw data again. + ''' + tlvdata = self.packtlvdata() + self.rawmsg = self.pack(self.flags, tlvdata) + + def typestr(self): + try: + return message_types[self.msgtype] + except KeyError: + return "unknown message type: %s" % str(self.msgtype) + + def flagstr(self): + msgflags = [] + flag = 1L + while True: + if (self.flags & flag): + try: + msgflags.append(self.flagmap[flag]) + except KeyError: + msgflags.append("0x%x" % flag) + flag <<= 1 + if not (self.flags & ~(flag - 1)): + break + return "0x%x <%s>" % (self.flags, " | ".join(msgflags)) + + def __str__(self): + tmp = "%s " % \ + (self.__class__.__name__, self.typestr(), self.flagstr()) + for k, v in self.tlvdata.iteritems(): + if k in self.tlvcls.tlvtypemap: + tlvtype = self.tlvcls.tlvtypemap[k] + else: + tlvtype = "tlv type %s" % k + tmp += "\n %s: %s" % (tlvtype, v) + return tmp + + def nodenumbers(self): + ''' Return a list of node numbers included in this message. + ''' + n = None + n2 = None + # not all messages have node numbers + if self.msgtype == CORE_API_NODE_MSG: + n = self.gettlv(CORE_TLV_NODE_NUMBER) + elif self.msgtype == CORE_API_LINK_MSG: + n = self.gettlv(CORE_TLV_LINK_N1NUMBER) + n2 = self.gettlv(CORE_TLV_LINK_N2NUMBER) + elif self.msgtype == CORE_API_EXEC_MSG: + n = self.gettlv(CORE_TLV_EXEC_NODE) + elif self.msgtype == CORE_API_CONF_MSG: + n = self.gettlv(CORE_TLV_CONF_NODE) + elif self.msgtype == CORE_API_FILE_MSG: + n = self.gettlv(CORE_TLV_FILE_NODE) + elif self.msgtype == CORE_API_IFACE_MSG: + n = self.gettlv(CORE_TLV_IFACE_NODE) + elif self.msgtype == CORE_API_EVENT_MSG: + n = self.gettlv(CORE_TLV_EVENT_NODE) + r = [] + if n is not None: + r.append(n) + if n2 is not None: + r.append(n2) + return r + + def sessionnumbers(self): + ''' Return a list of session numbers included in this message. + ''' + r = [] + if self.msgtype == CORE_API_SESS_MSG: + s = self.gettlv(CORE_TLV_SESS_NUMBER) + elif self.msgtype == CORE_API_EXCP_MSG: + s = self.gettlv(CORE_TLV_EXCP_SESSION) + else: + # All other messages share TLV number 0xA for the session number(s). + s = self.gettlv(CORE_TLV_NODE_SESSION) + if s is not None: + for sid in s.split('|'): + r.append(int(sid)) + return r + + +class CoreNodeMessage(CoreMessage): + msgtype = CORE_API_NODE_MSG + flagmap = message_flags + tlvcls = CoreNodeTlv + +class CoreLinkMessage(CoreMessage): + msgtype = CORE_API_LINK_MSG + flagmap = message_flags + tlvcls = CoreLinkTlv + +class CoreExecMessage(CoreMessage): + msgtype = CORE_API_EXEC_MSG + flagmap = message_flags + tlvcls = CoreExecTlv + +class CoreRegMessage(CoreMessage): + msgtype = CORE_API_REG_MSG + flagmap = message_flags + tlvcls = CoreRegTlv + +class CoreConfMessage(CoreMessage): + msgtype = CORE_API_CONF_MSG + flagmap = message_flags + tlvcls = CoreConfTlv + +class CoreFileMessage(CoreMessage): + msgtype = CORE_API_FILE_MSG + flagmap = message_flags + tlvcls = CoreFileTlv + +class CoreIfaceMessage(CoreMessage): + msgtype = CORE_API_IFACE_MSG + flagmap = message_flags + tlvcls = CoreIfaceTlv + +class CoreEventMessage(CoreMessage): + msgtype = CORE_API_EVENT_MSG + flagmap = message_flags + tlvcls = CoreEventTlv + +class CoreSessionMessage(CoreMessage): + msgtype = CORE_API_SESS_MSG + flagmap = message_flags + tlvcls = CoreSessionTlv + +class CoreExceptionMessage(CoreMessage): + msgtype = CORE_API_EXCP_MSG + flagmap = message_flags + tlvcls = CoreExceptionTlv + +msgclsmap = { + CORE_API_NODE_MSG: CoreNodeMessage, + CORE_API_LINK_MSG: CoreLinkMessage, + CORE_API_EXEC_MSG: CoreExecMessage, + CORE_API_REG_MSG: CoreRegMessage, + CORE_API_CONF_MSG: CoreConfMessage, + CORE_API_FILE_MSG: CoreFileMessage, + CORE_API_IFACE_MSG: CoreIfaceMessage, + CORE_API_EVENT_MSG: CoreEventMessage, + CORE_API_SESS_MSG: CoreSessionMessage, + CORE_API_EXCP_MSG: CoreExceptionMessage, +} + +def msg_class(msgtypeid): + global msgclsmap + return msgclsmap[msgtypeid] + +nodeclsmap = {} + +def add_node_class(name, nodetypeid, nodecls, change = False): + global nodeclsmap + if nodetypeid in nodeclsmap: + if not change: + raise ValueError, \ + "node class already exists for nodetypeid %s" % nodetypeid + nodeclsmap[nodetypeid] = nodecls + if nodetypeid not in node_types: + node_types[nodetypeid] = name + exec "%s = %s" % (name, nodetypeid) in globals() + elif name != node_types[nodetypeid]: + raise ValueError, "node type already exists for '%s'" % name + else: + pass + +def change_node_class(name, nodetypeid, nodecls): + return add_node_class(name, nodetypeid, nodecls, change = True) + +def node_class(nodetypeid): + global nodeclsmap + return nodeclsmap[nodetypeid] + +def str_to_list(s): + ''' Helper to convert pipe-delimited string ("a|b|c") into a list (a, b, c) + ''' + if s is None: + return None + return s.split("|") + +def state_name(n): + ''' Helper to convert state number into state name using event types. + ''' + if n in event_types: + eventname = event_types[n] + name = eventname.split('_')[2] + else: + name = "unknown" + return name diff --git a/daemon/core/api/data.py b/daemon/core/api/data.py new file mode 100644 index 00000000..a098cdb5 --- /dev/null +++ b/daemon/core/api/data.py @@ -0,0 +1,327 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Tom Goff +# +''' +data.py: constant definitions for the CORE API, enumerating the +different message and TLV types (these constants are also found in coreapi.h) +''' + +def enumdict(d): + for k, v in d.iteritems(): + exec "%s = %s" % (v, k) in globals() + +# Constants + +CORE_API_VER = "1.21" +CORE_API_PORT = 4038 + +# Message types + +message_types = { + 0x01: "CORE_API_NODE_MSG", + 0x02: "CORE_API_LINK_MSG", + 0x03: "CORE_API_EXEC_MSG", + 0x04: "CORE_API_REG_MSG", + 0x05: "CORE_API_CONF_MSG", + 0x06: "CORE_API_FILE_MSG", + 0x07: "CORE_API_IFACE_MSG", + 0x08: "CORE_API_EVENT_MSG", + 0x09: "CORE_API_SESS_MSG", + 0x0A: "CORE_API_EXCP_MSG", + 0x0B: "CORE_API_MSG_MAX", +} + +enumdict(message_types) + +# Generic Message Flags + +message_flags = { + 0x01: "CORE_API_ADD_FLAG", + 0x02: "CORE_API_DEL_FLAG", + 0x04: "CORE_API_CRI_FLAG", + 0x08: "CORE_API_LOC_FLAG", + 0x10: "CORE_API_STR_FLAG", + 0x20: "CORE_API_TXT_FLAG", + 0x40: "CORE_API_TTY_FLAG", +} + +enumdict(message_flags) + +# Node Message TLV Types + +node_tlvs = { + 0x01: "CORE_TLV_NODE_NUMBER", + 0x02: "CORE_TLV_NODE_TYPE", + 0x03: "CORE_TLV_NODE_NAME", + 0x04: "CORE_TLV_NODE_IPADDR", + 0x05: "CORE_TLV_NODE_MACADDR", + 0x06: "CORE_TLV_NODE_IP6ADDR", + 0x07: "CORE_TLV_NODE_MODEL", + 0x08: "CORE_TLV_NODE_EMUSRV", + 0x0A: "CORE_TLV_NODE_SESSION", + 0x20: "CORE_TLV_NODE_XPOS", + 0x21: "CORE_TLV_NODE_YPOS", + 0x22: "CORE_TLV_NODE_CANVAS", + 0x23: "CORE_TLV_NODE_EMUID", + 0x24: "CORE_TLV_NODE_NETID", + 0x25: "CORE_TLV_NODE_SERVICES", + 0x30: "CORE_TLV_NODE_LAT", + 0x31: "CORE_TLV_NODE_LONG", + 0x32: "CORE_TLV_NODE_ALT", + 0x42: "CORE_TLV_NODE_ICON", + 0x50: "CORE_TLV_NODE_OPAQUE", +} + +enumdict(node_tlvs) + +node_types = dict(enumerate([ + "CORE_NODE_DEF", + "CORE_NODE_PHYS", + "CORE_NODE_XEN", + "CORE_NODE_TBD", + "CORE_NODE_SWITCH", + "CORE_NODE_HUB", + "CORE_NODE_WLAN", + "CORE_NODE_RJ45", + "CORE_NODE_TUNNEL", + "CORE_NODE_KTUNNEL", + "CORE_NODE_EMANE", +])) + +enumdict(node_types) + +rj45_models = dict(enumerate([ + "RJ45_MODEL_LINKED", + "RJ45_MODEL_WIRELESS", + "RJ45_MODEL_INSTALLED", +])) + +enumdict(rj45_models) + +# Link Message TLV Types + +link_tlvs = { + 0x01: "CORE_TLV_LINK_N1NUMBER", + 0x02: "CORE_TLV_LINK_N2NUMBER", + 0x03: "CORE_TLV_LINK_DELAY", + 0x04: "CORE_TLV_LINK_BW", + 0x05: "CORE_TLV_LINK_PER", + 0x06: "CORE_TLV_LINK_DUP", + 0x07: "CORE_TLV_LINK_JITTER", + 0x08: "CORE_TLV_LINK_MER", + 0x09: "CORE_TLV_LINK_BURST", + CORE_TLV_NODE_SESSION: "CORE_TLV_LINK_SESSION", + 0x10: "CORE_TLV_LINK_MBURST", + 0x20: "CORE_TLV_LINK_TYPE", + 0x21: "CORE_TLV_LINK_GUIATTR", + 0x23: "CORE_TLV_LINK_EMUID", + 0x24: "CORE_TLV_LINK_NETID", + 0x25: "CORE_TLV_LINK_KEY", + 0x30: "CORE_TLV_LINK_IF1NUM", + 0x31: "CORE_TLV_LINK_IF1IP4", + 0x32: "CORE_TLV_LINK_IF1IP4MASK", + 0x33: "CORE_TLV_LINK_IF1MAC", + 0x34: "CORE_TLV_LINK_IF1IP6", + 0x35: "CORE_TLV_LINK_IF1IP6MASK", + 0x36: "CORE_TLV_LINK_IF2NUM", + 0x37: "CORE_TLV_LINK_IF2IP4", + 0x38: "CORE_TLV_LINK_IF2IP4MASK", + 0x39: "CORE_TLV_LINK_IF2MAC", + 0x40: "CORE_TLV_LINK_IF2IP6", + 0x41: "CORE_TLV_LINK_IF2IP6MASK", + 0x50: "CORE_TLV_LINK_OPAQUE", +} + +enumdict(link_tlvs) + +link_types = dict(enumerate([ + "CORE_LINK_WIRELESS", + "CORE_LINK_WIRED", +])) + +enumdict(link_types) + +# Execute Message TLV Types + +exec_tlvs = { + 0x01: "CORE_TLV_EXEC_NODE", + 0x02: "CORE_TLV_EXEC_NUM", + 0x03: "CORE_TLV_EXEC_TIME", + 0x04: "CORE_TLV_EXEC_CMD", + 0x05: "CORE_TLV_EXEC_RESULT", + 0x06: "CORE_TLV_EXEC_STATUS", + CORE_TLV_NODE_SESSION: "CORE_TLV_EXEC_SESSION", +} + +enumdict(exec_tlvs) + +# Register Message TLV Types + +reg_tlvs = { + 0x01: "CORE_TLV_REG_WIRELESS", + 0x02: "CORE_TLV_REG_MOBILITY", + 0x03: "CORE_TLV_REG_UTILITY", + 0x04: "CORE_TLV_REG_EXECSRV", + 0x05: "CORE_TLV_REG_GUI", + 0x06: "CORE_TLV_REG_EMULSRV", + CORE_TLV_NODE_SESSION: "CORE_TLV_REG_SESSION", +} + +enumdict(reg_tlvs) + +# Configuration Message TLV Types + +conf_tlvs = { + 0x01: "CORE_TLV_CONF_NODE", + 0x02: "CORE_TLV_CONF_OBJ", + 0x03: "CORE_TLV_CONF_TYPE", + 0x04: "CORE_TLV_CONF_DATA_TYPES", + 0x05: "CORE_TLV_CONF_VALUES", + 0x06: "CORE_TLV_CONF_CAPTIONS", + 0x07: "CORE_TLV_CONF_BITMAP", + 0x08: "CORE_TLV_CONF_POSSIBLE_VALUES", + 0x09: "CORE_TLV_CONF_GROUPS", + CORE_TLV_NODE_SESSION: "CORE_TLV_CONF_SESSION", + CORE_TLV_NODE_NETID: "CORE_TLV_CONF_NETID", + 0x50: "CORE_TLV_CONF_OPAQUE", +} + +enumdict(conf_tlvs) + +conf_flags = { + 0x00: "CONF_TYPE_FLAGS_NONE", + 0x01: "CONF_TYPE_FLAGS_REQUEST", + 0x02: "CONF_TYPE_FLAGS_UPDATE", + 0x03: "CONF_TYPE_FLAGS_RESET", +} + +enumdict(conf_flags) + +conf_data_types = { + 0x01: "CONF_DATA_TYPE_UINT8", + 0x02: "CONF_DATA_TYPE_UINT16", + 0x03: "CONF_DATA_TYPE_UINT32", + 0x04: "CONF_DATA_TYPE_UINT64", + 0x05: "CONF_DATA_TYPE_INT8", + 0x06: "CONF_DATA_TYPE_INT16", + 0x07: "CONF_DATA_TYPE_INT32", + 0x08: "CONF_DATA_TYPE_INT64", + 0x09: "CONF_DATA_TYPE_FLOAT", + 0x0A: "CONF_DATA_TYPE_STRING", + 0x0B: "CONF_DATA_TYPE_BOOL", +} + +enumdict(conf_data_types) + +# File Message TLV Types + +file_tlvs = { + 0x01: "CORE_TLV_FILE_NODE", + 0x02: "CORE_TLV_FILE_NAME", + 0x03: "CORE_TLV_FILE_MODE", + 0x04: "CORE_TLV_FILE_NUM", + 0x05: "CORE_TLV_FILE_TYPE", + 0x06: "CORE_TLV_FILE_SRCNAME", + CORE_TLV_NODE_SESSION: "CORE_TLV_FILE_SESSION", + 0x10: "CORE_TLV_FILE_DATA", + 0x11: "CORE_TLV_FILE_CMPDATA", +} + +enumdict(file_tlvs) + +# Interface Message TLV Types + +iface_tlvs = { + 0x01: "CORE_TLV_IFACE_NODE", + 0x02: "CORE_TLV_IFACE_NUM", + 0x03: "CORE_TLV_IFACE_NAME", + 0x04: "CORE_TLV_IFACE_IPADDR", + 0x05: "CORE_TLV_IFACE_MASK", + 0x06: "CORE_TLV_IFACE_MACADDR", + 0x07: "CORE_TLV_IFACE_IP6ADDR", + 0x08: "CORE_TLV_IFACE_IP6MASK", + 0x09: "CORE_TLV_IFACE_TYPE", + CORE_TLV_NODE_SESSION: "CORE_TLV_IFACE_SESSION", + 0x0B: "CORE_TLV_IFACE_STATE", + CORE_TLV_NODE_EMUID: "CORE_TLV_IFACE_EMUID", + CORE_TLV_NODE_NETID: "CORE_TLV_IFACE_NETID", +} + +enumdict(iface_tlvs) + +# Event Message TLV Types + +event_tlvs = { + 0x01: "CORE_TLV_EVENT_NODE", + 0x02: "CORE_TLV_EVENT_TYPE", + 0x03: "CORE_TLV_EVENT_NAME", + 0x04: "CORE_TLV_EVENT_DATA", + 0x05: "CORE_TLV_EVENT_TIME", + CORE_TLV_NODE_SESSION: "CORE_TLV_EVENT_SESSION", +} + +enumdict(event_tlvs) + +event_types = dict(enumerate([ + "CORE_EVENT_NONE", + "CORE_EVENT_DEFINITION_STATE", + "CORE_EVENT_CONFIGURATION_STATE", + "CORE_EVENT_INSTANTIATION_STATE", + "CORE_EVENT_RUNTIME_STATE", + "CORE_EVENT_DATACOLLECT_STATE", + "CORE_EVENT_SHUTDOWN_STATE", + "CORE_EVENT_START", + "CORE_EVENT_STOP", + "CORE_EVENT_PAUSE", + "CORE_EVENT_RESTART", + "CORE_EVENT_FILE_OPEN", + "CORE_EVENT_FILE_SAVE", + "CORE_EVENT_SCHEDULED", +])) + +enumdict(event_types) + +# Session Message TLV Types + +session_tlvs = { + 0x01: "CORE_TLV_SESS_NUMBER", + 0x02: "CORE_TLV_SESS_NAME", + 0x03: "CORE_TLV_SESS_FILE", + 0x04: "CORE_TLV_SESS_NODECOUNT", + 0x05: "CORE_TLV_SESS_DATE", + 0x06: "CORE_TLV_SESS_THUMB", + 0x07: "CORE_TLV_SESS_USER", + 0x0A: "CORE_TLV_SESS_OPAQUE", +} + +enumdict(session_tlvs) + +# Exception Message TLV Types + +exception_tlvs = { + 0x01: "CORE_TLV_EXCP_NODE", + 0x02: "CORE_TLV_EXCP_SESSION", + 0x03: "CORE_TLV_EXCP_LEVEL", + 0x04: "CORE_TLV_EXCP_SOURCE", + 0x05: "CORE_TLV_EXCP_DATE", + 0x06: "CORE_TLV_EXCP_TEXT", + 0x0A: "CORE_TLV_EXCP_OPAQUE", +} + +enumdict(exception_tlvs) + +exception_levels = dict(enumerate([ + "CORE_EXCP_LEVEL_NONE", + "CORE_EXCP_LEVEL_FATAL", + "CORE_EXCP_LEVEL_ERROR", + "CORE_EXCP_LEVEL_WARNING", + "CORE_EXCP_LEVEL_NOTICE", +])) + +enumdict(exception_levels) + +del enumdict diff --git a/daemon/core/broker.py b/daemon/core/broker.py new file mode 100644 index 00000000..abd3da8a --- /dev/null +++ b/daemon/core/broker.py @@ -0,0 +1,858 @@ +# +# CORE +# Copyright (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +broker.py: definition of CoreBroker class that is part of the +pycore session object. Handles distributing parts of the emulation out to +other emulation servers. The broker is consulted during the +CoreRequestHandler.handlemsg() loop to determine if messages should be handled +locally or forwarded on to another emulation server. +''' + +import os, socket, select, threading, sys +from core.api import coreapi +from core.coreobj import PyCoreNode, PyCoreNet +from core.emane.nodes import EmaneNet +from core.phys.pnodes import PhysicalNode +from core.misc.ipaddr import IPAddr +from core.conf import ConfigurableManager +if os.uname()[0] == "Linux": + from core.netns.vif import GreTap + from core.netns.vnet import GreTapBridge + + +class CoreBroker(ConfigurableManager): + ''' Member of pycore session class for handling global emulation server + data. + ''' + _name = "broker" + _type = coreapi.CORE_TLV_REG_UTILITY + + def __init__(self, session, verbose = False): + ConfigurableManager.__init__(self, session) + self.session_id_master = None + self.myip = None + self.verbose = verbose + # dict containing tuples of (host, port, sock) + self.servers = {} + self.servers_lock = threading.Lock() + self.addserver("localhost", None, None) + # dict containing node number to server name mapping + self.nodemap = {} + # this lock also protects self.nodecounts + self.nodemap_lock = threading.Lock() + # reference counts of nodes on servers + self.nodecounts = { } + self.bootcount = 0 + # list of node numbers that are link-layer nodes (networks) + self.nets = [] + # list of node numbers that are PhysicalNode nodes + self.phys = [] + # allows for other message handlers to process API messages (e.g. EMANE) + self.handlers = () + # dict with tunnel key to tunnel device mapping + self.tunnels = {} + self.dorecvloop = False + self.recvthread = None + + def startup(self): + ''' Build tunnels between network-layer nodes now that all node + and link information has been received; called when session + enters the instantation state. + ''' + self.addnettunnels() + self.writeservers() + + def shutdown(self): + ''' Close all active sockets; called when the session enters the + data collect state + ''' + with self.servers_lock: + while len(self.servers) > 0: + (server, v) = self.servers.popitem() + (host, port, sock) = v + if sock is None: + continue + if self.verbose: + self.session.info("closing connection with %s @ %s:%s" % \ + (server, host, port)) + sock.close() + self.reset() + self.dorecvloop = False + if self.recvthread is not None: + self.recvthread.join() + + def reset(self): + ''' Reset to initial state. + ''' + self.nodemap_lock.acquire() + self.nodemap.clear() + for server in self.nodecounts: + if self.nodecounts[server] < 1: + self.delserver(server) + self.nodecounts.clear() + self.bootcount = 0 + self.nodemap_lock.release() + del self.nets[:] + del self.phys[:] + while len(self.tunnels) > 0: + (key, gt) = self.tunnels.popitem() + gt.shutdown() + + def startrecvloop(self): + ''' Spawn the recvloop() thread if it hasn't been already started. + ''' + if self.recvthread is not None: + if self.recvthread.isAlive(): + return + else: + self.recvthread.join() + # start reading data from connected sockets + self.dorecvloop = True + self.recvthread = threading.Thread(target = self.recvloop) + self.recvthread.daemon = True + self.recvthread.start() + + def recvloop(self): + ''' Thread target that receives messages from server sockets. + ''' + self.dorecvloop = True + # note: this loop continues after emulation is stopped, + # even with 0 servers + while self.dorecvloop: + rlist = [] + with self.servers_lock: + # build a socket list for select call + for name in self.servers: + (h, p, sock) = self.servers[name] + if sock is not None: + rlist.append(sock.fileno()) + r, w, x = select.select(rlist, [], [], 1.0) + for sockfd in r: + try: + (h, p, sock, name) = self.getserverbysock(sockfd) + except KeyError: + # servers may have changed; loop again + break + rcvlen = self.recv(sock, h) + if rcvlen == 0: + if self.verbose: + self.session.info("connection with %s @ %s:%s" \ + " has closed" % (name, h, p)) + self.servers[name] = (h, p, None) + + + def recv(self, sock, host): + ''' Receive data on an emulation server socket and broadcast it to + all connected session handlers. Returns the length of data recevied + and forwarded. Return value of zero indicates the socket has closed + and should be removed from the self.servers dict. + ''' + msghdr = sock.recv(coreapi.CoreMessage.hdrsiz) + if len(msghdr) == 0: + # server disconnected + sock.close() + return 0 + if len(msghdr) != coreapi.CoreMessage.hdrsiz: + if self.verbose: + self.session.info("warning: broker received not enough data " \ + "len=%s" % len(msghdr)) + return len(msghdr) + + msgtype, msgflags, msglen = coreapi.CoreMessage.unpackhdr(msghdr) + msgdata = sock.recv(msglen) + data = msghdr + msgdata + count = None + # snoop exec response for remote interactive TTYs + if msgtype == coreapi.CORE_API_EXEC_MSG and \ + msgflags & coreapi.CORE_API_TTY_FLAG: + data = self.fixupremotetty(msghdr, msgdata, host) + elif msgtype == coreapi.CORE_API_NODE_MSG: + # snoop node delete response to decrement node counts + if msgflags & coreapi.CORE_API_DEL_FLAG: + msg = coreapi.CoreNodeMessage(msgflags, msghdr, msgdata) + nodenum = msg.gettlv(coreapi.CORE_TLV_NODE_NUMBER) + if nodenum is not None: + count = self.delnodemap(sock, nodenum) + # snoop node add response to increment booted node count + # (only CoreNodes send these response messages) + elif msgflags & \ + (coreapi.CORE_API_ADD_FLAG | coreapi.CORE_API_LOC_FLAG): + self.incrbootcount() + self.session.checkruntime() + + self.session.broadcastraw(None, data) + if count is not None and count < 1: + return 0 + else: + return len(data) + + def addserver(self, name, host, port): + ''' Add a new server, and try to connect to it. If we're already + connected to this (host, port), then leave it alone. When host,port + is None, do not try to connect. + ''' + self.servers_lock.acquire() + if name in self.servers: + (oldhost, oldport, sock) = self.servers[name] + if host == oldhost or port == oldport: + # leave this socket connected + if sock is not None: + self.servers_lock.release() + return + if self.verbose and host is not None and sock is not None: + self.session.info("closing connection with %s @ %s:%s" % \ + (name, host, port)) + if sock is not None: + sock.close() + self.servers_lock.release() + if self.verbose and host is not None: + self.session.info("adding server %s @ %s:%s" % (name, host, port)) + if host is None: + sock = None + else: + sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) + #sock.setblocking(0) + #error = sock.connect_ex((host, port)) + try: + sock.connect((host, port)) + self.startrecvloop() + except Exception, e: + self.session.warn("error connecting to server %s:%s:\n\t%s" % \ + (host, port, e)) + sock.close() + sock = None + self.servers_lock.acquire() + self.servers[name] = (host, port, sock) + self.servers_lock.release() + + def delserver(self, name): + ''' Remove a server and hang up any connection. + ''' + self.servers_lock.acquire() + if name not in self.servers: + self.servers_lock.release() + return + (host, port, sock) = self.servers.pop(name) + if sock is not None: + if self.verbose: + self.session.info("closing connection with %s @ %s:%s" % \ + (name, host, port)) + sock.close() + self.servers_lock.release() + + def getserver(self, name): + ''' Return the (host, port, sock) tuple, or raise a KeyError exception. + ''' + if name not in self.servers: + raise KeyError, "emulation server %s not found" % name + return self.servers[name] + + def getserverbysock(self, sockfd): + ''' Return a (host, port, sock, name) tuple based on socket file + descriptor, or raise a KeyError exception. + ''' + with self.servers_lock: + for name in self.servers: + (host, port, sock) = self.servers[name] + if sock is None: + continue + if sock.fileno() == sockfd: + return (host, port, sock, name) + raise KeyError, "socket fd %s not found" % sockfd + + def getserverlist(self): + ''' Return the list of server names (keys from self.servers). + ''' + with self.servers_lock: + serverlist = sorted(self.servers.keys()) + return serverlist + + def tunnelkey(self, n1num, n2num): + ''' Compute a 32-bit key used to uniquely identify a GRE tunnel. + The hash(n1num), hash(n2num) values are used, so node numbers may be + None or string values (used for e.g. "ctrlnet"). + ''' + sid = self.session_id_master + if sid is None: + # this is the master session + sid = self.session.sessionid + + key = (sid << 16) | hash(n1num) | (hash(n2num) << 8) + return key & 0xFFFFFFFF + + def addtunnel(self, remoteip, n1num, n2num, localnum): + ''' Add a new GreTapBridge between nodes on two different machines. + ''' + key = self.tunnelkey(n1num, n2num) + if localnum == n2num: + remotenum = n1num + else: + remotenum = n2num + if key in self.tunnels.keys(): + self.session.warn("tunnel with key %s (%s-%s) already exists!" % \ + (key, n1num, n2num)) + else: + objid = key & ((1<<16)-1) + self.session.info("Adding tunnel for %s-%s to %s with key %s" % \ + (n1num, n2num, remoteip, key)) + if localnum in self.phys: + # no bridge is needed on physical nodes; use the GreTap directly + gt = GreTap(node=None, name=None, session=self.session, + remoteip=remoteip, key=key) + else: + gt = self.session.addobj(cls = GreTapBridge, objid = objid, + policy="ACCEPT", remoteip=remoteip, key = key) + gt.localnum = localnum + gt.remotenum = remotenum + self.tunnels[key] = gt + + def addnettunnels(self): + ''' Add GreTaps between network devices on different machines. + The GreTapBridge is not used since that would add an extra bridge. + ''' + for n in self.nets: + self.addnettunnel(n) + + def addnettunnel(self, n): + try: + net = self.session.obj(n) + except KeyError: + raise KeyError, "network node %s not found" % n + # add other nets here that do not require tunnels + if isinstance(net, EmaneNet): + return None + + servers = self.getserversbynode(n) + if len(servers) < 2: + return None + hosts = [] + for server in servers: + (host, port, sock) = self.getserver(server) + if host is None: + continue + hosts.append(host) + if len(hosts) == 0: + # get IP address from API message sender (master) + self.session._handlerslock.acquire() + for h in self.session._handlers: + if h.client_address != "": + hosts.append(h.client_address[0]) + self.session._handlerslock.release() + + r = [] + for host in hosts: + if self.myip: + # we are the remote emulation server + myip = self.myip + else: + # we are the session master + myip = host + key = self.tunnelkey(n, IPAddr.toint(myip)) + if key in self.tunnels.keys(): + continue + self.session.info("Adding tunnel for net %s to %s with key %s" % \ + (n, host, key)) + gt = GreTap(node=None, name=None, session=self.session, + remoteip=host, key=key) + self.tunnels[key] = gt + r.append(gt) + # attaching to net will later allow gt to be destroyed + # during net.shutdown() + net.attach(gt) + return r + + def deltunnel(self, n1num, n2num): + ''' Cleanup of the GreTapBridge. + ''' + key = self.tunnelkey(n1num, n2num) + try: + gt = self.tunnels.pop(key) + except KeyError: + gt = None + if gt: + self.session.delobj(gt.objid) + del gt + + def gettunnel(self, n1num, n2num): + ''' Return the GreTap between two nodes if it exists. + ''' + key = self.tunnelkey(n1num, n2num) + if key in self.tunnels.keys(): + return self.tunnels[key] + else: + return None + + def addnodemap(self, server, nodenum): + ''' Record a node number to emulation server mapping. + ''' + self.nodemap_lock.acquire() + if nodenum in self.nodemap: + if server in self.nodemap[nodenum]: + self.nodemap_lock.release() + return + self.nodemap[nodenum].append(server) + else: + self.nodemap[nodenum] = [server,] + if server in self.nodecounts: + self.nodecounts[server] += 1 + else: + self.nodecounts[server] = 1 + self.nodemap_lock.release() + + def delnodemap(self, sock, nodenum): + ''' Remove a node number to emulation server mapping. + Return the number of nodes left on this server. + ''' + self.nodemap_lock.acquire() + count = None + if nodenum not in self.nodemap: + self.nodemap_lock.release() + return count + found = False + for server in self.nodemap[nodenum]: + (host, port, srvsock) = self.getserver(server) + if srvsock == sock: + found = True + break + if server in self.nodecounts: + count = self.nodecounts[server] + if found: + self.nodemap[nodenum].remove(server) + if server in self.nodecounts: + count -= 1 + self.nodecounts[server] = count + self.nodemap_lock.release() + return count + + def incrbootcount(self): + ''' Count a node that has booted. + ''' + self.bootcount += 1 + return self.bootcount + + def getbootcount(self): + ''' Return the number of booted nodes. + ''' + return self.bootcount + + def getserversbynode(self, nodenum): + ''' Retrieve a list of emulation servers given a node number. + ''' + self.nodemap_lock.acquire() + if nodenum not in self.nodemap: + self.nodemap_lock.release() + return [] + r = self.nodemap[nodenum] + self.nodemap_lock.release() + return r + + def addnet(self, nodenum): + ''' Add a node number to the list of link-layer nodes. + ''' + if nodenum not in self.nets: + self.nets.append(nodenum) + + def addphys(self, nodenum): + ''' Add a node number to the list of physical nodes. + ''' + if nodenum not in self.phys: + self.phys.append(nodenum) + + def configure_reset(self, msg): + ''' Ignore reset messages, because node delete responses may still + arrive and require the use of nodecounts. + ''' + return None + + def configure_values(self, msg, values): + ''' Receive configuration message with a list of server:host:port + combinations that we'll need to connect with. + ''' + objname = msg.gettlv(coreapi.CORE_TLV_CONF_OBJ) + conftype = msg.gettlv(coreapi.CORE_TLV_CONF_TYPE) + + if values is None: + self.session.info("emulation server data missing") + return None + values = values.split('|') + # string of "server:ip:port,server:ip:port,..." + serverstrings = values[0] + server_list = serverstrings.split(',') + for server in server_list: + server_items = server.split(':') + (name, host, port) = server_items[:3] + if host == '': + host = None + if port == '': + port = None + else: + port = int(port) + sid = msg.gettlv(coreapi.CORE_TLV_CONF_SESSION) + if sid is not None: + # receive session ID and my IP from master + self.session_id_master = int(sid.split('|')[0]) + self.myip = host + host = None + port = None + # this connects to the server immediately; maybe we should wait + # or spin off a new "client" thread here + self.addserver(name, host, port) + self.setupserver(name) + return None + + def handlemsg(self, msg): + ''' Handle an API message. Determine whether this needs to be handled + by the local server or forwarded on to another one. + Returns True when message does not need to be handled locally, + and performs forwarding if required. + Returning False indicates this message should be handled locally. + ''' + serverlist = [] + handle_locally = False + # Do not forward messages when in definition state + # (for e.g. configuring services) + if self.session.getstate() == coreapi.CORE_EVENT_DEFINITION_STATE: + handle_locally = True + return not handle_locally + # Decide whether message should be handled locally or forwarded, or both + if msg.msgtype == coreapi.CORE_API_NODE_MSG: + (handle_locally, serverlist) = self.handlenodemsg(msg) + elif msg.msgtype == coreapi.CORE_API_EVENT_MSG: + # broadcast events everywhere + serverlist = self.getserverlist() + elif msg.msgtype == coreapi.CORE_API_CONF_MSG: + # broadcast location and services configuration everywhere + confobj = msg.gettlv(coreapi.CORE_TLV_CONF_OBJ) + if confobj == "location" or confobj == "services" or \ + confobj == "session": + serverlist = self.getserverlist() + elif msg.msgtype == coreapi.CORE_API_FILE_MSG: + # broadcast hook scripts and custom service files everywhere + filetype = msg.gettlv(coreapi.CORE_TLV_FILE_TYPE) + if filetype is not None and \ + (filetype[:5] == "hook:" or filetype[:8] == "service:"): + serverlist = self.getserverlist() + + if msg.msgtype == coreapi.CORE_API_LINK_MSG: + # prepare a serverlist from two node numbers in link message + (handle_locally, serverlist, msg) = self.handlelinkmsg(msg) + elif len(serverlist) == 0: + # check for servers based on node numbers in all messages but link + nn = msg.nodenumbers() + if len(nn) == 0: + return False + serverlist = self.getserversbynode(nn[0]) + + if len(serverlist) == 0: + handle_locally = True + + # allow other handlers to process this message + # (this is used by e.g. EMANE to use the link add message to keep counts + # of interfaces on other servers) + for handler in self.handlers: + handler(msg) + + # Perform any message forwarding + handle_locally = self.forwardmsg(msg, serverlist, handle_locally) + return not handle_locally + + def setupserver(self, server): + ''' Send the appropriate API messages for configuring the specified + emulation server. + ''' + (host, port, sock) = self.getserver(server) + if host is None or sock is None: + return + # communicate this session's current state to the server + tlvdata = coreapi.CoreEventTlv.pack(coreapi.CORE_TLV_EVENT_TYPE, + self.session.getstate()) + msg = coreapi.CoreEventMessage.pack(0, tlvdata) + sock.send(msg) + # send a Configuration message for the broker object and inform the + # server of its local name + tlvdata = "" + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_OBJ, "broker") + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_TYPE, + coreapi.CONF_TYPE_FLAGS_UPDATE) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_DATA_TYPES, + (coreapi.CONF_DATA_TYPE_STRING,)) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_VALUES, + "%s:%s:%s" % (server, host, port)) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_SESSION, + "%s" % self.session.sessionid) + msg = coreapi.CoreConfMessage.pack(0, tlvdata) + sock.send(msg) + + @staticmethod + def fixupremotetty(msghdr, msgdata, host): + ''' When an interactive TTY request comes from the GUI, snoop the reply + and add an SSH command to the appropriate remote server. + ''' + msgtype, msgflags, msglen = coreapi.CoreMessage.unpackhdr(msghdr) + msgcls = coreapi.msg_class(msgtype) + msg = msgcls(msgflags, msghdr, msgdata) + + nodenum = msg.gettlv(coreapi.CORE_TLV_EXEC_NODE) + execnum = msg.gettlv(coreapi.CORE_TLV_EXEC_NUM) + cmd = msg.gettlv(coreapi.CORE_TLV_EXEC_CMD) + res = msg.gettlv(coreapi.CORE_TLV_EXEC_RESULT) + + tlvdata = "" + tlvdata += coreapi.CoreExecTlv.pack(coreapi.CORE_TLV_EXEC_NODE, nodenum) + tlvdata += coreapi.CoreExecTlv.pack(coreapi.CORE_TLV_EXEC_NUM, execnum) + tlvdata += coreapi.CoreExecTlv.pack(coreapi.CORE_TLV_EXEC_CMD, cmd) + title = "\\\"CORE: n%s @ %s\\\"" % (nodenum, host) + res = "ssh -X -f " + host + " xterm -e " + res + tlvdata += coreapi.CoreExecTlv.pack(coreapi.CORE_TLV_EXEC_RESULT, res) + + return coreapi.CoreExecMessage.pack(msgflags, tlvdata) + + def handlenodemsg(self, msg): + ''' Determine and return the servers to which this node message should + be forwarded. Also keep track of link-layer nodes and the mapping of + nodes to servers. + ''' + serverlist = [] + handle_locally = False + serverfiletxt = None + # snoop Node Message for emulation server TLV and record mapping + n = msg.tlvdata[coreapi.CORE_TLV_NODE_NUMBER] + # replicate link-layer nodes on all servers + nodetype = msg.gettlv(coreapi.CORE_TLV_NODE_TYPE) + if nodetype is not None: + try: + nodecls = coreapi.node_class(nodetype) + except KeyError: + self.session.warn("broker invalid node type %s" % nodetype) + return (False, serverlist) + if nodecls is None: + self.session.warn("broker unimplemented node type %s" % nodetype) + return (False, serverlist) + if issubclass(nodecls, PyCoreNet) and \ + nodetype != coreapi.CORE_NODE_WLAN: + # network node replicated on all servers; could be optimized + # don't replicate WLANs, because ebtables rules won't work + serverlist = self.getserverlist() + handle_locally = True + self.addnet(n) + for server in serverlist: + self.addnodemap(server, n) + # do not record server name for networks since network + # nodes are replicated across all server + return (handle_locally, serverlist) + if issubclass(nodecls, PyCoreNet) and \ + nodetype == coreapi.CORE_NODE_WLAN: + # special case where remote WLANs not in session._objs, and no + # node response message received, so they are counted here + if msg.gettlv(coreapi.CORE_TLV_NODE_EMUSRV) is not None: + self.incrbootcount() + elif issubclass(nodecls, PyCoreNode): + name = msg.gettlv(coreapi.CORE_TLV_NODE_NAME) + if name: + serverfiletxt = "%s %s %s" % (n, name, nodecls) + if issubclass(nodecls, PhysicalNode): + # remember physical nodes + self.addphys(n) + + # emulation server TLV specifies server + server = msg.gettlv(coreapi.CORE_TLV_NODE_EMUSRV) + if server is not None: + self.addnodemap(server, n) + if server not in serverlist: + serverlist.append(server) + if serverfiletxt and self.session.master: + self.writenodeserver(serverfiletxt, server) + # hook to update coordinates of physical nodes + if n in self.phys: + self.session.mobility.physnodeupdateposition(msg) + return (handle_locally, serverlist) + + def handlelinkmsg(self, msg): + ''' Determine and return the servers to which this link message should + be forwarded. Also build tunnels between different servers or add + opaque data to the link message before forwarding. + ''' + serverlist = [] + handle_locally = False + + # determine link message destination using non-network nodes + nn = msg.nodenumbers() + if nn[0] in self.nets: + if nn[1] in self.nets: + # two network nodes linked together - prevent loops caused by + # the automatic tunnelling + handle_locally = True + else: + serverlist = self.getserversbynode(nn[1]) + elif nn[1] in self.nets: + serverlist = self.getserversbynode(nn[0]) + else: + serverset1 = set(self.getserversbynode(nn[0])) + serverset2 = set(self.getserversbynode(nn[1])) + # nodes are on two different servers, build tunnels as needed + if serverset1 != serverset2: + localn = None + if len(serverset1) == 0 or len(serverset2) == 0: + handle_locally = True + serverlist = list(serverset1 | serverset2) + host = None + # get the IP of remote server and decide which node number + # is for a local node + for server in serverlist: + (host, port, sock) = self.getserver(server) + if host is None: + # named server is local + handle_locally = True + if server in serverset1: + localn = nn[0] + else: + localn = nn[1] + if handle_locally and localn is None: + # having no local node at this point indicates local node is + # the one with the empty serverset + if len(serverset1) == 0: + localn = nn[0] + elif len(serverset2) == 0: + localn = nn[1] + if host is None: + host = self.getlinkendpoint(msg, localn == nn[0]) + if localn is None: + msg = self.addlinkendpoints(msg, serverset1, serverset2) + elif msg.flags & coreapi.CORE_API_ADD_FLAG: + self.addtunnel(host, nn[0], nn[1], localn) + elif msg.flags & coreapi.CORE_API_DEL_FLAG: + self.deltunnel(nn[0], nn[1]) + handle_locally = False + else: + serverlist = list(serverset1 | serverset2) + + return (handle_locally, serverlist, msg) + + def addlinkendpoints(self, msg, serverset1, serverset2): + ''' For a link message that is not handled locally, inform the remote + servers of the IP addresses used as tunnel endpoints by adding + opaque data to the link message. + ''' + ip1 = "" + for server in serverset1: + (host, port, sock) = self.getserver(server) + if host is not None: + ip1 = host + ip2 = "" + for server in serverset2: + (host, port, sock) = self.getserver(server) + if host is not None: + ip2 = host + tlvdata = msg.rawmsg[coreapi.CoreMessage.hdrsiz:] + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_OPAQUE, + "%s:%s" % (ip1, ip2)) + newraw = coreapi.CoreLinkMessage.pack(msg.flags, tlvdata) + msghdr = newraw[:coreapi.CoreMessage.hdrsiz] + return coreapi.CoreLinkMessage(msg.flags, msghdr, tlvdata) + + def getlinkendpoint(self, msg, first_is_local): + ''' A link message between two different servers has been received, + and we need to determine the tunnel endpoint. First look for + opaque data in the link message, otherwise use the IP of the message + sender (the master server). + ''' + host = None + opaque = msg.gettlv(coreapi.CORE_TLV_LINK_OPAQUE) + if opaque is not None: + if first_is_local: + host = opaque.split(':')[1] + else: + host = opaque.split(':')[0] + if host == "": + host = None + if host is None: + # get IP address from API message sender (master) + self.session._handlerslock.acquire() + for h in self.session._handlers: + if h.client_address != "": + host = h.client_address[0] + self.session._handlerslock.release() + return host + + def forwardmsg(self, msg, serverlist, handle_locally): + ''' Forward API message to all servers in serverlist; if an empty + host/port is encountered, set the handle_locally flag. Returns the + value of the handle_locally flag, which may be unchanged. + ''' + for server in serverlist: + try: + (host, port, sock) = self.getserver(server) + except KeyError: + # server not found, don't handle this message locally + self.session.info("broker could not find server %s, message " \ + "with type %s dropped" % \ + (server, msg.msgtype)) + continue + if host is None and port is None: + # local emulation server, handle this locally + handle_locally = True + else: + if sock is None: + self.session.info("server %s @ %s:%s is disconnected" % \ + (server, host, port)) + else: + sock.send(msg.rawmsg) + return handle_locally + + def writeservers(self): + ''' Write the server list to a text file in the session directory upon + startup: /tmp/pycore.nnnnn/servers + ''' + filename = os.path.join(self.session.sessiondir, "servers") + try: + f = open(filename, "w") + master = self.session_id_master + if master is None: + master = self.session.sessionid + f.write("master=%s\n" % master) + self.servers_lock.acquire() + for name in sorted(self.servers.keys()): + if name == "localhost": + continue + (host, port, sock) = self.servers[name] + f.write("%s %s %s\n" % (name, host, port)) + f.close() + except Exception, e: + self.session.warn("Error writing server list to the file: %s\n%s" \ + % (filename, e)) + finally: + self.servers_lock.release() + + def writenodeserver(self, nodestr, server): + ''' Creates a /tmp/pycore.nnnnn/nX.conf/server file having the node + and server info. This may be used by scripts for accessing nodes on + other machines, much like local nodes may be accessed via the + VnodeClient class. + ''' + (host, port, sock) = self.getserver(server) + serverstr = "%s %s %s" % (server, host, port) + name = nodestr.split()[1] + dirname = os.path.join(self.session.sessiondir, name + ".conf") + filename = os.path.join(dirname, "server") + try: + os.makedirs(dirname) + except OSError: + # directory may already exist from previous distributed run + pass + try: + f = open(filename, "w") + f.write("%s\n%s\n" % (serverstr, nodestr)) + f.close() + return True + except Exception, e: + msg = "Error writing server file '%s'" % filename + msg += "for node %s:\n%s" % (name, e) + self.session.warn(msg) + return False + + diff --git a/daemon/core/bsd/__init__.py b/daemon/core/bsd/__init__.py new file mode 100644 index 00000000..e69de29b diff --git a/daemon/core/bsd/netgraph.py b/daemon/core/bsd/netgraph.py new file mode 100644 index 00000000..c6bc7795 --- /dev/null +++ b/daemon/core/bsd/netgraph.py @@ -0,0 +1,70 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: core-dev@pf.itd.nrl.navy.mil +# +''' +netgraph.py: Netgraph helper functions; for now these are wrappers around +ngctl commands. +''' + +import subprocess +from core.misc.utils import * +from core.constants import * + +checkexec([NGCTL_BIN]) + +def createngnode(type, hookstr, name=None): + ''' Create a new Netgraph node of type and optionally assign name. The + hook string hookstr should contain two names. This is a string so + other commands may be inserted after the two names. + Return the name and netgraph ID of the new node. + ''' + hook1 = hookstr.split()[0] + ngcmd = "mkpeer %s %s \n show .%s" % (type, hookstr, hook1) + cmd = [NGCTL_BIN, "-f", "-"] + cmdid = subprocess.Popen(cmd, stdin = subprocess.PIPE, + stdout = subprocess.PIPE, + stderr = subprocess.PIPE) + cmdid.stdin.write(ngcmd) + cmdid.stdin.close() + result = cmdid.stdout.read() + result += cmdid.stderr.read() + cmdid.stdout.close() + cmdid.stderr.close() + status = cmdid.wait() + if status > 0: + raise Exception, "error creating Netgraph node %s (%s): %s" % \ + (type, ngcmd, result) + results = result.split() + ngname = results[1] + ngid = results[5] + if name: + check_call([NGCTL_BIN, "name", "[0x%s]:" % ngid, name]) + return (ngname, ngid) + +def destroyngnode(name): + ''' Shutdown a Netgraph node having the given name. + ''' + check_call([NGCTL_BIN, "shutdown", "%s:" % name]) + +def connectngnodes(name1, name2, hook1, hook2): + ''' Connect two hooks of two Netgraph nodes given by their names. + ''' + node1 = "%s:" % name1 + node2 = "%s:" % name2 + check_call([NGCTL_BIN, "connect", node1, node2, hook1, hook2]) + +def ngmessage(name, msg): + ''' Send a Netgraph message to the node named name. + ''' + cmd = [NGCTL_BIN, "msg", "%s:" % name] + msg + check_call(cmd) + +def ngloadkernelmodule(name): + ''' Load a kernel module by invoking kldstat. This is needed for the + ng_ether module which automatically creates Netgraph nodes when loaded. + ''' + mutecall(["kldload", name]) diff --git a/daemon/core/bsd/nodes.py b/daemon/core/bsd/nodes.py new file mode 100644 index 00000000..7ffecd36 --- /dev/null +++ b/daemon/core/bsd/nodes.py @@ -0,0 +1,197 @@ +# +# CORE +# Copyright (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: core-dev@pf.itd.nrl.navy.mil +# + +''' +nodes.py: definition of CoreNode classes and other node classes that inherit +from the CoreNode, implementing specific node types. +''' + +from vnode import * +from vnet import * +from core.constants import * +from core.misc.ipaddr import * +from core.api import coreapi +from core.bsd.netgraph import ngloadkernelmodule + +checkexec([IFCONFIG_BIN]) + +class CoreNode(JailNode): + apitype = coreapi.CORE_NODE_DEF + +class PtpNet(NetgraphPipeNet): + def tonodemsg(self, flags): + ''' Do not generate a Node Message for point-to-point links. They are + built using a link message instead. + ''' + pass + + def tolinkmsgs(self, flags): + ''' Build CORE API TLVs for a point-to-point link. One Link message + describes this network. + ''' + tlvdata = "" + if len(self._netif) != 2: + return tlvdata + (if1, if2) = self._netif.items() + if1 = if1[1] + if2 = if2[1] + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_N1NUMBER, + if1.node.objid) + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_N2NUMBER, + if2.node.objid) + delay = if1.getparam('delay') + bw = if1.getparam('bw') + loss = if1.getparam('loss') + duplicate = if1.getparam('duplicate') + jitter = if1.getparam('jitter') + if delay is not None: + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_DELAY, + delay) + if bw is not None: + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_BW, bw) + if loss is not None: + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_PER, + str(loss)) + if duplicate is not None: + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_DUP, + str(duplicate)) + if jitter is not None: + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_JITTER, + jitter) + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_TYPE, + self.linktype) + + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_IF1NUM, \ + if1.node.getifindex(if1)) + for addr in if1.addrlist: + (ip, sep, mask) = addr.partition('/') + mask = int(mask) + if isIPv4Address(ip): + family = AF_INET + tlvtypeip = coreapi.CORE_TLV_LINK_IF1IP4 + tlvtypemask = coreapi.CORE_TLV_LINK_IF1IP4MASK + else: + family = AF_INET6 + tlvtypeip = coreapi.CORE_TLV_LINK_IF1IP6 + tlvtypemask = coreapi.CORE_TLV_LINK_IF1IP6MASK + ipl = socket.inet_pton(family, ip) + tlvdata += coreapi.CoreLinkTlv.pack(tlvtypeip, + IPAddr(af=family, addr=ipl)) + tlvdata += coreapi.CoreLinkTlv.pack(tlvtypemask, mask) + + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_IF2NUM, \ + if2.node.getifindex(if2)) + for addr in if2.addrlist: + (ip, sep, mask) = addr.partition('/') + mask = int(mask) + if isIPv4Address(ip): + family = AF_INET + tlvtypeip = coreapi.CORE_TLV_LINK_IF2IP4 + tlvtypemask = coreapi.CORE_TLV_LINK_IF2IP4MASK + else: + family = AF_INET6 + tlvtypeip = coreapi.CORE_TLV_LINK_IF2IP6 + tlvtypemask = coreapi.CORE_TLV_LINK_IF2IP6MASK + ipl = socket.inet_pton(family, ip) + tlvdata += coreapi.CoreLinkTlv.pack(tlvtypeip, + IPAddr(af=family, addr=ipl)) + tlvdata += coreapi.CoreLinkTlv.pack(tlvtypemask, mask) + + msg = coreapi.CoreLinkMessage.pack(flags, tlvdata) + return [msg,] + +class SwitchNode(NetgraphNet): + ngtype = "bridge" + nghooks = "link0 link0\nmsg .link0 setpersistent" + apitype = coreapi.CORE_NODE_SWITCH + policy = "ACCEPT" + +class HubNode(NetgraphNet): + ngtype = "hub" + nghooks = "link0 link0\nmsg .link0 setpersistent" + apitype = coreapi.CORE_NODE_HUB + policy = "ACCEPT" + +class WlanNode(NetgraphNet): + ngtype = "wlan" + nghooks = "anchor anchor" + apitype = coreapi.CORE_NODE_WLAN + linktype = coreapi.CORE_LINK_WIRELESS + policy = "DROP" + + def __init__(self, session, objid = None, name = None, verbose = False, + start = True, policy = None): + NetgraphNet.__init__(self, session, objid, name, verbose, start, policy) + # wireless model such as basic range + self.model = None + # mobility model such as scripted + self.mobility = None + + def attach(self, netif): + NetgraphNet.attach(self, netif) + if self.model: + netif.poshook = self.model._positioncallback + if netif.node is None: + return + (x,y,z) = netif.node.position.get() + netif.poshook(netif, x, y, z) + + def setmodel(self, model, config): + ''' Mobility and wireless model. + ''' + if (self.verbose): + self.info("adding model %s" % model._name) + if model._type == coreapi.CORE_TLV_REG_WIRELESS: + self.model = model(session=self.session, objid=self.objid, + verbose=self.verbose, values=config) + if self.model._positioncallback: + for netif in self.netifs(): + netif.poshook = self.model._positioncallback + if netif.node is not None: + (x,y,z) = netif.node.position.get() + netif.poshook(netif, x, y, z) + self.model.setlinkparams() + elif model._type == coreapi.CORE_TLV_REG_MOBILITY: + self.mobility = model(session=self.session, objid=self.objid, + verbose=self.verbose, values=config) + + +class RJ45Node(NetgraphPipeNet): + apitype = coreapi.CORE_NODE_RJ45 + policy = "ACCEPT" + + def __init__(self, session, objid, name, verbose, start = True): + if start: + ngloadkernelmodule("ng_ether") + NetgraphPipeNet.__init__(self, session, objid, name, verbose, start) + if start: + self.setpromisc(True) + + def shutdown(self): + self.setpromisc(False) + NetgraphPipeNet.shutdown(self) + + def setpromisc(self, promisc): + p = "promisc" + if not promisc: + p = "-" + p + check_call([IFCONFIG_BIN, self.name, "up", p]) + + def attach(self, netif): + if len(self._netif) > 0: + raise ValueError, \ + "RJ45 networks support at most 1 network interface" + NetgraphPipeNet.attach(self, netif) + connectngnodes(self.ngname, self.name, self.gethook(), "lower") + +class TunnelNode(NetgraphNet): + ngtype = "pipe" + nghooks = "upper lower" + apitype = coreapi.CORE_NODE_TUNNEL + policy = "ACCEPT" + diff --git a/daemon/core/bsd/vnet.py b/daemon/core/bsd/vnet.py new file mode 100644 index 00000000..a92eb849 --- /dev/null +++ b/daemon/core/bsd/vnet.py @@ -0,0 +1,216 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: core-dev@pf.itd.nrl.navy.mil +# +''' +vnet.py: NetgraphNet and NetgraphPipeNet classes that implement virtual networks +using the FreeBSD Netgraph subsystem. +''' + +import sys, threading + +from core.misc.utils import * +from core.constants import * +from core.coreobj import PyCoreNet, PyCoreObj +from core.bsd.netgraph import * +from core.bsd.vnode import VEth + +class NetgraphNet(PyCoreNet): + ngtype = None + nghooks = () + + def __init__(self, session, objid = None, name = None, verbose = False, + start = True, policy = None): + PyCoreNet.__init__(self, session, objid, name) + if name is None: + name = str(self.objid) + if policy is not None: + self.policy = policy + self.name = name + self.ngname = "n_%s_%s" % (str(self.objid), self.session.sessionid) + self.ngid = None + self.verbose = verbose + self._netif = {} + self._linked = {} + self.up = False + if start: + self.startup() + + def startup(self): + tmp, self.ngid = createngnode(type=self.ngtype, hookstr=self.nghooks, + name=self.ngname) + self.up = True + + def shutdown(self): + if not self.up: + return + self.up = False + while self._netif: + k, netif = self._netif.popitem() + if netif.pipe: + pipe = netif.pipe + netif.pipe = None + pipe.shutdown() + else: + netif.shutdown() + self._netif.clear() + self._linked.clear() + del self.session + destroyngnode(self.ngname) + + def attach(self, netif): + ''' Attach an interface to this netgraph node. Create a pipe between + the interface and the hub/switch/wlan node. + (Note that the PtpNet subclass overrides this method.) + ''' + if self.up: + pipe = self.session.addobj(cls = NetgraphPipeNet, + verbose = self.verbose, start = True) + pipe.attach(netif) + hook = "link%d" % len(self._netif) + pipe.attachnet(self, hook) + PyCoreNet.attach(self, netif) + + def detach(self, netif): + if self.up: + pass + PyCoreNet.detach(self, netif) + + def linked(self, netif1, netif2): + # check if the network interfaces are attached to this network + if self._netif[netif1] != netif1: + raise ValueError, "inconsistency for netif %s" % netif1.name + if self._netif[netif2] != netif2: + raise ValueError, "inconsistency for netif %s" % netif2.name + try: + linked = self._linked[netif1][netif2] + except KeyError: + linked = False + self._linked[netif1][netif2] = linked + return linked + + def unlink(self, netif1, netif2): + if not self.linked(netif1, netif2): + return + msg = ["unlink", "{", "node1=0x%s" % netif1.pipe.ngid] + msg += ["node2=0x%s" % netif2.pipe.ngid, "}"] + ngmessage(self.ngname, msg) + self._linked[netif1][netif2] = False + + def link(self, netif1, netif2): + if self.linked(netif1, netif2): + return + msg = ["link", "{", "node1=0x%s" % netif1.pipe.ngid] + msg += ["node2=0x%s" % netif2.pipe.ngid, "}"] + ngmessage(self.ngname, msg) + self._linked[netif1][netif2] = True + + def linknet(self, net): + ''' Link this bridge with another by creating a veth pair and installing + each device into each bridge. + ''' + raise NotImplementedError + + def linkconfig(self, netif, bw = None, delay = None, + loss = None, duplicate = None, jitter = None, netif2=None): + ''' Set link effects by modifying the pipe connected to an interface. + ''' + if not netif.pipe: + self.warn("linkconfig for %s but interface %s has no pipe" % \ + (self.name, netif.name)) + return + return netif.pipe.linkconfig(netif, bw, delay, loss, duplicate, jitter, + netif2) + +class NetgraphPipeNet(NetgraphNet): + ngtype = "pipe" + nghooks = "upper lower" + + def __init__(self, session, objid = None, name = None, verbose = False, + start = True, policy = None): + NetgraphNet.__init__(self, session, objid, name, verbose, start, policy) + if start: + # account for Ethernet header + ngmessage(self.ngname, ["setcfg", "{", "header_offset=14", "}"]) + + def attach(self, netif): + ''' Attach an interface to this pipe node. + The first interface is connected to the "upper" hook, the second + connected to the "lower" hook. + ''' + if len(self._netif) > 1: + raise ValueError, \ + "Netgraph pipes support at most 2 network interfaces" + if self.up: + hook = self.gethook() + connectngnodes(self.ngname, netif.localname, hook, netif.hook) + if netif.pipe: + raise ValueError, \ + "Interface %s already attached to pipe %s" % \ + (netif.name, netif.pipe.name) + netif.pipe = self + self._netif[netif] = netif + self._linked[netif] = {} + + def attachnet(self, net, hook): + ''' Attach another NetgraphNet to this pipe node. + ''' + localhook = self.gethook() + connectngnodes(self.ngname, net.ngname, localhook, hook) + + def gethook(self): + ''' Returns the first hook (e.g. "upper") then the second hook + (e.g. "lower") based on the number of connections. + ''' + hooks = self.nghooks.split() + if len(self._netif) == 0: + return hooks[0] + else: + return hooks[1] + + def linkconfig(self, netif, bw = None, delay = None, + loss = None, duplicate = None, jitter = None, netif2 = None): + ''' Set link effects by sending a Netgraph setcfg message to the pipe. + ''' + netif.setparam('bw', bw) + netif.setparam('delay', delay) + netif.setparam('loss', loss) + netif.setparam('duplicate', duplicate) + netif.setparam('jitter', jitter) + if not self.up: + return + params = [] + upstream = [] + downstream = [] + if bw is not None: + if str(bw)=="0": + bw="-1" + params += ["bandwidth=%s" % bw,] + if delay is not None: + if str(delay)=="0": + delay="-1" + params += ["delay=%s" % delay,] + if loss is not None: + if str(loss)=="0": + loss="-1" + upstream += ["BER=%s" % loss,] + downstream += ["BER=%s" % loss,] + if duplicate is not None: + if str(duplicate)=="0": + duplicate="-1" + upstream += ["duplicate=%s" % duplicate,] + downstream += ["duplicate=%s" % duplicate,] + if jitter: + self.warn("jitter parameter ignored for link %s" % self.name) + if len(params) > 0 or len(upstream) > 0 or len(downstream) > 0: + setcfg = ["setcfg", "{",] + params + if len(upstream) > 0: + setcfg += ["upstream={",] + upstream + ["}",] + if len(downstream) > 0: + setcfg += ["downstream={",] + downstream + ["}",] + setcfg += ["}",] + ngmessage(self.ngname, setcfg) + diff --git a/daemon/core/bsd/vnode.py b/daemon/core/bsd/vnode.py new file mode 100644 index 00000000..6da4e755 --- /dev/null +++ b/daemon/core/bsd/vnode.py @@ -0,0 +1,393 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: core-dev@pf.itd.nrl.navy.mil +# +''' +vnode.py: SimpleJailNode and JailNode classes that implement the FreeBSD +jail-based virtual node. +''' + +import os, signal, sys, subprocess, threading, string +import random, time +from core.misc.utils import * +from core.constants import * +from core.coreobj import PyCoreObj, PyCoreNode, PyCoreNetIf, Position +from core.emane.nodes import EmaneNode +from core.bsd.netgraph import * + +checkexec([IFCONFIG_BIN, VIMAGE_BIN]) + +class VEth(PyCoreNetIf): + def __init__(self, node, name, localname, mtu = 1500, net = None, + start = True): + PyCoreNetIf.__init__(self, node = node, name = name, mtu = mtu) + # name is the device name (e.g. ngeth0, ngeth1, etc.) before it is + # installed in a node; the Netgraph name is renamed to localname + # e.g. before install: name = ngeth0 localname = n0_0_123 + # after install: name = eth0 localname = n0_0_123 + self.localname = localname + self.ngid = None + self.net = None + self.pipe = None + self.addrlist = [] + self.hwaddr = None + self.up = False + self.hook = "ether" + if start: + self.startup() + + def startup(self): + hookstr = "%s %s" % (self.hook, self.hook) + ngname, ngid = createngnode(type="eiface", hookstr=hookstr, + name=self.localname) + self.name = ngname + self.ngid = ngid + check_call([IFCONFIG_BIN, ngname, "up"]) + self.up = True + + def shutdown(self): + if not self.up: + return + destroyngnode(self.localname) + self.up = False + + def attachnet(self, net): + if self.net: + self.detachnet() + self.net = None + net.attach(self) + self.net = net + + def detachnet(self): + if self.net is not None: + self.net.detach(self) + + def addaddr(self, addr): + self.addrlist.append(addr) + + def deladdr(self, addr): + self.addrlist.remove(addr) + + def sethwaddr(self, addr): + self.hwaddr = addr + +class TunTap(PyCoreNetIf): + '''TUN/TAP virtual device in TAP mode''' + def __init__(self, node, name, localname, mtu = None, net = None, + start = True): + raise NotImplementedError + +class SimpleJailNode(PyCoreNode): + def __init__(self, session, objid = None, name = None, nodedir = None, + verbose = False): + PyCoreNode.__init__(self, session, objid, name) + self.nodedir = nodedir + self.verbose = verbose + self.pid = None + self.up = False + self.lock = threading.RLock() + self._mounts = [] + + def startup(self): + if self.up: + raise Exception, "already up" + vimg = [VIMAGE_BIN, "-c", self.name] + try: + os.spawnlp(os.P_WAIT, VIMAGE_BIN, *vimg) + except OSError: + raise Exception, ("vimage command not found while running: %s" % \ + vimg) + self.info("bringing up loopback interface") + self.cmd([IFCONFIG_BIN, "lo0", "127.0.0.1"]) + self.info("setting hostname: %s" % self.name) + self.cmd(["hostname", self.name]) + self.cmd([SYSCTL_BIN, "vfs.morphing_symlinks=1"]) + self.up = True + + def shutdown(self): + if not self.up: + return + for netif in self.netifs(): + netif.shutdown() + self._netif.clear() + del self.session + vimg = [VIMAGE_BIN, "-d", self.name] + try: + os.spawnlp(os.P_WAIT, VIMAGE_BIN, *vimg) + except OSError: + raise Exception, ("vimage command not found while running: %s" % \ + vimg) + self.up = False + + def cmd(self, args, wait = True): + if wait: + mode = os.P_WAIT + else: + mode = os.P_NOWAIT + tmp = call([VIMAGE_BIN, self.name] + args, cwd=self.nodedir) + if not wait: + tmp = None + if tmp: + self.warn("cmd exited with status %s: %s" % (tmp, str(args))) + return tmp + + def cmdresult(self, args, wait = True): + cmdid, cmdin, cmdout, cmderr = self.popen(args) + result = cmdout.read() + result += cmderr.read() + cmdin.close() + cmdout.close() + cmderr.close() + if wait: + status = cmdid.wait() + else: + status = 0 + return (status, result) + + def popen(self, args): + cmd = [VIMAGE_BIN, self.name] + cmd.extend(args) + tmp = subprocess.Popen(cmd, stdin = subprocess.PIPE, + stdout = subprocess.PIPE, + stderr = subprocess.PIPE, cwd=self.nodedir) + return tmp, tmp.stdin, tmp.stdout, tmp.stderr + + def icmd(self, args): + return os.spawnlp(os.P_WAIT, VIMAGE_BIN, VIMAGE_BIN, self.name, *args) + + def term(self, sh = "/bin/sh"): + return os.spawnlp(os.P_WAIT, "xterm", "xterm", "-ut", + "-title", self.name, "-e", VIMAGE_BIN, self.name, sh) + + def termcmdstring(self, sh = "/bin/sh"): + ''' We add 'sudo' to the command string because the GUI runs as a + normal user. + ''' + return "cd %s && sudo %s %s %s" % (self.nodedir, VIMAGE_BIN, self.name, sh) + + def shcmd(self, cmdstr, sh = "/bin/sh"): + return self.cmd([sh, "-c", cmdstr]) + + def boot(self): + pass + + def mount(self, source, target): + source = os.path.abspath(source) + self.info("mounting %s at %s" % (source, target)) + self.addsymlink(path=target, file=None) + + def umount(self, target): + self.info("unmounting '%s'" % target) + + def newveth(self, ifindex = None, ifname = None, net = None): + self.lock.acquire() + try: + if ifindex is None: + ifindex = self.newifindex() + if ifname is None: + ifname = "eth%d" % ifindex + sessionid = self.session.shortsessionid() + name = "n%s_%s_%s" % (self.objid, ifindex, sessionid) + localname = name + ifclass = VEth + veth = ifclass(node = self, name = name, localname = localname, + mtu = 1500, net = net, start = self.up) + if self.up: + # install into jail + check_call([IFCONFIG_BIN, veth.name, "vnet", self.name]) + # rename from "ngeth0" to "eth0" + self.cmd([IFCONFIG_BIN, veth.name, "name", ifname]) + veth.name = ifname + try: + self.addnetif(veth, ifindex) + except: + veth.shutdown() + del veth + raise + return ifindex + finally: + self.lock.release() + + def sethwaddr(self, ifindex, addr): + self._netif[ifindex].sethwaddr(addr) + if self.up: + self.cmd([IFCONFIG_BIN, self.ifname(ifindex), "link", + str(addr)]) + + def addaddr(self, ifindex, addr): + if self.up: + if ':' in addr: + family = "inet6" + else: + family = "inet" + self.cmd([IFCONFIG_BIN, self.ifname(ifindex), family, "alias", + str(addr)]) + self._netif[ifindex].addaddr(addr) + + def deladdr(self, ifindex, addr): + try: + self._netif[ifindex].deladdr(addr) + except ValueError: + self.warn("trying to delete unknown address: %s" % addr) + if self.up: + if ':' in addr: + family = "inet6" + else: + family = "inet" + self.cmd([IFCONFIG_BIN, self.ifname(ifindex), family, "-alias", + str(addr)]) + + valid_deladdrtype = ("inet", "inet6", "inet6link") + def delalladdr(self, ifindex, addrtypes = valid_deladdrtype): + addr = self.getaddr(self.ifname(ifindex), rescan = True) + for t in addrtypes: + if t not in self.valid_deladdrtype: + raise ValueError, "addr type must be in: " + \ + " ".join(self.valid_deladdrtype) + for a in addr[t]: + self.deladdr(ifindex, a) + # update cached information + self.getaddr(self.ifname(ifindex), rescan = True) + + def ifup(self, ifindex): + if self.up: + self.cmd([IFCONFIG_BIN, self.ifname(ifindex), "up"]) + + def newnetif(self, net = None, addrlist = [], hwaddr = None, + ifindex = None, ifname = None): + self.lock.acquire() + try: + ifindex = self.newveth(ifindex = ifindex, ifname = ifname, + net = net) + if net is not None: + self.attachnet(ifindex, net) + if hwaddr: + self.sethwaddr(ifindex, hwaddr) + for addr in maketuple(addrlist): + self.addaddr(ifindex, addr) + self.ifup(ifindex) + return ifindex + finally: + self.lock.release() + + def attachnet(self, ifindex, net): + self._netif[ifindex].attachnet(net) + + def detachnet(self, ifindex): + self._netif[ifindex].detachnet() + + def addfile(self, srcname, filename): + shcmd = "mkdir -p $(dirname '%s') && mv '%s' '%s' && sync" % \ + (filename, srcname, filename) + self.shcmd(shcmd) + + def getaddr(self, ifname, rescan = False): + return None + #return self.vnodeclient.getaddr(ifname = ifname, rescan = rescan) + + def addsymlink(self, path, file): + ''' Create a symbolic link from /path/name/file -> + /tmp/pycore.nnnnn/@.conf/path.name/file + ''' + dirname = path + if dirname and dirname[0] == "/": + dirname = dirname[1:] + dirname = dirname.replace("/", ".") + if file: + pathname = os.path.join(path, file) + sym = os.path.join(self.session.sessiondir, "@.conf", dirname, file) + else: + pathname = path + sym = os.path.join(self.session.sessiondir, "@.conf", dirname) + + if os.path.islink(pathname): + if os.readlink(pathname) == sym: + # this link already exists - silently return + return + os.unlink(pathname) + else: + if os.path.exists(pathname): + self.warn("did not create symlink for %s since path " \ + "exists on host" % pathname) + return + self.info("creating symlink %s -> %s" % (pathname, sym)) + os.symlink(sym, pathname) + +class JailNode(SimpleJailNode): + + def __init__(self, session, objid = None, name = None, + nodedir = None, bootsh = "boot.sh", verbose = False, + start = True): + super(JailNode, self).__init__(session = session, objid = objid, + name = name, nodedir = nodedir, + verbose = verbose) + self.bootsh = bootsh + if not start: + return + # below here is considered node startup/instantiation code + self.makenodedir() + self.startup() + + def boot(self): + self.session.services.bootnodeservices(self) + + def validate(self): + self.session.services.validatenodeservices(self) + + def startup(self): + self.lock.acquire() + try: + super(JailNode, self).startup() + #self.privatedir("/var/run") + #self.privatedir("/var/log") + finally: + self.lock.release() + + def shutdown(self): + if not self.up: + return + self.lock.acquire() + # services are instead stopped when session enters datacollect state + #self.session.services.stopnodeservices(self) + try: + super(JailNode, self).shutdown() + finally: + self.rmnodedir() + self.lock.release() + + def privatedir(self, path): + if path[0] != "/": + raise ValueError, "path not fully qualified: " + path + hostpath = os.path.join(self.nodedir, path[1:].replace("/", ".")) + try: + os.mkdir(hostpath) + except OSError: + pass + except Exception, e: + raise Exception, e + self.mount(hostpath, path) + + def opennodefile(self, filename, mode = "w"): + dirname, basename = os.path.split(filename) + #self.addsymlink(path=dirname, file=basename) + if not basename: + raise ValueError, "no basename for filename: " + filename + if dirname and dirname[0] == "/": + dirname = dirname[1:] + dirname = dirname.replace("/", ".") + dirname = os.path.join(self.nodedir, dirname) + if not os.path.isdir(dirname): + os.makedirs(dirname, mode = 0755) + hostfilename = os.path.join(dirname, basename) + return open(hostfilename, mode) + + def nodefile(self, filename, contents, mode = 0644): + f = self.opennodefile(filename, "w") + f.write(contents) + os.chmod(f.name, mode) + f.close() + self.info("created nodefile: '%s'; mode: 0%o" % (f.name, mode)) + diff --git a/daemon/core/conf.py b/daemon/core/conf.py new file mode 100644 index 00000000..6b9bdf0a --- /dev/null +++ b/daemon/core/conf.py @@ -0,0 +1,373 @@ +# +# CORE +# Copyright (c)2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: Jeff Ahrenholz +# +''' +conf.py: common support for configurable objects +''' +import string +from core.api import coreapi + +class ConfigurableManager(object): + ''' A generic class for managing Configurables. This class can register + with a session to receive Config Messages for setting some parameters + for itself or for the Configurables that it manages. + ''' + # name corresponds to configuration object field + _name = "" + # type corresponds with register message types + _type = None + + def __init__(self, session=None): + self.session = session + self.session.addconfobj(self._name, self._type, self.configure) + # Configurable key=values, indexed by node number + self.configs = {} + + + def configure(self, session, msg): + ''' Handle configure messages. The configuration message sent to a + ConfigurableManager usually is used to: + 1. Request a list of Configurables (request flag) + 2. Reset manager and clear configs (reset flag) + 3. Send values that configure the manager or one of its + Configurables + + Returns any reply messages. + ''' + objname = msg.gettlv(coreapi.CORE_TLV_CONF_OBJ) + conftype = msg.gettlv(coreapi.CORE_TLV_CONF_TYPE) + if conftype == coreapi.CONF_TYPE_FLAGS_REQUEST: + return self.configure_request(msg) + elif conftype == coreapi.CONF_TYPE_FLAGS_RESET: + if objname == "all" or objname == self._name: + return self.configure_reset(msg) + else: + return self.configure_values(msg, + msg.gettlv(coreapi.CORE_TLV_CONF_VALUES)) + + def configure_request(self, msg): + ''' Request configuration data. + ''' + return None + + def configure_reset(self, msg): + ''' By default, resets this manager to clear configs. + ''' + return self.reset() + + def configure_values(self, msg, values): + ''' Values have been sent to this manager. + ''' + return None + + def configure_values_keyvalues(self, msg, values, target, keys): + ''' Helper that can be used for configure_values for parsing in + 'key=value' strings from a values field. The key name must be + in the keys list, and target.key=value is set. + ''' + if values is None: + return None + kvs = values.split('|') + for kv in kvs: + try: + # key=value + (key, value) = kv.split('=', 1) + except ValueError: + # value only + key = keys[kvs.index(kv)] + value = kv + if key not in keys: + raise ValueError, "invalid key: %s" % key + setattr(target, key, value) + return None + + def reset(self): + return None + + def setconfig(self, nodenum, conftype, values): + ''' add configuration values for a node to a dictionary; values are + usually received from a Configuration Message, and may refer to a + node for which no object exists yet + ''' + conflist = [] + if nodenum in self.configs: + oldlist = self.configs[nodenum] + found = False + for (t, v) in oldlist: + if (t == conftype): + # replace existing config + found = True + conflist.append((conftype, values)) + else: + conflist.append((t, v)) + if not found: + conflist.append((conftype, values)) + else: + conflist.append((conftype, values)) + self.configs[nodenum] = conflist + + def getconfig(self, nodenum, conftype, defaultvalues): + ''' get configuration values for a node; if the values don't exist in + our dictionary then return the default values supplied + ''' + if nodenum in self.configs: + # return configured values + conflist = self.configs[nodenum] + for (t, v) in conflist: + if (conftype is None) or (t == conftype): + return (t, v) + # return default values provided (may be None) + return (conftype, defaultvalues) + + def getallconfigs(self, use_clsmap=True): + ''' Return (nodenum, conftype, values) tuples for all stored configs. + Used when reconnecting to a session. + ''' + r = [] + for nodenum in self.configs: + for (t, v) in self.configs[nodenum]: + if use_clsmap: + t = self._modelclsmap[t] + r.append( (nodenum, t, v) ) + return r + + def clearconfig(self, nodenum): + ''' remove configuration values for the specified node; + when nodenum is None, remove all configuration values + ''' + if nodenum is None: + self.configs = {} + return + if nodenum in self.configs: + self.configs.pop(nodenum) + + def setconfig_keyvalues(self, nodenum, conftype, keyvalues): + ''' keyvalues list of tuples + ''' + if conftype not in self._modelclsmap: + self.warn("Unknown model type '%s'" % (conftype)) + return + model = self._modelclsmap[conftype] + keys = model.getnames() + # defaults are merged with supplied values here + values = list(model.getdefaultvalues()) + for key, value in keyvalues: + if key not in keys: + self.warn("Skipping unknown configuration key for %s: '%s'" % \ + (conftype, key)) + continue + i = keys.index(key) + values[i] = value + self.setconfig(nodenum, conftype, values) + + def getmodels(self, n): + ''' Return a list of model classes and values for a net if one has been + configured. This is invoked when exporting a session to XML. + This assumes self.configs contains an iterable of (model-names, values) + and a self._modelclsmapdict exists. + ''' + r = [] + if n.objid in self.configs: + v = self.configs[n.objid] + for model in v: + cls = self._modelclsmap[model[0]] + vals = model[1] + r.append((cls, vals)) + return r + + + def info(self, msg): + self.session.info(msg) + + def warn(self, msg): + self.session.warn(msg) + + +class Configurable(object): + ''' A generic class for managing configuration parameters. + Parameters are sent via Configuration Messages, which allow the GUI + to build dynamic dialogs depending on what is being configured. + ''' + _name = "" + # Configuration items: + # ('name', 'type', 'default', 'possible-value-list', 'caption') + _confmatrix = [] + _confgroups = None + _bitmap = None + + def __init__(self, session=None, objid=None): + self.session = session + self.objid = objid + + def reset(self): + pass + + def register(self): + pass + + @classmethod + def getdefaultvalues(cls): + return tuple( map(lambda x: x[2], cls._confmatrix) ) + + @classmethod + def getnames(cls): + return tuple( map( lambda x: x[0], cls._confmatrix) ) + + @classmethod + def configure(cls, mgr, msg): + ''' Handle configuration messages for this object. + ''' + reply = None + nodenum = msg.gettlv(coreapi.CORE_TLV_CONF_NODE) + objname = msg.gettlv(coreapi.CORE_TLV_CONF_OBJ) + conftype = msg.gettlv(coreapi.CORE_TLV_CONF_TYPE) + + if mgr.verbose: + mgr.info("received configure message for %s" % cls._name) + if conftype == coreapi.CONF_TYPE_FLAGS_REQUEST: + if mgr.verbose: + mgr.info("replying to configure request for %s model" % + cls._name) + # when object name is "all", the reply to this request may be None + # if this node has not been configured for this model; otherwise we + # reply with the defaults for this model + if objname == "all": + defaults = None + typeflags = coreapi.CONF_TYPE_FLAGS_UPDATE + else: + defaults = cls.getdefaultvalues() + typeflags = coreapi.CONF_TYPE_FLAGS_NONE + values = mgr.getconfig(nodenum, cls._name, defaults)[1] + if values is None: + # node has no active config for this model (don't send defaults) + return None + # reply with config options + reply = cls.toconfmsg(0, nodenum, typeflags, values) + elif conftype == coreapi.CONF_TYPE_FLAGS_RESET: + if objname == "all": + mgr.clearconfig(nodenum) + #elif conftype == coreapi.CONF_TYPE_FLAGS_UPDATE: + else: + # store the configuration values for later use, when the node + # object has been created + if objname is None: + mgr.info("no configuration object for node %s" % nodenum) + return None + values_str = msg.gettlv(coreapi.CORE_TLV_CONF_VALUES) + defaults = cls.getdefaultvalues() + if values_str is None: + # use default or preconfigured values + values = mgr.getconfig(nodenum, cls._name, defaults)[1] + else: + # use new values supplied from the conf message + values = values_str.split('|') + # determine new or old style config + new = cls.haskeyvalues(values) + if new: + new_values = list(defaults) + keys = cls.getnames() + for v in values: + key, value = v.split('=', 1) + try: + new_values[keys.index(key)] = value + except ValueError: + mgr.info("warning: ignoring invalid key '%s'" % key) + values = new_values + mgr.setconfig(nodenum, objname, values) + return reply + + @classmethod + def toconfmsg(cls, flags, nodenum, typeflags, values): + ''' Convert this class to a Config API message. Some TLVs are defined + by the class, but node number, conf type flags, and values must + be passed in. + ''' + keys = cls.getnames() + keyvalues = map(lambda a,b: "%s=%s" % (a,b), keys, values) + values_str = string.join(keyvalues, '|') + tlvdata = "" + if nodenum is not None: + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_NODE, + nodenum) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_OBJ, + cls._name) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_TYPE, + typeflags) + datatypes = tuple( map(lambda x: x[1], cls._confmatrix) ) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_DATA_TYPES, + datatypes) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_VALUES, + values_str) + captions = reduce( lambda a,b: a + '|' + b, \ + map(lambda x: x[4], cls._confmatrix)) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_CAPTIONS, + captions) + possiblevals = reduce( lambda a,b: a + '|' + b, \ + map(lambda x: x[3], cls._confmatrix)) + tlvdata += coreapi.CoreConfTlv.pack( + coreapi.CORE_TLV_CONF_POSSIBLE_VALUES, possiblevals) + if cls._bitmap is not None: + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_BITMAP, + cls._bitmap) + if cls._confgroups is not None: + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_GROUPS, + cls._confgroups) + msg = coreapi.CoreConfMessage.pack(flags, tlvdata) + return msg + + @staticmethod + def booltooffon(value): + ''' Convenience helper turns bool into on (True) or off (False) string. + ''' + if value == "1" or value == "true" or value == "on": + return "on" + else: + return "off" + + @staticmethod + def offontobool(value): + if type(value) == str: + if value.lower() == "on": + return 1 + elif value.lower() == "off": + return 0 + return value + + + def valueof(self, name, values): + ''' Helper to return a value by the name defined in confmatrix. + Checks if it is boolean''' + i = self.getnames().index(name) + if self._confmatrix[i][1] == coreapi.CONF_DATA_TYPE_BOOL and \ + values[i] != "": + return self.booltooffon( values[i] ) + else: + return values[i] + + @staticmethod + def haskeyvalues(values): + ''' Helper to check for list of key=value pairs versus a plain old + list of values. Returns True if all elements are "key=value". + ''' + if len(values) == 0: + return False + for v in values: + if "=" not in v: + return False + return True + + def getkeyvaluelist(self): + ''' Helper to return a list of (key, value) tuples. Keys come from + self._confmatrix and values are instance attributes. + ''' + r = [] + for k in self.getnames(): + if hasattr(self, k): + r.append((k, getattr(self, k))) + return r + + diff --git a/daemon/core/constants.py.in b/daemon/core/constants.py.in new file mode 100644 index 00000000..0aa8ea5f --- /dev/null +++ b/daemon/core/constants.py.in @@ -0,0 +1,19 @@ +# Constants created by autoconf ./configure script +COREDPY_VERSION = "@COREDPY_VERSION@" +CORE_STATE_DIR = "@CORE_STATE_DIR@" +CORE_CONF_DIR = "@CORE_CONF_DIR@" +CORE_DATA_DIR = "@CORE_DATA_DIR@" +CORE_LIB_DIR = "@CORE_LIB_DIR@" +CORE_SBIN_DIR = "@SBINDIR@" + +BRCTL_BIN = "@brctl_path@/brctl" +SYSCTL_BIN = "@sysctl_path@/sysctl" +IP_BIN = "@ip_path@/ip" +TC_BIN = "@tc_path@/tc" +EBTABLES_BIN = "@ebtables_path@/ebtables" +IFCONFIG_BIN = "@ifconfig_path@/ifconfig" +NGCTL_BIN = "@ngctl_path@/ngctl" +VIMAGE_BIN = "@vimage_path@/vimage" +QUAGGA_STATE_DIR = "@CORE_STATE_DIR@/run/quagga" +MOUNT_BIN = "@mount_path@/mount" +UMOUNT_BIN = "@umount_path@/umount" diff --git a/daemon/core/coreobj.py b/daemon/core/coreobj.py new file mode 100644 index 00000000..5669b639 --- /dev/null +++ b/daemon/core/coreobj.py @@ -0,0 +1,445 @@ +# +# CORE +# Copyright (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: Tom Goff +# Jeff Ahrenholz +# +''' +coreobj.py: defines the basic objects for emulation: the PyCoreObj base class, +along with PyCoreNode, PyCoreNet, and PyCoreNetIf +''' +import sys, threading, os, shutil + +from core.api import coreapi +from core.misc.ipaddr import * + +class Position(object): + ''' Helper class for Cartesian coordinate position + ''' + def __init__(self, x = None, y = None, z = None): + self.x = None + self.y = None + self.z = None + self.set(x, y, z) + + def set(self, x = None, y = None, z = None): + ''' Returns True if the position has actually changed. + ''' + if self.x == x and self.y == y and self.z == z: + return False + self.x = x + self.y = y + self.z = z + return True + + def get(self): + ''' Fetch the (x,y,z) position tuple. + ''' + return (self.x, self.y, self.z) + +class PyCoreObj(object): + ''' Base class for pycore objects (nodes and nets) + ''' + apitype = None + + def __init__(self, session, objid = None, name = None, verbose = False, + start = True): + self.session = session + if objid is None: + objid = session.getobjid() + self.objid = objid + if name is None: + name = "o%s" % self.objid + self.name = name + # ifindex is key, PyCoreNetIf instance is value + self._netif = {} + self.ifindex = 0 + self.canvas = None + self.icon = None + self.opaque = None + self.verbose = verbose + self.position = Position() + + def startup(self): + ''' Each object implements its own startup method. + ''' + raise NotImplementedError + + def shutdown(self): + ''' Each object implements its own shutdown method. + ''' + raise NotImplementedError + + def setposition(self, x = None, y = None, z = None): + ''' Set the (x,y,z) position of the object. + ''' + return self.position.set(x = x, y = y, z = z) + + def getposition(self): + ''' Return an (x,y,z) tuple representing this object's position. + ''' + return self.position.get() + + def ifname(self, ifindex): + return self.netif(ifindex).name + + def netifs(self, sort=False): + ''' Iterate over attached network interfaces. + ''' + if sort: + return map(lambda k: self._netif[k], sorted(self._netif.keys())) + else: + return self._netif.itervalues() + + def numnetif(self): + ''' Return the attached interface count. + ''' + return len(self._netif) + + def getifindex(self, netif): + for ifindex in self._netif: + if self._netif[ifindex] is netif: + return ifindex + return -1 + + def newifindex(self): + while self.ifindex in self._netif: + self.ifindex += 1 + ifindex = self.ifindex + self.ifindex += 1 + return ifindex + + def tonodemsg(self, flags): + ''' Build a CORE API Node Message for this object. Both nodes and + networks can be represented by a Node Message. + ''' + if self.apitype is None: + return None + tlvdata = "" + (x, y, z) = self.getposition() + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_NUMBER, + self.objid) + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_TYPE, + self.apitype) + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_NAME, + self.name) + if hasattr(self, "type") and self.type is not None: + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_MODEL, + self.type) + + if x is not None: + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_XPOS, x) + if y is not None: + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_YPOS, y) + if self.canvas is not None: + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_CANVAS, + self.canvas) + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_EMUID, + self.objid) + if self.icon is not None: + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_ICON, + self.icon) + if self.opaque is not None: + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_OPAQUE, + self.opaque) + msg = coreapi.CoreNodeMessage.pack(flags, tlvdata) + return msg + + def tolinkmsgs(self, flags): + ''' Build CORE API Link Messages for this object. There is no default + method for PyCoreObjs as PyCoreNodes do not implement this but + PyCoreNets do. + ''' + return [] + + def info(self, msg): + ''' Utility method for printing informational messages when verbose + is turned on. + ''' + if self.verbose: + print "%s: %s" % (self.name, msg) + sys.stdout.flush() + + def warn(self, msg): + ''' Utility method for printing warning/error messages + ''' + print >> sys.stderr, "%s: %s" % (self.name, msg) + sys.stderr.flush() + + def exception(self, level, source, text): + ''' Generate an Exception Message for this session, providing this + object number. + ''' + if self.session: + id = None + if isinstance(self.objid, int): + id = self.objid + elif isinstance(self.objid, str) and self.objid.isdigit(): + id = int(self.objid) + self.session.exception(level, source, id, text) + + +class PyCoreNode(PyCoreObj): + ''' Base class for nodes + ''' + def __init__(self, session, objid = None, name = None, verbose = False, + start = True): + ''' Initialization for node objects. + ''' + PyCoreObj.__init__(self, session, objid, name, verbose=verbose, + start=start) + self.services = [] + self.type = None + self.nodedir = None + + def nodeid(self): + return self.objid + + def addservice(self, service): + if service is not None: + self.services.append(service) + + def makenodedir(self): + if self.nodedir is None: + self.nodedir = \ + os.path.join(self.session.sessiondir, self.name + ".conf") + os.makedirs(self.nodedir) + self.tmpnodedir = True + else: + self.tmpnodedir = False + + def rmnodedir(self): + if hasattr(self.session.options, 'preservedir'): + if self.session.options.preservedir == '1': + return + if self.tmpnodedir: + shutil.rmtree(self.nodedir, ignore_errors = True) + + def addnetif(self, netif, ifindex): + if ifindex in self._netif: + raise ValueError, "ifindex %s already exists" % ifindex + self._netif[ifindex] = netif + + def delnetif(self, ifindex): + if ifindex not in self._netif: + raise ValueError, "ifindex %s does not exist" % ifindex + netif = self._netif.pop(ifindex) + netif.shutdown() + del netif + + def netif(self, ifindex, net = None): + if ifindex in self._netif: + return self._netif[ifindex] + else: + return None + + def attachnet(self, ifindex, net): + if ifindex not in self._netif: + raise ValueError, "ifindex %s does not exist" % ifindex + self._netif[ifindex].attachnet(net) + + def detachnet(self, ifindex): + if ifindex not in self._netif: + raise ValueError, "ifindex %s does not exist" % ifindex + self._netif[ifindex].detachnet() + + def setposition(self, x = None, y = None, z = None): + changed = PyCoreObj.setposition(self, x = x, y = y, z = z) + if not changed: + # save extra interface range calculations + return + for netif in self.netifs(sort=True): + netif.setposition(x, y, z) + + def commonnets(self, obj, want_ctrl=False): + ''' Given another node or net object, return common networks between + this node and that object. A list of tuples is returned, with each tuple + consisting of (network, interface1, interface2). + ''' + r = [] + for netif1 in self.netifs(): + if not want_ctrl and hasattr(netif1, 'control'): + continue + for netif2 in obj.netifs(): + if netif1.net == netif2.net: + r += (netif1.net, netif1, netif2), + return r + + + +class PyCoreNet(PyCoreObj): + ''' Base class for networks + ''' + linktype = coreapi.CORE_LINK_WIRED + + def __init__(self, session, objid, name, verbose = False, start = True): + ''' Initialization for network objects. + ''' + PyCoreObj.__init__(self, session, objid, name, verbose=verbose, + start=start) + self._linked = {} + self._linked_lock = threading.Lock() + + def attach(self, netif): + i = self.newifindex() + self._netif[i] = netif + netif.netifi = i + with self._linked_lock: + self._linked[netif] = {} + + def detach(self, netif): + del self._netif[netif.netifi] + netif.netifi = None + with self._linked_lock: + del self._linked[netif] + + def tolinkmsgs(self, flags): + ''' Build CORE API Link Messages for this network. Each link message + describes a link between this network and a node. + ''' + msgs = [] + # build a link message from this network node to each node having a + # connected interface + for netif in self.netifs(sort=True): + if not hasattr(netif, "node"): + continue + otherobj = netif.node + if otherobj is None: + # two layer-2 switches/hubs linked together via linknet() + if not hasattr(netif, "othernet"): + continue + otherobj = netif.othernet + if otherobj.objid == self.objid: + continue + + tlvdata = "" + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_N1NUMBER, + self.objid) + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_N2NUMBER, + otherobj.objid) + delay = netif.getparam('delay') + bw = netif.getparam('bw') + loss = netif.getparam('loss') + duplicate = netif.getparam('duplicate') + jitter = netif.getparam('jitter') + if delay is not None: + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_DELAY, + delay) + if bw is not None: + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_BW, + bw) + if loss is not None: + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_PER, + str(loss)) + if duplicate is not None: + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_DUP, + str(duplicate)) + if jitter is not None: + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_JITTER, + jitter) + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_TYPE, + self.linktype) + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_IF2NUM, + otherobj.getifindex(netif)) + for addr in netif.addrlist: + (ip, sep, mask) = addr.partition('/') + mask = int(mask) + if isIPv4Address(ip): + family = AF_INET + tlvtypeip = coreapi.CORE_TLV_LINK_IF2IP4 + tlvtypemask = coreapi.CORE_TLV_LINK_IF2IP4MASK + else: + family = AF_INET6 + tlvtypeip = coreapi.CORE_TLV_LINK_IF2IP6 + tlvtypemask = coreapi.CORE_TLV_LINK_IF2IP6MASK + ipl = socket.inet_pton(family, ip) + tlvdata += coreapi.CoreLinkTlv.pack(tlvtypeip, \ + IPAddr(af=family, addr=ipl)) + tlvdata += coreapi.CoreLinkTlv.pack(tlvtypemask, mask) + + msg = coreapi.CoreLinkMessage.pack(flags, tlvdata) + msgs.append(msg) + return msgs + +class PyCoreNetIf(object): + ''' Base class for interfaces. + ''' + def __init__(self, node, name, mtu): + self.node = node + self.name = name + if not isinstance(mtu, (int, long)): + raise ValueError + self.mtu = mtu + self.net = None + self._params = {} + self.addrlist = [] + self.hwaddr = None + self.poshook = None + # used with EMANE + self.transport_type = None + # interface index on the network + self.netindex = None + + def startup(self): + pass + + def shutdown(self): + pass + + def attachnet(self, net): + if self.net: + self.detachnet() + self.net = None + net.attach(self) + self.net = net + + def detachnet(self): + if self.net is not None: + self.net.detach(self) + + def addaddr(self, addr): + self.addrlist.append(addr) + + def deladdr(self, addr): + self.addrlist.remove(addr) + + def sethwaddr(self, addr): + self.hwaddr = addr + + def getparam(self, key): + ''' Retrieve a parameter from the _params dict, + or None if the parameter does not exist. + ''' + if key not in self._params: + return None + return self._params[key] + + def getparams(self): + ''' Return (key, value) pairs from the _params dict. + ''' + r = [] + for k in sorted(self._params.keys()): + r.append((k, self._params[k])) + return r + + def setparam(self, key, value): + ''' Set a parameter in the _params dict. + Returns True if the parameter has changed. + ''' + if key in self._params: + if self._params[key] == value: + return False + elif self._params[key] <= 0 and value <= 0: + # treat None and 0 as unchanged values + return False + self._params[key] = value + return True + + def setposition(self, x, y, z): + ''' Dispatch to any position hook (self.poshook) handler. + ''' + if self.poshook is not None: + self.poshook(self, x, y, z) + diff --git a/daemon/core/emane/__init__.py b/daemon/core/emane/__init__.py new file mode 100644 index 00000000..e69de29b diff --git a/daemon/core/emane/bypass.py b/daemon/core/emane/bypass.py new file mode 100644 index 00000000..0725c4ef --- /dev/null +++ b/daemon/core/emane/bypass.py @@ -0,0 +1,65 @@ +# +# CORE +# Copyright (c)2011-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +bypass.py: EMANE Bypass model for CORE +''' + +import sys +import string +from core.api import coreapi + +from core.constants import * +from emane import EmaneModel + +class EmaneBypassModel(EmaneModel): + def __init__(self, session, objid = None, verbose = False): + EmaneModel.__init__(self, session, objid, verbose) + + _name = "emane_bypass" + _confmatrix = [ + ("none",coreapi.CONF_DATA_TYPE_BOOL, '0', + 'True,False','There are no parameters for the bypass model.'), + ] + + # value groupings + _confgroups = "Bypass Parameters:1-1" + + def buildnemxmlfiles(self, e, ifc): + ''' Build the necessary nem, mac, and phy XMLs in the given path. + If an individual NEM has a nonstandard config, we need to build + that file also. Otherwise the WLAN-wide nXXemane_bypassnem.xml, + nXXemane_bypassmac.xml, nXXemane_bypassphy.xml are used. + ''' + values = e.getifcconfig(self.objid, self._name, + self.getdefaultvalues(), ifc) + if values is None: + return + nemdoc = e.xmldoc("nem") + nem = nemdoc.getElementsByTagName("nem").pop() + nem.setAttribute("name", "BYPASS NEM") + mactag = nemdoc.createElement("mac") + mactag.setAttribute("definition", self.macxmlname(ifc)) + nem.appendChild(mactag) + phytag = nemdoc.createElement("phy") + phytag.setAttribute("definition", self.phyxmlname(ifc)) + nem.appendChild(phytag) + e.xmlwrite(nemdoc, self.nemxmlname(ifc)) + + macdoc = e.xmldoc("mac") + mac = macdoc.getElementsByTagName("mac").pop() + mac.setAttribute("name", "BYPASS MAC") + mac.setAttribute("library", "bypassmaclayer") + e.xmlwrite(macdoc, self.macxmlname(ifc)) + + phydoc = e.xmldoc("phy") + phy = phydoc.getElementsByTagName("phy").pop() + phy.setAttribute("name", "BYPASS PHY") + phy.setAttribute("library", "bypassphylayer") + e.xmlwrite(phydoc, self.phyxmlname(ifc)) + + diff --git a/daemon/core/emane/commeffect.py b/daemon/core/emane/commeffect.py new file mode 100755 index 00000000..3b1bc140 --- /dev/null +++ b/daemon/core/emane/commeffect.py @@ -0,0 +1,124 @@ +# +# CORE +# Copyright (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: Jeff Ahrenholz +# Randy Charland +# +''' +commeffect.py: EMANE CommEffect model for CORE +''' + +import sys +import string +from core.api import coreapi + +from core.constants import * +from emane import EmaneModel + +try: + import emaneeventservice + import emaneeventcommeffect +except Exception, e: + pass + +def z(x): + ''' Helper to use 0 for None values. ''' + if x is None: + return 0 + else: + return x + +class EmaneCommEffectModel(EmaneModel): + def __init__(self, session, objid = None, verbose = False): + EmaneModel.__init__(self, session, objid, verbose) + + # model name + _name = "emane_commeffect" + # CommEffect parameters + _confmatrix_shim = [ + ("defaultconnectivity", coreapi.CONF_DATA_TYPE_BOOL, '0', + 'On,Off', 'defaultconnectivity'), + ("filterfile", coreapi.CONF_DATA_TYPE_STRING, '', + '', 'filter file'), + ("groupid", coreapi.CONF_DATA_TYPE_UINT32, '0', + '', 'NEM Group ID'), + ("enablepromiscuousmode", coreapi.CONF_DATA_TYPE_BOOL, '0', + 'On,Off', 'enable promiscuous mode'), + ("enabletighttimingmode", coreapi.CONF_DATA_TYPE_BOOL, '0', + 'On,Off', 'enable tight timing mode'), + ("receivebufferperiod", coreapi.CONF_DATA_TYPE_FLOAT, '1.0', + '', 'receivebufferperiod'), + ] + + _confmatrix = _confmatrix_shim + # value groupings + _confgroups = "CommEffect SHIM Parameters:1-%d" \ + % len(_confmatrix_shim) + + def buildnemxmlfiles(self, e, ifc): + ''' Build the necessary nem and commeffect XMLs in the given path. + If an individual NEM has a nonstandard config, we need to build + that file also. Otherwise the WLAN-wide + nXXemane_commeffectnem.xml, nXXemane_commeffectshim.xml are used. + ''' + values = e.getifcconfig(self.objid, self._name, + self.getdefaultvalues(), ifc) + if values is None: + return + shimdoc = e.xmldoc("shim") + shim = shimdoc.getElementsByTagName("shim").pop() + shim.setAttribute("name", "commeffect SHIM") + shim.setAttribute("library", "commeffectshim") + + names = self.getnames() + shimnames = list(names[:len(self._confmatrix_shim)]) + shimnames.remove("filterfile") + + # append all shim options (except filterfile) to shimdoc + map( lambda n: shim.appendChild(e.xmlparam(shimdoc, n, \ + self.valueof(n, values))), shimnames) + # empty filterfile is not allowed + ff = self.valueof("filterfile", values) + if ff.strip() != '': + shim.appendChild(e.xmlparam(shimdoc, "filterfile", ff)) + e.xmlwrite(shimdoc, self.shimxmlname(ifc)) + + nemdoc = e.xmldoc("nem") + nem = nemdoc.getElementsByTagName("nem").pop() + nem.setAttribute("name", "commeffect NEM") + nem.setAttribute("type", "unstructured") + nem.appendChild(e.xmlshimdefinition(nemdoc, self.shimxmlname(ifc))) + e.xmlwrite(nemdoc, self.nemxmlname(ifc)) + + def linkconfig(self, netif, bw = None, delay = None, + loss = None, duplicate = None, jitter = None, netif2 = None): + ''' Generate CommEffect events when a Link Message is received having + link parameters. + ''' + service = self.session.emane.service + if service is None: + self.session.warn("%s: EMANE event service unavailable" % \ + self._name) + return + if netif is None or netif2 is None: + self.session.warn("%s: missing NEM information" % self._name) + return + # TODO: batch these into multiple events per transmission + event = emaneeventcommeffect.EventCommEffect(1) + index = 0 + e = self.session.obj(self.objid) + nemid = e.getnemid(netif) + nemid2 = e.getnemid(netif2) + mbw = bw + + event.set(index, nemid, 0, z(delay), 0, z(jitter), z(loss), + z(duplicate), long(z(bw)), long(z(mbw))) + service.publish(emaneeventcommeffect.EVENT_ID, + emaneeventservice.PLATFORMID_ANY, + nemid2, emaneeventservice.COMPONENTID_ANY, + event.export()) + + + diff --git a/daemon/core/emane/emane.py b/daemon/core/emane/emane.py new file mode 100644 index 00000000..8e65dd03 --- /dev/null +++ b/daemon/core/emane/emane.py @@ -0,0 +1,844 @@ +# +# CORE +# Copyright (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +emane.py: definition of an Emane class for implementing configuration + control of an EMANE emulation. +''' + +import sys, os, threading, subprocess, time, string +from xml.dom.minidom import parseString, Document +from core.constants import * +from core.api import coreapi +from core.misc.ipaddr import MacAddr +from core.conf import ConfigurableManager, Configurable +from core.mobility import WirelessModel +from core.emane.nodes import EmaneNode +try: + import emaneeventservice + import emaneeventlocation +except Exception, e: + pass + +class Emane(ConfigurableManager): + ''' EMANE controller object. Lives in a Session instance and is used for + building EMANE config files from all of the EmaneNode objects in this + emulation, and for controlling the EMANE daemons. + ''' + _name = "emane" + _type = coreapi.CORE_TLV_REG_EMULSRV + _hwaddr_prefix = "02:02" + + def __init__(self, session): + ConfigurableManager.__init__(self, session) + self.verbose = self.session.getcfgitembool('verbose', False) + self._objs = {} + self._objslock = threading.Lock() + self._ifccounts = {} + self._ifccountslock = threading.Lock() + self._modelclsmap = {} + # Port numbers are allocated from these counters + self.platformport = self.session.getcfgitemint('emane_platform_port', + 8100) + self.transformport = self.session.getcfgitemint('emane_transform_port', + 8200) + # model for global EMANE configuration options + self.emane_config = EmaneGlobalModel(session, None, self.verbose) + session.broker.handlers += (self.handledistributed, ) + self.loadmodels() + # this allows the event service Python bindings to be absent + try: + self.service = emaneeventservice.EventService() + except: + self.service = None + self.doeventloop = False + self.eventmonthread = None + # EMANE 0.7.4 support -- to be removed when 0.7.4 support is deprecated + self.emane074 = False + try: + tmp = emaneeventlocation.EventLocation(1) + # check if yaw parameter is supported by Location Events + # if so, we have EMANE 0.8.1+; if not, we have EMANE 0.7.4/earlier + tmp.set(0, 1, 2, 2, 2, 3) + except TypeError: + self.emane074 = True + except Exception: + pass + + + def loadmodels(self): + ''' dynamically load EMANE models that were specified in the config file + ''' + self._modelclsmap.clear() + self._modelclsmap[self.emane_config._name] = self.emane_config + emane_models = self.session.getcfgitem('emane_models') + if emane_models is None: + return + emane_models = emane_models.split(',') + for model in emane_models: + model = model.strip() + try: + modelfile = "%s" % model.lower() + clsname = "Emane%sModel" % model + importcmd = "from %s import %s" % (modelfile, clsname) + exec(importcmd) + except Exception, e: + warntxt = "unable to load the EMANE model '%s'" % modelfile + warntxt += " specified in the config file (%s)" % e + self.session.exception(coreapi.CORE_EXCP_LEVEL_WARNING, "emane", + None, warntxt) + self.warn(warntxt) + continue + # record the model name to class name mapping + # this should match clsname._name + confname = "emane_%s" % model.lower() + self._modelclsmap[confname] = eval(clsname) + # each EmaneModel must have ModelName.configure() defined + confmethod = eval("%s.configure_emane" % clsname) + self.session.addconfobj(confname, coreapi.CORE_TLV_REG_WIRELESS, + confmethod) + + def addobj(self, obj): + ''' add a new EmaneNode object to this Emane controller object + ''' + self._objslock.acquire() + if obj.objid in self._objs: + self._objslock.release() + raise KeyError, "non-unique EMANE object id %s for %s" % \ + (obj.objid, obj) + self._objs[obj.objid] = obj + self._objslock.release() + + def getmodels(self, n): + ''' Used with XML export; see ConfigurableManager.getmodels() + ''' + r = ConfigurableManager.getmodels(self, n) + # EMANE global params are stored with first EMANE node (if non-default + # values are configured) + sorted_ids = sorted(self.configs.keys()) + if None in self.configs and len(sorted_ids) > 1 and \ + n.objid == sorted_ids[1]: + v = self.configs[None] + for model in v: + cls = self._modelclsmap[model[0]] + vals = model[1] + r.append((cls, vals)) + return r + + def getifcconfig(self, nodenum, conftype, defaultvalues, ifc): + # use the network-wide config values or interface(NEM)-specific values? + if ifc is None: + return self.getconfig(nodenum, conftype, defaultvalues)[1] + else: + # don't use default values when interface config is the same as net + # note here that using ifc.node.objid as key allows for only one type + # of each model per node; TODO: use both node and interface as key + return self.getconfig(ifc.node.objid, conftype, None)[1] + + def setup(self): + ''' Populate self._objs with EmaneNodes; perform distributed setup; + associate models with EmaneNodes from self.config. + ''' + with self.session._objslock: + for obj in self.session.objs(): + if isinstance(obj, EmaneNode): + self.addobj(obj) + if len(self._objs) == 0: + return False + if self.checkdistributed(): + # we are slave, but haven't received a platformid yet + cfgval = self.getconfig(None, self.emane_config._name, + self.emane_config.getdefaultvalues())[1] + i = self.emane_config.getnames().index('platform_id_start') + if cfgval[i] == self.emane_config.getdefaultvalues()[i]: + return False + self.setnodemodels() + return True + + def startup(self): + ''' after all the EmaneNode objects have been added, build XML files + and start the daemons + ''' + self.reset() + if not self.setup(): + return + with self._objslock: + self.buildxml() + self.starteventmonitor() + if self.numnems() > 0: + self.startdaemons() + self.installnetifs() + + def poststartup(self): + ''' Retransmit location events now that all NEMs are active. + ''' + if self.doeventmonitor(): + return + with self._objslock: + for n in sorted(self._objs.keys()): + e = self._objs[n] + for netif in e.netifs(): + (x, y, z) = netif.node.position.get() + e.setnemposition(netif, x, y, z) + + def reset(self): + ''' remove all EmaneNode objects from the dictionary, + reset port numbers and nem id counters + ''' + with self._objslock: + self._objs.clear() + # don't clear self._ifccounts here; NEM counts are needed for buildxml + self.platformport = self.session.getcfgitemint('emane_platform_port', + 8100) + self.transformport = self.session.getcfgitemint('emane_transform_port', + 8200) + + def shutdown(self): + ''' stop all EMANE daemons + ''' + self._ifccountslock.acquire() + self._ifccounts.clear() + self._ifccountslock.release() + self._objslock.acquire() + if len(self._objs) == 0: + self._objslock.release() + return + self.info("Stopping EMANE daemons.") + self.deinstallnetifs() + self.stopdaemons() + self.stopeventmonitor() + self._objslock.release() + + def handledistributed(self, msg): + ''' Broker handler for processing CORE API messages as they are + received. This is used to snoop the Link add messages to get NEM + counts of NEMs that exist on other servers. + ''' + if msg.msgtype == coreapi.CORE_API_LINK_MSG and \ + msg.flags & coreapi.CORE_API_ADD_FLAG: + nn = msg.nodenumbers() + # first node is always link layer node in Link add message + if nn[0] in self.session.broker.nets: + serverlist = self.session.broker.getserversbynode(nn[1]) + for server in serverlist: + self._ifccountslock.acquire() + if server not in self._ifccounts: + self._ifccounts[server] = 1 + else: + self._ifccounts[server] += 1 + self._ifccountslock.release() + + def checkdistributed(self): + ''' Check for EMANE nodes that exist on multiple emulation servers and + coordinate the NEM id and port number space. + If we are the master EMANE node, return False so initialization will + proceed as normal; otherwise slaves return True here and + initialization is deferred. + ''' + # check with the session if we are the "master" Emane object? + master = False + self._objslock.acquire() + if len(self._objs) > 0: + master = self.session.master + self.info("Setup EMANE with master=%s." % master) + self._objslock.release() + + # we are not the master Emane object, wait for nem id and ports + if not master: + return True + + cfgval = self.getconfig(None, self.emane_config._name, + self.emane_config.getdefaultvalues())[1] + values = list(cfgval) + + nemcount = 0 + self._objslock.acquire() + for n in self._objs: + emanenode = self._objs[n] + nemcount += emanenode.numnetif() + nemid = int(self.emane_config.valueof("nem_id_start", values)) + nemid += nemcount + platformid = int(self.emane_config.valueof("platform_id_start", values)) + names = list(self.emane_config.getnames()) + + # build an ordered list of servers so platform ID is deterministic + servers = [] + for n in sorted(self._objs): + for s in self.session.broker.getserversbynode(n): + if s not in servers: + servers.append(s) + self._objslock.release() + + for server in servers: + if server == "localhost": + continue + (host, port, sock) = self.session.broker.getserver(server) + if sock is None: + continue + platformid += 1 + typeflags = coreapi.CONF_TYPE_FLAGS_UPDATE + values[names.index("platform_id_start")] = str(platformid) + values[names.index("nem_id_start")] = str(nemid) + msg = EmaneGlobalModel.toconfmsg(flags=0, nodenum=None, + typeflags=typeflags, values=values) + sock.send(msg) + # increment nemid for next server by number of interfaces + self._ifccountslock.acquire() + if server in self._ifccounts: + nemid += self._ifccounts[server] + self._ifccountslock.release() + + return False + + def buildxml(self): + ''' Build all of the XML files required to run EMANE. + ''' + # assume self._objslock is already held here + if self.verbose: + self.info("Emane.buildxml()") + self.buildplatformxml() + self.buildnemxml() + self.buildtransportxml() + + def xmldoc(self, doctype): + ''' Returns an XML xml.minidom.Document with a DOCTYPE tag set to the + provided doctype string, and an initial element having the same + name. + ''' + # we hack in the DOCTYPE using the parser + docstr = """ + + <%s/>""" % (doctype, doctype, doctype) + # normally this would be: doc = Document() + return parseString(docstr) + + def xmlparam(self, doc, name, value): + ''' Convenience function for building a parameter tag of the format: + + ''' + p = doc.createElement("param") + p.setAttribute("name", name) + p.setAttribute("value", value) + return p + + def xmlshimdefinition(self, doc, name): + ''' Convenience function for building a definition tag of the format: + + ''' + p = doc.createElement("shim") + p.setAttribute("definition", name) + return p + + def xmlwrite(self, doc, filename): + ''' Write the given XML document to the specified filename. + ''' + #self.info("%s" % doc.toprettyxml(indent=" ")) + pathname = os.path.join(self.session.sessiondir, filename) + f = open(pathname, "w") + doc.writexml(writer=f, indent="", addindent=" ", newl="\n", \ + encoding="UTF-8") + f.close() + + def setnodemodels(self): + ''' Associate EmaneModel classes with EmaneNode nodes. The model + configurations are stored in self.configs. + ''' + for n in self._objs: + self.setnodemodel(n) + + def setnodemodel(self, n): + emanenode = self._objs[n] + for (t, v) in self.configs[n]: + if t is None: + continue + if t == self.emane_config._name: + continue + # only use the first valid EmaneModel + # convert model name to class (e.g. emane_rfpipe -> EmaneRfPipe) + cls = self._modelclsmap[t] + emanenode.setmodel(cls, v) + return True + # no model has been configured for this EmaneNode + return False + + def nemlookup(self, nemid): + ''' Look for the given numerical NEM ID and return the first matching + EmaneNode and NEM interface. + ''' + emanenode = None + netif = None + + for n in self._objs: + emanenode = self._objs[n] + netif = emanenode.getnemnetif(nemid) + if netif is not None: + break + else: + emanenode = None + return (emanenode, netif) + + def numnems(self): + ''' Return the number of NEMs emulated locally. + ''' + count = 0 + for o in self._objs.values(): + count += len(o.netifs()) + return count + + def buildplatformxml(self): + ''' Build a platform.xml file now that all nodes are configured. + ''' + values = self.getconfig(None, "emane", + self.emane_config.getdefaultvalues())[1] + doc = self.xmldoc("platform") + plat = doc.getElementsByTagName("platform").pop() + platformid = self.emane_config.valueof("platform_id_start", values) + plat.setAttribute("name", "Platform %s" % platformid) + plat.setAttribute("id", platformid) + + names = list(self.emane_config.getnames()) + platform_names = names[:len(self.emane_config._confmatrix_platform)] + platform_names.remove('platform_id_start') + + # append all platform options (except starting id) to doc + map( lambda n: plat.appendChild(self.xmlparam(doc, n, \ + self.emane_config.valueof(n, values))), platform_names) + + nemid = int(self.emane_config.valueof("nem_id_start", values)) + # assume self._objslock is already held here + for n in sorted(self._objs.keys()): + emanenode = self._objs[n] + nems = emanenode.buildplatformxmlentry(doc) + for netif in sorted(nems, key=lambda n: n.node.objid): + # set ID, endpoints here + nementry = nems[netif] + nementry.setAttribute("id", "%d" % nemid) + # insert nem options (except nem id) to doc + trans_addr = self.emane_config.valueof("transportendpoint", \ + values) + nementry.insertBefore(self.xmlparam(doc, "transportendpoint", \ + "%s:%d" % (trans_addr, self.transformport)), + nementry.firstChild) + platform_addr = self.emane_config.valueof("platformendpoint", \ + values) + nementry.insertBefore(self.xmlparam(doc, "platformendpoint", \ + "%s:%d" % (platform_addr, self.platformport)), + nementry.firstChild) + plat.appendChild(nementry) + emanenode.setnemid(netif, nemid) + # NOTE: MAC address set before here is incorrect, including the one + # sent from the GUI via link message + # MAC address determined by NEM ID: 02:02:00:00:nn:nn" + macstr = self._hwaddr_prefix + ":00:00:" + macstr += "%02X:%02X" % ((nemid >> 8) & 0xFF, nemid & 0xFF) + netif.sethwaddr(MacAddr.fromstring(macstr)) + # increment counters used to manage IDs, endpoint port numbers + nemid += 1 + self.platformport += 1 + self.transformport += 1 + self.xmlwrite(doc, "platform.xml") + + def buildnemxml(self): + ''' Builds the xxxnem.xml, xxxmac.xml, and xxxphy.xml files which + are defined on a per-EmaneNode basis. + ''' + for n in sorted(self._objs.keys()): + emanenode = self._objs[n] + nems = emanenode.buildnemxmlfiles(self) + + def buildtransportxml(self): + ''' Calls emanegentransportxml using a platform.xml file to build + the transportdaemon*.xml. + ''' + try: + subprocess.check_call(["emanegentransportxml", "platform.xml"], \ + cwd=self.session.sessiondir) + except Exception, e: + self.info("error running emanegentransportxml: %s" % e) + + def startdaemons(self): + ''' Start the appropriate EMANE daemons. The transport daemon will + bind to the TAP interfaces. + ''' + if self.verbose: + self.info("Emane.startdaemons()") + path = self.session.sessiondir + loglevel = "2" + cfgloglevel = self.session.getcfgitemint("emane_log_level") + realtime = self.session.getcfgitembool("emane_realtime", True) + if cfgloglevel: + self.info("setting user-defined EMANE log level: %d" % cfgloglevel) + loglevel = str(cfgloglevel) + emanecmd = ["emane", "-d", "--logl", loglevel, "-f", \ + os.path.join(path, "emane.log")] + if realtime: + emanecmd += "-r", + try: + cmd = emanecmd + [os.path.join(path, "platform.xml")] + if self.verbose: + self.info("Emane.startdaemons() running %s" % str(cmd)) + subprocess.check_call(cmd, cwd=path) + except Exception, e: + errmsg = "error starting emane: %s" % e + self.session.exception(coreapi.CORE_EXCP_LEVEL_FATAL, "emane", + None, errmsg) + self.info(errmsg) + + # start one transport daemon per transportdaemon*.xml file + transcmd = ["emanetransportd", "-d", "--logl", loglevel, "-f", \ + os.path.join(path, "emanetransportd.log")] + if realtime: + transcmd += "-r", + files = os.listdir(path) + for file in files: + if file[-3:] == "xml" and file[:15] == "transportdaemon": + cmd = transcmd + [os.path.join(path, file)] + try: + if self.verbose: + self.info("Emane.startdaemons() running %s" % str(cmd)) + subprocess.check_call(cmd, cwd=path) + except Exception, e: + errmsg = "error starting emanetransportd: %s" % e + self.session.exception(coreapi.CORE_EXCP_LEVEL_FATAL, "emane", + None, errmsg) + self.info(errmsg) + + def stopdaemons(self): + ''' Kill the appropriate EMANE daemons. + ''' + # TODO: we may want to improve this if we had the PIDs from the + # specific EMANE daemons that we've started + subprocess.call(["killall", "-q", "emane"]) + subprocess.call(["killall", "-q", "emanetransportd"]) + + def installnetifs(self): + ''' Install TUN/TAP virtual interfaces into their proper namespaces + now that the EMANE daemons are running. + ''' + for n in sorted(self._objs.keys()): + emanenode = self._objs[n] + if self.verbose: + self.info("Emane.installnetifs() for node %d" % n) + emanenode.installnetifs() + + def deinstallnetifs(self): + ''' Uninstall TUN/TAP virtual interfaces. + ''' + for n in sorted(self._objs.keys()): + emanenode = self._objs[n] + emanenode.deinstallnetifs() + + def configure(self, session, msg): + ''' Handle configuration messages for global EMANE config. + ''' + r = self.emane_config.configure_emane(session, msg) + + # extra logic to start slave Emane object after nemid has been + # configured from the master + conftype = msg.gettlv(coreapi.CORE_TLV_CONF_TYPE) + if conftype == coreapi.CONF_TYPE_FLAGS_UPDATE and \ + self.session.master == False: + self.startup() + + return r + + def doeventmonitor(self): + ''' Returns boolean whether or not EMANE events will be monitored. + ''' + # this support must be explicitly turned on; by default, CORE will + # generate the EMANE events when nodes are moved + return self.session.getcfgitembool('emane_event_monitor', False) + + def starteventmonitor(self): + ''' Start monitoring EMANE location events if configured to do so. + ''' + if self.verbose: + self.info("Emane.starteventmonitor()") + if not self.doeventmonitor(): + return + if self.service is None: + errmsg = "Warning: EMANE events will not be generated " \ + "because the emaneeventservice\n binding was " \ + "unable to load " \ + "(install the python-emaneeventservice bindings)" + self.session.exception(coreapi.CORE_EXCP_LEVEL_WARNING, "emane", + None, errmsg) + self.warn(errmsg) + + return + self.doeventloop = True + self.eventmonthread = threading.Thread(target = self.eventmonitorloop) + self.eventmonthread.daemon = True + self.eventmonthread.start() + + + def stopeventmonitor(self): + ''' Stop monitoring EMANE location events. + ''' + self.doeventloop = False + if self.service is not None: + self.service.breakloop() + # reset the service, otherwise nextEvent won't work + del self.service + self.service = emaneeventservice.EventService() + if self.eventmonthread is not None: + self.eventmonthread.join() + self.eventmonthread = None + + def eventmonitorloop(self): + ''' Thread target that monitors EMANE location events. + ''' + if self.service is None: + return + self.info("subscribing to EMANE location events") + #self.service.subscribe(emaneeventlocation.EVENT_ID, + # self.handlelocationevent) + #self.service.loop() + #self.service.subscribe(emaneeventlocation.EVENT_ID, None) + while self.doeventloop is True: + (event, platform, nem, component, data) = self.service.nextEvent() + if event == emaneeventlocation.EVENT_ID: + self.handlelocationevent(event, platform, nem, component, data) + + self.info("unsubscribing from EMANE location events") + #self.service.unsubscribe(emaneeventlocation.EVENT_ID) + + def handlelocationevent(self, event, platform, nem, component, data): + ''' Handle an EMANE location event. + ''' + event = emaneeventlocation.EventLocation(data) + entries = event.entries() + for e in entries.values(): + # yaw,pitch,roll,azimuth,elevation,velocity are unhandled + (nemid, lat, long, alt) = e[:4] + # convert nemid to node number + (emanenode, netif) = self.nemlookup(nemid) + if netif is None: + if self.verbose: + self.info("location event for unknown NEM %s" % nemid) + continue + n = netif.node.objid + # convert from lat/long/alt to x,y,z coordinates + (x, y, z) = self.session.location.getxyz(lat, long, alt) + x = int(x) + y = int(y) + z = int(z) + if self.verbose: + self.info("location event NEM %s (%s, %s, %s) -> (%s, %s, %s)" \ + % (nemid, lat, long, alt, x, y, z)) + try: + if (x.bit_length() > 16) or (y.bit_length() > 16) or \ + (z.bit_length() > 16) or (x < 0) or (y < 0) or (z < 0): + warntxt = "Unable to build node location message since " \ + "received lat/long/alt exceeds coordinate " \ + "space: NEM %s (%d, %d, %d)" % (nemid, x, y, z) + self.info(warntxt) + self.session.exception(coreapi.CORE_EXCP_LEVEL_ERROR, + "emane", None, warntxt) + continue + except AttributeError: + # int.bit_length() not present on Python 2.6 + pass + + # generate a node message for this location update + try: + node = self.session.obj(n) + except KeyError: + self.warn("location event NEM %s has no corresponding node %s" \ + % (nemid, n)) + continue + # don't use node.setposition(x,y,z) which generates an event + node.position.set(x,y,z) + msg = node.tonodemsg(flags=0) + self.session.broadcastraw(None, msg) + self.session.sdt.updatenodegeo(node, lat, long, alt) + + +class EmaneModel(WirelessModel): + ''' EMANE models inherit from this parent class, which takes care of + handling configuration messages based on the _confmatrix list of + configurable parameters. Helper functions also live here. + ''' + _prefix = {'y': 1e-24, # yocto + 'z': 1e-21, # zepto + 'a': 1e-18, # atto + 'f': 1e-15, # femto + 'p': 1e-12, # pico + 'n': 1e-9, # nano + 'u': 1e-6, # micro + 'm': 1e-3, # mili + 'c': 1e-2, # centi + 'd': 1e-1, # deci + 'k': 1e3, # kilo + 'M': 1e6, # mega + 'G': 1e9, # giga + 'T': 1e12, # tera + 'P': 1e15, # peta + 'E': 1e18, # exa + 'Z': 1e21, # zetta + 'Y': 1e24, # yotta + } + + @classmethod + def configure_emane(cls, session, msg): + ''' Handle configuration messages for setting up a model. + Pass the Emane object as the manager object. + ''' + return cls.configure(session.emane, msg) + + @classmethod + def emane074_fixup(cls, value, div=1.0): + ''' Helper for converting 0.8.1 and newer values to EMANE 0.7.4 + compatible values. + NOTE: This should be removed when support for 0.7.4 has been + deprecated. + ''' + if div == 0: + return "0" + if type(value) is not str: + return str(value / div) + if value.endswith(tuple(cls._prefix.keys())): + suffix = value[-1] + value = float(value[:-1]) * cls._prefix[suffix] + return str(int(value / div)) + + def buildnemxmlfiles(self, e, ifc): + ''' Build the necessary nem, mac, and phy XMLs in the given path. + ''' + raise NotImplementedError + + def buildplatformxmlnementry(self, doc, n, ifc): + ''' Build the NEM definition that goes into the platform.xml file. + This returns an XML element that will be added to the element. + This default method supports per-interface config + (e.g. or per-EmaneNode + config (e.g. . + This can be overriden by a model for NEM flexibility; n is the EmaneNode. + ''' + nem = doc.createElement("nem") + nem.setAttribute("name", ifc.localname) + # if this netif contains a non-standard (per-interface) config, + # then we need to use a more specific xml file here + nem.setAttribute("definition", self.nemxmlname(ifc)) + return nem + + def buildplatformxmltransportentry(self, doc, n, ifc): + ''' Build the transport definition that goes into the platform.xml file. + This returns an XML element that will added to the nem definition. + This default method supports raw and virtual transport types, but may be + overriden by a model to support the e.g. pluggable virtual transport. + n is the EmaneNode. + ''' + type = ifc.transport_type + if not type: + e.info("warning: %s interface type unsupported!" % ifc.name) + type = "raw" + trans = doc.createElement("transport") + trans.setAttribute("definition", n.transportxmlname(type)) + trans.setAttribute("group", "1") + param = doc.createElement("param") + param.setAttribute("name", "device") + if type == "raw": + # raw RJ45 name e.g. 'eth0' + param.setAttribute("value", ifc.name) + else: + # virtual TAP name e.g. 'n3.0.17' + param.setAttribute("value", ifc.localname) + trans.appendChild(param) + return trans + + def basename(self, ifc = None): + ''' Return the string that other names are based on. + If a specific config is stored for a node's interface, a unique + filename is needed; otherwise the name of the EmaneNode is used. + ''' + emane = self.session.emane + name = "n%s" % self.objid + if ifc is not None: + nodenum = ifc.node.objid + if emane.getconfig(nodenum, self._name, None)[1] is not None: + name = ifc.localname.replace('.','_') + return "%s%s" % (name, self._name) + + def nemxmlname(self, ifc = None): + ''' Return the string name for the NEM XML file, e.g. 'n3rfpipenem.xml' + ''' + return "%snem.xml" % self.basename(ifc) + + def shimxmlname(self, ifc = None): + ''' Return the string name for the SHIM XML file, e.g. 'commeffectshim.xml' + ''' + return "%sshim.xml" % self.basename(ifc) + + def macxmlname(self, ifc = None): + ''' Return the string name for the MAC XML file, e.g. 'n3rfpipemac.xml' + ''' + return "%smac.xml" % self.basename(ifc) + + def phyxmlname(self, ifc = None): + ''' Return the string name for the PHY XML file, e.g. 'n3rfpipephy.xml' + ''' + return "%sphy.xml" % self.basename(ifc) + + def update(self, moved, moved_netifs): + ''' invoked from MobilityModel when nodes are moved; this causes + EMANE location events to be generated for the nodes in the moved + list, making EmaneModels compatible with Ns2ScriptedMobility + ''' + try: + wlan = self.session.obj(self.objid) + except KeyError: + return + wlan.setnempositions(moved_netifs) + + def linkconfig(self, netif, bw = None, delay = None, + loss = None, duplicate = None, jitter = None, netif2 = None): + ''' Invoked when a Link Message is received. Default is unimplemented. + ''' + warntxt = "EMANE model %s does not support link " % self._name + warntxt += "configuration, dropping Link Message" + self.session.warn(warntxt) + + +class EmaneGlobalModel(EmaneModel): + ''' Global EMANE configuration options. + ''' + def __init__(self, session, objid = None, verbose = False): + EmaneModel.__init__(self, session, objid, verbose) + + _name = "emane" + _confmatrix_platform = [ + ("otamanagerchannelenable", coreapi.CONF_DATA_TYPE_BOOL, '0', + 'on,off', 'enable OTA Manager channel'), + ("otamanagergroup", coreapi.CONF_DATA_TYPE_STRING, '224.1.2.8:45702', + '', 'OTA Manager group'), + ("otamanagerdevice", coreapi.CONF_DATA_TYPE_STRING, 'lo', + '', 'OTA Manager device'), + ("eventservicegroup", coreapi.CONF_DATA_TYPE_STRING, '224.1.2.8:45703', + '', 'Event Service group'), + ("eventservicedevice", coreapi.CONF_DATA_TYPE_STRING, 'lo', + '', 'Event Service device'), + ("platform_id_start", coreapi.CONF_DATA_TYPE_INT32, '1', + '', 'starting Platform ID'), + ("debugportenable", coreapi.CONF_DATA_TYPE_BOOL, '0', + 'on,off', 'enable debug port'), + ("debugport", coreapi.CONF_DATA_TYPE_UINT16, '47000', + '', 'debug port number'), + ] + _confmatrix_nem = [ + ("transportendpoint", coreapi.CONF_DATA_TYPE_STRING, 'localhost', + '', 'Transport endpoint address (port is automatic)'), + ("platformendpoint", coreapi.CONF_DATA_TYPE_STRING, 'localhost', + '', 'Platform endpoint address (port is automatic)'), + ("nem_id_start", coreapi.CONF_DATA_TYPE_INT32, '1', + '', 'starting NEM ID'), + ] + _confmatrix = _confmatrix_platform + _confmatrix_nem + _confgroups = "Platform Attributes:1-%d|NEM Parameters:%d-%d" % \ + (len(_confmatrix_platform), len(_confmatrix_platform) + 1, + len(_confmatrix)) + diff --git a/daemon/core/emane/ieee80211abg.py b/daemon/core/emane/ieee80211abg.py new file mode 100644 index 00000000..378817eb --- /dev/null +++ b/daemon/core/emane/ieee80211abg.py @@ -0,0 +1,119 @@ +# +# CORE +# Copyright (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +ieee80211abg.py: EMANE IEEE 802.11abg model for CORE +''' + +import sys +import string +from core.api import coreapi + +from core.constants import * +from emane import EmaneModel +from universal import EmaneUniversalModel + +class EmaneIeee80211abgModel(EmaneModel): + def __init__(self, session, objid = None, verbose = False): + EmaneModel.__init__(self, session, objid, verbose) + + # model name + _name = "emane_ieee80211abg" + _80211rates = '1 1 Mbps,2 2 Mbps,3 5.5 Mbps,4 11 Mbps,5 6 Mbps,' + \ + '6 9 Mbps,7 12 Mbps,8 18 Mbps,9 24 Mbps,10 36 Mbps,11 48 Mbps,' + \ + '12 54 Mbps' + # MAC parameters + _confmatrix_mac = [ + ("mode", coreapi.CONF_DATA_TYPE_UINT8, '0', + '0 802.11b (DSSS only),1 802.11b (DSSS only),' + \ + '2 802.11a or g (OFDM),3 802.11b/g (DSSS and OFDM)', 'mode'), + ("enablepromiscuousmode", coreapi.CONF_DATA_TYPE_BOOL, '0', + 'On,Off', 'enable promiscuous mode'), + ("distance", coreapi.CONF_DATA_TYPE_UINT32, '1000', + '', 'max distance (m)'), + ("unicastrate", coreapi.CONF_DATA_TYPE_UINT8, '4', _80211rates, + 'unicast rate (Mbps)'), + ("multicastrate", coreapi.CONF_DATA_TYPE_UINT8, '1', _80211rates, + 'multicast rate (Mbps)'), + ("rtsthreshold", coreapi.CONF_DATA_TYPE_UINT16, '0', + '', 'RTS threshold (bytes)'), + ("wmmenable", coreapi.CONF_DATA_TYPE_BOOL, '0', + 'On,Off', 'WiFi Multimedia (WMM)'), + ("pcrcurveuri", coreapi.CONF_DATA_TYPE_STRING, + '/usr/share/emane/models/ieee80211abg/xml/ieee80211pcr.xml', + '', 'SINR/PCR curve file'), + ("flowcontrolenable", coreapi.CONF_DATA_TYPE_BOOL, '0', + 'On,Off', 'enable traffic flow control'), + ("flowcontroltokens", coreapi.CONF_DATA_TYPE_UINT16, '10', + '', 'number of flow control tokens'), + ("queuesize", coreapi.CONF_DATA_TYPE_STRING, '0:255 1:255 2:255 3:255', + '', 'queue size (0-4:size)'), + ("cwmin", coreapi.CONF_DATA_TYPE_STRING, '0:32 1:32 2:16 3:8', + '', 'min contention window (0-4:minw)'), + ("cwmax", coreapi.CONF_DATA_TYPE_STRING, '0:1024 1:1024 2:64 3:16', + '', 'max contention window (0-4:maxw)'), + ("aifs", coreapi.CONF_DATA_TYPE_STRING, '0:2 1:2 2:2 3:1', + '', 'arbitration inter frame space (0-4:aifs)'), + ("txop", coreapi.CONF_DATA_TYPE_STRING, '0:0 1:0 2:0 3:0', + '', 'txop (0-4:usec)'), + ("retrylimit", coreapi.CONF_DATA_TYPE_STRING, '0:3 1:3 2:3 3:3', + '', 'retry limit (0-4:numretries)'), + ] + # PHY parameters from Universal PHY + _confmatrix_phy = EmaneUniversalModel._confmatrix + + _confmatrix = _confmatrix_mac + _confmatrix_phy + # value groupings + _confgroups = "802.11 MAC Parameters:1-%d|Universal PHY Parameters:%d-%d" \ + % (len(_confmatrix_mac), len(_confmatrix_mac) + 1, len(_confmatrix)) + + def buildnemxmlfiles(self, e, ifc): + ''' Build the necessary nem, mac, and phy XMLs in the given path. + If an individual NEM has a nonstandard config, we need to build + that file also. Otherwise the WLAN-wide + nXXemane_ieee80211abgnem.xml, nXXemane_ieee80211abgemac.xml, + nXXemane_ieee80211abgphy.xml are used. + ''' + # use the network-wide config values or interface(NEM)-specific values? + if ifc is None: + values = e.getconfig(self.objid, self._name, + self.getdefaultvalues())[1] + else: + nodenum = ifc.node.objid + values = e.getconfig(nodenum, self._name, None)[1] + if values is None: + # do not build specific files for this NEM when config is same + # as the network + return + nemdoc = e.xmldoc("nem") + nem = nemdoc.getElementsByTagName("nem").pop() + nem.setAttribute("name", "ieee80211abg NEM") + mactag = nemdoc.createElement("mac") + mactag.setAttribute("definition", self.macxmlname(ifc)) + nem.appendChild(mactag) + phytag = nemdoc.createElement("phy") + phytag.setAttribute("definition", self.phyxmlname(ifc)) + nem.appendChild(phytag) + e.xmlwrite(nemdoc, self.nemxmlname(ifc)) + + macdoc = e.xmldoc("mac") + mac = macdoc.getElementsByTagName("mac").pop() + mac.setAttribute("name", "ieee80211abg MAC") + mac.setAttribute("library", "ieee80211abgmaclayer") + + names = self.getnames() + macnames = names[:len(self._confmatrix_mac)] + phynames = names[len(self._confmatrix_mac):] + + # append all MAC options to macdoc + map( lambda n: mac.appendChild(e.xmlparam(macdoc, n, \ + self.valueof(n, values))), macnames) + e.xmlwrite(macdoc, self.macxmlname(ifc)) + + phydoc = EmaneUniversalModel.getphydoc(e, self, values, phynames) + e.xmlwrite(phydoc, self.phyxmlname(ifc)) + diff --git a/daemon/core/emane/nodes.py b/daemon/core/emane/nodes.py new file mode 100644 index 00000000..3caf23cd --- /dev/null +++ b/daemon/core/emane/nodes.py @@ -0,0 +1,281 @@ +# +# CORE +# Copyright (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +nodes.py: definition of an EmaneNode class for implementing configuration +control of an EMANE emulation. An EmaneNode has several attached NEMs that +share the same MAC+PHY model. +''' + +import sys + +from core.api import coreapi +from core.coreobj import PyCoreNet +try: + import emaneeventservice + import emaneeventlocation +except Exception, e: + ''' Don't require all CORE users to have EMANE libeventservice and its + Python bindings installed. + ''' + pass + +class EmaneNet(PyCoreNet): + ''' EMANE network base class. + ''' + apitype = coreapi.CORE_NODE_EMANE + linktype = coreapi.CORE_LINK_WIRELESS + type = "wlan" # icon used + +class EmaneNode(EmaneNet): + ''' EMANE node contains NEM configuration and causes connected nodes + to have TAP interfaces (instead of VEth). These are managed by the + Emane controller object that exists in a session. + ''' + def __init__(self, session, objid = None, name = None, verbose = False, + start = True): + PyCoreNet.__init__(self, session, objid, name, verbose, start) + self.verbose = verbose + self.conf = "" + self.up = False + self.nemidmap = {} + self.model = None + self.mobility = None + + def linkconfig(self, netif, bw = None, delay = None, + loss = None, duplicate = None, jitter = None, netif2 = None): + ''' The CommEffect model supports link configuration. + ''' + if not self.model: + return + return self.model.linkconfig(netif=netif, bw=bw, delay=delay, loss=loss, + duplicate=duplicate, jitter=jitter, netif2=netif2) + + def config(self, conf): + #print "emane", self.name, "got config:", conf + self.conf = conf + + def shutdown(self): + pass + + def link(self, netif1, netif2): + pass + + def unlink(self, netif1, netif2): + pass + + def setmodel(self, model, config): + ''' set the EmaneModel associated with this node + ''' + if (self.verbose): + self.info("adding model %s" % model._name) + if model._type == coreapi.CORE_TLV_REG_WIRELESS: + # EmaneModel really uses values from ConfigurableManager + # when buildnemxml() is called, not during init() + self.model = model(session=self.session, objid=self.objid, + verbose=self.verbose) + elif model._type == coreapi.CORE_TLV_REG_MOBILITY: + self.mobility = model(session=self.session, objid=self.objid, + verbose=self.verbose, values=config) + + def setnemid(self, netif, nemid): + ''' Record an interface to numerical ID mapping. The Emane controller + object manages and assigns these IDs for all NEMs. + ''' + self.nemidmap[netif] = nemid + + def getnemid(self, netif): + ''' Given an interface, return its numerical ID. + ''' + if netif not in self.nemidmap: + return None + else: + return self.nemidmap[netif] + + def getnemnetif(self, nemid): + ''' Given a numerical NEM ID, return its interface. This returns the + first interface that matches the given NEM ID. + ''' + for netif in self.nemidmap: + if self.nemidmap[netif] == nemid: + return netif + return None + + def netifs(self, sort=True): + ''' Retrieve list of linked interfaces sorted by node number. + ''' + return sorted(self._netif.values(), key=lambda ifc: ifc.node.objid) + + def buildplatformxmlentry(self, doc): + ''' Return a dictionary of XML elements describing the NEMs + connected to this EmaneNode for inclusion in the platform.xml file. + ''' + ret = {} + if self.model is None: + self.info("warning: EmaneNode %s has no associated model" % \ + self.name) + return ret + for netif in self.netifs(): + # + nementry = self.model.buildplatformxmlnementry(doc, self, netif) + # + # + # + trans = self.model.buildplatformxmltransportentry(doc, self, netif) + nementry.appendChild(trans) + ret[netif] = nementry + + return ret + + def buildnemxmlfiles(self, emane): + ''' Let the configured model build the necessary nem, mac, and phy + XMLs. + ''' + if self.model is None: + return + # build XML for overall network (EmaneNode) configs + self.model.buildnemxmlfiles(emane, ifc=None) + # build XML for specific interface (NEM) configs + need_virtual = False + need_raw = False + vtype = "virtual" + rtype = "raw" + for netif in self.netifs(): + self.model.buildnemxmlfiles(emane, netif) + if "virtual" in netif.transport_type: + need_virtual = True + vtype = netif.transport_type + else: + need_raw = True + rtype = netif.transport_type + # build transport XML files depending on type of interfaces involved + if need_virtual: + self.buildtransportxml(emane, vtype) + if need_raw: + self.buildtransportxml(emane, rtype) + + def buildtransportxml(self, emane, type): + ''' Write a transport XML file for the Virtual or Raw Transport. + ''' + transdoc = emane.xmldoc("transport") + trans = transdoc.getElementsByTagName("transport").pop() + trans.setAttribute("name", "%s Transport" % type.capitalize()) + trans.setAttribute("library", "trans%s" % type.lower()) + trans.appendChild(emane.xmlparam(transdoc, "bitrate", "0")) + if "virtual" in type.lower(): + trans.appendChild(emane.xmlparam(transdoc, "devicepath", + "/dev/net/tun")) + emane.xmlwrite(transdoc, self.transportxmlname(type.lower())) + + def transportxmlname(self, type): + ''' Return the string name for the Transport XML file, + e.g. 'n3transvirtual.xml' + ''' + return "n%strans%s.xml" % (self.objid, type) + + + def installnetifs(self): + ''' Install TAP devices into their namespaces. This is done after + EMANE daemons have been started, because that is their only chance + to bind to the TAPs. + ''' + if not self.session.emane.doeventmonitor() and \ + self.session.emane.service is None: + warntxt = "unable to publish EMANE events because the eventservice " + warntxt += "Python bindings failed to load" + self.session.exception(coreapi.CORE_EXCP_LEVEL_ERROR, self.name, + self.objid, warntxt) + + for netif in self.netifs(): + if "virtual" in netif.transport_type.lower(): + netif.install() + # if we are listening for EMANE events, don't generate them + if self.session.emane.doeventmonitor(): + netif.poshook = None + continue + # at this point we register location handlers for generating + # EMANE location events + netif.poshook = self.setnemposition + (x,y,z) = netif.node.position.get() + self.setnemposition(netif, x, y, z) + + def deinstallnetifs(self): + ''' Uninstall TAP devices. This invokes their shutdown method for + any required cleanup; the device may be actually removed when + emanetransportd terminates. + ''' + for netif in self.netifs(): + if "virtual" in netif.transport_type.lower(): + netif.shutdown() + netif.poshook = None + + def setnemposition(self, netif, x, y, z): + ''' Publish a NEM location change event using the EMANE event service. + ''' + if self.session.emane.service is None: + if self.verbose: + self.info("position service not available") + return + nemid = self.getnemid(netif) + ifname = netif.localname + if nemid is None: + self.info("nemid for %s is unknown" % ifname) + return + (lat, long, alt) = self.session.location.getgeo(x, y, z) + if self.verbose: + self.info("setnemposition %s (%s) x,y,z=(%d,%d,%s)" + "(%.6f,%.6f,%.6f)" % \ + (ifname, nemid, x, y, z, lat, long, alt)) + event = emaneeventlocation.EventLocation(1) + # altitude must be an integer or warning is printed + # unused: yaw, pitch, roll, azimuth, elevation, velocity + alt = int(round(alt)) + event.set(0, nemid, lat, long, alt) + self.session.emane.service.publish(emaneeventlocation.EVENT_ID, + emaneeventservice.PLATFORMID_ANY, + emaneeventservice.NEMID_ANY, + emaneeventservice.COMPONENTID_ANY, + event.export()) + + def setnempositions(self, moved_netifs): + ''' Several NEMs have moved, from e.g. a WaypointMobilityModel + calculation. Generate an EMANE Location Event having several + entries for each netif that has moved. + ''' + if len(moved_netifs) == 0: + return + if self.session.emane.service is None: + if self.verbose: + self.info("position service not available") + return + + event = emaneeventlocation.EventLocation(len(moved_netifs)) + i = 0 + for netif in moved_netifs: + nemid = self.getnemid(netif) + ifname = netif.localname + if nemid is None: + self.info("nemid for %s is unknown" % ifname) + continue + (x, y, z) = netif.node.getposition() + (lat, long, alt) = self.session.location.getgeo(x, y, z) + if self.verbose: + self.info("setnempositions %d %s (%s) x,y,z=(%d,%d,%s)" + "(%.6f,%.6f,%.6f)" % \ + (i, ifname, nemid, x, y, z, lat, long, alt)) + # altitude must be an integer or warning is printed + alt = int(round(alt)) + event.set(i, nemid, lat, long, alt) + i += 1 + + self.session.emane.service.publish(emaneeventlocation.EVENT_ID, + emaneeventservice.PLATFORMID_ANY, + emaneeventservice.NEMID_ANY, + emaneeventservice.COMPONENTID_ANY, + event.export()) + + diff --git a/daemon/core/emane/rfpipe.py b/daemon/core/emane/rfpipe.py new file mode 100644 index 00000000..8e065af3 --- /dev/null +++ b/daemon/core/emane/rfpipe.py @@ -0,0 +1,106 @@ +# +# CORE +# Copyright (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# author: Harry Bullen +# +''' +rfpipe.py: EMANE RF-PIPE model for CORE +''' + +import sys +import string +from core.api import coreapi + +from core.constants import * +from emane import EmaneModel +from universal import EmaneUniversalModel + +class EmaneRfPipeModel(EmaneModel): + def __init__(self, session, objid = None, verbose = False): + EmaneModel.__init__(self, session, objid, verbose) + + # model name + _name = "emane_rfpipe" + + # configuration parameters are + # ( 'name', 'type', 'default', 'possible-value-list', 'caption') + # MAC parameters + _confmatrix_mac = [ + ("enablepromiscuousmode", coreapi.CONF_DATA_TYPE_BOOL, '0', + 'True,False', 'enable promiscuous mode'), + ("datarate", coreapi.CONF_DATA_TYPE_UINT32, '1M', + '', 'data rate (bps)'), + ("jitter", coreapi.CONF_DATA_TYPE_FLOAT, '0.0', + '', 'transmission jitter (usec)'), + ("delay", coreapi.CONF_DATA_TYPE_FLOAT, '0.0', + '', 'transmission delay (usec)'), + ("flowcontrolenable", coreapi.CONF_DATA_TYPE_BOOL, '0', + 'On,Off', 'enable traffic flow control'), + ("flowcontroltokens", coreapi.CONF_DATA_TYPE_UINT16, '10', + '', 'number of flow control tokens'), + ("enabletighttiming", coreapi.CONF_DATA_TYPE_BOOL, '0', + 'On,Off', 'enable tight timing for pkt delay'), + ("pcrcurveuri", coreapi.CONF_DATA_TYPE_STRING, + '/usr/share/emane/models/rfpipe/xml/rfpipepcr.xml', + '', 'SINR/PCR curve file'), + ("transmissioncontrolmap", coreapi.CONF_DATA_TYPE_STRING, '', + '', 'tx control map (nem:rate:freq:tx_dBm)'), + ] + + # PHY parameters from Universal PHY + _confmatrix_phy = EmaneUniversalModel._confmatrix + + _confmatrix = _confmatrix_mac + _confmatrix_phy + + # value groupings + _confgroups = "RF-PIPE MAC Parameters:1-%d|Universal PHY Parameters:%d-%d" \ + % ( len(_confmatrix_mac), len(_confmatrix_mac) + 1, len(_confmatrix)) + + def buildnemxmlfiles(self, e, ifc): + ''' Build the necessary nem, mac, and phy XMLs in the given path. + If an individual NEM has a nonstandard config, we need to build + that file also. Otherwise the WLAN-wide nXXemane_rfpipenem.xml, + nXXemane_rfpipemac.xml, nXXemane_rfpipephy.xml are used. + ''' + values = e.getifcconfig(self.objid, self._name, + self.getdefaultvalues(), ifc) + if values is None: + return + nemdoc = e.xmldoc("nem") + nem = nemdoc.getElementsByTagName("nem").pop() + nem.setAttribute("name", "RF-PIPE NEM") + mactag = nemdoc.createElement("mac") + mactag.setAttribute("definition", self.macxmlname(ifc)) + nem.appendChild(mactag) + phytag = nemdoc.createElement("phy") + phytag.setAttribute("definition", self.phyxmlname(ifc)) + nem.appendChild(phytag) + e.xmlwrite(nemdoc, self.nemxmlname(ifc)) + + names = list(self.getnames()) + macnames = names[:len(self._confmatrix_mac)] + phynames = names[len(self._confmatrix_mac):] + + macdoc = e.xmldoc("mac") + mac = macdoc.getElementsByTagName("mac").pop() + mac.setAttribute("name", "RF-PIPE MAC") + mac.setAttribute("library", "rfpipemaclayer") + if self.valueof("transmissioncontrolmap", values) is "": + macnames.remove("transmissioncontrolmap") + # EMANE 0.7.4 support + if e.emane074: + # convert datarate from bps to kbps + i = names.index('datarate') + values = list(values) + values[i] = self.emane074_fixup(values[i], 1000) + # append MAC options to macdoc + map( lambda n: mac.appendChild(e.xmlparam(macdoc, n, \ + self.valueof(n, values))), macnames) + e.xmlwrite(macdoc, self.macxmlname(ifc)) + + phydoc = EmaneUniversalModel.getphydoc(e, self, values, phynames) + e.xmlwrite(phydoc, self.phyxmlname(ifc)) + diff --git a/daemon/core/emane/universal.py b/daemon/core/emane/universal.py new file mode 100644 index 00000000..a163bbc4 --- /dev/null +++ b/daemon/core/emane/universal.py @@ -0,0 +1,113 @@ +# +# CORE +# Copyright (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +universal.py: EMANE Universal PHY model for CORE. Enumerates configuration items +used for the Universal PHY. +''' + +import sys +import string +from core.api import coreapi + +from core.constants import * +from emane import EmaneModel + +class EmaneUniversalModel(EmaneModel): + ''' This Univeral PHY model is meant to be imported by other models, + not instantiated. + ''' + def __init__(self, session, objid = None, verbose = False): + raise SyntaxError + + _name = "emane_universal" + _xmlname = "universalphy" + _xmllibrary = "universalphylayer" + + # universal PHY parameters + _confmatrix = [ + ("antennagain", coreapi.CONF_DATA_TYPE_FLOAT, '0.0', + '','antenna gain (dBi)'), + ("antennaazimuth", coreapi.CONF_DATA_TYPE_FLOAT, '0.0', + '','antenna azimuth (deg)'), + ("antennaelevation", coreapi.CONF_DATA_TYPE_FLOAT, '0.0', + '','antenna elevation (deg)'), + ("antennaprofileid", coreapi.CONF_DATA_TYPE_STRING, '1', + '','antenna profile ID'), + ("antennaprofilemanifesturi", coreapi.CONF_DATA_TYPE_STRING, '', + '','antenna profile manifest URI'), + ("antennaprofileenable", coreapi.CONF_DATA_TYPE_BOOL, '0', + 'On,Off','antenna profile mode'), + ("bandwidth", coreapi.CONF_DATA_TYPE_UINT64, '1M', + '', 'rf bandwidth (hz)'), + ("defaultconnectivitymode", coreapi.CONF_DATA_TYPE_BOOL, '1', + 'On,Off','default connectivity'), + ("frequency", coreapi.CONF_DATA_TYPE_UINT64, '2.347G', + '','frequency (Hz)'), + ("frequencyofinterest", coreapi.CONF_DATA_TYPE_UINT64, '2.347G', + '','frequency of interest (Hz)'), + ("frequencyofinterestfilterenable", coreapi.CONF_DATA_TYPE_BOOL, '1', + 'On,Off','frequency of interest filter enable'), + ("noiseprocessingmode", coreapi.CONF_DATA_TYPE_BOOL, '0', + 'On,Off','enable noise processing'), + ("pathlossmode", coreapi.CONF_DATA_TYPE_STRING, '2ray', + 'pathloss,2ray,freespace','path loss mode'), + ("subid", coreapi.CONF_DATA_TYPE_UINT16, '1', + '','subid'), + ("systemnoisefigure", coreapi.CONF_DATA_TYPE_FLOAT, '4.0', + '','system noise figure (dB)'), + ("txpower", coreapi.CONF_DATA_TYPE_FLOAT, '0.0', + '','transmit power (dBm)'), + ] + + # old parameters + _confmatrix_ver074 = [ + ("antennaazimuthbeamwidth", coreapi.CONF_DATA_TYPE_FLOAT, '360.0', + '','azimith beam width (deg)'), + ("antennaelevationbeamwidth", coreapi.CONF_DATA_TYPE_FLOAT, '180.0', + '','elevation beam width (deg)'), + ("antennatype", coreapi.CONF_DATA_TYPE_STRING, 'omnidirectional', + 'omnidirectional,unidirectional','antenna type'), + ] + + # parameters that require unit conversion for 0.7.4 + _update_ver074 = ("bandwidth", "frequency", "frequencyofinterest") + # parameters that should be removed for 0.7.4 + _remove_ver074 = ("antennaprofileenable", "antennaprofileid", + "antennaprofilemanifesturi", + "frequencyofinterestfilterenable") + + + @classmethod + def getphydoc(cls, e, mac, values, phynames): + phydoc = e.xmldoc("phy") + phy = phydoc.getElementsByTagName("phy").pop() + phy.setAttribute("name", cls._xmlname) + phy.setAttribute("library", cls._xmllibrary) + # EMANE 0.7.4 suppport - to be removed when 0.7.4 support is deprecated + if e.emane074: + names = mac.getnames() + values = list(values) + phynames = list(phynames) + # update units for some parameters + for p in cls._update_ver074: + i = names.index(p) + # these all happen to be KHz, so 1000 is used + values[i] = cls.emane074_fixup(values[i], 1000) + # remove new incompatible options + for p in cls._remove_ver074: + phynames.remove(p) + # insert old options with their default values + for old in cls._confmatrix_ver074: + phy.appendChild(e.xmlparam(phydoc, old[0], old[2])) + + # append all PHY options to phydoc + map( lambda n: phy.appendChild(e.xmlparam(phydoc, n, \ + mac.valueof(n, values))), phynames) + return phydoc + + diff --git a/daemon/core/location.py b/daemon/core/location.py new file mode 100644 index 00000000..824a54df --- /dev/null +++ b/daemon/core/location.py @@ -0,0 +1,246 @@ +# +# CORE +# Copyright (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +location.py: definition of CoreLocation class that is a member of the +Session object. Provides conversions between Cartesian and geographic coordinate +systems. Depends on utm contributed module, from +https://pypi.python.org/pypi/utm (version 0.3.0). +''' + +from core.conf import ConfigurableManager +from core.api import coreapi +from core.misc import utm + +class CoreLocation(ConfigurableManager): + ''' Member of session class for handling global location data. This keeps + track of a latitude/longitude/altitude reference point and scale in + order to convert between X,Y and geo coordinates. + + TODO: this could be updated to use more generic + Configurable/ConfigurableManager code like other Session objects + ''' + _name = "location" + _type = coreapi.CORE_TLV_REG_UTILITY + + def __init__(self, session): + ConfigurableManager.__init__(self, session) + self.reset() + self.zonemap = {} + for n, l in utm.ZONE_LETTERS: + self.zonemap[l] = n + + def reset(self): + ''' Reset to initial state. + ''' + # (x, y, z) coordinates of the point given by self.refgeo + self.refxyz = (0.0, 0.0, 0.0) + # decimal latitude, longitude, and altitude at the point (x, y, z) + self.setrefgeo(0.0, 0.0, 0.0) + # 100 pixels equals this many meters + self.refscale = 1.0 + # cached distance to refpt in other zones + self.zoneshifts = {} + + def configure_values(self, msg, values): + ''' Receive configuration message for setting the reference point + and scale. + ''' + if values is None: + self.session.info("location data missing") + return None + values = values.split('|') + # Cartesian coordinate reference point + refx,refy = map(lambda x: float(x), values[0:2]) + refz = 0.0 + self.refxyz = (refx, refy, refz) + # Geographic reference point + lat,long,alt = map(lambda x: float(x), values[2:5]) + self.setrefgeo(lat, long, alt) + self.refscale = float(values[5]) + self.session.info("location configured: (%.2f,%.2f,%.2f) = " + "(%.5f,%.5f,%.5f) scale=%.2f" % + (self.refxyz[0], self.refxyz[1], self.refxyz[2], self.refgeo[0], + self.refgeo[1], self.refgeo[2], self.refscale)) + self.session.info("location configured: UTM(%.5f,%.5f,%.5f)" % + (self.refutm[1], self.refutm[2], self.refutm[3])) + + def px2m(self, val): + ''' Convert the specified value in pixels to meters using the + configured scale. The scale is given as s, where + 100 pixels = s meters. + ''' + return (val / 100.0) * self.refscale + + def m2px(self, val): + ''' Convert the specified value in meters to pixels using the + configured scale. The scale is given as s, where + 100 pixels = s meters. + ''' + if self.refscale == 0.0: + return 0.0 + return 100.0 * (val / self.refscale) + + def setrefgeo(self, lat, lon, alt): + ''' Record the geographical reference point decimal (lat, lon, alt) + and convert and store its UTM equivalent for later use. + ''' + self.refgeo = (lat, lon, alt) + # easting, northing, zone + (e, n, zonen, zonel) = utm.from_latlon(lat, lon) + self.refutm = ( (zonen, zonel), e, n, alt) + + def getgeo(self, x, y, z): + ''' Given (x, y, z) Cartesian coordinates, convert them to latitude, + longitude, and altitude based on the configured reference point + and scale. + ''' + # shift (x,y,z) over to reference point (x,y,z) + x = x - self.refxyz[0] + y = -(y - self.refxyz[1]) + if z is None: + z = self.refxyz[2] + else: + z = z - self.refxyz[2] + # use UTM coordinates since unit is meters + zone = self.refutm[0] + if zone == "": + raise ValueError, "reference point not configured" + e = self.refutm[1] + self.px2m(x) + n = self.refutm[2] + self.px2m(y) + alt = self.refutm[3] + self.px2m(z) + (e, n, zone) = self.getutmzoneshift(e, n) + try: + lat, lon = utm.to_latlon(e, n, zone[0], zone[1]) + except utm.OutOfRangeError: + self.info("UTM out of range error for e=%s n=%s zone=%s" \ + "xyz=(%s,%s,%s)" % (e, n, zone, x, y, z)) + (lat, lon) = self.refgeo[:2] + #self.info("getgeo(%s,%s,%s) e=%s n=%s zone=%s lat,lon,alt=" \ + # "%.3f,%.3f,%.3f" % (x, y, z, e, n, zone, lat, lon, alt)) + return (lat, lon, alt) + + def getxyz(self, lat, lon, alt): + ''' Given latitude, longitude, and altitude location data, convert them + to (x, y, z) Cartesian coordinates based on the configured + reference point and scale. Lat/lon is converted to UTM meter + coordinates, UTM zones are accounted for, and the scale turns + meters to pixels. + ''' + # convert lat/lon to UTM coordinates in meters + (e, n, zonen, zonel) = utm.from_latlon(lat, lon) + (rlat, rlon, ralt) = self.refgeo + xshift = self.geteastingshift(zonen, zonel) + if xshift is None: + xm = e - self.refutm[1] + else: + xm = e + xshift + yshift = self.getnorthingshift(zonen, zonel) + if yshift is None: + ym = n - self.refutm[2] + else: + ym = n + yshift + zm = alt - ralt + + # shift (x,y,z) over to reference point (x,y,z) + x = self.m2px(xm) + self.refxyz[0] + y = -(self.m2px(ym) + self.refxyz[1]) + z = self.m2px(zm) + self.refxyz[2] + return (x, y, z) + + def geteastingshift(self, zonen, zonel): + ''' If the lat, lon coordinates being converted are located in a + different UTM zone than the canvas reference point, the UTM meters + may need to be shifted. + This picks a reference point in the same longitudinal band + (UTM zone number) as the provided zone, to calculate the shift in + meters for the x coordinate. + ''' + rzonen = int(self.refutm[0][0]) + if zonen == rzonen: + return None # same zone number, no x shift required + z = (zonen, zonel) + if z in self.zoneshifts and self.zoneshifts[z][0] is not None: + return self.zoneshifts[z][0] # x shift already calculated, cached + + (rlat, rlon, ralt) = self.refgeo + lon2 = rlon + 6*(zonen - rzonen) # ea. zone is 6deg band + (e2, n2, zonen2, zonel2) = utm.from_latlon(rlat, lon2) # ignore northing + # NOTE: great circle distance used here, not reference ellipsoid! + xshift = utm.haversine(rlon, rlat, lon2, rlat) - e2 + # cache the return value + yshift = None + if z in self.zoneshifts: + yshift = self.zoneshifts[z][1] + self.zoneshifts[z] = (xshift, yshift) + return xshift + + def getnorthingshift(self, zonen, zonel): + ''' If the lat, lon coordinates being converted are located in a + different UTM zone than the canvas reference point, the UTM meters + may need to be shifted. + This picks a reference point in the same latitude band (UTM zone letter) + as the provided zone, to calculate the shift in meters for the + y coordinate. + ''' + rzonel = self.refutm[0][1] + if zonel == rzonel: + return None # same zone letter, no y shift required + z = (zonen, zonel) + if z in self.zoneshifts and self.zoneshifts[z][1] is not None: + return self.zoneshifts[z][1] # y shift already calculated, cached + + (rlat, rlon, ralt) = self.refgeo + # zonemap is used to calculate degrees difference between zone letters + latshift = self.zonemap[zonel] - self.zonemap[rzonel] + lat2 = rlat + latshift # ea. latitude band is 8deg high + (e2, n2, zonen2, zonel2) = utm.from_latlon(lat2, rlon) + # NOTE: great circle distance used here, not reference ellipsoid + yshift = -(utm.haversine(rlon, rlat, rlon, lat2) + n2) + # cache the return value + xshift = None + if z in self.zoneshifts: + xshift = self.zoneshifts[z][0] + self.zoneshifts[z] = (xshift, yshift) + return yshift + + def getutmzoneshift(self, e, n): + ''' Given UTM easting and northing values, check if they fall outside + the reference point's zone boundary. Return the UTM coordinates in a + different zone and the new zone if they do. Zone lettering is only + changed when the reference point is in the opposite hemisphere. + ''' + zone = self.refutm[0] + (rlat, rlon, ralt) = self.refgeo + if e > 834000 or e < 166000: + num_zones = (int(e) - 166000) / (utm.R/10) + # estimate number of zones to shift, E (positive) or W (negative) + rlon2 = self.refgeo[1] + (num_zones * 6) + (e2, n2, zonen2, zonel2) = utm.from_latlon(rlat, rlon2) + xshift = utm.haversine(rlon, rlat, rlon2, rlat) + # after >3 zones away from refpt, the above estimate won't work + # (the above estimate could be improved) + if not 100000 <= (e - xshift) < 1000000: + # move one more zone away + num_zones = (abs(num_zones)+1) * (abs(num_zones)/num_zones) + rlon2 = self.refgeo[1] + (num_zones * 6) + (e2, n2, zonen2, zonel2) = utm.from_latlon(rlat, rlon2) + xshift = utm.haversine(rlon, rlat, rlon2, rlat) + e = e - xshift + zone = (zonen2, zonel2) + if n < 0: + # refpt in northern hemisphere and we crossed south of equator + n += 10000000 + zone = (zone[0], 'M') + elif n > 10000000: + # refpt in southern hemisphere and we crossed north of equator + n -= 10000000 + zone = (zone[0], 'N') + return (e, n, zone) + + + diff --git a/daemon/core/misc/LatLongUTMconversion.py b/daemon/core/misc/LatLongUTMconversion.py new file mode 100755 index 00000000..2c3bf238 --- /dev/null +++ b/daemon/core/misc/LatLongUTMconversion.py @@ -0,0 +1,216 @@ +#!/usr/bin/env python +# this file is from http://pygps.org/ + +# Lat Long - UTM, UTM - Lat Long conversions + +from math import pi, sin, cos, tan, sqrt + +#LatLong- UTM conversion..h +#definitions for lat/long to UTM and UTM to lat/lng conversions +#include + +_deg2rad = pi / 180.0 +_rad2deg = 180.0 / pi + +_EquatorialRadius = 2 +_eccentricitySquared = 3 + +_ellipsoid = [ +# id, Ellipsoid name, Equatorial Radius, square of eccentricity +# first once is a placeholder only, To allow array indices to match id numbers + [ -1, "Placeholder", 0, 0], + [ 1, "Airy", 6377563, 0.00667054], + [ 2, "Australian National", 6378160, 0.006694542], + [ 3, "Bessel 1841", 6377397, 0.006674372], + [ 4, "Bessel 1841 (Nambia] ", 6377484, 0.006674372], + [ 5, "Clarke 1866", 6378206, 0.006768658], + [ 6, "Clarke 1880", 6378249, 0.006803511], + [ 7, "Everest", 6377276, 0.006637847], + [ 8, "Fischer 1960 (Mercury] ", 6378166, 0.006693422], + [ 9, "Fischer 1968", 6378150, 0.006693422], + [ 10, "GRS 1967", 6378160, 0.006694605], + [ 11, "GRS 1980", 6378137, 0.00669438], + [ 12, "Helmert 1906", 6378200, 0.006693422], + [ 13, "Hough", 6378270, 0.00672267], + [ 14, "International", 6378388, 0.00672267], + [ 15, "Krassovsky", 6378245, 0.006693422], + [ 16, "Modified Airy", 6377340, 0.00667054], + [ 17, "Modified Everest", 6377304, 0.006637847], + [ 18, "Modified Fischer 1960", 6378155, 0.006693422], + [ 19, "South American 1969", 6378160, 0.006694542], + [ 20, "WGS 60", 6378165, 0.006693422], + [ 21, "WGS 66", 6378145, 0.006694542], + [ 22, "WGS-72", 6378135, 0.006694318], + [ 23, "WGS-84", 6378137, 0.00669438] +] + +#Reference ellipsoids derived from Peter H. Dana's website- +#http://www.utexas.edu/depts/grg/gcraft/notes/datum/elist.html +#Department of Geography, University of Texas at Austin +#Internet: pdana@mail.utexas.edu +#3/22/95 + +#Source +#Defense Mapping Agency. 1987b. DMA Technical Report: Supplement to Department of Defense World Geodetic System +#1984 Technical Report. Part I and II. Washington, DC: Defense Mapping Agency + +#def LLtoUTM(int ReferenceEllipsoid, const double Lat, const double Long, +# double &UTMNorthing, double &UTMEasting, char* UTMZone) + +def LLtoUTM(ReferenceEllipsoid, Lat, Long, zone = None): + """converts lat/long to UTM coords. Equations from USGS Bulletin 1532 + East Longitudes are positive, West longitudes are negative. + North latitudes are positive, South latitudes are negative + Lat and Long are in decimal degrees + Written by Chuck Gantz- chuck.gantz@globalstar.com""" + + a = _ellipsoid[ReferenceEllipsoid][_EquatorialRadius] + eccSquared = _ellipsoid[ReferenceEllipsoid][_eccentricitySquared] + k0 = 0.9996 + + #Make sure the longitude is between -180.00 .. 179.9 + LongTemp = (Long+180)-int((Long+180)/360)*360-180 # -180.00 .. 179.9 + + LatRad = Lat*_deg2rad + LongRad = LongTemp*_deg2rad + + if zone is None: + ZoneNumber = int((LongTemp + 180)/6) + 1 + else: + ZoneNumber = zone + + if Lat >= 56.0 and Lat < 64.0 and LongTemp >= 3.0 and LongTemp < 12.0: + ZoneNumber = 32 + + # Special zones for Svalbard + if Lat >= 72.0 and Lat < 84.0: + if LongTemp >= 0.0 and LongTemp < 9.0:ZoneNumber = 31 + elif LongTemp >= 9.0 and LongTemp < 21.0: ZoneNumber = 33 + elif LongTemp >= 21.0 and LongTemp < 33.0: ZoneNumber = 35 + elif LongTemp >= 33.0 and LongTemp < 42.0: ZoneNumber = 37 + + LongOrigin = (ZoneNumber - 1)*6 - 180 + 3 #+3 puts origin in middle of zone + LongOriginRad = LongOrigin * _deg2rad + + #compute the UTM Zone from the latitude and longitude + UTMZone = "%d%c" % (ZoneNumber, _UTMLetterDesignator(Lat)) + + eccPrimeSquared = (eccSquared)/(1-eccSquared) + N = a/sqrt(1-eccSquared*sin(LatRad)*sin(LatRad)) + T = tan(LatRad)*tan(LatRad) + C = eccPrimeSquared*cos(LatRad)*cos(LatRad) + A = cos(LatRad)*(LongRad-LongOriginRad) + + M = a*((1 + - eccSquared/4 + - 3*eccSquared*eccSquared/64 + - 5*eccSquared*eccSquared*eccSquared/256)*LatRad + - (3*eccSquared/8 + + 3*eccSquared*eccSquared/32 + + 45*eccSquared*eccSquared*eccSquared/1024)*sin(2*LatRad) + + (15*eccSquared*eccSquared/256 + 45*eccSquared*eccSquared*eccSquared/1024)*sin(4*LatRad) + - (35*eccSquared*eccSquared*eccSquared/3072)*sin(6*LatRad)) + + UTMEasting = (k0*N*(A+(1-T+C)*A*A*A/6 + + (5-18*T+T*T+72*C-58*eccPrimeSquared)*A*A*A*A*A/120) + + 500000.0) + + UTMNorthing = (k0*(M+N*tan(LatRad)*(A*A/2+(5-T+9*C+4*C*C)*A*A*A*A/24 + + (61 + -58*T + +T*T + +600*C + -330*eccPrimeSquared)*A*A*A*A*A*A/720))) + + if Lat < 0: + UTMNorthing = UTMNorthing + 10000000.0; #10000000 meter offset for southern hemisphere + return (UTMZone, UTMEasting, UTMNorthing) + + +def _UTMLetterDesignator(Lat): + """This routine determines the correct UTM letter designator for the given + latitude returns 'Z' if latitude is outside the UTM limits of 84N to 80S + Written by Chuck Gantz- chuck.gantz@globalstar.com""" + + if 84 >= Lat >= 72: return 'X' + elif 72 > Lat >= 64: return 'W' + elif 64 > Lat >= 56: return 'V' + elif 56 > Lat >= 48: return 'U' + elif 48 > Lat >= 40: return 'T' + elif 40 > Lat >= 32: return 'S' + elif 32 > Lat >= 24: return 'R' + elif 24 > Lat >= 16: return 'Q' + elif 16 > Lat >= 8: return 'P' + elif 8 > Lat >= 0: return 'N' + elif 0 > Lat >= -8: return 'M' + elif -8> Lat >= -16: return 'L' + elif -16 > Lat >= -24: return 'K' + elif -24 > Lat >= -32: return 'J' + elif -32 > Lat >= -40: return 'H' + elif -40 > Lat >= -48: return 'G' + elif -48 > Lat >= -56: return 'F' + elif -56 > Lat >= -64: return 'E' + elif -64 > Lat >= -72: return 'D' + elif -72 > Lat >= -80: return 'C' + else: return 'Z' # if the Latitude is outside the UTM limits + +#void UTMtoLL(int ReferenceEllipsoid, const double UTMNorthing, const double UTMEasting, const char* UTMZone, +# double& Lat, double& Long ) + +def UTMtoLL(ReferenceEllipsoid, northing, easting, zone): + """converts UTM coords to lat/long. Equations from USGS Bulletin 1532 +East Longitudes are positive, West longitudes are negative. +North latitudes are positive, South latitudes are negative +Lat and Long are in decimal degrees. +Written by Chuck Gantz- chuck.gantz@globalstar.com +Converted to Python by Russ Nelson """ + + k0 = 0.9996 + a = _ellipsoid[ReferenceEllipsoid][_EquatorialRadius] + eccSquared = _ellipsoid[ReferenceEllipsoid][_eccentricitySquared] + e1 = (1-sqrt(1-eccSquared))/(1+sqrt(1-eccSquared)) + #NorthernHemisphere; //1 for northern hemispher, 0 for southern + + x = easting - 500000.0 #remove 500,000 meter offset for longitude + y = northing + + ZoneLetter = zone[-1] + ZoneNumber = int(zone[:-1]) + if ZoneLetter >= 'N': + NorthernHemisphere = 1 # point is in northern hemisphere + else: + NorthernHemisphere = 0 # point is in southern hemisphere + y -= 10000000.0 # remove 10,000,000 meter offset used for southern hemisphere + + LongOrigin = (ZoneNumber - 1)*6 - 180 + 3 # +3 puts origin in middle of zone + + eccPrimeSquared = (eccSquared)/(1-eccSquared) + + M = y / k0 + mu = M/(a*(1-eccSquared/4-3*eccSquared*eccSquared/64-5*eccSquared*eccSquared*eccSquared/256)) + + phi1Rad = (mu + (3*e1/2-27*e1*e1*e1/32)*sin(2*mu) + + (21*e1*e1/16-55*e1*e1*e1*e1/32)*sin(4*mu) + +(151*e1*e1*e1/96)*sin(6*mu)) + phi1 = phi1Rad*_rad2deg; + + N1 = a/sqrt(1-eccSquared*sin(phi1Rad)*sin(phi1Rad)) + T1 = tan(phi1Rad)*tan(phi1Rad) + C1 = eccPrimeSquared*cos(phi1Rad)*cos(phi1Rad) + R1 = a*(1-eccSquared)/pow(1-eccSquared*sin(phi1Rad)*sin(phi1Rad), 1.5) + D = x/(N1*k0) + + Lat = phi1Rad - (N1*tan(phi1Rad)/R1)*(D*D/2-(5+3*T1+10*C1-4*C1*C1-9*eccPrimeSquared)*D*D*D*D/24 + +(61+90*T1+298*C1+45*T1*T1-252*eccPrimeSquared-3*C1*C1)*D*D*D*D*D*D/720) + Lat = Lat * _rad2deg + + Long = (D-(1+2*T1+C1)*D*D*D/6+(5-2*C1+28*T1-3*C1*C1+8*eccPrimeSquared+24*T1*T1) + *D*D*D*D*D/120)/cos(phi1Rad) + Long = LongOrigin + Long * _rad2deg + return (Lat, Long) + +if __name__ == '__main__': + (z, e, n) = LLtoUTM(23, 45.00, -75.00) + print z, e, n + print UTMtoLL(23, n, e, z) + diff --git a/daemon/core/misc/__init__.py b/daemon/core/misc/__init__.py new file mode 100644 index 00000000..e69de29b diff --git a/daemon/core/misc/event.py b/daemon/core/misc/event.py new file mode 100644 index 00000000..08ed5701 --- /dev/null +++ b/daemon/core/misc/event.py @@ -0,0 +1,160 @@ +# +# CORE +# Copyright (c)2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: Tom Goff +# +''' +event.py: event loop implementation using a heap queue and threads. +''' +import time +import threading +import heapq + +class EventLoop(object): + + class Event(object): + def __init__(self, eventnum, time, func, *args, **kwds): + self.eventnum = eventnum + self.time = time + self.func = func + self.args = args + self.kwds = kwds + self.canceled = False + + def __cmp__(self, other): + tmp = cmp(self.time, other.time) + if tmp == 0: + tmp = cmp(self.eventnum, other.eventnum) + return tmp + + def run(self): + if self.canceled: + return + self.func(*self.args, **self.kwds) + + def cancel(self): + self.canceled = True # XXX not thread-safe + + def __init__(self): + self.lock = threading.RLock() + self.queue = [] + self.eventnum = 0 + self.timer = None + self.running = False + self.start = None + + def __del__(self): + self.stop() + + def __run_events(self): + schedule = False + while True: + with self.lock: + if not self.running or not self.queue: + break + now = time.time() + if self.queue[0].time > now: + schedule = True + break + event = heapq.heappop(self.queue) + assert event.time <= now + event.run() + with self.lock: + self.timer = None + if schedule: + self.__schedule_event() + + def __schedule_event(self): + with self.lock: + assert self.running + if not self.queue: + return + delay = self.queue[0].time - time.time() + assert self.timer is None + self.timer = threading.Timer(delay, self.__run_events) + self.timer.daemon = True + self.timer.start() + + def run(self): + with self.lock: + if self.running: + return + self.running = True + self.start = time.time() + for event in self.queue: + event.time += self.start + self.__schedule_event() + + def stop(self): + with self.lock: + if not self.running: + return + self.queue = [] + self.eventnum = 0 + if self.timer is not None: + self.timer.cancel() + self.timer = None + self.running = False + self.start = None + + def add_event(self, delaysec, func, *args, **kwds): + with self.lock: + eventnum = self.eventnum + self.eventnum += 1 + evtime = float(delaysec) + if self.running: + evtime += time.time() + event = self.Event(eventnum, evtime, func, *args, **kwds) + + if self.queue: + prevhead = self.queue[0] + else: + prevhead = None + + heapq.heappush(self.queue, event) + head = self.queue[0] + if prevhead is not None and prevhead != head: + if self.timer is not None and not self.timer.is_alive(): + self.timer.cancel() + self.timer = None + + if self.running and self.timer is None: + self.__schedule_event() + return event + +def example(): + loop = EventLoop() + + def msg(arg): + delta = time.time() - loop.start + print delta, 'arg:', arg + + def repeat(interval, count): + count -= 1 + msg('repeat: interval: %s; remaining: %s' % (interval, count)) + if count > 0: + loop.add_event(interval, repeat, interval, count) + + def sleep(delay): + msg('sleep %s' % delay) + time.sleep(delay) + msg('sleep done') + + def stop(arg): + msg(arg) + loop.stop() + + loop.add_event(0, msg, 'start') + loop.add_event(0, msg, 'time zero') + + for delay in 5, 4, 10, -1, 0, 9, 3, 7, 3.14: + loop.add_event(delay, msg, 'time %s' % delay) + + loop.run() + + loop.add_event(0, repeat, 1, 5) + loop.add_event(12, sleep, 10) + + loop.add_event(15.75, stop, 'stop time: 15.75') diff --git a/daemon/core/misc/ipaddr.py b/daemon/core/misc/ipaddr.py new file mode 100644 index 00000000..d6600f7d --- /dev/null +++ b/daemon/core/misc/ipaddr.py @@ -0,0 +1,230 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Tom Goff +# +''' +ipaddr.py: helper objects for dealing with IPv4/v6 addresses. +''' + +import socket +import struct +import random + +AF_INET = socket.AF_INET +AF_INET6 = socket.AF_INET6 + +class MacAddr(object): + def __init__(self, addr): + self.addr = addr + + def __str__(self): + return ":".join(map(lambda x: ("%02x" % ord(x)), self.addr)) + + def tolinklocal(self): + ''' Convert the MAC address to a IPv6 link-local address, using EUI 48 + to EUI 64 conversion process per RFC 5342. + ''' + if not self.addr: + return IPAddr.fromstring("::") + tmp = struct.unpack("!Q", '\x00\x00' + self.addr)[0] + nic = long(tmp) & 0x000000FFFFFFL + oui = long(tmp) & 0xFFFFFF000000L + # toggle U/L bit + oui ^= 0x020000000000L + # append EUI-48 octets + oui = (oui << 16) | 0xFFFE000000L + return IPAddr(AF_INET6, struct.pack("!QQ", 0xfe80 << 48, oui | nic)) + + @classmethod + def fromstring(cls, s): + addr = "".join(map(lambda x: chr(int(x, 16)), s.split(":"))) + return cls(addr) + + @classmethod + def random(cls): + tmp = random.randint(0, 0xFFFFFF) + tmp |= 0x00163E << 24 # use the Xen OID 00:16:3E + tmpbytes = struct.pack("!Q", tmp) + return cls(tmpbytes[2:]) + +class IPAddr(object): + def __init__(self, af, addr): + # check if (af, addr) is valid + if not socket.inet_ntop(af, addr): + raise ValueError, "invalid af/addr" + self.af = af + self.addr = addr + + def isIPv4(self): + return self.af == AF_INET + + def isIPv6(self): + return self.af == AF_INET6 + + def __str__(self): + return socket.inet_ntop(self.af, self.addr) + + def __eq__(self, other): + try: + return other.af == self.af and other.addr == self.addr + except: + return False + + def __add__(self, other): + try: + carry = int(other) + except: + return NotImplemented + tmp = map(lambda x: ord(x), self.addr) + for i in xrange(len(tmp) - 1, -1, -1): + x = tmp[i] + carry + tmp[i] = x & 0xff + carry = x >> 8 + if carry == 0: + break + addr = "".join(map(lambda x: chr(x), tmp)) + return self.__class__(self.af, addr) + + def __sub__(self, other): + try: + tmp = -int(other) + except: + return NotImplemented + return self.__add__(tmp) + + @classmethod + def fromstring(cls, s): + for af in AF_INET, AF_INET6: + try: + return cls(af, socket.inet_pton(af, s)) + except Exception, e: + pass + raise e + + @staticmethod + def toint(s): + ''' convert IPv4 string to 32-bit integer + ''' + bin = socket.inet_pton(AF_INET, s) + return(struct.unpack('!I', bin)[0]) + +class IPPrefix(object): + def __init__(self, af, prefixstr): + "prefixstr format: address/prefixlen" + tmp = prefixstr.split("/") + if len(tmp) > 2: + raise ValueError, "invalid prefix: '%s'" % prefixstr + self.af = af + if self.af == AF_INET: + self.addrlen = 32 + elif self.af == AF_INET6: + self.addrlen = 128 + else: + raise ValueError, "invalid address family: '%s'" % self.af + if len(tmp) == 2: + self.prefixlen = int(tmp[1]) + else: + self.prefixlen = self.addrlen + self.prefix = socket.inet_pton(self.af, tmp[0]) + if self.addrlen > self.prefixlen: + addrbits = self.addrlen - self.prefixlen + netmask = ((1L << self.prefixlen) - 1) << addrbits + prefix = "" + for i in xrange(-1, -(addrbits >> 3) - 2, -1): + prefix = chr(ord(self.prefix[i]) & (netmask & 0xff)) + prefix + netmask >>= 8 + self.prefix = self.prefix[:i] + prefix + + def __str__(self): + return "%s/%s" % (socket.inet_ntop(self.af, self.prefix), + self.prefixlen) + + def __eq__(self, other): + try: + return other.af == self.af and \ + other.prefixlen == self.prefixlen and \ + other.prefix == self.prefix + except: + return False + + def __add__(self, other): + try: + tmp = int(other) + except: + return NotImplemented + a = IPAddr(self.af, self.prefix) + \ + (tmp << (self.addrlen - self.prefixlen)) + prefixstr = "%s/%s" % (a, self.prefixlen) + if self.__class__ == IPPrefix: + return self.__class__(self.af, prefixstr) + else: + return self.__class__(prefixstr) + + def __sub__(self, other): + try: + tmp = -int(other) + except: + return NotImplemented + return self.__add__(tmp) + + def addr(self, hostid): + tmp = int(hostid) + if (tmp == 1 or tmp == 0 or tmp == -1) and self.addrlen == self.prefixlen: + return IPAddr(self.af, self.prefix) + if tmp == 0 or \ + tmp > (1 << (self.addrlen - self.prefixlen)) - 1 or \ + (self.af == AF_INET and tmp == (1 << (self.addrlen - self.prefixlen)) - 1): + raise ValueError, "invalid hostid for prefix %s: %s" % (self, hostid) + addr = "" + for i in xrange(-1, -(self.addrlen >> 3) - 1, -1): + addr = chr(ord(self.prefix[i]) | (tmp & 0xff)) + addr + tmp >>= 8 + if not tmp: + break + addr = self.prefix[:i] + addr + return IPAddr(self.af, addr) + + def minaddr(self): + return self.addr(1) + + def maxaddr(self): + if self.af == AF_INET: + return self.addr((1 << (self.addrlen - self.prefixlen)) - 2) + else: + return self.addr((1 << (self.addrlen - self.prefixlen)) - 1) + + def numaddr(self): + return max(0, (1 << (self.addrlen - self.prefixlen)) - 2) + + def prefixstr(self): + return "%s" % socket.inet_ntop(self.af, self.prefix) + + def netmaskstr(self): + addrbits = self.addrlen - self.prefixlen + netmask = ((1L << self.prefixlen) - 1) << addrbits + netmaskbytes = struct.pack("!L", netmask) + return IPAddr(af=AF_INET, addr=netmaskbytes).__str__() + +class IPv4Prefix(IPPrefix): + def __init__(self, prefixstr): + IPPrefix.__init__(self, AF_INET, prefixstr) + +class IPv6Prefix(IPPrefix): + def __init__(self, prefixstr): + IPPrefix.__init__(self, AF_INET6, prefixstr) + +def isIPAddress(af, addrstr): + try: + tmp = socket.inet_pton(af, addrstr) + return True + except: + return False + +def isIPv4Address(addrstr): + return isIPAddress(AF_INET, addrstr) + +def isIPv6Address(addrstr): + return isIPAddress(AF_INET6, addrstr) diff --git a/daemon/core/misc/quagga.py b/daemon/core/misc/quagga.py new file mode 100644 index 00000000..4e8511ba --- /dev/null +++ b/daemon/core/misc/quagga.py @@ -0,0 +1,116 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Tom Goff +# +''' +quagga.py: helper class for generating Quagga configuration. +''' + +import os.path +from string import Template + +def maketuple(obj): + if hasattr(obj, "__iter__"): + return tuple(obj) + else: + return (obj,) + +class NetIf(object): + def __init__(self, name, addrlist = []): + self.name = name + self.addrlist = addrlist + +class Conf(object): + def __init__(self, **kwds): + self.kwds = kwds + + def __str__(self): + tmp = self.template.substitute(**self.kwds) + if tmp[-1] == '\n': + tmp = tmp[:-1] + return tmp + +class QuaggaOSPF6Interface(Conf): + AF_IPV6_ID = 0 + AF_IPV4_ID = 65 + + template = Template("""\ +interface $interface + $addr + ipv6 ospf6 instance-id $instanceid + ipv6 ospf6 hello-interval 2 + ipv6 ospf6 dead-interval 11 + ipv6 ospf6 retransmit-interval 5 + ipv6 ospf6 network $network + ipv6 ospf6 diffhellos + ipv6 ospf6 adjacencyconnectivity uniconnected + ipv6 ospf6 lsafullness mincostlsa +""") + +# ip address $ipaddr/32 +# ipv6 ospf6 simhelloLLtoULRecv :$simhelloport +# !$ipaddr:$simhelloport + + def __init__(self, netif, instanceid = AF_IPV4_ID, + network = "manet-designated-router", **kwds): + self.netif = netif + def addrstr(x): + if x.find(".") >= 0: + return "ip address %s" % x + elif x.find(":") >= 0: + return "ipv6 address %s" % x + else: + raise Value, "invalid address: %s", x + addr = "\n ".join(map(addrstr, netif.addrlist)) + + self.instanceid = instanceid + self.network = network + Conf.__init__(self, interface = netif.name, addr = addr, + instanceid = instanceid, network = network, **kwds) + + def name(self): + return self.netif.name + +class QuaggaOSPF6(Conf): + + template = Template("""\ +$interfaces +! +router ospf6 + router-id $routerid + $ospfifs + $redistribute +""") + + def __init__(self, ospf6ifs, area, routerid, + redistribute = "! no redistribute"): + ospf6ifs = maketuple(ospf6ifs) + interfaces = "\n!\n".join(map(str, ospf6ifs)) + ospfifs = "\n ".join(map(lambda x: "interface %s area %s" % \ + (x.name(), area), ospf6ifs)) + Conf.__init__(self, interfaces = interfaces, routerid = routerid, + ospfifs = ospfifs, redistribute = redistribute) + + +class QuaggaConf(Conf): + template = Template("""\ +log file $logfile +$debugs +! +$routers +! +$forwarding +""") + + def __init__(self, routers, logfile, debugs = ()): + routers = "\n!\n".join(map(str, maketuple(routers))) + if debugs: + debugs = "\n".join(maketuple(debugs)) + else: + debugs = "! no debugs" + forwarding = "ip forwarding\nipv6 forwarding" + Conf.__init__(self, logfile = logfile, debugs = debugs, + routers = routers, forwarding = forwarding) diff --git a/daemon/core/misc/utils.py b/daemon/core/misc/utils.py new file mode 100644 index 00000000..634a0425 --- /dev/null +++ b/daemon/core/misc/utils.py @@ -0,0 +1,228 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: Tom Goff +# Jeff Ahrenholz +# +''' +utils.py: miscellaneous utility functions, wrappers around some subprocess +procedures. +''' + +import subprocess, os, ast + +def checkexec(execlist): + for bin in execlist: + # note that os.access() uses real uid/gid; that should be okay + # here + if not os.access(bin, os.X_OK): + raise EnvironmentError, "executable not found: %s" % bin + +def ensurepath(pathlist): + searchpath = os.environ["PATH"].split(":") + for p in set(pathlist): + if p not in searchpath: + os.environ["PATH"] += ":" + p + +def maketuple(obj): + if hasattr(obj, "__iter__"): + return tuple(obj) + else: + return (obj,) + +def maketuplefromstr(s, type): + s.replace('\\', '\\\\') + return ast.literal_eval(s) + #return tuple(type(i) for i in s[1:-1].split(',')) + #r = () + #for i in s.strip("()").split(','): + # r += (i.strip("' "), ) + # chop empty last element from "('a',)" strings + #if r[-1] == '': + # r = r[:-1] + #return r + +def call(*args, **kwds): + return subprocess.call(*args, **kwds) + +def mutecall(*args, **kwds): + kwds["stdout"] = open(os.devnull, "w") + kwds["stderr"] = subprocess.STDOUT + return call(*args, **kwds) + +def check_call(*args, **kwds): + return subprocess.check_call(*args, **kwds) + +def mutecheck_call(*args, **kwds): + kwds["stdout"] = open(os.devnull, "w") + kwds["stderr"] = subprocess.STDOUT + return subprocess.check_call(*args, **kwds) + +def spawn(*args, **kwds): + return subprocess.Popen(*args, **kwds).pid + +def mutespawn(*args, **kwds): + kwds["stdout"] = open(os.devnull, "w") + kwds["stderr"] = subprocess.STDOUT + return subprocess.Popen(*args, **kwds).pid + +def detachinit(): + if os.fork(): + os._exit(0) # parent exits + os.setsid() + +def detach(*args, **kwds): + kwds["preexec_fn"] = detachinit + return subprocess.Popen(*args, **kwds).pid + +def mutedetach(*args, **kwds): + kwds["preexec_fn"] = detachinit + kwds["stdout"] = open(os.devnull, "w") + kwds["stderr"] = subprocess.STDOUT + return subprocess.Popen(*args, **kwds).pid + +def hexdump(s, bytes_per_word = 2, words_per_line = 8): + dump = "" + count = 0 + bytes = bytes_per_word * words_per_line + while s: + line = s[:bytes] + s = s[bytes:] + tmp = map(lambda x: ("%02x" * bytes_per_word) % x, + zip(*[iter(map(ord, line))] * bytes_per_word)) + if len(line) % 2: + tmp.append("%x" % ord(line[-1])) + dump += "0x%08x: %s\n" % (count, " ".join(tmp)) + count += len(line) + return dump[:-1] + +def filemunge(pathname, header, text): + ''' Insert text at the end of a file, surrounded by header comments. + ''' + filedemunge(pathname, header) # prevent duplicates + f = open(pathname, 'a') + f.write("# BEGIN %s\n" % header) + f.write(text) + f.write("# END %s\n" % header) + f.close() + +def filedemunge(pathname, header): + ''' Remove text that was inserted in a file surrounded by header comments. + ''' + f = open(pathname, 'r') + lines = f.readlines() + f.close() + start = None + end = None + for i in range(len(lines)): + if lines[i] == "# BEGIN %s\n" % header: + start = i + elif lines[i] == "# END %s\n" % header: + end = i + 1 + if start is None or end is None: + return + f = open(pathname, 'w') + lines = lines[:start] + lines[end:] + f.write("".join(lines)) + f.close() + +def expandcorepath(pathname, session=None, node=None): + ''' Expand a file path given session information. + ''' + if session is not None: + pathname = pathname.replace('~', "/home/%s" % session.user) + pathname = pathname.replace('%SESSION%', str(session.sessionid)) + pathname = pathname.replace('%SESSION_DIR%', session.sessiondir) + pathname = pathname.replace('%SESSION_USER%', session.user) + if node is not None: + pathname = pathname.replace('%NODE%', str(node.objid)) + pathname = pathname.replace('%NODENAME%', node.name) + return pathname + +def sysctldevname(devname): + ''' Translate a device name to the name used with sysctl. + ''' + if devname is None: + return None + return devname.replace(".", "/") + +def daemonize(rootdir = "/", umask = 0, close_fds = False, dontclose = (), + stdin = os.devnull, stdout = os.devnull, stderr = os.devnull, + stdoutmode = 0644, stderrmode = 0644, pidfilename = None, + defaultmaxfd = 1024): + ''' Run the background process as a daemon. + ''' + if not hasattr(dontclose, "__contains__"): + if not isinstance(dontclose, int): + raise TypeError, "dontclose must be an integer" + dontclose = (int(dontclose),) + else: + for fd in dontclose: + if not isinstance(fd, int): + raise TypeError, "dontclose must contain only integers" + # redirect stdin + if stdin: + fd = os.open(stdin, os.O_RDONLY) + os.dup2(fd, 0) + os.close(fd) + # redirect stdout + if stdout: + fd = os.open(stdout, os.O_WRONLY | os.O_CREAT | os.O_APPEND, + stdoutmode) + os.dup2(fd, 1) + if (stdout == stderr): + os.dup2(1, 2) + os.close(fd) + # redirect stderr + if stderr and (stderr != stdout): + fd = os.open(stderr, os.O_WRONLY | os.O_CREAT | os.O_APPEND, + stderrmode) + os.dup2(fd, 2) + os.close(fd) + if os.fork(): + os._exit(0) # parent exits + os.setsid() + pid = os.fork() + if pid: + if pidfilename: + try: + f = open(pidfilename, "w") + f.write("%s\n" % pid) + f.close() + except: + pass + os._exit(0) # parent exits + if rootdir: + os.chdir(rootdir) + os.umask(umask) + if close_fds: + try: + maxfd = resource.getrlimit(resource.RLIMIT_NOFILE)[1] + if maxfd == resource.RLIM_INFINITY: + raise ValueError + except: + maxfd = defaultmaxfd + for fd in xrange(3, maxfd): + if fd in dontclose: + continue + try: + os.close(fd) + except: + pass + +def readfileintodict(filename, d): + ''' Read key=value pairs from a file, into a dict. + Skip comments; strip newline characters and spacing. + ''' + with open(filename, 'r') as f: + lines = f.readlines() + for l in lines: + if l[:1] == '#': + continue + try: + key, value = l.split('=', 1) + d[key] = value.strip() + except ValueError: + pass diff --git a/daemon/core/misc/utm.py b/daemon/core/misc/utm.py new file mode 100644 index 00000000..8e54f3ab --- /dev/null +++ b/daemon/core/misc/utm.py @@ -0,0 +1,259 @@ +""" +utm +=== + +.. image:: https://travis-ci.org/Turbo87/utm.png + +Bidirectional UTM-WGS84 converter for python + +Usage +----- + +:: + + import utm + +Convert a (latitude, longitude) tuple into an UTM coordinate:: + + utm.from_latlon(51.2, 7.5) + >>> (395201.3103811303, 5673135.241182375, 32, 'U') + +Convert an UTM coordinate into a (latitude, longitude) tuple:: + + utm.to_latlon(340000, 5710000, 32, 'U') + >>> (51.51852098408468, 6.693872395145327) + +Speed +----- + +The library has been compared to the more generic pyproj library by running the +unit test suite through pyproj instead of utm. These are the results: + +* with pyproj (without projection cache): 4.0 - 4.5 sec +* with pyproj (with projection cache): 0.9 - 1.0 sec +* with utm: 0.4 - 0.5 sec + +Authors +------- + +* Tobias Bieniek + +License +------- + +Copyright (C) 2012 Tobias Bieniek + +Permission is hereby granted, free of charge, to any person obtaining a copy of +this software and associated documentation files (the "Software"), to deal in +the Software without restriction, including without limitation the rights to +use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies +of the Software, and to permit persons to whom the Software is furnished to do +so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. +""" + +import math + +__all__ = ['to_latlon', 'from_latlon'] + +class OutOfRangeError(ValueError): + pass + + +K0 = 0.9996 + +E = 0.00669438 +E2 = E * E +E3 = E2 * E +E_P2 = E / (1.0 - E) + +SQRT_E = math.sqrt(1 - E) +_E = (1 - SQRT_E) / (1 + SQRT_E) +_E3 = _E * _E * _E +_E4 = _E3 * _E + +M1 = (1 - E / 4 - 3 * E2 / 64 - 5 * E3 / 256) +M2 = (3 * E / 8 + 3 * E2 / 32 + 45 * E3 / 1024) +M3 = (15 * E2 / 256 + 45 * E3 / 1024) +M4 = (35 * E3 / 3072) + +P2 = (3 * _E / 2 - 27 * _E3 / 32) +P3 = (21 * _E3 / 16 - 55 * _E4 / 32) +P4 = (151 * _E3 / 96) + +R = 6378137 + +ZONE_LETTERS = [ + (84, None), (72, 'X'), (64, 'W'), (56, 'V'), (48, 'U'), (40, 'T'), + (32, 'S'), (24, 'R'), (16, 'Q'), (8, 'P'), (0, 'N'), (-8, 'M'), (-16, 'L'), + (-24, 'K'), (-32, 'J'), (-40, 'H'), (-48, 'G'), (-56, 'F'), (-64, 'E'), + (-72, 'D'), (-80, 'C') +] + + +def to_latlon(easting, northing, zone_number, zone_letter): + zone_letter = zone_letter.upper() + + if not 100000 <= easting < 1000000: + raise OutOfRangeError('easting out of range (must be between 100.000 m and 999.999 m)') + if not 0 <= northing <= 10000000: + raise OutOfRangeError('northing out of range (must be between 0 m and 10.000.000 m)') + if not 1 <= zone_number <= 60: + raise OutOfRangeError('zone number out of range (must be between 1 and 60)') + if not 'C' <= zone_letter <= 'X' or zone_letter in ['I', 'O']: + raise OutOfRangeError('zone letter out of range (must be between C and X)') + + x = easting - 500000 + y = northing + + if zone_letter < 'N': + y -= 10000000 + + m = y / K0 + mu = m / (R * M1) + + p_rad = (mu + P2 * math.sin(2 * mu) + P3 * math.sin(4 * mu) + P4 * math.sin(6 * mu)) + + p_sin = math.sin(p_rad) + p_sin2 = p_sin * p_sin + + p_cos = math.cos(p_rad) + + p_tan = p_sin / p_cos + p_tan2 = p_tan * p_tan + p_tan4 = p_tan2 * p_tan2 + + ep_sin = 1 - E * p_sin2 + ep_sin_sqrt = math.sqrt(1 - E * p_sin2) + + n = R / ep_sin_sqrt + r = (1 - E) / ep_sin + + c = _E * p_cos**2 + c2 = c * c + + d = x / (n * K0) + d2 = d * d + d3 = d2 * d + d4 = d3 * d + d5 = d4 * d + d6 = d5 * d + + latitude = (p_rad - (p_tan / r) * + (d2 / 2 - + d4 / 24 * (5 + 3 * p_tan2 + 10 * c - 4 * c2 - 9 * E_P2)) + + d6 / 720 * (61 + 90 * p_tan2 + 298 * c + 45 * p_tan4 - 252 * E_P2 - 3 * c2)) + + longitude = (d - + d3 / 6 * (1 + 2 * p_tan2 + c) + + d5 / 120 * (5 - 2 * c + 28 * p_tan2 - 3 * c2 + 8 * E_P2 + 24 * p_tan4)) / p_cos + + return (math.degrees(latitude), + math.degrees(longitude) + zone_number_to_central_longitude(zone_number)) + + +def from_latlon(latitude, longitude): + if not -80.0 <= latitude <= 84.0: + raise OutOfRangeError('latitude out of range (must be between 80 deg S and 84 deg N)') + if not -180.0 <= longitude <= 180.0: + raise OutOfRangeError('northing out of range (must be between 180 deg W and 180 deg E)') + + lat_rad = math.radians(latitude) + lat_sin = math.sin(lat_rad) + lat_cos = math.cos(lat_rad) + + lat_tan = lat_sin / lat_cos + lat_tan2 = lat_tan * lat_tan + lat_tan4 = lat_tan2 * lat_tan2 + + lon_rad = math.radians(longitude) + + zone_number = latlon_to_zone_number(latitude, longitude) + central_lon = zone_number_to_central_longitude(zone_number) + central_lon_rad = math.radians(central_lon) + + zone_letter = latitude_to_zone_letter(latitude) + + n = R / math.sqrt(1 - E * lat_sin**2) + c = E_P2 * lat_cos**2 + + a = lat_cos * (lon_rad - central_lon_rad) + a2 = a * a + a3 = a2 * a + a4 = a3 * a + a5 = a4 * a + a6 = a5 * a + + m = R * (M1 * lat_rad - + M2 * math.sin(2 * lat_rad) + + M3 * math.sin(4 * lat_rad) - + M4 * math.sin(6 * lat_rad)) + + easting = K0 * n * (a + + a3 / 6 * (1 - lat_tan2 + c) + + a5 / 120 * (5 - 18 * lat_tan2 + lat_tan4 + 72 * c - 58 * E_P2)) + 500000 + + northing = K0 * (m + n * lat_tan * (a2 / 2 + + a4 / 24 * (5 - lat_tan2 + 9 * c + 4 * c**2) + + a6 / 720 * (61 - 58 * lat_tan2 + lat_tan4 + 600 * c - 330 * E_P2))) + + if latitude < 0: + northing += 10000000 + + return easting, northing, zone_number, zone_letter + + +def latitude_to_zone_letter(latitude): + for lat_min, zone_letter in ZONE_LETTERS: + if latitude >= lat_min: + return zone_letter + + return None + + +def latlon_to_zone_number(latitude, longitude): + if 56 <= latitude <= 64 and 3 <= longitude <= 12: + return 32 + + if 72 <= latitude <= 84 and longitude >= 0: + if longitude <= 9: + return 31 + elif longitude <= 21: + return 33 + elif longitude <= 33: + return 35 + elif longitude <= 42: + return 37 + + return int((longitude + 180) / 6) + 1 + + +def zone_number_to_central_longitude(zone_number): + return (zone_number - 1) * 6 - 180 + 3 + + +def haversine(lon1, lat1, lon2, lat2): + """ + Calculate the great circle distance between two points + on the earth (specified in decimal degrees) + """ + # convert decimal degrees to radians + lon1, lat1, lon2, lat2 = map(math.radians, [lon1, lat1, lon2, lat2]) + # haversine formula + dlon = lon2 - lon1 + dlat = lat2 - lat1 + a = math.sin(dlat/2)**2 + math.cos(lat1) * math.cos(lat2) * math.sin(dlon/2)**2 + c = 2 * math.asin(math.sqrt(a)) + m = 6367000 * c + return m + diff --git a/daemon/core/misc/xmlutils.py b/daemon/core/misc/xmlutils.py new file mode 100644 index 00000000..69d7d1c8 --- /dev/null +++ b/daemon/core/misc/xmlutils.py @@ -0,0 +1,776 @@ +# +# CORE +# Copyright (c)2011-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +Helpers for loading and saving XML files. savesessionxml(session, filename) is +the main public interface here. +''' +import os, pwd +from xml.dom.minidom import parse, Document, Node +from core import pycore +from core.api import coreapi + +def addelementsfromlist(dom, parent, iterable, name, attr_name): + ''' XML helper to iterate through a list and add items to parent using tags + of the given name and the item value as an attribute named attr_name. + Example: addelementsfromlist(dom, parent, ('a','b','c'), "letter", "value") + + + + + + ''' + for item in iterable: + element = dom.createElement(name) + element.setAttribute(attr_name, item) + parent.appendChild(element) + +def addtextelementsfromlist(dom, parent, iterable, name, attrs): + ''' XML helper to iterate through a list and add items to parent using tags + of the given name, attributes specified in the attrs tuple, and having the + text of the item within the tags. + ''' + for item in iterable: + element = dom.createElement(name) + for k,v in attrs: + element.setAttribute(k, v) + parent.appendChild(element) + txt = dom.createTextNode(item) + element.appendChild(txt) + +def gettextelementstolist(parent): + ''' XML helper to parse child text nodes from the given parent and return + a list of (key, value) tuples. + ''' + r = [] + for n in parent.childNodes: + if n.nodeType != Node.ELEMENT_NODE: + continue + k = str(n.nodeName) + v = '' # sometimes want None here? + for c in n.childNodes: + if c.nodeType != Node.TEXT_NODE: + continue + v = str(c.nodeValue) + break + r.append((k,v)) + return r + +def addparamtoparent(dom, parent, name, value): + ''' XML helper to add a tag to the parent + element, when value is not None. + ''' + if value is None: + return None + p = dom.createElement("param") + parent.appendChild(p) + p.setAttribute("name", name) + p.setAttribute("value", "%s" % value) + return p + +def addtextparamtoparent(dom, parent, name, value): + ''' XML helper to add a value tag to the parent + element, when value is not None. + ''' + if value is None: + return None + p = dom.createElement("param") + parent.appendChild(p) + p.setAttribute("name", name) + txt = dom.createTextNode(value) + p.appendChild(txt) + return p + +def getoneelement(dom, name): + e = dom.getElementsByTagName(name) + if len(e) == 0: + return None + return e[0] + +def gettextchild(dom): + # this could be improved to skip XML comments + child = dom.firstChild + if child is not None and child.nodeType == Node.TEXT_NODE: + return str(child.nodeValue) + return None + +def getparamssetattrs(dom, param_names, target): + ''' XML helper to get tags and set + the attribute in the target object. String type is used. Target object + attribute is unchanged if the XML attribute is not present. + ''' + params = dom.getElementsByTagName("param") + for param in params: + param_name = param.getAttribute("name") + value = param.getAttribute("value") + if value is None: + continue # never reached? + if param_name in param_names: + setattr(target, param_name, str(value)) + +def xmltypetonodeclass(session, type): + ''' Helper to convert from a type string to a class name in pycore.nodes.*. + ''' + if hasattr(pycore.nodes, type): + return eval("pycore.nodes.%s" % type) + else: + return None + +class CoreDocumentParser(object): + def __init__(self, session, filename): + self.session = session + self.verbose = self.session.getcfgitembool('verbose', False) + self.filename = filename + self.dom = parse(filename) + + #self.scenario = getoneelement(self.dom, "Scenario") + self.np = getoneelement(self.dom, "NetworkPlan") + if self.np is None: + raise ValueError, "missing NetworkPlan!" + self.mp = getoneelement(self.dom, "MotionPlan") + self.sp = getoneelement(self.dom, "ServicePlan") + self.meta = getoneelement(self.dom, "CoreMetaData") + + self.coords = self.getmotiondict(self.mp) + # link parameters parsed in parsenets(), applied in parsenodes() + self.linkparams = {} + + self.parsenets() + self.parsenodes() + self.parseservices() + self.parsemeta() + + + def warn(self, msg): + if self.session: + warnstr = "XML parsing '%s':" % (self.filename) + self.session.warn("%s %s" % (warnstr, msg)) + + def getmotiondict(self, mp): + ''' Parse a MotionPlan into a dict with node names for keys and coordinates + for values. + ''' + if mp is None: + return {} + coords = {} + for node in mp.getElementsByTagName("Node"): + nodename = str(node.getAttribute("name")) + if nodename == '': + continue + for m in node.getElementsByTagName("motion"): + if m.getAttribute("type") != "stationary": + continue + point = m.getElementsByTagName("point") + if len(point) == 0: + continue + txt = point[0].firstChild + if txt is None: + continue + xyz = map(int, txt.nodeValue.split(',')) + z = None + x, y = xyz[0:2] + if (len(xyz) == 3): + z = xyz[2] + coords[nodename] = (x, y, z) + return coords + + @staticmethod + def getcommonattributes(obj): + ''' Helper to return tuple of attributes common to nodes and nets. + ''' + id = int(obj.getAttribute("id")) + name = str(obj.getAttribute("name")) + type = str(obj.getAttribute("type")) + return(id, name, type) + + def parsenets(self): + linkednets = [] + for net in self.np.getElementsByTagName("NetworkDefinition"): + id, name, type = self.getcommonattributes(net) + nodecls = xmltypetonodeclass(self.session, type) + if not nodecls: + self.warn("skipping unknown network node '%s' type '%s'" % \ + (name, type)) + continue + n = self.session.addobj(cls = nodecls, objid = id, name = name, + start = False) + if name in self.coords: + x, y, z = self.coords[name] + n.setposition(x, y, z) + getparamssetattrs(net, ("icon", "canvas", "opaque"), n) + if hasattr(n, "canvas") and n.canvas is not None: + n.canvas = int(n.canvas) + # links between two nets (e.g. switch-switch) + for ifc in net.getElementsByTagName("interface"): + netid = str(ifc.getAttribute("net")) + linkednets.append((n, netid)) + self.parsemodels(net, n) + # link networks together now that they all have been parsed + for (n, netid) in linkednets: + try: + n2 = n.session.objbyname(netid) + except KeyError: + n.warn("skipping net %s interface: unknown net %s" % \ + (n.name, netid)) + continue + n.linknet(n2) + + def parsenodes(self): + for node in self.np.getElementsByTagName("Node"): + id, name, type = self.getcommonattributes(node) + if type == "rj45": + nodecls = pycore.nodes.RJ45Node + else: + nodecls = pycore.nodes.CoreNode + n = self.session.addobj(cls = nodecls, objid = id, name = name, + start = False) + if name in self.coords: + x, y, z = self.coords[name] + n.setposition(x, y, z) + n.type = type + getparamssetattrs(node, ("icon", "canvas", "opaque"), n) + if hasattr(n, "canvas") and n.canvas is not None: + n.canvas = int(n.canvas) + for ifc in node.getElementsByTagName("interface"): + self.parseinterface(n, ifc) + + def parseinterface(self, n, ifc): + ''' Parse a interface block such as: + +
00:00:00:aa:00:01
+
10.0.0.2/24
+
2001::2/64
+ + ''' + name = str(ifc.getAttribute("name")) + netid = str(ifc.getAttribute("net")) + hwaddr = None + addrlist = [] + try: + net = n.session.objbyname(netid) + except KeyError: + n.warn("skipping node %s interface %s: unknown net %s" % \ + (n.name, name, netid)) + return + for addr in ifc.getElementsByTagName("address"): + addrstr = gettextchild(addr) + if addrstr is None: + continue + if addr.getAttribute("type") == "mac": + hwaddr = addrstr + else: + addrlist.append(addrstr) + i = n.newnetif(net, addrlist = addrlist, hwaddr = hwaddr, + ifindex = None, ifname = name) + for model in ifc.getElementsByTagName("model"): + self.parsemodel(model, n, n.objid) + key = (n.name, name) + if key in self.linkparams: + netif = n.netif(i) + for (k, v) in self.linkparams[key]: + netif.setparam(k, v) + + def parsemodels(self, dom, obj): + ''' Mobility/wireless model config is stored in a ConfigurableManager's + config dict. + ''' + nodenum = int(dom.getAttribute("id")) + for model in dom.getElementsByTagName("model"): + self.parsemodel(model, obj, nodenum) + + def parsemodel(self, model, obj, nodenum): + ''' Mobility/wireless model config is stored in a ConfigurableManager's + config dict. + ''' + name = model.getAttribute("name") + if name == '': + return + type = model.getAttribute("type") + # convert child text nodes into key=value pairs + kvs = gettextelementstolist(model) + + mgr = self.session.mobility + # TODO: the session.confobj() mechanism could be more generic; + # it only allows registering Conf Message callbacks, but here + # we want access to the ConfigurableManager, not the callback + if name[:5] == "emane": + mgr = self.session.emane + elif name[:5] == "netem": + mgr = None + self.parsenetem(model, obj, kvs) + + elif name[:3] == "xen": + mgr = self.session.xen + # TODO: assign other config managers here + if mgr: + mgr.setconfig_keyvalues(nodenum, name, kvs) + + def parsenetem(self, model, obj, kvs): + ''' Determine interface and invoke setparam() using the parsed + (key, value) pairs. + ''' + ifname = model.getAttribute("netif") + peer = model.getAttribute("peer") + key = (peer, ifname) + # nodes and interfaces do not exist yet, at this point of the parsing, + # save (key, value) pairs for later + try: + #kvs = map(lambda(k, v): (int(v)), kvs) + kvs = map(self.numericvalue, kvs) + except ValueError: + self.warn("error parsing link parameters for '%s' on '%s'" % \ + (ifname, peer)) + self.linkparams[key] = kvs + + @staticmethod + def numericvalue(keyvalue): + (key, value) = keyvalue + if '.' in str(value): + value = float(value) + else: + value = int(value) + return (key, value) + + def parseservices(self): + ''' After node objects exist, parse service customizations and add them + to the nodes. + ''' + svclists = {} + # parse services and store configs into session.services.configs + for node in self.sp.getElementsByTagName("Node"): + name = node.getAttribute("name") + n = self.session.objbyname(name) + if n is None: + self.warn("skipping service config for unknown node '%s'" % \ + name) + continue + for service in node.getElementsByTagName("Service"): + svcname = service.getAttribute("name") + if self.parseservice(service, n): + if n.objid in svclists: + svclists[n.objid] += "|" + svcname + else: + svclists[n.objid] = svcname + # associate nodes with services + for objid in sorted(svclists.keys()): + n = self.session.obj(objid) + self.session.services.addservicestonode(node=n, nodetype=n.type, + services_str=svclists[objid], + verbose=self.verbose) + + def parseservice(self, service, n): + ''' Use session.services manager to store service customizations before + they are added to a node. + ''' + name = service.getAttribute("name") + svc = self.session.services.getservicebyname(name) + if svc is None: + return False + values = [] + startup_idx = service.getAttribute("startup_idx") + if startup_idx is not None: + values.append("startidx=%s" % startup_idx) + startup_time = service.getAttribute("start_time") + if startup_time is not None: + values.append("starttime=%s" % startup_time) + dirs = [] + for dir in service.getElementsByTagName("Directory"): + dirname = dir.getAttribute("name") + dirs.append(dirname) + if len(dirs): + values.append("dirs=%s" % dirs) + + startup = [] + shutdown = [] + validate = [] + for cmd in service.getElementsByTagName("Command"): + type = cmd.getAttribute("type") + cmdstr = gettextchild(cmd) + if cmdstr is None: + continue + if type == "start": + startup.append(cmdstr) + elif type == "stop": + shutdown.append(cmdstr) + elif type == "validate": + validate.append(cmdstr) + if len(startup): + values.append("cmdup=%s" % startup) + if len(shutdown): + values.append("cmddown=%s" % shutdown) + if len(validate): + values.append("cmdval=%s" % validate) + + files = [] + for file in service.getElementsByTagName("File"): + filename = file.getAttribute("name") + files.append(filename) + data = gettextchild(file) + typestr = "service:%s:%s" % (name, filename) + self.session.services.setservicefile(nodenum=n.objid, type=typestr, + filename=filename, + srcname=None, data=data) + if len(files): + values.append("files=%s" % files) + if not bool(service.getAttribute("custom")): + return True + self.session.services.setcustomservice(n.objid, svc, values) + return True + + def parsehooks(self, hooks): + ''' Parse hook scripts from XML into session._hooks. + ''' + for hook in hooks.getElementsByTagName("Hook"): + filename = hook.getAttribute("name") + state = hook.getAttribute("state") + data = gettextchild(hook) + if data is None: + data = "" # allow for empty file + type = "hook:%s" % state + self.session.sethook(type, filename=filename, + srcname=None, data=data) + + def parsemeta(self): + opt = getoneelement(self.meta, "SessionOptions") + if opt: + for param in opt.getElementsByTagName("param"): + k = str(param.getAttribute("name")) + v = str(param.getAttribute("value")) + if v == '': + v = gettextchild(param) # allow attribute/text for newlines + setattr(self.session.options, k, v) + hooks = getoneelement(self.meta, "Hooks") + if hooks: + self.parsehooks(hooks) + meta = getoneelement(self.meta, "MetaData") + if meta: + for param in meta.getElementsByTagName("param"): + k = str(param.getAttribute("name")) + v = str(param.getAttribute("value")) + if v == '': + v = gettextchild(param) + self.session.metadata.additem(k, v) + + +class CoreDocumentWriter(Document): + ''' Utility class for writing a CoreSession to XML. The init method builds + an xml.dom.minidom.Document, and the writexml() method saves the XML file. + ''' + def __init__(self, session): + ''' Create an empty Scenario XML Document, then populate it with + objects from the given session. + ''' + Document.__init__(self) + self.session = session + self.scenario = self.createElement("Scenario") + self.np = self.createElement("NetworkPlan") + self.mp = self.createElement("MotionPlan") + self.sp = self.createElement("ServicePlan") + self.meta = self.createElement("CoreMetaData") + + self.appendChild(self.scenario) + self.scenario.appendChild(self.np) + self.scenario.appendChild(self.mp) + self.scenario.appendChild(self.sp) + self.scenario.appendChild(self.meta) + + self.populatefromsession() + + def populatefromsession(self): + self.session.emane.setup() # not during runtime? + self.addnets() + self.addnodes() + self.addmetadata() + + def writexml(self, filename): + self.session.info("saving session XML file %s" % filename) + f = open(filename, "w") + Document.writexml(self, writer=f, indent="", addindent=" ", newl="\n", \ + encoding="UTF-8") + f.close() + if self.session.user is not None: + uid = pwd.getpwnam(self.session.user).pw_uid + gid = os.stat(self.session.sessiondir).st_gid + os.chown(filename, uid, gid) + + def addnets(self): + ''' Add PyCoreNet objects as NetworkDefinition XML elements. + ''' + with self.session._objslock: + for net in self.session.objs(): + if not isinstance(net, pycore.nodes.PyCoreNet): + continue + self.addnet(net) + + def addnet(self, net): + ''' Add one PyCoreNet object as a NetworkDefinition XML element. + ''' + n = self.createElement("NetworkDefinition") + self.np.appendChild(n) + n.setAttribute("name", net.name) + # could use net.brname + n.setAttribute("id", "%s" % net.objid) + n.setAttribute("type", "%s" % net.__class__.__name__) + self.addnetinterfaces(n, net) + # key used with tunnel node + if hasattr(net, 'grekey') and net.grekey is not None: + n.setAttribute("key", "%s" % net.grekey) + # link parameters + for netif in net.netifs(sort=True): + self.addnetem(n, netif) + # wireless/mobility models + modelconfigs = net.session.mobility.getmodels(net) + modelconfigs += net.session.emane.getmodels(net) + self.addmodels(n, modelconfigs) + self.addposition(net) + + def addnetem(self, n, netif): + ''' Similar to addmodels(); used for writing netem link effects + parameters. TODO: Interface parameters should be moved to the model + construct, then this separate method shouldn't be required. + ''' + if not hasattr(netif, "node") or netif.node is None: + return + params = netif.getparams() + if len(params) == 0: + return + model = self.createElement("model") + model.setAttribute("name", "netem") + model.setAttribute("netif", netif.name) + model.setAttribute("peer", netif.node.name) + has_params = False + for k, v in params: + # default netem parameters are 0 or None + if v is None or v == 0: + continue + if k == "has_netem" or k == "has_tbf": + continue + key = self.createElement(k) + key.appendChild(self.createTextNode("%s" % v)) + model.appendChild(key) + has_params = True + if has_params: + n.appendChild(model) + + def addmodels(self, n, configs): + ''' Add models from a list of model-class, config values tuples. + ''' + for (m, conf) in configs: + model = self.createElement("model") + n.appendChild(model) + model.setAttribute("name", m._name) + type = "wireless" + if m._type == coreapi.CORE_TLV_REG_MOBILITY: + type = "mobility" + model.setAttribute("type", type) + for i, k in enumerate(m.getnames()): + key = self.createElement(k) + value = conf[i] + if value is None: + value = "" + key.appendChild(self.createTextNode("%s" % value)) + model.appendChild(key) + + def addnodes(self): + ''' Add PyCoreNode objects as node XML elements. + ''' + with self.session._objslock: + for node in self.session.objs(): + if not isinstance(node, pycore.nodes.PyCoreNode): + continue + self.addnode(node) + + def addnode(self, node): + ''' Add a PyCoreNode object as node XML elements. + ''' + n = self.createElement("Node") + self.np.appendChild(n) + n.setAttribute("name", node.name) + n.setAttribute("id", "%s" % node.nodeid()) + if node.type: + n.setAttribute("type", node.type) + self.addinterfaces(n, node) + self.addposition(node) + addparamtoparent(self, n, "icon", node.icon) + addparamtoparent(self, n, "canvas", node.canvas) + self.addservices(node) + + def addinterfaces(self, n, node): + ''' Add PyCoreNetIfs to node XML elements. + ''' + for ifc in node.netifs(sort=True): + i = self.createElement("interface") + n.appendChild(i) + i.setAttribute("name", ifc.name) + netmodel = None + if ifc.net: + i.setAttribute("net", ifc.net.name) + if hasattr(ifc.net, "model"): + netmodel = ifc.net.model + if ifc.mtu and ifc.mtu != 1500: + i.setAttribute("mtu", "%s" % ifc.mtu) + # could use ifc.params, transport_type + self.addaddresses(i, ifc) + # per-interface models + if netmodel and netmodel._name[:6] == "emane_": + cfg = self.session.emane.getifcconfig(node.objid, netmodel._name, + None, ifc) + if cfg: + self.addmodels(i, ((netmodel, cfg),) ) + + + def addnetinterfaces(self, n, net): + ''' Similar to addinterfaces(), but only adds interface elements to the + supplied XML node that would not otherwise appear in the Node elements. + These are any interfaces that link two switches/hubs together. + ''' + for ifc in net.netifs(sort=True): + if not hasattr(ifc, "othernet") or not ifc.othernet: + continue + if net.objid == ifc.net.objid: + continue + i = self.createElement("interface") + n.appendChild(i) + i.setAttribute("name", ifc.name) + if ifc.net: + i.setAttribute("net", ifc.net.name) + + def addposition(self, node): + ''' Add object coordinates as location XML element. + ''' + (x,y,z) = node.position.get() + if x is None or y is None: + return + # + mpn = self.createElement("Node") + mpn.setAttribute("name", node.name) + self.mp.appendChild(mpn) + + # + motion = self.createElement("motion") + motion.setAttribute("type", "stationary") + mpn.appendChild(motion) + + # $X$,$Y$,$Z$ + pt = self.createElement("point") + motion.appendChild(pt) + coordstxt = "%s,%s" % (x,y) + if z: + coordstxt += ",%s" % z + coords = self.createTextNode(coordstxt) + pt.appendChild(coords) + + def addservices(self, node): + ''' Add services and their customizations to the ServicePlan. + ''' + if len(node.services) == 0: + return + defaults = self.session.services.getdefaultservices(node.type) + if node.services == defaults: + return + spn = self.createElement("Node") + spn.setAttribute("name", node.name) + self.sp.appendChild(spn) + + for svc in node.services: + s = self.createElement("Service") + spn.appendChild(s) + s.setAttribute("name", str(svc._name)) + s.setAttribute("startup_idx", str(svc._startindex)) + if svc._starttime != "": + s.setAttribute("start_time", str(svc._starttime)) + # only record service names if not a customized service + if not svc._custom: + continue + s.setAttribute("custom", str(svc._custom)) + addelementsfromlist(self, s, svc._dirs, "Directory", "name") + + for fn in svc._configs: + if len(fn) == 0: + continue + f = self.createElement("File") + f.setAttribute("name", fn) + # all file names are added to determine when a file has been deleted + s.appendChild(f) + data = self.session.services.getservicefiledata(svc, fn) + if data is None: + # this includes only customized file contents and skips + # the auto-generated files + continue + txt = self.createTextNode(data) + f.appendChild(txt) + + addtextelementsfromlist(self, s, svc._startup, "Command", + (("type","start"),)) + addtextelementsfromlist(self, s, svc._shutdown, "Command", + (("type","stop"),)) + addtextelementsfromlist(self, s, svc._validate, "Command", + (("type","validate"),)) + + def addaddresses(self, i, netif): + ''' Add MAC and IP addresses to interface XML elements. + ''' + if netif.hwaddr: + h = self.createElement("address") + i.appendChild(h) + h.setAttribute("type", "mac") + htxt = self.createTextNode("%s" % netif.hwaddr) + h.appendChild(htxt) + for addr in netif.addrlist: + a = self.createElement("address") + i.appendChild(a) + # a.setAttribute("type", ) + atxt = self.createTextNode("%s" % addr) + a.appendChild(atxt) + + def addhooks(self): + ''' Add hook script XML elements to the metadata tag. + ''' + hooks = self.createElement("Hooks") + for state in sorted(self.session._hooks.keys()): + for (filename, data) in self.session._hooks[state]: + hook = self.createElement("Hook") + hook.setAttribute("name", filename) + hook.setAttribute("state", str(state)) + txt = self.createTextNode(data) + hook.appendChild(txt) + hooks.appendChild(hook) + if hooks.hasChildNodes(): + self.meta.appendChild(hooks) + + def addmetadata(self): + ''' Add CORE-specific session meta-data XML elements. + ''' + # options + options = self.createElement("SessionOptions") + defaults = self.session.options.getdefaultvalues() + for i, (k, v) in enumerate(self.session.options.getkeyvaluelist()): + if str(v) != str(defaults[i]): + addtextparamtoparent(self, options, k, v) + #addparamtoparent(self, options, k, v) + if options.hasChildNodes(): + self.meta.appendChild(options) + # hook scripts + self.addhooks() + # meta + meta = self.createElement("MetaData") + self.meta.appendChild(meta) + for (k, v) in self.session.metadata.items(): + addtextparamtoparent(self, meta, k, v) + #addparamtoparent(self, meta, k, v) + +def opensessionxml(session, filename): + ''' Import a session from the EmulationScript XML format. + ''' + doc = CoreDocumentParser(session, filename) + +def savesessionxml(session, filename): + ''' Export a session to the EmulationScript XML format. + ''' + doc = CoreDocumentWriter(session) + doc.writexml(filename) + diff --git a/daemon/core/mobility.py b/daemon/core/mobility.py new file mode 100644 index 00000000..708e53cd --- /dev/null +++ b/daemon/core/mobility.py @@ -0,0 +1,929 @@ +# +# CORE +# Copyright (c)2011-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +mobility.py: mobility helpers for moving nodes and calculating wireless range. +''' +import sys, os, time, string, math, threading +import heapq +from core.api import coreapi +from core.conf import ConfigurableManager, Configurable +from core.coreobj import PyCoreNode +from core.misc.utils import check_call +from core.misc.ipaddr import IPAddr + +class MobilityManager(ConfigurableManager): + ''' Member of session class for handling configuration data for mobility and + range models. + ''' + _name = "MobilityManager" + _type = coreapi.CORE_TLV_REG_WIRELESS + + def __init__(self, session): + ConfigurableManager.__init__(self, session) + self.verbose = self.session.getcfgitembool('verbose', False) + # configurations for basic range, indexed by WLAN node number, are + # stored in self.configs + # mapping from model names to their classes + self._modelclsmap = {} + # dummy node objects for tracking position of nodes on other servers + self.phys = {} + self.physnets = {} + self.session.broker.handlers += (self.physnodehandlelink, ) + self.register() + + def startup(self): + ''' Session is transitioning from instantiation to runtime state. + Instantiate any mobility models that have been configured for a WLAN. + ''' + for nodenum in self.configs: + v = self.configs[nodenum] + try: + n = self.session.obj(nodenum) + except KeyError: + self.session.warn("Skipping mobility configuration for unknown" + "node %d." % nodenum) + continue + for model in v: + try: + cls = self._modelclsmap[model[0]] + except KeyError: + self.session.warn("Skipping mobility configuration for " + "unknown model '%s'" % model[0]) + continue + n.setmodel(cls, model[1]) + if self.session.master: + self.installphysnodes(n) + if n.mobility: + self.session.evq.add_event(0.0, n.mobility.startup) + + + def reset(self): + ''' Reset all configs. + ''' + self.clearconfig(nodenum=None) + + def register(self): + ''' Register models as configurable object(s) with the Session object. + ''' + models = [BasicRangeModel, Ns2ScriptedMobility] + for m in models: + self.session.addconfobj(m._name, m._type, m.configure_mob) + self._modelclsmap[m._name] = m + + def handleevent(self, msg): + ''' Handle an Event Message used to start, stop, or pause + mobility scripts for a given WlanNode. + ''' + eventtype = msg.gettlv(coreapi.CORE_TLV_EVENT_TYPE) + nodenum = msg.gettlv(coreapi.CORE_TLV_EVENT_NODE) + name = msg.gettlv(coreapi.CORE_TLV_EVENT_NAME) + try: + node = self.session.obj(nodenum) + except KeyError: + self.session.warn("Ignoring event for model '%s', unknown node " \ + "'%s'" % (name, nodenum)) + return + + # name is e.g. "mobility:ns2script" + models = name[9:].split(',') + for m in models: + try: + cls = self._modelclsmap[m] + except KeyError: + self.session.warn("Ignoring event for unknown model '%s'" % m) + continue + _name = "waypoint" + if cls._type == coreapi.CORE_TLV_REG_WIRELESS: + model = node.mobility + elif cls._type == coreapi.CORE_TLV_REG_MOBILITY: + model = node.mobility + else: + continue + if model is None: + self.session.warn("Ignoring event, %s has no model" % node.name) + continue + if cls._name != model._name: + self.session.warn("Ignoring event for %s wrong model %s,%s" % \ + (node.name, cls._name, model._name)) + continue + + if eventtype == coreapi.CORE_EVENT_STOP or \ + eventtype == coreapi.CORE_EVENT_RESTART: + model.stop(move_initial=True) + if eventtype == coreapi.CORE_EVENT_START or \ + eventtype == coreapi.CORE_EVENT_RESTART: + model.start() + if eventtype == coreapi.CORE_EVENT_PAUSE: + model.pause() + + def sendevent(self, model): + ''' Send an event message on behalf of a mobility model. + This communicates the current and end (max) times to the GUI. + ''' + if model.state == model.STATE_STOPPED: + eventtype = coreapi.CORE_EVENT_STOP + elif model.state == model.STATE_RUNNING: + eventtype = coreapi.CORE_EVENT_START + elif model.state == model.STATE_PAUSED: + eventtype = coreapi.CORE_EVENT_PAUSE + data = "start=%d" % int(model.lasttime - model.timezero) + data += " end=%d" % int(model.endtime) + tlvdata = "" + tlvdata += coreapi.CoreEventTlv.pack(coreapi.CORE_TLV_EVENT_NODE, + model.objid) + tlvdata += coreapi.CoreEventTlv.pack(coreapi.CORE_TLV_EVENT_TYPE, + eventtype) + tlvdata += coreapi.CoreEventTlv.pack(coreapi.CORE_TLV_EVENT_NAME, + "mobility:%s" % model._name) + tlvdata += coreapi.CoreEventTlv.pack(coreapi.CORE_TLV_EVENT_DATA, + data) + tlvdata += coreapi.CoreEventTlv.pack(coreapi.CORE_TLV_EVENT_TIME, + "%s" % time.time()) + msg = coreapi.CoreEventMessage.pack(0, tlvdata) + try: + self.session.broadcastraw(None, msg) + except Exception, e: + self.warn("Error sending Event Message: %s" % e) + + def updatewlans(self, moved, moved_netifs): + ''' A mobility script has caused nodes in the 'moved' list to move. + Update every WlanNode. This saves range calculations if the model + were to recalculate for each individual node movement. + ''' + for nodenum in self.configs: + try: + n = self.session.obj(nodenum) + except KeyError: + continue + if n.model: + n.model.update(moved, moved_netifs) + + def addphys(self, netnum, node): + ''' Keep track of PhysicalNodes and which network they belong to. + ''' + nodenum = node.objid + self.phys[nodenum] = node + if netnum not in self.physnets: + self.physnets[netnum] = [nodenum,] + else: + self.physnets[netnum].append(nodenum) + + def physnodehandlelink(self, msg): + ''' Broker handler. Snoop Link add messages to get + node numbers of PhyiscalNodes and their nets. + Physical nodes exist only on other servers, but a shadow object is + created here for tracking node position. + ''' + if msg.msgtype == coreapi.CORE_API_LINK_MSG and \ + msg.flags & coreapi.CORE_API_ADD_FLAG: + nn = msg.nodenumbers() + # first node is always link layer node in Link add message + if nn[0] not in self.session.broker.nets: + return + if nn[1] in self.session.broker.phys: + # record the fact that this PhysicalNode is linked to a net + dummy = PyCoreNode(session=self.session, objid=nn[1], + name="n%d" % nn[1], start=False) + self.addphys(nn[0], dummy) + + def physnodeupdateposition(self, msg): + ''' Snoop node messages belonging to physical nodes. The dummy object + in self.phys[] records the node position. + ''' + nodenum = msg.nodenumbers()[0] + try: + dummy = self.phys[nodenum] + nodexpos = msg.gettlv(coreapi.CORE_TLV_NODE_XPOS) + nodeypos = msg.gettlv(coreapi.CORE_TLV_NODE_YPOS) + dummy.setposition(nodexpos, nodeypos, None) + except KeyError: + pass + + def installphysnodes(self, net): + ''' After installing a mobility model on a net, include any physical + nodes that we have recorded. Use the GreTap tunnel to the physical node + as the node's interface. + ''' + try: + nodenums = self.physnets[net.objid] + except KeyError: + return + for nodenum in nodenums: + node = self.phys[nodenum] + servers = self.session.broker.getserversbynode(nodenum) + (host, port, sock) = self.session.broker.getserver(servers[0]) + netif = self.session.broker.gettunnel(net.objid, IPAddr.toint(host)) + node.addnetif(netif, 0) + netif.node = node + (x,y,z) = netif.node.position.get() + netif.poshook(netif, x, y, z) + + +class WirelessModel(Configurable): + ''' Base class used by EMANE models and the basic range model. + Used for managing arbitrary configuration parameters. + ''' + _type = coreapi.CORE_TLV_REG_WIRELESS + _bitmap = None + _positioncallback = None + + def __init__(self, session, objid, verbose = False, values = None): + Configurable.__init__(self, session, objid) + self.verbose = verbose + # 'values' can be retrieved from a ConfigurableManager, or used here + # during initialization, depending on the model. + + def tolinkmsgs(self, flags): + ''' May be used if the model can populate the GUI with wireless (green) + link lines. + ''' + return [] + + def update(self, moved, moved_netifs): + raise NotImplementedError + + +class BasicRangeModel(WirelessModel): + ''' Basic Range wireless model, calculates range between nodes and links + and unlinks nodes based on this distance. This was formerly done from + the GUI. + ''' + _name = "basic_range" + + # configuration parameters are + # ( 'name', 'type', 'default', 'possible-value-list', 'caption') + _confmatrix = [ + ("range", coreapi.CONF_DATA_TYPE_UINT32, '275', + '', 'wireless range (pixels)'), + ("bandwidth", coreapi.CONF_DATA_TYPE_UINT32, '54000', + '', 'bandwidth (bps)'), + ("jitter", coreapi.CONF_DATA_TYPE_FLOAT, '0.0', + '', 'transmission jitter (usec)'), + ("delay", coreapi.CONF_DATA_TYPE_FLOAT, '5000.0', + '', 'transmission delay (usec)'), + ("error", coreapi.CONF_DATA_TYPE_FLOAT, '0.0', + '', 'error rate (%)'), + ] + + # value groupings + _confgroups = "Basic Range Parameters:1-%d" % len(_confmatrix) + + def __init__(self, session, objid, verbose = False, values=None): + ''' Range model is only instantiated during runtime. + ''' + super(BasicRangeModel, self).__init__(session = session, objid = objid, + verbose = verbose) + self.wlan = session.obj(objid) + self._netifs = {} + self._netifslock = threading.Lock() + if values is None: + values = session.mobility.getconfig(objid, self._name, + self.getdefaultvalues())[1] + self.range = float(self.valueof("range", values)) + if self.verbose: + self.session.info("Basic range model configured for WLAN %d using" \ + " range %d" % (objid, self.range)) + self.bw = int(self.valueof("bandwidth", values)) + if self.bw == 0.0: + self.bw = None + self.delay = float(self.valueof("delay", values)) + if self.delay == 0.0: + self.delay = None + self.loss = float(self.valueof("error", values)) + if self.loss == 0.0: + self.loss = None + self.jitter = float(self.valueof("jitter", values)) + if self.jitter == 0.0: + self.jitter = None + + @classmethod + def configure_mob(cls, session, msg): + ''' Handle configuration messages for setting up a model. + Pass the MobilityManager object as the manager object. + ''' + return cls.configure(session.mobility, msg) + + def setlinkparams(self): + ''' Apply link parameters to all interfaces. This is invoked from + WlanNode.setmodel() after the position callback has been set. + ''' + with self._netifslock: + for netif in self._netifs: + self.wlan.linkconfig(netif, bw=self.bw, delay=self.delay, + loss=self.loss, duplicate=None, + jitter=self.jitter) + + def get_position(self, netif): + with self._netifslock: + return self._netifs[netif] + + def set_position(self, netif, x = None, y = None, z = None): + ''' A node has moved; given an interface, a new (x,y,z) position has + been set; calculate the new distance between other nodes and link or + unlink node pairs based on the configured range. + ''' + #print "set_position(%s, x=%s, y=%s, z=%s)" % (netif.localname, x, y, z) + self._netifslock.acquire() + self._netifs[netif] = (x, y, z) + if x is None or y is None: + self._netifslock.release() + return + for netif2 in self._netifs: + self.calclink(netif, netif2) + self._netifslock.release() + + _positioncallback = set_position + + def update(self, moved, moved_netifs): + ''' Node positions have changed without recalc. Update positions from + node.position, then re-calculate links for those that have moved. + Assumes bidirectional links, with one calculation per node pair, where + one of the nodes has moved. + ''' + with self._netifslock: + while len(moved_netifs): + netif = moved_netifs.pop() + (nx, ny, nz) = netif.node.getposition() + if netif in self._netifs: + self._netifs[netif] = (nx, ny, nz) + for netif2 in self._netifs: + if netif2 in moved_netifs: + continue + self.calclink(netif, netif2) + + def calclink(self, netif, netif2): + ''' Helper used by set_position() and update() to + calculate distance between two interfaces and perform + linking/unlinking. Sends link/unlink messages and updates the + WlanNode's linked dict. + ''' + if netif == netif2: + return + (x, y, z) = self._netifs[netif] + (x2, y2, z2) = self._netifs[netif2] + if x2 is None or y2 is None: + return + + d = self.calcdistance( (x,y,z), (x2,y2,z2) ) + # ordering is important, to keep the wlan._linked dict organized + a = min(netif, netif2) + b = max(netif, netif2) + try: + self.wlan._linked_lock.acquire() + linked = self.wlan.linked(a, b) + except KeyError: + return + finally: + self.wlan._linked_lock.release() + if d > self.range: + if linked: + self.wlan.unlink(a, b) + self.sendlinkmsg(a, b, unlink=True) + else: + if not linked: + self.wlan.link(a, b) + self.sendlinkmsg(a, b) + + + def calcdistance(self, p1, p2): + ''' Calculate the distance between two three-dimensional points. + ''' + a = p1[0] - p2[0] + b = p1[1] - p2[1] + c = 0 + if p1[2] is not None and p2[2] is not None: + c = p1[2] - p2[2] + return math.hypot(math.hypot(a, b), c) + + def linkmsg(self, netif, netif2, flags): + ''' Create a wireless link/unlink API message. + ''' + n1 = netif.localname.split('.')[0] + n2 = netif2.localname.split('.')[0] + tlvdata = coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_N1NUMBER, + netif.node.objid) + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_N2NUMBER, + netif2.node.objid) + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_NETID, + self.wlan.objid) + #tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_IF1NUM, + # netif.index) + #tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_IF2NUM, + # netif2.index) + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_TYPE, + coreapi.CORE_LINK_WIRELESS) + return coreapi.CoreLinkMessage.pack(flags, tlvdata) + + def sendlinkmsg(self, netif, netif2, unlink=False): + ''' Send a wireless link/unlink API message to the GUI. + ''' + if unlink: + flags = coreapi.CORE_API_DEL_FLAG + else: + flags = coreapi.CORE_API_ADD_FLAG + msg = self.linkmsg(netif, netif2, flags) + self.session.broadcastraw(src=None, data=msg) + self.session.sdt.updatelink(netif.node.objid, netif2.node.objid, flags, + wireless=True) + + def tolinkmsgs(self, flags): + ''' Return a list of wireless link messages for when the GUI reconnects. + ''' + r = [] + with self.wlan._linked_lock: + for a in self.wlan._linked: + for b in self.wlan._linked[a]: + if self.wlan._linked[a][b]: + r.append(self.linkmsg(a, b, flags)) + return r + +class WayPointMobility(WirelessModel): + ''' Abstract class for mobility models that set node waypoints. + ''' + _name = "waypoint" + _type = coreapi.CORE_TLV_REG_MOBILITY + + STATE_STOPPED = 0 + STATE_RUNNING = 1 + STATE_PAUSED = 2 + + class WayPoint(object): + def __init__(self, time, nodenum, coords, speed): + self.time = time + self.nodenum = nodenum + self.coords = coords + self.speed = speed + + def __cmp__(self, other): + tmp = cmp(self.time, other.time) + if tmp == 0: + tmp = cmp(self.nodenum, other.nodenum) + return tmp + + def __init__(self, session, objid, verbose = False, values = None): + super(WayPointMobility, self).__init__(session = session, objid = objid, + verbose = verbose, values = values) + self.state = self.STATE_STOPPED + self.queue = [] + self.queue_copy = [] + self.points = {} + self.initial = {} + self.lasttime = None + self.endtime = None + self.wlan = session.obj(objid) + # these are really set in child class via confmatrix + self.loop = False + self.refresh_ms = 50 + # flag whether to stop scheduling when queue is empty + # (ns-3 sets this to False as new waypoints may be added from trace) + self.empty_queue_stop = True + + def runround(self): + ''' Advance script time and move nodes. + ''' + if self.state != self.STATE_RUNNING: + return + t = self.lasttime + self.lasttime = time.time() + now = self.lasttime - self.timezero + dt = self.lasttime - t + #print "runround(now=%.2f, dt=%.2f)" % (now, dt) + + # keep current waypoints up-to-date + self.updatepoints(now) + + if not len(self.points): + if len(self.queue): + # more future waypoints, allow time for self.lasttime update + nexttime = self.queue[0].time - now + if nexttime > (0.001 * self.refresh_ms): + nexttime -= (0.001 * self.refresh_ms) + self.session.evq.add_event(nexttime, self.runround) + return + else: + # no more waypoints or queued items, loop? + if not self.empty_queue_stop: + # keep running every refresh_ms, even with empty queue + self.session.evq.add_event(0.001 * self.refresh_ms, self.runround) + return + if not self.loopwaypoints(): + return self.stop(move_initial=False) + if not len(self.queue): + # prevent busy loop + return + return self.run() + + # only move netifs attached to self.wlan, or all nodenum in script? + moved = [] + moved_netifs = [] + for netif in self.wlan.netifs(): + node = netif.node + if self.movenode(node, dt): + moved.append(node) + moved_netifs.append(netif) + + # calculate all ranges after moving nodes; this saves calculations + #self.wlan.model.update(moved) + self.session.mobility.updatewlans(moved, moved_netifs) + + # TODO: check session state + self.session.evq.add_event(0.001 * self.refresh_ms, self.runround) + + def run(self): + self.timezero = time.time() + self.lasttime = self.timezero - (0.001 * self.refresh_ms) + self.movenodesinitial() + self.runround() + self.session.mobility.sendevent(self) + + def movenode(self, node, dt): + ''' Calculate next node location and update its coordinates. + Returns True if the node's position has changed. + ''' + if node.objid not in self.points: + return False + x1, y1, z1 = node.getposition() + x2, y2, z2 = self.points[node.objid].coords + speed = self.points[node.objid].speed + # instantaneous move (prevents dx/dy == 0.0 below) + if speed == 0: + self.setnodeposition(node, x2, y2, z2) + del self.points[node.objid] + return True + # speed can be a velocity vector (ns3 mobility) or speed value + if isinstance(speed, (float, int)): + # linear speed value + alpha = math.atan2(y2 - y1, x2 - x1) + sx = speed * math.cos(alpha) + sy = speed * math.sin(alpha) + else: + # velocity vector + sx = speed[0] + sy = speed[1] + + # calculate dt * speed = distance moved + dx = sx * dt + dy = sy * dt + # prevent overshoot + if abs(dx) > abs(x2 - x1): + dx = x2 - x1 + if abs(dy) > abs(y2 - y1): + dy = y2 - y1 + if dx == 0.0 and dy == 0.0: + if self.endtime < (self.lasttime - self.timezero): + # the last node to reach the last waypoint determines this + # script's endtime + self.endtime = self.lasttime - self.timezero + del self.points[node.objid] + return False + #print "node %s dx,dy= <%s, %d>" % (node.name, dx, dy) + if (x1 + dx) < 0.0: + dx = 0.0 - x1 + if (y1 + dy) < 0.0: + dy = 0.0 - y1 + self.setnodeposition(node, x1 + dx, y1 + dy, z1) + return True + + def movenodesinitial(self): + ''' Move nodes to their initial positions. Then calculate the ranges. + ''' + moved = [] + moved_netifs = [] + for netif in self.wlan.netifs(): + node = netif.node + if node.objid not in self.initial: + continue + (x, y, z) = self.initial[node.objid].coords + self.setnodeposition(node, x, y, z) + moved.append(node) + moved_netifs.append(netif) + #self.wlan.model.update(moved) + self.session.mobility.updatewlans(moved, moved_netifs) + + def addwaypoint(self, time, nodenum, x, y, z, speed): + ''' Waypoints are pushed to a heapq, sorted by time. + ''' + #print "addwaypoint: %s %s %s,%s,%s %s" % (time, nodenum, x, y, z, speed) + wp = self.WayPoint(time, nodenum, coords=(x,y,z), speed=speed) + heapq.heappush(self.queue, wp) + + def addinitial(self, nodenum, x, y, z): + ''' Record initial position in a dict. + ''' + wp = self.WayPoint(0, nodenum, coords=(x,y,z), speed=0) + self.initial[nodenum] = wp + + def updatepoints(self, now): + ''' Move items from self.queue to self.points when their time has come. + ''' + while len(self.queue): + if self.queue[0].time > now: + break + wp = heapq.heappop(self.queue) + self.points[wp.nodenum] = wp + + def copywaypoints(self): + ''' Store backup copy of waypoints for looping and stopping. + ''' + self.queue_copy = list(self.queue) + + def loopwaypoints(self): + ''' Restore backup copy of waypoints when looping. + ''' + self.queue = list(self.queue_copy) + return self.loop + + def setnodeposition(self, node, x, y, z): + ''' Helper to move a node, notify any GUI (connected session handlers), + without invoking the interface poshook callback that may perform + range calculation. + ''' + # this would cause PyCoreNetIf.poshook() callback (range calculation) + #node.setposition(x, y, z) + node.position.set(x, y, z) + msg = node.tonodemsg(flags=0) + self.session.broadcastraw(None, msg) + self.session.sdt.updatenode(node, flags=0, x=x, y=y, z=z) + + def setendtime(self): + ''' Set self.endtime to the time of the last waypoint in the queue of + waypoints. This is just an estimate. The endtime will later be + adjusted, after one round of the script has run, to be the time + that the last moving node has reached its final waypoint. + ''' + try: + self.endtime = self.queue[-1].time + except IndexError: + self.endtime = 0 + + def start(self): + ''' Run the script from the beginning or unpause from where it + was before. + ''' + laststate = self.state + self.state = self.STATE_RUNNING + if laststate == self.STATE_STOPPED or laststate == self.STATE_RUNNING: + self.loopwaypoints() + self.timezero = 0 + self.lasttime = 0 + self.run() + elif laststate == self.STATE_PAUSED: + now = time.time() + self.timezero += now - self.lasttime + self.lasttime = now - (0.001 * self.refresh_ms) + self.runround() + + def stop(self, move_initial=True): + ''' Stop the script and move nodes to initial positions. + ''' + self.state = self.STATE_STOPPED + self.loopwaypoints() + self.timezero = 0 + self.lasttime = 0 + if move_initial: + self.movenodesinitial() + self.session.mobility.sendevent(self) + + def pause(self): + ''' Pause the script; pause time is stored to self.lasttime. + ''' + self.state = self.STATE_PAUSED + self.lasttime = time.time() + + +class Ns2ScriptedMobility(WayPointMobility): + ''' Handles the ns-2 script format, generated by scengen/setdest or + BonnMotion. + ''' + _name = "ns2script" + + _confmatrix = [ + ("file", coreapi.CONF_DATA_TYPE_STRING, '', + '', 'mobility script file'), + ("refresh_ms", coreapi.CONF_DATA_TYPE_UINT32, '50', + '', 'refresh time (ms)'), + ("loop", coreapi.CONF_DATA_TYPE_BOOL, '1', + 'On,Off', 'loop'), + ("autostart", coreapi.CONF_DATA_TYPE_STRING, '', + '', 'auto-start seconds (0.0 for runtime)'), + ("map", coreapi.CONF_DATA_TYPE_STRING, '', + '', 'node mapping (optional, e.g. 0:1,1:2,2:3)'), + ("script_start", coreapi.CONF_DATA_TYPE_STRING, '', + '', 'script file to run upon start'), + ("script_pause", coreapi.CONF_DATA_TYPE_STRING, '', + '', 'script file to run upon pause'), + ("script_stop", coreapi.CONF_DATA_TYPE_STRING, '', + '', 'script file to run upon stop'), + ] + _confgroups = "ns-2 Mobility Script Parameters:1-%d" % len(_confmatrix) + + def __init__(self, session, objid, verbose = False, values = None): + ''' + ''' + super(Ns2ScriptedMobility, self).__init__(session = session, objid = objid, + verbose = verbose, values = values) + self._netifs = {} + self._netifslock = threading.Lock() + if values is None: + values = session.mobility.getconfig(objid, self._name, + self.getdefaultvalues())[1] + self.file = self.valueof("file", values) + self.refresh_ms = int(self.valueof("refresh_ms", values)) + self.loop = (self.valueof("loop", values).lower() == "on") + self.autostart = self.valueof("autostart", values) + self.parsemap(self.valueof("map", values)) + self.script_start = self.valueof("script_start", values) + self.script_pause = self.valueof("script_pause", values) + self.script_stop = self.valueof("script_stop", values) + if self.verbose: + self.session.info("ns-2 scripted mobility configured for WLAN %d" \ + " using file: %s" % (objid, self.file)) + self.readscriptfile() + self.copywaypoints() + self.setendtime() + + @classmethod + def configure_mob(cls, session, msg): + ''' Handle configuration messages for setting up a model. + Pass the MobilityManager object as the manager object. + ''' + return cls.configure(session.mobility, msg) + + def readscriptfile(self): + ''' Read in mobility script from a file. This adds waypoints to a + priority queue, sorted by waypoint time. Initial waypoints are + stored in a separate dict. + ''' + filename = self.findfile(self.file) + try: + f = open(filename, 'r') + except IOError, e: + self.session.warn("ns-2 scripted mobility failed to load file " \ + " '%s' (%s)" % (self.file, e)) + return + if self.verbose: + self.session.info("reading ns-2 script file: %s" % filename) + ln = 0 + ix = iy = iz = None + inodenum = None + for line in f: + ln += 1 + if line[:2] != '$n': + continue + try: + if line[:8] == "$ns_ at ": + if ix is not None and iy is not None: + self.addinitial(self.map(inodenum), ix, iy, iz) + ix = iy = iz = None + # waypoints: + # $ns_ at 1.00 "$node_(6) setdest 500.0 178.0 25.0" + parts = line.split() + time = float(parts[2]) + nodenum = parts[3][1+parts[3].index('('):parts[3].index(')')] + x = float(parts[5]) + y = float(parts[6]) + z = None + speed = float(parts[7].strip('"')) + self.addwaypoint(time, self.map(nodenum), x, y, z, speed) + elif line[:7] == "$node_(": + # initial position (time=0, speed=0): + # $node_(6) set X_ 780.0 + parts = line.split() + time = 0.0 + nodenum = parts[0][1+parts[0].index('('):parts[0].index(')')] + if parts[2] == 'X_': + if ix is not None and iy is not None: + self.addinitial(self.map(inodenum), ix, iy, iz) + ix = iy = iz = None + ix = float(parts[3]) + elif parts[2] == 'Y_': + iy = float(parts[3]) + elif parts[2] == 'Z_': + iz = float(parts[3]) + self.addinitial(self.map(nodenum), ix, iy, iz) + ix = iy = iz = None + inodenum = nodenum + else: + raise ValueError + except ValueError, e: + self.session.warn("skipping line %d of file %s '%s' (%s)" % \ + (ln, self.file, line, e)) + continue + if ix is not None and iy is not None: + self.addinitial(self.map(inodenum), ix, iy, iz) + + def findfile(self, fn): + ''' Locate a script file. If the specified file doesn't exist, look in the + same directory as the scenario file (session.filename), or in the default + configs directory (~/.core/configs). This allows for sample files without + absolute pathnames. + ''' + if os.path.exists(fn): + return fn + if self.session.filename is not None: + d = os.path.dirname(self.session.filename) + sessfn = os.path.join(d, fn) + if (os.path.exists(sessfn)): + return sessfn + if self.session.user is not None: + userfn = os.path.join('/home', self.session.user, '.core', 'configs', fn) + if (os.path.exists(userfn)): + return userfn + return fn + + def parsemap(self, mapstr): + ''' Parse a node mapping string, given as a configuration parameter. + ''' + self.nodemap = {} + if mapstr.strip() == '': + return + for pair in mapstr.split(','): + parts = pair.split(':') + try: + if len(parts) != 2: + raise ValueError + self.nodemap[int(parts[0])] = int(parts[1]) + except ValueError: + self.session.warn("ns-2 mobility node map error") + return + + def map(self, nodenum): + ''' Map one node number (from a script file) to another. + ''' + nodenum = int(nodenum) + try: + return self.nodemap[nodenum] + except KeyError: + return nodenum + + def startup(self): + ''' Start running the script if autostart is enabled. + Move node to initial positions when any autostart time is specified. + Ignore the script if autostart is an empty string (can still be + started via GUI controls). + ''' + if self.autostart == '': + if self.verbose: + self.session.info("not auto-starting ns-2 script for %s" % \ + self.wlan.name) + return + try: + t = float(self.autostart) + except ValueError: + self.session.warn("Invalid auto-start seconds specified '%s' for " \ + "%s" % (self.autostart, self.wlan.name)) + return + self.movenodesinitial() + if self.verbose: + self.session.info("scheduling ns-2 script for %s autostart at %s" \ + % (self.wlan.name, t)) + self.state = self.STATE_RUNNING + self.session.evq.add_event(t, self.run) + + def start(self): + ''' Handle the case when un-paused. + ''' + laststate = self.state + super(Ns2ScriptedMobility, self).start() + if laststate == self.STATE_PAUSED: + self.statescript("unpause") + + def run(self): + ''' Start is pressed or autostart is triggered. + ''' + super(Ns2ScriptedMobility, self).run() + self.statescript("run") + + def pause(self): + super(Ns2ScriptedMobility, self).pause() + self.statescript("pause") + + def stop(self, move_initial=True): + super(Ns2ScriptedMobility, self).stop(move_initial=move_initial) + self.statescript("stop") + + def statescript(self, typestr): + filename = None + if typestr == "run" or typestr == "unpause": + filename = self.script_start + elif typestr == "pause": + filename = self.script_pause + elif typestr == "stop": + filename = self.script_stop + if filename is None or filename == '': + return + filename = self.findfile(filename) + try: + check_call(["/bin/sh", filename, typestr], + cwd=self.session.sessiondir, + env=self.session.getenviron()) + except Exception, e: + self.session.warn("Error running script '%s' for WLAN state %s: " \ + "%s" % (filename, typestr, e)) + + diff --git a/daemon/core/netns/__init__.py b/daemon/core/netns/__init__.py new file mode 100644 index 00000000..e69de29b diff --git a/daemon/core/netns/nodes.py b/daemon/core/netns/nodes.py new file mode 100644 index 00000000..2780a506 --- /dev/null +++ b/daemon/core/netns/nodes.py @@ -0,0 +1,401 @@ +# +# CORE +# Copyright (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: Tom Goff +# Jeff Ahrenholz +# +''' +nodes.py: definition of an LxcNode and CoreNode classes, and other node classes +that inherit from the CoreNode, implementing specific node types. +''' + +from vnode import * +from vnet import * +from core.misc.ipaddr import * +from core.api import coreapi +from core.coreobj import PyCoreNode + +class CtrlNet(LxBrNet): + policy = "ACCEPT" + CTRLIF_IDX_BASE = 99 # base control interface index + + def __init__(self, session, objid = "ctrlnet", name = None, + verbose = False, netid = 1, prefix = None, + hostid = None, start = True, assign_address = True, + updown_script = None): + if not prefix: + prefix = "172.16.%d.0/24" % netid + self.prefix = IPv4Prefix(prefix) + self.hostid = hostid + self.assign_address = assign_address + self.updown_script = updown_script + LxBrNet.__init__(self, session, objid = objid, name = name, + verbose = verbose, start = start) + + def startup(self): + LxBrNet.startup(self) + if self.hostid: + addr = self.prefix.addr(self.hostid) + else: + addr = self.prefix.maxaddr() + addrlist = ["%s/%s" % (addr, self.prefix.prefixlen)] + if self.assign_address: + self.addrconfig(addrlist = addrlist) + if self.updown_script is not None: + self.info("interface %s updown script '%s startup' called" % \ + (self.brname, self.updown_script)) + check_call([self.updown_script, self.brname, "startup"]) + + def shutdown(self): + if self.updown_script is not None: + self.info("interface %s updown script '%s shutdown' called" % \ + (self.brname, self.updown_script)) + check_call([self.updown_script, self.brname, "shutdown"]) + LxBrNet.shutdown(self) + + def tolinkmsgs(self, flags): + ''' Do not include CtrlNet in link messages describing this session. + ''' + return [] + +class CoreNode(LxcNode): + apitype = coreapi.CORE_NODE_DEF + +class PtpNet(LxBrNet): + policy = "ACCEPT" + + def attach(self, netif): + if len(self._netif) > 1: + raise ValueError, \ + "Point-to-point links support at most 2 network interfaces" + LxBrNet.attach(self, netif) + + def tonodemsg(self, flags): + ''' Do not generate a Node Message for point-to-point links. They are + built using a link message instead. + ''' + pass + + def tolinkmsgs(self, flags): + ''' Build CORE API TLVs for a point-to-point link. One Link message + describes this network. + ''' + tlvdata = "" + if len(self._netif) != 2: + return tlvdata + (if1, if2) = self._netif.items() + if1 = if1[1] + if2 = if2[1] + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_N1NUMBER, + if1.node.objid) + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_N2NUMBER, + if2.node.objid) + delay = if1.getparam('delay') + bw = if1.getparam('bw') + loss = if1.getparam('loss') + duplicate = if1.getparam('duplicate') + jitter = if1.getparam('jitter') + if delay is not None: + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_DELAY, + delay) + if bw is not None: + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_BW, bw) + if loss is not None: + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_PER, + str(loss)) + if duplicate is not None: + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_DUP, + str(duplicate)) + if jitter is not None: + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_JITTER, + jitter) + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_TYPE, + self.linktype) + + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_IF1NUM, \ + if1.node.getifindex(if1)) + for addr in if1.addrlist: + (ip, sep, mask) = addr.partition('/') + mask = int(mask) + if isIPv4Address(ip): + family = AF_INET + tlvtypeip = coreapi.CORE_TLV_LINK_IF1IP4 + tlvtypemask = coreapi.CORE_TLV_LINK_IF1IP4MASK + else: + family = AF_INET6 + tlvtypeip = coreapi.CORE_TLV_LINK_IF1IP6 + tlvtypemask = coreapi.CORE_TLV_LINK_IF1IP6MASK + ipl = socket.inet_pton(family, ip) + tlvdata += coreapi.CoreLinkTlv.pack(tlvtypeip, + IPAddr(af=family, addr=ipl)) + tlvdata += coreapi.CoreLinkTlv.pack(tlvtypemask, mask) + + tlvdata += coreapi.CoreLinkTlv.pack(coreapi.CORE_TLV_LINK_IF2NUM, \ + if2.node.getifindex(if2)) + for addr in if2.addrlist: + (ip, sep, mask) = addr.partition('/') + mask = int(mask) + if isIPv4Address(ip): + family = AF_INET + tlvtypeip = coreapi.CORE_TLV_LINK_IF2IP4 + tlvtypemask = coreapi.CORE_TLV_LINK_IF2IP4MASK + else: + family = AF_INET6 + tlvtypeip = coreapi.CORE_TLV_LINK_IF2IP6 + tlvtypemask = coreapi.CORE_TLV_LINK_IF2IP6MASK + ipl = socket.inet_pton(family, ip) + tlvdata += coreapi.CoreLinkTlv.pack(tlvtypeip, + IPAddr(af=family, addr=ipl)) + tlvdata += coreapi.CoreLinkTlv.pack(tlvtypemask, mask) + msg = coreapi.CoreLinkMessage.pack(flags, tlvdata) + return [msg,] + +class SwitchNode(LxBrNet): + apitype = coreapi.CORE_NODE_SWITCH + policy = "ACCEPT" + type = "lanswitch" + +class HubNode(LxBrNet): + apitype = coreapi.CORE_NODE_HUB + policy = "ACCEPT" + type = "hub" + + def __init__(self, session, objid = None, name = None, verbose = False, + start = True): + ''' the Hub node forwards packets to all bridge ports by turning off + the MAC address learning + ''' + LxBrNet.__init__(self, session, objid, name, verbose, start) + if start: + check_call([BRCTL_BIN, "setageing", self.brname, "0"]) + + +class WlanNode(LxBrNet): + apitype = coreapi.CORE_NODE_WLAN + linktype = coreapi.CORE_LINK_WIRELESS + policy = "DROP" + type = "wlan" + + def __init__(self, session, objid = None, name = None, verbose = False, + start = True, policy = None): + LxBrNet.__init__(self, session, objid, name, verbose, start, policy) + # wireless model such as basic range + self.model = None + # mobility model such as scripted + self.mobility = None + + def attach(self, netif): + LxBrNet.attach(self, netif) + if self.model: + netif.poshook = self.model._positioncallback + if netif.node is None: + return + (x,y,z) = netif.node.position.get() + # invokes any netif.poshook + netif.setposition(x, y, z) + #self.model.setlinkparams() + + def setmodel(self, model, config): + ''' Mobility and wireless model. + ''' + if (self.verbose): + self.info("adding model %s" % model._name) + if model._type == coreapi.CORE_TLV_REG_WIRELESS: + self.model = model(session=self.session, objid=self.objid, + verbose=self.verbose, values=config) + if self.model._positioncallback: + for netif in self.netifs(): + netif.poshook = self.model._positioncallback + if netif.node is not None: + (x,y,z) = netif.node.position.get() + netif.poshook(netif, x, y, z) + self.model.setlinkparams() + elif model._type == coreapi.CORE_TLV_REG_MOBILITY: + self.mobility = model(session=self.session, objid=self.objid, + verbose=self.verbose, values=config) + + def tolinkmsgs(self, flags): + msgs = LxBrNet.tolinkmsgs(self, flags) + if self.model: + msgs += self.model.tolinkmsgs(flags) + return msgs + + +class RJ45Node(PyCoreNode, PyCoreNetIf): + ''' RJ45Node is a physical interface on the host linked to the emulated + network. + ''' + apitype = coreapi.CORE_NODE_RJ45 + + def __init__(self, session, objid = None, name = None, mtu = 1500, + verbose = False, start = True): + PyCoreNode.__init__(self, session, objid, name, verbose=verbose, + start=start) + # this initializes net, params, poshook + PyCoreNetIf.__init__(self, node=self, name=name, mtu = mtu) + self.up = False + self.lock = threading.RLock() + self.ifindex = None + # the following are PyCoreNetIf attributes + self.transport_type = "raw" + self.localname = name + self.type = "rj45" + if start: + self.startup() + + def startup(self): + ''' Set the interface in the up state. + ''' + # interface will also be marked up during net.attach() + self.savestate() + try: + check_call([IP_BIN, "link", "set", self.localname, "up"]) + except: + self.warn("Failed to run command: %s link set %s up" % \ + (IP_BIN, self.localname)) + return + self.up = True + + def shutdown(self): + ''' Bring the interface down. Remove any addresses and queuing + disciplines. + ''' + if not self.up: + return + check_call([IP_BIN, "link", "set", self.localname, "down"]) + check_call([IP_BIN, "addr", "flush", "dev", self.localname]) + mutecall([TC_BIN, "qdisc", "del", "dev", self.localname, "root"]) + self.up = False + self.restorestate() + + def attachnet(self, net): + PyCoreNetIf.attachnet(self, net) + + def detachnet(self): + PyCoreNetIf.detachnet(self) + + def newnetif(self, net = None, addrlist = [], hwaddr = None, + ifindex = None, ifname = None): + ''' This is called when linking with another node. Since this node + represents an interface, we do not create another object here, + but attach ourselves to the given network. + ''' + self.lock.acquire() + try: + if ifindex is None: + ifindex = 0 + if self.net is not None: + raise ValueError, \ + "RJ45 nodes support at most 1 network interface" + self._netif[ifindex] = self + self.node = self # PyCoreNetIf.node is self + self.ifindex = ifindex + if net is not None: + self.attachnet(net) + for addr in maketuple(addrlist): + self.addaddr(addr) + return ifindex + finally: + self.lock.release() + + def delnetif(self, ifindex): + if ifindex is None: + ifindex = 0 + if ifindex not in self._netif: + raise ValueError, "ifindex %s does not exist" % ifindex + self._netif.pop(ifindex) + if ifindex == self.ifindex: + self.shutdown() + else: + raise ValueError, "ifindex %s does not exist" % ifindex + + def netif(self, ifindex, net=None): + ''' This object is considered the network interface, so we only + return self here. This keeps the RJ45Node compatible with + real nodes. + ''' + if net is not None and net == self.net: + return self + if ifindex is None: + ifindex = 0 + if ifindex == self.ifindex: + return self + return None + + def getifindex(self, netif): + if netif != self: + return None + return self.ifindex + + def addaddr(self, addr): + if self.up: + check_call([IP_BIN, "addr", "add", str(addr), "dev", self.name]) + PyCoreNetIf.addaddr(self, addr) + + def deladdr(self, addr): + if self.up: + check_call([IP_BIN, "addr", "del", str(addr), "dev", self.name]) + PyCoreNetIf.deladdr(self, addr) + + def savestate(self): + ''' Save the addresses and other interface state before using the + interface for emulation purposes. TODO: save/restore the PROMISC flag + ''' + self.old_up = False + self.old_addrs = [] + cmd = [IP_BIN, "addr", "show", "dev", self.localname] + try: + tmp = subprocess.Popen(cmd, stdout = subprocess.PIPE) + except OSError: + self.warn("Failed to run %s command: %s" % (IP_BIN, cmd)) + if tmp.wait(): + self.warn("Command failed: %s" % cmd) + return + lines = tmp.stdout.read() + tmp.stdout.close() + for l in lines.split('\n'): + items = l.split() + if len(items) < 2: + continue + if items[1] == "%s:" % self.localname: + flags = items[2][1:-1].split(',') + if "UP" in flags: + self.old_up = True + elif items[0] == "inet": + self.old_addrs.append((items[1], items[3])) + elif items[0] == "inet6": + if items[1][:4] == "fe80": + continue + self.old_addrs.append((items[1], None)) + + def restorestate(self): + ''' Restore the addresses and other interface state after using it. + ''' + for addr in self.old_addrs: + if addr[1] is None: + check_call([IP_BIN, "addr", "add", addr[0], "dev", + self.localname]) + else: + check_call([IP_BIN, "addr", "add", addr[0], "brd", addr[1], + "dev", self.localname]) + if self.old_up: + check_call([IP_BIN, "link", "set", self.localname, "up"]) + + def setposition(self, x=None, y=None, z=None): + ''' Use setposition() from both parent classes. + ''' + PyCoreObj.setposition(self, x, y, z) + # invoke any poshook + PyCoreNetIf.setposition(self, x, y, z) + + + + + +class TunnelNode(GreTapBridge): + apitype = coreapi.CORE_NODE_TUNNEL + policy = "ACCEPT" + type = "tunnel" + diff --git a/daemon/core/netns/vif.py b/daemon/core/netns/vif.py new file mode 100644 index 00000000..87e6a4da --- /dev/null +++ b/daemon/core/netns/vif.py @@ -0,0 +1,168 @@ +# +# CORE +# Copyright (c)2011-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: Tom Goff +# Jeff Ahrenholz +# +''' +vif.py: PyCoreNetIf classes that implement the interfaces available +under Linux. +''' + +import os, signal, shutil, sys, subprocess, vnodeclient, threading, string +import random, time +from core.api import coreapi +from core.misc.utils import * +from core.constants import * +from core.coreobj import PyCoreObj, PyCoreNode, PyCoreNetIf, Position +from core.emane.nodes import EmaneNode + +checkexec([IP_BIN]) + +class VEth(PyCoreNetIf): + def __init__(self, node, name, localname, mtu = 1500, net = None, + start = True): + # note that net arg is ignored + PyCoreNetIf.__init__(self, node = node, name = name, mtu = mtu) + self.localname = localname + self.up = False + if start: + self.startup() + + def startup(self): + check_call([IP_BIN, "link", "add", "name", self.localname, + "type", "veth", "peer", "name", self.name]) + check_call([IP_BIN, "link", "set", self.localname, "up"]) + self.up = True + + def shutdown(self): + if not self.up: + return + if self.node: + self.node.cmd([IP_BIN, "-6", "addr", "flush", "dev", self.name]) + if self.localname: + mutedetach([IP_BIN, "link", "delete", self.localname]) + self.up = False + + +class TunTap(PyCoreNetIf): + ''' TUN/TAP virtual device in TAP mode + ''' + def __init__(self, node, name, localname, mtu = 1500, net = None, + start = True): + PyCoreNetIf.__init__(self, node = node, name = name, mtu = mtu) + self.localname = localname + self.up = False + self.transport_type = "virtual" + if start: + self.startup() + + def startup(self): + # TODO: more sophisticated TAP creation here + # Debian does not support -p (tap) option, RedHat does. + # For now, this is disabled to allow the TAP to be created by another + # system (e.g. EMANE's emanetransportd) + #check_call(["tunctl", "-t", self.name]) + # self.install() + self.up = True + + def shutdown(self): + if not self.up: + return + self.node.cmd([IP_BIN, "-6", "addr", "flush", "dev", self.name]) + #if self.name: + # mutedetach(["tunctl", "-d", self.localname]) + self.up = False + + def install(self): + ''' Install this TAP into its namespace. This is not done from the + startup() method but called at a later time when a userspace + program (running on the host) has had a chance to open the socket + end of the TAP. + ''' + netns = str(self.node.pid) + # check for presence of device - tap device may not appear right away + # waits ~= stime * ( 2 ** attempts) seconds + attempts = 9 + stime = 0.01 + while attempts > 0: + try: + mutecheck_call([IP_BIN, "link", "show", self.localname]) + break + except Exception, e: + msg = "ip link show %s error (%d): %s" % \ + (self.localname, attempts, e) + if attempts > 1: + msg += ", retrying..." + self.node.info(msg) + time.sleep(stime) + stime *= 2 + attempts -= 1 + # install tap device into namespace + try: + check_call([IP_BIN, "link", "set", self.localname, "netns", netns]) + except Exception, e: + msg = "error installing TAP interface %s, command:" % self.localname + msg += "ip link set %s netns %s" % (self.localname, netns) + self.node.exception(coreapi.CORE_EXCP_LEVEL_ERROR, self.localname, msg) + self.node.warn(msg) + return + self.node.cmd([IP_BIN, "link", "set", self.localname, + "name", self.name]) + for addr in self.addrlist: + self.node.cmd([IP_BIN, "addr", "add", str(addr), + "dev", self.name]) + self.node.cmd([IP_BIN, "link", "set", self.name, "up"]) + +class GreTap(PyCoreNetIf): + ''' GRE TAP device for tunneling between emulation servers. + Uses the "gretap" tunnel device type from Linux which is a GRE device + having a MAC address. The MAC address is required for bridging. + ''' + def __init__(self, node = None, name = None, session = None, mtu = 1458, + remoteip = None, objid = None, localip = None, ttl = 255, + key = None, start = True): + PyCoreNetIf.__init__(self, node = node, name = name, mtu = mtu) + self.session = session + if objid is None: + # from PyCoreObj + objid = (((id(self) >> 16) ^ (id(self) & 0xffff)) & 0xffff) + self.objid = objid + sessionid = self.session.shortsessionid() + # interface name on the local host machine + self.localname = "gt.%s.%s" % (self.objid, sessionid) + self.transport_type = "raw" + if not start: + self.up = False + return + + if remoteip is None: + raise ValueError, "missing remote IP required for GRE TAP device" + cmd = ("ip", "link", "add", self.localname, "type", "gretap", + "remote", str(remoteip)) + if localip: + cmd += ("local", str(localip)) + if ttl: + cmd += ("ttl", str(ttl)) + if key: + cmd += ("key", str(key)) + check_call(cmd) + cmd = ("ip", "link", "set", self.localname, "up") + check_call(cmd) + self.up = True + + def shutdown(self): + if self.localname: + cmd = ("ip", "link", "set", self.localname, "down") + check_call(cmd) + cmd = ("ip", "link", "del", self.localname) + check_call(cmd) + self.localname = None + + def tonodemsg(self, flags): + return None + + def tolinkmsgs(self, flags): + return [] diff --git a/daemon/core/netns/vnet.py b/daemon/core/netns/vnet.py new file mode 100644 index 00000000..ca6560b1 --- /dev/null +++ b/daemon/core/netns/vnet.py @@ -0,0 +1,496 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: Tom Goff +# Jeff Ahrenholz +# +''' +vnet.py: PyCoreNet and LxBrNet classes that implement virtual networks using +Linux Ethernet bridging and ebtables rules. +''' + +import os, sys, threading, time, subprocess + +from core.api import coreapi +from core.misc.utils import * +from core.constants import * +from core.coreobj import PyCoreNet, PyCoreObj +from core.netns.vif import VEth, GreTap + +checkexec([BRCTL_BIN, IP_BIN, EBTABLES_BIN, TC_BIN]) + +ebtables_lock = threading.Lock() + +class EbtablesQueue(object): + ''' Helper class for queuing up ebtables commands into rate-limited + atomic commits. This improves performance and reliability when there are + many WLAN link updates. + ''' + # update rate is every 300ms + rate = 0.3 + # ebtables + atomic_file = "/tmp/pycore.ebtables.atomic" + + def __init__(self): + ''' Initialize the helper class, but don't start the update thread + until a WLAN is instantiated. + ''' + self.doupdateloop = False + self.updatethread = None + # this lock protects cmds and updates lists + self.updatelock = threading.Lock() + # list of pending ebtables commands + self.cmds = [] + # list of WLANs requiring update + self.updates = [] + # timestamps of last WLAN update; this keeps track of WLANs that are + # using this queue + self.last_update_time = {} + + def startupdateloop(self, wlan): + ''' Kick off the update loop; only needs to be invoked once. + ''' + self.updatelock.acquire() + self.last_update_time[wlan] = time.time() + self.updatelock.release() + if self.doupdateloop: + return + self.doupdateloop = True + self.updatethread = threading.Thread(target = self.updateloop) + self.updatethread.daemon = True + self.updatethread.start() + + def stopupdateloop(self, wlan): + ''' Kill the update loop thread if there are no more WLANs using it. + ''' + self.updatelock.acquire() + try: + del self.last_update_time[wlan] + except KeyError: + pass + self.updatelock.release() + if len(self.last_update_time) > 0: + return + self.doupdateloop = False + if self.updatethread: + self.updatethread.join() + self.updatethread = None + + def ebatomiccmd(self, cmd): + ''' Helper for building ebtables atomic file command list. + ''' + r = [EBTABLES_BIN, "--atomic-file", self.atomic_file] + if cmd: + r.extend(cmd) + return r + + def lastupdate(self, wlan): + ''' Return the time elapsed since this WLAN was last updated. + ''' + try: + elapsed = time.time() - self.last_update_time[wlan] + except KeyError: + self.last_update_time[wlan] = time.time() + elapsed = 0.0 + return elapsed + + def updated(self, wlan): + ''' Keep track of when this WLAN was last updated. + ''' + self.last_update_time[wlan] = time.time() + self.updates.remove(wlan) + + def updateloop(self): + ''' Thread target that looks for WLANs needing update, and + rate limits the amount of ebtables activity. Only one userspace program + should use ebtables at any given time, or results can be unpredictable. + ''' + while self.doupdateloop: + self.updatelock.acquire() + for wlan in self.updates: + if self.lastupdate(wlan) > self.rate: + self.buildcmds(wlan) + #print "ebtables commit %d rules" % len(self.cmds) + self.ebcommit(wlan) + self.updated(wlan) + self.updatelock.release() + time.sleep(self.rate) + + def ebcommit(self, wlan): + ''' Perform ebtables atomic commit using commands built in the + self.cmds list. + ''' + # save kernel ebtables snapshot to a file + cmd = self.ebatomiccmd(["--atomic-save",]) + try: + check_call(cmd) + except Exception, e: + self.eberror(wlan, "atomic-save (%s)" % cmd, e) + # no atomic file, exit + return + # modify the table file using queued ebtables commands + for c in self.cmds: + cmd = self.ebatomiccmd(c) + try: + check_call(cmd) + except Exception, e: + self.eberror(wlan, "cmd=%s" % cmd, e) + pass + self.cmds = [] + # commit the table file to the kernel + cmd = self.ebatomiccmd(["--atomic-commit",]) + try: + check_call(cmd) + os.unlink(self.atomic_file) + except Exception, e: + self.eberror(wlan, "atomic-commit (%s)" % cmd, e) + + def ebchange(self, wlan): + ''' Flag a change to the given WLAN's _linked dict, so the ebtables + chain will be rebuilt at the next interval. + ''' + self.updatelock.acquire() + if wlan not in self.updates: + self.updates.append(wlan) + self.updatelock.release() + + def buildcmds(self, wlan): + ''' Inspect a _linked dict from a wlan, and rebuild the ebtables chain + for that WLAN. + ''' + wlan._linked_lock.acquire() + # flush the chain + self.cmds.extend([["-F", wlan.brname],]) + # rebuild the chain + for (netif1, v) in wlan._linked.items(): + for (netif2, linked) in v.items(): + if wlan.policy == "DROP" and linked: + self.cmds.extend([["-A", wlan.brname, "-i", netif1.localname, + "-o", netif2.localname, "-j", "ACCEPT"], + ["-A", wlan.brname, "-o", netif1.localname, + "-i", netif2.localname, "-j", "ACCEPT"]]) + elif wlan.policy == "ACCEPT" and not linked: + self.cmds.extend([["-A", wlan.brname, "-i", netif1.localname, + "-o", netif2.localname, "-j", "DROP"], + ["-A", wlan.brname, "-o", netif1.localname, + "-i", netif2.localname, "-j", "DROP"]]) + wlan._linked_lock.release() + + def eberror(self, wlan, source, error): + ''' Log an ebtables command error and send an exception. + ''' + if not wlan: + return + wlan.exception(coreapi.CORE_EXCP_LEVEL_ERROR, wlan.brname, + "ebtables command error: %s\n%s\n" % (source, error)) + + +# a global object because all WLANs share the same queue +# cannot have multiple threads invoking the ebtables commnd +ebq = EbtablesQueue() + +def ebtablescmds(call, cmds): + ebtables_lock.acquire() + try: + for cmd in cmds: + call(cmd) + finally: + ebtables_lock.release() + +class LxBrNet(PyCoreNet): + + policy = "DROP" + + def __init__(self, session, objid = None, name = None, verbose = False, + start = True, policy = None): + PyCoreNet.__init__(self, session, objid, name, verbose, start) + if name is None: + name = str(self.objid) + if policy is not None: + self.policy = policy + self.name = name + self.brname = "b.%s.%s" % (str(self.objid), self.session.sessionid) + self.up = False + if start: + self.startup() + ebq.startupdateloop(self) + + def startup(self): + try: + check_call([BRCTL_BIN, "addbr", self.brname]) + except Exception, e: + self.exception(coreapi.CORE_EXCP_LEVEL_FATAL, self.brname, + "Error adding bridge: %s" % e) + try: + # turn off spanning tree protocol and forwarding delay + check_call([BRCTL_BIN, "stp", self.brname, "off"]) + check_call([BRCTL_BIN, "setfd", self.brname, "0"]) + check_call([IP_BIN, "link", "set", self.brname, "up"]) + # create a new ebtables chain for this bridge + ebtablescmds(check_call, [ + [EBTABLES_BIN, "-N", self.brname, "-P", self.policy], + [EBTABLES_BIN, "-A", "FORWARD", + "--logical-in", self.brname, "-j", self.brname]]) + # turn off multicast snooping so mcast forwarding occurs w/o IGMP joins + snoop = "/sys/devices/virtual/net/%s/bridge/multicast_snooping" % \ + self.brname + if os.path.exists(snoop): + open(snoop, "w").write('0') + except Exception, e: + self.exception(coreapi.CORE_EXCP_LEVEL_WARNING, self.brname, + "Error setting bridge parameters: %s" % e) + + self.up = True + + def shutdown(self): + if not self.up: + return + ebq.stopupdateloop(self) + mutecall([IP_BIN, "link", "set", self.brname, "down"]) + mutecall([BRCTL_BIN, "delbr", self.brname]) + ebtablescmds(mutecall, [ + [EBTABLES_BIN, "-D", "FORWARD", + "--logical-in", self.brname, "-j", self.brname], + [EBTABLES_BIN, "-X", self.brname]]) + for netif in self.netifs(): + # removes veth pairs used for bridge-to-bridge connections + netif.shutdown() + self._netif.clear() + self._linked.clear() + del self.session + self.up = False + + def attach(self, netif): + if self.up: + try: + check_call([BRCTL_BIN, "addif", self.brname, netif.localname]) + check_call([IP_BIN, "link", "set", netif.localname, "up"]) + except Exception, e: + self.exception(coreapi.CORE_EXCP_LEVEL_ERROR, self.brname, + "Error joining interface %s to bridge %s: %s" % \ + (netif.localname, self.brname, e)) + return + PyCoreNet.attach(self, netif) + + def detach(self, netif): + if self.up: + try: + check_call([BRCTL_BIN, "delif", self.brname, netif.localname]) + except Exception, e: + self.exception(coreapi.CORE_EXCP_LEVEL_ERROR, self.brname, + "Error removing interface %s from bridge %s: %s" % \ + (netif.localname, self.brname, e)) + return + PyCoreNet.detach(self, netif) + + def linked(self, netif1, netif2): + # check if the network interfaces are attached to this network + if self._netif[netif1.netifi] != netif1: + raise ValueError, "inconsistency for netif %s" % netif1.name + if self._netif[netif2.netifi] != netif2: + raise ValueError, "inconsistency for netif %s" % netif2.name + try: + linked = self._linked[netif1][netif2] + except KeyError: + if self.policy == "ACCEPT": + linked = True + elif self.policy == "DROP": + linked = False + else: + raise Exception, "unknown policy: %s" % self.policy + self._linked[netif1][netif2] = linked + return linked + + def unlink(self, netif1, netif2): + ''' Unlink two PyCoreNetIfs, resulting in adding or removing ebtables + filtering rules. + ''' + self._linked_lock.acquire() + if not self.linked(netif1, netif2): + self._linked_lock.release() + return + self._linked[netif1][netif2] = False + self._linked_lock.release() + ebq.ebchange(self) + + def link(self, netif1, netif2): + ''' Link two PyCoreNetIfs together, resulting in adding or removing + ebtables filtering rules. + ''' + self._linked_lock.acquire() + if self.linked(netif1, netif2): + self._linked_lock.release() + return + self._linked[netif1][netif2] = True + self._linked_lock.release() + ebq.ebchange(self) + + def linkconfig(self, netif, bw = None, delay = None, + loss = None, duplicate = None, jitter = None, netif2 = None): + ''' Configure link parameters by applying tc queuing disciplines on the + interface. + ''' + tc = [TC_BIN, "qdisc", "replace", "dev", netif.localname] + parent = ["root"] + changed = False + if netif.setparam('bw', bw): + # from tc-tbf(8): minimum value for burst is rate / kernel_hz + if bw is not None: + burst = max(2 * netif.mtu, bw / 1000) + limit = 0xffff # max IP payload + tbf = ["tbf", "rate", str(bw), + "burst", str(burst), "limit", str(limit)] + if bw > 0: + if self.up: + check_call(tc + parent + ["handle", "1:"] + tbf) + netif.setparam('has_tbf', True) + changed = True + elif netif.getparam('has_tbf') and bw <= 0: + tcd = [] + tc + tcd[2] = "delete" + if self.up: + check_call(tcd + parent) + netif.setparam('has_tbf', False) + # removing the parent removes the child + netif.setparam('has_netem', False) + changed = True + if netif.getparam('has_tbf'): + parent = ["parent", "1:1"] + netem = ["netem"] + changed = max(changed, netif.setparam('delay', delay)) + if loss is not None: + loss = float(loss) + changed = max(changed, netif.setparam('loss', loss)) + if duplicate is not None: + duplicate = float(duplicate) + changed = max(changed, netif.setparam('duplicate', duplicate)) + changed = max(changed, netif.setparam('jitter', jitter)) + if not changed: + return + # jitter and delay use the same delay statement + if delay is not None: + netem += ["delay", "%sus" % delay] + if jitter is not None: + if delay is None: + netem += ["delay", "0us", "%sus" % jitter, "25%"] + else: + netem += ["%sus" % jitter, "25%"] + + if loss is not None: + netem += ["loss", "%s%%" % min(loss, 100)] + if duplicate is not None: + netem += ["duplicate", "%s%%" % min(duplicate, 100)] + if delay <= 0 and loss <= 0 and duplicate <= 0: + # possibly remove netem if it exists and parent queue wasn't removed + if not netif.getparam('has_netem'): + return + tc[2] = "delete" + if self.up: + check_call(tc + parent + ["handle", "10:"]) + netif.setparam('has_netem', False) + elif len(netem) > 1: + if self.up: + check_call(tc + parent + ["handle", "10:"] + netem) + netif.setparam('has_netem', True) + + def linknet(self, net): + ''' Link this bridge with another by creating a veth pair and installing + each device into each bridge. + ''' + sessionid = self.session.sessionid + localname = "n%s.%s.%s" % (self.objid, net.objid, sessionid) + name = "n%s.%s.%s" % (net.objid, self.objid, sessionid) + netif = VEth(node = None, name = name, localname = localname, + mtu = 1500, net = self, start = self.up) + self.attach(netif) + if net.up: + # this is similar to net.attach() but uses netif.name instead + # of localname + check_call([BRCTL_BIN, "addif", net.brname, netif.name]) + check_call([IP_BIN, "link", "set", netif.name, "up"]) + i = net.newifindex() + net._netif[i] = netif + with net._linked_lock: + net._linked[netif] = {} + netif.net = self + netif.othernet = net + + def addrconfig(self, addrlist): + ''' Set addresses on the bridge. + ''' + if not self.up: + return + for addr in addrlist: + try: + check_call([IP_BIN, "addr", "add", str(addr), "dev", self.brname]) + except Exception, e: + self.exception(coreapi.CORE_EXCP_LEVEL_ERROR, self.brname, + "Error adding IP address: %s" % e) + +class GreTapBridge(LxBrNet): + ''' A network consisting of a bridge with a gretap device for tunneling to + another system. + ''' + def __init__(self, session, remoteip = None, objid = None, name = None, + policy = "ACCEPT", localip = None, ttl = 255, key = None, + verbose = False, start = True): + LxBrNet.__init__(self, session = session, objid = objid, + name = name, verbose = verbose, policy = policy, + start = False) + self.grekey = key + if self.grekey is None: + self.grekey = self.session.sessionid ^ self.objid + self.localnum = None + self.remotenum = None + self.remoteip = remoteip + self.localip = localip + self.ttl = ttl + if remoteip is None: + self.gretap = None + else: + self.gretap = GreTap(node = self, name = None, session = session, + remoteip = remoteip, objid = None, localip = localip, ttl = ttl, + key = self.grekey) + if start: + self.startup() + + def startup(self): + ''' Creates a bridge and adds the gretap device to it. + ''' + LxBrNet.startup(self) + if self.gretap: + self.attach(self.gretap) + + def shutdown(self): + ''' Detach the gretap device and remove the bridge. + ''' + if self.gretap: + self.detach(self.gretap) + self.gretap.shutdown() + self.gretap = None + LxBrNet.shutdown(self) + + def addrconfig(self, addrlist): + ''' Set the remote tunnel endpoint. This is a one-time method for + creating the GreTap device, which requires the remoteip at startup. + The 1st address in the provided list is remoteip, 2nd optionally + specifies localip. + ''' + if self.gretap: + raise ValueError, "gretap already exists for %s" % self.name + remoteip = addrlist[0].split('/')[0] + localip = None + if len(addrlist) > 1: + localip = addrlist[1].split('/')[0] + self.gretap = GreTap(session = self.session, remoteip = remoteip, + objid = None, name = None, + localip = localip, ttl = self.ttl, key = self.grekey) + self.attach(self.gretap) + + def setkey(self, key): + ''' Set the GRE key used for the GreTap device. This needs to be set + prior to instantiating the GreTap device (before addrconfig). + ''' + self.grekey = key diff --git a/daemon/core/netns/vnode.py b/daemon/core/netns/vnode.py new file mode 100644 index 00000000..3c106a7b --- /dev/null +++ b/daemon/core/netns/vnode.py @@ -0,0 +1,402 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: Tom Goff +# Jeff Ahrenholz +# +''' +vnode.py: PyCoreNode and LxcNode classes that implement the network namespace +virtual node. +''' + +import os, signal, sys, subprocess, vnodeclient, threading, string, shutil +import random, time +from core.api import coreapi +from core.misc.utils import * +from core.constants import * +from core.coreobj import PyCoreObj, PyCoreNode, PyCoreNetIf, Position +from core.netns.vif import VEth, TunTap +from core.emane.nodes import EmaneNode + +checkexec([IP_BIN]) + +class SimpleLxcNode(PyCoreNode): + def __init__(self, session, objid = None, name = None, nodedir = None, + verbose = False, start = True): + PyCoreNode.__init__(self, session, objid, name, verbose=verbose, + start=start) + self.nodedir = nodedir + self.ctrlchnlname = \ + os.path.abspath(os.path.join(self.session.sessiondir, self.name)) + self.vnodeclient = None + self.pid = None + self.up = False + self.lock = threading.RLock() + self._mounts = [] + + def alive(self): + try: + os.kill(self.pid, 0) + except OSError: + return False + return True + + def startup(self): + ''' Start a new namespace node by invoking the vnoded process that + allocates a new namespace. Bring up the loopback device and set + the hostname. + ''' + if self.up: + raise Exception, "already up" + vnoded = ["%s/vnoded" % CORE_SBIN_DIR, "-v", "-c", self.ctrlchnlname, + "-l", self.ctrlchnlname + ".log", + "-p", self.ctrlchnlname + ".pid"] + if self.nodedir: + vnoded += ["-C", self.nodedir] + try: + tmp = subprocess.Popen(vnoded, stdout = subprocess.PIPE, + env = self.session.getenviron(state=False)) + except OSError, e: + msg = "error running vnoded command: %s (%s)" % (vnoded, e) + self.exception(coreapi.CORE_EXCP_LEVEL_FATAL, + "SimpleLxcNode.startup()", msg) + raise Exception, msg + try: + self.pid = int(tmp.stdout.read()) + tmp.stdout.close() + except Exception: + msg = "vnoded failed to create a namespace; " + msg += "check kernel support and user priveleges" + self.exception(coreapi.CORE_EXCP_LEVEL_FATAL, + "SimpleLxcNode.startup()", msg) + if tmp.wait(): + raise Exception, ("command failed: %s" % vnoded) + self.vnodeclient = vnodeclient.VnodeClient(self.name, + self.ctrlchnlname) + self.info("bringing up loopback interface") + self.cmd([IP_BIN, "link", "set", "lo", "up"]) + self.info("setting hostname: %s" % self.name) + self.cmd(["hostname", self.name]) + self.up = True + + def shutdown(self): + if not self.up: + return + while self._mounts: + source, target = self._mounts.pop(-1) + self.umount(target) + #print "XXX del vnodeclient:", self.vnodeclient + # XXX XXX XXX this causes a serious crash + #del self.vnodeclient + for netif in self.netifs(): + netif.shutdown() + try: + os.kill(self.pid, signal.SIGTERM) + os.waitpid(self.pid, 0) + except OSError: + pass + try: + os.unlink(self.ctrlchnlname) + except OSError: + pass + self._netif.clear() + #del self.session + # print "XXX del vnodeclient:", self.vnodeclient + del self.vnodeclient + self.up = False + + def cmd(self, args, wait = True): + return self.vnodeclient.cmd(args, wait) + + def cmdresult(self, args): + return self.vnodeclient.cmdresult(args) + + def popen(self, args): + return self.vnodeclient.popen(args) + + def icmd(self, args): + return self.vnodeclient.icmd(args) + + def redircmd(self, infd, outfd, errfd, args, wait = True): + return self.vnodeclient.redircmd(infd, outfd, errfd, args, wait) + + def term(self, sh = "/bin/sh"): + return self.vnodeclient.term(sh = sh) + + def termcmdstring(self, sh = "/bin/sh"): + return self.vnodeclient.termcmdstring(sh = sh) + + def shcmd(self, cmdstr, sh = "/bin/sh"): + return self.vnodeclient.shcmd(cmdstr, sh = sh) + + def boot(self): + pass + + def mount(self, source, target): + source = os.path.abspath(source) + self.info("mounting %s at %s" % (source, target)) + try: + shcmd = "mkdir -p '%s' && %s -n --bind '%s' '%s'" % \ + (target, MOUNT_BIN, source, target) + self.shcmd(shcmd) + self._mounts.append((source, target)) + except: + self.warn("mounting failed for %s at %s" % (source, target)) + + def umount(self, target): + self.info("unmounting '%s'" % target) + try: + self.cmd([UMOUNT_BIN, "-n", "-l", target]) + except: + self.warn("unmounting failed for %s" % target) + + def newifindex(self): + with self.lock: + return PyCoreNode.newifindex(self) + + def newveth(self, ifindex = None, ifname = None, net = None): + self.lock.acquire() + try: + if ifindex is None: + ifindex = self.newifindex() + if ifname is None: + ifname = "eth%d" % ifindex + sessionid = self.session.shortsessionid() + name = "n%s.%s.%s" % (self.objid, ifindex, sessionid) + localname = "n%s.%s.%s" % (self.objid, ifname, sessionid) + ifclass = VEth + veth = ifclass(node = self, name = name, localname = localname, + mtu = 1500, net = net, start = self.up) + if self.up: + check_call([IP_BIN, "link", "set", veth.name, + "netns", str(self.pid)]) + self.cmd([IP_BIN, "link", "set", veth.name, "name", ifname]) + veth.name = ifname + try: + self.addnetif(veth, ifindex) + except: + veth.shutdown() + del veth + raise + return ifindex + finally: + self.lock.release() + + def newtuntap(self, ifindex = None, ifname = None, net = None): + self.lock.acquire() + try: + if ifindex is None: + ifindex = self.newifindex() + if ifname is None: + ifname = "eth%d" % ifindex + sessionid = self.session.shortsessionid() + localname = "n%s.%s.%s" % (self.objid, ifindex, sessionid) + name = ifname + ifclass = TunTap + tuntap = ifclass(node = self, name = name, localname = localname, + mtu = 1500, net = net, start = self.up) + try: + self.addnetif(tuntap, ifindex) + except: + tuntap.shutdown() + del tuntap + raise + return ifindex + finally: + self.lock.release() + + def sethwaddr(self, ifindex, addr): + self._netif[ifindex].sethwaddr(addr) + if self.up: + (status, result) = self.cmdresult([IP_BIN, "link", "set", "dev", + self.ifname(ifindex), "address", str(addr)]) + if status: + self.exception(coreapi.CORE_EXCP_LEVEL_ERROR, + "SimpleLxcNode.sethwaddr()", + "error setting MAC address %s" % str(addr)) + def addaddr(self, ifindex, addr): + if self.up: + self.cmd([IP_BIN, "addr", "add", str(addr), + "dev", self.ifname(ifindex)]) + self._netif[ifindex].addaddr(addr) + + def deladdr(self, ifindex, addr): + try: + self._netif[ifindex].deladdr(addr) + except ValueError: + self.warn("trying to delete unknown address: %s" % addr) + if self.up: + self.cmd([IP_BIN, "addr", "del", str(addr), + "dev", self.ifname(ifindex)]) + + valid_deladdrtype = ("inet", "inet6", "inet6link") + def delalladdr(self, ifindex, addrtypes = valid_deladdrtype): + addr = self.getaddr(self.ifname(ifindex), rescan = True) + for t in addrtypes: + if t not in self.valid_deladdrtype: + raise ValueError, "addr type must be in: " + \ + " ".join(self.valid_deladdrtype) + for a in addr[t]: + self.deladdr(ifindex, a) + # update cached information + self.getaddr(self.ifname(ifindex), rescan = True) + + def ifup(self, ifindex): + if self.up: + self.cmd([IP_BIN, "link", "set", self.ifname(ifindex), "up"]) + + def newnetif(self, net = None, addrlist = [], hwaddr = None, + ifindex = None, ifname = None): + self.lock.acquire() + try: + if isinstance(net, EmaneNode): + ifindex = self.newtuntap(ifindex = ifindex, ifname = ifname, + net = net) + # TUN/TAP is not ready for addressing yet; the device may + # take some time to appear, and installing it into a + # namespace after it has been bound removes addressing; + # save addresses with the interface now + self.attachnet(ifindex, net) + netif = self.netif(ifindex) + netif.sethwaddr(hwaddr) + for addr in maketuple(addrlist): + netif.addaddr(addr) + return ifindex + else: + ifindex = self.newveth(ifindex = ifindex, ifname = ifname, + net = net) + if net is not None: + self.attachnet(ifindex, net) + if hwaddr: + self.sethwaddr(ifindex, hwaddr) + for addr in maketuple(addrlist): + self.addaddr(ifindex, addr) + self.ifup(ifindex) + return ifindex + finally: + self.lock.release() + + def connectnode(self, ifname, othernode, otherifname): + tmplen = 8 + tmp1 = "tmp." + "".join([random.choice(string.ascii_lowercase) + for x in xrange(tmplen)]) + tmp2 = "tmp." + "".join([random.choice(string.ascii_lowercase) + for x in xrange(tmplen)]) + check_call([IP_BIN, "link", "add", "name", tmp1, + "type", "veth", "peer", "name", tmp2]) + + check_call([IP_BIN, "link", "set", tmp1, "netns", str(self.pid)]) + self.cmd([IP_BIN, "link", "set", tmp1, "name", ifname]) + self.addnetif(PyCoreNetIf(self, ifname), self.newifindex()) + + check_call([IP_BIN, "link", "set", tmp2, "netns", str(othernode.pid)]) + othernode.cmd([IP_BIN, "link", "set", tmp2, "name", otherifname]) + othernode.addnetif(PyCoreNetIf(othernode, otherifname), + othernode.newifindex()) + + def addfile(self, srcname, filename): + shcmd = "mkdir -p $(dirname '%s') && mv '%s' '%s' && sync" % \ + (filename, srcname, filename) + self.shcmd(shcmd) + + def getaddr(self, ifname, rescan = False): + return self.vnodeclient.getaddr(ifname = ifname, rescan = rescan) + + def netifstats(self, ifname = None): + return self.vnodeclient.netifstats(ifname = ifname) + + +class LxcNode(SimpleLxcNode): + def __init__(self, session, objid = None, name = None, + nodedir = None, bootsh = "boot.sh", verbose = False, + start = True): + super(LxcNode, self).__init__(session = session, objid = objid, + name = name, nodedir = nodedir, + verbose = verbose, start = start) + self.bootsh = bootsh + if start: + self.startup() + + def boot(self): + self.session.services.bootnodeservices(self) + + def validate(self): + self.session.services.validatenodeservices(self) + + def startup(self): + self.lock.acquire() + try: + self.makenodedir() + super(LxcNode, self).startup() + self.privatedir("/var/run") + self.privatedir("/var/log") + except OSError, e: + self.warn("Error with LxcNode.startup(): %s" % e) + self.exception(coreapi.CORE_EXCP_LEVEL_ERROR, + "LxcNode.startup()", "%s" % e) + finally: + self.lock.release() + + def shutdown(self): + if not self.up: + return + self.lock.acquire() + # services are instead stopped when session enters datacollect state + #self.session.services.stopnodeservices(self) + try: + super(LxcNode, self).shutdown() + finally: + self.rmnodedir() + self.lock.release() + + def privatedir(self, path): + if path[0] != "/": + raise ValueError, "path not fully qualified: " + path + hostpath = os.path.join(self.nodedir, path[1:].replace("/", ".")) + try: + os.mkdir(hostpath) + except OSError: + pass + except Exception, e: + raise Exception, e + self.mount(hostpath, path) + + def hostfilename(self, filename): + ''' Return the name of a node's file on the host filesystem. + ''' + dirname, basename = os.path.split(filename) + if not basename: + raise ValueError, "no basename for filename: " + filename + if dirname and dirname[0] == "/": + dirname = dirname[1:] + dirname = dirname.replace("/", ".") + dirname = os.path.join(self.nodedir, dirname) + return os.path.join(dirname, basename) + + def opennodefile(self, filename, mode = "w"): + hostfilename = self.hostfilename(filename) + dirname, basename = os.path.split(hostfilename) + if not os.path.isdir(dirname): + os.makedirs(dirname, mode = 0755) + return open(hostfilename, mode) + + def nodefile(self, filename, contents, mode = 0644): + f = self.opennodefile(filename, "w") + f.write(contents) + os.chmod(f.name, mode) + f.close() + self.info("created nodefile: '%s'; mode: 0%o" % (f.name, mode)) + + def nodefilecopy(self, filename, srcfilename, mode = None): + ''' Copy a file to a node, following symlinks and preserving metadata. + Change file mode if specified. + ''' + hostfilename = self.hostfilename(filename) + shutil.copy2(srcfilename, hostfilename) + if mode is not None: + os.chmod(hostfilename, mode) + self.info("copied nodefile: '%s'; mode: %s" % (hostfilename, mode)) + + diff --git a/daemon/core/netns/vnodeclient.py b/daemon/core/netns/vnodeclient.py new file mode 100644 index 00000000..4fe2a3dd --- /dev/null +++ b/daemon/core/netns/vnodeclient.py @@ -0,0 +1,221 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Tom Goff +# +''' +vnodeclient.py: implementation of the VnodeClient class for issuing commands +over a control channel to the vnoded process running in a network namespace. +The control channel can be accessed via calls to the vcmd Python module or +by invoking the vcmd shell command. +''' + +import os, stat, sys +from core.constants import * + +USE_VCMD_MODULE = True + +if USE_VCMD_MODULE: + import vcmd +else: + import subprocess + +VCMD = os.path.join(CORE_SBIN_DIR, "vcmd") + +class VnodeClient(object): + def __init__(self, name, ctrlchnlname): + self.name = name + self.ctrlchnlname = ctrlchnlname + if USE_VCMD_MODULE: + self.cmdchnl = vcmd.VCmd(self.ctrlchnlname) + else: + self.cmdchnl = None + self._addr = {} + + def warn(self, msg): + print >> sys.stderr, "%s: %s" % (self.name, msg) + + def connected(self): + if USE_VCMD_MODULE: + return self.cmdchnl.connected() + else: + return True + + def cmd(self, args, wait = True): + ''' Execute a command on a node and return the status (return code). + ''' + if USE_VCMD_MODULE: + if not self.cmdchnl.connected(): + raise ValueError, "self.cmdchnl not connected" + tmp = self.cmdchnl.qcmd(args) + if not wait: + return tmp + tmp = tmp.wait() + else: + if wait: + mode = os.P_WAIT + else: + mode = os.P_NOWAIT + tmp = os.spawnlp(mode, VCMD, VCMD, "-c", + self.ctrlchnlname, "-q", "--", *args) + if not wait: + return tmp + if tmp: + self.warn("cmd exited with status %s: %s" % (tmp, str(args))) + return tmp + + def cmdresult(self, args): + ''' Execute a command on a node and return a tuple containing the + exit status and result string. stderr output + is folded into the stdout result string. + ''' + cmdid, cmdin, cmdout, cmderr = self.popen(args) + result = cmdout.read() + result += cmderr.read() + cmdin.close() + cmdout.close() + cmderr.close() + status = cmdid.wait() + return (status, result) + + def popen(self, args): + if USE_VCMD_MODULE: + if not self.cmdchnl.connected(): + raise ValueError, "self.cmdchnl not connected" + return self.cmdchnl.popen(args) + else: + cmd = [VCMD, "-c", self.ctrlchnlname, "--"] + cmd.extend(args) + tmp = subprocess.Popen(cmd, stdin = subprocess.PIPE, + stdout = subprocess.PIPE, + stderr = subprocess.PIPE) + return tmp, tmp.stdin, tmp.stdout, tmp.stderr + + def icmd(self, args): + return os.spawnlp(os.P_WAIT, VCMD, VCMD, "-c", self.ctrlchnlname, + "--", *args) + + def redircmd(self, infd, outfd, errfd, args, wait = True): + ''' + Execute a command on a node with standard input, output, and + error redirected according to the given file descriptors. + ''' + if not USE_VCMD_MODULE: + raise NotImplementedError + if not self.cmdchnl.connected(): + raise ValueError, "self.cmdchnl not connected" + tmp = self.cmdchnl.redircmd(infd, outfd, errfd, args) + if not wait: + return tmp + tmp = tmp.wait() + if tmp: + self.warn("cmd exited with status %s: %s" % (tmp, str(args))) + return tmp + + def term(self, sh = "/bin/sh"): + return os.spawnlp(os.P_NOWAIT, "xterm", "xterm", "-ut", + "-title", self.name, "-e", + VCMD, "-c", self.ctrlchnlname, "--", sh) + + def termcmdstring(self, sh = "/bin/sh"): + return "%s -c %s -- %s" % (VCMD, self.ctrlchnlname, sh) + + def shcmd(self, cmdstr, sh = "/bin/sh"): + return self.cmd([sh, "-c", cmdstr]) + + def getaddr(self, ifname, rescan = False): + if ifname in self._addr and not rescan: + return self._addr[ifname] + tmp = {"ether": [], "inet": [], "inet6": [], "inet6link": []} + cmd = [IP_BIN, "addr", "show", "dev", ifname] + cmdid, cmdin, cmdout, cmderr = self.popen(cmd) + cmdin.close() + for line in cmdout: + line = line.strip().split() + if line[0] == "link/ether": + tmp["ether"].append(line[1]) + elif line[0] == "inet": + tmp["inet"].append(line[1]) + elif line[0] == "inet6": + if line[3] == "global": + tmp["inet6"].append(line[1]) + elif line[3] == "link": + tmp["inet6link"].append(line[1]) + else: + self.warn("unknown scope: %s" % line[3]) + else: + pass + err = cmderr.read() + cmdout.close() + cmderr.close() + status = cmdid.wait() + if status: + self.warn("nonzero exist status (%s) for cmd: %s" % (status, cmd)) + if err: + self.warn("error output: %s" % err) + self._addr[ifname] = tmp + return tmp + + def netifstats(self, ifname = None): + stats = {} + cmd = ["cat", "/proc/net/dev"] + cmdid, cmdin, cmdout, cmderr = self.popen(cmd) + cmdin.close() + # ignore first line + cmdout.readline() + # second line has count names + tmp = cmdout.readline().strip().split("|") + rxkeys = tmp[1].split() + txkeys = tmp[2].split() + for line in cmdout: + line = line.strip().split() + devname, tmp = line[0].split(":") + if tmp: + line.insert(1, tmp) + stats[devname] = {"rx": {}, "tx": {}} + field = 1 + for count in rxkeys: + stats[devname]["rx"][count] = int(line[field]) + field += 1 + for count in txkeys: + stats[devname]["tx"][count] = int(line[field]) + field += 1 + err = cmderr.read() + cmdout.close() + cmderr.close() + status = cmdid.wait() + if status: + self.warn("nonzero exist status (%s) for cmd: %s" % (status, cmd)) + if err: + self.warn("error output: %s" % err) + if ifname is not None: + return stats[ifname] + else: + return stats + +def createclients(sessiondir, clientcls = VnodeClient, + cmdchnlfilterfunc = None): + direntries = map(lambda x: os.path.join(sessiondir, x), + os.listdir(sessiondir)) + cmdchnls = filter(lambda x: stat.S_ISSOCK(os.stat(x).st_mode), direntries) + if cmdchnlfilterfunc: + cmdchnls = filter(cmdchnlfilterfunc, cmdchnls) + cmdchnls.sort() + return map(lambda x: clientcls(os.path.basename(x), x), cmdchnls) + +def createremoteclients(sessiondir, clientcls = VnodeClient, + filterfunc = None): + ''' Creates remote VnodeClients, for nodes emulated on other machines. The + session.Broker writes a n1.conf/server file having the server's info. + ''' + direntries = map(lambda x: os.path.join(sessiondir, x), + os.listdir(sessiondir)) + nodedirs = filter(lambda x: stat.S_ISDIR(os.stat(x).st_mode), direntries) + nodedirs = filter(lambda x: os.path.exists(os.path.join(x, "server")), + nodedirs) + if filterfunc: + nodedirs = filter(filterfunc, nodedirs) + nodedirs.sort() + return map(lambda x: clientcls(x), nodedirs) diff --git a/daemon/core/phys/__init__.py b/daemon/core/phys/__init__.py new file mode 100644 index 00000000..e69de29b diff --git a/daemon/core/phys/pnodes.py b/daemon/core/phys/pnodes.py new file mode 100644 index 00000000..49b15982 --- /dev/null +++ b/daemon/core/phys/pnodes.py @@ -0,0 +1,268 @@ +# +# CORE +# Copyright (c)2011-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' PhysicalNode class for including real systems in the emulated network. +''' +import os, threading, subprocess + +from core.misc.ipaddr import * +from core.misc.utils import * +from core.constants import * +from core.api import coreapi +from core.coreobj import PyCoreNode, PyCoreNetIf +from core.emane.nodes import EmaneNode +if os.uname()[0] == "Linux": + from core.netns.vnet import LxBrNet + from core.netns.vif import GreTap +elif os.uname()[0] == "FreeBSD": + from core.bsd.vnet import NetgraphNet + + +class PhysicalNode(PyCoreNode): + def __init__(self, session, objid = None, name = None, + nodedir = None, verbose = False, start = True): + PyCoreNode.__init__(self, session, objid, name, verbose=verbose, + start=start) + self.nodedir = nodedir + self.up = start + self.lock = threading.RLock() + self._mounts = [] + if start: + self.startup() + + def boot(self): + self.session.services.bootnodeservices(self) + + def validate(self): + self.session.services.validatenodeservices(self) + + def startup(self): + self.lock.acquire() + try: + self.makenodedir() + #self.privatedir("/var/run") + #self.privatedir("/var/log") + except OSError, e: + self.exception(coreapi.CORE_EXCP_LEVEL_ERROR, + "PhysicalNode.startup()", e) + finally: + self.lock.release() + + def shutdown(self): + if not self.up: + return + self.lock.acquire() + while self._mounts: + source, target = self._mounts.pop(-1) + self.umount(target) + for netif in self.netifs(): + netif.shutdown() + self.rmnodedir() + self.lock.release() + + + def termcmdstring(self, sh = "/bin/sh"): + ''' The broker will add the appropriate SSH command to open a terminal + on this physical node. + ''' + return sh + + def cmd(self, args, wait = True): + ''' run a command on the physical node + ''' + os.chdir(self.nodedir) + try: + if wait: + # os.spawnlp(os.P_WAIT, args) + subprocess.call(args) + else: + # os.spawnlp(os.P_NOWAIT, args) + subprocess.Popen(args) + except CalledProcessError, e: + self.warn("cmd exited with status %s: %s" % (e, str(args))) + + def cmdresult(self, args): + ''' run a command on the physical node and get the result + ''' + os.chdir(self.nodedir) + # in Python 2.7 we can use subprocess.check_output() here + tmp = subprocess.Popen(args, stdin = subprocess.PIPE, + stdout = subprocess.PIPE, + stderr = subprocess.PIPE) + result = tmp.stdout.read() + result += tmp.stderr.read() + tmp.stdin.close() + tmp.stdout.close() + tmp.stderr.close() + status = tmp.wait() + return (status, result) + + def shcmd(self, cmdstr, sh = "/bin/sh"): + return self.cmd([sh, "-c", cmdstr]) + + def sethwaddr(self, ifindex, addr): + ''' same as SimpleLxcNode.sethwaddr() + ''' + self._netif[ifindex].sethwaddr(addr) + ifname = self.ifname(ifindex) + if self.up: + (status, result) = self.cmdresult([IP_BIN, "link", "set", "dev", + ifname, "address", str(addr)]) + if status: + self.exception(coreapi.CORE_EXCP_LEVEL_ERROR, + "PhysicalNode.sethwaddr()", + "error setting MAC address %s" % str(addr)) + + def addaddr(self, ifindex, addr): + ''' same as SimpleLxcNode.addaddr() + ''' + if self.up: + self.cmd([IP_BIN, "addr", "add", str(addr), + "dev", self.ifname(ifindex)]) + self._netif[ifindex].addaddr(addr) + + def deladdr(self, ifindex, addr): + ''' same as SimpleLxcNode.deladdr() + ''' + try: + self._netif[ifindex].deladdr(addr) + except ValueError: + self.warn("trying to delete unknown address: %s" % addr) + if self.up: + self.cmd([IP_BIN, "addr", "del", str(addr), + "dev", self.ifname(ifindex)]) + + def adoptnetif(self, netif, ifindex, hwaddr, addrlist): + ''' The broker builds a GreTap tunnel device to this physical node. + When a link message is received linking this node to another part of + the emulation, no new interface is created; instead, adopt the + GreTap netif as the node interface. + ''' + netif.name = "gt%d" % ifindex + netif.node = self + self.addnetif(netif, ifindex) + # use a more reasonable name, e.g. "gt0" instead of "gt.56286.150" + if self.up: + self.cmd([IP_BIN, "link", "set", "dev", netif.localname, "down"]) + self.cmd([IP_BIN, "link", "set", netif.localname, "name", netif.name]) + netif.localname = netif.name + if hwaddr: + self.sethwaddr(ifindex, hwaddr) + for addr in maketuple(addrlist): + self.addaddr(ifindex, addr) + if self.up: + self.cmd([IP_BIN, "link", "set", "dev", netif.localname, "up"]) + + def linkconfig(self, netif, bw = None, delay = None, + loss = None, duplicate = None, jitter = None, netif2 = None): + ''' Apply tc queing disciplines using LxBrNet.linkconfig() + ''' + if os.uname()[0] == "Linux": + netcls = LxBrNet + elif os.uname()[0] == "FreeBSD": + netcls = NetgraphNet + else: + raise NotImplementedError, "unsupported platform" + # borrow the tc qdisc commands from LxBrNet.linkconfig() + tmp = netcls(session=self.session, start=False) + tmp.up = True + tmp.linkconfig(netif, bw=bw, delay=delay, loss=loss, + duplicate=duplicate, jitter=jitter, netif2=netif2) + del tmp + + def newifindex(self): + self.lock.acquire() + try: + while self.ifindex in self._netif: + self.ifindex += 1 + ifindex = self.ifindex + self.ifindex += 1 + return ifindex + finally: + self.lock.release() + + def newnetif(self, net = None, addrlist = [], hwaddr = None, + ifindex = None, ifname = None): + if self.up and net is None: + raise NotImplementedError + if ifindex is None: + ifindex = self.newifindex() + + if self.up: + # this is reached when this node is linked to a network node + # tunnel to net not built yet, so build it now and adopt it + gt = self.session.broker.addnettunnel(net.objid) + if gt is None or len(gt) != 1: + self.session.warn("Error building tunnel from PhysicalNode." + "newnetif()") + gt = gt[0] + net.detach(gt) + self.adoptnetif(gt, ifindex, hwaddr, addrlist) + return ifindex + + # this is reached when configuring services (self.up=False) + if ifname is None: + ifname = "gt%d" % ifindex + netif = GreTap(node = self, name = ifname, session = self.session, + start = False) + self.adoptnetif(netif, ifindex, hwaddr, addrlist) + return ifindex + + + def privatedir(self, path): + if path[0] != "/": + raise ValueError, "path not fully qualified: " + path + hostpath = os.path.join(self.nodedir, path[1:].replace("/", ".")) + try: + os.mkdir(hostpath) + except OSError: + pass + except Exception, e: + raise Exception, e + self.mount(hostpath, path) + + def mount(self, source, target): + source = os.path.abspath(source) + self.info("mounting %s at %s" % (source, target)) + try: + os.makedirs(target) + except OSError: + pass + try: + self.cmd([MOUNT_BIN, "--bind", source, target]) + self._mounts.append((source, target)) + except: + self.warn("mounting failed for %s at %s" % (source, target)) + + def umount(self, target): + self.info("unmounting '%s'" % target) + try: + self.cmd([UMOUNT_BIN, "-l", target]) + except: + self.warn("unmounting failed for %s" % target) + + def opennodefile(self, filename, mode = "w"): + dirname, basename = os.path.split(filename) + if not basename: + raise ValueError, "no basename for filename: " + filename + if dirname and dirname[0] == "/": + dirname = dirname[1:] + dirname = dirname.replace("/", ".") + dirname = os.path.join(self.nodedir, dirname) + if not os.path.isdir(dirname): + os.makedirs(dirname, mode = 0755) + hostfilename = os.path.join(dirname, basename) + return open(hostfilename, mode) + + def nodefile(self, filename, contents, mode = 0644): + f = self.opennodefile(filename, "w") + f.write(contents) + os.chmod(f.name, mode) + f.close() + self.info("created nodefile: '%s'; mode: 0%o" % (f.name, mode)) + + diff --git a/daemon/core/pycore.py b/daemon/core/pycore.py new file mode 100644 index 00000000..5743c4b9 --- /dev/null +++ b/daemon/core/pycore.py @@ -0,0 +1,27 @@ +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. + +""" +This is a convenience module that imports a set of platform-dependent +defaults. +""" + +from misc.utils import ensurepath +ensurepath(["/sbin", "/bin", "/usr/sbin", "/usr/bin"]) +del ensurepath + +from session import Session + +import os + +if os.uname()[0] == "Linux": + from netns import nodes + try: + from xen import xen + except ImportError: + #print "Xen support disabled." + pass +elif os.uname()[0] == "FreeBSD": + from bsd import nodes +from phys import pnodes +del os diff --git a/daemon/core/sdt.py b/daemon/core/sdt.py new file mode 100644 index 00000000..71fc8411 --- /dev/null +++ b/daemon/core/sdt.py @@ -0,0 +1,202 @@ +# +# CORE +# Copyright (c)2012-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +sdt.py: Scripted Display Tool (SDT3D) helper +''' + +from core.constants import * +from core.api import coreapi +from coreobj import PyCoreNet, PyCoreObj +from core.netns import nodes +import socket + +class Sdt(object): + ''' Helper class for exporting session objects to NRL's SDT3D. + The connect() method initializes the display, and can be invoked + when a node position or link has changed. + ''' + DEFAULT_SDT_PORT = 5000 + # default altitude (in meters) for flyto view + DEFAULT_ALT = 2500 + # TODO: read in user's nodes.conf here; below are default node types + # from the GUI + DEFAULT_SPRITES = [('router', 'router.gif'), ('host', 'host.gif'), + ('PC', 'pc.gif'), ('mdr', 'mdr.gif'), + ('prouter', 'router_green.gif'), ('xen', 'xen.gif'), + ('hub', 'hub.gif'), ('lanswitch','lanswitch.gif'), + ('wlan', 'wlan.gif'), ('rj45','rj45.gif'), + ('tunnel','tunnel.gif'), + ] + + def __init__(self, session): + self.session = session + self.sock = None + self.connected = False + self.showerror = True + self.verbose = self.session.getcfgitembool('verbose', False) + self.address = ("127.0.0.1", self.DEFAULT_SDT_PORT) + + def is_enabled(self): + if not hasattr(self.session.options, 'enablesdt'): + return False + if self.session.options.enablesdt == '1': + return True + return False + + def connect(self, flags=0): + if not self.is_enabled(): + return False + if self.connected: + return True + if self.showerror: + self.session.info("connecting to SDT at %s:%s" % self.address) + if self.sock is None: + self.sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) + try: + self.sock.connect(self.address) + except Exception, e: + self.session.warn("SDT socket connect error: %s" % e) + return False + if not self.initialize(): + return False + self.connected = True + # refresh all objects in SDT3D when connecting after session start + if not flags & coreapi.CORE_API_ADD_FLAG: + if not self.sendobjs(): + return False + return True + + def initialize(self): + ''' Load icon sprites, and fly to the reference point location on + the virtual globe. + ''' + if not self.cmd('path "%s/icons/normal"' % CORE_DATA_DIR): + return False + # send node type to icon mappings + for (type, icon) in self.DEFAULT_SPRITES: + if not self.cmd('sprite %s image %s' % (type, icon)): + return False + (lat, long) = self.session.location.refgeo[:2] + return self.cmd('flyto %.6f,%.6f,%d' % (long, lat, self.DEFAULT_ALT)) + + def disconnect(self): + try: + self.sock.close() + except: + pass + self.sock = None + self.connected = False + + def shutdown(self): + ''' Invoked from Session.shutdown() and Session.checkshutdown(). + ''' + # TODO: clear SDT display here? + self.disconnect() + self.showerror = True + + def cmd(self, cmdstr): + ''' Send an SDT command over a UDP socket. socket.sendall() is used + as opposed to socket.sendto() because an exception is raised when there + is no socket listener. + ''' + if self.sock is None: + return False + try: + if self.verbose: + self.session.info("sdt: %s" % cmdstr) + self.sock.sendall("%s\n" % cmdstr) + return True + except Exception, e: + if self.showerror: + self.session.warn("SDT connection error: %s" % e) + self.showerror = False + self.connected = False + return False + + def updatenode(self, node, flags, x, y, z): + ''' Node is updated from a Node Message or mobility script. + ''' + if node is None: + return + if not self.connect(): + return + if flags & coreapi.CORE_API_DEL_FLAG: + self.cmd('delete node,%d' % node.objid) + return + (lat, long, alt) = self.session.location.getgeo(x, y, z) + pos = "pos %.6f,%.6f,%.6f" % (long, lat, alt) + if flags & coreapi.CORE_API_ADD_FLAG: + type = node.type + if node.icon is not None: + type = node.name + self.cmd('sprite %s image %s' % (type, node.icon)) + self.cmd('node %d type %s label on,"%s" %s' % \ + (node.objid, type, node.name, pos)) + else: + self.cmd('node %d %s' % (node.objid, pos)) + + def updatenodegeo(self, node, lat, long, alt): + ''' Node is updated upon receiving an EMANE Location Event. + ''' + if node is None: + return + if not self.connect(): + return + pos = "pos %.6f,%.6f,%.6f" % (long, lat, alt) + self.cmd('node %d %s' % (node.objid, pos)) + + def updatelink(self, node1num, node2num, flags, wireless=False): + ''' Link is updated from a Link Message or by a wireless model. + ''' + if node1num is None or node2num is None: + return + if not self.connect(): + return + if flags & coreapi.CORE_API_DEL_FLAG: + self.cmd('delete link,%s,%s' % (node1num, node2num)) + elif flags & coreapi.CORE_API_ADD_FLAG: + attr = "" + if wireless: + attr = " line green" + self.cmd('link %s,%s%s' % (node1num, node2num, attr)) + + def sendobjs(self): + ''' Session has already started, and the SDT3D GUI later connects. + Send all node and link objects for display. Otherwise, nodes and links + will only be drawn when they have been updated. + ''' + nets = [] + with self.session._objslock: + for obj in self.session.objs(): + if isinstance(obj, PyCoreNet): + nets.append(obj) + if not isinstance(obj, PyCoreObj): + continue + (x, y, z) = obj.getposition() + if x is None or y is None: + continue + self.updatenode(obj, coreapi.CORE_API_ADD_FLAG, x, y, z) + for net in nets: + # use tolinkmsgs() to handle various types of links + msgs = net.tolinkmsgs(flags = coreapi.CORE_API_ADD_FLAG) + for msg in msgs: + msghdr = msg[:coreapi.CoreMessage.hdrsiz] + flags = coreapi.CoreMessage.unpackhdr(msghdr)[1] + m = coreapi.CoreLinkMessage(flags, msghdr, + msg[coreapi.CoreMessage.hdrsiz:]) + n1num = m.gettlv(coreapi.CORE_TLV_LINK_N1NUMBER) + n2num = m.gettlv(coreapi.CORE_TLV_LINK_N2NUMBER) + link_msg_type = m.gettlv(coreapi.CORE_TLV_LINK_TYPE) + if isinstance(net, nodes.WlanNode) or \ + isinstance(net, nodes.EmaneNode): + if (n1num == net.objid): + continue + wl = (link_msg_type == coreapi.CORE_LINK_WIRELESS) + self.updatelink(n1num, n2num, coreapi.CORE_API_ADD_FLAG, wl) + + diff --git a/daemon/core/service.py b/daemon/core/service.py new file mode 100644 index 00000000..d01352a0 --- /dev/null +++ b/daemon/core/service.py @@ -0,0 +1,760 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +service.py: definition of CoreService class that is subclassed to define +startup services and routing for nodes. A service is typically a daemon +program launched when a node starts that provides some sort of +service. The CoreServices class handles configuration messages for sending +a list of available services to the GUI and for configuring individual +services. +''' + +import sys, os, shlex + +from itertools import repeat +from core.api import coreapi +from core.conf import ConfigurableManager, Configurable +from core.misc.utils import maketuplefromstr, expandcorepath + +servicelist = [] + +def addservice(service): + global servicelist + i = 0 + found = -1 + for s in servicelist: + if s._group == service._group: + found = i + elif (found >= 0): + # insert service into list next to existing group + i = found + 1 + break + i += 1 + servicelist.insert(i, service) + +class CoreServices(ConfigurableManager): + ''' Class for interacting with a list of available startup services for + nodes. Mostly used to convert a CoreService into a Config API + message. This class lives in the Session object and remembers + the default services configured for each node type, and any + custom service configuration. A CoreService is not a Configurable. + ''' + _name = "services" + _type = coreapi.CORE_TLV_REG_UTILITY + + def __init__(self, session): + ConfigurableManager.__init__(self, session) + # dict of default services tuples, key is node type + self.defaultservices = {} + # dict of tuple of service objects, key is node number + self.customservices = {} + importcmd = "from core.services import *" + exec(importcmd) + paths = self.session.getcfgitem('custom_services_dir') + if paths: + for path in paths.split(','): + path = path.strip() + self.importcustom(path) + + def importcustom(self, path): + ''' Import services from a myservices directory. + ''' + if not path or len(path) == 0: + return + if not os.path.isdir(path): + self.session.warn("invalid custom service directory specified" \ + ": %s" % path) + return + try: + parentdir, childdir = os.path.split(path) + if childdir == "services": + raise ValueError, "use a unique custom services dir name, " \ + "not 'services'" + sys.path.append(parentdir) + exec("from %s import *" % childdir) + except Exception, e: + self.session.warn("error importing custom services from " \ + "%s:\n%s" % (path, e)) + + def reset(self): + ''' Called when config message with reset flag is received + ''' + self.defaultservices.clear() + self.customservices.clear() + + def get(self): + ''' Get the list of available services. + ''' + global servicelist + return servicelist + + def getservicebyname(self, name): + ''' Get a service class from the global servicelist given its name. + Returns None when the name is not found. + ''' + global servicelist + for s in servicelist: + if s._name == name: + return s + return None + + def getdefaultservices(self, type): + ''' Get the list of default services that should be enabled for a + node for the given node type. + ''' + r = [] + if type in self.defaultservices: + defaults = self.defaultservices[type] + for name in defaults: + s = self.getservicebyname(name) + if s is None: + self.session.warn("default service %s is unknown" % name) + else: + r.append(s) + return r + + def getcustomservice(self, objid, service): + ''' Get any custom service configured for the given node that + matches the specified service name. If no custom service + is found, return the specified service. + ''' + if objid in self.customservices: + for s in self.customservices[objid]: + if s._name == service._name: + return s + return service + + def setcustomservice(self, objid, service, values): + ''' Store service customizations in an instantiated service object + using a list of values that came from a config message. + ''' + if service._custom: + s = service + else: + # instantiate the class, for storing config customization + s = service() + # values are new key=value format; not all keys need to be present + # a missing key means go with the default + if Configurable.haskeyvalues(values): + for v in values: + key, value = v.split('=', 1) + s.setvalue(key, value) + # old-style config, list of values + else: + s.fromvaluelist(values) + + # assume custom service already in dict + if service._custom: + return + # add the custom service to dict + if objid in self.customservices: + self.customservices[objid] += (s, ) + else: + self.customservices[objid] = (s, ) + + def addservicestonode(self, node, nodetype, services_str, verbose): + ''' Populate the node.service list using (1) the list of services + requested from the services TLV, (2) using any custom service + configuration, or (3) using the default services for this node type. + ''' + if services_str is not None: + services = services_str.split('|') + for name in services: + s = self.getservicebyname(name) + if s is None: + self.session.warn("configured service %s for node %s is " \ + "unknown" % (name, node.name)) + continue + if verbose: + self.session.info("adding configured service %s to " \ + "node %s" % (s._name, node.name)) + s = self.getcustomservice(node.objid, s) + node.addservice(s) + else: + services = self.getdefaultservices(nodetype) + for s in services: + if verbose: + self.session.info("adding default service %s to node %s" % \ + (s._name, node.name)) + s = self.getcustomservice(node.objid, s) + node.addservice(s) + + def getallconfigs(self): + ''' Return (nodenum, service) tuples for all stored configs. + Used when reconnecting to a session or opening XML. + ''' + r = [] + for nodenum in self.customservices: + for s in self.customservices[nodenum]: + r.append( (nodenum, s) ) + return r + + def getallfiles(self, service): + ''' Return all customized files stored with a service. + Used when reconnecting to a session or opening XML. + ''' + r = [] + if not service._custom: + return r + for filename in service._configs: + data = self.getservicefiledata(service, filename) + if data is None: + continue + r.append( (filename, data) ) + return r + + def bootnodeservices(self, node): + ''' Start all services on a node. + ''' + services = sorted(node.services, + key=lambda service: service._startindex) + for s in services: + try: + t = float(s._starttime) + if t > 0.0: + fn = self.bootnodeservice + self.session.evq.add_event(t, fn, node, s, services) + continue + except ValueError: + pass + self.bootnodeservice(node, s, services) + + def bootnodeservice(self, node, s, services): + ''' Start a service on a node. Create private dirs, generate config + files, and execute startup commands. + ''' + if s._custom: + self.bootnodecustomservice(node, s, services) + return + if node.verbose: + node.info("starting service %s (%s)" % (s._name, s._startindex)) + for d in s._dirs: + try: + node.privatedir(d) + except Exception, e: + node.warn("Error making node %s dir %s: %s" % \ + (node.name, d, e)) + for filename in s.getconfigfilenames(node.objid, services): + cfg = s.generateconfig(node, filename, services) + node.nodefile(filename, cfg) + for cmd in s.getstartup(node, services): + try: + # NOTE: this wait=False can be problematic! + node.cmd(shlex.split(cmd), wait = False) + except: + node.warn("error starting command %s" % cmd) + + def bootnodecustomservice(self, node, s, services): + ''' Start a custom service on a node. Create private dirs, use supplied + config files, and execute supplied startup commands. + ''' + if node.verbose: + node.info("starting service %s (%s)(custom)" % (s._name, s._startindex)) + for d in s._dirs: + try: + node.privatedir(d) + except Exception, e: + node.warn("Error making node %s dir %s: %s" % \ + (node.name, d, e)) + for i, filename in enumerate(s._configs): + if len(filename) == 0: + continue + cfg = self.getservicefiledata(s, filename) + if cfg is None: + cfg = s.generateconfig(node, filename, services) + # cfg may have a file:/// url for copying from a file + try: + if self.copyservicefile(node, filename, cfg): + continue + except IOError, e: + node.warn("Error copying service file %s" % filename) + node.exception(coreapi.CORE_EXCP_LEVEL_ERROR, + "service:%s" % s._name, + "error copying service file '%s': %s" % (filename, e)) + continue + node.nodefile(filename, cfg) + + for cmd in s._startup: + try: + # NOTE: this wait=False can be problematic! + node.cmd(shlex.split(cmd), wait = False) + except: + node.warn("error starting command %s" % cmd) + + def copyservicefile(self, node, filename, cfg): + ''' Given a configured service filename and config, determine if the + config references an existing file that should be copied. + Returns True for local files, False for generated. + ''' + if cfg[:7] == 'file://': + src = cfg[7:] + src = src.split('\n')[0] + src = expandcorepath(src, node.session, node) + # TODO: glob here + node.nodefilecopy(filename, src, mode = 0644) + return True + return False + + + def validatenodeservices(self, node): + ''' Run validation commands for all services on a node. + ''' + services = sorted(node.services, + key=lambda service: service._startindex) + for s in services: + self.validatenodeservice(node, s, services) + + def validatenodeservice(self, node, s, services): + ''' Run the validation command(s) for a service. + ''' + if node.verbose: + node.info("validating service %s (%s)" % (s._name, s._startindex)) + if s._custom: + validate_cmds = s._validate + else: + validate_cmds = s.getvalidate(node, services) + for cmd in validate_cmds: + if node.verbose: + node.info("validating service %s using: %s" % (s._name, cmd)) + try: + (status, result) = node.cmdresult(shlex.split(cmd)) + if status != 0: + raise ValueError, "non-zero exit status" + except: + node.warn("validation command '%s' failed" % cmd) + node.exception(coreapi.CORE_EXCP_LEVEL_ERROR, + "service:%s" % s._name, + "validate command failed: %s" % cmd) + + def stopnodeservices(self, node): + ''' Stop all services on a node. + ''' + services = sorted(node.services, + key=lambda service: service._startindex) + for s in services: + self.stopnodeservice(node, s) + + def stopnodeservice(self, node, s): + ''' Stop a service on a node. + ''' + for cmd in s._shutdown: + try: + # NOTE: this wait=False can be problematic! + node.cmd(shlex.split(cmd), wait = False) + except: + node.warn("error running stop command %s" % cmd) + + + def configure_request(self, msg): + ''' Receive configuration message for configuring services. + With a request flag set, a list of services has been requested. + When the opaque field is present, a specific service is being + configured or requested. + ''' + objname = msg.gettlv(coreapi.CORE_TLV_CONF_OBJ) + conftype = msg.gettlv(coreapi.CORE_TLV_CONF_TYPE) + nodenum = msg.gettlv(coreapi.CORE_TLV_CONF_NODE) + sessionnum = msg.gettlv(coreapi.CORE_TLV_CONF_SESSION) + opaque = msg.gettlv(coreapi.CORE_TLV_CONF_OPAQUE) + + # send back a list of available services + if opaque is None: + global servicelist + tf = coreapi.CONF_TYPE_FLAGS_NONE + datatypes = tuple(repeat(coreapi.CONF_DATA_TYPE_BOOL, + len(servicelist))) + vals = "|".join(repeat('0', len(servicelist))) + names = map(lambda x: x._name, servicelist) + captions = "|".join(names) + possiblevals = "" + for s in servicelist: + if s._custom_needed: + possiblevals += '1' + possiblevals += '|' + groups = self.buildgroups(servicelist) + # send back the properties for this service + else: + if nodenum is None: + return None + n = self.session.obj(nodenum) + if n is None: + self.session.warn("Request to configure service %s for " \ + "unknown node %s" % (svc._name, nodenum)) + return None + servicesstring = opaque.split(':') + services = self.servicesfromopaque(opaque, n.objid) + if len(services) < 1: + return None + if len(servicesstring) == 3: + # a file request: e.g. "service:zebra:quagga.conf" + return self.getservicefile(services, n, servicesstring[2]) + + # the first service in the list is the one being configured + svc = services[0] + # send back: + # dirs, configs, startindex, startup, shutdown, metadata, config + tf = coreapi.CONF_TYPE_FLAGS_UPDATE + datatypes = tuple(repeat(coreapi.CONF_DATA_TYPE_STRING, + len(svc.keys))) + vals = svc.tovaluelist(n, services) + captions = None + possiblevals = None + groups = None + + tlvdata = "" + if nodenum is not None: + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_NODE, + nodenum) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_OBJ, + self._name) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_TYPE, tf) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_DATA_TYPES, + datatypes) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_VALUES, + vals) + if captions: + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_CAPTIONS, + captions) + if possiblevals: + tlvdata += coreapi.CoreConfTlv.pack( + coreapi.CORE_TLV_CONF_POSSIBLE_VALUES, possiblevals) + if groups: + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_GROUPS, + groups) + if sessionnum is not None: + tlvdata += coreapi.CoreConfTlv.pack( + coreapi.CORE_TLV_CONF_SESSION, sessionnum) + if opaque: + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_OPAQUE, + opaque) + return coreapi.CoreConfMessage.pack(0, tlvdata) + + + def configure_values(self, msg, values): + ''' Receive configuration message for configuring services. + With a request flag set, a list of services has been requested. + When the opaque field is present, a specific service is being + configured or requested. + ''' + nodenum = msg.gettlv(coreapi.CORE_TLV_CONF_NODE) + opaque = msg.gettlv(coreapi.CORE_TLV_CONF_OPAQUE) + + errmsg = "services config message that I don't know how to handle" + if values is None: + self.session.info(errmsg) + return None + else: + values = values.split('|') + + if opaque is None: + # store default services for a node type in self.defaultservices[] + data_types = msg.gettlv(coreapi.CORE_TLV_CONF_DATA_TYPES) + if values is None or data_types is None or \ + data_types[0] != coreapi.CONF_DATA_TYPE_STRING: + self.session.info(errmsg) + return None + key = values.pop(0) + self.defaultservices[key] = values + self.session.info("default services for type %s set to %s" % \ + (key, values)) + else: + # store service customized config in self.customservices[] + if nodenum is None: + return None + services = self.servicesfromopaque(opaque, nodenum) + if len(services) < 1: + return None + svc = services[0] + self.setcustomservice(nodenum, svc, values) + return None + + def servicesfromopaque(self, opaque, objid): + ''' Build a list of services from an opaque data string. + ''' + services = [] + servicesstring = opaque.split(':') + if servicesstring[0] != "service": + return [] + servicenames = servicesstring[1].split(',') + for name in servicenames: + s = self.getservicebyname(name) + s = self.getcustomservice(objid, s) + if s is None: + self.session.warn("Request for unknown service '%s'" % name) + return [] + services.append(s) + return services + + def buildgroups(self, servicelist): + ''' Build a string of groups for use in a configuration message given + a list of services. The group list string has the format + "title1:1-5|title2:6-9|10-12", where title is an optional group title + and i-j is a numeric range of value indices; groups are + separated by commas. + ''' + i = 0 + r = "" + lastgroup = "" + for service in servicelist: + i += 1 + group = service._group + if group != lastgroup: + lastgroup = group + # finish previous group + if i > 1: + r += "-%d|" % (i -1) + # optionally include group title + if group == "": + r += "%d" % i + else: + r += "%s:%d" % (group, i) + # finish the last group list + if i > 0: + r += "-%d" % i + return r + + def getservicefile(self, services, node, filename): + ''' Send a File Message when the GUI has requested a service file. + The file data is either auto-generated or comes from an existing config. + ''' + svc = services[0] + # get the filename and determine the config file index + if svc._custom: + cfgfiles = svc._configs + else: + cfgfiles = svc.getconfigfilenames(node.objid, services) + if filename not in cfgfiles: + self.session.warn("Request for unknown file '%s' for service '%s'" \ + % (filename, services[0])) + return None + + # get the file data + data = self.getservicefiledata(svc, filename) + if data is None: + data = "%s" % (svc.generateconfig(node, filename, services)) + else: + data = "%s" % data + filetypestr = "service:%s" % svc._name + + # send a file message + flags = coreapi.CORE_API_ADD_FLAG + tlvdata = coreapi.CoreFileTlv.pack(coreapi.CORE_TLV_FILE_NODE, node.objid) + tlvdata += coreapi.CoreFileTlv.pack(coreapi.CORE_TLV_FILE_NAME, filename) + tlvdata += coreapi.CoreFileTlv.pack(coreapi.CORE_TLV_FILE_TYPE, filetypestr) + tlvdata += coreapi.CoreFileTlv.pack(coreapi.CORE_TLV_FILE_DATA, data) + reply = coreapi.CoreFileMessage.pack(flags, tlvdata) + return reply + + def getservicefiledata(self, service, filename): + ''' Get the customized file data associated with a service. Return None + for invalid filenames or missing file data. + ''' + try: + i = service._configs.index(filename) + except ValueError: + return None + if i >= len(service._configtxt) or service._configtxt[i] is None: + return None + return service._configtxt[i] + + def setservicefile(self, nodenum, type, filename, srcname, data): + ''' Receive a File Message from the GUI and store the customized file + in the service config. The filename must match one from the list of + config files in the service. + ''' + if len(type.split(':')) < 2: + self.session.warn("Received file type did not contain service info.") + return + if srcname is not None: + raise NotImplementedError + (svcid, svcname) = type.split(':')[:2] + svc = self.getservicebyname(svcname) + svc = self.getcustomservice(nodenum, svc) + if svc is None: + self.session.warn("Received filename for unknown service '%s'" % \ + svcname) + return + cfgfiles = svc._configs + if filename not in cfgfiles: + self.session.warn("Received unknown file '%s' for service '%s'" \ + % (filename, svcname)) + return + i = cfgfiles.index(filename) + configtxtlist = list(svc._configtxt) + numitems = len(configtxtlist) + if numitems < i+1: + # add empty elements to list to support index assignment + for j in range(1, (i + 2) - numitems): + configtxtlist += None, + configtxtlist[i] = data + svc._configtxt = configtxtlist + + def handleevent(self, msg): + ''' Handle an Event Message used to start, stop, restart, or validate + a service on a given node. + ''' + eventtype = msg.gettlv(coreapi.CORE_TLV_EVENT_TYPE) + nodenum = msg.gettlv(coreapi.CORE_TLV_EVENT_NODE) + name = msg.gettlv(coreapi.CORE_TLV_EVENT_NAME) + try: + node = self.session.obj(nodenum) + except KeyError: + self.session.warn("Ignoring event for service '%s', unknown node " \ + "'%s'" % (name, nodenum)) + return + + services = self.servicesfromopaque(name, nodenum) + for s in services: + if eventtype == coreapi.CORE_EVENT_STOP or \ + eventtype == coreapi.CORE_EVENT_RESTART: + self.stopnodeservice(node, s) + if eventtype == coreapi.CORE_EVENT_START or \ + eventtype == coreapi.CORE_EVENT_RESTART: + if s._custom: + cmds = s._startup + else: + cmds = s.getstartup(node, services) + for cmd in cmds: + try: + node.cmd(shlex.split(cmd), wait = False) + except: + node.warn("error starting command %s" % cmd) + if eventtype == coreapi.CORE_EVENT_PAUSE: + self.validatenodeservice(node, s, services) + + +class CoreService(object): + ''' Parent class used for defining services. + ''' + # service name should not include spaces + _name = "" + # group string allows grouping services together + _group = "" + # list name(s) of services that this service depends upon + _depends = () + keys = ["dirs","files","startidx","cmdup","cmddown","cmdval","meta","starttime"] + # private, per-node directories required by this service + _dirs = () + # config files written by this service + _configs = () + # index used to determine start order with other services + _startindex = 0 + # time in seconds after runtime to run startup commands + _starttime = "" + # list of startup commands + _startup = () + # list of shutdown commands + _shutdown = () + # list of validate commands + _validate = () + # metadata associated with this service + _meta = "" + # custom configuration text + _configtxt = () + _custom = False + _custom_needed = False + + def __init__(self): + ''' Services are not necessarily instantiated. Classmethods may be used + against their config. Services are instantiated when a custom + configuration is used to override their default parameters. + ''' + self._custom = True + + @classmethod + def getconfigfilenames(cls, nodenum, services): + ''' Return the tuple of configuration file filenames. This default method + returns the cls._configs tuple, but this method may be overriden to + provide node-specific filenames that may be based on other services. + ''' + return cls._configs + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Generate configuration file given a node object. The filename is + provided to allow for multiple config files. The other services are + provided to allow interdependencies (e.g. zebra and OSPF). + Return the configuration string to be written to a file or sent + to the GUI for customization. + ''' + raise NotImplementedError + + @classmethod + def getstartup(cls, node, services): + ''' Return the tuple of startup commands. This default method + returns the cls._startup tuple, but this method may be + overriden to provide node-specific commands that may be + based on other services. + ''' + return cls._startup + + @classmethod + def getvalidate(cls, node, services): + ''' Return the tuple of validate commands. This default method + returns the cls._validate tuple, but this method may be + overriden to provide node-specific commands that may be + based on other services. + ''' + return cls._validate + + @classmethod + def tovaluelist(cls, node, services): + ''' Convert service properties into a string list of key=value pairs, + separated by "|". + ''' + valmap = [cls._dirs, cls._configs, cls._startindex, cls._startup, + cls._shutdown, cls._validate, cls._meta, cls._starttime] + if not cls._custom: + # this is always reached due to classmethod + valmap[valmap.index(cls._configs)] = \ + cls.getconfigfilenames(node.objid, services) + valmap[valmap.index(cls._startup)] = \ + cls.getstartup(node, services) + vals = map( lambda a,b: "%s=%s" % (a, str(b)), cls.keys, valmap) + return "|".join(vals) + + def fromvaluelist(self, values): + ''' Convert list of values into properties for this instantiated + (customized) service. + ''' + # TODO: support empty value? e.g. override default meta with '' + for key in self.keys: + try: + self.setvalue(key, values[self.keys.index(key)]) + except IndexError: + # old config does not need to have new keys + pass + + def setvalue(self, key, value): + if key not in self.keys: + raise ValueError + # this handles data conversion to int, string, and tuples + if value: + if key == "startidx": + value = int(value) + elif key == "meta": + value = str(value) + else: + value = maketuplefromstr(value, str) + + if key == "dirs": + self._dirs = value + elif key == "files": + self._configs = value + elif key == "startidx": + self._startindex = value + elif key == "cmdup": + self._startup = value + elif key == "cmddown": + self._shutdown = value + elif key == "cmdval": + self._validate = value + elif key == "meta": + self._meta = value + elif key == "starttime": + self._starttime = value diff --git a/daemon/core/services/__init__.py b/daemon/core/services/__init__.py new file mode 100644 index 00000000..95d4294e --- /dev/null +++ b/daemon/core/services/__init__.py @@ -0,0 +1,6 @@ +"""Services + +Services available to nodes can be put in this directory. Everything listed in +__all__ is automatically loaded by the main core module. +""" +__all__ = ["quagga", "nrl", "xorp", "bird", "utility", "security", "ucarp"] diff --git a/daemon/core/services/bird.py b/daemon/core/services/bird.py new file mode 100644 index 00000000..3c1a41f5 --- /dev/null +++ b/daemon/core/services/bird.py @@ -0,0 +1,249 @@ +# +# CORE +# Copyright (c)2012 Jean-Tiare Le Bigot. +# See the LICENSE file included in this distribution. +# +# authors: Jean-Tiare Le Bigot +# Jeff Ahrenholz +# +''' +bird.py: defines routing services provided by the BIRD Internet Routing Daemon. +''' + +import os + +from core.service import CoreService, addservice +from core.misc.ipaddr import IPv4Prefix +from core.constants import * + +class Bird(CoreService): + ''' Bird router support + ''' + _name = "bird" + _group = "BIRD" + _depends = () + _dirs = ("/etc/bird",) + _configs = ("/etc/bird/bird.conf",) + _startindex = 35 + _startup = ("bird -c %s" % (_configs[0]),) + _shutdown = ("killall bird", ) + _validate = ("pidof bird", ) + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Return the bird.conf file contents. + ''' + if filename == cls._configs[0]: + return cls.generateBirdConf(node, services) + else: + raise ValueError + + @staticmethod + def routerid(node): + ''' Helper to return the first IPv4 address of a node as its router ID. + ''' + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + for a in ifc.addrlist: + if a.find(".") >= 0: + return a .split('/') [0] + #raise ValueError, "no IPv4 address found for router ID" + return "0.0.0.0" + + @classmethod + def generateBirdConf(cls, node, services): + ''' Returns configuration file text. Other services that depend on bird + will have generatebirdifcconfig() and generatebirdconfig() + hooks that are invoked here. + ''' + cfg = """\ +/* Main configuration file for BIRD. This is ony a template, + * you will *need* to customize it according to your needs + * Beware that only double quotes \'"\' are valid. No singles. */ + + +log "/var/log/%s.log" all; +#debug protocols all; +#debug commands 2; + +router id %s; # Mandatory for IPv6, may be automatic for IPv4 + +protocol kernel { + persist; # Don\'t remove routes on BIRD shutdown + scan time 200; # Scan kernel routing table every 200 seconds + export all; + import all; +} + +protocol device { + scan time 10; # Scan interfaces every 10 seconds +} + +""" % (cls._name, cls.routerid(node)) + + # Generate protocol specific configurations + for s in services: + if cls._name not in s._depends: + continue + cfg += s.generatebirdconfig(node) + + return cfg + +class BirdService(CoreService): + ''' Parent class for Bird services. Defines properties and methods + common to Bird's routing daemons. + ''' + + _name = "BirdDaemon" + _group = "BIRD" + _depends = ("bird", ) + _dirs = () + _configs = () + _startindex = 40 + _startup = () + _shutdown = () + _meta = "The config file for this service can be found in the bird service." + + @classmethod + def generatebirdconfig(cls, node): + return "" + + @classmethod + def generatebirdifcconfig(cls, node): + ''' Use only bare interfaces descriptions in generated protocol + configurations. This has the slight advantage of being the same + everywhere. + ''' + cfg = "" + + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: continue + cfg += ' interface "%s";\n'% ifc.name + + return cfg + + +class BirdBgp(BirdService): + '''BGP BIRD Service (configuration generation)''' + + _name = "BIRD_BGP" + _custom_needed = True + + @classmethod + def generatebirdconfig(cls, node): + return """ +/* This is a sample config that should be customized with appropriate AS numbers + * and peers; add one section like this for each neighbor */ + +protocol bgp { + local as 65000; # Customize your AS number + neighbor 198.51.100.130 as 64496; # Customize neighbor AS number && IP + export filter { # We use non-trivial export rules + # This is an example. You should advertise only *your routes* + if (source = RTS_DEVICE) || (source = RTS_OSPF) then { +# bgp_community.add((65000,64501)); # Assign our community + accept; + } + reject; + }; + import all; +} + +""" + +class BirdOspf(BirdService): + '''OSPF BIRD Service (configuration generation)''' + + _name = "BIRD_OSPFv2" + + @classmethod + def generatebirdconfig(cls, node): + cfg = 'protocol ospf {\n' + cfg += ' export filter {\n' + cfg += ' if source = RTS_BGP then {\n' + cfg += ' ospf_metric1 = 100;\n' + cfg += ' accept;\n' + cfg += ' }\n' + cfg += ' accept;\n' + cfg += ' };\n' + cfg += ' area 0.0.0.0 {\n' + cfg += cls.generatebirdifcconfig(node) + cfg += ' };\n' + cfg += '}\n\n' + + return cfg + + +class BirdRadv(BirdService): + '''RADV BIRD Service (configuration generation)''' + + _name = "BIRD_RADV" + + @classmethod + def generatebirdconfig(cls, node): + cfg = '/* This is a sample config that must be customized */\n' + + cfg += 'protocol radv {\n' + cfg += ' # auto configuration on all interfaces\n' + cfg += cls.generatebirdifcconfig(node) + cfg += ' # Advertise DNS\n' + cfg += ' rdnss {\n' + cfg += '# lifetime mult 10;\n' + cfg += '# lifetime mult 10;\n' + cfg += '# ns 2001:0DB8:1234::11;\n' + cfg += '# ns 2001:0DB8:1234::11;\n' + cfg += '# ns 2001:0DB8:1234::12;\n' + cfg += '# ns 2001:0DB8:1234::12;\n' + cfg += ' };\n' + cfg += '}\n\n' + + return cfg + + +class BirdRip(BirdService): + '''RIP BIRD Service (configuration generation)''' + + _name = "BIRD_RIP" + + @classmethod + def generatebirdconfig(cls, node): + cfg = 'protocol rip {\n' + cfg += ' period 10;\n' + cfg += ' garbage time 60;\n' + cfg += cls.generatebirdifcconfig(node) + cfg += ' honor neighbor;\n' + cfg += ' authentication none;\n' + cfg += ' import all;\n' + cfg += ' export all;\n' + cfg += '}\n\n' + + return cfg + + +class BirdStatic(BirdService): + '''Static Bird Service (configuration generation)''' + + _name = "BIRD_static" + _custom_needed = True + + @classmethod + def generatebirdconfig(cls, node): + cfg = '/* This is a sample config that must be customized */\n' + + cfg += 'protocol static {\n' + cfg += '# route 0.0.0.0/0 via 198.51.100.130; # Default route. Do NOT advertise on BGP !\n' + cfg += '# route 203.0.113.0/24 reject; # Sink route\n' + cfg += '# route 10.2.0.0/24 via "arc0"; # Secondary network\n' + cfg += '}\n\n' + + return cfg + + +# Register all protocols +addservice(Bird) +addservice(BirdOspf) +addservice(BirdBgp) +#addservice(BirdRadv) # untested +addservice(BirdRip) +addservice(BirdStatic) diff --git a/daemon/core/services/nrl.py b/daemon/core/services/nrl.py new file mode 100644 index 00000000..d0412c33 --- /dev/null +++ b/daemon/core/services/nrl.py @@ -0,0 +1,191 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +nrl.py: defines services provided by NRL protolib tools hosted here: +http://cs.itd.nrl.navy.mil/products/ +''' + +from core.service import CoreService, addservice +from core.misc.ipaddr import IPv4Prefix + +class NrlService(CoreService): + ''' Parent class for NRL services. Defines properties and methods + common to NRL's routing daemons. + ''' + _name = "NRLDaemon" + _group = "Routing" + _depends = () + _dirs = () + _configs = () + _startindex = 45 + _startup = () + _shutdown = () + + @classmethod + def generateconfig(cls, node, filename, services): + return "" + + @staticmethod + def firstipv4prefix(node, prefixlen=24): + ''' Similar to QuaggaService.routerid(). Helper to return the first IPv4 + prefix of a node, using the supplied prefix length. This ignores the + interface's prefix length, so e.g. '/32' can turn into '/24'. + ''' + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + for a in ifc.addrlist: + if a.find(".") >= 0: + addr = a.split('/')[0] + pre = IPv4Prefix("%s/%s" % (addr, prefixlen)) + return str(pre) + #raise ValueError, "no IPv4 address found" + return "0.0.0.0/%s" % prefixlen + +class NrlNhdp(NrlService): + ''' NeighborHood Discovery Protocol for MANET networks. + ''' + _name = "NHDP" + _startup = ("nrlnhdp", ) + _shutdown = ("killall nrlnhdp", ) + _validate = ("pidof nrlnhdp", ) + + @classmethod + def getstartup(cls, node, services): + ''' Generate the appropriate command-line based on node interfaces. + ''' + cmd = cls._startup[0] + cmd += " -l /var/log/nrlnhdp.log" + cmd += " -rpipe %s_nhdp" % node.name + + servicenames = map(lambda x: x._name, services) + if "SMF" in servicenames: + cmd += " -flooding ecds" + cmd += " -smfClient %s_smf" % node.name + + netifs = filter(lambda x: not getattr(x, 'control', False), \ + node.netifs()) + if len(netifs) > 0: + interfacenames = map(lambda x: x.name, netifs) + cmd += " -i " + cmd += " -i ".join(interfacenames) + + return (cmd, ) + +addservice(NrlNhdp) + +class NrlSmf(NrlService): + ''' Simplified Multicast Forwarding for MANET networks. + ''' + _name = "SMF" + _startup = ("nrlsmf", ) + _shutdown = ("killall nrlsmf", ) + _validate = ("pidof nrlsmf", ) + + @classmethod + def getstartup(cls, node, services): + ''' Generate the appropriate command-line based on node interfaces. + ''' + cmd = cls._startup[0] + cmd += " instance %s_smf" % node.name + + servicenames = map(lambda x: x._name, services) + netifs = filter(lambda x: not getattr(x, 'control', False), \ + node.netifs()) + if len(netifs) == 0: + return () + + if "arouted" in servicenames: + cmd += " tap %s_tap" % (node.name,) + cmd += " unicast %s" % cls.firstipv4prefix(node, 24) + cmd += " push lo,%s resequence on" % netifs[0].name + if len(netifs) > 0: + if "NHDP" in servicenames: + cmd += " ecds " + elif "OLSR" in servicenames: + cmd += " smpr " + else: + cmd += " cf " + interfacenames = map(lambda x: x.name, netifs) + cmd += ",".join(interfacenames) + + cmd += " hash MD5" + cmd += " log /var/log/nrlsmf.log" + return (cmd, ) + +addservice(NrlSmf) + +class NrlOlsr(NrlService): + ''' Optimized Link State Routing protocol for MANET networks. + ''' + _name = "OLSR" + _startup = ("nrlolsrd", ) + _shutdown = ("killall nrlolsrd", ) + _validate = ("pidof nrlolsrd", ) + + @classmethod + def getstartup(cls, node, services): + ''' Generate the appropriate command-line based on node interfaces. + ''' + cmd = cls._startup[0] + # are multiple interfaces supported? No. + netifs = list(node.netifs()) + if len(netifs) > 0: + ifc = netifs[0] + cmd += " -i %s" % ifc.name + cmd += " -l /var/log/nrlolsrd.log" + cmd += " -rpipe %s_olsr" % node.name + + servicenames = map(lambda x: x._name, services) + if "SMF" in servicenames and not "NHDP" in servicenames: + cmd += " -flooding s-mpr" + cmd += " -smfClient %s_smf" % node.name + if "zebra" in servicenames: + cmd += " -z" + + return (cmd, ) + +addservice(NrlOlsr) + +class Arouted(NrlService): + ''' Adaptive Routing + ''' + _name = "arouted" + _configs = ("startarouted.sh", ) + _startindex = NrlService._startindex + 10 + _startup = ("sh startarouted.sh", ) + _shutdown = ("pkill arouted", ) + _validate = ("pidof arouted", ) + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Return the Quagga.conf or quaggaboot.sh file contents. + ''' + cfg = """ +#!/bin/sh +for f in "/tmp/%s_smf"; do + count=1 + until [ -e "$f" ]; do + if [ $count -eq 10 ]; then + echo "ERROR: nrlmsf pipe not found: $f" >&2 + exit 1 + fi + sleep 0.1 + count=$(($count + 1)) + done +done + +""" % (node.name) + cfg += "ip route add %s dev lo\n" % cls.firstipv4prefix(node, 24) + cfg += "arouted instance %s_smf tap %s_tap" % (node.name, node.name) + cfg += " stability 10" # seconds to consider a new route valid + cfg += " 2>&1 > /var/log/arouted.log &\n\n" + return cfg + +# experimental +#addservice(Arouted) diff --git a/daemon/core/services/quagga.py b/daemon/core/services/quagga.py new file mode 100644 index 00000000..226d0f44 --- /dev/null +++ b/daemon/core/services/quagga.py @@ -0,0 +1,589 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +quagga.py: defines routing services provided by Quagga. +''' + +import os + +if os.uname()[0] == "Linux": + from core.netns import nodes +elif os.uname()[0] == "FreeBSD": + from core.bsd import nodes +from core.service import CoreService, addservice +from core.misc.ipaddr import IPv4Prefix, isIPv4Address, isIPv6Address +from core.api import coreapi +from core.constants import * + +QUAGGA_USER="root" +QUAGGA_GROUP="root" +if os.uname()[0] == "FreeBSD": + QUAGGA_GROUP="wheel" + +class Zebra(CoreService): + ''' + ''' + _name = "zebra" + _group = "Quagga" + _depends = ("vtysh", ) + _dirs = ("/usr/local/etc/quagga", "/var/run/quagga") + _configs = ("/usr/local/etc/quagga/Quagga.conf", + "quaggaboot.sh","/usr/local/etc/quagga/vtysh.conf") + _startindex = 35 + _startup = ("sh quaggaboot.sh zebra",) + _shutdown = ("killall zebra", ) + _validate = ("pidof zebra", ) + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Return the Quagga.conf or quaggaboot.sh file contents. + ''' + if filename == cls._configs[0]: + return cls.generateQuaggaConf(node, services) + elif filename == cls._configs[1]: + return cls.generateQuaggaBoot(node, services) + elif filename == cls._configs[2]: + return cls.generateVtyshConf(node, services) + else: + raise ValueError + + @classmethod + def generateVtyshConf(cls, node, services): + ''' Returns configuration file text. + ''' + return "service integrated-vtysh-config" + + @classmethod + def generateQuaggaConf(cls, node, services): + ''' Returns configuration file text. Other services that depend on zebra + will have generatequaggaifcconfig() and generatequaggaconfig() + hooks that are invoked here. + ''' + # we could verify here that filename == Quagga.conf + cfg = "" + for ifc in node.netifs(): + cfg += "interface %s\n" % ifc.name + # include control interfaces in addressing but not routing daemons + if hasattr(ifc, 'control') and ifc.control == True: + cfg += " " + cfg += "\n ".join(map(cls.addrstr, ifc.addrlist)) + cfg += "\n" + continue + cfgv4 = "" + cfgv6 = "" + want_ipv4 = False + want_ipv6 = False + for s in services: + if cls._name not in s._depends: + continue + ifccfg = s.generatequaggaifcconfig(node, ifc) + if s._ipv4_routing: + want_ipv4 = True + if s._ipv6_routing: + want_ipv6 = True + cfgv6 += ifccfg + else: + cfgv4 += ifccfg + + if want_ipv4: + ipv4list = filter(lambda x: isIPv4Address(x.split('/')[0]), + ifc.addrlist) + cfg += " " + cfg += "\n ".join(map(cls.addrstr, ipv4list)) + cfg += "\n" + cfg += cfgv4 + if want_ipv6: + ipv6list = filter(lambda x: isIPv6Address(x.split('/')[0]), + ifc.addrlist) + cfg += " " + cfg += "\n ".join(map(cls.addrstr, ipv6list)) + cfg += "\n" + cfg += cfgv6 + cfg += "!\n" + + for s in services: + if cls._name not in s._depends: + continue + cfg += s.generatequaggaconfig(node) + return cfg + + @staticmethod + def addrstr(x): + ''' helper for mapping IP addresses to zebra config statements + ''' + if x.find(".") >= 0: + return "ip address %s" % x + elif x.find(":") >= 0: + return "ipv6 address %s" % x + else: + raise Value, "invalid address: %s", x + + @classmethod + def generateQuaggaBoot(cls, node, services): + ''' Generate a shell script used to boot the Quagga daemons. + ''' + try: + quagga_bin_search = node.session.cfg['quagga_bin_search'] + quagga_sbin_search = node.session.cfg['quagga_sbin_search'] + except KeyError: + quagga_bin_search = '"/usr/local/bin /usr/bin /usr/lib/quagga"' + quagga_sbin_search = '"/usr/local/sbin /usr/sbin /usr/lib/quagga"' + return """\ +#!/bin/sh +# auto-generated by zebra service (quagga.py) +QUAGGA_CONF=%s +QUAGGA_SBIN_SEARCH=%s +QUAGGA_BIN_SEARCH=%s +QUAGGA_STATE_DIR=%s +QUAGGA_USER=%s +QUAGGA_GROUP=%s + +searchforprog() +{ + prog=$1 + searchpath=$@ + ret= + for p in $searchpath; do + if [ -x $p/$prog ]; then + ret=$p + break + fi + done + echo $ret +} + +confcheck() +{ + CONF_DIR=`dirname $QUAGGA_CONF` + # if /etc/quagga exists, point /etc/quagga/Quagga.conf -> CONF_DIR + if [ "$CONF_DIR" != "/etc/quagga" ] && [ -d /etc/quagga ] && [ ! -e /etc/quagga/Quagga.conf ]; then + ln -s $CONF_DIR/Quagga.conf /etc/quagga/Quagga.conf + fi + # if /etc/quagga exists, point /etc/quagga/vtysh.conf -> CONF_DIR + if [ "$CONF_DIR" != "/etc/quagga" ] && [ -d /etc/quagga ] && [ ! -e /etc/quagga/vtysh.conf ]; then + ln -s $CONF_DIR/vtysh.conf /etc/quagga/vtysh.conf + fi +} + +waitforvtyfiles() +{ + for f in "$@"; do + count=1 + until [ -e $QUAGGA_STATE_DIR/$f ]; do + if [ $count -eq 10 ]; then + echo "ERROR: vty file not found: $QUAGGA_STATE_DIR/$f" >&2 + return 1 + fi + sleep 0.1 + count=$(($count + 1)) + done + done +} + +bootdaemon() +{ + QUAGGA_SBIN_DIR=$(searchforprog $1 $QUAGGA_SBIN_SEARCH) + if [ "z$QUAGGA_SBIN_DIR" = "z" ]; then + echo "ERROR: Quagga's '$1' daemon not found in search path:" + echo " $QUAGGA_SBIN_SEARCH" + return 1 + fi + + if [ "$1" != "zebra" ]; then + waitforvtyfiles zebra.vty + fi + + $QUAGGA_SBIN_DIR/$1 -u $QUAGGA_USER -g $QUAGGA_GROUP -d +} + +bootvtysh() +{ + QUAGGA_BIN_DIR=$(searchforprog $1 $QUAGGA_BIN_SEARCH) + if [ "z$QUAGGA_BIN_DIR" = "z" ]; then + echo "ERROR: Quagga's '$1' daemon not found in search path:" + echo " $QUAGGA_SBIN_SEARCH" + return 1 + fi + + vtyfiles="zebra.vty" + for r in rip ripng ospf6 ospf bgp babel; do + if grep -q "^router \<${r}\>" $QUAGGA_CONF; then + vtyfiles="$vtyfiles ${r}d.vty" + fi + done + + # wait for Quagga daemon vty files to appear before invoking vtysh + waitforvtyfiles $vtyfiles + + $QUAGGA_BIN_DIR/vtysh -b +} + +confcheck +if [ "x$1" = "x" ]; then + echo "ERROR: missing the name of the Quagga daemon to boot" + exit 1 +elif [ "$1" = "vtysh" ]; then + bootvtysh $1 +else + bootdaemon $1 +fi +""" % (cls._configs[0], quagga_sbin_search, quagga_bin_search, \ + QUAGGA_STATE_DIR, QUAGGA_USER, QUAGGA_GROUP) + +addservice(Zebra) + +class QuaggaService(CoreService): + ''' Parent class for Quagga services. Defines properties and methods + common to Quagga's routing daemons. + ''' + _name = "QuaggaDaemon" + _group = "Quagga" + _depends = ("zebra", ) + _dirs = () + _configs = () + _startindex = 40 + _startup = () + _shutdown = () + _meta = "The config file for this service can be found in the Zebra service." + + _ipv4_routing = False + _ipv6_routing = False + + @staticmethod + def routerid(node): + ''' Helper to return the first IPv4 address of a node as its router ID. + ''' + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + for a in ifc.addrlist: + if a.find(".") >= 0: + return a .split('/') [0] + #raise ValueError, "no IPv4 address found for router ID" + return "0.0.0.0" + + @staticmethod + def rj45check(ifc): + ''' Helper to detect whether interface is connected an external RJ45 + link. + ''' + if ifc.net: + for peerifc in ifc.net.netifs(): + if peerifc == ifc: + continue + if isinstance(peerifc, nodes.RJ45Node): + return True + return False + + @classmethod + def generateconfig(cls, node, filename, services): + return "" + + @classmethod + def generatequaggaifcconfig(cls, node, ifc): + return "" + + @classmethod + def generatequaggaconfig(cls, node): + return "" + + + +class Ospfv2(QuaggaService): + ''' The OSPFv2 service provides IPv4 routing for wired networks. It does + not build its own configuration file but has hooks for adding to the + unified Quagga.conf file. + ''' + _name = "OSPFv2" + _startup = ("sh quaggaboot.sh ospfd",) + _shutdown = ("killall ospfd", ) + _validate = ("pidof ospfd", ) + _ipv4_routing = True + + @staticmethod + def mtucheck(ifc): + ''' Helper to detect MTU mismatch and add the appropriate OSPF + mtu-ignore command. This is needed when e.g. a node is linked via a + GreTap device. + ''' + if ifc.mtu != 1500: + # a workaround for PhysicalNode GreTap, which has no knowledge of + # the other nodes/nets + return " ip ospf mtu-ignore\n" + if not ifc.net: + return "" + for i in ifc.net.netifs(): + if i.mtu != ifc.mtu: + return " ip ospf mtu-ignore\n" + return "" + + @staticmethod + def ptpcheck(ifc): + ''' Helper to detect whether interface is connected to a notional + point-to-point link. + ''' + if isinstance(ifc.net, nodes.PtpNet): + return " ip ospf network point-to-point\n" + return "" + + @classmethod + def generatequaggaconfig(cls, node): + cfg = "router ospf\n" + rtrid = cls.routerid(node) + cfg += " router-id %s\n" % rtrid + # network 10.0.0.0/24 area 0 + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + for a in ifc.addrlist: + if a.find(".") < 0: + continue + net = IPv4Prefix(a) + cfg += " network %s area 0\n" % net + cfg += "!\n" + return cfg + + @classmethod + def generatequaggaifcconfig(cls, node, ifc): + return cls.mtucheck(ifc) + #cfg = cls.mtucheck(ifc) + # external RJ45 connections will use default OSPF timers + #if cls.rj45check(ifc): + # return cfg + #cfg += cls.ptpcheck(ifc) + + #return cfg + """\ +# ip ospf hello-interval 2 +# ip ospf dead-interval 6 +# ip ospf retransmit-interval 5 +#""" + +addservice(Ospfv2) + +class Ospfv3(QuaggaService): + ''' The OSPFv3 service provides IPv6 routing for wired networks. It does + not build its own configuration file but has hooks for adding to the + unified Quagga.conf file. + ''' + _name = "OSPFv3" + _startup = ("sh quaggaboot.sh ospf6d",) + _shutdown = ("killall ospf6d", ) + _validate = ("pidof ospf6d", ) + _ipv4_routing = True + _ipv6_routing = True + + @staticmethod + def minmtu(ifc): + ''' Helper to discover the minimum MTU of interfaces linked with the + given interface. + ''' + mtu = ifc.mtu + if not ifc.net: + return mtu + for i in ifc.net.netifs(): + if i.mtu < mtu: + mtu = i.mtu + return mtu + + @classmethod + def mtucheck(cls, ifc): + ''' Helper to detect MTU mismatch and add the appropriate OSPFv3 + ifmtu command. This is needed when e.g. a node is linked via a + GreTap device. + ''' + minmtu = cls.minmtu(ifc) + if minmtu < ifc.mtu: + return " ipv6 ospf6 ifmtu %d\n" % minmtu + else: + return "" + + @staticmethod + def ptpcheck(ifc): + ''' Helper to detect whether interface is connected to a notional + point-to-point link. + ''' + if isinstance(ifc.net, nodes.PtpNet): + return " ipv6 ospf6 network point-to-point\n" + return "" + + @classmethod + def generatequaggaconfig(cls, node): + cfg = "router ospf6\n" + rtrid = cls.routerid(node) + cfg += " router-id %s\n" % rtrid + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + cfg += " interface %s area 0.0.0.0\n" % ifc.name + cfg += "!\n" + return cfg + + @classmethod + def generatequaggaifcconfig(cls, node, ifc): + return cls.mtucheck(ifc) + #cfg = cls.mtucheck(ifc) + # external RJ45 connections will use default OSPF timers + #if cls.rj45check(ifc): + # return cfg + #cfg += cls.ptpcheck(ifc) + + #return cfg + """\ +# ipv6 ospf6 hello-interval 2 +# ipv6 ospf6 dead-interval 6 +# ipv6 ospf6 retransmit-interval 5 +#""" + +addservice(Ospfv3) + +class Ospfv3mdr(Ospfv3): + ''' The OSPFv3 MANET Designated Router (MDR) service provides IPv6 + routing for wireless networks. It does not build its own + configuration file but has hooks for adding to the + unified Quagga.conf file. + ''' + _name = "OSPFv3MDR" + _ipv4_routing = True + + @classmethod + def generatequaggaifcconfig(cls, node, ifc): + cfg = cls.mtucheck(ifc) + + return cfg + """\ + ipv6 ospf6 instance-id 65 + ipv6 ospf6 hello-interval 2 + ipv6 ospf6 dead-interval 6 + ipv6 ospf6 retransmit-interval 5 + ipv6 ospf6 network manet-designated-router + ipv6 ospf6 diffhellos + ipv6 ospf6 adjacencyconnectivity uniconnected + ipv6 ospf6 lsafullness mincostlsa +""" + +addservice(Ospfv3mdr) + +class Bgp(QuaggaService): + '''' The BGP service provides interdomain routing. + Peers must be manually configured, with a full mesh for those + having the same AS number. + ''' + _name = "BGP" + _startup = ("sh quaggaboot.sh bgpd",) + _shutdown = ("killall bgpd", ) + _validate = ("pidof bgpd", ) + _custom_needed = True + _ipv4_routing = True + _ipv6_routing = True + + @classmethod + def generatequaggaconfig(cls, node): + cfg = "!\n! BGP configuration\n!\n" + cfg += "! You should configure the AS number below,\n" + cfg += "! along with this router's peers.\n!\n" + cfg += "router bgp %s\n" % node.objid + rtrid = cls.routerid(node) + cfg += " bgp router-id %s\n" % rtrid + cfg += " redistribute connected\n" + cfg += "! neighbor 1.2.3.4 remote-as 555\n!\n" + return cfg + +addservice(Bgp) + +class Rip(QuaggaService): + ''' The RIP service provides IPv4 routing for wired networks. + ''' + _name = "RIP" + _startup = ("sh quaggaboot.sh ripd",) + _shutdown = ("killall ripd", ) + _validate = ("pidof ripd", ) + _ipv4_routing = True + + @classmethod + def generatequaggaconfig(cls, node): + cfg = """\ +router rip + redistribute static + redistribute connected + redistribute ospf + network 0.0.0.0/0 +! +""" + return cfg + +addservice(Rip) + +class Ripng(QuaggaService): + ''' The RIP NG service provides IPv6 routing for wired networks. + ''' + _name = "RIPNG" + _startup = ("sh quaggaboot.sh ripngd",) + _shutdown = ("killall ripngd", ) + _validate = ("pidof ripngd", ) + _ipv6_routing = True + + @classmethod + def generatequaggaconfig(cls, node): + cfg = """\ +router ripng + redistribute static + redistribute connected + redistribute ospf6 + network ::/0 +! +""" + return cfg + +addservice(Ripng) + +class Babel(QuaggaService): + ''' The Babel service provides a loop-avoiding distance-vector routing + protocol for IPv6 and IPv4 with fast convergence properties. + ''' + _name = "Babel" + _startup = ("sh quaggaboot.sh babeld",) + _shutdown = ("killall babeld", ) + _validate = ("pidof babeld", ) + _ipv6_routing = True + + @classmethod + def generatequaggaconfig(cls, node): + cfg = "router babel\n" + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + cfg += " network %s\n" % ifc.name + cfg += " redistribute static\n redistribute connected\n" + return cfg + + @classmethod + def generatequaggaifcconfig(cls, node, ifc): + type = "wired" + if ifc.net and ifc.net.linktype == coreapi.CORE_LINK_WIRELESS: + return " babel wireless\n no babel split-horizon\n" + else: + return " babel wired\n babel split-horizon\n" + +addservice(Babel) + + +class Vtysh(CoreService): + ''' Simple service to run vtysh -b (boot) after all Quagga daemons have + started. + ''' + _name = "vtysh" + _group = "Quagga" + _startindex = 45 + _startup = ("sh quaggaboot.sh vtysh",) + _shutdown = () + + @classmethod + def generateconfig(cls, node, filename, services): + return "" + +addservice(Vtysh) + + diff --git a/daemon/core/services/security.py b/daemon/core/services/security.py new file mode 100644 index 00000000..29f8ab3b --- /dev/null +++ b/daemon/core/services/security.py @@ -0,0 +1,129 @@ +# +# CORE - define security services : vpnclient, vpnserver, ipsec and firewall +# +# Copyright (c)2011-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +''' +security.py: defines security services (vpnclient, vpnserver, ipsec and +firewall) +''' + +import os + +from core.service import CoreService, addservice +from core.constants import * + +class VPNClient(CoreService): + ''' + ''' + _name = "VPNClient" + _group = "Security" + _configs = ('vpnclient.sh', ) + _startindex = 60 + _startup = ('sh vpnclient.sh',) + _shutdown = ("killall openvpn",) + _validate = ("pidof openvpn", ) + _custom_needed = True + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Return the client.conf and vpnclient.sh file contents to + ''' + cfg = "#!/bin/sh\n" + cfg += "# custom VPN Client configuration for service (security.py)\n" + fname = "%s/examples/services/sampleVPNClient" % CORE_DATA_DIR + try: + cfg += open(fname, "rb").read() + except e: + print "Error opening VPN client configuration template (%s): %s" % \ + (fname, e) + return cfg + +# this line is required to add the above class to the list of available services +addservice(VPNClient) + +class VPNServer(CoreService): + ''' + ''' + _name = "VPNServer" + _group = "Security" + _configs = ('vpnserver.sh', ) + _startindex = 50 + _startup = ('sh vpnserver.sh',) + _shutdown = ("killall openvpn",) + _validate = ("pidof openvpn", ) + _custom_needed = True + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Return the sample server.conf and vpnserver.sh file contents to + GUI for user customization. + ''' + cfg = "#!/bin/sh\n" + cfg += "# custom VPN Server Configuration for service (security.py)\n" + fname = "%s/examples/services/sampleVPNServer" % CORE_DATA_DIR + try: + cfg += open(fname, "rb").read() + except e: + print "Error opening VPN server configuration template (%s): %s" % \ + (fname, e) + return cfg + +addservice(VPNServer) + +class IPsec(CoreService): + ''' + ''' + _name = "IPsec" + _group = "Security" + _configs = ('ipsec.sh', ) + _startindex = 60 + _startup = ('sh ipsec.sh',) + _shutdown = ("killall racoon",) + _custom_needed = True + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Return the ipsec.conf and racoon.conf file contents to + GUI for user customization. + ''' + cfg = "#!/bin/sh\n" + cfg += "# set up static tunnel mode security assocation for service " + cfg += "(security.py)\n" + fname = "%s/examples/services/sampleIPsec" % CORE_DATA_DIR + try: + cfg += open(fname, "rb").read() + except e: + print "Error opening IPsec configuration template (%s): %s" % \ + (fname, e) + return cfg + +addservice(IPsec) + +class Firewall(CoreService): + ''' + ''' + _name = "Firewall" + _group = "Security" + _configs = ('firewall.sh', ) + _startindex = 20 + _startup = ('sh firewall.sh',) + _custom_needed = True + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Return the firewall rule examples to GUI for user customization. + ''' + cfg = "#!/bin/sh\n" + cfg += "# custom node firewall rules for service (security.py)\n" + fname = "%s/examples/services/sampleFirewall" % CORE_DATA_DIR + try: + cfg += open(fname, "rb").read() + except e: + print "Error opening Firewall configuration template (%s): %s" % \ + (fname, e) + return cfg + +addservice(Firewall) + diff --git a/daemon/core/services/ucarp.py b/daemon/core/services/ucarp.py new file mode 100755 index 00000000..b3c5c411 --- /dev/null +++ b/daemon/core/services/ucarp.py @@ -0,0 +1,189 @@ +# +# CORE configuration for UCARP +# Copyright (c) 2012 Jonathan deBoer +# See the LICENSE file included in this distribution. +# +# +# author: Jonathan deBoer +# +''' +ucarp.py: defines high-availability IP address controlled by ucarp +''' + +import os + +from core.service import CoreService, addservice +from core.misc.ipaddr import IPv4Prefix +from core.constants import * + + +UCARP_ETC="/usr/local/etc/ucarp" + +class Ucarp(CoreService): + ''' + ''' + _name = "ucarp" + _group = "Utility" + _depends = ( ) + _dirs = (UCARP_ETC, ) + _configs = (UCARP_ETC + "/default.sh", UCARP_ETC + "/default-up.sh", UCARP_ETC + "/default-down.sh", "ucarpboot.sh",) + _startindex = 65 + _startup = ("sh ucarpboot.sh",) + _shutdown = ("killall ucarp", ) + _validate = ("pidof ucarp", ) + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Return the default file contents + ''' + if filename == cls._configs[0]: + return cls.generateUcarpConf(node, services) + elif filename == cls._configs[1]: + return cls.generateVipUp(node, services) + elif filename == cls._configs[2]: + return cls.generateVipDown(node, services) + elif filename == cls._configs[3]: + return cls.generateUcarpBoot(node, services) + else: + raise ValueError + + @classmethod + def generateUcarpConf(cls, node, services): + ''' Returns configuration file text. + ''' + try: + ucarp_bin = node.session.cfg['ucarp_bin'] + except KeyError: + ucarp_bin = "/usr/sbin/ucarp" + return """\ +#!/bin/sh +# Location of UCARP executable +UCARP_EXEC=%s + +# Location of the UCARP config directory +UCARP_CFGDIR=%s + +# Logging Facility +FACILITY=daemon + +# Instance ID +# Any number from 1 to 255 +INSTANCE_ID=1 + +# Password +# Master and Backup(s) need to be the same +PASSWORD="changeme" + +# The failover application address +VIRTUAL_ADDRESS=127.0.0.254 +VIRTUAL_NET=8 + +# Interface for IP Address +INTERFACE=lo + +# Maintanence address of the local machine +SOURCE_ADDRESS=127.0.0.1 + +# The ratio number to be considered before marking the node as dead +DEAD_RATIO=3 + +# UCARP base, lower number will be preferred master +# set to same to have master stay as long as possible +UCARP_BASE=1 +SKEW=0 + +# UCARP options +# -z run shutdown script on exit +# -P force preferred master +# -n don't run down script at start up when we are backup +# -M use broadcast instead of multicast +# -S ignore interface state +OPTIONS="-z -n -M" + +# Send extra parameter to down and up scripts +#XPARAM="-x " +XPARAM="-x ${VIRTUAL_NET}" + +# The start and stop scripts +START_SCRIPT=${UCARP_CFGDIR}/default-up.sh +STOP_SCRIPT=${UCARP_CFGDIR}/default-down.sh + +# These line should not need to be touched +UCARP_OPTS="$OPTIONS -b $UCARP_BASE -k $SKEW -i $INTERFACE -v $INSTANCE_ID -p $PASSWORD -u $START_SCRIPT -d $STOP_SCRIPT -a $VIRTUAL_ADDRESS -s $SOURCE_ADDRESS -f $FACILITY $XPARAM" + +${UCARP_EXEC} -B ${UCARP_OPTS} +""" % (ucarp_bin, UCARP_ETC) + + @classmethod + def generateUcarpBoot(cls, node, services): + ''' Generate a shell script used to boot the Ucarp daemons. + ''' + try: + ucarp_bin = node.session.cfg['ucarp_bin'] + except KeyError: + ucarp_bin = "/usr/sbin/ucarp" + return """\ +#!/bin/sh +# Location of the UCARP config directory +UCARP_CFGDIR=%s + +chmod a+x ${UCARP_CFGDIR}/*.sh + +# Start the default ucarp daemon configuration +${UCARP_CFGDIR}/default.sh + +""" % (UCARP_ETC) + + @classmethod + def generateVipUp(cls, node, services): + ''' Generate a shell script used to start the virtual ip + ''' + try: + ucarp_bin = node.session.cfg['ucarp_bin'] + except KeyError: + ucarp_bin = "/usr/sbin/ucarp" + return """\ +#!/bin/bash + +# Should be invoked as "default-up.sh " +exec 2> /dev/null + +IP="${2}" +NET="${3}" +if [ -z "$NET" ]; then + NET="24" +fi + +/sbin/ip addr add ${IP}/${NET} dev "$1" + + +""" + + @classmethod + def generateVipDown(cls, node, services): + ''' Generate a shell script used to stop the virtual ip + ''' + try: + ucarp_bin = node.session.cfg['ucarp_bin'] + except KeyError: + ucarp_bin = "/usr/sbin/ucarp" + return """\ +#!/bin/bash + +# Should be invoked as "default-down.sh " +exec 2> /dev/null + +IP="${2}" +NET="${3}" +if [ -z "$NET" ]; then + NET="24" +fi + +/sbin/ip addr del ${IP}/${NET} dev "$1" + + +""" + + +addservice(Ucarp) + diff --git a/daemon/core/services/utility.py b/daemon/core/services/utility.py new file mode 100644 index 00000000..11ec3453 --- /dev/null +++ b/daemon/core/services/utility.py @@ -0,0 +1,676 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +utility.py: defines miscellaneous utility services. +''' + +import os + +from core.service import CoreService, addservice +from core.misc.ipaddr import IPv4Prefix, IPv6Prefix +from core.misc.utils import * +from core.constants import * + +class UtilService(CoreService): + ''' Parent class for utility services. + ''' + _name = "UtilityProcess" + _group = "Utility" + _depends = () + _dirs = () + _configs = () + _startindex = 80 + _startup = () + _shutdown = () + + @classmethod + def generateconfig(cls, node, filename, services): + return "" + +class IPForwardService(UtilService): + _name = "IPForward" + _configs = ("ipforward.sh", ) + _startindex = 5 + _startup = ("sh ipforward.sh", ) + + @classmethod + def generateconfig(cls, node, filename, services): + if os.uname()[0] == "Linux": + return cls.generateconfiglinux(node, filename, services) + elif os.uname()[0] == "FreeBSD": + return cls.generateconfigbsd(node, filename, services) + else: + raise Exception, "unknown platform" + + @classmethod + def generateconfiglinux(cls, node, filename, services): + cfg = """\ +#!/bin/sh +# auto-generated by IPForward service (utility.py) +%s -w net.ipv4.conf.all.forwarding=1 +%s -w net.ipv6.conf.all.forwarding=1 +%s -w net.ipv4.conf.all.send_redirects=0 +%s -w net.ipv4.conf.all.rp_filter=0 +%s -w net.ipv4.conf.default.rp_filter=0 +""" % (SYSCTL_BIN, SYSCTL_BIN, SYSCTL_BIN, SYSCTL_BIN, SYSCTL_BIN) + for ifc in node.netifs(): + name = sysctldevname(ifc.name) + cfg += "%s -w net.ipv4.conf.%s.forwarding=1\n" % (SYSCTL_BIN, name) + cfg += "%s -w net.ipv4.conf.%s.send_redirects=0\n" % \ + (SYSCTL_BIN, name) + cfg += "%s -w net.ipv4.conf.%s.rp_filter=0\n" % (SYSCTL_BIN, name) + return cfg + + @classmethod + def generateconfigbsd(cls, node, filename, services): + return """\ +#!/bin/sh +# auto-generated by IPForward service (utility.py) +%s -w net.inet.ip.forwarding=1 +%s -w net.inet6.ip6.forwarding=1 +%s -w net.inet.icmp.bmcastecho=1 +%s -w net.inet.icmp.icmplim=0 +""" % (SYSCTL_BIN, SYSCTL_BIN, SYSCTL_BIN, SYSCTL_BIN) + +addservice(IPForwardService) + +class DefaultRouteService(UtilService): + _name = "DefaultRoute" + _configs = ("defaultroute.sh",) + _startup = ("sh defaultroute.sh",) + + @classmethod + def generateconfig(cls, node, filename, services): + cfg = "#!/bin/sh\n" + cfg += "# auto-generated by DefaultRoute service (utility.py)\n" + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + cfg += "\n".join(map(cls.addrstr, ifc.addrlist)) + cfg += "\n" + return cfg + + @staticmethod + def addrstr(x): + if x.find(":") >= 0: + net = IPv6Prefix(x) + fam = "inet6 ::" + else: + net = IPv4Prefix(x) + fam = "inet 0.0.0.0" + if net.maxaddr() == net.minaddr(): + return "" + else: + if os.uname()[0] == "Linux": + rtcmd = "ip route add default via" + elif os.uname()[0] == "FreeBSD": + rtcmd = "route add -%s" % fam + else: + raise Exception, "unknown platform" + return "%s %s" % (rtcmd, net.minaddr()) + +addservice(DefaultRouteService) + +class DefaultMulticastRouteService(UtilService): + _name = "DefaultMulticastRoute" + _configs = ("defaultmroute.sh",) + _startup = ("sh defaultmroute.sh",) + + @classmethod + def generateconfig(cls, node, filename, services): + cfg = "#!/bin/sh\n" + cfg += "# auto-generated by DefaultMulticastRoute service (utility.py)\n" + cfg += "# the first interface is chosen below; please change it " + cfg += "as needed\n" + + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + if os.uname()[0] == "Linux": + rtcmd = "ip route add 224.0.0.0/4 dev" + elif os.uname()[0] == "FreeBSD": + rtcmd = "route add 224.0.0.0/4 -iface" + else: + raise Exception, "unknown platform" + cfg += "%s %s\n" % (rtcmd, ifc.name) + cfg += "\n" + break + return cfg + +addservice(DefaultMulticastRouteService) + +class StaticRouteService(UtilService): + _name = "StaticRoute" + _configs = ("staticroute.sh",) + _startup = ("sh staticroute.sh",) + _custom_needed = True + + @classmethod + def generateconfig(cls, node, filename, services): + cfg = "#!/bin/sh\n" + cfg += "# auto-generated by StaticRoute service (utility.py)\n#\n" + cfg += "# NOTE: this service must be customized to be of any use\n" + cfg += "# Below are samples that you can uncomment and edit.\n#\n" + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + cfg += "\n".join(map(cls.routestr, ifc.addrlist)) + cfg += "\n" + return cfg + + @staticmethod + def routestr(x): + if x.find(":") >= 0: + net = IPv6Prefix(x) + fam = "inet6" + dst = "3ffe:4::/64" + else: + net = IPv4Prefix(x) + fam = "inet" + dst = "10.9.8.0/24" + if net.maxaddr() == net.minaddr(): + return "" + else: + if os.uname()[0] == "Linux": + rtcmd = "#/sbin/ip route add %s via" % dst + elif os.uname()[0] == "FreeBSD": + rtcmd = "#/sbin/route add -%s %s" % (fam, dst) + else: + raise Exception, "unknown platform" + return "%s %s" % (rtcmd, net.minaddr()) + +addservice(StaticRouteService) + +class SshService(UtilService): + _name = "SSH" + if os.uname()[0] == "FreeBSD": + _configs = ("startsshd.sh", "sshd_config",) + _dirs = () + else: + _configs = ("startsshd.sh", "/etc/ssh/sshd_config",) + _dirs = ("/etc/ssh", "/var/run/sshd",) + _startup = ("sh startsshd.sh",) + _shutdown = ("killall sshd",) + _validate = () + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Use a startup script for launching sshd in order to wait for host + key generation. + ''' + if os.uname()[0] == "FreeBSD": + sshcfgdir = node.nodedir + sshstatedir = node.nodedir + sshlibdir = "/usr/libexec" + else: + sshcfgdir = cls._dirs[0] + sshstatedir = cls._dirs[1] + sshlibdir = "/usr/lib/openssh" + if filename == "startsshd.sh": + return """\ +#!/bin/sh +# auto-generated by SSH service (utility.py) +ssh-keygen -q -t rsa -N "" -f %s/ssh_host_rsa_key +chmod 655 %s +# wait until RSA host key has been generated to launch sshd +/usr/sbin/sshd -f %s/sshd_config +""" % (sshcfgdir, sshstatedir, sshcfgdir) + else: + return """\ +# auto-generated by SSH service (utility.py) +Port 22 +Protocol 2 +HostKey %s/ssh_host_rsa_key +UsePrivilegeSeparation yes +PidFile %s/sshd.pid + +KeyRegenerationInterval 3600 +ServerKeyBits 768 + +SyslogFacility AUTH +LogLevel INFO + +LoginGraceTime 120 +PermitRootLogin yes +StrictModes yes + +RSAAuthentication yes +PubkeyAuthentication yes + +IgnoreRhosts yes +RhostsRSAAuthentication no +HostbasedAuthentication no + +PermitEmptyPasswords no +ChallengeResponseAuthentication no + +X11Forwarding yes +X11DisplayOffset 10 +PrintMotd no +PrintLastLog yes +TCPKeepAlive yes + +AcceptEnv LANG LC_* +Subsystem sftp %s/sftp-server +UsePAM yes +UseDNS no +""" % (sshcfgdir, sshstatedir, sshlibdir) + +addservice(SshService) + +class DhcpService(UtilService): + _name = "DHCP" + _configs = ("/etc/dhcp/dhcpd.conf",) + _dirs = ("/etc/dhcp",) + _startup = ("dhcpd",) + _shutdown = ("killall dhcpd",) + _validate = ("pidof dhcpd",) + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Generate a dhcpd config file using the network address of + each interface. + ''' + cfg = """\ +# auto-generated by DHCP service (utility.py) +# NOTE: move these option lines into the desired pool { } block(s) below +#option domain-name "test.com"; +#option domain-name-servers 10.0.0.1; +#option routers 10.0.0.1; + +log-facility local6; + +default-lease-time 600; +max-lease-time 7200; + +ddns-update-style none; +""" + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + cfg += "\n".join(map(cls.subnetentry, ifc.addrlist)) + cfg += "\n" + return cfg + + @staticmethod + def subnetentry(x): + ''' Generate a subnet declaration block given an IPv4 prefix string + for inclusion in the dhcpd3 config file. + ''' + if x.find(":") >= 0: + return "" + else: + addr = x.split("/")[0] + net = IPv4Prefix(x) + # divide the address space in half + rangelow = net.addr(net.numaddr() / 2) + rangehigh = net.maxaddr() + return """ +subnet %s netmask %s { + pool { + range %s %s; + default-lease-time 600; + option routers %s; + } +} +""" % (net.prefixstr(), net.netmaskstr(), rangelow, rangehigh, addr) + +addservice(DhcpService) + +class DhcpClientService(UtilService): + ''' Use a DHCP client for all interfaces for addressing. + ''' + _name = "DHCPClient" + _configs = ("startdhcpclient.sh",) + _startup = ("sh startdhcpclient.sh",) + _shutdown = ("killall dhclient",) + _validate = ("pidof dhclient",) + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Generate a script to invoke dhclient on all interfaces. + ''' + cfg = "#!/bin/sh\n" + cfg += "# auto-generated by DHCPClient service (utility.py)\n" + cfg += "# uncomment this mkdir line and symlink line to enable client-" + cfg += "side DNS\n# resolution based on the DHCP server response.\n" + cfg += "#mkdir -p /var/run/resolvconf/interface\n" + + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + cfg += "#ln -s /var/run/resolvconf/interface/%s.dhclient" % ifc.name + cfg += " /var/run/resolvconf/resolv.conf\n" + cfg += "/sbin/dhclient -nw -pf /var/run/dhclient-%s.pid" % ifc.name + cfg += " -lf /var/run/dhclient-%s.lease %s\n" % (ifc.name, ifc.name) + return cfg + +addservice(DhcpClientService) + +class FtpService(UtilService): + ''' Start a vsftpd server. + ''' + _name = "FTP" + _configs = ("vsftpd.conf",) + _dirs = ("/var/run/vsftpd/empty", "/var/ftp",) + _startup = ("vsftpd ./vsftpd.conf",) + _shutdown = ("killall vsftpd",) + _validate = ("pidof vsftpd",) + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Generate a vsftpd.conf configuration file. + ''' + return """\ +# vsftpd.conf auto-generated by FTP service (utility.py) +listen=YES +anonymous_enable=YES +local_enable=YES +dirmessage_enable=YES +use_localtime=YES +xferlog_enable=YES +connect_from_port_20=YES +xferlog_file=/var/log/vsftpd.log +ftpd_banner=Welcome to the CORE FTP service +secure_chroot_dir=/var/run/vsftpd/empty +anon_root=/var/ftp +""" + +addservice(FtpService) + +class HttpService(UtilService): + ''' Start an apache server. + ''' + _name = "HTTP" + _configs = ("/etc/apache2/apache2.conf", "/etc/apache2/envvars", + "/var/www/index.html",) + _dirs = ("/etc/apache2", "/var/run/apache2", "/var/log/apache2", + "/var/lock/apache2", "/var/www", ) + _startup = ("apache2ctl start",) + _shutdown = ("apache2ctl stop",) + _validate = ("pidof apache2",) + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Generate an apache2.conf configuration file. + ''' + if filename == cls._configs[0]: + return cls.generateapache2conf(node, filename, services) + elif filename == cls._configs[1]: + return cls.generateenvvars(node, filename, services) + elif filename == cls._configs[2]: + return cls.generatehtml(node, filename, services) + else: + return "" + + @classmethod + def generateapache2conf(cls, node, filename, services): + return """\ +# apache2.conf generated by utility.py:HttpService +LockFile ${APACHE_LOCK_DIR}/accept.lock +PidFile ${APACHE_PID_FILE} +Timeout 300 +KeepAlive On +MaxKeepAliveRequests 100 +KeepAliveTimeout 5 + + + StartServers 5 + MinSpareServers 5 + MaxSpareServers 10 + MaxClients 150 + MaxRequestsPerChild 0 + + + + StartServers 2 + MinSpareThreads 25 + MaxSpareThreads 75 + ThreadLimit 64 + ThreadsPerChild 25 + MaxClients 150 + MaxRequestsPerChild 0 + + + + StartServers 2 + MinSpareThreads 25 + MaxSpareThreads 75 + ThreadLimit 64 + ThreadsPerChild 25 + MaxClients 150 + MaxRequestsPerChild 0 + + +User ${APACHE_RUN_USER} +Group ${APACHE_RUN_GROUP} + +AccessFileName .htaccess + + + Order allow,deny + Deny from all + Satisfy all + + +DefaultType None + +HostnameLookups Off + +ErrorLog ${APACHE_LOG_DIR}/error.log +LogLevel warn + +#Include mods-enabled/*.load +#Include mods-enabled/*.conf +LoadModule alias_module /usr/lib/apache2/modules/mod_alias.so +LoadModule auth_basic_module /usr/lib/apache2/modules/mod_auth_basic.so +LoadModule authz_default_module /usr/lib/apache2/modules/mod_authz_default.so +LoadModule authz_host_module /usr/lib/apache2/modules/mod_authz_host.so +LoadModule authz_user_module /usr/lib/apache2/modules/mod_authz_user.so +LoadModule autoindex_module /usr/lib/apache2/modules/mod_autoindex.so +LoadModule dir_module /usr/lib/apache2/modules/mod_dir.so +LoadModule env_module /usr/lib/apache2/modules/mod_env.so + +NameVirtualHost *:80 +Listen 80 + + + Listen 443 + + + Listen 443 + + +LogFormat "%v:%p %h %l %u %t \\"%r\\" %>s %O \\"%{Referer}i\\" \\"%{User-Agent}i\\"" vhost_combined +LogFormat "%h %l %u %t \\"%r\\" %>s %O \\"%{Referer}i\\" \\"%{User-Agent}i\\"" combined +LogFormat "%h %l %u %t \\"%r\\" %>s %O" common +LogFormat "%{Referer}i -> %U" referer +LogFormat "%{User-agent}i" agent + +ServerTokens OS +ServerSignature On +TraceEnable Off + + + ServerAdmin webmaster@localhost + DocumentRoot /var/www + + Options FollowSymLinks + AllowOverride None + + + Options Indexes FollowSymLinks MultiViews + AllowOverride None + Order allow,deny + allow from all + + ErrorLog ${APACHE_LOG_DIR}/error.log + LogLevel warn + CustomLog ${APACHE_LOG_DIR}/access.log combined + + +""" + + @classmethod + def generateenvvars(cls, node, filename, services): + return """\ +# this file is used by apache2ctl - generated by utility.py:HttpService +# these settings come from a default Ubuntu apache2 installation +export APACHE_RUN_USER=www-data +export APACHE_RUN_GROUP=www-data +export APACHE_PID_FILE=/var/run/apache2.pid +export APACHE_RUN_DIR=/var/run/apache2 +export APACHE_LOCK_DIR=/var/lock/apache2 +export APACHE_LOG_DIR=/var/log/apache2 +export LANG=C +export LANG +""" + + @classmethod + def generatehtml(cls, node, filename, services): + body = """\ + +

%s web server

+

This is the default web page for this server.

+

The web server software is running but no content has been added, yet.

+""" % node.name + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + body += "
  • %s - %s
    • \n" % (ifc.name, ifc.addrlist) + return "%s" % body + +addservice(HttpService) + +class PcapService(UtilService): + ''' Pcap service for logging packets. + ''' + _name = "pcap" + _configs = ("pcap.sh", ) + _dirs = () + _startindex = 1 + _startup = ("sh pcap.sh start",) + _shutdown = ("sh pcap.sh stop",) + _validate = ("pidof tcpdump",) + _meta = "logs network traffic to pcap packet capture files" + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Generate a startpcap.sh traffic logging script. + ''' + cfg = """ +#!/bin/sh +# set tcpdump options here (see 'man tcpdump' for help) +# (-s snap length, -C limit pcap file length, -n disable name resolution) +DUMPOPTS="-s 12288 -C 10 -n" + +if [ "x$1" = "xstart" ]; then + +""" + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + cfg += '# ' + redir = "< /dev/null" + cfg += "tcpdump ${DUMPOPTS} -w %s.%s.pcap -i %s %s &\n" % \ + (node.name, ifc.name, ifc.name, redir) + cfg += """ + +elif [ "x$1" = "xstop" ]; then + mkdir -p ${SESSION_DIR}/pcap + mv *.pcap ${SESSION_DIR}/pcap +fi; +""" + return cfg + +addservice(PcapService) + +class RadvdService(UtilService): + _name = "radvd" + _configs = ("/etc/radvd/radvd.conf",) + _dirs = ("/etc/radvd",) + _startup = ("radvd -C /etc/radvd/radvd.conf -m logfile -l /var/log/radvd.log",) + _shutdown = ("pkill radvd",) + _validate = ("pidof radvd",) + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Generate a RADVD router advertisement daemon config file + using the network address of each interface. + ''' + cfg = "# auto-generated by RADVD service (utility.py)\n" + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + prefixes = map(cls.subnetentry, ifc.addrlist) + if len(prefixes) < 1: + continue + cfg += """\ +interface %s +{ + AdvSendAdvert on; + MinRtrAdvInterval 3; + MaxRtrAdvInterval 10; + AdvDefaultPreference low; + AdvHomeAgentFlag off; +""" % ifc.name + for prefix in prefixes: + if prefix == "": + continue + cfg += """\ + prefix %s + { + AdvOnLink on; + AdvAutonomous on; + AdvRouterAddr on; + }; +""" % prefix + cfg += "};\n" + return cfg + + @staticmethod + def subnetentry(x): + ''' Generate a subnet declaration block given an IPv6 prefix string + for inclusion in the RADVD config file. + ''' + if x.find(":") >= 0: + net = IPv6Prefix(x) + return str(net) + else: + return "" + +addservice(RadvdService) + +class AtdService(UtilService): + ''' Atd service for scheduling at jobs + ''' + _name = "atd" + _configs = ("startatd.sh",) + _dirs = ("/var/spool/cron/atjobs", "/var/spool/cron/atspool") + _startup = ("sh startatd.sh", ) + _shutdown = ("pkill atd", ) + + @classmethod + def generateconfig(cls, node, filename, services): + return """ +#!/bin/sh +echo 00001 > /var/spool/cron/atjobs/.SEQ +chown -R daemon /var/spool/cron/* +chmod -R 700 /var/spool/cron/* +atd +""" + +addservice(AtdService) + +class UserDefinedService(UtilService): + ''' Dummy service allowing customization of anything. + ''' + _name = "UserDefined" + _startindex = 50 + _meta = "Customize this service to do anything upon startup." + +addservice(UserDefinedService) diff --git a/daemon/core/services/xorp.py b/daemon/core/services/xorp.py new file mode 100644 index 00000000..062f4901 --- /dev/null +++ b/daemon/core/services/xorp.py @@ -0,0 +1,472 @@ +# +# CORE +# Copyright (c)2011-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +xorp.py: defines routing services provided by the XORP routing suite. +''' + +import os + +from core.service import CoreService, addservice +from core.misc.ipaddr import IPv4Prefix +from core.constants import * + +class XorpRtrmgr(CoreService): + ''' XORP router manager service builds a config.boot file based on other + enabled XORP services, and launches necessary daemons upon startup. + ''' + _name = "xorp_rtrmgr" + _group = "XORP" + _depends = () + _dirs = ("/etc/xorp",) + _configs = ("/etc/xorp/config.boot",) + _startindex = 35 + _startup = ("xorp_rtrmgr -d -b %s -l /var/log/%s.log -P /var/run/%s.pid" % (_configs[0], _name, _name),) + _shutdown = ("killall xorp_rtrmgr", ) + _validate = ("pidof xorp_rtrmgr", ) + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Returns config.boot configuration file text. Other services that + depend on this will have generatexorpconfig() hooks that are + invoked here. Filename currently ignored. + ''' + cfg = "interfaces {\n" + for ifc in node.netifs(): + cfg += " interface %s {\n" % ifc.name + cfg += "\tvif %s {\n" % ifc.name + cfg += "".join(map(cls.addrstr, ifc.addrlist)) + cfg += cls.lladdrstr(ifc) + cfg += "\t}\n" + cfg += " }\n" + cfg += "}\n\n" + + for s in services: + try: + s._depends.index(cls._name) + cfg += s.generatexorpconfig(node) + except ValueError: + pass + return cfg + + @staticmethod + def addrstr(x): + ''' helper for mapping IP addresses to XORP config statements + ''' + try: + (addr, plen) = x.split("/") + except Exception: + raise ValueError, "invalid address" + cfg = "\t address %s {\n" % addr + cfg += "\t\tprefix-length: %s\n" % plen + cfg +="\t }\n" + return cfg + + @staticmethod + def lladdrstr(ifc): + ''' helper for adding link-local address entries (required by OSPFv3) + ''' + cfg = "\t address %s {\n" % ifc.hwaddr.tolinklocal() + cfg += "\t\tprefix-length: 64\n" + cfg += "\t }\n" + return cfg + +addservice(XorpRtrmgr) + +class XorpService(CoreService): + ''' Parent class for XORP services. Defines properties and methods + common to XORP's routing daemons. + ''' + _name = "XorpDaemon" + _group = "XORP" + _depends = ("xorp_rtrmgr", ) + _dirs = () + _configs = () + _startindex = 40 + _startup = () + _shutdown = () + _meta = "The config file for this service can be found in the xorp_rtrmgr service." + + @staticmethod + def fea(forwarding): + ''' Helper to add a forwarding engine entry to the config file. + ''' + cfg = "fea {\n" + cfg += " %s {\n" % forwarding + cfg += "\tdisable:false\n" + cfg += " }\n" + cfg += "}\n" + return cfg + + @staticmethod + def mfea(forwarding, ifcs): + ''' Helper to add a multicast forwarding engine entry to the config file. + ''' + names = [] + for ifc in ifcs: + if hasattr(ifc, 'control') and ifc.control == True: + continue + names.append(ifc.name) + names.append("register_vif") + + cfg = "plumbing {\n" + cfg += " %s {\n" % forwarding + for name in names: + cfg += "\tinterface %s {\n" % name + cfg += "\t vif %s {\n" % name + cfg += "\t\tdisable: false\n" + cfg += "\t }\n" + cfg += "\t}\n" + cfg += " }\n" + cfg += "}\n" + return cfg + + + @staticmethod + def policyexportconnected(): + ''' Helper to add a policy statement for exporting connected routes. + ''' + cfg = "policy {\n" + cfg += " policy-statement export-connected {\n" + cfg += "\tterm 100 {\n" + cfg += "\t from {\n" + cfg += "\t\tprotocol: \"connected\"\n" + cfg += "\t }\n" + cfg += "\t}\n" + cfg += " }\n" + cfg += "}\n" + return cfg + + @staticmethod + def routerid(node): + ''' Helper to return the first IPv4 address of a node as its router ID. + ''' + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + for a in ifc.addrlist: + if a.find(".") >= 0: + return a.split('/')[0] + #raise ValueError, "no IPv4 address found for router ID" + return "0.0.0.0" + + @classmethod + def generateconfig(cls, node, filename, services): + return "" + + @classmethod + def generatexorpconfig(cls, node): + return "" + +class XorpOspfv2(XorpService): + ''' The OSPFv2 service provides IPv4 routing for wired networks. It does + not build its own configuration file but has hooks for adding to the + unified XORP configuration file. + ''' + _name = "XORP_OSPFv2" + + @classmethod + def generatexorpconfig(cls, node): + cfg = cls.fea("unicast-forwarding4") + rtrid = cls.routerid(node) + cfg += "\nprotocols {\n" + cfg += " ospf4 {\n" + cfg += "\trouter-id: %s\n" % rtrid + cfg += "\tarea 0.0.0.0 {\n" + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + cfg += "\t interface %s {\n" % ifc.name + cfg += "\t\tvif %s {\n" % ifc.name + for a in ifc.addrlist: + if a.find(".") < 0: + continue + addr = a.split("/")[0] + cfg += "\t\t address %s {\n" % addr + cfg += "\t\t }\n" + cfg += "\t\t}\n" + cfg += "\t }\n" + cfg += "\t}\n" + cfg += " }\n" + cfg += "}\n" + return cfg + +addservice(XorpOspfv2) + +class XorpOspfv3(XorpService): + ''' The OSPFv3 service provides IPv6 routing. It does + not build its own configuration file but has hooks for adding to the + unified XORP configuration file. + ''' + _name = "XORP_OSPFv3" + + @classmethod + def generatexorpconfig(cls, node): + cfg = cls.fea("unicast-forwarding6") + rtrid = cls.routerid(node) + cfg += "\nprotocols {\n" + cfg += " ospf6 0 { /* Instance ID 0 */\n" + cfg += "\trouter-id: %s\n" % rtrid + cfg += "\tarea 0.0.0.0 {\n" + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + cfg += "\t interface %s {\n" % ifc.name + cfg += "\t\tvif %s {\n" % ifc.name + cfg += "\t\t}\n" + cfg += "\t }\n" + cfg += "\t}\n" + cfg += " }\n" + cfg += "}\n" + return cfg + +addservice(XorpOspfv3) + +class XorpBgp(XorpService): + ''' IPv4 inter-domain routing. AS numbers and peers must be customized. + ''' + _name = "XORP_BGP" + _custom_needed = True + + @classmethod + def generatexorpconfig(cls, node): + cfg = "/* This is a sample config that should be customized with\n" + cfg += " appropriate AS numbers and peers */\n" + cfg += cls.fea("unicast-forwarding4") + cfg += cls.policyexportconnected() + rtrid = cls.routerid(node) + cfg += "\nprotocols {\n" + cfg += " bgp {\n" + cfg += "\tbgp-id: %s\n" % rtrid + cfg += "\tlocal-as: 65001 /* change this */\n" + cfg += "\texport: \"export-connected\"\n" + cfg += "\tpeer 10.0.1.1 { /* change this */\n" + cfg += "\t local-ip: 10.0.1.1\n" + cfg += "\t as: 65002\n" + cfg += "\t next-hop: 10.0.0.2\n" + cfg += "\t}\n" + cfg += " }\n" + cfg += "}\n" + return cfg + +addservice(XorpBgp) + +class XorpRip(XorpService): + ''' RIP IPv4 unicast routing. + ''' + _name = "XORP_RIP" + + @classmethod + def generatexorpconfig(cls, node): + cfg = cls.fea("unicast-forwarding4") + cfg += cls.policyexportconnected() + cfg += "\nprotocols {\n" + cfg += " rip {\n" + cfg += "\texport: \"export-connected\"\n" + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + cfg += "\tinterface %s {\n" % ifc.name + cfg += "\t vif %s {\n" % ifc.name + for a in ifc.addrlist: + if a.find(".") < 0: + continue + addr = a.split("/")[0] + cfg += "\t\taddress %s {\n" % addr + cfg += "\t\t disable: false\n" + cfg += "\t\t}\n" + cfg += "\t }\n" + cfg += "\t}\n" + cfg += " }\n" + cfg += "}\n" + return cfg + +addservice(XorpRip) + +class XorpRipng(XorpService): + ''' RIP NG IPv6 unicast routing. + ''' + _name = "XORP_RIPNG" + + @classmethod + def generatexorpconfig(cls, node): + cfg = cls.fea("unicast-forwarding6") + cfg += cls.policyexportconnected() + cfg += "\nprotocols {\n" + cfg += " ripng {\n" + cfg += "\texport: \"export-connected\"\n" + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + cfg += "\tinterface %s {\n" % ifc.name + cfg += "\t vif %s {\n" % ifc.name +# for a in ifc.addrlist: +# if a.find(":") < 0: +# continue +# addr = a.split("/")[0] +# cfg += "\t\taddress %s {\n" % addr +# cfg += "\t\t disable: false\n" +# cfg += "\t\t}\n" + cfg += "\t\taddress %s {\n" % ifc.hwaddr.tolinklocal() + cfg += "\t\t disable: false\n" + cfg += "\t\t}\n" + cfg += "\t }\n" + cfg += "\t}\n" + cfg += " }\n" + cfg += "}\n" + return cfg + +addservice(XorpRipng) + +class XorpPimSm4(XorpService): + ''' PIM Sparse Mode IPv4 multicast routing. + ''' + _name = "XORP_PIMSM4" + + @classmethod + def generatexorpconfig(cls, node): + cfg = cls.mfea("mfea4", node.netifs()) + + cfg += "\nprotocols {\n" + cfg += " igmp {\n" + names = [] + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + names.append(ifc.name) + cfg += "\tinterface %s {\n" % ifc.name + cfg += "\t vif %s {\n" % ifc.name + cfg += "\t\tdisable: false\n" + cfg += "\t }\n" + cfg += "\t}\n" + cfg += " }\n" + cfg += "}\n" + + cfg += "\nprotocols {\n" + cfg += " pimsm4 {\n" + + names.append("register_vif") + for name in names: + cfg += "\tinterface %s {\n" % name + cfg += "\t vif %s {\n" % name + cfg += "\t\tdr-priority: 1\n" + cfg += "\t }\n" + cfg += "\t}\n" + cfg += "\tbootstrap {\n" + cfg += "\t cand-bsr {\n" + cfg += "\t\tscope-zone 224.0.0.0/4 {\n" + cfg += "\t\t cand-bsr-by-vif-name: \"%s\"\n" % names[0] + cfg += "\t\t}\n" + cfg += "\t }\n" + cfg += "\t cand-rp {\n" + cfg += "\t\tgroup-prefix 224.0.0.0/4 {\n" + cfg += "\t\t cand-rp-by-vif-name: \"%s\"\n" % names[0] + cfg += "\t\t}\n" + cfg += "\t }\n" + cfg += "\t}\n" + + cfg += " }\n" + cfg += "}\n" + + cfg += "\nprotocols {\n" + cfg += " fib2mrib {\n" + cfg += "\tdisable: false\n" + cfg += " }\n" + cfg += "}\n" + return cfg + +addservice(XorpPimSm4) + +class XorpPimSm6(XorpService): + ''' PIM Sparse Mode IPv6 multicast routing. + ''' + _name = "XORP_PIMSM6" + + @classmethod + def generatexorpconfig(cls, node): + cfg = cls.mfea("mfea6", node.netifs()) + + cfg += "\nprotocols {\n" + cfg += " mld {\n" + names = [] + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + names.append(ifc.name) + cfg += "\tinterface %s {\n" % ifc.name + cfg += "\t vif %s {\n" % ifc.name + cfg += "\t\tdisable: false\n" + cfg += "\t }\n" + cfg += "\t}\n" + cfg += " }\n" + cfg += "}\n" + + cfg += "\nprotocols {\n" + cfg += " pimsm6 {\n" + + names.append("register_vif") + for name in names: + cfg += "\tinterface %s {\n" % name + cfg += "\t vif %s {\n" % name + cfg += "\t\tdr-priority: 1\n" + cfg += "\t }\n" + cfg += "\t}\n" + cfg += "\tbootstrap {\n" + cfg += "\t cand-bsr {\n" + cfg += "\t\tscope-zone ff00::/8 {\n" + cfg += "\t\t cand-bsr-by-vif-name: \"%s\"\n" % names[0] + cfg += "\t\t}\n" + cfg += "\t }\n" + cfg += "\t cand-rp {\n" + cfg += "\t\tgroup-prefix ff00::/8 {\n" + cfg += "\t\t cand-rp-by-vif-name: \"%s\"\n" % names[0] + cfg += "\t\t}\n" + cfg += "\t }\n" + cfg += "\t}\n" + + cfg += " }\n" + cfg += "}\n" + + cfg += "\nprotocols {\n" + cfg += " fib2mrib {\n" + cfg += "\tdisable: false\n" + cfg += " }\n" + cfg += "}\n" + return cfg + +addservice(XorpPimSm6) + +class XorpOlsr(XorpService): + ''' OLSR IPv4 unicast MANET routing. + ''' + _name = "XORP_OLSR" + + @classmethod + def generatexorpconfig(cls, node): + cfg = cls.fea("unicast-forwarding4") + rtrid = cls.routerid(node) + cfg += "\nprotocols {\n" + cfg += " olsr4 {\n" + cfg += "\tmain-address: %s\n" % rtrid + for ifc in node.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + continue + cfg += "\tinterface %s {\n" % ifc.name + cfg += "\t vif %s {\n" % ifc.name + for a in ifc.addrlist: + if a.find(".") < 0: + continue + addr = a.split("/")[0] + cfg += "\t\taddress %s {\n" % addr + cfg += "\t\t}\n" + cfg += "\t }\n" + cfg += "\t}\n" + cfg += " }\n" + cfg += "}\n" + return cfg + +addservice(XorpOlsr) diff --git a/daemon/core/session.py b/daemon/core/session.py new file mode 100644 index 00000000..ba9cf0d9 --- /dev/null +++ b/daemon/core/session.py @@ -0,0 +1,1029 @@ +# +# CORE +# Copyright (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: Tom Goff +# Jeff Ahrenholz +# +''' +session.py: defines the Session class used by the core-daemon daemon program +that manages a CORE session. +''' + +import os, sys, tempfile, shutil, shlex, atexit, gc, pwd +import threading, time, random + +from core.api import coreapi +if os.uname()[0] == "Linux": + from core.netns import nodes + from core.netns.vnet import GreTapBridge +elif os.uname()[0] == "FreeBSD": + from core.bsd import nodes +from core.emane import emane +from core.misc.utils import check_call, mutedetach, readfileintodict, \ + filemunge, filedemunge + +from core.conf import ConfigurableManager, Configurable +from core.location import CoreLocation +from core.service import CoreServices +from core.broker import CoreBroker +from core.mobility import MobilityManager +from core.sdt import Sdt +from core.misc.ipaddr import MacAddr +from core.misc.event import EventLoop +from core.constants import * + +from core.xen import xenconfig + +class Session(object): + + # sessions that get automatically shutdown when the process + # terminates normally + __sessions = set() + + ''' CORE session manager. + ''' + def __init__(self, sessionid = None, cfg = {}, server = None, + persistent = False): + if sessionid is None: + # try to keep this short since it's used to construct + # network interface names + pid = os.getpid() + sessionid = ((pid >> 16) ^ + (pid & ((1 << 16) - 1))) + sessionid ^= ((id(self) >> 16) ^ (id(self) & ((1 << 16) - 1))) + sessionid &= 0xffff + self.sessionid = sessionid + self.sessiondir = os.path.join(tempfile.gettempdir(), + "pycore.%s" % self.sessionid) + os.mkdir(self.sessiondir) + self.name = None + self.filename = None + self.thumbnail = None + self.user = None + self.node_count = None + self._time = time.time() + self.evq = EventLoop() + # dict of objects: all nodes and nets + self._objs = {} + self._objslock = threading.Lock() + # dict of configurable objects + self._confobjs = {} + self._confobjslock = threading.Lock() + self._handlers = set() + self._handlerslock = threading.Lock() + self._hooks = {} + self.setstate(state=coreapi.CORE_EVENT_DEFINITION_STATE, + info=False, sendevent=False) + # dict of configuration items from /etc/core/core.conf config file + self.cfg = cfg + self.server = server + if not persistent: + self.addsession(self) + self.master = False + self.broker = CoreBroker(session=self, verbose=True) + self.location = CoreLocation(self) + self.mobility = MobilityManager(self) + self.services = CoreServices(self) + self.emane = emane.Emane(self) + self.xen = xenconfig.XenConfigManager(self) + self.sdt = Sdt(self) + # future parameters set by the GUI may go here + self.options = SessionConfig(self) + self.metadata = SessionMetaData(self) + + @classmethod + def addsession(cls, session): + cls.__sessions.add(session) + + @classmethod + def delsession(cls, session): + try: + cls.__sessions.remove(session) + except KeyError: + pass + + @classmethod + def atexit(cls): + while cls.__sessions: + s = cls.__sessions.pop() + print >> sys.stderr, "WARNING: automatically shutting down " \ + "non-persistent session %s" % s.sessionid + s.shutdown() + + def __del__(self): + # note: there is no guarantee this will ever run + self.shutdown() + + def shutdown(self): + ''' Shut down all emulation objects and remove the session directory. + ''' + self.emane.shutdown() + self.broker.shutdown() + self.sdt.shutdown() + self.delobjs() + preserve = False + if hasattr(self.options, 'preservedir'): + if self.options.preservedir == '1': + preserve = True + if not preserve: + shutil.rmtree(self.sessiondir, ignore_errors = True) + if self.server: + self.server.delsession(self) + self.delsession(self) + + def isconnected(self): + ''' Returns true if this session has a request handler. + ''' + with self._handlerslock: + if len(self._handlers) == 0: + return False + else: + return True + + def connect(self, handler): + ''' Set the request handler for this session, making it connected. + ''' + # the master flag will only be set after a GUI has connected with the + # handler, e.g. not during normal startup + if handler.master is True: + self.master = True + with self._handlerslock: + self._handlers.add(handler) + + def disconnect(self, handler): + ''' Disconnect a request handler from this session. Shutdown this + session if there is no running emulation. + ''' + with self._handlerslock: + try: + self._handlers.remove(handler) + except KeyError: + raise ValueError, \ + "Handler %s not associated with this session" % handler + num_handlers = len(self._handlers) + if num_handlers == 0: + # shut down this session unless we are instantiating, running, + # or collecting final data + if self.getstate() < coreapi.CORE_EVENT_INSTANTIATION_STATE or \ + self.getstate() > coreapi.CORE_EVENT_DATACOLLECT_STATE: + self.shutdown() + + def broadcast(self, src, msg): + ''' Send Node and Link CORE API messages to all handlers connected to this session. + ''' + self._handlerslock.acquire() + for handler in self._handlers: + if handler == src: + continue + if isinstance(msg, coreapi.CoreNodeMessage) or \ + isinstance(msg, coreapi.CoreLinkMessage): + try: + handler.sendall(msg.rawmsg) + except Exception, e: + self.warn("sendall() error: %s" % e) + self._handlerslock.release() + + def broadcastraw(self, src, data): + ''' Broadcast raw data to all handlers except src. + ''' + self._handlerslock.acquire() + for handler in self._handlers: + if handler == src: + continue + try: + handler.sendall(data) + except Exception, e: + self.warn("sendall() error: %s" % e) + self._handlerslock.release() + + def gethandler(self): + ''' Get one of the connected handlers, preferrably the master. + ''' + with self._handlerslock: + if len(self._handlers) == 0: + return None + for handler in self._handlers: + if handler.master: + return handler + for handler in self._handlers: + return handler + + def setstate(self, state, info = False, sendevent = False, + returnevent = False): + ''' Set the session state. When info is true, log the state change + event using the session handler's info method. When sendevent is + true, generate a CORE API Event Message and send to the connected + entity. + ''' + self._time = time.time() + self._state = state + replies = [] + + if not self.isconnected(): + return replies + if info: + statename = coreapi.state_name(state) + self._handlerslock.acquire() + for handler in self._handlers: + handler.info("SESSION %s STATE %d: %s at %s" % \ + (self.sessionid, state, statename, time.ctime())) + self._handlerslock.release() + self.writestate(state) + self.runhook(state) + if sendevent: + tlvdata = "" + tlvdata += coreapi.CoreEventTlv.pack(coreapi.CORE_TLV_EVENT_TYPE, + state) + msg = coreapi.CoreEventMessage.pack(0, tlvdata) + # send Event Message to connected handlers (e.g. GUI) + try: + if returnevent: + replies.append(msg) + else: + self.broadcastraw(None, msg) + except Exception, e: + self.warn("Error sending Event Message: %s" % e) + # also inform slave servers + coremsg = coreapi.CoreEventMessage(0, + msg[:coreapi.CoreMessage.hdrsiz], + msg[coreapi.CoreMessage.hdrsiz:]) + tmp = self.broker.handlemsg(coremsg) + return replies + + + def getstate(self): + ''' Retrieve the current state of the session. + ''' + return self._state + + def writestate(self, state): + ''' Write the current state to a state file in the session dir. + ''' + try: + f = open(os.path.join(self.sessiondir, "state"), "w") + f.write("%d %s\n" % (state, coreapi.state_name(state))) + f.close() + except Exception, e: + self.warn("Error writing state file: %s" % e) + + def runhook(self, state, hooks=None): + ''' Run hook scripts upon changing states. + If hooks is not specified, run all hooks in the given state. + ''' + if state not in self._hooks: + return + if hooks is None: + hooks = self._hooks[state] + for (filename, data) in hooks: + try: + f = open(os.path.join(self.sessiondir, filename), "w") + f.write(data) + f.close() + except Exception, e: + self.warn("Error writing hook '%s': %s" % (filename, e)) + self.info("Running hook %s for state %s" % (filename, state)) + try: + check_call(["/bin/sh", filename], cwd=self.sessiondir, + env=self.getenviron()) + except Exception, e: + self.warn("Error running hook '%s' for state %s: %s" % + (filename, state, e)) + + def sethook(self, type, filename, srcname, data): + ''' Store a hook from a received File Message. + ''' + if srcname is not None: + raise NotImplementedError + (hookid, state) = type.split(':')[:2] + if not state.isdigit(): + self.warn("Error setting hook having state '%s'" % state) + return + state = int(state) + hook = (filename, data) + if state not in self._hooks: + self._hooks[state] = [hook,] + else: + self._hooks[state] += hook + # immediately run a hook if it is in the current state + # (this allows hooks in the definition and configuration states) + if self.getstate() == state: + self.runhook(state, hooks = [hook,]) + + def delhooks(self): + ''' Clear the hook scripts dict. + ''' + self._hooks = {} + + def getenviron(self, state=True): + ''' Get an environment suitable for a subprocess.Popen call. + This is the current process environment with some session-specific + variables. + ''' + env = os.environ.copy() + env['SESSION'] = "%s" % self.sessionid + env['SESSION_DIR'] = "%s" % self.sessiondir + env['SESSION_NAME'] = "%s" % self.name + env['SESSION_FILENAME'] = "%s" % self.filename + env['SESSION_USER'] = "%s" % self.user + env['SESSION_NODE_COUNT'] = "%s" % self.node_count + if state: + env['SESSION_STATE'] = "%s" % self.getstate() + try: + readfileintodict(os.path.join(CORE_CONF_DIR, "environment"), env) + except IOError: + pass + if self.user: + try: + readfileintodict(os.path.join('/home', self.user, ".core", + "environment"), env) + except IOError: + pass + return env + + def setthumbnail(self, thumbfile): + ''' Set the thumbnail filename. Move files from /tmp to session dir. + ''' + if not os.path.exists(thumbfile): + self.thumbnail = None + return + dstfile = os.path.join(self.sessiondir, os.path.basename(thumbfile)) + shutil.move(thumbfile, dstfile) + #print "thumbnail: %s -> %s" % (thumbfile, dstfile) + self.thumbnail = dstfile + + def setuser(self, user): + ''' Set the username for this session. Update the permissions of the + session dir to allow the user write access. + ''' + if user is not None: + try: + uid = pwd.getpwnam(user).pw_uid + gid = os.stat(self.sessiondir).st_gid + os.chown(self.sessiondir, uid, gid) + except Exception, e: + self.warn("Failed to set permission on %s: %s" % (self.sessiondir, e)) + self.user = user + + def objs(self): + ''' Return iterator over the emulation object dictionary. + ''' + return self._objs.itervalues() + + def getobjid(self): + ''' Return a unique, random object id. + ''' + self._objslock.acquire() + while True: + id = random.randint(1, 0xFFFF) + if id not in self._objs: + break + self._objslock.release() + return id + + def addobj(self, cls, *clsargs, **clskwds): + ''' Add an emulation object. + ''' + obj = cls(self, *clsargs, **clskwds) + self._objslock.acquire() + if obj.objid in self._objs: + self._objslock.release() + obj.shutdown() + raise KeyError, "non-unique object id %s for %s" % (obj.objid, obj) + self._objs[obj.objid] = obj + self._objslock.release() + return obj + + def obj(self, objid): + ''' Get an emulation object. + ''' + if objid not in self._objs: + raise KeyError, "unknown object id %s" % (objid) + return self._objs[objid] + + def objbyname(self, name): + ''' Get an emulation object using its name attribute. + ''' + with self._objslock: + for obj in self.objs(): + if hasattr(obj, "name") and obj.name == name: + return obj + raise KeyError, "unknown object with name %s" % (name) + + def delobj(self, objid): + ''' Remove an emulation object. + ''' + self._objslock.acquire() + try: + o = self._objs.pop(objid) + except KeyError: + o = None + self._objslock.release() + if o: + o.shutdown() + del o + gc.collect() +# print "gc count:", gc.get_count() +# for o in gc.get_objects(): +# if isinstance(o, PyCoreObj): +# print "XXX XXX XXX PyCoreObj:", o +# for r in gc.get_referrers(o): +# print "XXX XXX XXX referrer:", gc.get_referrers(o) + + def delobjs(self): + ''' Clear the _objs dictionary, and call each obj.shutdown() routine. + ''' + self._objslock.acquire() + while self._objs: + k, o = self._objs.popitem() + o.shutdown() + self._objslock.release() + + def writeobjs(self): + ''' Write objects to a 'nodes' file in the session dir. + The 'nodes' file lists: + number, name, api-type, class-type + ''' + try: + f = open(os.path.join(self.sessiondir, "nodes"), "w") + with self._objslock: + for objid in sorted(self._objs.keys()): + o = self._objs[objid] + f.write("%s %s %s %s\n" % (objid, o.name, o.apitype, type(o))) + f.close() + except Exception, e: + self.warn("Error writing nodes file: %s" % e) + + def addconfobj(self, objname, type, callback): + ''' Objects can register configuration objects that are included in + the Register Message and may be configured via the Configure + Message. The callback is invoked when receiving a Configure Message. + ''' + if type not in coreapi.reg_tlvs: + raise Exception, "invalid configuration object type" + self._confobjslock.acquire() + self._confobjs[objname] = (type, callback) + self._confobjslock.release() + + def confobj(self, objname, session, msg): + ''' Invoke the callback for an object upon receipt of a Configure + Message for that object. A no-op if the object doesn't exist. + ''' + replies = [] + self._confobjslock.acquire() + if objname == "all": + for objname in self._confobjs: + (type, callback) = self._confobjs[objname] + reply = callback(session, msg) + if reply is not None: + replies.append(reply) + self._confobjslock.release() + return replies + if objname in self._confobjs: + (type, callback) = self._confobjs[objname] + self._confobjslock.release() + reply = callback(session, msg) + if reply is not None: + replies.append(reply) + return replies + else: + self.info("session object doesn't own model '%s', ignoring" % \ + objname) + self._confobjslock.release() + return replies + + def confobjs_to_tlvs(self): + ''' Turn the configuration objects into a list of Register Message TLVs. + ''' + tlvdata = "" + self._confobjslock.acquire() + for objname in self._confobjs: + (type, callback) = self._confobjs[objname] + # type must be in coreapi.reg_tlvs + tlvdata += coreapi.CoreRegTlv.pack(type, objname) + self._confobjslock.release() + return tlvdata + + def info(self, msg): + ''' Utility method for writing output to stdout. + ''' + print msg + sys.stdout.flush() + + def warn(self, msg): + ''' Utility method for writing output to stderr. + ''' + print >> sys.stderr, msg + sys.stderr.flush() + + def dumpsession(self): + ''' Debug print this session. + ''' + self.info("session id=%s name=%s state=%s connected=%s" % \ + (self.sessionid, self.name, self._state, self.isconnected())) + num = len(self._objs) + self.info(" file=%s thumb=%s nc=%s/%s" % \ + (self.filename, self.thumbnail, self.node_count, num)) + + def exception(self, level, source, objid, text): + ''' Generate an Exception Message + ''' + vals = (objid, str(self.sessionid), level, source, time.ctime(), text) + types = ("NODE", "SESSION", "LEVEL", "SOURCE", "DATE", "TEXT") + tlvdata = "" + for (t,v) in zip(types, vals): + if v is not None: + tlvdata += coreapi.CoreExceptionTlv.pack( + eval("coreapi.CORE_TLV_EXCP_%s" % t), v) + msg = coreapi.CoreExceptionMessage.pack(0, tlvdata) + # send Exception Message to connected handlers (e.g. GUI) + self.broadcastraw(None, msg) + + def getcfgitem(self, cfgname): + ''' Return an entry from the configuration dictionary that comes from + command-line arguments and/or the core.conf config file. + ''' + if cfgname not in self.cfg: + return None + else: + return self.cfg[cfgname] + + def getcfgitembool(self, cfgname, defaultifnone = None): + ''' Return a boolean entry from the configuration dictionary, may + return None if undefined. + ''' + item = self.getcfgitem(cfgname) + if item is None: + return defaultifnone + return bool(item.lower() == "true") + + def getcfgitemint(self, cfgname, defaultifnone = None): + ''' Return an integer entry from the configuration dictionary, may + return None if undefined. + ''' + item = self.getcfgitem(cfgname) + if item is None: + return defaultifnone + return int(item) + + def instantiate(self, handler=None): + ''' We have entered the instantiation state, invoke startup methods + of various managers and boot the nodes. Validate nodes and check + for transition to the runtime state. + ''' + self.writeobjs() + self.addremovectrlif(node=None, remove=False) + self.emane.startup() + self.broker.startup() + self.mobility.startup() + # boot the services on each node + self.bootnodes(handler) + # allow time for processes to start + time.sleep(0.125) + self.validatenodes() + self.emane.poststartup() + # assume either all nodes have booted already, or there are some + # nodes on slave servers that will be booted and those servers will + # send a node status response message + self.checkruntime() + + def checkruntime(self): + ''' Check if we have entered the runtime state, that all nodes have been + started and the emulation is running. Start the event loop once we + have entered runtime (time=0). + ''' + # this is called from instantiate() after receiving an event message + # for the instantiation state, and from the broker when distributed + # nodes have been started + if self.node_count is None: + return + if self.getstate() == coreapi.CORE_EVENT_RUNTIME_STATE: + return + session_node_count = int(self.node_count) + nc = 0 + with self._objslock: + for obj in self.objs(): + # these networks may be added by the daemon and are not + # considered in the GUI's node count + if isinstance(obj, (nodes.PtpNet, nodes.CtrlNet)): + continue + # on Linux, GreTapBridges are auto-created, not part of GUI's + # node count + if 'GreTapBridge' in globals(): + if isinstance(obj, GreTapBridge): + continue + nc += 1 + # count booted nodes not emulated on this server + # TODO: let slave server determine RUNTIME and wait for Event Message + # broker.getbootocunt() counts all CoreNodes from status reponse + # messages, plus any remote WLANs; remote EMANE, hub, switch, etc. + # are already counted in self._objs + nc += self.broker.getbootcount() + self.info("Checking for runtime with %d of %d session nodes" % \ + (nc, session_node_count)) + if nc < session_node_count: + return # do not have information on all nodes yet + # information on all nodes has been received and they have been started + # enter the runtime state + # TODO: more sophisticated checks to verify that all nodes and networks + # are running + state = coreapi.CORE_EVENT_RUNTIME_STATE + self.evq.run() + self.setstate(state, info=True, sendevent=True) + + def datacollect(self): + ''' Tear down a running session. Stop the event loop and any running + nodes, and perform clean-up. + ''' + self.evq.stop() + with self._objslock: + for obj in self.objs(): + if isinstance(obj, nodes.PyCoreNode): + self.services.stopnodeservices(obj) + self.emane.shutdown() + self.updatectrlifhosts(remove=True) + self.addremovectrlif(node=None, remove=True) + # self.checkshutdown() is currently invoked from node delete handler + + def checkshutdown(self): + ''' Check if we have entered the shutdown state, when no running nodes + and links remain. + ''' + with self._objslock: + nc = len(self._objs) + # TODO: this doesn't consider slave server node counts + # wait for slave servers to enter SHUTDOWN state, then master session + # can enter SHUTDOWN + replies = () + if nc == 0: + replies = self.setstate(state=coreapi.CORE_EVENT_SHUTDOWN_STATE, + info=True, sendevent=True, returnevent=True) + self.sdt.shutdown() + return replies + + def setmaster(self, handler): + ''' Look for the specified handler and set our master flag + appropriately. Returns True if we are connected to the given + handler. + ''' + with self._handlerslock: + for h in self._handlers: + if h != handler: + continue + self.master = h.master + return True + return False + + def shortsessionid(self): + ''' Return a shorter version of the session ID, appropriate for + interface names, where length may be limited. + ''' + return (self.sessionid >> 8) ^ (self.sessionid & ((1 << 8) - 1)) + + def bootnodes(self, handler): + ''' Invoke the boot() procedure for all nodes and send back node + messages to the GUI for node messages that had the status + request flag. + ''' + #self.addremovectrlif(node=None, remove=False) + with self._objslock: + for n in self.objs(): + if not isinstance(n, nodes.PyCoreNode): + continue + if isinstance(n, nodes.RJ45Node): + continue + # add a control interface if configured + self.addremovectrlif(node=n, remove=False) + n.boot() + nodenum = n.objid + if handler is None: + continue + if nodenum in handler.nodestatusreq: + tlvdata = "" + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_NUMBER, + nodenum) + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_EMUID, + n.objid) + reply = coreapi.CoreNodeMessage.pack(coreapi.CORE_API_ADD_FLAG \ + | coreapi.CORE_API_LOC_FLAG, + tlvdata) + try: + handler.request.sendall(reply) + except Exception, e: + self.warn("sendall() error: %s" % e) + del handler.nodestatusreq[nodenum] + self.updatectrlifhosts() + + + def validatenodes(self): + with self._objslock: + for n in self.objs(): + # TODO: this can be extended to validate everything + # such as vnoded process, bridges, etc. + if not isinstance(n, nodes.PyCoreNode): + continue + if isinstance(n, nodes.RJ45Node): + continue + n.validate() + + def addremovectrlif(self, node, remove=False): + ''' Add a control interface to a node when a 'controlnet' prefix is + listed in the config file. Create a control interface bridge as + necessary. When the remove flag is True, remove the bridge that + connects control interfaces. + ''' + prefix = None + try: + if self.cfg['controlnet']: + prefix = self.cfg['controlnet'] + except KeyError: + pass + if hasattr(self.options, 'controlnet'): + prefix = self.options.controlnet + if not prefix: + return + + updown_script = None + try: + if self.cfg['controlnet_updown_script']: + updown_script = self.cfg['controlnet_updown_script'] + except KeyError: + pass + + id = "ctrlnet" + try: + ctrlnet = self.obj(id) + if remove: + self.delobj(ctrlnet.objid) + return + except KeyError: + if remove: + return + ctrlnet = self.addobj(cls = nodes.CtrlNet, objid=id, + prefix=prefix, + assign_address = self.master, + updown_script=updown_script) + self.broker.addnet(id) # to build tunnels during addnettunnels() + for server in self.broker.getserverlist(): + self.broker.addnodemap(server, id) + if node is None: + return + ctrlip = node.objid + try: + addrlist = ["%s/%s" % (ctrlnet.prefix.addr(ctrlip), + ctrlnet.prefix.prefixlen)] + except ValueError: + msg = "Control interface not added to node %s. " % node.objid + msg += "Invalid control network prefix (%s). " % ctrlnet.prefix + msg += "A longer prefix length may be required for this many nodes." + node.exception(coreapi.CORE_EXCP_LEVEL_ERROR, + "Session.addremovectrlif()", msg) + return + ifi = node.newnetif(net = ctrlnet, ifindex = ctrlnet.CTRLIF_IDX_BASE, + ifname = "ctrl0", hwaddr = MacAddr.random(), + addrlist = addrlist) + node.netif(ifi).control = True + + def updatectrlifhosts(self, remove=False): + ''' Add the IP addresses of control interfaces to the /etc/hosts file. + ''' + if not self.getcfgitembool('update_etc_hosts', False): + return + id = "ctrlnet" + try: + ctrlnet = self.obj(id) + except KeyError: + return + header = "CORE session %s host entries" % self.sessionid + if remove: + if self.getcfgitembool('verbose', False): + self.info("Removing /etc/hosts file entries.") + filedemunge('/etc/hosts', header) + return + entries = [] + for ifc in ctrlnet.netifs(): + name = ifc.node.name + for addr in ifc.addrlist: + entries.append("%s %s" % (addr.split('/')[0], ifc.node.name)) + if self.getcfgitembool('verbose', False): + self.info("Adding %d /etc/hosts file entries." % len(entries)) + filemunge('/etc/hosts', header, '\n'.join(entries) + '\n') + + def runtime(self): + ''' Return the current time we have been in the runtime state, or zero + if not in runtime. + ''' + if self.getstate() == coreapi.CORE_EVENT_RUNTIME_STATE: + return time.time() - self._time + else: + return 0.0 + + def addevent(self, etime, node=None, name=None, data=None): + ''' Add an event to the event queue, with a start time relative to the + start of the runtime state. + ''' + etime = float(etime) + runtime = self.runtime() + if runtime > 0.0: + if time <= runtime: + self.warn("Could not schedule past event for time %s " \ + "(run time is now %s)" % (time, runtime)) + return + etime = etime - runtime + func = self.runevent + self.evq.add_event(etime, func, node=node, name=name, data=data) + if name is None: + name = "" + self.info("scheduled event %s at time %s data=%s" % \ + (name, etime + runtime, data)) + + def runevent(self, node=None, name=None, data=None): + ''' Run a scheduled event, executing commands in the data string. + ''' + now = self.runtime() + if name is None: + name = "" + self.info("running event %s at time %s cmd=%s" % (name, now, data)) + if node is None: + mutedetach(shlex.split(data)) + else: + n = self.obj(node) + n.cmd(shlex.split(data), wait=False) + + def sendobjs(self): + ''' Return API messages that describe the current session. + ''' + replies = [] + nn = 0 + # send node messages for node and network objects + with self._objslock: + for obj in self.objs(): + msg = obj.tonodemsg(flags = coreapi.CORE_API_ADD_FLAG) + if msg is not None: + replies.append(msg) + nn += 1 + + nl = 0 + # send link messages from net objects + with self._objslock: + for obj in self.objs(): + linkmsgs = obj.tolinkmsgs(flags = coreapi.CORE_API_ADD_FLAG) + for msg in linkmsgs: + replies.append(msg) + nl += 1 + # send model info + configs = self.mobility.getallconfigs() + configs += self.emane.getallconfigs() + for (nodenum, cls, values) in configs: + #cls = self.mobility._modelclsmap[conftype] + msg = cls.toconfmsg(flags=0, nodenum=nodenum, + typeflags=coreapi.CONF_TYPE_FLAGS_UPDATE, + values=values) + replies.append(msg) + # service customizations + svc_configs = self.services.getallconfigs() + for (nodenum, svc) in svc_configs: + opaque = "service:%s" % svc._name + tlvdata = "" + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_NODE, + nodenum) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_OPAQUE, + opaque) + tmp = coreapi.CoreConfMessage(flags=0, hdr="", data=tlvdata) + replies.append(self.services.configure_request(tmp)) + for (filename, data) in self.services.getallfiles(svc): + flags = coreapi.CORE_API_ADD_FLAG + tlvdata = coreapi.CoreFileTlv.pack(coreapi.CORE_TLV_FILE_NODE, + nodenum) + tlvdata += coreapi.CoreFileTlv.pack(coreapi.CORE_TLV_FILE_NAME, + str(filename)) + tlvdata += coreapi.CoreFileTlv.pack(coreapi.CORE_TLV_FILE_TYPE, + opaque) + tlvdata += coreapi.CoreFileTlv.pack(coreapi.CORE_TLV_FILE_DATA, + str(data)) + replies.append(coreapi.CoreFileMessage.pack(flags, tlvdata)) + + # TODO: send location info + # replies.append(self.location.toconfmsg()) + # send hook scripts + for state in sorted(self._hooks.keys()): + for (filename, data) in self._hooks[state]: + flags = coreapi.CORE_API_ADD_FLAG + tlvdata = coreapi.CoreFileTlv.pack(coreapi.CORE_TLV_FILE_NAME, + str(filename)) + tlvdata += coreapi.CoreFileTlv.pack(coreapi.CORE_TLV_FILE_TYPE, + "hook:%s" % state) + tlvdata += coreapi.CoreFileTlv.pack(coreapi.CORE_TLV_FILE_DATA, + str(data)) + replies.append(coreapi.CoreFileMessage.pack(flags, tlvdata)) + + # send meta data + tmp = coreapi.CoreConfMessage(flags=0, hdr="", data="") + opts = self.options.configure_request(tmp, + typeflags = coreapi.CONF_TYPE_FLAGS_UPDATE) + if opts: + replies.append(opts) + meta = self.metadata.configure_request(tmp, + typeflags = coreapi.CONF_TYPE_FLAGS_UPDATE) + if meta: + replies.append(meta) + + self.info("informing GUI about %d nodes and %d links" % (nn, nl)) + return replies + + + +class SessionConfig(ConfigurableManager, Configurable): + _name = 'session' + _type = coreapi.CORE_TLV_REG_UTILITY + _confmatrix = [ + ("controlnet", coreapi.CONF_DATA_TYPE_STRING, '', '', + 'Control network'), + ("enablerj45", coreapi.CONF_DATA_TYPE_BOOL, '1', 'On,Off', + 'Enable RJ45s'), + ("preservedir", coreapi.CONF_DATA_TYPE_BOOL, '0', 'On,Off', + 'Preserve session dir'), + ("enablesdt", coreapi.CONF_DATA_TYPE_BOOL, '0', 'On,Off', + 'Enable SDT3D output'), + ] + _confgroups = "Options:1-%d" % len(_confmatrix) + + def __init__(self, session): + ConfigurableManager.__init__(self, session) + self.reset() + + def reset(self): + defaults = self.getdefaultvalues() + for k in self.getnames(): + # value may come from config file + v = self.session.getcfgitem(k) + if v is None: + v = self.valueof(k, defaults) + v = self.offontobool(v) + setattr(self, k, v) + + def configure_values(self, msg, values): + return self.configure_values_keyvalues(msg, values, self, + self.getnames()) + + def configure_request(self, msg, typeflags = coreapi.CONF_TYPE_FLAGS_NONE): + nodenum = msg.gettlv(coreapi.CORE_TLV_CONF_NODE) + values = [] + for k in self.getnames(): + v = getattr(self, k) + if v is None: + v = "" + values.append("%s" % v) + return self.toconfmsg(0, nodenum, typeflags, values) + +class SessionMetaData(ConfigurableManager): + ''' Metadata is simply stored in a configs[] dict. Key=value pairs are + passed in from configure messages destined to the "metadata" object. + The data is not otherwise interpreted or processed. + ''' + _name = "metadata" + _type = coreapi.CORE_TLV_REG_UTILITY + + def configure_values(self, msg, values): + if values is None: + return None + kvs = values.split('|') + for kv in kvs: + try: + (key, value) = kv.split('=', 1) + except ValueError: + raise ValueError, "invalid key in metdata: %s" % kv + self.additem(key, value) + return None + + def configure_request(self, msg, typeflags = coreapi.CONF_TYPE_FLAGS_NONE): + nodenum = msg.gettlv(coreapi.CORE_TLV_CONF_NODE) + values_str = "|".join(map(lambda(k,v): "%s=%s" % (k,v), self.items())) + return self.toconfmsg(0, nodenum, typeflags, values_str) + + def toconfmsg(self, flags, nodenum, typeflags, values_str): + tlvdata = "" + if nodenum is not None: + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_NODE, + nodenum) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_OBJ, + self._name) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_TYPE, + typeflags) + datatypes = tuple( map(lambda(k,v): coreapi.CONF_DATA_TYPE_STRING, + self.items()) ) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_DATA_TYPES, + datatypes) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_VALUES, + values_str) + msg = coreapi.CoreConfMessage.pack(flags, tlvdata) + return msg + + def additem(self, key, value): + self.configs[key] = value + + def items(self): + return self.configs.iteritems() + +atexit.register(Session.atexit) diff --git a/daemon/core/xen/__init__.py b/daemon/core/xen/__init__.py new file mode 100644 index 00000000..e69de29b diff --git a/daemon/core/xen/xen.py b/daemon/core/xen/xen.py new file mode 100644 index 00000000..68b5a64f --- /dev/null +++ b/daemon/core/xen/xen.py @@ -0,0 +1,818 @@ +# +# CORE +# Copyright (c)2011-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +''' +xen.py: implementation of the XenNode and XenVEth classes that support +generating Xen domUs based on an ISO image and persistent configuration area +''' + +from core.netns.vnet import * +from core.netns.vnode import LxcNode +from core.coreobj import PyCoreObj, PyCoreNode, PyCoreNetIf +from core.misc.ipaddr import * +from core.misc.utils import * +from core.constants import * +from core.api import coreapi +from core.netns.vif import TunTap +from core.emane.nodes import EmaneNode + +try: + import parted +except ImportError, e: + #print "Failed to load parted Python module required by Xen support." + #print "Error was:", e + raise ImportError + +import base64 +import crypt +import subprocess +try: + import fsimage +except ImportError, e: + # fix for fsimage under Ubuntu + sys.path.append("/usr/lib/xen-default/lib/python") + try: + import fsimage + except ImportError, e: + #print "Failed to load fsimage Python module required by Xen support." + #print "Error was:", e + raise ImportError + + + +import os +import time +import shutil +import string + +# XXX move these out to config file +AWK_PATH = "/bin/awk" +KPARTX_PATH = "/sbin/kpartx" +LVCREATE_PATH = "/sbin/lvcreate" +LVREMOVE_PATH = "/sbin/lvremove" +LVCHANGE_PATH = "/sbin/lvchange" +MKFSEXT4_PATH = "/sbin/mkfs.ext4" +MKSWAP_PATH = "/sbin/mkswap" +TAR_PATH = "/bin/tar" +SED_PATH = "/bin/sed" +XM_PATH = "/usr/sbin/xm" +UDEVADM_PATH = "/sbin/udevadm" + +class XenVEth(PyCoreNetIf): + def __init__(self, node, name, localname, mtu = 1500, net = None, + start = True, hwaddr = None): + # note that net arg is ignored + PyCoreNetIf.__init__(self, node = node, name = name, mtu = mtu) + self.localname = localname + self.up = False + self.hwaddr = hwaddr + if start: + self.startup() + + def startup(self): + cmd = [XM_PATH, 'network-attach', self.node.vmname, + 'vifname=%s' % self.localname, 'script=vif-core'] + if self.hwaddr is not None: + cmd.append('mac=%s' % self.hwaddr) + check_call(cmd) + check_call([IP_BIN, "link", "set", self.localname, "up"]) + self.up = True + + def shutdown(self): + if not self.up: + return + if self.localname: + if self.hwaddr is not None: + pass + # this should be doable, but some argument isn't a string + #check_call([XM_PATH, 'network-detach', self.node.vmname, + # self.hwaddr]) + self.up = False + + +class XenNode(PyCoreNode): + apitype = coreapi.CORE_NODE_XEN + + FilesToIgnore = frozenset([ + #'ipforward.sh', + 'quaggaboot.sh', + ]) + + FilesRedirection = { + 'ipforward.sh' : '/core-tmp/ipforward.sh', + } + + CmdsToIgnore = frozenset([ + #'sh ipforward.sh', + #'sh quaggaboot.sh zebra', + #'sh quaggaboot.sh ospfd', + #'sh quaggaboot.sh ospf6d', + 'sh quaggaboot.sh vtysh', + 'killall zebra', + 'killall ospfd', + 'killall ospf6d', + 'pidof zebra', 'pidof ospfd', 'pidof ospf6d', + ]) + + def RedirCmd_ipforward(self): + sysctlFile = open(os.path.join(self.mountdir, self.etcdir, + 'sysctl.conf'), 'a') + p1 = subprocess.Popen([AWK_PATH, + '/^\/sbin\/sysctl -w/ {print $NF}', + os.path.join(self.nodedir, + 'core-tmp/ipforward.sh') ], + stdout=sysctlFile) + p1.wait() + sysctlFile.close() + + def RedirCmd_zebra(self): + check_call([SED_PATH, '-i', '-e', 's/^zebra=no/zebra=yes/', + os.path.join(self.mountdir, self.etcdir, 'quagga/daemons')]) + def RedirCmd_ospfd(self): + check_call([SED_PATH, '-i', '-e', 's/^ospfd=no/ospfd=yes/', + os.path.join(self.mountdir, self.etcdir, 'quagga/daemons')]) + def RedirCmd_ospf6d(self): + check_call([SED_PATH, '-i', '-e', + 's/^ospf6d=no/ospf6d=yes/', + os.path.join(self.mountdir, self.etcdir, 'quagga/daemons')]) + + CmdsRedirection = { + 'sh ipforward.sh' : RedirCmd_ipforward, + 'sh quaggaboot.sh zebra' : RedirCmd_zebra, + 'sh quaggaboot.sh ospfd' : RedirCmd_ospfd, + 'sh quaggaboot.sh ospf6d' : RedirCmd_ospf6d, + } + + # CoreNode: no __init__, take from LxcNode & SimpleLxcNode + def __init__(self, session, objid = None, name = None, + nodedir = None, bootsh = "boot.sh", verbose = False, + start = True, model = None, + vgname = None, ramsize = None, disksize = None, + isofile = None): + # SimpleLxcNode initialization + PyCoreNode.__init__(self, session = session, objid = objid, name = name, + verbose = verbose) + self.nodedir = nodedir + self.model = model + # indicates startup() has been invoked and disk has been initialized + self.up = False + # indicates boot() has been invoked and domU is running + self.booted = False + self.ifindex = 0 + self.lock = threading.RLock() + self._netif = {} + # domU name + self.vmname = "c" + str(session.sessionid) + "-" + name + # LVM volume group name + self.vgname = self.getconfigitem('vg_name', vgname) + # LVM logical volume name + self.lvname = self.vmname + '-' + # LVM logical volume device path name + self.lvpath = os.path.join('/dev', self.vgname, self.lvname) + self.disksize = self.getconfigitem('disk_size', disksize) + self.ramsize = int(self.getconfigitem('ram_size', ramsize)) + self.isofile = self.getconfigitem('iso_file', isofile) + # temporary mount point for paused VM persistent filesystem + self.mountdir = None + self.etcdir = self.getconfigitem('etc_path') + + # TODO: remove this temporary hack + self.FilesRedirection['/usr/local/etc/quagga/Quagga.conf'] = \ + os.path.join(self.getconfigitem('mount_path'), self.etcdir, + 'quagga/Quagga.conf') + + # LxcNode initialization + # self.makenodedir() + if self.nodedir is None: + self.nodedir = \ + os.path.join(session.sessiondir, self.name + ".conf") + self.mountdir = self.nodedir + self.getconfigitem('mount_path') + if not os.path.isdir(self.mountdir): + os.makedirs(self.mountdir) + self.tmpnodedir = True + else: + raise Exception, "Xen PVM node requires a temporary nodedir" + self.tmpnodedir = False + self.bootsh = bootsh + if start: + self.startup() + + def getconfigitem(self, name, default=None): + ''' Configuration items come from the xen.conf file and/or input from + the GUI, and are stored in the session using the XenConfigManager + object. self.model is used to identify particular profiles + associated with a node type in the GUI. + ''' + return self.session.xen.getconfigitem(name=name, model=self.model, + node=self, value=default) + + # from class LxcNode (also SimpleLxcNode) + def startup(self): + self.warn("XEN PVM startup() called: preparing disk for %s" % self.name) + self.lock.acquire() + try: + if self.up: + raise Exception, "already up" + self.createlogicalvolume() + self.createpartitions() + persistdev = self.createfilesystems() + check_call([MOUNT_BIN, '-t', 'ext4', persistdev, self.mountdir]) + self.untarpersistent(tarname=self.getconfigitem('persist_tar_iso'), + iso=True) + self.setrootpassword(pw = self.getconfigitem('root_password')) + self.sethostname(old='UBASE', new=self.name) + self.setupssh(keypath=self.getconfigitem('ssh_key_path')) + self.createvm() + self.up = True + finally: + self.lock.release() + + # from class LxcNode (also SimpleLxcNode) + def boot(self): + self.warn("XEN PVM boot() called") + + self.lock.acquire() + if not self.up: + raise Exception, "Can't boot VM without initialized disk" + + if self.booted: + self.lock.release() + return + + self.session.services.bootnodeservices(self) + tarname = self.getconfigitem('persist_tar') + if tarname: + self.untarpersistent(tarname=tarname, iso=False) + + try: + check_call([UMOUNT_BIN, self.mountdir]) + self.unmount_all(self.mountdir) + check_call([UDEVADM_PATH, 'settle']) + check_call([KPARTX_PATH, '-d', self.lvpath]) + + #time.sleep(5) + #time.sleep(1) + + # unpause VM + if self.verbose: + self.warn("XEN PVM boot() unpause domU %s" % self.vmname) + mutecheck_call([XM_PATH, 'unpause', self.vmname]) + + self.booted = True + finally: + self.lock.release() + + def validate(self): + self.session.services.validatenodeservices(self) + + # from class LxcNode (also SimpleLxcNode) + def shutdown(self): + self.warn("XEN PVM shutdown() called") + if not self.up: + return + self.lock.acquire() + try: + if self.up: + # sketch from SimpleLxcNode + for netif in self.netifs(): + netif.shutdown() + + try: + # RJE XXX what to do here + if self.booted: + mutecheck_call([XM_PATH, 'destroy', self.vmname]) + self.booted = False + except OSError: + pass + except subprocess.CalledProcessError: + # ignore this error too, the VM may have exited already + pass + + # discard LVM volume + lvmRemoveCount = 0 + while os.path.exists(self.lvpath): + try: + check_call([UDEVADM_PATH, 'settle']) + mutecall([LVCHANGE_PATH, '-an', self.lvpath]) + lvmRemoveCount += 1 + mutecall([LVREMOVE_PATH, '-f', self.lvpath]) + except OSError: + pass + if (lvmRemoveCount > 1): + self.warn("XEN PVM shutdown() required %d lvremove " \ + "executions." % lvmRemoveCount) + + self._netif.clear() + del self.session + + self.up = False + + finally: + self.rmnodedir() + self.lock.release() + + def createlogicalvolume(self): + ''' Create a logical volume for this Xen domU. Called from startup(). + ''' + if os.path.exists(self.lvpath): + raise Exception, "LVM volume already exists" + mutecheck_call([LVCREATE_PATH, '--size', self.disksize, + '--name', self.lvname, self.vgname]) + + def createpartitions(self): + ''' Partition the LVM volume into persistent and swap partitions + using the parted module. + ''' + dev = parted.Device(path=self.lvpath) + dev.removeFromCache() + disk = parted.freshDisk(dev, 'msdos') + constraint = parted.Constraint(device=dev) + persist_size = int(0.75 * constraint.maxSize); + self.createpartition(device=dev, disk=disk, start=1, + end=(persist_size - 1) , type="ext4") + self.createpartition(device=dev, disk=disk, start=persist_size, + end=(constraint.maxSize - 1) , type="linux-swap(v1)") + disk.commit() + + def createpartition(self, device, disk, start, end, type): + ''' Create a single partition of the specified type and size and add + it to the disk object, using the parted module. + ''' + geo = parted.Geometry(device=device, start=start, end=end) + fs = parted.FileSystem(type=type, geometry=geo) + part = parted.Partition(disk=disk, fs=fs, type=parted.PARTITION_NORMAL, + geometry=geo) + constraint = parted.Constraint(exactGeom=geo) + disk.addPartition(partition=part, constraint=constraint) + + def createfilesystems(self): + ''' Make an ext4 filesystem and swap space. Return the device name for + the persistent partition so we can mount it. + ''' + output = subprocess.Popen([KPARTX_PATH, '-l', self.lvpath], + stdout=subprocess.PIPE).communicate()[0] + lines = output.splitlines() + persistdev = '/dev/mapper/' + lines[0].strip().split(' ')[0].strip() + swapdev = '/dev/mapper/' + lines[1].strip().split(' ')[0].strip() + check_call([KPARTX_PATH, '-a', self.lvpath]) + mutecheck_call([MKFSEXT4_PATH, '-L', 'persist', persistdev]) + mutecheck_call([MKSWAP_PATH, '-f', '-L', 'swap', swapdev]) + return persistdev + + def untarpersistent(self, tarname, iso): + ''' Unpack a persistent template tar file to the mounted mount dir. + Uses fsimage library to read from an ISO file. + ''' + tarname = tarname.replace('%h', self.name) # filename may use hostname + if iso: + try: + fs = fsimage.open(self.isofile, 0) + except IOError, e: + self.warn("Failed to open ISO file: %s (%s)" % (self.isofile,e)) + return + try: + tardata = fs.open_file(tarname).read(); + except IOError, e: + self.warn("Failed to open tar file: %s (%s)" % (tarname, e)) + return + finally: + del fs; + else: + try: + f = open(tarname) + tardata = f.read() + f.close() + except IOError, e: + self.warn("Failed to open tar file: %s (%s)" % (tarname, e)) + return + p = subprocess.Popen([TAR_PATH, '-C', self.mountdir, '--numeric-owner', + '-xf', '-'], stdin=subprocess.PIPE) + p.communicate(input=tardata) + p.wait() + + def setrootpassword(self, pw): + ''' Set the root password by updating the shadow password file that + is on the filesystem mounted in the temporary area. + ''' + saltedpw = crypt.crypt(pw, '$6$'+base64.b64encode(os.urandom(12))) + check_call([SED_PATH, '-i', '-e', + '/^root:/s_^root:\([^:]*\):_root:' + saltedpw + ':_', + os.path.join(self.mountdir, self.etcdir, 'shadow')]) + + def sethostname(self, old, new): + ''' Set the hostname by updating the hostname and hosts files that + reside on the filesystem mounted in the temporary area. + ''' + check_call([SED_PATH, '-i', '-e', 's/%s/%s/' % (old, new), + os.path.join(self.mountdir, self.etcdir, 'hostname')]) + check_call([SED_PATH, '-i', '-e', 's/%s/%s/' % (old, new), + os.path.join(self.mountdir, self.etcdir, 'hosts')]) + + def setupssh(self, keypath): + ''' Configure SSH access by installing host keys and a system-wide + authorized_keys file. + ''' + sshdcfg = os.path.join(self.mountdir, self.etcdir, 'ssh/sshd_config') + check_call([SED_PATH, '-i', '-e', + 's/PermitRootLogin no/PermitRootLogin yes/', sshdcfg]) + sshdir = os.path.join(self.getconfigitem('mount_path'), self.etcdir, + 'ssh') + sshdir = sshdir.replace('/','\\/') # backslash slashes for use in sed + check_call([SED_PATH, '-i', '-e', + 's/#AuthorizedKeysFile %h\/.ssh\/authorized_keys/' + \ + 'AuthorizedKeysFile ' + sshdir + '\/authorized_keys/', + sshdcfg]) + for f in ('ssh_host_rsa_key','ssh_host_rsa_key.pub','authorized_keys'): + src = os.path.join(keypath, f) + dst = os.path.join(self.mountdir, self.etcdir, 'ssh', f) + shutil.copy(src, dst) + if f[-3:] != "pub": + os.chmod(dst, 0600) + + def createvm(self): + ''' Instantiate a *paused* domU VM + Instantiate it now, so we can add network interfaces, + pause it so we can have the filesystem open for configuration. + ''' + args = [XM_PATH, 'create', os.devnull, '--paused'] + args.extend(['name=' + self.vmname, 'memory=' + str(self.ramsize)]) + args.append('disk=tap:aio:' + self.isofile + ',hda,r') + args.append('disk=phy:' + self.lvpath + ',hdb,w') + args.append('bootloader=pygrub') + bootargs = '--kernel=/isolinux/vmlinuz --ramdisk=/isolinux/initrd' + args.append('bootargs=' + bootargs) + for action in ('poweroff', 'reboot', 'suspend', 'crash', 'halt'): + args.append('on_%s=destroy' % action) + args.append('extra=' + self.getconfigitem('xm_create_extra')) + mutecheck_call(args) + + # from class LxcNode + def privatedir(self, path): + #self.warn("XEN PVM privatedir() called") + # Do nothing, Xen PVM nodes are fully private + pass + + # from class LxcNode + def opennodefile(self, filename, mode = "w"): + self.warn("XEN PVM opennodefile() called") + raise Exception, "Can't open VM file with opennodefile()" + + # from class LxcNode + # open a file on a paused Xen node + def openpausednodefile(self, filename, mode = "w"): + dirname, basename = os.path.split(filename) + if not basename: + raise ValueError, "no basename for filename: " + filename + if dirname and dirname[0] == "/": + dirname = dirname[1:] + #dirname = dirname.replace("/", ".") + dirname = os.path.join(self.nodedir, dirname) + if not os.path.isdir(dirname): + os.makedirs(dirname, mode = 0755) + hostfilename = os.path.join(dirname, basename) + return open(hostfilename, mode) + + # from class LxcNode + def nodefile(self, filename, contents, mode = 0644): + if filename in self.FilesToIgnore: + #self.warn("XEN PVM nodefile(filename=%s) ignored" % [filename]) + return + + if filename in self.FilesRedirection: + redirFilename = self.FilesRedirection[filename] + self.warn("XEN PVM nodefile(filename=%s) redirected to %s" % (filename, redirFilename)) + filename = redirFilename + + self.warn("XEN PVM nodefile(filename=%s) called" % [filename]) + self.lock.acquire() + if not self.up: + self.lock.release() + raise Exception, "Can't access VM file as VM disk isn't ready" + return + + if self.booted: + self.lock.release() + raise Exception, "Can't access VM file as VM is already running" + return + + try: + f = self.openpausednodefile(filename, "w") + f.write(contents) + os.chmod(f.name, mode) + f.close() + self.info("created nodefile: '%s'; mode: 0%o" % (f.name, mode)) + finally: + self.lock.release() + + # from class SimpleLxcNode + def alive(self): + # is VM running? + return False # XXX + + def cmd(self, args, wait = True): + cmdAsString = string.join(args, ' ') + if cmdAsString in self.CmdsToIgnore: + #self.warn("XEN PVM cmd(args=[%s]) called and ignored" % cmdAsString) + return 0 + if cmdAsString in self.CmdsRedirection: + self.CmdsRedirection[cmdAsString](self) + return 0 + + self.warn("XEN PVM cmd(args=[%s]) called, but not yet implemented" % cmdAsString) + return 0 + + def cmdresult(self, args): + cmdAsString = string.join(args, ' ') + if cmdAsString in self.CmdsToIgnore: + #self.warn("XEN PVM cmd(args=[%s]) called and ignored" % cmdAsString) + return (0, "") + self.warn("XEN PVM cmdresult(args=[%s]) called, but not yet implemented" % cmdAsString) + return (0, "") + + def popen(self, args): + cmdAsString = string.join(args, ' ') + self.warn("XEN PVM popen(args=[%s]) called, but not yet implemented" % cmdAsString) + return + + def icmd(self, args): + cmdAsString = string.join(args, ' ') + self.warn("XEN PVM icmd(args=[%s]) called, but not yet implemented" % cmdAsString) + return + + def term(self, sh = "/bin/sh"): + self.warn("XEN PVM term() called, but not yet implemented") + return + + def termcmdstring(self, sh = "/bin/sh"): + ''' We may add 'sudo' to the command string because the GUI runs as a + normal user. Use SSH if control interface is available, otherwise + use Xen console with a keymapping for easy login. + ''' + controlifc = None + for ifc in self.netifs(): + if hasattr(ifc, 'control') and ifc.control == True: + controlifc = ifc + break + cmd = "xterm " + # use SSH if control interface is available + if controlifc: + controlip = controlifc.addrlist[0].split('/')[0] + cmd += "-e ssh root@%s" % controlip + return cmd + # otherwise use 'xm console' + #pw = self.getconfigitem('root_password') + #cmd += "-xrm 'XTerm*VT100.translations: #override F1: " + #cmd += "string(\"root\\n\") \\n F2: string(\"%s\\n\")' " % pw + cmd += "-e sudo %s console %s" % (XM_PATH, self.vmname) + return cmd + + def shcmd(self, cmdstr, sh = "/bin/sh"): + self.warn("XEN PVM shcmd(args=[%s]) called, but not yet implemented" % cmdstr) + return + + # from class SimpleLxcNode + def info(self, msg): + if self.verbose: + print "%s: %s" % (self.name, msg) + sys.stdout.flush() + + # from class SimpleLxcNode + def warn(self, msg): + print >> sys.stderr, "%s: %s" % (self.name, msg) + sys.stderr.flush() + + def mount(self, source, target): + self.warn("XEN PVM Nodes can't bind-mount filesystems") + + def umount(self, target): + self.warn("XEN PVM Nodes can't bind-mount filesystems") + + def newifindex(self): + self.lock.acquire() + try: + while self.ifindex in self._netif: + self.ifindex += 1 + ifindex = self.ifindex + self.ifindex += 1 + return ifindex + finally: + self.lock.release() + + def getifindex(self, netif): + for ifindex in self._netif: + if self._netif[ifindex] is netif: + return ifindex + return -1 + + def addnetif(self, netif, ifindex): + self.warn("XEN PVM addnetif() called") + PyCoreNode.addnetif(self, netif, ifindex) + + def delnetif(self, ifindex): + self.warn("XEN PVM delnetif() called") + PyCoreNode.delnetif(self, ifindex) + + def newveth(self, ifindex = None, ifname = None, net = None, hwaddr = None): + self.warn("XEN PVM newveth(ifindex=%s, ifname=%s) called" % + (ifindex, ifname)) + + self.lock.acquire() + try: + if ifindex is None: + ifindex = self.newifindex() + if ifname is None: + ifname = "eth%d" % ifindex + sessionid = self.session.shortsessionid() + name = "n%s.%s.%s" % (self.objid, ifindex, sessionid) + localname = "n%s.%s.%s" % (self.objid, ifname, sessionid) + ifclass = XenVEth + veth = ifclass(node = self, name = name, localname = localname, + mtu = 1500, net = net, hwaddr = hwaddr) + + veth.name = ifname + try: + self.addnetif(veth, ifindex) + except: + veth.shutdown() + del veth + raise + return ifindex + finally: + self.lock.release() + + def newtuntap(self, ifindex = None, ifname = None, net = None): + self.warn("XEN PVM newtuntap() called but not implemented") + + def sethwaddr(self, ifindex, addr): + self._netif[ifindex].sethwaddr(addr) + if self.up: + pass + #self.cmd([IP_BIN, "link", "set", "dev", self.ifname(ifindex), + # "address", str(addr)]) + + def addaddr(self, ifindex, addr): + if self.up: + pass + # self.cmd([IP_BIN, "addr", "add", str(addr), + # "dev", self.ifname(ifindex)]) + self._netif[ifindex].addaddr(addr) + + def deladdr(self, ifindex, addr): + try: + self._netif[ifindex].deladdr(addr) + except ValueError: + self.warn("trying to delete unknown address: %s" % addr) + if self.up: + pass + # self.cmd([IP_BIN, "addr", "del", str(addr), + # "dev", self.ifname(ifindex)]) + + valid_deladdrtype = ("inet", "inet6", "inet6link") + def delalladdr(self, ifindex, addrtypes = valid_deladdrtype): + addr = self.getaddr(self.ifname(ifindex), rescan = True) + for t in addrtypes: + if t not in self.valid_deladdrtype: + raise ValueError, "addr type must be in: " + \ + " ".join(self.valid_deladdrtype) + for a in addr[t]: + self.deladdr(ifindex, a) + # update cached information + self.getaddr(self.ifname(ifindex), rescan = True) + + # Xen PVM relies on boot process to bring up links + #def ifup(self, ifindex): + # if self.up: + # self.cmd([IP_BIN, "link", "set", self.ifname(ifindex), "up"]) + + def newnetif(self, net = None, addrlist = [], hwaddr = None, + ifindex = None, ifname = None): + self.warn("XEN PVM newnetif(ifindex=%s, ifname=%s) called" % + (ifindex, ifname)) + + self.lock.acquire() + + if not self.up: + self.lock.release() + raise Exception, "Can't access add veth as VM disk isn't ready" + return + + if self.booted: + self.lock.release() + raise Exception, "Can't access add veth as VM is already running" + return + + try: + if isinstance(net, EmaneNode): + raise Exception, "Xen PVM doesn't yet support Emane nets" + + # ifindex = self.newtuntap(ifindex = ifindex, ifname = ifname, + # net = net) + # # TUN/TAP is not ready for addressing yet; the device may + # # take some time to appear, and installing it into a + # # namespace after it has been bound removes addressing; + # # save addresses with the interface now + # self.attachnet(ifindex, net) + # netif = self.netif(ifindex) + # netif.sethwaddr(hwaddr) + # for addr in maketuple(addrlist): + # netif.addaddr(addr) + # return ifindex + else: + ifindex = self.newveth(ifindex = ifindex, ifname = ifname, + net = net, hwaddr = hwaddr) + if net is not None: + self.attachnet(ifindex, net) + + rulefile = os.path.join(self.getconfigitem('mount_path'), + self.etcdir, + 'udev/rules.d/70-persistent-net.rules') + f = self.openpausednodefile(rulefile, "a") + f.write('\n# Xen PVM virtual interface #%s %s with MAC address %s\n' % (ifindex, self.ifname(ifindex), hwaddr)) + # Using MAC address as we're now loading PVM net driver "early" + # OLD: Would like to use MAC address, but udev isn't working with paravirtualized NICs. Perhaps the "set hw address" isn't triggering a rescan. + f.write('SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="%s", KERNEL=="eth*", NAME="%s"\n' % (hwaddr, self.ifname(ifindex))) + #f.write('SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", DEVPATH=="/devices/vif-%s/?*", KERNEL=="eth*", NAME="%s"\n' % (ifindex, self.ifname(ifindex))) + f.close() + + if hwaddr: + self.sethwaddr(ifindex, hwaddr) + for addr in maketuple(addrlist): + self.addaddr(ifindex, addr) + #self.ifup(ifindex) + return ifindex + finally: + self.lock.release() + + def connectnode(self, ifname, othernode, otherifname): + self.warn("XEN PVM connectnode() called") + + # tmplen = 8 + # tmp1 = "tmp." + "".join([random.choice(string.ascii_lowercase) + # for x in xrange(tmplen)]) + # tmp2 = "tmp." + "".join([random.choice(string.ascii_lowercase) + # for x in xrange(tmplen)]) + # check_call([IP_BIN, "link", "add", "name", tmp1, + # "type", "veth", "peer", "name", tmp2]) + # + # check_call([IP_BIN, "link", "set", tmp1, "netns", str(self.pid)]) + # self.cmd([IP_BIN, "link", "set", tmp1, "name", ifname]) + # self.addnetif(PyCoreNetIf(self, ifname), self.newifindex()) + # + # check_call([IP_BIN, "link", "set", tmp2, "netns", str(othernode.pid)]) + # othernode.cmd([IP_BIN, "link", "set", tmp2, "name", otherifname]) + # othernode.addnetif(PyCoreNetIf(othernode, otherifname), + # othernode.newifindex()) + + def addfile(self, srcname, filename): + self.lock.acquire() + if not self.up: + self.lock.release() + raise Exception, "Can't access VM file as VM disk isn't ready" + return + + if self.booted: + self.lock.release() + raise Exception, "Can't access VM file as VM is already running" + return + + if filename in self.FilesToIgnore: + #self.warn("XEN PVM addfile(filename=%s) ignored" % [filename]) + return + + if filename in self.FilesRedirection: + redirFilename = self.FilesRedirection[filename] + self.warn("XEN PVM addfile(filename=%s) redirected to %s" % (filename, redirFilename)) + filename = redirFilename + + try: + fin = open(srcname, "r") + contents = fin.read() + fin.close() + + fout = self.openpausednodefile(filename, "w") + fout.write(contents) + os.chmod(fout.name, mode) + fout.close() + self.info("created nodefile: '%s'; mode: 0%o" % (fout.name, mode)) + finally: + self.lock.release() + + self.warn("XEN PVM addfile(filename=%s) called" % [filename]) + + #shcmd = "mkdir -p $(dirname '%s') && mv '%s' '%s' && sync" % \ + # (filename, srcname, filename) + #self.shcmd(shcmd) + + def unmount_all(self, path): + ''' Namespaces inherit the host mounts, so we need to ensure that all + namespaces have unmounted our temporary mount area so that the + kpartx command will succeed. + ''' + # Session.bootnodes() already has self.session._objslock + for o in self.session.objs(): + if not isinstance(o, LxcNode): + continue + o.umount(path) + diff --git a/daemon/core/xen/xenconfig.py b/daemon/core/xen/xenconfig.py new file mode 100644 index 00000000..7e9ad829 --- /dev/null +++ b/daemon/core/xen/xenconfig.py @@ -0,0 +1,265 @@ +# +# CORE +# Copyright (c)2011-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +xenconfig.py: Implementation of the XenConfigManager class for managing +configurable items for XenNodes. + +Configuration for a XenNode is available at these three levels: +Global config: XenConfigManager.configs[0] = (type='xen', values) + Nodes of this machine type have this config. These are the default values. + XenConfigManager.default_config comes from defaults + xen.conf +Node type config: XenConfigManager.configs[0] = (type='mytype', values) + All nodes of this type have this config. +Node-specific config: XenConfigManager.configs[nodenumber] = (type, values) + The node having this specific number has this config. +''' + +import sys, os, threading, subprocess, time, string +import ConfigParser +from xml.dom.minidom import parseString, Document +from core.constants import * +from core.api import coreapi +from core.conf import ConfigurableManager, Configurable + + +class XenConfigManager(ConfigurableManager): + ''' Xen controller object. Lives in a Session instance and is used for + building Xen profiles. + ''' + _name = "xen" + _type = coreapi.CORE_TLV_REG_EMULSRV + + def __init__(self, session): + ConfigurableManager.__init__(self, session) + self.verbose = self.session.getcfgitembool('verbose', False) + self.default_config = XenDefaultConfig(session, objid=None) + self.loadconfigfile() + + def setconfig(self, nodenum, conftype, values): + ''' add configuration values for a node to a dictionary; values are + usually received from a Configuration Message, and may refer to a + node for which no object exists yet + ''' + if nodenum is None: + nodenum = 0 # used for storing the global default config + return ConfigurableManager.setconfig(self, nodenum, conftype, values) + + def getconfig(self, nodenum, conftype, defaultvalues): + ''' get configuration values for a node; if the values don't exist in + our dictionary then return the default values supplied; if conftype + is None then we return a match on any conftype. + ''' + if nodenum is None: + nodenum = 0 # used for storing the global default config + return ConfigurableManager.getconfig(self, nodenum, conftype, + defaultvalues) + + def clearconfig(self, nodenum): + ''' remove configuration values for a node + ''' + ConfigurableManager.clearconfig(self, nodenum) + if 0 in self.configs: + self.configs.pop(0) + + def configure(self, session, msg): + ''' Handle configuration messages for global Xen config. + ''' + return self.default_config.configure(self, msg) + + def loadconfigfile(self, filename=None): + ''' Load defaults from the /etc/core/xen.conf file into dict object. + ''' + if filename is None: + filename = os.path.join(CORE_CONF_DIR, 'xen.conf') + cfg = ConfigParser.SafeConfigParser() + if filename not in cfg.read(filename): + self.session.warn("unable to read Xen config file: %s" % filename) + return + section = "xen" + if not cfg.has_section(section): + self.session.warn("%s is missing a xen section!" % filename) + return + self.configfile = dict(cfg.items(section)) + # populate default config items from config file entries + vals = list(self.default_config.getdefaultvalues()) + names = self.default_config.getnames() + for i in range(len(names)): + if names[i] in self.configfile: + vals[i] = self.configfile[names[i]] + # this sets XenConfigManager.configs[0] = (type='xen', vals) + self.setconfig(None, self.default_config._name, vals) + + def getconfigitem(self, name, model=None, node=None, value=None): + ''' Get a config item of the given name, first looking for node-specific + configuration, then model specific, and finally global defaults. + If a value is supplied, it will override any stored config. + ''' + if value is not None: + return value + n = None + if node: + n = node.objid + (t, v) = self.getconfig(nodenum=n, conftype=model, defaultvalues=None) + if n is not None and v is None: + # get item from default config for the node type + (t, v) = self.getconfig(nodenum=None, conftype=model, + defaultvalues=None) + if v is None: + # get item from default config for the machine type + (t, v) = self.getconfig(nodenum=None, + conftype=self.default_config._name, + defaultvalues=None) + + confignames = self.default_config.getnames() + if v and name in confignames: + i = confignames.index(name) + return v[i] + else: + # name may only exist in config file + if name in self.configfile: + return self.configfile[name] + else: + #self.warn("missing config item '%s'" % name) + return None + + +class XenConfig(Configurable): + ''' Manage Xen configuration profiles. + ''' + + @classmethod + def configure(cls, xen, msg): + ''' Handle configuration messages for setting up a model. + Similar to Configurable.configure(), but considers opaque data + for indicating node types. + ''' + reply = None + nodenum = msg.gettlv(coreapi.CORE_TLV_CONF_NODE) + objname = msg.gettlv(coreapi.CORE_TLV_CONF_OBJ) + conftype = msg.gettlv(coreapi.CORE_TLV_CONF_TYPE) + opaque = msg.gettlv(coreapi.CORE_TLV_CONF_OPAQUE) + + nodetype = objname + if opaque is not None: + opaque_items = opaque.split(':') + if len(opaque_items) != 2: + xen.warn("xen config: invalid opaque data in conf message") + return None + nodetype = opaque_items[1] + + if xen.verbose: + xen.info("received configure message for %s" % nodetype) + if conftype == coreapi.CONF_TYPE_FLAGS_REQUEST: + if xen.verbose: + xen.info("replying to configure request for %s " % nodetype) + # when object name is "all", the reply to this request may be None + # if this node has not been configured for this model; otherwise we + # reply with the defaults for this model + if objname == "all": + typeflags = coreapi.CONF_TYPE_FLAGS_UPDATE + else: + typeflags = coreapi.CONF_TYPE_FLAGS_NONE + values = xen.getconfig(nodenum, nodetype, defaultvalues=None)[1] + if values is None: + # get defaults from default "xen" config which includes + # settings from both cls._confdefaultvalues and xen.conf + defaults = cls.getdefaultvalues() + values = xen.getconfig(nodenum, cls._name, defaults)[1] + if values is None: + return None + # reply with config options + if nodenum is None: + nodenum = 0 + reply = cls.toconfmsg(0, nodenum, typeflags, nodetype, values) + elif conftype == coreapi.CONF_TYPE_FLAGS_RESET: + if objname == "all": + xen.clearconfig(nodenum) + #elif conftype == coreapi.CONF_TYPE_FLAGS_UPDATE: + else: + # store the configuration values for later use, when the XenNode + # object has been created + if objname is None: + xen.info("no configuration object for node %s" % nodenum) + return None + values_str = msg.gettlv(coreapi.CORE_TLV_CONF_VALUES) + if values_str is None: + # use default or preconfigured values + defaults = cls.getdefaultvalues() + values = xen.getconfig(nodenum, cls._name, defaults)[1] + else: + # use new values supplied from the conf message + values = values_str.split('|') + xen.setconfig(nodenum, nodetype, values) + return reply + + @classmethod + def toconfmsg(cls, flags, nodenum, typeflags, nodetype, values): + ''' Convert this class to a Config API message. Some TLVs are defined + by the class, but node number, conf type flags, and values must + be passed in. + ''' + values_str = string.join(values, '|') + tlvdata = "" + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_NODE, nodenum) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_OBJ, + cls._name) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_TYPE, + typeflags) + datatypes = tuple( map(lambda x: x[1], cls._confmatrix) ) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_DATA_TYPES, + datatypes) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_VALUES, + values_str) + captions = reduce( lambda a,b: a + '|' + b, \ + map(lambda x: x[4], cls._confmatrix)) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_CAPTIONS, + captions) + possiblevals = reduce( lambda a,b: a + '|' + b, \ + map(lambda x: x[3], cls._confmatrix)) + tlvdata += coreapi.CoreConfTlv.pack( + coreapi.CORE_TLV_CONF_POSSIBLE_VALUES, possiblevals) + if cls._bitmap is not None: + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_BITMAP, + cls._bitmap) + if cls._confgroups is not None: + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_GROUPS, + cls._confgroups) + opaque = "%s:%s" % (cls._name, nodetype) + tlvdata += coreapi.CoreConfTlv.pack(coreapi.CORE_TLV_CONF_OPAQUE, + opaque) + msg = coreapi.CoreConfMessage.pack(flags, tlvdata) + return msg + + +class XenDefaultConfig(XenConfig): + ''' Global default Xen configuration options. + ''' + _name = "xen" + # Configuration items: + # ('name', 'type', 'default', 'possible-value-list', 'caption') + _confmatrix = [ + ('ram_size', coreapi.CONF_DATA_TYPE_STRING, '256', '', + 'ram size (MB)'), + ('disk_size', coreapi.CONF_DATA_TYPE_STRING, '256M', '', + 'disk size (use K/M/G suffix)'), + ('iso_file', coreapi.CONF_DATA_TYPE_STRING, '', '', + 'iso file'), + ('mount_path', coreapi.CONF_DATA_TYPE_STRING, '', '', + 'mount path'), + ('etc_path', coreapi.CONF_DATA_TYPE_STRING, '', '', + 'etc path'), + ('persist_tar_iso', coreapi.CONF_DATA_TYPE_STRING, '', '', + 'iso persist tar file'), + ('persist_tar', coreapi.CONF_DATA_TYPE_STRING, '', '', + 'persist tar file'), + ('root_password', coreapi.CONF_DATA_TYPE_STRING, 'password', '', + 'root password'), + ] + + _confgroups = "domU properties:1-%d" % len(_confmatrix) + diff --git a/daemon/data/core.conf b/daemon/data/core.conf new file mode 100644 index 00000000..3f7b125b --- /dev/null +++ b/daemon/data/core.conf @@ -0,0 +1,40 @@ +# Configuration file for CORE (core-gui, core-daemon) +# + + +### GUI configuration options ### +[core-gui] +# no options are presently defined; see the ~/.core preferences file + +### core-daemon configuration options ### +[core-daemon] +pidfile = /var/run/core-daemon.pid +logfile = /var/log/core-daemon.log +# you may want to change the listenaddr below to 0.0.0.0 +listenaddr = localhost +port = 4038 +numthreads = 1 +verbose = False +quagga_bin_search = "/usr/local/bin /usr/bin /usr/lib/quagga" +quagga_sbin_search = "/usr/local/sbin /usr/sbin /usr/lib/quagga" +# uncomment the following line to load custom services from the specified dir +# this may be a comma-separated list, and directory names should be unique +# and not named 'services' +#custom_services_dir = /home/username/.core/myservices +# establish a control backchannel for accessing nodes (overriden by the session +# option of the same name) +#controlnet = 172.16.0.0/24 +# optional controlnet configuration script, uncomment to activate, and likely edit the script +# controlnet_updown_script = /usr/local/share/core/examples/controlnet_updown +# publish nodes' control IP addresses to /etc/hosts +#update_etc_hosts = True + +# EMANE configuration +emane_platform_port = 8101 +emane_transform_port = 8201 +emane_event_monitor = False +emane_models = RfPipe, Ieee80211abg, CommEffect, Bypass +# EMANE log level range [0,4] default: 2 +#emane_log_level = 2 +emane_realtime = True + diff --git a/daemon/data/xen.conf b/daemon/data/xen.conf new file mode 100644 index 00000000..5077ccc9 --- /dev/null +++ b/daemon/data/xen.conf @@ -0,0 +1,35 @@ +# Configuration file for CORE Xen support +### Xen configuration options ### +[xen] + +### The following three configuration options *must* be specified in this +### system-wide configuration file. +# LVM volume group name for creating new volumes +vg_name = domU +# directory containing an RSA SSH host key and authorized_keys file to use +# within the VM +ssh_key_path = /opt/core-xen/ssh +# extra arguments to pass via 'extra=' option to 'xm create' +xm_create_extra = console=hvc0 rtr_boot=/dev/xvda rtr_boot_fstype=iso9660 rtr_root=/boot/root.img rtr_persist=LABEL=persist rtr_swap=LABEL=swap rtr_overlay_limit=500 + +### The remaining configuration options *may* be specified here. +### If not specified here, they *must* be specified in the user (or scenario's) +### nodes.conf file as profile-specific configuration options. +# domU RAM memory size in MB +ram_size = 256 +# domU disk size in MB +disk_size = 256M +# ISO filesystem to mount as read-only +iso_file = /opt/core-xen/iso-files/rtr.iso +# directory used temporarily as moint point for persistent area, under +# /tmp/pycore.nnnnn/nX.conf/ +mount_path = /rtr/persist +# mount_path + this directory where configuration files are located on the VM +etc_path = config/etc +# name of tar file within the iso_file to unpack to mount_path +persist_tar_iso = persist-template.tar +# name of tar file in dom0 that will be unpacked to mount_path prior to boot +# the string '%h' will be replaced with the hostname (e.g. 'n3' for node 3) +persist_tar = /opt/core-xen/rtr-configs/custom-%%h.tar +# root password to set +root_password = password diff --git a/daemon/doc/Makefile.am b/daemon/doc/Makefile.am new file mode 100644 index 00000000..a02a7790 --- /dev/null +++ b/daemon/doc/Makefile.am @@ -0,0 +1,151 @@ +# CORE +# (c)2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +# Builds html and pdf documentation using Sphinx. +# + +# extra cruft to remove +DISTCLEANFILES = conf.py Makefile.in stamp-vti *.rst + +all: index.rst + +# auto-generated Python documentation using Sphinx +index.rst: + sphinx-apidoc -o . ../core + mv modules.rst index.rst + +###### below this line was generated using sphinx-quickstart ###### + +# Makefile for Sphinx documentation +# + +# You can set these variables from the command line. +SPHINXOPTS = +SPHINXBUILD = sphinx-build +PAPER = +BUILDDIR = _build + +# Internal variables. +PAPEROPT_a4 = -D latex_paper_size=a4 +PAPEROPT_letter = -D latex_paper_size=letter +ALLSPHINXOPTS = -d $(BUILDDIR)/doctrees $(PAPEROPT_$(PAPER)) $(SPHINXOPTS) . + +.PHONY: help clean html dirhtml singlehtml pickle json htmlhelp qthelp devhelp epub latex latexpdf text man changes linkcheck doctest + +help: + @echo "Please use \`make ' where is one of" + @echo " html to make standalone HTML files" + @echo " dirhtml to make HTML files named index.html in directories" + @echo " singlehtml to make a single large HTML file" + @echo " pickle to make pickle files" + @echo " json to make JSON files" + @echo " htmlhelp to make HTML files and a HTML help project" + @echo " qthelp to make HTML files and a qthelp project" + @echo " devhelp to make HTML files and a Devhelp project" + @echo " epub to make an epub" + @echo " latex to make LaTeX files, you can set PAPER=a4 or PAPER=letter" + @echo " latexpdf to make LaTeX files and run them through pdflatex" + @echo " text to make text files" + @echo " man to make manual pages" + @echo " changes to make an overview of all changed/added/deprecated items" + @echo " linkcheck to check all external links for integrity" + @echo " doctest to run all doctests embedded in the documentation (if enabled)" + +clean: + -rm -rf $(BUILDDIR)/* + +html: + $(SPHINXBUILD) -b html $(ALLSPHINXOPTS) $(BUILDDIR)/html + @echo + @echo "Build finished. The HTML pages are in $(BUILDDIR)/html." + +dirhtml: + $(SPHINXBUILD) -b dirhtml $(ALLSPHINXOPTS) $(BUILDDIR)/dirhtml + @echo + @echo "Build finished. The HTML pages are in $(BUILDDIR)/dirhtml." + +singlehtml: + $(SPHINXBUILD) -b singlehtml $(ALLSPHINXOPTS) $(BUILDDIR)/singlehtml + @echo + @echo "Build finished. The HTML page is in $(BUILDDIR)/singlehtml." + +pickle: + $(SPHINXBUILD) -b pickle $(ALLSPHINXOPTS) $(BUILDDIR)/pickle + @echo + @echo "Build finished; now you can process the pickle files." + +json: + $(SPHINXBUILD) -b json $(ALLSPHINXOPTS) $(BUILDDIR)/json + @echo + @echo "Build finished; now you can process the JSON files." + +htmlhelp: + $(SPHINXBUILD) -b htmlhelp $(ALLSPHINXOPTS) $(BUILDDIR)/htmlhelp + @echo + @echo "Build finished; now you can run HTML Help Workshop with the" \ + ".hhp project file in $(BUILDDIR)/htmlhelp." + +qthelp: + $(SPHINXBUILD) -b qthelp $(ALLSPHINXOPTS) $(BUILDDIR)/qthelp + @echo + @echo "Build finished; now you can run "qcollectiongenerator" with the" \ + ".qhcp project file in $(BUILDDIR)/qthelp, like this:" + @echo "# qcollectiongenerator $(BUILDDIR)/qthelp/CORE.qhcp" + @echo "To view the help file:" + @echo "# assistant -collectionFile $(BUILDDIR)/qthelp/CORE.qhc" + +devhelp: + $(SPHINXBUILD) -b devhelp $(ALLSPHINXOPTS) $(BUILDDIR)/devhelp + @echo + @echo "Build finished." + @echo "To view the help file:" + @echo "# mkdir -p $$HOME/.local/share/devhelp/CORE" + @echo "# ln -s $(BUILDDIR)/devhelp $$HOME/.local/share/devhelp/CORE" + @echo "# devhelp" + +epub: + $(SPHINXBUILD) -b epub $(ALLSPHINXOPTS) $(BUILDDIR)/epub + @echo + @echo "Build finished. The epub file is in $(BUILDDIR)/epub." + +latex: + $(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex + @echo + @echo "Build finished; the LaTeX files are in $(BUILDDIR)/latex." + @echo "Run \`make' in that directory to run these through (pdf)latex" \ + "(use \`make latexpdf' here to do that automatically)." + +latexpdf: + $(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex + @echo "Running LaTeX files through pdflatex..." + make -C $(BUILDDIR)/latex all-pdf + @echo "pdflatex finished; the PDF files are in $(BUILDDIR)/latex." + +text: + $(SPHINXBUILD) -b text $(ALLSPHINXOPTS) $(BUILDDIR)/text + @echo + @echo "Build finished. The text files are in $(BUILDDIR)/text." + +man: + $(SPHINXBUILD) -b man $(ALLSPHINXOPTS) $(BUILDDIR)/man + @echo + @echo "Build finished. The manual pages are in $(BUILDDIR)/man." + +changes: + $(SPHINXBUILD) -b changes $(ALLSPHINXOPTS) $(BUILDDIR)/changes + @echo + @echo "The overview file is in $(BUILDDIR)/changes." + +linkcheck: + $(SPHINXBUILD) -b linkcheck $(ALLSPHINXOPTS) $(BUILDDIR)/linkcheck + @echo + @echo "Link check complete; look for any errors in the above output " \ + "or in $(BUILDDIR)/linkcheck/output.txt." + +doctest: + $(SPHINXBUILD) -b doctest $(ALLSPHINXOPTS) $(BUILDDIR)/doctest + @echo "Testing of doctests in the sources finished, look at the " \ + "results in $(BUILDDIR)/doctest/output.txt." diff --git a/daemon/doc/conf.py.in b/daemon/doc/conf.py.in new file mode 100644 index 00000000..849cedeb --- /dev/null +++ b/daemon/doc/conf.py.in @@ -0,0 +1,256 @@ +# -*- coding: utf-8 -*- +# +# CORE Python documentation build configuration file, created by +# sphinx-quickstart on Wed Jun 13 10:44:22 2012. +# +# This file is execfile()d with the current directory set to its containing dir. +# +# Note that not all possible configuration values are present in this +# autogenerated file. +# +# All configuration values have a default; values that are commented out +# serve to show the default. + +import sys, os + +# If extensions (or modules to document with autodoc) are in another directory, +# add these directories to sys.path here. If the directory is relative to the +# documentation root, use os.path.abspath to make it absolute, like shown here. +#sys.path.insert(0, os.path.abspath('.')) + +# -- General configuration ----------------------------------------------------- + +# If your documentation needs a minimal Sphinx version, state it here. +#needs_sphinx = '1.0' + +# Add any Sphinx extension module names here, as strings. They can be extensions +# coming with Sphinx (named 'sphinx.ext.*') or your custom ones. +extensions = ['sphinx.ext.autodoc', 'sphinx.ext.todo', 'sphinx.ext.pngmath', 'sphinx.ext.ifconfig'] + +# Add any paths that contain templates here, relative to this directory. +templates_path = ['_templates'] + +# The suffix of source filenames. +source_suffix = '.rst' + +# The encoding of source files. +#source_encoding = 'utf-8-sig' + +# The master toctree document. +master_doc = 'index' + +# General information about the project. +project = u'CORE Python modules' +copyright = u'2012, core-dev' + +# The version info for the project you're documenting, acts as replacement for +# |version| and |release|, also used in various other places throughout the +# built documents. +# +# The short X.Y version. +version = '@CORE_VERSION@' +# The full version, including alpha/beta/rc tags. +release = '@CORE_VERSION@' + +# The language for content autogenerated by Sphinx. Refer to documentation +# for a list of supported languages. +#language = None + +# There are two options for replacing |today|: either, you set today to some +# non-false value, then it is used: +#today = '' +# Else, today_fmt is used as the format for a strftime call. +#today_fmt = '%B %d, %Y' + +# List of patterns, relative to source directory, that match files and +# directories to ignore when looking for source files. +exclude_patterns = ['_build'] + +# The reST default role (used for this markup: `text`) to use for all documents. +#default_role = None + +# If true, '()' will be appended to :func: etc. cross-reference text. +#add_function_parentheses = True + +# If true, the current module name will be prepended to all description +# unit titles (such as .. function::). +#add_module_names = True + +# If true, sectionauthor and moduleauthor directives will be shown in the +# output. They are ignored by default. +#show_authors = False + +# The name of the Pygments (syntax highlighting) style to use. +pygments_style = 'sphinx' + +# A list of ignored prefixes for module index sorting. +#modindex_common_prefix = [] + + +# -- Options for HTML output --------------------------------------------------- + +# The theme to use for HTML and HTML Help pages. See the documentation for +# a list of builtin themes. +html_theme = 'default' + +# Theme options are theme-specific and customize the look and feel of a theme +# further. For a list of options available for each theme, see the +# documentation. +#html_theme_options = {} + +# Add any paths that contain custom themes here, relative to this directory. +#html_theme_path = [] + +# The name for this set of Sphinx documents. If None, it defaults to +# " v documentation". +#html_title = None + +# A shorter title for the navigation bar. Default is the same as html_title. +#html_short_title = None + +# The name of an image file (relative to this directory) to place at the top +# of the sidebar. +#html_logo = None + +# The name of an image file (within the static path) to use as favicon of the +# docs. This file should be a Windows icon file (.ico) being 16x16 or 32x32 +# pixels large. +#html_favicon = None + +# Add any paths that contain custom static files (such as style sheets) here, +# relative to this directory. They are copied after the builtin static files, +# so a file named "default.css" will overwrite the builtin "default.css". +html_static_path = ['_static'] + +# If not '', a 'Last updated on:' timestamp is inserted at every page bottom, +# using the given strftime format. +#html_last_updated_fmt = '%b %d, %Y' + +# If true, SmartyPants will be used to convert quotes and dashes to +# typographically correct entities. +#html_use_smartypants = True + +# Custom sidebar templates, maps document names to template names. +#html_sidebars = {} + +# Additional templates that should be rendered to pages, maps page names to +# template names. +#html_additional_pages = {} + +# If false, no module index is generated. +#html_domain_indices = True + +# If false, no index is generated. +#html_use_index = True + +# If true, the index is split into individual pages for each letter. +#html_split_index = False + +# If true, links to the reST sources are added to the pages. +#html_show_sourcelink = True + +# If true, "Created using Sphinx" is shown in the HTML footer. Default is True. +#html_show_sphinx = True + +# If true, "(C) Copyright ..." is shown in the HTML footer. Default is True. +#html_show_copyright = True + +# If true, an OpenSearch description file will be output, and all pages will +# contain a tag referring to it. The value of this option must be the +# base URL from which the finished HTML is served. +#html_use_opensearch = '' + +# This is the file name suffix for HTML files (e.g. ".xhtml"). +#html_file_suffix = None + +# Output file base name for HTML help builder. +htmlhelp_basename = 'COREpythondoc' + + +# -- Options for LaTeX output -------------------------------------------------- + +# The paper size ('letter' or 'a4'). +#latex_paper_size = 'letter' + +# The font size ('10pt', '11pt' or '12pt'). +#latex_font_size = '10pt' + +# Grouping the document tree into LaTeX files. List of tuples +# (source start file, target name, title, author, documentclass [howto/manual]). +latex_documents = [ + ('index', 'index.tex', u'CORE Python Documentation', + u'core-dev', 'manual'), +] + +# The name of an image file (relative to this directory) to place at the top of +# the title page. +#latex_logo = None + +# For "manual" documents, if this is true, then toplevel headings are parts, +# not chapters. +#latex_use_parts = False + +# If true, show page references after internal links. +#latex_show_pagerefs = False + +# If true, show URL addresses after external links. +#latex_show_urls = False + +# Additional stuff for the LaTeX preamble. +#latex_preamble = '' + +# Documents to append as an appendix to all manuals. +#latex_appendices = [] + +# If false, no module index is generated. +#latex_domain_indices = True + + +# -- Options for manual page output -------------------------------------------- + +# One entry per manual page. List of tuples +# (source start file, name, description, authors, manual section). +man_pages = [ + ('index', 'core-python', u'CORE Python Documentation', + [u'core-dev'], 1) +] + + +# -- Options for Epub output --------------------------------------------------- + +# Bibliographic Dublin Core info. +epub_title = u'CORE Python' +epub_author = u'core-dev' +epub_publisher = u'core-dev' +epub_copyright = u'2012, core-dev' + +# The language of the text. It defaults to the language option +# or en if the language is not set. +#epub_language = '' + +# The scheme of the identifier. Typical schemes are ISBN or URL. +#epub_scheme = '' + +# The unique identifier of the text. This can be a ISBN number +# or the project homepage. +#epub_identifier = '' + +# A unique identification for the text. +#epub_uid = '' + +# HTML files that should be inserted before the pages created by sphinx. +# The format is a list of tuples containing the path and title. +#epub_pre_files = [] + +# HTML files shat should be inserted after the pages created by sphinx. +# The format is a list of tuples containing the path and title. +#epub_post_files = [] + +# A list of files that should not be packed into the epub file. +#epub_exclude_files = [] + +# The depth of the table of contents in toc.ncx. +#epub_tocdepth = 3 + +# Allow duplicate toc entries. +#epub_tocdup = True diff --git a/daemon/examples/controlnet_updown b/daemon/examples/controlnet_updown new file mode 100644 index 00000000..796b48c2 --- /dev/null +++ b/daemon/examples/controlnet_updown @@ -0,0 +1,53 @@ +#!/bin/bash +# Sample controlnet up/down script that will be executed when the control +# network is brought up or down. This script either adds an interface to the +# controlnet bridge or adds a permissive iptables firewall rule. + +controlnet_intf=$1 +action=$2 + +config_type=iptables # iptables or brctl + +iptables_address=10.205.15.132 +brctl_intf=eth2 + +BRCTL=/sbin/brctl +IPTABLES=/usr/sbin/iptables + +case "$action" in + startup) + case "$config_type" in + iptables) + $IPTABLES -I FORWARD -i $controlnet_intf -d $iptables_address -j ACCEPT + $IPTABLES -I FORWARD -o $controlnet_intf -s $iptables_address -j ACCEPT + ;; + brctl) + $BRCTL addif $controlnet_intf $brctl_intf + ;; + *) + echo "Invalid config_type $config_type" + ;; + esac + ;; + + shutdown) + case "$config_type" in + iptables) + $IPTABLES -D FORWARD -i $controlnet_intf -d $iptables_address -j ACCEPT + $IPTABLES -D FORWARD -o $controlnet_intf -s $iptables_address -j ACCEPT + ;; + brctl) + $BRCTL delif $controlnet_intf $brctl_intf + ;; + *) + echo "Invalid config_type $config_type" + ;; + esac + ;; + + *) + echo "Invalid action $action" + exit 1 + ;; +esac +exit 0 diff --git a/daemon/examples/emanemodel2core.py b/daemon/examples/emanemodel2core.py new file mode 100755 index 00000000..dd0ffbea --- /dev/null +++ b/daemon/examples/emanemodel2core.py @@ -0,0 +1,187 @@ +#!/usr/bin/env python +# +# CORE +# Copyright (c) 2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +emanemodel2core.py: scans an EMANE model source file + (e.g. emane/models/rfpipe/maclayer/rfpipemaclayer.cc) and outputs Python + bindings that allow the model to be used in CORE. + + When using this conversion utility, you should replace XYZ, Xyz, and xyz with + the actual model name. Note the capitalization convention. +''' + +import os, sys, optparse + +MODEL_TEMPLATE_PART1 = """ +# +# CORE +# Copyright (c)2013 Company. +# See the LICENSE file included in this distribution. +# +# author: Name +# +''' +xyz.py: EMANE XYZ model bindings for CORE +''' + +from core.api import coreapi +from emane import EmaneModel +from universal import EmaneUniversalModel + +class EmaneXyzModel(EmaneModel): + def __init__(self, session, objid = None, verbose = False): + EmaneModel.__init__(self, session, objid, verbose) + + # model name + _name = "emane_xyz" + # MAC parameters + _confmatrix_mac = [ +""" + +MODEL_TEMPLATE_PART2 = """ + ] + + # PHY parameters from Universal PHY + _confmatrix_phy = EmaneUniversalModel._confmatrix + + _confmatrix = _confmatrix_mac + _confmatrix_phy + + # value groupings + _confgroups = "XYZ MAC Parameters:1-%d|Universal PHY Parameters:%d-%d" \ + % ( len(_confmatrix_mac), len(_confmatrix_mac) + 1, len(_confmatrix)) + + def buildnemxmlfiles(self, e, ifc): + ''' Build the necessary nem, mac, and phy XMLs in the given path. + If an individual NEM has a nonstandard config, we need to build + that file also. Otherwise the WLAN-wide nXXemane_xyznem.xml, + nXXemane_xyzmac.xml, nXXemane_xyzphy.xml are used. + ''' + values = e.getifcconfig(self.objid, self._name, + self.getdefaultvalues(), ifc) + if values is None: + return + nemdoc = e.xmldoc("nem") + nem = nemdoc.getElementsByTagName("nem").pop() + nem.setAttribute("name", "XYZ NEM") + mactag = nemdoc.createElement("mac") + mactag.setAttribute("definition", self.macxmlname(ifc)) + nem.appendChild(mactag) + phytag = nemdoc.createElement("phy") + phytag.setAttribute("definition", self.phyxmlname(ifc)) + nem.appendChild(phytag) + e.xmlwrite(nemdoc, self.nemxmlname(ifc)) + + names = list(self.getnames()) + macnames = names[:len(self._confmatrix_mac)] + phynames = names[len(self._confmatrix_mac):] + # make any changes to the mac/phy names here to e.g. exclude them from + # the XML output + + macdoc = e.xmldoc("mac") + mac = macdoc.getElementsByTagName("mac").pop() + mac.setAttribute("name", "XYZ MAC") + mac.setAttribute("library", "xyzmaclayer") + # append MAC options to macdoc + map( lambda n: mac.appendChild(e.xmlparam(macdoc, n, \ + self.valueof(n, values))), macnames) + e.xmlwrite(macdoc, self.macxmlname(ifc)) + + phydoc = EmaneUniversalModel.getphydoc(e, self, values, phynames) + e.xmlwrite(phydoc, self.phyxmlname(ifc)) + +""" + +def emane_model_source_to_core(infile, outfile): + do_parse_line = False + output = MODEL_TEMPLATE_PART1 + + with open(infile, 'r') as f: + for line in f: + # begin marker + if "EMANE::ConfigurationDefinition" in line: + do_parse_line = True + # end marker -- all done + if "{0, 0, 0, 0, 0, 0" in line: + break + if do_parse_line: + outstr = convert_line(line) + if outstr is not None: + output += outstr + continue + output += MODEL_TEMPLATE_PART2 + + if outfile == sys.stdout: + sys.stdout.write(output) + else: + with open(outfile, 'w') as f: + f.write(output) + +def convert_line(line): + line = line.strip() + # skip comments + if line.startswith(('/*', '//')): + return None + items = line.strip('{},').split(',') + if len(items) != 7: + #print "continuning on line=", len(items), items + return None + return convert_items_to_line(items) + +def convert_items_to_line(items): + fields = ('required', 'default', 'count', 'name', 'value', 'type', + 'description') + getfield = lambda(x): items[fields.index(x)].strip() + + output = " (" + output += "%s, " % getfield('name') + value = getfield('value') + if value == '"off"': + type = "coreapi.CONF_DATA_TYPE_BOOL" + value = "0" + defaults = '"On,Off"' + elif value == '"on"': + type = "coreapi.CONF_DATA_TYPE_BOOL" + value = '"1"' + defaults = '"On,Off"' + else: + type = "coreapi.CONF_DATA_TYPE_STRING" + defaults = '""' + output += "%s, %s, %s, " % (type, value, defaults) + output += getfield('description') + output += "),\n" + return output + + +def main(): + usagestr = "usage: %prog [-h] [options] -- ..." + parser = optparse.OptionParser(usage = usagestr) + parser.set_defaults(infile = None, outfile = sys.stdout) + + parser.add_option("-i", "--infile", dest = "infile", + help = "file to read (usually '*mac.cc')") + parser.add_option("-o", "--outfile", dest = "outfile", + help = "file to write (stdout is default)") + + def usage(msg = None, err = 0): + sys.stdout.write("\n") + if msg: + sys.stdout.write(msg + "\n\n") + parser.print_help() + sys.exit(err) + + # parse command line options + (options, args) = parser.parse_args() + + if options.infile is None: + usage("please specify input file with the '-i' option", err=1) + + emane_model_source_to_core(options.infile, options.outfile) + + +if __name__ == "__main__": + main() diff --git a/daemon/examples/findcore.py b/daemon/examples/findcore.py new file mode 100755 index 00000000..5c45d52e --- /dev/null +++ b/daemon/examples/findcore.py @@ -0,0 +1,78 @@ +#!/usr/bin/env python +# +# Search for installed CORE library files and Python bindings. +# + +import os, glob + +pythondirs = [ + "/usr/lib/python2.7/site-packages", + "/usr/lib/python2.7/dist-packages", + "/usr/lib64/python2.7/site-packages", + "/usr/lib64/python2.7/dist-packages", + "/usr/local/lib/python2.7/site-packages", + "/usr/local/lib/python2.7/dist-packages", + "/usr/local/lib64/python2.7/site-packages", + "/usr/local/lib64/python2.7/dist-packages", + "/usr/lib/python2.6/site-packages", + "/usr/lib/python2.6/dist-packages", + "/usr/lib64/python2.6/site-packages", + "/usr/lib64/python2.6/dist-packages", + "/usr/local/lib/python2.6/site-packages", + "/usr/local/lib/python2.6/dist-packages", + "/usr/local/lib64/python2.6/site-packages", + "/usr/local/lib64/python2.6/dist-packages", + ] + +tcldirs = [ + "/usr/lib/core", + "/usr/local/lib/core", + ] + +def find_in_file(fn, search, column=None): + ''' Find a line starting with 'search' in the file given by the filename + 'fn'. Return True if found, False if not found, or the column text if + column is specified. + ''' + r = False + if not os.path.exists(fn): + return r + f = open(fn, "r") + for line in f: + if line[:len(search)] != search: + continue + r = True + if column is not None: + r = line.split()[column] + break + f.close() + return r + +def main(): + versions = [] + for d in pythondirs: + fn = "%s/core/constants.py" % d + ver = find_in_file(fn, 'COREDPY_VERSION', 2) + if ver: + ver = ver.strip('"') + versions.append((d, ver)) + for e in glob.iglob("%s/core_python*egg-info" % d): + ver = find_in_file(e, 'Version:', 1) + if ver: + versions.append((e, ver)) + for e in glob.iglob("%s/netns*egg-info" % d): + ver = find_in_file(e, 'Version:', 1) + if ver: + versions.append((e, ver)) + for d in tcldirs: + fn = "%s/version.tcl" % d + ver = find_in_file(fn, 'set CORE_VERSION', 2) + if ver: + versions.append((d, ver)) + + for (d, ver) in versions: + print "%8s %s" % (ver, d) + +if __name__ == "__main__": + main() + diff --git a/daemon/examples/myservices/README.txt b/daemon/examples/myservices/README.txt new file mode 100644 index 00000000..0f92f698 --- /dev/null +++ b/daemon/examples/myservices/README.txt @@ -0,0 +1,26 @@ +This directory contains a sample custom service that you can use as a template +for creating your own services. + +Follow these steps to add your own services: + +1. Modify the sample service MyService to do what you want. It could generate + config/script files, mount per-node directories, start processes/scripts, + etc. sample.py is a Python file that defines one or more classes to be + imported. You can create multiple Python files that will be imported. + Add any new filenames to the __init__.py file. + +2. Put these files in a directory such as /home/username/.core/myservices + Note that the last component of this directory name 'myservices' should not + be named something like 'services' which conflicts with an existing Python + name (the syntax 'from myservices import *' is used). + +3. Add a 'custom_services_dir = /home/username/.core/myservices' entry to the + /etc/core/core.conf file. + +4. Restart the CORE daemon (core-daemon). Any import errors (Python syntax) + should be displayed in the /var/log/core-daemon.log log file (or on screen). + +5. Start using your custom service on your nodes. You can create a new node + type that uses your service, or change the default services for an existing + node type, or change individual nodes. + diff --git a/daemon/examples/myservices/__init__.py b/daemon/examples/myservices/__init__.py new file mode 100644 index 00000000..bfe4afbe --- /dev/null +++ b/daemon/examples/myservices/__init__.py @@ -0,0 +1,7 @@ +"""myservices + +Custom services that you define can be put in this directory. Everything +listed in __all__ is automatically loaded when you add this directory to the +custom_services_dir = '/full/path/to/here' core.conf file option. +""" +__all__ = ["sample"] diff --git a/daemon/examples/myservices/sample.py b/daemon/examples/myservices/sample.py new file mode 100644 index 00000000..6a2c4b9c --- /dev/null +++ b/daemon/examples/myservices/sample.py @@ -0,0 +1,64 @@ +# +# CORE +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +''' Sample user-defined service. +''' + +import os + +from core.service import CoreService, addservice +from core.misc.ipaddr import IPv4Prefix, IPv6Prefix + +class MyService(CoreService): + ''' This is a sample user-defined service. + ''' + # a unique name is required, without spaces + _name = "MyService" + # you can create your own group here + _group = "Utility" + # list of other services this service depends on + _depends = () + # per-node directories + _dirs = () + # generated files (without a full path this file goes in the node's dir, + # e.g. /tmp/pycore.12345/n1.conf/) + _configs = ('myservice.sh', ) + # this controls the starting order vs other enabled services + _startindex = 50 + # list of startup commands, also may be generated during startup + _startup = ('sh myservice.sh',) + # list of shutdown commands + _shutdown = () + + @classmethod + def generateconfig(cls, node, filename, services): + ''' Return a string that will be written to filename, or sent to the + GUI for user customization. + ''' + cfg = "#!/bin/sh\n" + cfg += "# auto-generated by MyService (sample.py)\n" + + for ifc in node.netifs(): + cfg += 'echo "Node %s has interface %s"\n' % (node.name, ifc.name) + # here we do something interesting + cfg += "\n".join(map(cls.subnetentry, ifc.addrlist)) + break + return cfg + + @staticmethod + def subnetentry(x): + ''' Generate a subnet declaration block given an IPv4 prefix string + for inclusion in the config file. + ''' + if x.find(":") >= 0: + # this is an IPv6 address + return "" + else: + net = IPv4Prefix(x) + return 'echo " network %s"' % (net) + +# this line is required to add the above class to the list of available services +addservice(MyService) + diff --git a/daemon/examples/netns/basicrange.py b/daemon/examples/netns/basicrange.py new file mode 100755 index 00000000..22a817df --- /dev/null +++ b/daemon/examples/netns/basicrange.py @@ -0,0 +1,74 @@ +#!/usr/bin/python +# +# Copyright (c)2011-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# Test 3D range calculation of the BasicRangeModel by adding n nodes to a WLAN +# stacked 100 units above each other (using z-axis). +# + + +import optparse, sys, os, datetime, time + +from core import pycore +from core.misc import ipaddr +from core.misc.utils import mutecall +from core.mobility import BasicRangeModel +from core.netns.vnet import EbtablesQueue + +def test(numnodes): + # node list + n = [] + prefix = ipaddr.IPv4Prefix("10.83.0.0/16") + session = pycore.Session(persistent = True) + wlanid = numnodes + 1 + net = session.addobj(cls = pycore.nodes.WlanNode, name = "wlan%d" % wlanid, + objid = wlanid, verbose = True) + net.setmodel(BasicRangeModel, BasicRangeModel.getdefaultvalues()) + for i in xrange(1, numnodes + 1): + tmp = session.addobj(cls = pycore.nodes.LxcNode, name = "n%d" % i, + objid = i) + tmp.newnetif(net, ["%s/%s" % (prefix.addr(i), prefix.prefixlen)]) + # set increasing Z coordinates + tmp.setposition(10, 10, 100*i) + n.append(tmp) + + n[0].term("bash") + # wait for rate seconds to allow ebtables commands to commit + time.sleep(EbtablesQueue.rate) + #session.shutdown() + +def main(): + usagestr = "usage: %prog [-h] [options] [args]" + parser = optparse.OptionParser(usage = usagestr) + + parser.set_defaults(numnodes = 2) + parser.add_option("-n", "--numnodes", dest = "numnodes", type = int, + help = "number of nodes to test; default = %s" % + parser.defaults["numnodes"]) + + def usage(msg = None, err = 0): + sys.stdout.write("\n") + if msg: + sys.stdout.write(msg + "\n\n") + parser.print_help() + sys.exit(err) + + # parse command line options + (options, args) = parser.parse_args() + + if options.numnodes < 2: + usage("invalid number of nodes: %s" % options.numnodes) + + for a in args: + sys.stderr.write("ignoring command line argument: '%s'\n" % a) + + start = datetime.datetime.now() + + test(options.numnodes) + + print >> sys.stderr, \ + "elapsed time: %s" % (datetime.datetime.now() - start) + +if __name__ == "__main__": + main() diff --git a/daemon/examples/netns/emane80211.py b/daemon/examples/netns/emane80211.py new file mode 100755 index 00000000..84994196 --- /dev/null +++ b/daemon/examples/netns/emane80211.py @@ -0,0 +1,99 @@ +#!/usr/bin/python -i + +# Copyright (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. + +# Example CORE Python script that attaches N nodes to an EMANE 802.11abg +# network. One of the parameters is changed, the pathloss mode. + +import sys, datetime, optparse + +from core import pycore +from core.misc import ipaddr +from core.constants import * +from core.emane.ieee80211abg import EmaneIeee80211abgModel + +# node list (count from 1) +n = [None] + +def add_to_server(session): + ''' Add this session to the server's list if this script is executed from + the core-daemon server. + ''' + global server + try: + server.addsession(session) + return True + except NameError: + return False + +def main(): + usagestr = "usage: %prog [-h] [options] [args]" + parser = optparse.OptionParser(usage = usagestr) + parser.set_defaults(numnodes = 5) + + parser.add_option("-n", "--numnodes", dest = "numnodes", type = int, + help = "number of nodes") + + def usage(msg = None, err = 0): + sys.stdout.write("\n") + if msg: + sys.stdout.write(msg + "\n\n") + parser.print_help() + sys.exit(err) + + # parse command line options + (options, args) = parser.parse_args() + + if options.numnodes < 1: + usage("invalid number of nodes: %s" % options.numnodes) + + for a in args: + sys.stderr.write("ignoring command line argument: '%s'\n" % a) + + start = datetime.datetime.now() + + # IP subnet + prefix = ipaddr.IPv4Prefix("10.83.0.0/16") + # session with some EMANE initialization + session = pycore.Session(persistent=True) + session.master = True + session.location.setrefgeo(47.57917,-122.13232,2.00000) + session.location.refscale = 150.0 + session.cfg['emane_models'] = "RfPipe, Ieee80211abg, Bypass, AtdlOmni" + session.emane.loadmodels() + add_to_server(session) + + # EMANE WLAN + print "creating EMANE WLAN wlan1" + wlan = session.addobj(cls = pycore.nodes.EmaneNode, name = "wlan1") + wlan.setposition(x=80,y=50) + names = EmaneIeee80211abgModel.getnames() + values = list(EmaneIeee80211abgModel.getdefaultvalues()) + # TODO: change any of the EMANE 802.11 parameter values here + values[ names.index('pathlossmode') ] = 'pathloss' + session.emane.setconfig(wlan.objid, EmaneIeee80211abgModel._name, values) + services_str = "zebra|OSPFv3MDR|vtysh|IPForward" + + print "creating %d nodes with addresses from %s" % \ + (options.numnodes, prefix) + for i in xrange(1, options.numnodes + 1): + tmp = session.addobj(cls = pycore.nodes.CoreNode, name = "n%d" % i, + objid=i) + tmp.newnetif(wlan, ["%s/%s" % (prefix.addr(i), prefix.prefixlen)]) + tmp.cmd([SYSCTL_BIN, "net.ipv4.icmp_echo_ignore_broadcasts=0"]) + tmp.setposition(x=150*i,y=150) + session.services.addservicestonode(tmp, "", services_str, verbose=False) + n.append(tmp) + + # this starts EMANE, etc. + session.instantiate() + + # start a shell on node 1 + n[1].term("bash") + + print "elapsed time: %s" % (datetime.datetime.now() - start) + +if __name__ == "__main__" or __name__ == "__builtin__": + main() + diff --git a/daemon/examples/netns/howmanynodes.py b/daemon/examples/netns/howmanynodes.py new file mode 100755 index 00000000..efafb107 --- /dev/null +++ b/daemon/examples/netns/howmanynodes.py @@ -0,0 +1,209 @@ +#!/usr/bin/python + +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +howmanynodes.py - This is a CORE script that creates network namespace nodes +having one virtual Ethernet interface connected to a bridge. It continues to +add nodes until an exception occurs. The number of nodes per bridge can be +specified. +''' + +import optparse, sys, os, datetime, time, shutil +try: + from core import pycore +except ImportError: + # hack for Fedora autoconf that uses the following pythondir: + if "/usr/lib/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.6/site-packages") + if "/usr/lib64/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.6/site-packages") + if "/usr/lib/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.7/site-packages") + if "/usr/lib64/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.7/site-packages") + from core import pycore +from core.misc import ipaddr +from core.constants import * + +GBD = 1024.0 * 1024.0 + +def linuxversion(): + ''' Return a string having the Linux kernel version. + ''' + f = open('/proc/version', 'r') + v = f.readline().split() + version_str = ' '.join(v[:3]) + f.close() + return version_str + +MEMKEYS = ('total', 'free', 'buff', 'cached', 'stotal', 'sfree') +def memfree(): + ''' Returns kilobytes memory [total, free, buff, cached, stotal, sfree]. + useful stats are: + free memory = free + buff + cached + swap used = stotal - sfree + ''' + f = open('/proc/meminfo', 'r') + lines = f.readlines() + f.close() + kbs = {} + for k in MEMKEYS: + kbs[k] = 0 + for l in lines: + if l[:9] == "MemTotal:": + kbs['total'] = int(l.split()[1]) + elif l[:8] == "MemFree:": + kbs['free'] = int(l.split()[1]) + elif l[:8] == "Buffers:": + kbs['buff'] = int(l.split()[1]) + elif l[:8] == "Cached:": + kbs['cache'] = int(l.split()[1]) + elif l[:10] == "SwapTotal:": + kbs['stotal'] = int(l.split()[1]) + elif l[:9] == "SwapFree:": + kbs['sfree'] = int(l.split()[1]) + break + return kbs + +# node list (count from 1) +nodelist = [None] +switchlist = [] + + +def main(): + usagestr = "usage: %prog [-h] [options] [args]" + parser = optparse.OptionParser(usage = usagestr) + parser.set_defaults(waittime = 0.2, numnodes = 0, bridges = 0, retries = 0, + logfile = None, services = None) + + parser.add_option("-w", "--waittime", dest = "waittime", type = float, + help = "number of seconds to wait between node creation" \ + " (default = %s)" % parser.defaults["waittime"]) + parser.add_option("-n", "--numnodes", dest = "numnodes", type = int, + help = "number of nodes (default = unlimited)") + parser.add_option("-b", "--bridges", dest = "bridges", type = int, + help = "number of nodes per bridge; 0 = one bridge " \ + "(def. = %s)" % parser.defaults["bridges"]) + parser.add_option("-r", "--retry", dest = "retries", type = int, + help = "number of retries on error (default = %s)" % \ + parser.defaults["retries"]) + parser.add_option("-l", "--log", dest = "logfile", type = str, + help = "log memory usage to this file (default = %s)" % \ + parser.defaults["logfile"]) + parser.add_option("-s", "--services", dest = "services", type = str, + help = "pipe-delimited list of services added to each " \ + "node (default = %s)\n(Example: 'zebra|OSPFv2|OSPFv3|" \ + "vtysh|IPForward')" % parser.defaults["services"]) + + def usage(msg = None, err = 0): + sys.stdout.write("\n") + if msg: + sys.stdout.write(msg + "\n\n") + parser.print_help() + sys.exit(err) + + (options, args) = parser.parse_args() + + for a in args: + sys.stderr.write("ignoring command line argument: '%s'\n" % a) + + start = datetime.datetime.now() + prefix = ipaddr.IPv4Prefix("10.83.0.0/16") + + print "Testing how many network namespace nodes this machine can create." + print " - %s" % linuxversion() + mem = memfree() + print " - %.02f GB total memory (%.02f GB swap)" % \ + (mem['total']/GBD, mem['stotal']/GBD) + print " - using IPv4 network prefix %s" % prefix + print " - using wait time of %s" % options.waittime + print " - using %d nodes per bridge" % options.bridges + print " - will retry %d times on failure" % options.retries + print " - adding these services to each node: %s" % options.services + print " " + + lfp = None + if options.logfile is not None: + # initialize a csv log file header + lfp = open(options.logfile, "a") + lfp.write("# log from howmanynodes.py %s\n" % time.ctime()) + lfp.write("# options = %s\n#\n" % options) + lfp.write("# numnodes,%s\n" % ','.join(MEMKEYS)) + lfp.flush() + + session = pycore.Session(persistent=True) + switch = session.addobj(cls = pycore.nodes.SwitchNode) + switchlist.append(switch) + print "Added bridge %s (%d)." % (switch.brname, len(switchlist)) + + i = 0 + retry_count = options.retries + while True: + i += 1 + # optionally add a bridge (options.bridges nodes per bridge) + try: + if options.bridges > 0 and switch.numnetif() >= options.bridges: + switch = session.addobj(cls = pycore.nodes.SwitchNode) + switchlist.append(switch) + print "\nAdded bridge %s (%d) for node %d." % \ + (switch.brname, len(switchlist), i) + except Exception, e: + print "At %d bridges (%d nodes) caught exception:\n%s\n" % \ + (len(switchlist), i-1, e) + break + # create a node + try: + n = session.addobj(cls = pycore.nodes.LxcNode, name = "n%d" % i) + n.newnetif(switch, ["%s/%s" % (prefix.addr(i), prefix.prefixlen)]) + n.cmd([SYSCTL_BIN, "net.ipv4.icmp_echo_ignore_broadcasts=0"]) + if options.services is not None: + session.services.addservicestonode(n, "", options.services, + verbose=False) + n.boot() + nodelist.append(n) + if i % 25 == 0: + print "\n%s nodes created " % i, + mem = memfree() + free = mem['free'] + mem['buff'] + mem['cached'] + swap = mem['stotal'] - mem['sfree'] + print "(%.02f/%.02f GB free/swap)" % (free/GBD , swap/GBD), + if lfp: + lfp.write("%d," % i) + lfp.write("%s\n" % ','.join(str(mem[x]) for x in MEMKEYS)) + lfp.flush() + else: + sys.stdout.write(".") + sys.stdout.flush() + time.sleep(options.waittime) + except Exception, e: + print "At %d nodes caught exception:\n" % i, e + if retry_count > 0: + print "\nWill retry creating node %d." % i + shutil.rmtree(n.nodedir, ignore_errors = True) + retry_count -= 1 + i -= 1 + time.sleep(options.waittime) + continue + else: + print "Stopping at %d nodes!" % i + break + + if i == options.numnodes: + print "Stopping at %d nodes due to numnodes option." % i + break + # node creation was successful at this point + retry_count = options.retries + + if lfp: + lfp.flush() + lfp.close() + + print "elapsed time: %s" % (datetime.datetime.now() - start) + print "Use the core-cleanup script to remove nodes and bridges." + +if __name__ == "__main__": + main() diff --git a/daemon/examples/netns/iperf-performance-chain.py b/daemon/examples/netns/iperf-performance-chain.py new file mode 100755 index 00000000..56b5b537 --- /dev/null +++ b/daemon/examples/netns/iperf-performance-chain.py @@ -0,0 +1,109 @@ +#!/usr/bin/python + +# Copyright (c)2013 the Boeing Company. +# See the LICENSE file included in this distribution. + +# This script creates a CORE session, that will connect n nodes together +# in a chain, with static routes between nodes +# number of nodes / number of hops +# 2 0 +# 3 1 +# 4 2 +# n n - 2 +# +# Use core-cleanup to clean up after this script as the session is left running. +# + +import sys, datetime, optparse + +from core import pycore +from core.misc import ipaddr +from core.constants import * + +# node list (count from 1) +n = [None] + +def add_to_server(session): + ''' Add this session to the server's list if this script is executed from + the core-daemon server. + ''' + global server + try: + server.addsession(session) + return True + except NameError: + return False + +def main(): + usagestr = "usage: %prog [-h] [options] [args]" + parser = optparse.OptionParser(usage = usagestr) + parser.set_defaults(numnodes = 5) + + parser.add_option("-n", "--numnodes", dest = "numnodes", type = int, + help = "number of nodes") + + def usage(msg = None, err = 0): + sys.stdout.write("\n") + if msg: + sys.stdout.write(msg + "\n\n") + parser.print_help() + sys.exit(err) + + # parse command line options + (options, args) = parser.parse_args() + + if options.numnodes < 1: + usage("invalid number of nodes: %s" % options.numnodes) + + if options.numnodes >= 255: + usage("invalid number of nodes: %s" % options.numnodes) + + for a in args: + sys.stderr.write("ignoring command line argument: '%s'\n" % a) + + start = datetime.datetime.now() + + session = pycore.Session(persistent=True) + add_to_server(session) + print "creating %d nodes" % options.numnodes + left = None + prefix = None + for i in xrange(1, options.numnodes + 1): + tmp = session.addobj(cls = pycore.nodes.CoreNode, name = "n%d" % i, + objid=i) + if left: + tmp.newnetif(left, ["%s/%s" % (prefix.addr(2), prefix.prefixlen)]) + + prefix = ipaddr.IPv4Prefix("10.83.%d.0/24" % i) # limit: i < 255 + right = session.addobj(cls = pycore.nodes.PtpNet) + tmp.newnetif(right, ["%s/%s" % (prefix.addr(1), prefix.prefixlen)]) + tmp.cmd([SYSCTL_BIN, "net.ipv4.icmp_echo_ignore_broadcasts=0"]) + tmp.cmd([SYSCTL_BIN, "net.ipv4.conf.all.forwarding=1"]) + tmp.cmd([SYSCTL_BIN, "net.ipv4.conf.default.rp_filter=0"]) + tmp.setposition(x=100*i,y=150) + n.append(tmp) + left = right + + prefixes = map(lambda(x): ipaddr.IPv4Prefix("10.83.%d.0/24" % x), + xrange(1, options.numnodes + 1)) + + # set up static routing in the chain + for i in xrange(1, options.numnodes + 1): + for j in xrange(1, options.numnodes + 1): + if j < i - 1: + gw = prefixes[i-2].addr(1) + elif j > i: + if i > len(prefixes) - 1: + continue + gw = prefixes[i-1].addr(2) + else: + continue + net = prefixes[j-1] + n[i].cmd([IP_BIN, "route", "add", str(net), "via", str(gw)]) + + + print "elapsed time: %s" % (datetime.datetime.now() - start) + +if __name__ == "__main__" or __name__ == "__builtin__": + main() + diff --git a/daemon/examples/netns/iperf-performance.sh b/daemon/examples/netns/iperf-performance.sh new file mode 100755 index 00000000..cd0f5c16 --- /dev/null +++ b/daemon/examples/netns/iperf-performance.sh @@ -0,0 +1,284 @@ +#!/bin/sh +# +# iperf-performance.sh +# +# (c)2013 the Boeing Company +# authors: Jeff Ahrenholz +# +# Utility script to automate several iperf runs. +# + +# number of iperf runs per test +NUMRUNS=10 +# number of seconds per run (10s is iperf default) +RUNTIME=10 +# logging +LOG=/tmp/${0}.log +STAMP=`date +%Y%m%d%H%M%S` + +# +# client---(loopback)---server +# +loopbacktest () { + killall iperf 2> /dev/null + + echo ">> loopback iperf test" + echo "loopback" > ${LOG} + + # start an iperf server in the background + # -s = server + # -y c = CSV output + echo "starting local iperf server" + iperf -s -y c >> ${LOG} & + + # run an iperf client NUMRUNS times + i=1 + while [ $i -le $NUMRUNS ]; do + echo "run $i/$NUMRUNS:" + iperf -t ${RUNTIME} -c localhost + sleep 0.3 + i=$((i+1)) + done + + sleep 1 + echo "stopping local iperf server" + killall -v iperf + +} + +# +# lxc1( client )---veth-pair---lxc2( server ) +# +lxcvethtest () { + SERVERIP=10.0.0.1 + CLIENTIP=10.0.0.2 + SERVER=/tmp/${0}-server + CLIENT=/tmp/${0}-client + + echo ">> lxc veth iperf test" + echo "lxcveth" >> ${LOG} + + echo "starting lxc iperf server" + vnoded -l $SERVER.log -p $SERVER.pid -c $SERVER + ip link add name veth0.1 type veth peer name veth0 + ip link set veth0 netns `cat $SERVER.pid` + vcmd -c $SERVER -- ifconfig veth0 $SERVERIP/24 + vcmd -c $SERVER -- iperf -s -y c >> ${LOG} & + + echo "starting lxc iperf client" + vnoded -l $CLIENT.log -p $CLIENT.pid -c $CLIENT + ip link set veth0.1 netns `cat $CLIENT.pid` + vcmd -c $CLIENT -- ifconfig veth0.1 $CLIENTIP/24 + + i=1 + while [ $i -le $NUMRUNS ]; do + echo "run $i/$NUMRUNS:" + vcmd -c $CLIENT -- iperf -t ${RUNTIME} -c ${SERVERIP} + sleep 0.3 + i=$((i+1)) + done + + sleep 1 + echo "stopping lxc iperf server" + vcmd -c $SERVER -- killall -v iperf + echo "stopping containers" + kill -9 `cat $SERVER.pid` + kill -9 `cat $CLIENT.pid` + + echo "cleaning up" + rm -f ${SERVER}* + rm -f ${CLIENT}* +} + +# +# lxc1( client veth:):veth---bridge---veth:(:veth server )lxc2 +# +lxcbrtest () { + SERVERIP=10.0.0.1 + CLIENTIP=10.0.0.2 + SERVER=/tmp/${0}-server + CLIENT=/tmp/${0}-client + BRIDGE="lxcbrtest" + + echo ">> lxc bridge iperf test" + echo "lxcbr" >> ${LOG} + + echo "building bridge" + brctl addbr $BRIDGE + brctl stp $BRIDGE off # disable spanning tree protocol + brctl setfd $BRIDGE 0 # disable forwarding delay + ip link set $BRIDGE up + + echo "starting lxc iperf server" + vnoded -l $SERVER.log -p $SERVER.pid -c $SERVER + ip link add name veth0.1 type veth peer name veth0 + ip link set veth0 netns `cat $SERVER.pid` + vcmd -c $SERVER -- ifconfig veth0 $SERVERIP/24 + brctl addif $BRIDGE veth0.1 + ip link set veth0.1 up + vcmd -c $SERVER -- iperf -s -y c >> ${LOG} & + + echo "starting lxc iperf client" + vnoded -l $CLIENT.log -p $CLIENT.pid -c $CLIENT + ip link add name veth1.1 type veth peer name veth1 + ip link set veth1 netns `cat $CLIENT.pid` + vcmd -c $CLIENT -- ifconfig veth1 $CLIENTIP/24 + brctl addif $BRIDGE veth1.1 + ip link set veth1.1 up + + i=1 + while [ $i -le $NUMRUNS ]; do + echo "run $i/$NUMRUNS:" + vcmd -c $CLIENT -- iperf -t ${RUNTIME} -c ${SERVERIP} + sleep 0.3 + i=$((i+1)) + done + + sleep 1 + echo "stopping lxc iperf server" + vcmd -c $SERVER -- killall -v iperf + echo "stopping containers" + kill -9 `cat $SERVER.pid` + kill -9 `cat $CLIENT.pid` + + echo "cleaning up" + ip link set $BRIDGE down + brctl delbr $BRIDGE + rm -f ${SERVER}* + rm -f ${CLIENT}* +} + +# +# n1---n2---n3--- ... ---nN +# N nodes (N-2 hops) in chain with static routing +# +chaintest () { + NUMNODES=$1 + SERVERIP=10.83.$NUMNODES.1 + + if [ -d /tmp/pycore.* ]; then + echo "/tmp/pycore.* already exists, skipping chaintest $NUMNODES" + return + fi + + echo ">> n=$NUMNODES node chain iperf test" + echo "chain$NUMNODES" >> ${LOG} + + echo "running external chain CORE script with '-n $NUMNODES'" + python iperf-performance-chain.py -n $NUMNODES + + echo "starting lxc iperf server on node $NUMNODES" + vcmd -c /tmp/pycore.*/n$NUMNODES -- iperf -s -y c >> ${LOG} & + + echo "starting lxc iperf client" + i=1 + while [ $i -le $NUMRUNS ]; do + echo "run $i/$NUMRUNS:" + vcmd -c /tmp/pycore.*/n1 -- iperf -t ${RUNTIME} -c ${SERVERIP} + sleep 0.3 + i=$((i+1)) + done + + sleep 1 + echo "stopping lxc iperf server" + vcmd -c /tmp/pycore.*/n$NUMNODES -- killall -v iperf + echo "cleaning up" + core-cleanup +} +if [ "z$1" != "z" ]; then + echo "This script takes no parameters and must be run as root." + exit 1 +fi +if [ `id -u` != 0 ]; then + echo "This script must be run as root." + exit 1 +fi + + +# +# N lxc clients >---bridge---veth:(:veth server ) +# +clientstest () { + NUMCLIENTS=$1 + SERVERIP=10.0.0.1 + SERVER=/tmp/${0}-server + BRIDGE="lxcbrtest" + + echo ">> n=$NUMCLIENTS clients iperf test" + echo "clients$NUMCLIENTS" >> ${LOG} + + echo "building bridge" + brctl addbr $BRIDGE + brctl stp $BRIDGE off # disable spanning tree protocol + brctl setfd $BRIDGE 0 # disable forwarding delay + ip link set $BRIDGE up + + echo "starting lxc iperf server" + vnoded -l $SERVER.log -p $SERVER.pid -c $SERVER + ip link add name veth0.1 type veth peer name veth0 + ip link set veth0 netns `cat $SERVER.pid` + vcmd -c $SERVER -- ifconfig veth0 $SERVERIP/24 + brctl addif $BRIDGE veth0.1 + ip link set veth0.1 up + vcmd -c $SERVER -- iperf -s -y c >> ${LOG} & + + i=1 + CLIENTS="" + while [ $i -le $NUMCLIENTS ]; do + echo "starting lxc iperf client $i/$NUMCLIENTS" + CLIENT=/tmp/${0}-client$i + CLIENTIP=10.0.0.1$i + vnoded -l $CLIENT.log -p $CLIENT.pid -c $CLIENT + ip link add name veth1.$i type veth peer name veth1 + ip link set veth1 netns `cat $CLIENT.pid` + vcmd -c $CLIENT -- ifconfig veth1 $CLIENTIP/24 + brctl addif $BRIDGE veth1.$i + ip link set veth1.$i up + i=$((i+1)) + CLIENTS="$CLIENTS $CLIENT" + done + + j=1 + while [ $j -le $NUMRUNS ]; do + echo "run $j/$NUMRUNS iperf:" + for CLIENT in $CLIENTS; do + vcmd -c $CLIENT -- iperf -t ${RUNTIME} -c ${SERVERIP} & + done + sleep ${RUNTIME} 1 + j=$((j+1)) + done + + sleep 1 + echo "stopping lxc iperf server" + vcmd -c $SERVER -- killall -v iperf + echo "stopping containers" + kill -9 `cat $SERVER.pid` + for CLIENT in $CLIENTS; do + kill -9 `cat $CLIENT.pid` + done + # time needed for processes/containers to shut down + sleep 2 + + echo "cleaning up" + ip link set $BRIDGE down + brctl delbr $BRIDGE + rm -f ${SERVER}* + rm -f /tmp/${0}-client* + # time needed for bridge clean-up + sleep 1 +} + +# +# run all tests +# +loopbacktest +lxcvethtest +lxcbrtest +chaintest 5 +chaintest 10 +clientstest 5 +clientstest 10 +clientstest 15 + +mv ${LOG} ${PWD}/${0}-${STAMP}.log +echo "===> results in ${PWD}/${0}-${STAMP}.log" diff --git a/daemon/examples/netns/ospfmanetmdrtest.py b/daemon/examples/netns/ospfmanetmdrtest.py new file mode 100755 index 00000000..3badcf2a --- /dev/null +++ b/daemon/examples/netns/ospfmanetmdrtest.py @@ -0,0 +1,572 @@ +#!/usr/bin/python + +# Copyright (c)2011-2012 the Boeing Company. +# See the LICENSE file included in this distribution. + +# create a random topology running OSPFv3 MDR, wait and then check +# that all neighbor states are either full or two-way, and check the routes +# in zebra vs those installed in the kernel. + +import os, sys, random, time, optparse, datetime +from string import Template +try: + from core import pycore +except ImportError: + # hack for Fedora autoconf that uses the following pythondir: + if "/usr/lib/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.6/site-packages") + if "/usr/lib64/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.6/site-packages") + if "/usr/lib/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.7/site-packages") + if "/usr/lib64/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.7/site-packages") + from core import pycore +from core.misc import ipaddr +from core.misc.utils import mutecall +from core.constants import QUAGGA_STATE_DIR + +# sanity check that zebra is installed +try: + mutecall(["zebra", "-u", "root", "-g", "root", "-v"]) +except OSError: + sys.stderr.write("ERROR: running zebra failed\n") + sys.exit(1) + +class ManetNode(pycore.nodes.LxcNode): + """ An Lxc namespace node configured for Quagga OSPFv3 MANET MDR + """ + conftemp = Template("""\ +interface eth0 + ip address $ipaddr + ipv6 ospf6 instance-id 65 + ipv6 ospf6 hello-interval 2 + ipv6 ospf6 dead-interval 6 + ipv6 ospf6 retransmit-interval 5 + ipv6 ospf6 network manet-designated-router + ipv6 ospf6 diffhellos + ipv6 ospf6 adjacencyconnectivity biconnected + ipv6 ospf6 lsafullness mincostlsa +! +router ospf6 + router-id $routerid + interface eth0 area 0.0.0.0 +! +ip forwarding +""") + + def __init__(self, core, ipaddr, routerid = None, + objid = None, name = None, nodedir = None): + if routerid is None: + routerid = ipaddr.split("/")[0] + self.ipaddr = ipaddr + self.routerid = routerid + pycore.nodes.LxcNode.__init__(self, core, objid, name, nodedir) + self.privatedir(self.confdir) + self.privatedir(QUAGGA_STATE_DIR) + + def qconf(self): + return self.conftemp.substitute(ipaddr = self.ipaddr, + routerid = self.routerid) + + def config(self): + filename = os.path.join(self.confdir, "Quagga.conf") + f = self.opennodefile(filename, "w") + f.write(self.qconf()) + f.close() + pycore.nodes.LxcNode.config(self) + + def bootscript(self): + return """\ +#!/bin/sh -e + +STATEDIR=%s + +waitfile() +{ + fname=$1 + + i=0 + until [ -e $fname ]; do + i=$(($i + 1)) + if [ $i -eq 10 ]; then + echo "file not found: $fname" >&2 + exit 1 + fi + sleep 0.1 + done +} + +mkdir -p $STATEDIR + +zebra -d -u root -g root +waitfile $STATEDIR/zebra.vty + +ospf6d -d -u root -g root +waitfile $STATEDIR/ospf6d.vty + +vtysh -b +""" % QUAGGA_STATE_DIR + +class Route(object): + """ Helper class for organzing routing table entries. """ + def __init__(self, prefix = None, gw = None, metric = None): + try: + self.prefix = ipaddr.IPv4Prefix(prefix) + except Exception, e: + raise ValueError, "Invalid prefix given to Route object: %s\n%s" % \ + (prefix, e) + self.gw = gw + self.metric = metric + + def __eq__(self, other): + try: + return self.prefix == other.prefix and self.gw == other.gw and \ + self.metric == other.metric + except: + return False + + def __str__(self): + return "(%s,%s,%s)" % (self.prefix, self.gw, self.metric) + + @staticmethod + def key(r): + if not r.prefix: + return 0 + return r.prefix.prefix + + +class ManetExperiment(object): + """ A class for building an MDR network and checking and logging its state. + """ + def __init__(self, options, start): + """ Initialize with options and start time. """ + self.session = None + # node list + self.nodes = [] + # WLAN network + self.net = None + self.verbose = options.verbose + # dict from OptionParser + self.options = options + self.start = start + self.logbegin() + + def info(self, msg): + ''' Utility method for writing output to stdout. ''' + print msg + sys.stdout.flush() + self.log(msg) + + def warn(self, msg): + ''' Utility method for writing output to stderr. ''' + print >> sys.stderr, msg + sys.stderr.flush() + self.log(msg) + + def logbegin(self): + """ Start logging. """ + self.logfp = None + if not self.options.logfile: + return + self.logfp = open(self.options.logfile, "w") + self.log("ospfmanetmdrtest begin: %s\n" % self.start.ctime()) + + def logend(self): + """ End logging. """ + if not self.logfp: + return + end = datetime.datetime.now() + self.log("ospfmanetmdrtest end: %s (%s)\n" % \ + (end.ctime(), end - self.start)) + self.logfp.flush() + self.logfp.close() + self.logfp = None + + def log(self, msg): + """ Write to the log file, if any. """ + if not self.logfp: + return + print >> self.logfp, msg + + def logdata(self, nbrs, mdrs, lsdbs, krs, zrs): + """ Dump experiment parameters and data to the log file. """ + self.log("ospfmantetmdrtest data:") + self.log("----- parameters -----") + self.log("%s" % self.options) + self.log("----- neighbors -----") + for rtrid in sorted(nbrs.keys()): + self.log("%s: %s" % (rtrid, nbrs[rtrid])) + self.log("----- mdr levels -----") + self.log(mdrs) + self.log("----- link state databases -----") + for rtrid in sorted(lsdbs.keys()): + self.log("%s lsdb:" % rtrid) + for line in lsdbs[rtrid].split("\n"): + self.log(line) + self.log("----- kernel routes -----") + for rtrid in sorted(krs.keys()): + msg = rtrid + ": " + for rt in krs[rtrid]: + msg += "%s" % rt + self.log(msg) + self.log("----- zebra routes -----") + for rtrid in sorted(zrs.keys()): + msg = rtrid + ": " + for rt in zrs[rtrid]: + msg += "%s" % rt + self.log(msg) + + def topology(self, numnodes, linkprob, verbose = False): + """ Build a topology consisting of the given number of ManetNodes + connected to a WLAN and probabilty of links and set + the session, WLAN, and node list objects. + """ + # IP subnet + prefix = ipaddr.IPv4Prefix("10.14.0.0/16") + self.session = pycore.Session() + # emulated network + self.net = self.session.addobj(cls = pycore.nodes.WlanNode) + for i in xrange(1, numnodes + 1): + addr = "%s/%s" % (prefix.addr(i), 32) + tmp = self.session.addobj(cls = ManetNode, ipaddr = addr, name = "n%d" % i) + tmp.newnetif(self.net, [addr]) + self.nodes.append(tmp) + # connect nodes with probability linkprob + for i in xrange(numnodes): + for j in xrange(i + 1, numnodes): + r = random.random() + if r < linkprob: + if self.verbose: + self.info("linking (%d,%d)" % (i, j)) + self.net.link(self.nodes[i].netif(0), self.nodes[j].netif(0)) + # force one link to avoid partitions (should check if this is needed) + j = i + while j == i: + j = random.randint(0, numnodes - 1) + if self.verbose: + self.info("linking (%d,%d)" % (i, j)) + self.net.link(self.nodes[i].netif(0), self.nodes[j].netif(0)) + self.nodes[i].boot() + # run the boot.sh script on all nodes to start Quagga + for i in xrange(numnodes): + self.nodes[i].cmd(["./%s" % self.nodes[i].bootsh]) + + def compareroutes(self, node, kr, zr): + """ Compare two lists of Route objects. + """ + kr.sort(key=Route.key) + zr.sort(key=Route.key) + if kr != zr: + self.warn("kernel and zebra routes differ") + if self.verbose: + msg = "kernel: " + for r in kr: + msg += "%s " % r + msg += "\nzebra: " + for r in zr: + msg += "%s " % r + self.warn(msg) + else: + self.info(" kernel and zebra routes match") + + def comparemdrlevels(self, nbrs, mdrs): + """ Check that all routers form a connected dominating set, i.e. all + routers are either MDR, BMDR, or adjacent to one. + """ + msg = "All routers form a CDS" + for n in self.nodes: + if mdrs[n.routerid] != "OTHER": + continue + connected = False + for nbr in nbrs[n.routerid]: + if mdrs[nbr] == "MDR" or mdrs[nbr] == "BMDR": + connected = True + break + if not connected: + msg = "All routers do not form a CDS" + self.warn("XXX %s: not in CDS; neighbors: %s" % \ + (n.routerid, nbrs[n.routerid])) + if self.verbose: + self.info(msg) + + def comparelsdbs(self, lsdbs): + """ Check LSDBs for consistency. + """ + msg = "LSDBs of all routers are consistent" + prev = self.nodes[0] + for n in self.nodes: + db = lsdbs[n.routerid] + if lsdbs[prev.routerid] != db: + msg = "LSDBs of all routers are not consistent" + self.warn("XXX LSDBs inconsistent for %s and %s" % \ + (n.routerid, prev.routerid)) + i = 0 + for entry in lsdbs[n.routerid].split("\n"): + preventries = lsdbs[prev.routerid].split("\n") + try: + preventry = preventries[i] + except IndexError: + preventry = None + if entry != preventry: + self.warn("%s: %s" % (n.routerid, entry)) + self.warn("%s: %s" % (prev.routerid, preventry)) + i += 1 + prev = n + if self.verbose: + self.info(msg) + + def checknodes(self): + """ Check the neighbor state and routing tables of all nodes. """ + nbrs = {} + mdrs = {} + lsdbs = {} + krs = {} + zrs = {} + v = self.verbose + for n in self.nodes: + self.info("checking %s" % n.name) + nbrs[n.routerid] = Ospf6NeighState(n, verbose=v).run() + krs[n.routerid] = KernelRoutes(n, verbose=v).run() + zrs[n.routerid] = ZebraRoutes(n, verbose=v).run() + self.compareroutes(n, krs[n.routerid], zrs[n.routerid]) + mdrs[n.routerid] = Ospf6MdrLevel(n, verbose=v).run() + lsdbs[n.routerid] = Ospf6Database(n, verbose=v).run() + self.comparemdrlevels(nbrs, mdrs) + self.comparelsdbs(lsdbs) + self.logdata(nbrs, mdrs, lsdbs, krs, zrs) + +class Cmd: + """ Helper class for running a command on a node and parsing the result. """ + args = "" + def __init__(self, node, verbose=False): + """ Initialize with a CoreNode (LxcNode) """ + self.id = None + self.stdin = None + self.out = None + self.node = node + self.verbose = verbose + + def info(self, msg): + ''' Utility method for writing output to stdout.''' + print msg + sys.stdout.flush() + + def warn(self, msg): + ''' Utility method for writing output to stderr. ''' + print >> sys.stderr, "XXX %s:" % self.node.routerid, msg + sys.stderr.flush() + + def run(self): + """ This is the primary method used for running this command. """ + self.open() + r = self.parse() + self.cleanup() + return r + + def open(self): + """ Exceute call to node.popen(). """ + self.id, self.stdin, self.out, self.err = \ + self.node.popen((self.args)) + + def parse(self): + """ This method is overloaded by child classes and should return some + result. + """ + return None + + def cleanup(self): + """ Close the Popen channels.""" + self.stdin.close() + self.out.close() + self.err.close() + tmp = self.id.wait() + if tmp: + self.warn("nonzero exit status:", tmp) + +class VtyshCmd(Cmd): + """ Runs a vtysh command. """ + def open(self): + args = ("vtysh", "-c", self.args) + self.id, self.stdin, self.out, self.err = self.node.popen((args)) + +class Ospf6NeighState(VtyshCmd): + """ Check a node for OSPFv3 neighbors in the full/two-way states. """ + args = "show ipv6 ospf6 neighbor" + + def parse(self): + self.out.readline() # skip first line + nbrlist = [] + for line in self.out: + field = line.split() + nbr = field[0] + state = field[3].split("/")[0] + if not state.lower() in ("full", "twoway"): + self.warn("neighbor %s state: %s" % (nbr, state)) + nbrlist.append(nbr) + + if len(nbrlist) == 0: + self.warn("no neighbors") + if self.verbose: + self.info(" %s has %d neighbors" % (self.node.routerid, len(nbrlist))) + return nbrlist + +class Ospf6MdrLevel(VtyshCmd): + """ Retrieve the OSPFv3 MDR level for a node. """ + args = "show ipv6 ospf6 mdrlevel" + + def parse(self): + line = self.out.readline() + # TODO: handle multiple interfaces + field = line.split() + mdrlevel = field[4] + if not mdrlevel in ("MDR", "BMDR", "OTHER"): + self.warn("mdrlevel: %s" % mdrlevel) + if self.verbose: + self.info(" %s is %s" % (self.node.routerid, mdrlevel)) + return mdrlevel + +class Ospf6Database(VtyshCmd): + """ Retrieve the OSPFv3 LSDB summary for a node. """ + args = "show ipv6 ospf6 database" + + def parse(self): + db = "" + for line in self.out: + field = line.split() + if len(field) < 8: + continue + # filter out Age and Duration columns + filtered = field[:3] + field[4:7] + db += " ".join(filtered) + "\n" + return db + +class ZebraRoutes(VtyshCmd): + """ Return a list of Route objects for a node based on its zebra + routing table. + """ + args = "show ip route" + + def parse(self): + for i in xrange(0,3): + self.out.readline() # skip first three lines + r = [] + prefix = None + for line in self.out: + field = line.split() + # only use OSPFv3 selected FIB routes + if field[0][:2] == "o>": + prefix = field[1] + metric = field[2].split("/")[1][:-1] + if field[0][2:] != "*": + continue + if field[3] == "via": + gw = field[4][:-1] + else: + gw = field[6][:-1] + r.append(Route(prefix, gw, metric)) + prefix = None + elif prefix and field[0] == "*": + # already have prefix and metric from previous line + gw = field[2][:-1] + r.append(Route(prefix, gw, metric)) + prefix = None + + if len(r) == 0: + self.warn("no zebra routes") + if self.verbose: + self.info(" %s has %d zebra routes" % (self.node.routerid, len(r))) + return r + +class KernelRoutes(Cmd): + """ Return a list of Route objects for a node based on its kernel + routing table. + """ + args = ("/sbin/ip", "route", "show") + + def parse(self): + r = [] + prefix = None + for line in self.out: + field = line.split() + if field[0] == "nexthop": + if not prefix: + # this saves only the first nexthop entry if multiple exist + continue + else: + prefix = field[0] + metric = field[-1] + tmp = prefix.split("/") + if len(tmp) < 2: + prefix += "/32" + if field[1] == "proto": + # nexthop entry is on the next line + continue + gw = field[2] # nexthop IP or interface + r.append(Route(prefix, gw, metric)) + prefix = None + + if len(r) == 0: + self.warn("no kernel routes") + if self.verbose: + self.info(" %s has %d kernel routes" % (self.node.routerid, len(r))) + return r + +def main(): + usagestr = "usage: %prog [-h] [options] [args]" + parser = optparse.OptionParser(usage = usagestr) + parser.set_defaults(numnodes = 10, linkprob = 0.35, delay = 20, seed = None) + + parser.add_option("-n", "--numnodes", dest = "numnodes", type = int, + help = "number of nodes") + parser.add_option("-p", "--linkprob", dest = "linkprob", type = float, + help = "link probabilty") + parser.add_option("-d", "--delay", dest = "delay", type = float, + help = "wait time before checking") + parser.add_option("-s", "--seed", dest = "seed", type = int, + help = "specify integer to use for random seed") + parser.add_option("-v", "--verbose", dest = "verbose", + action = "store_true", help = "be more verbose") + parser.add_option("-l", "--logfile", dest = "logfile", type = str, + help = "log detailed output to the specified file") + + def usage(msg = None, err = 0): + sys.stdout.write("\n") + if msg: + sys.stdout.write(msg + "\n\n") + parser.print_help() + sys.exit(err) + + # parse command line options + (options, args) = parser.parse_args() + + if options.numnodes < 2: + usage("invalid numnodes: %s" % options.numnodes) + if options.linkprob <= 0.0 or options.linkprob > 1.0: + usage("invalid linkprob: %s" % options.linkprob) + if options.delay < 0.0: + usage("invalid delay: %s" % options.delay) + + for a in args: + sys.stderr.write("ignoring command line argument: '%s'\n" % a) + + if options.seed: + random.seed(options.seed) + + me = ManetExperiment(options = options, start=datetime.datetime.now()) + me.info("creating topology: numnodes = %s; linkprob = %s" % \ + (options.numnodes, options.linkprob)) + me.topology(options.numnodes, options.linkprob) + + me.info("waiting %s sec" % options.delay) + time.sleep(options.delay) + me.info("checking neighbor state and routes") + me.checknodes() + me.info("done") + me.info("elapsed time: %s" % (datetime.datetime.now() - me.start)) + me.logend() + + return me + +if __name__ == "__main__": + me = main() diff --git a/daemon/examples/netns/switch.py b/daemon/examples/netns/switch.py new file mode 100755 index 00000000..3ff1111d --- /dev/null +++ b/daemon/examples/netns/switch.py @@ -0,0 +1,78 @@ +#!/usr/bin/python -i + +# Copyright (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. + +# connect n nodes to a virtual switch/hub + +import sys, datetime, optparse + +from core import pycore +from core.misc import ipaddr +from core.constants import * + +# node list (count from 1) +n = [None] + +def add_to_server(session): + ''' Add this session to the server's list if this script is executed from + the core-daemon server. + ''' + global server + try: + server.addsession(session) + return True + except NameError: + return False + +def main(): + usagestr = "usage: %prog [-h] [options] [args]" + parser = optparse.OptionParser(usage = usagestr) + parser.set_defaults(numnodes = 5) + + parser.add_option("-n", "--numnodes", dest = "numnodes", type = int, + help = "number of nodes") + + def usage(msg = None, err = 0): + sys.stdout.write("\n") + if msg: + sys.stdout.write(msg + "\n\n") + parser.print_help() + sys.exit(err) + + # parse command line options + (options, args) = parser.parse_args() + + if options.numnodes < 1: + usage("invalid number of nodes: %s" % options.numnodes) + + for a in args: + sys.stderr.write("ignoring command line argument: '%s'\n" % a) + + start = datetime.datetime.now() + + # IP subnet + prefix = ipaddr.IPv4Prefix("10.83.0.0/16") + session = pycore.Session(persistent=True) + add_to_server(session) + # emulated Ethernet switch + switch = session.addobj(cls = pycore.nodes.SwitchNode, name = "switch") + switch.setposition(x=80,y=50) + print "creating %d nodes with addresses from %s" % \ + (options.numnodes, prefix) + for i in xrange(1, options.numnodes + 1): + tmp = session.addobj(cls = pycore.nodes.CoreNode, name = "n%d" % i, + objid=i) + tmp.newnetif(switch, ["%s/%s" % (prefix.addr(i), prefix.prefixlen)]) + tmp.cmd([SYSCTL_BIN, "net.ipv4.icmp_echo_ignore_broadcasts=0"]) + tmp.setposition(x=150*i,y=150) + n.append(tmp) + + # start a shell on node 1 + n[1].term("bash") + + print "elapsed time: %s" % (datetime.datetime.now() - start) + +if __name__ == "__main__" or __name__ == "__builtin__": + main() + diff --git a/daemon/examples/netns/switchtest.py b/daemon/examples/netns/switchtest.py new file mode 100755 index 00000000..defc5400 --- /dev/null +++ b/daemon/examples/netns/switchtest.py @@ -0,0 +1,97 @@ +#!/usr/bin/python + +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. + +# run iperf to measure the effective throughput between two nodes when +# n nodes are connected to a virtual hub/switch; run test for testsec +# and repeat for minnodes <= n <= maxnodes with a step size of +# nodestep + +import optparse, sys, os, datetime + +from core import pycore +from core.misc import ipaddr +from core.misc.utils import mutecall + +try: + mutecall(["iperf", "-v"]) +except OSError: + sys.stderr.write("ERROR: running iperf failed\n") + sys.exit(1) + +def test(numnodes, testsec): + # node list + n = [] + # IP subnet + prefix = ipaddr.IPv4Prefix("10.83.0.0/16") + session = pycore.Session() + # emulated network + net = session.addobj(cls = pycore.nodes.SwitchNode) + for i in xrange(1, numnodes + 1): + tmp = session.addobj(cls = pycore.nodes.LxcNode, name = "n%d" % i) + tmp.newnetif(net, ["%s/%s" % (prefix.addr(i), prefix.prefixlen)]) + n.append(tmp) + n[0].cmd(["iperf", "-s", "-D"]) + n[-1].icmd(["iperf", "-t", str(int(testsec)), "-c", str(prefix.addr(1))]) + n[0].cmd(["killall", "-9", "iperf"]) + session.shutdown() + +def main(): + usagestr = "usage: %prog [-h] [options] [args]" + parser = optparse.OptionParser(usage = usagestr) + + parser.set_defaults(minnodes = 2) + parser.add_option("-m", "--minnodes", dest = "minnodes", type = int, + help = "min number of nodes to test; default = %s" % + parser.defaults["minnodes"]) + + parser.set_defaults(maxnodes = 2) + parser.add_option("-n", "--maxnodes", dest = "maxnodes", type = int, + help = "max number of nodes to test; default = %s" % + parser.defaults["maxnodes"]) + + parser.set_defaults(testsec = 10) + parser.add_option("-t", "--testsec", dest = "testsec", type = int, + help = "test time in seconds; default = %s" % + parser.defaults["testsec"]) + + parser.set_defaults(nodestep = 1) + parser.add_option("-s", "--nodestep", dest = "nodestep", type = int, + help = "number of nodes step size; default = %s" % + parser.defaults["nodestep"]) + + def usage(msg = None, err = 0): + sys.stdout.write("\n") + if msg: + sys.stdout.write(msg + "\n\n") + parser.print_help() + sys.exit(err) + + # parse command line options + (options, args) = parser.parse_args() + + if options.minnodes < 2: + usage("invalid min number of nodes: %s" % options.minnodes) + if options.maxnodes < options.minnodes: + usage("invalid max number of nodes: %s" % options.maxnodes) + if options.testsec < 1: + usage("invalid test time: %s" % options.testsec) + if options.nodestep < 1: + usage("invalid node step: %s" % options.nodestep) + + for a in args: + sys.stderr.write("ignoring command line argument: '%s'\n" % a) + + start = datetime.datetime.now() + + for i in xrange(options.minnodes, options.maxnodes + 1, options.nodestep): + print >> sys.stderr, "%s node test:" % i + test(i, options.testsec) + print >> sys.stderr, "" + + print >> sys.stderr, \ + "elapsed time: %s" % (datetime.datetime.now() - start) + +if __name__ == "__main__": + main() diff --git a/daemon/examples/netns/twonodes.sh b/daemon/examples/netns/twonodes.sh new file mode 100755 index 00000000..88034051 --- /dev/null +++ b/daemon/examples/netns/twonodes.sh @@ -0,0 +1,33 @@ +#!/bin/sh +# Below is a transcript of creating two emulated nodes and connecting them +# together with a wired link. You can run the core-cleanup script to clean +# up after this script. + +# create node 1 namespace container +vnoded -c /tmp/n1.ctl -l /tmp/n1.log -p /tmp/n1.pid +# create a virtual Ethernet (veth) pair, installing one end into node 1 +ip link add name n1.0.1 type veth peer name n1.0 +ip link set n1.0 netns `cat /tmp/n1.pid` +vcmd -c /tmp/n1.ctl -- ip link set n1.0 name eth0 +vcmd -c /tmp/n1.ctl -- ifconfig eth0 10.0.0.1/24 + +# create node 2 namespace container +vnoded -c /tmp/n2.ctl -l /tmp/n2.log -p /tmp/n2.pid +# create a virtual Ethernet (veth) pair, installing one end into node 2 +ip link add name n2.0.1 type veth peer name n2.0 +ip link set n2.0 netns `cat /tmp/n2.pid` +vcmd -c /tmp/n2.ctl -- ip link set n2.0 name eth0 +vcmd -c /tmp/n2.ctl -- ifconfig eth0 10.0.0.2/24 + +# bridge together nodes 1 and 2 using the other end of each veth pair +brctl addbr b.1.1 +brctl setfd b.1.1 0 +brctl addif b.1.1 n1.0.1 +brctl addif b.1.1 n2.0.1 +ip link set n1.0.1 up +ip link set n2.0.1 up +ip link set b.1.1 up + +# display connectivity and ping from node 1 to node 2 +brctl show +vcmd -c /tmp/n1.ctl -- ping 10.0.0.2 diff --git a/daemon/examples/netns/wlanemanetests.py b/daemon/examples/netns/wlanemanetests.py new file mode 100755 index 00000000..ad8dffbf --- /dev/null +++ b/daemon/examples/netns/wlanemanetests.py @@ -0,0 +1,772 @@ +#!/usr/bin/python + +# Copyright (c)2011-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +wlanemanetests.py - This script tests the performance of the WLAN device in +CORE by measuring various metrics: + - delay experienced when pinging end-to-end + - maximum TCP throughput achieved using iperf end-to-end + - the CPU used and loss experienced when running an MGEN flow of UDP traffic + +All MANET nodes are arranged in a row, so that any given node can only +communicate with the node to its right or to its left. Performance is measured +using traffic that travels across each hop in the network. Static /32 routing +is used instead of any dynamic routing protocol. + +Various underlying network types are tested: + - bridged (the CORE default, uses ebtables) + - bridged with netem (add link effects to the bridge using tc queues) + - EMANE bypass - the bypass model just forwards traffic + - EMANE RF-PIPE - the bandwidth (bitrate) is set very high / no restrictions + - EMANE RF-PIPE - bandwidth is set similar to netem case + - EMANE RF-PIPE - default connectivity is off and pathloss events are + generated to connect the nodes in a line + +Results are printed/logged in CSV format. + +''' + +import os, sys, time, optparse, datetime, math +from string import Template +try: + from core import pycore +except ImportError: + # hack for Fedora autoconf that uses the following pythondir: + if "/usr/lib/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.6/site-packages") + if "/usr/lib64/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.6/site-packages") + if "/usr/lib/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.7/site-packages") + if "/usr/lib64/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.7/site-packages") + from core import pycore +from core.misc import ipaddr +from core.misc.utils import mutecall +from core.constants import QUAGGA_STATE_DIR +from core.emane.bypass import EmaneBypassModel +from core.emane.rfpipe import EmaneRfPipeModel +import emaneeventservice +import emaneeventpathloss + + +# move these to core.misc.utils +def readstat(): + f = open("/proc/stat", "r") + lines = f.readlines() + f.close() + return lines + +def numcpus(): + lines = readstat() + n = 0 + for l in lines[1:]: + if l[:3] != "cpu": + break + n += 1 + return n + +def getcputimes(line): + # return (user, nice, sys, idle) from a /proc/stat cpu line + # assume columns are: + # cpu# user nice sys idle iowait irq softirq steal guest (man 5 proc) + items = line.split() + (user, nice, sys, idle) = map(lambda(x): int(x), items[1:5]) + return [user, nice, sys, idle] + +def calculatecpu(timesa, timesb): + for i in range(len(timesa)): + timesb[i] -= timesa[i] + total = sum(timesb) + if total == 0: + return 0.0 + else: + # subtract % time spent in idle time + return 100 - ((100.0 * timesb[-1]) / total) + +# end move these to core.misc.utils + +class Cmd(object): + ''' Helper class for running a command on a node and parsing the result. ''' + args = "" + def __init__(self, node, verbose=False): + ''' Initialize with a CoreNode (LxcNode) ''' + self.id = None + self.stdin = None + self.out = None + self.node = node + self.verbose = verbose + + def info(self, msg): + ''' Utility method for writing output to stdout.''' + print msg + sys.stdout.flush() + + def warn(self, msg): + ''' Utility method for writing output to stderr. ''' + print >> sys.stderr, "XXX %s:" % self.node.name, msg + sys.stderr.flush() + + def run(self): + ''' This is the primary method used for running this command. ''' + self.open() + status = self.id.wait() + r = self.parse() + self.cleanup() + return r + + def open(self): + ''' Exceute call to node.popen(). ''' + self.id, self.stdin, self.out, self.err = \ + self.node.popen((self.args)) + + def parse(self): + ''' This method is overloaded by child classes and should return some + result. + ''' + return None + + def cleanup(self): + ''' Close the Popen channels.''' + self.stdin.close() + self.out.close() + self.err.close() + tmp = self.id.wait() + if tmp: + self.warn("nonzero exit status:", tmp) + + +class ClientServerCmd(Cmd): + ''' Helper class for running a command on a node and parsing the result. ''' + args = "" + client_args = "" + def __init__(self, node, client_node, verbose=False): + ''' Initialize with two CoreNodes, node is the server ''' + Cmd.__init__(self, node, verbose) + self.client_node = client_node + + def run(self): + ''' Run the server command, then the client command, then + kill the server ''' + self.open() # server + self.client_open() # client + status = self.client_id.wait() + self.node.cmdresult(['killall', self.args[0]]) # stop the server + r = self.parse() + self.cleanup() + return r + + def client_open(self): + ''' Exceute call to client_node.popen(). ''' + self.client_id, self.client_stdin, self.client_out, self.client_err = \ + self.client_node.popen((self.client_args)) + + def parse(self): + ''' This method is overloaded by child classes and should return some + result. + ''' + return None + + def cleanup(self): + ''' Close the Popen channels.''' + self.stdin.close() + self.out.close() + self.err.close() + tmp = self.id.wait() + if tmp: + self.warn("nonzero exit status: %s" % tmp) + self.warn("command was: %s" % ((self.args, ))) + + +class PingCmd(Cmd): + ''' Test latency using ping. + ''' + def __init__(self, node, verbose=False, addr=None, count=50, interval=0.1, ): + Cmd.__init__(self, node, verbose) + self.addr = addr + self.count = count + self.interval = interval + self.args = ['ping', '-q', '-c', '%s' % count, '-i', '%s' % interval, + addr] + + def run(self): + if self.verbose: + self.info("%s initial test ping (max 1 second)..." % self.node.name) + (status, result) = self.node.cmdresult(["ping", "-q", "-c", "1", "-w", + "1", self.addr]) + if status != 0: + self.warn("initial ping from %s to %s failed! result:\n%s" % \ + (self.node.name, self.addr, result)) + return (0.0, 0.0) + if self.verbose: + self.info("%s pinging %s (%d seconds)..." % \ + (self.node.name, self.addr, self.count * self.interval)) + return Cmd.run(self) + + def parse(self): + lines = self.out.readlines() + avg_latency = 0 + mdev = 0 + try: + stats_str = lines[-1].split('=')[1] + stats = stats_str.split('/') + avg_latency = float(stats[1]) + mdev = float(stats[3].split(' ')[0]) + except Exception, e: + self.warn("ping parsing exception: %s" % e) + return (avg_latency, mdev) + +class IperfCmd(ClientServerCmd): + ''' Test throughput using iperf. + ''' + def __init__(self, node, client_node, verbose=False, addr=None, time=10): + # node is the server + ClientServerCmd.__init__(self, node, client_node, verbose) + self.addr = addr + self.time = time + # -s server, -y c CSV report output + self.args = ["iperf", "-s", "-y", "c"] + self.client_args = ["iperf", "-c", self.addr, "-t", "%s" % self.time] + + def run(self): + if self.verbose: + self.info("Launching the iperf server on %s..." % self.node.name) + self.info("Running the iperf client on %s (%s seconds)..." % \ + (self.client_node.name, self.time)) + return ClientServerCmd.run(self) + + def parse(self): + lines = self.out.readlines() + try: + bps = int(lines[-1].split(',')[-1].strip('\n')) + except Exception, e: + self.warn("iperf parsing exception: %s" % e) + bps = 0 + return bps + +class MgenCmd(ClientServerCmd): + ''' Run a test traffic flow using an MGEN sender and receiver. + ''' + def __init__(self, node, client_node, verbose=False, addr=None, time=10, + rate=512): + ClientServerCmd.__init__(self, node, client_node, verbose) + self.addr = addr + self.time = time + self.args = ['mgen', 'event', 'listen udp 5000', 'output', + '/var/log/mgen.log'] + self.rate = rate + sendevent = "ON 1 UDP DST %s/5000 PERIODIC [%s]" % \ + (addr, self.mgenrate(self.rate)) + stopevent = "%s OFF 1" % time + self.client_args = ['mgen', 'event', sendevent, 'event', stopevent, + 'output', '/var/log/mgen.log'] + + @staticmethod + def mgenrate(kbps): + ''' Return a MGEN periodic rate string for the given kilobits-per-sec. + Assume 1500 byte MTU, 20-byte IP + 8-byte UDP headers, leaving + 1472 bytes for data. + ''' + bps = (kbps / 8) * 1000.0 + maxdata = 1472 + pps = math.ceil(bps / maxdata) + return "%s %s" % (pps, maxdata) + + def run(self): + if self.verbose: + self.info("Launching the MGEN receiver on %s..." % self.node.name) + self.info("Running the MGEN sender on %s (%s seconds)..." % \ + (self.client_node.name, self.time)) + return ClientServerCmd.run(self) + + def cleanup(self): + ''' Close the Popen channels.''' + self.stdin.close() + self.out.close() + self.err.close() + tmp = self.id.wait() # non-zero mgen exit status OK + + def parse(self): + ''' Check MGEN receiver's log file for packet sequence numbers, and + return the percentage of lost packets. + ''' + logfile = os.path.join(self.node.nodedir, 'var.log/mgen.log') + f = open(logfile, 'r') + numlost = 0 + lastseq = 0 + for line in f.readlines(): + fields = line.split() + if fields[1] != 'RECV': + continue + try: + seq = int(fields[4].split('>')[1]) + except: + self.info("Unexpected MGEN line:\n%s" % fields) + if seq > (lastseq + 1): + numlost += seq - (lastseq + 1) + lastseq = seq + f.close() + if lastseq > 0: + loss = 100.0 * numlost / lastseq + else: + loss = 0 + if self.verbose: + self.info("Receiver log shows %d of %d packets lost" % \ + (numlost, lastseq)) + return loss + + +class Experiment(object): + ''' Experiment object to organize tests. + ''' + def __init__(self, opt, start): + ''' Initialize with opt and start time. ''' + self.session = None + # node list + self.nodes = [] + # WLAN network + self.net = None + self.verbose = opt.verbose + # dict from OptionParser + self.opt = opt + self.start = start + self.numping = opt.numping + self.numiperf = opt.numiperf + self.nummgen = opt.nummgen + self.logbegin() + + def info(self, msg): + ''' Utility method for writing output to stdout. ''' + print msg + sys.stdout.flush() + self.log(msg) + + def warn(self, msg): + ''' Utility method for writing output to stderr. ''' + print >> sys.stderr, msg + sys.stderr.flush() + self.log(msg) + + def logbegin(self): + ''' Start logging. ''' + self.logfp = None + if not self.opt.logfile: + return + self.logfp = open(self.opt.logfile, "w") + self.log("%s begin: %s\n" % (sys.argv[0], self.start.ctime())) + self.log("%s args: %s\n" % (sys.argv[0], sys.argv[1:])) + (sysname, rel, ver, machine, nodename) = os.uname() + self.log("%s %s %s %s on %s" % (sysname, rel, ver, machine, nodename)) + + def logend(self): + ''' End logging. ''' + if not self.logfp: + return + end = datetime.datetime.now() + self.log("%s end: %s (%s)\n" % \ + (sys.argv[0], end.ctime(), end - self.start)) + self.logfp.flush() + self.logfp.close() + self.logfp = None + + def log(self, msg): + ''' Write to the log file, if any. ''' + if not self.logfp: + return + print >> self.logfp, msg + + def reset(self): + ''' Prepare for another experiment run. + ''' + if self.session: + self.session.shutdown() + del self.session + self.session = None + self.nodes = [] + self.net = None + + def createbridgedsession(self, numnodes, verbose = False): + ''' Build a topology consisting of the given number of LxcNodes + connected to a WLAN. + ''' + # IP subnet + prefix = ipaddr.IPv4Prefix("10.0.0.0/16") + self.session = pycore.Session() + # emulated network + self.net = self.session.addobj(cls = pycore.nodes.WlanNode, + name = "wlan1") + prev = None + for i in xrange(1, numnodes + 1): + addr = "%s/%s" % (prefix.addr(i), 32) + tmp = self.session.addobj(cls = pycore.nodes.CoreNode, objid = i, + name = "n%d" % i) + tmp.newnetif(self.net, [addr]) + self.nodes.append(tmp) + self.session.services.addservicestonode(tmp, "router", + "IPForward", self.verbose) + self.session.services.bootnodeservices(tmp) + self.staticroutes(i, prefix, numnodes) + + # link each node in a chain, with the previous node + if prev: + self.net.link(prev.netif(0), tmp.netif(0)) + prev = tmp + + def createemanesession(self, numnodes, verbose = False, cls = None, + values = None): + ''' Build a topology consisting of the given number of LxcNodes + connected to an EMANE WLAN. + ''' + prefix = ipaddr.IPv4Prefix("10.0.0.0/16") + self.session = pycore.Session() + self.session.master = True + self.session.location.setrefgeo(47.57917,-122.13232,2.00000) + self.session.location.refscale = 150.0 + self.session.cfg['emane_models'] = "RfPipe, Ieee80211abg, Bypass" + self.session.emane.loadmodels() + self.net = self.session.addobj(cls = pycore.nodes.EmaneNode, + objid = numnodes + 1, name = "wlan1") + self.net.verbose = verbose + #self.session.emane.addobj(self.net) + for i in xrange(1, numnodes + 1): + addr = "%s/%s" % (prefix.addr(i), 32) + tmp = self.session.addobj(cls = pycore.nodes.CoreNode, objid = i, + name = "n%d" % i) + #tmp.setposition(i * 20, 50, None) + tmp.setposition(50, 50, None) + tmp.newnetif(self.net, [addr]) + self.nodes.append(tmp) + self.session.services.addservicestonode(tmp, "router", + "IPForward", self.verbose) + + if values is None: + values = cls.getdefaultvalues() + self.session.emane.setconfig(self.net.objid, cls._name, values) + self.session.emane.startup() + + self.info("waiting %s sec (TAP bring-up)" % 2) + time.sleep(2) + + for i in xrange(1, numnodes + 1): + tmp = self.nodes[i-1] + self.session.services.bootnodeservices(tmp) + self.staticroutes(i, prefix, numnodes) + + + def setnodes(self): + ''' Set the sender and receiver nodes for use in this experiment, + along with the address of the receiver to be used. + ''' + self.firstnode = self.nodes[0] + self.lastnode = self.nodes[-1] + self.lastaddr = self.lastnode.netif(0).addrlist[0].split('/')[0] + + + def staticroutes(self, i, prefix, numnodes): + ''' Add static routes on node number i to the other nodes in the chain. + ''' + routecmd = ["/sbin/ip", "route", "add"] + node = self.nodes[i-1] + neigh_left = "" + neigh_right = "" + # add direct interface routes first + if i > 1: + neigh_left = "%s" % prefix.addr(i - 1) + cmd = routecmd + [neigh_left, "dev", node.netif(0).name] + (status, result) = node.cmdresult(cmd) + if status != 0: + self.warn("failed to add interface route: %s" % cmd) + if i < numnodes: + neigh_right = "%s" % prefix.addr(i + 1) + cmd = routecmd + [neigh_right, "dev", node.netif(0).name] + (status, result) = node.cmdresult(cmd) + if status != 0: + self.warn("failed to add interface route: %s" % cmd) + + # add static routes to all other nodes via left/right neighbors + for j in xrange(1, numnodes + 1): + if abs(j - i) < 2: + continue + addr = "%s" % prefix.addr(j) + if j < i: + gw = neigh_left + else: + gw = neigh_right + cmd = routecmd + [addr, "via", gw] + (status, result) = node.cmdresult(cmd) + if status != 0: + self.warn("failed to add route: %s" % cmd) + + def setpathloss(self, numnodes): + ''' Send EMANE pathloss events to connect all NEMs in a chain. + ''' + service = emaneeventservice.EventService() + e = emaneeventpathloss.EventPathloss(1) + for i in xrange(1, numnodes + 1): + rxnem = i + # inform rxnem that it can hear node to the left with 10dB noise + txnem = rxnem - 1 + e.set(0, txnem, 10.0, 10.0) + if txnem > 0: + service.publish(emaneeventpathloss.EVENT_ID, + emaneeventservice.PLATFORMID_ANY, rxnem, + emaneeventservice.COMPONENTID_ANY, e.export()) + # inform rxnem that it can hear node to the right with 10dB noise + txnem = rxnem + 1 + e.set(0, txnem, 10.0, 10.0) + if txnem <= numnodes: + service.publish(emaneeventpathloss.EVENT_ID, + emaneeventservice.PLATFORMID_ANY, rxnem, + emaneeventservice.COMPONENTID_ANY, e.export()) + + def setneteffects(self, bw = None, delay = None): + ''' Set link effects for all interfaces attached to the network node. + ''' + if not self.net: + self.warn("failed to set effects: no network node") + return + for netif in self.net.netifs(): + self.net.linkconfig(netif, bw = bw, delay = delay) + + def runalltests(self, title=""): + ''' Convenience helper to run all defined experiment tests. + If tests are run multiple times, this returns the average of + those runs. + ''' + duration = self.opt.duration + rate = self.opt.rate + if len(title) > 0: + self.info("----- running %s tests (duration=%s, rate=%s) -----" % \ + (title, duration, rate)) + (latency, mdev, throughput, cpu, loss) = (0,0,0,0,0) + + self.info("number of runs: ping=%d, iperf=%d, mgen=%d" % \ + (self.numping, self.numiperf, self.nummgen)) + + if self.numping > 0: + (latency, mdev) = self.pingtest(count=self.numping) + + if self.numiperf > 0: + throughputs = [] + for i in range(1, self.numiperf + 1): + throughput = self.iperftest(time=duration) + if self.numiperf > 1: + throughputs += throughput + time.sleep(1) # iperf is very CPU intensive + if self.numiperf > 1: + throughput = sum(throughputs) / len(throughputs) + self.info("throughputs=%s" % ["%.2f" % v for v in throughputs]) + + if self.nummgen > 0: + cpus = [] + losses = [] + for i in range(1, self.nummgen + 1): + (cpu, loss) = self.cputest(time=duration, rate=rate) + if self.nummgen > 1: + cpus += cpu, + losses += loss, + if self.nummgen > 1: + cpu = sum(cpus) / len(cpus) + loss = sum(losses) / len(losses) + self.info("cpus=%s" % ["%.2f" % v for v in cpus]) + self.info("losses=%s" % ["%.2f" % v for v in losses]) + + return (latency, mdev, throughput, cpu, loss) + + def pingtest(self, count=50): + ''' Ping through a chain of nodes and report the average latency. + ''' + p = PingCmd(node=self.firstnode, verbose=self.verbose, + addr = self.lastaddr, count=count, interval=0.1).run() + (latency, mdev) = p + self.info("latency (ms): %.03f, %.03f" % (latency, mdev)) + return p + + def iperftest(self, time=10): + ''' Run iperf through a chain of nodes and report the maximum + throughput. + ''' + bps = IperfCmd(node=self.lastnode, client_node=self.firstnode, + verbose=False, addr=self.lastaddr, time=time).run() + self.info("throughput (bps): %s" % bps) + return bps + + def cputest(self, time=10, rate=512): + ''' Run MGEN through a chain of nodes and report the CPU usage and + percent of lost packets. Rate is in kbps. + ''' + if self.verbose: + self.info("%s initial test ping (max 1 second)..." % \ + self.firstnode.name) + (status, result) = self.firstnode.cmdresult(["ping", "-q", "-c", "1", + "-w", "1", self.lastaddr]) + if status != 0: + self.warn("initial ping from %s to %s failed! result:\n%s" % \ + (self.firstnode.name, self.lastaddr, result)) + return (0.0, 0.0) + lines = readstat() + cpustart = getcputimes(lines[0]) + loss = MgenCmd(node=self.lastnode, client_node=self.firstnode, + verbose=False, addr=self.lastaddr, + time=time, rate=rate).run() + lines = readstat() + cpuend = getcputimes(lines[0]) + percent = calculatecpu(cpustart, cpuend) + self.info("CPU usage (%%): %.02f, %.02f loss" % (percent, loss)) + return percent, loss + +def main(): + ''' Main routine when running from command-line. + ''' + usagestr = "usage: %prog [-h] [options] [args]" + parser = optparse.OptionParser(usage = usagestr) + parser.set_defaults(numnodes = 10, delay = 3, duration = 10, rate = 512, + verbose = False, + numping = 50, numiperf = 1, nummgen = 1) + + parser.add_option("-d", "--delay", dest = "delay", type = float, + help = "wait time before testing") + parser.add_option("-l", "--logfile", dest = "logfile", type = str, + help = "log detailed output to the specified file") + parser.add_option("-n", "--numnodes", dest = "numnodes", type = int, + help = "number of nodes") + parser.add_option("-r", "--rate", dest = "rate", type = float, + help = "kbps rate to use for MGEN CPU tests") + parser.add_option("--numping", dest = "numping", type = int, + help = "number of ping latency test runs") + parser.add_option("--numiperf", dest = "numiperf", type = int, + help = "number of iperf throughput test runs") + parser.add_option("--nummgen", dest = "nummgen", type = int, + help = "number of MGEN CPU tests runs") + parser.add_option("-t", "--time", dest = "duration", type = int, + help = "duration in seconds of throughput and CPU tests") + parser.add_option("-v", "--verbose", dest = "verbose", + action = "store_true", help = "be more verbose") + + def usage(msg = None, err = 0): + sys.stdout.write("\n") + if msg: + sys.stdout.write(msg + "\n\n") + parser.print_help() + sys.exit(err) + + # parse command line opt + (opt, args) = parser.parse_args() + + if opt.numnodes < 2: + usage("invalid numnodes: %s" % opt.numnodes) + if opt.delay < 0.0: + usage("invalid delay: %s" % opt.delay) + if opt.rate < 0.0: + usage("invalid rate: %s" % opt.rate) + + for a in args: + sys.stderr.write("ignoring command line argument: '%s'\n" % a) + + results = {} + exp = Experiment(opt = opt, start=datetime.datetime.now()) + + # bridged + exp.info("setting up bridged tests 1/2 no link effects") + exp.info("creating topology: numnodes = %s" % \ + (opt.numnodes, )) + exp.createbridgedsession(numnodes=opt.numnodes, verbose=opt.verbose) + exp.setnodes() + exp.info("waiting %s sec (node/route bring-up)" % opt.delay) + time.sleep(opt.delay) + results['0 bridged'] = exp.runalltests("bridged") + exp.info("done; elapsed time: %s" % (datetime.datetime.now() - exp.start)) + + # bridged with netem + exp.info("setting up bridged tests 2/2 with netem") + exp.setneteffects(bw=54000000, delay=0) + exp.info("waiting %s sec (queue bring-up)" % opt.delay) + results['1 netem'] = exp.runalltests("netem") + exp.info("shutting down bridged session") + exp.reset() + + # EMANE bypass model + exp.info("setting up EMANE tests 1/2 with bypass model") + exp.createemanesession(numnodes=opt.numnodes, verbose=opt.verbose, + cls=EmaneBypassModel, values=None) + exp.setnodes() + exp.info("waiting %s sec (node/route bring-up)" % opt.delay) + time.sleep(opt.delay) + results['2 bypass'] = exp.runalltests("bypass") + exp.info("shutting down bypass session") + exp.reset() + + exp.info("waiting %s sec (between EMANE tests)" % opt.delay) + time.sleep(opt.delay) + + # EMANE RF-PIPE model: no restrictions (max datarate) + exp.info("setting up EMANE tests 2/4 with RF-PIPE model") + rfpipevals = list(EmaneRfPipeModel.getdefaultvalues()) + rfpnames = EmaneRfPipeModel.getnames() + rfpipevals[ rfpnames.index('datarate') ] = '4294967295' # max value + rfpipevals[ rfpnames.index('pathlossmode') ] = '2ray' + rfpipevals[ rfpnames.index('defaultconnectivitymode') ] = '1' + exp.createemanesession(numnodes=opt.numnodes, verbose=opt.verbose, + cls=EmaneRfPipeModel, values=rfpipevals) + exp.setnodes() + exp.info("waiting %s sec (node/route bring-up)" % opt.delay) + time.sleep(opt.delay) + results['3 rfpipe'] = exp.runalltests("rfpipe") + exp.info("shutting down RF-PIPE session") + exp.reset() + + # EMANE RF-PIPE model: 54M datarate + exp.info("setting up EMANE tests 3/4 with RF-PIPE model 54M") + rfpipevals = list(EmaneRfPipeModel.getdefaultvalues()) + rfpnames = EmaneRfPipeModel.getnames() + rfpipevals[ rfpnames.index('datarate') ] = '54000' + # TX delay != propagation delay + #rfpipevals[ rfpnames.index('delay') ] = '5000' + rfpipevals[ rfpnames.index('pathlossmode') ] = '2ray' + rfpipevals[ rfpnames.index('defaultconnectivitymode') ] = '1' + exp.createemanesession(numnodes=opt.numnodes, verbose=opt.verbose, + cls=EmaneRfPipeModel, values=rfpipevals) + exp.setnodes() + exp.info("waiting %s sec (node/route bring-up)" % opt.delay) + time.sleep(opt.delay) + results['4 rfpipe54m'] = exp.runalltests("rfpipe54m") + exp.info("shutting down RF-PIPE session") + exp.reset() + + # EMANE RF-PIPE model + exp.info("setting up EMANE tests 4/4 with RF-PIPE model pathloss") + rfpipevals = list(EmaneRfPipeModel.getdefaultvalues()) + rfpnames = EmaneRfPipeModel.getnames() + rfpipevals[ rfpnames.index('datarate') ] = '54000' + rfpipevals[ rfpnames.index('pathlossmode') ] = 'pathloss' + rfpipevals[ rfpnames.index('defaultconnectivitymode') ] = '0' + exp.createemanesession(numnodes=opt.numnodes, verbose=opt.verbose, + cls=EmaneRfPipeModel, values=rfpipevals) + exp.setnodes() + exp.info("waiting %s sec (node/route bring-up)" % opt.delay) + time.sleep(opt.delay) + exp.info("sending pathloss events to govern connectivity") + exp.setpathloss(opt.numnodes) + results['5 pathloss'] = exp.runalltests("pathloss") + exp.info("shutting down RF-PIPE session") + exp.reset() + + # summary of results in CSV format + exp.info("----- summary of results (%s nodes, rate=%s, duration=%s) -----" \ + % (opt.numnodes, opt.rate, opt.duration)) + exp.info("netname:latency,mdev,throughput,cpu,loss") + + for test in sorted(results.keys()): + (latency, mdev, throughput, cpu, loss) = results[test] + exp.info("%s:%.03f,%.03f,%d,%.02f,%.02f" % \ + (test, latency, mdev, throughput, cpu,loss)) + + exp.logend() + return exp + +if __name__ == "__main__": + exp = main() diff --git a/daemon/examples/netns/wlantest.py b/daemon/examples/netns/wlantest.py new file mode 100755 index 00000000..85fe79a8 --- /dev/null +++ b/daemon/examples/netns/wlantest.py @@ -0,0 +1,98 @@ +#!/usr/bin/python + +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. + +# run iperf to measure the effective throughput between two nodes when +# n nodes are connected to a virtual wlan; run test for testsec +# and repeat for minnodes <= n <= maxnodes with a step size of +# nodestep + +import optparse, sys, os, datetime + +from core import pycore +from core.misc import ipaddr +from core.misc.utils import mutecall + +try: + mutecall(["iperf", "-v"]) +except OSError: + sys.stderr.write("ERROR: running iperf failed\n") + sys.exit(1) + +def test(numnodes, testsec): + # node list + n = [] + # IP subnet + prefix = ipaddr.IPv4Prefix("10.83.0.0/16") + session = pycore.Session() + # emulated network + net = session.addobj(cls = pycore.nodes.WlanNode) + for i in xrange(1, numnodes + 1): + tmp = session.addobj(cls = pycore.nodes.LxcNode, name = "n%d" % i) + tmp.newnetif(net, ["%s/%s" % (prefix.addr(i), prefix.prefixlen)]) + n.append(tmp) + net.link(n[0].netif(0), n[-1].netif(0)) + n[0].cmd(["iperf", "-s", "-D"]) + n[-1].icmd(["iperf", "-t", str(int(testsec)), "-c", str(prefix.addr(1))]) + n[0].cmd(["killall", "-9", "iperf"]) + session.shutdown() + +def main(): + usagestr = "usage: %prog [-h] [options] [args]" + parser = optparse.OptionParser(usage = usagestr) + + parser.set_defaults(minnodes = 2) + parser.add_option("-m", "--minnodes", dest = "minnodes", type = int, + help = "min number of nodes to test; default = %s" % + parser.defaults["minnodes"]) + + parser.set_defaults(maxnodes = 2) + parser.add_option("-n", "--maxnodes", dest = "maxnodes", type = int, + help = "max number of nodes to test; default = %s" % + parser.defaults["maxnodes"]) + + parser.set_defaults(testsec = 10) + parser.add_option("-t", "--testsec", dest = "testsec", type = int, + help = "test time in seconds; default = %s" % + parser.defaults["testsec"]) + + parser.set_defaults(nodestep = 1) + parser.add_option("-s", "--nodestep", dest = "nodestep", type = int, + help = "number of nodes step size; default = %s" % + parser.defaults["nodestep"]) + + def usage(msg = None, err = 0): + sys.stdout.write("\n") + if msg: + sys.stdout.write(msg + "\n\n") + parser.print_help() + sys.exit(err) + + # parse command line options + (options, args) = parser.parse_args() + + if options.minnodes < 2: + usage("invalid min number of nodes: %s" % options.minnodes) + if options.maxnodes < options.minnodes: + usage("invalid max number of nodes: %s" % options.maxnodes) + if options.testsec < 1: + usage("invalid test time: %s" % options.testsec) + if options.nodestep < 1: + usage("invalid node step: %s" % options.nodestep) + + for a in args: + sys.stderr.write("ignoring command line argument: '%s'\n" % a) + + start = datetime.datetime.now() + + for i in xrange(options.minnodes, options.maxnodes + 1, options.nodestep): + print >> sys.stderr, "%s node test:" % i + test(i, options.testsec) + print >> sys.stderr, "" + + print >> sys.stderr, \ + "elapsed time: %s" % (datetime.datetime.now() - start) + +if __name__ == "__main__": + main() diff --git a/daemon/examples/services/sampleFirewall b/daemon/examples/services/sampleFirewall new file mode 100644 index 00000000..a445d133 --- /dev/null +++ b/daemon/examples/services/sampleFirewall @@ -0,0 +1,30 @@ +# -------- CUSTOMIZATION REQUIRED -------- +# +# Below are sample iptables firewall rules that you can uncomment and edit. +# You can also use ip6tables rules for IPv6. +# + +# start by flushing all firewall rules (so this script may be re-run) +#iptables -F + +# allow traffic related to established connections +#iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT + +# allow TCP packets from any source destined for 192.168.1.1 +#iptables -A INPUT -s 0/0 -i eth0 -d 192.168.1.1 -p TCP -j ACCEPT + +# allow OpenVPN server traffic from eth0 +#iptables -A INPUT -p udp --dport 1194 -j ACCEPT +#iptables -A INPUT -i eth0 -j DROP +#iptables -A OUTPUT -p udp --sport 1194 -j ACCEPT +#iptables -A OUTPUT -o eth0 -j DROP + +# allow ICMP ping traffic +#iptables -A OUTPUT -p icmp --icmp-type echo-request -j ACCEPT +#iptables -A INPUT -p icmp --icmp-type echo-reply -j ACCEPT + +# allow SSH traffic +#iptables -A -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT + +# drop all other traffic coming in eth0 +#iptables -A INPUT -i eth0 -j DROP diff --git a/daemon/examples/services/sampleIPsec b/daemon/examples/services/sampleIPsec new file mode 100644 index 00000000..59e40fc9 --- /dev/null +++ b/daemon/examples/services/sampleIPsec @@ -0,0 +1,119 @@ +# -------- CUSTOMIZATION REQUIRED -------- +# +# The IPsec service builds ESP tunnels between the specified peers using the +# racoon IKEv2 keying daemon. You need to provide keys and the addresses of +# peers, along with subnets to tunnel. + +# directory containing the certificate and key described below +keydir=/etc/core/keys + +# the name used for the "$certname.pem" x509 certificate and +# "$certname.key" RSA private key, which can be generated using openssl +certname=ipsec1 + +# list the public-facing IP addresses, starting with the localhost and followed +# by each tunnel peer, separated with a single space +tunnelhosts="172.16.0.1AND172.16.0.2 172.16.0.1AND172.16.2.1" + +# Define T where i is the index for each tunnel peer host from +# the tunnel_hosts list above (0 is localhost). +# T is a list of IPsec tunnels with peer i, with a local subnet address +# followed by the remote subnet address: +# T="AND AND" +# For example, 172.16.0.0/24 is a local network (behind this node) to be +# tunneled and 172.16.2.0/24 is a remote network (behind peer 1) +T1="172.16.3.0/24AND172.16.5.0/24" +T2="172.16.4.0/24AND172.16.5.0/24 172.16.4.0/24AND172.16.6.0/24" + +# -------- END CUSTOMIZATION -------- + +echo "building config $PWD/ipsec.conf..." +echo "building config $PWD/ipsec.conf..." > $PWD/ipsec.log + +checkip=0 +if [ "$(dpkg -l | grep " sipcalc ")" = "" ]; then + echo "WARNING: ip validation disabled because package sipcalc not installed + " >> $PWD/ipsec.log + checkip=1 +fi + +echo "#!/usr/sbin/setkey -f + # Flush the SAD and SPD + flush; + spdflush; + + # Security policies \ + " > $PWD/ipsec.conf +i=0 +for hostpair in $tunnelhosts; do + i=`expr $i + 1` + # parse tunnel host IP + thishost=${hostpair%%AND*} + peerhost=${hostpair##*AND} + if [ $checkip = "0" ] && + [ "$(sipcalc "$thishost" "$peerhost" | grep ERR)" != "" ]; then + echo "ERROR: invalid host address $thishost or $peerhost \ + " >> $PWD/ipsec.log + fi + # parse each tunnel addresses + tunnel_list_var_name=T$i + eval tunnels="$"$tunnel_list_var_name"" + for ttunnel in $tunnels; do + lclnet=${ttunnel%%AND*} + rmtnet=${ttunnel##*AND} + if [ $checkip = "0" ] && + [ "$(sipcalc "$lclnet" "$rmtnet"| grep ERR)" != "" ]; then + echo "ERROR: invalid tunnel address $lclnet and $rmtnet \ + " >> $PWD/ipsec.log + fi + # add tunnel policies + echo " + spdadd $lclnet $rmtnet any -P out ipsec + esp/tunnel/$thishost-$peerhost/require; + spdadd $rmtnet $lclnet any -P in ipsec + esp/tunnel/$peerhost-$thishost/require; \ + " >> $PWD/ipsec.conf + done +done + +echo "building config $PWD/racoon.conf..." +if [ ! -e $keydir\/$certname.key ] || [ ! -e $keydir\/$certname.pem ]; then + echo "ERROR: missing certification files under $keydir \ +$certname.key or $certname.pem " >> $PWD/ipsec.log +fi +echo " + path certificate \"$keydir\"; + listen { + adminsock disabled; + } + remote anonymous + { + exchange_mode main; + certificate_type x509 \"$certname.pem\" \"$certname.key\"; + ca_type x509 \"ca-cert.pem\"; + my_identifier asn1dn; + peers_identifier asn1dn; + + proposal { + encryption_algorithm 3des ; + hash_algorithm sha1; + authentication_method rsasig ; + dh_group modp768; + } + } + sainfo anonymous + { + pfs_group modp768; + lifetime time 1 hour ; + encryption_algorithm 3des, blowfish 448, rijndael ; + authentication_algorithm hmac_sha1, hmac_md5 ; + compression_algorithm deflate ; + } + " > $PWD/racoon.conf + +# the setkey program is required from the ipsec-tools package +echo "running setkey -f $PWD/ipsec.conf..." +setkey -f $PWD/ipsec.conf + +echo "running racoon -d -f $PWD/racoon.conf..." +racoon -d -f $PWD/racoon.conf -l racoon.log diff --git a/daemon/examples/services/sampleVPNClient b/daemon/examples/services/sampleVPNClient new file mode 100644 index 00000000..af17ef41 --- /dev/null +++ b/daemon/examples/services/sampleVPNClient @@ -0,0 +1,63 @@ +# -------- CUSTOMIZATION REQUIRED -------- +# +# The VPNClient service builds a VPN tunnel to the specified VPN server using +# OpenVPN software and a virtual TUN/TAP device. + +# directory containing the certificate and key described below +keydir=/etc/core/keys + +# the name used for a "$keyname.crt" certificate and "$keyname.key" private key. +keyname=client1 + +# the public IP address of the VPN server this client should connect with +vpnserver="10.0.2.10" + +# optional next hop for adding a static route to reach the VPN server +nexthop="10.0.1.1" + +# --------- END CUSTOMIZATION -------- + +# validate addresses +if [ "$(dpkg -l | grep " sipcalc ")" = "" ]; then + echo "WARNING: ip validation disabled because package sipcalc not installed + " > $PWD/vpnclient.log +else + if [ "$(sipcalc "$vpnserver" "$nexthop" | grep ERR)" != "" ]; then + echo "ERROR: invalide address $vpnserver or $nexthop \ + " > $PWD/vpnclient.log + fi +fi + +# validate key and certification files +if [ ! -e $keydir\/$keyname.key ] || [ ! -e $keydir\/$keyname.crt ] \ + || [ ! -e $keydir\/ca.crt ] || [ ! -e $keydir\/dh1024.pem ]; then + echo "ERROR: missing certification or key files under $keydir \ +$keyname.key or $keyname.crt or ca.crt or dh1024.pem" >> $PWD/vpnclient.log +fi + +# if necessary, add a static route for reaching the VPN server IP via the IF +vpnservernet=${vpnserver%.*}.0/24 +if [ "$nexthop" != "" ]; then + /sbin/ip route add $vpnservernet via $nexthop +fi + +# create openvpn client.conf +( +cat << EOF +client +dev tun +proto udp +remote $vpnserver 1194 +nobind +ca $keydir/ca.crt +cert $keydir/$keyname.crt +key $keydir/$keyname.key +dh $keydir/dh1024.pem +cipher AES-256-CBC +log $PWD/openvpn-client.log +verb 4 +daemon +EOF +) > client.conf + +openvpn --config client.conf diff --git a/daemon/examples/services/sampleVPNServer b/daemon/examples/services/sampleVPNServer new file mode 100644 index 00000000..f94c4d7b --- /dev/null +++ b/daemon/examples/services/sampleVPNServer @@ -0,0 +1,147 @@ +# -------- CUSTOMIZATION REQUIRED -------- +# +# The VPNServer service sets up the OpenVPN server for building VPN tunnels +# that allow access via TUN/TAP device to private networks. +# +# note that the IPForward and DefaultRoute services should be enabled + +# directory containing the certificate and key described below, in addition to +# a CA certificate and DH key +keydir=/etc/core/keys + +# the name used for a "$keyname.crt" certificate and "$keyname.key" private key. +keyname=server2 + +# the VPN subnet address from which the client VPN IP (for the TUN/TAP) +# will be allocated +vpnsubnet=10.0.200.0 + +# public IP address of this vpn server (same as VPNClient vpnserver= setting) +vpnserver=10.0.2.10 + +# optional list of private subnets reachable behind this VPN server +# each subnet and next hop is separated by a space +# ", , ..." +privatenets="10.0.11.0,10.0.10.1 10.0.12.0,10.0.10.1" + +# optional list of VPN clients, for statically assigning IP addresses to +# clients; also, an optional client subnet can be specified for adding static +# routes via the client +# Note: VPN addresses x.x.x.0-3 are reserved +# ",, ,, ..." +vpnclients="client1KeyFilename,10.0.200.5,10.0.0.0 client2KeyFilename,," + +# NOTE: you may need to enable the StaticRoutes service on nodes within the +# private subnet, in order to have routes back to the client. +# /sbin/ip ro add /24 via +# /sbin/ip ro add /24 via + +# -------- END CUSTOMIZATION -------- + +echo > $PWD/vpnserver.log +rm -f -r $PWD/ccd + +# validate key and certification files +if [ ! -e $keydir\/$keyname.key ] || [ ! -e $keydir\/$keyname.crt ] \ + || [ ! -e $keydir\/ca.crt ] || [ ! -e $keydir\/dh1024.pem ]; then + echo "ERROR: missing certification or key files under $keydir \ +$keyname.key or $keyname.crt or ca.crt or dh1024.pem" >> $PWD/vpnserver.log +fi + +# validate configuration IP addresses +checkip=0 +if [ "$(dpkg -l | grep " sipcalc ")" = "" ]; then + echo "WARNING: ip validation disabled because package sipcalc not installed\ + " >> $PWD/vpnserver.log + checkip=1 +else + if [ "$(sipcalc "$vpnsubnet" "$vpnserver" | grep ERR)" != "" ]; then + echo "ERROR: invalid vpn subnet or server address \ +$vpnsubnet or $vpnserver " >> $PWD/vpnserver.log + fi +fi + +# create client vpn ip pool file +( +cat << EOF +EOF +)> $PWD/ippool.txt + +# create server.conf file +( +cat << EOF +# openvpn server config +local $vpnserver +server $vpnsubnet 255.255.255.0 +push redirect-gateway def1 +EOF +)> $PWD/server.conf + +# add routes to VPN server private subnets, and push these routes to clients +for privatenet in $privatenets; do + if [ $privatenet != "" ]; then + net=${privatenet%%,*} + nexthop=${privatenet##*,} + if [ $checkip = "0" ] && + [ "$(sipcalc "$net" "$nexthop" | grep ERR)" != "" ]; then + echo "ERROR: invalid vpn server private net address \ +$net or $nexthop " >> $PWD/vpnserver.log + fi + echo push route $net 255.255.255.0 >> $PWD/server.conf + /sbin/ip ro add $net/24 via $nexthop + /sbin/ip ro add $vpnsubnet/24 via $nexthop + fi +done + +# allow subnet through this VPN, one route for each client subnet +for client in $vpnclients; do + if [ $client != "" ]; then + cSubnetIP=${client##*,} + cVpnIP=${client#*,} + cVpnIP=${cVpnIP%%,*} + cKeyFilename=${client%%,*} + if [ "$cSubnetIP" != "" ]; then + if [ $checkip = "0" ] && + [ "$(sipcalc "$cSubnetIP" "$cVpnIP" | grep ERR)" != "" ]; then + echo "ERROR: invalid vpn client and subnet address \ +$cSubnetIP or $cVpnIP " >> $PWD/vpnserver.log + fi + echo route $cSubnetIP 255.255.255.0 >> $PWD/server.conf + if ! test -d $PWD/ccd; then + mkdir -p $PWD/ccd + echo client-config-dir $PWD/ccd >> $PWD/server.conf + fi + if test -e $PWD/ccd/$cKeyFilename; then + echo iroute $cSubnetIP 255.255.255.0 >> $PWD/ccd/$cKeyFilename + else + echo iroute $cSubnetIP 255.255.255.0 > $PWD/ccd/$cKeyFilename + fi + fi + if [ "$cVpnIP" != "" ]; then + echo $cKeyFilename,$cVpnIP >> $PWD/ippool.txt + fi + fi +done + +( +cat << EOF +keepalive 10 120 +ca $keydir/ca.crt +cert $keydir/$keyname.crt +key $keydir/$keyname.key +dh $keydir/dh1024.pem +cipher AES-256-CBC +status /var/log/openvpn-status.log +log /var/log/openvpn-server.log +ifconfig-pool-linear +ifconfig-pool-persist $PWD/ippool.txt +port 1194 +proto udp +dev tun +verb 4 +daemon +EOF +)>> $PWD/server.conf + +# start vpn server +openvpn --config server.conf diff --git a/daemon/examples/stopsession.py b/daemon/examples/stopsession.py new file mode 100755 index 00000000..3b890e2f --- /dev/null +++ b/daemon/examples/stopsession.py @@ -0,0 +1,45 @@ +#!/usr/bin/env python +# (c)2010-2012 the Boeing Company +# author: Jeff Ahrenholz +# +# List and stop CORE sessions from the command line. +# + +import socket, optparse +from core.constants import * +from core.api import coreapi + +def main(): + parser = optparse.OptionParser(usage = "usage: %prog [-l] ") + parser.add_option("-l", "--list", dest = "list", action = "store_true", + help = "list running sessions") + (options, args) = parser.parse_args() + + if options.list is True: + num = '0' + flags = coreapi.CORE_API_STR_FLAG + else: + num = args[0] + flags = coreapi.CORE_API_DEL_FLAG + tlvdata = coreapi.CoreSessionTlv.pack(coreapi.CORE_TLV_SESS_NUMBER, num) + msg = coreapi.CoreSessionMessage.pack(flags, tlvdata) + + sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) + sock.connect(('localhost', coreapi.CORE_API_PORT)) + sock.send(msg) + + # receive and print a session list + if options.list is True: + hdr = sock.recv(coreapi.CoreMessage.hdrsiz) + msgtype, msgflags, msglen = coreapi.CoreMessage.unpackhdr(hdr) + data = "" + if msglen: + data = sock.recv(msglen) + msg = coreapi.CoreMessage(msgflags, hdr, data) + sessions = msg.gettlv(coreapi.CORE_TLV_SESS_NUMBER) + print "sessions:", sessions + + sock.close() + +if __name__ == "__main__": + main() diff --git a/daemon/ns3/LICENSE b/daemon/ns3/LICENSE new file mode 100644 index 00000000..d511905c --- /dev/null +++ b/daemon/ns3/LICENSE @@ -0,0 +1,339 @@ + GNU GENERAL PUBLIC LICENSE + Version 2, June 1991 + + Copyright (C) 1989, 1991 Free Software Foundation, Inc., + 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA + Everyone is permitted to copy and distribute verbatim copies + of this license document, but changing it is not allowed. + + Preamble + + The licenses for most software are designed to take away your +freedom to share and change it. By contrast, the GNU General Public +License is intended to guarantee your freedom to share and change free +software--to make sure the software is free for all its users. This +General Public License applies to most of the Free Software +Foundation's software and to any other program whose authors commit to +using it. (Some other Free Software Foundation software is covered by +the GNU Lesser General Public License instead.) You can apply it to +your programs, too. + + When we speak of free software, we are referring to freedom, not +price. Our General Public Licenses are designed to make sure that you +have the freedom to distribute copies of free software (and charge for +this service if you wish), that you receive source code or can get it +if you want it, that you can change the software or use pieces of it +in new free programs; and that you know you can do these things. + + To protect your rights, we need to make restrictions that forbid +anyone to deny you these rights or to ask you to surrender the rights. +These restrictions translate to certain responsibilities for you if you +distribute copies of the software, or if you modify it. + + For example, if you distribute copies of such a program, whether +gratis or for a fee, you must give the recipients all the rights that +you have. You must make sure that they, too, receive or can get the +source code. And you must show them these terms so they know their +rights. + + We protect your rights with two steps: (1) copyright the software, and +(2) offer you this license which gives you legal permission to copy, +distribute and/or modify the software. + + Also, for each author's protection and ours, we want to make certain +that everyone understands that there is no warranty for this free +software. If the software is modified by someone else and passed on, we +want its recipients to know that what they have is not the original, so +that any problems introduced by others will not reflect on the original +authors' reputations. + + Finally, any free program is threatened constantly by software +patents. We wish to avoid the danger that redistributors of a free +program will individually obtain patent licenses, in effect making the +program proprietary. To prevent this, we have made it clear that any +patent must be licensed for everyone's free use or not licensed at all. + + The precise terms and conditions for copying, distribution and +modification follow. + + GNU GENERAL PUBLIC LICENSE + TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION + + 0. This License applies to any program or other work which contains +a notice placed by the copyright holder saying it may be distributed +under the terms of this General Public License. The "Program", below, +refers to any such program or work, and a "work based on the Program" +means either the Program or any derivative work under copyright law: +that is to say, a work containing the Program or a portion of it, +either verbatim or with modifications and/or translated into another +language. (Hereinafter, translation is included without limitation in +the term "modification".) Each licensee is addressed as "you". + +Activities other than copying, distribution and modification are not +covered by this License; they are outside its scope. The act of +running the Program is not restricted, and the output from the Program +is covered only if its contents constitute a work based on the +Program (independent of having been made by running the Program). +Whether that is true depends on what the Program does. + + 1. You may copy and distribute verbatim copies of the Program's +source code as you receive it, in any medium, provided that you +conspicuously and appropriately publish on each copy an appropriate +copyright notice and disclaimer of warranty; keep intact all the +notices that refer to this License and to the absence of any warranty; +and give any other recipients of the Program a copy of this License +along with the Program. + +You may charge a fee for the physical act of transferring a copy, and +you may at your option offer warranty protection in exchange for a fee. + + 2. You may modify your copy or copies of the Program or any portion +of it, thus forming a work based on the Program, and copy and +distribute such modifications or work under the terms of Section 1 +above, provided that you also meet all of these conditions: + + a) You must cause the modified files to carry prominent notices + stating that you changed the files and the date of any change. + + b) You must cause any work that you distribute or publish, that in + whole or in part contains or is derived from the Program or any + part thereof, to be licensed as a whole at no charge to all third + parties under the terms of this License. + + c) If the modified program normally reads commands interactively + when run, you must cause it, when started running for such + interactive use in the most ordinary way, to print or display an + announcement including an appropriate copyright notice and a + notice that there is no warranty (or else, saying that you provide + a warranty) and that users may redistribute the program under + these conditions, and telling the user how to view a copy of this + License. (Exception: if the Program itself is interactive but + does not normally print such an announcement, your work based on + the Program is not required to print an announcement.) + +These requirements apply to the modified work as a whole. If +identifiable sections of that work are not derived from the Program, +and can be reasonably considered independent and separate works in +themselves, then this License, and its terms, do not apply to those +sections when you distribute them as separate works. But when you +distribute the same sections as part of a whole which is a work based +on the Program, the distribution of the whole must be on the terms of +this License, whose permissions for other licensees extend to the +entire whole, and thus to each and every part regardless of who wrote it. + +Thus, it is not the intent of this section to claim rights or contest +your rights to work written entirely by you; rather, the intent is to +exercise the right to control the distribution of derivative or +collective works based on the Program. + +In addition, mere aggregation of another work not based on the Program +with the Program (or with a work based on the Program) on a volume of +a storage or distribution medium does not bring the other work under +the scope of this License. + + 3. You may copy and distribute the Program (or a work based on it, +under Section 2) in object code or executable form under the terms of +Sections 1 and 2 above provided that you also do one of the following: + + a) Accompany it with the complete corresponding machine-readable + source code, which must be distributed under the terms of Sections + 1 and 2 above on a medium customarily used for software interchange; or, + + b) Accompany it with a written offer, valid for at least three + years, to give any third party, for a charge no more than your + cost of physically performing source distribution, a complete + machine-readable copy of the corresponding source code, to be + distributed under the terms of Sections 1 and 2 above on a medium + customarily used for software interchange; or, + + c) Accompany it with the information you received as to the offer + to distribute corresponding source code. (This alternative is + allowed only for noncommercial distribution and only if you + received the program in object code or executable form with such + an offer, in accord with Subsection b above.) + +The source code for a work means the preferred form of the work for +making modifications to it. For an executable work, complete source +code means all the source code for all modules it contains, plus any +associated interface definition files, plus the scripts used to +control compilation and installation of the executable. However, as a +special exception, the source code distributed need not include +anything that is normally distributed (in either source or binary +form) with the major components (compiler, kernel, and so on) of the +operating system on which the executable runs, unless that component +itself accompanies the executable. + +If distribution of executable or object code is made by offering +access to copy from a designated place, then offering equivalent +access to copy the source code from the same place counts as +distribution of the source code, even though third parties are not +compelled to copy the source along with the object code. + + 4. You may not copy, modify, sublicense, or distribute the Program +except as expressly provided under this License. Any attempt +otherwise to copy, modify, sublicense or distribute the Program is +void, and will automatically terminate your rights under this License. +However, parties who have received copies, or rights, from you under +this License will not have their licenses terminated so long as such +parties remain in full compliance. + + 5. You are not required to accept this License, since you have not +signed it. However, nothing else grants you permission to modify or +distribute the Program or its derivative works. These actions are +prohibited by law if you do not accept this License. Therefore, by +modifying or distributing the Program (or any work based on the +Program), you indicate your acceptance of this License to do so, and +all its terms and conditions for copying, distributing or modifying +the Program or works based on it. + + 6. Each time you redistribute the Program (or any work based on the +Program), the recipient automatically receives a license from the +original licensor to copy, distribute or modify the Program subject to +these terms and conditions. You may not impose any further +restrictions on the recipients' exercise of the rights granted herein. +You are not responsible for enforcing compliance by third parties to +this License. + + 7. If, as a consequence of a court judgment or allegation of patent +infringement or for any other reason (not limited to patent issues), +conditions are imposed on you (whether by court order, agreement or +otherwise) that contradict the conditions of this License, they do not +excuse you from the conditions of this License. If you cannot +distribute so as to satisfy simultaneously your obligations under this +License and any other pertinent obligations, then as a consequence you +may not distribute the Program at all. For example, if a patent +license would not permit royalty-free redistribution of the Program by +all those who receive copies directly or indirectly through you, then +the only way you could satisfy both it and this License would be to +refrain entirely from distribution of the Program. + +If any portion of this section is held invalid or unenforceable under +any particular circumstance, the balance of the section is intended to +apply and the section as a whole is intended to apply in other +circumstances. + +It is not the purpose of this section to induce you to infringe any +patents or other property right claims or to contest validity of any +such claims; this section has the sole purpose of protecting the +integrity of the free software distribution system, which is +implemented by public license practices. Many people have made +generous contributions to the wide range of software distributed +through that system in reliance on consistent application of that +system; it is up to the author/donor to decide if he or she is willing +to distribute software through any other system and a licensee cannot +impose that choice. + +This section is intended to make thoroughly clear what is believed to +be a consequence of the rest of this License. + + 8. If the distribution and/or use of the Program is restricted in +certain countries either by patents or by copyrighted interfaces, the +original copyright holder who places the Program under this License +may add an explicit geographical distribution limitation excluding +those countries, so that distribution is permitted only in or among +countries not thus excluded. In such case, this License incorporates +the limitation as if written in the body of this License. + + 9. The Free Software Foundation may publish revised and/or new versions +of the General Public License from time to time. Such new versions will +be similar in spirit to the present version, but may differ in detail to +address new problems or concerns. + +Each version is given a distinguishing version number. If the Program +specifies a version number of this License which applies to it and "any +later version", you have the option of following the terms and conditions +either of that version or of any later version published by the Free +Software Foundation. If the Program does not specify a version number of +this License, you may choose any version ever published by the Free Software +Foundation. + + 10. If you wish to incorporate parts of the Program into other free +programs whose distribution conditions are different, write to the author +to ask for permission. For software which is copyrighted by the Free +Software Foundation, write to the Free Software Foundation; we sometimes +make exceptions for this. Our decision will be guided by the two goals +of preserving the free status of all derivatives of our free software and +of promoting the sharing and reuse of software generally. + + NO WARRANTY + + 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY +FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN +OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES +PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED +OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS +TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE +PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, +REPAIR OR CORRECTION. + + 12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING +WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR +REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, +INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING +OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED +TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY +YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER +PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE +POSSIBILITY OF SUCH DAMAGES. + + END OF TERMS AND CONDITIONS + + How to Apply These Terms to Your New Programs + + If you develop a new program, and you want it to be of the greatest +possible use to the public, the best way to achieve this is to make it +free software which everyone can redistribute and change under these terms. + + To do so, attach the following notices to the program. It is safest +to attach them to the start of each source file to most effectively +convey the exclusion of warranty; and each file should have at least +the "copyright" line and a pointer to where the full notice is found. + + + Copyright (C) + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License along + with this program; if not, write to the Free Software Foundation, Inc., + 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + +Also add information on how to contact you by electronic and paper mail. + +If the program is interactive, make it output a short notice like this +when it starts in an interactive mode: + + Gnomovision version 69, Copyright (C) year name of author + Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'. + This is free software, and you are welcome to redistribute it + under certain conditions; type `show c' for details. + +The hypothetical commands `show w' and `show c' should show the appropriate +parts of the General Public License. Of course, the commands you use may +be called something other than `show w' and `show c'; they could even be +mouse-clicks or menu items--whatever suits your program. + +You should also get your employer (if you work as a programmer) or your +school, if any, to sign a "copyright disclaimer" for the program, if +necessary. Here is a sample; alter the names: + + Yoyodyne, Inc., hereby disclaims all copyright interest in the program + `Gnomovision' (which makes passes at compilers) written by James Hacker. + + , 1 April 1989 + Ty Coon, President of Vice + +This General Public License does not permit incorporating your program into +proprietary programs. If your program is a subroutine library, you may +consider it more useful to permit linking proprietary applications with the +library. If this is what you want to do, use the GNU Lesser General +Public License instead of this License. diff --git a/daemon/ns3/Makefile.am b/daemon/ns3/Makefile.am new file mode 100755 index 00000000..fdf56cba --- /dev/null +++ b/daemon/ns3/Makefile.am @@ -0,0 +1,40 @@ +# CORE +# (c)2012 the Boeing Company. +# See the LICENSE file included in this directory. +# +# author: Jeff Ahrenholz +# +# Makefile for building corens3 components. +# + +# Python package build +noinst_SCRIPTS = build +build: + $(PYTHON) setup.py build + +# Python package install +install-exec-hook: + CORE_CONF_DIR=${DESTDIR}/${CORE_CONF_DIR} $(PYTHON) setup.py install --prefix=${DESTDIR}/${prefix} --install-purelib=${DESTDIR}/${pythondir} --install-platlib=${DESTDIR}/${pyexecdir} --no-compile + +# Python package uninstall +uninstall-hook: + rm -f ${pythondir}/corens3_python-${COREDPY_VERSION}-py${PYTHON_VERSION}.egg-info + rm -rf ${pythondir}/corens3 + +# Python package cleanup +clean-local: + -rm -rf build + +# Python RPM package +rpm: + $(PYTHON) setup.py bdist_rpm + +# because we include entire directories with EXTRA_DIST, we need to clean up +# the source control files +dist-hook: + rm -rf `find $(distdir)/ -name .svn` `find $(distdir)/ -name '*.pyc'` + +DISTCLEANFILES = Makefile.in *.pyc corens3/*.pyc MANIFEST + +# files to include with distribution tarball +EXTRA_DIST = LICENSE setup.py corens3 examples diff --git a/daemon/ns3/corens3/__init__.py b/daemon/ns3/corens3/__init__.py new file mode 100644 index 00000000..dd1c1fd0 --- /dev/null +++ b/daemon/ns3/corens3/__init__.py @@ -0,0 +1,22 @@ +# Copyright (c)2011-2012 the Boeing Company. +# See the LICENSE file included in this directory. + +"""corens3 + +Python package containing CORE components for use +with the ns-3 simulator. + +See http://cs.itd.nrl.navy.mil/work/core/ and +http://code.google.com/p/coreemu/ for more information on CORE. + +Pieces can be imported individually, for example + + import corens3 + +or everything listed in __all__ can be imported using + + from corens3 import * +""" + +__all__ = [] + diff --git a/daemon/ns3/corens3/constants.py.in b/daemon/ns3/corens3/constants.py.in new file mode 100644 index 00000000..05784d6c --- /dev/null +++ b/daemon/ns3/corens3/constants.py.in @@ -0,0 +1,18 @@ +# Constants created by autoconf ./configure script +COREDPY_VERSION = "@COREDPY_VERSION@" +CORE_STATE_DIR = "@CORE_STATE_DIR@" +CORE_CONF_DIR = "@CORE_CONF_DIR@" +CORE_DATA_DIR = "@CORE_DATA_DIR@" +CORE_LIB_DIR = "@CORE_LIB_DIR@" +CORE_SBIN_DIR = "@SBINDIR@" + +BRCTL_BIN = "@brctl_path@/brctl" +IP_BIN = "@ip_path@/ip" +TC_BIN = "@tc_path@/tc" +EBTABLES_BIN = "@ebtables_path@/ebtables" +IFCONFIG_BIN = "@ifconfig_path@/ifconfig" +NGCTL_BIN = "@ngctl_path@/ngctl" +VIMAGE_BIN = "@vimage_path@/vimage" +QUAGGA_STATE_DIR = "@CORE_STATE_DIR@/run/quagga" +MOUNT_BIN = "@mount_path@/mount" +UMOUNT_BIN = "@umount_path@/umount" diff --git a/daemon/ns3/corens3/obj.py b/daemon/ns3/corens3/obj.py new file mode 100644 index 00000000..8bde3668 --- /dev/null +++ b/daemon/ns3/corens3/obj.py @@ -0,0 +1,503 @@ +# +# CORE +# Copyright (c)2011-2013 the Boeing Company. +# See the LICENSE file included in this directory. +# +# author: Jeff Ahrenholz +# +''' +ns3.py: defines classes for running emulations with ns-3 simulated networks. +''' + +import sys, os, threading, time + +from core.netns.nodes import CoreNode +from core.coreobj import PyCoreNet +from core.session import Session +from core.misc import ipaddr +from core.constants import * +from core.misc.utils import maketuple, check_call +from core.api import coreapi +from core.mobility import WayPointMobility + +try: + import ns.core +except Exception, e: + print "Could not locate the ns-3 Python bindings!" + print "Try running again from within the ns-3 './waf shell'\n" + raise Exception, e +import ns.lte +import ns.mobility +import ns.network +import ns.internet +import ns.tap_bridge +import ns.wifi +import ns.wimax + + +ns.core.GlobalValue.Bind("SimulatorImplementationType", + ns.core.StringValue("ns3::RealtimeSimulatorImpl")) +ns.core.GlobalValue.Bind("ChecksumEnabled", ns.core.BooleanValue("true")) + +class CoreNs3Node(CoreNode, ns.network.Node): + ''' The CoreNs3Node is both a CoreNode backed by a network namespace and + an ns-3 Node simulator object. When linked to simulated networks, the TunTap + device will be used. + ''' + def __init__(self, *args, **kwds): + ns.network.Node.__init__(self) + objid = self.GetId() + 1 # ns-3 ID starts at 0, CORE uses 1 + if 'objid' not in kwds: + kwds['objid'] = objid + CoreNode.__init__(self, *args, **kwds) + + def newnetif(self, net = None, addrlist = [], hwaddr = None, + ifindex = None, ifname = None): + ''' Add a network interface. If we are attaching to a CoreNs3Net, this + will be a TunTap. Otherwise dispatch to CoreNode.newnetif(). + ''' + if not isinstance(net, CoreNs3Net): + return CoreNode.newnetif(self, net, addrlist, hwaddr, ifindex, + ifname) + ifindex = self.newtuntap(ifindex = ifindex, ifname = ifname, net = net) + self.attachnet(ifindex, net) + netif = self.netif(ifindex) + netif.sethwaddr(hwaddr) + for addr in maketuple(addrlist): + netif.addaddr(addr) + + addrstr = netif.addrlist[0] + (addr, mask) = addrstr.split('/') + tap = net._tapdevs[netif] + tap.SetAttribute("IpAddress", + ns.network.Ipv4AddressValue(ns.network.Ipv4Address(addr))) + tap.SetAttribute("Netmask", + ns.network.Ipv4MaskValue(ns.network.Ipv4Mask("/" + mask))) + ns.core.Simulator.Schedule(ns.core.Time('0'), netif.install) + return ifindex + + def getns3position(self): + ''' Return the ns-3 (x, y, z) position of a node. + ''' + try: + mm = self.GetObject(ns.mobility.MobilityModel.GetTypeId()) + pos = mm.GetPosition() + return (pos.x, pos.y, pos.z) + except AttributeError: + self.warn("ns-3 mobility model not found") + return (0,0,0) + + def setns3position(self, x, y, z): + ''' Set the ns-3 (x, y, z) position of a node. + ''' + try: + mm = self.GetObject(ns.mobility.MobilityModel.GetTypeId()) + if z is None: + z = 0.0 + pos = mm.SetPosition(ns.core.Vector(x, y, z)) + except AttributeError: + self.warn("ns-3 mobility model not found, not setting position") + +class CoreNs3Net(PyCoreNet): + ''' The CoreNs3Net is a helper PyCoreNet object. Networks are represented + entirely in simulation with the TunTap device bridging the emulated and + simulated worlds. + ''' + apitype = coreapi.CORE_NODE_WLAN + linktype = coreapi.CORE_LINK_WIRELESS + type = "wlan" # icon used + + def __init__(self, session, objid = None, name = None, verbose = False, + start = True, policy = None): + PyCoreNet.__init__(self, session, objid, name) + self.tapbridge = ns.tap_bridge.TapBridgeHelper() + self._ns3devs = {} + self._tapdevs = {} + + def attach(self, netif): + ''' Invoked from netif.attach(). Create a TAP device using the TapBridge + object. Call getns3dev() to get model-specific device. + ''' + self._netif[netif] = netif + self._linked[netif] = {} + ns3dev = self.getns3dev(netif.node) + tap = self.tapbridge.Install(netif.node, ns3dev) + tap.SetMode(ns.tap_bridge.TapBridge.CONFIGURE_LOCAL) + tap.SetAttribute("DeviceName", ns.core.StringValue(netif.localname)) + self._ns3devs[netif] = ns3dev + self._tapdevs[netif] = tap + + def getns3dev(self, node): + ''' Implement depending on network helper. Install this network onto + the given node and return the device. Register the ns3 device into + self._ns3devs + ''' + raise NotImplementedError + + def findns3dev(self, node): + ''' Given a node, return the interface and ns3 device associated with + this network. + ''' + for netif in node.netifs(): + if netif in self._ns3devs: + return netif, self._ns3devs[netif] + return None, None + + def shutdown(self): + ''' Session.shutdown() will invoke this. + ''' + pass + + def usecorepositions(self): + ''' Set position callbacks for interfaces on this net so the CORE GUI + can update the ns-3 node position when moved with the mouse. + ''' + for netif in self.netifs(): + netif.poshook = self.setns3position + + def setns3position(self, netif, x, y, z): + #print "setns3position: %s (%s, %s, %s)" % (netif.node.name, x, y, z) + netif.node.setns3position(x, y, z) + + +class Ns3LteNet(CoreNs3Net): + def __init__(self, *args, **kwds): + ''' Uses a LteHelper to create an ns-3 based LTE network. + ''' + CoreNs3Net.__init__(self, *args, **kwds) + self.lte = ns.lte.LteHelper() + # enhanced NodeB node list + self.enbnodes = [] + self.dlsubchannels = None + self.ulsubchannels = None + + def setsubchannels(self, downlink, uplink): + ''' Set the downlink/uplink subchannels, which are a list of ints. + These should be set prior to using CoreNs3Node.newnetif(). + ''' + self.dlsubchannels = downlink + self.ulsubchannels = uplink + + def setnodeb(self, node): + ''' Mark the given node as a nodeb (base transceiver station) + ''' + self.enbnodes.append(node) + + def linknodeb(self, node, nodeb, mob, mobb): + ''' Register user equipment with a nodeb. + Optionally install mobility model while we have the ns-3 devs handy. + ''' + (tmp, nodebdev) = self.findns3dev(nodeb) + (tmp, dev) = self.findns3dev(node) + if nodebdev is None or dev is None: + raise KeyError, "ns-3 device for node not found" + self.lte.RegisterUeToTheEnb(dev, nodebdev) + if mob: + self.lte.AddMobility(dev.GetPhy(), mob) + if mobb: + self.lte.AddDownlinkChannelRealization(mobb, mob, dev.GetPhy()) + + def getns3dev(self, node): + ''' Get the ns3 NetDevice using the LteHelper. + ''' + if node in self.enbnodes: + devtype = ns.lte.LteHelper.DEVICE_TYPE_ENODEB + else: + devtype = ns.lte.LteHelper.DEVICE_TYPE_USER_EQUIPMENT + nodes = ns.network.NodeContainer(node) + devs = self.lte.Install(nodes, devtype) + devs.Get(0).GetPhy().SetDownlinkSubChannels(self.dlsubchannels) + devs.Get(0).GetPhy().SetUplinkSubChannels(self.ulsubchannels) + return devs.Get(0) + + def attach(self, netif): + ''' Invoked from netif.attach(). Create a TAP device using the TapBridge + object. Call getns3dev() to get model-specific device. + ''' + self._netif[netif] = netif + self._linked[netif] = {} + ns3dev = self.getns3dev(netif.node) + self.tapbridge.SetAttribute("Mode", ns.core.StringValue("UseLocal")) + #self.tapbridge.SetAttribute("Mode", + # ns.core.IntegerValue(ns.tap_bridge.TapBridge.USE_LOCAL)) + tap = self.tapbridge.Install(netif.node, ns3dev) + #tap.SetMode(ns.tap_bridge.TapBridge.USE_LOCAL) + print "using TAP device %s for %s/%s" % \ + (netif.localname, netif.node.name, netif.name) + check_call(['tunctl', '-t', netif.localname, '-n']) + #check_call([IP_BIN, 'link', 'set', 'dev', netif.localname, \ + # 'address', '%s' % netif.hwaddr]) + check_call([IP_BIN, 'link', 'set', netif.localname, 'up']) + tap.SetAttribute("DeviceName", ns.core.StringValue(netif.localname)) + self._ns3devs[netif] = ns3dev + self._tapdevs[netif] = tap + +class Ns3WifiNet(CoreNs3Net): + def __init__(self, *args, **kwds): + ''' Uses a WifiHelper to create an ns-3 based Wifi network. + ''' + rate = kwds.pop('rate', 'OfdmRate54Mbps') + CoreNs3Net.__init__(self, *args, **kwds) + self.wifi = ns.wifi.WifiHelper().Default() + self.wifi.SetStandard(ns.wifi.WIFI_PHY_STANDARD_80211a) + self.wifi.SetRemoteStationManager("ns3::ConstantRateWifiManager", + "DataMode", + ns.core.StringValue(rate), + "NonUnicastMode", + ns.core.StringValue(rate)) + self.mac = ns.wifi.NqosWifiMacHelper.Default() + self.mac.SetType("ns3::AdhocWifiMac") + + channel = ns.wifi.YansWifiChannelHelper.Default() + self.phy = ns.wifi.YansWifiPhyHelper.Default() + self.phy.SetChannel(channel.Create()) + + def getns3dev(self, node): + ''' Get the ns3 NetDevice using the WifiHelper. + ''' + devs = self.wifi.Install(self.phy, self.mac, node) + return devs.Get(0) + + +class Ns3WimaxNet(CoreNs3Net): + def __init__(self, *args, **kwds): + CoreNs3Net.__init__(self, *args, **kwds) + self.wimax = ns.wimax.WimaxHelper() + self.scheduler = ns.wimax.WimaxHelper.SCHED_TYPE_SIMPLE + self.phy = ns.wimax.WimaxHelper.SIMPLE_PHY_TYPE_OFDM + # base station node list + self.bsnodes = [] + + def setbasestation(self, node): + self.bsnodes.append(node) + + def getns3dev(self, node): + if node in self.bsnodes: + devtype = ns.wimax.WimaxHelper.DEVICE_TYPE_BASE_STATION + else: + devtype = ns.wimax.WimaxHelper.DEVICE_TYPE_SUBSCRIBER_STATION + nodes = ns.network.NodeContainer(node) + devs = self.wimax.Install(nodes, devtype, self.phy, self.scheduler) + if node not in self.bsnodes: + devs.Get(0).SetModulationType(ns.wimax.WimaxPhy.MODULATION_TYPE_QAM16_12) + # debug + self.wimax.EnableAscii("wimax-device-%s" % node.name, devs) + return devs.Get(0) + + @staticmethod + def ipv4netifaddr(netif): + for addr in netif.addrlist: + if ':' in addr: + continue # skip ipv6 + ip = ns.network.Ipv4Address(addr.split('/')[0]) + mask = ns.network.Ipv4Mask('/' + addr.split('/')[1]) + return (ip, mask) + return (None, None) + + + def addflow(self, node1, node2, upclass, downclass): + ''' Add a Wimax service flow between two nodes. + ''' + (netif1, ns3dev1) = self.findns3dev(node1) + (netif2, ns3dev2) = self.findns3dev(node2) + if not netif1 or not netif2: + raise ValueError, "interface not found" + (addr1, mask1) = self.ipv4netifaddr(netif1) + (addr2, mask2) = self.ipv4netifaddr(netif2) + clargs1 = (addr1, mask1, addr2, mask2) + downclass + clargs2 = (addr2, mask2, addr1, mask1) + upclass + clrec1 = ns.wimax.IpcsClassifierRecord(*clargs1) + clrec2 = ns.wimax.IpcsClassifierRecord(*clargs2) + ns3dev1.AddServiceFlow( \ + self.wimax.CreateServiceFlow(ns.wimax.ServiceFlow.SF_DIRECTION_DOWN, + ns.wimax.ServiceFlow.SF_TYPE_RTPS, clrec1)) + ns3dev1.AddServiceFlow( \ + self.wimax.CreateServiceFlow(ns.wimax.ServiceFlow.SF_DIRECTION_UP, + ns.wimax.ServiceFlow.SF_TYPE_RTPS, clrec2)) + ns3dev2.AddServiceFlow( \ + self.wimax.CreateServiceFlow(ns.wimax.ServiceFlow.SF_DIRECTION_DOWN, + ns.wimax.ServiceFlow.SF_TYPE_RTPS, clrec2)) + ns3dev2.AddServiceFlow( \ + self.wimax.CreateServiceFlow(ns.wimax.ServiceFlow.SF_DIRECTION_UP, + ns.wimax.ServiceFlow.SF_TYPE_RTPS, clrec1)) + + +class Ns3Session(Session): + ''' A Session that starts an ns-3 simulation thread. + ''' + def __init__(self, persistent = False, duration=600): + self.duration = duration + self.nodes = ns.network.NodeContainer() + self.mobhelper = ns.mobility.MobilityHelper() + Session.__init__(self, persistent = persistent) + + def run(self, vis=False): + ''' Run the ns-3 simulation and return the simulator thread. + ''' + def runthread(): + ns.core.Simulator.Stop(ns.core.Seconds(self.duration)) + print "running ns-3 simulation for %d seconds" % self.duration + if vis: + try: + import visualizer + except ImportError: + print "visualizer is not available" + ns.core.Simulator.Run() + else: + visualizer.start() + else: + ns.core.Simulator.Run() + #self.evq.run() # event queue may have WayPointMobility events + self.setstate(coreapi.CORE_EVENT_RUNTIME_STATE, info=True, + sendevent=True) + t = threading.Thread(target = runthread) + t.daemon = True + t.start() + return t + + def shutdown(self): + # TODO: the following line tends to segfault ns-3 (and therefore + # core-daemon) + ns.core.Simulator.Destroy() + Session.shutdown(self) + + def addnode(self, name): + ''' A convenience helper for Session.addobj(), for adding CoreNs3Nodes + to this session. Keeps a NodeContainer for later use. + ''' + n = self.addobj(cls = CoreNs3Node, name=name) + self.nodes.Add(n) + return n + + def setupconstantmobility(self): + ''' Install a ConstantPositionMobilityModel. + ''' + palloc = ns.mobility.ListPositionAllocator() + for i in xrange(self.nodes.GetN()): + (x, y, z) = ((100.0 * i) + 50, 200.0, 0.0) + palloc.Add(ns.core.Vector(x, y, z)) + node = self.nodes.Get(i) + node.position.set(x, y, z) + self.mobhelper.SetPositionAllocator(palloc) + self.mobhelper.SetMobilityModel("ns3::ConstantPositionMobilityModel") + self.mobhelper.Install(self.nodes) + + def setuprandomwalkmobility(self, bounds, time=10, speed=25.0): + ''' Set up the random walk mobility model within a bounding box. + - bounds is the max (x, y, z) boundary + - time is the number of seconds to maintain the current speed + and direction + - speed is the maximum speed, with node speed randomly chosen + from [0, speed] + ''' + (x, y, z) = map(float, bounds) + self.mobhelper.SetPositionAllocator("ns3::RandomBoxPositionAllocator", + "X", + ns.core.StringValue("ns3::UniformRandomVariable[Min=0|Max=%s]" % x), + "Y", + ns.core.StringValue("ns3::UniformRandomVariable[Min=0|Max=%s]" % y), + "Z", + ns.core.StringValue("ns3::UniformRandomVariable[Min=0|Max=%s]" % z)) + self.mobhelper.SetMobilityModel("ns3::RandomWalk2dMobilityModel", + "Mode", ns.core.StringValue("Time"), + "Time", ns.core.StringValue("%ss" % time), + "Speed", + ns.core.StringValue("ns3::UniformRandomVariable[Min=0|Max=%s]" \ + % speed), + "Bounds", ns.core.StringValue("0|%s|0|%s" % (x, y))) + self.mobhelper.Install(self.nodes) + + def startns3mobility(self, refresh_ms=300): + ''' Start a thread that updates CORE nodes based on their ns-3 + positions. + ''' + self.setstate(coreapi.CORE_EVENT_INSTANTIATION_STATE) + self.mobilitythread = threading.Thread( + target=self.ns3mobilitythread, + args=(refresh_ms,)) + self.mobilitythread.daemon = True + self.mobilitythread.start() + + def ns3mobilitythread(self, refresh_ms): + ''' Thread target that updates CORE nodes every refresh_ms based on + their ns-3 positions. + ''' + valid_states = (coreapi.CORE_EVENT_RUNTIME_STATE, + coreapi.CORE_EVENT_INSTANTIATION_STATE) + while self.getstate() in valid_states: + for i in xrange(self.nodes.GetN()): + node = self.nodes.Get(i) + (x, y, z) = node.getns3position() + if (x, y, z) == node.position.get(): + continue + # from WayPointMobility.setnodeposition(node, x, y, z) + node.position.set(x, y, z) + msg = node.tonodemsg(flags=0) + self.broadcastraw(None, msg) + self.sdt.updatenode(node, flags=0, x=x, y=y, z=z) + time.sleep(0.001 * refresh_ms) + + def setupmobilitytracing(self, net, filename, nodes, verbose=False): + ''' Start a tracing thread using the ASCII output from the ns3 + mobility helper. + ''' + net.mobility = WayPointMobility(session=self, objid=net.objid, + verbose=verbose, values=None) + net.mobility.setendtime() + net.mobility.refresh_ms = 300 + net.mobility.empty_queue_stop = False + of = ns.network.OutputStreamWrapper(filename, filemode=777) + self.mobhelper.EnableAsciiAll(of) + self.mobilitytracethread = threading.Thread(target=self.mobilitytrace, + args=(net, filename, nodes, verbose)) + self.mobilitytracethread.daemon = True + self.mobilitytracethread.start() + + def mobilitytrace(self, net, filename, nodes, verbose): + nodemap = {} + # move nodes to initial positions + for node in nodes: + (x,y,z) = node.getns3position() + net.mobility.setnodeposition(node, x, y, z) + nodemap[node.GetId()] = node + + if verbose: + self.info("mobilitytrace opening '%s'" % filename) + try: + f = open(filename) + f.seek(0,2) + except Exception, e: + self.warn("mobilitytrace error opening '%s': %s" % (filename, e)) + sleep = 0.001 + kickstart = True + while True: + if self.getstate() != coreapi.CORE_EVENT_RUNTIME_STATE: + break + line = f.readline() + if not line: + time.sleep(sleep) + if sleep < 1.0: + sleep += 0.001 + continue + sleep = 0.001 + items = dict(map(lambda x: x.split('='), line.split())) + if verbose: + self.info("trace: %s %s %s" % \ + (items['node'], items['pos'], items['vel'])) + (x, y, z) = map(float, items['pos'].split(':')) + vel = map(float, items['vel'].split(':')) + node = nodemap[int(items['node'])] + net.mobility.addwaypoint(time=0, nodenum=node.objid, + x=x, y=y, z=z, speed=vel) + if kickstart: + kickstart = False + self.evq.add_event(0, net.mobility.start) + self.evq.run() + else: + if net.mobility.state != net.mobility.STATE_RUNNING: + net.mobility.state = net.mobility.STATE_RUNNING + self.evq.add_event(0, net.mobility.runround) + + f.close() + + diff --git a/daemon/ns3/examples/ns3lte.py b/daemon/ns3/examples/ns3lte.py new file mode 100755 index 00000000..fdccd331 --- /dev/null +++ b/daemon/ns3/examples/ns3lte.py @@ -0,0 +1,110 @@ +#!/usr/bin/python + +# Copyright (c)2011-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +ns3lte.py - This script demonstrates using CORE with the ns-3 LTE model. +*** Note that this script is not currently functional, see notes below. *** +- issues connecting TapBridge with LteNetDevice + +''' + +import os, sys, time, optparse, datetime, math +try: + from core import pycore +except ImportError: + # hack for Fedora autoconf that uses the following pythondir: + if "/usr/lib/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.6/site-packages") + if "/usr/lib64/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.6/site-packages") + if "/usr/lib/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.7/site-packages") + if "/usr/lib64/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.7/site-packages") + from core import pycore + +from core.misc import ipaddr +from corens3.obj import Ns3Session, Ns3LteNet +import ns.core +import ns.mobility + +def ltesession(opt): + ''' Run a test LTE session. + ''' + session = Ns3Session(persistent=True, duration=opt.duration) + lte = session.addobj(cls=Ns3LteNet, name="wlan1") + lte.setsubchannels(range(25), range(50, 100)) + if opt.verbose: + ascii = ns.network.AsciiTraceHelper() + stream = ascii.CreateFileStream('/tmp/ns3lte.tr') + lte.lte.EnableAsciiAll(stream) + #ns.core.LogComponentEnable("EnbNetDevice", ns.core.LOG_LEVEL_INFO) + #ns.core.LogComponentEnable("UeNetDevice", ns.core.LOG_LEVEL_INFO) + #lte.lte.EnableLogComponents() + + prefix = ipaddr.IPv4Prefix("10.0.0.0/16") + mobb = None + nodes = [] + for i in xrange(1, opt.numnodes + 1): + node = session.addnode(name = "n%d" % i) + mob = ns.mobility.ConstantPositionMobilityModel() + mob.SetPosition( ns.core.Vector3D(10.0 * i, 0.0, 0.0) ) + if i == 1: + lte.setnodeb(node) # first node is nodeb + mobb = mob + node.newnetif(lte, ["%s/%s" % (prefix.addr(i), prefix.prefixlen)]) + nodes.append(node) + if i == 1: + (tmp, ns3dev) = lte.findns3dev(node) + lte.lte.AddMobility(ns3dev.GetPhy(), mob) + if i > 1: + lte.linknodeb(node, nodes[0], mob, mobb) + + session.thread = session.run(vis=opt.visualize) + return session + +def main(): + ''' Main routine when running from command-line. + ''' + usagestr = "usage: %prog [-h] [options] [args]" + parser = optparse.OptionParser(usage = usagestr) + parser.set_defaults(numnodes = 4, duration = 600, verbose = False, visualize=False) + + parser.add_option("-d", "--duration", dest = "duration", type = int, + help = "number of seconds to run the simulation") + parser.add_option("-n", "--numnodes", dest = "numnodes", type = int, + help = "number of nodes") + parser.add_option("-z", "--visualize", dest = "visualize", + action = "store_true", help = "enable visualizer") + parser.add_option("-v", "--verbose", dest = "verbose", + action = "store_true", help = "be more verbose") + + def usage(msg = None, err = 0): + sys.stdout.write("\n") + if msg: + sys.stdout.write(msg + "\n\n") + parser.print_help() + sys.exit(err) + + (opt, args) = parser.parse_args() + + if opt.numnodes < 2: + usage("invalid numnodes: %s" % opt.numnodes) + + for a in args: + sys.stderr.write("ignoring command line argument: '%s'\n" % a) + + return ltesession(opt) + +def cleanup(): + print "shutting down session" + session.shutdown() + print "joining simulator thread (please kill it)" + session.thread.join() + +if __name__ == "__main__": + session = main() diff --git a/daemon/ns3/examples/ns3wifi.py b/daemon/ns3/examples/ns3wifi.py new file mode 100755 index 00000000..4dbd5069 --- /dev/null +++ b/daemon/ns3/examples/ns3wifi.py @@ -0,0 +1,122 @@ +#!/usr/bin/python -i + +# Copyright (c)2011-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +ns3wifi.py - This script demonstrates using CORE with the ns-3 Wifi model. + +How to run this: + + pushd ~/ns-allinone-3.16/ns-3.16 + sudo ./waf shell + popd + python -i ns3wifi.py + +To run with the CORE GUI: + + pushd ~/ns-allinone-3.16/ns-3.16 + sudo ./waf shell + core-daemon + + # in another terminal + core-daemon -e ./ns3wifi.py + # in a third terminal + core + # now select the running session + +''' + +import os, sys, time, optparse, datetime, math +try: + from core import pycore +except ImportError: + # hack for Fedora autoconf that uses the following pythondir: + if "/usr/lib/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.6/site-packages") + if "/usr/lib64/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.6/site-packages") + if "/usr/lib/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.7/site-packages") + if "/usr/lib64/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.7/site-packages") + from core import pycore + +import ns.core +from core.misc import ipaddr +from corens3.obj import Ns3Session, Ns3WifiNet + +def add_to_server(session): + ''' Add this session to the server's list if this script is executed from + the core-daemon server. + ''' + global server + try: + server.addsession(session) + return True + except NameError: + return False + +def wifisession(opt): + ''' Run a test wifi session. + ''' + session = Ns3Session(persistent=True, duration=opt.duration) + session.name = "ns3wifi" + session.filename = session.name + ".py" + session.node_count = str(opt.numnodes + 1) + add_to_server(session) + + wifi = session.addobj(cls=Ns3WifiNet, name="wlan1") + wifi.setposition(30, 30, 0) + wifi.phy.Set("RxGain", ns.core.DoubleValue(18.0)) + + prefix = ipaddr.IPv4Prefix("10.0.0.0/16") + nodes = [] + for i in xrange(1, opt.numnodes + 1): + node = session.addnode(name = "n%d" % i) + node.newnetif(wifi, ["%s/%s" % (prefix.addr(i), prefix.prefixlen)]) + nodes.append(node) + session.setupconstantmobility() + wifi.usecorepositions() + # PHY tracing + #wifi.phy.EnableAsciiAll("ns3wifi") + session.thread = session.run(vis=False) + return session + +def main(): + ''' Main routine when running from command-line. + ''' + usagestr = "usage: %prog [-h] [options] [args]" + parser = optparse.OptionParser(usage = usagestr) + parser.set_defaults(numnodes = 10, duration = 600, verbose = False) + + parser.add_option("-d", "--duration", dest = "duration", type = int, + help = "number of seconds to run the simulation") + parser.add_option("-n", "--numnodes", dest = "numnodes", type = int, + help = "number of nodes") + parser.add_option("-v", "--verbose", dest = "verbose", + action = "store_true", help = "be more verbose") + + def usage(msg = None, err = 0): + sys.stdout.write("\n") + if msg: + sys.stdout.write(msg + "\n\n") + parser.print_help() + sys.exit(err) + + (opt, args) = parser.parse_args() + + if opt.numnodes < 2: + usage("invalid numnodes: %s" % opt.numnodes) + + for a in args: + sys.stderr.write("ignoring command line argument: '%s'\n" % a) + + return wifisession(opt) + + +if __name__ == "__main__" or __name__ == "__builtin__": + session = main() + print "\nsession =", session diff --git a/daemon/ns3/examples/ns3wifirandomwalk.py b/daemon/ns3/examples/ns3wifirandomwalk.py new file mode 100755 index 00000000..a02eb69a --- /dev/null +++ b/daemon/ns3/examples/ns3wifirandomwalk.py @@ -0,0 +1,131 @@ +#!/usr/bin/python -i + +# Copyright (c)2011-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +ns3wifirandomwalk.py - This script demonstrates using CORE with the ns-3 Wifi +model and random walk mobility. +Patterned after the ns-3 example 'main-random-walk.cc'. + +How to run this: + + pushd ~/ns-allinone-3.16/ns-3.16 + sudo ./waf shell + popd + python -i ns3wifirandomwalk.py + +''' + +import os, sys, time, optparse, datetime, math, threading +try: + from core import pycore +except ImportError: + # hack for Fedora autoconf that uses the following pythondir: + if "/usr/lib/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.6/site-packages") + if "/usr/lib64/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.6/site-packages") + if "/usr/lib/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.7/site-packages") + if "/usr/lib64/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.7/site-packages") + from core import pycore + +import ns.core +import ns.network +from core.api import coreapi +from core.misc import ipaddr +from corens3.obj import Ns3Session, Ns3WifiNet + + +def add_to_server(session): + ''' Add this session to the server's list if this script is executed from + the core-daemon server. + ''' + global server + try: + server.addsession(session) + return True + except NameError: + return False + +def wifisession(opt): + ''' Run a random walk wifi session. + ''' + session = Ns3Session(persistent=True, duration=opt.duration) + session.name = "ns3wifirandomwalk" + session.filename = session.name + ".py" + session.node_count = str(opt.numnodes + 1) + add_to_server(session) + wifi = session.addobj(cls=Ns3WifiNet, name="wlan1", rate="OfdmRate12Mbps") + wifi.setposition(30, 30, 0) + # for improved connectivity + wifi.phy.Set("RxGain", ns.core.DoubleValue(18.0)) + + prefix = ipaddr.IPv4Prefix("10.0.0.0/16") + services_str = "zebra|OSPFv3MDR|vtysh|IPForward" + nodes = [] + for i in xrange(1, opt.numnodes + 1): + node = session.addnode(name = "n%d" % i) + node.newnetif(wifi, ["%s/%s" % (prefix.addr(i), prefix.prefixlen)]) + nodes.append(node) + session.services.addservicestonode(node, "router", services_str, + opt.verbose) + session.services.bootnodeservices(node) + session.setuprandomwalkmobility(bounds=(1000.0, 750.0, 0)) + + # PHY tracing + #wifi.phy.EnableAsciiAll("ns3wifirandomwalk") + + # mobility tracing + #session.setupmobilitytracing(wifi, "ns3wifirandomwalk.mob.tr", + # nodes, verbose=True) + session.startns3mobility(refresh_ms=150) + + # start simulation + # session.instantiate() ? + session.thread = session.run(vis=opt.viz) + return session + +def main(): + ''' Main routine when running from command-line. + ''' + usagestr = "usage: %prog [-h] [options] [args]" + parser = optparse.OptionParser(usage = usagestr) + parser.set_defaults(numnodes = 5, duration = 600, verbose = False, viz = False) + opt = { 'numnodes' : 5, 'duration': 600, 'verbose' :False, 'viz': False } + + + parser.add_option("-d", "--duration", dest = "duration", type = int, + help = "number of seconds to run the simulation") + parser.add_option("-n", "--numnodes", dest = "numnodes", type = int, + help = "number of nodes") + parser.add_option("-v", "--verbose", dest = "verbose", + action = "store_true", help = "be more verbose") + parser.add_option("-V", "--visualize", dest = "viz", + action = "store_true", help = "enable PyViz ns-3 visualizer") + + def usage(msg = None, err = 0): + sys.stdout.write("\n") + if msg: + sys.stdout.write(msg + "\n\n") + parser.print_help() + sys.exit(err) + + (opt, args) = parser.parse_args() + + if opt.numnodes < 2: + usage("invalid numnodes: %s" % opt.numnodes) + + for a in args: + sys.stderr.write("ignoring command line argument: '%s'\n" % a) + + return wifisession(opt) + + +if __name__ == "__main__" or __name__ == "__builtin__": + session = main() + print "\nsession =", session diff --git a/daemon/ns3/examples/ns3wimax.py b/daemon/ns3/examples/ns3wimax.py new file mode 100755 index 00000000..a6d69c49 --- /dev/null +++ b/daemon/ns3/examples/ns3wimax.py @@ -0,0 +1,95 @@ +#!/usr/bin/python -i + +# Copyright (c)2011-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +''' +ns3wimax.py - This script demonstrates using CORE with the ns-3 Wimax model. +*** Note that this script is not currently functional, see notes below. *** +Current issues: +- large amount of base station chatter; huge trace files, 70% CPU usage +- PCAP files unreadable +- base station causes segfault if it sends packet; due to missing service flows + (but AddFlow() is not available for bs devices) +- no packets are sent between nodes - no connection? +''' + +import os, sys, time, optparse, datetime, math +try: + from core import pycore +except ImportError: + # hack for Fedora autoconf that uses the following pythondir: + if "/usr/lib/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.6/site-packages") + if "/usr/lib64/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.6/site-packages") + if "/usr/lib/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.7/site-packages") + if "/usr/lib64/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.7/site-packages") + from core import pycore + +from core.misc import ipaddr +from corens3.obj import Ns3Session, Ns3WimaxNet + +def wimaxsession(opt): + ''' Run a test wimax session. + ''' + session = Ns3Session(persistent=True, duration=opt.duration) + wimax = session.addobj(cls=Ns3WimaxNet, name="wlan1") + #wimax.wimax.EnableLogComponents() + + prefix = ipaddr.IPv4Prefix("10.0.0.0/16") + # create one classifier for ICMP (protocol 1) traffic + # src port low/high, dst port low/high, protocol, priority + #classifier = (0, 65000, 0, 65000, 1, 1) + classifier = (0, 65000, 0, 65000, 17, 1) + nodes = [] + for i in xrange(1, opt.numnodes + 1): + node = session.addnode(name = "n%d" % i) + if i == 1: + wimax.setbasestation(node) + node.newnetif(wimax, ["%s/%s" % (prefix.addr(i), prefix.prefixlen)]) + if i > 2: + wimax.addflow(nodes[-1], node, classifier, classifier) + nodes.append(node) + session.setupconstantmobility() + session.thread = session.run(vis=False) + return session + +def main(): + ''' Main routine when running from command-line. + ''' + usagestr = "usage: %prog [-h] [options] [args]" + parser = optparse.OptionParser(usage = usagestr) + parser.set_defaults(numnodes = 3, duration = 600, verbose = False) + + parser.add_option("-d", "--duration", dest = "duration", type = int, + help = "number of seconds to run the simulation") + parser.add_option("-n", "--numnodes", dest = "numnodes", type = int, + help = "number of nodes") + parser.add_option("-v", "--verbose", dest = "verbose", + action = "store_true", help = "be more verbose") + + def usage(msg = None, err = 0): + sys.stdout.write("\n") + if msg: + sys.stdout.write(msg + "\n\n") + parser.print_help() + sys.exit(err) + + (opt, args) = parser.parse_args() + + if opt.numnodes < 2: + usage("invalid numnodes: %s" % opt.numnodes) + + for a in args: + sys.stderr.write("ignoring command line argument: '%s'\n" % a) + + return wimaxsession(opt) + + +if __name__ == "__main__": + session = main() diff --git a/daemon/ns3/setup.py b/daemon/ns3/setup.py new file mode 100644 index 00000000..44582d13 --- /dev/null +++ b/daemon/ns3/setup.py @@ -0,0 +1,28 @@ +# Copyright (c)2012 the Boeing Company. +# See the LICENSE file included in this directory. + +import os, glob +from distutils.core import setup +from corens3.constants import COREDPY_VERSION + +# optionally pass CORE_CONF_DIR using environment variable +confdir = os.environ.get('CORE_CONF_DIR') +if confdir is None: + confdir="/etc/core" + +setup(name = "corens3-python", + version = COREDPY_VERSION, + packages = [ + "corens3", + ], + data_files = [ + ("share/core/examples/corens3", + glob.glob("examples/*.py")), + ], + description = "Python ns-3 components of CORE", + url = "http://cs.itd.nrl.navy.mil/work/core/", + author = "Boeing Research & Technology", + author_email = "core-dev@pf.itd.nrl.navy.mil", + license = "GPLv2", + long_description="Python scripts and modules for building virtual " \ + "simulated networks.") diff --git a/daemon/sbin/core-cleanup b/daemon/sbin/core-cleanup new file mode 100755 index 00000000..e95ee667 --- /dev/null +++ b/daemon/sbin/core-cleanup @@ -0,0 +1,58 @@ +#!/bin/sh + +if [ "z$1" = "z-h" -o "z$1" = "z--help" ]; then + echo "usage: $0 [-d [-l]]" + echo -n " Clean up all CORE namespaces processes, bridges, interfaces, " + echo "and session\n directories. Options:" + echo " -h show this help message and exit" + echo " -d also kill the Python daemon" + echo " -l remove the core-daemon.log file" + exit 0 +fi + +if [ `id -u` != 0 ]; then + echo "Permission denied. Re-run this script as root." + exit 1 +fi + +PATH="/sbin:/bin:/usr/sbin:/usr/bin" +export PATH + +if [ "z$1" = "z-d" ]; then + pypids=`pidof python python2` + for p in $pypids; do + grep -q core-daemon /proc/$p/cmdline + if [ $? = 0 ]; then + echo "cleaning up core-daemon process: $p" + kill -9 $p + fi + done +fi + +if [ "z$2" = "z-l" ]; then + rm -f /var/log/core-daemon.log +fi + +vnodedpids=`pidof vnoded` +if [ "z$vnodedpids" != "z" ]; then + echo "cleaning up old vnoded processes: $vnodedpids" + killall -v -KILL vnoded + # pause for 1 second for interfaces to disappear + sleep 1 +fi +killall -q emane +killall -q emanetransportd +killall -q emaneeventservice + +ifconfig -a | awk ' + /^n[0-9]+/ {print "removing interface " $1; system("ip link del " $1);} + /tmp\./ {print "removing interface " $1; system("ip link del " $1);} + /gt\./ {print "removing interface " $1; system("ip link del " $1);} + /b\./ {print "removing bridge " $1; system("ip link set " $1 " down; brctl delbr " $1);} +' + +ebtables -L FORWARD | awk ' + /^-.*b\./ {print "removing ebtables " $0; system("ebtables -D FORWARD " $0); print "removing ebtables chain " $4; system("ebtables -X " $4);} +' + +rm -rf /tmp/pycore* diff --git a/daemon/sbin/core-daemon b/daemon/sbin/core-daemon new file mode 100755 index 00000000..e53fe3fd --- /dev/null +++ b/daemon/sbin/core-daemon @@ -0,0 +1,1636 @@ +#!/usr/bin/env python +# +# CORE +# Copyright (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: Tom Goff +# Jeff Ahrenholz +# +''' +core-daemon: the CORE daemon is a server process that receives CORE API +messages and instantiates emulated nodes and networks within the kernel. Various +message handlers are defined and some support for sending messages. +''' + +import SocketServer, fcntl, struct, sys, threading, time, traceback +import os, optparse, ConfigParser, gc, shlex, socket, shutil +import atexit +import signal + +try: + from core import pycore +except ImportError: + # hack for Fedora autoconf that uses the following pythondir: + if "/usr/lib/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.6/site-packages") + if "/usr/lib64/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.6/site-packages") + if "/usr/lib/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.7/site-packages") + if "/usr/lib64/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.7/site-packages") + from core import pycore +from core.constants import * +from core.api import coreapi +from core.coreobj import PyCoreNet +from core.misc.utils import hexdump, daemonize +from core.misc.xmlutils import opensessionxml, savesessionxml + +DEFAULT_MAXFD = 1024 + +# garbage collection debugging +# gc.set_debug(gc.DEBUG_STATS | gc.DEBUG_LEAK) + + +coreapi.add_node_class("CORE_NODE_DEF", + coreapi.CORE_NODE_DEF, pycore.nodes.CoreNode) +coreapi.add_node_class("CORE_NODE_PHYS", + coreapi.CORE_NODE_PHYS, pycore.pnodes.PhysicalNode) +try: + coreapi.add_node_class("CORE_NODE_XEN", + coreapi.CORE_NODE_XEN, pycore.xen.XenNode) +except Exception: + #print "XenNode class unavailable." + pass +coreapi.add_node_class("CORE_NODE_TBD", + coreapi.CORE_NODE_TBD, None) +coreapi.add_node_class("CORE_NODE_SWITCH", + coreapi.CORE_NODE_SWITCH, pycore.nodes.SwitchNode) +coreapi.add_node_class("CORE_NODE_HUB", + coreapi.CORE_NODE_HUB, pycore.nodes.HubNode) +coreapi.add_node_class("CORE_NODE_WLAN", + coreapi.CORE_NODE_WLAN, pycore.nodes.WlanNode) +coreapi.add_node_class("CORE_NODE_RJ45", + coreapi.CORE_NODE_RJ45, pycore.nodes.RJ45Node) +coreapi.add_node_class("CORE_NODE_TUNNEL", + coreapi.CORE_NODE_TUNNEL, pycore.nodes.TunnelNode) +coreapi.add_node_class("CORE_NODE_EMANE", + coreapi.CORE_NODE_EMANE, pycore.nodes.EmaneNode) + +def closeonexec(fd): + fdflags = fcntl.fcntl(fd, fcntl.F_GETFD) + fcntl.fcntl(fd, fcntl.F_SETFD, fdflags | fcntl.FD_CLOEXEC) + +class CoreRequestHandler(SocketServer.BaseRequestHandler): + ''' The SocketServer class uses the RequestHandler class for servicing + requests, mainly through the handle() method. The CoreRequestHandler + has the following basic flow: + 1. Client connects and request comes in via handle(). + 2. handle() calls recvmsg() in a loop. + 3. recvmsg() does a recv() call on the socket performs basic + checks that this we received a CoreMessage, returning it. + 4. The message data is queued using queuemsg(). + 5. The handlerthread() thread pops messages from the queue and uses + handlemsg() to invoke the appropriate handler for that message type. + + ''' + + maxmsgqueuedtimes = 8 + + def __init__(self, request, client_address, server): + self.done = False + self.msghandler = { + coreapi.CORE_API_NODE_MSG: self.handlenodemsg, + coreapi.CORE_API_LINK_MSG: self.handlelinkmsg, + coreapi.CORE_API_EXEC_MSG: self.handleexecmsg, + coreapi.CORE_API_REG_MSG: self.handleregmsg, + coreapi.CORE_API_CONF_MSG: self.handleconfmsg, + coreapi.CORE_API_FILE_MSG: self.handlefilemsg, + coreapi.CORE_API_IFACE_MSG: self.handleifacemsg, + coreapi.CORE_API_EVENT_MSG: self.handleeventmsg, + coreapi.CORE_API_SESS_MSG: self.handlesessionmsg, + } + self.msgq = [] + self.msgcv = threading.Condition() + self.nodestatusreq = {} + numthreads = int(server.cfg['numthreads']) + if numthreads < 1: + raise ValueError, \ + "invalid number of threads: %s" % numthreads + self.handlerthreads = [] + while numthreads: + t = threading.Thread(target = self.handlerthread) + self.handlerthreads.append(t) + t.start() + numthreads -= 1 + self.master = False + self.verbose = bool(server.cfg['verbose'].lower() == "true") + self.debug = bool(server.cfg['debug'].lower() == "true") + self.session = None + #self.numwlan = 0 + closeonexec(request.fileno()) + SocketServer.BaseRequestHandler.__init__(self, request, + client_address, server) + + def setup(self): + ''' Client has connected, set up a new connection. + ''' + self.info("new TCP connection: %s:%s" % self.client_address) + #self.register() + + + def finish(self): + ''' Client has disconnected, end this request handler and disconnect + from the session. Shutdown sessions that are not running. + ''' + if self.verbose: + self.info("client disconnected: notifying threads") + max_attempts = 5 + timeout = 0.0625 # wait for 1.9375s max + while len(self.msgq) > 0 and max_attempts > 0: + if self.verbose: + self.info("%d messages remain in queue (%d)" % \ + (len(self.msgq), max_attempts)) + max_attempts -= 1 + self.msgcv.acquire() + self.msgcv.notifyAll() # drain msgq before dying + self.msgcv.release() + time.sleep(timeout) # allow time for msg processing + timeout *= 2 # backoff timer + self.msgcv.acquire() + self.done = True + self.msgcv.notifyAll() + self.msgcv.release() + for t in self.handlerthreads: + if self.verbose: + self.info("waiting for thread: %s" % t.getName()) + timeout = 2.0 # seconds + t.join(timeout) + if t.isAlive(): + self.warn("joining %s failed: still alive after %s sec" % + (t.getName(), timeout)) + self.info("connection closed: %s:%s" % self.client_address) + if self.session: + self.session.disconnect(self) + return SocketServer.BaseRequestHandler.finish(self) + + + def info(self, msg): + ''' Utility method for writing output to stdout. + ''' + print msg + sys.stdout.flush() + + + def warn(self, msg): + ''' Utility method for writing output to stderr. + ''' + print >> sys.stderr, msg + sys.stderr.flush() + + def register(self): + ''' Return a Register Message + ''' + self.info("GUI has connected to session %d at %s" % \ + (self.session.sessionid, time.ctime())) + tlvdata = "" + tlvdata += coreapi.CoreRegTlv.pack(coreapi.CORE_TLV_REG_EXECSRV, + "core-daemon") + tlvdata += coreapi.CoreRegTlv.pack(coreapi.CORE_TLV_REG_EMULSRV, + "core-daemon") + tlvdata += self.session.confobjs_to_tlvs() + return coreapi.CoreRegMessage.pack(coreapi.CORE_API_ADD_FLAG, tlvdata) + + def sendall(self, data): + ''' Send raw data to the other end of this TCP connection + using socket's sendall(). + ''' + return self.request.sendall(data) + + def recvmsg(self): + ''' Receive data and return a CORE API message object. + ''' + try: + msghdr = self.request.recv(coreapi.CoreMessage.hdrsiz) + if self.debug: + self.info("received message header:\n%s" % hexdump(msghdr)) + except Exception, e: + raise IOError, "error receiving header (%s)" % e + if len(msghdr) != coreapi.CoreMessage.hdrsiz: + if len(msghdr) == 0: + raise EOFError, "client disconnected" + else: + raise IOError, "invalid message header size" + msgtype, msgflags, msglen = coreapi.CoreMessage.unpackhdr(msghdr) + if msglen == 0: + self.warn("received message with no data") + data = "" + while len(data) < msglen: + data += self.request.recv(msglen - len(data)) + if self.debug: + self.info("received message data:\n%s" % hexdump(data)) + if len(data) > msglen: + self.warn("received message length does not match received data " \ + "(%s != %s)" % (len(data), msglen)) + raise IOError + try: + msgcls = coreapi.msg_class(msgtype) + msg = msgcls(msgflags, msghdr, data) + except KeyError: + msg = coreapi.CoreMessage(msgflags, msghdr, data) + msg.msgtype = msgtype + self.warn("unimplemented core message type: %s" % msg.typestr()) + return msg + + + def queuemsg(self, msg): + ''' Queue an API message for later processing. + ''' + if msg.queuedtimes >= self.maxmsgqueuedtimes: + self.warn("dropping message queued %d times: %s" % + (msg.queuedtimes, msg)) + return + if self.debug: + self.info("queueing msg (queuedtimes = %s): type %s" % + (msg.queuedtimes, msg.msgtype)) + msg.queuedtimes += 1 + self.msgcv.acquire() + self.msgq.append(msg) + self.msgcv.notify() + self.msgcv.release() + + def handlerthread(self): + ''' CORE API message handling loop that is spawned for each server + thread; get CORE API messages from the incoming message queue, + and call handlemsg() for processing. + ''' + while not self.done: + # get a coreapi.CoreMessage() from the incoming queue + self.msgcv.acquire() + while not self.msgq: + self.msgcv.wait() + if self.done: + self.msgcv.release() + return + msg = self.msgq.pop(0) + self.msgcv.release() + self.handlemsg(msg) + + + def handlemsg(self, msg): + ''' Handle an incoming message; dispatch based on message type, + optionally sending replies. + ''' + if self.session and self.session.broker.handlemsg(msg): + if self.debug: + self.info("%s forwarding message:\n%s" % + (threading.currentThread().getName(), msg)) + return + + if self.debug: + self.info("%s handling message:\n%s" % + (threading.currentThread().getName(), msg)) + + if msg.msgtype not in self.msghandler: + self.warn("no handler for message type: %s" % + msg.typestr()) + return + msghandler = self.msghandler[msg.msgtype] + + try: + replies = msghandler(msg) + for reply in replies: + if self.debug: + msgtype, msgflags, msglen = \ + coreapi.CoreMessage.unpackhdr(reply) + try: + rmsg = coreapi.msg_class(msgtype)(msgflags, + reply[:coreapi.CoreMessage.hdrsiz], + reply[coreapi.CoreMessage.hdrsiz:]) + except KeyError: + # multiple TLVs of same type cause KeyError exception + rmsg = "CoreMessage (type %d flags %d length %d)" % \ + (msgtype, msgflags, msglen) + self.info("%s: reply msg:\n%s" % + (threading.currentThread().getName(), rmsg)) + try: + self.sendall(reply) + except Exception, e: + self.warn("Error sending reply data: %s" % e) + except Exception, e: + self.warn("%s: exception while handling msg:\n%s\n%s" % + (threading.currentThread().getName(), msg, + traceback.format_exc())) + + def handle(self): + ''' Handle a new connection request from a client. Dispatch to the + recvmsg() method for receiving data into CORE API messages, and + add them to an incoming message queue. + ''' + # use port as session id + port = self.request.getpeername()[1] + self.session = self.server.getsession(sessionid = port, + useexisting = False) + self.session.connect(self) + while True: + try: + msg = self.recvmsg() + except EOFError: + break + except IOError, e: + self.warn("IOError: %s" % e) + break + msg.queuedtimes = 0 + self.queuemsg(msg) + if (msg.msgtype == coreapi.CORE_API_SESS_MSG): + # delay is required for brief connections, allow session joining + time.sleep(0.125) + self.session.broadcast(self, msg) + #self.session.shutdown() + #del self.session + gc.collect() +# print "gc count:", gc.get_count() +# for o in gc.get_objects(): +# if isinstance(o, pycore.PyCoreObj): +# print "XXX XXX XXX PyCoreObj:", o +# for r in gc.get_referrers(o): +# print "XXX XXX XXX referrer:", gc.get_referrers(o) + + + def handlenodemsg(self, msg): + ''' Node Message handler + ''' + replies = [] + if msg.flags & coreapi.CORE_API_ADD_FLAG and \ + msg.flags & coreapi.CORE_API_DEL_FLAG: + self.warn("ignoring invalid message: " + "add and delete flag both set") + return () + nodenum = msg.tlvdata[coreapi.CORE_TLV_NODE_NUMBER] + nodexpos = msg.gettlv(coreapi.CORE_TLV_NODE_XPOS) + nodeypos = msg.gettlv(coreapi.CORE_TLV_NODE_YPOS) + canvas = msg.gettlv(coreapi.CORE_TLV_NODE_CANVAS) + icon = msg.gettlv(coreapi.CORE_TLV_NODE_ICON) + lat = msg.gettlv(coreapi.CORE_TLV_NODE_LAT) + lng = msg.gettlv(coreapi.CORE_TLV_NODE_LONG) + alt = msg.gettlv(coreapi.CORE_TLV_NODE_ALT) + if nodexpos is None and nodeypos is None and \ + lat is not None and lng is not None and alt is not None: + (x, y, z) = self.session.location.getxyz(float(lat), float(lng), + float(alt)) + nodexpos = int(x) + nodeypos = int(y) + # GUI can't handle lat/long, so generate another X/Y position message + tlvdata = "" + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_NUMBER, + nodenum) + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_XPOS, + nodexpos) + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_YPOS, + nodeypos) + self.session.broadcastraw(self, coreapi.CoreNodeMessage.pack(0, tlvdata)) + + if msg.flags & coreapi.CORE_API_ADD_FLAG: + nodetype = msg.tlvdata[coreapi.CORE_TLV_NODE_TYPE] + try: + nodecls = coreapi.node_class(nodetype) + except KeyError: + try: + nodetypestr = " (%s)" % coreapi.node_types[nodetype] + except KeyError: + nodetypestr = "" + self.warn("warning: unimplemented node type: %s%s" % \ + (nodetype, nodetypestr)) + return () + start = False + if self.session.getstate() > coreapi.CORE_EVENT_DEFINITION_STATE: + start = True + + nodename = msg.tlvdata[coreapi.CORE_TLV_NODE_NAME] + model = msg.gettlv(coreapi.CORE_TLV_NODE_MODEL) + clsargs = { 'verbose': self.verbose, 'start': start } + if nodetype == coreapi.CORE_NODE_XEN: + clsargs['model'] = model + if nodetype == coreapi.CORE_NODE_RJ45: + if hasattr(self.session.options, 'enablerj45'): + if self.session.options.enablerj45 == '0': + clsargs['start'] = False + # this instantiates an object of class nodecls, + # creating the node or network + n = self.session.addobj(cls = nodecls, objid = nodenum, + name = nodename, **clsargs) + if nodexpos is not None and nodeypos is not None: + n.setposition(nodexpos, nodeypos, None) + if canvas is not None: + n.canvas = canvas + if icon is not None: + n.icon = icon + opaque = msg.gettlv(coreapi.CORE_TLV_NODE_OPAQUE) + if opaque is not None: + n.opaque = opaque + + # add services to a node, either from its services TLV or + # through the configured defaults for this node type + if nodetype == coreapi.CORE_NODE_DEF or \ + nodetype == coreapi.CORE_NODE_PHYS or \ + nodetype == coreapi.CORE_NODE_XEN: + if model is None: + # TODO: default model from conf file? + model = "router" + n.type = model + services_str = msg.gettlv(coreapi.CORE_TLV_NODE_SERVICES) + self.session.services.addservicestonode(n, model, services_str, + self.verbose) + self.session.sdt.updatenode(n, msg.flags, nodexpos, nodeypos, None) + # boot nodes if they are added after runtime (like session.bootnodes()) + if self.session.getstate() == coreapi.CORE_EVENT_RUNTIME_STATE: + if isinstance(n, pycore.nodes.PyCoreNode) and \ + not isinstance(n, pycore.nodes.RJ45Node): + self.session.writeobjs() + self.session.addremovectrlif(node=n, remove=False) + n.boot() + # self.session.updatectrlifhosts() + # n.validate() + + if msg.flags & coreapi.CORE_API_STR_FLAG: + self.nodestatusreq[nodenum] = True + + elif msg.flags & coreapi.CORE_API_DEL_FLAG: + n = None + try: + n = self.session.obj(nodenum) + except KeyError: + pass + self.session.sdt.updatenode(n, msg.flags, None, None, None) + self.session.delobj(nodenum) + + if msg.flags & coreapi.CORE_API_STR_FLAG: + tlvdata = "" + tlvdata += coreapi.CoreNodeTlv.pack(coreapi.CORE_TLV_NODE_NUMBER, + nodenum) + flags = coreapi.CORE_API_DEL_FLAG | coreapi.CORE_API_LOC_FLAG + replies.append(coreapi.CoreNodeMessage.pack(flags, tlvdata)) + for reply in self.session.checkshutdown(): + replies.append(reply) + # Node modify message (no add/del flag) + else: + n = None + try: + n = self.session.obj(nodenum) + except KeyError: + if self.verbose: + self.warn("ignoring node message: unknown node number %s" \ + % nodenum) + #nodeemuid = msg.gettlv(coreapi.CORE_TLV_NODE_EMUID) + if nodexpos is None or nodeypos is None: + if self.verbose: + self.info("ignoring node message: nothing to do") + else: + if n: + n.setposition(nodexpos, nodeypos, None) + self.session.sdt.updatenode(n, msg.flags, nodexpos, nodeypos, None) + if n: + if canvas is not None: + n.canvas = canvas + if icon is not None: + n.icon = icon + + return replies + + + def handlelinkmsg(self, msg): + ''' Link Message handler + ''' + + nodenum1 = msg.gettlv(coreapi.CORE_TLV_LINK_N1NUMBER) + ifindex1 = msg.gettlv(coreapi.CORE_TLV_LINK_IF1NUM) + ipv41 = msg.gettlv(coreapi.CORE_TLV_LINK_IF1IP4) + ipv4mask1 = msg.gettlv(coreapi.CORE_TLV_LINK_IF1IP4MASK) + mac1 = msg.gettlv(coreapi.CORE_TLV_LINK_IF1MAC) + ipv61 = msg.gettlv(coreapi.CORE_TLV_LINK_IF1IP6) + ipv6mask1 = msg.gettlv(coreapi.CORE_TLV_LINK_IF1IP6MASK) + + nodenum2 = msg.gettlv(coreapi.CORE_TLV_LINK_N2NUMBER) + ifindex2 = msg.gettlv(coreapi.CORE_TLV_LINK_IF2NUM) + ipv42 = msg.gettlv(coreapi.CORE_TLV_LINK_IF2IP4) + ipv4mask2 = msg.gettlv(coreapi.CORE_TLV_LINK_IF2IP4MASK) + mac2 = msg.gettlv(coreapi.CORE_TLV_LINK_IF2MAC) + ipv62 = msg.gettlv(coreapi.CORE_TLV_LINK_IF2IP6) + ipv6mask2 = msg.gettlv(coreapi.CORE_TLV_LINK_IF2IP6MASK) + + node1 = None + node2 = None + net = None + net2 = None + + # one of the nodes may exist on a remote server + if nodenum1 is not None and nodenum2 is not None: + t = self.session.broker.gettunnel(nodenum1, nodenum2) + if isinstance(t, pycore.nodes.PyCoreNet): + net = t + if t.remotenum == nodenum1: + nodenum1 = None + else: + nodenum2 = None + # PhysicalNode connected via GreTap tunnel; uses adoptnetif() below + elif t is not None: + if t.remotenum == nodenum1: + nodenum1 = None + else: + nodenum2 = None + + + if nodenum1 is not None: + try: + n = self.session.obj(nodenum1) + except KeyError: + # XXX wait and queue this message to try again later + # XXX maybe this should be done differently + time.sleep(0.125) + self.queuemsg(msg) + return () + if isinstance(n, pycore.nodes.PyCoreNode): + node1 = n + elif isinstance(n, pycore.nodes.PyCoreNet): + if net is None: + net = n + else: + net2 = n + else: + raise ValueError, "unexpected object class: %s" % n + + if nodenum2 is not None: + try: + n = self.session.obj(nodenum2) + except KeyError: + # XXX wait and queue this message to try again later + # XXX maybe this should be done differently + time.sleep(0.125) + self.queuemsg(msg) + return () + if isinstance(n, pycore.nodes.PyCoreNode): + node2 = n + elif isinstance(n, pycore.nodes.PyCoreNet): + if net is None: + net = n + else: + net2 = n + else: + raise ValueError, "unexpected object class: %s" % n + + link_msg_type = msg.gettlv(coreapi.CORE_TLV_LINK_TYPE) + + if node1: + node1.lock.acquire() + if node2: + node2.lock.acquire() + + try: + if link_msg_type == coreapi.CORE_LINK_WIRELESS: + ''' Wireless link/unlink event + ''' + numwlan = 0 + objs = [node1, node2, net, net2] + objs = filter( lambda(x): x is not None, objs ) + if len(objs) < 2: + raise ValueError, "wireless link/unlink message between unknown objects" + + nets = objs[0].commonnets(objs[1]) + for (netcommon, netif1, netif2) in nets: + if not isinstance(netcommon, pycore.nodes.WlanNode) and \ + not isinstance(netcommon, pycore.nodes.EmaneNode): + continue + if msg.flags & coreapi.CORE_API_ADD_FLAG: + netcommon.link(netif1, netif2) + elif msg.flags & coreapi.CORE_API_DEL_FLAG: + netcommon.unlink(netif1, netif2) + else: + raise ValueError, "invalid flags for wireless link/unlink message" + numwlan += 1 + if numwlan == 0: + raise ValueError, \ + "no common network found for wireless link/unlink" + + elif msg.flags & coreapi.CORE_API_ADD_FLAG: + ''' Add a new link. + ''' + start = False + if self.session.getstate() > coreapi.CORE_EVENT_DEFINITION_STATE: + start = True + + if node1 and node2 and not net: + # a new wired link + net = self.session.addobj(cls = pycore.nodes.PtpNet, + verbose = self.verbose, + start = start) + + bw = msg.gettlv(coreapi.CORE_TLV_LINK_BW) + delay = msg.gettlv(coreapi.CORE_TLV_LINK_DELAY) + loss = msg.gettlv(coreapi.CORE_TLV_LINK_PER) + duplicate = msg.gettlv(coreapi.CORE_TLV_LINK_DUP) + jitter = msg.gettlv(coreapi.CORE_TLV_LINK_JITTER) + key = msg.gettlv(coreapi.CORE_TLV_LINK_KEY) + + netaddrlist = [] + #print " n1=%s n2=%s net=%s net2=%s" % (node1, node2, net, net2) + if node1 and net: + addrlist = [] + if ipv41 is not None and ipv4mask1 is not None: + addrlist.append("%s/%s" % (ipv41, ipv4mask1)) + if ipv61 is not None and ipv6mask1 is not None: + addrlist.append("%s/%s" % (ipv61, ipv6mask1)) + if ipv42 is not None and ipv4mask2 is not None: + netaddrlist.append("%s/%s" % (ipv42, ipv4mask2)) + if ipv62 is not None and ipv6mask2 is not None: + netaddrlist.append("%s/%s" % (ipv62, ipv6mask2)) + ifindex1 = node1.newnetif(net, addrlist = addrlist, + hwaddr = mac1, ifindex = ifindex1) + net.linkconfig(node1.netif(ifindex1, net), bw = bw, + delay = delay, loss = loss, + duplicate = duplicate, jitter = jitter) + if node1 is None and net: + if ipv41 is not None and ipv4mask1 is not None: + netaddrlist.append("%s/%s" % (ipv41, ipv4mask1)) + # don't add this address again if node2 and net + ipv41 = None + if ipv61 is not None and ipv6mask1 is not None: + netaddrlist.append("%s/%s" % (ipv61, ipv6mask1)) + # don't add this address again if node2 and net + ipv61 = None + if node2 and net: + addrlist = [] + if ipv42 is not None and ipv4mask2 is not None: + addrlist.append("%s/%s" % (ipv42, ipv4mask2)) + if ipv62 is not None and ipv6mask2 is not None: + addrlist.append("%s/%s" % (ipv62, ipv6mask2)) + if ipv41 is not None and ipv4mask1 is not None: + netaddrlist.append("%s/%s" % (ipv41, ipv4mask1)) + if ipv61 is not None and ipv6mask1 is not None: + netaddrlist.append("%s/%s" % (ipv61, ipv6mask1)) + ifindex2 = node2.newnetif(net, addrlist = addrlist, + hwaddr = mac2, ifindex = ifindex2) + net.linkconfig(node2.netif(ifindex2, net), bw = bw, + delay = delay, loss = loss, + duplicate = duplicate, jitter = jitter) + if node2 is None and net2: + if ipv42 is not None and ipv4mask2 is not None: + netaddrlist.append("%s/%s" % (ipv42, ipv4mask2)) + if ipv62 is not None and ipv6mask2 is not None: + netaddrlist.append("%s/%s" % (ipv62, ipv6mask2)) + + # tunnel node finalized with this link message + if key and isinstance(net, pycore.nodes.TunnelNode): + net.setkey(key) + if len(netaddrlist) > 0: + net.addrconfig(netaddrlist) + if key and isinstance(net2, pycore.nodes.TunnelNode): + net2.setkey(key) + if len(netaddrlist) > 0: + net2.addrconfig(netaddrlist) + + if net and net2: + # two layer-2 networks linked together + if isinstance(net2, pycore.nodes.RJ45Node): + net2.linknet(net) # RJ45 nodes have different linknet() + else: + net.linknet(net2) + elif net is None and net2 is None and \ + (node1 is None or node2 is None): + # apply address/parameters to PhysicalNodes + fx = (bw, delay, loss, duplicate, jitter) + addrlist = [] + if node1 and isinstance(node1, pycore.pnodes.PhysicalNode): + if ipv41 is not None and ipv4mask1 is not None: + addrlist.append("%s/%s" % (ipv41, ipv4mask1)) + if ipv61 is not None and ipv6mask1 is not None: + addrlist.append("%s/%s" % (ipv61, ipv6mask1)) + node1.adoptnetif(t, ifindex1, mac1, addrlist) + node1.linkconfig(t, bw, delay, loss, duplicate, jitter) + elif node2 and isinstance(node2, pycore.pnodes.PhysicalNode): + if ipv42 is not None and ipv4mask2 is not None: + addrlist.append("%s/%s" % (ipv42, ipv4mask2)) + if ipv62 is not None and ipv6mask2 is not None: + addrlist.append("%s/%s" % (ipv62, ipv6mask2)) + node2.adoptnetif(t, ifindex2, mac2, addrlist) + node2.linkconfig(t, bw, delay, loss, duplicate, jitter) + # delete a link + elif msg.flags & coreapi.CORE_API_DEL_FLAG: + ''' Remove a link. + ''' + if node1 and node2: + # TODO: fix this for the case where ifindex[1,2] are + # not specified + # a wired unlink event, delete the connecting bridge + netif1 = node1.netif(ifindex1) + netif2 = node2.netif(ifindex2) + if netif1 is None and netif2 is None: + nets = node1.commonnets(node2) + for (netcommon, tmp1, tmp2) in nets: + if (net and netcommon == net) or net is None: + netif1 = tmp1 + netif2 = tmp2 + break + if netif1 is None or netif2 is None: + pass + elif netif1.net or netif2.net: + if netif1.net != netif2.net: + if not netif1.up or not netif2.up: + pass + else: + raise ValueError, "no common network found" + net = netif1.net + netif1.detachnet() + netif2.detachnet() + if net.numnetif() == 0: + self.session.delobj(net.objid) + node1.delnetif(ifindex1) + node2.delnetif(ifindex2) + else: + ''' Modify a link. + ''' + bw = msg.gettlv(coreapi.CORE_TLV_LINK_BW) + delay = msg.gettlv(coreapi.CORE_TLV_LINK_DELAY) + loss = msg.gettlv(coreapi.CORE_TLV_LINK_PER) + duplicate = msg.gettlv(coreapi.CORE_TLV_LINK_DUP) + jitter = msg.gettlv(coreapi.CORE_TLV_LINK_JITTER) + numnet = 0 + if node1 is None and node2 is None: + raise ValueError, "modify link for unknown nodes" + elif node1 is None: + # node1 = layer 2node, node2 = layer3 node + net.linkconfig(node2.netif(ifindex2, net), bw = bw, + delay = delay, loss = loss, + duplicate = duplicate, jitter = jitter) + elif node2 is None: + # node2 = layer 2node, node1 = layer3 node + net.linkconfig(node1.netif(ifindex1, net), bw = bw, + delay = delay, loss = loss, + duplicate = duplicate, jitter = jitter) + else: + nets = node1.commonnets(node2) + for (net, netif1, netif2) in nets: + if ifindex1 is not None and \ + ifindex1 != node1.getifindex(netif1): + continue + net.linkconfig(netif1, bw = bw, delay = delay, + loss = loss, duplicate = duplicate, + jitter = jitter, netif2 = netif2) + net.linkconfig(netif2, bw = bw, delay = delay, + loss = loss, duplicate = duplicate, + jitter = jitter, netif2 = netif1) + numnet += 1 + if numnet == 0: + raise ValueError, "no common network found" + + + finally: + if node1: + node1.lock.release() + if node2: + node2.lock.release() + if not isinstance(net, pycore.nodes.WlanNode) and \ + not isinstance(net, pycore.nodes.EmaneNode): + # show links in SDT display except for links to WLAN clouds + wl = (link_msg_type == coreapi.CORE_LINK_WIRELESS) + self.session.sdt.updatelink(nodenum1, nodenum2, msg.flags, + wireless=wl) + return () + + def handleexecmsg(self, msg): + ''' Execute Message handler + ''' + nodenum = msg.gettlv(coreapi.CORE_TLV_EXEC_NODE) + execnum = msg.gettlv(coreapi.CORE_TLV_EXEC_NUM) + exectime = msg.gettlv(coreapi.CORE_TLV_EXEC_TIME) + cmd = msg.gettlv(coreapi.CORE_TLV_EXEC_CMD) + + if nodenum is None: + raise ValueError, "Execute Message is missing node number." + if execnum is None: + raise ValueError, "Execute Message is missing execution number." + if exectime is not None: + self.session.addevent(exectime, node=nodenum, name=None, data=cmd) + return () + + try: + n = self.session.obj(nodenum) + except KeyError: + # XXX wait and queue this message to try again later + # XXX maybe this should be done differently + time.sleep(0.125) + self.queuemsg(msg) + return () + # build common TLV items for reply + tlvdata = "" + tlvdata += coreapi.CoreExecTlv.pack(coreapi.CORE_TLV_EXEC_NODE, nodenum) + tlvdata += coreapi.CoreExecTlv.pack(coreapi.CORE_TLV_EXEC_NUM, execnum) + tlvdata += coreapi.CoreExecTlv.pack(coreapi.CORE_TLV_EXEC_CMD, cmd) + + if msg.flags & coreapi.CORE_API_TTY_FLAG: + # echo back exec message with cmd for spawning interactive terminal + if cmd == "bash": + cmd = "/bin/bash" + res = n.termcmdstring(cmd) + tlvdata += coreapi.CoreExecTlv.pack(coreapi.CORE_TLV_EXEC_RESULT, + res) + reply = coreapi.CoreExecMessage.pack(coreapi.CORE_API_TTY_FLAG, + tlvdata) + return (reply, ) + else: + if self.verbose: + self.info("execute message with cmd = '%s'" % cmd) + # execute command and send a response + if msg.flags & coreapi.CORE_API_STR_FLAG or \ + msg.flags & coreapi.CORE_API_TXT_FLAG: + # shlex.split() handles quotes within the string + status, res = n.cmdresult(shlex.split(cmd)) + if self.verbose: + self.info("done exec cmd='%s' with status=%d res=(%d bytes)" + % (cmd, status, len(res))) + if msg.flags & coreapi.CORE_API_TXT_FLAG: + tlvdata += coreapi.CoreExecTlv.pack( \ + coreapi.CORE_TLV_EXEC_RESULT, res) + if msg.flags & coreapi.CORE_API_STR_FLAG: + tlvdata += coreapi.CoreExecTlv.pack( \ + coreapi.CORE_TLV_EXEC_STATUS, status) + reply = coreapi.CoreExecMessage.pack(0, tlvdata) + return (reply, ) + # execute the command with no response + else: + n.cmd(shlex.split(cmd), wait=False) + return () + + + def handleregmsg(self, msg): + ''' Register Message Handler + ''' + replies = [] + + # execute a Python script + ex = msg.gettlv(coreapi.CORE_TLV_REG_EXECSRV) + if ex: + # TODO: load and execute XML files here + try: + self.info("executing '%s'" % ex) + if isinstance(self.server, CoreUdpServer): + server = self.server.tcpserver + else: + server = self.server + if msg.flags & coreapi.CORE_API_STR_FLAG: + old_session_ids = set(server.getsessionids()) + sys.argv = shlex.split(ex) + scriptname = sys.argv[0] + execfile(scriptname, {'server': server}) + if msg.flags & coreapi.CORE_API_STR_FLAG: + new_session_ids = set(server.getsessionids()) + new_sid = new_session_ids.difference(old_session_ids) + try: + sid = new_sid.pop() + self.info("executed '%s' as session %d" % (ex, sid)) + except KeyError: + self.info("executed '%s' with unknown session ID" % ex) + return replies + tlvdata = coreapi.CoreRegTlv.pack( \ + coreapi.CORE_TLV_REG_EXECSRV, ex) + tlvdata += coreapi.CoreRegTlv.pack( \ + coreapi.CORE_TLV_REG_SESSION, "%s" % sid) + msg = coreapi.CoreRegMessage.pack(0, tlvdata) + replies.append(msg) + except Exception, e: + self.warn("error executing '%s': %s" % (ex, e)) + return replies + + gui = msg.gettlv(coreapi.CORE_TLV_REG_GUI) + if gui is None: + self.info("ignoring Register message") + else: + # register capabilities with the GUI + self.master = True + found = self.server.setsessionmaster(self) + replies.append(self.register()) + replies.append(self.server.tosessionmsg()) + return replies + + def handleconfmsg(self, msg): + ''' Configuration Message handler + ''' + nodenum = msg.gettlv(coreapi.CORE_TLV_CONF_NODE) + objname = msg.gettlv(coreapi.CORE_TLV_CONF_OBJ) + if self.verbose: + self.info("Configuration message for %s node %s" % \ + (objname, nodenum)) + # dispatch to any registered callback for this object type + replies = self.session.confobj(objname, self.session, msg) + # config requests usually have a reply with default data + return replies + + def handlefilemsg(self, msg): + ''' File Message handler + ''' + if msg.flags & coreapi.CORE_API_ADD_FLAG: + nodenum = msg.gettlv(coreapi.CORE_TLV_NODE_NUMBER) + filename = msg.gettlv(coreapi.CORE_TLV_FILE_NAME) + type = msg.gettlv(coreapi.CORE_TLV_FILE_TYPE) + srcname = msg.gettlv(coreapi.CORE_TLV_FILE_SRCNAME) + data = msg.gettlv(coreapi.CORE_TLV_FILE_DATA) + cmpdata = msg.gettlv(coreapi.CORE_TLV_FILE_CMPDATA) + + if cmpdata is not None: + self.warn("Compressed file data not implemented for File " \ + "message.") + return () + if srcname is not None and data is not None: + self.warn("ignoring invalid File message: source and data " \ + "TLVs are both present") + return () + + # some File Messages store custom files in services, + # prior to node creation + if type is not None: + if type[:8] == "service:": + self.session.services.setservicefile(nodenum, type, + filename, srcname, data) + return () + elif type[:5] == "hook:": + self.session.sethook(type, filename, srcname, data) + return () + # writing a file to the host + if nodenum is None: + if srcname is not None: + shutil.copy2(srcname, filename) + else: + with open(filename, "w") as f: + f.write(data) + return () + try: + n = self.session.obj(nodenum) + except KeyError: + # XXX wait and queue this message to try again later + # XXX maybe this should be done differently + self.warn("File message for %s for node number %s queued." % \ + (filename, nodenum)) + time.sleep(0.125) + self.queuemsg(msg) + return () + if srcname is not None: + n.addfile(srcname, filename) + elif data is not None: + n.nodefile(filename, data) + else: + raise NotImplementedError + return () + + def handleifacemsg(self, msg): + ''' Interface Message handler + ''' + self.info("ignoring Interface message") + return () + + def handleeventmsg(self, msg): + ''' Event Message handler + ''' + eventtype = msg.tlvdata[coreapi.CORE_TLV_EVENT_TYPE] + if self.verbose: + self.info("EVENT %d: %s at %s" % \ + (eventtype, coreapi.event_types[eventtype], time.ctime())) + if eventtype <= coreapi.CORE_EVENT_SHUTDOWN_STATE: + self.session.setstate(state=eventtype, info=True, sendevent=False) + + if eventtype == coreapi.CORE_EVENT_DEFINITION_STATE: + # clear all session objects in order to receive new definitions + self.session.delobjs() + self.session.delhooks() + self.session.broker.reset() + elif eventtype == coreapi.CORE_EVENT_CONFIGURATION_STATE: + pass + elif eventtype == coreapi.CORE_EVENT_INSTANTIATION_STATE: + if len(self.handlerthreads) > 1: + # TODO: sync handler threads here before continuing + time.sleep(2.0) # XXX + # done receiving node/link configuration, ready to instantiate + self.session.instantiate(handler=self) + elif eventtype == coreapi.CORE_EVENT_RUNTIME_STATE: + if self.session.master: + self.warn("Unexpected event message: RUNTIME state received " \ + "at session master") + elif eventtype == coreapi.CORE_EVENT_DATACOLLECT_STATE: + self.session.datacollect() + elif eventtype == coreapi.CORE_EVENT_SHUTDOWN_STATE: + if self.session.master: + self.warn("Unexpected event message: SHUTDOWN state received " \ + "at session master") + elif eventtype >= coreapi.CORE_EVENT_START and \ + eventtype <= coreapi.CORE_EVENT_RESTART: + name = msg.gettlv(coreapi.CORE_TLV_EVENT_NAME) + # TODO: register system for event message handlers, like confobjs + if name[:8] == "service:": + self.session.services.handleevent(msg) + elif name[:9] == "mobility:": + self.session.mobility.handleevent(msg) + else: + self.warn("Unhandled event message: event type %d" % eventtype) + elif eventtype == coreapi.CORE_EVENT_FILE_OPEN: + self.session.delobjs() + self.session.delhooks() + self.session.broker.reset() + filename = msg.tlvdata[coreapi.CORE_TLV_EVENT_NAME] + opensessionxml(self.session, filename) + return self.session.sendobjs() + elif eventtype == coreapi.CORE_EVENT_FILE_SAVE: + filename = msg.tlvdata[coreapi.CORE_TLV_EVENT_NAME] + savesessionxml(self.session, filename) + elif eventtype == coreapi.CORE_EVENT_SCHEDULED: + etime = msg.gettlv(coreapi.CORE_TLV_EVENT_TIME) + node = msg.gettlv(coreapi.CORE_TLV_EVENT_NODE) + name = msg.gettlv(coreapi.CORE_TLV_EVENT_NAME) + data = msg.gettlv(coreapi.CORE_TLV_EVENT_DATA) + if etime is None: + self.warn("Event message scheduled event missing start time") + return () + if msg.flags & coreapi.CORE_API_ADD_FLAG: + self.session.addevent(float(etime), node=node, name=name, + data=data) + else: + raise NotImplementedError + else: + self.warn("Unhandled event message: event type %d" % eventtype) + return () + + def handlesessionmsg(self, msg): + ''' Session Message handler + ''' + replies = [] + sid_str = msg.gettlv(coreapi.CORE_TLV_SESS_NUMBER) + name_str = msg.gettlv(coreapi.CORE_TLV_SESS_NAME) + file_str = msg.gettlv(coreapi.CORE_TLV_SESS_FILE) + nc_str = msg.gettlv(coreapi.CORE_TLV_SESS_NODECOUNT) + thumb = msg.gettlv(coreapi.CORE_TLV_SESS_THUMB) + user = msg.gettlv(coreapi.CORE_TLV_SESS_USER) + sids = coreapi.str_to_list(sid_str) + names = coreapi.str_to_list(name_str) + files = coreapi.str_to_list(file_str) + ncs = coreapi.str_to_list(nc_str) + self.info("SESSION message flags=0x%x sessions=%s" % (msg.flags, sid_str)) + + if msg.flags == 0: + # modify a session + i = 0 + for sid in sids: + sid = int(sid) + if sid == 0: + session = self.session + else: + session = self.server.getsession(sessionid = sid, + useexisting = True) + if session is None: + self.info("session %s not found" % sid) + i += 1 + continue + self.info("request to modify to session %s" % session.sessionid) + if names is not None: + session.name = names[i] + if files is not None: + session.filename = files[i] + if ncs is not None: + session.node_count = ncs[i] + if thumb is not None: + session.setthumbnail(thumb) + if user is not None: + session.setuser(user) + i += 1 + else: + if msg.flags & coreapi.CORE_API_STR_FLAG and not \ + msg.flags & coreapi.CORE_API_ADD_FLAG: + # status request flag: send list of sessions + return (self.server.tosessionmsg(), ) + # handle ADD or DEL flags + for sid in sids: + sid = int(sid) + session = self.server.getsession(sessionid = sid, + useexisting = True) + if session is None: + self.info("session %s not found (flags=0x%x)" % \ + (sid, msg.flags)) + continue + if session.server is None: + # this needs to be set when executing a Python script + session.server = self.server + if msg.flags & coreapi.CORE_API_ADD_FLAG: + # connect to the first session that exists + self.info("request to connect to session %s" % sid) + # this may shutdown the session if no handlers exist + self.session.disconnect(self) + self.session = session + self.session.connect(self) + if user is not None: + self.session.setuser(user) + if msg.flags & coreapi.CORE_API_STR_FLAG: + replies.extend(self.session.sendobjs()) + elif msg.flags & coreapi.CORE_API_DEL_FLAG: + # shut down the specified session(s) + self.info("request to terminate session %s" % sid) + session.setstate(state=coreapi.CORE_EVENT_DATACOLLECT_STATE, + info=True, sendevent=True) + session.shutdown() + else: + self.warn("unhandled session flags for session %s" % sid) + return replies + +class CoreDatagramRequestHandler(CoreRequestHandler): + ''' A child of the CoreRequestHandler class for handling connectionless + UDP messages. No new session is created; messages are handled immediately or + sometimes queued on existing session handlers. + ''' + + def __init__(self, request, client_address, server): + # TODO: decide which messages cannot be handled with connectionless UDP + self.msghandler = { + coreapi.CORE_API_NODE_MSG: self.handlenodemsg, + coreapi.CORE_API_LINK_MSG: self.handlelinkmsg, + coreapi.CORE_API_EXEC_MSG: self.handleexecmsg, + coreapi.CORE_API_REG_MSG: self.handleregmsg, + coreapi.CORE_API_CONF_MSG: self.handleconfmsg, + coreapi.CORE_API_FILE_MSG: self.handlefilemsg, + coreapi.CORE_API_IFACE_MSG: self.handleifacemsg, + coreapi.CORE_API_EVENT_MSG: self.handleeventmsg, + coreapi.CORE_API_SESS_MSG: self.handlesessionmsg, + } + self.nodestatusreq = {} + self.master = False + self.session = None + self.verbose = bool(server.tcpserver.cfg['verbose'].lower() == "true") + self.debug = bool(server.tcpserver.cfg['debug'].lower() == "true") + SocketServer.BaseRequestHandler.__init__(self, request, + client_address, server) + + def setup(self): + ''' Client has connected, set up a new connection. + ''' + if self.verbose: + self.info("new UDP connection: %s:%s" % self.client_address) + + def handle(self): + msg = self.recvmsg() + + def finish(self): + return SocketServer.BaseRequestHandler.finish(self) + + def recvmsg(self): + ''' Receive data, parse a CoreMessage and queue it onto an existing + session handler's queue, if available. + ''' + data = self.request[0] + socket = self.request[1] + msghdr = data[:coreapi.CoreMessage.hdrsiz] + if len(msghdr) < coreapi.CoreMessage.hdrsiz: + raise IOError, "error receiving header (received %d bytes)" % \ + len(msghdr) + msgtype, msgflags, msglen = coreapi.CoreMessage.unpackhdr(msghdr) + if msglen == 0: + self.warn("received message with no data") + return + if len(data) != coreapi.CoreMessage.hdrsiz + msglen: + self.warn("received message length does not match received data " \ + "(%s != %s)" % \ + (len(data), coreapi.CoreMessage.hdrsiz + msglen)) + raise IOError + elif self.verbose: + self.info("UDP socket received message type=%d len=%d" % \ + (msgtype, msglen)) + try: + msgcls = coreapi.msg_class(msgtype) + msg = msgcls(msgflags, msghdr, data[coreapi.CoreMessage.hdrsiz:]) + except KeyError: + msg = coreapi.CoreMessage(msgflags, msghdr, + data[coreapi.CoreMessage.hdrsiz:]) + msg.msgtype = msgtype + self.warn("unimplemented core message type: %s" % msg.typestr()) + return + sids = msg.sessionnumbers() + msg.queuedtimes = 0 + #self.info("UDP message has session numbers: %s" % sids) + if len(sids) > 0: + for sid in sids: + sess = self.server.tcpserver.getsession(sessionid=sid, + useexisting=True) + if sess: + self.session = sess + sess.broadcast(self, msg) + self.handlemsg(msg) + else: + self.warn("Session %d in %s message not found." % \ + (sid, msg.typestr())) + else: + # no session specified, find an existing one + sess = self.server.tcpserver.getsession(sessionid=0, + useexisting=True) + if sess or msg.msgtype == coreapi.CORE_API_REG_MSG: + self.session = sess + if sess: + sess.broadcast(self, msg) + self.handlemsg(msg) + else: + self.warn("No active session, dropping %s message." % \ + msg.typestr()) + + def queuemsg(self, msg): + ''' UDP handlers are short-lived and do not have message queues. + ''' + raise Exception, "Unable to queue %s message for later processing " \ + "using UDP!" % msg.typestr() + + def sendall(self, data): + ''' Use sendto() on the connectionless UDP socket. + ''' + self.request[1].sendto(data, self.client_address) + + + +class CoreServer(SocketServer.ThreadingMixIn, SocketServer.TCPServer): + ''' TCP server class, manages sessions and spawns request handlers for + incoming connections. + ''' + daemon_threads = True + allow_reuse_address = True + servers = set() + + def __init__(self, server_address, RequestHandlerClass, cfg = None): + ''' Server class initialization takes configuration data and calls + the SocketServer constructor + ''' + self.cfg = cfg + self._sessions = {} + self._sessionslock = threading.Lock() + self.newserver(self) + SocketServer.TCPServer.__init__(self, server_address, + RequestHandlerClass) + + @classmethod + def newserver(cls, server): + cls.servers.add(server) + + @classmethod + def delserver(cls, server): + try: + cls.servers.remove(server) + except KeyError: + pass + + def shutdown(self): + for session in self._sessions.values(): + session.shutdown() + if self.cfg['daemonize']: + pidfilename = self.cfg['pidfile'] + try: + os.unlink(pidfilename) + except OSError: + pass + self.delserver(self) + + def addsession(self, session): + ''' Add a session to our dictionary of sessions, ensuring a unique + session number + ''' + self._sessionslock.acquire() + try: + if session.sessionid in self._sessions: + raise KeyError, "non-unique session id %s for %s" % \ + (session.sessionid, session) + self._sessions[session.sessionid] = session + finally: + self._sessionslock.release() + return session + + def delsession(self, session): + ''' Remove a session from our dictionary of sessions. + ''' + with self._sessionslock: + if session.sessionid not in self._sessions: + print "session id %s not found (sessions=%s)" % \ + (session.sessionid, self._sessions.keys()) + else: + del(self._sessions[session.sessionid]) + return session + + def getsessionids(self): + ''' Return a list of active session numbers. + ''' + with self._sessionslock: + sids = self._sessions.keys() + return sids + + def getsession(self, sessionid = None, useexisting = True): + ''' Create a new session or retrieve an existing one from our + dictionary of sessions. When the sessionid=0 and the useexisting + flag is set, return on of the existing sessions. + ''' + if not useexisting: + session = pycore.Session(sessionid, cfg = self.cfg, server = self) + self.addsession(session) + return session + + with self._sessionslock: + # look for the specified session id + if sessionid in self._sessions: + session = self._sessions[sessionid] + else: + session = None + # pick an existing session + if sessionid == 0: + for s in self._sessions.itervalues(): + if s.getstate() == coreapi.CORE_EVENT_RUNTIME_STATE: + if session is None: + session = s + elif s.node_count > session.node_count: + session = s + if session is None: + for s in self._sessions.itervalues(): + session = s + break + return session + + def tosessionmsg(self, flags = 0): + ''' Build CORE API Sessions message based on current session info. + ''' + idlist = [] + namelist = [] + filelist = [] + nclist = [] + datelist = [] + thumblist = [] + num_sessions = 0 + + with self._sessionslock: + for sessionid in self._sessions: + session = self._sessions[sessionid] + # debug: session.dumpsession() + num_sessions += 1 + idlist.append(str(sessionid)) + name = session.name + if name is None: + name = "" + namelist.append(name) + file = session.filename + if file is None: + file = "" + filelist.append(file) + nc = session.node_count + if nc is None: + nc = "" + nclist.append(nc) + datelist.append(time.ctime(session._time)) + thumb = session.thumbnail + if thumb is None: + thumb = "" + thumblist.append(thumb) + sids = "|".join(idlist) + names = "|".join(namelist) + files = "|".join(filelist) + ncs = "|".join(nclist) + dates = "|".join(datelist) + thumbs = "|".join(thumblist) + + if num_sessions > 0: + tlvdata = "" + if len(sids) > 0: + tlvdata += coreapi.CoreSessionTlv.pack( \ + coreapi.CORE_TLV_SESS_NUMBER, sids) + if len(names) > 0: + tlvdata += coreapi.CoreSessionTlv.pack( \ + coreapi.CORE_TLV_SESS_NAME, names) + if len(files) > 0: + tlvdata += coreapi.CoreSessionTlv.pack( \ + coreapi.CORE_TLV_SESS_FILE, files) + if len(ncs) > 0: + tlvdata += coreapi.CoreSessionTlv.pack( \ + coreapi.CORE_TLV_SESS_NODECOUNT, ncs) + if len(dates) > 0: + tlvdata += coreapi.CoreSessionTlv.pack( \ + coreapi.CORE_TLV_SESS_DATE, dates) + if len(thumbs) > 0: + tlvdata += coreapi.CoreSessionTlv.pack( \ + coreapi.CORE_TLV_SESS_THUMB, thumbs) + msg = coreapi.CoreSessionMessage.pack(flags, tlvdata) + else: + msg = None + return(msg) + + def dumpsessions(self): + ''' Debug print all session info. + ''' + print "sessions:" + self._sessionslock.acquire() + try: + for sessionid in self._sessions: + print sessionid, + finally: + self._sessionslock.release() + print "" + sys.stdout.flush() + + def setsessionmaster(self, handler): + ''' Call the setmaster() method for every session. Returns True when + a session having the given handler was updated. + ''' + found = False + self._sessionslock.acquire() + try: + for sessionid in self._sessions: + found = self._sessions[sessionid].setmaster(handler) + if found is True: + break + finally: + self._sessionslock.release() + return found + + def startudp(self, server_address): + ''' Start a thread running a UDP server on the same host,port for + connectionless requests. + ''' + self.udpserver = CoreUdpServer(server_address, + CoreDatagramRequestHandler, self) + self.udpthread = threading.Thread(target = self.udpserver.start) + self.udpthread.daemon = True + self.udpthread.start() + +class CoreUdpServer(SocketServer.ThreadingMixIn, SocketServer.UDPServer): + ''' UDP server class, manages sessions and spawns request handlers for + incoming connections. + ''' + daemon_threads = True + allow_reuse_address = True + + def __init__(self, server_address, RequestHandlerClass, tcpserver): + ''' Server class initialization takes configuration data and calls + the SocketServer constructor + ''' + self.tcpserver = tcpserver + SocketServer.UDPServer.__init__(self, server_address, + RequestHandlerClass) + + def start(self): + ''' Thread target to run concurrently with the TCP server. + ''' + self.serve_forever() + + + +def banner(): + ''' Output the program banner printed to the terminal or log file. + ''' + sys.stdout.write("CORE daemon v.%s started %s\n" % \ + (COREDPY_VERSION, time.ctime())) + sys.stdout.flush() + + +def cored(cfg = None): + ''' Start the CoreServer object and enter the server loop. + ''' + host = cfg['listenaddr'] + port = int(cfg['port']) + if host == '' or host is None: + host = "localhost" + try: + server = CoreServer((host, port), CoreRequestHandler, cfg) + except Exception, e: + sys.stderr.write("error starting server on: %s:%s\n\t%s\n" % \ + (host, port, e)) + sys.stderr.flush() + sys.exit(1) + closeonexec(server.fileno()) + sys.stdout.write("server started, listening on: %s:%s\n" % (host, port)) + sys.stdout.flush() + server.startudp((host,port)) + server.serve_forever() + +def cleanup(): + while CoreServer.servers: + server = CoreServer.servers.pop() + server.shutdown() + +atexit.register(cleanup) + +def sighandler(signum, stackframe): + print >> sys.stderr, "terminated by signal:", signum + sys.exit(signum) + +signal.signal(signal.SIGTERM, sighandler) + +def getMergedConfig(filename): + ''' Return a configuration after merging config file and command-line + arguments. + ''' + # these are the defaults used in the config file + defaults = { 'port' : '%d' % coreapi.CORE_API_PORT, + 'listenaddr' : 'localhost', + 'pidfile' : '%s/run/core-daemon.pid' % CORE_STATE_DIR, + 'logfile' : '%s/log/core-daemon.log' % CORE_STATE_DIR, + 'numthreads' : '1', + 'verbose' : 'False', + 'daemonize' : 'False', + 'debug' : 'False', + 'execfile' : None, + } + + usagestr = "usage: %prog [-h] [options] [args]\n\n" + \ + "CORE daemon v.%s instantiates Linux network namespace " \ + "nodes." % COREDPY_VERSION + parser = optparse.OptionParser(usage = usagestr) + parser.add_option("-f", "--configfile", dest = "configfile", + type = "string", + help = "read config from specified file; default = %s" % + filename) + parser.add_option("-d", "--daemonize", dest = "daemonize", + action="store_true", + help = "run in background as daemon; default=%s" % \ + defaults["daemonize"]) + parser.add_option("-e", "--execute", dest = "execfile", type = "string", + help = "execute a Python/XML-based session") + parser.add_option("-l", "--logfile", dest = "logfile", type = "string", + help = "log output to specified file; default = %s" % + defaults["logfile"]) + parser.add_option("-p", "--port", dest = "port", type = int, + help = "port number to listen on; default = %s" % \ + defaults["port"]) + parser.add_option("-i", "--pidfile", dest = "pidfile", + help = "filename to write pid to; default = %s" % \ + defaults["pidfile"]) + parser.add_option("-t", "--numthreads", dest = "numthreads", type = int, + help = "number of server threads; default = %s" % \ + defaults["numthreads"]) + parser.add_option("-v", "--verbose", dest = "verbose", action="store_true", + help = "enable verbose logging; default = %s" % \ + defaults["verbose"]) + parser.add_option("-g", "--debug", dest = "debug", action="store_true", + help = "enable debug logging; default = %s" % \ + defaults["debug"]) + + # parse command line options + (options, args) = parser.parse_args() + + # read the config file + if options.configfile is not None: + filename = options.configfile + del options.configfile + cfg = ConfigParser.SafeConfigParser(defaults) + cfg.read(filename) + + section = "core-daemon" + if not cfg.has_section(section): + cfg.add_section(section) + # gracefully support legacy configs (cored.py/cored now core-daemon) + if cfg.has_section("cored.py"): + for name, val in cfg.items("cored.py"): + if name == 'pidfile' or name == 'logfile': + bn = os.path.basename(val).replace('coredpy', 'core-daemon') + val = os.path.join(os.path.dirname(val), bn) + cfg.set(section, name, val) + if cfg.has_section("cored"): + for name, val in cfg.items("cored"): + if name == 'pidfile' or name == 'logfile': + bn = os.path.basename(val).replace('cored', 'core-daemon') + val = os.path.join(os.path.dirname(val), bn) + cfg.set(section, name, val) + + # merge command line with config file + for opt in options.__dict__: + val = options.__dict__[opt] + if val is not None: + cfg.set(section, opt, val.__str__()) + + return dict(cfg.items(section)), args + +def exec_file(cfg): + ''' Send a Register Message to execute a new session based on XML or Python + script file. + ''' + filename = cfg['execfile'] + sys.stdout.write("Telling daemon to execute file: '%s'...\n" % filename) + sys.stdout.flush() + tlvdata = coreapi.CoreRegTlv.pack(coreapi.CORE_TLV_REG_EXECSRV, filename) + msg = coreapi.CoreRegMessage.pack(coreapi.CORE_API_ADD_FLAG, tlvdata) + sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) + sock.connect(("localhost", int(cfg['port']))) # TODO: connect address option + sock.sendall(msg) + return 0 + +def main(): + ''' Main program startup. + ''' + # get a configuration merged from config file and command-line arguments + cfg, args = getMergedConfig("%s/core.conf" % CORE_CONF_DIR) + for a in args: + sys.stderr.write("ignoring command line argument: '%s'\n" % a) + + if cfg['daemonize'] == 'True': + daemonize(rootdir = None, umask = 0, close_fds = False, + stdin = os.devnull, + stdout = cfg['logfile'], stderr = cfg['logfile'], + pidfilename = cfg['pidfile'], + defaultmaxfd = DEFAULT_MAXFD) + + banner() + if cfg['execfile']: + cfg['execfile'] = os.path.abspath(cfg['execfile']) + sys.exit(exec_file(cfg)) + try: + cored(cfg) + except KeyboardInterrupt: + pass + + sys.exit(0) + + +if __name__ == "__main__": + main() diff --git a/daemon/sbin/core-xen-cleanup b/daemon/sbin/core-xen-cleanup new file mode 100755 index 00000000..871de8a8 --- /dev/null +++ b/daemon/sbin/core-xen-cleanup @@ -0,0 +1,73 @@ +#!/bin/sh + +if [ "z$1" = "z-h" -o "z$1" = "z--help" ]; then + echo "usage: $0 [-d]" + echo -n " Clean up all CORE Xen domUs, bridges, interfaces, " + echo "and session\n directories. Options:" + echo " -h show this help message and exit" + echo " -d also kill the Python daemon" + exit 0 +fi + +if [ `id -u` != 0 ]; then + echo "Permission denied. Re-run this script as root." + exit 1 +fi + +PATH="/sbin:/bin:/usr/sbin:/usr/bin" +export PATH + +if [ "z$1" = "z-d" ]; then + pypids=`pidof python python2` + for p in $pypids; do + grep -q core-daemon /proc/$p/cmdline + if [ $? = 0 ]; then + echo "cleaning up core-daemon process: $p" + kill -9 $p + fi + done +fi + +mount | awk ' + /\/tmp\/pycore\./ { print "umount " $3; system("umount " $3); } +' + +domus=`xm list | awk ' + /^c.*-n.*/ { print $1; }'` +for domu in $domus +do + echo "destroy $domu" + xm destroy $domu +done + +vgs=`vgs | awk '{ print $1; }'` +for vg in $vgs +do + if [ ! -x /dev/$vg ]; then + continue + fi + echo "searching volume group: $vg" + lvs=`ls /dev/$vg/c*-n*- 2> /dev/null` + for lv in $lvs + do + echo "removing volume $lv" + kpartx -d $lv + lvchange -an $lv + lvremove $lv + done +done + +/sbin/ip link show | awk ' + /b\.ctrlnet\.[0-9]+/ {print "removing interface " $2; system("ip link set " $2 " down; brctl delbr " $2); } +' + +ls /sys/class/net | awk ' + /^b\.[0-9]+\.[0-9]+$/ {print "removing interface " $1; system("ip link set " $1 " down; brctl delbr " $1); } +' + + +ebtables -L FORWARD | awk ' + /^-.*b\./ {print "removing ebtables " $0; system("ebtables -D FORWARD " $0); print "removing ebtables chain " $4; system("ebtables -X " $4);} +' + +rm -rf /tmp/pycore* diff --git a/daemon/sbin/coresendmsg b/daemon/sbin/coresendmsg new file mode 100755 index 00000000..ebf56486 --- /dev/null +++ b/daemon/sbin/coresendmsg @@ -0,0 +1,336 @@ +#!/usr/bin/env python +# +# CORE +# Copyright (c)2011-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# authors: Jeff Ahrenholz +# +''' +coresendmsg: utility for generating CORE messages +''' + +import sys +import socket +import optparse +import os + +try: + from core.constants import * +except ImportError: + # hack for Fedora autoconf that uses the following pythondir: + if "/usr/lib/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.6/site-packages") + if "/usr/lib64/python2.6/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.6/site-packages") + if "/usr/lib/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib/python2.7/site-packages") + if "/usr/lib64/python2.7/site-packages" in sys.path: + sys.path.append("/usr/local/lib64/python2.7/site-packages") + from core.constants import * +from core.api import coreapi + + +def msgtypenum_to_str(num): + ''' Convert the message type number into a string, such as + 1 = 'CORE_API_NODE_MSG' = 'node' + ''' + fulltypestr = coreapi.message_types[num] + r = fulltypestr.split('_')[2] + return r.lower() + +def str_to_msgtypenum(s): + ''' Convert a shorthand string into a message type number. + ''' + fulltypestr = str_to_msgtypename(s) + for k, v in coreapi.message_types.iteritems(): + if v == fulltypestr: + return k + return None + +def str_to_msgtypename(s): + ''' Convert a shorthand string into a message type name. + ''' + return "CORE_API_%s_MSG" % s.upper() + +def msgflagnum_to_str(num): + ''' Convert the message flag number into a string, such as + 1 = 'CORE_API_ADD_FLAG' = add + ''' + fullflagstr = coreapi.message_flags[num] + r = fullflagstr.split('_')[2] + return r.lower() + +def str_to_msgflagname(s): + ''' Convert a shorthand string into a message flag name. + ''' + return "CORE_API_%s_FLAG" % s.upper() + +def str_to_msgflagnum(s): + flagname = str_to_msgflagname(s) + for (k, v) in coreapi.message_flags.iteritems(): + if v == flagname: + return k + return None + +def tlvname_to_str(name): + ''' Convert a TLV name such as CORE_TLV_CONF_NODE to a short sring 'node'. + ''' + items = name.split('_')[3:] + return '_'.join(items).lower() + +def tlvname_to_num(tlv_cls, name): + ''' Convert the given TLV Type class and TLV name to the TLV number. + ''' + for (k, v) in tlv_cls.tlvtypemap.iteritems(): + if v == name: + return k + return None + +def str_to_tlvname(t, s): + ''' Convert the given TLV type t and string s to a TLV name. + ''' + return "CORE_TLV_%s_%s" % (t.upper(), s.upper()) + + +def print_available_tlvs(t, tlv_cls): + ''' Print a TLV list. + ''' + print "TLVs available for %s message:" % t + for k in sorted(tlv_cls.tlvtypemap.keys()): + print "%d:%s" % (k, tlvname_to_str(tlv_cls.tlvtypemap[k])), + +def print_examples(name): + ''' Print example usage of this script. + ''' + examples = [ + ('link n1number=2 n2number=3 delay=15000', + 'set a 15ms delay on the link between n2 and n3'), + ('link n1number=2 n2number=3 guiattr=\'color=blue\'', + 'change the color of the link between n2 and n3'), + ('node number=3 xpos=125 ypos=525', + 'move node number 3 to x,y=(125,525)'), + ('node number=4 icon=/usr/local/share/core/icons/normal/router_red.gif', + 'change node number 4\'s icon to red'), + ('node flags=add number=5 type=0 name=\'n5\' xpos=500 ypos=500', + 'add a new router node n5'), + ('link flags=add n1number=4 n2number=5 if1ip4=\'10.0.3.2\' ' \ + 'if1ip4mask=24 if2ip4=\'10.0.3.1\' if2ip4mask=24', + 'link node n5 with n4 using the given interface addresses'), + ('exec flags=str,txt node=1 num=1000 cmd=\'uname -a\' -l', + 'run a command on node 1 and wait for the result'), + ('exec node=2 num=1001 cmd=\'killall ospfd\'', + 'run a command on node 2 and ignore the result'), + ('file flags=add node=1 name=\'/var/log/test.log\' data=\'Hello World.\'', + 'write a test.log file on node 1 with the given contents'), + ('file flags=add node=2 name=\'test.log\' ' \ + 'srcname=\'./test.log\'', + 'move a test.log file from host to node 2'), + ] + print "Example %s invocations:" % name + for cmd, descr in examples: + print " %s %s\n\t\t%s" % (name, cmd, descr) + +def receive_message(sock): + ''' Retrieve a message from a socket and return the CoreMessage object or + None upon disconnect. Socket data beyond the first message is dropped. + ''' + try: + # large receive buffer used for UDP sockets, instead of just receiving + # the 4-byte header + data = sock.recv(4096) + msghdr = data[:coreapi.CoreMessage.hdrsiz] + except KeyboardInterrupt: + print "CTRL+C pressed" + sys.exit(1) + if len(msghdr) == 0: + return None + msgdata = None + msgtype, msgflags, msglen = coreapi.CoreMessage.unpackhdr(msghdr) + if msglen: + msgdata = data[coreapi.CoreMessage.hdrsiz:] + try: + msgcls = coreapi.msg_class(msgtype) + except KeyError: + msg = coreapi.CoreMessage(msgflags, msghdr, msgdata) + msg.msgtype = msgtype + print "unimplemented CORE message type: %s" % msg.typestr() + return msg + if len(data) > msglen + coreapi.CoreMessage.hdrsiz: + print "received a message of type %d, dropping %d bytes of extra data" \ + % (msgtype, len(data) - (msglen + coreapi.CoreMessage.hdrsiz)) + return msgcls(msgflags, msghdr, msgdata) + + +def connect_to_session(sock, requested): + ''' Use Session Messages to retrieve the current list of sessions and + connect to the first one. + ''' + # request the session list + tlvdata = coreapi.CoreSessionTlv.pack(coreapi.CORE_TLV_SESS_NUMBER, "0") + flags = coreapi.CORE_API_STR_FLAG + smsg = coreapi.CoreSessionMessage.pack(flags, tlvdata) + sock.sendall(smsg) + print "waiting for session list..." + smsgreply = receive_message(sock) + if smsgreply is None: + print "disconnected" + return False + sessstr = smsgreply.gettlv(coreapi.CORE_TLV_SESS_NUMBER) + if sessstr is None: + print "missing session numbers" + return False + # join the first session (that is not our own connection) + (tmp, localport) = sock.getsockname() + sessions = sessstr.split('|') + sessions.remove(str(localport)) + if len(sessions) == 0: + print "no sessions to join" + return False + if not requested: + session = sessions[0] + elif requested in sessions: + session = requested + else: + print "requested session not found!" + return False + print "joining session %s..." % session + tlvdata = coreapi.CoreSessionTlv.pack(coreapi.CORE_TLV_SESS_NUMBER, session) + flags = coreapi.CORE_API_ADD_FLAG + smsg = coreapi.CoreSessionMessage.pack(flags, tlvdata) + sock.sendall(smsg) + return True + + +def receive_response(sock, opt): + ''' Receive and print a CORE message from the given socket. + ''' + print "waiting for response..." + msg = receive_message(sock) + if msg is None: + print "disconnected from %s:%s" % (opt.address, opt.port) + sys.exit(0) + print "received message:", msg + + +def main(): + ''' Parse command-line arguments to build and send a CORE message. + ''' + types = map(msgtypenum_to_str, coreapi.message_types.keys()[:-1]) + flags = map(msgflagnum_to_str, sorted(coreapi.message_flags.keys())) + usagestr = "usage: %prog [-h|-H] [options] [message-type] [flags=flags] " + usagestr += "[message-TLVs]\n\n" + usagestr += "Supported message types:\n %s\n" % types + usagestr += "Supported message flags (flags=f1,f2,...):\n %s" % flags + parser = optparse.OptionParser(usage = usagestr) + parser.set_defaults(port = coreapi.CORE_API_PORT, + address = "localhost", + session = None, + listen = False, + examples = False, + tlvs = False, + tcp = False) + + parser.add_option("-H", dest = "examples", action = "store_true", + help = "show example usage help message and exit") + parser.add_option("-p", "--port", dest = "port", type = int, + help = "TCP port to connect to, default: %d" % \ + parser.defaults['port']) + parser.add_option("-a", "--address", dest = "address", type = str, + help = "Address to connect to, default: %s" % \ + parser.defaults['address']) + parser.add_option("-s", "--session", dest = "session", type = str, + help = "Session to join, default: %s" % \ + parser.defaults['session']) + parser.add_option("-l", "--listen", dest = "listen", action = "store_true", + help = "Listen for a response message and print it.") + parser.add_option("-t", "--list-tlvs", dest = "tlvs", action = "store_true", + help = "List TLVs for the specified message type.") + parser.add_option("-T", "--tcp", dest = "tcp", action = "store_true", + help = "Use TCP instead of UDP and connect to a session" \ + ", default: %s" % parser.defaults['tcp']) + + + def usage(msg = None, err = 0): + sys.stdout.write("\n") + if msg: + sys.stdout.write(msg + "\n\n") + parser.print_help() + sys.exit(err) + + # parse command line opt + (opt, args) = parser.parse_args() + if (opt.examples): + print_examples(os.path.basename(sys.argv[0])) + sys.exit(0) + if len(args) == 0: + usage("Please specify a message type to send.") + + # given a message type t, determine the message and TLV classes + t = args.pop(0) + if t not in types: + usage("Unknown message type requested: %s" % t) + msg_cls = coreapi.msgclsmap[str_to_msgtypenum(t)] + tlv_cls = msg_cls.tlvcls + + # list TLV types for this message type + if opt.tlvs: + print_available_tlvs(t, tlv_cls) + sys.exit(0) + + # build a message consisting of TLVs from 'type=value' arguments + flagstr = "" + tlvdata = "" + for a in args: + typevalue = a.split('=') + if len(typevalue) < 2: + usage("Use 'type=value' syntax instead of '%s'." % a) + tlv_typestr = typevalue[0] + tlv_valstr = '='.join(typevalue[1:]) + if tlv_typestr == "flags": + flagstr = tlv_valstr + continue + tlv_name = str_to_tlvname(t, tlv_typestr) + tlv_type = tlvname_to_num(tlv_cls, tlv_name) + if tlv_name not in tlv_cls.tlvtypemap.values(): + usage("Unknown TLV: '%s' / %s" % (tlv_typestr, tlv_name)) + tlvdata += tlv_cls.packstring(tlv_type, tlv_valstr) + + flags = 0 + for f in flagstr.split(","): + if f == '': + continue + n = str_to_msgflagnum(f) + if n is None: + usage("Invalid flag '%s'." % f) + flags |= n + + msg = msg_cls.pack(flags, tlvdata) + + # send the message + if opt.tcp: + protocol = socket.SOCK_STREAM + else: + protocol = socket.SOCK_DGRAM + sock = socket.socket(socket.AF_INET, protocol) + sock.setblocking(True) + try: + sock.connect((opt.address, opt.port)) + except Exception, e: + print "Error connecting to %s:%s:\n\t%s" % (opt.address, opt.port, e) + sys.exit(1) + + if opt.tcp and not connect_to_session(sock, opt.session): + print "warning: continuing without joining a session!" + + sock.sendall(msg) + if opt.listen: + receive_response(sock, opt) + if opt.tcp: + sock.shutdown(socket.SHUT_RDWR) + sock.close() + sys.exit(0) + + +if __name__ == "__main__": + main() diff --git a/daemon/setup.py b/daemon/setup.py new file mode 100644 index 00000000..71ddc341 --- /dev/null +++ b/daemon/setup.py @@ -0,0 +1,46 @@ +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. + +import os, glob +from distutils.core import setup +from core.constants import COREDPY_VERSION + +# optionally pass CORE_CONF_DIR using environment variable +confdir = os.environ.get('CORE_CONF_DIR') +if confdir is None: + confdir="/etc/core" + +setup(name = "core-python", + version = COREDPY_VERSION, + packages = [ + "core", + "core.addons", + "core.api", + "core.emane", + "core.misc", + "core.bsd", + "core.netns", + "core.phys", + "core.xen", + "core.services", + ], + data_files = [("sbin", glob.glob("sbin/core*")), + (confdir, ["data/core.conf"]), + (confdir, ["data/xen.conf"]), + ("share/core/examples", ["examples/controlnet_updown"]), + ("share/core/examples", + glob.glob("examples/*.py")), + ("share/core/examples/netns", + glob.glob("examples/netns/*[py,sh]")), + ("share/core/examples/services", + glob.glob("examples/services/*")), + ("share/core/examples/myservices", + glob.glob("examples/myservices/*")), + ], + description = "Python components of CORE", + url = "http://cs.itd.nrl.navy.mil/work/core/", + author = "Boeing Research & Technology", + author_email = "core-dev@pf.itd.nrl.navy.mil", + license = "BSD", + long_description="Python scripts and modules for building virtual " \ + "emulated networks.") diff --git a/daemon/src/MANIFEST.in b/daemon/src/MANIFEST.in new file mode 100644 index 00000000..c26545b7 --- /dev/null +++ b/daemon/src/MANIFEST.in @@ -0,0 +1,2 @@ +include *.h +include sbin/* diff --git a/daemon/src/Makefile.am b/daemon/src/Makefile.am new file mode 100755 index 00000000..30ada1be --- /dev/null +++ b/daemon/src/Makefile.am @@ -0,0 +1,71 @@ +# CORE +# (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +# Makefile for building netns. +# + +AM_CFLAGS = -Wall -fno-strict-aliasing -O3 -g @libev_CFLAGS@ +# -DDEBUG + +SRC_COMMON = vnode_msg.c vnode_cmd.c vnode_chnl.c vnode_io.c \ + vnode_msg.h vnode_cmd.h vnode_chnl.h vnode_io.h \ + vnode_tlv.h myerr.h netns.h +SRC_VNODED = vnoded_main.c vnode_server.c netns.c \ + vnode_server.h +SRC_VCMD = vcmd_main.c vnode_client.c \ + vnode_client.h +SRC_NETNS = netns_main.c netns.c netns.h + +sbin_PROGRAMS = vnoded vcmd netns +vnoded_LDADD = @libev_LIBS@ +vnoded_SOURCES = ${SRC_COMMON} ${SRC_VNODED} +vcmd_LDADD = @libev_LIBS@ +vcmd_SOURCES = ${SRC_COMMON} ${SRC_VCMD} +netns_SOURCES = ${SRC_NETNS} + +# this triggers automake to run setup.py for building the Python libraries +# actual library names are netns.so and vcmd.so +# SOURCES line prevents 'make dist' from looking for a 'libnetns.c' file +noinst_LIBRARIES = libnetns.a +libnetns_a_SOURCES = netnsmodule.c vcmdmodule.c +libnetns.a: + SBINDIR=@SBINDIR@ LDFLAGS="@libev_LIBS@" CFLAGS=@libev_CFLAGS@ $(PYTHON) setup.py build + +install: install-exec-hook + +# Python libraries install +install-exec-hook: + SBINDIR=${DESTDIR}/@SBINDIR@ $(PYTHON) setup.py install --prefix=${DESTDIR}/${prefix} --install-purelib=${DESTDIR}/${pythondir} --install-platlib=${DESTDIR}/${pyexecdir} --no-compile +#python setup.py install --prefix=${DESTDIR}${PYTHON_PREFIX} + +# Python libraries uninstall +uninstall-hook: + rm -f ${sbindir}/vnoded + rm -f ${sbindir}/vcmd + rm -f ${sbindir}/netns + rm -f ${pythondir}/netns-*.egg-info + rm -f ${pythondir}/netns.so + rm -f ${pythondir}/vcmd.so + +# Python libraries cleanup +clean-local: clean-local-check +.PHONY: clean-local-check +clean-local-check: + -rm -rf build + +rpmbuild.sh: + echo SBINDIR=@SBINDIR@ CFLAGS=@libev_CFLAGS@ $(PYTHON) setup.py build > rpmbuild.sh + chmod a+x rpmbuild.sh + +rpm: rpmbuild.sh + $(PYTHON) setup.py bdist_rpm --build-script=rpmbuild.sh --requires="libev" --build-requires="libev-devel" + +# extra cruft to remove +DISTCLEANFILES = Makefile.in rpmbuild.sh MANIFEST + +# include source files for Python libraries with distribution tarball +EXTRA_DIST = setup.py MANIFEST.in + diff --git a/daemon/src/myerr.h b/daemon/src/myerr.h new file mode 100644 index 00000000..a8e2aed7 --- /dev/null +++ b/daemon/src/myerr.h @@ -0,0 +1,80 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * myerr.h + * + * Custom error printing macros. + */ + +#ifndef _MYERR_H_ +#define _MYERR_H_ + +#include +#include +#include +#include +#include +#include + +#include + +static void __myerrprintf(const char *func, const char *file, const int line, + FILE *stream, const char *fmt, ...) +{ + extern const char *__progname; + va_list ap; + pid_t pid; + struct timeval tv; + + va_start(ap, fmt); + + pid = getpid(); + if (gettimeofday(&tv, NULL)) + { + fprintf(stream, "%s[%u]: %s[%s:%d]: ", __progname, pid, func, file, line); + } + else + { + char timestr[9]; + strftime(timestr, sizeof(timestr), "%H:%M:%S", localtime(&tv.tv_sec)); + fprintf(stream, "%s[%u]: %s.%06ld %s[%s:%d]: ", + __progname, pid, timestr, tv.tv_usec, func, file, line); + } + + vfprintf(stream, fmt, ap); + fputs("\n", stream); + + va_end(ap); + + return; +} + +#define INFO(fmt, args...) \ + __myerrprintf(__func__, __FILE__, __LINE__, \ + stdout, fmt, ##args) + +#define WARNX(fmt, args...) \ + __myerrprintf(__func__, __FILE__, __LINE__, \ + stderr, fmt, ##args) + +#define WARN(fmt, args...) \ + __myerrprintf(__func__, __FILE__, __LINE__, \ + stderr, fmt ": %s", ##args, strerror(errno)) + +#define ERRX(eval, fmt, args...) \ + do { \ + WARNX(fmt, ##args); \ + exit(eval); \ + } while (0) + +#define ERR(eval, fmt, args...) \ + do { \ + WARN(fmt, ##args); \ + exit(eval); \ + } while (0) + +#endif /* _MYERR_H_ */ diff --git a/daemon/src/netns.c b/daemon/src/netns.c new file mode 100644 index 00000000..37add97c --- /dev/null +++ b/daemon/src/netns.c @@ -0,0 +1,110 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * netns.c + * + * Implements nsfork() and nsexecvp() for forking and executing processes + * within a network namespace. + * + */ + +#include +#include + +#include +#include +#include + +#include "myerr.h" +#include "netns.h" + +#define NSCLONEFLGS \ + ( \ + SIGCHLD | \ + CLONE_NEWNS | \ + CLONE_NEWUTS | \ + CLONE_NEWIPC | \ + CLONE_NEWPID | \ + CLONE_NEWNET \ + ) + +#define MOUNT_SYS_MIN_VERSION "2.6.35" + +static void nssetup(void) +{ + int r; + struct utsname uts; + + /* Taken from systemd-nspawn. Not sure why needed, but without this, + * the host system goes a bit crazy under systemd. */ + r = mount(NULL, "/", NULL, MS_SLAVE|MS_REC, NULL); + if (r) + WARN("mounting / failed"); + + /* mount per-namespace /proc */ + r = mount(NULL, "/proc", "proc", 0, NULL); + if (r) + WARN("mounting /proc failed"); + + r = uname(&uts); + if (r) + { + WARN("uname() failed"); + return; + } + + r = strncmp(uts.release, MOUNT_SYS_MIN_VERSION, + sizeof(MOUNT_SYS_MIN_VERSION) - 1); + if (r >= 0) + { + /* mount per-namespace /sys */ + r = mount(NULL, "/sys", "sysfs", 0, NULL); + if (r) + WARN("mounting /sys failed"); + } +} + +pid_t nsfork(int flags) +{ + int pid; + + pid = syscall(SYS_clone, flags | NSCLONEFLGS, NULL, NULL, NULL, NULL); + if (pid == 0) /* child */ + { + nssetup(); + } + + return pid; +} + +pid_t nsexecvp(char *argv[]) +{ + pid_t pid; + + pid = nsfork(CLONE_VFORK); + switch (pid) + { + case -1: + WARN("nsfork() failed"); + break; + + case 0: + /* child */ + execvp(argv[0], argv); + WARN("execvp() failed for '%s'", argv[0]); + _exit(1); + break; + + default: + /* parent */ + if (kill(pid, 0)) + pid = -1; + break; + } + + return pid; +} diff --git a/daemon/src/netns.h b/daemon/src/netns.h new file mode 100644 index 00000000..defec6df --- /dev/null +++ b/daemon/src/netns.h @@ -0,0 +1,20 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * netns.h + * + */ + +#ifndef _FORKNS_H_ +#define _FORKNS_H_ + +#include + +pid_t nsfork(int flags); +pid_t nsexecvp(char *argv[]); + +#endif /* _FORKNS_H_ */ diff --git a/daemon/src/netns_main.c b/daemon/src/netns_main.c new file mode 100644 index 00000000..ae323f65 --- /dev/null +++ b/daemon/src/netns_main.c @@ -0,0 +1,127 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * netns_main.c + * + * netns utility program runs the specified program with arguments in a new + * namespace. + * + */ + +#include +#include +#include +#include +#include +#include + +#include + +#include "version.h" +#include "netns.h" +#include "myerr.h" + +struct option longopts[] = +{ + {"version", no_argument, NULL, 'V'}, + {"help", no_argument, NULL, 'h'}, + { 0 } +}; + +static void usage(int status, char *fmt, ...) +{ + extern const char *__progname; + va_list ap; + FILE *output; + + va_start(ap, fmt); + + output = status ? stderr : stdout; + fprintf(output, "\n"); + if (fmt != NULL) + { + vfprintf(output, fmt, ap); + fprintf(output, "\n\n"); + } + fprintf(output, + "Usage: %s [-h|-V] [-w] -- command [args...]\n\n" + "Run the specified command in a new network namespace.\n\n" + "Options:\n" + " -h, --help show this help message and exit\n" + " -V, --version show version number and exit\n" + " -w wait for command to complete " + "(useful for interactive commands)\n", + __progname); + + va_end(ap); + + exit(status); +} + +int main(int argc, char *argv[]) +{ + pid_t pid; + int waitcmd = 0; + int status = 0; + extern const char *__progname; + + for (;;) + { + int opt; + + if ((opt = getopt_long(argc, argv, "hwV", longopts, NULL)) == -1) + break; + + switch (opt) + { + case 'w': + waitcmd++; + break; + + case 'V': + printf("%s version %s\n", __progname, CORE_VERSION); + exit(0); + + case 'h': + default: + usage(0, NULL); + } + } + + argc -= optind; + argv += optind; + + if (!argc) + usage(1, "no command given"); + + if (geteuid() != 0) + usage(1, "must be suid or run as root"); + if (setuid(0)) + ERR(1, "setuid() failed"); + + pid = nsexecvp(argv); + if (pid < 0) + ERR(1, "nsexecvp() failed"); + + printf("%d\n", pid); + + if (waitcmd) + { + if (waitpid(pid, &status, 0) == -1) + ERR(1, "waitpid() failed"); + + if (WIFEXITED(status)) + status = WEXITSTATUS(status); + else if (WIFSIGNALED(status)) + { + fprintf(stderr, "process terminated by signal %d\n", WTERMSIG(status)); + status = -1; + } + } + + exit(status); +} diff --git a/daemon/src/netnsmodule.c b/daemon/src/netnsmodule.c new file mode 100644 index 00000000..93222322 --- /dev/null +++ b/daemon/src/netnsmodule.c @@ -0,0 +1,146 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * netnsmodule.c + * + * Python module C bindings providing nsfork and nsexecvp methods for + * forking a child process into a new namespace, with nsexecvp executing a + * new program using the default search path. + * + */ + +#include + +#include +#include + +#include "netns.h" + +/* parts taken from python/trunk/Modules/posixmodule.c */ + +static void free_string_array(char **array, Py_ssize_t count) +{ + Py_ssize_t i; + + for (i = 0; i < count; i++) + PyMem_Free(array[i]); + + PyMem_DEL(array); +} + +static PyObject *netns_nsexecvp(PyObject *self, PyObject *args) +{ + pid_t pid; + char **argv; + Py_ssize_t i, argc; + PyObject *(*getitem)(PyObject *, Py_ssize_t); + + /* args should be a list or tuple of strings */ + + if (PyList_Check(args)) + { + argc = PyList_Size(args); + getitem = PyList_GetItem; + } + else if (PyTuple_Check(args)) + { + argc = PyTuple_Size(args); + getitem = PyTuple_GetItem; + } + else + { + PyErr_SetString(PyExc_TypeError, + "netns_nsexecvp() args must be a tuple or list"); + return NULL; + } + + argv = PyMem_NEW(char *, argc + 1); + if (argv == NULL) + return PyErr_NoMemory(); + + for (i = 0; i < argc; i++) + { + if (!PyArg_Parse((*getitem)(args, i), "et", + Py_FileSystemDefaultEncoding, &argv[i])) + { + free_string_array(argv, i); + PyErr_SetString(PyExc_TypeError, + "netns_nsexecvp() args must contain only strings"); + return NULL; + } + } + argv[argc] = NULL; + + pid = nsexecvp(argv); + + free_string_array(argv, argc); + + if (pid < 0) + return PyErr_SetFromErrno(PyExc_OSError); + else + return PyInt_FromLong(pid); +} + +static PyObject *netns_nsfork(PyObject *self, PyObject *args) +{ + int flags; + pid_t pid; + + if (!PyArg_ParseTuple(args, "i", &flags)) + return NULL; + + pid = nsfork(flags); + if (pid < 0) + return PyErr_SetFromErrno(PyExc_OSError); + + if (pid == 0) /* child */ + PyOS_AfterFork(); + + return PyInt_FromLong(pid); +} + +static PyMethodDef netns_methods[] = { + {"nsfork", netns_nsfork, METH_VARARGS, + "nsfork(cloneflags) -> int\n\n" + "Fork a child process into a new namespace using the Linux clone()\n" + "system call.\n\n" + "cloneflags: additional flags passed to clone()"}, + + {"nsexecvp", netns_nsexecvp, METH_VARARGS, + "nsexecvp(args...) -> int\n\n" + "Fork a child process into a new namespace using the Linux clone()\n" + "system call and have the child execute a new program using the\n" + "default search path.\n\n" + "args: the executable file name followed by command arguments"}, + + {NULL, NULL, 0, NULL}, +}; + +PyMODINIT_FUNC initnetns(void) +{ + PyObject *m; + + m = Py_InitModule("netns", netns_methods); + if (m == NULL) + return; + +#define MODADDINT(x) \ + do { \ + PyObject *tmp = Py_BuildValue("i", x); \ + if (tmp) \ + { \ + Py_INCREF(tmp); \ + PyModule_AddObject(m, #x, tmp); \ + } \ + } while (0) + + MODADDINT(CLONE_VFORK); + +#undef MODADDINT + + return; +} diff --git a/daemon/src/setup.py b/daemon/src/setup.py new file mode 100644 index 00000000..7a2bfe15 --- /dev/null +++ b/daemon/src/setup.py @@ -0,0 +1,30 @@ +# Copyright (c)2010-2012 the Boeing Company. +# See the LICENSE file included in this distribution. + +import os, glob +from distutils.core import setup, Extension + +netns = Extension("netns", sources = ["netnsmodule.c", "netns.c"]) +vcmd = Extension("vcmd", + sources = ["vcmdmodule.c", + "vnode_client.c", + "vnode_chnl.c", + "vnode_io.c", + "vnode_msg.c", + "vnode_cmd.c", + ], + library_dirs = ["build/lib"], + libraries = ["ev"]) + +setup(name = "core-python-netns", + version = "1.0", + description = "Extension modules to support virtual nodes using " \ + "Linux network namespaces", + data_files = [("sbin", ('vcmd', 'vnoded', 'netns')), ], + ext_modules = [netns, vcmd], + url = "http://cs.itd.nrl.navy.mil/work/core/", + author = "Boeing Research & Technology", + author_email = "core-dev@pf.itd.nrl.navy.mil", + license = "BSD", + long_description="Extension modules and utilities to support virtual " \ + "nodes using Linux network namespaces") diff --git a/daemon/src/vcmd_main.c b/daemon/src/vcmd_main.c new file mode 100644 index 00000000..8fe9c6eb --- /dev/null +++ b/daemon/src/vcmd_main.c @@ -0,0 +1,439 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vcmd_main.c + * + * vcmd utility program for executing programs in an existing namespace + * specified by the given channel. + * + */ + +#include +#include +#include +#include +#include +#include +#include + +#include +#include +#include + +#include "version.h" +#include "vnode_chnl.h" +#include "vnode_cmd.h" +#include "vnode_client.h" + +#include "myerr.h" + +#define FORWARD_SIGNALS +#define VCMD_DEFAULT_CMD "/bin/bash" + +int verbose; + +typedef struct { + vnode_client_t *client; + vnode_client_cmdio_t *cmdio; + int argc; + char **argv; + int cmdid; + int cmdstatus; + ev_io stdin_watcher; + int stdin_fwdfd; + ev_io ptymaster_watcher; + int ptymaster_fwdfd; +} vcmd_t; + +static vcmd_t vcmd; + +static struct termios saveattr; +static int saveattr_set; + +struct option longopts[] = +{ + {"version", no_argument, NULL, 'V'}, + {"help", no_argument, NULL, 'h'}, + { 0 } +}; + +void usage(int status, char *fmt, ...) +{ + extern const char *__progname; + va_list ap; + FILE *output; + + va_start(ap, fmt); + + output = status ? stderr : stdout; + fprintf(output, "\n"); + if (fmt != NULL) + { + vfprintf(output, fmt, ap); + fprintf(output, "\n\n"); + } + fprintf(output, + "Usage: %s [-h|-V] [-v] [-q|-i|-I] -c -- command args" + "...\n\n" + "Run the specified command in the Linux namespace container " + "specified by the \ncontrol , with the specified " + "arguments.\n\nOptions:\n" + " -h, --help show this help message and exit\n" + " -V, --version show version number and exit\n" + " -v enable verbose logging\n" + " -q run the command quietly, without local input or output\n" + " -i run the command interactively (use PTY)\n" + " -I run the command non-interactively (without PTY)\n" + " -c control channel name (e.g. '/tmp/pycore.45647/n3')\n", + __progname); + + va_end(ap); + + exit(status); +} + +static void vcmd_rwcb(struct ev_loop *loop, ev_io *w, int revents) +{ + int outfd = *(int *)w->data; + char buf[BUFSIZ]; + ssize_t rcount, wcount; + + rcount = read(w->fd, buf, sizeof(buf)); + if (rcount <= 0) + { + ev_io_stop(loop, w); + } + else + { + wcount = write(outfd, buf, rcount); + if (wcount != rcount) + WARN("write() error: wrote %d of %d bytes", wcount, rcount); + } + + return; +} + +static void vcmd_cmddonecb(int32_t cmdid, pid_t pid, int status, void *data) +{ + vcmd_t *vcmd = data; + + if (vcmd->cmdio->iotype == VCMD_IO_PTY) + { + ev_io_stop(vcmd->client->loop, &vcmd->stdin_watcher); + ev_io_stop(vcmd->client->loop, &vcmd->ptymaster_watcher); + + /* drain command output */ + for (;;) + { + char buf[BUFSIZ]; + ssize_t rcount, wcount; + + rcount = read(vcmd->ptymaster_watcher.fd, buf, sizeof(buf)); + if (rcount <= 0) + break; + + wcount = write(STDOUT_FILENO, buf, rcount); + if (wcount != rcount) + WARN("write() error: %d of %d bytes", wcount, rcount); + } + } + + vnode_close_clientcmdio(vcmd->cmdio); + +#ifdef DEBUG + WARNX("cmdid %u; pid %d; status: 0x%x", cmdid, pid, status); +#endif + + if (WIFEXITED(status)) + /* normal terminataion */ + vcmd->cmdstatus = WEXITSTATUS(status); + else if (WIFSIGNALED(status)) + { + if (verbose) + INFO("command %u terminated by signal: %d", cmdid, WTERMSIG(status)); + vcmd->cmdstatus = 255; + } + else + { + INFO("unexpected termination status for command %u: 0x%x", cmdid, status); + vcmd->cmdstatus = 255; + } + + vcmd->cmdid = -1; + + ev_unloop(vcmd->client->loop, EVUNLOOP_ALL); + + return; +} + +static void vcmd_cmdreqcb(struct ev_loop *loop, ev_timer *w, int revents) +{ + vcmd_t *vcmd = w->data; + +#ifdef DEBUG + WARNX("sending command request: serverfd %d; vcmd %p", + vcmd->client->serverfd, vcmd); +#endif + + if (vcmd->cmdio->iotype == VCMD_IO_PTY) + { + /* setup forwarding i/o */ + + vcmd->stdin_fwdfd = vcmd->cmdio->stdiopty.masterfd; + vcmd->stdin_watcher.data = &vcmd->stdin_fwdfd; + ev_io_init(&vcmd->stdin_watcher, vcmd_rwcb, STDIN_FILENO, EV_READ); + ev_io_start(loop, &vcmd->stdin_watcher); + + vcmd->ptymaster_fwdfd = STDOUT_FILENO; + vcmd->ptymaster_watcher.data = &vcmd->ptymaster_fwdfd; + ev_io_init(&vcmd->ptymaster_watcher, vcmd_rwcb, + vcmd->cmdio->stdiopty.masterfd, EV_READ); + ev_io_start(loop, &vcmd->ptymaster_watcher); + } + + vcmd->cmdid = vnode_client_cmdreq(vcmd->client, vcmd->cmdio, + vcmd_cmddonecb, vcmd, + vcmd->argc, vcmd->argv); + if (vcmd->cmdid < 0) + { + WARNX("vnode_client_cmdreq() failed"); + vnode_delclient(vcmd->client); + vcmd->client = NULL; + exit(255); + } + + return; +} + +static void vcmd_ioerrorcb(vnode_client_t *client) +{ + vcmd_t *vcmd = client->data; + + WARNX("i/o error"); + + vnode_delclient(client); + vcmd->client = NULL; + + exit(1); + + return; +} + +#ifdef FORWARD_SIGNALS +static void sighandler(int signum) +{ + if (!vcmd.client || vcmd.cmdid < 0) + return; + +#ifdef DEBUG + WARNX("sending command signal: serverfd %d; cmdid %u; signum: %d", + vcmd.client->serverfd, vcmd.cmdid, signum); +#endif + + if (vnode_send_cmdsignal(vcmd.client->serverfd, vcmd.cmdid, signum)) + WARN("vnode_send_cmdsignal() failed"); + + return; +} +#endif /* FORWARD_SIGNALS */ + +static void sigwinch_handler(int signum) +{ + struct winsize wsiz; + + if (signum != SIGWINCH) + { + WARNX("unexpected signal number: %d", signum); + return; + } + + if (!vcmd.cmdio || vcmd.cmdio->iotype != VCMD_IO_PTY) + return; + + if (ioctl(STDOUT_FILENO, TIOCGWINSZ, &wsiz)) + { + WARN("ioctl() failed"); + return; + } + + if (ioctl(vcmd.cmdio->stdiopty.masterfd, TIOCSWINSZ, &wsiz)) + WARN("ioctl() failed"); + + return; +} + +static int termioraw(int fd, struct termios *saveattr) +{ + int err; + struct termios raw = {}; + + err = tcgetattr(fd, saveattr); + if (err) + { + WARN("tcgetattr() failed"); + return err; + } + + cfmakeraw(&raw); + err = tcsetattr(fd, TCSADRAIN, &raw); + if (err) + { + WARN("tcsetattr() failed"); + return err; + } + + return 0; +} + +static void cleanup(void) +{ + if (saveattr_set) + if (tcsetattr(STDOUT_FILENO, TCSADRAIN, &saveattr)) + WARN("tcsetattr() failed"); + + return; +} + +int main(int argc, char *argv[]) +{ + char *ctrlchnlname = NULL; + vnode_client_cmdiotype_t iotype = VCMD_IO_FD; + ev_timer cmdreq; + extern const char *__progname; +#ifdef FORWARD_SIGNALS + int i; + struct sigaction sig_action = { + .sa_handler = sighandler, + }; +#endif /* FORWARD_SIGNALS */ + char *def_argv[2] = { VCMD_DEFAULT_CMD, 0 }; + + if (isatty(STDIN_FILENO) && isatty(STDOUT_FILENO) && + isatty(STDERR_FILENO) && getpgrp() == tcgetpgrp(STDOUT_FILENO)) + iotype = VCMD_IO_PTY; + + /* Parse command line argument list */ + for (;;) + { + int opt; + + if ((opt = getopt_long(argc, argv, "c:hiIqvV", longopts, NULL)) == -1) + break; + + switch (opt) + { + case 'c': + ctrlchnlname = optarg; + break; + + case 'i': + iotype = VCMD_IO_PTY; + break; + + case 'I': + iotype = VCMD_IO_FD; + break; + + case 'q': + iotype = VCMD_IO_NONE; + break; + + case 'v': + verbose++; + break; + + case 'V': + printf("%s version %s\n", __progname, CORE_VERSION); + exit(0); + + case 'h': + /* pass through */ + default: + usage(0, NULL); + } + } + + argc -= optind; + argv += optind; + + if (ctrlchnlname == NULL) + usage(1, "no control channel name given"); + + if (!argc) + { + argc = 1; + argv = def_argv; + } + + if (argc >= VNODE_ARGMAX) + usage(1, "too many command arguments"); + + if (atexit(cleanup)) + ERR(1, "atexit() failed"); + +#ifdef FORWARD_SIGNALS + for (i = 1; i < _NSIG; i++) + if (sigaction(i, &sig_action, NULL)) + if (verbose && i != SIGKILL && i != SIGSTOP) + WARN("sigaction() failed for %d", i); +#endif /* FORWARD_SIGNALS */ + + vcmd.cmdio = vnode_open_clientcmdio(iotype); + if (!vcmd.cmdio) + ERR(1, "vnode_open_clientcmdio() failed"); + + vcmd.argc = argc; + vcmd.argv = argv; + vcmd.cmdstatus = 255; + + switch (vcmd.cmdio->iotype) + { + case VCMD_IO_NONE: + break; + + case VCMD_IO_FD: + SET_STDIOFD(vcmd.cmdio, STDIN_FILENO, STDOUT_FILENO, STDERR_FILENO); + break; + + case VCMD_IO_PTY: + { + struct sigaction sigwinch_action = { + .sa_handler = sigwinch_handler, + }; + + if (sigaction(SIGWINCH, &sigwinch_action, NULL)) + WARN("sigaction() failed for SIGWINCH"); + + sigwinch_handler(SIGWINCH); + + if (termioraw(STDOUT_FILENO, &saveattr)) + WARNX("termioraw() failed"); + else + saveattr_set = 1; + } + break; + + default: + ERR(1, "unsupported i/o type: %u", vcmd.cmdio->iotype); + break; + } + + vcmd.client = vnode_client(ev_default_loop(0), ctrlchnlname, + vcmd_ioerrorcb, &vcmd); + if (!vcmd.client) + ERR(1, "vnode_client() failed"); + + cmdreq.data = &vcmd; + ev_timer_init(&cmdreq, vcmd_cmdreqcb, 0, 0); + ev_timer_start(vcmd.client->loop, &cmdreq); + + ev_loop(vcmd.client->loop, 0); + + vnode_delclient(vcmd.client); + + exit(vcmd.cmdstatus); +} diff --git a/daemon/src/vcmdmodule.c b/daemon/src/vcmdmodule.c new file mode 100644 index 00000000..dd976f91 --- /dev/null +++ b/daemon/src/vcmdmodule.c @@ -0,0 +1,875 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vcmdmodule.c + * + * C bindings for the vcmd Python module that allows a Python script to + * execute a program within a running namespace given by the specified channel. + * + */ + +#include +#include +#include +#include +#undef NDEBUG /* XXX force enabling asserts for now */ +#include + +#include "vnode_client.h" + +/* #define DEBUG */ + +int verbose; + +/* ev_default_loop(0) is not used because it interferes with SIGCHLD */ +static struct ev_loop *loop; +static pthread_t evloopthread; + +static TAILQ_HEAD(asyncreqhead, asyncreq) asyncreqlisthead; +static pthread_mutex_t asyncreqlist_mutex = PTHREAD_MUTEX_INITIALIZER; + +static int asyncpipe[2]; +static pthread_mutex_t asyncpipe_writemutex = PTHREAD_MUTEX_INITIALIZER; +static ev_io asyncwatcher; + +typedef void (*asyncfunc_t)(struct ev_loop *loop, void *data); + +typedef struct asyncreq { + TAILQ_ENTRY(asyncreq) entries; + + pthread_mutex_t mutex; + pthread_cond_t cv; + int done; + + asyncfunc_t asyncfunc; + void *data; +} vcmd_asyncreq_t; + +static void vcmd_asyncreq_cb(struct ev_loop *loop, ev_io *w, int revents) +{ + vcmd_asyncreq_t *asyncreq; + + /* drain the event pipe */ + for (;;) + { + ssize_t len; + char buf[BUFSIZ]; + + len = read(asyncpipe[0], buf, sizeof(buf)); + if (len <= 0) + { + if (len == 0) + ERR(1, "asynchronous event pipe closed"); + break; + } + } + + for (;;) + { + pthread_mutex_lock(&asyncreqlist_mutex); + asyncreq = TAILQ_FIRST(&asyncreqlisthead); + if (asyncreq) + TAILQ_REMOVE(&asyncreqlisthead, asyncreq, entries); + pthread_mutex_unlock(&asyncreqlist_mutex); + + if (!asyncreq) + break; + + assert(asyncreq->asyncfunc); + asyncreq->asyncfunc(loop, asyncreq->data); + + pthread_mutex_lock(&asyncreq->mutex); + asyncreq->done = 1; + pthread_cond_broadcast(&asyncreq->cv); + pthread_mutex_unlock(&asyncreq->mutex); + } + + return; +} + +static void call_asyncfunc(asyncfunc_t asyncfunc, void *data) +{ + vcmd_asyncreq_t asyncreq = { + .asyncfunc = asyncfunc, + .data = data, + }; + char zero = 0; + ssize_t len; + + pthread_mutex_init(&asyncreq.mutex, NULL); + pthread_cond_init(&asyncreq.cv, NULL); + + pthread_mutex_lock(&asyncreqlist_mutex); + TAILQ_INSERT_TAIL(&asyncreqlisthead, &asyncreq, entries); + pthread_mutex_unlock(&asyncreqlist_mutex); + + pthread_mutex_lock(&asyncpipe_writemutex); + len = write(asyncpipe[1], &zero, sizeof(zero)); + pthread_mutex_unlock(&asyncpipe_writemutex); + if (len == -1) + ERR(1, "write() failed"); + if (len != sizeof(zero)) + WARN("incomplete write: %d of %d", len, sizeof(zero)); + + pthread_mutex_lock(&asyncreq.mutex); +Py_BEGIN_ALLOW_THREADS + while (!asyncreq.done) + pthread_cond_wait(&asyncreq.cv, &asyncreq.mutex); +Py_END_ALLOW_THREADS + pthread_mutex_unlock(&asyncreq.mutex); + + pthread_mutex_destroy(&asyncreq.mutex); + pthread_cond_destroy(&asyncreq.cv); + + return; +} + +static void *start_evloop(void *data) +{ + struct ev_loop *loop = data; + +#ifdef DEBUG + WARNX("starting event loop: %p", loop); +#endif + + ev_loop(loop, 0); + +#ifdef DEBUG + WARNX("event loop done: %p", loop); +#endif + + return NULL; +} + +static int init_evloop(void) +{ + int err; + + loop = ev_loop_new(0); + if (!loop) + { + WARN("ev_loop_new() failed"); + return -1; + } + + TAILQ_INIT(&asyncreqlisthead); + + err = pipe(asyncpipe); + if (err) + { + WARN("pipe() failed"); + return -1; + } + set_nonblock(asyncpipe[0]); + ev_io_init(&asyncwatcher, vcmd_asyncreq_cb, asyncpipe[0], EV_READ); + ev_io_start(loop, &asyncwatcher); + + err = pthread_create(&evloopthread, NULL, start_evloop, loop); + if (err) + { + errno = err; + WARN("pthread_create() failed"); + return -1; + } + + return 0; +} + +typedef struct { + PyObject_HEAD + + int32_t _cmdid; + int _complete; + int _status; + pthread_mutex_t _mutex; + pthread_cond_t _cv; +} VCmdWait; + +static PyObject *VCmdWait_new(PyTypeObject *type, + PyObject *args, PyObject *kwds) +{ + VCmdWait *self; + +#ifdef DEBUG + WARNX("enter"); +#endif + + self = (VCmdWait *)type->tp_alloc(type, 0); + if (!self) + return NULL; + + self->_cmdid = -1; + self->_complete = 0; + self->_status = -1; + pthread_mutex_init(&self->_mutex, NULL); + pthread_cond_init(&self->_cv, NULL); + +#ifdef DEBUG + WARNX("%p: exit", self); +#endif + + return (PyObject *)self; +} + +static void VCmdWait_dealloc(VCmdWait *self) +{ +#ifdef DEBUG + WARNX("%p: enter", self); +#endif + + pthread_mutex_destroy(&self->_mutex); + pthread_cond_destroy(&self->_cv); + + self->ob_type->tp_free((PyObject *)self); + + return; +} + +static PyObject *VCmdWait_wait(VCmdWait *self) +{ + int status; + + pthread_mutex_lock(&self->_mutex); + +#ifdef DEBUG + WARNX("%p: waiting for cmd %d: complete: %d; status: %d", + self, self->_cmdid, self->_complete, self->_status); +#endif + +Py_BEGIN_ALLOW_THREADS + while (!self->_complete) + pthread_cond_wait(&self->_cv, &self->_mutex); +Py_END_ALLOW_THREADS + + status = self->_status; + + pthread_mutex_unlock(&self->_mutex); + +#ifdef DEBUG + WARNX("%p: done waiting for cmd %d: status: %d", + self, self->_cmdid, self->_status); +#endif + + return Py_BuildValue("i", status); +} + +static PyObject *VCmdWait_complete(VCmdWait *self, + PyObject *args, PyObject *kwds) +{ + if (self->_complete) + Py_RETURN_TRUE; + else + Py_RETURN_FALSE; +} + +static PyObject *VCmdWait_status(VCmdWait *self, + PyObject *args, PyObject *kwds) +{ + if (self->_complete) + return Py_BuildValue("i", self->_status); + else + Py_RETURN_NONE; +} + +static PyMemberDef VCmdWait_members[] = { + {NULL, 0, 0, 0, NULL}, +}; + +static PyMethodDef VCmdWait_methods[] = { + {"wait", (PyCFunction)VCmdWait_wait, METH_NOARGS, + "wait() -> int\n\n" + "Wait for command to complete and return exit status"}, + + {"complete", (PyCFunction)VCmdWait_complete, METH_NOARGS, + "complete() -> boolean\n\n" + "Return True if command has completed; return False otherwise."}, + + {"status", (PyCFunction)VCmdWait_status, METH_NOARGS, + "status() -> int\n\n" + "Return exit status if command has completed; return None otherwise."}, + + {NULL, NULL, 0, NULL}, +}; + +static PyTypeObject vcmd_VCmdWaitType = { + PyObject_HEAD_INIT(NULL) + .tp_name = "vcmd.VCmdWait", + .tp_basicsize = sizeof(VCmdWait), + .tp_dealloc = (destructor)VCmdWait_dealloc, + .tp_flags = Py_TPFLAGS_DEFAULT | Py_TPFLAGS_BASETYPE, + .tp_doc = "VCmdWait objects", + .tp_methods = VCmdWait_methods, + .tp_members = VCmdWait_members, + .tp_new = VCmdWait_new, +}; + + +typedef struct vcmdentry { + PyObject_HEAD + + vnode_client_t *_client; + int _client_connected; +} VCmd; + +static PyObject *VCmd_new(PyTypeObject *type, PyObject *args, PyObject *kwds) +{ + VCmd *self; + + self = (VCmd *)type->tp_alloc(type, 0); + if (!self) + return NULL; + + self->_client = NULL; + self->_client_connected = 0; + + return (PyObject *)self; +} + +static void vcmd_ioerrorcb(vnode_client_t *client) +{ + VCmd *self; + PyGILState_STATE gstate = 0; + int pythreads; + + pythreads = PyEval_ThreadsInitialized(); + if (pythreads) + gstate = PyGILState_Ensure(); + + if (verbose) + WARNX("i/o error for client %p", client); + + self = client->data; + + assert(self); + assert(self->_client == client); + + self->_client_connected = 0; + + if (pythreads) + PyGILState_Release(gstate); + + return; +} + +typedef struct { + vnode_client_t *client; + const char *ctrlchnlname; + void *data; +} vcmd_newclientreq_t; + +static void async_newclientreq(struct ev_loop *loop, void *data) +{ + vcmd_newclientreq_t *newclreq = data; + + newclreq->client = vnode_client(loop, newclreq->ctrlchnlname, + vcmd_ioerrorcb, newclreq->data); + + return; +} + +typedef struct { + vnode_client_t *client; +} vcmd_delclientreq_t; + +static void async_delclientreq(struct ev_loop *loop, void *data) +{ + vcmd_delclientreq_t *delclreq = data; + + vnode_delclient(delclreq->client); + + return; +} + +static int VCmd_init(VCmd *self, PyObject *args, PyObject *kwds) +{ + vcmd_newclientreq_t newclreq = {.data = self}; + +#ifdef DEBUG + WARNX("%p: enter", self); +#endif + + if (!loop) + if (init_evloop()) + return -1; + + if (!PyArg_ParseTuple(args, "s", &newclreq.ctrlchnlname)) + return -1; + + call_asyncfunc(async_newclientreq, &newclreq); + self->_client = newclreq.client; + if (!self->_client) + { + WARN("vnode_client() failed"); + PyErr_SetFromErrno(PyExc_OSError); + return -1; + } + + self->_client_connected = 1; + + return 0; +} + +static void VCmd_dealloc(VCmd *self) +{ +#ifdef DEBUG + WARNX("%p: enter", self); +#endif + + self->_client_connected = 0; + if (self->_client) + { + vcmd_delclientreq_t delclreq = {.client = self->_client}; + + call_asyncfunc(async_delclientreq, &delclreq); + self->_client = NULL; + } + + self->ob_type->tp_free((PyObject *)self); + + return; +} + +static PyObject *VCmd_connected(VCmd *self, PyObject *args, PyObject *kwds) +{ + if (self->_client_connected) + Py_RETURN_TRUE; + else + Py_RETURN_FALSE; +} + +static void vcmd_cmddonecb(int32_t cmdid, pid_t pid, int status, void *data) +{ + VCmdWait *cmdwait = data; + PyGILState_STATE gstate = 0; + int pythreads; + +#ifdef DEBUG + WARNX("cmdid %d; pid %d; status: 0x%x", cmdid, pid, status); + + if (WIFEXITED(status)) + WARNX("command %d terminated normally with status: %d", + cmdid, WEXITSTATUS(status)); + else if (WIFSIGNALED(status)) + WARNX("command %d terminated by signal: %d", cmdid, WTERMSIG(status)); + else + WARNX("unexpected termination status for command %d: 0x%x", cmdid, status); +#endif + +#ifdef DEBUG + WARNX("%p: waiting for lock", cmdwait); +#endif + + pthread_mutex_lock(&cmdwait->_mutex); + + cmdwait->_status = status; + cmdwait->_complete = 1; + +#ifdef DEBUG + WARNX("%p: command callback done", cmdwait); +#endif + + pthread_cond_broadcast(&cmdwait->_cv); + pthread_mutex_unlock(&cmdwait->_mutex); + + pythreads = PyEval_ThreadsInitialized(); + if (pythreads) + gstate = PyGILState_Ensure(); + + Py_DECREF(cmdwait); + + if (pythreads) + PyGILState_Release(gstate); + + return; +} + +typedef struct { + int cmdid; + vnode_client_t *client; + vnode_client_cmdio_t *clientcmdio; + void *data; + int argc; + char **argv; +} vcmd_cmdreq_t; + +static void async_cmdreq(struct ev_loop *loop, void *data) +{ + vcmd_cmdreq_t *cmdreq = data; + + cmdreq->cmdid = vnode_client_cmdreq(cmdreq->client, cmdreq->clientcmdio, + vcmd_cmddonecb, cmdreq->data, + cmdreq->argc, cmdreq->argv); + + return; +} + +static void free_string_array(char **array, Py_ssize_t count) +{ + Py_ssize_t i; + + for (i = 0; i < count; i++) + PyMem_Free(array[i]); + + PyMem_Del(array); +} + +static PyObject *_VCmd_cmd(VCmd *self, PyObject *args, PyObject *kwds, + vnode_client_cmdiotype_t iotype) +{ + int status, infd, outfd, errfd; + PyObject *cmdargs; + char **argv = NULL; + Py_ssize_t i, argc; + PyObject *(*getitem)(PyObject *, Py_ssize_t); + VCmdWait *cmdwait; + vnode_client_cmdio_t *cmdio; + PyObject *pyinfile = NULL, *pyoutfile = NULL, *pyerrfile = NULL; + PyObject *pyptyfile = NULL; + PyObject *ret; + + if (!self->_client_connected) + { + PyErr_SetString(PyExc_ValueError, "not connected"); + return NULL; + } + + if (iotype == VCMD_IO_FD) + { + char *kwlist[] = {"infd", "outfd", "errfd", "args", NULL}; + + status = PyArg_ParseTupleAndKeywords(args, kwds, "iiiO", kwlist, + &infd, &outfd, &errfd, &cmdargs); + } + else + { + char *kwlist[] = {"args", NULL}; + + status = PyArg_ParseTupleAndKeywords(args, kwds, "O", kwlist, &cmdargs); + } + + if (!status) + return NULL; + + /* cmdargs must be a list or tuple of strings */ + if (PyList_Check(cmdargs)) + { + argc = PyList_Size(cmdargs); + getitem = PyList_GetItem; + } + else if (PyTuple_Check(cmdargs)) + { + argc = PyTuple_Size(cmdargs); + getitem = PyTuple_GetItem; + } + else + { + argc = -1; + } + + if (argc <= 0) + { + PyErr_SetString(PyExc_TypeError, + "cmd arg must be a nonempty tuple or list"); + return NULL; + } + + argv = PyMem_New(char *, argc + 1); + if (argv == NULL) + return PyErr_NoMemory(); + + for (i = 0; i < argc; i++) + { + if (!PyArg_Parse((*getitem)(cmdargs, i), "et", + Py_FileSystemDefaultEncoding, &argv[i])) + { + free_string_array(argv, i); + PyErr_SetString(PyExc_TypeError, "cmd arg must contain only strings"); + return NULL; + } + } + argv[argc] = NULL; + + cmdwait = (VCmdWait *)VCmdWait_new(&vcmd_VCmdWaitType, NULL, NULL); + if (cmdwait == NULL) + { + free_string_array(argv, i); + return PyErr_NoMemory(); + } + + pthread_mutex_lock(&cmdwait->_mutex); + cmdwait->_cmdid = -1; + + cmdio = vnode_open_clientcmdio(iotype); + if (cmdio) + { + int err = 0; + vcmd_cmdreq_t cmdreq = { + .client = self->_client, + .clientcmdio = cmdio, + .data = cmdwait, + .argc = argc, + .argv = argv, + }; + +#define PYFILE(obj, fd, name, mode) \ + do { \ + FILE *tmp; \ + obj = NULL; \ + tmp = fdopen(fd, mode); \ + if (!tmp) \ + { \ + WARN("fdopen() failed for fd %d", fd); \ + break; \ + } \ + obj = PyFile_FromFile(tmp, name, mode, fclose); \ + if (!obj) \ + fclose(tmp); \ + } while(0) + + switch (iotype) + { + case VCMD_IO_NONE: + break; + + case VCMD_IO_FD: + SET_STDIOFD(cmdio, infd, outfd, errfd); + break; + + case VCMD_IO_PIPE: + PYFILE(pyinfile, cmdio->stdiopipe.infd[1], "", "wb"); + if (!pyinfile) + { + err = 1; + break; + } + PYFILE(pyoutfile, cmdio->stdiopipe.outfd[0], "", "rb"); + if (!pyoutfile) + { + PyObject_Del(pyinfile); + err = 1; + break; + } + PYFILE(pyerrfile, cmdio->stdiopipe.errfd[0], "", "rb"); + if (!pyerrfile) + { + PyObject_Del(pyoutfile); + PyObject_Del(pyinfile); + err = 1; + break; + } + break; + + case VCMD_IO_PTY: + PYFILE(pyptyfile, cmdio->stdiopty.masterfd, "/dev/ptmx", "r+b"); + if (!pyptyfile) + err = 1; + break; + + default: + if (verbose) + WARNX("invalid iotype: 0x%x", iotype); + errno = EINVAL; + err = 1; + break; + } + +#undef PYFILE + + if (!err) + { + call_asyncfunc(async_cmdreq, &cmdreq); + cmdwait->_cmdid = cmdreq.cmdid; + } + } + + free_string_array(argv, argc); + free(cmdio); + + if (cmdwait->_cmdid < 0) + { + if (pyinfile) + PyObject_Del(pyinfile); + if (pyoutfile) + PyObject_Del(pyoutfile); + if (pyerrfile) + PyObject_Del(pyerrfile); + if (pyptyfile) + PyObject_Del(pyptyfile); + + PyErr_SetFromErrno(PyExc_OSError); + pthread_mutex_unlock(&cmdwait->_mutex); + Py_DECREF(cmdwait); + return NULL; + } + + /* don't do Py_DECREF(cmdwait) or VCmdWait_dealloc(cmdwait) if + * there's an error below since cmddonecb should still get called + */ + + switch (iotype) + { + case VCMD_IO_NONE: + case VCMD_IO_FD: + ret = Py_BuildValue("O", (PyObject *)cmdwait); + break; + + case VCMD_IO_PIPE: + ret = Py_BuildValue("(OOOO)", (PyObject *)cmdwait, + pyinfile, pyoutfile, pyerrfile); + break; + + case VCMD_IO_PTY: + ret = Py_BuildValue("(OO)", (PyObject *)cmdwait, pyptyfile); + break; + + default: + ret = NULL; + break; + } + + pthread_mutex_unlock(&cmdwait->_mutex); + + return ret; +} + +static PyObject *VCmd_qcmd(VCmd *self, PyObject *args, PyObject *kwds) +{ + return _VCmd_cmd(self, args, kwds, VCMD_IO_NONE); +} + +static PyObject *VCmd_redircmd(VCmd *self, PyObject *args, PyObject *kwds) +{ + return _VCmd_cmd(self, args, kwds, VCMD_IO_FD); +} + +static PyObject *VCmd_popen(VCmd *self, PyObject *args, PyObject *kwds) +{ + return _VCmd_cmd(self, args, kwds, VCMD_IO_PIPE); +} + +static PyObject *VCmd_ptyopen(VCmd *self, PyObject *args, PyObject *kwds) +{ + return _VCmd_cmd(self, args, kwds, VCMD_IO_PTY); +} + +static PyObject *VCmd_kill(VCmd *self, PyObject *args, PyObject *kwds) +{ + VCmdWait *cmdwait; + int sig; + + if (!PyArg_ParseTuple(args, "O!i", &vcmd_VCmdWaitType, &cmdwait, &sig)) + return NULL; + + if (cmdwait->_complete) + { + PyErr_SetString(PyExc_ValueError, "command already complete"); + return NULL; + } + + if (vnode_send_cmdsignal(self->_client->serverfd, cmdwait->_cmdid, sig)) + { + PyErr_SetFromErrno(PyExc_OSError); + return NULL; + } + + Py_RETURN_NONE; +} + +static PyMemberDef VCmd_members[] = { + {NULL, 0, 0, 0, NULL}, +}; + +static PyMethodDef VCmd_methods[] = { + {"connected", (PyCFunction)VCmd_connected, METH_NOARGS, + "connected() -> boolean\n\n" + "returns True if connected; False otherwise"}, + + {"popen", (PyCFunction)VCmd_popen, METH_VARARGS | METH_KEYWORDS, + "popen(args...) -> (VCmdWait, cmdin, cmdout, cmderr)\n\n" + "Send command request and use pipe I/O.\n\n" + "args: executable file name followed by command arguments"}, + + {"ptyopen", (PyCFunction)VCmd_ptyopen, METH_VARARGS| METH_KEYWORDS, + "ptyopen(args...) -> (VCmdWait, cmdpty)\n\n" + "Send command request and use pty I/O.\n\n" + "args: executable file name followed by command arguments"}, + + {"qcmd", (PyCFunction)VCmd_qcmd, METH_VARARGS | METH_KEYWORDS, + "qcmd(args...) -> VCmdWait\n\n" + "Send command request without I/O.\n\n" + "args: executable file name followed by command arguments"}, + + {"redircmd", (PyCFunction)VCmd_redircmd, METH_VARARGS | METH_KEYWORDS, + "redircmd(infd, outfd, errfd, args...) -> VCmdWait\n\n" + "Send command request with I/O redirected from/to the given fds.\n\n" + "infd: file descriptor for command standard input\n" + "outfd: file descriptor for command standard output\n" + "errfd: file descriptor for command standard error\n" + "args: executable file name followed by command arguments"}, + + {"kill", (PyCFunction)VCmd_kill, METH_VARARGS, + "kill(cmdwait, signum) -> None\n\n" + "Send signal to a command.\n\n" + "cmdwait: the VCmdWait object from an earlier command request\n" + "signum: the signal to send"}, + + {NULL, NULL, 0, NULL}, +}; + +static PyTypeObject vcmd_VCmdType = { + PyObject_HEAD_INIT(NULL) + .tp_name = "vcmd.VCmd", + .tp_basicsize = sizeof(VCmd), + .tp_dealloc = (destructor)VCmd_dealloc, + .tp_flags = Py_TPFLAGS_DEFAULT | Py_TPFLAGS_BASETYPE, + .tp_doc = "VCmd objects", + .tp_methods = VCmd_methods, + .tp_members = VCmd_members, + .tp_init = (initproc)VCmd_init, + .tp_new = VCmd_new, +}; + +static PyObject *vcmd_verbose(PyObject *self, PyObject *args) +{ + int oldval = verbose; + + if (!PyArg_ParseTuple(args, "|i", &verbose)) + return NULL; + + return Py_BuildValue("i", oldval); +} + +static PyMethodDef vcmd_methods[] = { + {"verbose", (PyCFunction)vcmd_verbose, METH_VARARGS, + "verbose([newval]) -> int\n\n" + "Get the current verbose level and optionally set it to newval."}, + + {NULL, NULL, 0, NULL}, +}; + +PyMODINIT_FUNC initvcmd(void) +{ + PyObject *m; + + if (PyType_Ready(&vcmd_VCmdType) < 0) + return; + + if (PyType_Ready(&vcmd_VCmdWaitType) < 0) + return; + + m = Py_InitModule3("vcmd", vcmd_methods, "vcmd module that does stuff..."); + if (!m) + return; + + Py_INCREF(&vcmd_VCmdType); + PyModule_AddObject(m, "VCmd", (PyObject *)&vcmd_VCmdType); + + Py_INCREF(&vcmd_VCmdWaitType); + PyModule_AddObject(m, "VCmdWait", (PyObject *)&vcmd_VCmdWaitType); + + return; +} diff --git a/daemon/src/version.h.in b/daemon/src/version.h.in new file mode 100644 index 00000000..557b691d --- /dev/null +++ b/daemon/src/version.h.in @@ -0,0 +1,16 @@ +/* + * CORE + * Copyright (c)2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Jeff Ahrenholz + * + * version.h + * + */ +#ifndef _VERSION_H_ +#define _VERSION_H_ + +#define CORE_VERSION "@CORE_VERSION@" + +#endif /* _VERSION_H_ */ diff --git a/daemon/src/vnode_chnl.c b/daemon/src/vnode_chnl.c new file mode 100644 index 00000000..122f73b6 --- /dev/null +++ b/daemon/src/vnode_chnl.c @@ -0,0 +1,114 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vnode_chnl.c + * + * Functions for setting up a local UNIX socket to use as a control channel + * for interacting with a network namespace. + * + */ + +#include +#include +#include +#include + +#include +#include + +#include "vnode_msg.h" +#include "vnode_tlv.h" +#include "vnode_chnl.h" +#include "vnode_io.h" + +extern int verbose; + + +int vnode_connect(const char *name) +{ + int fd; + struct sockaddr_un addr; + +#ifdef DEBUG + WARNX("opening '%s'", name); +#endif + + if (strlen(name) > sizeof(addr.sun_path) - 1) + { + WARNX("name too long: '%s'", name); + return -1; + } + + if ((fd = socket(AF_UNIX, SOCK_SEQPACKET, 0)) < 0) + { + WARN("socket() failed"); + return -1; + } + + addr.sun_family = AF_UNIX; + strcpy(addr.sun_path, name); + if (connect(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0) + { + WARN("connect() failed for '%s'", name); + close(fd); + return -1; + } + + if (set_nonblock(fd)) + WARN("set_nonblock() failed for fd %d", fd); + + return fd; +} + +int vnode_listen(const char *name) +{ + int fd; + struct sockaddr_un addr; + +#ifdef DEBUG + WARNX("opening '%s'", name); +#endif + + if (strlen(name) > sizeof(addr.sun_path) - 1) + { + WARNX("name too long: '%s'", name); + return -1; + } + + if ((fd = socket(AF_UNIX, SOCK_SEQPACKET, 0)) < 0) + { + WARN("socket() failed"); + return -1; + } + + unlink(name); + addr.sun_family = AF_UNIX; + strcpy(addr.sun_path, name); + + if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0) + { + WARN("bind() failed for '%s'", name); + close(fd); + return -1; + } + + /* to override umask */ + if (chmod(name, S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP | S_IROTH | S_IWOTH)) + WARN("fchmod() failed for '%s'", name); + + if (listen(fd, 5) < 0) + { + WARN("listen() failed"); + close(fd); + return -1; + } + + if (set_nonblock(fd)) + WARN("set_nonblock() failed for fd %d", fd); + + return fd; +} diff --git a/daemon/src/vnode_chnl.h b/daemon/src/vnode_chnl.h new file mode 100644 index 00000000..fb51973e --- /dev/null +++ b/daemon/src/vnode_chnl.h @@ -0,0 +1,18 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vnode_chnl.h + * + */ + +#ifndef _VNODE_CHNL_H_ +#define _VNODE_CHNL_H_ + +int vnode_connect(const char *name); +int vnode_listen(const char *name); + +#endif /* _VNODE_CHNL_H_ */ diff --git a/daemon/src/vnode_client.c b/daemon/src/vnode_client.c new file mode 100644 index 00000000..b21c990f --- /dev/null +++ b/daemon/src/vnode_client.c @@ -0,0 +1,509 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vnode_client.c + * + * + * + */ + +#include +#include +#include +#include +#include + +#include "vnode_chnl.h" +#include "vnode_client.h" +#include "vnode_tlv.h" +#include "vnode_io.h" + + +extern int verbose; + +typedef struct { + vnode_client_cmddonecb_t cmddonecb; + void *data; +} vnode_clientcmd_t; + +vnode_client_cmdio_t *vnode_open_clientcmdio(vnode_client_cmdiotype_t iotype) +{ + int err; + vnode_client_cmdio_t *clientcmdio; + + clientcmdio = malloc(sizeof(*clientcmdio)); + if (!clientcmdio) + { + WARN("malloc() failed"); + return NULL; + } + + clientcmdio->iotype = iotype; + + switch (clientcmdio->iotype) + { + case VCMD_IO_NONE: + case VCMD_IO_FD: + err = 0; + break; + + case VCMD_IO_PIPE: + err = open_stdio_pipe(&clientcmdio->stdiopipe); + break; + + case VCMD_IO_PTY: + err = open_stdio_pty(&clientcmdio->stdiopty); + break; + + default: + WARNX("unknown i/o type: %u", clientcmdio->iotype); + err = -1; + break; + } + + if (err) + { + free(clientcmdio); + clientcmdio = NULL; + } + + return clientcmdio; +} + +void vnode_close_clientcmdio(vnode_client_cmdio_t *clientcmdio) +{ + switch (clientcmdio->iotype) + { + case VCMD_IO_NONE: + case VCMD_IO_FD: + break; + + case VCMD_IO_PIPE: + close_stdio_pipe(&clientcmdio->stdiopipe); + break; + + case VCMD_IO_PTY: + close_stdio_pty(&clientcmdio->stdiopty); + break; + + default: + WARNX("unknown i/o type: %u", clientcmdio->iotype); + break; + } + + memset(clientcmdio, 0, sizeof(*clientcmdio)); + free(clientcmdio); + + return; +} + +static void vnode_client_cmddone(vnode_cmdentry_t *cmd) +{ + vnode_clientcmd_t *clientcmd = cmd->data;; + + if (clientcmd->cmddonecb) + clientcmd->cmddonecb(cmd->cmdid, cmd->pid, cmd->status, clientcmd->data); + + memset(clientcmd, 0, sizeof(*clientcmd)); + free(clientcmd); + + memset(cmd, 0, sizeof(*cmd)); + free(cmd); + + return; +} + +static int tlv_cmdreqack_cmdid(vnode_tlv_t *tlv, void *data) +{ + vnode_cmdreqack_t *cmdreqack = data; + int tmp; + + assert(tlv->type == VNODE_TLV_CMDID); + + tmp = tlv_int32(&cmdreqack->cmdid, tlv); + + if (tmp == 0 && verbose) + INFO("VNODE_TLV_CMDID: %d", cmdreqack->cmdid); + + return tmp; +} + +static int tlv_cmdreqack_cmdpid(vnode_tlv_t *tlv, void *data) +{ + vnode_cmdreqack_t *cmdreqack = data; + int tmp; + + assert(tlv->type == VNODE_TLV_CMDPID); + + tmp = tlv_int32(&cmdreqack->pid, tlv); + + if (tmp == 0 && verbose) + INFO("VNODE_TLV_CMDPID: %d", cmdreqack->pid); + + return tmp; +} + +static void vnode_clientrecv_cmdreqack(vnode_msgio_t *msgio) +{ + vnode_cmdentry_t *cmd; + vnode_client_t *client = msgio->data; + vnode_cmdreqack_t cmdreqack = CMDREQACK_INIT; + static const vnode_tlvhandler_t tlvhandler[VNODE_TLV_MAX] = { + [VNODE_TLV_CMDID] = tlv_cmdreqack_cmdid, + [VNODE_TLV_CMDPID] = tlv_cmdreqack_cmdpid, + }; + +#ifdef DEBUG + WARNX("command request ack"); +#endif + + assert(msgio->msgbuf.msg->hdr.type == VNODE_MSG_CMDREQACK); + + if (vnode_parsemsg(msgio->msgbuf.msg, &cmdreqack, tlvhandler)) + return; + + TAILQ_FOREACH(cmd, &client->cmdlisthead, entries) + if (cmd->cmdid == cmdreqack.cmdid) + break; + + if (cmd == NULL) + { + WARNX("cmdid %d not found in command list", cmdreqack.cmdid); + return; + } + +#ifdef DEBUG + WARNX("cmdid %d found in cmd list", cmdreqack.cmdid); +#endif + + cmd->pid = cmdreqack.pid; + + if (cmdreqack.pid == -1) + { +#ifdef DEBUG + WARNX("XXX pid == -1 removing cmd from list"); +#endif + TAILQ_REMOVE(&client->cmdlisthead, cmd, entries); + + cmd->status = -1; + vnode_client_cmddone(cmd); + + return; + } + + return; +} + +static int tlv_cmdstatus_cmdid(vnode_tlv_t *tlv, void *data) +{ + vnode_cmdstatus_t *cmdstatus = data; + int tmp; + + assert(tlv->type == VNODE_TLV_CMDID); + + tmp = tlv_int32(&cmdstatus->cmdid, tlv); + + if (tmp == 0 && verbose) + INFO("VNODE_TLV_CMDID: %d", cmdstatus->cmdid); + + return tmp; +} + +static int tlv_cmdstatus_status(vnode_tlv_t *tlv, void *data) +{ + vnode_cmdstatus_t *cmdstatus = data; + int tmp; + + assert(tlv->type == VNODE_TLV_CMDSTATUS); + + tmp = tlv_int32(&cmdstatus->status, tlv); + + if (tmp == 0 && verbose) + INFO("VNODE_TLV_CMDSTATUS: %d", cmdstatus->status); + + return tmp; +} + +static void vnode_clientrecv_cmdstatus(vnode_msgio_t *msgio) +{ + vnode_cmdentry_t *cmd; + vnode_client_t *client = msgio->data; + vnode_cmdstatus_t cmdstatus = CMDSTATUS_INIT; + static const vnode_tlvhandler_t tlvhandler[VNODE_TLV_MAX] = { + [VNODE_TLV_CMDID] = tlv_cmdstatus_cmdid, + [VNODE_TLV_CMDSTATUS] = tlv_cmdstatus_status, + }; + +#ifdef DEBUG + WARNX("command status"); +#endif + + assert(msgio->msgbuf.msg->hdr.type == VNODE_MSG_CMDSTATUS); + + if (vnode_parsemsg(msgio->msgbuf.msg, &cmdstatus, tlvhandler)) + return; + + TAILQ_FOREACH(cmd, &client->cmdlisthead, entries) + if (cmd->cmdid == cmdstatus.cmdid) + break; + + if (cmd == NULL) + { + WARNX("cmdid %d not found in command list", cmdstatus.cmdid); + return; + } + +#ifdef DEBUG + WARNX("cmdid %d found in cmd list; removing", cmdstatus.cmdid); +#endif + TAILQ_REMOVE(&client->cmdlisthead, cmd, entries); + + cmd->status = cmdstatus.status; + vnode_client_cmddone(cmd); + + return; +} + +static void server_ioerror(vnode_msgio_t *msgio) +{ + vnode_client_t *client = msgio->data; + +#ifdef DEBUG + WARNX("i/o error on fd %d; client: %p", msgio->fd, client); +#endif + + if (client) + { + assert(msgio == &client->msgio); + if (client->ioerrorcb) + client->ioerrorcb(client); + } + + return; +} + +vnode_client_t *vnode_client(struct ev_loop *loop, const char *ctrlchnlname, + vnode_clientcb_t ioerrorcb, void *data) +{ + int fd = -1; + vnode_client_t *client; + static const vnode_msghandler_t msghandler[VNODE_MSG_MAX] = { + [VNODE_MSG_CMDREQACK] = vnode_clientrecv_cmdreqack, + [VNODE_MSG_CMDSTATUS] = vnode_clientrecv_cmdstatus, + }; + + if (!ioerrorcb) + { + WARNX("no i/o error callback given"); + return NULL; + } + + fd = vnode_connect(ctrlchnlname); + if (fd < 0) + { + WARN("vnode_connect() failed for '%s'", ctrlchnlname); + return NULL; + } + + if ((client = calloc(1, sizeof(*client))) == NULL) + { + WARN("calloc() failed"); + close(fd); + return NULL; + } + + TAILQ_INIT(&client->cmdlisthead); + client->loop = loop; + client->serverfd = fd; + client->ioerrorcb = ioerrorcb; + client->data = data; + + if (vnode_msgiostart(&client->msgio, client->loop, + client->serverfd, client, server_ioerror, msghandler)) + { + WARNX("vnode_msgiostart() failed"); + close(fd); + return NULL; + } + +#ifdef DEBUG + WARNX("new client connected to %s: %p", ctrlchnlname, client); +#endif + + return client; +} + +void vnode_delclient(vnode_client_t *client) +{ +#ifdef DEBUG + WARNX("deleting client: %p", client); +#endif + + vnode_msgiostop(&client->msgio); + if (client->serverfd >= 0) + { + close(client->serverfd); + client->serverfd = -1; + } + + while (!TAILQ_EMPTY(&client->cmdlisthead)) + { + vnode_cmdentry_t *cmd; + + cmd = TAILQ_FIRST(&client->cmdlisthead); + TAILQ_REMOVE(&client->cmdlisthead, cmd, entries); + + cmd->status = -1; + vnode_client_cmddone(cmd); + } + + /* XXX more stuff ?? */ + + memset(client, 0, sizeof(*client)); + free(client); + + return; +} + +static int vnode_setcmdio(int *cmdin, int *cmdout, int *cmderr, + vnode_client_cmdio_t *clientcmdio) +{ + switch (clientcmdio->iotype) + { + case VCMD_IO_NONE: + *cmdin = -1; + *cmdout = -1; + *cmderr = -1; + break; + + case VCMD_IO_FD: + *cmdin = clientcmdio->stdiofd.infd; + *cmdout = clientcmdio->stdiofd.outfd; + *cmderr = clientcmdio->stdiofd.errfd; + break; + + case VCMD_IO_PIPE: + *cmdin = clientcmdio->stdiopipe.infd[0]; + *cmdout = clientcmdio->stdiopipe.outfd[1]; + *cmderr = clientcmdio->stdiopipe.errfd[1]; + break; + + case VCMD_IO_PTY: + *cmdin = clientcmdio->stdiopty.slavefd; + *cmdout = clientcmdio->stdiopty.slavefd; + *cmderr = clientcmdio->stdiopty.slavefd; + break; + + default: + WARNX("unknown i/o type: %u", clientcmdio->iotype); + return -1; + } + + return 0; +} + +static void vnode_cleanupcmdio(vnode_client_cmdio_t *clientcmdio) +{ +#define CLOSE(var) \ + do { \ + if (var >= 0) \ + close(var); \ + var = -1; \ + } while (0) + + switch (clientcmdio->iotype) + { + case VCMD_IO_NONE: + case VCMD_IO_FD: + break; + + case VCMD_IO_PIPE: + CLOSE(clientcmdio->stdiopipe.infd[0]); + CLOSE(clientcmdio->stdiopipe.outfd[1]); + CLOSE(clientcmdio->stdiopipe.errfd[1]); + break; + + case VCMD_IO_PTY: + CLOSE(clientcmdio->stdiopty.slavefd); + break; + + default: + WARNX("unknown i/o type: %u", clientcmdio->iotype); + break; + } + +#undef CLOSE + + return; +} + +int vnode_client_cmdreq(vnode_client_t *client, + vnode_client_cmdio_t *clientcmdio, + vnode_client_cmddonecb_t cmddonecb, void *data, + int argc, char *argv[]) +{ + int cmdin, cmdout, cmderr; + vnode_clientcmd_t *clientcmd; + vnode_cmdentry_t *cmd; + + if (argc >= VNODE_ARGMAX) + { + WARNX("too many command arguments"); + return -1; + } + + if (argv[argc] != NULL) + { + WARNX("command arguments not null-terminated"); + return -1; + } + + if (vnode_setcmdio(&cmdin, &cmdout, &cmderr, clientcmdio)) + { + WARNX("vnode_setcmdio() failed"); + return -1; + } + + if ((clientcmd = malloc(sizeof(*clientcmd))) == NULL) + { + WARN("malloc() failed"); + return -1; + } + + clientcmd->cmddonecb = cmddonecb; + clientcmd->data = data; + + if ((cmd = malloc(sizeof(*cmd))) == NULL) + { + WARN("malloc() failed"); + free(clientcmd); + return -1; + } + + if (client->cmdid < 0) + client->cmdid = 0; + cmd->cmdid = client->cmdid++; + cmd->pid = -1; + cmd->status = -1; + cmd->data = clientcmd; + + TAILQ_INSERT_TAIL(&client->cmdlisthead, cmd, entries); + + if (vnode_send_cmdreq(client->serverfd, cmd->cmdid, + argv, cmdin, cmdout, cmderr)) + { + WARN("vnode_send_cmdreq() failed"); + TAILQ_REMOVE(&client->cmdlisthead, cmd, entries); + free(clientcmd); + free(cmd); + return -1; + } + + vnode_cleanupcmdio(clientcmdio); + + return cmd->cmdid; +} diff --git a/daemon/src/vnode_client.h b/daemon/src/vnode_client.h new file mode 100644 index 00000000..607f1199 --- /dev/null +++ b/daemon/src/vnode_client.h @@ -0,0 +1,77 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vnode_client.h + * + */ + +#ifndef _VNODE_CLIENT_H_ +#define _VNODE_CLIENT_H_ + +#include +#include + +#include "vnode_msg.h" +#include "vnode_cmd.h" +#include "vnode_io.h" + +struct vnode_client; +typedef void (*vnode_clientcb_t)(struct vnode_client *client); + +typedef struct vnode_client { + TAILQ_HEAD(cmdlist, cmdentry) cmdlisthead; + + struct ev_loop *loop; + int serverfd; + struct vnode_msgio msgio; + void *data; + + vnode_clientcb_t ioerrorcb; + + int32_t cmdid; +} vnode_client_t; + +typedef void (*vnode_client_cmddonecb_t)(int32_t cmdid, pid_t pid, + int status, void *data); + +typedef enum { + VCMD_IO_NONE = 0, + VCMD_IO_FD, + VCMD_IO_PIPE, + VCMD_IO_PTY, +} vnode_client_cmdiotype_t; + +typedef struct { + vnode_client_cmdiotype_t iotype; + union { + stdio_fd_t stdiofd; + stdio_pipe_t stdiopipe; + stdio_pty_t stdiopty; + }; +} vnode_client_cmdio_t; + +#define SET_STDIOFD(clcmdio, ifd, ofd, efd) \ + do { \ + (clcmdio)->iotype = VCMD_IO_FD; \ + (clcmdio)->stdiofd.infd = (ifd); \ + (clcmdio)->stdiofd.outfd = (ofd); \ + (clcmdio)->stdiofd.errfd = (efd); \ + } while (0) + +vnode_client_t *vnode_client(struct ev_loop *loop, const char *ctrlchnlname, + vnode_clientcb_t ioerrorcb, void *data); +void vnode_delclient(vnode_client_t *client); + +vnode_client_cmdio_t *vnode_open_clientcmdio(vnode_client_cmdiotype_t iotype); +void vnode_close_clientcmdio(vnode_client_cmdio_t *clientcmdio); + +int vnode_client_cmdreq(vnode_client_t *client, + vnode_client_cmdio_t *clientcmdio, + vnode_client_cmddonecb_t cmddonecb, void *data, + int argc, char *argv[]); + +#endif /* _VNODE_CLIENT_H_ */ diff --git a/daemon/src/vnode_cmd.c b/daemon/src/vnode_cmd.c new file mode 100644 index 00000000..088dfc03 --- /dev/null +++ b/daemon/src/vnode_cmd.c @@ -0,0 +1,483 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vnode_cmd.c + * + */ + +#include +#include +#include + +#include +#include + +#include "myerr.h" +#include "vnode_msg.h" +#include "vnode_server.h" +#include "vnode_tlv.h" +#include "vnode_io.h" + +#include "vnode_cmd.h" + +extern int verbose; + +static void vnode_process_cmdreq(vnode_cliententry_t *client, + vnode_cmdreq_t *cmdreq); + +static int tlv_cmdreq_cmdid(vnode_tlv_t *tlv, void *data) +{ + vnode_cmdreq_t *cmdreq = data; + int tmp; + + assert(tlv->type == VNODE_TLV_CMDID); + + tmp = tlv_int32(&cmdreq->cmdid, tlv); + + if (tmp == 0 && verbose) + INFO("VNODE_TLV_CMDID: %u", cmdreq->cmdid); + + return tmp; +} + +static int tlv_cmdreq_cmdarg(vnode_tlv_t *tlv, void *data) +{ + vnode_cmdreq_t *cmdreq = data; + int i, tmp; + + assert(tlv->type == VNODE_TLV_CMDARG); + +#define CMDARGMAX (sizeof(cmdreq->cmdarg) / sizeof(cmdreq->cmdarg[0])) + + for (i = 0; i < CMDARGMAX; i++) + if (cmdreq->cmdarg[i] == NULL) + break; + + if (i == CMDARGMAX) + { + WARNX("too many command arguments"); + return -1; + } + +#undef CMDARGMAX + + tmp = tlv_string(&cmdreq->cmdarg[i], tlv); + + if (tmp == 0 && verbose) + INFO("VNODE_TLV_CMDARG: '%s'", cmdreq->cmdarg[i]); + + return tmp; +} + +void vnode_recv_cmdreq(vnode_msgio_t *msgio) +{ + vnode_cliententry_t *client = msgio->data; + vnode_cmdreq_t cmdreq = CMDREQ_INIT; + static vnode_tlvhandler_t cmdreq_tlvhandler[VNODE_TLV_MAX] = { + [VNODE_TLV_CMDID] = tlv_cmdreq_cmdid, + [VNODE_TLV_CMDARG] = tlv_cmdreq_cmdarg, + }; + +#ifdef DEBUG + WARNX("command request"); +#endif + + assert(msgio->msgbuf.msg->hdr.type == VNODE_MSG_CMDREQ); + + if (vnode_parsemsg(msgio->msgbuf.msg, &cmdreq, cmdreq_tlvhandler)) + return; + + cmdreq.cmdio.infd = msgio->msgbuf.infd; + cmdreq.cmdio.outfd = msgio->msgbuf.outfd; + cmdreq.cmdio.errfd = msgio->msgbuf.errfd; + + vnode_process_cmdreq(client, &cmdreq); + + return; +} + +int vnode_send_cmdreq(int fd, int32_t cmdid, char *argv[], + int infd, int outfd, int errfd) +{ + size_t offset = 0; + vnode_msgbuf_t msgbuf; + char **cmdarg; + int tmp; + + if (vnode_initmsgbuf(&msgbuf)) + return -1; + +#define ADDTLV(t, l, vp) \ + do { \ + ssize_t tlvlen; \ + tlvlen = vnode_addtlv(&msgbuf, offset, t, l, vp); \ + if (tlvlen < 0) \ + { \ + WARNX("vnode_addtlv() failed"); \ + FREE_MSGBUF(&msgbuf); \ + return -1; \ + } \ + offset += tlvlen; \ + } while (0) + + ADDTLV(VNODE_TLV_CMDID, sizeof(cmdid), &cmdid); + + for (cmdarg = argv; *cmdarg; cmdarg++) + ADDTLV(VNODE_TLV_CMDARG, strlen(*cmdarg) + 1, *cmdarg); + +#undef ADDTLV + + msgbuf.infd = infd; + msgbuf.outfd = outfd; + msgbuf.errfd = errfd; + +#ifdef DEBUG + WARNX("sending cmd req on fd %d: cmd '%s'", fd, argv[0]); +#endif + + msgbuf.msg->hdr.type = VNODE_MSG_CMDREQ; + msgbuf.msg->hdr.datalen = offset; + if (vnode_sendmsg(fd, &msgbuf) == vnode_msglen(&msgbuf)) + tmp = 0; + else + tmp = -1; + + FREE_MSGBUF(&msgbuf); + + return tmp; +} + +int vnode_send_cmdreqack(int fd, int32_t cmdid, int32_t pid) +{ + ssize_t tmp = -1; + size_t offset = 0; + vnode_msgbuf_t msgbuf; + + if (vnode_initmsgbuf(&msgbuf)) + return -1; + +#define ADDTLV(t, l, vp) \ + do { \ + ssize_t tlvlen; \ + tlvlen = vnode_addtlv(&msgbuf, offset, t, l, vp); \ + if (tlvlen < 0) \ + { \ + WARNX("vnode_addtlv() failed"); \ + FREE_MSGBUF(&msgbuf); \ + return -1; \ + } \ + offset += tlvlen; \ + } while (0) + + ADDTLV(VNODE_TLV_CMDID, sizeof(cmdid), &cmdid); + ADDTLV(VNODE_TLV_CMDPID, sizeof(pid), &pid); + +#undef ADDTLV + +#ifdef DEBUG + WARNX("sending cmd req ack on fd %d: cmdid %d; pid %d", fd, cmdid, pid); +#endif + + msgbuf.msg->hdr.type = VNODE_MSG_CMDREQACK; + msgbuf.msg->hdr.datalen = offset; + if (vnode_sendmsg(fd, &msgbuf) == vnode_msglen(&msgbuf)) + tmp = 0; + + FREE_MSGBUF(&msgbuf); + + return tmp; +} + +int vnode_send_cmdstatus(int fd, int32_t cmdid, int32_t status) +{ + int tmp; + size_t offset = 0; + vnode_msgbuf_t msgbuf; + + if (vnode_initmsgbuf(&msgbuf)) + return -1; + +#define ADDTLV(t, l, vp) \ + do { \ + ssize_t tlvlen; \ + tlvlen = vnode_addtlv(&msgbuf, offset, t, l, vp); \ + if (tlvlen < 0) \ + { \ + WARNX("vnode_addtlv() failed"); \ + FREE_MSGBUF(&msgbuf); \ + return -1; \ + } \ + offset += tlvlen; \ + } while (0) + + ADDTLV(VNODE_TLV_CMDID, sizeof(cmdid), &cmdid); + ADDTLV(VNODE_TLV_CMDSTATUS, sizeof(status), &status); + +#undef ADDTLV + +#ifdef DEBUG + WARNX("sending cmd status on fd %d: cmdid %d; status %d", + fd, cmdid, status); +#endif + + msgbuf.msg->hdr.type = VNODE_MSG_CMDSTATUS; + msgbuf.msg->hdr.datalen = offset; + if (vnode_sendmsg(fd, &msgbuf) == vnode_msglen(&msgbuf)) + tmp = 0; + else + tmp = -1; + + FREE_MSGBUF(&msgbuf); + + return tmp; +} + +int vnode_send_cmdsignal(int fd, int32_t cmdid, int32_t signum) +{ + ssize_t tmp; + size_t offset = 0; + vnode_msgbuf_t msgbuf; + + if (vnode_initmsgbuf(&msgbuf)) + return -1; + +#define ADDTLV(t, l, vp) \ + do { \ + ssize_t tlvlen; \ + tlvlen = vnode_addtlv(&msgbuf, offset, t, l, vp); \ + if (tlvlen < 0) \ + { \ + WARNX("vnode_addtlv() failed"); \ + FREE_MSGBUF(&msgbuf); \ + return -1; \ + } \ + offset += tlvlen; \ + } while (0) + + ADDTLV(VNODE_TLV_CMDID, sizeof(cmdid), &cmdid); + ADDTLV(VNODE_TLV_SIGNUM, sizeof(signum), &signum); + +#undef ADDTLV + +#ifdef DEBUG + WARNX("sending cmd signal on fd %d: cmdid %d; signum %d", + fd, cmdid, signum); +#endif + + msgbuf.msg->hdr.type = VNODE_MSG_CMDSIGNAL; + msgbuf.msg->hdr.datalen = offset; + if (vnode_sendmsg(fd, &msgbuf) == vnode_msglen(&msgbuf)) + tmp = 0; + else + tmp = -1; + + FREE_MSGBUF(&msgbuf); + + return tmp; +} + +static int tlv_cmdsignal_cmdid(vnode_tlv_t *tlv, void *data) +{ + vnode_cmdsignal_t *cmdsignal = data; + int tmp; + + assert(tlv->type == VNODE_TLV_CMDID); + + tmp = tlv_int32(&cmdsignal->cmdid, tlv); + + if (tmp == 0 && verbose) + INFO("VNODE_TLV_CMDID: %d", cmdsignal->cmdid); + + return tmp; +} + +static int tlv_cmdsignal_signum(vnode_tlv_t *tlv, void *data) +{ + vnode_cmdsignal_t *cmdsignal = data; + int tmp; + + assert(tlv->type == VNODE_TLV_SIGNUM); + + tmp = tlv_int32(&cmdsignal->signum, tlv); + + if (tmp == 0 && verbose) + INFO("VNODE_TLV_SIGNUM: %d", cmdsignal->signum); + + return tmp; +} + +void vnode_recv_cmdsignal(vnode_msgio_t *msgio) +{ + vnode_cliententry_t *client = msgio->data; + vnode_cmdsignal_t cmdsignal = CMDSIGNAL_INIT; + static vnode_tlvhandler_t cmdsignal_tlvhandler[VNODE_TLV_MAX] = { + [VNODE_TLV_CMDID] = tlv_cmdsignal_cmdid, + [VNODE_TLV_SIGNUM] = tlv_cmdsignal_signum, + }; + vnode_cmdentry_t *cmd; + +#ifdef DEBUG + WARNX("command signal"); +#endif + + assert(msgio->msgbuf.msg->hdr.type == VNODE_MSG_CMDSIGNAL); + + if (vnode_parsemsg(msgio->msgbuf.msg, &cmdsignal, cmdsignal_tlvhandler)) + return; + + + TAILQ_FOREACH(cmd, &client->server->cmdlisthead, entries) + { + if (cmd->cmdid == cmdsignal.cmdid && cmd->data == client) + { + if (verbose) + INFO("sending pid %u signal %u", cmd->pid, cmdsignal.signum); + + if (kill(cmd->pid, cmdsignal.signum)) + WARN("kill() failed"); + + break; + } + } + + if (cmd == NULL) + WARNX("cmdid %d not found for client %p", cmdsignal.cmdid, client); + + return; +} + +static pid_t forkexec(vnode_cmdreq_t *cmdreq) +{ + pid_t pid; + + if (verbose) + INFO("spawning '%s'", cmdreq->cmdarg[0]); + + pid = fork(); + switch (pid) + { + case -1: + WARN("fork() failed"); + break; + + case 0: + /* child */ + if (setsid() == -1) + WARN("setsid() failed"); + +#define DUP2(oldfd, newfd) \ + do { \ + if (oldfd >= 0) \ + if (dup2(oldfd, newfd) < 0) \ + { \ + WARN("dup2() failed for " #newfd \ + ": oldfd: %d; newfd: %d", \ + oldfd, newfd); \ + _exit(1); \ + } \ + } while (0) + + DUP2(cmdreq->cmdio.infd, STDIN_FILENO); + DUP2(cmdreq->cmdio.outfd, STDOUT_FILENO); + DUP2(cmdreq->cmdio.errfd, STDERR_FILENO); + +#undef DUP2 + +#define CLOSE_IF_NOT(fd, notfd) \ + do { \ + if (fd >= 0 && fd != notfd) \ + close(fd); \ + } while (0) + + CLOSE_IF_NOT(cmdreq->cmdio.infd, STDIN_FILENO); + CLOSE_IF_NOT(cmdreq->cmdio.outfd, STDOUT_FILENO); + CLOSE_IF_NOT(cmdreq->cmdio.errfd, STDERR_FILENO); + +#undef CLOSE_IF_NOT + + if (clear_nonblock(STDIN_FILENO)) + WARN("clear_nonblock() failed"); + if (clear_nonblock(STDOUT_FILENO)) + WARN("clear_nonblock() failed"); + if (clear_nonblock(STDERR_FILENO)) + WARN("clear_nonblock() failed"); + + /* try to get a controlling terminal (don't steal a terminal and + ignore errors) */ + if (isatty(STDIN_FILENO)) + ioctl(STDIN_FILENO, TIOCSCTTY, 0); + else if (isatty(STDOUT_FILENO)) + ioctl(STDOUT_FILENO, TIOCSCTTY, 0); + + execvp(cmdreq->cmdarg[0], cmdreq->cmdarg); + WARN("execvp() failed for '%s'", cmdreq->cmdarg[0]); + _exit(1); + break; + + default: + /* parent */ + break; + } + +#define CLOSE(fd) \ + do { \ + if (fd >= 0) \ + close(fd); \ + } while (0) + + CLOSE(cmdreq->cmdio.infd); + CLOSE(cmdreq->cmdio.outfd); + CLOSE(cmdreq->cmdio.errfd); + +#undef CLOSE + + return pid; +} + +static void vnode_process_cmdreq(vnode_cliententry_t *client, + vnode_cmdreq_t *cmdreq) +{ + vnode_cmdentry_t *cmd = NULL; + + if ((cmd = malloc(sizeof(*cmd))) == NULL) + { + WARN("malloc() failed"); + return; + } + + cmd->cmdid = cmdreq->cmdid; + cmd->pid = -1; + cmd->status = -1; + cmd->data = client; + cmd->pid = forkexec(cmdreq); + + if (verbose) + INFO("cmd: '%s'; pid: %d; cmdid: %d; " + "infd: %d; outfd: %d; errfd: %d", + cmdreq->cmdarg[0], cmd->pid, cmd->cmdid, + cmdreq->cmdio.infd, cmdreq->cmdio.outfd, cmdreq->cmdio.errfd); + + if (vnode_send_cmdreqack(client->clientfd, cmd->cmdid, cmd->pid)) + { + WARNX("vnode_send_cmdreqack() failed"); + // XXX if (cmd->pid != -1) kill(cmd->pid, SIGKILL); ? + free(cmd); + return; + } + + if (cmd->pid == -1) + free(cmd); + else + { +#ifdef DEBUG + WARNX("adding pid %d to cmd list", cmd->pid); +#endif + TAILQ_INSERT_TAIL(&client->server->cmdlisthead, cmd, entries); + } + + return; +} diff --git a/daemon/src/vnode_cmd.h b/daemon/src/vnode_cmd.h new file mode 100644 index 00000000..1c947e00 --- /dev/null +++ b/daemon/src/vnode_cmd.h @@ -0,0 +1,71 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vnode_cmd.h + * + */ + +#ifndef _VNODE_CMD_H_ +#define _VNODE_CMD_H_ + +#include +#include + +#include "vnode_msg.h" + +typedef struct { + int infd; + int outfd; + int errfd; +} vnode_cmdio_t; + +typedef struct { + int32_t cmdid; + vnode_cmdio_t cmdio; + char *cmdarg[VNODE_ARGMAX]; +} vnode_cmdreq_t; + +#define CMDREQ_INIT {} + +typedef struct { + int32_t cmdid; + int32_t pid; +} vnode_cmdreqack_t; + +#define CMDREQACK_INIT {.cmdid = 0, .pid = -1} + +typedef struct { + int32_t cmdid; + int32_t status; +} vnode_cmdstatus_t; + +#define CMDSTATUS_INIT {.cmdid = 0, .status = -1} + +typedef struct { + int32_t cmdid; + int32_t signum; +} vnode_cmdsignal_t; + +#define CMDSIGNAL_INIT {.cmdid = 0, .signum = 0} + +typedef struct cmdentry { + TAILQ_ENTRY(cmdentry) entries; + + int32_t cmdid; + pid_t pid; + int status; + void *data; +} vnode_cmdentry_t; + +void vnode_recv_cmdreq(vnode_msgio_t *msgio); +int vnode_send_cmdreq(int fd, int32_t cmdid, char *argv[], + int infd, int outfd, int errfd); +int vnode_send_cmdstatus(int fd, int32_t cmdid, int32_t status); +int vnode_send_cmdsignal(int fd, int32_t cmdid, int32_t signum); +void vnode_recv_cmdsignal(vnode_msgio_t *msgio); + +#endif /* _VNODE_CMD_H_ */ diff --git a/daemon/src/vnode_io.c b/daemon/src/vnode_io.c new file mode 100644 index 00000000..d14ca5eb --- /dev/null +++ b/daemon/src/vnode_io.c @@ -0,0 +1,173 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vnode_io.c + * + */ + +#include +#include +#include +/* #define _XOPEN_SOURCE */ +#ifndef __USE_XOPEN +#define __USE_XOPEN +#endif +#include +#include +#include + +#include + +#include "myerr.h" +#include "vnode_chnl.h" +#include "vnode_io.h" + + +int set_nonblock(int fd) +{ + int fl, r = 0; + + if ((fl = fcntl(fd, F_GETFL)) == -1) + { + fl = 0; + r = -1; + } + if (fcntl(fd, F_SETFL, fl | O_NONBLOCK)) + r = -1; + + return r; +} + +int clear_nonblock(int fd) +{ + int fl, r = 0; + + if ((fl = fcntl(fd, F_GETFL)) == -1) + { + fl = 0; + r = -1; + } + if (fcntl(fd, F_SETFL, fl & ~O_NONBLOCK)) + r = -1; + + return r; +} + +int open_stdio_pty(stdio_pty_t *stdiopty) +{ + int masterfd, slavefd; + + INIT_STDIO_PTY(stdiopty); + + if ((masterfd = posix_openpt(O_RDWR | O_NOCTTY)) < 0) + { + WARN("posix_openpt() failed"); + return -1; + } + + if (grantpt(masterfd)) + { + WARN("grantpt() failed"); + close(masterfd); + return -1; + } + + if (unlockpt(masterfd)) + { + WARN("unlockpt() failed"); + close(masterfd); + return -1; + } + + if ((slavefd = open(ptsname(masterfd), O_RDWR | O_NOCTTY)) < 0) + { + WARN("open() failed"); + close(masterfd); + return -1; + } + + stdiopty->masterfd = masterfd; + stdiopty->slavefd = slavefd; + + return 0; +} + +void close_stdio_pty(stdio_pty_t *stdiopty) +{ + if (stdiopty->masterfd >= 0) + close(stdiopty->masterfd); + if (stdiopty->slavefd >= 0) + close(stdiopty->slavefd); + + INIT_STDIO_PTY(stdiopty); + + return; +} + +int open_stdio_pipe(stdio_pipe_t *stdiopipe) +{ + int infd[2], outfd[2], errfd[2]; + + INIT_STDIO_PIPE(stdiopipe); + + if (pipe(infd) < 0) + { + WARN("pipe() failed"); + return -1; + } + + if (pipe(outfd) < 0) + { + WARN("pipe() failed"); + close(infd[0]); + close(infd[1]); + return -1; + } + + if (pipe(errfd) < 0) + { + WARN("pipe() failed"); + close(infd[0]); + close(infd[1]); + close(outfd[0]); + close(outfd[1]); + return -1; + } + + stdiopipe->infd[0] = infd[0]; + stdiopipe->infd[1] = infd[1]; + + stdiopipe->outfd[0] = outfd[0]; + stdiopipe->outfd[1] = outfd[1]; + + stdiopipe->errfd[0] = errfd[0]; + stdiopipe->errfd[1] = errfd[1]; + + return 0; +} + +void close_stdio_pipe(stdio_pipe_t *stdiopipe) +{ + if (stdiopipe->infd[0] >= 0) + close(stdiopipe->infd[0]); + if (stdiopipe->infd[1] >= 0) + close(stdiopipe->infd[1]); + + if (stdiopipe->outfd[0] >= 0) + close(stdiopipe->outfd[0]); + if (stdiopipe->outfd[1] >= 0) + close(stdiopipe->outfd[1]); + + if (stdiopipe->errfd[0] >= 0) + close(stdiopipe->errfd[0]); + if (stdiopipe->errfd[1] >= 0) + close(stdiopipe->errfd[1]); + + INIT_STDIO_PIPE(stdiopipe); + + return; +} diff --git a/daemon/src/vnode_io.h b/daemon/src/vnode_io.h new file mode 100644 index 00000000..cc205697 --- /dev/null +++ b/daemon/src/vnode_io.h @@ -0,0 +1,61 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vnode_io.h + * + */ + +#ifndef _VNODE_IO_H_ +#define _VNODE_IO_H_ + +typedef struct { + int infd; + int outfd; + int errfd; +} stdio_fd_t; + +#define INIT_STDIO_FD(s) \ + do { \ + (s)->infd = -1; \ + (s)->outfd = -1; \ + (s)->errfd = -1; \ + } while (0) + +typedef struct { + int masterfd; + int slavefd; +} stdio_pty_t; + +#define INIT_STDIO_PTY(s) \ + do { \ + (s)->masterfd = -1; \ + (s)->slavefd = -1; \ + } while (0) + +typedef struct { + int infd[2]; + int outfd[2]; + int errfd[2]; +} stdio_pipe_t; + +#define INIT_STDIO_PIPE(s) \ + do { \ + (s)->infd[0] = (s)->infd[1] = -1; \ + (s)->outfd[0] = (s)->outfd[1] = -1; \ + (s)->errfd[0] = (s)->errfd[1] = -1; \ + } while (0) + +int set_nonblock(int fd); +int clear_nonblock(int fd); + +int open_stdio_pty(stdio_pty_t *stdiopty); +void close_stdio_pty(stdio_pty_t *stdiopty); + +int open_stdio_pipe(stdio_pipe_t *stdiopipe); +void close_stdio_pipe(stdio_pipe_t *stdiopipe); + +#endif /* _VNODE_IO_H_ */ diff --git a/daemon/src/vnode_msg.c b/daemon/src/vnode_msg.c new file mode 100644 index 00000000..91d8f3f0 --- /dev/null +++ b/daemon/src/vnode_msg.c @@ -0,0 +1,262 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vnode_msg.c + * + */ + +#include +#include +#include +#include + +#include + +#include "myerr.h" + +#include "vnode_msg.h" + + +static void vnode_msg_cb(struct ev_loop *loop, ev_io *w, int revents) +{ + vnode_msgio_t *msgio = w->data; + ssize_t tmp; + vnode_msghandler_t msghandlefn; + +#ifdef DEBUG + WARNX("new message on fd %d", msgio->fd); +#endif + + assert(msgio); + + tmp = vnode_recvmsg(msgio); + if (tmp == 0) + return; + else if (tmp < 0) + { + ev_io_stop(loop, w); + if (msgio->ioerror) + msgio->ioerror(msgio); + return; + } + + msghandlefn = msgio->msghandler[msgio->msgbuf.msg->hdr.type]; + if (!msghandlefn) + { + WARNX("no handler found for msg type %u from fd %d", + msgio->msgbuf.msg->hdr.type, msgio->fd); + return; + } + + msghandlefn(msgio); + + return; +} + +ssize_t vnode_sendmsg(int fd, vnode_msgbuf_t *msgbuf) +{ + struct msghdr msg = {}; + struct iovec iov[1]; + char buf[CMSG_SPACE(3 * sizeof(int))]; + + iov[0].iov_base = msgbuf->msg; + iov[0].iov_len = vnode_msglen(msgbuf); + msg.msg_iov = iov; + msg.msg_iovlen = 1; + + if (msgbuf->infd >= 0) + { + struct cmsghdr *cmsg; + int *fdptr; + + assert(msgbuf->outfd >= 0); + assert(msgbuf->errfd >= 0); + + msg.msg_control = buf; + msg.msg_controllen = sizeof(buf); + + cmsg = CMSG_FIRSTHDR(&msg); + cmsg->cmsg_level = SOL_SOCKET; + cmsg->cmsg_type = SCM_RIGHTS; + cmsg->cmsg_len = CMSG_LEN(3 * sizeof(int)); + + fdptr = (int *)CMSG_DATA(cmsg); + fdptr[0] = msgbuf->infd; + fdptr[1] = msgbuf->outfd; + fdptr[2] = msgbuf->errfd; + + msg.msg_controllen = cmsg->cmsg_len; + } + + return sendmsg(fd, &msg, 0); +} + +/* + * return the number of bytes received + * return 0 if the message should be ignored + * return a negative value if i/o should stop + */ +ssize_t vnode_recvmsg(vnode_msgio_t *msgio) +{ + ssize_t recvlen; + struct msghdr msg = {}; + struct iovec iov[1]; + char buf[CMSG_SPACE(3 * sizeof(int))]; + struct cmsghdr *cmsg; + + if (msgio->msgbuf.msgbufsize < VNODE_MSGSIZMAX) + { + if (vnode_resizemsgbuf(&msgio->msgbuf, VNODE_MSGSIZMAX)) + return -1; + } + + msgio->msgbuf.infd = msgio->msgbuf.outfd = msgio->msgbuf.errfd = -1; + + iov[0].iov_base = msgio->msgbuf.msg; + iov[0].iov_len = msgio->msgbuf.msgbufsize; + msg.msg_iov = iov; + msg.msg_iovlen = 1; + msg.msg_control = buf; + msg.msg_controllen = sizeof(buf); + + recvlen = recvmsg(msgio->fd, &msg, 0); + if (recvlen == 0) + return -1; + else if (recvlen < 0) + { + if (errno == EAGAIN) + return 0; + WARN("recvmsg() failed"); + return -1; + } + + cmsg = CMSG_FIRSTHDR(&msg); + if (cmsg != NULL && cmsg->cmsg_type == SCM_RIGHTS) + { + int *fdptr; + + fdptr = (int *)CMSG_DATA(cmsg); + msgio->msgbuf.infd = fdptr[0]; + msgio->msgbuf.outfd = fdptr[1]; + msgio->msgbuf.errfd = fdptr[2]; + } + + if (recvlen < sizeof(msgio->msgbuf.msg->hdr)) + { + WARNX("message header truncated: received %d of %d bytes", + recvlen, sizeof(msgio->msgbuf.msg->hdr)); + return 0; + } + + if (msgio->msgbuf.msg->hdr.type == VNODE_MSG_NONE || + msgio->msgbuf.msg->hdr.type >= VNODE_MSG_MAX) + { + WARNX("invalid message type: %u", msgio->msgbuf.msg->hdr.type); + return 0; + } + + if (recvlen - sizeof(msgio->msgbuf.msg->hdr) != + msgio->msgbuf.msg->hdr.datalen) + { + WARNX("message length mismatch: received %d bytes; expected %d bytes", + recvlen - sizeof(msgio->msgbuf.msg->hdr), + msgio->msgbuf.msg->hdr.datalen); + return 0; + } + + return recvlen; +} + +int vnode_msgiostart(vnode_msgio_t *msgio, struct ev_loop *loop, + int fd, void *data, vnode_msghandler_t ioerror, + const vnode_msghandler_t msghandler[VNODE_MSG_MAX]) +{ +#ifdef DEBUG + WARNX("starting message i/o for fd %d", fd); +#endif + + if (vnode_initmsgbuf(&msgio->msgbuf)) + return -1; + + msgio->loop = loop; + msgio->fd = fd; + msgio->fdwatcher.data = msgio; + ev_io_init(&msgio->fdwatcher, vnode_msg_cb, fd, EV_READ); + msgio->data = data; + msgio->ioerror = ioerror; + memcpy(msgio->msghandler, msghandler, sizeof(msgio->msghandler)); + + ev_io_start(msgio->loop, &msgio->fdwatcher); + + return 0; +} + +void vnode_msgiostop(vnode_msgio_t *msgio) +{ + ev_io_stop(msgio->loop, &msgio->fdwatcher); + FREE_MSGBUF(&msgio->msgbuf); + + return; +} + +int vnode_parsemsg(vnode_msg_t *msg, void *data, + const vnode_tlvhandler_t tlvhandler[VNODE_TLV_MAX]) +{ + size_t offset = 0; + vnode_tlv_t *tlv; + vnode_tlvhandler_t tlvhandlefn; + int tmp = -1; + + while (offset < msg->hdr.datalen) + { + tlv = (void *)msg->data + offset; + + offset += sizeof(*tlv) + tlv->vallen; + + if (tlv->vallen == 0 || offset > msg->hdr.datalen) + { + WARNX("invalid value length: %u", tlv->vallen); + continue; + } + + if ((tlvhandlefn = tlvhandler[tlv->type]) == NULL) + { + WARNX("unknown tlv type: %u", tlv->type); + continue; + } + + if ((tmp = tlvhandlefn(tlv, data))) + break; + } + + return tmp; +} + +ssize_t vnode_addtlv(vnode_msgbuf_t *msgbuf, size_t offset, + uint32_t type, uint32_t vallen, const void *valp) +{ + vnode_tlv_t *tlv; + size_t msglen, tlvlen; + + tlv = (void *)msgbuf->msg->data + offset; + msglen = (void *)tlv - (void *)msgbuf->msg; + tlvlen = sizeof(*tlv) + vallen; + + if (msglen + tlvlen > msgbuf->msgbufsize) + { + if (vnode_resizemsgbuf(msgbuf, msgbuf->msgbufsize + tlvlen)) + return -1; + else + tlv = (void *)msgbuf->msg->data + offset; + } + + tlv->type = type; + tlv->vallen = vallen; + memcpy(tlv->val, valp, vallen); + + return tlvlen; +} diff --git a/daemon/src/vnode_msg.h b/daemon/src/vnode_msg.h new file mode 100644 index 00000000..2142566c --- /dev/null +++ b/daemon/src/vnode_msg.h @@ -0,0 +1,148 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vnode_msg.h + * + */ + +#ifndef _VNODE_MSG_H_ +#define _VNODE_MSG_H_ + +#include +#include +#include +#include + +#include "myerr.h" + +typedef struct __attribute__ ((__packed__)) { + uint32_t type; + uint32_t vallen; + uint8_t val[]; +} vnode_tlv_t; + +typedef struct __attribute__ ((__packed__)) { + uint32_t type; + uint32_t datalen; +} vnode_msghdr_t; + +typedef struct __attribute__ ((__packed__)) { + vnode_msghdr_t hdr; + uint8_t data[]; +} vnode_msg_t; + +typedef enum { + VNODE_MSG_NONE = 0, + VNODE_MSG_CMDREQ, + VNODE_MSG_CMDREQACK, + VNODE_MSG_CMDSTATUS, + VNODE_MSG_CMDSIGNAL, + VNODE_MSG_MAX, +} vnode_msgtype_t; + +typedef enum { + VNODE_TLV_NONE = 0, + VNODE_TLV_CMDID, + VNODE_TLV_STDIN, + VNODE_TLV_STDOUT, + VNODE_TLV_STDERR, + VNODE_TLV_CMDARG, + VNODE_TLV_CMDPID, + VNODE_TLV_CMDSTATUS, + VNODE_TLV_SIGNUM, + VNODE_TLV_MAX, +} vnode_tlvtype_t; + +enum { + VNODE_ARGMAX = 1024, + VNODE_MSGSIZMAX = 65535, +}; + +typedef struct { + vnode_msg_t *msg; + size_t msgbufsize; + int infd; + int outfd; + int errfd; +} vnode_msgbuf_t; + +#define INIT_MSGBUF(msgbuf) \ + do { \ + (msgbuf)->msg = NULL; \ + (msgbuf)->msgbufsize = 0; \ + (msgbuf)->infd = -1; \ + (msgbuf)->outfd = -1; \ + (msgbuf)->errfd = -1; \ + } while (0) + +#define FREE_MSGBUF(msgbuf) \ + do { \ + if ((msgbuf)->msg) \ + free((msgbuf)->msg); \ + INIT_MSGBUF(msgbuf); \ + } while (0) + +struct vnode_msgio; +typedef void (*vnode_msghandler_t)(struct vnode_msgio *msgio); + +typedef struct vnode_msgio { + struct ev_loop *loop; + int fd; + ev_io fdwatcher; + vnode_msgbuf_t msgbuf; + void *data; + vnode_msghandler_t ioerror; + vnode_msghandler_t msghandler[VNODE_MSG_MAX]; +} vnode_msgio_t; + +typedef int (*vnode_tlvhandler_t)(vnode_tlv_t *tlv, void *data); + + +static inline void vnode_msgiohandler(vnode_msgio_t *msgio, + vnode_msgtype_t msgtype, + vnode_msghandler_t msghandlefn) +{ + msgio->msghandler[msgtype] = msghandlefn; + return; +} + +static inline int vnode_resizemsgbuf(vnode_msgbuf_t *msgbuf, size_t size) +{ + void *newbuf; + if ((newbuf = realloc(msgbuf->msg, size)) == NULL) + { + WARN("realloc() failed for size %u", size); + return -1; + } + msgbuf->msg = newbuf; + msgbuf->msgbufsize = size; + return 0; +} + +static inline int vnode_initmsgbuf(vnode_msgbuf_t *msgbuf) +{ + INIT_MSGBUF(msgbuf); + return vnode_resizemsgbuf(msgbuf, VNODE_MSGSIZMAX); +} + +#define vnode_msglen(msgbuf) \ + (sizeof(*(msgbuf)->msg) + (msgbuf)->msg->hdr.datalen) + +ssize_t vnode_sendmsg(int fd, vnode_msgbuf_t *msgbuf); +ssize_t vnode_recvmsg(vnode_msgio_t *msgio); + +int vnode_msgiostart(vnode_msgio_t *msgio, struct ev_loop *loop, + int fd, void *data, vnode_msghandler_t ioerror, + const vnode_msghandler_t msghandler[VNODE_MSG_MAX]); +void vnode_msgiostop(vnode_msgio_t *msgio); + +int vnode_parsemsg(vnode_msg_t *msg, void *data, + const vnode_tlvhandler_t tlvhandler[VNODE_TLV_MAX]); +ssize_t vnode_addtlv(vnode_msgbuf_t *msgbuf, size_t offset, + uint32_t type, uint32_t vallen, const void *valp); + +#endif /* _VNODE_MSG_H_ */ diff --git a/daemon/src/vnode_server.c b/daemon/src/vnode_server.c new file mode 100644 index 00000000..1e16e2d7 --- /dev/null +++ b/daemon/src/vnode_server.c @@ -0,0 +1,388 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vnode_server.c + * + */ + +#include +#include +#include +#include +#include +#include +#include + +#include +#include + +#include "netns.h" +#include "myerr.h" +#include "vnode_msg.h" +#include "vnode_chnl.h" +#include "vnode_cmd.h" + +#include "vnode_server.h" + +extern int verbose; + +static vnode_cliententry_t *vnode_server_newclient(vnode_server_t *server, + int fd); +static void vnode_server_delclient(vnode_cliententry_t *client); + +static int cloexec(int fd) +{ + int fdflags; + + if ((fdflags = fcntl(fd, F_GETFD)) == -1) + fdflags = 0; + if (fcntl(fd, F_SETFD, fdflags | FD_CLOEXEC) == -1) + return -1; + + return 0; +} + +static void client_ioerror(vnode_msgio_t *msgio) +{ + vnode_cliententry_t *client = msgio->data; + + if (verbose) + INFO("i/o error for client fd %d; deleting client", client->msgio.fd); + + vnode_server_delclient(client); + + return; +} + +static vnode_cliententry_t *vnode_server_newclient(vnode_server_t *server, + int fd) +{ + vnode_cliententry_t *client; + vnode_msghandler_t msghandler[VNODE_MSG_MAX] = { + [VNODE_MSG_CMDREQ] = vnode_recv_cmdreq, + [VNODE_MSG_CMDSIGNAL] = vnode_recv_cmdsignal, + }; + +#ifdef DEBUG + WARNX("new client on fd %d", fd); +#endif + + cloexec(fd); + + if ((client = malloc(sizeof(*client))) == NULL) + { + WARN("malloc() failed"); + return NULL; + } + + client->server = server; + client->clientfd = fd; + + TAILQ_INSERT_TAIL(&server->clientlisthead, client, entries); + + if (vnode_msgiostart(&client->msgio, server->loop, + client->clientfd, client, client_ioerror, msghandler)) + { + WARNX("vnode_msgiostart() failed"); + free(client); + return NULL; + } + + return client; +} + +static void vnode_server_delclient(vnode_cliententry_t *client) +{ +#ifdef DEBUG + WARNX("deleting client for fds %d %d", client->clientfd, client->msgio.fd); +#endif + + TAILQ_REMOVE(&client->server->clientlisthead, client, entries); + vnode_msgiostop(&client->msgio); + close(client->clientfd); + memset(client, 0, sizeof(*client)); + free(client); + + return; +} + +/* XXX put this in vnode_cmd.c ?? */ +static void vnode_child_cb(struct ev_loop *loop, ev_child *w, int revents) +{ + vnode_server_t *server = w->data; + vnode_cmdentry_t *cmd; + char *how; + int status; + +#ifdef DEBUG + WARNX("child process %d exited with status 0x%x", w->rpid, w->rstatus); + if (WIFEXITED(w->rstatus)) + WARNX("normal terminataion status: %d", WEXITSTATUS(w->rstatus)); + else if (WIFSIGNALED(w->rstatus)) + WARNX("terminated by signal: %d", WTERMSIG(w->rstatus)); + else + WARNX("unexpected status: %d", w->rstatus); +#endif + + if (WIFEXITED(w->rstatus)) + { + how = "normally"; + status = WEXITSTATUS(w->rstatus); + } + else if (WIFSIGNALED(w->rstatus)) + { + how = "due to signal"; + status = WTERMSIG(w->rstatus); + } + else + { + how = "for unknown reason"; + status = w->rstatus; + } + + TAILQ_FOREACH(cmd, &server->cmdlisthead, entries) + { + if (cmd->pid == w->rpid) + { + vnode_cliententry_t *client = cmd->data; + +#ifdef DEBUG + WARNX("pid %d found in cmd list; removing", w->rpid); +#endif + + TAILQ_REMOVE(&server->cmdlisthead, cmd, entries); + + if (verbose) + INFO("cmd completed %s: pid: %d; cmdid: %d; status %d", + how, w->rpid, cmd->cmdid, status); + + if (vnode_send_cmdstatus(client->clientfd, cmd->cmdid, w->rstatus)) + WARNX("vnode_send_cmdstatus() failed"); + + free(cmd); + + return; + } + } + + WARNX("pid %d not found in client command list: " + "completed %s with status %d", w->rpid, how, status); + + return; +} + +static void vnode_server_cb(struct ev_loop *loop, ev_io *w, int revents) +{ + vnode_server_t *server = w->data; + int fd; + + for (;;) + { + fd = accept(server->serverfd, NULL, NULL); + if (fd < 0) + { + if (errno != EAGAIN) + WARN("accept() failed"); + break; + } + + if (vnode_server_newclient(server, fd) == NULL) + { + WARN("vnode_server_newclient() failed"); + close(fd); + } + } + + return; +} + +static vnode_server_t *vnode_newserver(struct ev_loop *loop, + int ctrlfd, const char *ctrlchnlname) +{ + vnode_server_t *server; + + if ((server = malloc(sizeof(*server))) == NULL) + { + WARN("malloc() failed"); + return NULL; + } + + TAILQ_INIT(&server->clientlisthead); + TAILQ_INIT(&server->cmdlisthead); + server->loop = loop; + + strncpy(server->ctrlchnlname, ctrlchnlname, sizeof(server->ctrlchnlname)); + server->ctrlchnlname[sizeof(server->ctrlchnlname) -1] = '\0'; + memset(server->pidfilename, 0, sizeof(server->pidfilename)); + server->serverfd = ctrlfd; + +#ifdef DEBUG + WARNX("adding vnode_child_cb for pid 0"); +#endif + + server->childwatcher.data = server; + ev_child_init(&server->childwatcher, vnode_child_cb, 0, 0); + ev_child_start(server->loop, &server->childwatcher); + +#ifdef DEBUG + WARNX("adding vnode_server_cb for fd %d", server->serverfd); +#endif + + server->fdwatcher.data = server; + ev_io_init(&server->fdwatcher, vnode_server_cb, server->serverfd, EV_READ); + ev_io_start(server->loop, &server->fdwatcher); + + return server; +} + +void vnode_delserver(vnode_server_t *server) +{ + unlink(server->ctrlchnlname); + if (server->pidfilename[0] != '\0') + { + unlink(server->pidfilename); + } + ev_io_stop(server->loop, &server->fdwatcher); + close(server->serverfd); + + ev_child_stop(server->loop, &server->childwatcher); + + while (!TAILQ_EMPTY(&server->clientlisthead)) + { + vnode_cliententry_t *client; + + client = TAILQ_FIRST(&server->clientlisthead); + TAILQ_REMOVE(&server->clientlisthead, client, entries); + vnode_server_delclient(client); + } + + while (!TAILQ_EMPTY(&server->cmdlisthead)) + { + vnode_cmdentry_t *cmd; + + cmd = TAILQ_FIRST(&server->cmdlisthead); + TAILQ_REMOVE(&server->cmdlisthead, cmd, entries); + free(cmd); + } + + memset(server, 0, sizeof(*server)); + free(server); + + return; +} + +vnode_server_t *vnoded(int newnetns, const char *ctrlchnlname, + const char *logfilename, const char *pidfilename, + const char *chdirname) +{ + int ctrlfd; + unsigned int i, openmax; + vnode_server_t *server; + pid_t pid; + + setsid(); + + if ((ctrlfd = vnode_listen(ctrlchnlname)) < 0) + { + WARNX("vnode_listen() failed for '%s'", ctrlchnlname); + return NULL; + } + cloexec(ctrlfd); + + if (newnetns) + { + pid = nsfork(0); + if (pid == -1) + { + WARN("nsfork() failed"); + close(ctrlfd); + unlink(ctrlchnlname); + return NULL; + } + } + else + { + pid = getpid(); + } + + if (pid) + { + printf("%u\n", pid); + fflush(stdout); + + if (pidfilename) + { + FILE *pidfile; + + pidfile = fopen(pidfilename, "w"); + if (pidfile != NULL) + { + fprintf(pidfile, "%u\n", pid); + fclose(pidfile); + } + else + { + WARN("fopen() failed for '%s'", pidfilename); + } + } + + if (newnetns) + _exit(0); /* nothing else for the parent to do */ + } + + /* try to close any open files */ + if ((openmax = sysconf(_SC_OPEN_MAX)) < 0) + openmax = 1024; + assert(openmax >= _POSIX_OPEN_MAX); + for (i = 3; i < openmax; i++) + if (i != ctrlfd) + close(i); + + if (!logfilename) + logfilename = "/dev/null"; + +#define DUPFILE(filename, mode, fileno) \ + do { \ + int fd; \ + if ((fd = open(filename, mode, 0644)) == -1) \ + WARN("open() failed for '%s'", filename); \ + else \ + { \ + if (dup2(fd, fileno) == -1) \ + WARN("dup2() failed for " #fileno); \ + close(fd); \ + } \ + } while (0); + + DUPFILE("/dev/null", O_RDONLY, STDIN_FILENO); + DUPFILE(logfilename, + O_WRONLY | O_CREAT | O_TRUNC | O_APPEND, STDOUT_FILENO); + DUPFILE(logfilename, + O_WRONLY | O_CREAT | O_TRUNC | O_APPEND, STDERR_FILENO); + +#undef DUPFILE + + setvbuf(stdout, NULL, _IOLBF, 0); + setvbuf(stderr, NULL, _IOLBF, 0); + + if (chdirname && chdir(chdirname)) + WARN("chdir() failed"); + + server = vnode_newserver(ev_default_loop(0), ctrlfd, ctrlchnlname); + if (!server) + { + close(ctrlfd); + unlink(ctrlchnlname); + } + if (pidfilename) + { + strncpy(server->pidfilename, pidfilename, sizeof(server->pidfilename)); + server->pidfilename[sizeof(server->pidfilename) -1] = '\0'; + } + + return server; +} diff --git a/daemon/src/vnode_server.h b/daemon/src/vnode_server.h new file mode 100644 index 00000000..50a277e9 --- /dev/null +++ b/daemon/src/vnode_server.h @@ -0,0 +1,45 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vnode_server.h + * + */ + +#ifndef _VNODE_SERVER_H_ +#define _VNODE_SERVER_H_ + +#include +#include + +#include + +#include "vnode_msg.h" + +typedef struct { + TAILQ_HEAD(clientlist, cliententry) clientlisthead; + TAILQ_HEAD(cmdlist, cmdentry) cmdlisthead; + struct ev_loop *loop; + char ctrlchnlname[PATH_MAX]; + char pidfilename[PATH_MAX]; + int serverfd; + ev_io fdwatcher; + ev_child childwatcher; +} vnode_server_t; + +typedef struct cliententry { + TAILQ_ENTRY(cliententry) entries; + + vnode_server_t *server; + int clientfd; + vnode_msgio_t msgio; +} vnode_cliententry_t; + +vnode_server_t *vnoded(int newnetns, const char *ctrlchnlname, + const char *logfilename, const char *pidfilename, + const char *chdirname); +void vnode_delserver(vnode_server_t *server); +#endif /* _VNODE_SERVER_H_ */ diff --git a/daemon/src/vnode_tlv.h b/daemon/src/vnode_tlv.h new file mode 100644 index 00000000..16b79081 --- /dev/null +++ b/daemon/src/vnode_tlv.h @@ -0,0 +1,41 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vnode_tlv.h + * + */ + +#ifndef _VNODE_TLV_H_ +#define _VNODE_TLV_H_ + +static inline int tlv_string(char **var, vnode_tlv_t *tlv) +{ + if (tlv->val[tlv->vallen - 1] != '\0') + { + WARNX("string not null-terminated"); + return -1; + } + + *var = (char *)tlv->val; + + return 0; +} + +static inline int tlv_int32(int32_t *var, vnode_tlv_t *tlv) +{ + if (tlv->vallen != sizeof(int32_t)) + { + WARNX("invalid value length for int32: %u", tlv->vallen); + return -1; + } + + *var = *(int32_t *)tlv->val; + + return 0; +} + +#endif /* _VNODE_TLV_H_ */ diff --git a/daemon/src/vnoded_main.c b/daemon/src/vnoded_main.c new file mode 100644 index 00000000..436fef6d --- /dev/null +++ b/daemon/src/vnoded_main.c @@ -0,0 +1,227 @@ +/* + * CORE + * Copyright (c)2010-2012 the Boeing Company. + * See the LICENSE file included in this distribution. + * + * author: Tom Goff + * + * vnoded_main.c + * + * vnoded daemon runs as PID 1 in the Linux namespace container and receives + * and executes commands via a control channel. + * + */ + +#include +#include +#include +#include +#include + +#include + +#include "version.h" +#include "vnode_server.h" +#include "myerr.h" + +int verbose; + +static vnode_server_t *vnodeserver; + +struct option longopts[] = +{ + {"version", no_argument, NULL, 'V'}, + {"help", no_argument, NULL, 'h'}, + { 0 } +}; + +static void usage(int status, char *fmt, ...) +{ + extern const char *__progname; + va_list ap; + FILE *output; + + va_start(ap, fmt); + + output = status ? stderr : stdout; + fprintf(output, "\n"); + if (fmt != NULL) + { + vfprintf(output, fmt, ap); + fprintf(output, "\n\n"); + } + fprintf(output, + "Usage: %s [-h|-V] [-v] [-n] [-C ] [-l ] " + "[-p ] -c \n\n" + "Linux namespace container server daemon runs as PID 1 in the " + "container. \nNormally this process is launched automatically by the " + "CORE daemon.\n\nOptions:\n" + " -h, --help show this help message and exit\n" + " -V, --version show version number and exit\n" + " -v enable verbose logging\n" + " -n do not create and run daemon within a new network namespace " + "(for debug)\n" + " -C change to the specified directory\n" + " -l log output to the specified file\n" + " -p write process id to the specified file\n" + " -c establish the specified for receiving " + "control commands\n", + __progname); + + va_end(ap); + + exit(0); +} + +static void sigexit(int signum) +{ + WARNX("exiting due to signal: %d", signum); + exit(0); + return; +} + +static void cleanup_sigchld(int signum) +{ + /* nothing */ +} + +static void cleanup() +{ + static int incleanup = 0; + + if (incleanup) + return; + incleanup = 1; + + if (vnodeserver) + { + struct ev_loop *loop = vnodeserver->loop; + vnode_delserver(vnodeserver); + if (loop) + ev_unloop(loop, EVUNLOOP_ALL); + } + + /* don't use SIG_IGN here because receiving SIGCHLD is needed to + * interrupt the sleep below in order to avoid long delays + */ + if (signal(SIGCHLD, cleanup_sigchld) == SIG_ERR) + WARN("signal() failed"); + + if (getpid() == 1) + { + struct timespec delay = { + .tv_sec = 2, + .tv_nsec = 0, + }; + + /* try to gracefully terminate all processes in this namespace + * first + */ + kill(-1, SIGTERM); + /* wait for child processes to terminate */ + for (;;) + { + pid_t pid; + int err; + struct timespec rem; + + pid = waitpid(-1, NULL, WNOHANG); + if (pid == -1) + break; /* an error occurred */ + if (pid != 0) + continue; /* a child was reaped */ + + err = nanosleep(&delay, &rem); + if (err == -1 && errno == EINTR) + { + delay = rem; + continue; + } + + /* force termination after delay */ + kill(-1, SIGKILL); + break; + } + } + + return; +} + +int main(int argc, char *argv[]) +{ + int newnetns = 1; + char *ctrlchnlname = NULL, *logfilename = NULL, *chdirname = NULL; + char *pidfilename = NULL; + extern const char *__progname; + + for (;;) + { + int opt; + + if ((opt = getopt_long(argc, argv, "c:C:l:nvVhp:", longopts, NULL)) == -1) + break; + + switch (opt) + { + case 'c': + ctrlchnlname = optarg; + break; + + case 'C': + chdirname = optarg; + break; + + case 'l': + logfilename = optarg; + break; + + case 'n': + newnetns = 0; + break; + + case 'p': + pidfilename = optarg; + break; + + case 'v': + verbose++; + break; + + case 'V': + printf("%s version %s\n", __progname, CORE_VERSION); + exit(0); + + case 'h': + /* pass through */ + default: + usage(0, NULL); + } + } + + argc -= optind; + argv += optind; + + if (ctrlchnlname == NULL) + usage(1, "no control channel given"); + + for (; argc; argc--, argv++) + WARNX("ignoring command line argument: '%s'", *argv); + + if (atexit(cleanup)) + ERR(1, "atexit() failed"); + + if (signal(SIGTERM, sigexit) == SIG_ERR) + ERR(1, "signal() failed"); + if (signal(SIGINT, sigexit) == SIG_ERR) + ERR(1, "signal() failed"); + /* XXX others? */ + + vnodeserver = vnoded(newnetns, ctrlchnlname, logfilename, pidfilename, + chdirname); + if (vnodeserver == NULL) + ERRX(1, "vnoded() failed"); + + ev_loop(vnodeserver->loop, 0); + + exit(0); +} diff --git a/doc/Makefile.am b/doc/Makefile.am new file mode 100644 index 00000000..76038877 --- /dev/null +++ b/doc/Makefile.am @@ -0,0 +1,159 @@ +# CORE +# (c)2009-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +# Builds html and pdf documentation using Sphinx. +# + +SUBDIRS = man figures + + +# extra cruft to remove +DISTCLEANFILES = Makefile.in stamp-vti + +rst_files = conf.py constants.txt credits.rst devguide.rst emane.rst \ + index.rst install.rst intro.rst machine.rst ns3.rst \ + performance.rst scripting.rst usage.rst + +EXTRA_DIST = $(rst_files) _build _static _templates + +# clean up dirs included by EXTRA_DIST +dist-hook: + rm -rf $(distdir)/_build/.svn $(distdir)/_static/.svn \ + $(distdir)/_templates/.svn + + +###### below this line was generated using sphinx-quickstart ###### + +# Makefile for Sphinx documentation +# + +# You can set these variables from the command line. +SPHINXOPTS = +SPHINXBUILD = sphinx-build +PAPER = +BUILDDIR = _build + +# Internal variables. +PAPEROPT_a4 = -D latex_paper_size=a4 +PAPEROPT_letter = -D latex_paper_size=letter +ALLSPHINXOPTS = -d $(BUILDDIR)/doctrees $(PAPEROPT_$(PAPER)) $(SPHINXOPTS) . + +.PHONY: help clean html dirhtml singlehtml pickle json htmlhelp qthelp devhelp epub latex latexpdf text man changes linkcheck doctest + +help: + @echo "Please use \`make ' where is one of" + @echo " html to make standalone HTML files" + @echo " dirhtml to make HTML files named index.html in directories" + @echo " singlehtml to make a single large HTML file" + @echo " pickle to make pickle files" + @echo " json to make JSON files" + @echo " htmlhelp to make HTML files and a HTML help project" + @echo " qthelp to make HTML files and a qthelp project" + @echo " devhelp to make HTML files and a Devhelp project" + @echo " epub to make an epub" + @echo " latex to make LaTeX files, you can set PAPER=a4 or PAPER=letter" + @echo " latexpdf to make LaTeX files and run them through pdflatex" + @echo " text to make text files" + @echo " man to make manual pages" + @echo " changes to make an overview of all changed/added/deprecated items" + @echo " linkcheck to check all external links for integrity" + @echo " doctest to run all doctests embedded in the documentation (if enabled)" + +clean: + -rm -rf $(BUILDDIR)/* + +html: + $(SPHINXBUILD) -b html $(ALLSPHINXOPTS) $(BUILDDIR)/html + @echo + @echo "Build finished. The HTML pages are in $(BUILDDIR)/html." + +dirhtml: + $(SPHINXBUILD) -b dirhtml $(ALLSPHINXOPTS) $(BUILDDIR)/dirhtml + @echo + @echo "Build finished. The HTML pages are in $(BUILDDIR)/dirhtml." + +singlehtml: + $(SPHINXBUILD) -b singlehtml $(ALLSPHINXOPTS) $(BUILDDIR)/singlehtml + @echo + @echo "Build finished. The HTML page is in $(BUILDDIR)/singlehtml." + +pickle: + $(SPHINXBUILD) -b pickle $(ALLSPHINXOPTS) $(BUILDDIR)/pickle + @echo + @echo "Build finished; now you can process the pickle files." + +json: + $(SPHINXBUILD) -b json $(ALLSPHINXOPTS) $(BUILDDIR)/json + @echo + @echo "Build finished; now you can process the JSON files." + +htmlhelp: + $(SPHINXBUILD) -b htmlhelp $(ALLSPHINXOPTS) $(BUILDDIR)/htmlhelp + @echo + @echo "Build finished; now you can run HTML Help Workshop with the" \ + ".hhp project file in $(BUILDDIR)/htmlhelp." + +qthelp: + $(SPHINXBUILD) -b qthelp $(ALLSPHINXOPTS) $(BUILDDIR)/qthelp + @echo + @echo "Build finished; now you can run "qcollectiongenerator" with the" \ + ".qhcp project file in $(BUILDDIR)/qthelp, like this:" + @echo "# qcollectiongenerator $(BUILDDIR)/qthelp/CORE.qhcp" + @echo "To view the help file:" + @echo "# assistant -collectionFile $(BUILDDIR)/qthelp/CORE.qhc" + +devhelp: + $(SPHINXBUILD) -b devhelp $(ALLSPHINXOPTS) $(BUILDDIR)/devhelp + @echo + @echo "Build finished." + @echo "To view the help file:" + @echo "# mkdir -p $$HOME/.local/share/devhelp/CORE" + @echo "# ln -s $(BUILDDIR)/devhelp $$HOME/.local/share/devhelp/CORE" + @echo "# devhelp" + +epub: + $(SPHINXBUILD) -b epub $(ALLSPHINXOPTS) $(BUILDDIR)/epub + @echo + @echo "Build finished. The epub file is in $(BUILDDIR)/epub." + +latex: + $(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex + @echo + @echo "Build finished; the LaTeX files are in $(BUILDDIR)/latex." + @echo "Run \`make' in that directory to run these through (pdf)latex" \ + "(use \`make latexpdf' here to do that automatically)." + +latexpdf: + $(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex + @echo "Running LaTeX files through pdflatex..." + make -C $(BUILDDIR)/latex all-pdf + @echo "pdflatex finished; the PDF files are in $(BUILDDIR)/latex." + +text: + $(SPHINXBUILD) -b text $(ALLSPHINXOPTS) $(BUILDDIR)/text + @echo + @echo "Build finished. The text files are in $(BUILDDIR)/text." + +man: + $(SPHINXBUILD) -b man $(ALLSPHINXOPTS) $(BUILDDIR)/man + @echo + @echo "Build finished. The manual pages are in $(BUILDDIR)/man." + +changes: + $(SPHINXBUILD) -b changes $(ALLSPHINXOPTS) $(BUILDDIR)/changes + @echo + @echo "The overview file is in $(BUILDDIR)/changes." + +linkcheck: + $(SPHINXBUILD) -b linkcheck $(ALLSPHINXOPTS) $(BUILDDIR)/linkcheck + @echo + @echo "Link check complete; look for any errors in the above output " \ + "or in $(BUILDDIR)/linkcheck/output.txt." + +doctest: + $(SPHINXBUILD) -b doctest $(ALLSPHINXOPTS) $(BUILDDIR)/doctest + @echo "Testing of doctests in the sources finished, look at the " \ + "results in $(BUILDDIR)/doctest/output.txt." diff --git a/doc/conf.py.in b/doc/conf.py.in new file mode 100644 index 00000000..a76eab0e --- /dev/null +++ b/doc/conf.py.in @@ -0,0 +1,256 @@ +# -*- coding: utf-8 -*- +# +# CORE documentation build configuration file, created by +# sphinx-quickstart on Wed Jun 13 10:44:22 2012. +# +# This file is execfile()d with the current directory set to its containing dir. +# +# Note that not all possible configuration values are present in this +# autogenerated file. +# +# All configuration values have a default; values that are commented out +# serve to show the default. + +import sys, os + +# If extensions (or modules to document with autodoc) are in another directory, +# add these directories to sys.path here. If the directory is relative to the +# documentation root, use os.path.abspath to make it absolute, like shown here. +#sys.path.insert(0, os.path.abspath('.')) + +# -- General configuration ----------------------------------------------------- + +# If your documentation needs a minimal Sphinx version, state it here. +#needs_sphinx = '1.0' + +# Add any Sphinx extension module names here, as strings. They can be extensions +# coming with Sphinx (named 'sphinx.ext.*') or your custom ones. +extensions = ['sphinx.ext.autodoc', 'sphinx.ext.todo', 'sphinx.ext.pngmath', 'sphinx.ext.ifconfig'] + +# Add any paths that contain templates here, relative to this directory. +templates_path = ['_templates'] + +# The suffix of source filenames. +source_suffix = '.rst' + +# The encoding of source files. +#source_encoding = 'utf-8-sig' + +# The master toctree document. +master_doc = 'index' + +# General information about the project. +project = u'CORE' +copyright = u'2012, core-dev' + +# The version info for the project you're documenting, acts as replacement for +# |version| and |release|, also used in various other places throughout the +# built documents. +# +# The short X.Y version. +version = '@CORE_VERSION@' +# The full version, including alpha/beta/rc tags. +release = '@CORE_VERSION@' + +# The language for content autogenerated by Sphinx. Refer to documentation +# for a list of supported languages. +#language = None + +# There are two options for replacing |today|: either, you set today to some +# non-false value, then it is used: +#today = '' +# Else, today_fmt is used as the format for a strftime call. +#today_fmt = '%B %d, %Y' + +# List of patterns, relative to source directory, that match files and +# directories to ignore when looking for source files. +exclude_patterns = ['_build'] + +# The reST default role (used for this markup: `text`) to use for all documents. +#default_role = None + +# If true, '()' will be appended to :func: etc. cross-reference text. +#add_function_parentheses = True + +# If true, the current module name will be prepended to all description +# unit titles (such as .. function::). +#add_module_names = True + +# If true, sectionauthor and moduleauthor directives will be shown in the +# output. They are ignored by default. +#show_authors = False + +# The name of the Pygments (syntax highlighting) style to use. +pygments_style = 'sphinx' + +# A list of ignored prefixes for module index sorting. +#modindex_common_prefix = [] + + +# -- Options for HTML output --------------------------------------------------- + +# The theme to use for HTML and HTML Help pages. See the documentation for +# a list of builtin themes. +html_theme = 'default' + +# Theme options are theme-specific and customize the look and feel of a theme +# further. For a list of options available for each theme, see the +# documentation. +#html_theme_options = {} + +# Add any paths that contain custom themes here, relative to this directory. +#html_theme_path = [] + +# The name for this set of Sphinx documents. If None, it defaults to +# " v documentation". +#html_title = None + +# A shorter title for the navigation bar. Default is the same as html_title. +#html_short_title = None + +# The name of an image file (relative to this directory) to place at the top +# of the sidebar. +#html_logo = None + +# The name of an image file (within the static path) to use as favicon of the +# docs. This file should be a Windows icon file (.ico) being 16x16 or 32x32 +# pixels large. +#html_favicon = None + +# Add any paths that contain custom static files (such as style sheets) here, +# relative to this directory. They are copied after the builtin static files, +# so a file named "default.css" will overwrite the builtin "default.css". +html_static_path = ['_static'] + +# If not '', a 'Last updated on:' timestamp is inserted at every page bottom, +# using the given strftime format. +#html_last_updated_fmt = '%b %d, %Y' + +# If true, SmartyPants will be used to convert quotes and dashes to +# typographically correct entities. +#html_use_smartypants = True + +# Custom sidebar templates, maps document names to template names. +#html_sidebars = {} + +# Additional templates that should be rendered to pages, maps page names to +# template names. +#html_additional_pages = {} + +# If false, no module index is generated. +#html_domain_indices = True + +# If false, no index is generated. +#html_use_index = True + +# If true, the index is split into individual pages for each letter. +#html_split_index = False + +# If true, links to the reST sources are added to the pages. +#html_show_sourcelink = True + +# If true, "Created using Sphinx" is shown in the HTML footer. Default is True. +#html_show_sphinx = True + +# If true, "(C) Copyright ..." is shown in the HTML footer. Default is True. +#html_show_copyright = True + +# If true, an OpenSearch description file will be output, and all pages will +# contain a tag referring to it. The value of this option must be the +# base URL from which the finished HTML is served. +#html_use_opensearch = '' + +# This is the file name suffix for HTML files (e.g. ".xhtml"). +#html_file_suffix = None + +# Output file base name for HTML help builder. +htmlhelp_basename = 'COREdoc' + + +# -- Options for LaTeX output -------------------------------------------------- + +# The paper size ('letter' or 'a4'). +#latex_paper_size = 'letter' + +# The font size ('10pt', '11pt' or '12pt'). +#latex_font_size = '10pt' + +# Grouping the document tree into LaTeX files. List of tuples +# (source start file, target name, title, author, documentclass [howto/manual]). +latex_documents = [ + ('index', 'CORE.tex', u'CORE Documentation', + u'core-dev', 'manual'), +] + +# The name of an image file (relative to this directory) to place at the top of +# the title page. +#latex_logo = None + +# For "manual" documents, if this is true, then toplevel headings are parts, +# not chapters. +#latex_use_parts = False + +# If true, show page references after internal links. +#latex_show_pagerefs = False + +# If true, show URL addresses after external links. +#latex_show_urls = False + +# Additional stuff for the LaTeX preamble. +#latex_preamble = '' + +# Documents to append as an appendix to all manuals. +#latex_appendices = [] + +# If false, no module index is generated. +#latex_domain_indices = True + + +# -- Options for manual page output -------------------------------------------- + +# One entry per manual page. List of tuples +# (source start file, name, description, authors, manual section). +man_pages = [ + ('index', 'core', u'CORE Documentation', + [u'core-dev'], 1) +] + + +# -- Options for Epub output --------------------------------------------------- + +# Bibliographic Dublin Core info. +epub_title = u'CORE' +epub_author = u'core-dev' +epub_publisher = u'core-dev' +epub_copyright = u'2012, core-dev' + +# The language of the text. It defaults to the language option +# or en if the language is not set. +#epub_language = '' + +# The scheme of the identifier. Typical schemes are ISBN or URL. +#epub_scheme = '' + +# The unique identifier of the text. This can be a ISBN number +# or the project homepage. +#epub_identifier = '' + +# A unique identification for the text. +#epub_uid = '' + +# HTML files that should be inserted before the pages created by sphinx. +# The format is a list of tuples containing the path and title. +#epub_pre_files = [] + +# HTML files shat should be inserted after the pages created by sphinx. +# The format is a list of tuples containing the path and title. +#epub_post_files = [] + +# A list of files that should not be packed into the epub file. +#epub_exclude_files = [] + +# The depth of the table of contents in toc.ncx. +#epub_tocdepth = 3 + +# Allow duplicate toc entries. +#epub_tocdup = True diff --git a/doc/constants.txt b/doc/constants.txt new file mode 100644 index 00000000..aa3df9db --- /dev/null +++ b/doc/constants.txt @@ -0,0 +1,25 @@ +.. |UBUNTUVERSION| replace:: 12.04, 12.10, or 13.04 + +.. |FEDORAVERSION| replace:: 17, 18, or 19 + +.. |CENTOSVERSION| replace:: 6.x + +.. |BSDVERSION| replace:: 9.0 + +.. |CORERPM| replace:: 1.fc19.x86_64.rpm +.. |CORERPM2| replace:: 1.fc19.noarch.rpm +.. |COREDEB| replace:: 0ubuntu1_precise_amd64.deb +.. |COREDEB2| replace:: 0ubuntu1_precise_all.deb + +.. |QVER| replace:: quagga-0.99.21mr2.2 +.. |QVERDEB| replace:: quagga-mr_0.99.21mr2.2_amd64.deb +.. |QVERRPM| replace:: quagga-0.99.21mr2.2-1.fc16.x86_64.rpm + +.. |APTDEPS| replace:: bash bridge-utils ebtables iproute libev-dev python +.. |APTDEPS2| replace:: tcl8.5 tk8.5 libtk-img +.. |APTDEPS3| replace:: autoconf automake gcc libev-dev make python-dev libreadline-dev pkg-config imagemagick help2man + +.. |YUMDEPS| replace:: bash bridge-utils ebtables iproute libev python +.. |YUMDEPS2| replace:: tcl tk tkimg +.. |YUMDEPS3| replace:: autoconf automake make libev-devel python-devel ImageMagick help2man + diff --git a/doc/credits.rst b/doc/credits.rst new file mode 100644 index 00000000..ad10f8f9 --- /dev/null +++ b/doc/credits.rst @@ -0,0 +1,26 @@ +.. This file is part of the CORE Manual + (c)2012 the Boeing Company + +.. _Acknowledgements: + +*************** +Acknowledgments +*************** + +The CORE project was derived from the open source IMUNES project from the +University of Zagreb in 2004. In 2006, changes for CORE were released back to +that project, some items of which were adopted. Marko Zec is the +primary developer from the University of Zagreb responsible for the IMUNES +(GUI) and VirtNet (kernel) projects. Ana Kukec and Miljenko Mikuc are known +contributors. + +Jeff Ahrenholz has been the primary Boeing +developer of CORE, and has written this manual. Tom Goff + designed the Python framework and has made significant +contributions. Claudiu Danilov , Gary Pei +, Phil Spagnolo, and Ian Chakeres have contributed code +to CORE. Dan Mackley helped develop the CORE API, +originally to interface with a simulator. Jae Kim and +Tom Henderson have supervised the project and +provided direction. + diff --git a/doc/devguide.rst b/doc/devguide.rst new file mode 100644 index 00000000..2da93e01 --- /dev/null +++ b/doc/devguide.rst @@ -0,0 +1,331 @@ +.. This file is part of the CORE Manual + (c)2012-2013 the Boeing Company + +.. _Developer's_Guide: + +***************** +Developer's Guide +***************** + +This section contains advanced usage information, intended for developers and +others who are comfortable with the command line. + +.. _Coding_Standard: + +Coding Standard +=============== + +The coding standard and style guide for the CORE project are maintained online. +Please refer to the `coding standard +`_ posted on the CORE Wiki. + +.. _Source_Code_Guide: + +Source Code Guide +================= + +The CORE source consists of several different programming languages for +historical reasons. Current development focuses on the Python modules and +daemon. Here is a brief description of the source directories. + +These are being actively developed as of CORE |version|: + +* *gui* - Tcl/Tk GUI. This uses Tcl/Tk because of its roots with the IMUNES + project. +* *daemon* - Python modules are found in the :file:`daemon/core` directory, the + daemon under :file:`daemon/sbin/core-daemon`, and Python extension modules for + Linux Network Namespace support are in :file:`daemon/src`. +* *doc* - Documentation for the manual lives here in reStructuredText format. +* *packaging* - Control files and script for building CORE packages are here. + +These directories are not so actively developed: + +* *kernel* - patches and modules mostly related to FreeBSD. + +.. _The_CORE_API: + +The CORE API +============ + +.. index:: CORE; API + +.. index:: API + +.. index:: remote API + +The CORE API is used between different components of CORE for communication. +The GUI communicates with the CORE daemon using the API. One emulation server +communicates with another using the API. The API also allows other systems to +interact with the CORE emulation. The API allows another system to add, remove, +or modify nodes and links, and enables executing commands on the emulated +systems. On FreeBSD, the API is used for enhancing the wireless LAN +calculations. Wireless link parameters are updated on-the-fly based on node +positions. + +CORE listens on a local TCP port for API messages. The other system could be +software running locally or another machine accessible across the network. + +The CORE API is currently specified in a separate document, available from the +CORE website. + +.. _Linux_network_namespace_Commands: + +Linux network namespace Commands +================================ + +.. index:: lxctools + +Linux network namespace containers are often managed using the *Linux Container +Tools* or *lxc-tools* package. The lxc-tools website is available here +``_ for more information. CORE does not use these +management utilities, but includes its own set of tools for instantiating and +configuring network namespace containers. This section describes these tools. + +.. index:: vnoded + +The *vnoded* daemon is the program used to create a new namespace, and +listen on a control channel for commands that may instantiate other processes. +This daemon runs as PID 1 in the container. It is launched automatically by +the CORE daemon. The control channel is a UNIX domain socket usually named +:file:`/tmp/pycore.23098/n3`, for node 3 running on CORE +session 23098, for example. Root privileges are required for creating a new +namespace. + +.. index:: vcmd + +The *vcmd* program is used to connect to the *vnoded* daemon in a Linux network +namespace, for running commands in the namespace. The CORE daemon +uses the same channel for setting up a node and running processes within it. +This program has two +required arguments, the control channel name, and the command line to be run +within the namespace. This command does not need to run with root privileges. + +When you double-click +on a node in a running emulation, CORE will open a shell window for that node +using a command such as: +:: + + gnome-terminal -e vcmd -c /tmp/pycore.50160/n1 -- bash + + +Similarly, the IPv4 routes Observer Widget will run a command to display the routing table using a command such as: +:: + + vcmd -c /tmp/pycore.50160/n1 -- /sbin/ip -4 ro + + +.. index:: core-cleanup + +A script named *core-cleanup* is provided to clean up any running CORE +emulations. It will attempt to kill any remaining vnoded processes, kill any +EMANE processes, remove the :file:`/tmp/pycore.*` session directories, and +remove any bridges or *ebtables* rules. With a *-d* option, it will also kill +any running CORE daemon. + +.. index:: netns + +The *netns* command is not used by CORE directly. This utility can be used to +run a command in a new network namespace for testing purposes. It does not open +a control channel for receiving further commands. + +Here are some other Linux commands that are useful for managing the Linux +network namespace emulation. +:: + + # view the Linux bridging setup + brctl show + # view the netem rules used for applying link effects + tc qdisc show + # view the rules that make the wireless LAN work + ebtables -L + + +Below is a transcript of creating two emulated nodes and connecting them together with a wired link: + +.. index:: create nodes from command-line + +.. index:: command-line + +:: + + # create node 1 namespace container + vnoded -c /tmp/n1.ctl -l /tmp/n1.log -p /tmp/n1.pid + # create a virtual Ethernet (veth) pair, installing one end into node 1 + ip link add name n1.0.1 type veth peer name n1.0 + ip link set n1.0 netns `cat /tmp/n1.pid` + vcmd -c /tmp/n1.ctl -- ip link set n1.0 name eth0 + vcmd -c /tmp/n1.ctl -- ifconfig eth0 10.0.0.1/24 + + # create node 2 namespace container + vnoded -c /tmp/n2.ctl -l /tmp/n2.log -p /tmp/n2.pid + # create a virtual Ethernet (veth) pair, installing one end into node 2 + ip link add name n2.0.1 type veth peer name n2.0 + ip link set n2.0 netns `cat /tmp/n2.pid` + vcmd -c /tmp/n2.ctl -- ip link set n2.0 name eth0 + vcmd -c /tmp/n2.ctl -- ifconfig eth0 10.0.0.2/24 + + # bridge together nodes 1 and 2 using the other end of each veth pair + brctl addbr b.1.1 + brctl setfd b.1.1 0 + brctl addif b.1.1 n1.0.1 + brctl addif b.1.1 n2.0.1 + ip link set n1.0.1 up + ip link set n2.0.1 up + ip link set b.1.1 up + + # display connectivity and ping from node 1 to node 2 + brctl show + vcmd -c /tmp/n1.ctl -- ping 10.0.0.2 + + +The above example script can be found as :file:`twonodes.sh` in the +:file:`examples/netns` directory. Use *core-cleanup* to clean up after the +script. + +.. _FreeBSD_Commands: + +FreeBSD Commands +================ + + +.. index:: vimage +.. index:: ngctl +.. index:: Netgraph +.. _FreeBSD_Kernel_Commands: + +FreeBSD Kernel Commands +----------------------- + +The FreeBSD kernel emulation controlled by CORE is realized through several +userspace commands. The CORE GUI itself could be thought of as a glorified +script that dispatches these commands to build and manage the kernel emulation. + + +* **vimage** - the vimage command, short for "virtual image", is used to + create lightweight virtual machines and execute commands within the virtual + image context. On a FreeBSD CORE machine, see the *vimage(8)* man page for + complete details. The vimage command comes from the VirtNet project which + virtualizes the FreeBSD network stack. + + +* **ngctl** - the ngctl command, short for "netgraph control", creates + Netgraph nodes and hooks, connects them together, and allows for various + interactions with the Netgraph nodes. See the *ngctl(8)* man page for + complete details. The ngctl command is built-in to FreeBSD because the + Netgraph system is part of the kernel. + +Both commands must be run as root. +Some example usage of the *vimage* command follows below. +:: + + vimage # displays the current virtual image + vimage -l # lists running virtual images + vimage e0_n0 ps aux # list the processes running on node 0 + for i in 1 2 3 4 5 + do # execute a command on all nodes + vimage e0_n$i sysctl -w net.inet.ip.redirect=0 + done + + +The *ngctl* command is more complex, due to the variety of Netgraph nodes +available and each of their options. +:: + + ngctl l # list active Netgraph nodes + ngctl show e0_n8: # display node hook information + ngctl msg e0_n0-n1: getstats # get pkt count statistics from a pipe node + ngctl shutdown \\[0x0da3\\]: # shut down unnamed node using hex node ID + + +There are many other combinations of commands not shown here. See the online +manual (man) pages for complete details. + +Below is a transcript of creating two emulated nodes, `router0` and `router1`, +and connecting them together with a link: + +.. index:: create nodes from command-line + +.. index:: command-line + +:: + + # create node 0 + vimage -c e0_n0 + vimage e0_n0 hostname router0 + ngctl mkpeer eiface ether ether + vimage -i e0_n0 ngeth0 eth0 + vimage e0_n0 ifconfig eth0 link 40:00:aa:aa:00:00 + vimage e0_n0 ifconfig lo0 inet localhost + vimage e0_n0 sysctl net.inet.ip.forwarding=1 + vimage e0_n0 sysctl net.inet6.ip6.forwarding=1 + vimage e0_n0 ifconfig eth0 mtu 1500 + + # create node 1 + vimage -c e0_n1 + vimage e0_n1 hostname router1 + ngctl mkpeer eiface ether ether + vimage -i e0_n1 ngeth1 eth0 + vimage e0_n1 ifconfig eth0 link 40:00:aa:aa:0:1 + vimage e0_n1 ifconfig lo0 inet localhost + vimage e0_n1 sysctl net.inet.ip.forwarding=1 + vimage e0_n1 sysctl net.inet6.ip6.forwarding=1 + vimage e0_n1 ifconfig eth0 mtu 1500 + + # create a link between n0 and n1 + ngctl mkpeer eth0@e0_n0: pipe ether upper + ngctl name eth0@e0_n0:ether e0_n0-n1 + ngctl connect e0_n0-n1: eth0@e0_n1: lower ether + ngctl msg e0_n0-n1: setcfg \\ + {{ bandwidth=100000000 delay=0 upstream={ BER=0 dupl + icate=0 } downstream={ BER=0 duplicate=0 } }} + ngctl msg e0_n0-n1: setcfg {{ downstream={ fifo=1 } }} + ngctl msg e0_n0-n1: setcfg {{ downstream={ droptail=1 } }} + ngctl msg e0_n0-n1: setcfg {{ downstream={ queuelen=50 } }} + ngctl msg e0_n0-n1: setcfg {{ upstream={ fifo=1 } }} + ngctl msg e0_n0-n1: setcfg {{ upstream={ droptail=1 } }} + ngctl msg e0_n0-n1: setcfg {{ upstream={ queuelen=50 } }} + + +Other FreeBSD commands that may be of interest: +.. index:: FreeBSD commands + +* **kldstat**, **kldload**, **kldunload** - list, load, and unload + FreeBSD kernel modules +* **sysctl** - display and modify various pieces of kernel state +* **pkg_info**, **pkg_add**, **pkg_delete** - list, add, or remove + FreeBSD software packages. +* **vtysh** - start a Quagga CLI for router configuration + +Netgraph Nodes +-------------- + +.. index:: Netgraph + +.. index:: Netgraph nodes + +Each Netgraph node implements a protocol or processes data in some well-defined +manner (see the `netgraph(4)` man page). The netgraph source code is located +in `/usr/src/sys/netgraph`. There you might discover additional nodes that +implement some desired functionality, that have not yet been included in CORE. +Using certain kernel commands, you can likely include these types of nodes into +your CORE emulation. + +The following Netgraph nodes are used by CORE: + +* **ng_bridge** - switch node performs Ethernet bridging + +* **ng_cisco** - Cisco HDLC serial links + +* **ng_eiface** - virtual Ethernet interface that is assigned to each virtual machine + +* **ng_ether** - physical Ethernet devices, used by the RJ45 tool + +* **ng_hub** - hub node + +* **ng_pipe** - used for wired Ethernet links, imposes packet delay, bandwidth restrictions, and other link characteristics + +* **ng_socket** - socket used by *ngctl* utility + +* **ng_wlan** - wireless LAN node + + diff --git a/doc/emane.rst b/doc/emane.rst new file mode 100644 index 00000000..f503e070 --- /dev/null +++ b/doc/emane.rst @@ -0,0 +1,293 @@ +.. This file is part of the CORE Manual + (c)2012 the Boeing Company + +.. _EMANE: + +***** +EMANE +***** + +.. index:: EMANE + +This chapter describes running CORE with the EMANE emulator. + +.. _What_is_EMANE?: + +What is EMANE? +============== + +.. index:: EMANE; introduction to + +The Extendable Mobile Ad-hoc Network Emulator (EMANE) allows heterogeneous +network emulation using a pluggable MAC and PHY layer architecture. The EMANE +framework provides an implementation architecture for modeling different radio +interface types in the form of *Network Emulation Modules* (NEMs) and +incorporating these modules into a real-time emulation running in a distributed +environment. + +EMANE is developed by U.S. Naval Research Labs (NRL) Code 5522 and Adjacent +Link LLC, +who maintain these websites: + +* ``_ +* ``_ +* ``_ (former EMANE project home) + +Instead of building Linux Ethernet bridging networks with CORE, higher-fidelity +wireless networks can be emulated using EMANE bound to virtual devices. CORE +emulates layers 3 and above (network, session, application) with its virtual +network stacks and process space for protocols and applications, while EMANE +emulates layers 1 and 2 (physical and data link) using its pluggable PHY and +MAC models. + +The interface between CORE and EMANE is a TAP device. CORE builds the virtual +node using Linux network namespaces, and installs the TAP device into the +namespace. EMANE binds a userspace socket to the device, on the host before it +is pushed into the namespace, for sending and receiving data. The *Virtual +Transport* is the EMANE component responsible for connecting with the TAP +device. + +EMANE models are configured through CORE's WLAN configuration dialog. A +corresponding EmaneModel Python class is sub-classed for each supported EMANE +model, to provide configuration items and their mapping to XML files. This way +new models can be easily supported. When CORE starts the emulation, it +generates the appropriate XML files that specify the EMANE NEM configuration, +and launches the EMANE daemons. + +Some EMANE models support location information to determine when packets should +be dropped. EMANE has an event system where location events are broadcast to +all NEMs. CORE can generate these location events when nodes are moved on the +canvas. The canvas size and scale dialog has controls for mapping the X,Y +coordinate system to a latitude, longitude geographic system that EMANE uses. +When specified in the :file:`core.conf` configuration file, CORE can also +subscribe to EMANE location events and move the nodes on the canvas as they are +moved in the EMANE emulation. This would occur when an Emulation Script +Generator, for example, is running a mobility script. + +.. index:: EMANE; Configuration + +.. index:: EMANE; Installation + +.. _EMANE_Configuration: + +EMANE Configuration +=================== + + +CORE and EMANE currently work together only on the Linux network namespaces +platform. The normal CORE installation instructions should be followed from +:ref:`Installation`. + +The CORE configuration file :file:`/etc/core/core.conf` has options specific to +EMANE. Namely, the `emane_models` line contains a comma-separated list of EMANE +models that will be available. Each model has a corresponding Python file +containing the *EmaneModel* subclass. A portion of the default +:file:`core.conf` file is shown below: + +:: + + # EMANE configuration + emane_platform_port = 8101 + emane_transform_port = 8201 + emane_event_monitor = False + emane_models = RfPipe, Ieee80211abg + + +EMANE can be installed from deb or RPM packages or from source. See the +`EMANE website `_ for +full details. + +Here are quick instructions for installing all EMANE packages: + +:: + + # install dependencies + sudo apt-get install libssl-dev libxml-lixbml-perl libxml-simple-perl + # download and install EMANE 0.8.1 + export URL=http://labs.cengen.com/emane/download/deb/ubuntu-12_04 + wget $URL/0.8.1/amd64/emane-bundle-0.8.1.amd64.tgz + mkdir emane-0.8.1 + cd emane-0.8.1 + tar xzf ../emane-bundle-0.8.1.amd64.tgz + sudo dpkg -i *.deb + + +If you have an EMANE event generator (e.g. mobility or pathloss scripts) and +want to have CORE subscribe to EMANE location events, set the following line in +the :file:`/etc/core/core.conf` configuration file: +:: + + emane_event_monitor = True + +Do not set the above option to True if you want to manually drag nodes around +on the canvas to update their location in EMANE. + +Another common issue is if installing EMANE from source, the default configure +prefix will place the DTD files in :file:`/usr/local/share/emane/dtd` while +CORE expects them in :file:`/usr/share/emane/dtd`. A symbolic link will fix +this: +:: + + sudo ln -s /usr/local/share/emane /usr/share/emane + + +.. _Single_PC_with_EMANE: + +Single PC with EMANE +==================== + +This section describes running CORE and EMANE on a single machine. This is the +default mode of operation when building an EMANE network with CORE. The OTA +manager interface is off and the virtual nodes use the loopback device for +communicating with one another. This prevents your emulation session from +sending data on your local network and interfering with other EMANE users. + +EMANE is configured through a WLAN node, because it is all about emulating +wireless radio networks. Once a node is linked to a WLAN cloud configured with +an EMANE model, the radio interface on that node may also be configured +separately (apart from the cloud.) + +Double-click on a WLAN node to invoke the WLAN configuration dialog. Click the +*EMANE* tab; when EMANE has +been properly installed, EMANE wireless modules should be listed in the +*EMANE Models* list. (You may need to restart the CORE daemon if +it was running prior to installing the EMANE Python bindings.) +Click on a model name to enable it. + +When an EMANE model is selected in the *EMANE Models* list, clicking on +the *model options* button causes the GUI to query the CORE daemon for +configuration items. Each model will have different parameters, refer to the +EMANE documentation for an explanation of each item. The defaults values are +presented in the dialog. Clicking *Apply* and *Apply* again will store +the EMANE model selections. + +The *EMANE options* button +allows specifying some global parameters for EMANE, some of +which are necessary for distributed operation, see :ref:`Distributed_EMANE`. + +.. index:: RF-PIPE model + +.. index:: 802.11 model + +.. index:: ieee80211abg model + +.. index:: geographic location + +.. index:: Universal PHY + +The RF-PIPE and IEEE 802.11abg models use a Universal PHY that supports +geographic location information for determining pathloss between nodes. A +default latitude and longitude location is provided by CORE and this +location-based pathloss is enabled by default; this is the *pathloss mode* +setting for the Universal PHY. Moving a node on the canvas while the emulation +is running generates location events for EMANE. To view or change the +geographic location or scale of the canvas use the *Canvas Size and Scale* +dialog available from the *Canvas* menu. + +Clicking the green *Start* button launches the emulation and causes TAP +devices to be created in the virtual nodes that are linked to the EMANE WLAN. +These devices appear with interface names such as eth0, eth1, etc. The EMANE +daemons should now be running on the host: +:: + + > ps -aef | grep emane + root 10472 1 1 12:57 ? 00:00:00 emane --logl 0 platform.xml + root 10526 1 1 12:57 ? 00:00:00 emanetransportd --logl 0 tr + +The above example shows the *emane* and *emanetransportd* daemons started by +CORE. To view the configuration generated by CORE, look in the +:file:`/tmp/pycore.nnnnn/` session directory for a :file:`platform.xml` file +and other XML files. One easy way to view this information is by +double-clicking one of the virtual nodes, and typing *cd ..* in the shell to go +up to the session directory. + +When EMANE is used to network together CORE nodes, no Ethernet bridging device +is used. The Virtual Transport creates a TAP device that is installed into the +network namespace container, so no corresponding device is visible on the host. + +.. index:: Distributed_EMANE +.. _Distributed_EMANE: + +Distributed EMANE +================= + + +Running CORE and EMANE distributed among two or more emulation servers is +similar to running on a single machine. There are a few key configuration items +that need to be set in order to be successful, and those are outlined here. + +Because EMANE uses a multicast channel to disseminate data to all NEMs, it is +a good idea to maintain separate networks for data and control. The control +network may be a shared laboratory network, for example, but you do not want +multicast traffic on the data network to interfere with other EMANE users. +The examples described here will use *eth0* as a control interface +and *eth1* as a data interface, although using separate interfaces +is not strictly required. Note that these interface names refer to interfaces +present on the host machine, not virtual interfaces within a node. + +Each machine that will act as an emulation server needs to have CORE and EMANE +installed. Refer to the :ref:`Distributed_Emulation` section for configuring +CORE. + +The IP addresses of the available servers are configured from the +CORE emulation servers dialog box (choose *Session* then +*Emulation servers...*) described in :ref:`Distributed_Emulation`. +This list of servers is stored in a :file:`~/.core/servers.conf` file. +The dialog shows available servers, some or all of which may be +assigned to nodes on the canvas. + +Nodes need to be assigned to emulation servers as described in +:ref:`Distributed_Emulation`. Select several nodes, right-click them, and +choose *Assign to* and the name of the desired server. When a node is not +assigned to any emulation server, it will be emulated locally. The local +machine that the GUI connects with is considered the "master" machine, which in +turn connects to the other emulation server "slaves". Public key SSH should +be configured from the master to the slaves as mentioned in the +:ref:`Distributed_Emulation` section. + +The EMANE models can be configured as described in :ref:`Single_PC_with_EMANE`. +Under the *EMANE* tab of the EMANE WLAN, click on the *EMANE options* button. +This brings +up the emane configuration dialog. The *enable OTA Manager channel* should +be set to *on*. The *OTA Manager device* and *Event Service device* should +be set to something other than the loopback *lo* device. For example, if eth0 +is your control device and eth1 is for data, set the OTA Manager device to eth1 +and the Event Service device to eth0. Click *Apply* to +save these settings. + +.. HINT:: + Here is a quick checklist for distributed emulation with EMANE. + + 1. Follow the steps outlined for normal CORE :ref:`Distributed_Emulation`. + 2. Under the *EMANE* tab of the EMANE WLAN, click on *EMANE options*. + 3. Turn on the *OTA Manager channel* and set the *OTA Manager device*. + Also set the *Event Service device*. + 4. Select groups of nodes, right-click them, and assign them to servers + using the *Assign to* menu. + 5. Synchronize your machine's clocks prior to starting the emulation, + using ``ntp`` or ``ptp``. Some EMANE models are sensitive to timing. + 6. Press the *Start* button to launch the distributed emulation. + + +Now when the Start button is used to instantiate the emulation, +the local CORE Python +daemon will connect to other emulation servers that have been assigned to nodes. +Each server will have its own session directory where the :file:`platform.xml` +file and other EMANE XML files are generated. The NEM IDs are automatically +coordinated across servers so there is no overlap. Each server also gets its +own Platform ID. + +Instead of using the loopback device for disseminating multicast +EMANE events, an Ethernet device is used as specified in the +*configure emane* dialog. +EMANE's Event Service can be run with mobility or pathloss scripts +as described in +:ref:`Single_PC_with_EMANE`. If CORE is not subscribed to location events, it +will generate them as nodes are moved on the canvas. + +Double-clicking on a node during runtime will cause the GUI to attempt to SSH +to the emulation server for that node and run an interactive shell. The public +key SSH configuration should be tested with all emulation servers prior to +starting the emulation. + + diff --git a/doc/figures/Makefile.am b/doc/figures/Makefile.am new file mode 100644 index 00000000..db0b6a1a --- /dev/null +++ b/doc/figures/Makefile.am @@ -0,0 +1,54 @@ +# CORE +# (c)2009-2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +# + +# define new file extensions for handling figures and html +SUFFIXES = .jpg .gif +GIFTOJPG = convert -background white -flatten + +# dia figures can be manually converted to jpg +# On Ubuntu 11.10, this is failing for some reason. +DIATOJPG = dia -t jpg -e + + +# these are file extension handlers for automatically converting between image +# file types; the .jpg files are built from .gif files from the GUI + +# file extension handler to convert .gif to .jpg +%.jpg: %.gif + $(GIFTOJPG) $(top_srcdir)/gui/icons/tiny/$< $@ + +# file extension handler so we can list .gif as dependency for .gif.jpg +%.gif: + @echo "Using GUI file $(top_srcdir)/gui/icons/tiny/$@" + + +# list of base names for figures +figures = core-architecture core-workflow +# list of figures + dia suffix +figures_dia = $(figures:%=%.dia) +# list of figure + jpg suffix +figures_jpg = $(figures:%=%.jpg) + +# icons from the GUI source +icons = select start router host pc mdr router_green \ + lanswitch hub wlan \ + link rj45 tunnel marker oval rectangle text \ + stop observe plot twonode run document-properties +# list of icons + .gif.jpg suffix +icons_jpg = $(icons:%=%.jpg) + +BUILT_SOURCES = $(figures_dia) $(figures_jpg) $(icons_jpg) + +clean-local: + rm -f $(icons_jpg) + +EXTRA_DIST = $(figures_dia) $(figures_jpg) + +# extra cruft to remove +DISTCLEANFILES = Makefile.in $(icons_jpg) + diff --git a/doc/figures/core-architecture.dia b/doc/figures/core-architecture.dia new file mode 100644 index 0000000000000000000000000000000000000000..f810711d5ea92ffafc523ec9f385596fe7d4aee0 GIT binary patch literal 1829 zcmV+=2io`_iwFP!000021MOUGZ`(Ey{_bBPsKC$xiY!tRB{fZowOF?T#ae9XXM?sF zTZ>*iijL!b*l!;xJFzWGaV&{y6Hq{mSU%m6C-Qmjbfn(CyGvs2me4%P(hD7!madU> zl7&$^z0kj1eLVB^cb9{=VT9lCzbVCu#;-_o@$EvNF*biQ94?njGhXGGWz>wLg_)D# ze>jfukP8j<%YmltDhM&d;@sveW{gJT1tVID6LO)C@#JPovqc)}YpIRgB#Seu-QxH{ ze|23P`f#IWxToh4-E%x8V@mK%y=sdeLC{3?oY1n`WS->_7h$XUfk=%W@wp?jk;=JH zI=y`LnJ`A^t97$BC%5{l8e40KC74d5^w1XfPrP;pG+jFo2LirpThO!b{c^gwalhu` ze$CN-%|-cWo>4||#12i4vn(b!U0Y>zL7LmiCphLq?6Gcv=Gw0##KI2xX?==T2Gj!&}j-(<0#2X=db(=||AMBva?< zB0S!cD@D`4efuD(m9Bc8!xLUhziaG}pD9 ztps#()LUQrJBe=zizav%;ZJYD!KAF3^(KJ6I2_k;Y!AAqoy~nXt^zS+I3@)AXlJNA zOKY<^%W7wchrrV`A=NjNq>H2?dU-51cGOce$_q^gd}Rlh%p1{NWKrAYL- zljsfMUWx~|5oHUGnEztNF-S3~{0tSM;;FA9(|*X*X-lS1GMU01GPV05Q>e&Pk*Oln z?#OgZqj1Xq(|*Fq{CqIycZD!5!D%!%6{kw(RH!($Q%?Phvr~v^$SL)6l#&Wgbz3K> zmLc=0Z(t(dhXyiz581&vuuK~O-vDB4+NdcIrs;^JVbP1H_pS2x-I01q8~D(e%*&>$ zmJObwRFtNU^CH~vA`E;B+OTQ(kTV{ujWDIzvTSWT@a@*RM=?pKM>-Ugj`l{6JFy#^ zd=yG@;e+P>9Jn>vx%;{SJJcHNY}0SEmgA|9Ma ztdIhx=X%iKcpO+3QW&T(P+{P+z(B7x26_g^2&n+bAqcuqm;pTaI|rT##224OezMW8 z+_?%7$Fv;ZZ{dXJk9%s$o@7xBKR(3yJj@TCV%-0t&G^jSWcn-OU9 zi^2WH_Ws2H9d4K@wW%9;@w6@2ZGi$6;91aW=+L1ePp|Q+L(SI7AXMnVBa+$r(w$ilILrwcNGFW0YZ+b`S8}g z{5XyUDtiz-gBr#kSxEBlSgi05 ziWO&H#&Pt|{=WSevk>55EWU)2g(ab6QMaYLXi{^!?+BDy?wIw);S6rf~tW(=MW zCK0yG=#7G<-fF2x!O}~BrPlj$Y$K4lEywT$82O?`VFb?ui#~k$^H=Scub;F}Uq2{3 z>IskbhM|I@9}bG1u<73JV2dD-zD3a5ZV?1X^76~(9a5_=yIg%qg6nG%sMVLxef6c- zaUW_SCP|jwZwl1Jy-}~R>1T7GtyW+5xcU;b-qK)00|MEvgM-%2jt0<}QlI?Pz0|47 zm&W~Y>n;nVs1MPcUdlPZZNEpx^d(nxpo#V>I#8@3>#d?w?q8*dr)oN3B{GDE%pl3aMND#)8AvZCK$RLaO%2xHiWhP literal 0 HcmV?d00001 diff --git a/doc/figures/core-architecture.jpg b/doc/figures/core-architecture.jpg new file mode 100644 index 0000000000000000000000000000000000000000..fba2bf306c6bd1ee49ca239dc8003690e0dac289 GIT binary patch literal 38352 zcmd?R1z23omM+``f`kBp;2vlK!QG)l2p&ARyEg8UMuIy82p%lBySoP`xVu{jPWSDc zGc)IWx&O@hX6DX3^FPx()y=Nnd+n;#wQ8;P)>|7k3tI&|lNOf}2OuB-00{6u0Bivu z3P43hMnQgzih_cIhKBm&DK5rSbo8f0IM1iO$7P5q5%q(JubU%OeQMzn~DxRrSVfBhoOTX+7o;NLLy?Cm$Y=R=sCH#d3gEw zMc;~vOGrvdE5BD!Ra4i{G%_|ZH8Z!cbaZldadmU|@c$SP7!({58XNa1J|XdQQgT*y zPVU#d{DQ*Ds_L5By84F3&aUpB-oE~U!HLPK@6$80bMtHK8=G6(JG*=PXXigIeqLT( z-`xJ{7XkqBuib*b|FvVk^$Q!`uSZBoh)5{E`i1bw6jppoE*Z$J8Ki4t8|4`5VrDK2V*F4}UA_Dx!L&OGv z0EdE7>#~mBt#tLLD}l#)audZQL*JduIkn(m(XXI&Kx@j^v{0Y68!jFgfIue=*P*Z6Q|js;3(QUs@}HM)=!JCVoytETK+Y{~q0CW# zY{rb47-_{J`Goff2NVzF2iZl30pgS)XHI{(sEMC$D@y+|?$|!#wBY_Z4Ded-J~;&j z2+RJ%Mb2~M5{#ZG)ftZAFhGF(YR2s&7+`a1gz_293gz6Tn%&bwkYIo@ z0vO=sR~TS@_qPjOoD_%1JC0}J$Yj6xZH zDuOriox)G=T+)f<&J6~b2w@xo9+LtyvFxbjpUw1 z+<#(Nc`&ohxxji`?ej|B*=)H6oW=6!jcNO7+`%m^V ze5w}uv%coWi*|iF(rP_QIHQoN*utBT`c=6;8ZK$P;*|*P*PRRLb1N9&hG7|QsP#e6 zxX_=;+sRcGD{^v*vH`e?O6rPYxPU)d5H|GS^V??99>wJX3?L!o;@s;+3j@TOOvH*#aUFc3Bj!)*1CISuYyo+M_;y*O;@;ktq^|bkD;R%PMfE; z0klaovY!W8p76;Fi^+D#VA_qSZ?w|G0HID~9HOTv!D{cSWlR#r!?K=NuaerQVz%Tr zXcx)43P>{yJC|Y1?S-rrg}q{?Y;JA|ojBflY0K`m84(u9cT(rSP)qNbVtkqx@{_Kb z?j71oU!j$`sn`-h>qoVi?mOfc4gN7sW;*M#W>D;hM+fikK=XnTZH+5cF6u1Wq|O&5 zn&(WOuP2zGc%sFk)G&a#wwNt2QQVZp;doFT1Y+Gxb?K||IO06+q06a$LYI~FLJU^{ z;hzc$8w3WR@od+-dIq1K>~*VjWq+&C{x1B|bqq=jzw*lzT~;XI&z7^Yk1)XbyNjqh zFbt5L-o(El4EG-c9220UI%uTF;Xx_riQs$&$?r`S(N4cc0FMIRXP&u9fFQcMXr{WhuCzI3!2|H zdqiFS1@$5+MQ6kH;k}iu$wNA`lUDtA!J4LwVW}q@M8*KW58?EhQ}r!RkKSxg9PhL{ z&T7lpo6mr^WY}ny-o9h+X`qe#nYjVEh5=6V9s;xA?utBx)}J=0^Oh+f{+u~8yT5W_ zQHp5xko`%ee_9R>FJA${+nE|~Gr8uO+{vuk$sCTJ$1$$#GJc30tb~ZPKCdiQrmslW z^lnI+4PXGhXc%BOQ^(oBypd@nt@L1KQcxB@Q_!LNS?nO*qqI3P2LaPM%YG&?(I6P$3L6F(f2EtG zYj%bXl{V{w0q%m~cmGtpaYpTtfykYo6}m6DniWb1$O_E{msqGJ%34_!%*op|Ea55_ z@%Cx^IKC#xFI2K3*5(;9V$L;9jPR*F;t#>}FmO!vp3XHezGFTCmn;~>;SA=x_#xQH zzn0ut_Nii0HO*doU{IZ6v@I*aw@M*cv3+4mf+@0#iA727s3coz!F?H{GhC=42Ijdf zNMFOFc$lU|IW5BQG*5t7Tji_H*qjLVKQfweeW&>4=UdJ6ID_K36j|{(W=bIU^r6HX z)J+Qe_XelwVaRFj`U#QX6I_~h_e~dPqV`4g@_i5DHlsp|+bn^-tIImekI39V7=1s~ z)8c-gcB*URMlaB)S>@$kcV>sI@C`FPI@d&Z&ehN@NnR9f*7#P{@q=}C9~H%a6zSA0 z7tB3gqcSy5y3B~YC{+&w6am=?NBDh5IAj~AIfw9LY<`l+xP-romf_EQJ=eh}Xof-| zoy5XqTtyJ#h^~dVvV-!N`}TM*)C2kJ^J|nY9LCUjrNijs^X^I{<tvWi?;0wbs#~oBlGSr?@YufSBPjb0?C_PyL^w)TGc!BO5K2pJvBs_uSgn%f z(Uzj}UgZ??e7j;9f4}*?de>&XI!>WRCh0X>=Omr$=sRWy3l`@HmUm7v57Hy!izce> z)9fqn(k&KK*pKj#W~LJ^A=b(Js3k6eKhj?p_>Ub68fMpgcRJX4U)@$yZyGhM5^Cb0 z%)7|yVHSQnhR-zqSLcB6O%HC-x~BvW-Jpw9wc?q$-;TNDL((olfqtQM`CM>2_xZC$ z&}t2IA16c&U4ZQFl#bMo{x+2yM0G}S=k<0Lt*mHSByi|1OHD2sn`F(9rA5bp80FQ_x7E2`4n>7K_(J$k%cleZxE1wYjDQ^X84 zHGMaB2TF2mpYHfizHh`IN(@|Cb$SInKgIanu0HRh{!uI+jISE8nr5?BV!-hbANARY zq$*0c=C#nbywhi$l06&4sWwwVG3y^9(oenF^*FR{Zsdgr5LpQy&z@8Rsl7_8Q7#A7y zF1e=WsvLF0a;UmkAMEHaOT&t;C#5HrL>J~nX&yRR2NU=rStT}JzyLmz^$m)iP`KxO z3ZJZcav-bLkb4!4x|!;trY27-tz8>neZKsXT_pV%aAro9QgxN425aU$I%%K zNGz_9zJ%CGn(Po3roZ}rc+apQOTW7SJ+%1Ihsy@=P0I-f$cqu}%Rh>rUo3rlA(5&2 zp{Ueip6cz)6*310UIadO%%X2xfP&P%$2VNo+saI=_W zVM}CnqZdAbyvY;qcp!%qAwv2ak4Jr38=-vuao>&#&;U4cfPGmzlpg+(k{mas^C-fiWn*4bAYajD0VD= zT#uC1I+Nyt;$-N)>wJFt+KYy|II-9zYE@q5sB-;ReNW}Ym<{fD#xA58!YUHGiI?lv zN!)%`nSf1PsOrv-vR$^hcm;e1!yn}21>ftPCRnPGql}lXKI<#AOq9|GGJJ}Z{Z@SE z8BYC7_|r{5|46I1^u#oDqSwM@aoP6#xrM;x(>h9heUFLRef-97B`GVG&lS?A1LyJd z`*wpOfT(k;koubM)~zqxRGCDTi9f!p1Cy3K>D^ye`-ZChh~Fsu=YeLj42fQFD`j=m zgKSSt%beo4@lA9_H$C*dwheus8r)@3(*Gf9^Y~*-r#`*wY|xnQ`@2gjdsoJB9RQC@ zIM!f*hi=G)w5t7eOpCm4%6mmIXL38ZA4C}TdVQyMPnldddq2uENYdQavUN;u3R)#8 z?2Ul|P}>rX9^xO8u0Z2nX(?xQX)Qm(ciOb4j}&Xior)N~Hr7lseyO)UPN2in-YJzN z$_3k~TvTk=Qp{4E7S-q-K`J5e=s4%0YPc`sGHtl7OrWX`ujFx@?sZisqS{9pXZ+A} z>B?~E1!@P7{D$_dbXt}|Ci%uTchY+K%uaRfi!x>3J8lkD;_0Q**u5{oi&UR9q%rpM z@=@|p5Th)$bNPePbb3JdjA^QT%$%M^m*&EqTms6JZ2BkXt&&ZHnrKj@IaIb+7id) z4@u;CtDd}xTBl2&45)2+=kXf+4E&@VS#F2B;v(G-t-f1V-!bu1yzCuWo@U%J#zxY9 z0OV7=8Q*NaGul&Sa+349tb23wb18g$@QH=BW33DK6$NgMM(K-44TH&&P7Y?5tqh=t zQ>o#eQP`W-+E0(iSI=yQa`uR|Vv9w{;yj-|SbfKzUSdw)(hso#DwNT^Ci~=s^pnyU z>eN$FEx8i`)_-4b_=7GSftno6U@`S+oCMvc5#p;m0w{iBAgB^Lv~$BF>^fJwVVihv zMhfvH|8CYbFPsKhXCWAJH^b;^IsKTV!2Nvi&Fj&3I~iRQjYVJr=}PnDnRk`GS&ZYK zzo^iu8w9s+Q2QUK8rIa+#cI6pqgyszVW0x&RD@TM$pMIjKRNiPCzH$Lr~DNJ8`~I zkHfYqMo?8-RcjaclC0^&@D@vA_zsDExM^17SasNfuf1!o`Y3NNFky)-kl#Vve2b!* zx8x0UNEz~Id08{JG=%5#Fj6~ecH$tpbowj>_ey8pL|Y{cux6_Z1DLpzKq^r(HjQkP zwxi@Y>TDoS_G^Y@iduLMFI^g)d(~0=9;8AhCw=T3BYP{G`PQ0JFf=#bx5}W>nBz~Q z>j*vRdMXk|{>3C9CI;oqZPmBdIqovRs5o|@Z8RiLINmZf>jv$k${pFne+%&mHYY&Dj5nQwKwiWM5N(rVq*BBO6EId zUIN~Q<^@Limg^SN#|%+IU_StMeC=Zl=%|v^cHVgPP>Q#a=2Y3E5L;T6;8!D*5wGRD zV|U1Z)`;O_npqJM5L3(xDjStNWZTYxH~k0Z(iZypmeScGKYz6(C-qmJ`7*_<0rX{} zsqr+6vWwwHE;{WM+ABsVDN_Ed|VY@cb#JX&;1UDWLC zqO*=Mj*&3+%INmNaN<;gE5O8ppXXBNvc&N+is$al&Jl?V_#7&xZAJ@n<=ZGR>07Oz z>Exa#(UaPqAF%UaE(hly<&o-o2~^aGgn64vmET zyt_Ld258j-`R4SI=N7f$FNhS#8(8G+^M9J2B|sj0HiS)0iEoO?d&q97BhiDOY+o66 zSXalB7_u#9hQya*4v1}!CLrnwens6rhY|FCQQrA#f$H9Qc77uPN zKr%|F*AXkdI3d)yPP}8kTp!txy#rQs;NO%iKt7|142;;>r(#PVwyHRa2^xKE4anaQ zWXK_Q`S9KHEFhU3+3tO+13&5N?RVR2`Re*jpG8ee)ypf&6ssg~aHL~+z&o7on6YOZ z3tYaQd6t?95gTB2i#mlgCDiqrYPZqUbxwx*FPk{>h^3Eht|NQhkM8Nq=Z9$LermY` z(TIdKgBS66cMNX-u>{OK`unkuCkW~dznqQR>^X5FUL{~qF&bAJNFM`T5ZiK1SH9*7=N5|Oxsb;Sa^T^dsGE1hflgavNaaDU>;WQ;iHeZl$f1S7&Mb3r5v45R8-OjLAetWna zFM!BO#Uez62R#n_rYT;@ARp@3!7bfsB^$gfeS?R|s8pk^9mM2a&G`)|zM;+y&O^!_ zSvH5Y0ME^!%kf^S@%qQvR3(m|Z6x!x5yjq-D@v?gxMLC0bP$Ki0O~*#R}A0!r-;jq z6qqtVDB*-@vUsdoRY2O}W(6G@F#T)2Ifc@M;A6;|_*e}|*!60?A0M?(H3x&ui>`~^ zxrM8$UcS;O*>Pt+CotjH8qYk`VtpwlCBptiTr+{Ga-rbMOdk6I1|(NUNT+kj!hk(! z&T#TYjFB4en|DbjWC*K{hp!S^=_j4aFm`b&zB6Y};ThJszn2lHoe;k#SKlBti<7yO z$+(uSS%|6{+8oO5B6YA9(D99<$9m&V>Nzc(_I2fD%;^L9;3`*fQoU+O71pt~*S%Ns zs^fA(b|qvc=DWo*b!}^NLsjzpe&_x&8%LL0VNS0Dj~`sANX{EA3i4!o-zpZl5^~8? zs6Wbz9i1TzwDXOu=4@;;L|WEX<>*-IvNcC?#`4;D3325&%(^f}P_{2k^78d*?pRkh zDQ9)$Sl+UP0UIO}&`LJy(~cH>kX7n#Jb6cW`_^P@X$aFkWV;I|Zs^b@BZdFkCrZR`STDutGN{~~pb_5{1~A-r)r6!? zjx4+Y-$8-|&cf5vtjbI4@9BP6dRfCG3gbT=CH#kH;uTz@JN&lQ2v>po2-#{FfcEQ2 zb+6iolS>yf!W|(o6SDDfP(bnpJh4bOfA6r+CGd8li!|c7ZFr-fV!60PW(T$KPnv%S zg(DCzbS7fimG{1kdDHAGzKzKHm%!DT=C4ree<95JqYdwxK{c#$2T8Zru1Jvx{+FI2WNq>*EHH9xnlyBCE4vK(Q6 z_$CkGzdtAMh-NXvK)zyg#r7JGAHLmz0T^5^yxZ0(9-e31mn_T_k4sc1+Fjz_k;`7f z0Kt$8ImmgPt;7Npjzf&|!2p9xEgr+To>Hz@|68S?tWyNHQlF0G<;_|yKd-4s->alf zR1XNFrAMOf^M|x$}p}YJj>h?*D-o}pz#G-@-F+y-togt zIjwTiz4#n)u_8d0$3sRX-aMy$D$`u@h#C;vSv`$?m$uz1?^=S0?Rn%mVF!)MT!+3Q zy6(0M$>{ki8b#Rspva0oAvb#;r^eZ^gAP2dzx7H5nuh(LMQR& zkgF}PiW;h^33(B~^SlNZkWCxsgQ8g>CIdd!Hq0vatGt)^qJEv%b(PGVQ%NF|^8~5| zHlYkuMVVqnNsZ(~ve*2iM0d_>{ejxe25*u?)W3TV|E*@Yho4qeUo5U<<spivPP2dg`;8K8@hi;{!gCpU1`LB@S5i(lJO9}FP9-0Jg(n?Jd_n!YtnbA-6lCR$lN zALclswWOnoM4<(c$FEXg9oj+}?iDin_^Ut2rF@kRME9OxKT&vRpKT}n1}P%4xNEB` z6$~BIrA@MC6eP+6#x7gh#Ez1hYb3K?M*!v>G(|E#ZMwVl61Pydf4~juNXIN6j}|w3 zyW&h`bQQy5tT$N-`4Gjn2~y>}t1FPS@h>SQtCMv!N%?UCk+Tbx`~>^F^h8DMz_ z2kJJ0a_vM-rkN8S-^mY>Glv1vs8F*@sW)c`p2v#U^{H+^51 zt1#CXSP63W#mB&Ned{18gENz4Ybz*RIC99^flgMDGa53!J zXeZg|xN>j!xUxB*jqu_Xm0Y_VpY)Pb%p3xJf#vL7E|oY>%OzWo5eA+j09Kv1eRwf6 zmxpw(Q`Q+GBsvLNscI`DmwOQb;l=N8`&Un#ci1u016xQs`Q=h_cfag4qML`=ZA&qc z(mC5UCCqm_00hb7zwOS`MscD?=+BF;HGQ1odQ}!S>dIff{QAl3Fj9J7oui~iZUvI9 z0GmN9K7B(4VZJAlNZ}X#xClen6X!BFU_lxaP@H4oqZvmA{e`(mp!KEcNY9m_rwS+# zrzg)%Mqy&e7c-3@czs@A~3f=M;j-V2xl3g+dfmD zA5*G*z(@srkLH=9;Wp9r_U>^>LK#j3KjpV96xJIDd;~dUJ8_QJAp0kRB zLNh@TE{!i!IlWQjCUO0kn6iDa$Bq=*CMv5zSWB~Rb=}EJi_vwLDebifBsfZRapoA& ztWu0_!vMwWB3GKat_W2+tdkQw#w@)PBJG!;mt6gBxq|#3s4P5$8%(&4%xd|5B$Yl=tqBHAO z)t&r(F}i$e(^p@8Ha13#e2j!rKUV!Ly&7SMTaCXh&?!QeQ${9@ens#5YQ}M_Wh758_%%3H$QZiBRanBIys`z8Z_`zAh!W5mnn%ymmMKH7ji~@Z%@m3)u%`ydULEZRmm|h@T zn(pJXA*Tv_4B$t6^--}|+~SX^kwFaQV@MRpPOqB58)SNYxA%&RgvY40YD4skq}*zZ zlGvqVU;L1_ItJCooTJwCu(Ym~J8xZrEEhJagI{=IZ}aiFcF>Z1uIP0eLBXr|)9B*g z7$5&O3i%&Bj{8CDj*s5ae&+??&CWj`-af)jquGgUC=2(ml|<;cA?vyx*q%fz6Q?RGAoY& z=`bCM9lPAvdl+C;j4IztWy(gF%1dFQ`Ekyo;qs zM-+mW-!d1@uErzba4b*@XZZ+X{pO|1A_a9e%AQ$LJUik_(;e(xQ5&a`^a@sKEaC-MgYU7{7}7NLlGmy*Qccj&Xz8VqI|y~r1S1jpc#(G^Xp?8!TVK@IB}kfu zy=#CIctR^#LxL$IMNm>_dXq;(YgV4k&CVYXr(TWE-ej0@M2|G}GbMsJoG9E$Dm7*CoFiW#@z^X3hB*}=6L7-WIQH2Qg#&mbd?GWz=w-taYvYU{KY7g^6$ zpz-Oh1na_VlLM6kK)|IyB-JMe6BoM!Z{lA_JpXC;{-@G?ybdqr`ebif$Ya7m_$#}9UK>Vo-H$1p z5&`+DC@iXRW zN_axb22V(Tw!r|;b%t>r%m3%g8(xM_1d(3g^`IHbQ?*O$xVItv5X%mp&-<(tG=ahj z*#HQpN1Se^!8(X^FWI>!Aft1Id3qWchznPYAL6g%4QRZIFx`S2$~Ws+75JOFI3b-z zXDHB+D5zQq3~-%%Y@VGKBp|q;Gt)|W@PT~lBI8;WD!))dQ~Lu_$FyL2!O%oV)aw`? zx^|DgTK4RkThY`0bm&e?nUKNWv3LO~IB=1ebKa#6{RfWxPzMoJt8Z4M3+drn+Zx-o zKO8-PN7xM0Fu=Vm#c#h)Q!?F-!N>>+^f^T^=;9sZyu}s<=$?oQ{y;g|wkdRapzRO2 z%{VNep5lmVX*1ACQzII2zbIY*)vL;{zUxBNJ^Y&cnoJk2E&+qK3h#?BGvj^eJxHJN zQeIHiFbvaH)t&bBdgFlUK{Q^nc=MJDfmA$h3X+upq-gAtz#YFulMvxV)wJQ~jrDM( ztQU^^1AY~Q>%^W$iH}EL;*^rUUC9|$SNm}Quh@+~MxX%WeB*o*6eRmgjp59&9yo)! zWeiGcS)~~jpQ79t+WGpSJ)%;2H7Z3gHS)W1`=tvMcqZ4jVKoaKcWC@L{~=L$eGE=F zP&hTC-Vr!&Urn3sRi}8H?@*DNXO`LZ+YbZ!U4gEgN;`)C^T+T1HhX=Qb1yso6GLf5 zwr%of#FOKrOU;)R#`*+Ii`2&9QJ?fN+%j%0Gw+pnKPRZ?zke6ZLNX9%F{F6 z-Ca-C(S4DAASs*$pFF(Xb~^fY%68>jqj@rIbgayc&3K@p6ix7Jsbi@^xvgF`0l1gV z|MJUk{ad9>=q&0!zAXrH1;$ExjF z9-h_gs_eAFJwuw75Sn654gDShFuT$P~ZyuuIMAI7;YN7CxqQYJg@7sVK^5ARL@Y*<3G2d2Hu}=UU)6a!r$f{n7Qfe#JpD#zkXZQ1$Q|XR(C+iC2r1FGSgq zc}Ls^^0W{5b>a_I)imQ%36vp)ej49(V1Okh2gsAWHLM#PCyF~1cwDhtQ_29xwm-Ta zwer9}vJXLE=tRoso#_%><@2p_i$CgY-??UWR(yAp@9tAOmHpaMBxPl8{6laWWhlg@ ze~{16zMV|g+G4&nsi^ndA~_;=|3w#9^#P^wu5?`J`3lzl_#OyJkgsuMV&}-!a1Kg+A@2wG9^HUjuEjuT=w z*EYP!ebnoi{<+Tsp3^+N_LQ^@*5!`4I4}!*1^%eeED{T1e{8{Buxi6Q!oTXF#+eIQ zlXr6vsO*yr)4{eR3881g-&W~@0m@OsDGbE?`bziaM-q#QYLf~ymW$0W!Fd|o8QwYT zUm(xT*_zF7my^pFK1Ikb>Ng=)`;G#ii3?dp)t>oYd1`S9ZiTCMEXMtKhuO? zTad@)oT;kXu~HH>1ZP=C*ZYa9)*h`t_H9DLfPNBS3vkKKZ0_BSt zK7}5~p|@CFLdY}9jML|q30K5->EV@p?lK#NC-hk5Ssg|bP7jWf-_zetI?FK3M4gn> zbV{lnRHrJ5mG1u7XUY>RoE`AW39Oa*$R6%IxWg3zd5C)mD1>x!J)}I8Jf!fWwXs`Z5DT?TT7GMOKA&j#EfXEm1<-5I|;rObxIJzE%-{tJSR?j^0WwobRJ;}sM zCwp+->pQvba=V>ldbPTX(8p(kM3R)@egYFS0;^y_3tg;=3RyV}IbPRdS61)NriCZX z>9}4k@=K+mF)#i;pVF52`+X}5GuWpxP$^6}yU~{7R*^;<<5jw^7_Lh4KLj7#Pr@Oa zCHDgGoi2&cV9g8q-&|L9dZ#DZFs`Bo;bVCE7^l`0q&em!%dhuxN3q^4K_@d*tD8s4 zM})|_5EB%f{yn9@DxJ3eY-u#;f_s80bh%TY)^nD|#c*WEx1x^}b4uNXA1wN2g3AI& zRzkX>IaV0E6g=^!?M?f7Zu3O-(VJoG6Kf_Luo_{YxyqPP-k>-`;^|Ig>^Twm=T_jT zVvq_Lctf&GWQIs>WweFlVzb^Tuw*Mgd2(cJW5(d@6f4NaXuXxd)-XDV$%=X~6^$&5 zP(U|Py)`M9%*Z6>s}wl(rd3gS%DR{BD74%#B9ry=RJWSN8{WQmMicdAnD-+7-I^+E z>ZOz|;tkloW~@=xCbhALDI)Di1$?7~`S-8R2qc@voOo+=3`kU({Al9u6Hra{F(>w$ z@FG7POH8DF)=1Nd3cAo?cFB;RU}U1Psnl8kT0@>aer`_8HN3GbpQA40Ooi*dJV!Jq z+3`4dfN+C6UQP4NC1~yL^HB}M3G@0}c1E`D^VacuF$Elg#WT5-o@88NT;h#=JGifW zw;$rrU`&%@K7vAe>Nwf@%91#FtP8Ihy93DrS26!>1TKA{uMdC>fTy%0K5=4e*wQ#@ zz0(-<@cz8Lcn^Aj9doTB#L<(?T=Bu$x{Rpw?FaKnNnmiJ8A+T+#6ka-13e3=rJ4uG zk1I{QQ}5;R^7qY9+05GVT{{t!vo9EIIeSH4(>N_Iv)cWH2VdwhAZ^}%?$h;9X5tj0 zmN!oxlCG#V7ex){-VH!BveU-o@J)4YFHU3V6Q-DAK62Xq`POqU5&iR=k{aSR>L!xW zOu)V@27}X0aI~Z-0N!gY;%l+|W+ey(O?YY51RRS!;HQp@ zcpTEfh|=%%ZG_}d5QPe&_byd0#Rt&^+)CsQ+hgc67o}`JJ#~$cx+;-?kx1OW9jj2`WyyvfmU&`{86^K>y%-kIz6tQMUG!u-Rgcyy5KJW`8;47Su-g8Xxy_gP; z2g##tXQlyPHPx4v_7!q#&U&i57-R2q>nX9v><=bOK$2(7aiuc$cmYG4)7Kngj4bG1 zgwWI!?Cjio=`dt@4MOKpSN(vYgr9)+y_qVwPXT~cfPnJB$i2=Pi*!^Mao9CPL;i?v zuowqbN`gx4DR!C*U+?k9E1{wQKPu2u=?%wY6q?9zj zGJD9tqS#BcEMvRN`?y6A-IaEOMDb}R^Ln~-RQWph6gmQ(KyT6jRl9Zx8osrDons=8 zf`oXj#2T}m=c<0*ui(MO8l}b-fT3*ScTc?ATx?e^cu;xn57b82y zg{MxGtDoeTl6gt23q9}Qmy27cyJ!mL(&N(4kdwmBcAK$(8m>hdC8|Ty7F?ZDhMD$( zqzBCSW|G9O7$7#X4rk4wgqwvj;&aiJ!nZT7GX*4uR4;)B8$1Pu@SA?b4!YW3NdpQ$ zMvIc3^#Rti;`+F6T_b83!14;_7vn}&T*VY-MlW2M)dN(1pmm0a+ec2RGmea0;y0An z`=Vk1-}$5`QRDfpK~Oc!Z(l|x&VNYbE-|tqWpaxy;(l+m<&ar%qjKG>m^r+*QT8<# zY3thEAv>hh$BsHiubm*xSx2SWIF9EB$&ZR`Yw_VLzs(WF;4PaQN!W++ywq;M?Rd6=IDfwPoo>+yE`%dSeK+l#%(Sn3KLJ!&5&Y)KZgH zDmN9C#r=;tN}LXj3(~6iPv75!6QK1A)*>8CG&-9&Kh43Tru6T?MWoxiC6CEzYE8+V zo#V{#E-9H{U(xwu8q0((;jai5XQJ;F*ap@NYJK^%Q>sN&Ty#QlZ6w>!Slc*tDR1>6 z(rp@zESnM;7@&N<7BoD$oJJcZ$bz@kQe=6WnEEARTqAqP=RFaCKF1FgDKaZURN2}3 zDE3&Ux-P)RL?QOwGZbf{cBUyf-gKf;gMlvjeF@H|E4I}H)z5J6z0mu*YOiph3!D(- zkFG6nqvWViH+pXYjE-zl6fuf2kjZn4lKAeFqk~G@DouaDO^d`{7}629svIL@jLTv-Lk^x;3pJVmJP87s&#=XRxZknPbI;vhT&!M zNgl?I!!FVLwQ9sQ(}}nXWnd$zmr+I-g*Wq#;iN}GSeA_V%;Va&pOemk#9z*!=kI6_)>%We! z2L+sL!T^f)w$6rx7aFJd!=wupjt|>*O{X`YoX-4k7?AirWBsQX6EJSG_#X1nFwe_NHTaJKg}?M?eRe3mI=qC)I1GY&kE3 zWTuqm8;qbWNB2kBtps*ED;Hc8K^HQ%nC9HcvPB$XHlLSa0QcF{DhjwKJrL`>B?bA{ zc%th(*E&7wnGh?=UAjw=xG|>JnPo-Erx)ojKIk_Ly0omr?k#*A(438!eG|OU+OXZ? z5Xwv-c(^}Jj&mKq&am=K>QcsA8r`&_DF*FLMW$LfD=FFH(Mj@lZnfDd#!`1}8Af2< zdi`+;WfFHrRr9!Sybz*6q!5OuEUq@QeJgNd9pp#o%;J@E=T6kOjk2XGOamFUN! z2c4G|hN_{b%NJQ`ngu&yVO+b4MZf^HR83X(mM=^^v9TY|oeL{`!A`%~;L2Ucdak{2 zJ$NVEc81$ZUKvQ3{H@D0wq;LWCVC_sP5JytG5Nys)grT7WXj`j@J!g+Mz-eraBbSU zX=8I88y0JO9G||CVz^&NsBa_|-X6AFlgJrn1_U`Szt5FQQ;ItHd#hr&gJiqlh2V^= z7y8X6_{{BXvKk`sT3H)-et;G! z*1dgCZZ#=r-TTex>+6WM2W6!sFy~3Rj@CnFFSQyI(Gz)*XiSbhrQP1;gZ1e;Py7Ky z3w+a85`5xjf)t`Y5Cokb+)@HT)9q#Doc)uZN%`>BHIfGeTCe}@vCxmHuB!a z=SAvnP3!W3CxRf_`PE6P2CIYmv5zV-k8(_cx56CjYB_Yn!~_CHIZwZ_!Jqwd#&SG! zRk?3+eb?vZpV5wRt!A(~&9Vx?sv@nJ1P{!M7o8qY;#s zMJ|stle?rc?`5XToI%gvle9-TJ{&o0id=q0Wf!WFZRWOMfsxQhv~*FXmK7Gc6JHV) zkaha0&fz*mfmOEnp_b|W!bi5Hk9X~;orjd9u}xC6snaWd%~IY4mi)QZx1ac16RmI^ z#ESaBn+$9tyQ8NS0L1u>bgPEKt7+BS_>Y%rlDf<59HfP$rCZcU#?K_kKWVG+*#@%l zo*FK*f6}^Z3Y(n@H{_!+Y)f8+a?MV@2o!KL3dB`kk9b2x*RFsJz`cEA@Zaz3{vnp} zcU!|qX+uGq@LgAbfi>bvJZRikeygw`i^wd8v(m->BG%|Sqx)9xqZ40^w=RT!Sr|_( zF@E%|$WkQMrWEBPk#)%Py${%9+uwh>-xs-EtLW;g31OqS@PcB1K4|1kJTsyK@(u}*<<9DFG~WC92=V;m3CAug^sm_AKLdjQ)+a;oAD_+8 zMTL_+3Y8L zD9N=r5|4I{A|2d@t?ct7VL9C}pAG;827n0$By^_0)QZj9X~_L6mY|Fa7Rcr=ek5uB zCdZ|jt(ZN0yC(;X4lp;9M6z2})0nx~%%&YyT)JJ6b4d zVO(3{w^}G}V%O*`LEE_tTrZJ|{p8<{c1x*$tA#%!OJ;570e$60z#g7~(QRUxx?HGX z|6UD8jA>4PKm$(h)8NVG#wQ1qDgh6M;NPnuow3*M@Z|9dDz^wZ8{|WrOKZXF{;d|Y zCgmjv17v!_cMsTruD3{i4@Z_m*MG16O)-(L|J&7-X^=0ru@dUxlAFUAm3?i%toZX8 zLg@aw@q0FL$9|QYx~KlT2&%U7g_qp;9wwgC@o4mc>CCyw_1xEg`)JD5K1hj(tk%0Nc!XqJj!O8b zHRbDd)W%AyZ{ zr#W1yafu(m)L3~SoXnIhJyGl=#Juuuk}12ks!lfMZ5l3wU1|V$E(P37Zg@?u_r((1 zjkd3GG_b}w7I((^m9r4@L%Vt@u|iYkzTJKoBJFnns*S>Ol!6sMdEz=5-yxSLDhpVP z)_5Q-$B*aLeuT>+reZ@KUQC@9ZQS0IN~P z=RE^r9Gok-X5h8}4XJ~wy?|po7WuU@pHvSo1{vTf%pblnhfjx;LM@Uv$}`pw)drQ2&{X2h`HnF#p0iknVq2H zKQG#__em`YzCZI1GT=--^xl;V*|zfrIOz9Wg0TsuI>>R7u8iZic4b5H2_o8dQy^Oo zaOf{m!v)I%bLXp~uG#Mr?ipD~AmebI3~qw%Wl1aHPdX$UeV5fd`Ue3~*Xp|PbF$$5 zi|>a+hkPdRXA=sfCyBXd{80eK?@DkOD)*Fh6=Dzl0s2h_=#PrsO4R?)D$?TYUh#Wz z)kD)NnI#4cun(yMM#2Ct!j}(CF3xbY-20V7Yu8Sc)L-UF4mfN-u28I&-*<0bKk1k@&1dF zJRmGd%Im?}JO*lE9%q7wjTRG}x_Mjc!S6a;AXh*7b3G>I$YjGqn+w3=E(7%gBWSaE z^A@7rk-g5&qIxVU@6i2&%SK+>hHUqL4N4t=UboSa+VXpc6__Zzpx)fhZnj;vvSFWB zi+Tevk`Dh=qJjPcE&`xx$N&dK0LgOdoL#f~1SSlGYylh1N85y*)xorn=~FSfzk*&; z9MML+J9X0q;4t#AT$uk^7j#>e6Z_;UkYSFG&w2X2^}hy;{?UbBy;cJAaA3YOPCuHW zI6O$&THdS6(#<1gt+KG=!x{+9^WuZN3+7sX;6zEmvw9pAKN6RsKWHZtbJ5MMTz#~* zLdTa6?Nn0W8&1+-;1*1E(d~Dx^+mjk3wy~iXwmyC*Io(N1?i(RJEeHRixYJ04Th9U zig(7c%^4LkD4Vr}8_}M3;)(UC_2!_u^9-!4h2%P-AFrH%)9Pj;$_FD~Pf91J=rGkc zyzsrSGNPf&h1NA?$BeJ%h8L!j-oz0}vI!s$imiTxu- zuEjG4)1Pib_e$Uze@V6I?p83}!2n((HZnnwdG+L6! zUDjEsc<3zpo{k6mqqB^S-W;Rkp47=IP}^2kQyKiNwrw$dKe*@?ZZk&k8|+6%t8+3* zTp^Zm8u#-Gs;W-Qu&$82@O-XQN4jn%Ud^|g&2f0pK+apxQ%RA1=zNWgy;Eg_Wl_1q z1xg?O_NaKj>$A+YXl^Wnn4A1d6?J5HlhSOyxic{7KIL!j439$#TW(s*j&2>`&QQsb z^MdB=V`5RPGrlaJ_(=K00>L3B6pWqiZC^6VHkvWEfgz3#y}U%s;*R3fe-_KAR~sAh zQW?wm8pvVLv>u;u-qZ)}4TvP<&r5XA5B!YSY(z6+TUJ2oE9hxP&grdwv@c&l1^%eu zPLZ=u`G}>|jA01i-=CWs-@(OTV9o$=()k$&yssc*=&|zN?nMV+3y?jNA*j>d2fXwo z6Ycx|J`VX`6aOfQ&puTAXY`GvCEgZGn=FNquKgA#_G8L{)6Sj?A#c#Ho`V zSKkkCD)u`FZE2{gsgH~r28d<|dK;HSFrs$`pfy=t0tb5SW~{T-KM|EWAu%k}QhMpB zi?JLi>)zHo*|(OfR*zSFd0XLLnoIvvQ-wLR{xzTEv-*=e-TT)2)-n6y%_IB9+sLzS zesh20kdWz&YwEJ@qxSU|UTv!!`OSze>M2OxE$5dec+>~XDE&~Y$yW{0kFQ2H$JH)o z*26DW<&TM6Fdd6uQwanqY2ODE?x#F6*Vk!FG{oDAsZZ`NcJz^Pmu27ZpZI9J-^Cuy zI#`lD+PgZ7!5q9G6?I!4G5<7e-c~rTX>Fs~!CrYWW2VR2I`%XOqLNv-JTi${0ej{f zY>-NL#{BWRa#3jHvt+TJVO4dt1hS6Yhk4G966ismGOuQKy){{s4@LELm=oZ7cM3dd zKIWr*OP_K{v@n7w_qrH1T+#$W3xk751sw9d50s)&DtAf0!aO$7=S}^Eb%@J)hfRW5q8anebSc1eLr%=J&0E}{& zVf8CWloJFT8rOjFPqQNjJd_!8%)qdJ6$$k3Tmk7fR}SqD)gan`s2KSLpYKonLRdHo zAbku9-}(wVn}r_Vf%KiHBauH0#1py%2SOvoP~7~DYt$zv&LdBsB)SV*{OsS zi^5MsV%HbUkcHpdJZlm7>TJ>Jkk2jPTcP$~`E-ZKal^arHr0^`!AZ zE=#E|X_p6;r8uUIEN2;&nA^fF`Nlq>hq6$=#CYR~EeN)&?G=C-u*3Rk@O&ye2^>&zeWZRq!q~uzS$V^Pwv|TASy^#X z{&fP#Y`D{6G{=LZ3ZF;oY+Yxki%Lm3aDH<;-C1@T68M?Y`wXwR=A`I!E#j?{5ORF( zTU=EMNV74KC~gfFW#CH-X=95Tg)t@t(N`<;dz@5+)fCZ8xX(sf@vBryCv?WkW{Nua zKQkuj3RLp+Cll5%zF?=r(XNfR6jt(iWNdOH)aZz&VI^o<*VT+GZ~wy3HK$J}4-emF zj#6ib+g>mZ==#OYh}SfB6+j18b9AZoVqj=*#dBWu(3HM z^~02;Z|n>Ij-~W}h8yw=3P9%4>@?KuUo8imHfha^=4U{xFvxaR`{be~VktQm8+!T? zF&}L}v5yxF%uG?OIxXl4&o^hVAG!viJ@fLaa{kUcDTFvo0gj|V^}-1dIO;9QiG=_g zp%-HNb@f#Mgi3J=u{%cpWroTh>51R2JF*_NjYx1U%nUuWooS7U{k5~W=L0I^$PX@W z`=@8Cn9C?UCP}N11n%*CazIvgtfh#AF3~ZsolzI%<9Ia`BjgJarCx-U^{tS;hZZoV z1mG|&+;1e%J~rlfcb}V8V|c0~PwKjNJw2wgnEl+U^JSp!V1{L@`}De+_}L|32XBNa z^(>aQ>gyPIH3F%nntJFit3Jgc2>@8Y6Gz=SBLYHL-V$FywZj0iA>CTI?Sw>8ndJ{R zpg%V%Z$X-qSERI=2`_>WW#-(*9qXvj1h&|IGoknb#JOjI8Xbf?V(ED=bc+jm#^4>h zpx2hFbd~)LYilcNg`{QUMPVQlt(3j{cBr0 z`u=KjNr-QV*Wa-|OHD77BD;Op1z=>E0X7IR$=SYa3WkFM33Prq^{I;7{UvLi;2nnJ z0kh6Yn7AWNKkhStJ(NL}SR z_U+)Z!yaAN>6@G-@h_%vg168xRrj)$5%PCqaB81uH)!udzJfX+>)OD^PJwblbf?Io zyboSs#Kr?}vyQ+)e9rj_x|dUgXhtEBM_)lgQP6FciG=@MpG03wn#lsIma6+cdDv%? zqIfx9Q!O!*fMy#1!W_*<`v_o7yiDr?#Euj{11#5?*x$l0`!yalOE4fA4I8bQJA)pg zzJg+8VvYzldQNj@S&o6jz#`s$4zNJ^pFyEt`clqBPYOYZPgkbDf{yVxpeO>7Z-Jq| z8~)oAe~*g)!xIGUvpf(@_;(hAzd!k}mdpP?7CL{hg%+Vif$V1u>QnUqu*U)WT=N&y zvBg(VON~_?N;P$rn;dh9s`9f_t0Ap>HuK%mljo8P8Xtx^t3R_16Y)2L0rrqTY~$e5 zm_0JRsk-w2*k42KJ&c8h1CL5>^Ei*KQ$qq>D!16R^8S1)`ES@}?w!TNG^j~??JKB|<#@A@ce}E?;-Fe{f`6#wE6DKB`^*h-^dH z{t60oS_fI&f__uNXosm=Yyk36Ln3Lp{2?s^KT5C#D!w`j$q(DZ{eM86C z7rAWKepqxE&wn+w@b5l%-Z%eWoIUyFSJcfuK%O4WKXXvjmMqcGGZ$(#gK;O}7pFqZ^4qcQZ)Yaw29`{Mps|?Y` zj>ZNLU!8cTjbsj)g;PI9URP7hHE5EU36{l$2;Zi1;M%rEMj4C$Kj*OIW zVhK-$`{OFk=5Ndhsz8?t0e{l)L?|1om_`zQH@KXwK7!9l5a0jZo5Yx8_kOqHC!0+m)L z?#GlzakAdLDruU9P1wCP!rIxto~A)ZVY)s?>9QM`cPIx=mDe&)cM#j*JQaD|yNAGB zZcUM#@8l{lFG_lk9j@{xV8j@1(Ibt)|&=_qK!wN zau5A8#t%(YDq>`c{hts7jOilPx$2WPM;AT8y7#X={#IRIcMt!1GW8V92kXfBOU$?jT%UnZGp{1)sHF z=cTF|goi2@`}W{YU`HH{H{_j8vax>jgBZx-t$8)-*!sMPb&Ew{U*8~P1aj%e+&SCJ9aG&7}Fj}5SYu9%scP;>88TRnk`Kw1g_fV~;CIQa=|qRb%xqrK zR<|iP!CjGCR)%4|f{PZ1X5~N5eZI|qk#YQ~L#5r2{-00NZ&UVv!BjO5Tp|#kWt_Yn zAt9ZL&^+pk;+vI-*)fY$#CRK7R)2L;> zT61Wb-}Y`M8f&@BR>m`ZhDSqwr5t)Q+dud|w91|J&D%G1P`e5{ zItma>>&(Uv-RFVx=Ws>YINB|pl*cLMVnC(UpahG2!q ziJGZ*K7SFae~THVL(xbjuxA`H0(7awQ-Br-RjKs>b6soh%DUZ7c&;0$Ed zgg|;$^AQ?<}_a0M0e70q_M zqC}$$VeG7*nyM3{WzYa!TvIR5M11874(uC;L1@;qn>Ysg9Mhf_ReWi|Bu(sa&m(xB#2c+&i&K~23fW6=YmHaRGUoQsH`^gw_AG)uNf0qyGU z33PSQUI}luW-GlCh(rBOjuhrx^P7gLqZ!!;N2i#Vrw-i)@s+SMyx-qMd`btX+J2~_ z0?lIQ^a1CAobYu;m=`dpet#E05Ch49-=tgjTCAS!9XrPC?FgoOA+^ul1#oQ{b=toP zy9$+IbqLkS7MxYTERxp(LWw`!h0ZA1Kz4cnf7fG<1@#6803r5v**N{S4QCO#atCm)puela+H<#6qsOM8BvC= z-|J<#T0;X=gKUvNTU&jB_YlCR^*FVX!J->ca=^0zCTS@cO~3?f-H(%ygOUd?Vd?|BvPH9Y>q<@wbsq*I8t z#TX?&?TG)+g@Cofv~-XJXOCcSpc~YHtF92A9N^?`shQS##IEK=mqWPqd)&pp`Wx$J zlQJv7u;_q!J#!_4v!gZ+wBf5DiegI;8p+-$ox%YUtd9U~=^DgRpk|0Z)LkehgERGX zIEQ5bfS{>{|56_28&=KS8nF$l1OxO-*r&AFL1h&+fF>;lPz?fT(heS)%qFB($>F0`-ol(1bo9c!C0@F3su)w5m;J2 zg8&a!lfdswFVOkDJ>XAmH}3io>X1ZB5;COj(QMJL)V*g50JI;hv+bK>wy9PTdrJVw zG@+NXJ@w zLCw~#a$doaG7P3t7Oof=Q{~F!hXzi~(nrasX{|)uDfYgY=B=1#Si?5Y^&CV0f}6nB zaB~`|m+|}1ISbtqzGFzBrglTHP3WA6tA6DA`t4|`6o3NaLoVfA)W>O^Kp%2x5f(q1 z{H^%|Snk-}1gvXxOGKMd1HS7N*wpa*=(M==mW)YT^OF$bfpfv#FY0iR`vN3?RXT<>LZX6zlFOAUup0{!Oz2 zq$q7}Tq0@I*ThUFl_}b^FW>*R|7~D*m6V382TlLY*}Hz_x^jXYp#)cn&8)<@sTl9i z?>1fHr4Cdg+~Fs%>$I=yF5tv8rSw~3>ako}QAJL>&0PjY)K zUKtIpNU_>-lu-GYiU-7ARJcO(rL-2$!CKCpXjVTc*fK1aQWW6Mlj5qaMs*f+F4pn9b1+q zk8{K;C@KxUx6vg|yT}8^?DP9L03<8#`Ztz0TmxL?DH*S4JpKoMl8BH#KElZMd0;dou_39xe&MTbPY~WvtYC?zFJ%T`wEosvL zcy7$2w!^otY0ldF21&ffyZ0kAt~qQ(OrVX+@T0?A4*YMur{IR*CXXMfj`nD5_*%|n zu}Bt%Jqo;?-*1dZsdA93uj2TbckDn$9Q1UtoIzS89C8mR7M1*t!dTq+u11FaO`S|u z^UhBzOV-v@qqxk?!}jAPyM8c2{;NJZiQTDuFWI@2XFDPFL)R z2G2;Vh_V2&X&)Q3A5be%C26r zZ@`05@AUL+A|FSpZVe_Rj};nnc3={7xVl{c)JKn%9b?{Q?@BB1`;trGcFj>3=LdR7 z12_(Ke6)HyKi@Um?DseBQ_hpSdl^VWZYB4Yi1_4g?N`L!A9V`lu#XbdjF`y5$jpP_ zT1Caa0|mPTs?`h+!Dk)06@#Q4LkHQ^+iu{s=ZS=nqH5?jm(>T9SLF-yqkFG;T1i^d zhM=$0+CMGkA$^UlmTfhBv_QKkSJcZ)iL^?{U~hU_R_uODPG(vzkC(7X=-Fgm($&O@e zm~HQpZa=Q;qeOzLe2Xq~sKm-ylgP40`SCPOqn{Nq`zC7Wk0zH`vNyFlS`<9I5%j=g zz{$w344iDJ_u-CDTMzij?Kh7wTEKCQ%zCtUH-x-03{yw7#x?6qn2+EzI5HIy!wr|3 zsiQA1E2rTO0DH-A{9G8mND5$^xB!To9h`aMjlf7|p};P21;7Pup5j9CvuFz)p~{Be zw>e;}6|ntdz*$z^gq0zMVltP_N2v-+Lht&`St>jcH?Q(^i^b|4${Bop&8&Kfxj%vk-R+rn#xM zUL_%%fBVr1FHcFQAAYAlr7uWhqK>$g#$L89D=LMjZb^Tq73K9Mcqq@!G0p%WW#DTH zWQwcw>RU6fw@?vhv>m_KcI5(>y?I23$z`o^b(?r;bGahn^hCBRaV;v>?*~X2w>9j6laQKK+HY8mE0tK!r<61W5%0*Z2hh+fr8gF{OGmy+p%|& zj7|qIa=V#^yjI3U%7mx~EXk0z+*Yh(VrBd;^bWzzvLBS)W0LgoACBu6ys_{ko)_YOZL)K#7mAr#Jd1?uxR&W{AJ8kO+EfN zRUZ;ksQGA7(sg!Ku{4}kX|w?S{$xTf4XM)UOVR#Ft>PgI)%DPQ9^ye2<9b`O26bzt z1qteGObeW*K(V|gFOP()>Gwdp=uwj0lZy{5DcFN}q@dtc{4=_DT2_6x!o546;RHNP z3eyjfTxEuifc%{dE7D8Ue3Rbq2WUv;OO*+v66o`fUCgVUdt*0{eutK+k@u1EH?CV&i~RH`?_y6^wso-1+yW1!3lN<^+|pVhzuAN7 z6D^jL))ks*h5pPES`AOcsa0MdhnZ+J#Y_*c38 zw&YACg{NhbDjdAy%CHkq${e{;)3aW<^u?2lrER`i#x(dq9PG7V;$D^EKpz9^w`^tS ziq^HafzK*hHY0Hp=l6K1bI>bvV!vqgTe1`a>B)r%wIe6(aX>%0%l2gA9^VtHt$wNL zqOI{EOq%E2YgugBy-pg&7_{V7EAMBsOm5HdGeyJ41}w-hqysHIH?(H=dl}oW zix?TzviYX+x%BUBs+AWfSi@(huvO}r#|&!!J?FmBOlfDGTsPw=j1o>>B@Qh$xtoWZ-c)jRcw`wG!mR6bhL1(D;7>hHhW_@aL+36IxmFn^?l}8%@S9xMBWM8cMV+}Mcyt6!K9aWL*b+2V`IaFD)b7K+#iNl zmmeW>bFK+i&qV|`hH>3gov5FsFM373$dl|@nCyoSdzus^S9;+kHKT9_QvaY2^>_dk zrMEJLZ?$11iqjVAK-=-|txLC-U4NeqtwMS4I>%TJPGM-M$<6!TdTD_~gjgaD% zRjOMpyySE2711Z5L$l6&is6IHEo8eGV{Sf+jXAM=(}1|#K>47=bfg=nSOQfN?4}Fp zLR%Y|EsXi3Jal7q|G=Ch*I?U|NXhC$u2%w>mIe>ZgJQVsz=RN7cP;NKJ$A*%z4Fvm zol!O5I;8Bv2DM;bC#3#(_s%1Vp_HQ#qokp|EJN)Qe>EF0MiV$-d>vyLVxvXxeHgf5>5#L`^d98xu;%9~}?4wt{GV>z0s^Tyty**_`tZ5c< z&9t=Pj+jDsK%2xaA*GKKXChNt7QdlW!{^ll$;4Is^3WX2sKH1prp~XR0Fn;nt8EV* zxdTk!M%y+U_}8D^E=Sx-4rWd=O&!xv7wBm>Pbtc1Y7-M@ht2KO*^C%P}-iY#Q6`raFE`b;<%*Jb|E??Xl< zW4m!w%--=W3tp7)tgoPDX;B=Y3cmr*qArpI`KqK&cDB+IO?!3s7tJL&i1t5o#^F5O z%gV&ht1$AZ*5%b(1E)OstUQt9w#P)*YLc+p)F-1)ELt4Y^Mciwmx?g(ZIBJ+Z05wF zLbu$2B_v~(*7OtD+A)09R!GwJgybvLB~VcQ?vtIy_KJD;^-$0Ji8&ue?FZ?EXEgn1j5Pyr zlR}6l!y*s){(4+sq7Tp5LS7ekGJ73Sqw3b=JIC13B%g?Q&0!IWFcYHU;U%;=b9buJ zx!4T8WdGBo)MaibMA&HzzjT3~Lq`HLd$iELeSaCVRjZj+PkV9-FKP81a=Ms$->ihV zLiK@auC&GYP&zp}5?N|q>bHSiX3VdSJLe-V6_$r4T!8Vt=pW2-LV^-01Z-gCV$O*-d?qnR|R6r(*>R zWFuG*R6D|(3w@ici~_ReU=NE5)6DUe(6DU|mVIB=tbMYikidPqXHBf#U{1R>O@!KD z(TUAo!b|uIi+?DxFWj2m051?7e~h-tz?{*P*?iKwStRH%UL6CC2uzCgB!pAWUxIQ| zN4tPAA_jX45o_)1%3r#7oTkk8eJi+*5Vy10gJUW_A_qSvk;e>HyS$Gro}9{w>l`_Z zl&|hX-7(Xowm&IxUYAG1&eH`Gk-i8PP#nBzI67D{drfyRqHC~iNz`OPy{R+E>$NpT z$Ul0btc7(#7U~AyKLyHDUXa?Y^hB%c{i6;c1#S{*CO*5p}ud4%7jh zrQs4dR2R_22z7V*`b}jgtV{M%Pn(^zSGBkKWUm?=5O=v3Or$f7E3}$G!w#ep@M!Ew zUm~;0>s;!C^d|{4DJ1)K3&SN$iUppF>#>xzfM=MHDf1B*}`1Q3D1 z_+BK#z<|QtWzRzK+WkARG42KgaPGSaP`FMV)4*P6oC|IgM)&NVs%D-M9y?_MUSCJc zFUR;ID}c0l)im_P1F}jb1H>DqM!)Ms@_pBdq%iz0F$t7b0TPqdS+LydH1(2si}x^Y0DTAu zOV)f7mi*}h${E8#e?Rj-W1r`TKrZ!!yZP)=Oxq5(hK6v773<>Vx$c=7o=vaK49KHH zIhM5|Z+~Jf#|ou^_!IU>ULvYOR~`!qGk&&=7w_bKC_YqMsF^gFU_B_;@1aDpiN-+W z{pF;rY_=bG;>%c1>jp^7o5@Iy+UT2Q82hd~qirSERO2&%L;_fOK>AV}kiJYM`%QNUMoLF>7p_@6n$<V{ zfToR2$s*~@!~XU?vLOjzZgxaB9Z}V(#)xxtIr`40qa*R{cb{gNbI)Zdiu|^ZT(9r& zJSkF1JZ# zmi+pEEX&w66uR!;^&ID=fRrhwpDmvi5LVwCZw+KXJhn)t`p5x+S) z6@ov1y`weM(ssItG~$Gl(_O@5AyQr*FthbCJ0wk)#jX$a`ewOfJEnfL;jk+e8GGb% zDgOIsSM4kZc!@X;OO&`@y?fCo#po}dsAXe+%8G|%%A|6xoF9s0G2^-FzhEPMN2Is? ze|hU&w%JG!323<0XY=COum;E_o1L%?A-jZ+Mw_xFw1MT5jMwr#HzuGWAUDJ%WDvDg zHsgx*4_JCC64g#R&-iSZ6f)l?A+OU{m4XVTw)<;^P(df*Q!XY`wOcxECmVbmKU8tg zMc(=gbx@|^WFfc5dYy-QUON?Ik!44ySjVx`RFu==Vc0;`4|9-{`>Irr8Q)aE^TljA zFk2|t=nqd(J7;OSPJ2ulgW{jmp&7qXX4imJi-EOr8*7IhtA;(Uc9(e-xoT3RpF3kV z6WJrwhvjA8sm4x^(ekUm@a&!|k+7G8c6trAaG-IFqKz>Mx+z`vF-_R%yO<0D7kAUM z&OVNWhc=3U+fVY!=Qb#No?z%mEsfmbMBvKAd^jzn_!~@#WqVO&V`Xr%8lV~45REA* z7bCrV;{Dd>R6nd4(=in4`{L6J_T(+u6Y9#ILYElkPa#mJnm-|=2~=#7;B;!vF%-ur z!GTU%!!+DZ*{F~ym&bD+6vQ4vA!?~kP4v^cs@qHX-W_ei0czfBg+X6ae`yq-S6NwQYKUIc7N!}upKPG zUEQ5OKn7hMc%F!of#>=Wxe43=VeO4jZ~>_C10RcA=z08h@goXC{h}!JkQYRl7++Eh zkVTG`tBL!nO1mQm{wwhB!+_*>1*F(0Acbxm`A>)h{M$nzz7$A$U*uykS=8uYQR!@` z6kAlf6jb^ka^4UX2)d$@-sym4A<$bdZXNzS3ZaM_#1Y1Wz@>gn=?yI4LqtJw5aOui zf;1`ee8}^(YEY|YHU$=fAdVv_3ZxFVtQeRbBQ@yJ2OEP4QEoY^)hEsrrqB}5RZ;CiI?tcNP=s5y(C}rn{4(18 z_~(z; zd3ojAAmiDBj3{v9*rx;EjRO=?OU=&{Y79F&S7J8S=(~ve(Q0WQx)BcjOIh0gnwQWP zCG67vyi5Cao3sFOfe}aA6_>DQ7MCJe$v=f0F>-NuIlCbLSpX=_xJ9J1A=0`vT12`) zM2b2yrO+%Qg#bo@r%95=A%blZhfU|)FuJb+c)Yg;JaK0#WHucH#Mi)seG5Dmcp8n) z0?!u*JV#_*cR#ci8PB^06|2N+?3>?oiEQSz-C%j!8!WS8Br>5M^*)NDBpZ)K(kl}w z=BgYxU=$OsRy!{B5n895@+^aA{2ox&$%@GYB-zcCvu&f7-ce$GBAO_QE(qVL)}@ z4-^{pvBWynb2?STp~8lT>v zng?{iJ<;1w3ugm_pRwI3K>TUWE2(i=?N z08{NtL(dD5;n}^bg$*T%>!VN?43HPw8UB^|?rtZ4km)JDW9u7rKKp~I*}d-omTmYc z4KQ|bOfTm$1g4ntzK#vp1m&})15%p~crlyfdv0|_osUld><_TfYhA0|@mOE$>b2e+ z{}L{B?a)*9QdfJatG(3KCgZ)`WIUJZ^`|{mX)ksC9GAN8V^EzBdU*qEG%w=H)5Hnu ztcak>FTCWN@jG&+amRgy0Xfy^%byCS5;4^q9X1P=4(hZzt?)#0? zTa;WnslH>FmrXYhfyet;+N`?sWz}ih_FYg*Eo_^LwDkk_7kKO+d)+TxH=VUefzwsgjzm$2Zjk5FI&l%>i#Qfh-~7k{ z9+*^%`SU5pl<^sOltE83HfPQxhy)sEx!XB^b;ft&I0|i|#6=Rf&b+ODU;R|?U2pBT QeD8Yy2Uj&j#`Avw02mi>T>t<8 literal 0 HcmV?d00001 diff --git a/doc/figures/core-workflow.jpg b/doc/figures/core-workflow.jpg new file mode 100644 index 0000000000000000000000000000000000000000..b60eff7dd43bd451c4510912043d5cfcc0622904 GIT binary patch literal 21243 zcmdqJ1yo$!wl27Fhd|I!c;W6=SP}??1P$))?gWAb4X(in?(XjH9^478!9t)b=iGDq zPu{t=|M$kYJ$iI87RA~nd#|;pe)F3=&OfdJPhLw%NdPb~000C10Uj5D7XUIMA`&73 zG7=IJ3JNkRIxYq}8X7tg&QmO0l4oS3B+oz~axe=mIVBSn2t>zA&&0;g#l=NN%P+*o z0b$|f;`sF?FeoS}=xFGK7#M^c6d($Y|LwM!B7IQ*f4O|Fpu2;8T2|4 zVE*v{{^J1y3kQ#Yh=h!SiUxf{%@Y6?1`ZAu9u5Hk9v=E`Pw49aJT?Lj1-lsHQ+Yik zN;_N*pQta$RL?6q@DwIa!JPW`z9^{p1cXG-sA*{F=oz@Ud3gEw1zx-qmv|*9^;+?r zlCp}bn!16Zk+F%XnYn|ble3Gfo4emf|A4@t;E?E;*tqzF&xuKyS=l+cdHDr}l~vU> zwRQCkjh$WHJ-vPX1A~)O(=)Sk^IsR%H#WDncXq$+?Vp`rTzjE8c*zgDx?1(sG@<@7iPboQkka3?!eW~a`q2g3H z#nZQ+K*a}hty7=9o7qiKV+Ko{bgzrD42Q%?>-Z0ZRlG(-RFcz2s$(T_N)~ z=JmENegrCatLuMgjWqLOF9ozF^^Lma;8X<$f<10;C8^*Y;&5T?e{7Is^InJ>!7i!4 z$f?b~j@V_=5Y-15pW2%NU-#HNqH*LW3`r;&3!X6{2)=u^dZY@=6{Y)S&_DXcHrJ9?e2{kbJ(SXhtLN0tuE z^7}xQm2iYr_}fy*wqFN8*xvj^8>KPpB=5zh6wqjHxQ%Gp-eH5HN z5usn4DuV!y32Dp|md4RUrORo8hD~+|%`q@&*4>HXR5txfS0~fT-3r+g;0l3e>o0M! zTWk;uW;CXXx+a=$JqY%^{}3D7p;wv>FH21rJdvz5 zku=E|QMHs^p{X&fVjHfyB!D9rn%{pp0=zIPvD#9ICcd!2$ShIeW0hHng6L2flk4sj50(HpaJa z9ut0-za8aK&Y8Xefk~?w-X}$xbCShS`&KoO+uLZJDwI<_F}O8)Vm(eJa7e1Y9!yTK zOSmUW!o3=Lnd~Vj-xyp<^PX7IdHiRRk{Q)5dZJFE6q&0bX7)zW-UD}S{KPRgS9mvd zHUTRkr(jvqaZr;wH7zwj2p{ckfRJ2#V|*ds)EZA@HDfZqJtZgj2q!rAPYVvlyIuUTkHFR-9Ef3)zKaY#8%=TaiEpX4+iO9m)2&YM1jPU}5%= z^iBM^!~sQEHfl$#l^}Km-`+9DK|0>I+Tccwx}Brq=h--dT>Cj8K%o?$VyM$M4vXN) zBW~6wu9?@}_{_P(R!+oj2Ir+jCEKvGlBvqNfp(;(g0-7eBvl&m+PE_~`-40C(n4nz zRp$0g*4@Y}C{(B%&E+gYh%my_Ff~{qmuBB_%ft6&`L|8+l2*jSa^$2Xz>MYf9fP|N zQoh1?QqHRB>^fD-XbP4r?!db@_AjL+DsfckeZ3rA!3HTQVR`sEC^sQi&qw#)C%+H2 z;^uS($H=8yP8?gZ#?%dk7M2siRI20;a6>*|O{bYsq#hw;3(PFvL{VFv;O_DDE`LTx z?`nXDwHJ^>tUv1uYz{Wz9W8$apFpWn8>b+-N#qc-2r1f*By%+PPk{G!fthxnQtTB_G@trv6K4?6!Hw8t zn(|_sXEXJtolwCcU4Hrr+cAWs0Ig|Ya#6P4tjwf7MBY;<`!w)tsPwa#dq^pJ`_^TF zPM0=K*iJl&%-0iZF1})LtG&|f1}7B?tUq}Ghr2I(3TZ4%Da0ZJ%`G?jTveHj(KT&W zH5sS1f1Z(!TH3B2{rwc{y;b&CvpRwdt)Z*;pRIB}s=uzxk{l$UQ?VsuBi}^I7$8^S zwp+8Z-+iaiG8;_%NsRJsfu?4q8?O{Q#g>c<&_yVRDX>fDS2_RI zx>AsCq&Z}ZAJrCf36^s%2QYgCI#u$zZ7_zD;R(!4gF*HKOyLvYFCOK|b$V4bF18$! z{IGQQ7CD;cNuFV43&s}nJ4SX^RwRcSM=14zFf){uwJtVMmfZlCp<_>_5?<1rnp1P`?&WkmtT)nu62JMqF@>{ zpo+PGO9_vKX}}7r_BtG5EDG+oNakuWstquk<@;>%9-ELM)pnHN%bMCbK zYeOTs5&zOxBAh2mDaOH{0S4+|Hq)A)?K-9-A1q)dMXK>6+cDh<)uub_zS*ykLghGl zL$Q+Qb}O@z>b5@aig`ZP*|_ovVHneTVO~RWJ8%g1iTK4?2Ms>NBtHZ5DugZr_SdMN z+W2WyTw^6c@>EvfL$aM6T60nsxRgS_xWgkgi*JqK-lDP;Q72%w?wNJ|`GQ%Nda``l z!{m>C%>FmIl3mdaR2fEF27DQqnTy@-R>L@w)ULzI@~guU#E9WUaCo%gZB(Zmu6Ig$ zn_57X&wC2&W+|#qX0Ig-l?+!FZ8HM3rQlMWkcbxI{Ysa#_f?#S@{ne@J|E`c$gGJ` z-nMb9V}Ad+cTj!bdaoGKp&sq3qdA2>o96jrvHA^3tqV{0u z*qql|mCCbXLPJA_rXkFQTISChf{PzU-WSa4WK|cFc=#b+GFFGb1pB3B!y>6iFLox3 zcjZz^TfQxAaVi)Hu-1=U!h?%w`LW%<*RgdLiNU#XL~wZerjAo;w>cQZu0D8yAG#r` zuf)QWhAG-B;T|$m*-|@g`K7rk(YP-0MIR+8p$ZDEj}zf{<>`%R`W#+@kL``2SGs*% zMU?3r6irmtsF7l0+6d01WRr6e<448#e4Fe6#;RK`a>G5z=vx)r5#R?cI=I*Wx~u>3 zj7d4x_bl1fda*m<4zF2&t0LGidgXqIi9IIlFaS(QB10I-*->&(hG#mf?x#BDc)$U% z>+eK)#abv=lXblnleE<%dL+G=)sTvJt<-Vg@hZAp3MtlW-A}RFZVi*Nv za$gv{{=9&DDU2+Q9_GwWCyh^Y;f%MsoPCUvKhQssZZV7sAG=uXk}zs?x+Cm_<(cEF z`vj;Svuvk6b{p~t7~i(K{1oua`@r)EwA-b7TopM#u#a22;I=Ii z2Jfon1aF2*PMvTF(y71|Fvx;th5G!;tey63o|z(4H+Hm=3))~4lT{hy@>=gskzDi` z^qtP`Z@!F>YBu$*t$c6se(Z>`V04o#zL?yeD%5~qPGj7l1aPcNgG`h--dax`MSsrr zd4^Rn9PPt+C^6qpY{uVZ03V8;f?D+mplGK))%MJN>x))h{W6^2F#eTkv|Ow9$YS}| zg{FEUuss5Xiu4&vLzd>^a%l{Fr?i^YMu-`ST4th={y8o@;sO98Bd|4Nd|FzZwA8pn z)4v?1cvPX$JW6F~@v_c|wTj#q1)hEllb;WmC*>GV%y`+DxSb+hNqA&r=723vPDfyC z#L}Puv&+}cU8Lt_QKVQLH%l3;IiSvE+V)JT$qY~1)=|V#*6UW z7{l00h*n#@@q1m}7(u+AcEz`B4@0D2&w(rw2AH@u^(kv(HBMPsb1f^%)lYk@Qj!QD z#Er${){5!6^SF+^P;EP{{qhKWA?t0sp(nf7(sv!}(I#oUiCNPq^7N8UT3I}L@R(SU z7{LGbj%5RrfYv9iX40$EY+dJ$sM_Wp>(e6;k}K`Z=+(Ip`0&x|*(0!)?RDn(`_#$g z;i)X@BQQRa<+bLabFV~pn&hhT5MV|82*7PT0vq||4T%~L_|qbnR5x>v00Pw`@G0w$ zd6CGUA9@5nPIb0ja+%G}P#)-83?*w6AuVB%~- zcSlG)gf3gH^MDN3k}Dm1^_$&|SGRiHOkl!pYpP)t<%#IQ=;nHL9 z_ao3D3Ek)YwBSd8`uzsd&#t!1lsN;LZhp0txqIe(uWzr;${tW(Jpu%;exGVF5%m28NdB`;2>kK)uLQ7oOWHQ{FX2SnhGy4o<6+3 z?#B8N=(We6L0rl5|8&JN-41_aEBQw){*dcG<-9aLgbDONz2Q#U7n{QAdFm}QCm%g@ ztZYbmM}(8|KgIY&>%c`LZE9KBJ_3XyTk#emS6z?5t3L67Z1);mdC4mOSz)?)GhwQ> z@y*jmAgG412#a;hQ((YYe8p!jbuAprR^VC5pRzF{^q0LX?M)4`ui`Je(U5~$gosU@ zd)$ZzmWbb{jp}se4gcTRs(&k+TV=wWdv{Jn%i1@udah>AHa({H3WFN>h^SBb$v<%K zIcU0cq{&&e7j1ospl@Su*A(KNac$0ZOQ4hGJ$PS)tC1>D%fJ4AhxDRrNY8@!EGfOL)NW`teL;UHuW5KG$kd>Y43_nQCgSG#J=BpsAB8$HZ)~qK?!ZR?b?zZghsbLU>QF1P z9`MS3%CvGo{Xp3xU?BSc_WAQ6D0nNWo3aGorp)isvTTg5SSf1IVmM20z9z@CZ(YG< zWFT{U61<*xpuZvh!TF}L^5Vnlj%N}=#0PT1(Q(eu^x>J4zgqIF9$;at8OXzIrEPQBf-R`#d)^r(RwhxBC~$ z@z?Q(?b9yNRy^~2kTQlw50)aA9!~qyiP=1;zd499*)p~Xk*zWh(MO=(Q*m*{KA9oT&c8&Q6OgdP#x_;@wX;M+M!C1Q(fEe=7R=JHfLDj&GMTlhzBaMW=V!=?-vB@#pRvh)Tg%sej)4PGAd<*G_z%lKBO95lpP56cOw=3aiRq>L?-+#;>`aPG5 zrgLai8?u=8d^i0SSEG%$dpjy+K)4@o{(gK*(?~+LkPQ9SF7pgi|kHDoz+>#2` z9|x3(ggQeyKlSj$6sIZG3`xc?p&_%MxCqwwJ^~5;w7Uy-N@L+%J@KkZ#8F_~9g*de zCH4mAlYT0`0l?N)mI%QhC$pU9%qp%)qN)S(W{OZvD+_^;qm0UHrvTD zVyl$8r|b`9->*sr0mi`7w);2{(nnxP=DR(=96*u3i>*X z*Ag_ae#uPsSHJcuL}aVr2JK;k?2f|pcgYi*|87o~8TCIa$SR*r)6Z2}$-R~Y9|5Tm zcTcx~zXrIIV$9*aA#{bD|8l$k`MmzX<~6`H>va_P5E0%K^4rv>WK20TgyF61?;3q* z5&oNoADU&+TSLtTI|8n}=wAoucMUI6iM{{LJh|75`ERGQyEvsB<~L|M^+E+$-xv z>?ej6LXSavw*{;Q1X@FvSb1^z$bTu$Xk&pLbt=jn9>O8YBm)p_MKaWNrgCUt0bjMX zs%^ZAs>~DYzwkxv2>SE_idDMg00*YfYa=m|5@?7xexC042%JlE+5E79#@t(_8}(j) z9LOIy)?NPU>O88$a<$J#lddN#d^;-}o7#lpk&h687G9rM8u6tIw-8xXx)_Quc_t6Y z!4Ow8r?zgTf6$x0OqD;bLE*Zt>$#K+J+H?g9hYD;a5CcmCVDakVf&U86?K$&q&}+V#{e>m~rZF5x2fYs>Ri&X12T!3{a+|m+L>o3!j>@6~bb? znboTEDjhSATVYlbC%)P&p0zJIZFfpOjL|vDjf_1DbkM`Utcn z56b0pe6S>S19`d;78i}-OIhsjP0dPrd?gRMy)kw?h^j+vv9*71H)5$xLV3Q<#2OZR z;Z-c{cE#x^!lpR(=Hh#ytlN5lVe~fH>-sdknnY5{bC_@rS-#HeL;9eeX^5JqRk7I4 zi*5C;UFL4NLBb|R7G!2p$&PQR=dyVM*si5EHBvSXc|FA05()+lEA{91!zQM8N&_|? zJUYW>m$R{hR4X||AH!`0>`|ccS@;hnPqG)McRhACaO&p7hKS-${>_yHro{51+HlTe zG(K?}y}YFA)$YnyQC|&|qUOurp?4pJMqS5Z3fW8WPt9--IQ}5E$gVVzde@w$XLPP& zZQr33bV*A{(w~3A0^v(Q%USBlYh$JA9wJhGoh!{J;<7DdH(9JXmZ8&QUZ=2^fZgA% zfuhcf*?uI*IlUV$919cK%9_T=C{@a|Zk#ywnF5LqrMblCeH6Jlle6o%bR=bHPEaTh zzP!O%I3dTjRqH$9feXuUhP)3qKhr^78l<3-h=1M<|8ojwR7OHbYHWIH#|C{Eb<{Bs zzi)_Q*kq8psxG}znpIZ*NEEmDUiI1`?+%s;Q8m+qfJoO6OpjI<70KDZ_Cw{Zs3??KlI>euwbXFq`!L6wE( zf|;s+NTYq4V6t#c?vPv%O=sDR&N|Ki&Wfw1s;(tj1c~WFdtJeWLvs(=IF> zgku2K@|wq~8;cfAMrk`Vbt|f1F={hn99%+KCQ`c;Co-Rs8)NApsw9rrl3%7H#X6v3 zCl1)@{587zFA@)ER3!$@DvM|byNyhJ z>DDu>%ZPL#yk@n^a-7GPD>dEcWWzLq?t%>|NbN60L$|eOFkka3Z+-Nh6i{;ozcw%3Ua6^fK?6mQW)v=XcJM7g3oR8ncA5n~ zk&~d7dFSZW&bMXA8E&XHTrE03!#84JBp-;X6Zd_gGb$LCl01`-KRBXLkWJ@I{6 zQDt6NBy`9$k70&s=mho{R4p5n;CL4rZZT6d3PB>fT8)6HY^VtvR>wI?3oSt`@So|5 zt`$iRih=8pGB#RBvu7Fl=`uqQ-DIKJ7!)` zQnRm*?&gF}{bxn|1q7QAl%7U+ufgm}jX3cpxYH}~&f&wOTX8np)f*ZJXPB%c#w-nZ z;Vr$aa%;5Ii!x!r*^2C?SK#1~(6Ae%oxfxKx@$l3gETi?##2j!xOa zo^c(xEV_{X0-h4*O0plqsd^pWPlOjzg^!d$YsSBC>q*}jkdPZ-}B} zNmQVm?68|+dJY@^jfb8S=$yPJelL56E?j23P}%`x7%juzE7a$?ET|RzL(xLYGHIT0 zIEqNx#+GL{tjTq`A6@boL1mhynH`~tseEsaT=Ny$b6*-t3H>bcNEjmP7Qc5B5tvKM z6li(Whoz-}>HRE&3+B76bMNm*N21WoK8RR$dS%7pIrA(>r`1RT1<_zWstTXBzt1rY zo`lU)?c8r$&?7%b%~3v2!?$tha9fN^Vx6BhPz~rBBfYw zF1a>s)_-#QSBdAUSI@&zR($b@3Ku*_+6(~(NST`BrNI%hK5wTBpCtRv%kmCcu1jFO zaoYFfpPKxh944`^N;<+k{1RU!uI^CKTNf4h${@T)6*ET2eZ+jvZeRhCW=Yzh)v1Pr zVe9@F(Au5mu}gcnY;=48r5=?sEA%dGC`|SG8QP0r=9FVmA>8h^05)@2>t44EAB3Qg zf!9Nj`Jt5!vrQ()f@YT;p`dgZxn263i2PE)KjJJ{EL^Vv#Z!Wx-6EIICw?=-u36Bu z&AaWG0-CnrNBk8n$tHfUGNBN^8(&N@q)0I&c$N21^Y4K9qwC1Cpk-_k^4aKlbRSN+ z8H|LC%uyauKeau3=tdC~V9jGT*#-UGOo9Z6A$-!_He3 zWV3BAirc05`lPe&>5}AxxdpDVR8FX8I!o>w>mh3*BBTr?q*76CZ4r2mVZ#{tix*99 zK|^%tIbEB<_A)N^i;dxY17!}IXp4gHrE)DGgVK#|@9oHvp88H=iY`gPRP>615;M+7 z3r~m#uBe`Jw<_uB&PQ)`g`VsKNPJg4g772FS$1`)SB7NGDEXYslOcqKRF9 z=E!cce@zqSv^IafS3T|XUsa!E%4qokDxluN30#`J?K)(f2oPJchYbLO^kcXJ`sB6s zGQ9@0Z+xJM$;nSzZm*6uLJwwWk&$8XNaSl{^7@B9=MI;O1$N?}b3;79dN|4g!@mIy z7+M}4fy0AzdKal};hDuIS|m7 zKS_Z}c{j(qLc^Odgp!CYjU4!O$RnL)R%hA3g`d1(|ATz^lM%ECgs)nhkh!|h!=2~5 zgJ5>u#Q;TAd!#oeU;0b9CQ3FdYih7qhRi0|XhG|{8(S)RT?hhZ8(i-bMuog!WNe3TMV zqF6iQ^hsk#&553cboxc37t2g%26CT+F;ki!pAq?4Wywu~+>GV%QExil6s7k$@)wp; z-cqqn_I|A;BllCOHJAcx5zHQ|{GY9}`>MH}x$t)W=Uwy+wi!|W?E`}Lb|DL;oJVOC z5r@5MHqD9UCXUt0u1KG|w&eo(i5((ccf)HM)`PY`b;X+rNJe}2d@QJF(03!r$1eLF zX8pIYs|xGik+F(<;QYV*+hWH3jY$Iv{VRgS$^jT$*&1N;7mZWYch5wW!K41rd1LlvkAK^H<$FpKp^&MH8x?U z26vPO{Y6#nFd{}8hX7VWlCD|XN6Vb3?f9Kzscij8Ni`UUecKGj_BBi(fAh51_5j}n zyT5l~IZ1(}gF2+pzg_-(8}D37FjiN;GPiBk%1JO;(x_>Lx0x>9{N+)LD9dx(Y!l}8 zgZ`ekRxTxr7(&`w5_-EFqhXdVWUJWGEAj}>f8>FDU14BK3S5=P6sJEda$Tdbyz@?m za^U!=r2t=hm_Gi45%3Cbb-XM)OX+&dz!RIW7-}9%syHDDO!qBx{p6Ar^XLWDkuObg z&7|t(fx_B9iz~~iybDV@HkmjVDqB}e2e0OA5SFV|K!XayT;&pmg6}Xs?!wq3^DW8n z_3PT`+_=xlRaMnSzYm(6fRo{s728OYN^*A`Y2Q=xKSy>0{^EY=(T5Z+9P@|IsJ2ReFShGj9gB+3)OYh&DYP`8tnON^1 zR2O8U5!uwC{-AkDAqoEo-~-wC0z9WJx!=+RKjm+Kj1LiKjHUiMK%^iN97y%$`%bN1 zXcxR45$W>~g7+y^x=zC16Ek&&gi@PTGM$?3sPqlVD~paso#~G22MfqA57ei-|6WOg zuGs78BVe5y$n`*cPNo!i9ogX!!LV5&AtWIN)-4+*ptW9;m*`PxYpt8&I!OL80BO=t zO*2b36Ox9Ov{uA$Nu@8iXETK)*{jmZ8>-rVZ(XmBA^veLAXq9*3M8*c*NDYNSNgpz%$^(cJ z!ROnoPe!*7?fH8*ZGwSn~g4sVhf~bCK-+QC<4xio3Ol9qb9v|hY<3~a23}Ckt04s<+ALu=*+Z5BY z5zCRViW3a8_PMeY&!g3);Pru>_7-ZZEf$l% zm4czpJ<(9E0FwV#m35~#>%=eUSY$KIu9<(WL_;Yo)i?mQypm48k{>zDuLCAg z>I%tkvJrKo=4gfdCVAZp1I*!u&-$~;g&|HMlVb=OK20npfN&JK0~CqDSXFf@67UGD zW1ng#d`W~1Fzf$32Y{}+pIM!)+RvN=jRfcq-CRc?v7*v(w-&kM_p-og+uO&W*Pu2nubzJgMl<~KI1@lQD@>H-A^<>^Bn!%+KFI1?L<%QiKVR4 zF5}`R65}BtmSZHLYo{aC3*ox#{kjwL#*d4~vl0%Lgm1iGVliTm;_?#d=*!}{oqRtz z+;!y5Js1@es41NQm=-_2l<4V0<*d2c<$|F*wJb8L;D(n@K_H-@VF9$V;76h^N2kUM zdd&CT$*w{tC9RzaYM*!&jSAa--4_y2=B_O&R$oycDv+|h$|RY(buPsNBm|S$4KInh z=#j$Wc!Lz>-dYoXVsrxq!Jepkv}10(_w$?d2DLs-q^^$RCcK_Mvq-iV)#{F-9lJ;Y z8CvZoh0JxpF3)-H4}XNCgjnO&!^7fA5`e-{>t2jOxhU)v=|OtpT5CVNPoJ3gKGXCL!LK>tBmY(9+92>o0J)uk9KOnj&Mof%|U?yQFl` zdT!nt>yIF>Z~j@ENcYhrCJ*yo-){Dh3`)-){EA)EJ5MtA2+GwwE8m5myGb8wcx+!G z?DqjydfB+=I(%Jf>-v}*99P#VoxQf^qGsV2|CpNap z8y?o0Q7NFSyLZ$7U2SMqw%aC981}Txuau>@nHQXtGgXq73UX0l8ndH$zGkf}3DhEY zEQW8?wEm@B)uR3@&K)MjxPdD@&{o8(9*&bK)vgfSAdUH>?c*h0g_=NIYZR#8M$aVr*a$|6^zCt>CgtjT2KxNH zjfrrVm5~EmSG5l*4MP!;T_`_%3U=rg_Nd^fhe2L)Y^^VG;!d=SFE~u)+W+~s4-?{Q zG7;a_v+=+e<=*Y`G&D%7MDG(p1&ei{icONn_e!q!jG3JkLB)fFS*lq^iCvUM_=Hwp zk-%Hug$6R*iRM0VSBGG;g-DicMsqjBI}yvVlb2ycuN8n``A(wLbxtGuerCjz={FL* zeG>a}1gGLwsvV(MmJnsaCm5LY-}Rmx@9fJ^iXd$ZgbY($%?RQ(ULI zSO0Ak$FkIqw%80^Gy_}suw_#W40Q&iW*=7lDq~@f{7D9X+HD0G@Fv^|W{bHyJl-Fv z478s5du{`#ktl-Q3c5k-Y{jf^tUO(cHcybLb$7H|)~pihPDJx*@F9ntr$Vw84B3Pb zpCW0^HW!UO8TuKeKW{?|Q);LayJ;hNj)q>VCb`YHcLyz0lAlUM*sMbl6K$?ZW>Poi z!;LA*u)Ns*Ei{Me^er|dQ2@Xa`#0=|hM0T{yS;@_H%ohdrdaWKCPACNj}(@}{T)!JfV1^V7M|U8)?aJprbqP&+AW z(tUR7&Oj4ukfpx8twSHuILM`_w$Z94wQ8}OhMlhiN9G)4K!^}bZZPQs8gxyNZJ5bw zdnOsB07{N5Z?5p@aMRsIk#}d0~OXn<7HCOhlqC4r!2!GpuuLyO@q*LftL;){|tU5U%{_ifXRh)6{T?uiq zo->nmKiN+pGd@pcF$jWujD?GAA+Yms=%7L(u`sTD1j?D@_ydoyCG||@XE&bfEB89X z&MTgWzsfO}qxyp;G7DvCQlDNt_@CUT);|K9aWQ`dmi|e2fjj~axCvcjcLZ(c&YRF$ zmaB$@y_9(dTHqcUYVS`bd1BbJ3j^g{){~V^?j}EEoUl z?%|ABs~r2*Knu2hXw)T{wH<-(fpx|kVoiE}w;+PKcP_}0-QO!tWD`eeyy`7V)~stQ zhEUXY8sX1%AQHqIsVeJfm*c9+3rzLf5|j2-?0^rVMm5>Xk2@0RP%ikoD@)eQm{N27!3Y=j1dat zS+|P$wPK?>p$fFihn`S($aNNr!FSBbULg_yT%0@*mJxOAaiNQAqrF&z$r`R)B+ zIE_Y`1}Co#v>~FGXy_DI`HRhKxx^!|g1v#S82$ppI$ziR^| z1~*Zj+;x5|mXOCZ9Fw#lDR7^e<`#mWOQaMWxyktTolG)jSeELZ^AVMpkqt?+ z6$L^_ra$}|ObV8mR06_u1C$rW1V!e7zeQ4jhP$x8C?l{ighIbQ^lSY8oi0PR3b|8AM-Dxjl`42rKUuqGhVjFL;W1Hy^S?( z+ZR&ewB}}X4o|NSt=xH&hq6Uju-&>x6Qtb~wNlTp9B~gxt2(JN>Ag1t+X!s%yu@A}(W*i0^Q=6KDio5~-a+O9A71H>`eNETIa7zHkd&A& zT3RS)C(1BLvpz1^SU;r#v}H}gzopdQOywT$fFzAV8{19n0_9)~XH;U(nQcq*-C4Q*GCLJH8|N7ylA_2?d4QeX{DXDTAN~~X_I~*?_-#>ekBo|C55cU zi>uqr72>*&(#tdcETP1MB)`XEo2xczSOJfhy@CZ&zAy68ncH%cK?1zM^vu8M+KScXIAfN~Vt<8IUTY8ziX zu^-I@mShSi9S$QF9A#e(lOz%xhNU>@l@ntv1syE9^ zgj`KlpwJKt$_~07^X+Ga>>NV`Ju#+vo;Ew5qjPP#=zOF&wSyFOepx1w z>D{oato^KMdUidtqOKwkIZY89RrKLVjGTl1;829r{O}Ik_@N07jW5qvI?fc2(w_NM zO6cpO=Y^7^_V4Vb&l&48y?=2>k$+>3wWv4e{Us|om?_|tw1gTF$_T-mJld=5R^n6d zA4xNhK%!$wr<9d7d^CmL1>@5yV!QDzpSj#pMzQ4$tl(Cg0K4(r1woEH@&p`5EUc4aXuueC8!}r= zEQ`EXtH>02qE%TO1S^5M9^AX;6SR9148b&oov90QY#K>>+ePxAy*%D{yxOEk1m{=N zaK#OKliTGq#2<5bdemL;w863f9H-O|XSQ|r{6>G0D^%RhJ_6TPA{;fkRgqtDaFcde z*Y$Ew34AJ?%0w!?q*aL>fG%HW`-=Pv(bhRXNl=D6eoT+L#qyF^tJqds!b8E3t(Bl>g58x2;JmQb-{ZEee-ME+C9Rpi*!$Cj20A7v>{ zQu$bzdXLWo(54T5KDbb|+S8G^d}44)6q5taFvnQ&-B)YmP)_erWuwFTKCrF zaOiROv=u>dT%5mW3T$eV#@84}tlYANlvbq~k{4HDO~lJcA=6akgWYqsxJz z%U5(?l&L|eQpoff!_6b`&QJUd+JwVR{CW4itMJO?Eqfx-(?PjW(Oq+2wTg*%X=YIN zc#R;l!P;z2zS%X3otZ%U*poh@ZEd64cVKQ9t4FJz9Jmbs%?(`_UNI{Y1X68kBvq#?NS`H5ZubT!GYar zT&H~>w?g=jzPQY?ZZZyL>t?GhpI35LF|wfaW$Z+WkHLMjS|39&6L=SLz{Q4`sO5(j zHQ=Hdj*LExR1Qk38HbXXf}mIWpH%8!f2-h~5iajLH|l(JT#TT(&}lp;X%~$Cig=r1 zpRs1ZAUli#fX)`?DAtX2o_Z+Ha(kD~3Lw-^F^5J)huIISn>-gq-UmWA!M>QbqV(Ym zhnJtp17=qk-@9f7AV-4jdcP>)q65Ghz}F)ML z{XdQ{gr-3u61jiy)k}HR&T57eF21#5O=i#41rwYUS(D}zuMJZTY1a$f_`n2+|bYj?h6q1*5TE3DoSym9XLLHJm>0o@ko@_tf}`Go(KEfOOjg{Fu_DUy6OM@h`>Z8hAatb2*}+nY>Bh z=P2@2%}ro5;cA_^+u)klt{KU&V5+pYza0qgV`x2kcU)aWy!eCo$0yURrgE3}Y7r|z zjkuO%&-0?DyxqOU2gUuNq!`lQi>d#%k_FX2{r@CZ|3`llpVwdM2W84-^uO!pck?%s z#0Y=z#q#EUH!NVB`9sspkgQ+k^{-71Kd-|B#*y=kgUwGaTm!YvkiuxAXnY^m7R;>5?`v(V=ostc<&K6} z2zC_g`un8M1iNL|$6!|mENQJIe*A>(VID$x<|c+Jmk;I$8x}Aug@F%&h-CF-xO&M> z>dh-pA_O%`JQ0Ms5S|#X7$R+s8TbO977&Lk|7Q44gEw-9Sb^`e{_}-$vYv+IGiahK zdWbZb9PzvlRp9&;V)l*2m!XUsv^N1KZqqDsE836>+_>D>6B|xQg62o?xpR0b67#0C z(wRumJ^$LIp@l`m!Vh_DK|3qteknXj3a~vcI~95s5%+#|Vz#mmG;5;!*A<+TpfW}T ztWeaQTIaZ+Hp;d#R5o{0o-wGo&)m_2JIwQ5c& zV#RtI9v)bQo<8i03?>sw*O_i5mNLn8?KNqg)OxLP6Tr7f?Ykw;WnhQZrRO6UfCc8q z;GibWKcOoWkg3W&s6~69quu3VJ%77ldBlfgfmt|DMZOk#PB&AN%KNq@c(^>O8trnjPdL~sg!$TBQ7gEtJ zQh$&i^m4!hZn>@kCKZ$N&ox~GBo`?{wtCP_%vcAvgNY?%;lBv`uScMpeZU@HpX3UH z6uI6STWhNbX^lDakwrrPCl*TOCTVeu=;=<>x)rnIGJdb1wCMH~J(F65!fXbPL}tPx z5KAX=Q|Lm`Q|rW~!VK*mV-0@#Hv5X<;@h zp3ho-_-s|a_^V(4Iv>lwng7;b{ao{JL-qd*p%Sh?XYO0xVD*>8Jsz5{tbGiFc>TgWcdt;DzYKN`Ed)H%& z&WA4Q(iB50q?2Q=t^DvgZuZe%`}QxYIR0Dxcks#23;vz){LgUJO|UL4f8_(dy&r*5 zjFJwP7s*7Y2fG&CM@>TLG46Vly2*uViTD)CwkP1i+|V^Ox*zlQFZErPRWE4s+j85_ ziT@drTy}3b*sk^9EA!r}wMviHR8H>-t?~UB?SApJb;Jv?=fOJ#Pk5Q0Hi!s3prE{h z&2i2oPKkpmU%wu_{Ui8M?DUS(y-8R9s9nyw&g98^W;@?WDc+6lQ(c2ZE6!c;51x1Z zKf~sIy7koufgB^vwz>?`txr8q5e1TyW{VD2!CGsPb4O0&FhSH z-oLFMUH`sE^yl6BR{5Lv#rE%gu>RcZKN>rVHm_Z@Qy)oveR@sQzwb@^t=E58^zhWV zZCy|HBkT%9vZT9R+v=9~q<`mrZ2kM5wXQt=Vc_|te`2O_Dtq^{9XhwvW#iu^n}qB> z+~GL!`h@b0iv>?p?(^k_M}Kthw8>PQI4$zr^yNZtF8-aRlUH%uI#Q)@9y@C^%aiL% zuE{rVVg0bZdCOYSFoSQ~UTylBb7rmP&m{@bbHsJ3OJ7)pJymupHn4N_h?Kmse0{B3zWE>H<@d_F+7C~#>72v)bW(~XOHtoZ|G39} Wdova_Sa(5NE9kA4f#%!)zX<>+2HfNT literal 0 HcmV?d00001 diff --git a/doc/index.rst b/doc/index.rst new file mode 100644 index 00000000..b20f7d72 --- /dev/null +++ b/doc/index.rst @@ -0,0 +1,32 @@ +.. This file is part of the CORE Manual + (c)2012 the Boeing Company + +.. only:: html or latex + +CORE Manual +=========== + + +.. toctree:: + :maxdepth: 2 + :numbered: + + intro + install + usage + scripting + machine + emane + ns3 + performance + devguide + credits + +Indices and tables +================== + +.. only:: html + + * :ref:`genindex` + * :ref:`search` + diff --git a/doc/install.rst b/doc/install.rst new file mode 100644 index 00000000..46b8bdf8 --- /dev/null +++ b/doc/install.rst @@ -0,0 +1,756 @@ +.. This file is part of the CORE Manual + (c)2012-2013 the Boeing Company + +.. include:: constants.txt + +.. _Installation: + +************ +Installation +************ + +This chapter describes how to set up a CORE machine. Note that the easiest +way to install CORE is using a binary +package on Ubuntu or Fedora (deb or rpm) using the distribution's package +manager +to automatically install dependencies, see :ref:`Installing_from_Packages`. + +Ubuntu and Fedora Linux are the recommended distributions for running CORE. Ubuntu |UBUNTUVERSION| and Fedora |FEDORAVERSION| ship with kernels with support for namespaces built-in. They support the latest hardware. However, +these distributions are not strictly required. CORE will likely work on other +flavors of Linux, see :ref:`Installing_from_Source`. + +The primary dependencies are Tcl/Tk (8.5 or newer) for the GUI, and Python 2.6 or 2.7 for the CORE daemon. + +.. index:: install locations +.. index:: paths +.. index:: install paths + +CORE files are installed to the following directories. When installing from +source, the :file:`/usr/local` prefix is used in place of :file:`/usr` by +default. + +============================================= ================================= +Install Path Description +============================================= ================================= +:file:`/usr/bin/core-gui` GUI startup command +:file:`/usr/sbin/core-daemon` Daemon startup command +:file:`/usr/sbin/` Misc. helper commands/scripts +:file:`/usr/lib/core` GUI files +:file:`/usr/lib/python2.7/dist-packages/core` Python modules for daemon/scripts +:file:`/etc/core/` Daemon configuration files +:file:`~/.core/` User-specific GUI preferences and scenario files +:file:`/usr/share/core/` Example scripts and scenarios +:file:`/usr/share/man/man1/` Command man pages +:file:`/etc/init.d/core-daemon` System startup script for daemon +============================================= ================================= + + +Under Fedora, :file:`/site-packages/` is used instead of :file:`/dist-packages/` +for the Python modules, and :file:`/etc/systemd/system/core-daemon.service` +instead of :file:`/etc/init.d/core-daemon` for the system startup script. + + +.. _Prerequisites: + +Prerequisites +============= + +.. index:: Prerequisites + +The Linux or FreeBSD operating system is required. The GUI uses the Tcl/Tk scripting toolkit, and the CORE daemon require Python. Details of the individual software packages required can be found in the installation steps. + +.. _Required_Hardware: + +Required Hardware +----------------- + +.. index:: Hardware requirements + +.. index:: System requirements + +Any computer capable of running Linux or FreeBSD should be able to run CORE. Since the physical machine will be hosting numerous virtual machines, as a general rule you should select a machine having as much RAM and CPU resources as possible. + +A *general recommendation* would be: + +* 2.0GHz or better x86 processor, the more processor cores the better +* 2 GB or more of RAM +* about 3 MB of free disk space (plus more for dependency packages such as Tcl/Tk) +* X11 for the GUI, or remote X11 over SSH + +The computer can be a laptop, desktop, or rack-mount server. A keyboard, mouse, +and monitor are not required if a network connection is available +for remotely accessing the machine. A 3D accelerated graphics card +is not required. + +.. _Required_Software: + +Required Software +----------------- + +CORE requires the Linux or FreeBSD operating systems because it uses virtualization provided by the kernel. It does not run on the Windows or Mac OS X operating systems (unless it is running within a virtual machine guest.) There are two +different virtualization technologies that CORE can currently use: +Linux network namespaces and FreeBSD jails, +see :ref:`How_Does_it_Work?` for virtualization details. + +**Linux network namespaces is the recommended platform.** Development is focused here and it supports the latest features. It is the easiest to install because there is no need to patch, install, and run a special Linux kernel. + +FreeBSD |BSDVERSION|-RELEASE may offer the best scalability. If your +applications run under FreeBSD and you are comfortable with that platform, +this may be a good choice. Device and application support by BSD +may not be as extensive as Linux. + +The CORE GUI requires the X.Org X Window system (X11), or can run over a +remote X11 session. For specific Tcl/Tk, Python, and other libraries required +to run CORE, refer to the :ref:`Installation` section. + +.. NOTE:: + CORE :ref:`Services` determine what runs on each node. You may require + other software packages depending on the services you wish to use. + For example, the `HTTP` service will require the `apache2` package. + + +.. _Installing_from_Packages: + +Installing from Packages +======================== + +.. index:: installer + +.. index:: binary packages + +The easiest way to install CORE is using the pre-built packages. The package +managers on Ubuntu or Fedora will +automatically install dependencies for you. +You can obtain the CORE packages from the `CORE downloads `_ page. + +.. _Installing_from_Packages_on_Ubuntu: + +Installing from Packages on Ubuntu +---------------------------------- + +First install the Ubuntu |UBUNTUVERSION| operating system. + +.. NOTE:: + Linux package managers (e.g. `software-center`, `yum`) will take care + of installing the dependencies for you when you use the CORE packages. + You do not need to manually use these installation lines. You do need + to select which Quagga package to use. + + +* **Optional:** install the prerequisite packages (otherwise skip this + step and have the package manager install them for you.) + + .. parsed-literal:: + + # make sure the system is up to date; you can also use synaptic or + # update-manager instead of apt-get update/dist-upgrade + sudo apt-get update + sudo apt-get dist-upgrade + sudo apt-get install |APTDEPS| |APTDEPS2| + +* Install Quagga for routing. If you plan on working with wireless + networks, we recommend + installing + `OSPF MDR `__ + (replace `amd64` below with `i386` if needed + to match your architecture): + + .. parsed-literal:: + + export URL=http://downloads.pf.itd.nrl.navy.mil/ospf-manet + wget $URL/|QVER|/|QVERDEB| + sudo dpkg -i |QVERDEB| + + + or, for the regular Ubuntu version of Quagga: + :: + + sudo apt-get install quagga + +* Install the CORE deb packages for Ubuntu, using a GUI that automatically + resolves dependencies (note that the absolute path to the deb file + must be used with ``software-center``): + + .. parsed-literal:: + + software-center /home/user/Downloads/core-daemon\_\ |version|-|COREDEB| + software-center /home/user/Downloads/core-gui\_\ |version|-|COREDEB2| + + or install from command-line: + + .. parsed-literal:: + + sudo dpkg -i core-daemon\_\ |version|-|COREDEB| + sudo dpkg -i core-gui\_\ |version|-|COREDEB2| + +* Start the CORE daemon as root. + :: + + sudo /etc/init.d/core-daemon start + +* Run the CORE GUI as a normal user: + :: + + core-gui + + +After running the ``core-gui`` command, a GUI should appear with a canvas +for drawing topologies. Messages will print out on the console about +connecting to the CORE daemon. + +.. _Installing_from_Packages_on_Fedora: + +Installing from Packages on Fedora/CentOS +----------------------------------------- + +The commands shown here should be run as root. First Install the Fedora +|FEDORAVERSION| or CentOS |CENTOSVERSION| operating system. +The `x86_64` architecture is shown in the +examples below, replace with `i686` is using a 32-bit architecture. Also, +`fc15` is shown below for Fedora 15 packages, replace with the appropriate +Fedora release number. + +* **CentOS only:** in order to install the `libev` prerequisite package, you + first need to install the `EPEL `_ repo + (Extra Packages for Enterprise Linux): + + :: + + wget http://dl.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm + yum localinstall epel-release-6-8.noarch.rpm + +* **Optional:** install the prerequisite packages (otherwise skip this + step and have the package manager install them for you.) + + .. parsed-literal:: + + # make sure the system is up to date; you can also use the + # update applet instead of yum update + yum update + yum install |YUMDEPS| |YUMDEPS2| + + +* **Optional (Fedora 17+):** Fedora 17 and newer have an additional + prerequisite providing the required netem kernel modules (otherwise + skip this step and have the package manager install it for you.) + + :: + + yum install kernel-modules-extra + + +* Install Quagga for routing. If you plan on working with wireless networks, + we recommend installing + `OSPF MDR `_: + + .. parsed-literal:: + + export URL=http://downloads.pf.itd.nrl.navy.mil/ospf-manet + wget $URL/|QVER|/|QVERRPM| + yum localinstall |QVERRPM| + + or, for the regular Fedora version of Quagga: + :: + + yum install quagga + + +* Install the CORE RPM packages for Fedora and automatically resolve + dependencies: + + .. parsed-literal:: + + yum localinstall core-daemon-|version|-|CORERPM| --nogpgcheck + yum localinstall core-gui-|version|-|CORERPM2| --nogpgcheck + + or install from the command-line: + + .. parsed-literal:: + + rpm -ivh core-daemon-|version|-|CORERPM| + rpm -ivh core-gui-|version|-|CORERPM2| + + +* Turn off SELINUX by setting ``SELINUX=disabled`` in the :file:`/etc/sysconfig/selinux` file, and adding ``selinux=0`` to the kernel line in + your :file:`/etc/grub.conf` file; on Fedora 15 and newer, disable sandboxd using ``chkconfig sandbox off``; + you need to reboot in order for this change to take effect +* Turn off firewalls with ``systemctl disable firewalld``, ``systemctl disable iptables.service``, ``systemctl disable ip6tables.service`` (``chkconfig iptables off``, ``chkconfig ip6tables off``) or configure them with permissive rules for CORE virtual networks; you need to reboot after making this change, or flush the firewall using ``iptables -F``, ``ip6tables -F``. + +* Start the CORE daemon as root. Fedora uses the ``systemd`` start-up daemon + instead of traditional init scripts. CentOS uses the init script. + :: + + # for Fedora using systemd: + systemctl daemon-reload + systemctl start core-daemon.service + # or for CentOS: + /etc/init.d/core-daemon start + +* Run the CORE GUI as a normal user: + :: + + core-gui + + +After running the ``core-gui`` command, a GUI should appear with a canvas +for drawing topologies. Messages will print out on the console about +connecting to the CORE daemon. + +.. _Installing_from_Source: + +Installing from Source +====================== + +This option is listed here for developers and advanced users who are comfortable patching and building source code. Please consider using the binary packages instead for a simplified install experience. + +.. _Installing_from_Source_on_Ubuntu: + +Installing from Source on Ubuntu +-------------------------------- + +To build CORE from source on Ubuntu, first install these development packages. +These packages are not required for normal binary package installs. + +.. parsed-literal:: + + sudo apt-get install |APTDEPS| \\ + |APTDEPS2| \\ + |APTDEPS3| + + +You can obtain the CORE source from the `CORE source `_ page. Choose either a stable release version or +the development snapshot available in the `nightly_snapshots` directory. +The ``-j8`` argument to ``make`` will run eight simultaneous jobs, to speed up +builds on multi-core systems. + +.. parsed-literal:: + + tar xzf core-|version|.tar.gz + cd core-|version| + ./bootstrap.sh + ./configure + make -j8 + sudo make install + + +The CORE Manual documentation is built separately from the :file:`doc/` +sub-directory in the source. It requires Sphinx: + +.. parsed-literal:: + + sudo apt-get install python-sphinx + cd core-|version|/doc + make html + make latexpdf + + +.. _Installing_from_Source_on_Fedora: + +Installing from Source on Fedora +-------------------------------- + +To build CORE from source on Fedora, install these development packages. +These packages are not required for normal binary package installs. + +.. parsed-literal:: + + yum install |YUMDEPS| \\ + |YUMDEPS2| \\ + |YUMDEPS3| + + +.. NOTE:: + For a minimal X11 installation, also try these packages:: + + yum install xauth xterm urw-fonts + +You can obtain the CORE source from the `CORE source `_ page. Choose either a stable release version or +the development snapshot available in the :file:`nightly_snapshots` directory. +The ``-j8`` argument to ``make`` will run eight simultaneous jobs, to speed up +builds on multi-core systems. Notice the ``configure`` flag to tell the build +system that a systemd service file should be installed under Fedora. + +.. parsed-literal:: + + tar xzf core-|version|.tar.gz + cd core-|version| + ./bootstrap.sh + ./configure --with-startup=systemd + make -j8 + sudo make install + + +Note that the Linux RPM and Debian packages do not use the ``/usr/local`` +prefix, and files are instead installed to ``/usr/sbin``, and +``/usr/lib``. This difference is a result of aligning with the directory +structure of Linux packaging systems and FreeBSD ports packaging. + +Another note is that the Python distutils in Fedora Linux will install the CORE +Python modules to :file:`/usr/lib/python2.7/site-packages/core`, instead of +using the :file:`dist-packages` directory. + +The CORE Manual documentation is built separately from the :file:`doc/` +sub-directory in the source. It requires Sphinx: + +.. parsed-literal:: + + sudo yum install python-sphinx + cd core-|version|/doc + make html + make latexpdf + + +.. _Installing_from_Source_on_CentOS: + +Installing from Source on CentOS/EL6 +------------------------------------ + +To build CORE from source on CentOS/EL6, first install the `EPEL `_ repo (Extra Packages for Enterprise Linux) in order +to provide the `libev` package. + +:: + + wget http://dl.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm + yum localinstall epel-release-6-8.noarch.rpm + + +Now use the same instructions shown in :ref:`Installing_from_Source_on_Fedora`. +CentOS/EL6 does not use the systemd service file, so the `configure` option +`--with-startup=systemd` should be omitted: + +:: + + ./configure + + + +.. _Installing_from_Source_on_SUSE: + +Installing from Source on SUSE +------------------------------ + +To build CORE from source on SUSE or OpenSUSE, +use the similar instructions shown in :ref:`Installing_from_Source_on_Fedora`, +except that the following `configure` option should be used: + +:: + + ./configure --with-startup=suse + +This causes a separate init script to be installed that is tailored towards SUSE systems. + +The `zypper` command is used instead of `yum`. + +For OpenSUSE/Xen based installations, refer to the `README-Xen` file included +in the CORE source. + + +.. _Installing_from_Source_on_FreeBSD: + +Installing from Source on FreeBSD +--------------------------------- + +.. index:: kernel patch + +**Rebuilding the FreeBSD Kernel** + + +The FreeBSD kernel requires a small patch to allow per-node directories in the +filesystem. Also, the `VIMAGE` build option needs to be turned on to enable +jail-based network stack virtualization. The source code for the FreeBSD +kernel is located in :file:`/usr/src/sys`. + +Instructions below will use the :file:`/usr/src/sys/amd64` architecture +directory, but the directory :file:`/usr/src/sys/i386` should be substituted +if you are using a 32-bit architecture. + +The kernel patch is available from the CORE source tarball under core-|version|/kernel/symlinks-8.1-RELEASE.diff. This patch applies to the +FreeBSD 8.x or 9.x kernels. + +.. parsed-literal:: + + cd /usr/src/sys + # first you can check if the patch applies cleanly using the '-C' option + patch -p1 -C < ~/core-|version|/kernel/symlinks-8.1-RELEASE.diff + # without '-C' applies the patch + patch -p1 < ~/core-|version|/kernel/symlinks-8.1-RELEASE.diff + + +A kernel configuration file named :file:`CORE` can be found within the source tarball: core-|version|/kernel/freebsd8-config-CORE. The config is valid for +FreeBSD 8.x or 9.x kernels. + +The contents of this configuration file are shown below; you can edit it to suit your needs. + +:: + + # this is the FreeBSD 9.x kernel configuration file for CORE + include GENERIC + ident CORE + + options VIMAGE + nooptions SCTP + options IPSEC + device crypto + + options IPFIREWALL + options IPFIREWALL_DEFAULT_TO_ACCEPT + + +The kernel configuration file can be linked or copied to the kernel source directory. Use it to configure and build the kernel: + +.. parsed-literal:: + + cd /usr/src/sys/amd64/conf + cp ~/core-|version|/kernel/freebsd8-config-CORE CORE + config CORE + cd ../compile/CORE + make cleandepend && make depend + make -j8 && make install + + +Change the number 8 above to match the number of CPU cores you have times two. +Note that the ``make install`` step will move your existing kernel to +``/boot/kernel.old`` and removes that directory if it already exists. Reboot to +enable this new patched kernel. + +**Building CORE from Source on FreeBSD** + +Here are the prerequisite packages from the FreeBSD ports system: + +:: + + pkg_add -r tk85 + pkg_add -r libimg + pkg_add -r bash + pkg_add -r libev + pkg_add -r sudo + pkg_add -r python + pkg_add -r autotools + pkg_add -r gmake + + +Note that if you are installing to a bare FreeBSD system and want to SSH with X11 forwarding to that system, these packages will help: + +:: + + pkg_add -r xauth + pkg_add -r xorg-fonts + + +The ``sudo`` package needs to be configured so a normal user can run the CORE +GUI using the command ``core-gui`` (opening a shell window on a node uses a +command such as ``sudo vimage n1``.) + +On FreeBSD, the CORE source is built using autotools and gmake: + +.. parsed-literal:: + + tar xzf core-|version|.tar.gz + cd core-|version| + ./bootstrap.sh + ./configure + gmake -j8 + sudo gmake install + + +Build and install the ``vimage`` utility for controlling virtual images. The source can be obtained from `FreeBSD SVN `_, or it is included with the CORE source for convenience: + +.. parsed-literal:: + + cd core-|version|/kernel/vimage + make + make install + + +.. index:: FreeBSD; kernel modules + +.. index:: kernel modules + +.. index:: ng_wlan and ng_pipe + +On FreeBSD you should also install the CORE kernel modules for wireless emulation. Perform this step after you have recompiled and installed FreeBSD kernel. + +.. parsed-literal:: + + cd core-|version|/kernel/ng_pipe + make + sudo make install + cd ../ng_wlan + make + sudo make install + + +The :file:`ng_wlan` kernel module allows for the creation of WLAN nodes. This +is a modified :file:`ng_hub` Netgraph module. Instead of packets being copied +to every connected node, the WLAN maintains a hash table of connected node +pairs. Furthermore, link parameters can be specified for node pairs, in +addition to the on/off connectivity. The parameters are tagged to each packet +and sent to the connected :file:`ng_pipe` module. The :file:`ng_pipe` has been +modified to read any tagged parameters and apply them instead of its default +link effects. + +The :file:`ng_wlan` also supports linking together multiple WLANs across different machines using the :file:`ng_ksocket` Netgraph node, for distributed emulation. + +The Quagga routing suite is recommended for routing, +:ref:`Quagga_Routing_Software` for installation. + +.. _Quagga_Routing_Software: + +Quagga Routing Software +======================= + +.. index:: Quagga + +Virtual networks generally require some form of routing in order to work (e.g. +to automatically populate routing tables for routing packets from one subnet +to another.) CORE builds OSPF routing protocol +configurations by default when the blue router +node type is used. The OSPF protocol is available +from the `Quagga open source routing suite `_. +Other routing protocols are available using different +node services, :ref:`Default_Services_and_Node_Types`. + +Quagga is not specified as a dependency for the CORE packages because +there are two different Quagga packages that you may use: + +* `Quagga `_ - the standard version of Quagga, suitable for static wired networks, and usually available via your distribution's package manager. + .. index:: OSPFv3 MANET + + .. index:: OSPFv3 MDR + + .. index:: MANET Designated Routers (MDR) + +* + `OSPF MANET Designated Routers `_ (MDR) - the Quagga routing suite with a modified version of OSPFv3, + optimized for use with mobile wireless networks. The *mdr* node type (and the MDR service) requires this variant of Quagga. + +If you plan on working with wireless networks, we recommend installing OSPF MDR; +otherwise install the standard version of Quagga using your package manager or from source. + +.. _Installing_Quagga_from_Packages: + +Installing Quagga from Packages +------------------------------- + +To install the standard version of Quagga from packages, use your package +manager (Linux) or the ports system (FreeBSD). + +Ubuntu users: +:: + + sudo apt-get install quagga + +Fedora users: +:: + + yum install quagga + +FreeBSD users: +:: + + pkg_add -r quagga + + +To install the Quagga variant having OSPFv3 MDR, first download the +appropriate package, and install using the package manager. + +Ubuntu users: + +.. parsed-literal:: + + export URL=http://downloads.pf.itd.nrl.navy.mil/ospf-manet + wget $URL/|QVER|/|QVERDEB| + sudo dpkg -i |QVERDEB| + +Replace `amd64` with `i686` if using a 32-bit architecture. + +Fedora users: + +.. parsed-literal:: + + export URL=http://downloads.pf.itd.nrl.navy.mil/ospf-manet + wget $URL/|QVER|/|QVERRPM| + yum localinstall |QVERRPM| + +Replace `x86_64` with `i686` if using a 32-bit architecture. + +.. _Compiling_Quagga_for_CORE: + +Compiling Quagga for CORE +------------------------- + +To compile Quagga to work with CORE on Linux: + +.. parsed-literal:: + + tar xzf |QVER|.tar.gz + cd |QVER| + ./configure --enable-user=root --enable-group=root --with-cflags=-ggdb \\ + --sysconfdir=/usr/local/etc/quagga --enable-vtysh \\ + --localstatedir=/var/run/quagga + make + sudo make install + + +Note that the configuration directory :file:`/usr/local/etc/quagga` shown for +Quagga above could be :file:`/etc/quagga`, if you create a symbolic link from +:file:`/etc/quagga/Quagga.conf -> /usr/local/etc/quagga/Quagga.conf` on the +host. The :file:`quaggaboot.sh` script in a Linux network namespace will try and +do this for you if needed. + +If you try to run quagga after installing from source and get an error such as: + +.. parsed-literal:: + + error while loading shared libraries libzebra.so.0 + +this is usually a sign that you have to run `sudo ldconfig` to refresh the +cache file. + +To compile Quagga to work with CORE on FreeBSD: + +.. parsed-literal:: + + tar xzf |QVER|.tar.gz + cd |QVER| + ./configure --enable-user=root --enable-group=wheel \\ + --sysconfdir=/usr/local/etc/quagga --enable-vtysh \\ + --localstatedir=/var/run/quagga + gmake + gmake install + + +On FreeBSD |BSDVERSION| you can use ``make`` or ``gmake``. +You probably want to compile Quagga from the ports system in +:file:`/usr/ports/net/quagga`. + +VCORE +===== + +.. index:: virtual machines + +.. index:: VirtualBox + +.. index:: VMware + +CORE is capable of running inside of a virtual machine, using +software such as VirtualBox, +VMware Server or QEMU. However, CORE itself is performing machine +virtualization in order to realize multiple emulated nodes, and running CORE +virtually adds additional contention for the physical resources. **For performance reasons, this is not recommended.** Timing inside of a VM often has +problems. If you do run CORE from within a VM, it is recommended that you view +the GUI with remote X11 over SSH, so the virtual machine does not need to +emulate the video card with the X11 application. + +.. index:: VCORE + +A CORE virtual machine is provided for download, named VCORE. +This is the perhaps the easiest way to get CORE up and running as the machine +is already set up for you. This may be adequate for initially evaluating the +tool but keep in mind the performance limitations of running within VirtualBox +or VMware. To install the virtual machine, you first need to obtain VirtualBox +from http://www.virtualbox.org, or VMware Server or Player from +http://www.vmware.com (this commercial software is distributed for free.) +Once virtualization software has been installed, you can import the virtual +machine appliance using the ``vbox`` file for VirtualBox or the ``vmx`` file for VMware. See the documentation that comes with VCORE for login information. + diff --git a/doc/intro.rst b/doc/intro.rst new file mode 100644 index 00000000..aaa587ce --- /dev/null +++ b/doc/intro.rst @@ -0,0 +1,256 @@ +.. This file is part of the CORE Manual + (c)2012-2013 the Boeing Company + +.. _Introduction: + +************ +Introduction +************ + +The Common Open Research Emulator (CORE) is a tool for building virtual +networks. As an emulator, CORE builds a representation of a real computer +network that runs in real time, as opposed to simulation, where abstract models +are used. The live-running emulation can be connected to physical networks and +routers. It provides an environment for running real applications and +protocols, taking advantage of virtualization provided by the Linux or FreeBSD +operating systems. + +Some of its key features are: + +.. index:: + single: key features + +* efficient and scalable +* runs applications and protocols without modification +* easy-to-use GUI +* highly customizable + +CORE is typically used for network and protocol research, +demonstrations, application and platform testing, evaluating networking +scenarios, security studies, and increasing the size of physical test networks. + +.. index:: + single: CORE; components of + single: CORE; API + single: API + single: CORE; GUI + +.. _Architecture: + +Architecture +============ +The main components of CORE are shown in :ref:`core-architecture`. A +*CORE daemon* (backend) manages emulation sessions. It builds emulated networks +using kernel virtualization for virtual nodes and some form of bridging and +packet manipulation for virtual networks. The nodes and networks come together +via interfaces installed on nodes. The daemon is controlled via the +graphical user interface, the *CORE GUI* (frontend). +The daemon uses Python modules +that can be imported directly by Python scripts. +The GUI and the daemon communicate using a custom, +asynchronous, sockets-based API, known as the *CORE API*. The dashed line +in the figure notionally depicts the user-space and kernel-space separation. +The components the user interacts with are colored blue: GUI, scripts, or +command-line tools. + +The system is modular to allow mixing different components. The virtual +networks component, for example, can be realized with other network +simulators and emulators, such as ns-3 and EMANE. +Different types of kernel virtualization are supported. +Another example is how a session can be designed and started using +the GUI, and continue to run in "headless" operation with the GUI closed. +The CORE API is sockets based, +to allow the possibility of running different components on different physical +machines. + +.. _core-architecture: + +.. figure:: figures/core-architecture.* + :alt: CORE architecture diagram + :align: center + + CORE Architecture + +The CORE GUI is a Tcl/Tk program; it is started using the command +``core-gui``. The CORE daemon, named ``core-daemon``, +is usually started via the init script +(``/etc/init.d/core-daemon`` or ``core-daemon.service``, +depending on platform.) +The CORE daemon manages sessions of virtual +nodes and networks, of which other scripts and utilities may be used for +further control. + + +.. _How_Does_It_Work?: + +How Does it Work? +================= + +A CORE node is a lightweight virtual machine. The CORE framework runs on Linux +and FreeBSD systems. The primary platform used for development is Linux. + +.. index:: + single: Linux; virtualization + single: Linux; containers + single: LXC + single: network namespaces + +* :ref:`Linux` CORE uses Linux network namespace virtualization to build virtual nodes, and ties them together with virtual networks using Linux Ethernet bridging. +* :ref:`FreeBSD` CORE uses jails with a network stack virtualization kernel option to build virtual nodes, and ties them together with virtual networks using BSD's Netgraph system. + + +.. _Linux: + +Linux +----- +Linux network namespaces (also known as netns, LXC, or `Linux containers +`_) is the primary virtualization +technique used by CORE. LXC has been part of the mainline Linux kernel since +2.6.24. Recent Linux distributions such as Fedora and Ubuntu have +namespaces-enabled kernels out of the box, so the kernel does not need to be +patched or recompiled. +A namespace is created using the ``clone()`` system call. Similar +to the BSD jails, each namespace has its own process environment and private +network stack. Network namespaces share the same filesystem in CORE. + +.. index:: + single: Linux; bridging + single: Linux; networking + single: ebtables + +CORE combines these namespaces with Linux Ethernet bridging +to form networks. Link characteristics are applied using Linux Netem queuing +disciplines. Ebtables is Ethernet frame filtering on Linux bridges. Wireless +networks are emulated by controlling which interfaces can send and receive with +ebtables rules. + + +.. _FreeBSD: + +FreeBSD +------- + +.. index:: + single: FreeBSD; Network stack virtualization + single: FreeBSD; jails + single: FreeBSD; vimages + +FreeBSD jails provide an isolated process space, a virtual environment for +running programs. Starting with FreeBSD 8.0, a new `vimage` kernel option +extends BSD jails so that each jail can have its own virtual network stack -- +its own networking variables such as addresses, interfaces, routes, counters, +protocol state, socket information, etc. The existing networking algorithms and +code paths are intact but operate on this virtualized state. + +Each jail plus network stack forms a lightweight virtual machine. These are +named jails or *virtual images* (or *vimages*) and are created using a the +``jail`` or ``vimage`` command. Unlike traditional virtual +machines, vimages do not feature entire operating systems running on emulated +hardware. All of the vimages will share the same processor, memory, clock, and +other system resources. Because the actual hardware is not emulated and network +packets can be passed by reference through the in-kernel Netgraph system, +vimages are quite lightweight and a single system can accommodate numerous +instances. + +Virtual network stacks in FreeBSD were historically available as a patch to the +FreeBSD 4.11 and 7.0 kernels, and the VirtNet project [#f1]_ [#f2]_ +added this functionality to the +mainline 8.0-RELEASE and newer kernels. + +.. index:: + single: FreeBSD; Netgraph + +The FreeBSD Operating System kernel features a graph-based +networking subsystem named Netgraph. The netgraph(4) manual page quoted below +best defines this system: + + The netgraph system provides a uniform and modular system for the + implementation of kernel objects which perform various networking functions. + The objects, known as nodes, can be arranged into arbitrarily complicated + graphs. Nodes have hooks which are used to connect two nodes together, + forming the edges in the graph. Nodes communicate along the edges to + process data, implement protocols, etc. + + The aim of netgraph is to supplement rather than replace the existing + kernel networking infrastructure. + +.. index:: + single: IMUNES + single: VirtNet + single: prior work + +.. rubric:: Footnotes +.. [#f1] http://www.nlnet.nl/project/virtnet/ +.. [#f2] http://www.imunes.net/virtnet/ + +.. _Prior_Work: + +Prior Work +========== + +The Tcl/Tk CORE GUI was originally derived from the open source +`IMUNES `_ +project from the University of Zagreb +as a custom project within Boeing Research and Technology's Network +Technology research group in 2004. Since then they have developed the CORE +framework to use not only FreeBSD but Linux virtualization, have developed a +Python framework, and made numerous user- and kernel-space developments, such +as support for wireless networks, IPsec, the ability to distribute emulations, +simulation integration, and more. The IMUNES project also consists of userspace +and kernel components. Originally, one had to download and apply a patch for +the FreeBSD 4.11 kernel, but the more recent +`VirtNet `_ +effort has brought network stack +virtualization to the more modern FreeBSD 8.x kernel. + +.. _Open_Source_Project_and_Resources: + +Open Source Project and Resources +================================= +.. index:: + single: open source project + single: license + single: website + single: supplemental website + single: contributing + +CORE has been released by Boeing to the open source community under the BSD +license. If you find CORE useful for your work, please contribute back to the +project. Contributions can be as simple as reporting a bug, dropping a line of +encouragement or technical suggestions to the mailing lists, or can also +include submitting patches or maintaining aspects of the tool. For details on +contributing to CORE, please visit the +`wiki `_. + +Besides this manual, there are other additional resources available online: + +* `CORE website `_ - main project page containing demos, downloads, and mailing list information. +* `CORE supplemental website `_ - supplemental Google Code page with a quickstart guide, wiki, bug tracker, and screenshots. + +.. index:: + single: wiki + single: CORE; wiki + +The `CORE wiki `_ is a good place to check for the latest documentation and tips. + +Goals +----- +These are the Goals of the CORE project; they are similar to what we consider to be the :ref:`key features `. + +#. Ease of use - In a few clicks the user should have a running network. +#. Efficiency and scalability - A node is more lightweight than a full virtual machine. Tens of nodes should be possible on a standard laptop computer. +#. Real software - Run real implementation code, protocols, networking stacks. +#. Networking - CORE is focused on emulating networks and offers various ways to connect the running emulation with real or simulated networks. +#. Hackable - The source code is available and easy to understand and modify. + +Non-Goals +--------- +This is a list of Non-Goals, specific things that people may be interested in but are not areas that we will pursue. + + +#. Reinventing the wheel - Where possible, CORE reuses existing open source components such as virtualization, Netgraph, netem, bridging, Quagga, etc. +#. 1,000,000 nodes - While the goal of CORE is to provide efficient, scalable network emulation, there is no set goal of N number of nodes. There are realistic limits on what a machine can handle as its resources are divided amongst virtual nodes. We will continue to make things more efficient and let the user determine the right number of nodes based on available hardware and the activities each node is performing. +#. Solves every problem - CORE is about emulating networking layers 3-7 using virtual network stacks in the Linux or FreeBSD operating systems. +#. Hardware-specific - CORE itself is not an instantiation of hardware, a testbed, or a specific laboratory setup; it should run on commodity laptop and desktop PCs, in addition to high-end server hardware. + + diff --git a/doc/machine.rst b/doc/machine.rst new file mode 100644 index 00000000..588a383b --- /dev/null +++ b/doc/machine.rst @@ -0,0 +1,91 @@ +.. This file is part of the CORE Manual + (c)2012-2013 the Boeing Company + +.. _Machine_Types: + +************* +Machine Types +************* + +.. index:: machine types + +Different node types can be configured in CORE, and each node type has a +*machine type* that indicates how the node will be represented at run time. +Different machine types allow for different virtualization options. + +.. _netns: + +netns +===== + +.. index:: netns machine type + +The *netns* machine type is the default. This is for nodes that will be +backed by Linux network namespaces. See :ref:`Linux` for a brief explanation of +netns. This default machine type is very lightweight, providing a minimum +amount of +virtualization in order to emulate a network. +Another reason this is designated as the default machine type +is because this virtualization technology +typically requires no changes to the kernel; it is available out-of-the-box +from the latest mainstream Linux distributions. + +.. index:: physical machine type + +.. index:: emulation testbed machines + +.. index:: real node + +.. index:: physical node + +.. _physical: + +physical +======== + +The *physical* machine type is used for nodes that represent a real +Linux-based machine that will participate in the emulated network scenario. +This is typically used, for example, to incorporate racks of server machines +from an emulation testbed. A physical node is one that is running the CORE +daemon (:file:`core-daemon`), but will not be further partitioned into virtual +machines. Services that are run on the physical node do not run in an +isolated or virtualized environment, but directly on the operating system. + +Physical nodes must be assigned to servers, the same way nodes +are assigned to emulation servers with :ref:`Distributed_Emulation`. +The list of available physical nodes currently shares the same dialog box +and list as the emulation servers, accessed using the *Emulation Servers...* +entry from the *Session* menu. + +.. index:: GRE tunnels with physical nodes + +Support for physical nodes is under development and may be improved in future +releases. Currently, when any node is linked to a physical node, a dashed line +is drawn to indicate network tunneling. A GRE tunneling interface will be +created on the physical node and used to tunnel traffic to and from the +emulated world. + +Double-clicking on a physical node during runtime +opens a terminal with an SSH shell to that +node. Users should configure public-key SSH login as done with emulation +servers. + +.. _xen: + +xen +=== + +.. index:: xen machine type + +The *xen* machine type is an experimental new type in CORE for managing +Xen domUs from within CORE. After further development, +it may be documented here. + +Current limitations include only supporting ISO-based filesystems, and lack +of integration with node services, EMANE, and possibly other features of CORE. + +There is a :file:`README-Xen` file available in the CORE source that contains +further instructions for setting up Xen-based nodes. + + + diff --git a/doc/man/Makefile.am b/doc/man/Makefile.am new file mode 100755 index 00000000..30405928 --- /dev/null +++ b/doc/man/Makefile.am @@ -0,0 +1,37 @@ +# CORE +# (c)2012-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +# Makefile for building man pages. +# + +if WANT_GUI + GUI_MANS = core-gui.1 +endif +if WANT_DAEMON + DAEMON_MANS = vnoded.1 vcmd.1 netns.1 core-daemon.1 coresendmsg.1 \ + core-cleanup.1 core-xen-cleanup.1 +endif +man_MANS = $(GUI_MANS) $(DAEMON_MANS) + +.PHONY: generate-mans +generate-mans: + $(HELP2MAN) --source CORE 'sh $(top_srcdir)/gui/core-gui' -o core-gui.1.new + $(HELP2MAN) --no-info --source CORE $(top_srcdir)/daemon/src/vnoded -o vnoded.1.new + $(HELP2MAN) --no-info --source CORE $(top_srcdir)/daemon/src/vcmd -o vcmd.1.new + $(HELP2MAN) --no-info --source CORE $(top_srcdir)/daemon/src/netns -o netns.1.new + $(HELP2MAN) --version-string=$(CORE_VERSION) --no-info --source CORE $(top_srcdir)/daemon/sbin/core-daemon -o core-daemon.1.new + $(HELP2MAN) --version-string=$(CORE_VERSION) --no-info --source CORE $(top_srcdir)/daemon/sbin/coresendmsg -o coresendmsg.1.new + $(HELP2MAN) --version-string=$(CORE_VERSION) --no-info --source CORE $(top_srcdir)/daemon/sbin/core-cleanup -o core-cleanup.1.new + $(HELP2MAN) --version-string=$(CORE_VERSION) --no-info --source CORE $(top_srcdir)/daemon/sbin/core-xen-cleanup -o core-xen-cleanup.1.new + +.PHONY: diff +diff: + for m in ${man_MANS}; do \ + colordiff -u $$m $$m.new | less -R; \ + done; + +DISTCLEANFILES = Makefile.in +EXTRA_DIST = $(man_MANS) diff --git a/doc/man/core-cleanup.1 b/doc/man/core-cleanup.1 new file mode 100644 index 00000000..2ffb1f52 --- /dev/null +++ b/doc/man/core-cleanup.1 @@ -0,0 +1,30 @@ +.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.40.4. +.TH CORE-CLEANUP "1" "August 2013" "CORE" "User Commands" +.SH NAME +core-cleanup \- clean-up script for CORE +.SH DESCRIPTION +usage: core\-cleanup [\-d [\-l]] +.IP +Clean up all CORE namespaces processes, bridges, interfaces, and session +directories. Options: +.TP +\fB\-h\fR +show this help message and exit +.TP +\fB\-d\fR +also kill the Python daemon +.TP +\fB\-l\fR +remove the core-daemon.log file +.SH "SEE ALSO" +.BR core-gui(1), +.BR core-daemon(1), +.BR coresendmsg(1), +.BR core-xen-cleanup(1), +.BR vcmd(1), +.BR vnoded(1) +.SH BUGS +Report bugs to +.BI core-dev@pf.itd.nrl.navy.mil. + + diff --git a/doc/man/core-daemon.1 b/doc/man/core-daemon.1 new file mode 100644 index 00000000..784391ba --- /dev/null +++ b/doc/man/core-daemon.1 @@ -0,0 +1,52 @@ +.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.40.4. +.TH CORE "1" "August 2013" "CORE" "User Commands" +.SH NAME +core-daemon \- CORE daemon manages emulation sessions started from GUI or scripts +.SH SYNOPSIS +.B core-daemon +[\fI-h\fR] [\fIoptions\fR] [\fIargs\fR] +.SH DESCRIPTION +CORE daemon instantiates Linux network namespace nodes. +.SH OPTIONS +.TP +\fB\-h\fR, \fB\-\-help\fR +show this help message and exit +.TP +\fB\-f\fR CONFIGFILE, \fB\-\-configfile\fR=\fICONFIGFILE\fR +read config from specified file; default = +/etc/core/core.conf +.TP +\fB\-d\fR, \fB\-\-daemonize\fR +run in background as daemon; default=False +.TP +\fB\-e\fR EXECFILE, \fB\-\-execute\fR=\fIEXECFILE\fR +execute a Python/XML\-based session +.TP +\fB\-l\fR LOGFILE, \fB\-\-logfile\fR=\fILOGFILE\fR +log output to specified file; default = +/var/log/core-daemon.log +.TP +\fB\-p\fR PORT, \fB\-\-port\fR=\fIPORT\fR +port number to listen on; default = 4038 +.TP +\fB\-i\fR PIDFILE, \fB\-\-pidfile\fR=\fIPIDFILE\fR +filename to write pid to; default = /var/run/core-daemon.pid +.TP +\fB\-t\fR NUMTHREADS, \fB\-\-numthreads\fR=\fINUMTHREADS\fR +number of server threads; default = 1 +.TP +\fB\-v\fR, \fB\-\-verbose\fR +enable verbose logging; default = False +.TP +\fB\-g\fR, \fB\-\-debug\fR +enable debug logging; default = False +.SH "SEE ALSO" +.BR core-gui(1), +.BR coresendmsg(1), +.BR netns(1), +.BR vcmd(1), +.BR vnoded(1) +.SH BUGS +Report bugs to +.BI core-dev@pf.itd.nrl.navy.mil. + diff --git a/doc/man/core-gui.1 b/doc/man/core-gui.1 new file mode 100644 index 00000000..cac6c95f --- /dev/null +++ b/doc/man/core-gui.1 @@ -0,0 +1,38 @@ +.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.40.4. +.TH CORE "1" "August 2013" "CORE" "User Commands" +.SH NAME +core-gui \- Common Open Research Emulator (CORE) graphical user interface +.SH SYNOPSIS +.B core-gui +[\fI-h|-v\fR] [\fI-b|-c \fR] [\fI-s\fR] [\fI\fR] +.SH DESCRIPTION +Launches the CORE Tcl/Tk X11 GUI or starts an imn\-based emulation. +.TP +\-(\fB\-h\fR)elp +show help message and exit +.TP +\-(\fB\-v\fR)ersion +show version number and exit +.TP +\-(\fB\-b\fR)atch +batch mode (no X11 GUI) +.TP +\-(\fB\-c\fR)losebatch +stop and clean up a batch mode session +.TP +\-(\fB\-s\fR)tart +start in execute mode, not edit mode +.TP + +(optional) load the specified imn scenario file +.PP +With no parameters, starts the GUI in edit mode with a blank canvas. +.SH "SEE ALSO" +.BR core-daemon(1), +.BR coresendmsg(1), +.BR vcmd(1), +.BR vnoded(1) +.SH BUGS +Report bugs to +.BI core-dev@pf.itd.nrl.navy.mil. + diff --git a/doc/man/core-xen-cleanup.1 b/doc/man/core-xen-cleanup.1 new file mode 100644 index 00000000..d4b39a2a --- /dev/null +++ b/doc/man/core-xen-cleanup.1 @@ -0,0 +1,28 @@ +.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.40.4. +.TH CORE-XEN-CLEANUP "1" "August 2013" "CORE" "User Commands" +.SH NAME +core-xen-cleanup \- clean-up script for CORE Xen domUs +.SH DESCRIPTION +usage: core\-xen\-cleanup [\-d] +.IP +Clean up all CORE Xen domUs, bridges, interfaces, and session +directories. Options: +.TP +\fB\-h\fR +show this help message and exit +.TP +\fB\-d\fR +also kill the Python daemon +.SH "SEE ALSO" +.BR core-gui(1), +.BR core-daemon(1), +.BR coresendmsg(1), +.BR core-cleanup(1), +.BR vcmd(1), +.BR vnoded(1) +.SH BUGS +Warning! This script will remove logical volumes that match the name "/dev/vg*/c*-n*-" on all volume groups. Use with care. +Report bugs to +.BI core-dev@pf.itd.nrl.navy.mil. + + diff --git a/doc/man/coresendmsg.1 b/doc/man/coresendmsg.1 new file mode 100644 index 00000000..ab31d194 --- /dev/null +++ b/doc/man/coresendmsg.1 @@ -0,0 +1,85 @@ +.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.40.4. +.TH CORESENDMSG "1" "August 2013" "CORE" "User Commands" +.SH NAME +coresendmsg \- send a CORE API message to the core-daemon daemon +.SH SYNOPSIS +.B coresendmsg +[\fI-h|-H\fR] [\fIoptions\fR] [\fImessage-type\fR] [\fIflags=flags\fR] [\fImessage-TLVs\fR] +.SH DESCRIPTION +.SS "Supported message types:" +.IP +['node', 'link', 'exec', 'reg', 'conf', 'file', 'iface', 'event', 'sess', 'excp'] +.SS "Supported message flags (flags=f1,f2,...):" +.IP +['add', 'del', 'cri', 'loc', 'str', 'txt', 'tty'] +.SH OPTIONS +.TP +\fB\-h\fR, \fB\-\-help\fR +show this help message and exit +.TP +\fB\-H\fR +show example usage help message and exit +.TP +\fB\-p\fR PORT, \fB\-\-port\fR=\fIPORT\fR +TCP port to connect to, default: 4038 +.TP +\fB\-a\fR ADDRESS, \fB\-\-address\fR=\fIADDRESS\fR +Address to connect to, default: localhost +.TP +\fB\-s\fR SESSION, \fB\-\-session\fR=\fISESSION\fR +Session to join, default: None +.TP +\fB\-l\fR, \fB\-\-listen\fR +Listen for a response message and print it. +.TP +\fB\-t\fR, \fB\-\-list\-tlvs\fR +List TLVs for the specified message type. +.TP +\fB\-T\fR, \fB\-\-tcp\fR +Use TCP instead of UDP and connect to a session, +default: False +.PP +Usage: coresendmsg [\-h|\-H] [options] [message\-type] [flags=flags] [message\-TLVs] +.SS "Supported message types:" +.IP +['node', 'link', 'exec', 'reg', 'conf', 'file', 'iface', 'event', 'sess', 'excp'] +.SS "Supported message flags (flags=f1,f2,...):" +.IP +['add', 'del', 'cri', 'loc', 'str', 'txt', 'tty'] +.TP +\fB\-h\fR, \fB\-\-help\fR +show this help message and exit +.TP +\fB\-H\fR +show example usage help message and exit +.TP +\fB\-p\fR PORT, \fB\-\-port\fR=\fIPORT\fR +TCP port to connect to, default: 4038 +.TP +\fB\-a\fR ADDRESS, \fB\-\-address\fR=\fIADDRESS\fR +Address to connect to, default: localhost +.TP +\fB\-s\fR SESSION, \fB\-\-session\fR=\fISESSION\fR +Session to join, default: None +.TP +\fB\-l\fR, \fB\-\-listen\fR +Listen for a response message and print it. +.TP +\fB\-t\fR, \fB\-\-list\-tlvs\fR +List TLVs for the specified message type. +.TP +\fB\-T\fR, \fB\-\-tcp\fR +Use TCP instead of UDP and connect to a session, +default: False +.SH "EXAMPLES" +.TP +A list of examples is available using the following command: +coresendmsg \-H +.SH "SEE ALSO" +.BR core-gui(1), +.BR core-daemon(1), +.BR vcmd(1), +.BR vnoded(1) +.SH BUGS +Report bugs to +.BI core-dev@pf.itd.nrl.navy.mil. diff --git a/doc/man/netns.1 b/doc/man/netns.1 new file mode 100644 index 00000000..860fa73f --- /dev/null +++ b/doc/man/netns.1 @@ -0,0 +1,30 @@ +.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.40.4. +.TH NETNS "1" "August 2013" "CORE" "User Commands" +.SH NAME +netns \- run commands within a network namespace +.SH SYNOPSIS +.B netns +[\fI-h|-V\fR] [\fI-w\fR] \fI-- command \fR[\fIargs\fR...] +.SH DESCRIPTION +Run the specified command in a new network namespace. +.SH OPTIONS +.TP +\fB\-h\fR, \fB\-\-help\fR +show this help message and exit +.TP +\fB\-V\fR, \fB\-\-version\fR +show version number and exit +.TP +\fB\-w\fR +wait for command to complete (useful for interactive commands) +.SH "SEE ALSO" +.BR core-gui(1), +.BR core-daemon(1), +.BR coresendmsg(1), +.BR unshare(1), +.BR vcmd(1), +.BR vnoded(1) +.SH BUGS +Report bugs to +.BI core-dev@pf.itd.nrl.navy.mil. + diff --git a/doc/man/vcmd.1 b/doc/man/vcmd.1 new file mode 100644 index 00000000..57548511 --- /dev/null +++ b/doc/man/vcmd.1 @@ -0,0 +1,42 @@ +.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.40.4. +.TH VCMD "1" "August 2013" "CORE" "User Commands" +.SH NAME +vcmd \- run a command in a network namespace created by vnoded +.SH SYNOPSIS +.B vcmd +[\fI-h|-V\fR] [\fI-v\fR] [\fI-q|-i|-I\fR] \fI-c -- command args\fR... +.SH DESCRIPTION +Run the specified command in the Linux namespace container specified by the +control , with the specified arguments. +.SH OPTIONS +.TP +\fB\-h\fR, \fB\-\-help\fR +show this help message and exit +.TP +\fB\-V\fR, \fB\-\-version\fR +show version number and exit +.TP +\fB\-v\fR +enable verbose logging +.TP +\fB\-q\fR +run the command quietly, without local input or output +.TP +\fB\-i\fR +run the command interactively (use PTY) +.TP +\fB\-I\fR +run the command non\-interactively (without PTY) +.TP +\fB\-c\fR +control channel name (e.g. '/tmp/pycore.45647/n3') +.SH "SEE ALSO" +.BR core-gui(1), +.BR core-daemon(1), +.BR coresendmsg(1), +.BR netns(1), +.BR vnoded(1), +.SH BUGS +Report bugs to +.BI core-dev@pf.itd.nrl.navy.mil. + diff --git a/doc/man/vnoded.1 b/doc/man/vnoded.1 new file mode 100644 index 00000000..1ab7846f --- /dev/null +++ b/doc/man/vnoded.1 @@ -0,0 +1,44 @@ +.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.40.4. +.TH VNODED "1" "August 2013" "CORE" "User Commands" +.SH NAME +vnoded \- network namespace daemon used by CORE to create a lightweight container +.SH SYNOPSIS +.B vnoded +[\fI-h|-V\fR] [\fI-v\fR] [\fI-n\fR] [\fI-C \fR] [\fI-l \fR] [\fI-p \fR] \fI-c \fR +.SH DESCRIPTION +Linux namespace container server daemon runs as PID 1 in the container. +Normally this process is launched automatically by the CORE daemon. +.SH OPTIONS +.TP +\fB\-h\fR, \fB\-\-help\fR +show this help message and exit +.TP +\fB\-V\fR, \fB\-\-version\fR +show version number and exit +.TP +\fB\-v\fR +enable verbose logging +.TP +\fB\-n\fR +do not create and run daemon within a new network namespace (for debug) +.TP +\fB\-C\fR +change to the specified directory +.TP +\fB\-l\fR +log output to the specified file +.TP +\fB\-p\fR +write process id to the specified file +.TP +\fB\-c\fR +establish the specified for receiving control commands +.SH "SEE ALSO" +.BR core-gui(1), +.BR core-daemon(1), +.BR coresendmsg(1), +.BR vcmd(1), +.SH BUGS +Report bugs to +.BI core-dev@pf.itd.nrl.navy.mil. + diff --git a/doc/ns3.rst b/doc/ns3.rst new file mode 100644 index 00000000..1f3c06c6 --- /dev/null +++ b/doc/ns3.rst @@ -0,0 +1,314 @@ +.. This file is part of the CORE Manual + (c)2012-2013 the Boeing Company + +.. _ns-3: + +**** +ns-3 +**** + +.. index:: ns-3 + +This chapter describes running CORE with the +`ns-3 network simulator `_. + +.. _What_is_ns-3?: + +What is ns-3? +============= + +.. index:: ns-3 Introduction + +ns-3 is a discrete-event network simulator for Internet systems, targeted primarily for research and educational use. [#f1]_ By default, ns-3 simulates entire networks, from applications down to channels, and it does so in simulated time, instead of real (wall-clock) time. + +CORE can run in conjunction with ns-3 to simulate some types of networks. CORE +network namespace virtual nodes can have virtual TAP interfaces installed using +the simulator for communication. The simulator needs to run at wall clock time +with the real-time scheduler. In this type of configuration, the CORE +namespaces are used to provide packets to the ns-3 devices and channels. +This allows, for example, wireless models developed for ns-3 to be used +in an emulation context. + +Users simulate networks with ns-3 by writing C++ programs or Python scripts that +import the ns-3 library. Simulation models are objects instantiated in these +scripts. Combining the CORE Python modules with ns-3 Python bindings allow +a script to easily set up and manage an emulation + simulation environment. + +.. rubric:: Footnotes +.. [#f1] http://www.nsnam.org + +.. _ns-3_Scripting: + +ns-3 Scripting +============== + +.. index:: ns-3 scripting + +Currently, ns-3 is supported by writing +:ref:`Python scripts `, but not through +drag-and-drop actions within the GUI. +If you have a copy of the CORE source, look under :file:`core/daemon/ns3/examples/` for example scripts; a CORE installation package puts these under +:file:`/usr/share/core/examples/corens3`. + +To run these scripts, install CORE so the CORE Python libraries are accessible, +and download and build ns-3. This has been tested using ns-3 releases starting +with 3.11 (and through 3.16 as of this writing). + +The first step is to open an ns-3 waf shell. `waf `_ is the build system for ns-3. Opening a waf shell as root will merely +set some environment variables useful for finding python modules and ns-3 +executables. The following environment variables are extended or set by +issuing `waf shell`: + +:: + + PATH + PYTHONPATH + LD_LIBRARY_PATH + NS3_MODULE_PATH + NS3_EXECUTABLE_PATH + +Open a waf shell as root, so that network namespaces may be instantiated +by the script with root permissions. For an example, run the +:file:`ns3wifi.py` +program, which simply instantiates 10 nodes (by default) and places them on +an ns-3 WiFi channel. That is, the script will instantiate 10 namespace nodes, +and create a special tap device that sends packets between the namespace +node and a special ns-3 simulation node, where the tap device is bridged +to an ns-3 WiFi network device, and attached to an ns-3 WiFi channel. + +:: + + > cd ns-allinone-3.16/ns-3.16 + > sudo ./waf shell + # # use '/usr/local' below if installed from source + # cd /usr/share/core/examples/corens3/ + # python -i ns3wifi.py + running ns-3 simulation for 600 seconds + + >>> print session + + >>> + + +The interactive Python shell allows some interaction with the Python objects +for the emulation. + +In another terminal, nodes can be accessed using *vcmd*: +:: + + vcmd -c /tmp/pycore.10781/n1 -- bash + root@n1:/tmp/pycore.10781/n1.conf# + root@n1:/tmp/pycore.10781/n1.conf# ping 10.0.0.3 + PING 10.0.0.3 (10.0.0.3) 56(84) bytes of data. + 64 bytes from 10.0.0.3: icmp_req=1 ttl=64 time=7.99 ms + 64 bytes from 10.0.0.3: icmp_req=2 ttl=64 time=3.73 ms + 64 bytes from 10.0.0.3: icmp_req=3 ttl=64 time=3.60 ms + ^C + --- 10.0.0.3 ping statistics --- + 3 packets transmitted, 3 received, 0% packet loss, time 2002ms + rtt min/avg/max/mdev = 3.603/5.111/7.993/2.038 ms + root@n1:/tmp/pycore.10781/n1.conf# + + +The ping packets shown above are traversing an ns-3 ad-hoc Wifi simulated +network. + +To clean up the session, use the Session.shutdown() method from the Python +terminal. + +:: + + >>> print session + + >>> + >>> session.shutdown() + >>> + + +A CORE/ns-3 Python script will instantiate an Ns3Session, which is a +CORE Session +having CoreNs3Nodes, an ns-3 MobilityHelper, and a fixed duration. +The CoreNs3Node inherits from both the CoreNode and the ns-3 Node classes -- it +is a network namespace having an associated simulator object. The CORE TunTap +interface is used, represented by a ns-3 TapBridge in `CONFIGURE_LOCAL` +mode, where ns-3 creates and configures the tap device. An event is scheduled +to install the taps at time 0. + +.. NOTE:: + The GUI can be used to run the :file:`ns3wifi.py` + and :file:`ns3wifirandomwalk.py` scripts directly. First, ``core-daemon`` + must be + stopped and run within the waf root shell. Then the GUI may be run as + a normal user, and the *Execute Python Script...* option may be used from + the *File* menu. Dragging nodes around in the :file:`ns3wifi.py` example + will cause their ns-3 positions to be updated. + + +Users may find the files :file:`ns3wimax.py` and :file:`ns3lte.py` +in that example +directory; those files were similarly configured, but the underlying +ns-3 support is not present as of ns-3.16, so they will not work. Specifically, +the ns-3 has to be extended to support bridging the Tap device to +an LTE and a WiMax device. + +.. _ns-3_Integration_details: + +Integration details +=================== + +.. index:: ns-3 integration details + +The previous example :file:`ns3wifi.py` used Python API from the special Python +objects *Ns3Session* and *Ns3WifiNet*. The example program does not import +anything directly from the ns-3 python modules; rather, only the above +two objects are used, and the API available to configure the underlying +ns-3 objects is constrained. For example, *Ns3WifiNet* instantiates +a constant-rate 802.11a-based ad hoc network, using a lot of ns-3 defaults. + +However, programs may be written with a blend of ns-3 API and CORE Python +API calls. This section examines some of the fundamental objects in +the CORE ns-3 support. Source code can be found in +:file:`daemon/ns3/corens3/obj.py` and example +code in :file:`daemon/ns3/corens3/examples/`. + +Ns3Session +---------- + +The *Ns3Session* class is a CORE Session that starts an ns-3 simulation +thread. ns-3 actually runs as a separate process on the same host as +the CORE daemon, and the control of starting and stopping this process +is performed by the *Ns3Session* class. + +Example: + +:: + + session = Ns3Session(persistent=True, duration=opt.duration) + +Note the use of the duration attribute to control how long the ns-3 simulation +should run. By default, the duration is 600 seconds. + +Typically, the session keeps track of the ns-3 nodes (holding a node +container for references to the nodes). This is accomplished via the +`addnode()` method, e.g.: + +:: + + for i in xrange(1, opt.numnodes + 1): + node = session.addnode(name = "n%d" % i) + +`addnode()` creates instances of a *CoreNs3Node*, which we'll cover next. + +CoreNs3Node +----------- + +A *CoreNs3Node* is both a CoreNode and an ns-3 node: + +:: + + class CoreNs3Node(CoreNode, ns.network.Node): + ''' The CoreNs3Node is both a CoreNode backed by a network namespace and + an ns-3 Node simulator object. When linked to simulated networks, the TunTap + device will be used. + + +CoreNs3Net +----------- + +A *CoreNs3Net* derives from *PyCoreNet*. This network exists entirely +in simulation, using the TunTap device to interact between the emulated +and the simulated realm. *Ns3WifiNet* is a specialization of this. + +As an example, this type of code would be typically used to add a WiFi +network to a session: + +:: + + wifi = session.addobj(cls=Ns3WifiNet, name="wlan1", rate="OfdmRate12Mbps") + wifi.setposition(30, 30, 0) + +The above two lines will create a wlan1 object and set its initial canvas +position. Later in the code, the newnetif method of the CoreNs3Node can +be used to add interfaces on particular nodes to this network; e.g.: + +:: + + for i in xrange(1, opt.numnodes + 1): + node = session.addnode(name = "n%d" % i) + node.newnetif(wifi, ["%s/%s" % (prefix.addr(i), prefix.prefixlen)]) + + +.. _ns-3_Mobility: + +Mobility +======== + +.. index:: ns-3 mobility + +Mobility in ns-3 is handled by an object (a MobilityModel) aggregated to +an ns-3 node. The MobilityModel is able to report the position of the +object in the ns-3 space. This is a slightly different model from, for +instance, EMANE, where location is associated with an interface, and the +CORE GUI, where mobility is configured by right-clicking on a WiFi +cloud. + +The CORE GUI supports the ability to render the underlying ns-3 mobility +model, if one is configured, on the CORE canvas. For example, the +example program :file:`ns3wifirandomwalk.py` uses five nodes (by default) in +a random walk mobility model. This can be executed by starting the +core daemon from an ns-3 waf shell: + +:: + + # sudo bash + # cd /path/to/ns-3 + # ./waf shell + # core-daemon + +and in a separate window, starting the CORE GUI (not from a waf shell) +and selecting the +*Execute Python script...* option from the File menu, selecting the +:file:`ns3wifirandomwalk.py` script. + +The program invokes ns-3 mobility through the following statement: + +:: + + session.setuprandomwalkmobility(bounds=(1000.0, 750.0, 0)) + +This can be replaced by a different mode of mobility, in which nodes +are placed according to a constant mobility model, and a special +API call to the CoreNs3Net object is made to use the CORE canvas +positions. + +:: + + - session.setuprandomwalkmobility(bounds=(1000.0, 750.0, 0)) + + session.setupconstantmobility() + + wifi.usecorepositions() + + +In this mode, the user dragging around the nodes on the canvas will +cause CORE to update the position of the underlying ns-3 nodes. + + +.. _ns-3_Under_Development: + +Under Development +================= + +.. index:: limitations with ns-3 + +Support for ns-3 is fairly new and still under active development. +Improved support may be found in the development snapshots available on the web. + +The following limitations will be addressed in future releases: + +* GUI configuration and control - currently ns-3 networks can only be + instantiated from a Python script or from the GUI hooks facility. + +* Model support - currently the WiFi model is supported. The WiMAX and 3GPP LTE + models have been experimented with, but are not currently working with the + TapBridge device. + + diff --git a/doc/performance.rst b/doc/performance.rst new file mode 100644 index 00000000..fe51c685 --- /dev/null +++ b/doc/performance.rst @@ -0,0 +1,60 @@ +.. This file is part of the CORE Manual + (c)2012 the Boeing Company + +.. _Performance: + +.. include:: constants.txt + +*********** +Performance +*********** + +.. index:: performance + +.. index:: number of nodes + +The top question about the performance of CORE is often +*how many nodes can it handle?* The answer depends on several factors: + +* Hardware - the number and speed of processors in the computer, the available + processor cache, RAM memory, and front-side bus speed may greatly affect + overall performance. +* Operating system version - Linux or FreeBSD, and the specific kernel versions + used will affect overall performance. +* Active processes - all nodes share the same CPU resources, so if one or more + nodes is performing a CPU-intensive task, overall performance will suffer. +* Network traffic - the more packets that are sent around the virtual network + increases the amount of CPU usage. +* GUI usage - widgets that run periodically, mobility scenarios, and other GUI + interactions generally consume CPU cycles that may be needed for emulation. + +On a typical single-CPU Xeon 3.0GHz server machine with 2GB RAM running FreeBSD +|BSDVERSION|, we have found it reasonable to run 30-75 nodes running +OSPFv2 and OSPFv3 routing. On this hardware CORE can instantiate 100 or more +nodes, but at that point it becomes critical as to what each of the nodes is +doing. + +.. index:: network performance + +Because this software is primarily a network emulator, the more appropriate +question is *how much network traffic can it handle?* On the same 3.0GHz server +described above, running FreeBSD 4.11, about 300,000 packets-per-second can be +pushed through the system. The number of hops and the size of the packets is +less important. The limiting factor is the number of times that the operating +system needs to handle a packet. The 300,000 pps figure represents the number +of times the system as a whole needed to deal with a packet. As more network +hops are added, this increases the number of context switches and decreases the +throughput seen on the full length of the network path. + +.. NOTE:: + The right question to be asking is *"how much traffic?"*, + not *"how many nodes?"*. + +For a more detailed study of performance in CORE, refer to the following publications: + +* J\. Ahrenholz, T. Goff, and B. Adamson, Integration of the CORE and EMANE Network Emulators, Proceedings of the IEEE Military Communications Conference 2011, November 2011. + +* Ahrenholz, J., Comparison of CORE Network Emulation Platforms, Proceedings of the IEEE Military Communications Conference 2010, pp. 864-869, November 2010. + +* J\. Ahrenholz, C. Danilov, T. Henderson, and J.H. Kim, CORE: A real-time network emulator, Proceedings of IEEE MILCOM Conference, 2008. + diff --git a/doc/scripting.rst b/doc/scripting.rst new file mode 100644 index 00000000..5693702d --- /dev/null +++ b/doc/scripting.rst @@ -0,0 +1,137 @@ +.. This file is part of the CORE Manual + (c)2012 the Boeing Company + +.. _Python_Scripting: + +**************** +Python Scripting +**************** + +.. index:: Python scripting + +CORE can be used via the :ref:`GUI ` or Python scripting. +Writing your own Python scripts offers a rich programming +environment with complete control over all aspects of the emulation. +This chapter provides a brief introduction to scripting. Most of the +documentation is available from sample scripts, +or online via interactive Python. + +.. index:: sample Python scripts + +The best starting point is the sample scripts that are +included with CORE. If you have a CORE source tree, the example script files +can be found under :file:`core/daemon/examples/netns/`. When CORE is installed +from packages, the example script files will be in +:file:`/usr/share/core/examples/netns/` (or the :file:`/usr/local/...` prefix +when installed from source.) For the most part, the example scripts +are self-documenting; see the comments contained within the Python code. + +The scripts should be run with root privileges because they create new +network namespaces. In general, a CORE Python script does not connect to the +CORE daemon, :file:`core-daemon`; in fact, :file:`core-daemon` +is just another Python script +that uses the CORE Python modules and exchanges messages with the GUI. +To connect the GUI to your scripts, see the included sample scripts that +allow for GUI connections. + +Here are the basic elements of a CORE Python script: +:: + + #!/usr/bin/python + + from core import pycore + + session = pycore.Session(persistent=True) + node1 = session.addobj(cls=pycore.nodes.CoreNode, name="n1") + node2 = session.addobj(cls=pycore.nodes.CoreNode, name="n2") + hub1 = session.addobj(cls=pycore.nodes.HubNode, name="hub1") + node1.newnetif(hub1, ["10.0.0.1/24"]) + node2.newnetif(hub1, ["10.0.0.2/24"]) + + node1.icmd(["ping", "-c", "5", "10.0.0.2"]) + session.shutdown() + + +The above script creates a CORE session having two nodes connected with a hub. +The first node pings the second node with 5 ping packets; the result is +displayed on screen. + +A good way to learn about the CORE Python modules is via interactive Python. +Scripts can be run using *python -i*. Cut and paste the simple script +above and you will have two nodes connected by a hub, with one node running +a test ping to the other. + +The CORE Python modules are documented with comments in the code. From an +interactive Python shell, you can retrieve online help about the various +classes and methods; for example *help(pycore.nodes.CoreNode)* or +*help(pycore.Session)*. + +An interactive development environment (IDE) is available for browsing +the CORE source, the +`Eric Python IDE `_. +CORE has a project file that can be opened by Eric, in the source under +:file:`core/daemon/CORE.e4p`. +This IDE +has a class browser for viewing a tree of classes and methods. It features +syntax highlighting, auto-completion, indenting, and more. One feature that +is helpful with learning the CORE Python modules is the ability to generate +class diagrams; right-click on a class, choose *Diagrams*, and +*Class Diagram*. + +.. index:: daemon versus script +.. index:: script versus daemon +.. index:: script with GUI support +.. index:: connecting GUI to script + +.. NOTE:: + The CORE daemon :file:`core-daemon` manages a list of sessions and allows + the GUI to connect and control sessions. Your Python script uses the + same CORE modules but runs independently of the daemon. The daemon + does not need to be running for your script to work. + +The session created by a Python script may be viewed in the GUI if certain +steps are followed. The GUI has a :ref:`File_Menu`, *Execute Python script...* +option for running a script and automatically connecting to it. Once connected, +normal GUI interaction is possible, such as moving and double-clicking nodes, +activating Widgets, etc. + +The script should have a line such as the following for running it from +the GUI. +:: + + if __name__ == "__main__" or __name__ == "__builtin__": + main() + +Also, the script should add its session to the session list after creating it. +A global ``server`` variable is exposed to the script pointing to the +``CoreServer`` object in the :file:`core-daemon`. +:: + + def add_to_server(session): + ''' Add this session to the server's list if this script is executed from + the core-daemon server. + ''' + global server + try: + server.addsession(session) + return True + except NameError: + return False + +:: + + session = pycore.Session(persistent=True) + add_to_server(session) + + +Finally, nodes and networks need to have their coordinates set to something, +otherwise they will be grouped at the coordinates ``<0, 0>``. First sketching +the topology in the GUI and then using the *Export Python script* option may +help here. +:: + + switch.setposition(x=80,y=50) + + +A fully-worked example script that you can launch from the GUI is available +in the file :file:`switch.py` in the examples directory. diff --git a/doc/usage.rst b/doc/usage.rst new file mode 100644 index 00000000..0f55a5d8 --- /dev/null +++ b/doc/usage.rst @@ -0,0 +1,1729 @@ +.. This file is part of the CORE Manual + (c)2012 the Boeing Company + +.. _Using_the_CORE_GUI: + +****************** +Using the CORE GUI +****************** + +.. index:: workflow + +.. index:: how to use CORE + +CORE can be used via the GUI or :ref:`Python_Scripting`. +A typical emulation workflow is outlined in :ref:`emulation-workflow`. +Often the GUI is used to draw nodes and network devices on the canvas. +A Python script could also be written, that imports the CORE Python module, to configure and instantiate nodes and networks. This chapter primarily covers usage of the CORE GUI. + +.. _emulation-workflow: + +.. figure:: figures/core-workflow.* + :alt: Emulation Workflow + :align: center + + Emulation Workflow + +CORE can be customized to perform any action at each phase depicted in :ref:`emulation-workflow`. See the *Hooks...* entry on the +:ref:`Session_Menu` +for details about when these session states are reached. + +.. _Modes_of_Operation: + +Modes of Operation +================== + +.. index:: Execute mode + +.. index:: Edit mode + +The CORE GUI has two primary modes of operation, **Edit** and **Execute** +modes. Running the GUI, by typing ``core-gui`` with no options, starts in Edit +mode. Nodes are drawn on a blank canvas using the toolbar on the left and +configured from right-click menus or by double-clicking them. The GUI does not +need to be run as root. + +Once editing is complete, pressing the green `Start` button (or choosing `Execute` from the `Session` menu) instantiates the topology within the FreeBSD kernel and enters Execute mode. In execute mode, the user can interact with the running emulated machines by double-clicking or right-clicking on them. The editing toolbar disappears and is replaced by an execute toolbar, which provides tools while running the emulation. Pressing the red `Stop` button (or choosing `Terminate` from the `Session` menu) will destroy the running emulation and return CORE to Edit mode. + +CORE can be started directly in Execute mode by specifying ``--start`` and a topology file on the command line: +:: + + core-gui --start ~/.core/configs/myfile.imn + + +Once the emulation is running, the GUI can be closed, and a prompt will appear asking if the emulation should be terminated. The emulation may be left running and the GUI can reconnect to an existing session at a later time. + +.. index:: Batch mode + +.. index:: batch + +There is also a **Batch** mode where CORE runs without the GUI and will instantiate a topology from a given file. This is similar to the ``--start`` option, except that the GUI is not used: +:: + + core-gui --batch ~/.core/configs/myfile.imn + +A session running in batch mode can be accessed using the ``vcmd`` command (or ``vimage`` on FreeBSD), or the GUI can connect to the session. + +.. index:: closebatch + +The session number is printed in the terminal when batch mode is started. This session number can later be used to stop the batch mode session: +:: + + core-gui --closebatch 12345 + + +.. NOTE:: + If you like to use batch mode, consider writing a + CORE :ref:`Python script ` directly. + This enables access to the full power of the Python API. + The :ref:`File_Menu` has a basic `Export Python Script` option for getting + started with a GUI-designed topology. + There is also an `Execute Python script` option for later connecting the + GUI to such scripts. + + + +.. index:: root privileges + +The GUI can be run as a normal user on Linux. For FreeBSD, the GUI should be run +as root in order to start an emulation. + +.. _Toolbar: + +Toolbar +======= + +The toolbar is a row of buttons that runs vertically along the left side of the CORE GUI window. The toolbar changes depending on the mode of operation. + +.. _Editing_Toolbar: + +Editing Toolbar +--------------- + +When CORE is in Edit mode (the default), the vertical Editing Toolbar exists on +the left side of the CORE window. Below are brief descriptions for each toolbar +item, starting from the top. Most of the tools are grouped into related +sub-menus, which appear when you click on their group icon. + +.. |select| image:: figures/select.* +.. |start| image:: figures/start.* +.. |link| image:: figures/link.* +.. |router| image:: figures/router.* +.. |host| image:: figures/host.* +.. |pc| image:: figures/pc.* +.. |mdr| image:: figures/mdr.* +.. |router_green| image:: figures/router_green.* +.. |document_properties| image:: figures/document-properties.* +.. |hub| image:: figures/hub.* +.. |lanswitch| image:: figures/lanswitch.* +.. |wlan| image:: figures/wlan.* +.. |rj45| image:: figures/rj45.* +.. |tunnel| image:: figures/tunnel.* +.. |marker| image:: figures/marker.* +.. |oval| image:: figures/oval.* +.. |rectangle| image:: figures/rectangle.* +.. |text| image:: figures/text.* + +.. index:: Selection Tool + +* |select| *Selection Tool* - default tool for selecting, moving, configuring + nodes + +.. index:: Start button + +* |start| *Start button* - starts Execute mode, instantiates the emulation + +.. index:: Link Tool + +* |link| *Link* - the Link Tool allows network links to be drawn between two + nodes by clicking and dragging the mouse + +.. index:: network-layer virtual nodes +.. index:: Router Tool +.. index:: Host Tool +.. index:: PC Tool +.. index:: MDR Tool +.. index:: PRouter Tool +.. index:: Edit Node Types + +* |router| *Network-layer virtual nodes* + + * |router| *Router* - runs Quagga OSPFv2 and OSPFv3 routing to forward packets + + * |host| *Host* - emulated server machine having a default route, runs SSH + server + + * |pc| *PC* - basic emulated machine having a default route, runs no + processes by default + + * |mdr| *MDR* - runs Quagga OSPFv3 MDR routing for MANET-optimized routing + + * |router_green| *PRouter* - physical router represents a real testbed + machine, :ref:`physical`. + + * |document_properties| *Edit* - edit node types button invokes the CORE Node + Types dialog. New types of nodes may be created having different icons and + names. The default services that are started with each node type can be + changed here. + +.. index:: link-layer virtual nodes +.. index:: Hub Tool +.. index:: Switch Tool +.. index:: Wireless Tool +.. index:: RJ45 Tool +.. index:: Tunnel Tool +.. index:: GRE tunnels + +* |hub| *Link-layer nodes* + + * |hub| *Hub* - the Ethernet hub forwards incoming packets to every + connected node + + * |lanswitch| *Switch* - the Ethernet switch intelligently forwards incoming + packets to attached hosts using an Ethernet address hash table + + * |wlan| *Wireless LAN* - when routers are connected to this WLAN node, they + join a wireless network and an antenna is drawn instead of a connecting + line; the WLAN node typically controls connectivity between attached + wireless nodes based on the distance between them + + * |rj45| *RJ45* - with the RJ45 Physical Interface Tool, emulated nodes can + be linked to real physical interfaces on the Linux or FreeBSD machine; + using this tool, real networks and devices can be physically connected to + the live-running emulation (:ref:`RJ45_Tool`) + + * |tunnel| *Tunnel* - the Tunnel Tool allows connecting together more than + one CORE emulation using GRE tunnels (:ref:`Tunnel_Tool`) + +.. index:: annotation tools +.. index:: Marker Tool +.. index:: background annotations +.. index:: Oval Tool +.. index:: Oval Tool +.. index:: Rectangle Tool +.. index:: Text Tool + +* *Annotation Tools* + + * |marker| *Marker* - for drawing marks on the canvas + + * |oval| *Oval* - for drawing circles on the canvas that appear in the + background + + * |rectangle| *Rectangle* - for drawing rectangles on the canvas that appear + in the background + + * |text| *Text* - for placing text captions on the canvas + +.. _Execution_Toolbar: + +Execution Toolbar +----------------- + +When the Start button is pressed, CORE switches to Execute mode, and the Edit +toolbar on the left of the CORE window is replaced with the Execution toolbar. +Below are the items on this toolbar, starting from the top. + +.. |stop| image:: figures/stop.* +.. |observe| image:: figures/observe.* +.. |plot| image:: figures/plot.* +.. |twonode| image:: figures/twonode.* +.. |run| image:: figures/run.* + +.. index:: Selection Tool + +* |select| *Selection Tool* - in Execute mode, the Selection Tool can be used + for moving nodes around the canvas, and double-clicking on a node will open a + shell window for that node; right-clicking on a node invokes a pop-up menu of + run-time options for that node + +.. index:: Stop button + +* |stop| *Stop button* - stops Execute mode, terminates the emulation, returns + CORE to edit mode. + +* |observe| *Observer Widgets Tool* - clicking on this magnifying glass icon + invokes a menu for easily selecting an Observer Widget. The icon has a darker + gray background when an Observer Widget is active, during which time moving + the mouse over a node will pop up an information display for that node + (:ref:`Observer_Widgets`). + +.. index:: Throughput tool + +* |plot| *Plot Tool* - with this tool enabled, clicking on any link will + activate the Throughput Widget and draw a small, scrolling throughput plot + on the canvas. The plot shows the real-time kbps traffic for that link. + The plots may be dragged around the canvas; right-click on a + plot to remove it. + +.. index:: Marker Tool + +* |marker| *Marker* - for drawing freehand lines on the canvas, useful during + demonstrations; markings are not saved + +.. index:: Two-node Tool +.. index:: traceroute +.. index:: ping +.. index:: route +.. index:: network path +.. index:: path + +* |twonode| *Two-node Tool* - click to choose a starting and ending node, and + run a one-time *traceroute* between those nodes or a continuous *ping -R* + between nodes. The output is displayed in real time in a results box, while + the IP addresses are parsed and the complete network path is highlighted on + the CORE display. + +.. index:: Run Tool +.. index:: run command + +* |run| *Run Tool* - this tool allows easily running a command on all or a + subset of all nodes. A list box allows selecting any of the nodes. A text + entry box allows entering any command. The command should return immediately, + otherwise the display will block awaiting response. The *ping* command, for + example, with no parameters, is not a good idea. The result of each command + is displayed in a results box. The first occurrence of the special text + "NODE" will be replaced with the node name. The command will not be attempted + to run on nodes that are not routers, PCs, or hosts, even if they are + selected. + + +.. _Menubar: + +Menubar +======= + +.. index:: menubar + +.. index:: menus + +.. index:: menu + +The menubar runs along the top of the CORE GUI window and provides access to a +variety of features. Some of the menus are detachable, such as the *Widgets* +menu, by clicking the dashed line at the top. + +.. _File_Menu: + +File Menu +--------- + +.. index:: file menu + +.. index:: detachable menus + +The File menu contains options for manipulating the :file:`.imn` +:ref:`Configuration_Files`. Generally, these menu items should not be used in +Execute mode (:ref:`Modes_of_Operation`.) + +.. index:: New + +* *New* - this starts a new file with an empty canvas. + +.. index:: Open + +* *Open* - invokes the File Open dialog box for selecting a new :file:`.imn` + topology file to open. You can change the default path used for this dialog + in the :ref:`Preferences` Dialog. + +.. index:: Save + +* *Save* - saves the current topology. If you have not yet specified a file + name, the Save As dialog box is invoked. + +.. index:: Save As XML + +* *Save As XML* - invokes the Save As dialog box for selecting a new + :file:`.xml` scenario file for saving the current configuration. + This format includes a Network Plan, Motion Plan, Services Plan, and more + within a `Scenario` XML tag, described in :ref:`Configuration_Files`. + +.. index:: Save As imn + +* *Save As imn* - invokes the Save As dialog box for selecting a new + :file:`.imn` + topology file for saving the current configuration. Files are saved in the + *IMUNES network configuration* file format described in + :ref:`Configuration_Files`. + +.. index:: Export Python script + +* *Export Python script* - prints Python snippets to the console, for inclusion + in a CORE Python script. + +.. index:: Execute Python script + +* *Execute Python script* - invokes a File Open dialog fox for selecting a + Python script to run and automatically connect to. The script must create + a new CORE Session and add this session to the daemon's list of sessions + in order for this to work; see :ref:`Python_Scripting`. + +.. index:: Open current file in editor + +* *Open current file in editor* - this opens the current topology file in the + ``vim`` text editor. First you need to save the file. Once the file has been + edited with a text editor, you will need to reload the file to see your + changes. The text editor can be changed from the :ref:`Preferences` Dialog. + +.. index:: Print +.. index:: printing + +* *Print* - this uses the Tcl/Tk postscript command to print the current canvas + to a printer. A dialog is invoked where you can specify a printing command, + the default being ``lpr``. The postscript output is piped to the print + command. + +.. index:: Save screenshot + +* *Save screenshot* - saves the current canvas as a postscript graphic file. + +.. index:: Recently used files + +* Recently used files - above the Quit menu command is a list of recently use + files, if any have been opened. You can clear this list in the + :ref:`Preferences` dialog box. You can specify the number of files to keep in + this list from the :ref:`Preferences` dialog. Click on one of the file names + listed to open that configuration file. + +.. index:: Quit + +* *Quit* - the Quit command should be used to exit the CORE GUI. CORE may + prompt for termination if you are currently in Execute mode. Preferences and + the recently-used files list are saved. + +.. _Edit_Menu: + +Edit Menu +--------- + +.. index:: undo + +* *Undo* - attempts to undo the last edit in edit mode. + +.. index:: redo + +* *Redo* - attempts to redo an edit that has been undone. + +.. index:: cut +.. index:: copy +.. index:: paste + +* *Cut*, *Copy*, *Paste* - used to cut, copy, and paste a selection. When nodes + are pasted, their node numbers are automatically incremented, and existing + links are preserved with new IP addresses assigned. Services and their + customizations are copied to the new node, but care should be taken as + node IP addresses have changed with possibly old addresses remaining in any + custom service configurations. Annotations may also be copied and pasted. + +.. index:: select all + +* *Select All* - selects all items on the canvas. Selected items can be moved + as a group. + +.. index:: select adjacent + +* *Select Adjacent* - select all nodes that are linked to the already selected + node(s). For wireless nodes this simply selects the WLAN node(s) that the + wireless node belongs to. You can use this by clicking on a node and pressing + CTRL+N to select the adjacent nodes. + +.. index:: find + +* *Find...* - invokes the *Find* dialog box. The Find dialog can be used to + search for nodes by name or number. Results are listed in a table that + includes the node or link location and details such as IP addresses or + link parameters. Clicking on a result will focus the canvas on that node + or link, switching canvases if necessary. + +.. index:: clear marker +.. index:: marker, erasing + +* *Clear marker* - clears any annotations drawn with the marker tool. Also + clears any markings used to indicate a node's status. + +* *Preferences...* - invokes the :ref:`Preferences` dialog box. + +.. _Canvas_Menu: + +Canvas Menu +----------- + +.. index:: canvas + +The canvas menu provides commands for adding, removing, changing, and switching to different editing canvases, :ref:`Multiple_Canvases`. + +.. index:: canvas, new + +* *New* - creates a new empty canvas at the right of all existing canvases. + +.. index:: manage canvases + +* *Manage...* - invokes the *Manage Canvases* dialog box, where canvases may be + renamed and reordered, and you can easily switch to one of the canvases by + selecting it. + +.. index:: canvas, deleting + +* *Delete* - deletes the current canvas and all items that it contains. + +.. index:: canvas, resizing +.. index:: resizing canvas +.. index:: canvas size and scale +.. index:: coordinate systems +.. index:: latitude and longitude + +* *Size/scale...* - invokes a Canvas Size and Scale dialog that allows + configuring the canvas size, scale, and geographic reference point. The size + controls allow changing the width and height of the current canvas, in pixels + or meters. The scale allows specifying how many meters are equivalent to 100 + pixels. The reference point controls specify the latitude, longitude, and + altitude reference point used to convert between geographic and Cartesian + coordinate systems. By clicking the *Save as default* option, all new + canvases will be created with these properties. The default canvas size can + also be changed in the :ref:`Preferences` dialog box. + +* *Wallpaper...* - used for setting the canvas background image, + :ref:`Customizing_your_Topology's_Look`. + +.. index:: canvas, switching + +* *Previous*, *Next*, *First*, *Last* - used for switching the active canvas to + the first, last, or adjacent canvas. + +.. _View_Menu: + +View Menu +--------- + +.. index:: view menu + +The View menu features items for controlling what is displayed on the drawing +canvas. + +.. index:: show menu +.. index:: hide items +.. index:: show items +.. index:: decluttering the display + +* *Show* - opens a submenu of items that can be displayed or hidden, such as + interface names, addresses, and labels. Use these options to help declutter + the display. These options are generally saved in the topology + files, so scenarios have a more consistent look when copied from one computer + to another. + +.. index:: show hidden nodes +.. index:: hide nodes + +* *Show hidden nodes* - reveal nodes that have been hidden. Nodes are hidden by + selecting one or more nodes, right-clicking one and choosing *hide*. + +.. index:: locked view + +* *Locked* - toggles locked view; when the view is locked, nodes cannot be + moved around on the canvas with the mouse. This could be useful when + sharing the topology with someone and you do not expect them to change + things. + +.. index:: 3D GUI +.. index:: SDT3D + +* *3D GUI...* - launches a 3D GUI by running the command defined under + :ref:`Preferences`, *3D GUI command*. This is typically a script that runs + the SDT3D display. SDT is the Scripted Display Tool from NRL that is based on + NASA's Java-based WorldWind virtual globe software. + +.. index:: zoom in + +* *Zoom In* - magnifies the display. You can also zoom in by clicking *zoom + 100%* label in the status bar, or by pressing the **+** (plus) key. + +* *Zoom Out* - reduces the size of the display. You can also zoom out by + right-clicking *zoom 100%* label in the status bar or by pressing the **-** + (minus) key. + +.. _Tools_Menu: + +Tools Menu +---------- + +.. index:: tools menu + +The tools menu lists different utility functions. + +.. index:: autorearrange all +.. index:: autorearrange mode + +* *Autorearrange all* - automatically arranges all nodes on the canvas. Nodes + having a greater number of links are moved to the center. This mode can + continue to run while placing nodes. To turn off this autorearrange mode, + click on a blank area of the canvas with the select tool, or choose this menu + option again. + +.. index:: autorearrange selected + +* *Autorearrange selected* - automatically arranges the selected nodes on the + canvas. + +.. index:: align to grid + +* *Align to grid* - moves nodes into a grid formation, starting with the + smallest-numbered node in the upper-left corner of the canvas, arranging + nodes in vertical columns. + +.. index:: Traffic Flows +.. index:: traffic + +* *Traffic...* - invokes the CORE Traffic Flows dialog box, which allows + configuring, starting, and stopping MGEN traffic flows for the emulation. + +.. index:: IP Addresses dialog + +* *IP addresses...* - invokes the IP Addresses dialog box for configuring which + IPv4/IPv6 prefixes are used when automatically addressing new interfaces. + +.. index:: MAC Addresses dialog + +* *MAC addresses...* - invokes the MAC Addresses dialog box for configuring the + starting number used as the lowest byte when generating each interface MAC + address. This value should be changed when tunneling between CORE emulations + to prevent MAC address conflicts. + +.. index:: hosts file +.. index:: Build hosts File dialog + +* *Build hosts file...* - invokes the Build hosts File dialog box for + generating :file:`/etc/hosts` file entries based on IP addresses used in the + emulation. + +.. index:: renumber nodes + +* *Renumber nodes...* - invokes the Renumber Nodes dialog box, which allows + swapping one node number with another in a few clicks. + +.. index:: ns2imunes converter +.. index:: topology partitioning + +* *Experimental...* - menu of experimental options, such as a tool to convert + ns-2 scripts to IMUNES imn topologies, supporting only basic ns-2 + functionality, and a tool for automatically dividing up a topology into + partitions. + +.. index:: topology generator +.. index:: topogen +.. index:: random +.. index:: grid topology +.. index:: connected grid topology +.. index:: chain +.. index:: star +.. index:: cycle +.. index:: wheel +.. index:: cube +.. index:: clique +.. index:: bipartite + +* *Topology generator* - opens a submenu of topologies to generate. You can + first select the type of node that the topology should consist of, or routers + will be chosen by default. Nodes may be randomly placed, aligned in grids, or + various other topology patterns. + + * *Random* - nodes are randomly placed about the canvas, but are not linked + together. This can be used in conjunction with a WLAN node + (:ref:`Editing_Toolbar`) to quickly create a wireless + network. + * *Grid* - nodes are placed in horizontal rows starting in the upper-left + corner, evenly spaced to the right; nodes are not linked to each other. + * *Connected Grid* - nodes are placed in an N x M (width and height) + rectangular grid, and each node is linked to the node above, below, left + and right of itself. + * *Chain* - nodes are linked together one after the other in a chain. + * *Star* - one node is placed in the center with N nodes surrounding it in a + circular pattern, with each node linked to the center node + * *Cycle* - nodes are arranged in a circular pattern with every node + connected to its neighbor to form a closed circular path. + * *Wheel* - the wheel pattern links nodes in a combination of both Star and + Cycle patterns. + * *Cube* - generate a cube graph of nodes + * *Clique* - creates a clique graph of nodes, where every node is connected + to every other node + * *Bipartite* - creates a bipartite graph of nodes, having two disjoint sets + of vertices. + +* *Debugger...* - opens the CORE Debugger window for executing arbitrary Tcl/Tk + commands. + +.. _Widgets_Menu: + +Widgets Menu +------------ + +.. index:: widget + +.. index:: widgets + +*Widgets* are GUI elements that allow interaction with a running emulation. +Widgets typically automate the running of commands on emulated nodes to report +status information of some type and display this on screen. + +.. _Periodic_Widgets: + +Periodic Widgets +^^^^^^^^^^^^^^^^ + +These Widgets are those available from the main *Widgets* menu. More than one +of these Widgets may be run concurrently. An event loop fires once every second +that the emulation is running. If one of these Widgets is enabled, its periodic +routine will be invoked at this time. Each Widget may have a configuration +dialog box which is also accessible from the *Widgets* menu. + +Here are some standard widgets: + +.. index:: Adjacency Widget + +.. index:: router adjacency + +.. index:: OSPF neighbors + +* *Adjacency* - displays router adjacency states for Quagga's OSPFv2 and OSPFv3 + routing protocols. A line is drawn from each router halfway to the router ID + of an adjacent router. The color of the line is based on the OSPF adjacency + state such as Two-way or Full. To learn about the different colors, see the + *Configure Adjacency...* menu item. The :file:`vtysh` command is used to + dump OSPF neighbor information. + Only half of the line is drawn because each + router may be in a different adjacency state with respect to the other. + +.. index:: Throughput Widget + +.. index:: throughput + +* *Throughput* - displays the kilobits-per-second throughput above each link, + using statistics gathered from the ng_pipe Netgraph node that implements each + link. If the throughput exceeds a certain threshold, the link will become + highlighted. For wireless nodes which broadcast data to all nodes in range, + the throughput rate is displayed next to the node and the node will become + circled if the threshold is exceeded. *Note: under FreeBSD, the + Throughput Widget will + display "0.0 kbps" on all links that have no configured link effects, because + of the way link statistics are counted; to fix this, add a small delay or a + bandwidth limit to each link.* + +.. _Observer_Widgets: + +Observer Widgets +^^^^^^^^^^^^^^^^ + +These Widgets are available from the *Observer Widgets* submenu of the +*Widgets* menu, and from the Widgets Tool on the toolbar +(:ref:`Execution_Toolbar`). Only one Observer Widget may +be used at a time. Mouse over a node while the session is running to pop up +an informational display about that node. + +Available Observer Widgets include IPv4 and IPv6 routing tables, socket +information, list of running processes, and OSPFv2/v3 neighbor information. + +.. index:: editing Observer Widgets + +Observer Widgets may be edited by the user and rearranged. Choosing *Edit...* +from the Observer Widget menu will invoke the Observer Widgets dialog. A list +of Observer Widgets is displayed along with up and down arrows for rearranging +the list. Controls are available for renaming each widget, for changing the +command that is run during mouse over, and for adding and deleting items from +the list. Note that specified commands should return immediately to avoid +delays in the GUI display. Changes are saved to a :file:`widgets.conf` file in +the CORE configuration directory. + +.. _Session_Menu: + +Session Menu +--------------- + +The Session Menu has entries for starting, stopping, and managing sessions, +in addition to global options such as node types, comments, hooks, servers, +and options. + +.. index:: start + +.. index:: stop + +* *Start* or *Stop* - this starts or stops the emulation, performing the same + function as the green Start or red Stop button. + +.. index:: Change sessions + +.. index:: CORE Sessions Dialog + +* *Change sessions...* - invokes the CORE Sessions dialog box containing a list + of active CORE sessions in the daemon. Basic session information such as + name, node count, start time, and a thumbnail are displayed. This dialog + allows connecting to different sessions, shutting them down, or starting + a new session. + +.. index:: Edit Node Types + +* *Node types...* - invokes the CORE Node Types dialog, performing the same + function as the Edit button on the Network-Layer Nodes toolbar. + +.. index:: comments + +.. index:: CORE Session Comments window + +* *Comments...* - invokes the CORE Session Comments window where optional + text comments may be specified. These comments are saved at the top of the + configuration file, and can be useful for describing the topology or how + to use the network. + +.. index:: script +.. index:: hooks +.. index:: hook scripts +.. index:: CORE Session Hooks window +.. index:: session state +.. index:: states +.. index:: hook states + +* *Hooks...* - invokes the CORE Session Hooks window where scripts may be + configured for a particular session state. The top of the window has a list + of configured hooks, and buttons on the bottom left allow adding, editing, + and removing hook scripts. The new or edit button will open a hook script + editing window. A hook script is a shell script invoked on the host (not + within a virtual node). + + The script is started at the session state specified in the drop down: + + * *definition* - used by the GUI to tell the backend to clear any state. + + * *configuration* - when the user presses the *Start* button, node, link, and + other configuration data is sent to the backend. This state is also + reached when the user customizes a service. + + * *instantiation* - after + configuration data has been sent, just before the nodes are created. + + * *runtime* - all nodes and networks have been + built and are running. (This is the same state at which + the previously-named *global experiment script* was run.) + + * *datacollect* - the user has pressed the + *Stop* button, but before services have been stopped and nodes have been + shut down. This is a good time to collect log files and other data from the + nodes. + + * *shutdown* - all nodes and networks have been shut down and destroyed. + +* *Reset node positions* - if you have moved nodes around + using the mouse or by using a mobility module, choosing this item will reset + all nodes to their original position on the canvas. The node locations are + remembered when you first press the Start button. + +* *Emulation servers...* - invokes the CORE emulation + servers dialog for configuring :ref:`Distributed_Emulation`. + +* *Change Sessions...* - invokes the Sessions dialog for switching between + different + running sessions. This dialog is presented during startup when one or + more sessions are already running. + +* *Options...* - presents per-session options, such as the IPv4 prefix to be + used, if any, for a control network + (see :ref:`Communicating_with_the_Host_Machine`); the ability to preserve + the session directory; and an on/off switch for SDT3D support. + +.. _Help_Menu: + +Help Menu +--------- + + +* *Online manual (www)*, *CORE website (www)*, *Mailing list (www)* - these + options attempt to open a web browser with the link to the specified web + resource. + +* *About* - invokes the About dialog box for viewing version information + +.. _Connecting_with_Physical_Networks: + +Connecting with Physical Networks +================================= + +CORE's emulated networks run in real time, so they can be connected to live +physical networks. The RJ45 tool and the Tunnel tool help with connecting to +the real world. These tools are available from the *Link-layer nodes* menu. + +When connecting two or more CORE emulations together, MAC address collisions +should be avoided. CORE automatically assigns MAC addresses to interfaces when +the emulation is started, starting with ``00:00:00:aa:00:00`` and incrementing +the bottom byte. The starting byte should be changed on the second CORE machine +using the *MAC addresses...* option from the *Tools* menu. + +.. _RJ45_Tool: + +RJ45 Tool +--------- + +.. index:: RJ45 Tool + +The RJ45 node in CORE represents a physical interface on the real CORE machine. +Any real-world network device can be connected to the interface and communicate +with the CORE nodes in real time. + +The main drawback is that one physical interface is required for each +connection. When the physical interface is assigned to CORE, it may not be used +for anything else. Another consideration is that the computer or network that +you are connecting to must be co-located with the CORE machine. + +To place an RJ45 connection, click on the *Link-layer nodes* toolbar and select +the *RJ45 Tool* from the submenu. Click on the canvas near the node you want to +connect to. This could be a router, hub, switch, or WLAN, for example. Now +click on the *Link Tool* and draw a link between the RJ45 and the other node. +The RJ45 node will display "UNASSIGNED". Double-click the RJ45 node to assign a +physical interface. A list of available interfaces will be shown, and one may +be selected by double-clicking its name in the list, or an interface name may +be entered into the text box. + +.. NOTE:: + When you press the Start button to instantiate your topology, the + interface assigned to the RJ45 will be connected to the CORE topology. The + interface can no longer be used by the system. For example, if there was an + IP address assigned to the physical interface before execution, the address + will be removed and control given over to CORE. No IP address is needed; the + interface is put into promiscuous mode so it will receive all packets and + send them into the emulated world. + +.. index:: VLAN + +.. index:: VLANning + +.. index:: VLAN devices + +Multiple RJ45 nodes can be used within CORE and assigned to the same physical +interface if 802.1x VLANs are used. This allows for more RJ45 nodes than +physical ports are available, but the (e.g. switching) hardware connected to +the physical port must support the VLAN tagging, and the available bandwidth +will be shared. + +You need to create separate VLAN virtual devices on the Linux or FreeBSD host, +and then assign these devices to RJ45 nodes inside of CORE. The VLANning is +actually performed outside of CORE, so when the CORE emulated node receives a +packet, the VLAN tag will already be removed. + +Here are example commands for creating VLAN devices under Linux: + :: + + ip link add link eth0 name eth0.1 type vlan id 1 + ip link add link eth0 name eth0.2 type vlan id 2 + ip link add link eth0 name eth0.3 type vlan id 3 + + + +.. _Tunnel_Tool: + +Tunnel Tool +----------- + +.. index:: Tunnel Tool + +.. index:: GRE tunnels + +The tunnel tool builds GRE tunnels between CORE emulations or other hosts. +Tunneling can be helpful when the number of physical interfaces is limited or +when the peer is located on a different network. Also a physical interface does +not need to be dedicated to CORE as with the RJ45 tool. + +The peer GRE tunnel endpoint may be another CORE machine or a (Linux, FreeBSD, +etc.) host that supports GRE tunneling. When placing a Tunnel node, initially +the node will display "UNASSIGNED". This text should be replaced with the IP +address of the tunnel peer. This is the IP address of the other CORE machine or +physical machine, not an IP address of another virtual node. + +.. NOTE:: + Be aware of possible MTU issues with GRE devices. The *gretap* device + has an interface MTU of 1,458 bytes; when joined to a Linux bridge, the + bridge's MTU + becomes 1,458 bytes. The Linux bridge will not perform fragmentation for + large packets if other bridge ports have a higher MTU such as 1,500 bytes. + +The GRE key is used to identify flows with GRE tunneling. This allows multiple +GRE tunnels to exist between that same pair of tunnel peers. A unique number +should be used when multiple tunnels are used with the same peer. When +configuring the peer side of the tunnel, ensure that the matching keys are +used. + +.. index:: gretap +.. index:: ip link command + +Here are example commands for building the other end of a tunnel on a Linux +machine. In this example, a router in CORE has the virtual address +``10.0.0.1/24`` and the CORE host machine has the (real) address +``198.51.100.34/24``. The Linux box +that will connect with the CORE machine is reachable over the (real) network +at ``198.51.100.76/24``. +The emulated router is linked with the Tunnel Node. In the +Tunnel Node configuration dialog, the address ``198.51.100.76`` is entered, with +the key set to ``1``. The gretap interface on the Linux box will be assigned +an address from the subnet of the virtual router node, +``10.0.0.2/24``. + + :: + + # these commands are run on the tunnel peer + sudo ip link add gt0 type gretap remote 198.51.100.34 local 198.51.100.76 key 1 + sudo ip addr add 10.0.0.2/24 dev gt0 + sudo ip link set dev gt0 up + + +Now the virtual router should be able to ping the Linux machine: + + :: + + # from the CORE router node + ping 10.0.0.2 + + +And the Linux machine should be able to ping inside the CORE emulation: + + :: + + # from the tunnel peer + ping 10.0.0.1 + + +To debug this configuration, ``tcpdump`` can be run on the gretap devices, or +on the physical interfaces on the CORE or Linux machines. Make sure that a +firewall is not blocking the GRE traffic. + + +.. _Communicating_with_the_Host_Machine: + +Communicating with the Host Machine +----------------------------------- + +.. index:: controlnet +.. index:: control network +.. index:: X11 applications +.. index:: node access to the host +.. index:: host access to a node + +The host machine that runs the CORE GUI and/or daemon is not necessarily +accessible from a node. Running an X11 application on a node, for example, +requires some channel of communication for the application to connect with +the X server for graphical display. There are several different ways to +connect from the node to the host and vice versa. + +Under the :ref:`Session_Menu`, the *Options...* dialog has an option to set +a control network prefix. A default value for the control network may also +be specified by setting the ``controlnet =`` line in the +:file:`/etc/core/core.conf` configuration file which new +sessions will use by default. This can be set to a network prefix such as +``172.16.0.0/24``. A bridge will be created on the host machine having the last +address in the prefix range (e.g. ``172.16.0.254``), and each node will have +an extra ``ctrl0`` control interface configured with an address corresponding +to its node number (e.g. ``172.16.0.3`` for ``n3``.) + +.. NOTE:: + If you have a large scenario with more than 253 nodes, use a control + network prefix that allows more than the suggested ``/24``, such as ``/23`` + or greater. + + +.. index:: X11 forwarding +.. index:: SSH X11 forwarding + +To run an X11 application on the node, the ``SSH`` service can be enabled on +the node, and SSH with X11 forwarding can be used from the host to the node: + +:: + + # SSH from host to node n5 to run an X11 app + ssh -X 172.16.0.5 xclock + +.. index:: dummy interface +.. index:: dummy0 + +There are still other ways to connect a host with a node. The :ref:`RJ45_Tool` +can be used in conjunction with a dummy interface to access a node: + +:: + + sudo modprobe dummy numdummies=1 + +A ``dummy0`` interface should appear on the host. Use the RJ45 tool assigned +to ``dummy0``, and link this to a node in your scenario. After starting the +session, configure an address on the host. + +:: + + sudo brctl show + # determine bridge name from the above command + # assign an IP address on the same network as the linked node + sudo ifconfig b.48304.34658 10.0.1.2/24 + +In the example shown above, the host will have the address ``10.0.1.2`` and +the node linked to the RJ45 may have the address ``10.0.1.1``. + +Note that the :file:`coresendmsg` utility can be used for the node to send +messages to the CORE daemon running on the host (if the ``listenaddr = 0.0.0.0`` is set in the :file:`/etc/core/core.conf` file) to interact with the running +emulation. For example, a node may move itself or other nodes, or change +its icon based on some node state. + + +.. _Building_Sample_Networks: + +Building Sample Networks +======================== + + +.. _Wired_Networks: + +Wired Networks +-------------- + +.. index:: links + +.. index:: wired links + +.. index:: Ethernet + +Wired networks are created using the *Link Tool* to draw a link between two +nodes. This automatically draws a red line representing an Ethernet link and +creates new interfaces on network-layer nodes. + +.. index:: link configuration + +Double-click on the link to invoke the *link configuration* dialog box. Here +you can change the Bandwidth, Delay, PER (Packet Error Rate), and Duplicate +rate parameters for that link. You can also modify the color and width of the +link, affecting its display. + +.. index:: hub + +.. index:: switch + +.. index:: lanswitch + +Link-layer nodes are provided for modeling wired networks. These do not create +a separate network stack when instantiated, but are implemented using bridging +(Linux) or Netgraph nodes (FreeBSD). These are the hub, switch, and wireless +LAN nodes. The hub copies each packet from the incoming link to every connected +link, while the switch behaves more like an Ethernet switch and keeps track of +the Ethernet address of the connected peer, forwarding unicast traffic only to +the appropriate ports. + +The wireless LAN (WLAN) is covered in the next section. + +.. _Wireless_Networks: + +Wireless Networks +----------------- + +.. index:: WLAN + +.. index:: wireless + +.. index:: wireless LAN + +The wireless LAN node allows you to build wireless networks where moving nodes +around affects the connectivity between them. The wireless LAN, or WLAN, node +appears as a small cloud. The WLAN offers several levels of wireless emulation +fidelity, depending on your modeling needs. + +The WLAN tool can be extended with plug-ins for different levels of wireless +fidelity. The basic on/off range is the default setting available on all +platforms. Other plug-ins offer higher fidelity at the expense of greater +complexity and CPU usage. The availability of certain plug-ins varies depending +on platform. See the table below for a brief overview of wireless model types. + +============= ===================== ======== ================================================================== +Model Type Supported Platform(s) Fidelity Description +============= ===================== ======== ================================================================== +Basic on/off Linux, FreeBSD Low Linux Ethernet bridging with ebtables (Linux) or ng_wlan (FreeBSD) +EMANE Plug-in Linux High TAP device connected to EMANE emulator with pluggable MAC and PHY radio types +============= ===================== ======== ================================================================== + + +To quickly build a wireless network, you can first place several router nodes +onto the canvas. If you have the +:ref:`Quagga MDR software ` installed, it is +recommended that you use the *mdr* node type for reduced routing overhead. Next +choose the *wireless LAN* from the *Link-layer nodes* submenu. First set the +desired WLAN parameters by double-clicking the cloud icon. Then you can link +all of the routers by right-clicking on the WLAN and choosing *Link to all +routers*. + +Linking a router to the WLAN causes a small antenna to appear, but no red link +line is drawn. Routers can have multiple wireless links and both wireless and +wired links (however, you will need to manually configure route +redistribution.) The mdr node type will generate a routing configuration that +enables OSPFv3 with MANET extensions. This is a Boeing-developed extension to +Quagga's OSPFv3 that reduces flooding overhead and optimizes the flooding +procedure for mobile ad-hoc (MANET) networks. + +.. index:: basic on/off range + +The default configuration of the WLAN is set to use the basic range model, +using the *Basic* tab in the WLAN configuration dialog. Having this model +selected causes :file:`core-daemon` to calculate the distance between +nodes based +on screen pixels. A numeric range in screen pixels is set for the wireless +network using the *Range* slider. When two wireless nodes are within range of +each other, a green line is drawn between them and they are linked. Two +wireless nodes that are farther than the range pixels apart are not linked. +During Execute mode, users may move wireless nodes around by clicking and +dragging them, and wireless links will be dynamically made or broken. + +.. index:: EMANE tab + +The *EMANE* tab lists available EMANE models to use for wireless networking. +See the :ref:`EMANE` chapter for details on using EMANE. + +On FreeBSD, the WLAN node is realized using the *ng_wlan* Netgraph node. + +.. _Mobility_Scripting: + +Mobility Scripting +------------------ + +.. index:: scripting + +.. index:: script + +.. index:: mobility script + +.. index:: mobility scripting + +CORE has a few ways to script mobility. + +* ns-2 script - the script specifies either absolute positions + or waypoints with a velocity. Locations are given with Cartesian coordinates. +* CORE API - an external entity can move nodes by sending CORE API Node + messages with updated X,Y coordinates; the :file:`coresendmsg` utility + allows a shell script to generate these messages. +* EMANE events - see :ref:`EMANE` for details on using EMANE scripts to move + nodes around. Location information is typically given as latitude, longitude, + and altitude. + +For the first method, you can create a mobility script using a text +editor, or using a tool such as `BonnMotion `_, and associate the script with one of the wireless +using the WLAN configuration dialog box. Click the *ns-2 mobility script...* +button, and set the *mobility script file* field in the resulting *ns2script* +configuration dialog. + +Here is an example for creating a BonnMotion script for 10 nodes: + +:: + + bm -f sample RandomWaypoint -n 10 -d 60 -x 1000 -y 750 + bm NSFile -f sample + # use the resulting 'sample.ns_movements' file in CORE + + +When the Execute mode is started and one of the WLAN nodes has a mobility +script, a mobility script window will appear. This window contains controls for +starting, stopping, and resetting the running time for the mobility script. The +*loop* checkbox causes the script to play continuously. The *resolution* text +box contains the number of milliseconds between each timer event; lower values +cause the mobility to appear smoother but consumes greater CPU time. + +The format of an ns-2 mobility script looks like: +:: + + # nodes: 3, max time: 35.000000, max x: 600.00, max y: 600.00 + $node_(2) set X_ 144.0 + $node_(2) set Y_ 240.0 + $node_(2) set Z_ 0.00 + $ns_ at 1.00 "$node_(2) setdest 130.0 280.0 15.0" + + +The first three lines set an initial position for node 2. The last line in the +above example causes node 2 to move towards the destination `(130, 280)` at +speed `15`. All units are screen coordinates, with speed in units per second. +The +total script time is learned after all nodes have reached their waypoints. +Initially, the time slider in the mobility script dialog will not be +accurate. + +Examples mobility scripts (and their associated topology files) can be found in the :file:`configs/` directory (see :ref:`Configuration_Files`). + +.. _Multiple_Canvases: + +Multiple Canvases +----------------- + +.. index:: canvas + +CORE supports multiple canvases for organizing emulated nodes. Nodes running on +different canvases may be linked together. + +To create a new canvas, choose *New* from the *Canvas* menu. A new canvas tab +appears in the bottom left corner. Clicking on a canvas tab switches to that +canvas. Double-click on one of the tabs to invoke the *Manage Canvases* dialog +box. Here, canvases may be renamed and reordered, and you can easily switch to +one of the canvases by selecting it. + +Each canvas maintains its own set of nodes and annotations. To link between +canvases, select a node and right-click on it, choose *Create link to*, choose +the target canvas from the list, and from that submenu the desired node. A +pseudo-link will be drawn, representing the link between the two nodes on +different canvases. Double-clicking on the label at the end of the arrow will +jump to the canvas that it links. + +.. _Distributed_Emulation: + +Distributed Emulation +--------------------- + +.. index:: distributed emulation + +.. index:: headless mode + +.. index:: server + +.. index:: emulation server + +A large emulation scenario can be deployed on multiple emulation servers and +controlled by a single GUI. The GUI, representing the entire topology, can be +run on one of the emulation servers or on a separate machine. Emulations can be +distributed on Linux, while tunneling support has not been added yet for +FreeBSD. + +Each machine that will act as an emulation server needs to have CORE installed. +It is not important to have the GUI component but the CORE Python daemon +:file:`core-daemon` needs to be installed. Set the ``listenaddr`` line in the +:file:`/etc/core/core.conf` configuration file so that the CORE Python +daemon will respond to commands from other servers: +:: + + ### core-daemon configuration options ### + [core-daemon] + pidfile = /var/run/core-daemon.pid + logfile = /var/log/core-daemon.log + listenaddr = 0.0.0.0 + + +The ``listenaddr`` should be set to the address of the interface that should +receive CORE API control commands from the other servers; setting ``listenaddr += 0.0.0.0`` causes the Python daemon to listen on all interfaces. CORE uses TCP +port 4038 by default to communicate from the controlling machine (with GUI) to +the emulation servers. Make sure that firewall rules are configured as +necessary to allow this traffic. + +In order to easily open shells on the emulation servers, the servers should be +running an SSH server, and public key login should be enabled. This is +accomplished by generating an SSH key for your user if you do not already have +one (use ``ssh-keygen -t rsa``), and then copying your public key to the +authorized_keys file on the server (for example, ``ssh-copy-id user@server`` or +``scp ~/.ssh/id_rsa.pub server:.ssh/authorized_keys``.) When double-clicking on +a node during runtime, instead of opening a local shell, the GUI will attempt +to SSH to the emulation server to run an interactive shell. The user name used +for these remote shells is the same user that is running the CORE GUI. + +.. HINT:: + Here is a quick distributed emulation checklist. + + 1. Install the CORE daemon on all servers. + 2. Configure public-key SSH access to all servers (if you want to use + double-click shells or Widgets.) + 3. Set ``listenaddr=0.0.0.0`` in all of the server's core.conf files, + then start (or restart) the daemon. + 4. Select nodes, right-click them, and choose *Assign to* to assign + the servers (add servers through *Session*, *Emulation Servers...*) + 5. Press the *Start* button to launch the distributed emulation. + + +Servers are configured by choosing *Emulation servers...* from the *Session* +menu. Servers parameters are configured in the list below and stored in a +*servers.conf* file for use in different scenarios. The IP address and port of +the server must be specified. The name of each server will be saved in the +topology file as each node's location. + +The user needs to assign nodes to emulation servers in the scenario. Making no +assignment means the node will be emulated locally, on the same machine that +the GUI is running. In the configuration window of every node, a drop-down box +located between the *Node name* and the *Image* button will select the name of +the emulation server. By default, this menu shows *(none)*, indicating that the +node will be emulated locally. When entering Execute mode, the CORE GUI will +deploy the node on its assigned emulation server. + +Another way to assign emulation servers is to select one or more nodes using +the select tool (shift-click to select multiple), and right-click one of the +nodes and choose *Assign to...*. + +The *CORE emulation servers* dialog box may also be used to assign nodes to +servers. The assigned server name appears in parenthesis next to the node name. +To assign all nodes to one of the servers, click on the server name and then +the *all nodes* button. Servers that have assigned nodes are shown in blue in +the server list. Another option is to first select a subset of nodes, then open +the *CORE emulation servers* box and use the *selected nodes* button. + +The emulation server machines should be reachable on the specified port and via +SSH. SSH is used when double-clicking a node to open a shell, the GUI will open +an SSH prompt to that node's emulation server. Public-key authentication should +be configured so that SSH passwords are not needed. + +If there is a link between two nodes residing on different servers, the GUI +will draw the link with a dashed line, and automatically create necessary +tunnels between the nodes when executed. Care should be taken to arrange the +topology such that the number of tunnels is minimized. The tunnels carry data +between servers to connect nodes as specified in the topology. +These tunnels are created using GRE tunneling, similar to the +:ref:`Tunnel_Tool`. + +.. index:: distributed wireless + +Wireless nodes, i.e. those connected to a WLAN node, can be assigned to +different emulation servers and participate in the same wireless network +only if an +EMANE model is used for the WLAN. See :ref:`Distributed_EMANE` for more +details. The basic range model does not work across multiple servers due +to the Linux bridging and ebtables rules that are used. + +.. NOTE:: + The basic range wireless model does not support distributed emulation, + but EMANE does. + + + +.. index:: node services +.. index:: services +.. _Services: + +Services +======== + +CORE uses the concept of services to specify what processes or scripts run on a +node when it is started. Layer-3 nodes such as routers and PCs are defined by +the services that they run. The :ref:`Quagga_Routing_Software`, for example, +transforms a node into a router. + +Services may be customized for each node, or new custom services can be +created. New node types can be created each having a different name, icon, and +set of default services. Each service defines the per-node directories, +configuration files, startup index, starting commands, validation commands, +shutdown commands, and meta-data associated with a node. + +.. NOTE:: + Network namespace nodes do not undergo the normal Linux boot process + using the ``init``, ``upstart``, or ``systemd`` frameworks. These + lightweight nodes use configured CORE *services*. + + +.. _Default_Services_and_Node_Types: + +Default Services and Node Types +------------------------------- + +Here are the default node types and their services: + +.. index:: Xen +.. index:: physical nodes + +* *router* - zebra, OSFPv2, OSPFv3, vtysh, and IPForward services for IGP + link-state routing. +* *host* - DefaultRoute and SSH services, representing an SSH server having a + default route when connected directly to a router. +* *PC* - DefaultRoute service for having a default route when connected + directly to a router. +* *mdr* - zebra, OSPFv3MDR, vtysh, and IPForward services for + wireless-optimized MANET Designated Router routing. +* *prouter* - a physical router, having the same default services as the + *router* node type; for incorporating Linux testbed machines into an + emulation, the :ref:`Machine_Types` is set to :ref:`physical`. +* *xen* - a Xen-based router, having the same default services as the + *router* node type; for incorporating Xen domUs into an emulation, the + :ref:`Machine_Types` is set to :ref:`xen`, and different *profiles* are + available. + +Configuration files can be automatically generated by each service. For +example, CORE automatically generates routing protocol configuration for the +router nodes in order to simplify the creation of virtual networks. + +To change the services associated with a node, double-click on the node to +invoke its configuration dialog and click on the *Services...* button, +or right-click a node a choose *Services...* from the menu. +Services are enabled or disabled by clicking on their names. The button next to +each service name allows you to customize all aspects of this service for this +node. For example, special route redistribution commands could be inserted in +to the Quagga routing configuration associated with the zebra service. + +.. index:: default services + +To change the default services associated with a node type, use the Node Types +dialog available from the *Edit* button at the end of the Layer-3 nodes +toolbar, or choose *Node types...* from the *Session* menu. Note that +any new services selected are not applied to existing nodes if the nodes have +been customized. + +.. index:: nodes.conf + +The node types are saved in a :file:`~/.core/nodes.conf` file, not with the +`.imn` file. Keep this in mind when changing the default services for +existing node types; it may be better to simply create a new node type. It is +recommended that you do not change the default built-in node types. The +:file:`nodes.conf` file can be copied between CORE machines to save your custom +types. + +.. _Customizing_a_Service: + +Customizing a Service +--------------------- + +.. index:: customizing services + +.. index:: service customization dialog + +A service can be fully customized for a particular node. From the node's +configuration dialog, click on the button next to the service name to invoke +the service customization dialog for that service. +The dialog has three tabs for configuring the different aspects of the service: +files, directories, and startup/shutdown. + +.. NOTE:: + A **yellow** customize icon next to a service indicates that service + requires customization (e.g. the *Firewall* service). + A **green** customize icon indicates that a custom configuration exists. + Click the *Defaults* button when customizing a service to remove any + customizations. + +.. index:: files tab + +The Files tab is used to display or edit the configuration files or scripts that +are used for this service. Files can be selected from a drop-down list, and +their contents are displayed in a text entry below. The file contents are +generated by the CORE daemon based on the network topology that exists at +the time the customization dialog is invoked. + +.. index:: directories tab + +.. index:: per-node directories + +The Directories tab shows the per-node directories for this service. For the +default types, CORE nodes share the same filesystem tree, except for these +per-node directories that are defined by the services. For example, the +`/var/run/quagga` directory needs to be unique for each node running +the Zebra service, because Quagga running on each node needs to write separate +PID files to that directory. + +.. NOTE:: + The :file:`/var/log` and :file:`/var/run` directories are + mounted uniquely per-node by default. + Per-node mount targets can be found in :file:`/tmp/pycore.nnnnn/nN.conf/` + (where *nnnnn* is the session number and *N* is the node number.) + +.. index:: startup/shutdown tab + +.. index:: startup index + +.. index:: startup commands + +.. index:: shutdown commands + +The Startup/shutdown tab lists commands that are used to start and stop this +service. The startup index allows configuring when this service starts relative +to the other services enabled for this node; a service with a lower startup +index value is started before those with higher values. Because shell scripts +generated by the Files tab will not have execute permissions set, the startup +commands should include the shell name, with +something like "`sh script.sh`". + +Shutdown commands optionally terminate the process(es) associated with this +service. Generally they send a kill signal to the running process using the +*kill* or *killall* commands. If the service does not terminate +the running processes using a shutdown command, the processes will be killed +when the *vnoded* daemon is terminated (with *kill -9*) and +the namespace destroyed. It is a good practice to +specify shutdown commands, which will allow for proper process termination, and +for run-time control of stopping and restarting services. + +.. index:: validate commands + +Validate commands are executed following the startup commands. A validate +command can execute a process or script that should return zero if the service +has started successfully, and have a non-zero return value for services that +have had a problem starting. For example, the *pidof* command will check +if a process is running and return zero when found. When a validate command +produces a non-zero return value, an exception is generated, which will cause +an error to be displayed in the :ref:`Check_Emulation_Light`. + +.. tip:: + To start, stop, and restart services during run-time, right-click a + node and use the *Services...* menu. + +.. _Creating_new_Services: + +Creating new Services +--------------------- + +.. index:: creating services + +Services can save time required to configure nodes, especially if a number +of nodes require similar configuration procedures. New services can be +introduced to automate tasks. + +.. index:: UserDefined service + +The easiest way to capture the configuration of a new process into a service +is by using the **UserDefined** service. This is a blank service where any +aspect may be customized. The UserDefined service is convenient for testing +ideas for a service before adding a new service type. + +To introduce new service types, a :file:`myservices/` directory exists in the +user's CORE configuration directory, at :file:`~/.core/myservices/`. A detailed +:file:`README.txt` file exists in that directory to outline the steps necessary +for adding a new service. First, you need to create a small Python file that +defines the service; then the `custom_services_dir` entry must be set +in the :file:`/etc/core/core.conf` configuration file. A sample is provided in +the :file:`myservices/` directory. + +If you have created a new service type that may be useful to others, please +consider contributing it to the CORE project. + +.. _Check_Emulation_Light: + +Check Emulation Light +===================== + +.. index:: check emulation light + +.. index:: CEL + +The Check Emulation Light, or CEL, is located in the bottom right-hand corner +of the status bar in the CORE GUI. This is a yellow icon that indicates one or +more problems with the running emulation. Clicking on the CEL will invoke the +CEL dialog. + +.. index:: exceptions + +The Check Emulation Light dialog contains a list of exceptions received from +the CORE daemon. An exception has a time, severity level, optional node number, +and source. When the CEL is blinking, this indicates one or more fatal +exceptions. An exception with a fatal severity level indicates that one or more +of the basic pieces of emulation could not be created, such as failure to +create a bridge or namespace, or the failure to launch EMANE processes for an +EMANE-based network. + +Clicking on an exception displays details for that +exception. If a node number is specified, that node is highlighted on the +canvas when the exception is selected. The exception source is a text string +to help trace where the exception occurred; "service:UserDefined" for example, +would appear for a failed validation command with the UserDefined service. + +Buttons are available at the bottom of the dialog for clearing the exception +list and for viewing the CORE daemon and node log files. + +.. _Configuration_Files: + +Configuration Files +=================== + +.. index:: configuration file + +.. index:: imn file + +Configurations are saved to :file:`xml` or :file:`.imn` topology files using +the *File* menu. You +can easily edit these files with a text editor. +Any time you edit the topology +file, you will need to stop the emulation if it were running and reload the +file. + +The :file:`.xml` file schema +is `specified by NRL `_. +Planning documents are specified in NRL's Network Modeling Framework (NMF). +Here the individual planning documents are several tags +encased in one `` tag: + +* `` - describes nodes, hosts, interfaces, and the networks to + which they belong. +* `` - describes position and motion patterns for nodes in an + emulation. +* `` - describes services (protocols, applications) and traffic + flows that are associated with certain nodes. +* `` - meta-data that is not part of the NRL XML schema but + used only by CORE. For example, GUI options, canvas and annotation info, etc. + are contained here. + + +.. index:: indentation + +The :file:`.imn` file format comes from :ref:`IMUNES `, and is +basically Tcl lists of nodes, links, etc. +Tabs and spacing in the topology files are important. The file starts by +listing every node, then links, annotations, canvases, and options. Each entity +has a block contained in braces. The first block is indented by four spaces. +Within the `network-config` block (and any *custom-*-config* block), the +indentation is one tab character. + +.. tip:: + There are several topology examples included with CORE in + the :file:`configs/` directory. + This directory can be found in :file:`~/.core/configs`, or + installed to the filesystem + under :file:`/usr[/local]/share/examples/configs`. + +.. tip:: + When using the :file:`.imn` file format, file paths for things like custom + icons may contain the special variables `$CORE_DATA_DIR` or `$CONFDIR` which + will be substituted with :file:`/usr/share/core` or :file:`~/.core/configs`. + +.. tip:: + Feel free to edit the files directly using your favorite text editor. + + +.. _Customizing_your_Topology's_Look: + +Customizing your Topology's Look +================================ + +.. index:: annotation tools + +.. index:: captions + +.. index:: text tool + +.. index:: ovals + +.. index:: rectangles + +Several annotation tools are provided for changing the way your topology is +presented. Captions may be added with the Text tool. Ovals and rectangles may +be drawn in the background, helpful for visually grouping nodes together. + +.. index:: marker tool + +During live demonstrations the marker tool may be helpful for drawing temporary +annotations on the canvas that may be quickly erased. A size and color palette +appears at the bottom of the toolbar when the marker tool is selected. Markings +are only temporary and are not saved in the topology file. + +.. index:: images + +.. index:: icons + +.. index:: custom icons + +The basic node icons can be replaced with a custom image of your choice. Icons +appear best when they use the GIF or PNG format with a transparent background. +To change a node's icon, double-click the node to invoke its configuration +dialog and click on the button to the right of the node name that shows the +node's current icon. + +.. index:: wallpaper + +.. index:: canvas wallpaper + +A background image for the canvas may be set using the *Wallpaper...* option +from the *Canvas* menu. The image may be centered, tiled, or scaled to fit the +canvas size. An existing terrain, map, or network diagram could be used as a +background, for example, with CORE nodes drawn on top. + +.. _Preferences: + +Preferences +=========== + +.. index:: preferences + +.. index:: Preferences Dialog + +The *Preferences* Dialog can be accessed from the :ref:`Edit_Menu`. There are +numerous defaults that can be set with this dialog, which are stored in the +:file:`~/.core/prefs.conf` preferences file. + diff --git a/gui/Makefile.am b/gui/Makefile.am new file mode 100755 index 00000000..7b4f05bb --- /dev/null +++ b/gui/Makefile.am @@ -0,0 +1,70 @@ +# CORE +# (c)2010-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +# Makefile for installing the CORE GUI. Since it is a Tcl/Tk script, we do not +# build anything here. +# + +SUBDIRS = icons + +TCL_FILES = annotations.tcl api.tcl canvas.tcl cfgparse.tcl \ + core.tcl debug.tcl editor.tcl exec.tcl \ + filemgmt.tcl gpgui.tcl \ + graph_partitioning.tcl help.tcl \ + initgui.tcl ipv4.tcl ipv6.tcl \ + linkcfg.tcl mobility.tcl nodecfg.tcl \ + nodes.tcl services.tcl ns2imunes.tcl plugins.tcl \ + tooltips.tcl topogen.tcl traffic.tcl util.tcl \ + version.tcl widget.tcl wlan.tcl wlanscript.tcl \ + exceptions.tcl + +ADDONS_FILES = addons/ipsecservice.tcl + +CONFIG_FILES = configs/sample1.imn configs/sample1.scen \ + configs/sample1-bg.gif configs/sample2-ssh.imn \ + configs/sample3-bgp.imn configs/sample4-nrlsmf.imn \ + configs/sample4.scen configs/sample4-bg.jpg \ + configs/sample5-mgen.imn configs/sample6-emane-rfpipe.imn \ + configs/sample7-emane-ieee80211abg.imn \ + configs/sample8-ipsec-service.imn \ + configs/sample9-vpn.imn \ + configs/sample10-kitchen-sink.imn + +OTHER_FILES = core-bsd-cleanup.sh + +# +# CORE GUI script (/usr/local/bin/core-gui) +# +dist_bin_SCRIPTS = core-gui + +# +# Tcl/Tk scripts (/usr/local/lib/core) +# +coredir = $(CORE_LIB_DIR) +dist_core_DATA = $(TCL_FILES) +dist_core_SCRIPTS = $(OTHER_FILES) + +# +# Addon files +# +coreaddonsdir = $(coredir)/addons +dist_coreaddons_DATA = $(ADDONS_FILES) + +# +# Sample configs (/usr/local/share/core/examples/configs) +# +coreconfigsdir = $(datadir)/core/examples/configs +dist_coreconfigs_DATA = $(CONFIG_FILES) + + +dist-hook: + rm -rf $(distdir)/addons/.svn + +# extra cruft to remove +DISTCLEANFILES = Makefile.in + +# files to include in source tarball not included elsewhere +EXTRA_DIST = addons diff --git a/gui/addons/ipsecservice.tcl b/gui/addons/ipsecservice.tcl new file mode 100644 index 00000000..aea78b3e --- /dev/null +++ b/gui/addons/ipsecservice.tcl @@ -0,0 +1,334 @@ +# +# Copyright 2012 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# +# This is a separate "addons" file because it is closely tied to Python +# service definition for the IPsec service. +# + +# +# Helper dialog for configuring the IPsec service +# +proc popupServiceConfig_IPsec { parent w node service btn } { + global plugin_img_add plugin_img_del plugin_img_edit + + set f $w.note.ipsec + ttk::frame $f + set h "This IPsec service helper will assist with building an ipsec.sh file" + set h "$h (located on the Files tab).\nThe IPsec service builds ESP" + set h "$h tunnels between the specified peers using the racoon IKEv2" + set h "$h\nkeying daemon. You need to provide keys and the addresses of" + set h "$h peers, along with the\nsubnets to tunnel." + ttk::label $f.help -text $h + pack $f.help -side top -anchor w -padx 4 -pady 4 + $w.note add $f -text "IPsec" -underline 0 + + global g_ipsec_key_dir g_ipsec_key_name + set g_ipsec_key_dir "/etc/core/keys" + set g_ipsec_key_name "ipsec1" + ttk::labelframe $f.keys -text "Keys" + + ttk::frame $f.keys.dir + ttk::label $f.keys.dir.lab -text "Key directory:" + ttk::entry $f.keys.dir.ent -width 40 -textvariable g_ipsec_key_dir + ttk::button $f.keys.dir.btn -width 5 -text "..." -command { + set f .popupServicesCustomize.note.ipsec + set d [$f.keys.dir.ent get] + set d [tk_chooseDirectory -initialdir $d -title "Key directory"] + if { $d != "" } { + $f.keys.dir.ent delete 0 end + $f.keys.dir.ent insert 0 $d + } + } + pack $f.keys.dir.lab $f.keys.dir.ent $f.keys.dir.btn \ + -side left -padx 4 -pady 4 + pack $f.keys.dir -side top -anchor w + + ttk::frame $f.keys.name + ttk::label $f.keys.name.lab -text "Key base name:" + ttk::entry $f.keys.name.ent -width 10 -textvariable g_ipsec_key_name + pack $f.keys.name.lab $f.keys.name.ent -side left -padx 4 -pady 4 + pack $f.keys.name -side top -anchor w + + set h "The (name).pem x509 certificate and (name).key RSA private key need" + set h "$h to exist in the\nspecified directory. These can be generated" + set h "$h using the openssl tool. Also, a ca-cert.pem\nfile should exist" + set h "$h in the key directory for the CA that issued the certs." + ttk::label $f.keys.help -text $h + pack $f.keys.help -side top -anchor w -padx 4 -pady 4 + + pack $f.keys -side top -pady 4 -pady 4 -expand true -fill x + + ttk::labelframe $f.t -text "IPsec Tunnel Endpoints" + set h "(1) Define tunnel endpoints (select peer node using the button" + set h "$h, then select address from the list)" + ttk::label $f.t.lab1 -text $h + pack $f.t.lab1 -side top -anchor w -padx 4 -pady 4 + ttk::frame $f.t.ep + ttk::label $f.t.ep.lab1 -text "Local:" + ttk::combobox $f.t.ep.combo1 -width 12 + pack $f.t.ep.lab1 $f.t.ep.combo1 -side left -padx 4 -pady 4 + populateComboWithIPs $f.t.ep.combo1 $node + + global g_twoNodeSelect g_twoNodeSelectCallback + set g_twoNodeSelect "" + set g_twoNodeSelectCallback selectTwoNodeIPsecCallback + + set h "Choose a node by clicking it on the canvas" + set h "$h or\nby selecting it from the list below." + ttk::label $f.t.ep.lab2 -text "Peer node:" + ttk::checkbutton $f.t.ep.node -text " (none) " -variable g_twoNodeSelect \ + -onvalue "$f.t.ep.node" -style Toolbutton \ + -command "popupSelectNodes {$h} {} selectNodesIPsecCallback" + + ttk::label $f.t.ep.lab3 -text "Peer:" + ttk::combobox $f.t.ep.combo2 -width 12 + ttk::button $f.t.ep.add -text "Add Endpoint" -image $plugin_img_add \ + -compound left -command "ipsecTreeHelper $f ep" + pack $f.t.ep.lab2 $f.t.ep.node $f.t.ep.lab3 $f.t.ep.combo2 \ + $f.t.ep.add -side left -padx 4 -pady 4 + pack $f.t.ep -side top -anchor w + + set h "(2) Select endpoints below and add the subnets to be encrypted" + ttk::label $f.t.lab2 -text $h + pack $f.t.lab2 -side top -anchor w -padx 4 -pady 4 + + ttk::frame $f.t.sub + ttk::label $f.t.sub.lab1 -text "Local subnet:" + ttk::combobox $f.t.sub.combo1 -width 12 + ttk::label $f.t.sub.lab2 -text "Remote subnet:" + ttk::combobox $f.t.sub.combo2 -width 12 + ttk::button $f.t.sub.add -text "Add Subnet" -image $plugin_img_add \ + -compound left -command "ipsecTreeHelper $f sub" + pack $f.t.sub.lab1 $f.t.sub.combo1 $f.t.sub.lab2 $f.t.sub.combo2 \ + $f.t.sub.add -side left -padx 5 -pady 4 + pack $f.t.sub -side top -anchor w + + global node_list + set net_list [ipv4SubnetList $node_list] + $f.t.sub.combo1 configure -values $net_list + $f.t.sub.combo2 configure -values $net_list + + ttk::treeview $f.t.tree -height 5 -selectmode browse -show tree + + pack $f.t.tree -side top -padx 4 -pady 4 -fill both + pack $f.t -side top -expand true -fill both + + ttk::frame $f.bottom + ttk::button $f.bottom.del -image $plugin_img_del \ + -command "ipsecTreeHelper $f del" + ttk::button $f.bottom.gen -text "Generate ipsec.sh" \ + -image $plugin_img_edit -compound left -command "generateIPsecScript $w" + pack $f.bottom.del $f.bottom.gen -side left -padx 4 -pady 4 + pack $f.bottom -side top +} + +# +# Callback invoked when receiving configuration values +# from a Configuration Message; this service helper depends on the ipsec.sh +# file, not the other configuration values. +# +#proc popupServiceConfig_IPsec_vals { node values services w } { +#} + +# +# Callback invoked when receiving service file data from a File Message +proc popupServiceConfig_IPsec_file { node name data w } { + if { $name == "ipsec.sh" } { + readIPsecScript $w + } +} + +# helper to insert all of a node's IP addresses into a combo +proc populateComboWithIPs { combo node } { + set ip_list [ipv4List $node 0] + $combo configure -values $ip_list + $combo delete 0 end + $combo insert 0 [lindex $ip_list 0] +} + +# called from editor.tcl:button1 when user clicks on a node +# search for IP address and populate +proc selectTwoNodeIPsecCallback {} { + set w .popupServicesCustomize + set f $w.note.ipsec + + if { ![winfo exists $w] } { return }; # user has closed window + catch {destroy .nodeselect} + + set node [string trim [$f.t.ep.node cget -text]] + if { [set node] == "(none)" } { set node "" } + + # populate peer interface combo with list of IPs + populateComboWithIPs $f.t.ep.combo2 $node +} + +# called from popupSelectNodes dialog when a node selection has been made +proc selectNodesIPsecCallback { nodes } { + global g_twoNodeSelect + set w .popupServicesCustomize + set f $w.note.ipsec + + set g_twoNodeSelect "" + set node [lindex $nodes 0] + if { $node == "" } { + $f.t.ep.node configure -text "(none)" + return + } + $f.t.ep.node configure -text " $node " + + # populate peer interface combo with list of IPs + populateComboWithIPs $f.t.ep.combo2 $node +} + +# helper to manipulate tree; cmd is "del", "ep" or "sub" +proc ipsecTreeHelper { f cmd } { + + if { $cmd == "del" } { + set sel [$f.t.tree selection] + $f.t.tree delete $sel + return + } + + # add endpoint (ep) or subnet (sub) + set l [string trim [$f.t.$cmd.combo1 get]] + set p [string trim [$f.t.$cmd.combo2 get]] + if { $l == "" || $p == "" } { + if { $cmd == "ep" } { + set h "tunnel interface addresses" + } else { + set h "subnet addresses" + } + tk_messageBox -type ok -icon warning -message \ + "You need to select local and peer $h." + return + } + + if { $cmd == "ep" } { + set item [$f.t.tree insert {} end -text "$l <--> $p" -open true] + $f.t.tree selection set $item + } elseif { $cmd == "sub" } { + set parent [$f.t.tree selection] + if { $parent == "" } { + tk_messageBox -type ok -icon warning -message \ + "You need to first select endpoints, then configure their subnets." + return + } + if { [$f.t.tree parent $parent] != {} } { + set parent [$f.t.tree parent $parent] + } + $f.t.tree insert $parent end -text "$l <===> $p" + } +} + +# update an ipsec.sh file that was generated by the IPsec service +proc generateIPsecScript { w } { + #puts "generateIPsecScript $w..." + set cfg [$w.note.files.txt get 0.0 end-1c] + set newcfg "" + + # + # Gather data for a new config + # + set f $w.note.ipsec + set keydir [$f.keys.dir.ent get] + set keyname [$f.keys.name.ent get] + + set tunnelhosts "" + set subnet_list "" + set ti 0 + set th_items [$f.t.tree children {}] + foreach th $th_items { + set ep [$f.t.tree item $th -text] + set i [string first " " $ep] + # replace " <--> " with "AND" + set ep [string replace $ep $i $i+5 "AND"] + # build a list e.g.: + # tunnelhosts="172.16.0.1AND172.16.0.2 172.16.0.1AND172.16.2.1" + lappend tunnelhosts $ep + + set subnets "" + foreach subnet_item [$f.t.tree children $th] { + set sn [$f.t.tree item $subnet_item -text] + set i [string first " " $sn] + # replace " <===> " with "AND" + set sn [string replace $sn $i $i+6 "AND"] + lappend subnets $sn + } + incr ti + set subnetstxt [join $subnets " "] + # build a list e.g.: + # T2="172.16.4.0/24AND172.16.5.0/24 172.16.4.0/24AND172.16.6.0/24" + set subnets "T$ti=\"$subnetstxt\"" + lappend subnet_list $subnets + } + + # + # Perform replacements in existing ipsec.sh file. + # + set have_subnets 0 + foreach line [split $cfg "\n"] { + if { [string range $line 0 6] == "keydir=" } { + set line "keydir=$keydir" + } elseif { [string range $line 0 8] == "certname=" } { + set line "certname=$keyname" + } elseif { [string range $line 0 11] == "tunnelhosts=" } { + set tunnelhosts [join $tunnelhosts " "] + set line "tunnelhosts=\"$tunnelhosts\"" + } elseif { [string range $line 0 0] == "T" && \ + [string is digit [string range $line 1 1]] } { + if { $have_subnets } { + continue ;# skip this line + } else { + set line [join $subnet_list "\n"] + set have_subnets 1 + } + } + lappend newcfg $line + } + $w.note.files.txt delete 0.0 end + $w.note.files.txt insert 0.0 [join $newcfg "\n"] + $w.note select $w.note.files + $w.btn.apply configure -state normal +} + +proc readIPsecScript { w } { + set cfg [$w.note.files.txt get 0.0 end-1c] + + set f $w.note.ipsec + $f.keys.dir.ent delete 0 end + $f.keys.name.ent delete 0 end + $f.t.tree delete [$f.t.tree children {}] + + set ti 1 + foreach line [split $cfg "\n"] { + if { [string range $line 0 6] == "keydir=" } { + $f.keys.dir.ent insert 0 [string range $line 7 end] + } elseif { [string range $line 0 8] == "certname=" } { + $f.keys.name.ent insert 0 [string range $line 9 end] + } elseif { [string range $line 0 11] == "tunnelhosts=" } { + set tunnelhosts [string range $line 13 end-1] + set ti 0 + foreach ep [split $tunnelhosts " "] { + incr ti + set i [string first "AND" $ep] + set ep [string replace $ep $i $i+2 " <--> "] + $f.t.tree insert {} end -id "T$ti" -text "$ep" -open true + } + } elseif { [string range $line 0 0] == "T" && \ + [string is digit [string range $line 1 1]] } { + set i [string first "=" $line] + set ti [string range $line 0 $i-1] + set subnets [split [string range $line $i+2 end-1] " "] + foreach sn $subnets { + set i [string first "AND" $sn] + set sn [string replace $sn $i $i+2 " <===> "] + if { [catch {$f.t.tree insert $ti end -text "$sn"} e] } { + puts "IPsec service ignoring line '$ti='" + } + } + } + } +} diff --git a/gui/annotations.tcl b/gui/annotations.tcl new file mode 100644 index 00000000..8352a92d --- /dev/null +++ b/gui/annotations.tcl @@ -0,0 +1,842 @@ +# +# Copyright 2007-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# + +# +# Copyright 2007-2008 University of Zagreb, Croatia. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions +# are met: +# 1. Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# 2. Redistributions in binary form must reproduce the above copyright +# notice, this list of conditions and the following disclaimer in the +# documentation and/or other materials provided with the distribution. +# +# THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND +# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +# ARE DISCLAIMED. IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE +# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS +# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) +# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY +# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF +# SUCH DAMAGE. +# + +#****h* imunes/annotations.tcl +# NAME +# annotations.tcl -- oval, rectangle, text, background, ... +# FUNCTION +# This module is used for configuration/image annotations, such as oval, +# rectangle, text, background or some other. +#**** + +#****f* annotations.tcl/annotationConfig +# NAME +# annotationConfig -- +# SYNOPSIS +# annotationConfig $canvas $target +# FUNCTION +# . . . +# INPUTS +# * canvas -- +# * target -- oval or rectangle object +#**** + +proc annotationConfig { c target } { + switch -exact -- [nodeType $target] { + oval { + popupAnnotationDialog $c $target "true" + } + rectangle { + popupAnnotationDialog $c $target "true" + } + text { + popupAnnotationDialog $c $target "true" + } + default { + puts "Unknown type [nodeType $target] for target $target" + } + } + redrawAll +} + + +#****f* annotations.tcl/popupOvalDialog +# NAME +# popupOvalDialog -- creates a new oval or modifies existing oval +# SYNOPSIS +# popupOvalDialog $canvas $modify $color $label $lcolor +# FUNCTION +# Called from: +# - editor.tcl/button1-release when new oval is drawn +# - annotationConfig which is called from popupConfigDialog bound to +# Double-1 on various objects +# - configureOval called from button3annotation procedure which creates +# a menu for configuration and deletion (bound to 3 on oval, +# rectangle and text) +# INPUTS +# * canvas -- +# * modify -- create new oval "newoval" if modify=false or +# modify an existing oval "newoval" if modify=true +# * color -- oval color +# * label -- label text +# * lcolor -- label (text) color +#**** + + +#****f* annotations.tcl/destroyNewoval +# NAME +# destroyNewoval -- helper for popupOvalDialog and popupOvalApply +# SYNOPSIS +# destroyNewoval $canvas +# FUNCTION +# . . . +# INPUTS +# * canvas -- +#**** + +proc destroyNewoval { c } { + global newoval + $c delete -withtags newoval + set newoval "" +} + + +# oval/rectangle/text right-click menu + +proc button3annotation { type c x y } { + + if { $type == "oval" } { + set procname "Oval" + set item [lindex [$c gettags {oval && current}] 1] + } elseif { $type == "rectangle" } { + set procname "Rectangle" + set item [lindex [$c gettags {rectangle && current}] 1] + } elseif { $type == "label" } { + set procname "Label" + set item [lindex [$c gettags {label && current}] 1] + } elseif { $type == "text" } { + set procname "Text" + set item [lindex [$c gettags {text && current}] 1] + } elseif { $type == "marker" } { + # erase markings + $c delete -withtags {marker && current} + return + } else { + # ??? + return + } + if { $item == "" } { + return + } + set menutext "$type $item" + + .button3menu delete 0 end + + .button3menu add command -label "Configure $menutext" \ + -command "annotationConfig $c $item" + .button3menu add command -label "Delete $menutext" \ + -command "deleteAnnotation $c $type $item" + + set x [winfo pointerx .] + set y [winfo pointery .] + tk_popup .button3menu $x $y +} + + +proc deleteAnnotation { c type target } { + global changed annotation_list + + $c delete -withtags "$type && $target" + $c delete -withtags "new$type" + set i [lsearch -exact $annotation_list $target] + set annotation_list [lreplace $annotation_list $i $i] + set changed 1 + updateUndoLog +} + + +proc drawOval {oval} { + global $oval defOvalColor zoom curcanvas + global defTextFontFamily defTextFontSize + + set coords [getNodeCoords $oval] + if { [llength $coords] < 4 } { + puts "Bad coordinates for oval $oval" + return + } + set x1 [expr {[lindex $coords 0] * $zoom}] + set y1 [expr {[lindex $coords 1] * $zoom}] + set x2 [expr {[lindex $coords 2] * $zoom}] + set y2 [expr {[lindex $coords 3] * $zoom}] + set color [lindex [lsearch -inline [set $oval] "color *"] 1] + set label [lindex [lsearch -inline [set $oval] "label *"] 1] + set lcolor [lindex [lsearch -inline [set $oval] "labelcolor *"] 1] + set bordercolor [lindex [lsearch -inline [set $oval] "border *"] 1] + set width [lindex [lsearch -inline [set $oval] "width *"] 1] + set lx [expr $x1 + (($x2 - $x1) / 2)] + set ly [expr ($y1 + 20)] + + if { $color == "" } { set color $defOvalColor } + if { $lcolor == "" } { set lcolor black } + if { $width == "" } { set width 0 } + if { $bordercolor == "" } { set bordercolor black } + + # -outline red -stipple gray50 + set newoval [.c create oval $x1 $y1 $x2 $y2 \ + -fill $color -width $width -outline $bordercolor \ + -tags "oval $oval annotation"] + .c raise $newoval background + + set fontfamily [lindex [lsearch -inline [set $oval] "fontfamily *"] 1] + set fontsize [lindex [lsearch -inline [set $oval] "fontsize *"] 1] + if { $fontfamily == "" } { + set fontfamily $defTextFontFamily + } + if { $fontsize == "" } { + set fontsize $defTextFontSize + } + set newfontsize $fontsize + set font [list "$fontfamily" $fontsize] + set effects [lindex [lsearch -inline [set $oval] "effects *"] 1] + + .c create text $lx $ly -tags "oval $oval annotation" -text $label \ + -justify center -font "$font $effects" -fill $lcolor + + setNodeCanvas $oval $curcanvas + setType $oval "oval" +} + + +# Color helper for popupOvalDialog and popupLabelDialog +proc popupColor { type l settext } { + # popup color selection dialog with current color + if { $type == "fg" } { + set initcolor [$l cget -fg] + } else { + set initcolor [$l cget -bg] + } + set newcolor [tk_chooseColor -initialcolor $initcolor] + + # set fg or bg of the "l" label control + if { $newcolor == "" } { + return + } + if { $settext == "true" } { + $l configure -text $newcolor -$type $newcolor + } else { + $l configure -$type $newcolor + } +} + + +#****f* annotations.tcl/roundRect +# NAME +# roundRect -- Draw a rounded rectangle in the canvas. +# Called from drawRect procedure +# SYNOPSIS +# roundRect $w $x0 $y0 $x3 $y3 $radius $args +# FUNCTION +# Creates a rounded rectangle as a smooth polygon in the canvas +# and returns the canvas item number of the rounded rectangle. +# INPUTS +# * w -- Path name of the canvas +# * x0, y0 -- Coordinates of the upper left corner, in pixels +# * x3, y3 -- Coordinates of the lower right corner, in pixels +# * radius -- Radius of the bend at the corners, in any form +# acceptable to Tk_GetPixels +# * args -- Other args suitable to a 'polygon' item on the canvas +# Example: +# roundRect .c 100 50 500 250 $rad -fill white -outline black -tags rectangle +#**** + +proc roundRect { w x0 y0 x3 y3 radius args } { + + set r [winfo pixels $w $radius] + set d [expr { 2 * $r }] + + # Make sure that the radius of the curve is less than 3/8 size of the box + + set maxr 0.75 + + if { $d > $maxr * ( $x3 - $x0 ) } { + set d [expr { $maxr * ( $x3 - $x0 ) }] + } + if { $d > $maxr * ( $y3 - $y0 ) } { + set d [expr { $maxr * ( $y3 - $y0 ) }] + } + + set x1 [expr { $x0 + $d }] + set x2 [expr { $x3 - $d }] + set y1 [expr { $y0 + $d }] + set y2 [expr { $y3 - $d }] + + set cmd [list $w create polygon] + lappend cmd $x0 $y0 $x1 $y0 $x2 $y0 $x3 $y0 $x3 $y1 $x3 $y2 + lappend cmd $x3 $y3 $x2 $y3 $x1 $y3 $x0 $y3 $x0 $y2 $x0 $y1 + lappend cmd -smooth 1 + return [eval $cmd $args] + } + +proc drawRect {rectangle} { + global $rectangle defRectColor zoom curcanvas + global defTextFontFamily defTextFontSize + + set coords [getNodeCoords $rectangle] + if {$coords == "" || [llength $coords] != 4 } { + puts "Bad coordinates for rectangle $rectangle" + return + } + + set x1 [expr {[lindex $coords 0] * $zoom}] + set y1 [expr {[lindex $coords 1] * $zoom}] + set x2 [expr {[lindex $coords 2] * $zoom}] + set y2 [expr {[lindex $coords 3] * $zoom}] + set color [lindex [lsearch -inline [set $rectangle] "color *"] 1] + set label [lindex [lsearch -inline [set $rectangle] "label *"] 1] + set lcolor [lindex [lsearch -inline [set $rectangle] "labelcolor *"] 1] + set bordercolor [lindex [lsearch -inline [set $rectangle] "border *"] 1] + set width [lindex [lsearch -inline [set $rectangle] "width *"] 1] + set rad [lindex [lsearch -inline [set $rectangle] "rad *"] 1] + set lx [expr $x1 + (($x2 - $x1) / 2)] + set ly [expr ($y1 + 20)] + + if { $color == "" } { set color $defRectColor } + if { $lcolor == "" } { set lcolor black } + if { $bordercolor == "" } { set bordercolor black } + if { $width == "" } { set width 0 } + # rounded-rectangle radius + if { $rad == "" } { set rad 25 } + + # Boeing: allow borderless rectangles + if { $width == 0 } { + set newrect [roundRect .c $x1 $y1 $x2 $y2 $rad \ + -fill $color -tags "rectangle $rectangle annotation"] + } else { + # end Boeing + set newrect [roundRect .c $x1 $y1 $x2 $y2 $rad \ + -fill $color -outline $bordercolor -width $width \ + -tags "rectangle $rectangle annotation"] + .c raise $newrect background + # Boeing + } + # end Boeing + + set fontfamily [lindex [lsearch -inline [set $rectangle] "fontfamily *"] 1] + set fontsize [lindex [lsearch -inline [set $rectangle] "fontsize *"] 1] + if { $fontfamily == "" } { + set fontfamily $defTextFontFamily + } + if { $fontsize == "" } { + set fontsize $defTextFontSize + } + set newfontsize $fontsize + set font [list "$fontfamily" $fontsize] + set effects [lindex [lsearch -inline [set $rectangle] "effects *"] 1] + + .c create text $lx $ly -tags "rectangle $rectangle annotation" \ + -text $label -justify center -font "$font $effects" -fill $lcolor + + setNodeCanvas $rectangle $curcanvas + setType $rectangle "rectangle" +} + + +proc popupAnnotationDialog { c target modify } { + global $target newrect newoval + global width rad fontfamily fontsize + global defFillColor defTextColor defTextFontFamily defTextFontSize + + # do nothing, return, if coords are empty + if { $target == 0 \ + && [$c coords "$newrect"] == "" \ + && [$c coords "$newoval"] == "" } { + return + } + if { $target == 0 } { + set width 0 + set rad 25 + set coords [$c bbox "$newrect"] + if { [$c coords "$newrect"] == "" } { + set coords [$c bbox "$newoval"] + set annotationType "oval" + } else { + set annotationType "rectangle" + } + set fontfamily "" + set fontsize "" + set effects "" + set color "" + set label "" + set lcolor "" + set bordercolor "" + } else { + set width [lindex [lsearch -inline [set $target] "width *"] 1] + set rad [lindex [lsearch -inline [set $target] "rad *"] 1] + set coords [$c bbox "$target"] + set color [lindex [lsearch -inline [set $target] "color *"] 1] + set fontfamily [lindex [lsearch -inline [set $target] "fontfamily *"] 1] + set fontsize [lindex [lsearch -inline [set $target] "fontsize *"] 1] + set effects [lindex [lsearch -inline [set $target] "effects *"] 1] + + set label [lindex [lsearch -inline [set $target] "label *"] 1] + set lcolor [lindex [lsearch -inline [set $target] "labelcolor *"] 1] + set bordercolor [lindex [lsearch -inline [set $target] "border *"] 1] + set annotationType [nodeType $target] + } + + if { $color == "" } { + # Boeing: use default shape colors + if { $annotationType == "oval" } { + global defOvalColor + set color $defOvalColor + } elseif { $annotationType == "rectangle" } { + global defRectColor + set color $defRectColor + } else { + set color $defFillColor + } + } + if { $lcolor == "" } { set lcolor black } + if { $bordercolor == "" } { set bordercolor black } + if { $width == "" } { set width 0 } + if { $rad == "" } { set rad 25 } + if { $fontfamily == "" } { set fontfamily $defTextFontFamily } + if { $fontsize == "" } { set fontsize $defTextFontSize } + + set textBold 0 + set textItalic 0 + set textUnderline 0 + if { [lsearch $effects bold ] != -1} {set textBold 1} + if { [lsearch $effects italic ] != -1} {set textItalic 1} + if { [lsearch $effects underline ] != -1} {set textUnderline 1} + + set x1 [lindex $coords 0] + set y1 [lindex $coords 1] + set x2 [lindex $coords 2] + set y2 [lindex $coords 3] + set xx [expr {abs($x2 - $x1)}] + set yy [expr {abs($y2 - $y1)}] + if { $xx > $yy } { + set maxrad [expr $yy * 3.0 / 8.0] + } else { + set maxrad [expr $xx * 3.0 / 8.0] + } + + set wi .popup + catch {destroy $wi} + toplevel $wi + + wm transient $wi . + wm resizable $wi 0 0 + + if { $modify == "true" } { + set windowtitle "Configure $annotationType $target" + } else { + set windowtitle "Add a new $annotationType" + } + wm title $wi $windowtitle + + frame $wi.text -relief groove -bd 2 + frame $wi.text.lab + label $wi.text.lab.name_label -text "Text for top of $annotationType:" + entry $wi.text.lab.name -bg white -fg $lcolor -width 32 \ + -validate focus -invcmd "focusAndFlash %W" + $wi.text.lab.name insert 0 $label + pack $wi.text.lab.name_label $wi.text.lab.name -side left -anchor w \ + -padx 2 -pady 2 -fill x + pack $wi.text.lab -side top -fill x + + frame $wi.text.format + + set fontmenu [tk_optionMenu $wi.text.format.fontmenu fontfamily "$fontfamily"] + set sizemenu [tk_optionMenu $wi.text.format.fontsize fontsize "$fontsize"] + + + # color selection + if { $color == "" } { + set color $defTextColor + } + button $wi.text.format.fg -text "Text color" -command \ + "popupColor fg $wi.text.lab.name false" + checkbutton $wi.text.format.bold -text "Bold" -variable textBold \ + -command [list fontupdate $wi.text.lab.name bold] + checkbutton $wi.text.format.italic -text "Italic" -variable textItalic \ + -command [list fontupdate $wi.text.lab.name italic] + checkbutton $wi.text.format.underline -text "Underline" \ + -variable textUnderline \ + -command [list fontupdate $wi.text.lab.name underline] + + if {$textBold == 1} { $wi.text.format.bold select + } else { $wi.text.format.bold deselect } + if {$textItalic == 1} { $wi.text.format.italic select + } else { $wi.text.format.italic deselect } + if {$textUnderline == 1} { $wi.text.format.underline select + } else { $wi.text.format.underline deselect } + + pack $wi.text.format.fontmenu \ + $wi.text.format.fontsize \ + $wi.text.format.fg \ + $wi.text.format.bold \ + $wi.text.format.italic \ + $wi.text.format.underline \ + -side left -pady 2 + + pack $wi.text.format -side top -fill x + + pack $wi.text -side top -fill x + + fontupdate $wi.text.lab.name fontfamily $fontfamily + fontupdate $wi.text.lab.name fontsize $fontsize + + $fontmenu delete 0 + foreach f [lsort -dictionary [font families]] { + $fontmenu add radiobutton -value "$f" -label $f \ + -variable fontfamily \ + -command [list fontupdate $wi.text.lab.name fontfamily $f] + } + + $sizemenu delete 0 + foreach f {8 9 10 11 12 14 16 18 20 22 24 26 28 36 48 72} { + $sizemenu add radiobutton -value "$f" -label $f \ + -variable fontsize \ + -command [list fontupdate $wi.text.lab.name fontsize $f] + } + +if { "$annotationType" == "rectangle" || "$annotationType" == "oval" } { + + # fill color, border color + frame $wi.colors -relief groove -bd 2 + # color selection controls + label $wi.colors.label -text "Fill color:" + + label $wi.colors.color -text $color -width 8 \ + -bg $color -fg $lcolor + button $wi.colors.bg -text "Color" -command \ + "popupColor bg $wi.colors.color true" + pack $wi.colors.label $wi.colors.color $wi.colors.bg \ + -side left -padx 2 -pady 2 -anchor w -fill x + pack $wi.colors -side top -fill x + + # border selection controls + frame $wi.border -relief groove -bd 2 + label $wi.border.label -text "Border color:" + label $wi.border.color -text $bordercolor -width 8 \ + -bg $color -fg $bordercolor + label $wi.border.width_label -text "Border width:" + set widthMenu [tk_optionMenu $wi.border.width width "$width"] + $widthMenu delete 0 + foreach f {0 1 2 3 4 5 6 7 8 9 10} { + $widthMenu add radiobutton -value $f -label $f \ + -variable width + } + button $wi.border.fg -text "Color" -command \ + "popupColor fg $wi.border.color true" + pack $wi.border.label $wi.border.color $wi.border.fg \ + $wi.border.width_label $wi.border.width \ + $wi.border.fg $wi.border.color $wi.border.label \ + -side left -padx 2 -pady 2 -anchor w -fill x + pack $wi.border -side top -fill x + +} + +if { $annotationType == "rectangle" } { + frame $wi.radius -relief groove -bd 2 + scale $wi.radius.rad -from 0 -to [expr int($maxrad)] \ + -length 400 -variable rad \ + -orient horizontal -label "Radius of the bend at the corners: " \ + -tickinterval [expr int($maxrad / 15) + 1] -showvalue true + pack $wi.radius.rad -side left -padx 2 -pady 2 -anchor w -fill x + pack $wi.radius -side top -fill x +} + + # Add new oval or modify old one? + if { $modify == "true" } { + set cancelcmd "destroy $wi" + set applytext "Modify $annotationType" + } else { + set cancelcmd "destroy $wi; destroyNewRect $c" + set applytext "Add $annotationType" + } + + frame $wi.butt -borderwidth 6 + button $wi.butt.apply -text $applytext -command "popupAnnotationApply $c $wi $target $annotationType" + + button $wi.butt.cancel -text "Cancel" -command $cancelcmd + bind $wi "$cancelcmd" + bind $wi "popupAnnotationApply $c $wi $target $annotationType" + pack $wi.butt.cancel $wi.butt.apply -side right + pack $wi.butt -side bottom + + after 100 { + grab .popup + } + return +} + +# helper for popupOvalDialog and popupOvalApply +proc destroyNewRect { c } { + global newrect + $c delete -withtags newrect + set newrect "" +} + + +proc popupAnnotationApply { c wi target type } { + global newrect newoval annotation_list + global $target + global changed + global width rad + global fontfamily fontsize textBold textItalic textUnderline + + # attributes + set caption [string trim [$wi.text.lab.name get]] + set labelcolor [$wi.text.lab.name cget -fg] + set coords [$c coords "$target"] + set iconcoords "iconcoords" + + if {"$type" == "rectangle" || "$type" == "oval" } { + set color [$wi.colors.color cget -text] + set bordercolor [$wi.border.color cget -text] + } + + if { $target == 0 } { + # Create a new annotation object + set target [newObjectId annotation] + global $target + lappend annotation_list $target + if {"$type" == "rectangle" } { + set coords [$c coords $newrect] + } elseif { "$type" == "oval" } { + set coords [$c coords $newoval] + } + } else { + set coords [getNodeCoords $target] + } + set $target {} + lappend $iconcoords $coords + lappend $target $iconcoords "label {$caption}" "labelcolor $labelcolor" \ + "fontfamily {$fontfamily}" "fontsize $fontsize" + if {"$type" == "rectangle" || "$type" == "oval" } { + lappend $target "color $color" "width $width" "border $bordercolor" + } + if {"$type" == "rectangle" } { + lappend $target "rad $rad" + } + + set ef {} + if {"$textBold" == 1} { lappend ef bold} + if {"$textItalic" == 1} { lappend ef italic} + if {"$textUnderline" == 1} { lappend ef underline} + if {"$ef" != ""} { lappend $target "effects {$ef}"} + + # draw it + if { $type == "rectangle" } { + drawRect $target + destroyNewRect $c + } elseif { $type == "oval" } { + drawOval $target + destroyNewoval $c + } elseif { $type == "text" } { + drawText $target + } + + set changed 1 + updateUndoLog + redrawAll + destroy $wi +} + +proc selectmarkEnter {c x y} { + set isThruplot false + + if {$c == ".c"} { + set obj [lindex [$c gettags current] 1] + set type [nodeType $obj] + if {$type != "oval" && $type != "rectangle"} { return } + } else { + set obj $c + set c .c + set isThruplot true + } + set bbox [$c bbox $obj] + + set x1 [lindex $bbox 0] + set y1 [lindex $bbox 1] + set x2 [lindex $bbox 2] + set y2 [lindex $bbox 3] + + if {$isThruplot == true} { + set x [expr $x+$x1] + set y [expr $y+$y1] + + } + set l 0 ;# left + set r 0 ;# right + set u 0 ;# up + set d 0 ;# down + + set x [$c canvasx $x] + set y [$c canvasy $y] + + if { $x < [expr $x1+($x2-$x1)/8.0]} { set l 1 } + if { $x > [expr $x2-($x2-$x1)/8.0]} { set r 1 } + if { $y < [expr $y1+($y2-$y1)/8.0]} { set u 1 } + if { $y > [expr $y2-($y2-$y1)/8.0]} { set d 1 } + + if {$l==1} { + if {$u==1} { + $c config -cursor top_left_corner + } elseif {$d==1} { + $c config -cursor bottom_left_corner + } else { + $c config -cursor left_side + } + } elseif {$r==1} { + if {$u==1} { + $c config -cursor top_right_corner + } elseif {$d==1} { + $c config -cursor bottom_right_corner + } else { + $c config -cursor right_side + } + } elseif {$u==1} { + $c config -cursor top_side + } elseif {$d==1} { + $c config -cursor bottom_side + } else { + $c config -cursor left_ptr + } +} + +proc selectmarkLeave {c x y} { + global thruplotResize + .bottom.textbox config -text {} + + # cursor options for thruplot resize + if {$thruplotResize == true} { + + } else { + # no resize update cursor + $c config -cursor left_ptr + } +} + + +proc textEnter { c x y } { + global annotation_list + global curcanvas + + set object [newObjectId annotation] + set newtext [$c create text $x $y -text "" \ + -anchor w -justify left -tags "text $object annotation"] + + set coords [$c coords "text && $object"] + set iconcoords "iconcoords" + + global $object + set $object {} + setType $object "text" + lappend $iconcoords $coords + lappend $object $iconcoords + lappend $object "label {}" + setNodeCanvas $object $curcanvas + + lappend annotation_list $object + popupAnnotationDialog $c $object "false" +} + + +proc drawText {text} { + global $text defTextColor defTextFont defTextFontFamily defTextFontSize + global zoom curcanvas newfontsize + + set coords [getNodeCoords $text] + if { [llength $coords] < 2 } { + puts "Bad coordinates for text $text" + return + } + set x [expr {[lindex $coords 0] * $zoom}] + set y [expr {[lindex $coords 1] * $zoom}] + set color [lindex [lsearch -inline [set $text] "labelcolor *"] 1] + if { $color == "" } { + set color $defTextColor + } + set label [lindex [lsearch -inline [set $text] "label *"] 1] + set fontfamily [lindex [lsearch -inline [set $text] "fontfamily *"] 1] + set fontsize [lindex [lsearch -inline [set $text] "fontsize *"] 1] + if { $fontfamily == "" } { + set fontfamily $defTextFontFamily + } + if { $fontsize == "" } { + set fontsize $defTextFontSize + } + set newfontsize $fontsize + set font [list "$fontfamily" $fontsize] + set effects [lindex [lsearch -inline [set $text] "effects *"] 1] + set newtext [.c create text $x $y -text $label -anchor w \ + -font "$font $effects" -justify left -fill $color \ + -tags "text $text annotation"] + + .c addtag text withtag $newtext + .c raise $text background + setNodeCanvas $text $curcanvas + setType $text "text" +} + + +proc fontupdate { label type args} { + global fontfamily fontsize + global textBold textItalic textUnderline + + if {"$textBold" == 1} {set bold "bold"} else {set bold {} } + if {"$textItalic"} {set italic "italic"} else {set italic {} } + if {"$textUnderline"} {set underline "underline"} else {set underline {} } + switch $type { + fontsize { + set fontsize $args + } + fontfamily { + set fontfamily "$args" + } + } + set f [list "$fontfamily" $fontsize] + lappend f "$bold $italic $underline" + $label configure -font "$f" +} + + +proc drawAnnotation { obj } { + switch -exact -- [nodeType $obj] { + oval { + drawOval $obj + } + rectangle { + drawRect $obj + } + text { + drawText $obj + } + } +} + +# shift annotation coordinates by dx, dy; does not redraw the annotation +proc moveAnnotation { obj dx dy } { + set coords [getNodeCoords $obj] + lassign $coords x1 y1 x2 y2 + set pt1 "[expr {$x1 + $dx}] [expr {$y1 + $dy}]" + if { [nodeType $obj] == "text" } { + # shift one point + setNodeCoords $obj $pt1 + } else { ;# oval/rectangle + # shift two points + set pt2 "[expr {$x2 + $dx}] [expr {$y2 + $dy}]" + setNodeCoords $obj "$pt1 $pt2" + } +} diff --git a/gui/api.tcl b/gui/api.tcl new file mode 100755 index 00000000..0d761826 --- /dev/null +++ b/gui/api.tcl @@ -0,0 +1,3178 @@ +# +# CORE API +# Copyright 2005-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# + +# version of the API document that is used +set CORE_API_VERSION 1.21 + +set DEFAULT_API_PORT 4038 +set g_api_exec_num 100; # starting execution number + +# set scale for X/Y coordinate translation +set XSCALE 1.0 +set YSCALE 1.0 +set XOFFSET 0 +set YOFFSET 0 + +# current session; 0 is a new session +set g_current_session 0 +set g_session_dialog_hint 1 + +# this is an array of lists, with one array entry for each widget or callback, +# and the entry is a list of execution numbers (for matching replies with +# requests) +array set g_execRequests { shell "" observer "" } + +# for a simulator, uncomment this line or cut/paste into debugger: +# set XSCALE 4.0; set YSCALE 4.0; set XOFFSET 1800; set YOFFSET 300 + +array set nodetypes { 0 def 1 phys 2 xen 3 tbd 4 lanswitch 5 hub \ + 6 wlan 7 rj45 8 tunnel 9 ktunnel 10 emane } + +array set regtypes { wl 1 mob 2 util 3 exec 4 gui 5 emul 6 } +array set regntypes { 1 wl 2 mob 3 util 4 exec 5 gui 6 emul 7 relay 10 session } +array set regtxttypes { wl "Wireless Module" mob "Mobility Module" \ + util "Utility Module" exec "Execution Server" \ + gui "Graphical User Interface" emul "Emulation Server" \ + relay "Relay" } +set DEFAULT_GUI_REG "gui core_2d_gui" +array set eventtypes { definition_state 1 configuration_state 2 \ + instantiation_state 3 runtime_state 4 \ + datacollect_state 5 shutdown_state 6 \ + event_start 7 event_stop 8 event_pause 9 \ + event_restart 10 file_open 11 file_save 12 \ + event_scheduled 31 } + +set CORE_STATES \ + "NONE DEFINITION CONFIGURATION INSTANTIATION RUNTIME DATACOLLECT SHUTDOWN" + +set EXCEPTION_LEVELS \ + "NONE FATAL ERROR WARNING NOTICE" + +# Event handler invoked for each message received by peer +proc receiveMessage { channel } { + global curcanvas showAPI + set prmsg $showAPI + set type 0 + set flags 0 + set len 0 + set seq 0 + + #puts "API receive data." + # disable the fileevent here, then reinstall the handler at the end + fileevent $channel readable "" + # channel closed + if { [eof $channel] } { + resetChannel channel 1 + return + } + + # + # read first four bytes of message header + set more_data 1 + while { $more_data == 1 } { + set bytes [read $channel 4] + if { [fblocked $channel] == 1} { + # 4 bytes not available yet + break; + } elseif { [eof $channel] } { + resetChannel channel 1 + break; + } elseif { [string bytelength $bytes] == 0 } { + # zero bytes read - parseMessageHeader would fail + break; + } + # parse type/flags/length + if { [parseMessageHeader $bytes type flags len] < 0 } { + # Message header error + break; + } + # read message data of specified length + set bytes [read $channel $len] + #if { $prmsg== 1} { + # puts "read $len bytes (type=$type, flags=$flags, len=$len)..." + #} + # handle each message type + switch -exact -- "$type" { + 1 { parseNodeMessage $bytes $len $flags } + 2 { parseLinkMessage $bytes $len $flags } + 3 { parseExecMessage $bytes $len $flags $channel } + 4 { parseRegMessage $bytes $len $flags $channel } + 5 { parseConfMessage $bytes $len $flags $channel } + 6 { parseFileMessage $bytes $len $flags $channel } + 8 { parseEventMessage $bytes $len $flags $channel } + 9 { parseSessionMessage $bytes $len $flags $channel } + 10 { parseExceptionMessage $bytes $len $flags $channel; + #7 { parseIfaceMessage $bytes $len $flags $channel } + # + } + default { puts "Unknown Message = $type" } + } + # end switch + } + # end while + + # update the canvas + catch { + # this messes up widgets + #raiseAll .c + .c config -cursor left_ptr ;# otherwise we have hourglass/pirate + update + } + + if {$channel != -1 } { + resetChannel channel 0 + } +} + +# +# Open an API socket to the specified server:port, prompt user for retry +# if specified; set the readable file event and parameters; +# returns the channel name or -1 on error. +# +proc openAPIChannel { server port retry } { + # use default values (localhost:4038) when none specified + if { $server == "" || $server == 0 } { + set server "localhost" + } + if { $port == 0 } { + global DEFAULT_API_PORT + set port $DEFAULT_API_PORT + } + + # loop when retry is true + set s -1 + while { $s < 0 } { + # TODO: fix this to remove lengthy timeout periods... + # (need to convert all channel I/O to use async channel) + # vwait doesn't work here, blocks on socket call + #puts "Connecting to $server:$port..."; # verbose + set svcstart [getServiceStartString] + set e "This feature requires a connection to the CORE daemon.\n" + set e "$e\nFailed to connect to $server:$port!\n" + set e "$e\nHave you started the CORE daemon with" + set e "$e '$svcstart'?" + if { [catch {set s [socket $server $port]} ex] } { + puts "\n$e\n (Error: $ex)" + set s -1 + if { ! $retry } { return $s; }; # error, don't retry + } + if { $s > 0 } { puts "connected." }; # verbose + if { $retry } {; # prompt user with retry dialog + if { $s < 0 } { + set choice [tk_dialog .connect "Error" $e \ + error 0 Retry "Start daemon..." Cancel] + if { $choice == 2 } { return $s } ;# cancel + if { $choice == 1 } { + set sudocmd "gksudo" + set cmd "core-daemon -d" + if { [catch {exec $sudocmd $cmd & } e] } { + puts "Error running '$sudocmd $cmd'!" + } + after 300 ;# allow time for daemon to start + } + # fall through for retry... + } + } + }; # end while + + # now we have a valid socket, set up encoding and receive event + fconfigure $s -blocking 0 -encoding binary -translation { binary binary } \ + -buffering full -buffersize 4096 + fileevent $s readable [list receiveMessage $s] + return $s +} + +# +# Reinstall the receiveMessage event handler +# +proc resetChannel { channel_ptr close } { + upvar 1 $channel_ptr channel + if {$close == 1} { + close $channel + pluginChannelClosed $channel + set $channel -1 + } + if { [catch { fileevent $channel readable \ + [list receiveMessage $channel] } ] } { + # may print error here + } +} + +# +# Catch errors when flushing sockets +# +proc flushChannel { channel_ptr msg } { + upvar 1 $channel_ptr channel + if { [catch { flush $channel } err] } { + puts "*** $msg: $err" + set channel -1 + return -1 + } + return 0 +} + + +# +# CORE message header +# +proc parseMessageHeader { bytes type flags len } { + # variables are passed by reference + upvar 1 $type mytype + upvar 1 $flags myflags + upvar 1 $len mylen + + # + # read the four-byte message header + # + if { [binary scan $bytes ccS mytype myflags mylen] != 3 } { + puts "*** warning: message header error" + return -1 + } else { + set mytype [expr {$mytype & 0xFF}]; # convert signed to unsigned + set myflags [expr {$myflags & 0xFF}] + if { $mylen == 0 } { + puts "*** warning: zero length message header!" + # empty the channel + #set bytes [read $channel] + return -1 + } + } + return 0 +} + + +# +# CORE API Node message TLVs +# +proc parseNodeMessage { data len flags } { + global node_list curcanvas c router eid showAPI nodetypes CORE_DATA_DIR + global XSCALE YSCALE XOFFSET YOFFSET deployCfgAPI_lock + #puts "Parsing node message of length=$len, flags=$flags" + set prmsg $showAPI + set current 0 + + array set typenames { 1 num 2 type 3 name 4 ipv4_addr 5 mac_addr \ + 6 ipv6_addr 7 model 8 emulsrv 10 session \ + 32 xpos 33 ypos 34 canv \ + 35 emuid 36 netid 48 lat 49 long 50 alt \ + 66 icon 80 opaque } + array set typesizes { num 4 type 4 name -1 ipv4_addr 4 ipv6_addr 16 \ + mac_addr 8 model -1 emulsrv -1 session -1 \ + xpos 2 ypos 2 canv 2 emuid 4 \ + netid 4 lat 4 long 4 alt 4 \ + icon -1 opaque -1 } + array set vals { num 0 type 0 name "" ipv4_addr -1 ipv6_addr -1 \ + mac_addr -1 model "" emulsrv "" session "" \ + xpos 0 ypos 0 canv "" \ + emuid -1 netid -1 \ + lat 0 long 0 alt 0 \ + icon "" opaque "" } + + if { $prmsg==1 } { puts -nonewline "NODE(flags=$flags," } + + # + # TLV parsing + # + while { $current < $len } { + # TLV header + if { [binary scan $data @${current}cc type length] != 2 } { + puts "TLV header error" + break + } + set length [expr {$length & 0xFF}]; # convert signed to unsigned + if { $length == 0 } {; # prevent endless looping + if { $type == 0 } { puts -nonewline "(extra padding)"; break + } else { puts "Found zero-length TLV for type=$type, dropping."; + break } + } + set pad [pad_32bit $length] + # verbose debugging + #puts "tlv type=$type length=$length pad=$pad current=$current" + incr current 2 + + if {![info exists typenames($type)] } { ;# unknown TLV type + if { $prmsg } { puts -nonewline "unknown=$type," } + incr current $length + continue + } + set typename $typenames($type) + set size $typesizes($typename) + # 32-bit and 64-bit vals pre-padded + if { $size == 4 || $size == 8 } { incr current $pad } + # read TLV data depending on size + switch -exact -- "$size" { + 2 { binary scan $data @${current}S vals($typename) } + 4 { binary scan $data @${current}I vals($typename) } + 8 { binary scan $data @${current}W vals($typename) } + 16 { binary scan $data @${current}c16 vals($typename) } + -1 { binary scan $data @${current}a${length} vals($typename) } + } + if { $size == -1 } { incr current $pad } ;# string vals post-padded + if { $type == 6 } { incr current $pad } ;# 128-bit vals post-padded + incr current $length + # special handling of data here + switch -exact -- "$typename" { + ipv4_addr { array set vals [list $typename \ + [ipv4ToString $vals($typename)] ] } + mac_addr { array set vals [list $typename \ + [macToString $vals($typename)] ] } + ipv6_addr { array set vals [list $typename \ + [ipv6ToString $vals($typename)] ] } + xpos { array set vals [list $typename \ + [expr { ($vals($typename) * $XSCALE) - $XOFFSET }] ] } + ypos { array set vals [list $typename \ + [expr { ($vals($typename) * $YSCALE) - $YOFFSET }] ] } + } + if { $prmsg } { puts -nonewline "$typename=$vals($typename)," } + } + + if { $prmsg } { puts ") "} + + # + # Execution + # + # TODO: enforce message parameters here + if { ![info exists nodetypes($vals(type))] } { + puts "NODE: invalid node type ($vals(type)), dropping"; return + } + set node "n$vals(num)" + set node_id "$eid\_$node" + if { [lsearch $node_list $node] == -1 } {; # check for node existance + set exists false + } else { + set exists true + } + + if { $vals(name) == "" } {; # make sure there is a node name + set name $node + if { $exists } { set name [getNodeName $node] } + array set vals [list name $name] + } + if { $exists } { + if { $flags == 1 } { + puts "Node add msg but node ($node) already exists, dropping." + return + } + } elseif { $flags != 1 } { + puts -nonewline "Node modify/delete message but node ($node) does " + puts "not exist dropping." + return + } + if { $vals(icon) != "" } { + set icon $vals(icon) + if { [file pathtype $icon] == "relative" } { + set icon "$CORE_DATA_DIR/icons/normal/$icon" + } + if { ![file exists $icon ] } { + puts "Node icon '$vals(icon)' does not exist." + array set vals [list icon ""] + } else { + array set vals [list icon $icon] + } + } + global $node + + set wlans_needing_update { } + if { $vals(emuid) != -1 } { + # For Linux (FreeBSD populates ngnodeidmap in l3node.instantiate/ + # buildInterface when the netgraph ID is known) + # populate ngnodeidmap for later use with wireless; it is treated as + # a hex value string (without the leading "0x") + global ngnodeidmap + foreach wlan [findWlanNodes $node] { + if { ![info exists ngnodeidmap($eid\_$wlan)] } { + set netid [string range $wlan 1 end] + set emulation_type [lindex [getEmulPlugin $node] 1] + # TODO: verify that this incr 1000 is for OpenVZ + if { $emulation_type == "openvz" } { incr netid 1000 } + set ngnodeidmap($eid\_$wlan) [format "%x" $netid] + } + if { ![info exists ngnodeidmap($eid\_$wlan-$node)] } { + set ngnodeidmap($eid\_$wlan-$node) [format "%x" $vals(emuid)] + lappend wlans_needing_update $wlan + } + } ;# end foreach wlan + } + + # local flags: informational message that node was added or deleted + if {[expr {$flags & 0x8}]} { + if { ![info exists c] } { return } + if {[expr {$flags & 0x1}] } { ;# add flag + nodeHighlights $c $node on green + after 3000 "nodeHighlights .c $node off green" + } elseif {[expr {$flags & 0x2}] } { ;# delete flag + nodeHighlights $c $node on black + after 3000 "nodeHighlights .c $node off black" + } + # note: we may want to save other data passed in this message here + # rather than just returning... + return + } + # now we have all the information about this node + switch -exact -- "$flags" { + 0 { apiNodeModify $node vals } + 1 { apiNodeCreate $node vals } + 2 { apiNodeDelete $node } + default { puts "NODE: unsupported flags ($flags)"; return } + } +} + +# +# modify a node +# +proc apiNodeModify { node vals_ref } { + global c eid zoom + upvar $vals_ref vals + if { ![info exists c] } { return } ;# batch mode + if { $vals(icon) != "" } { + setCustomImage $node $vals(icon) + .c delete withtag "node && $node" + .c delete withtag "nodelabel && $node" + drawNode .c $node + } + # move the node and its links + if {$vals(xpos) != 0 && $vals(ypos) != 0} { + moveNodeAbs $c $node [expr {$zoom * $vals(xpos)}] \ + [expr {$zoom * $vals(ypos)}] + } + if { $vals(name) != "" } { + setNodeName $node $vals(name) + } + # TODO: handle other optional on-screen data + # lat, long, alt, heading, platform type, platform id +} + +# +# add a node +# +proc apiNodeCreate { node vals_ref } { + global $node nodetypes node_list canvas_list curcanvas eid + upvar $vals_ref vals + + # create GUI object + set nodetype $nodetypes($vals(type)) + set nodename $vals(name) + if { $nodetype == "emane" } { set nodetype "wlan" } ;# special case - EMANE + if { $nodetype == "def" || $nodetype == "xen" } { set nodetype "router" } + newNode [list $nodetype $node] ;# use node number supplied from API message + setNodeName $node $nodename + if { $vals(canv) == "" } { + setNodeCanvas $node $curcanvas + } else { + set canv $vals(canv) + if { ![string is integer $canv] || $canv < 0 || $canv > 100} { + puts "warning: invalid canvas '$canv' in Node message!" + return + } + set canv "c$canv" + if { [lsearch $canvas_list $canv] < 0 && $canv == "c0" } { + # special case -- support old imn files with Canvas0 + global $canv + lappend canvas_list $canv + set $canv {} + setCanvasName $canv "Canvas0" + set curcanvas $canv + switchCanvas none + } else { + while { [lsearch $canvas_list $canv] < 0 } { + set canvnew [newCanvas ""] + switchCanvas none ;# redraw canvas tabs + } + } + setNodeCanvas $node $canv + } + setNodeCoords $node "$vals(xpos) $vals(ypos)" + lassign [getDefaultLabelOffsets [nodeType $node]] dx dy + setNodeLabelCoords $node "[expr $vals(xpos) + $dx] [expr $vals(ypos) + $dy]" + setNodeLocation $node $vals(emulsrv) + if { $vals(icon) != "" } { + setCustomImage $node $vals(icon) + } + drawNode .c $node + + set model $vals(model) + if { $model != "" && $vals(type) < 4} { + # set model only for (0 def 1 phys 2 xen 3 tbd) 4 lanswitch + setNodeModel $node $model + if { [lsearch -exact [getNodeTypeNames] $model] == -1 } { + puts "warning: unknown node type '$model' in Node message!" + } + } + + if { $vals(type) == 7 } { ;# RJ45 node - used later to control linking + netconfInsertSection $node [list model $vals(model)] + } elseif { $vals(type) == 10 } { ;# EMANE node + set section [list mobmodel coreapi ""] + netconfInsertSection $node $section + #set sock [lindex [getEmulPlugin $node] 2] + #sendConfRequestMessage $sock $node "all" 0x1 -1 "" + } elseif { $vals(type) == 6 } { ;# WLAN node + if { $vals(opaque) != "" } { + # treat opaque as a list to accomodate other data + set i [lsearch $vals(opaque) "range=*"] + if { $i != -1 } { + set range [lindex $vals(opaque) $i] + setNodeRange $node [lindex [split $range =] 1] + } + } + } +} + +# +# delete a node +# +proc apiNodeDelete { node } { + removeGUINode $node +} + +# +# CORE API Link message TLVs +# +proc parseLinkMessage { data len flags } { + global router def_router_model eid + global link_list node_list ngnodeidmap ngnodeidrmap showAPI execMode + set prmsg $showAPI + set current 0 + set c .c + #puts "Parsing link message of length=$len, flags=$flags" + + array set typenames { 1 node1num 2 node2num 3 delay 4 bw 5 per \ + 6 dup 7 jitter 8 mer 9 burst 10 session \ + 16 mburst 32 ltype 33 guiattr \ + 35 emuid1 36 netid 37 key \ + 48 if1num 49 if1ipv4 50 if1ipv4mask 51 if1mac \ + 52 if1ipv6 53 if1ipv6mask \ + 54 if2num 55 if2ipv4 56 if2ipv4mask 57 if2mac \ + 64 if2ipv6 65 if2ipv6mask } + array set typesizes { node1num 4 node2num 4 delay 8 bw 8 per -1 \ + dup -1 jitter 2 mer 2 burst 2 session -1 \ + mburst 2 ltype 4 guiattr -1 \ + emuid1 4 netid 4 key 4 \ + if1num 2 if1ipv4 4 if1ipv4mask 2 if1mac 8 \ + if1ipv6 16 if1ipv6mask 2 \ + if2num 2 if2ipv4 4 if2ipv4mask 2 if2mac 8 \ + if2ipv6 16 if2ipv6mask 2 } + array set vals { node1num -1 node2num -1 delay 0 bw 0 per "" \ + dup "" jitter 0 mer 0 burst 0 session "" \ + mburst 0 ltype 0 guiattr "" \ + emuid1 -1 netid -1 key -1 \ + if1num -1 if1ipv4 -1 if1ipv4mask 24 if1mac -1 \ + if1ipv6 -1 if1ipv6mask 64 \ + if2num -1 if2ipv4 -1 if2ipv4mask 24 if2mac -1 \ + if2ipv6 -1 if2ipv6mask 64 } + set emuid1 -1 + + if { $prmsg==1 } { puts -nonewline "LINK(flags=$flags," } + + # + # TLV parsing + # + while { $current < $len } { + # TLV header + if { [binary scan $data @${current}cc type length] != 2 } { + puts "TLV header error" + break + } + set length [expr {$length & 0xFF}]; # convert signed to unsigned + if { $length == 0 } {; # prevent endless looping + if { $type == 0 } { puts -nonewline "(extra padding)"; break + } else { puts "Found zero-length TLV for type=$type, dropping."; + break } + } + set pad [pad_32bit $length] + # verbose debugging + #puts "tlv type=$type length=$length pad=$pad current=$current" + incr current 2 + + if {![info exists typenames($type)] } { ;# unknown TLV type + if { $prmsg } { puts -nonewline "unknown=$type," } + incr current $length + continue + } + set typename $typenames($type) + set size $typesizes($typename) + # 32-bit and 64-bit vals pre-padded + if { $size == 4 || $size == 8} { incr current $pad } + # read TLV data depending on size + switch -exact -- "$size" { + 2 { binary scan $data @${current}S vals($typename) } + 4 { binary scan $data @${current}I vals($typename) } + 8 { binary scan $data @${current}W vals($typename) } + 16 { binary scan $data @${current}c16 vals($typename) } + -1 { binary scan $data @${current}a${length} vals($typename) } + } + incr current $length + # special handling of data here + switch -exact -- "$typename" { + delay - + jitter { if { $vals($typename) > 2000000 } { + array set vals [list $typename 2000000] } } + bw { if { $vals($typename) > 1000000000 } { + array set vals [list $typename 0] } } + per { if { $vals($typename) > 100 } { + array set vals [list $typename 100] } } + dup { if { $vals($typename) > 50 } { + array set vals [list $typename 50] } } + emuid1 { if { $emuid1 == -1 } { + set emuid $vals($typename) + } else { ;# this sets emuid2 if we already have emuid1 + array set vals [list emuid2 $vals($typename) ] + array set vals [list emuid1 $emuid1 ] + } + } + if1ipv4 - + if2ipv4 { array set vals [list $typename \ + [ipv4ToString $vals($typename)] ] } + if1mac - + if2mac { array set vals [list $typename \ + [macToString $vals($typename)] ] } + if1ipv6 - + if2ipv6 { array set vals [list $typename \ + [ipv6ToString $vals($typename)] ] } + } + if { $prmsg } { puts -nonewline "$typename=$vals($typename)," } + if { $size == 16 } { incr current $pad } ;# 128-bit vals post-padded + if { $size == -1 } { incr current $pad } ;# string vals post-padded + } + + if { $prmsg == 1 } { puts ") " } + + # perform some sanity checking of the link message + if { $vals(node1num) == $vals(node2num) || \ + $vals(node1num) < 0 || $vals(node2num) < 0 } { + puts -nonewline "link message error - node1=$vals(node1num), " + puts "node2=$vals(node2num)" + return + } + + # convert node number to node and check for node existance + set node1 "n$vals(node1num)" + set node2 "n$vals(node2num)" + if { [lsearch $node_list $node1] == -1 || \ + [lsearch $node_list $node2] == -1 } { + puts "Node ($node1/$node2) in link message not found, dropping" + return + } + + # set IPv4 and IPv6 address if specified, otherwise may be automatic + set prefix1 [chooseIfName $node1 $node2] + set prefix2 [chooseIfName $node2 $node1] + foreach i "1 2" { + # set interface name/number + if { $vals(if${i}num) == -1 } { + set ifname [newIfc [set prefix${i}] [set node${i}]] + set prefixlen [string length [set prefix${i}]] + set if${i}num [string range $ifname $prefixlen end] + array set vals [list if${i}num [set if${i}num]] + } + set ifname [set prefix${i}]$vals(if${i}num) + array set vals [list if${i}name $ifname] + # record IPv4/IPv6 addresses for newGUILink + foreach j "4 6" { + if { $vals(if${i}ipv${j}) != -1 } { + setIfcIPv${j}addr [set node${i}] $ifname \ + $vals(if${i}ipv${j})/$vals(if${i}ipv${j}mask) + } + } + } + # adopt network address for WLAN (WLAN must be node 1) + if { [nodeType $node1] == "wlan" } { + set v4addr $vals(if2ipv4) + if { $v4addr != -1 } { + set v4net [ipv4ToNet $v4addr $vals(if2ipv4mask)] + setIfcIPv4addr $node1 wireless "$v4net/$vals(if2ipv4mask)" + } + set v6addr $vals(if2ipv6) + if { $v6addr != -1 } { + set v6net [ipv6ToNet $v6addr $vals(if2ipv6mask)] + setIfcIPv6addr $node1 wireless "${v6net}::0/$vals(if2ipv6mask)" + } + } + + if { $execMode == "batch" } { + return ;# no GUI to update in batch mode + } + # treat 100% loss as link delete + if { $flags == 0 && $vals(per) == 100 } { + apiLinkDelete $node1 $node2 vals + return + } + + # now we have all the information about this node + switch -exact -- "$flags" { + 0 { apiLinkAddModify $node1 $node2 vals 0 } + 1 { apiLinkAddModify $node1 $node2 vals 1 } + 2 { apiLinkDelete $node1 $node2 vals } + default { puts "LINK: unsupported flags ($flags)"; return } + } +} + +# +# add or modify a link +# if add flag is set, check if two nodes are part of same wlan, and do wlan +# linkage, or add a wired link; otherwise modify wired/wireless link with +# supplied parameters +proc apiLinkAddModify { node1 node2 vals_ref add } { + global eid defLinkWidth + set c .c + upvar $vals_ref vals + + set labelstr ""; # build a label string + if {$vals(bw) > 0} { set labelstr "$labelstr$vals(bw) " } + if {$vals(delay) > 0} { set labelstr \ + "$labelstr[expr $vals(delay)/1000] ms " } + if {$vals(per) > 0} { set labelstr "${labelstr}E=$vals(per)% " } + if {$vals(dup) > 0} { set labelstr "${labelstr}D=$vals(dup)% " } + if {$vals(jitter) > 0} { + set labelstr "${labelstr}J=[expr $vals(jitter)/1000] ms " } + + set params ""; # parameters to send to ng_wlan netgraph node + if { $labelstr != "" } { + set params "delay=$vals(delay) bandwidth=$vals(bw) per=$vals(per)" + set params "$params duplicate=$vals(dup) jitter=$vals(jitter)" + } + if {$vals(key) > -1} { + if { [nodeType $node1] == "tunnel" } { + netconfInsertSection $node1 [list "tunnel-key" $vals(key)] + } + if { [nodeType $node2] == "tunnel" } { + netconfInsertSection $node2 [list "tunnel-key" $vals(key)] + } + } + + # look for a wired link in the link list + set wired_link [linkByPeers $node1 $node2] + if { $wired_link != "" && $add == 0 } { ;# wired link exists, modify it + #puts "modify wired link" + setLinkBandwidth $wired_link $vals(bw) + setLinkDelay $wired_link $vals(delay) + setLinkBER $wired_link $vals(per) + setLinkDup $wired_link $vals(dup) + setLinkJitter $wired_link $vals(jitter) + updateLinkLabel $wired_link + updateLinkGuiAttr $wired_link $vals(guiattr) + return + # if add flag is set and a wired link already exists, assume wlan linkage + # special case: rj45 model=1 means link via wireless + } elseif {[nodeType $node1] == "rj45" || [nodeType $node2] == "rj45"} { + if { [nodeType $node1] == "rj45" } { + set rj45node $node1; set othernode $node2; + } else { set rj45node $node2; set othernode $node1; } + if { [netconfFetchSection $rj45node model] == 1 } { + set wlan [findWlanNodes $othernode] + if {$wlan != ""} {newGUILink $wlan $rj45node};# link rj4node to wlan + } + } + + # no wired link; determine if both nodes belong to the same wlan, and + # link them; otherwise add a wired link if add flag is set + set wlan $vals(netid) + if { $wlan < 0 } { + # WLAN not specified with netid, search for common WLAN + set wlans1 [findWlanNodes $node1] + set wlans2 [findWlanNodes $node2] + foreach w $wlans1 { + if { [lsearch -exact $wlans2 $w] < 0 } { continue } + set wlan $w + break + } + } + + if { $wlan < 0 } { ;# no common wlan + if {$add == 1} { ;# add flag was set - add a wired link + global g_newLink_ifhints + set g_newLink_ifhints [list $vals(if1name) $vals(if2name)] + newGUILink $node1 $node2 + if { [getNodeCanvas $node1] != [getNodeCanvas $node2] } { + set wired_link [linkByPeersMirror $node1 $node2] + } else { + set wired_link [linkByPeers $node1 $node2] + } + setLinkBandwidth $wired_link $vals(bw) + setLinkDelay $wired_link $vals(delay) + setLinkBER $wired_link $vals(per) + setLinkDup $wired_link $vals(dup) + setLinkJitter $wired_link $vals(jitter) + updateLinkLabel $wired_link + updateLinkGuiAttr $wired_link $vals(guiattr) + # adopt link effects for WLAN (WLAN must be node 1) + if { [nodeType $node1] == "wlan" } { + setLinkBandwidth $node1 $vals(bw) + setLinkDelay $node1 $vals(delay) + setLinkBER $node1 $vals(per) + } + return + } else { ;# modify link, but no wired link or common wlan! + puts -nonewline "link modify message received, but no wired link" + puts " or wlan for nodes $node1-$node2, dropping" + return + } + } + + set wlan "n$wlan" + drawWlanLink $node1 $node2 $wlan +} + +# +# delete a link +# +proc apiLinkDelete { node1 node2 vals_ref } { + global eid + upvar $vals_ref vals + set c .c + + # look for a wired link in the link list + set wired_link [linkByPeers $node1 $node2] + if { $wired_link != "" } { + removeGUILink $wired_link non-atomic + return + } + + set wlan $vals(netid) + if { $wlan < 0 } { + # WLAN not specified with netid, search for common WLAN + set wlans1 [findWlanNodes $node1] + set wlans2 [findWlanNodes $node2] + foreach w $wlans1 { + if { [lsearch -exact $wlans2 $w] < 0 } { continue } + set wlan $w + break + } + } + if { $wlan < 0 } { + puts "apiLinkDelete: no common WLAN!" + return + } + set wlan "n$wlan" + + # look for wireless link on the canvas, remove GUI object + $c delete -withtags "wlanlink && $node2 && $node1 && $wlan" + $c delete -withtags "linklabel && $node2 && $node1 && $wlan" +} + +# +# CORE API Execute message TLVs +# +proc parseExecMessage { data len flags channel } { + global node_list curcanvas c router eid showAPI + global XSCALE YSCALE XOFFSET YOFFSET + set prmsg $showAPI + set current 0 + + # set default values + set nodenum 0 + set execnum 0 + set exectime 0 + set execcmd "" + set execres "" + set execstatus 0 + set session "" + + if { $prmsg==1 } { puts -nonewline "EXEC(flags=$flags," } + + # parse each TLV + while { $current < $len } { + # TLV header + set typelength [parseTLVHeader $data current] + set type [lindex $typelength 0] + set length [lindex $typelength 1] + if { $length == 0 || $length == "" } { break } + set pad [pad_32bit $length] + # verbose debugging + #puts "exec tlv type=$type length=$length pad=$pad current=$current" + if { [expr {$current + $length + $pad}] > $len } { + puts "error with EXEC message length (len=$len, TLV length=$length)" + break + } + # TLV data + switch -exact -- "$type" { + 1 { + incr current $pad + binary scan $data @${current}I nodenum + if { $prmsg==1 } { puts -nonewline "node=$nodenum/" } + } + 2 { + incr current $pad + binary scan $data @${current}I execnum + if { $prmsg == 1} { puts -nonewline "exec=$execnum," } + } + 3 { + incr current $pad + binary scan $data @${current}I exectime + if { $prmsg == 1} { puts -nonewline "time=$exectime," } + } + 4 { + binary scan $data @${current}a${length} execcmd + if { $prmsg == 1} { puts -nonewline "cmd=$execcmd," } + incr current $pad + } + 5 { + binary scan $data @${current}a${length} execres + if { $prmsg == 1} { puts -nonewline "res=($length bytes)," } + incr current $pad + } + 6 { + incr current $pad + binary scan $data @${current}I execstatus + if { $prmsg == 1} { puts -nonewline "status=$execstatus," } + } + 10 { + binary scan $data @${current}a${length} session + if { $prmsg == 1} { puts -nonewline "session=$session," } + incr current $pad + } + default { + if { $prmsg == 1} { puts -nonewline "unknown=" } + if { $prmsg == 1} { puts -nonewline "$type," } + } + } + # end switch + + # advance current pointer + incr current $length + } + if { $prmsg == 1 } { puts ") "} + + set node "n$nodenum" + set node_id "$eid\_$node" + # check for node existance + if { [lsearch $node_list $node] == -1 } { + puts "Execute message but node ($node) does not exist, dropping." + return + } + global $node + + # Callback support - match execnum from response with original request, and + # invoke type-specific callback + global g_execRequests + foreach type [array names g_execRequests] { + set idx [lsearch $g_execRequests($type) $execnum] + if { $idx > -1 } { + set g_execRequests($type) \ + [lreplace $g_execRequests($type) $idx $idx] + exec_${type}_callback $node $execnum $execcmd $execres $execstatus + return + } + } +} + +# spawn interactive terminal +proc exec_shell_callback { node execnum execcmd execres execstatus } { + #puts "opening terminal for $node by running '$execres'" + set title "CORE: [getNodeName $node] (console)" + set term [get_term_prog false] + set xi [string first "xterm -e" $execres] + + # shell callback already has xterm command, launch it using user-defined + # term program (e.g. remote nodes 'ssh -X -f a.b.c.d xterm -e ...' + if { $xi > -1 } { + set execres [string replace $execres $xi [expr $xi+7] $term] + if { [catch {exec sh -c "$execres" & } ] } { + puts "Warning: failed to open terminal for $node" + } + return + # no xterm command; execute shell callback in a terminal (e.g. local nodes) + } elseif { \ + [catch {eval exec $term "$execres" & } ] } { + puts "Warning: failed to open terminal for $node: ($term $execres)" + } +} + + +# +# CORE API Register message TLVs +# parse register message into plugin capabilities +# +proc parseRegMessage { data len flags channel } { + global regntypes showAPI + set prmsg $showAPI + set current 0 + set str 0 + set session "" + + set plugin_cap_list {} ;# plugin capabilities list + + if { $prmsg==1 } { puts -nonewline "REG(flags=$flags," } + + # parse each TLV + while { $current < $len } { + # TLV header + if { [binary scan $data @${current}cc type length] != 2 } { + puts "TLV header error" + break + } + set length [expr {$length & 0xFF}]; # convert signed to unsigned + if { $length == 0 } { + # prevent endless looping + if { $type == 0 } { + puts -nonewline "(extra padding)" + break + } else { + puts "Found zero-length TLV for type=$type, dropping." + break + } + } + set pad [pad_32bit $length] + # verbose debugging + #puts "tlv type=$type length=$length pad=$pad current=$current" + incr current 2 + # TLV data + if { [info exists regntypes($type)] } { + set plugin_type $regntypes($type) + binary scan $data @${current}a${length} str + if { $prmsg == 1} { puts -nonewline "$plugin_type=$str," } + if { $type == 10 } { ;# session number + set session $str + } else { + lappend plugin_cap_list "$plugin_type=$str" + } + } else { + if { $prmsg == 1} { puts -nonewline "unknown($type)," } + } + incr current $pad + # end switch + + # advance current pointer + incr current $length + } + if { $prmsg == 1 } { puts ") "} + + # reg message with session number indicates the sid of a session that + # was just started from a Python script (via reg exec=scriptfile.py) + if { $session != "" } { + # assume session string only contains one session number + connectShutdownSession connect $channel $session + return + } + + set plugin [pluginByChannel $channel] + if { [setPluginCapList $plugin $plugin_cap_list] < 0 } { + return + } + + # callback to refresh any open dialogs this message may refresh + pluginsConfigRefreshCallback +} + +proc parseConfMessage { data len flags channel } { + global showAPI node_list MACHINE_TYPES + set prmsg $showAPI + set current 0 + set str 0 + set nodenum -1 + set obj "" + set tflags 0 + set types {} + set values {} + set captions {} + set bitmap {} + set possible_values {} + set groups {} + set opaque {} + set session "" + set netid -1 + + if { $prmsg==1 } { puts -nonewline "CONF(flags=$flags," } + + # parse each TLV + while { $current < $len } { + set typelength [parseTLVHeader $data current] + set type [lindex $typelength 0] + set length [lindex $typelength 1] + set pad [pad_32bit $length] + if { $length == 0 || $length == "" } { + # allow some zero-length string TLVs + if { $type < 5 || $type > 9 } { break } + } + # verbose debugging + #puts "tlv type=$type length=$length pad=$pad current=$current" + # TLV data + switch -exact -- "$type" { + 1 { + incr current $pad + binary scan $data @${current}I nodenum + if { $prmsg == 1} { puts -nonewline "node=$nodenum/" } + } + 2 { + binary scan $data @${current}a${length} obj + if { $prmsg == 1} { puts -nonewline "obj=$obj," } + incr current $pad + } + 3 { + binary scan $data @${current}S tflags + if { $prmsg == 1} { puts -nonewline "cflags=$tflags," } + } + 4 { + set type 0 + set types {} + if { $prmsg == 1} { puts -nonewline "types=" } + # number of 16-bit values + set types_len $length + # get each 16-bit type value, add to list + while {$types_len > 0} { + binary scan $data @${current}S type + if {$type > 0 && $type < 12} { + lappend types $type + if { $prmsg == 1} { puts -nonewline "$type/" } + } + incr current 2 + incr types_len -2 + } + if { $prmsg == 1} { puts -nonewline "," } + incr current -$length; # length incremented below + incr current $pad + } + 5 { + set values {} + binary scan $data @${current}a${length} vals + if { $prmsg == 1} { puts -nonewline "vals=$vals," } + set values [split $vals |] + incr current $pad + } + 6 { + set captions {} + binary scan $data @${current}a${length} capt + if { $prmsg == 1} { puts -nonewline "capt=$capt," } + set captions [split $capt |] + incr current $pad + } + 7 { + set bitmap {} + binary scan $data @${current}a${length} bitmap + if { $prmsg == 1} { puts -nonewline "bitmap," } + incr current $pad + } + 8 { + set possible_values {} + binary scan $data @${current}a${length} pvals + if { $prmsg == 1} { puts -nonewline "pvals=$pvals," } + set possible_values [split $pvals |] + incr current $pad + } + 9 { + set groups {} + binary scan $data @${current}a${length} groupsstr + if { $prmsg == 1} { puts -nonewline "groups=$groupsstr," } + set groups [split $groupsstr |] + incr current $pad + } + 10 { + binary scan $data @${current}a${length} session + if { $prmsg == 1} { puts -nonewline "session=$session," } + incr current $pad + } + 35 { + incr current $pad + binary scan $data @${current}I netid + if { $prmsg == 1} { puts -nonewline "netid=$netid/" } + } + 80 { + set opaque {} + binary scan $data @${current}a${length} opaquestr + if { $prmsg == 1} { puts -nonewline "opaque=$opaquestr," } + set opaque [split $opaquestr |] + incr current $pad + } + default { + if { $prmsg == 1} { puts -nonewline "unknown=" } + if { $prmsg == 1} { puts -nonewline "$type," } + } + } + # end switch + + # advance current pointer + incr current $length + } + + if { $prmsg == 1 } { puts ") "} + + set objs_ok [concat "services session metadata emane" $MACHINE_TYPES] + if { $nodenum > -1 } { + set node "n$nodenum" + } else { + set node "" + } + # check for node existance + if { [lsearch $node_list $node] == -1 } { + if { [lsearch $objs_ok $obj] < 0 } { + set msg "Configure message for $obj but node ($node) does" + set msg "$msg not exist, dropping." + puts $msg + return + } + } else { + global $node + } + + # for handling node services + # this could be improved, instead of checking for the hard-coded object + # "services" and opaque data for service customization + if { $obj == "services" } { + if { $tflags & 0x2 } { ;# update flag + if { $opaque != "" } { + set services [lindex [split $opaque ":"] 1] + set services [split $services ","] + customizeServiceValues n$nodenum $values $services + } + # TODO: save services config with the node + } elseif { $tflags & 0x1 } { ;# request flag + # TODO: something else + } else { + popupServicesConfig $channel n$nodenum $types $values $captions \ + $possible_values $groups $session + } + return + # metadata received upon XML file load + } elseif { $obj == "metadata" } { + parseMetaData $values + return + # session options received upon XML file load + } elseif { $obj == "session" && $tflags & 0x2 } { + setSessionOptions $types $values + return + } + # handle node machine-type profile + if { [lsearch $MACHINE_TYPES $obj] != -1 } { + if { $tflags == 0 } { + popupNodeProfileConfig $channel n$nodenum $obj $types $values \ + $captions $bitmap $possible_values $groups $session \ + $opaque + } else { + puts -nonewline "warning: received Configure message for profile " + puts "with unexpected flags!" + } + return + } + + # update the configuration for a node without displaying dialog box + if { $tflags & 0x2 } { + # this is similar to popupCapabilityConfigApply + setCustomConfig $node $obj $types $values 0 + if { $obj != "emane" && [nodeType $node] == "wlan"} { + set section [list mobmodel coreapi $obj] + netconfInsertSection $node $section + } + # configuration request - unhandled + } elseif { $tflags & 0x1 } { + # configuration response data from our request (from GUI plugin configure) + } else { + popupCapabilityConfig $channel n$nodenum $obj $types $values \ + $captions $bitmap $possible_values $groups + } +} + +# process metadata received from Conf Message when loading XML +proc parseMetaData { values } { + global canvas_list annotation_list execMode g_comments + + foreach value $values { + # data looks like this: "annotation a1={iconcoords {514.0 132.0...}}" + lassign [splitKeyValue $value] key object_config + lassign $key class object + # metadata with no object name e.g. comments="Comment text" + if { "$class" == "comments" } { + set g_comments $object_config + continue + } elseif { "$class" == "global_options" } { + foreach opt $object_config { + lassign [split $opt =] key value + setGlobalOption $key $value + } + continue + } + # metadata having class and object name + if {"$class" == "" || $object == ""} { + puts "warning: invalid metadata value '$value'" + } + if { "$class" == "canvas" } { + if { [lsearch $canvas_list $object] < 0 } { + lappend canvas_list $object + } + } elseif { "$class" == "annotation" } { + if { [lsearch $annotation_list $object] < 0 } { + lappend annotation_list $object + } + } else { + puts "metadata parsing error: unknown object class $class" + } + global $object + set $object $object_config + } + + if { $execMode == "batch" } { return } + switchCanvas none + redrawAll +} + +proc parseFileMessage { data len flags channel } { + global showAPI node_list + set prmsg $showAPI + + array set tlvnames { 1 num 2 name 3 mode 4 fno 5 type 6 sname \ + 10 session 16 data 17 cdata } + array set tlvsizes { num 4 name -1 mode -3 fno 2 type -1 sname -1 \ + session -1 data -1 cdata -1 } + array set defvals { num -1 name "" mode -1 fno -1 type "" sname "" \ + session "" data "" cdata "" } + + if { $prmsg==1 } { puts -nonewline "FILE(flags=$flags," } + array set vals [parseMessage $data $len $flags [array get tlvnames] \ + [array get tlvsizes] [array get defvals]] + if { $prmsg } { puts ") "} + + # hook scripts received in File Message + if { [string range $vals(type) 0 4] == "hook:" } { + global g_hook_scripts + set state [string range $vals(type) 5 end] + lappend g_hook_scripts [list $vals(name) $state $vals(data)] + return + } + + # required fields + foreach t "num name data" { + if { $vals($t) == $defvals($t) } { + puts "Received File Message without $t, dropping."; return; + } + } + + # check for node existance + set node "n$vals(num)" + if { [lsearch $node_list $node] == -1 } { + puts "File message but node ($node) does not exist, dropping." + return + } else { + global $node + } + + # service customization received in File Message + if { [string range $vals(type) 0 7] == "service:" } { + customizeServiceFile $node $vals(name) $vals(type) $vals(data) true + } +} + +proc parseEventMessage { data len flags channel } { + global showAPI eventtypes g_traffic_start_opt execMode node_list + set prmsg $showAPI + set current 0 + set nodenum -1 + set eventtype -1 + set eventname "" + set eventdata "" + set eventtime "" + set session "" + + if { $prmsg==1 } { puts -nonewline "EVENT(flags=$flags," } + + # parse each TLV + while { $current < $len } { + set typelength [parseTLVHeader $data current] + set type [lindex $typelength 0] + set length [lindex $typelength 1] + if { $length == 0 || $length == "" } { break } + set pad [pad_32bit $length] + # verbose debugging + #puts "tlv type=$type length=$length pad=$pad current=$current" + # TLV data + switch -exact -- "$type" { + 1 { + incr current $pad + binary scan $data @${current}I nodenum + if { $prmsg == 1} { puts -nonewline "node=$nodenum," } + } + 2 { + incr current $pad + binary scan $data @${current}I eventtype + if { $prmsg == 1} { + set typestr "" + foreach t [array names eventtypes] { + if { $eventtypes($t) == $eventtype } { + set typestr "-$t" + break + } + } + puts -nonewline "type=$eventtype$typestr," + } + } + 3 { + binary scan $data @${current}a${length} eventname + if { $prmsg == 1} { puts -nonewline "name=$eventname," } + incr current $pad + } + 4 { + binary scan $data @${current}a${length} eventdata + if { $prmsg == 1} { puts -nonewline "data=$eventdata," } + incr current $pad + } + 5 { + binary scan $data @${current}a${length} eventtime + if { $prmsg == 1} { puts -nonewline "time=$eventtime," } + incr current $pad + } + 10 { + binary scan $data @${current}a${length} session + if { $prmsg == 1} { puts -nonewline "session=$session," } + incr current $pad + } + default { + if { $prmsg == 1} { puts -nonewline "unknown=" } + if { $prmsg == 1} { puts -nonewline "$type," } + } + } + # end switch + + # advance current pointer + incr current $length + } + + if { $prmsg == 1 } { puts ") "} + + # TODO: take other actions here based on Event Message + if { $eventtype == 4 } { ;# entered the runtime state + if { $g_traffic_start_opt == 1 } { startTrafficScripts } + if { $execMode == "batch" } { + global g_current_session + puts "disconnecting. Session id is $g_current_session" + exit.real + } + } elseif { $eventtype == 6 } { ;# shutdown state + set name [lindex [getEmulPlugin "*"] 0] + if { [getAssignedRemoteServers] == "" } { + # start a new session if not distributed + # otherwise we need to allow time for node delete messages + # from other servers + pluginConnect $name disconnect 1 + pluginConnect $name connect 1 + } + } elseif { $eventtype >= 7 || $eventtype <= 10 } { + if { [string range $eventname 0 8] == "mobility:" } { + set node "n$nodenum" + if {[lsearch $node_list $node] == -1} { + puts "Event message with unknown node %nodenum." + return + } + handleMobilityScriptEvent $node $eventtype $eventdata $eventtime + } + } +} + +proc parseSessionMessage { data len flags channel } { + global showAPI g_current_session g_session_dialog_hint execMode + set prmsg $showAPI + set current 0 + set sessionids {} + set sessionnames {} + set sessionfiles {} + set nodecounts {} + set sessiondates {} + set thumbs {} + set sessionopaque {} + + if { $prmsg==1 } { puts -nonewline "SESSION(flags=$flags," } + + # parse each TLV + while { $current < $len } { + set typelength [parseTLVHeader $data current] + set type [lindex $typelength 0] + set length [lindex $typelength 1] + if { $length == 0 || $length == "" } { + puts "warning: zero-length TLV, discarding remainder of message!" + break + } + set pad [pad_32bit $length] + # verbose debugging + #puts "tlv type=$type length=$length pad=$pad current=$current" + # TLV data + switch -exact -- "$type" { + 1 { + set sessionids {} + binary scan $data @${current}a${length} sids + if { $prmsg == 1} { puts -nonewline "sids=$sids," } + set sessionids [split $sids |] + incr current $pad + } + 2 { + set sessionnames {} + binary scan $data @${current}a${length} snames + if { $prmsg == 1} { puts -nonewline "names=$snames," } + set sessionnames [split $snames |] + incr current $pad + } + 3 { + set sessionfiles {} + binary scan $data @${current}a${length} sfiles + if { $prmsg == 1} { puts -nonewline "files=$sfiles," } + set sessionfiles [split $sfiles |] + incr current $pad + } + 4 { + set nodecounts {} + binary scan $data @${current}a${length} ncs + if { $prmsg == 1} { puts -nonewline "ncs=$ncs," } + set nodecounts [split $ncs |] + incr current $pad + } + 5 { + set sessiondates {} + binary scan $data @${current}a${length} sdates + if { $prmsg == 1} { puts -nonewline "dates=$sdates," } + set sessiondates [split $sdates |] + incr current $pad + } + 6 { + set thumbs {} + binary scan $data @${current}a${length} th + if { $prmsg == 1} { puts -nonewline "thumbs=$th," } + set thumbs [split $th |] + incr current $pad + } + 10 { + set sessionopaque {} + binary scan $data @${current}a${length} sessionopaque + if { $prmsg == 1} { puts -nonewline "$sessionopaque," } + incr current $pad + } + default { + if { $prmsg == 1} { puts -nonewline "unknown=" } + if { $prmsg == 1} { puts -nonewline "$type," } + } + } + # end switch + + # advance current pointer + incr current $length + } + + if { $prmsg == 1 } { puts ") "} + + if {$g_current_session == 0} { + # set the current session to the channel port number + set current_session [lindex [fconfigure $channel -sockname] 2] + } else { + set current_session $g_current_session + } + + if {[lsearch $sessionids $current_session] == -1} { + puts -nonewline "*** warning: current session ($g_current_session) " + puts "not found in session list: $sessionids" + } + + set orig_session_choice $g_current_session + set g_current_session $current_session + setGuiTitle "" + + if {$execMode == "closebatch"} { + # we're going to close some session, so this is expected + global g_session_choice + + if {[lsearch $sessionids $g_session_choice] == -1} { + puts -nonewline "*** warning: current session ($g_session_choice) " + puts "not found in session list: $sessionids" + } else { + set flags 0x2 ;# delete flag + set sid $g_session_choice + set name "" + set f "" + set nodecount "" + set thumb "" + set user "" + sendSessionMessage $channel $flags $sid $name $f $nodecount $thumb $user + + puts "Session shutdown message sent." + } + exit.real + } + + if {$orig_session_choice == 0 && [llength $sessionids] == 1} { + # we just started up and only the current session exists + set g_session_dialog_hint 0 + return + } + + if {$execMode == "batch"} { + puts "Another session is active." + exit.real + } + + if { $g_session_dialog_hint } { + popupSessionConfig $channel $sessionids $sessionnames $sessionfiles \ + $nodecounts $sessiondates $thumbs $sessionopaque + } + set g_session_dialog_hint 0 +} + +# parse message TLVs given the possible TLV names and sizes +# default values are supplied in defaultvals, parsed values are returned +proc parseMessage { data len flags tlvnamesl tlvsizesl defaultvalsl } { + global showAPI + set prmsg $showAPI + + array set tlvnames $tlvnamesl + array set tlvsizes $tlvsizesl + array set vals $defaultvalsl ;# this array is returned + + set current 0 + + while { $current < $len } { + set typelength [parseTLVHeader $data current] + set type [lindex $typelength 0] + set length [lindex $typelength 1] + if { $length == 0 || $length == "" } { break } + set pad [pad_32bit $length] + + if {![info exists tlvnames($type)] } { ;# unknown TLV type + if { $prmsg } { puts -nonewline "unknown=$type," } + incr current $length + continue + } + set tlvname $tlvnames($type) + set size $tlvsizes($tlvname) + # 32-bit and 64-bit vals pre-padded + if { $size == 4 || $size == 8 } { incr current $pad } + # read TLV data depending on size + switch -exact -- "$size" { + 2 { binary scan $data @${current}S vals($tlvname) } + 4 { binary scan $data @${current}I vals($tlvname) } + 8 { binary scan $data @${current}W vals($tlvname) } + 16 { binary scan $data @${current}c16 vals($tlvname) } + -1 { binary scan $data @${current}a${length} vals($tlvname) } + } + if { $size == -1 } { incr current $pad } ;# string vals post-padded + if { $type == 6 } { incr current $pad } ;# 128-bit vals post-padded + incr current $length + + if { $prmsg } { puts -nonewline "$tlvname=$vals($tlvname)," } + } + return [array get vals] +} + +proc parseExceptionMessage { data len flags channel } { + global showAPI + set prmsg $showAPI + + array set typenames { 1 num 2 sess 3 level 4 src 5 date 6 txt 10 opaque } + array set typesizes { num 4 sess -1 level 2 src -1 date -1 txt -1 \ + opaque -1 } + array set defvals { num -1 sess "" level -1 src "" date "" txt "" opaque ""} + + if { $prmsg==1 } { puts -nonewline "EXCEPTION(flags=$flags," } + array set vals [parseMessage $data $len $flags [array get typenames] \ + [array get typesizes] [array get defvals]] + if { $prmsg == 1 } { puts ") "} + + if { $vals(level) == $defvals(level) } { + puts "Exception Message received without an exception level."; return; + } + + receiveException [array get vals] +} + +proc sendNodePosMessage { channel node nodeid x y wlanid force } { + global showAPI + set prmsg $showAPI + + if { $channel == -1 } { + set channel [lindex [getEmulPlugin $node] 2] + if { $channel == -1 } { return } + } + set node_num [string range $node 1 end] + set x [format "%u" [expr int($x)]] + set y [format "%u" [expr int($y)]] + set len [expr 8+4+4] ;# node number, x, y + if {$nodeid > -1} { incr len 8 } + if {$wlanid > -1} { incr len 8 } + if {$force == 1 } { set crit 0x4 } else { set crit 0x0 } + #puts "sending [expr $len+4] bytes: $nodeid $x $y $wlanid" + if { $prmsg == 1 } { + puts -nonewline ">NODE(flags=$crit,$node,x=$x,y=$y" } + set msg [binary format ccSc2sIc2Sc2S \ + 1 $crit $len \ + {1 4} 0 $node_num \ + {0x20 2} $x \ + {0x21 2} $y + ] + + set msg2 "" + set msg3 "" + if { $nodeid > -1 } { + if { $prmsg == 1 } { puts -nonewline ",emuid=$nodeid" } + set msg2 [binary format c2sI {0x23 4} 0 $nodeid] + } + if { $wlanid > -1 } { + if { $prmsg == 1 } { puts -nonewline ",netid=$wlanid" } + set msg3 [binary format c2sI {0x24 4} 0 $wlanid] + } + + if { $prmsg == 1 } { puts ")" } + puts -nonewline $channel $msg$msg2$msg3 + flushChannel channel "Error sending node position" +} + +# build a new node +proc sendNodeAddMessage { channel node } { + global showAPI CORE_DATA_DIR + set prmsg $showAPI + set len [expr {8+8+4+4}]; # node number, type, x, y + set ipv4 0 + set ipv6 0 + set macstr "" + set wireless 0 + + # type, name + set type [getNodeTypeAPI $node] + set model [getNodeModel $node] + set model_len [string length $model] + set model_pad_len [pad_32bit $model_len] + set model_pad [binary format x$model_pad_len] + set name [getNodeName $node] + set name_len [string length $name] + set name_pad_len [pad_32bit $name_len] + set name_pad [binary format x$name_pad_len] + incr len [expr { 2+$name_len+$name_pad_len}] + if {$model_len > 0} { incr len [expr {2+$model_len+$model_pad_len }] } + set node_num [string range $node 1 end] + + # fixup node type for EMANE-enabled WLAN nodes + set opaque "" + if { [isEmane $node] } { set type 0xA } + + # emulation server (node location) + set emusrv [getNodeLocation $node] + set emusrv_len [string length $emusrv] + set emusrv_pad_len [pad_32bit $emusrv_len] + set emusrv_pad [binary format x$emusrv_pad_len] + if { $emusrv_len > 0 } { incr len [expr {2+$emusrv_len+$emusrv_pad_len } ] } + + # canvas + set canv [getNodeCanvas $node] + if { $canv != "c1" } { + set canv [string range $canv 1 end] ;# convert "c2" to "2" + incr len 4 + } else { + set canv "" + } + + # services + set svc [getNodeServices $node false] + set svc [join $svc "|"] + set svc_len [string length $svc] + set svc_pad_len [pad_32bit $svc_len] + set svc_pad [binary format x$svc_pad_len] + if { $svc_len > 0 } { incr len [expr {2+$svc_len+$svc_pad_len } ] } + + # icon + set icon [getCustomImage $node] + if { [file dirname $icon] == "$CORE_DATA_DIR/icons/normal" } { + set icon [file tail $icon] ;# don't include standard icon path + } + set icon_len [string length $icon] + set icon_pad_len [pad_32bit $icon_len] + set icon_pad [binary format x$icon_pad_len] + if { $icon_len > 0 } { incr len [expr {2+$icon_len+$icon_pad_len} ] } + + # opaque data + set opaque_len [string length $opaque] + set opaque_pad_len [pad_32bit $opaque_len] + set opaque_pad [binary format x$opaque_pad_len] + if { $opaque_len > 0 } { incr len [expr {2+$opaque_len+$opaque_pad_len} ] } + + # length must be calculated before this + if { $prmsg == 1 } { + puts -nonewline ">NODE(flags=add/str,$node,type=$type,$name," + } + set msg [binary format c2Sc2sIc2sIcc \ + {0x1 0x11} $len \ + {0x1 4} 0 $node_num \ + {0x2 4} 0 $type \ + 0x3 $name_len ] + puts -nonewline $channel $msg$name$name_pad + + # IPv4 address + if { $ipv4 > 0 } { + if { $prmsg == 1 } { puts -nonewline "$ipv4str," } + set msg [binary format c2sI {0x4 4} 0 $ipv4] + puts -nonewline $channel $msg + } + + # MAC address + if { $macstr != "" } { + if { $prmsg == 1 } { puts -nonewline "$macstr," } + set mac [join [split $macstr ":"] ""] + puts -nonewline $channel [binary format c2x2W {0x5 8} 0x$mac] + } + + # IPv6 address + if { $ipv6 != 0 } { + if { $prmsg == 1 } { puts -nonewline "$ipv6str," } + set msg [binary format c2 {0x6 16} ] + puts -nonewline $channel $msg + foreach ipv6w [split $ipv6 ":"] { + set msg [binary format S 0x$ipv6w] + puts -nonewline $channel $msg + } + puts -nonewline $channel [binary format x2]; # 2 bytes padding + } + + # model type + if { $model_len > 0 } { + set mh [binary format cc 0x7 $model_len] + puts -nonewline $channel $mh$model$model_pad + if { $prmsg == 1 } { puts -nonewline "m=$model," } + } + + # emulation server + if { $emusrv_len > 0 } { + puts -nonewline $channel [binary format cc 0x8 $emusrv_len] + puts -nonewline $channel $emusrv$emusrv_pad + if { $prmsg == 1 } { puts -nonewline "srv=$emusrv," } + } + + # X,Y coordinates + set coords [getNodeCoords $node] + set x [format "%u" [expr int([lindex $coords 0])]] + set y [format "%u" [expr int([lindex $coords 1])]] + set msg [binary format c2Sc2S {0x20 2} $x {0x21 2} $y] + puts -nonewline $channel $msg + + # canvas + if { $canv != "" } { + if { $prmsg == 1 } { puts -nonewline "canvas=$canv," } + set msg [binary format c2S {0x22 2} $canv] + puts -nonewline $channel $msg + } + + if { $prmsg == 1 } { puts -nonewline "x=$x,y=$y" } + + # services + if { $svc_len > 0 } { + puts -nonewline $channel [binary format cc 0x25 $svc_len] + puts -nonewline $channel $svc$svc_pad + if { $prmsg == 1 } { puts -nonewline ",svc=$svc" } + } + + # icon + if { $icon_len > 0 } { + puts -nonewline $channel [binary format cc 0x42 $icon_len] + puts -nonewline $channel $icon$icon_pad + if { $prmsg == 1 } { puts -nonewline ",icon=$icon" } + } + + # opaque data + if { $opaque_len > 0 } { + puts -nonewline $channel [binary format cc 0x50 $opaque_len] + puts -nonewline $channel $opaque$opaque_pad + if { $prmsg == 1 } { puts -nonewline ",opaque=$opaque" } + } + + if { $prmsg == 1 } { puts ")" } + + flushChannel channel "Error sending node add" +} + +# delete a node +proc sendNodeDelMessage { channel node } { + global showAPI + set prmsg $showAPI + set len 8; # node number + set node_num [string range $node 1 end] + + if { $prmsg == 1 } { puts ">NODE(flags=del/str,$node_num)" } + set msg [binary format c2Sc2sI \ + {0x1 0x12} $len \ + {0x1 4} 0 $node_num ] + puts -nonewline $channel $msg + flushChannel channel "Error sending node delete" +} + +# send a message to build, modify, or delete a link +# type should indicate add/delete/link/unlink +proc sendLinkMessage { channel link type } { + global showAPI + set prmsg $showAPI + + set node1 [lindex [linkPeers $link] 0] + set node2 [lindex [linkPeers $link] 1] + set if1 [ifcByPeer $node1 $node2]; set if2 [ifcByPeer $node2 $node1] + if { [nodeType $node1] == "pseudo" } { return } ;# never seems to occur + if { [nodeType $node2] == "pseudo" } { + set mirror2 [getLinkMirror $node2] + set node2 [getNodeName $node2] + if { [string range $node1 1 end] > [string range $node2 1 end] } { + return ;# only send one link message (for two pseudo-links) + } + set if2 [ifcByPeer $node2 $mirror2] + } + set node1_num [string range $node1 1 end] + set node2_num [string range $node2 1 end] + + # set flags and link message type from supplied type parameter + set flags 0 + set ltype 1 ;# add/delete a link (not wireless link/unlink) + set netid -1 + if { $type == "add" || $type == "link" } { + set flags 1 + } elseif { $type == "delete" || $type == "unlink" } { + set flags 2 + } + if { $type == "link" || $type == "unlink" } { + set ltype 0 ;# a wireless link/unlink event + set tmp [getLinkOpaque $link net] + if { $tmp != "" } { set netid [string range $tmp 1 end] } + } + + set key "" + if { [nodeType $node1] == "tunnel" } { + set key [netconfFetchSection $node1 "tunnel-key"] + if { $key == "" } { set key 1 } + } + if {[nodeType $node2] == "tunnel" } { + set key [netconfFetchSection $node2 "tunnel-key"] + if { $key == "" } { set key 1 } + } + + if { $prmsg == 1 } { + puts -nonewline ">LINK(flags=$flags,$node1_num-$node2_num," + } + + # len = node1num, node2num, type + set len [expr {8+8+8}] + set delay [getLinkDelay $link] + if { $delay == "" } { set delay 0 } + set bw [getLinkBandwidth $link] + if { $bw == "" } { set bw 0 } + set per [getLinkBER $link]; # PER and BER + if { $per == "" } { set per 0 } + set per_len 0 + set per_msg [buildStringTLV 0x5 $per per_len] + set dup [getLinkDup $link] + if { $dup == "" } { set dup 0 } + set dup_len 0 + set dup_msg [buildStringTLV 0x6 $dup dup_len] + if { $type != "delete" } { + incr len [expr {12+12+$per_len+$dup_len}] ;# delay,bw,per,dup + if {$prmsg==1 } { + puts -nonewline "$delay,$bw,$per,$dup," + } + } + # TODO: jitter, mer, burst, mburst + if { $prmsg == 1 } { puts -nonewline "type=$ltype," } + if { $netid > -1 } { + incr len 8 + if { $prmsg == 1 } { puts -nonewline ",netid=$netid" } + } + if { $key != "" } { + incr len 8 + if { $prmsg == 1 } { puts -nonewline "key=$key," } + } + + set if1num [ifcNameToNum $if1]; set if2num [ifcNameToNum $if2] + set if1ipv4 0; set if2ipv4 0; set if1ipv6 ""; set if2ipv6 ""; + set if1ipv4mask 0; set if2ipv4mask 0; + set if1ipv6mask ""; set if2ipv6mask ""; set if1mac ""; set if2mac ""; + + if { $if1num >= 0 && ([[typemodel $node1].layer] == "NETWORK" || \ + [nodeType $node1] == "tunnel") } { + incr len 4 + if { $prmsg == 1 } { puts -nonewline "if1n=$if1num," } + if { $type != "delete" } { + getIfcAddrs $node1 $if1 if1ipv4 if1ipv6 if1mac if1ipv4mask \ + if1ipv6mask len + } + } + if { $if2num >= 0 && ([[typemodel $node2].layer] == "NETWORK" || \ + [nodeType $node2] == "tunnel") } { + incr len 4 + if { $prmsg == 1 } { puts -nonewline "if2n=$if2num," } + if { $type != "delete" } { + getIfcAddrs $node2 $if2 if2ipv4 if2ipv6 if2mac if2ipv4mask \ + if2ipv6mask len + } + } + + # start building the binary message on channel + # length must be calculated before this + set msg [binary format ccSc2sIc2sI \ + {0x2} $flags $len \ + {0x1 4} 0 $node1_num \ + {0x2 4} 0 $node2_num ] + puts -nonewline $channel $msg + + if { $type != "delete" } { + puts -nonewline $channel [binary format c2sW {0x3 8} 0 $delay] + puts -nonewline $channel [binary format c2sW {0x4 8} 0 $bw] + puts -nonewline $channel $per_msg + puts -nonewline $channel $dup_msg + } + # TODO: jitter, mer, burst, mburst + + # link type + puts -nonewline $channel [binary format c2sI {0x20 4} 0 $ltype] + + # network ID + if { $netid > -1 } { + puts -nonewline $channel [binary format c2sI {0x24 4} 0 $netid] + } + + if { $key != "" } { + puts -nonewline $channel [binary format c2sI {0x25 4} 0 $key] + } + + # interface 1 info + if { $if1num >= 0 && ([[typemodel $node1].layer] == "NETWORK" || \ + [nodeType $node1] == "tunnel") } { + puts -nonewline $channel [ binary format c2S {0x30 2} $if1num ] + } + if { $if1ipv4 > 0 } { puts -nonewline $channel [binary format c2sIc2S \ + {0x31 4} 0 $if1ipv4 {0x32 2} $if1ipv4mask ] } + if { $if1mac != "" } { + set if1mac [join [split $if1mac ":"] ""] + puts -nonewline $channel [binary format c2x2W {0x33 8} 0x$if1mac] + } + if {$if1ipv6 != ""} { puts -nonewline $channel [binary format c2 {0x34 16}] + foreach ipv6w [split $if1ipv6 ":"] { puts -nonewline $channel \ + [binary format S 0x$ipv6w] } + puts -nonewline $channel [binary format x2c2S {0x35 2} $if1ipv6mask] } + + # interface 2 info + if { $if2num >= 0 && ([[typemodel $node2].layer] == "NETWORK" || \ + [nodeType $node2] == "tunnel") } { + puts -nonewline $channel [ binary format c2S {0x36 2} $if2num ] + } + if { $if2ipv4 > 0 } { puts -nonewline $channel [binary format c2sIc2S \ + {0x37 4} 0 $if2ipv4 {0x38 2} $if2ipv4mask ] } + if { $if2mac != "" } { + set if2mac [join [split $if2mac ":"] ""] + puts -nonewline $channel [binary format c2x2W {0x39 8} 0x$if2mac] + } + if {$if2ipv6 != ""} { puts -nonewline $channel [binary format c2 {0x40 16}] + foreach ipv6w [split $if2ipv6 ":"] { puts -nonewline $channel \ + [binary format S 0x$ipv6w] } + puts -nonewline $channel [binary format x2c2S {0x41 2} $if2ipv6mask] } + + if { $prmsg==1 } { puts ")" } + flushChannel channel "Error sending link message" +} + +# helper to get IPv4, IPv6, MAC address and increment length +# also prints TLV-style addresses if showAPI is true +proc getIfcAddrs { node ifc ipv4p ipv6p macp ipv4maskp ipv6maskp lenp } { + global showAPI + upvar $ipv4p ipv4 + upvar $ipv6p ipv6 + upvar $macp mac + upvar $ipv4maskp ipv4mask + upvar $ipv6maskp ipv6mask + upvar $lenp len + + if { $ifc == "" || $node == "" } { return } + + # IPv4 address + set ipv4str [getIfcIPv4addr $node $ifc] + if {$ipv4str != ""} { + set ipv4 [lindex [split $ipv4str /] 0] + if { [info exists ipv4mask ] } { + set ipv4mask [lindex [split $ipv4str / ] 1] + incr len 12; # 8 addr + 4 mask + if { $showAPI == 1 } { puts -nonewline "$ipv4str," } + } else { + incr len 8; # 8 addr + if { $showAPI == 1 } { puts -nonewline "$ipv4," } + } + set ipv4 [stringToIPv4 $ipv4]; # convert to integer + } + + # IPv6 address + set ipv6str [getIfcIPv6addr $node $ifc] + if {$ipv6str != ""} { + set ipv6 [lindex [split $ipv6str /] 0] + if { [info exists ipv6mask ] } { + set ipv6mask [lindex [split $ipv6str / ] 1] + incr len 24; # 20 addr + 4 mask + if { $showAPI == 1 } { puts -nonewline "$ipv6str," } + } else { + incr len 20; # 20 addr + if { $showAPI == 1 } { puts -nonewline "$ipv6," } + } + set ipv6 [expandIPv6 $ipv6]; # convert to long string + } + + # MAC address (from conf if there, otherwise generated) + if { [info exists mac] } { + set mac [lindex [getIfcMacaddr $node $ifc] 0] + if {$mac == ""} { + set mac [getNextMac] + } + if { $showAPI == 1 } { puts -nonewline "$mac," } + incr len 12; + } +} + +# +# Register Message: (registration types) +# This is a simple Register Message, types is an array of +# tuples. +proc sendRegMessage { channel flags types_list } { + global showAPI regtypes + set prmsg $showAPI + + if { $channel == -1 || $channel == "" } { + set plugin [lindex [getEmulPlugin "*"] 0] + set channel [pluginConnect $plugin connect true] + if { $channel == -1 } { return } + } + set len 0 + array set types $types_list + + # array names output is unreliable, sort it + set type_list [lsort -dict [array names types]] + foreach type $type_list { + if { ![info exists regtypes($type)] } { + puts "sendRegMessage: unknown registration type '$type'" + return -1 + } + set str_$type $types($type) + set str_${type}_len [string length [set str_$type]] + set str_${type}_pad_len [pad_32bit [set str_${type}_len]] + set str_${type}_pad [binary format x[set str_${type}_pad_len]] + incr len [expr { 2 + [set str_${type}_len] + [set str_${type}_pad_len]}] + } + + if { $prmsg == 1 } { puts ">REG($type_list)" } + # message header + set msg1 [binary format ccS 4 $flags $len] + puts -nonewline $channel $msg1 + + foreach type $type_list { + set type_num $regtypes($type) + set tlvh [binary format cc $type_num [set str_${type}_len]] + puts -nonewline $channel $tlvh[set str_${type}][set str_${type}_pad] + } + + flushChannel channel "Error: API channel was closed" +} + +# +# Configuration Message: (object, type flags, node) +# This is a simple Configuration Message containing flags +proc sendConfRequestMessage { channel node model flags netid opaque } { + global showAPI + set prmsg $showAPI + + if { $channel == -1 || $channel == "" } { + set pname [lindex [getEmulPlugin $node] 0] + set channel [pluginConnect $pname connect true] + if { $channel == -1 } { return } + } + + set model_len [string length $model] + set model_pad_len [pad_32bit $model_len] + set model_pad [binary format x$model_pad_len ] + set len [expr {4+2+$model_len+$model_pad_len}] + # optional network ID to provide Netgraph mapping + if { $netid != -1 } { incr len 8 } + # convert from node name to number + if { [string is alpha [string range $node 0 0]] } { + set node [string range $node 1 end] + } + + if { $node > 0 } { incr len 8 } + # add a session number when configuring services + set session "" + set session_len 0 + set session_pad_len 0 + set session_pad "" + if { $node <= 0 && $model == "services" } { + global g_current_session + set session [format "0x%x" $g_current_session] + set session_len [string length $session] + set session_pad_len [pad_32bit $session_len] + set session_pad [binary format x$session_pad_len] + incr len [expr {2 + $session_len + $session_pad_len}] + } + # opaque data - used when custom configuring services + set opaque_len 0 + set msgop [buildStringTLV 0x50 $opaque opaque_len] + if { $opaque_len > 0 } { incr len $opaque_len } + + if { $prmsg == 1 } { + puts -nonewline ">CONF(flags=0," + if { $node > 0 } { puts -nonewline "node=$node," } + puts -nonewline "obj=$model,cflags=$flags" + if { $session != "" } { puts -nonewline ",session=$session" } + if { $netid > -1 } { puts -nonewline ",netid=$netid" } + if { $opaque_len > 0 } { puts -nonewline ",opaque=$opaque" } + puts ") request" + } + # header, node node number, node model header + set msg1 [binary format c2S {5 0} $len ] + set msg1b "" + if { $node > 0 } { set msg1b [binary format c2sI {1 4} 0 $node] } + set msg1c [binary format cc 2 $model_len] + # request flag + set msg2 [binary format c2S {3 2} $flags ] + # session number + set msg3 "" + if { $session != "" } { + set msg3 [binary format cc 0x0A $session_len] + set msg3 $msg3$session$session_pad + } + # network ID + set msg4 "" + if { $netid != -1 } { + set msg4 [binary format c2sI {0x23 4} 0 0x$netid ] + } + + #catch {puts -nonewline $channel $msg1$model$model_pad$msg2$msg3$msg4$msg5} + puts -nonewline $channel $msg1$msg1b$msg1c$model$model_pad$msg2$msg3$msg4 + if { $opaque_len > 0 } { puts -nonewline $channel $msgop } + + flushChannel channel "Error: API channel was closed" +} + +# +# Configuration Message: (object, type flags, node, types, values) +# This message is more complicated to build because of the list of +# data types and values. +proc sendConfReplyMessage { channel node model types values opaque } { + global showAPI + set prmsg $showAPI + # convert from node name to number + if { [string is alpha [string range $node 0 0]] } { + set node [string range $node 1 end] + } + # add a session number when configuring services + set session "" + set session_len 0 + set session_pad_len 0 + set session_pad "" + if { $node <= 0 && $model == "services" && $opaque == "" } { + global g_current_session + set session [format "0x%x" $g_current_session] + set session_len [string length $session] + set session_pad_len [pad_32bit $session_len] + set session_pad [binary format x$session_pad_len] + incr len [expr {$session_len + $session_pad_len}] + } + + if { $prmsg == 1 } { + puts -nonewline ">CONF(flags=0x0,mod=$model," + if {$node > -1 } { puts -nonewline "node=$node," } + if {$session != "" } { puts -nonewline "session=$session," } + if {$opaque != "" } { puts -nonewline "opaque=$opaque," } + puts "types=<$types>,values=<$values>) reply" + } + + # types (16-bit values) and values + set n 0 + set type_len [expr {[llength $types] * 2} ] + set type_data [binary format cc 4 $type_len] + set value_data "" + foreach type $types { + set t [binary format S $type] + set type_data $type_data$t + set val [lindex $values $n] + if { $val == "" } { + #puts "warning: empty value $n (type=$type)" + if { $type != 10 } { set val 0 } + } + incr n + lappend value_data $val + }; # end foreach + set value_len 0 + set value_data [join $value_data |] + set msgval [buildStringTLV 0x5 $value_data value_len] + set type_pad_len [pad_32bit $type_len] + set type_pad [binary format x$type_pad_len ] + set model_len [string length $model] + set model_pad_len [pad_32bit $model_len] + set model_pad [binary format x$model_pad_len ] + # opaque data - used when custom configuring services + set opaque_len 0 + set msgop [buildStringTLV 0x50 $opaque opaque_len] + + # 4 bytes header, model TLV + set len [expr 4+2+$model_len+$model_pad_len] + if { $node > -1 } { incr len 8 } + # session number + set msg3 "" + if { $session != "" } { + incr len [expr {2 + $session_len + $session_pad_len }] + set msg3 [binary format cc 0x0A $session_len] + set msg3 $msg3$session$session_pad + } + if { $opaque_len > 0 } { incr len $opaque_len } + # types TLV, values TLV + incr len [expr {2 + $type_len + $type_pad_len + $value_len}] + + # header, node node number, node model header + set msgh [binary format c2S {5 0} $len ] + set msgwl "" + if { $node > -1 } { set msgwl [binary format c2sI {1 4} 0 $node] } + set model_hdr [binary format cc 2 $model_len] + # no flags + set type_hdr [binary format c2S {3 2} 0 ] + set msg $msgh$msgwl$model_hdr$model$model_pad$type_hdr$type_data$type_pad + set msg $msg$msgval$msg3 + puts -nonewline $channel $msg + if { $opaque_len > 0 } { puts -nonewline $channel $msgop } + flushChannel channel "Error sending conf reply" +} + +# Event Message +proc sendEventMessage { channel type nodenum name data flags } { + global showAPI eventtypes + set prmsg $showAPI + + set len [expr 8] ;# event type + if {$nodenum > -1} { incr len 8 } + set name_len [string length $name] + set name_pad_len [pad_32bit $name_len] + if { $name_len > 0 } { incr len [expr {2 + $name_len + $name_pad_len}] } + set data_len [string length $data] + set data_pad_len [pad_32bit $data_len] + if { $data_len > 0 } { incr len [expr {2 + $data_len + $data_pad_len}] } + + if { $prmsg == 1 } { + puts -nonewline ">EVENT(flags=$flags," } + set msg [binary format ccS 8 $flags $len ] ;# message header + + set msg2 "" + if { $nodenum > -1 } { + if { $prmsg == 1 } { puts -nonewline "node=$nodenum," } + set msg2 [binary format c2sI {0x01 4} 0 $nodenum] + } + if { $prmsg == 1} { + set typestr "" + foreach t [array names eventtypes] { + if { $eventtypes($t) == $type } { set typestr "-$t"; break } + } + puts -nonewline "type=$type$typestr," + } + set msg3 [binary format c2sI {0x02 4} 0 $type] + set msg4 "" + set msg5 "" + if { $name_len > 0 } { + if { $prmsg == 1 } { puts -nonewline "name=$name," } + set msg4 [binary format cc 0x03 $name_len ] + set name_pad [binary format x$name_pad_len ] + set msg5 $name$name_pad + } + set msg6 "" + set msg7 "" + if { $data_len > 0 } { + if { $prmsg == 1 } { puts -nonewline "data=$data" } + set msg6 [binary format cc 0x04 $data_len ] + set data_pad [binary format x$data_pad_len ] + set msg7 $data$data_pad + } + + if { $prmsg == 1 } { puts ")" } + puts -nonewline $channel $msg$msg2$msg3$msg4$msg5$msg6$msg7 + flushChannel channel "Error sending Event type=$type" +} + + +# deploy working configuration using CORE API +# Deploys a current working configuration. It creates all the +# nodes and link as defined in configuration file. +proc deployCfgAPI { sock } { + global eid + global node_list link_list annotation_list canvas_list + global mac_byte4 mac_byte5 + global execMode + global ngnodemap + global mac_addr_start + global deployCfgAPI_lock + global eventtypes + global g_comments + + if { ![info exists deployCfgAPI_lock] } { set deployCfgAPI_lock 0 } + if { $deployCfgAPI_lock } { + puts "***error: deployCfgAPI called while deploying config" + return + } + + set nodecount [getNodeCount] + if { $nodecount == 0 } { + # This allows switching to exec mode without extra API messages, + # such as when connecting to a running session. + return + } + + set deployCfgAPI_lock 1 ;# lock + + set mac_byte4 0 + set mac_byte5 0 + if { [info exists mac_addr_start] } { set mac_byte5 $mac_addr_start } + set t_start [clock seconds] + + global systype + set systype [lindex [checkOS] 0] + statgraph on [expr (2*[llength $node_list]) + [llength $link_list]] + + + sendSessionProperties $sock + + # this tells the CORE services that we are starting to send + # configuration data + # clear any existing config + sendEventMessage $sock $eventtypes(definition_state) -1 "" "" 0 + # inform CORE services about emulation servers, hook scripts, canvas info, + # and services + sendEventMessage $sock $eventtypes(configuration_state) -1 "" "" 0 + sendEmulationServerInfo $sock 0 + sendSessionOptions $sock + sendHooks $sock + sendCanvasInfo $sock + sendNodeTypeInfo $sock 0 + # send any custom service info before the node messages + sendNodeCustomServices $sock + + # send Node add messages for all emulation nodes + foreach node $node_list { + set node_id "$eid\_$node" + set type [nodeType $node] + set name [getNodeName $node] + if { $type == "pseudo" } { continue } + + statgraph inc 1 + statline "Creating node $name" + if { [[typemodel $node].layer] == "NETWORK" } { + nodeHighlights .c $node on red + } + # inform the CORE daemon of the node + sendNodeAddMessage $sock $node + pluginCapsInitialize $node "mobmodel" + writeNodeCoords $node [getNodeCoords $node] + } + + # send Link add messages for all network links + for { set pending_links $link_list } { $pending_links != "" } {} { + set link [lindex $pending_links 0] + set i [lsearch -exact $pending_links $link] + set pending_links [lreplace $pending_links $i $i] + statgraph inc 1 + + set lnode1 [lindex [linkPeers $link] 0] + set lnode2 [lindex [linkPeers $link] 1] + if { [nodeType $lnode2] == "router" && \ + [getNodeModel $lnode2] == "remote" } { + continue; # remote routers are ctrl. by GUI; TODO: move to daemon + } + sendLinkMessage $sock $link add + } + + # GUI-specific meta-data send via Configure Messages + if { [llength $annotation_list] > 0 } { + sendMetaData $sock $annotation_list "annotation" + } + sendMetaData $sock $canvas_list "canvas" ;# assume >= 1 canvas + # global GUI options - send as meta-data + set obj "metadata" + set values [getGlobalOptionList] + sendConfReplyMessage $sock -1 $obj "10" "{global_options=$values}" "" + if { [info exists g_comments] && $g_comments != "" } { + sendConfReplyMessage $sock -1 $obj "10" "{comments=$g_comments}" "" + } + + # status bar graph + statgraph off 0 + statline "Network topology instantiated in [expr [clock seconds] - $t_start] seconds ([llength $node_list] nodes and [llength $link_list] links)." + + # TODO: turn on tcpdump if enabled; customPostConfigCommands; + # addons 4 deployCfgHook + + # draw lines between wlan nodes + # initialization does not work earlier than this + + foreach node $node_list { + # WLAN handling: draw lines between wireless nodes + if { [nodeType $node] == "wlan" && $execMode == "interactive" } { + wlanRunMobilityScript $node + } + } + + sendTrafficScripts $sock + + # tell the CORE services that we are ready to instantiate + sendEventMessage $sock $eventtypes(instantiation_state) -1 "" "" 0 + + set deployCfgAPI_lock 0 ;# unlock + + statline "Network topology instantiated in [expr [clock seconds] - $t_start] seconds ([llength $node_list] nodes and [llength $link_list] links)." +} + +# +# emulation shutdown procedure when using the CORE API +proc shutdownSession {} { + global link_list node_list eid eventtypes execMode + + set nodecount [getNodeCount] + if { $nodecount == 0 } { + # This allows switching to edit mode without extra API messages, + # such as when file new is selected while running an existing session. + return + } + + # prepare the channel + set plugin [lindex [getEmulPlugin "*"] 0] + set sock [pluginConnect $plugin connect true] + + sendEventMessage $sock $eventtypes(datacollect_state) -1 "" "" 0 + + # shut down all links + foreach link $link_list { + + set lnode2 [lindex [linkPeers $link] 1] + if { [nodeType $lnode2] == "router" && \ + [getNodeModel $lnode2] == "remote" } { + continue; # remote routers are ctrl. by GUI; TODO: move to daemon + } + + sendLinkMessage $sock $link delete + } + # shut down all nodes + foreach node $node_list { + set type [nodeType $node] + if { [[typemodel $node].layer] == "NETWORK" && $execMode != "batch" } { + nodeHighlights .c $node on red + } + sendNodeDelMessage $sock $node + pluginCapsDeinitialize $node "mobmodel" + deleteNodeCoords $node + } + + sendNodeTypeInfo $sock 1 + sendEmulationServerInfo $sock 1 +} + +# inform the CORE services about the canvas information to support +# conversion between X,Y and lat/long coordinates +proc sendCanvasInfo { sock } { + global curcanvas + + if { ![info exists curcanvas] } { return } ;# batch mode + set obj "location" + + set scale [getCanvasScale $curcanvas] + set refpt [getCanvasRefPoint $curcanvas] + set refx [lindex $refpt 0] + set refy [lindex $refpt 1] + set latitude [lindex $refpt 2] + set longitude [lindex $refpt 3] + set altitude [lindex $refpt 4] + + set types [list 2 2 10 10 10 10] + set values [list $refx $refy $latitude $longitude $altitude $scale] + + sendConfReplyMessage $sock -1 $obj $types $values "" +} + +# inform the CORE services about the default services for a node type, which +# are used when node-specific services have not been configured for a node +proc sendNodeTypeInfo { sock reset } { + global node_list + + set obj "services" + + if { $reset == 1} { + sendConfRequestMessage $sock -1 "all" 0x3 -1 "" + return + } + # build a list of node types in use + set typesinuse "" + foreach node $node_list { + set type [nodeType $node] + if { $type != "router" } { continue } + set model [getNodeModel $node] + if { [lsearch $typesinuse $model] < 0 } { lappend typesinuse $model } + } + + foreach type $typesinuse { + # build a list of type + enabled services, all strings + set values [getNodeTypeServices $type] + set values [linsert $values 0 $type] + set types [string repeat "10 " [llength $values]] + sendConfReplyMessage $sock -1 $obj $types $values "" + # send any custom profiles for a node type; node type passed in opaque + set machine_type [getNodeTypeMachineType $type] + set values [getNodeTypeProfile $type] + if { $values != "" } { + set types [string repeat "10 " [llength $values]] + sendConfReplyMessage $sock -1 $machine_type $types $values \ + "$machine_type:$type" + } + } + +} + +# inform the CORE services about any services that have been customized for +# a particular node +proc sendNodeCustomServices { sock } { + global node_list + foreach node $node_list { + set cfgs [getCustomConfig $node] + set cfgfiles "" + foreach cfg $cfgs { + set ids [split [getConfig $cfg "custom-config-id"] :] + if { [lindex $ids 0] != "service" } { continue } + if { [llength $ids] == 3 } { + # customized service config file -- build a list + lappend cfgfiles $cfg + continue + } + set s [lindex $ids 1] + set values [getConfig $cfg "config"] + set t [string repeat "10 " [llength $values]] + sendConfReplyMessage $sock $node services $t $values "service:$s" + } + # send customized service config files after the service info + foreach cfg $cfgfiles { + set idstr [getConfig $cfg "custom-config-id"] + set ids [split $idstr :] + if { [lindex $ids 0] != "service" } { continue } + set s [lindex $ids 1] + set filename [lindex $ids 2] + set data [join [getConfig $cfg "config"] "\n"] + sendFileMessage $sock $node "service:$s" $filename "" $data \ + [string length $data] + } + } +} + +# publish hooks to the CORE services +proc sendHooks { sock } { + global g_hook_scripts + if { ![info exists g_hook_scripts] } { return } + foreach hook $g_hook_scripts { + set name [lindex $hook 0] + set state [lindex $hook 1] + set data [lindex $hook 2] + # TODO: modify sendFileMessage to make node number optional + sendFileMessage $sock n0 "hook:$state" $name "" $data \ + [string length $data] + } +} + +# inform the CORE services about the emulation servers that will be used +proc sendEmulationServerInfo { sock reset } { + global exec_servers + set node -1 ;# not used + set obj "broker" + + set servernames [getAssignedRemoteServers] + if { $servernames == "" } { return } ;# not using emulation servers + + if { $reset == 1} { + sendConfRequestMessage $sock $node $obj 0x3 -1 "" + return + } + + set servers "" + foreach servername $servernames { + set host [lindex $exec_servers($servername) 0] + set port [lindex $exec_servers($servername) 1] + lappend servers "$servername:$host:$port" + } + + set serversstring [join $servers ,] + + set types [list 10] + set values [list $serversstring] + + sendConfReplyMessage $sock $node $obj $types $values "" +} + +# returns the length of node_list minus any pseudo-nodes (inter-canvas nodes) +proc getNodeCount {} { + global node_list + set nodecount 0 + foreach node $node_list { + if { [nodeType $node] != "pseudo" } { incr nodecount } + } + return $nodecount +} + +# send basic properties of a session +proc sendSessionProperties { sock } { + global currentFile CORE_DATA_DIR CORE_USER + set sessionname [file tail $currentFile] + set nodecount [getNodeCount] + if { $sessionname == "" } { set sessionname "untitled" } + set tf "/tmp/thumb.jpg" + if { ![writeCanvasThumbnail .c $tf] } { + set src "$CORE_DATA_DIR/icons/normal/thumb-unknown.gif" + set tf "/tmp/thumb.gif" + if [catch { file copy $src $tf } e] { + puts -nonewline "warning: failed to copy $src to $tf\n($e)" + set tf "" + } + } + set user $CORE_USER + sendSessionMessage $sock 0 0 $sessionname $currentFile $nodecount $tf $user +} + +# send session options from global array in Config Message +proc sendSessionOptions { sock } { + if { $sock == -1 } { + set sock [lindex [getEmulPlugin "*"] 2] + } + set values [getSessionOptionsList] + set types [string repeat "10 " [llength $values]] + sendConfReplyMessage $sock -1 "session" $types $values "" +} + +# send annotations as key=value metadata in Config Message +proc sendAnnotations { sock } { + global annotation_list + + if { $sock == -1 } { + set sock [lindex [getEmulPlugin "*"] 2] + } + set values "" + foreach a $annotation_list { + global $a + set val [set $a] + lappend values "annotation $a=$val" + } + set types [string repeat "10 " [llength $values]] + sendConfReplyMessage $sock -1 "metadata" $types $values "" +} + +# send items as key=value metadata in Config Message +proc sendMetaData { sock items itemtype } { + + if { $sock == -1 } { + set sock [lindex [getEmulPlugin "*"] 2] + } + set values "" + foreach i $items { + global $i + set val [set $i] + lappend values "$itemtype $i=$val" + } + set types [string repeat "10 " [llength $values]] + sendConfReplyMessage $sock -1 "metadata" $types $values "" +} + +# send an Event message for the definition state (this clears any existing +# state), then send all node and link definitions to the CORE services +proc sendNodeLinkDefinitions { sock } { + global node_list link_list annotation_list canvas_list eventtypes + global g_comments + #sendEventMessage $sock $eventtypes(definition_state) -1 "" "" 0 + foreach node $node_list { + sendNodeAddMessage $sock $node + pluginCapsInitialize $node "mobmodel" + } + foreach link $link_list { sendLinkMessage $sock $link add } + # GUI-specific meta-data send via Configure Messages + sendMetaData $sock $annotation_list "annotation" + sendMetaData $sock $canvas_list "canvas" + set obj "metadata" + set values [getGlobalOptionList] + sendConfReplyMessage $sock -1 $obj "10" "{global_options=$values}" "" + if { [info exists g_comments] && $g_comments != "" } { + sendConfReplyMessage $sock -1 $obj "10" "{comments=$g_comments}" "" + } +} + +proc getNodeTypeAPI { node } { + set type [nodeType $node] + if { $type == "router" } { + set model [getNodeModel $node] + set type [getNodeTypeMachineType $model] + } + switch -exact -- "$type" { + router { return 0x0 } + netns { return 0x0 } + jail { return 0x0 } + physical { return 0x1 } + xen { return 0x2 } + tbd { return 0x3 } + lanswitch { return 0x4 } + hub { return 0x5 } + wlan { return 0x6 } + rj45 { return 0x7 } + tunnel { return 0x8 } + ktunnel { return 0x9 } + emane { return 0xA } + default { return 0x0 } + } +} + +# send an Execute message +proc sendExecMessage { channel node cmd exec_num flags } { + global showAPI g_api_exec_num + set prmsg $showAPI + + set node_num [string range $node 1 end] + set cmd_len [string length $cmd] + if { $cmd_len > 255 } { puts "sendExecMessage error: cmd too long!"; return} + set cmd_pad_len [pad_32bit $cmd_len] + set cmd_pad [binary format x$cmd_pad_len] + + if { $exec_num == 0 } { + incr g_api_exec_num + set exec_num $g_api_exec_num + } + + # node num + exec num + command string + set len [expr {8 + 8 + 2 + $cmd_len + $cmd_pad_len}] + + if { $prmsg == 1 } {puts ">EXEC(flags=$flags,$node,n=$exec_num,cmd='$cmd')" } + + set msg [binary format ccSc2sIc2sIcc \ + 3 $flags $len \ + {1 4} 0 $node_num \ + {2 4} 0 $exec_num \ + 4 $cmd_len \ + ] + puts -nonewline $channel $msg$cmd$cmd_pad + flushChannel channel "Error sending file message" +} + +# if source file (sf) is specified, then send a message that the file source +# file should be copied to the given file name (f); otherwise, include the file +# data in this message +proc sendFileMessage { channel node type f sf data data_len } { + global showAPI + set prmsg $showAPI + + set node_num [string range $node 1 end] + + set f_len [string length $f] + set f_pad_len [pad_32bit $f_len] + set f_pad [binary format x$f_pad_len] + set type_len [string length $type] + set type_pad_len [pad_32bit $type_len] + set type_pad [binary format x$type_pad_len] + if { $sf != "" } { + set sf_len [string length $sf] + set sf_pad_len [pad_32bit $sf_len] + set sf_pad [binary format x$sf_pad_len] + set data_len 0 + set data_pad_len 0 + } else { + set sf_len 0 + set sf_pad_len 0 + set data_pad_len [pad_32bit $data_len] + set data_pad [binary format x$data_pad_len] + } + # TODO: gzip compression w/tlv type 0x11 + + # node number TLV + file name TLV + ( file src name / data TLV) + set len [expr {8 + 2 + 2 + $f_len + $f_pad_len + $sf_len + $sf_pad_len \ + + $data_len + $data_pad_len}] + # 16-bit data length + if { $data_len > 255 } { + incr len 2 + if { $data_len > 65536 } { + puts -nonewline "*** error: File Message data length too large " + puts "($data_len > 65536)" + return + } + } + if { $type_len > 0 } { incr len [expr {2 + $type_len + $type_pad_len}] } + set flags 1; # add flag + + if { $prmsg == 1 } { + puts -nonewline ">FILE(flags=$flags,$node,f=$f," + if { $type != "" } { puts -nonewline "type=$type," } + if { $sf != "" } { puts "src=$sf)" + } else { puts "data=($data_len))" } + } + + set msg [binary format ccSc2sIcc \ + 6 $flags $len \ + {1 4} 0 $node_num \ + 2 $f_len \ + ] + set msg2 "" + if { $type_len > 0 } { + set msg2 [binary format cc 0x5 $type_len] + set msg2 $msg2$type$type_pad + } + if { $sf != "" } { ;# source file name TLV + set msg3 [binary format cc 0x6 $sf_len] + puts -nonewline $channel $msg$f$f_pad$msg2$msg3$sf$sf_pad + } else { ;# file data TLV + if { $data_len > 255 } { + set msg3 [binary format ccS 0x10 0 $data_len] + } else { + set msg3 [binary format cc 0x10 $data_len] + } + puts -nonewline $channel $msg$f$f_pad$msg2$msg3$data$data_pad + } + flushChannel channel "Error sending file message" +} + +# Session Message +proc sendSessionMessage { channel flags num name sfile nodecount tf user } { + global showAPI + set prmsg $showAPI + + if { $channel == -1 } { + set pname [lindex [getEmulPlugin "*"] 0] + set channel [pluginConnect $pname connect true] + if { $channel == -1 } { return } + } + + set num_len [string length $num] + set num_pad_len [pad_32bit $num_len] + set len [expr {2 + $num_len + $num_pad_len}] + if { $num_len <= 0 } { + puts "error: sendSessionMessage requires at least one session number" + return + } + set name_len [string length $name] + set name_pad_len [pad_32bit $name_len] + if { $name_len > 0 } { incr len [expr { 2 + $name_len + $name_pad_len }] } + set sfile_len [string length $sfile] + set sfile_pad_len [pad_32bit $sfile_len] + if { $sfile_len > 0 } { + incr len [expr { 2 + $sfile_len + $sfile_pad_len }] + } + set nc_len [string length $nodecount] + set nc_pad_len [pad_32bit $nc_len] + if { $nc_len > 0 } { incr len [expr { 2 + $nc_len + $nc_pad_len }] } + set tf_len [string length $tf] + set tf_pad_len [pad_32bit $tf_len] + if { $tf_len > 0 } { incr len [expr { 2 + $tf_len + $tf_pad_len }] } + set user_len [string length $user] + set user_pad_len [pad_32bit $user_len] + if { $user_len > 0 } { incr len [expr { 2 + $user_len + $user_pad_len }] } + + if { $prmsg == 1 } { + puts -nonewline ">SESSION(flags=$flags" } + set msgh [binary format ccS 0x09 $flags $len ] ;# message header + + if { $prmsg == 1 } { puts -nonewline ",sids=$num" } + set num_hdr [binary format cc 0x01 $num_len] + set num_pad [binary format x$num_pad_len ] + set msg1 "$num_hdr$num$num_pad" + + set msg2 "" + if { $name_len > 0 } { + if { $prmsg == 1 } { puts -nonewline ",name=$name" } + # TODO: name_len > 255 + set name_hdr [binary format cc 0x02 $name_len] + set name_pad [binary format x$name_pad_len] + set msg2 "$name_hdr$name$name_pad" + } + set msg3 "" + if { $sfile_len > 0 } { + if { $prmsg == 1 } { puts -nonewline ",file=$sfile" } + # TODO: sfile_len > 255 + set sfile_hdr [binary format cc 0x03 $sfile_len] + set sfile_pad [binary format x$sfile_pad_len] + set msg3 "$sfile_hdr$sfile$sfile_pad" + } + set msg4 "" + if { $nc_len > 0 } { + if { $prmsg == 1 } { puts -nonewline ",nc=$nodecount" } + set nc_hdr [binary format cc 0x04 $nc_len] + set nc_pad [binary format x$nc_pad_len] + set msg4 "$nc_hdr$nodecount$nc_pad" + } + set msg5 "" + if { $tf_len > 0 } { + if { $prmsg == 1 } { puts -nonewline ",thumb=$tf" } + set tf_hdr [binary format cc 0x06 $tf_len] + set tf_pad [binary format x$tf_pad_len] + set msg5 "$tf_hdr$tf$tf_pad" + } + set msg6 "" + if { $user_len > 0 } { + if { $prmsg == 1 } { puts -nonewline ",user=$user" } + set user_hdr [binary format cc 0x07 $user_len] + set user_pad [binary format x$user_pad_len] + set msg6 "$user_hdr$user$user_pad" + } + + if { $prmsg == 1 } { puts ")" } + puts -nonewline $channel $msgh$msg1$msg2$msg3$msg4$msg5$msg6 + flushChannel channel "Error sending Session num=$num" +} + +# return a new execution number and record it in the execution request list +# for the given callback (e.g. widget) type +proc newExecCallbackRequest { type } { + global g_api_exec_num g_execRequests + incr g_api_exec_num + set exec_num $g_api_exec_num + lappend g_execRequests($type) $exec_num + return $exec_num +} + +# ask daemon to load or save an XML file based on the current session +proc xmlFileLoadSave { cmd name } { + global oper_mode eventtypes + + set plugin [lindex [getEmulPlugin "*"] 0] + set sock [pluginConnect $plugin connect true] + if { $sock == -1 || $sock == "" } { return } + + # inform daemon about nodes and links when saving in edit mode + if { $cmd == "save" && $oper_mode != "exec" } { + sendSessionProperties $sock + # this tells the CORE services that we are starting to send + # configuration data + # clear any existing config + sendEventMessage $sock $eventtypes(definition_state) -1 "" "" 0 + sendEventMessage $sock $eventtypes(configuration_state) -1 "" "" 0 + sendEmulationServerInfo $sock 0 + sendSessionOptions $sock + sendHooks $sock + sendCanvasInfo $sock + sendNodeTypeInfo $sock 0 + # send any custom service info before the node messages + sendNodeCustomServices $sock + sendNodeLinkDefinitions $sock + } elseif { $cmd == "open" } { + # reset config objects + sendNodeTypeInfo $sock 1 + } + sendEventMessage $sock $eventtypes(file_$cmd) -1 $name "" 0 +} + +############################################################################ +# +# Helper functions below here +# + +# helper function to get interface number from name +proc ifcNameToNum { ifc } { + # eth0, eth1, etc. + if {[string range $ifc 0 2] == "eth"} { + set ifnum [string range $ifc 3 end] + # l0, l1, etc. + } else { + set ifnum [string range $ifc 1 end] + } + if { $ifnum == "" } { + return -1 + } + if {![string is integer $ifnum]} { + return -1 + } + return $ifnum +} + +# +# parse the type and length from a TLV header +proc parseTLVHeader { data current_ref } { + global showAPI + set prmsg $showAPI + upvar $current_ref current + + if { [binary scan $data @${current}cc type length] != 2 } { + if { $prmsg == 1 } { puts "TLV header error" } + return "" + } + set length [expr {$length & 0xFF}]; # convert signed to unsigned + if { $length == 0 } { + if { $type == 0 } { + # prevent endless looping + if { $prmsg == 1 } { puts -nonewline "(extra padding)" } + return "" + } else { + # support for length > 255 + incr current 2 + if { [binary scan $data @${current}S length] != 1 } { + puts "error reading TLV length (type=$type)" + return "" + } + set length [expr {$length & 0xFFFF}] + if { $length == 0 } { + # zero-length string, not length > 255 + incr current -2 + } + } + } + incr current 2 + return [list $type $length] +} + +# return the binary string, and length by reference +proc buildStringTLV { type data len_ref } { + upvar $len_ref len + set data_len [string length $data] + if { $data_len > 65536 } { + puts "warning: buildStringTLV data truncated" + set data_len 65536 + set data [string range 0 65535] + } + set data_pad_len [pad_32bit $data_len] + set data_pad [binary format x$data_pad_len] + + if { $data_len == 0 } { + set len 0 + return "" + } + + if { $data_len > 255 } { + set hdr [binary format ccS $type 0 $data_len] + set hdr_len 4 + } else { + set hdr [binary format cc $type $data_len] + set hdr_len 2 + } + + set len [expr {$hdr_len + $data_len + $data_pad_len}] + + return $hdr$data$data_pad +} + +# calculate padding to 32-bit word boundary +# 32-bit and 64-bit values are pre-padded, strings and 128-bit values are +# post-padded to word boundary, depending on type +proc pad_32bit { len } { + # total length = 2 + len + pad + if { $len < 256 } { + set hdrsiz 2 + } else { + set hdrsiz 4 + } + # calculate padding to fill 32-bit boundary + return [expr { -($hdrsiz + $len) % 4 }] +} + +proc macToString { mac_num } { + set mac_bytes "" + # convert 64-bit integer into 12-digit hex string + set mac_num 0x[format "%.12lx" $mac_num] + while { $mac_num > 0 } { + # append 8-bit hex number to list + set uchar [format "%02x" [expr $mac_num & 0xFF]] + lappend mac_bytes $uchar + # shift off 8-bits + set mac_num [expr $mac_num >> 8] + } + + # make sure we have six hex digits + set num_zeroes [expr 6 - [llength $mac_bytes]] + while { $num_zeroes > 0 } { + lappend mac_bytes 00 + incr num_zeroes -1 + } + + # this is lreverse in tcl8.5 and later + set r {} + set i [llength $mac_bytes] + while { $i > 0 } { lappend r [lindex $mac_bytes [incr i -1]] } + + return [join $r :] +} + +proc hexdump { data } { + # read data as hex + binary scan $data H* hex + # split into pairs of hex digits + regsub -all -- {..} $hex {& } hex + return $hex +} diff --git a/gui/canvas.tcl b/gui/canvas.tcl new file mode 100755 index 00000000..bbcdfa24 --- /dev/null +++ b/gui/canvas.tcl @@ -0,0 +1,411 @@ +# +# Copyright 2005-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# + +# +# Copyright 2005-2008 University of Zagreb, Croatia. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions +# are met: +# 1. Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# 2. Redistributions in binary form must reproduce the above copyright +# notice, this list of conditions and the following disclaimer in the +# documentation and/or other materials provided with the distribution. +# +# THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND +# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +# ARE DISCLAIMED. IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE +# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS +# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) +# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY +# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF +# SUCH DAMAGE. +# +# + +#****h* imunes/canvas.tcl +# NAME +# canvas.tcl -- file used for manipultaion with canvases in IMUNES +# FUNCTION +# This module is used to define all the actions used for configuring +# canvases in IMUNES. On each canvas a part of the simulation is presented +# If there is no additional canvas defined, simulation is presented on the +# defalut canvas. +# +#**** + +#****f* canvas.tcl/removeCanvas +# NAME +# removeCanvas -- remove canvas +# SYNOPSIS +# removeCanvas $canvas_id +# FUNCTION +# Removes the canvas from simulation. This function does not change the +# configuration of the nodes, i.e. nodes attached to the removed canvas +# remain attached to the same non existing canvas. +# INPUTS +# * canvas_id -- canvas id +#**** + +proc removeCanvas { canvas } { + global canvas_list $canvas + + set i [lsearch $canvas_list $canvas] + set canvas_list [lreplace $canvas_list $i $i] + set $canvas {} +} + +#****f* canvas.tcl/newCanvas +# NAME +# newCanvas -- craete new canvas +# SYNOPSIS +# set canvas_id [newCanvas $canvas_name] +# FUNCTION +# Creates new canvas. Returns the canvas_id of the new canvas. +# If the canvas_name parameter is empty, the name of the new canvas +# is set to CanvasN, where N represents the canvas_id of the new canvas. +# INPUTS +# * canvas_name -- canvas name +# RESULT +# * canvas_id -- canvas id +#**** + +proc newCanvas { name } { + global canvas_list + + set canvas [newObjectId canvas] + global $canvas + lappend canvas_list $canvas + set $canvas {} + if { $name != "" } { + setCanvasName $canvas $name + } else { + setCanvasName $canvas Canvas[string range $canvas 1 end] + } + + return $canvas +} + + +proc setCanvasSize { canvas x y } { + global $canvas + + set i [lsearch [set $canvas] "size *"] + if { $i >= 0 } { + set $canvas [lreplace [set $canvas] $i $i "size {$x $y}"] + } else { + set $canvas [linsert [set $canvas] 1 "size {$x $y}"] + } +} + +proc getCanvasSize { canvas } { + global $canvas g_prefs + + set entry [lrange [lsearch -inline [set $canvas] "size *"] 1 end] + set size [string trim $entry \{\}] + if { $size == "" } { + return "$g_prefs(gui_canvas_x) $g_prefs(gui_canvas_y)" + } else { + return $size + } +} + +#****f* canvas.tcl/getCanvasName +# NAME +# getCanvasName -- get canvas name +# SYNOPSIS +# set canvas_name [getCanvasName $canvas_id] +# FUNCTION +# Returns the name of the canvas. +# INPUTS +# * canvas_id -- canvas id +# RESULT +# * canvas_name -- canvas name +#**** + +proc getCanvasName { canvas } { + global $canvas + + set entry [lrange [lsearch -inline [set $canvas] "name *"] 1 end] + return [string trim $entry \{\}] +} + +#****f* canvas.tcl/setCanvasName +# NAME +# setCanvasName -- set canvas name +# SYNOPSIS +# setCanvasName $canvas_id $canvas_name +# FUNCTION +# Sets the name of the canvas. +# INPUTS +# * canvas_id -- canvas id +# * canvas_name -- canvas name +#**** + +proc setCanvasName { canvas name } { + global $canvas + + set i [lsearch [set $canvas] "name *"] + if { $i >= 0 } { + set $canvas [lreplace [set $canvas] $i $i "name {$name}"] + } else { + set $canvas [linsert [set $canvas] 1 "name {$name}"] + } +} + +# Boeing: canvas wallpaper support +proc getCanvasWallpaper { canvas } { + global $canvas + + set entry [lrange [lsearch -inline [set $canvas] "wallpaper *"] 1 end] + set entry2 [lrange [lsearch -inline \ + [set $canvas] "wallpaper-style *"] 1 end] + return [list [string trim $entry \{\}] [string trim $entry2 \{\}]] +} + +proc setCanvasWallpaper { canvas file style} { + global $canvas + + set i [lsearch [set $canvas] "wallpaper *"] + if { $i >= 0 } { + set $canvas [lreplace [set $canvas] $i $i "wallpaper {$file}"] + } else { + set $canvas [linsert [set $canvas] 1 "wallpaper {$file}"] + } + + set i [lsearch [set $canvas] "wallpaper-style *"] + if { $i >= 0 } { + set $canvas [lreplace [set $canvas] $i $i "wallpaper-style {$style}"] + } else { + set $canvas [linsert [set $canvas] 1 "wallpaper-style {$style}"] + } +} + +# Boeing: manage canvases +proc manageCanvasPopup { x y } { + global curcanvas CORE_DATA_DIR + + set w .entry1 + catch {destroy $w} + toplevel $w -takefocus 1 + + if { $x == 0 && $y == 0 } { + set screen [wm maxsize .] + set x [expr {[lindex $screen 0] / 4}] + set y [expr {[lindex $screen 1] / 4}] + } else { + set x [expr {$x + 10}] + set y [expr {$y - 250}] + } + wm geometry $w +$x+$y + wm title $w "Manage Canvases" + wm iconname $w "Manage Canvases" + + + ttk::frame $w.name + ttk::label $w.name.lab -text "Canvas name:" + ttk::entry $w.name.ent + $w.name.ent insert 0 [getCanvasName $curcanvas] + pack $w.name.lab $w.name.ent -side left -fill x + pack $w.name -side top -padx 4 -pady 4 + + global canvas_list + ttk::frame $w.canv + listbox $w.canv.cl -bg white -yscrollcommand "$w.canv.scroll set" + ttk::scrollbar $w.canv.scroll -orient vertical -command "$w.canv.cl yview" + foreach canvas $canvas_list { + $w.canv.cl insert end [getCanvasName $canvas] + if { $canvas == $curcanvas } { + set curindex [expr {[$w.canv.cl size] - 1}] + } + } + pack $w.canv.cl -side left -pady 4 -fill both -expand true + pack $w.canv.scroll -side left -fill y + pack $w.canv -side top -fill both -expand true -padx 4 -pady 4 + $w.canv.cl selection set $curindex + $w.canv.cl see $curindex + bind $w.canv.cl "manageCanvasSwitch $w" + + ttk::frame $w.buttons2 + foreach b {up down} { + set fn "$CORE_DATA_DIR/icons/tiny/arrow.${b}.gif" + set img$b [image create photo -file $fn] + ttk::button $w.buttons2.$b -image [set img${b}] \ + -command "manageCanvasUpDown $w $b" + } + pack $w.buttons2.up $w.buttons2.down -side left -expand 1 + pack $w.buttons2 -side top -fill x -pady 2 + + # hidden list of canvas numbers + ttk::label $w.list -text $canvas_list + + ttk::frame $w.buttons + ttk::button $w.buttons.apply -text "Apply" -command "manageCanvasApply $w" + ttk::button $w.buttons.cancel -text "Cancel" -command "destroy $w" + pack $w.buttons.apply $w.buttons.cancel -side left -expand 1 + pack $w.buttons -side bottom -fill x -pady 2m + + bind $w "destroy $w" + bind $w "manageCanvasApply $w" + +} + +# Boeing: manage canvases helper +# called when a canvas in the list is double-clicked +proc manageCanvasSwitch { w } { + global canvas_list curcanvas + set i [$w.canv.cl curselection] + if {$i == ""} { return} + set i [lindex $i 0] + set item [$w.canv.cl get $i] + + foreach canvas $canvas_list { + if {[getCanvasName $canvas] == $item} { + $w.name.ent delete 0 end + $w.name.ent insert 0 $item + set curcanvas $canvas + switchCanvas none + return + } + } +} + +# manage canvases helper +# handle the move up/down buttons for the canvas selection window +proc manageCanvasUpDown { w dir } { + global canvas_list + # get the currently selected item + set i [$w.canv.cl curselection] + if {$i == ""} { return} + set i [lindex $i 0] + set item [$w.canv.cl get $i] + + if {$dir == "down" } { + set max [expr {[llength $canvas_list] - 1}] + if {$i >= $max } { return } + set newi [expr {$i + 1}] + } else { + if {$i <= 0} { return } + set newi [expr {$i - 1}] + } + + # change the position + $w.canv.cl delete $i + $w.canv.cl insert $newi $item + $w.canv.cl selection set $newi + $w.canv.cl see $newi + + # update hidden list of canvas numbers + set new_canvas_list [$w.list cget -text] + set item [lindex $new_canvas_list $i] + set new_canvas_list [lreplace $new_canvas_list $i $i] + set new_canvas_list [linsert $new_canvas_list $newi $item] + $w.list configure -text $new_canvas_list +} + +# manage canvases helper +# called when apply button is pressed - changes the order of the canvases +proc manageCanvasApply { w } { + global canvas_list curcanvas changed + # we calculated this list earlier, making life easier here + set new_canvas_list [$w.list cget -text] + if {$canvas_list != $new_canvas_list} { + set canvas_list $new_canvas_list + } + set newname [$w.name.ent get] + destroy $w + if { $newname != [getCanvasName $curcanvas] } { + set changed 1 + } + setCanvasName $curcanvas $newname + switchCanvas none + updateUndoLog +} + +proc setCanvasScale { canvas scale } { + global $canvas + + set i [lsearch [set $canvas] "scale *"] + if { $i >= 0 } { + set $canvas [lreplace [set $canvas] $i $i "scale $scale"] + } else { + set $canvas [linsert [set $canvas] 1 "scale $scale"] + } +} + +proc getCanvasScale { canvas } { + global $canvas g_prefs + + set entry [lrange [lsearch -inline [set $canvas] "scale *"] 1 end] + set scale [string trim $entry \{\}] + if { $scale == "" } { + if { ![info exists g_prefs(gui_canvas_scale)] } { return 150.0 } + return "$g_prefs(gui_canvas_scale)" + } else { + return $scale + } +} + +proc setCanvasRefPoint { canvas refpt } { + global $canvas + + set i [lsearch [set $canvas] "refpt *"] + if { $i >= 0 } { + set $canvas [lreplace [set $canvas] $i $i "refpt {$refpt}"] + } else { + set $canvas [linsert [set $canvas] 1 "refpt {$refpt}"] + } +} + +proc getCanvasRefPoint { canvas } { + global $canvas g_prefs DEFAULT_REFPT + + set entry [lrange [lsearch -inline [set $canvas] "refpt *"] 1 end] + set altitude [string trim $entry \{\}] + if { $altitude == "" } { + if { ![info exists g_prefs(gui_canvas_refpt)] } { + return $DEFAULT_REFPT + } + return "$g_prefs(gui_canvas_refpt)" + } else { + return $altitude + } +} + +# from http://wiki.tcl.tk/1415 (MAK) +proc canvasSee { hWnd items } { + set box [eval $hWnd bbox $items] + + if {$box == ""} { return } + + if {[string match {} [$hWnd cget -scrollregion]] } { + # People really should set -scrollregion you know... + foreach {x y x1 y1} $box break + + set x [expr round(2.5 * ($x1+$x) / [winfo width $hWnd])] + set y [expr round(2.5 * ($y1+$y) / [winfo height $hWnd])] + + $hWnd xview moveto 0 + $hWnd yview moveto 0 + $hWnd xview scroll $x units + $hWnd yview scroll $y units + } else { + # If -scrollregion is set properly, use this + foreach { x y x1 y1 } $box break + foreach { top btm } [$hWnd yview] break + foreach { left right } [$hWnd xview] break + foreach { p q xmax ymax } [$hWnd cget -scrollregion] break + + set xpos [expr (($x1+$x) / 2.0) / $xmax - ($right-$left) / 2.0] + set ypos [expr (($y1+$y) / 2.0) / $ymax - ($btm-$top) / 2.0] + + $hWnd xview moveto $xpos + $hWnd yview moveto $ypos + } +} diff --git a/gui/cfgparse.tcl b/gui/cfgparse.tcl new file mode 100755 index 00000000..8ccfa53b --- /dev/null +++ b/gui/cfgparse.tcl @@ -0,0 +1,1152 @@ +# +# Copyright 2005-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# + +# +# Copyright 2005-2008 University of Zagreb, Croatia. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions +# are met: +# 1. Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# 2. Redistributions in binary form must reproduce the above copyright +# notice, this list of conditions and the following disclaimer in the +# documentation and/or other materials provided with the distribution. +# +# THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND +# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +# ARE DISCLAIMED. IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE +# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS +# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) +# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY +# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF +# SUCH DAMAGE. +# +# This work was supported in part by the Croatian Ministry of Science +# and Technology through the research contract #IP-2003-143. +# + +#****h* imunes/cfgparse.tcl +# NAME +# cfgparse.tcl -- file used for parsing the configuration +# FUNCTION +# This module is used for parsing the configuration, i.e. reading the +# configuration from a file or a string and writing the configuration +# to a file or a string. This module also contains a function for returning +# a new ID for nodes, links and canvases. +#**** + +#****f* nodecfg.tcl/dumpputs +# NAME +# dumpputs -- puts a string to a file or a string configuration +# SYNOPSIS +# dumpputs $method $destination $string +# FUNCTION +# Puts a sting to the file or appends the string configuration (used for +# undo functions), the choice depends on the value of method parameter. +# INPUTS +# * method -- method used. Possiable values are file (if saving the string +# to the file) and string (if appending the string configuration) +# * dest -- destination used. File_id for files, and string name for string +# configuration +# * string -- the string that is inserted to a file or appended to the string +# configuartion +#**** + +proc dumpputs {method dest string} { + switch -exact -- $method { + file { + puts $dest $string + } + string { + global $dest + append $dest "$string +" + } + } +} + +#****f* nodecfg.tcl/dumpCfg +# NAME +# dumpCfg -- puts the current configuraton to a file or a string +# SYNOPSIS +# dumpCfg $method $destination +# FUNCTION +# Writes the working (current) configuration to a file or a string. +# INPUTS +# * method -- used method. Possiable values are file (saving current congif +# to the file) and string (saving current config in a string) +# * dest -- destination used. File_id for files, and string name for string +# configurations +#**** + +proc dumpCfg {method dest} { + global node_list plot_list link_list canvas_list annotation_list + + global g_comments + if { [info exists g_comments] && $g_comments != "" } { + dumpputs $method $dest "comments \{" + foreach line [split $g_comments "\n"] { dumpputs $method $dest "$line" } + dumpputs $method $dest "\}" + dumpputs $method $dest "" + } + + foreach node $node_list { + global $node + upvar 0 $node lnode + dumpputs $method $dest "node $node \{" + foreach element $lnode { + if { "[lindex $element 0]" == "network-config" } { + dumpputs $method $dest " network-config \{" + foreach line [lindex $element 1] { + dumpputs $method $dest " $line" + } + dumpputs $method $dest " \}" + } elseif { "[lindex $element 0]" == "custom-config" } { + dumpputs $method $dest " custom-config \{" + foreach line [lindex $element 1] { + if { $line != {} } { + if { [catch {set str [lindex $line 0]} err] } { + puts "error loading config: $err" + puts "problem section: [lindex $element 0]" + puts "problem line: $line" + set str "" + } + if { $str == "config" } { + dumpputs $method $dest " config \{" + foreach element [lindex $line 1] { + dumpputs $method $dest " $element" + } + dumpputs $method $dest " \}" + } else { + dumpputs $method $dest " $line" + } + } + } + dumpputs $method $dest " \}" + } elseif { "[lindex $element 0]" == "ipsec-config" } { + dumpputs $method $dest " ipsec-config \{" + foreach line [lindex $element 1] { + if { $line != {} } { + dumpputs $method $dest " $line" + } + } + dumpputs $method $dest " \}" + } elseif { "[lindex $element 0]" == "custom-pre-config-commands" } { + #Boeing custom pre config commands + dumpputs $method $dest " custom-pre-config-commands \{" + foreach line [lindex $element 1] { + dumpputs $method $dest " $line" + } + dumpputs $method $dest " \}" + } elseif { "[lindex $element 0]" == "custom-post-config-commands" } { + #Boeing custom post config commands + dumpputs $method $dest " custom-post-config-commands \{" + foreach line [lindex $element 1] { + dumpputs $method $dest " $line" + } + dumpputs $method $dest " \}" + } elseif { "[lindex $element 0]" == "ine-config" } { + # Boeing: INE config support + dumpputs $method $dest " ine-config \{" + foreach line [lindex $element 1] { + dumpputs $method $dest " $line" + } + dumpputs $method $dest " \}" + # end Boeing + } else { + dumpputs $method $dest " $element" + } + } + dumpputs $method $dest "\}" + dumpputs $method $dest "" + } + + foreach obj "link annotation canvas plot" { + upvar 0 ${obj}_list obj_list + foreach elem $obj_list { + global $elem + upvar 0 $elem lelem + dumpputs $method $dest "$obj $elem \{" + foreach element $lelem { + dumpputs $method $dest " $element" + } + dumpputs $method $dest "\}" + dumpputs $method $dest "" + } + } + + global g_traffic_flows + if { [info exists g_traffic_flows] && [llength $g_traffic_flows] > 0 } { + dumpputs $method $dest "traffic \{" + foreach flow $g_traffic_flows { + dumpputs $method $dest " $flow" + } + dumpputs $method $dest "\}" + dumpputs $method $dest "" + } + + global g_hook_scripts + if { [info exists g_hook_scripts] && [llength $g_hook_scripts] > 0 } { + foreach hook $g_hook_scripts { + set name [lindex $hook 0] + set state [lindex $hook 1] + set script [lindex $hook 2] + dumpputs $method $dest "hook $state:$name \{" + foreach line [split $script "\n"] { + dumpputs $method $dest "$line" + } + dumpputs $method $dest "\}" + dumpputs $method $dest "" + } + } + + dumpGlobalOptions $method $dest + + # session options + dumpputs $method $dest "option session \{" + foreach kv [getSessionOptionsList] { dumpputs $method $dest " $kv" } + dumpputs $method $dest "\}" + dumpputs $method $dest "" +} + +proc dumpGlobalOptions { method dest } { + global showIfNames showNodeLabels showLinkLabels + global showIfIPaddrs showIfIPv6addrs + global showBkgImage showGrid showAnnotations + global showAPI + global g_view_locked + global g_traffic_start_opt + global mac_addr_start + + dumpputs $method $dest "option global \{" + if {$showIfNames == 0} { + dumpputs $method $dest " interface_names no" + } else { + dumpputs $method $dest " interface_names yes" } + if {$showIfIPaddrs == 0} { + dumpputs $method $dest " ip_addresses no" + } else { + dumpputs $method $dest " ip_addresses yes" } + if {$showIfIPv6addrs == 0} { + dumpputs $method $dest " ipv6_addresses no" + } else { + dumpputs $method $dest " ipv6_addresses yes" } + if {$showNodeLabels == 0} { + dumpputs $method $dest " node_labels no" + } else { + dumpputs $method $dest " node_labels yes" } + if {$showLinkLabels == 0} { + dumpputs $method $dest " link_labels no" + } else { + dumpputs $method $dest " link_labels yes" } + if {$showAPI == 0} { + dumpputs $method $dest " show_api no" + } else { + dumpputs $method $dest " show_api yes" } + if {$showBkgImage == 0} { + dumpputs $method $dest " background_images no" + } else { + dumpputs $method $dest " background_images yes" } + if {$showAnnotations == 0} { + dumpputs $method $dest " annotations no" + } else { + dumpputs $method $dest " annotations yes" } + if {$showGrid == 0} { + dumpputs $method $dest " grid no" + } else { + dumpputs $method $dest " grid yes" } + if {$g_view_locked == 1} { + dumpputs $method $dest " locked yes" } + if { [info exists g_traffic_start_opt] } { + dumpputs $method $dest " traffic_start $g_traffic_start_opt" + } + if { [info exists mac_addr_start] && $mac_addr_start > 0 } { + dumpputs $method $dest " mac_address_start $mac_addr_start" + } + dumpputs $method $dest "\}" + dumpputs $method $dest "" +} + +# get the global options into a list of key=value pairs +proc getGlobalOptionList {} { + global tmp + set tmp "" + dumpGlobalOptions string tmp ;# put "options global {items}" into tmp + set items [lindex $tmp 2] + return [listToKeyValues $items] +} + +proc setGlobalOption { field value } { + global showIfNames showNodeLabels showLinkLabels + global showIfIPaddrs showIfIPv6addrs + global showBkgImage showGrid showAnnotations + global showAPI + global mac_addr_start + global g_traffic_start_opt + global g_view_locked + + switch -exact -- $field { + interface_names { + if { $value == "no" } { + set showIfNames 0 + } elseif { $value == "yes" } { + set showIfNames 1 + } + } + ip_addresses { + if { $value == "no" } { + set showIfIPaddrs 0 + } elseif { $value == "yes" } { + set showIfIPaddrs 1 + } + } + ipv6_addresses { + if { $value == "no" } { + set showIfIPv6addrs 0 + } elseif { $value == "yes" } { + set showIfIPv6addrs 1 + } + } + node_labels { + if { $value == "no" } { + set showNodeLabels 0 + } elseif { $value == "yes" } { + set showNodeLabels 1 + } + } + link_labels { + if { $value == "no" } { + set showLinkLabels 0 + } elseif { $value == "yes" } { + set showLinkLabels 1 + } + } + show_api { + if { $value == "no" } { + set showAPI 0 + } elseif { $value == "yes" } { + set showAPI 1 + } + } + background_images { + if { $value == "no" } { + set showBkgImage 0 + } elseif { $value == "yes" } { + set showBkgImage 1 + } + } + annotations { + if { $value == "no" } { + set showAnnotations 0 + } elseif { $value == "yes" } { + set showAnnotations 1 + } + } + grid { + if { $value == "no" } { + set showGrid 0 + } elseif { $value == "yes" } { + set showGrid 1 + } + } + locked { + if { $value == "yes" } { + set g_view_locked 1 + } else { + set g_view_locked 0 + } + } + mac_address_start { + set mac_addr_start $value + } + traffic_start { + set g_traffic_start_opt $value + } + } +} + +# reset global vars when opening a new file +proc cleanupGUIState {} { + global node_list link_list plot_list canvas_list annotation_list + global mac_addr_start g_comments + global g_traffic_flows g_traffic_start_opt g_hook_scripts + global g_view_locked + + set node_list {} + set link_list {} + set annotation_list {} + set plot_list {} + set canvas_list {} + set g_traffic_flows "" + set g_traffic_start_opt 0 + set g_hook_scripts "" + set g_comments "" + set g_view_locked 0 + resetSessionOptions +} + +#****f* nodecfg.tcl/loadCfg +# NAME +# loadCfg -- loads the current configuration. +# SYNOPSIS +# loadCfg $cfg +# FUNCTION +# Loads the configuration written in the cfg string to a current +# configuration. +# INPUTS +# * cfg -- string containing the new working configuration. +#**** + +proc loadCfg { cfg } { + global node_list plot_list link_list canvas_list annotation_list + global g_traffic_flows g_traffic_start_opt g_hook_scripts + global g_view_locked + global g_comments + + # maximum coordinates + set maxX 0 + set maxY 0 + set do_upgrade [upgradeOldConfig cfg] + if { $do_upgrade == "no"} { return } + + # Cleanup first + cleanupGUIState + set class "" + set object "" + foreach entry $cfg { + if {"$class" == ""} { + set class $entry + continue + } elseif {"$object" == ""} { + set object $entry + if {"$class" == "node"} { + lappend node_list $object + } elseif {"$class" == "link"} { + lappend link_list $object + } elseif {"$class" == "canvas"} { + lappend canvas_list $object + } elseif {"$class" == "plot"} { + lappend plot_list $object + } elseif {"$class" == "option"} { + # do nothing + } elseif {"$class" == "traffic"} { ;# save traffic flows + set g_traffic_flows [split [string trim $object] "\n"] + set class ""; set object ""; continue + } elseif {"$class" == "script"} { + # global_script (old config) becomes a runtime hook + set name "runtime_hook.sh" + set script [string trim $object] + lappend g_hook_scripts [list $name 4 $script] ;# 4=RUNTIME_STATE + set class ""; set object ""; continue + } elseif {"$class" == "hook"} { + continue + } elseif {"$class" == "comments"} { + set g_comments [string trim $object] + set class ""; set object ""; continue + } elseif {"$class" == "annotation"} { + lappend annotation_list $object + } else { + puts "configuration parsing error: unknown object class $class" + #exit 1 + } + # create an empty global variable named object for most objects + global $object + set $object {} + continue + } else { + set line [concat $entry] + # uses 'key=value' instead of 'key value' + if { $object == "session" } { + # 'key=value', values with space needs quoting 'key={space val}' + setSessionOptions "" $line + set class "" + set object "" + continue + } + # extracts "field { value }" elements from line + if { [catch { set tmp [llength $line] } e] } { + puts "*** Error with line ('$e'):\n$line" + puts "*** Line will be skipped. This is a Tcl limitation, " + puts "*** consider using XML or fixing with whitespace." + continue + } + while {[llength $line] >= 2} { + set field [lindex $line 0] + if {"$field" == ""} { + set line [lreplace $line 0 0] + continue + } + + # consume first two list elements from line + set value [lindex $line 1] + set line [lreplace $line 0 1] + + if {"$class" == "node"} { + switch -exact -- $field { + type { + lappend $object "type $value" + } + mirror { + lappend $object "mirror $value" + } + model { + lappend $object "model $value" + } + cpu { + lappend $object "cpu {$value}" + } + interface-peer { + lappend $object "interface-peer {$value}" + } + network-config { + set cfg "" + foreach zline [split $value { +}] { + if { [string index "$zline" 0] == " " } { + set zline [string replace "$zline" 0 0] + } + lappend cfg $zline + } + set cfg [lrange $cfg 1 [expr {[llength $cfg] - 2}]] + lappend $object "network-config {$cfg}" + } + custom-enabled { + lappend $object "custom-enabled $value" + } + custom-command { + lappend $object "custom-command {$value}" + } + custom-config { + set cfg "" + set have_config 0 + set ccfg {} + foreach zline [split $value "\n"] { + if { [string index "$zline" 0] == \ + " " } { + # remove leading tab character + set zline [string replace "$zline" 0 0] + } + + # flag for config lines + if { $zline == "config \{" } { + set have_config 1 + # collect custom config lines into list + } elseif { $have_config == 1 } { + lappend ccfg $zline + # add non-config lines + } else { + lappend cfg $zline + } + } + # chop off last brace in config { } block and add it + if { $have_config } { + set ccfg [lrange $ccfg 0 \ + [expr {[llength $ccfg] - 3}]] + lappend cfg [list config $ccfg] + } + #set cfg [lrange $cfg 1 [expr {[llength $cfg] - 2}]] + lappend $object "custom-config {$cfg}" + } + ipsec-enabled { + lappend $object "ipsec-enabled $value" + } + ipsec-config { + set cfg "" + + foreach zline [split $value { +}] { + if { [string index "$zline" 0] == " " } { + set zline [string replace "$zline" 0 0] + } + lappend cfg $zline + } + set cfg [lrange $cfg 1 [expr {[llength $cfg] - 2}]] + lappend $object "ipsec-config {$cfg}" + } + iconcoords { + checkMaxCoords $value maxX maxY + lappend $object "iconcoords {$value}" + } + labelcoords { + checkMaxCoords $value maxX maxY + lappend $object "labelcoords {$value}" + } + canvas { + lappend $object "canvas $value" + } + hidden { + lappend $object "hidden $value" + } + /* { + set comment "$field $value" + foreach c $line { + lappend comment $c + # consume one element from line + set line [lreplace $line 0 0] + if { $c == "*/" } { break } + } + lappend $object "$comment" + } + + custom-pre-config-commands { + # Boeing - custom pre config commands + set cfg "" + foreach zline [split $value { }] { + if { [string index "$zline" 0] == " " } { + set zline [string replace "$zline" 0 0] + } + lappend cfg $zline + } + set cfg [lrange $cfg 1 [expr [llength $cfg] - 2]] + lappend $object "custom-pre-config-commands {$cfg}" + } + custom-post-config-commands { + # Boeing - custom post config commands + set cfg "" + foreach zline [split $value { }] { + if { [string index "$zline" 0] == " " } { + set zline [string replace "$zline" 0 0] + } + lappend cfg $zline + } + set cfg [lrange $cfg 1 [expr [llength $cfg] - 2]] + lappend $object "custom-post-config-commands {$cfg}" + } + custom-image { + # Boeing - custom-image + lappend $object "custom-image $value" + } + ine-config { + # Boeing - INE + set cfg "" + foreach zline [split $value { }] { + if { [string index "$zline" 0] == " " } { + set zline [string replace "$zline" 0 0] + } + lappend cfg $zline + } + set cfg [lrange $cfg 1 [expr [llength $cfg] - 2]] + lappend $object "ine-config {$cfg}" + } + tunnel-peer { + # Boeing - Span tunnels + lappend $object "tunnel-peer {$value}" + } + range { + # Boeing - WLAN range + lappend $object "range $value" + } + bandwidth { + # Boeing - WLAN bandwidth + lappend $object "bandwidth $value" + } + cli-enabled { + puts "Warning: cli-enabled setting is deprecated" + } + delay { + # Boeing - WLAN delay + lappend $object "delay $value" + } + ber { + # Boeing - WLAN BER + lappend $object "ber $value" + } + location { + # Boeing - node location + lappend $object "location $value" + } + os { + # Boeing - node OS + # just ignore it, set at runtime + } + services { + lappend $object "services {$value}" + } + + default { + # Boeing - added warning + puts -nonewline "config file warning: unknown confi" + puts "guration item '$field' ignored for $object" + } + } + } elseif {"$class" == "plot"} { + switch -exact -- $field { + name { + lappend $object "name $value" + } + height { + lappend $object "height $value" + } + width { + lappend $object "width $value" + } + x { + lappend $object "x $value" + } + y { + lappend $object "y $value" + } + color { + lappend $object "color $value" + } + } + } elseif {"$class" == "link"} { + switch -exact -- $field { + nodes { + lappend $object "nodes {$value}" + } + mirror { + lappend $object "mirror $value" + } + bandwidth { + lappend $object "bandwidth $value" + } + delay { + lappend $object "delay $value" + } + ber { + lappend $object "ber $value" + } + duplicate { + lappend $object "duplicate $value" + } + jitter { + # Boeing - jitter + lappend $object "jitter $value" + } + color { + lappend $object "color $value" + } + width { + lappend $object "width $value" + } + default { + # this enables opaque data to be stored along with + # each link (any key is stored) + lappend $object "$field $value" + # Boeing - added warning + #puts -nonewline "config file warning: unknown conf" + #puts "iguration item '$field' ignored for $object" + } + } + } elseif {"$class" == "canvas"} { + switch -exact -- $field { + name { + lappend $object "name {$value}" + } + size { + lappend $object "size {$value}" + } + bkgImage { + lappend $object "wallpaper {$value}" + } + wallpaper { + lappend $object "wallpaper {$value}" + } + wallpaper-style { + lappend $object "wallpaper-style {$value}" + } + scale { + lappend $object "scale {$value}" + } + refpt { + lappend $object "refpt {$value}" + } + } + } elseif {"$class" == "option"} { + setGlobalOption $field $value + } elseif {"$class" == "annotation"} { + switch -exact -- $field { + type { + lappend $object "type $value" + } + iconcoords { + lappend $object "iconcoords {$value}" + } + color { + lappend $object "color $value" + } + border { + lappend $object "border $value" + } + label { + lappend $object "label {$value}" + } + labelcolor { + lappend $object "labelcolor $value" + } + size { + lappend $object "size $value" + } + canvas { + lappend $object "canvas $value" + } + font { + lappend $object "font {$value}" + } + fontfamily { + lappend $object "fontfamily {$value}" + } + fontsize { + lappend $object "fontsize {$value}" + } + effects { + lappend $object "effects {$value}" + } + width { + lappend $object "width $value" + } + rad { + lappend $object "rad $value" + } + } ;# end switch + } elseif {"$class" == "hook"} { + set state_name [split $object :] + if { [llength $state_name] != 2 } { + puts "invalid hook in config file" + continue + } + set state [lindex $state_name 0] + set name [lindex $state_name 1] + set lines [split $entry "\n"] + set lines [lreplace $lines 0 0] ;# chop extra newline + set lines [join $lines "\n"] + set hook [list $name $state $lines] + lappend g_hook_scripts $hook + set line "" ;# exit this while loop + } ;#endif class + } + } + set class "" + set object "" + } + + # + # Hack for comaptibility with old format files (no canvases) + # + if { $canvas_list == "" } { + set curcanvas [newCanvas ""] + foreach node $node_list { + setNodeCanvas $node $curcanvas + } + } + + + # auto resize canvas + set curcanvas [lindex $canvas_list 0] + set newX 0 + set newY 0 + if { $maxX > [lindex [getCanvasSize $curcanvas] 0] } { + set newX [expr {$maxX + 50}] + } + if { $maxY > [lindex [getCanvasSize $curcanvas] 1] } { + set newY [expr {$maxY + 50}] + } + if { $newX > 0 || $newY > 0 } { + if { $newX == 0 } { set newX [lindex [getCanvasSize $curcanvas] 0] } + if { $newY == 0 } { set newY [lindex [getCanvasSize $curcanvas] 1] } + setCanvasSize $curcanvas $newX $newY + } + + # extra upgrade steps + if { $do_upgrade == "yes" } { + upgradeNetworkConfigToServices + } + upgradeConfigRemoveNode0 + upgradeConfigServices + upgradeWlanConfigs +} + +#****f* nodecfg.tcl/newObjectId +# NAME +# newObjectId -- new object Id +# SYNOPSIS +# set obj_id [newObjectId $type] +# FUNCTION +# Returns the Id for a new object of the defined type. Supported types +# are node, link and canvas. The Id is in the form $mark$number. $mark is the +# first letter of the given type and $number is the first available number to +# that can be used for id. +# INPUTS +# * type -- the type of the new object. Can be node, link or canvas. +# RESULT +# * obj_id -- object Id in the form $mark$number. $mark is the +# first letter of the given type and $number is the first available number to +# that can be used for id. +#**** + +proc newObjectId { type } { + global node_list link_list annotation_list canvas_list + + set mark [string range [set type] 0 0] + set id 1 ;# start numbering at 1, not 0 + while {[lsearch [set [set type]_list] "$mark$id"] != -1} { + incr id + } + return $mark$id +} + + + +# Boeing: pick a new link id for temporary newlinks +proc newlinkId { } { + global link_list + set id [newObjectId link] + set mark "l" + set id 0 + + # alllinks contains a list of all existing and new links + set alllinks $link_list + foreach newlink [.c find withtag "newlink"] { + set newlinkname [lindex [.c gettags $newlink] 1] + lappend alllinks $newlinkname + } + + while {[lsearch $alllinks "$mark$id"] != -1 } { + incr id + } + return $mark$id +} + +# Boeing: helper fn to determine canvas size during load +proc checkMaxCoords { str maxXp maxYp } { + upvar 1 $maxXp maxX + upvar 1 $maxYp maxY + set x [lindex $str 0] + set y [lindex $str 1] + if { $x > $maxX } { + set maxX $x + } + if { $y > $maxY } { + set maxY $y + } + if { [llength $str] == 4 } { + set x [lindex $str 2] + set y [lindex $str 3] + if { $x > $maxX } { + set maxX $x + } + if { $y > $maxY } { + set maxY $y + } + } +} + +# Boeing: pick a router for OSPF +proc newRouterId { type node } { + set mark [string range [set type] 0 0] + for { set id 0 } { $node != "$mark$id" } { incr id } { + } + return "0.0.0.${id}" +} +# end Boeing + +# Boeing: load servers.conf file into exec_servers array +proc loadServersConf { } { + global CONFDIR exec_servers DEFAULT_API_PORT + set confname "$CONFDIR/servers.conf" + if { [catch { set f [open "$confname" r] } ] } { + puts "Creating a default $confname" + if { [catch { set f [open "$confname" w+] } ] } { + puts "***Warning: could not create a default $confname file." + return + } + puts $f "core1 192.168.0.2 $DEFAULT_API_PORT" + puts $f "core2 192.168.0.3 $DEFAULT_API_PORT" + close $f + if { [catch { set f [open "$confname" r] } ] } { + return + } + } + + array unset exec_servers + + while { [ gets $f line ] >= 0 } { + if { [string range $line 0 0] == "#" } { continue } ;# skip comments + set l [split $line] ;# parse fields separated by whitespace + set name [lindex $l 0] + set ip [lindex $l 1] + set port [lindex $l 2] + set sock -1 + if { $name == "" } { continue } ;# blank name + # load array of servers + array set exec_servers [list $name [list $ip $port $sock]] + } + close $f +} +# end Boeing + +# Boeing: write servers.conf file from exec_servers array +proc writeServersConf { } { + global CONFDIR exec_servers + set confname "$CONFDIR/servers.conf" + if { [catch { set f [open "$confname" w] } ] } { + puts "***Warning: could not write servers file: $confname" + return + } + + set header "# servers.conf: list of CORE emulation servers for running" + set header "$header remotely." + puts $f $header + foreach server [lsort -dictionary [array names exec_servers]] { + set ip [lindex $exec_servers($server) 0] + set port [lindex $exec_servers($server) 1] + puts $f "$server $ip $port" + } + close $f +} +# end Boeing + +# display the preferences dialog +proc popupPrefs {} { + global EDITORS TERMS + + set wi .core_prefs + catch { destroy $wi } + toplevel $wi + + wm transient $wi . + wm resizable $wi 0 0 + wm title $wi "Preferences" + + global g_prefs g_prefs_old + array set g_prefs_old [array get g_prefs] + + # + # Paths + # + labelframe $wi.dirs -borderwidth 4 -text "Paths" -relief raised + frame $wi.dirs.conf + label $wi.dirs.conf.label -text "Default configuration file path:" + entry $wi.dirs.conf.entry -bg white -width 40 \ + -textvariable g_prefs(default_conf_path) + pack $wi.dirs.conf.label $wi.dirs.conf.entry -side left + pack $wi.dirs.conf -side top -anchor w -padx 4 -pady 4 + + frame $wi.dirs.mru + label $wi.dirs.mru.label -text "Number of recent files to remember:" + entry $wi.dirs.mru.num -bg white -width 3 \ + -textvariable g_prefs(num_recent) + button $wi.dirs.mru.clear -text "Clear recent files" \ + -command "addFileToMrulist \"\"" + pack $wi.dirs.mru.label $wi.dirs.mru.num $wi.dirs.mru.clear -side left + pack $wi.dirs.mru -side top -anchor w -padx 4 -pady 4 + + pack $wi.dirs -side top -fill x + + # + # Window + # + labelframe $wi.win -borderwidth 4 -text "GUI Window" -relief raised + frame $wi.win.win + checkbutton $wi.win.win.savepos -text "remember window position" \ + -variable g_prefs(gui_save_pos) + checkbutton $wi.win.win.savesiz -text "remember window size" \ + -variable g_prefs(gui_save_size) + pack $wi.win.win.savepos $wi.win.win.savesiz -side left -anchor w -padx 4 + pack $wi.win.win -side top -anchor w -padx 4 -pady 4 + + frame $wi.win.a + checkbutton $wi.win.a.snaptogrid -text "snap to grid" \ + -variable g_prefs(gui_snap_grid) + checkbutton $wi.win.a.showtooltips -text "show tooltips" \ + -variable g_prefs(gui_show_tooltips) + pack $wi.win.a.snaptogrid $wi.win.a.showtooltips \ + -side left -anchor w -padx 4 + pack $wi.win.a -side top -anchor w -padx 4 -pady 4 + + frame $wi.win.canv + label $wi.win.canv.label -text "Default canvas size:" + entry $wi.win.canv.x -bg white -width 5 -textvariable g_prefs(gui_canvas_x) + entry $wi.win.canv.y -bg white -width 5 -textvariable g_prefs(gui_canvas_y) + label $wi.win.canv.label2 -text "Default # of canvases:" + entry $wi.win.canv.num -bg white -width 5 \ + -textvariable g_prefs(gui_num_canvases) + pack $wi.win.canv.label $wi.win.canv.x $wi.win.canv.y \ + $wi.win.canv.label2 $wi.win.canv.num \ + -side left -anchor w -padx 4 + pack $wi.win.canv -side top -anchor w -padx 4 -pady 4 + pack $wi.win -side top -fill x + + # + # Programs + # + labelframe $wi.pr -borderwidth 4 -text "Programs" -relief raised + + frame $wi.pr.editor + label $wi.pr.editor.label -text "Text editor:" + set editors [linsert $EDITORS 0 "EDITOR"] + ttk::combobox $wi.pr.editor.combo -width 10 -exportselection 0 \ + -values $editors -textvariable g_prefs(gui_text_editor) + label $wi.pr.editor.label2 -text "Terminal program:" + set terms [linsert $TERMS 0 "TERM"] + ttk::combobox $wi.pr.editor.combo2 -width 20 -exportselection 0 \ + -values $terms -textvariable g_prefs(gui_term_prog) + pack $wi.pr.editor.label $wi.pr.editor.combo -padx 4 -pady 4 -side left + pack $wi.pr.editor.label2 $wi.pr.editor.combo2 -padx 4 -pady 4 -side left + pack $wi.pr.editor -side top -anchor w -padx 4 -pady 4 + + frame $wi.pr.3d + label $wi.pr.3d.label -text "3D GUI command:" + entry $wi.pr.3d.entry -bg white -width 40 -textvariable g_prefs(gui_3d_path) + pack $wi.pr.3d.label $wi.pr.3d.entry -side left -padx 4 -pady 4 + pack $wi.pr.3d -side top -anchor w -padx 4 -pady 4 + + pack $wi.pr -side top -fill x + + # + # Buttons at the bottom + # + frame $wi.bot -borderwidth 0 + button $wi.bot.apply -text "Save" -command "savePrefsFile; destroy $wi" + button $wi.bot.defaults -text "Load defaults" -command initDefaultPrefs + button $wi.bot.cancel -text "Cancel" -command { + global g_prefs g_prefs_old + array set g_prefs [array get g_prefs_old] + destroy .core_prefs + } + pack $wi.bot.cancel $wi.bot.defaults $wi.bot.apply -side right + pack $wi.bot -side bottom -fill x + after 100 { + catch { grab .core_prefs } + } +} + +# initialize preferences array with default values +proc initDefaultPrefs {} { + global g_prefs CONFDIR SBINDIR DEFAULT_REFPT tcl_platform + + # variable expansions must be done here + array set g_prefs [list default_conf_path "$CONFDIR/configs"] + array set g_prefs [list gui_canvas_refpt "$DEFAULT_REFPT"] + if { $tcl_platform(os) == "FreeBSD" } { set shell "/usr/local/bin/bash" + } else { set shell "bash" } + array set g_prefs [list shell $shell] + array set g_prefs [list gui_text_editor [get_text_editor true]] + array set g_prefs [list gui_term_prog [get_term_prog true]] + setDefaultAddrs ipv4 + setDefaultAddrs ipv6 + # preferences will be reordered alphabetically + array set g_prefs { + num_recent 4 + log_path "/tmp/core_logs" + gui_save_pos 0 + gui_save_size 0 + gui_snap_grid 0 + gui_show_tooltips 1 + gui_canvas_x 1000 + gui_canvas_y 750 + gui_canvas_scale 150.0 + gui_num_canvases 1 + gui_3d_path "/usr/local/bin/sdt3d.sh" + } + # add new preferences above; keep this at the end of the file +} + + diff --git a/gui/configs/sample1-bg.gif b/gui/configs/sample1-bg.gif new file mode 100644 index 0000000000000000000000000000000000000000..98344744698658e0fdbc19a8be28f9bf065018c5 GIT binary patch literal 319126 zcmWiei9ZvL|Ho&W9oX93=4dm=-1iw}&bg1=RPGQpqUf{(Bjn7@oFQuDrkc%7nyb(? zQt75tx_o}$-}`@fKVI+W>-lzYv^O;irGw&tZ~p^;VFJ?fq7n+`O6pQ7>Nu>roxYih zp{e!}TN5jnXm?K!4fUoA+!Qj?m-IG29% z67^h4`soyUdUna>>qVK2ii<@}>DTKA%Nq-unrdrrRyW)%ZN6DpeY3N!wXm{1v+`D9 zV{2}0TX}g$Zf$#RdHZNhS7GIyp}M=dwH=Sz+6PNICmTD)$~rksT}4b*FSEP2shiQ( zS<%j7wy|#By3<+F$-CLbtm|erv4$JFE9*K(n|ia0yLlaVOKQ7jx>@z*-7`&n1r2?r z6}{}%-qPxxiJIP_mhPUqo{{>#-kW`Gjs2a?gXK5-?zIk;+#ITG8)SA2R<;aRb@Xw& z`&+vD@AUQ8cMg@d47YR+*54Uy8R~0ozhBsTzxw9=hGupd>t4<6dyQ=mYC0a2-D20a zk1*S~l^vWq7N@d%q`qsUm=X<7FIHM!O<0JRSX8LB@2FLhAGhO#*+WTk6*fRrz za~(r7567nm@6SG%n!YzgA;}*^mdur+S^y1*?!c)$Z-l-+d=9elYXZ>@}R_C8jKYq$vc{=m_>4PWFA1uG@T6#I~^x4?s7vrlh*o%Dj z+RKrR7eg=k)2ka(Yp?D<+u*Kk_C4MlUD}*}u`$20xv=r-;j`DXFE&?KUT?hKoZ!Ei zc=C4b^{chb*K;r4&TYI|e){I~^4p&qTT>t2KH1#*u<>z`|8e!*`^C5KUcddY_WI-c z$M@^&pWeU!GXH9K|MQ>C@4vRb@BRG#>&usafB*aMKis}7AzTfsud8c{O^S}hTAzuG zIeijqb0(e~dO8(=`vn#d0{jQi1pIIQe`Nr$eZXR)C)Y8(f*7#L>kQA#<7Oh)Nx>_; z-12KtZQcX@QLdGFSj)lkt>(r`W5Ur2mjMXU)?CHGsaV<|%BlFYBu6|z)a_xFjw@%x z?CZKq#X+0;fb0x}tf|kYoOq%K-=Wy8`o(Tai5t_#Mlb5wWI>axR}5xyrx-`okVME) z23Z2Pt5ndNDbe}9`C3|N#T9@uY9(E`H~5p!Gv?EDkueO5*=*-rVVWkr5EHJV^rS5A zwzuP}$&&7*Ew5Y09}f1!o_Vj5D?P6)8JFC@oH|q;7&P$mlYgeL-(2#k)XAcTAxYPY zvvKPz$I{P#&5YkJcKJO$t~K=Y3;*8!ng6ughkt#0)0w(c|L_uPd;8VQlNZ%j{{7nH zo_+A8I&i}s03qoUjXggv1-*2U*sPKZZf|J!*NyW6`(~<5zx{9 ze%OjnI{YdYC%G7nm3zn1sbA!P$-AC%hIc8VBoq95o`c*m@3E;0XMJv-Pm(#V z`cUUlXz9zX&1ypZg^vRczu#}{O#FWTYy_I4aT^sqlm_7>bxs{A2jgT#y~@ILzoZw{ zq1AX{m(Gv0Z2kSlt1U%n4KNocV4Wm`+|-*Z8~@ZS7e2qbUI+LUPGPPnx|(v*8*+`E zK38KBy~p*PwFhSPol6oAuWsIWNXWDp-pRJz#7XQ=LUDO)wq*A^!NUFt)3Wtk=U|Rl z%5N}XS{3WHw?V7yqTnq?jESaUCkp!QAda0GV%RqCQ)~+Kick8(Bqd@$$J;*eYoT{& zEMotfKgT9E1$O1(v_@5cwMhD2tG!PsfeahHW4fpzr#WghRnHaboxD>uS%>iP;J|OQ zz*5mT;aCqE9D>U@y)%Q$TmcV|1Vr50>rskWd&0OMHZ|E65x@rvb>-i=Y-Afo&M&7K za!5HTkds4V{$6S4^ztk<3HOR*-MquP>b$?Is|=O3kyD6en1o*ljhjD6^>Vv;O=*@d=qo*8I!Zinh6$9g_-(6dp0K>Onk9baH(eNs zBdo1*#Ms;PS|p{d*gV!}h)RRb^4g4tcXG`-8M4LFXof@q(%FBXD*n=+OJWNIP{_pF zPRWcY`7IR1UjR|U0D1e=sTP=yDu(oo>L)@x14AAQ6|*zEjc~$0MLBYGEb8?YCDB?2 zSnaDJ!zYIbezStV{@I(EClZ0AvHk8NTNh}_wwimc(n=cdSWL^p2ND;vM&s(I+^;O) zg+4eEEZ^M8`Q)a8HJEleyir^{HH-L;vBi4>PEh28RJ7|HwTYYp@VXz-;+50L6(a)C zkcd*DcjBYs%6m+$g{c_tn1w_EKapuJb$j%=?hM{9C7ynJ8|s zWPu5+{XrK!+_obd#|}4(j~xFV6>i!W`|eCff$0A0O-kO3kG7Fmb)M}ln*2t(;bAE| zv~dbw5S6?;_f0^JX}MOtnp)qeqKs-#Z=THVDL$=}u3)0whKONMY*LFL_E&%BFojB5 znA!zrZuyf&h)tddd^hrD zqC-V~A!Y2)-vTQe)6hGYEUm@cdD$12Y~-J?AzDZT(~Znou1k?h`;ml|yF@)Tzk3aj zJ;h8J^To@PDZ;(5;^5U#gn8YRUAAmNY1z8px%~JCH~6CNmqnoGOz9G;kr^4xB*7eU zZ6vUhaYm2sCySGi59Uqhlo62yfmG4`5CBLDM#(4ik7Adwj5}Lx>ulE>ct~B&!Oc#| z7h-+BpXh~t5Pe}v6-a*TMv2(nqYwVvb99Hvi9(-u5!L4%ZTDvMZcifK2c_zcg5RJX zT5Kx0|L4fg4}%EP=#ja6uCzA*ZqztZR9UDyFAah*kfO*Ypj8+YxbG*}|@m6^YUKCu=F9 zm3In!pO4m)cdfRFM{V*FXKRd}NF$RL^yJM?-NCGFxfyX}hOQk?;%$evrBgfK9@$%+ zo6Nk z$83f{ukey`hs&i~-p34AlB17oz+ZFWwYsM^^@aMa5WSC;`y`QWUdo?!DdG&%A7qNu z7IKh++$lnSWy-$f9r&B?H|Gm7&;^MUgN;H2e`1lcWynPWd_N1!v6bV;L(ka$LcyV2+C-5OCcJ5Q+n@9S$O`)T~ro5q^dye zKV#A64FVz|STqz8vIKF)q7prwUDI4$LvkDS!sCk|H#}`m^EG5j$vItOIgO5I(jdG^ z86eJm*Y-k3!iD<+rX8KKL&O75Y=|?R*Ke&WyA>*JZJRwvJF@pp7?PU5(kZ{Bi&z(T zTVz{|L$5BC%1`^@W>tY#QCE2;1s&W1zTV}RdY3Y8Twa4>ud&ojY{Kq+W7w)*;e;zH zQTG*;zADTW2&*tbGGB42Dk7q0R}aT1JYWgob%ndxo+e(xHM$PqLL!h#gr!8Y*@)g= z%q$vlH_cbPtc3FhDV>6pX2{BwAzyAIMy*6r@Lb`p zxN(_krm@c}2`oVZe&6a)lPBgjK%|x|d^1t_Ru7oO&;7Y}nph;km^C$}85IB$=Y?h!m=q0Et?lANHOmQLInS3mbt`&fV zC0f}`NI0BJgyn@eylrym{-)g+g1v@)4`)2UJ5;S6<(bZn6+h)Mkd$vsjak&rJM z!#7$Cx%d}$T@&MRnJ1Y38u4c`>c67+owM@HqeYqNLV_{*hk9J6%Bzm{#4e%=6x0rm zcpyg7khpE=TAGNgWAttOLF_N{??ekkc@xqR@r-}aJNa<$UHFXI@u>|*LCMIZqUMor z7S(TJAX$jgAHwhQO$N4wSD1)3Pn_Y`A|4HQWE-@=KWY3`c%PI7Z(yl*zbbw81HNgk zeZDZD!xt6x%8}7IQ$X1^GFx_4vCI?LEXB-husm5ic@GhYyaXQs<39o>=%R z9(99{?Dj+AsPGv$mOmCNzogp77jorm-$)j|#sc=C;8A3?%n)@`9^I~3W9GMQhq&az z7I0t`-MJyrQLLd2faY|;_+5|_1;O{yGbSQCQ0jL7Eu7b2skLx)s$_z+=XK7p;Qy!~ z&s`0=BDhD_xvxdg6pL~8xTDfatYZlo|3p+-9g;5Agml3P0%GxZ6OZV^0kHJ%xI0*hJ78ns}^xsK(18_NiN3xQfIn_AgUBophN^J9RbQZqEIMoQ6bzz&L7A>Yi1ly zl}*Kq7kFN1#0@m!(qJoTB9neik4>WevSTM2U2n)5iwHM6ua>U&z`nLR-seJM&2e$R zuZ-S3`~V9vX9>Mv4^Fe8OdH`vHsY-SLT~EkoB?8i4L!oX@>&3~iB@4gxQWHNH?L#tGDt5}Mx7=!XH?3Ld$Y>E~a;QL-KUs?iP1y=`q%pxc3%*SNkg z0^LyazQqpO6wtJi(B{IQ*9*F$vWzMwXp_zkaBRd#QbcTHFcIQ-O5sFpAE8l;r1eyR)rGrTMA z$A&08PGJpe{RYYIGD|*_5q^ovOfke3s^Rs_0esnk!u&SgxSt(Mg^&Wa$rt*Gy69qk zYm0|mBnQ;+_Di?B9tZ#fDkGtfY^`H>`1?GA2 z%>u;jG5uaWdZ&$Tu!KgP{~xy2agxu}3zipPm-56Ne)!h?cn4Hv0WI1EbMtEn9>Qn& zT226193L{dkP&u4xW?+Nz1(T)LRCEMo-)xO{w(SUw))`Pa>Ngv>yl0dhGOV%mqqRM z6>lV4?IhQJ$i`>XT)Z@)eQWGwn_H6KT~%|Kbs7*l57Yg2PUX~uLFjoWHvRDW35b1| z*NpRC)EU1V=Dv@X&_;q&kQT=_lG$}8uPP&F6ODD6DiP_y5F<@Gr$iK??~8hwRZ;aK zX7Bg6FZ?LG*c)X*zd%$SO}W2ntOp5y{@nOpaHRgL<8iOxqA`urE|;HE5aT(pwQmLa z&P^XKH-0C2fy!P2TV5*1UO-#>~H*I&fAsrZzgwZNLH*iv`m>ZgP8l&z!@^6yjP?!ZYLpZ!R8a z-3EH{!CGv;!=FL29c?zc;8b1YcQRs)r+mB+^A06KT7}oM{CB$GU5{_=crB71yOjDI zs^vpQg|xkF1LM=k)nS}}oE$QLGH6I_s5{GJMF-gl&f%2b7=WE)rfc&BW);c%;afo6 zn{Ty4f^OV2fEQ|TBEp*L?LZo+UuICNn_QU@NZcp<kehZbDU7PZYNiJ=;x!`md1` znFK5}+aIRRgMkw2H-2FQ&`zjxs~ua}VhQ45vmr8KtA)??a@G4#~~i{J=^qM$f+N1;Z)X4e~aL0 zCMppys-+5*^b9+&P#DLXdWk#Qy{+&~{_^ZZ)`ru0&gVYlWGAEmg{lWg8l9g^}%`3_h&*3o&e!;#(!v7RMh?&q~6(J_}lx}ts#mT zB<00JB0nN(D_1-j;%ewn+P}*k@yR(io-PBSm$fEJ$=CiR3Z8oSQM9+S|3QKAD_OsDmIBQz` zvu?*C6~#&ut@Sbr9=fcPWEB5mwEXDJxl>z9W0*Q^%wW=5n=9zXOi@*_8e*^&xafv$ z%aoMw0-Z$InULLjL(djG^f#-CbFK942-FSirV2V=^Zgt=nEdH6BE$6<%yuEqtw`n5 z=a7L|_(A(iQe_$*%)^!$asgi>rYcF7*OFj)jwaRkEBlb=s}KFJrRi1!Rb0NuKJGZy z_eMqJ^V;x(#?Zx3>x$mEwu=uS3c-7);*;(FR*Y9*jF#`&4}2BBytwOH8=NI1G40)K zc{J_P0Ry|?Y&Gv~ex0JAlm78xlBlhzT9tG~Eu+Z8bZS%_ZS!tZ%&YC<$1YdN7%q|+*C}Z3 zAh#1SXrq|5nXj%`r;ak^Gx4ZQx!CYr<--?Ra_xZca`IX~GVxA_6hj$#Ms3lZOsm74 z?@{fnr06W86p=kto2SeP=AW9{2anB4JZAWhq%7c&eoG7&ikF;j}y ziU9Br_A}lVjRhXXzea>3V++s@&Uk^Yrp^Tq+I2lT-!|9m4ap|&j<1jg^3mY$oe9GC zU8io}li!6V36#cVAJwOHeP5p9h3`JcPG0VL7;<&@qu+e?-=5VD*agWvl_kC{!wiB> zMiSc?p!^$}LdMD`;Q9o-L7`<9mI5}P%!wMoXuP1f1@^s2MqD7&DU(~m5GI_Q?BkSY zELcN}@fv9^Q#|ZE_G-MV+KU^8$@pAnk9RSuxiiGf@LVk=sQj6&)zHFI9QaAhmc{?> zOReAWcM<2GZ=2-Xv;-C+%LN0u^`^XitMHAKFTBx`7^>$rtv+gBH{13xtP*~dmskE{IAn>jpHU@-6I(|eZ%(2Exj@{-N#388WYOCOWr_7%Z= zwNbF&g~g%M+yhb&OlY)B-F5Qkxgkuf*N3rztza4Dvtmbn>56?GY*4(XYX4w8L+UsH zm8_b;PEhr$ncc}eV_KF2U-GzukRnDQ2Ul>^UO5GD=f!scl-<=JU$RGH{? zJ_>fo$_{%4Gb-n;3o(M#!F~FHm=Jb`xm}ppjX-*)ZynINT~YjY8ZxT+oAe!)03xoR zD!0kZaAsn~&w9`>3m%;FPUOp174HVWhIqml8&?x=|*TdWcX)zLnJ1i?oO-_uL3?zs3!nQh39ax%URglRc= zt_8hVFdDLbSVhT#SX#4kqDAa=-CkkL(BF&(qAI44dy`#yz9LS1rz zQak|UEb4q8pP-$g+&$m1Lx8QoRv^9k2L09w& z%}L%|7qnLPpj?4k926&}j327TJs!D!F~vsy>sFS<@O)8Xbc6gFAj8E{%3R$AXRGW~ zki~Y`7pkNHrJEA%Fx2RBJ6jI2as}pyVCAkIZDZJ=RA423%OSq4R$j!qM0b9~ z*;j}zY{3E=rLskglR!x8rOm-42g*hew7s*j^w_xw{UY2$T3({0pK8!PZl(`ZS~IO5#{%++Dd~*72|9qpN2^A zg3-?Y9lxDU21mC0=bkEYGrw^uNJ8^BGBGbmFYAsXkgrkm{y|&gYL5#UPG}ZD9==BF zc&steq1kmsuT%UVCMLnc2`%-d`O0gEjuTAFJ1fXC4;Kh zUMCMZAmYAu&x8fFb`g=ifKNF?!$2())F<)uZ_zEEAkumaBIf)I zq{Z$Yrn}$10o9aYSUlf<3*L~(20#Ksc5oH)aG8?Y3h@tJrkeeS-D5Z>E{%TMb3R zK3qxW%A8v{DqWR7B3>&kxaXB5+EB) zln^Z>qf^#42a11LWlHC}nO%Slh?7*)hkL13)|${SKW9w}SXlH+vHT}|C8?@WNPsjr z;b@tl+4d}g8ls(xnTNR<*2}8zQS`ApHXbl*B$W(SW7?p~?SkFSB)JEqtNur}n?Z2| zvW%J7t)8Az-{W-AXH84DcBgml|0~h4iZLS97>TlvIZDdE^jW`u6pTC@O&7xA)XhiN zgAzRI*Ie5j>7?}g!8cb2RqmvUW!i;&u28}qnQEJ@-Iq>7Ch*h0B~PnFua7%b72wu9*$bD zuFBa$u`dOJH3C3=Pj%0Cf~`bONAfKR{FS$*TW(XW48@~!g zB{hsFg+R~2`Z@wp(HDV^4AeywG*x!LIf-pu>JF zLib#$8s=zw^$RNR2%cbozh%+Qp3$vPMJ+7QRTR)ysd{liKAXO%mnIdtGOM$Bw+F7t^zZe3EoyQBZoiB)K0g9cmw+RbClN2%Y78?Pu zV)NPC^6KEoZPXTfaI4?MonOu{kTlPyIRgYBM?uwkL!JC=XXl~a*h76!b@YG@;gmbQ zPbDlvZ`fdT4<2p2AfP)UOc>!FzL-!}eUvt;LHCRqo(Rtd;Vlxx8H~F!qJ`yG6{Q@% z>Lyg-uWe^1XZ7znNy7K>4YM{d{5s5yBPDZDPj#Rj6)5^!23|%!oUtO*F{yQCAzy0= zUOb@8|4`N^T7Gtqrp?SeXWRO?} zy#jJ?3KGkwTk=dI@#>Ir3Z~5X+$6NAtv41=7r>cVPqry3)vOcy=5}WjW}xTxTH6)# zaaQt<($M_`6!c6;MoZSs*!+xBOv0m7u;q5^Miw<;lJ3f;8$YWu8BSMDCxbEQJQSpc@4Kku2Pe#%dIrNAj@PklVja#e z4VMld7Q(aQo{e)FKt|H^gVLa+B#ZcLT5*VjLq!AXb$|OF)A2V`_m9x&zd5Xx{qFNi zVi|jO$47YI*X*gAO6PG|qObaa5~2qE<R(pj-tc`fhSj#l?VZDw!&AQwVH~wYDhyQzttw9R zXE;eyqWd974q@0l$g&lrzu&;()b!z*BYzDH|20exco_b7)^K{o37d_^a+ZUSnXcM2 zuY6mUw^8x)=ou2}37Je!;)BFs(2MxT{1oAc=K^Q)A%UiZWk5zBqa|+7NFB?K)KIX| zr2`XylM!vnx{&Y{K^rVsx{>(uoqAGuKE|I@Yi|8WlPXh2X{XLE?~nB2QR>?HoCGW+ z(j&viO0c3$F!-o{@Sk*QWV%ZTu~xB0hCz*xhInkH8$Z*y_nWSaI;azxZ3DoW`lIFN zi%b&SO!y2!0_A6nyUV*lyI@<*0MI{*Xl2YJOSGsQTO@L@96KVE=}(bUYq#;xdYBC^ z&l1v))b#a+$!*zu9Thcao41QmEjV}_3FMj$vh1W$IbfIQ+aCUcBpFalKRqzT!;3)= z>QBE*srBJ_5F9~=TR;;3Q~Wul-xTkOcZfzU-RZ;64=)}HZoTu5!#g5<~~ zd&+4o$fY})OP84MQN*1baK|R5EWMPBZYYlEPM?+DpDgiI?gwfJ8D#TKML7#6sumUm z&8{dNYuyr+(<@ZpLi>8#g5rv5$VQu4#N&MhNtDNHDu6>ataM z2}BI=;ONoZlPQqp6ydN>mBG3c>lC?VG9ke{J&r8MxJ(Uy+UK3`a*o`a@J(KNx0jG+ z91Uu#1>TZM0XA71U$D%-=wqTPZ4$5zwIS?NurOduQCkEF;;Wnf5hm!q=j6@?3*;bC zBWjlo@-HS+WtqUEWbgzd=N^?y(gp3n>8_@=ufz|Y;BkNdm3lL*1WN?Th1&UAFpSHJ zmbn64A+W*}`r%&bt~d6UKM1K0n&Uh1xHbiuGiA_jfSmY!KYC;P#}~7cUTrjgOOIdB+Ut3q6Y% zuRj?v>!fkQ3Z-WB&HW2qZ|DZW$4|hZ zDIUkG8C$QD6)s5sFMIQY%g`<@hV+_8Mz2d;n~O@BTKTe#)8U%tgcGLU4(~opZwfe3 zm2;O^gc-7eL;!M5m8D<154o9x@s6K13Rby942UA^*SxK<+y*k z4?zUk6U!95rf+lrvW~ie$ha`W-lH7cmSv64#8^Rs`57Jruo||FpbKf5hKB2cqry?= z;{{Y#rdcx0r&d;`EAot1z_R536-@^v69lZ1=A5atrz+75 zP@$w=-IrvBM;`c*q8PBJ@b9}0(;db~mq4kscsYMj6Uoh|NZWrSZdX!^uErGDRf%C+ z+l?lH;(X7z5xfyg;LXR<0Cmx81RAwVFrWsA*7f%e5itcH-0?)K6^t8B0!db{hkazJ zdT)*vlEuYKH#@4eR$jAN7#up4xg+z^G`jkv|A;Ua!Fe zYVpVQW}>vs8{Z2nM~~=Kw0eqaNS&3D1_E)O&2D#|ieyDgJrK4`=w6T&h%WhL<}71| zy|~{jkX-blBD)qL+OF{;DGi$9f1Drw5WStzW1YSt>wdkaL%}b2JXWlOb;xz&(5d5Y z4;C`Mr(-IEF$sk+txFZ6n#(Z^$eAsw_DbU6Z%cfW@(MdkdxcFnIuxalw- zr(fB8KZH*vM3V`(dXrWFM~#j zj+wztP$h?i64bgZNkRzUUy3f=`l+rV?Ld3e3k?Ldd&r{T>3?@V2p3bz+rj z?Q#i4yGmc3#9&*8q=bR+ygvcv6yJ>HJ+5!cw`>tpG^iF+20K~sM>1iw?3$- z2it1sIREjj@$W;QxX>h@XG*;K1&C2f6zr8QNqy59qr4mzK{5lhHRa!yxF*w4Tme4xEQxeL4x6AbIW*{o`BLVO>8%KJnPib&JW zrgA3nOS3WbFdo(@aiO0Addsggjqknl?#1PcvL+iNML+j152d``>QME&UghRD&~dC% z=g`5wzl^^>$$#?Y`F~g5Jbb%$DY8TFcv5-`kAaC|XNU?d?p;B-gmvE=vhPcX869(#4Ne^(Po*ld9eUx|HZei}DZQSxN4-}*o4N!&G$ z9#U{xIT}`&DHoQRb8bs;0+-a!vX)3P40x4AHB}^OKVTQRnXfRhqLgMpzV@k(zSRar@qZjN|yoll8mi1@D2fT})_YEGwY}BTqmYm^fkW+(MSxR5!;?*pNrIMHM~^pVRH3 zZwQf{0OOBOXm|I}eSG-5aUtlO(T$+E(YkUh>!Mi(%G%0dE$OOO9Y%Jd zClrE#KCiRGU1hL^luo_cnD%V6E!_Y4ZG3*@c;ZZ?9s?Ciu7{j;jV|z!ON*X(ewF_# z;P~Y?H~SQ_rw4Xk>^|uGaV+g`!G9-zZ9P44^|IjHmt)CWRv1zm6CKdPkvM%$P&ws{ zew4IlB*75-Z)<`=F7w2yhvUXv-dO2*p??M1;=1XXNAAy{gHnN&!*1ru0>2NTKaY8Iq@GA->`faBt~m!g9j&aF z#9A7)$Aa-vMP4@y8%NqA$@?J!IM@hKiKmeqjF+;zW_K{wh$^2HD)}|Pm}NiKnn)J% zs;-w-6UfpGFHz55WJ&gRHx-tpdYx>>! zti;{mmAw&UF)laEx;jL-ro!bRSjrv!zFFk??7U=9i@dn9TEp}RRdO|MV2$h~C zUxM{K!=nr@lM17*IE4rj%3eiQNjrIxc6wb`?3xN#G!40(;YPVIZD*2mxQfXQBOWF5 zc>ssf#;2%{ZtiPeo%cG5END>fPjfIO%-}4x7i#pgnnGITid?!gBvR6En!-lwx)&-m zSU5!as*7Yr1J&G+N{lT#nG?LI_?S#EN?_QC(OKCCTS6pST7q=moV(`k5h>=AHJZ>| zs_?Ta6jf&>po$@4-ht+C#~f^i;)c+jvdh=41bKBk4B@w_aTby?j!$ALl>^*Iz$rbH2Y> zz4d1KsfWizzAeZ#C0sBXu9JUeRk~sR&Qb1JevtUxhVhc0j#2Mol)|9d!EDg=Q-k(~ zUxVyST@xPce9r-!2bY{3q2mjs0+odRYmEdPkTFy%J0ZCx}?Gz=V zTtmeN@~2bi;>WkC1Y4qLyT2V_P~dtBP8m_fPf~#5`{i(!e&zScEhv z=P-0lTdbAZcoI!(6!#N5Rtdn7#ZQ_<9qkr$UjktC)e6y|+R;WbE>lP>rw&Ccv-#1@ zJB{?oI6?~M{Ok?^eMXZ-Qf|w7ofeS074XUQ?V>xThrICCHuEAm7bL4Y6Z}$XnPN}BWMLi#x0qj0TY`+y>VKgN zII*p~w1qvqsYm_@B=q6_-}%n?0Lgm779_mumBa6x;U8*31dGK$Vl0g|d*YTa6 z-0kZbCS`Ry&c6;QrJ^N6$lahc-*Ijq=PCf;Iykz&jUoa?zy>1JU z8K@IZIhMmCim~S&A%N;R6d`eI`B`GpN*ba+?eiuhog5^)V)dhiA|1>*PzE@Nuy)cE zJkEm^*#cesp=tcgD?DO&0#GPIK-D%=k~Afe;~sl2_@AcKg{t5`DUTTh-xR!2fwQuPJrc$yj2D6u7=Art@*eY(jP3m3#)4zs6v=2x zag2>wKHQvN%Ks#_eh+Tm4?3_bU@*yL2ykCX1PAn2oxu8~yX09=1<~?TYya}Dm;wpd zRULn!gRiZ>A%x#kgg&ShUXef;>`~xbY-L*;{0`uNCIC9hQEKOyY)2@La2d)Accl4v zJ(~(!t`Q$@OtLYe+puk2744e5os`91TWjmC_L#07IKEWeTI+WuQYVJ1vq^<-6BQ$~ zIhta>b8E{xfX0T4r6taTFq(}gMZ$J}#GJ&zdjOTZsoT}GM_6l^64wF+`YO(m6Q?JZ zjYw=4%T5-_vBk7VHYQ45kSicP#;Ewxh_1MeNfJ%N;($=ss7l1r;VrIXs`cYhev#R# z>Qb&MlVh^PwOoptA=sFZsZMHkPXRa?c|r7Pj$-u8w>ThrDo9+i^ewq`aO(QjCE4RE z=`ypE(kj_EqLo6o#==BO55G}AnY=UVW%DSA!25aNwyFlxKa;h6Y*qwr4*_QIepF5E+PNANn&Pti{ROI zs!$6NZ|i_58YBhjpUhHve4R&0LHI4EO9jY~1Yg6D!Bc*)cgLh}yfu_a zShe#tMJ0IprzWJ&W%(u;W)ymR9LsvDNSE?)bmYUPMN_V0Q>@!yjp7oU#1~JDCTSMC zL|7Hg6WFABX=>4PGG!?#Z>wT9jvp~-t#PIYAlc`ywVCX zAkV`t38-7l8_ind*CXazhIPH8`&$=m&nm&ygrab`Ql?U zY{hN%w62n&9U%cbepj1RaUX316`$Ey5?Q7DHb|W$bL#YKO$w0E&(WcSEO|DT`E-3I&@+eX zm2yodj{2+xd>lYiT|p%{%Jw;C_4LU4rH$oj65oQYkMabokTpwfXzJ;<-#dEU&;{u;@6c&^P1B>XuF-iOGId z*E@ckJ=a7MQjm`{oV7L-uaS^>p_!AWTt%yH6Fet;NWTQgJ{sf94pN&w0_o!dmc6f51_a$@o+m$IRs>q z#5F0i5lEycnvUv|Y|NvD4w?d6%K7rIIuT=ZxO%a2Q=BQ2+B`R+P)1d2M7Xf%z1~7f z|R=B3FfQ=sbq{zP*G zl>btsQ23-_pGcm7Y*MKV7NcqfJiyvMxILmgDS#D+5;d1$&&5a3Iv1jGX^D^I$kv}o zk589FtzEQb+v{K7hQ6uUnohWVIpx)qV~b|g=Pjq>@2C@pWf}ZQViJ?BOm?S%<*_^> zCYti!{g$gP$YrA6K4jT$u6|dyHIlB@+XOjP#+dJTyot&}FEdb0s%U|{*Ms)ak%}^i zr1au3*UJqiy^u>v4l=Hfa84ewE0tKns-X7kUy845Zht}MQ(Dfke5Q#X)56_xndA<< zpY&uz3XEa(;$m0T$P@(+pkbA_w?eZIe%dEvT_cr$Q9kN5=B9F4v9va9iX)#Ec0hm$^>tMbfPN5 zTGhh6H_e*!*%Q)iW8W0$$t&!e1gmLw$z3gIipX_d5>?AbzwlpD8C?pwOdTa=CAocC zFRm;x40>{Vtnc5L|D~XT{djBnjLKuu8M2I)1H{Uf;jrd7k^epYQd#J~yN|Kp``$$uBV3Lq0i2bq0uN9a3Ky!o^0aX2YUqhUgD6 z6mYBGlPRiy_)DAkuok98k&~tJKgm4I`cjx2yfJFwJuaV|wc=}(I)2>r1(`0B>+hKB zdo=1Y`R{?00Q=Pza} zF>`A?>_-wHAgJ+8)_hF{b}-|4FXoFtBp5OkLdQ#r}_%vJpoMDcFer)jKHP@Y~c-#3IQJ?*-rfcV(Xmue!;|)=`jEQ?EA^V`QFE0 zU^5GNzvQb;0!g@pYG%yNSnEb{Gh3+z?s{XuON9`zHA)G;N>(Sm$rf!eX?pWu!CzU| z<`8KZv<0+ojRh^)PCdU59I>5BwT<}r*+PMFWZ4SoI=?(b5~vP7y737(3pT5px_2?R zw+W)hJc!XBjcL4l`mFV?bbw0qM}rMlrHr(Lw6upC(=IOHrjBa@UWh(tSiKd{&=D~Z zJ_R2Dsg1nU-?CM~-?f|>KC}juQX4j}8wPZWo|l~O^?rOdNi2EVPOnO!y#Ri&Wb3>J zntWnMj75!FRO>`}>+x-22p>-KH%;A2nF+GxSY;C2<%9wy@6~8o(HE>arO5G{ zGVjaj*KX(g#$=OUpH5GS)bc&0^<1~H|J$7tzmiOhW!h?ND`zBlKPtX_d_E%|`|T1M zq?XUeZ87&Ztbo^&6XhBI!9M(#9v6gy@BT>o{=cFWjHio^^TGp+=f~Hp`7$9X#vt^!~lTw=v1R>$zrCvUd)v{u-fN(DUnz zezxOMdiO%jUE0!>xmQe~&jaUqq2k6VCV(ligK4#;7BMUrcAos#l|*Ye01`2uE#<9> zvA`m_&%}hkO|rmn_-rXGC6F|g%IpVy&q+P^ap6$Jg$P$1DfI17)`24pmr}mHpSvM` z?LtkE;y>dHAG)u*UjBV@B!~k2=f$3T=*xx_Saoz`Xk@zOl@DjF!|9tXxZ}QED!J!& zo!1%?-=&Nrh$U@~if3mbFqNu;ap%g}U* zF~)u=t-BReXo?P4!#J+(v7OoE&pcIiOBIXs=IDTxiNM0wyz8Q-u(nkZ48Hp0qRwKr zYGJ{W`6{wv(IyQQYe6YhD}K%aqYnzrUDYmqAZ`T5+<0*QP0Bx?Hv(gwS^o+%R+GU6 z2Pc|U3&?UQroN^2OVu%bK0X)Q&WRYTBQ!>BpbX-`IUou-tD zD4t9DJgk^HtM$Hy-bl_Us)88W=4jVMMCsgWk7^5GLIi|=%D?vZH=24QlHwBH=6ER8jKz|zvhMQ?CL(&q774!sxP z$)}WH8;1A`sWKZUOQ1BX@dhx42}rv#$a7>#oUck(g4vm8F;bKHHuc~i+c3bn3fuqs zqZ?}rT|ZHiBJO`#a1HtI`^$skq-g#A^rD}uw~y@o93>4UO{V=s-#Gn?1M1&7OMbdL zn#SnLl}Cmu{^OKsp3nr>S6fwDp+C;HYeJoI8kSkVgRb^AxqgUB#{QX|E9~>jQ+^!f zr2KlM*xWFinsi;B+X~H#lb~py$#Jz_!&W#+WFNH)lh9cjY0mbRJ_upqBb~}b_InKn z7Mb=;|Go4%`fTQ5=_zz198#lH(rTN$u3KO{PBr^uy)b{Ynk`k7_A z)9ZZf`Qp>=c`-vli-NeHJRK)DR9#h?=$dA_N#77#{(f_>OJ;E~@{TJ0K768G=1Do# zH5|{B{cHD`uGQ<0USCa?42~NSQ+s3m%@WgQyL+>9tG=lcPK!QmlHmn5B%=6sm3#XC z^=4MVz0e$+(ICBt7_(*p2r0tYPL&kn(_^D_Hi=Fu;Ri7I^J!739XLJpR~ z{l8|GXSOy4<&=s2C!%z@K-d5T%XM{W>paH}z zi?`snIaizz-}Ii#+y!J_SUM0e>GAw>`_s(zCT74*7nsr|5>VTvrZB`N^4uH_sLbQy zx2o9J$&oPt5$-bCB%-ZDBvZp)?>4VQDIi$Dcd)^Si(QFkYm6|U4 zdCro%wjy;MV6QoLL7kecBK7wfJEEM#b<9B2CFP#^@`>L=$9Gvr^_J2ft1OF!)P2DG zZ|Ast&kFO_?gxyDReJpl;Fdc^P5W_Rnw=0pyu}}a>Nu4>-nt91uy?=VV@|g9voTh9 z9q+Zfp3B*1o-L$6kW19zjv7uzPB0hMs2`z~|T#f}W6Z*wC?E~relKJm z&?PelzS@ASc_I)sdf}rlXyA_j814SQhbHVC9iAELpFG193rc$5wZQo_PCgv);}6t2 zxj05&5HBj3P3SF&Mq2){VL^V1SicGVObf2vD{zG{F@Ky!t-ov+;&npT>(^@{yW@9gKTGTA)n+YfTfGCviHp-c!A-f^G@t4{y*+~@%57Bn*T zR{{;gJw?uqzV)^8t(t;GqTqa6_+C)=&7fF@)^|cE%YlQa@S)i@WE52#eizP;tV)_( zh-o|Zy69=yJ9Wy6?h`?jNn-;n;?y6gO1{Q5e~|l*2H{JS%4~Qc3>v*u6j7#CPg(&; zL@oruR6p5I`@Qpe_(Jh=;_1fj_iO&u4*=U8X8u zEHvV}q{LSHuD@gKG3Bfc*K7=>{sPPG+2TyTNWQp!Xld&}k`0o|JX4qp(I@x7Ti>NK zdz&`NeLyUWA@OwxcivSZ;iHl^F^K|+J-?+{^Q4Jt=Ma>h?c223$a$YUWV$h=ba=$h zOYQyu#Gz14%6v$=YD5}Ba9u2Po6@&yK62E2VNijGZo_p4$NaqXe(FhBz5Q;G|8h?iu>!vl9 z7+?U*(RmvrA{3j<5b?%~DR3v{fWN&Tqb_|4%{)7$(H@Bn(}`{Qx%lDd3ay5u63{9> zCg-fN*LU`>!ujAIT2*YV!m_V{>7xIQAVV8+G}}g}r5yH5Rx0}D_g*uOBgi7b&d+9q z|LgOrXpD@|&-mlb4la8aJ%2Xl@YpNrf!znRhQi*2xJ44;}L zS*)DIVqo@>x(jLqcFW_}pS%k7M&FIgBTtG90_Alz6}7J`v=50SlI83^VtFn9%N8w~ z2-At$^ym~sVTx1+h(|TT{J%zU+P4q~_T3A5WC7|G%oh28iFBl4FWo%&4P+qo{(ykn zK66Vf4JbcPR$3q{EdiA`xJvJs2Y!(U!pFsBIpPb;ZI@h?*dD|UvI2cnDLw1Z$Iw0H zsbfkr->fG;8}5QG#SUGPJH7gFwM)rW3TR@ZC1#N8vOb2Fq1+I6qA|vX-*L$8j3Jrx z#bQwm*!g88H3FPPQ+mR^_Yfv)uhzFl>P=YwP#AtcEZnlG81siL@q|3U^OU1-U9dM@ zI@g@6$<9@3QZ}LYpNJ`5B;KE~`>fIE_N&S8g_AnR{$;oNSx$36?q~qszNKR&fA0zY zz1EH#RM%G+QNgG}Bam-p-Z3P~+Ya2ai&9jWwb6mOVawO#A3;;MBV2D$!@2BjL8kLCa|cvQkrcA4VyWta=&fVnrZlN@VfV%JMX*T(64s97nHF@!m(y~o9CEu49+I80h#N%$)Jr$I z9&U`GW}_tb46#p~@Lx7^Az{!Z{AD-K&_8{M+_FEe^;sn_Om(c0a4A{W z7Zj$>p2*LynkmxKoHZ4_p{vpRcu!n4^%-mdfDKzF4h|(zWX_p5VxDoEM(`T6O!bk* zn3WCc=7^{*<`l+@pnSKmW_>?(m5gQTM~2FDqZ9{2W&Y6G_Te%&+B%i+>hO63Hlg_6 zu&b@y@aE<4+Utj!T-vSox^OF8=|LM=p8NR?veG;=>C4mBMgsX9lw1vbJ>f1_*nU_q zUe0<>vdi~$L`uao&DeTdqw@@rq;n=2F-7=2RL;%5n9%zaf}{}{(a2Z!B4bC$9~07LgMgAQexE1A`n}bx%n4FEK&1g4 zsk&`N>6;1L0ro3~ShFFp4B1to=;#wQHtDYBKI7*<5yEqV%qW)%gjhSiSTG@Io`HJz0l5+B zWh9E`xrOh2vcWJcClpq4GS(LlD;S<6@EU;>zpAZ)ca{RuamFJYq4c8>-LTP~hft;iUXZemJv@Zv}&W-%1b0^kmX z+f5K^D&v|c;irZP3g&lk2~2@rJI;+Dxg`|+8med>PW(i092t@!aaRWH>W>CF8Qqhq z2$#kK70AHs;1TJq{)B@=jg>-IsTB+_UFqzg=Vp^Z<%CBCK6E=hu8De_+dR<>Z`tow z4^b}M3sa$hQ~+o3bq549wA}E_f(iioZiI9?fZB^cx#Fa@A^hJ8KPm{1stbhZE{l)h zQA@%KELQIeWT(Wy^C^SSP^B7{TaV;TJ!#Xqx$d>bDDL!|yO+~`ClxWYR}@0)o9<2x zAF%xI;XwUNzE6mOJLF9D#%)b8ipBy5wUVhN8|rcuJn zDG%*~AO5}}^EmC?AWfuid~I4)o({y7ai!yEieH(S!!$T@S!wUr&^=00jeL-uN)Y;j z*=v%vLMF4ejgQM;hN&&fFAzrFhAK2IOXa#=3R?T}`peP7Lzm3&Df6+-dWAM0n*0a$D(cFkdDmXGz-OSJZaI}XvsQ-; zfCZ{TKkgTM4Hy|2Yw+xT!m|s}Q35qW>>-0!*xLn%_QIz=z36##indwmaQm(fJp!hu zia#D{2a0&}i`#(hD%RlD>OFqaqx)nB0Z>89n}I65x!?^{jYf>G`{s&XO;5Cx7VJ7v zPtN$<&cZ(Asaa5=?Na7#5k2P7<@}cA7cc zbwmYnPh_5VS<*h_`E}hY!ES8e!pZ{o{t1uTyL+z&&)(2^VO39Go)f(M z&cQ;bjL!Xd_n=nubD8E*&cM}Q9-F^4D|8N~Af#`Ha49Y3{R8$fr71^OKE8T%^{V6_ zd*#8fMFdwenmP zFToAfT$uh&Pvz)+Ku5XYE7h5b^eW)EoK=Brj=Y0_oTV5yP_3eHyaeZ1AK$a=P^&dn z>>yK@zims1X(c%3W-f(B)g?Uq8M)V(+wC0Ibf(HVy7{zFODo4AY@n^BTyAo`DLJhD zLyNorWEGyKL{hkih+l1C3da}v3Vx-plIa?g$z zHCEjja+~x%k@(!_(d%hH|Ko;Z{{ANjX>I{gTEhq_GBVUYC^u+4-=raQ&2O4?TXM zgNa8SH{gCA7J~0%$1T>_tF`oHYIETk1^YCFW?hxaD9ZEo?3B^7$0v`P-(_H3h_9J` z%C5EfjxKs{cZR2=F492=t*TgxOY-gm^l!a~mnb5&I$ zm3M(yh1WAp49C@vS-19eh+EL8oc!9)qy3tMR98re|ijcat(Bjbc!IRE=THohw z)z}nDWmAD_o1DE&lL_a5RHFs>u@R!`Fd7!#Ky9&*#naGj)heXqdmf@-Mu^B~jauN5V>ny=TQC zvlL7qW60*YRCc*SnCqsIM1GxmSJH`SV%NOnXbm4E180i&Q-OAWO!EeVGIZ+uvlj~A zm5;imMNV)g49dtz7n@MH?S!q){`}^`7EAWd49tOZer9k@y<%v>$t28><+3PN5j(-oo)rcs70XFFT@9zN12))N`KunhaOHI6AHrJtKwRk+*#>g-Mh`XP5! zZYc_8(aG$-V=k$f0j@fju$)V+T9NQd7NE9fbK_^y5_Z@QdPWBj|MbOKH~b#aJItNE zg1L@9H~U(Xw4GBRh-+S%`%44O)HLj0#ymRRAgkbDXpV2!96!BCu8_(xTO5M=EkP7| z?m?_(M{MUZQ9V;S)bY;1fgF43Z1atyB z4QELt(xC#B4?WE$GVJiF^=QX~kA-e`y_+94@;t=@ZR;IcJ7lJE>|#l_a_@LqhI`3$ zbfWN>+>*A4`5~8#LdvJGL*FU5yF9<%rTM0LM7x|>yq}x3j~t{JswhQ4o^HKf&Dj-r z+tc0bN4Tv{r*(;qGRL&qxgGPr+WvZ?%`&QfcHrX0rygw|)fS*Hn(s>Kts(pZXB(@k zE414`JSRHxV_21)9LK|BjbbZHa*5i-aRW;K5C$q`xAbuGmAhwHOk{L>&%LY*_Ps>{IwbC-m1zFX7~W+ z1}Z$Mz{o@=bAEFRa+P-yu7{(D6Xp5_n^hGa0EtIx=a5${Bx$jC$1MiQdB-lPNEXee zsi^^>&ReX;9Y&T(Zn4EbJ>G}YD~=M4$f7O_LsHz05ee+IhYJbl@kWLoj z$;IrffeTzSJpt6QZcRl)rc5%$#&uB4&LdewrRGoNz@XT*9Eh8S0(rv8$7NIQ6+WBN zO2epzg5}^W{W?AY6Yn&PM{K7l+pt`m5h0RGypZ4zAMjQK6oofiFf)LTL%7={O~Tah zpmm8IW=B`-g^h?_D?w5lXRE0F>UrWZ_MM!B3vCpgrMcjbdwy}&VK=;Wh68(_yZ$r= zD%%k4w^i=lJ*T!j(g|?z`cKC9p`~72ihZNGk3?XvfK#JXhS&FWb0h*)<$UsPHQ!Y@ z`Z{&CzkPQkG2nHc?aIP1J8#TX=y}BqV_Wn}XF}1y*kDh)&a$ys%)2R66f}8E?Wp@$ z;3F*!whIQL8PTcou4(AYQzp7hBJVV{nH|udXXY?d8M&7+Z2F|j$jWw_mISV(GeK)# zLJJGa@<)0*e&>Jll9nqS)qX*PnW%!+#EfA^J#O9WicekQf|XA9wT?|CgtA;Y9kHiw zB8^zvc|KGYB4ta2Kr@EeFJ9kIEF8^~N)H%2+G_93^<^GDdyJZ9v?|v#3n5yPPhDMG zg{3%+SuDC0B@L z+!nZi4SUmqIm_2GAC0}l0dozZ8EjZQ8-q=NB~Ue^F}hkSKIlYfrjO>mFjWgCEhUUH z)|{~3s2j^7Mu2o7p;8$Dka81@g~u>w(>|MN?q!nWDTdFz>;R5B*X;v?@7WG1GUwL_JKQPiAw@>&~5jP}l@3R}A zSC%*=&{2P(XE?4Gsisva@Oy0({KnodFe{D}t}||rIoF*Dj)&4X&@i^xzQyjxywQ{z zHTz$KO@MSI-wAAZ45XqVe(d!0m~y{Y#*&IoY7>OSgHZ60FaWWVf$$?3C;n>`%ysea z!YTg<{V^}QOZk7x;0PO8!k3}WBEAbz>;owK;RE>0e2WU{B}QsG7p;0Mv>$^$z8xyv zl~P-YGChV$ikNaaJugyOt8P!LIcUwe1AQhtdo9~l|>U^z)IfZB6I zq2}b}iAv-i`_yfEL9DO%3LklsF8YeBeA5_F#SpzN6s;tQmI|TgcnCHJ*-I7cq$#c5 z^D^*>Hs?z!@?fM;Ofe5Ka|~+vOmfTDZ`D>q6bJt^BI1(&v z>&#giY~Li7#CB9!Ru9|?yuH4^7N{ZxabG|V{IB?i=Cqb)dhuaI&qdg&WT_)IUgdkE zFa}0sl;!_PqxNqjO`efsC5YZuPH!HK5AfIFmcyjpXB0`RtB^#`VeASqa2EZDD+lUI zs^1vR44(JBZG=h4hP9~JG5qyxA@)sPx=R1nEX?cq;c*lIiNM6?lxy;u+OF%) zZ=m+}SO*Pw9Vj#>1p;%Yi}q7RzGIzUEf%EDNl=-HN`_-R&G6*U^67Pr>h!uV7AIU7 zFm+ET5f7O)gFURm1(Pp~v>JUeb(&1#$`FtXybJHxNMAmb%z!@yrerJ_IY@?wGbJ9; zQ6W4qRRR@zA$g*wu<}J=AQ=||09^uz-`pwsU$WV+38TOvR39I;7g1x-i9rfmr6aYG z%_1#DOtAryQ$GXM!$u8kAzxyUb3#-F3DiZBs4A9DVp?Jv_yo`g)_E!ACFYU*dHjv62sAUa2#BHkh zRUv9$ZOfcP_3{)sTNd8c%73~<)w>}|JcvOrOc5)(FOAHjA3ImBLK(Wc-`-2|>4*~o zMOQj3n9=AkmGeTNN|=TYgEEb+fD5cQv&xNu8t=Q|aeUBiQ;}9YrW z!q);K_UCQv>O_v?N6{KM5N=3-pT}shczdvn5?B%*p2Y~U1lFdiOUhSf2O1e#w-QI8 z+RrTD3@>;h!;yihmK}-9HLdf*)h}QJMgFZrT&PQI%24&wdYY2+x@$;1bjIV8`Y)p?OM_%*=8?waf=Z9;BcfkFjjD`GCQ~i$2|gYvVq|aq@ol;bLSYjU?#Dx8%9{cTW@R7 zla7s@3(W0{JvM0*`} zEyo7u5L9DeS6*Iq?T%j7KCGBJ3P#1u}7yp9?iE&_lbl+=ju=C$xlB*h94ytkTT0#5PXAKVM_bT}$ z?JS$8lmQTJnGs3cHz*6?2~@SG$Mp3-QeKAz3D&bLvU?{+(@6KH5n1F2D+lv%jSN$5 zOOV!}kpuFpuI`J3|MlPP|B$h94%(63#>8(4&E;P=(3upY*Pi*un3ucZA5_pjYdj^IicdK$mLh`nKlxd|beByncm z-pMFR$h{>Sa_EF66B7zMz*L17g}~s^!u1du!6`&xvJ{knnrl+SkxeZ zvUR&R5tc}YongdpnQ1`wE0ghRE~LZTmTGK}j_yt!H7Z`eRvS4$*0+QwkjQzXb%u6< z!6x(zt#^DD>)t#_8*j{*?$0~~Q9lO|b^jXMf&^vQcpc$@{#Bg%aSJq%4NAmNZYP}3 zF{x8M73lApz?n~r+KCSqyAyhGvi@sUVv}lmRiN5?Jw>MzsYVHcM&VRj-K&UT2fC;w zUnJ&6@^~4p3EubNqv)*;_03Z%Njy=%c~W-CiSi_@x@XSDv)IdF{V_C<`#c2Q5&9G9 z`nbvM-1~y?H1=QgRCzu0Ek4v>3p7SLu)$8Y{4vW5H(tb`_BKeOs(_O(_~)J9+{axG zzi~sMoCj`i0&DR_9#PTP{uSFH0e*AP3Uq+NtOOX)_q`mbMmxBL7thca-=U)bl9xmV z#do&Wr!Q_;ZUGArS6@MF)D(l;FO-yHF6{3k6*M8_BSTZu)M`=X1_Qk)P(9#yvV zQOzSA_OGspW?50TtxRK86cga~ZVdfKNppe<%+TIV_i)MwACqMgeRk@o50n9@BT=D6 z=S0tOK$$0q7wquWj?h8mDyML^9eNSO-jvBJDCDtljNt$F7Y`2K{MdGL{P z^H(@ck%88I6`ooQzN(PZVjL+^AHU}E^e%5>*)PS0iy{3kuqUiuceU^g_fqIRwiGe`f$nd4M-OFxEyKNe75f z7l1Z^6MP_y22c>9;In^lbO4+W*x`YJbigJb0I>mFwh@;n0l<9ViVXnB0M0N_PkFNE zyAa7j^I9dy+^b^X5VP%I5cv2mX;aOP)`N|LQ$2*><$b;d0o^`St0e#FHgUN!jQ+n=BPQ3#p06 zTy5qCH`)n+xoQ^C|wAhPY61IY}3re(I*GyPV0@r%o=#}o!W25=< zGC>-St~ZW(2XB;|NTiLQuHdHxE)>XGu+~iGRL0SD<7Zwwtv{Ae2sgi`{ua3>>rrc- z|E;}0JZ!ek!HMyS(AFrD&ecj86= zw>!%ek8R9xkc)2FD^74Bwv}nfon7FHC`MD`?bv1;d}^CLh^yaicG&f4f$60|R)P6S zKG;d&8Ak9(H$BQuOmDt#Sd!M-mQX`OpdzQVZdQMtjo}P_og_Bf?E|vyo;}pqvQYby z1C7}#)feRk#yq2S?RUJrk2Pa!Y3-u0TAjJ=lOmeUKbz;Anx!KBf-ipm?ng_LKJOoP z!Cs>(WcI_VSnQRb5pri(b7R?3ZnIqU*oJ#aR`x=_&7C*j_EqEO)GevtY`F6RQoW zJ>DXUg?m=Mj?>u`nUvK+*LQt&2@K$9si(uXnv{n*A*0M8b2|%X5Xeo(MLyw9C~@9P z1a8EeExoU$^M+vMRVTK?BdAm_QH}PSZ<=Pf={5QoV_!P+rg}~HWWLjapuDi@HIWp$ojPnaBJ~;$>>I6pXwfmpAt?`;Y{N3hPnJro`>e%1s{~ok8 z-0IJkNB0R;jKS#j4SBnKU0CsT6t`XMwe3!yj`-l#!`i9AAAQFRtUh<0EgIRKdQs4| zXS(t9b}{t#0;}-lezYt4;_<8?-{dv5-a>IC`H9UdYa+$8k)5$P+j+{j9z?PtDhi4!jj)cU|lX@tH{!LC-I0pVef%Mr*_a&?KSs9!|&yGR7ES zJOJ>64G{kXWPnGyl|)({4+Ta~D=xY!S~2(*8=-)dKY2G`R%L z52I4VO-Xi#FU_*NUxULp`!XkI3F0Z7)sw3VHx9aH8l3@LPtpcLH7SH#_n8jK4h}@T zl?rzmY&>u7h|5|k!7lT=4p(=NhulqMwE^AYwSEj(<6u_ zt|0^~VziOQw-sR z{O?$hoSnZ2AsZJeZarLz{N8Ds^>6E!o5aP<&vJHIJ8rivU)R!hFWphxrW5-}e)^3Bmd`wR?zZ^JkgYXM3nal}H{ z0Lxv@ZD(D85_lF1d^ZFXogJ>89?2jnqzGLH+NWnRFp?2dL}P)W_|se<@n+eTUUTe8 zqKD)71k)pi0g}?Y7(le#&M8k4NOkbj5c}4`BY&2q_osbEB|~DtYAfP<+2h(&3547J zO$4a*9@_({y=KXLloIU~){j8cf**+KNP7)!W6GHrB5U4Nyq~Qa)*CwnD7YeQGJ3b*N?C{ zq#*DT025IELdqD>*eBn3>z|ms<6BM@_XK*%K+TWw{fI+$`Szc3=aUrVx?XH(4%T@S zd#=B0CnGbmxr4RmoD^FOhvxbmEUp)eSyV;q$B28JNm-SN7g2dw#kadwLrXK+4@knO zPkP*G}08NvtUpE4{z%^w!aw8{3CDo|QZn$J9RyB+i#cLgJy5jfuM7mU! zF#Qs56`r1)b;wNliN*UzCqJ|rTTaBkPngZLes$+)a`h3gNg2+>Wl{F>hDbc1{s=EU z9G7J$1S(a5B1q6GQK-94j>m7C8hUFDrgtMj%P$YY;R8Q0a&7rccYvAVp-UHs7kTdrubk7c{b$2#8707oL@+=Au_JeS(tlO+~pVl;GcAZWP$gGcLE zIg$aGU@@l)S;pooL?ufnbD>KbnbUp?n{Ey$TH!RnwJopJ_Kmt&7Ti&KTZLJjFZ|ag z%{&V6y&A0J1s+{QjL|JB5-p~1qb9rB5He5^qvM^PFNn8%4(P}+?)=BILsqo&4YQ*@ zZ(!@^twp1bu>t(w0JPb1F5+cj%QSl~wR9yl&rDeQR4d(Z7wFA_p215w?pa9lE=o;) zgIQ5BdW>^#S(Gj<74*Sto6I4b>;jWnko*KI)0TM~%QE4B)rAT}s)In|L6EIz%MzdQ>PoK+9b5j9uW^P)M!xD5OgH>fJ@%GKZA%85FpyT!kiCIM1haI$ zoiZOKrSZuK1Ko(Us$~)`{Ueir?+rDy4eX1YePg>DGr4@0#^$NEX7 zPdh+*7|3A>mX)DB$k5^^L(+zyu5avgNS&8%R}n&NBF)2&$6t43u&ha$=UR_k+{!%N zD&=C>RJ7ydNVp!odn|y!gxVe|zobEZF}oS;?55M^liMYO z0aY0;>}M|78O}JSes)GSn_*z?d^|dfW|O(CEfwgLwQtEif@7X$WZ7~vT#8GgxUep3 zQVfyjGYi(hf%a9E`q`{=dsQMAlU?_$s{3{Q64!ALUb_OM_&2(0+==k2=yZWMEcL(4 zjs3q9`Fc{X+0XP&I#714 zMm_-Ob>EcB2dc^pk=W zTQJ1TvN3yD=T5;Urk0U*Ee2vp0!ovB|9e^b7f51)dS8k;HpwcYtu-J5@okF|FI776 z|MmSK7JW!zzi=u*NEEL8w0M&|`pPnQkz=42HKL5srk7QW-rcvrF zJ+(E1N`hVx^i&P?@M@~7fBIcTEgr{b)YF0Yw*lshknRAMf1c?*U;q#B^5jjBIH}EM z7m;;KzE`xC?^GIklKV1OuXR{!b9a?rm8X=i=eVoQ?XGa0070Tbow!@Tg8fcP+8Y1m zwU}XLe<&deM7GH=%+K)I(1)=Z&4&OI7~su_Ky)&+`P`D9`C;!VLlB1PgR`aV{FMeC zecbi(AMz^;283vBVB=r^oimq{CQf)fGEhJ3tfnL$KYQ;Ln^oHPb}uE(d@)xy3IdHz z*I=jJunaPx%@UkZQnv&jW?8`gbWJHRL8$w4o6~o_@RXTXNQWn4^VaqgM z?UCzwc+Cf%LV&m|^Td<*SE#@=Ck%wlyFIk;TE(PkUw-~pu`Ea;c>n3`zYb@sGG20X z>r5#Rv)`ywO50|yU84XEv+E4$>5XjV>%9Fd04lZ)8HN{U+KT$_f9l`#y!TboXO^m> zoP;z^W>_o1<#W_;sKFnURkv7|?>@38EiC`!4K|}eG~PHbGW{19z%rTo!=Vaj*O*18 zQ>JD2^hI=hoQfwh9*7MmO&sJn$WX|c-j6FJvSG2=p?lGb`wJ`swSoQlz5A=xGui~y zB^jhC1YKcg9AKw&MPI1uXQ>6RB-r~sxD<9?&&KAoY-Nh9pOdKDVtVCrx(9p4op#2L zuIWLC_V#7CV@^)Ze6Av{+WNC>_!!S=IV;Y1^K5N;fxA^O(BHQ0?oZRF=DE)?gm*@W zhuNL9+B{QEs~|qV%Vx0=lkQ3vaQ6Xm+;7Trohv7Dz()PXsL@-f7*Bxa9|69N7YaCJcQGp}{h`A(2$E)OL7unlZf2 zoOx~Cn@K82`y>16RLAlD$97kKSO_Kd8YIXaQIWU*O2(Y|f{A;R3yepXPG4K&1vDXU zUAHYhNLP8Wth+Bo*6wZ8tx^b$BXak8mnIB=}(&M8c^{&#r8 z$7BbQAsvhOR}WA4zcfGVNKI3o*l^u~gl1Rlr}IThZ*;a{k@ycT^z;>eG5db;vz`3s zCpu9sU>T>I#5D(b|GJko@@CYWU}3c6w-0h9QsMi~ZVtp2>UWVU@~``$sFzOmT-d0p zwD;||f7LEnFL9%?GbCCeNluf_qB5YpO;Bf<>x6phZpN|i(qDgf>&qL5jzi;G%X%w( zdz4%=W`sf6ueXAp5npbGJ$UB4*Y|%E-Dg-*jsFI4RAhsIii()v#F=}w02i)8Q`0iT znLBq@)+4yU95~a|!kJo`nw6E6;5IW{rDcU9)7GQ5$K&tM|IK-Su5+Dpo%22S_jBhc zx91@J02pPK>lB;jCMfK5aIN9pd%`n0g_aE~+WziZ>Zf&g8x8DQ zOOP^}oWd5_P&0ofssW|!Kf5A+yYMZU$R}?L-?<)D+?;%!culaC{!NU|(P@VX_&e4o z<)KOG6GD}p^$i>u3giBWjovQ0%=Qvcft>YeMdpCbqd(swI4SgK!u9s=AOT+8I4MM#|LCkt~vXOFXGR2c=F+r^jEkI_%^= zzGY=lX;KKgx#(IMOR@+OQA!4Uuq0}vq;jcrXgG`OwsZT~{stdoCGOtIMi0#%rt_n7 zn#y7aW$bf3<|E=_LSoj@hj`DD`D*K@mv$w;9jk*Iq#Dk5txpvrmD($>+`jB2P+`PBtpg(o}Kr#KS>$S9mmqVwO>0Z&Hr{_NA|wZ;Mu=S~ z+pozv*kDIIx8XSrL{!=wY9H`?ID|+x4}Xz={LAVSMe``4ho=;`lwcbf_15dQtG}`L z-NXl5W9P13+bS>vYtWgjt0wYphU1hjrtz&lDe!iZQt$|YAo7RQ=EikTf>dL6zjMk? z7zlF4Ck1F+#wYfXG*lCMI&%uF+eyKkU0ZV@9MLD6*Qeq_>0q994yWOi+igjRG-IH1 z2mVBdRA5@-cwG)Ylh2dYjcjB!6vXsUHMqOjoJQ_=9Y^wC0%0~xpdmD}a3=#zmpJ=h z1g#X2j3b>2m${J*eA{#6*GYet{Xe(s)av ztVa8-t&rG#5yPa^N`W*i{jUk=>|vWFSCi=tyC-gxO?_m?gWq@$i`OmoMRt>X4LV+6 z>ynH1A730HC3mo#%6)o*j^X^*`nH{MmNh0@c|5HjaZ_gvU1-s*VE9B@^J{+* z1kRK}&_LNh57TRF37PUnE1Hino-wi}d%}v3e)m7#U|G=@!`e~~iF3x?SxB0GFsE~d z`V6P{Fs92zk>%Y<(|X5^a?(0Khv|WjLq7{8CW2UiZA$52gAL{|E~?eQsi7soV#j=V zM|Pkrs=gLbjWsdcp3KRPZNv>@G;75tRC)t#xkr<3H9oOY~4x?B@*F5YYR5(6srwnd#fX1``T zQ!uV+rwSV52wawUv~N|qd3oN=W}ZX-_Tp<{mT<%;sVDfX4sB{r9V~*n?B%`6slEy~A+3qVKSuRi@p+JeuI zcMMA3MkbKr`I4unPbwjVM`8^L|u(B6j)#5;_Q7=ff(J-;3fkVhyc=zOeR%nc~v=;HG z5=7{2>UvJyaEWKtJ*-ziwmwV`#r$|xoRGO=?^@DhZYod}sw6!Et&>a+x*{OOlaA8jB; z7E&&2q-DLBMPAaB;qh5f6~34YKQbd!7?@KxcwdLwp3~^-5vrGcK*T^D)eMCAzzcLsGJ8$Tle9E^H9{}9A7#P$CSDER#xTD@AlSEjobruVEZ_Apb)BFwB8SwdMpgS4CwvUtV zztr7L6?r%Wn-?D0Um2TZr1^F&!G}jc1!TxrkK~wlbt2Vp#j2dW69|L81^Ywtgh?P6 zl?u4zldD9qCGJ!R{z+AXVRW1aBj~Y^{iQn~&$qQ;_%qoVS&+cuYK!Tht3|TWEeCGp zSQ0=#E8T)*fLndo1`gj&R zSZsBC`7vx?h36F?CWJKj+~dI+jHW0Q9W zJM$YnX6_^YQH1|lj2HHFtPO1qOfC4VAQ@7uDIt-qQ@ z#Kg3&-?0lhJx{|24`e%x6>e|fgy(FrZe&Tafb`*%s`#>(2TAB&; z6yIgxnlnZ#0)#y+qO>Nd->-OoGb)a@id(6}ckc=YM@PGpdG~8C^1nehfP~*j&x>f7 z?6apuY2`mheU9p3n$vL+Vd7KXu%?kBzIM%@Ys4f%KpL?Gw;T1?hlOJj5|HdX2-_e% z;0DF3BfsXxUz+Lzj2-iP70jATIvfZ4xZ z=}(P6X~}=u*uU)&plopsXs{Q!)3juw*TKeJ2uWwX_yp^Xus0D2-8jld#4O|8{q*GN zoy>w_H7OFBhSd@vl!d!&s_fEa{Te;ii!YV4*zdUwHYGwMNnt=QNNuAan*;jP3i^b+ zEI~J8yA@(2-~c3VC4ER|qyc^npq4)j>+z5O8{(q}Caer$1Eh4aoZEg)DE5uYQP{8< z7QQ0`M_{;>zmb1T8VC+kb>Q)SWU&6?axhK$a$D-i`pLL&KIiUh#mEau_% zY?ELjFZrc**`Yg;&~QDHY?mY+Q+;DnPGgqzgAdRRrTUJ&K)t6EEPTVS&%o`*VCOgw z&!VLUak=Cp58jR(eD&gDsE?aKmAAVh5dl^OI?G$IB34E>Tc|^dG)*8Im%lhn8duqS z5MNQFs(0Sn!VNzlMeL=fbh;9KDhLwk@M}Ia>-qPOg(uy)x35t(BBdu)mS}`p+S)6P z`hv+B;f&8w?cm^FSq&lawa;0v*xB{TJN!}#YhS-*yH#dzJTi?=A9ofVvbjckoR!Hz z4mcC1PdW|Ii39W3g(zNzx{b0U(BGtnX6rp*vLnklrr)ZDJsJ?Gv0DJ&R$$2~XYL#C zTWylIdXd=`v+SQ1vd&tz@gi5e5@ugoPFj%G6A5DJ>dhrM1yI}&i$Px-V%J#TJ~9KOA-h$yOv zA0>WWHW(2tS7+!!IpR2l+v*Pb_$2;{#R&X>_G3ha(c;&7T`yhz?Ut3s1=&s3j4L` z6uld6IY+aclQs+O*Nd?qfyh`ZWSTM9J9;zZ70A1YE$oMxk_IHJ_GlZ2HS0@(Hog&) zQ%_zm(6lOx;4#vA*K#nME{c7Esse?r_3bLv?)kUwsLd*nxQF6c`vTU-l6<7YMx@|# z6uiyl$bA38d!yyS@XE9|4qZO-1RCL^Hm_Ip`0U943>RIa1Vjmz+bdM}BQ-PgLi86S z>6aUCHF9fIzCvMNxw$j?;@pTxa91QpR8+Yj=lq|iW<0MV?W)Q`WYJ117?&3)>sqS3 zdifcHpEJU5^Ulsvx|Puc3!rHxSD!U>fpA}5Jk3AiAN7@UAuZ))i|^aJj@*;Cp22+c zkWXG-o;eWcikF&v--5V!WrK*Yn$_qX!#>ce+`cS>;nrnH9uT=I2wd@k+;EscX;wgV zkgl|0cjW}!_-T-IofP@vpz*d1o8WGM2e63|QnwR8q(13uuYZl{=V!Qm#O7*W ziw~4E+8s0=2dax}pDZX_@*Gf_1B0mphO+jK0a=e1=F+tfj+P-F_DEY39IRR@wUIK~ zbm|kF)bkE|Yg_tp zg?O4D6rk=*) z6%gF_Ums9Xmn@Wd}6xj1b~?hwhFp20FX!`7x8bGGlO(_!rQ0*-UYRAWqs1 z`%h&RQG4+!C(q|pS!DX{R*Dbx5dK$C9xBkOC8PRkMDe++0=bxEO|3Nf5td5%)V7n? z|86htOp}gEeeRjq{3_O^;+jB_9EANg@*jY9V#(s(`>z`92DUtVKgdAV%!eb&DGM8HKE)*4#5-}kTO1-MmNonugg%nJqG?cl3VgUzi% zj9nJ^>$ zqsDDtwezJG1w%&I_d!^HFW@(KHW=$>Z!;i7 zar)FvGTn#`E9MSw%BLOBex{*p1rsWg(a@wS#1Q72lLl2966^wG{N4R+c=rxpi~je= zL#uchOQuzuJ?KNE%CP{lUdM_?23s?rCCq`Q#T>%_ZBVVDR2vn3SSY*vtKlsG9ZfG> z60#^2_Z^T$ZkJq3SG3dsLUp9D`M(TQ2MktMB@;ILc>9WrxpjHW0q34GEG}RGFPR#O zpbC(}>daU%!7gotsAiYC;NEC%5~NxX{j4Wpx^v8_P}4GxaJM;h%qnKCWy5mb~p_8FLdAPAAu^*;zmfcSo&;j#0v=AX6GwCi#Zs)p)$ta1OC3 zt}<}b_8F3JD_S15;^)OzsfZPo#NKq8Aj+o<^lbjZp=z@f*RS~}_P}QDJ6*NVp{E+Y z>ch^uy1NcHI9jJldlKl@O~d!&z3~nsB9HQZhDT|jn{V*@JI$YXg{2)XrQC!$5vEMm zL0vKPBc$!UzTYk8bmgIty&e*GV4@2AXZxE0-tP3*nWKMX$9hz{B0*2633}%%EDrbm z?A_WPdpRh*93j+3{B!QVU&W-Cm-pGmj;VAI5=W?DYVwpM9DQi704T{p{>l=FxOU_2=UTBH5iNRnugSapnKA{5^;8vAqe8nDvhbvjV2-v@8E? zJ=UrIpKm^9SSxl$r!t_UDl}Iu*wg9aF?OAkGAVinyN}rd1&u^z)io=-Hl_vTXoZ^$ zs2k4^gq5d0&ZDR@itcDZvJk3UyZ4XerF*@yA%{V8o5{h)rT+>ol|VoWQ*`S{iz(NA zci)y$d^syPc~KnuN&*1@dD<5|znGxnrpE5Z&( zaTUiqGA(T&UCU^WID&?ZUr`t|PM59F8kSAs+M-5-g#8`L4jqT)`c zw}_jR2(OV>IYSR1g#+XC{N|y2JAI>DZSm3MUsf=`rZT_8)`F`tWg!6aM2X+VmWoV357v@a_ewZt|Q<>NzhW zzpV^@I0C|caB~pI>TGddj610ks?cQNNAg;b_P%vDdnaL$b0mKQm&f4Mv32H)AY)3!-{iyR1IR1@Vl&tbFEGbnxe)2bi)94e#-TzoPI>Q)m(HqiK z>3nhgc4bMQ`%vuBm-uk~rOq=|n;{Wg|Dz(d^ZDKa3-#h^he}$tK)e;`Arev}RzXIP z?M3iW29=ESw4vHaCp^YXE@chZ1TdXF$jKD7OA=but!8LD3(XiYCIRXM2JkswO~{7i6Xr*`E19yO(75 z+tA>JJh@av9mFwS2!NA|?9|9CIAUgJ)M8%w`*s?i(P}`U!Wh)NOf`iVu<2ln{5fI! zKiZGI15DaoYWXtJkSx`#Y<-(#K5Pf1;sJiTvTq?;Bi>I&4HuL<;ValSD}6hDdPWnH ztL6c|@N-Pt@g?RlqS@%MA@^8dWK|K*36|o@T>`sZGajVO+0Q z);sMPYAeZ9oD4l zo_YXLMyY2__QTr8dqp|ksW6RJBOQl2M%GgM$y?t4wh`*(q>7p?9WmvHvtWbT%Q|qw% zm8-|j3NY#7OwAEC+GvAyczFetq6J~4{g#(W@;r3EJvp=Ir9q%3HBS(z`f|tL0q|Lj zzH^%JMk8mS@pOv8!6q0Y>YVB*82^n zUb~U@dA03V{GH>PkMRb_CNNdKLA|l`Oy&1{nd=+CH^l=d(w#xC?n2-8iM@U^QsExE zlKmhc#STJ5J??eKR$rFIV|KNFS;zL#W@ecu@Pn3%AkBmL~C@jn&c0N+`i$r41=kJ}uZI&A zS6Mq2U~288`K{0ct8KWiu1yr`4Wgrci_uGV2mu$N{FJcLtailw`KP^*Id6GelC_i32jn>RYvF(nXRF zoZztIsgE_k%W9{_tafcTlb=bP$3EbId*4HCo}r#u_nKDz=e79#y&^F(9);E2L`LOU z1A+=%oe}>~5Wn5fTN`po?#FxHYA%J#Z5EJAxJG6)B8-OC{|I)^z@<>Y6U$g%DeMp* zts5Y@-<2>Mo9XBSyck ziMSfpT|t2)ivxTG7(iVT<6U~aK&?UQ6wpz%G7Gmos&=$!S0xEo$x`v9Dp~IbyYn%t z6vWRyd8?H_8BumXt)~iF1lKX@?E)Hw^wO$P)FP+(kMq8B0@bYkKO33&UPQ~Y8%}{9 z`{GFn+XN3VFL(Cg6?$CbzTeAqZ!KkCFn%caOn|PPaS(3jqEb!B)NNf`_b62hSG*rd zPN)x^3Dqm*Lx!T1KG#Ws9aP2o1a#H`X<6kMsT+yTB0`va%>l!~E*bNY7y4S>w~^kV zBQJ1aNLtt%c37~ODO({1iZhUH;s+b;D|i|1GckH?DbQs9o)sdgyALECmjt5TPK!gF z6Mq~6VE2ckr-UjX%f~w+J`|Sw?~k@J(=j73UAsS!ZmU?MVA4<+8Dy05x3VXmrM&w zRo>JeOCCaKO=9m)?~2qh!PJx1C_U%I-~mJA$WotE0!F3Y=rqWfW3J!h@^4Ex8ZL$X zN!j;HEIA?um z3D=;+5mC(=3KM>n?vS5MgqFG5b5HpflWI2_PBl|?u8Lix zivErr*cXR&4#uiPl;~vd)V&K%?-3}rk<=Qgh)ZLx51nVSwztkY1*u+=QfXXN+{%E~ zP&{h-py5o=r9=pVsy|sr5l2xJ91b+rDO+UGq(8_%+@cAmzQ`R<;6y4MKtfqeN-ims93vMo zZDlF6XhEYOa&f)ICSJ?OF0!?j4D{R0ZKb|zl|`T#fCn~)L5bgVH)0j4|5zpLqs z;WKtYRD*eUALb`T_C3X*1*L3+iSX8tn1y?`ix2MopHC=vGtlN*<>6a$7p89x$p)$T4@aagEu3{%~RQ873{UR|=hwptrUqbTVi13;I% z#$EaEY(sY{9WGK?3j*p0zRj>=9#B<`rD7i~T?%ZYD{f6J>8qh-51OaQPi(!oWa0Y7 z%AvVTbI+#cODmUnl2-N@P*~?anv3tvQgwy>4}a%LWA02A%a&2MU)|_7;toF0jGW{! z{rf5TNh1hn2@Mq}SCn{u5qoMXQgyybE)vc!D$@`squ1rdykq$3nYYov3zN0Xz*z)} zbkmM;9m8;3$+6=CGk)3FE8C;=jGFS%E2BV1%n@CE4}9Mezh2MP(irr1 zJZ2$@VF~Si@JjYSi}^dN{Y*2jXDJf#ac5xM9a;$QH9)W=zCF~BRQNnt(Gn$y;d;Yl z>mzh4mO^w*EgW!)+0%Bf>dD^4f*Kmx0x=p8zNantkug7Z1EB@|SQrW3d791%2 zTvK>;%_8zXJ+%U;7v2-cgw>lzX`a_A{G!mHt<|7#P;)t1?9X@d+bKog){8D480*l) z|192-%7<@Fs)pCOGPZ;Ey%oQ-0mi?oAeCCEMGUu#ybhks&9rhjA^*$vYrkD1%Q=zt zx5hc?PZ~YkK{b8gbca+zH}F}+a6%CBe_5ofPW}fH68Cj4+KEX@(j{_!X8)B$o%tOy zy&@h?Qc1 z27fek{qd0H3LbK&lw#we+VeTPM3Pc{5H47tx)y|WVydqRRO=Tde6Zby-yQ<1NN=A0 z#>%Ciln|@*5@q`vB(lTxH+b3bcg({4i1d8R^2=SO{)oj;CO7qvQat zQQA#$yThy8v-0ji(~-MpPI|2sc=3HKE#!PYQgRtW?k;H+)sTQt_LsFjj7<j!i%=$?VkoekxRMRb!yM-8c5v-e5lT0r2dK^=agcW?mMvGGjv5qV*VjNb}*h#>j99 zMcW_vJu_td?}@hOnj7-TpS;A`jbTPxl{cggnfpPqk7=GR;9tWl=469 z%9nSc^Di&V$JuLRQ5sm|Fih_qm~Y?f0E*>C)A>5M_IufSSxw_tee!rxR91$(&7was zNbx%pZN@V5Y##muIGWvD0Mqn&CiWfzZLR?dd_^RV?8WztBX>CkI!^uDGh%F-7#wk8 z526w^b`<>#ApBHiSZ3gD{8Te;I&W^(6nJ}en};c`(QKojrrOJ_j+e)@XC7aY+cjt0 zw-NRWu#d#Tk{9KAGr(ySV13~G+Sf|&m_9MGBlpd(yju=`>h!SZz8tlenXkMa9Q?7} zIIB}SY0RE09o{MfTGbCR8-N}u^1FIp_I$kZJ#kW~?s9D7hr*Kd^TGQYpHq|-#}VB$ zvuOY*27vh7r^wHI+{=oQZHsw#T0J-j{2P!cF4m5Ame<#xERLF#A2=YaqxPKbK;5-h zJ~9>deqVQyiW6T>NOH=5RaU;z6}eKb`sp%Z9>@rq?FPFo8E)HK3`ie>$^3HtrRG4p zbd2^h%07y!8nLLk{$zS~-# zOKCG#^FYB2Uu+Q}s-Z@?wnbWy&tJUYaj}vWGK^ByK2$+~tqkR>X1SpQ8zXWH1r#@& zQT@%F#Q}Yv7dFYu;lVXFv6WMcJyYlN+@hu;{N-;oS6R8W2Si@9WbkWQxOo8t1D@B9 zZu9**&x@MnX1u(nvXB!c?w1G46}I#w(2NeRj*n_=hw^GHj?3N%>R)|7%l${*AT_C~ zVTD>lOIT{K&xWG)z5gm7JdSO2k!(8Q%|TwZ7CwsuL0_7CHlJSn@%h^kpM>(fJh*in zV(vx+=gf2dd|{4xwN>sK#C4j^k&rL0=0m7jlZaeIt8mh$vQDL?O568JgQiPc>@h zK-072-A$$u-17#UdrPDB`Bv{obz1%Jj*`o~#v;hKW=i08cPp7f?dN~D&RYl|GRW#v z&3RfDBS6gpv#Q;m_E;AJ6|ygnuxO8QM%2;wyr*yrt=F=aLv2P}4?eCxdai5qW`NTl zD0#-}H&^$0)H=CgD)qxB-Npsl*v&?p`z~5bud&boM{N#+7{2jCFJbQ+2};h z;AomA_}VY9p!hww5%F+&=;KOLBk48d_f z)yt9HvtfyU>u4m&L=ki#+h==Gcs43wHzO#{5exA@6S*KBQk)#{#G`_ACzF4ZR@GD7 z<(#@z0$M%i35N$BgYf-F%fGlgynE|}2VEI((Uhrv*NRRLSQ>d**r+?a(4_WYGb`=P z_gd!I;)UlU`Ffi*5p1<^wV+%BT}<|+!2~8T0i2J8kwYgT&c{ug(*m=9_{^mz1Bca9 zFWNdPr*D6|-l+z(8o0b>sTTpx#Hduf8VUxFR2{}WOvql2gh-9b=_Bg1kvp>GkzAdL zOu8H?iztN5{3`;Re@#2sVA0@uQ0J0>*zo>mE2zJ*l#x@q-)4$@Py6PZ)b+Qz?Q`|b z7iYbb{`a5#-Y@wkf^Eq*yaNCl3E|>bIQEc>1WbVnP*6a+SEbLQPwK}d*1C84m@QklwE32bTXe#zz5gkZmm>?qsVkFUW=V$ z9p9YberjTUq&a8LN0NLHfc;2173$5G*7lF6*{%BSi8TUz;!Seqacl$O?FMpRINvWA zp?evu2r+SQU>t9!m5w}cFiS$qz*4Jjo%6bqv|p;$slsK1Qx?b14Z)8Z-!26zzTMfL zq(=BGqn3qR4LvOw`CKNdTI#5S5k`f|+kKfg0_tO@{C4d5xS5M43a~e9a_!ax-ltnK z{U$pm3mS_bnU%k%TMg9tW_CB~K;2vy$vFl+4n{U{Q1?If2YsgVnz#QufuCXyZKKWs zD~Y+X@)8XYfx%HFG8BWU85({I`5z_+zjwM&+x-xHRl9c z=UB+tn3VK1H7}DM79xPLta`eGrVxdewfCc9w}}qev|9td98Fixd@tK}3@WD4-ruk0 zO}T=>Bl_+SJ%LdU%7c}y!OXm47bNfdyEie8L65J!f;~5~T7-L5vH~=|X7@}q4PVS^ zx2?H(z`^gL;$??0bc*t8IY#{xivbVRj-Y-LAc%J@YZ!$z%T&|w%%-EKkVy&lBNZ7k z1c(imaQ`jdZ(YjQRaPT;WF^qouJQ<05@)X*P_|I0So6+CMs2pJZKDKBEM_Rw=n27l z;C81K<4#;8xn`QC`Q!tm)I8m---RrX6(rxRHrTT|Xk%vG^+XDrO?)l)o;XyZU>FW{ z>&Itgb{l``K@M!LTHE#$vbv7%%r;mt9fVF@umTRKmaiUbtKzfD3Tk!eT)+4sP|@#q zN&8JB?_&pu6V#C>qL>#B8nj&8^DJGqq5B*3)B%c83(rmL?uboRv@)c@$s&QANk@h( zy$@T;aXjCpr1`OUMD;*yv2{Iuw)OOh>!D^?@QvT|s;P=+50sR24gG%jA^3-DgtlSb zNaMa+R@K)f|85F=rKG*f`W0uyx7xZpKTtjFz3cPznSWwVbJyib^W}X~z&EBw#R1gp_`%nGs_v7{kjm!ucr9K|W;L?UPX*Gy2%5aD|!pOoQ zNRVZTk~&631(h!^fB5rBvA`%GmKA(2&LODRsQO}XpS}8@IcL+dBk;3xgdG#NV#qD< zM}|hY!j<=*N%x|22Vd9UpD>Hl8vkIs#%Q9Fce0^qV!CXlZ; zTU05~3zvU6e2xfTXPuT-JVK7z?JP-T`|hJC_!V?TW@0(vKsXlPRTfK2j}Xn zSim!xE-|NNIt=W+P^xvA_=&zhulpAfv4Fi6%f!|F=lAZd?`%0|1rq&Fxt+36tW;Eu z!?(B$mIO?)-F}*YY8i*ThJIKLIr(t2AQa%! z90ZZU{7uf$F??oeS}fae8!*`bKufwO(C~2)SW^Tx5+ZJ*k@EEDThI1bd+Dh3=s0#o zKgh9v1kz?U8Txv~41d=SD$x|()_QuIO_*afZ0XiGlA&er^euR|FU!abx=SS6$wR#x z(h@QcQS0NVG`-KbeTfeK6@%FAIuWu?te4#ZyUK$N0%I%TEm3=e=@_SAH1Z8I^9_^EiK*iwcHWWuosndF z1#f&jDG!o89Ts!sYf`*||A#F@R))5-HElSIc}+%HN_gP7R48i$9SJy7vmtZPN~LTP zINSgMwmvBV1;jR=hEIiAd3-Qcd!qnG zQ>_XB(p4R2qBpid0hz%ueRkgV$Fv1_iF0?MZzo#YoaMReI3F{j>+#2enA(5t__G~$ z&%ErOh17sOE_$8~|L%UOm>3IC3?YT41E4x0$dMmhh2U_GjJicoAcVGSr)=@R7tS4A zw9~z%+_xhCKi00x?+UyGrRP}~&q)m(gjKeE~g^=Ku9q#X0%3;gpYZSxsI7z{cNyd%jHc$Ag_?iMyQW3;CIhiYQ+1@W{7pK6tZbIEK`x&IN|4z#K zpidtnrr5m2p3jorXapH%$oMe9eLz!PfT;l=D05pODhQ0xF_+SWAj1{VI%R)1i|Zg@ z;xbOQQyQSnT*N4XhU63ZvhB}HqS1E29kAvRXcUq8WKk`&6a=Gz(>lFu03qrsidhPm zewkuIrl@)K(6>F->k($}TS`2qRboYISgKVfrAQ+3`D7HyC#pvhAy+0L+rfOdnv7FT zQg&UMC%u9gnWhKC3cFHnreo%J{32m`rb8|{7n}MQb2OEarn_jTh>0ek(hZq(G!8CM z`Mr56&{gryj5BK`xvujHgne$yOi^yhjoncCUotMMGl+M`LQ5uuqXga*cm>zV@HSxk zN99Pw@=me0ITqRL=<|XC_Zg(Rd+Gct-4_z6_0H;IW0h{Ci{pPFm_FF(nRGJQ??R8& z1(zlLyL{;oX55N7vXm%2eXx9XII0-N@Zg^u zPH?6w9oY!6{@$y2tq}^mdjmee2OsDI?qtf2@-%vh(48jR2CiSFOH5EhCDjKKkuOAA zq~nfLzxML^HKTV8=Yne($~DYT|3a}-p%?~#iQE9lf$nR&{4}bLPkz_|P3@>X>EL{b z7MRNmr3&iVtl+vUk+B&v4K|QEo<~qINY@oy2R20=R!H4M(^SC59l$-4pc9&qi73uS!XW~KO8AWy01Zk%eZJmw!=wsaClJtJZpC1-~b(^intdmX??as)C zi&Wwm;7)Nf{Z-YNG(+n)!FTx zRQVr<7|E2mU;@&R*uiLNPp(v}6?}`LdCN(E)t>BLzwfn^PM}IfIv3Gu*WNnS_TXFF z(K79uZQ28a+Jh=ONvEzFE639k^-o~oni;UrR{hyNFq(t%8$GhlM>g5%ES)|iAuRfs zr%F`zJxxrkq-E~|NFQZf|C9`^WavE*!Dr%y5G@2Iy`s?nuv8huw-0D3!I%5w-o>Lf zVGdm?vaKelp4J-&yim^=xxFeK+s6|1V5+b|5ptPB9);GNH>)9Esj*Y4Ewl*;_c4|X zTT;8zhAjgsTbyyFy~iA3*9M03@moqZI5?(pd0$QLj{(%t=GAl6~sWo?Az+g3cy@gb9i}N#Nvh z(?!p&lbwM-gA_oWka&jAuZFlD(U9@C9aj44NlqSl0+sI$q;RG!nU@kJ0{x^DH`gGU zL||FJ)xN?1M^F=ZUH`7BTsR|nNZhS-laKRMh~lGFm)Y@eDHC>ep zxV;91!*#PdG%um~(U=14iP+Gdx(--2QFZ1Xj3mJhGoYHgVGjTZ@?Zb-Q~GHs!agyq zn~1#5KfIF(`4FFDy<4ti1GwKrX0J%vlZRLm^-=Os>d&=aY#h1E95}>wa@*aR7m>6e zhBk_572C74>9??S`iZ$Nr>cVakmSM55ba{^zy%kucx!M1+a*kaczRwLHY2%LiCybQ|g z4=kQelD`}ZhC~oS{SDH$__FSvcMnmm4&8Tu;5POnWt7J#v>0IA{XKu{^fRr&O@@feD@_e-W)D2Y3LqcQR``gjo z%(XsdX8tAk`*1k#+}i58cRUIsluDNP*eb#k%CQq+TYTq19@5F!b831CtAzRNVR$%h+qnrLkB4S|! zKFEV#Wuiuz5c>hy5{6u#mxgW$%rhQnDw3v(V0}~mE5zJEEXukPy#UhdnH+#+_sc3@&rtp9Iu0QtG2$m~RcS;w~!c*2wUNPgVrMADK5 zt#|{fa_~558h2vh!k*G&ZD0vVfvlI>T8`)*rCm?-O+VvpSM3QMB?@mhd*9^6>-4Al3S zd1t2^r%pZ*nCU4x)@GaecZXf7=Sfwy^E>b9ET^Z!G2|O(T(@D;|3}e%hb6iHeE?@V zP!XJ{Xn=d~Jz_X8N4Q5;I8!rIGqZVEBJOQyX1HgiW*zldfh$*qBQvv7GqbX?@|1PT z-^24i|J~Ph-(No8_viIKz1^(7I=z`mnT$uIxFen5s&aI5!lg$6?S(hXloulg1-W1h}pWRGHi|50VVvH-rPWp*$!la{!HqqrSD zPzx{n6tl6tJ$tZpV~Z&>3y__`$f|V#=O6!>KAA%ImD;AsJTEd53D_6^4Kv~#e|sgE zI^i7Iuk*s@f0airpOeG&7heW^@e)Na`+6ivT(iaAqnF99!%F#;T}(-1oNFag*(_1L z?dR7g$LIC@ui2dV1(_@}tSm(L!$xxg^vK=iil8r=^N%RCP8WX#_PixW3|;zDue0^c zKT_S)<*uIb-s0@B@y0(eHX_tG>2|R5hEV!5f!nSho@&+RXb9YH6UYdx_`of)do zy!=De;of?0kfE;e)21qO(rM4t_be0|1QO6EcK>p zA{^jYVWGj=oNOVegL~5XdvAQbq%m9)a^G%^s#$1``3cOT%mRcm$l>Em8Jp!$l9Sy6 z-_%WEZ(>+>zXRx95qy19BCam0y~-VDzbB6*+qpy1Mz%w(qGhx%$M}2N2x&669PY+hzE3s9GnNE82i3E6)5no)jgT;XFE6Yj8#IhgZx zQVWx!}(Wi`|7);Jw?+y^=OwQ-mNTOEn$oc&_K z&sMXUB|0@;-iT-(HK|UbE|<}^q3m*xqjNb?!6pn9ld-3LHG*B)%nd*CZ9cX?jmy9sF&XTtUuaZ2dmPM`Q@PO3oF6ps?=l>kmtwU z@{B#}Icr%?n*$x_aPIUARQG;CwJnce}NEmbkNd^6wjIGqUIh zu2;jHQF?2%G-Yn{v9#=#L`;Ebfmrsu!xB|^*KLb-@*a89jN&BruVq64sno}R0ruAM zu{0DM*#$#R96Fl!vGC?lmf1X%+=`bd0L(O@VsWl@u%L~fWg;6Dy`ygG;an|Nq=l1E zF4?q8VaVrHTM=~#k}^r5q;DHE1|eVH`Ov_Kb|}i&dOR{jnHZS|x=pgX4h)gilIz@# zY5868mT43|oGMY#vW+(IOUL;&k^6LXvN#k@R6xmQdYeL8BEq4Mg<@gqq(|#~TB;Sk z!y`3=v6FtVe8t-D3U1y7h#-C9(F=>;bbZ=5@Kk^+`en)<6fauYKjaVA6*CtAD&E=#7%fUNcP%4{M+OJ6~i1@KL%q z+obgh$F4l9V_9=0bB{R$lnV3Xbbiqu5dW%I$@>LSFgknH5SN;V7Zxhq)f5Jw_&ev2 znM`I}tHxjBe?vZ2Wkb_;OI7jwY|sKhdcJ`vRoT@->K>PQHKzfu1Z3mUQOM&?MFs5a z)~`ak^U9&&|0V;VXle0_qa8!4k6s&Ck}E^l^N-KYVmR-E>hhB|Nx-*e94l0AFm6D2 z@(lNyHhDq1NM;15gydi^-h?SjA1jO(2pn@;f=TuAlDGd6)2lF$IjTTv9kCMkji^WJ z0pw4f|7RE*X-*E>!YVxG9M;?Wo=Dyh94wJ*GIYN9Iq*PrSxQOo3!}s@xjCT78bqg- zrI}%gktm6Z350&>#FCQRseh&YTkl5S?hYLc%*4EDwZ7iwBZ^Pu27I`yRa@6HtzX%_ zzS4QAo+n8}5S7GMC5$&|vSpjZef8La#E2{nO#ojMo2DJDeO=ycMRPEt0pf&UfQW&B zXkp-h%xG~r$^(#6mnalaUx{CNqIPI-53#TUAT#WTsb7T?NBsO6gWu-j&1?luHc zz%w@i)EaHe4o7IpTBo#`zg+d~Z5`G4z3t(mRg#}N4>msUY2^@iPAT(jbnAbM*$Hdr z`HS1@^7~Uq?@CSvb%5SjMqJkmwzjOkO0!nzoA}$4eK9y>acK1pRq{aJw;b}|zw&Xr zuE*@Y<&dax$Xjy(f4I-t+Kal*wzadDLwA|`I&o4A3Ai->%s!O_*q!5Mg{4CeYS%P= z?BBg|FcECN&u;UWJHX#K>)(*U#rHQaerV`YH#v^63k1SN*xkNg#aHcj7J_dN2&1iI z4X@rhxtC-0)%4QhDFMgxDH0Eh}C=3YG`TE%Z*VXbH!GX0(P;M~&oMywy`4^-AqwJ&^lwN7aNDwj& z9^?fUwJrVq3OkVCd(7KxS-sWO_N(drW9aUs3IOvL@-2exG>nmeyf%y(mkxOUR@N?+ zLkPU)ov>|fnPHZ5oXk`b(ag@Sc$x;LUfcD_J1c3TlAVKFb$bI(@9 zVJ4wCIX_WFCB1U_+}bvY({u;d{T!L-NH7=h#BmsYYbnc0et+^3m;UqXyrEY7}*vglmR z;R>s#x(xhLdK967aI@yoyT2pza-tTqlQ(lJgwoF=bF!l)rxsbI+^dJSvj*B30linB z6C@vnLi{tYS?d{ZsmT5D#1eRg<-_J!Dwd33ytadU7nXhH+XMFq@HHOuUp{cuqJ9=9 z3w&2=Krx!c$-WNle4QXa?{EV)vCoz-|6gQL)bGAe2#r62f&D1v7DgUwSh_N)skh_= zn=8YvU2{$Z-x)^bq_Fh-yWkCuau!Gh3#4(F3b|Orywycvv)sM4j%3DknkhdUQSlLr zb)QjGNX0}D;IKLcF@omwf5ynyPRezrq5Vz|rf{!%keaIx%DwMu<%0hQ=rqc_ODG0w zMTvj{dE%=4pZ=fUL0vh+am!aIee;+4P(Jdv4Wf#{7JIZ$rbN(k~qQ% zhO-pR7^##+qFCeHqg0j7#oiVgJ7F9u7vGXdwrSnWdcKv_3}93F>;{0?Aw8SYO^Dwj z*eMgF6R$ro!3z(oi}NmRXP=`;4JeHKa+NxX&rZ`5zd+7rcgYCNbFN{a9ZM`tE6PlpYZ>CI zXYUAwCVr8c|5O52@Z7Gr@9OjIJ%|Sf!qXcam@T^=Uj5=3YqhOdsiZ+mAiqPlHz3>u zuR*NGLG^~R8w~o!RGHQ@d2K3qi&*+i;yT$5LWpO~5^LA1WWj=t_B`1W=rM!}4tbvZ z28RF&>|tPp7q#Dus>EZJ`L9kKwKxA0srg9NSaTAo@r6s>hVU+!8V;F+{PfTzV5PjU z*8D=xO{T*N*g%Elj*z!623sO{d$>SiLA{QO!j^gAD=%a?;o4eei8hU{RdVxnTK)gV zi)?>6^_P|PN6S|jd6q>e5OS_b* zL?|s82}B`fuk0Nvos2T^GH2?fKn{LsAr^Nz1c3>C1>IlRNGdx%RB(K=5=@=C?Y$p@ z0LI~)z~1~@!XB3t%Q%#>`7LofM}BYDEpVo#Z&po~kHs`Yw z7JaiP#A1rQ!#9zMyAOduL*AJXXDUP0j&a2qL>gzxtV$u)uOZX6Pl<-yY^Af6X@UB7mc22TcpL-Y7V^{PRaq|y_Jn9olD?+B)J6AX? zJfB|ZC^-e1T}>!c5$)<~Dcm!#|Bhg}JQS68G2T0x+DgD5U7eSHC;Jh*&jtYb3RE~! z;$TZLit{wyq!#b;=?Y;Wk@0%M+xYB`(I5<>@P*u{RT%cA?q6DwO=gx6G;n;@RQ_k# zZwG}((M5(93*W z$ltTU{4F-)cYVaL8tGA>#_E5t+{Fnx%RVM^#|Ei8rk zK?szL2J_`24guKtkz$Dj?5sZ6>Fr9c0bcYH*&o2?YlT4awU5+ihpTEwoZD{@cOSrS zG7#RH!59q!KHPNH%hh|X_5l<1ZcMF~`m#gF} ziXC2LH@I=UIB!Iiha*1lI2v%u6F2kx@(Zp@+C(}%!{(m z*nP?=K-m=Fr|nKB&%)Uu;EyoTK8oz4`l6b2um_p>4c0kx8lv?7NF`m7c5FYkQSM^r z8xHt)EA=&EfQ(>S@iyx}ENidGJ76^CCX4o{h|g^dMXv16OtO=Hu~yx_?_JFO6reLS z&^G?wuNCb`dmdO45DvoSm|7lU7l;RW))%}O>p7-)IMrXSrr zbH=EcsRLj-ra+9fq7qxHLb=+sezIi8R?DESo z<=!sk3;oI${KQ|_G@Zr*%mKZfOGv`yz#nNaxrlnO7F7@ z+PwqbK#3ESyh=2^7ALMFk0-Y3P!aLLyJql(gZXiXUQReUb``zX!SZ78D@Ba zU*E%E6MfixRvNN)glw|Yj!1J3jXr8^MT^4$zlzq@ zG#@(@N!@V(*CBSdkNxA$w31x=9EDXWHB;g-t?ZbV2*&P2nIWI`#Z2M9k50AU#}pIH z?5V{DZwz-42$23e%j(YUux|_g|Gf5}clt8^O|R%>#XI5(I8GlakL*5r*KffGu8o~v z=hyD>N}kH8SX&pq2AK6%;y|yT;AZ3s4=*@p-L)ET*l+Q~{EzXW{^bg*Qk9>tP>~hR zp17UJQ%(cvm)0MI?*(B1&vDw-9`D>%ejoU-orx54r)u{j4p@Wl1>3tb5Qv;>8DnLA zFYEpdHCC%S?G~%~AAZsviM5IB5}uO()OG+xqpSQ^zK=pD>Ot;%fsOl^jzUPtZgL{v z)ln`>osu2Df(*x3#q-*RVnW%6L(g3K6i*gUkFNR9oSgpOr%M%VS!r=42!SIboCVzluYIv-(*z!eQx22 zC6BYO*~S*?u_LL_*ZCmbR=SEF14jlm{>_N#f*>)N&M!GK+HV-|S+xKt_%k$qg>w`j z7EjIH6H^vrW7e2mS%g+_#Mm2s8siKv`#2^$Zbho|Zgy%Wz0nqO(Bb)AN{y?O_zA@C z`yn*~z@5c-RxLuNau*VkDH)EGEd!Ab_A^&e>2Bfe)Y|0pR6`)mFUW6ZgIU(CNCWGK{yEE^^1NUhs^FIl|4t8wI= zX;6u#6VkDG26=E>7Vn9x3|!HN-Lv(_855wJ{e^BIj(yq+zb-l(KEz62=}XuY%Ipo> z99ObP3N7~KiKd3!cjT11E7r-mdgv{lsQbx3x3PaV zMvWmCRBaW|lv`D0<#QuPzNJaUI6*9xh;1xUB_u@UvgYE}1su6D)x-W->#BARr-Iix zR;^bmEbhz2F3H7DH<+!Bch@xwi}sys59PSyNz`nB`EJK&`3i^@CHz5cE@ z7TB@w-ozWN1SzExrINGK;tx+j*1n>x`SbqX=EL05361jI9|^ zdFEfqT$`+^OPL+7DNOo0p<{4wHz)VX@BVt-f=$mB-NMWvPveq>HJE-yY1C$&VU+3w zHU$ICRh~UoEyH=wETic&$*y)U(ks9vvx=9(TnTJzh7$ zuUE&8`DUQgIPU3z$N)8R(2Ph0=XAmL`P(asW0JXonIVUYb|o}!l;!W69Wy0bkB643 zpA=+9Js6QA>Tv`jk?S+e}GBQbM+%aZa?vluBPZQXJSF;eV=GiIY}YXnr>yFr{)fZL zOUv|pQ`}nsMQ_A{Iz^yCE z+l{AcX#Yr&Fm#uJzmJ@|et2&&y7+d6j>DqsW2f)Wj}Of!Oc|7*(c35l{>Z>S~Us89%2#w z>v(~6Hpm?B$OHMy7BKX5566w?byQ+?fp8=!ix)p)q&KlJBup{1Ym9_nXdRY?t?C4( zFhUZ!B&B&8$aowp<71bv*-JGtcAeIgNRaTn6RhMYa)E=oE#B zzX~zd384_Z!*vuxI5csHtF^}6DA{t=d*1^;X>&`3f@Wx%U?nEb zWmw!*d>E76FQFb0XCrUqhe;WKbK9cXvir7cq7NAM#9~Oks;luBYK9Y%k1H#`T_*Zl z^W;_j#^3219ok8f==-oW#d2tJ*NMnQX;m^MuChV+ z9&=LK>*b}&$$C`N3GqKU2mG7Gti9(URskg3ZHxpZb4b2FFJi0nTb^e=-vU&6*vtUv zAl!OwxkC~6FF6;Oz7A5{-h~=7EFDj*#M#~9A5Kpxk$K^)t0taXXp<|SzY{5TcB}() zy0_)(Qca7^3qp3%yg|rDowdU=JJGcETV8s^5afcHtg+3Uia9mf_CX%px;0WNu+LP2 zgaT#vls74xtxBF9XW~Ak76rHBp{;r=S1IYb9@rELBb;hV`%(~0#vxCm+|674LLxEI zcG<@6>X^Fx zdvP;*VEM_M@+$UaW+%g^c(F{=#T@31-lkN9BXu!;5=QSE)CzJHm`SN^Y?({ zz_d#H2gan+YJF`K@~rYzL3Y!ot2WU)bl?IYBSttC9r?#+dv z&oMp4VkNQDm+vk=_Y?lx>E=r02Za*V9GAOhC4**7eeKd|XVWN)Cr0Up+IuWYtn7x}))j$Ns~Dj|e&T zNzjm!oV{U>k%{80o>iQp{&+}xg%TyLR4=ZJOx*f+O--{Y-1Cdd;|nUK8Q*2%iOckb}^o`uBiGg5?KZVklI$J)|kBPr}FqinV zu_Q0O=A#^_KFcP}d@)7%-%Fuq61V~=2;N*3v*j=pwFG%*tbSy1BkRk^iu$_^7K}vap z`kQSrQ${f?W1G3}&tmqSyP8MNYFTH$EY4279eLLa-=34+?shE#D0?yf@<7-YTNB;= z(z{zC_u?yv?xfd`&nAaTjM8GXHuuenM!CZM@NE)FjQwnu5Z7mXT)lUEZ)AifRMbJWTpSU z-bsDEwTt}QL69(^tX|*gm0?UMEkLm(jDV6Z@o!+#ZWhA~hWwq*1A4w*o?(0AStfS0 zuqpxG?|@0$t)C>zhjSMsyN}#0c7fO5yo_>{U!(^thdts}sTEi6-Su0S%=%K1*H5k; z@5&!@!u(s6)%q~YHE@Ik89mVDeaCJDGE`R8CiM$DI%KEn)hg|rI!efK^;iyTyFQQ3 zr^7H)k~mfOpuEo8qO)N+aa+SRra)3|9@s-@4Wj=*viv0IU0(!fvYV>iP}CyPjKZ`y zA$CjVfhm<~o6k2`Cz>F#f4Va7Jfqy9i^;@Zaf%?FnP#kSjamJER4A?fkKp+Lff?L( zD1E&!Wn5{f`-*?w@eC2ot{)AuBMB!kkmIhA@wdiU~IHdmp5;6N~Y7-e8N} zaZ5ms@$Vs91j%rnV6i;xln*woVH)fKC+`kvbu#o*h`Q^`dgY);Sc=b+h&+Ccsa>(c zARgf=kXZ+sD-0*4lFZ^2=?Ww)g=o7)Ha8+^kOg*T!zWN7_Ki&2U6RZ0u){Xfxo_CN ziS(q2XL zZyw~76k>h>*>jb=c5w)61gg(R*7en(UU=2bOuC|=9v9p&`O*WlycP(<(r3iI*T-WM zsTN3Aou^yO%gN>gF*7{x=IS&Kw?|@1duMW5VQ;3pGfiizCo>}1)_0ZvMG2u;5My;-|gz)K~Br!Kefa(%M=oAKg6EA9e3Yb2McrWiRT^1hi z>eA*ad&Ix-kIeN8)UfS`+7qsD_~>}bs2gj9Xykn>GqCC6#to?IFqa35;`zABv=!8< zduJge*s5GQ^8K`9mK)S!x?(lYE_QmHqvJ81H#7)UTY*j15JW$aGYUj^X(6`gh(@2A zDBwQtD~8hInK*f^HIEa#VdcGD`iXUgOO3Dnu!;`%bR7&7o%_HS2ZrM#3h$pdi1~Ev zu<;sBF6x{DE)IdC$30FDttq0tJvIMEc?+QSm2JfvmKY(LDO|-SN6iFnT5b-VBC{PX zkeuh4b{w{C{G!Abe&2=Fn!X_gL4=8Fu|hXl*Q(@s)=+*q(R3bUxJj2s3#8}yQmzDz z-^9bQVB5_xb{xrggKF~Jou1rtMYVWhd^}v^)=OZ-&~m3LxBFYF(&-SdKYRrRVrUNyV>fg#PVlUi zFWWa^P_E4GPNZ%FI!Y6hpU|K26>cJ?44}l*1_HU_CB@8FT|FY*5`;lBhBE!{EN@gl zd8w)gRE?m!J)?KS7^uctRTcwzf}zq$yF(or^wvp*yLp%#qwr%rE9S9BvJZnE*7a{Z zZB%jWb|q|TsE-J!OLUCH6iTld)ku$afRN1~UamU2KFt;Sqq}Y_e?(+w!W+p_SC6<- zUjN1uPJpRBHMA4bc>TlhSRCOtru9kONFza$$JfXwpthTLS6wyv)qYfM2jDX@nHT$g z@8R?(shLi~se6R`HNf-(Epk*MIvxmP5m1dXpH%2_K8OB^gR^GYhqU2m);;(I56*`d zMfb6-BAB+Vq|50!7sJIiyoc|*iT!os`q$l-=N6A?a`D(G*}s++KE@9lZSmo*U>gMw zyDh#}Jop45D$B*=1eP?2CB<<u4<3Is{!3$)ik&#y|<^^E7e$LaGU@}~6)W+(FV zhm5(PA|+92E?GvJpg|@bCV;IW!MfjxdMk8oM4MR($pQ~l$Y)x3BW!z_w&hVS5}Kwd zp3myQ)ltmUEbuor$$_t1tweIV!D$-N`}am$-ZIgaa`{YZ$bRaucEphB-t<+MMTVhJ zp-1Mu@iK_VLDtukF^~gI+m~~Vh;0!noquG+#pHG0K)q6C2M1xTTT%_zft@k(x)Sc{ z9J3;iWyC}l|h zftAKkI@Bxjd>esBg;hV^Oy1!GF#w{f!qCJ;P>Hio$FyJIC#i}^IgOwr_tDkOv96}4 z6D^uP#tA`sX09XCI`fOyCICJ*Scuy40rd8VZUqp(nP3&hdentdi1s#p1{Jo>z39uD z9DmqAce@j_wXoMCtOKFpaBqI&HZ=pu;&?X*InUf8Ie|8+LPi9NT6tvO)j6hZV0zTJg)e(w+$GSWRfJ_EYP z&jSx66jJnUBFNt;MxAcL!s>5bk;&I-nS5@kE3R-&N z`#KjrXGFt&ql5T4Y_vtHgV7{kCv3j^?h${-CbxZ8Ud<;JP`p|F>*3Za)gxb*W*eUk zI-EJ-I}#Wp2z*Lc8Qk{Z`#^Cj{d;o98somx-ICs@9Br|IVo+Vo3OCi5e=z`p(!BI* zt0zj6Jr^~jo-VkX@R*Y656*0*;YyF;_MT_7N}6|o)o_-IA(oc5eP;MumOq}aQ@%vR z2GJ>&%v)ECTRr#X<4xAbVzy{Dc(4Vk-VES*LdL^7-*V}_;=6RZXl31Eoor%8e%)=l z5tp2xEp+~isHZSw>Hy53!uHYWo$5W}Y9l{T#; zLkLhtg!+aGL?0Rl4%3b$>0grL;Wcr-y1{B5q!)Pdzpq#G#((Nk{0fHNHAt`Lps)NK zU>L9T)seOSQcOH|{pQ|O!DP{&n;wy=8f8;zky?EzRqE<)EqbxD>5xEMkOY8@vV-Xa z(h)TTtzy({9Km1;gOjA^V!d!P(mmS;{s+v9N*lsPy7g$~g-!xiQBQVeqfF^) zR;5a)vW7qe~m)A*A!Vp}`N(xc;|iOnwiYzDUqc7vF(o;>I2sc@&y;FzseZXZ12I z9Q&B0zUMH#la#&)&j%rqyQk8lihmEq=kt%g5tRZCN#xtvUF)+evb=xdl*9T*iBO{S z*%Rj8lX;t&FCKi$!W=3)XKOO>HyUs4tW909Ty1PB+qquKRV=%q@_eUWtv99eM!#Xe&C$FR zM6{LRDc!48Mf*ZZlH5N>-#zefEv7m!f!cE7CCeTBz+2Ut`Tln+ct-k42W^jfFtC0d zhIY(DmnJ(@TGUjc9+C@HteZzy;>?Z^nCdSM8vAUmxu^O8%Z-MioPnx<|{%Hf^_q z!{6ZsOs(jw>>6#5Im|le)B1%yOQcecFygIPCNc!);k} z6Sfc1e?2T{jrr=y-)^oGD<{`GOzJfA7>Ug`8Eg7``Zm0Ub}N>tIo7C0de~dvVK%M$ zR>RrCsk;73m~T#QV|Yi`L%@F>Jri-~+KmSEp66JNZx>#%tCGGY@$T=g4V6SIqP$F@ zf%laLgyMS&Soak-?<4G=>Vo4NNsfl$8<#Wgc-!@AAA-GKoaWvrrjtBhJJ>sQH@Vm` zt8O~g4H(`WKVBau`{U=P{No|1=W1#D&))d?_!w}?`^e8X=1DKlN}B#Q`Sq3_evc$8 z?)|MQiB%Fe?m{Mes0K!*BFE5kT4o19B~=@j(^4!Sx0Rp-9o;~nIG;C}=l zOy4@^K+tc=e|cz6y!QwAfi4?J+KXrgc_2g6hHrj zYX8RODM?4FGY+^Z#F;TQMUhCqE`~yBB>Xf>Q?!>JX>WA8EuGqc;%%0<;Gf+0&uSM9 zaCPplFv{!VA?X`tY=>>ER2Xd>yJcqNh{oZRqQf3go6D@mvC5)>$-afm zV&)1Db^=o{5d)fP<4R*QE>ykROYiCLM~od?`BEsf!OAzpnj{>Ui;K3?6=jIC;0avP zlN&ZlkGArSBLecGEQTwuT1y!puks}3N{Ziw;1C0n(y_@nOZNDB(zz)$Jg`Ce6*}vf zc-C}GTB-06(8}O^!sZI>hnSVos8!g?Flx+9Jk#1Z?cbi)Kv(pEzq8FV4W$@DqG}IV+Aatj|7P{@#l#S;1Xq&tQGE9KOyzxz84q0ERE-*W zH||?=YalDtU;US_x&ZPk>O}s!`k9fo&?5#Vs6`>ny2R@dr%jb!F4Ex^S-GBDc(rBH zHI7g>KXLG}+RYWZgwbBfwW9#23UKxs!0q4r2Qx)2JrY^vt*&8|bfQ9Lrl1nF$y5o& zs(j&z)#!1ZL{m6Ce>_XOStu1r4N@N|9+5i26F)`PR6gD3;c~Z zzQn_dFk`m&kcH{L%{biBv5wOD5sIzaQoz7d;Oa6jd-`curEq6=!OnH zD#z_5F)w>qDkvkP#9Fn-Jejtz0S8f7ka}3Uccb~=6_fknIGL^)(J?$>ynfuZ@)nCu z)B)W-4;+fkBUhnUvL*@B1PR%xp>)c27fS|L-qFVz>ZSHv{^?d?T$dB<9qfCmo(L^N zkrWFp_E1$5ot4Pd7VI^B#q3UO$**azNP}56HG-r1>l9QEjg(+pO&QlFz#?5p-1xNQ zt49sr+KU!CTpH;~jRMq4pN-{c=1(0Z{c5kJ6uAj43tju;Do5)5xnl_3lJcXJE zxwtr9r67mE45+!+`R!!RrCu9dqFq6nLgXm~6YgFEwU!vM(Kn7eCQUTHR9kYqt24e> zJbIJ-xcuSGIu7EVqQ5oY3&E3+6*3|Nzv@}LIP?_db|DMGit*}{f}#*Z*Fg0dhEo6d zXi#_czCTv~IJ?&${yw7mY5jV|GAj4w4jS@NJWKJ$zF7^clrK^zy`vxze@2b=gxPzE z5}IljOSUFU$F4>2Ps-s|1Qy;31qm3is!$@g!d_8ZS6`o2*<=JP*p&3;f@BY-41xO7 zSt_op$YJXBGnKjpQo&%wP8vufW-33Hqp1?i8IlSoh$^&k$i2)uMKS9lrxbytC&fgj zVH@J;1C)D3dyq~K)yJ~IYW!VXd3mP6^?fq|4Zr5kdd{$ep3w&no5pAbzL6kof8M$$ z=jm$aQL}~`DKxc*JpH}KRz%2)3!Elk5qQ5>+_=|W73c7AVi)#@|_s5OQu zvzwj8(u*Zi7VTojymTI=BXp+gr71(dTPA~lu$JD|t31m5ImL#j^Bye6cA7WV6vmJE zK23T&xHW2OShe^4S(^M6!8x;Y`qMAByiv_a!&#*{@A@}wj~xCdZ}I8!UQ}9r!nX7u zF32KZe-74?)C-85$BWPNkco8BNzma&^wDa5)T0$+1Ca3%G4t?`u{h0UlZI36RL%C4 zBZ~ldH4lkjDdK6$@cGDy)u-=Ci!pDNTi>7QBDhpuf41?ONGnicTz6UmU%KO?t}&`M z;L~1wV7aE4G-(WbctB6+^Fqh9bM3%+iFIXer1${eS*%c8XRl7x26B-{Sn7&gnWw7^ z0LX*b)tAgwG+Ym3(o@S?Gx*R0A=7LGJ>FP(r)05Go?@B*J%v$DfKkTTD)w8pPYt>xgw|x z)(sfAy`QDOXRPMo9(}m;N!iiObKucnYpV==Rq1zLV4_<-Eh`vDfTIN=N`eo>daj*r z0bKJjEy*N!E%pdVym=IwLWRa}Xhi_V;YRQkehr2Ig++o6Gi9RmzZpHSiEq+_*L_Z6 z7Vds3X~)RHkI6*f5csW@4chm0DqK#Cy5}ni4Ft=juh_RUqX0b#NzuY3K+6JkB;_D9 zm>?a>PFUd;|N4}+v!)udW+xiQJz`+Drn&FE-?XlJ*B(TyV;<|hwIqUAl%5L9R3sJ-xags37@`q@LW3Pc=t36N1knQ7Y*@CXW;ou|&;z zB|HdoQJ{Qh6M+^W*YSwjgJPca;MVw1SirU7A?_to0S@#D&rskavEO~sA$)!@PRD{F zv*>4?@e#JT0<-W$7<*1 zk?uxO%UH2YZZB~JIkY+Q4xfn?XTH1k;d$rCj_xa5ua0l7eWX;M#W-2%W%zF8zyjCy~j z{vHKam4Y>IH~D`wVUzTe*5WpZ-xm0ArIbhtb%aHI8u~z~SvsTDAY*;lsocQkjL_1P zcgf1~9OL0q{<^9ta7Ze%s_2rakhhLJX8q-KXT+(akA1GUdMu;5-ETySXYidFK*ha! zfh|*TbAY54199d?zICOFbAjqg$BEV7lnrlq;#YHQ>g4wjvdL60^tfaVPt3ngBNwP# zTX!*cv`Qmsndkb&%n>(kj2Y&qSCWSXWWEu$OgTv7iQ461qS<$<}#&*=6$CWr`>3?+^*fM?ZEKpDCjd0&v8Al@O&qaa}@i)~! z;1Tbe&5@%lhTD=c2{J%k&&scOJatqLV?;I9>UmTb+B$-WJK9xlL?ny2W={Q z+yw#NbVY|xP}Np3?h5oP6&+~ey3{h+nXTH_qQqMf3#C(9>RdM>)xB+C3s~5qV4sA* z<<%;>SV`^W6SZD}>Lrf95bJNykDn9Z=Ll-e*yFc@KMW`-9ElByg8pOoCd7pfS6WSa zPQ{=J~O2X&#OFW0DXx(^s zZE71of)9@%AVT?Ka1_*=bb4>*N1wErt9YVPZj;U5d&NY|JWYN>#BKw2G71uWyP^xD zao%7#B@dMzJe&cYP{^5Bi;@JLG-{qO-LrZe>z|fMPm1GBOWP4J4$)_k1;1Rt$J5x? z=7+Rz;0ij|tmVEQx+I#>G?;CI!Ve7@%7SaIbpk%)j=wiDZGP-`lz1^#F#&CCR-5#D z33T7(2`+f@e;Lug>L-dJIGMGmC$ndCR30I|b2-%}xc2(m3wF-RRgN)jT z$J}?1oXxbpxM=;@n4{0)OtIV(wazoJ=mDyDx!J)b0p!T4Z5B{OWG+UDt4Gzzx>Myg z{&lwNzwyyJ|6tPrm%988R|W6YJ>-t)%S`i%qp@o-D)$6RJ*%j~Rri6pb17K0T0+rv zDk>Rx>n2@gYgHqWPnQr#{-&$5X;LpEH4Fqh7qG5ph+@z0P>zlUlNElZ#T^?8sfD+|&V3HqqK1#nK;hU54_xfd zaT%Tt{6agzpDD1)w|K9ocbN)Z<3K}KQlH?ZM!u9F>Qzr{{8EZgmyJGxCtizMYlcLQ ziqmC9ygJT({x?xlh);d1;vpXC(?V4oufCi*3}@#QeEkARdgte;2uIW>^uEz%L~EOp zbWr)tJ0L?L4R>zOzrMdzACZ4;`m6ShAuw{dS*`~@xFQb07RKMUY`1mGbMx;Gw>0t5 ze`gzLjo|g9Hvd@T?cKCpZ!&5qs!t6!_@+~@@H%vNg87CvWgQ1G9cqDOB20jd?%pyM zYci87GMTDjf2RIAxW*qZKe?g*=q5nS3S{jfDHowHa|0mlBv9N^^o6*xirR@|Opo6@ z+1$4Twz2AVxD~d^c~a9UD!}HrW!Ke|u0yxF_PN?*+jVXvc0UnU6B(QwR|zIT+&cze zOi+77QnNU(v}9&KCnQ(O6I-#$PG|G|9BDPI17!Mb$K?KkN8+Uz*vPt1G4|ETM&+2P zbA1mK_jq_Y&OgeOdZbQF!DOSb?8=TSPc_b@vy#rHRG_`ZyWOK+HeEB%84(7xM z2V=gWqo6})Qm0Y{7h#=$@sNQR(>hh<0d$XNe6dg-##UkY3I?(D=E&L#qVeX8LQTr; zjZdXGol3sQ<~LlxBb**K`~*bCzlYg;9Gj!bJ22#6SeZ56wZftH&&ehmt-@d42Ebo4 zD`b5w66Ua++42hJHB^`9VD+^o_{~_oubh^@LXBL5K{&&H4c~UqLtdNtOeCIdf zYPjQLE==5bod%bCVLtQ}Gct3A>1~j9R0rW9g*YYs9V4AlAj8MYP@{vDzuUb5a0amFGT4#OK0QF0~bTAVt&o-+Y%92)dxUgHy8_7{H3?JmA z^6(5b?co3V%op7_TFSmITm4_I9FWdw%8Fe!TLXv?!v99#{D1o zx~S1LV2lk$j~=Dl=+c3JlsZBjAx(-RFM4-op)BRK-c8_xZ@n!$EazW-o{FJEA7YmU=Tq$G(f>93wuR zzQ+6{wsD8srwpgPHmdfiHcMHZd6YO3hH@BK+f8rdrX0L;>DROfQZci;_iV{1UzJ?$m==J2JxthF(u6gy=VUWK`FCbF3fzybqvYdV=MvEv-Yd(=N!GUQc zT93G&mhBp8)l9n37nAmc@Pv?-;r?GlQHr(YEhV0Kbh03JYMYo0f*l{H zHTh_Ly-e<8^-JYKYcZB!vMNXgxYZy{&$Ud-}D4nFQTccRpC2iScfH5~J+b z@mT>Cf49`FbMN9(9u*h5dchNW7%xM$f~McYJ7(@N_k?&U`dPmeM?bKCo0(dE?cc4y z(yIy1(#aDBTQW9*?kWemXRmE#eUqP*cd_;}bDW^1h}Dbo^VSP>!*-Rq_F`H{?<;gdD~<6>g+~)AinQb#vOwU zV$dS1Zeh0NpSWTDM+rS`$y2)a9$e#;xUu9H$*M2AFc}N`)boyLOITA1kAgVk3Xhh1 z$53HLpPRMfrRN&Z_2lMk&C>4DwJx>GFDFsdEcBGZ@KF|5tKL8ZiHTj%eaT%gMI8Em zrf%t%##RP)p<6R7Ci#K}(c02eh1L<`hS@8=;I2Ed+Hn_?x~b-g-<#9*UZFSKph5pd z7x_wmaYt0E(}Jm&PyM9|*)(CdeRm`>aZ_9?hMadFnGTp9p}%#=Jco8L_m_(w$Dnk% zwALjzcE^Li4K5vT@%eiSe<{`B+6=uzje={rds1wN$9Mnr4s@NUP_N;49XQ%93&;a;pSH%n~Ak`b;Y9vrHTjqBc*NdWg%}9tyUg1H|L_ z3rpn@6D!)g$u#MhNPz}~D*x{`F}hADOuS~A^ykC5#hFo=2aA4(#zyO?)n!ASi}zHA zn9O&wx%Q62D8-9jJZ$q=-HU-qyJF&+KIKXMJKwl0n!|ER1oWCq=BFdZhzVQ-dqg=? zl)2L6l8f_iq(H|`W~;fV&@2S{!-1YJ%NsN;2J(#6<=|INztc_HlkMlUl^!%xUff)` zhJWpg4zG8iCy%vcTO%UTw5c(|wz;SfM@1f_h%ptTV0lWEEVs7)O(qK040An>62FZvS`)#U4__hjW+dO$RL(Wdb^U*>rFY?IP9yC+Z#L! zL8*sy{$Mpc zflfTTm%kPK1<^AApAtp5XH0QB6@zYXp=FmcKJb9%`%>t-ZW4X)Ze^lN157 ziZS~dGgBBlOr5k`1WXnowBy0ejXu z*kdZvXF9ahR^401y!PDqTbwH7o!Jc;lRi3c{e{fe+?Q?OoxuW1r^WB|{6mqcSL3U+ z#=|j;T&m`kN=)>*Yeo~hT+)PE$z^XH_PG)Lw=BIC;N^9M*?Wg}1&PN5^JtV3h2-XR zWsI}RLMjDBdEEc(hwT#HUZPDu?)C|I`vKkb-V9NNhHk}%-D?4!nY3--GmPfB@ztJ3TDKiarF>ZaIg`??WJGune4_;}dV zt*dBfX_s%>;V!Bb*oahaqM60jqSuaSB(zbnX3_@e5n6zjISdrDRPg5L^fV9*|QM(YvX!?GWi? z7%Ig@n2y^$|7`ic%Nlbgw`$Ky_)7a(e5}C|beeSAyj^}5AFE#R9FSvq+P9E-7pH1; zJ{O-u;vZifN1G#js#`uw81xp6+_<{WCI9@1ScYgWAmCrmo>Du^;%SIBp6jD#hVGmi zQ@+4tHtb9;SmoTDt(y|NAwQz*uELahs4|;vS?2-Xw`nw^i&M{qlP&{JN7FW4H9;J3 zsRVRxJnprwV=NnNz}8L%!12xTL*sfn(4QbkB&IJJS{q5Vj03fzo!qJW(s zDUFz>22EzTURX96veaSq61MKU|( zL9U0(U?&3M>6EZ!3S9O-+PBX}MP<2Ur4(syh{kP~$^ZlQrXlvWYfMP$FIYrBXy2_z zgghI~f?mYX7=D>^O7Gh~-wC`Z1$wY7mDda_+5krZ^y7rEM20>SyYHQDPWKed=LnW9 z;s-JEZH3Ua07SOLgQ1}BTn78E@_=TQ_oroZfPRLe9!XEEST-;Jp91M+qwGQ6E~tFQ z_NJ(I?2)G(Tj*oAi(ZfwPT0vHBc%q0P|{e?Uy+<{F929BwZ@Ve!NR7N6>qX-Zc?OP z3nND*>iO;(bdG=aWexh0Zyj6N2Avfl58XyRCpM%IeKBLbS&b0s2{!x~Mf!A_jgTc5 zL4sVB$noi5f0FEqhym3-KF=;waksb$$n21mEqX{<7?uyPndChupHy3Aw)ke2TU}W~ z@uK1OdfLGOCnw~QbrOXCXU(!b8a>GxV^qxTKK!X{j1Nw)Jb-dPTB{@jGnb5DVI3#- zXln+Xa>JP6Ze=4)5FEG$3c&5@e<*qik%P|)~i#JiW&xFsP!Glowu0m zke}+1HB8PJ6WBaq%YKm*+w~oIq{dL-6g}%GddX~7)Gh3Q*!)#4-a=Sdykr#r70WsI z0w$D5CpReDrAMW9imx}!CMOOo8nn82x6;;q>wDpLLWqY1>?MJ;9+Gv_mww(Tg^Y|* zm_`Nm!p8y9SlISt6h$RLwnVbS)u_L$-P@A<*b$~nKI+0odot==BMVt9f~QDyj&_|p z+LiRvrNX5EWS!zd~tJl9NK-*UG8?k;?+ zYor{or0mq)?B>S+e@!=w8Qf7!!9~*%PK_W(9AYnf3oF9~_gqRzn&`PQxwF}Ya_e&- zPz~uLs($)R_c2ZzuaHk{bX+ZmUJBJ8tks_8grSE*QFC=Srm3M7`cWOQTCstUgy6C+ zPFb86A59Khtv|h%i~mNno=AS;m7`Qmh0k9sDGRqT5Xj*S!qv4VN2w)((CaC23d;=) z&wYsuz4XQcAr=;i+i%W2tGen!I!9>lfZCGG@Z23dHpqyM5TaqUUThFMY#7j_TJEW# zn4!U809s@nNk~<1`4F%=X1&Que(*7|`J_iPAbL~-KH+HfX$vIHF&^gCX=K-F4AQ0ADbU8ZU_X?~3ab=OZA-V4 zxhX>J>4m=ll%5xX%S2Frk?d7f+ZBfF5<_bDS8K$Z*mERQ`TCXe^^Q1(VY}zm!Snh_ zbCo|+Pk`OXLulm!k^N!%Ngwn{E;zwH8dgBJKk|@1sEZj)uDG3CS=CHfF2z)q)zLeW zGFSvG%4+in8Q;^2EJZ_^{qUsvA+dChvuP z+?Bz9+?37;pu8AjpYJ?j;b^$b*cp$&@QDnU#AVFLNM{4s!4g92B7|F2XfwzclNqom zNDsCb6^*{su2!R&YuGdg5l-v)0UFo$1RK%Pi3~GJWv~`mOT|q}dd6D~*i>L`@uS&i z&vSTif;p~qXpJKGk|c$^bRe_Z0xEwwvcMuH{Bmd7<#Y3qroSR-qte_VfCfqKtw=iE z5os|RMNQ5sUL6|zbMRko*+}=DtG+U~=+b+lg+-28ZU4#07)oE+5GtxjkFZ8+>C)TY zXE$pL?2m@#unrENL;S~(UD#0ZiACR(#QJ@{5-@tg&k%8U_TofT{^4e#>XVcLR>jH@ zsZxo?SrY$Y3+F6dOLWKn^%2AkwB}J;|ICMUyH2I~7D8y@sU-`($NLF`bj-`&S}j*V zu?(lJ6_9!n-*e2(ySJ-evWG{4-;j64L|nLFl_%3|3=P4bi-V11=^8!3ZoJ>wcG|%^ zgcb@(5v2}X8qN9Xo3Pu?l`Cn&ElUcpEin{m(!>2!q9h&7nRt;)j&!SCpg@*n zB3AZ0Y5JQa;|p4etgB=UBfZ1QZ3r#b(iDwsqsgBcAgW49Vc92c*)2BQ``PdgwAz1? zgK7Us%jHQwl#zehh{jeS_K>8dZKRKqAiLJ(ezG9eSnzw6+$*}wp0KtpA?E(BQQyWs zM4i_@FFTz&n!!HWt+u0xnQ#7w#TpeMn$!_Qs~CnL1hFTt{SSl8R@AK2BM(uv)~fc; zeV%*wbMFv0GywDfK(5jnhUg9UhWA6(sPG?(hpjW+xh&0x$qD|C5|YZCdK4WcqYjJF zaLepjh*Q8Nc_RxuLj6Ph(vop{Yq)b+BUgev-UzDNKqUw5Okraa*~r+%+P>F27caf7 z>r65ljNqUN^^?y1ww1uvhQst7Jah@F8hXcn|I6j&c<1qqfN_9_;0DgMhY1^gXmFmj zld}vvgf%tVo9w#iQofvgafj<2TLGcn7cIXD()#NX_~APs zyfRB;j~Ez|B}q-O)txY$uFFF@v@@` zaXDjs1MbN{o?-*xjLh|WK#U~AGFI`bwbb1cGQ}QpCMq)PXwnnFXJM(-JCb4p{&+$> znrJVbB^oYr1P9aACQYQJKKaRRp~b?imTyvd6zCvJ>Xr!Q!jOEB$mNJZ){TgWcE70) z_eRmfLt-UES&a#Kxc%GwBTk zh>OSgtjEJ~E5hj8HmnZ|NF_mWoe?BRV@ruC_EoNleH<7X;8sv&5XyU0VOXK-}nfe*5=-|GxP0 z<;G!6-!I{B$8x-qQzmjt^lZM&kE@)qw2V2Y=Q2)Ee|pi0?)n1Peh%8A?koL>Ok3IK zd~=@Vd`w?Dl*C|KG zwVY6ey`^gBIr3WNfG0908~Bf*P~>S_YEh}lN` z?SQg&qg`tfzFcQSvmPc`)Rb?t5W+0(-d@j?rD95>?|8~ST}7(~vqq)MK!&r$E*}DOFf|w=ilF6@Ih@#wlXFKT#O6qBHb^;Dd1&ner?bo^83Av&Ref`jLBHV zbK~Z#yO?@H7aa0?E8ii2>EjT=))N+Y(WeTPefP~b3cG~S=c$4jBPsj2j%DG+WqL+4 zUj2m9RIFYZeN3=Jfw>h%el`q3+rJ5ELn{Z57#0)mlUwwyTGI{vYcmge;R-KQZZsbK z+Zx>})pjNryYnDT(9DtLGH3A@2bsDh8ta}13|5rpc4r-Zv6rA%Eyfj@q%8B~&Q69L zRJKTokCD|niRhAT?yqq5g^!0uPg@Z0{Sr-@VS6PpN)VZ&QSZ4d2>j%4VE&gsdu!+Rzh^Y{rOf?2mT_4!6*0iT= zKTtgVxfe{P3Pa_Zcv<1qYE0z6;oQy%lOA?fECcK^FGlEMSmHI45I!pJFsPAl(5I zsWV&KyjzM2JXU?Tt|cVk#*aawyEA|PLrVlk*1wxdSvDNCd|WjgXo~DhAOL^wz4m6I zjB*2y_sUY;9s&q!5@T>+LxGDC{}wMKCZ_a{-wvYd+NcQR>NsJ7 z0n&=#%7ssJRaV74K5UTzmhKXK8FZ-!Vig@R%|*w@SyhobsL5gokxjMfMao#DCEtzK zaIs1J1JZJ=fmrRhq%vvq#`NaKWRh53hN=DWbV)7j?aYt+JwO@j1DfH^AD^mZ2E$aJ zW=c8C#Uf#zBJDe5cqFT(4)A9Q1CapX=w7*42txrPVmli!`=^i$VKhHAw9!`w~(pgE2{K&OPgf){YQ^VrxsV!@*Prb2bf7Xgz zyKn^d?99KiKtypMQ7?J5m12pfIdn%tU;FIUfXu?QPH-t?EY#4p>5Q9*SO&8X-5B^;94+L}#FvP>`v%B7VFet>fYKfb$Bw@?CRI^pqb^j#A*qKou&` zK&y3$i!_M=R6vjU1q5{AvUdBmoKd9emxVZ*EW1hlJh0`v9_CJV>d<{>q*BuW%43t+(84!E2wLk_Yb(#C|a?Y1t+7yonRbw}w@Da$PX0%FAN6k|6JN4?S1E%Rk#~;q&f{5E?!{MYrrvN!G$Wqq62qqC@4xMSb-k z{Ni6Hx%mmMSqIWv?1uiYeYB6roWN?7=IFOZ$|sROqCWj<4xEmI!VPE7DQNzy0Hs~| z7@+OjTz4+Jua%}y8YvyBDR3*Y#d(KjqfP=WEf@@-6M7UxV)f~wO7XcNuBWvFa2&xZ z4fT|-$!c^ZE}6g8yz+#H*{XQNXL1zN>D0ov3@d6ywJg*1;%&n(@;TSh1=739{#$c} z*KwMV$I)N}v9yBR*u*xSRn-EwCvQ6R6aMt9mM9LIdD^uuU1ejQa8OqOc@Yt`uUz6otxt_ed&Ks1w08nO71+H?`F&Nr zDj)L+0HXkKhyH6GXGZHB^DX4sH~aUC1(UT2xSZshY8<=zDwPMBZ&XL7?j#S?*O=8k zoo1+{es{U2k};=v@A;{)u=x*|wZhvwAEEDBnlycRNdg1cr|vc6`T#hxM}WGN0mOX^ z<}tNj7&v9jK9ju#$P(l*H?s#D2fP$>ysr-UJ{-VH1~Qsq@oU*F4qe{AtsgcT#*?6i znINwzo(h?}Zv*ba0%(m(beqY=sn}t1U|v2*?eDDU}>SGdUT& zF5edNuDn#DAj>JM*t7sY95P?#S9v+hCUa~$^4uhiS7~FJj@pFJdcZKy_?)7YcV5|4 zW!ly13Q9%MRO4v4`7Vu~V!DcL2+tmXDu1fBBgFocB)6*E#1@}-+8Alvo#*z4s;j^km45 z1A?3tH07#bht+S(_rJaFgjfzv?RdAcqXkl^zjAu0(fZ%=u^mFkb3`16 z+RBI#6TLoMX|ImMLKz`muu2sqTJVfFQH6B86`gA|wWYT&47x)NvV#GTm%vX+IM5D) z3J+|LXuHz|GWFkOR+?A7Af(TpRp@knou})1v@9)7P(RXkfCI50_f<{1xdZuaZ)<~)xgs|M{g_^P7T|Hi|+0gco6H|aU zaXrzTM#M~+t%d8>XzDKLZ^a*X8wbMMZJFG9G04oD=Y{5!f7Nvh8tGt-=y;+`)%fD8 z1dm}8S|qqU6Y0)v&9SN!rI}*kEr8!s*EL0C(rZhC4wt=CJ$Q^(sl7UPu-7%1{^sWP;6YoYn)qC z^1zLfGCL9WpuQrZ-rp{9TJ4qbY@nv71~LOuQsbLQz)pwv3~oXnGmE^`IKY_t2uc5C z%KjFm`DWd~Ta^9R)ujKav5eh>9o!~4JF=rBIZ4Evq|KZlMox$TYJVP{g@CUKU@2?! zv71|gaYR@=HfY^3C{V^KsO{x;J;&bf);&x0Ez|q|q43ci@K=ChxS4Dgws-}>)~b>C zz9?E2o<_FAkA~D=6B#giA0HA0M+vxklE-+aCvd_CLreQ$zU7e zo9kUQJDMtu=^z3dNLU-Hii5=OSGQ=)Zy<3_hUa601bv%VZ8!7BPw;wK5zI&gPNVWK z=-|&qp*4#i#O1ecSh&p!jv)8VI`50)w0vK8A327HCtS?1zvhAK722pJsN=aC_~$(! zg7|DHz1=v3t9&Pq;h(?U1`R_?u8I2}F90nNxz~iSYLLu_phB9P_hq%ygO0Tebq?#e_ODvmF{Co*~&0n>nd9xm!#`PU2J!cB`bWd;5H06@Lz# ze_7ZS`Un{N2-JS#4uvu4FWHFzW(locQF22m@N}`|D|+tOJMhz9@AM7W;N6tw0SCb;D!KH_PFL^kGggGI0n_8rj$Y2C@fnbyLfOpaW{(s4#EQ38sV zz;*7!A{3VcvMG9I#_EAldwZdK5ypX|CXcKfqf>}5sP(9lQu zBdK)NH8%aJf}9ZNs*9u>A~{Iq@T1RdM5gJ*;%XN7w6UJjue0O7S_np^^bz#PKJau8 z*F@Z6k?HUuiSO16KKQf3saR+BSNBujtun(LwQ=co^V{vc*967b zM)FknuNiKT8d#pq_hC6ZeHqg41)2`?BSNxYOBu9n;FNkfkA1)@3=Xp75UDde2?2d* z2(w}FcO~;z{*--eYs|Y)Htd%8(w4`!NTq`>jL)eY`iaPhdvSE>B5g*+!=Vj#*lAIw?__eXeSX-e zR6n_cyKDBgeF$NP0wgT6|1$PwT|G2i08<#|GZ}?zg9bG(zcvl*sr;rD1uF@i@QE?y1h#o*$5 z>s3P%-wZ$b7qN4?sxSqbGqZmQFNDe;=LBZv9^J@ES;K4yij}RS`pQNH$2}iy@xwip z3%?sHUwLCIT zhm2=;IB!43^Dj03?`hfJ>HDU@)nkER=Ve{Ge4Z7f!kEn|qx+4nU~Nm+tUs@=#3;U% zy^<6TCfXt~o+eur;!2fx9S1U)BYxhuodXGhdeb>OL$a+UZj?qa3^Z&FfGLsyz3^k0 zCr*J=Tpt9q_A~AjSRA#CEy=sj)stVzO^A-a44ncm0z``)~60Ebos{;y00_Z@N6Fg2l5g_hsq+N@^e@#4s+ zz_2HU-R`kVLqLGOzIs*VK@VtJt6<@Gei7ia38HH03@Q>g_Zc|D+eztxgi9e0{#VuTeTI=9DNbc~=-;bT#jm&i9n0|x8)V3)dihivFPb0y zGM8PRw+4|CBk46_K{UA8&(4*y^%PWAxpnBn}= z?k0B*>Q?sog$7lx*nz2P^O=I=ulJ8y<@>h#Gv;qR`-R^IS_A4RBi`?~Ey?hqsx(og zzOaCx-L>%4^{p7CdiVpzGMbmIXYa#Wu!+8XU&D^|VYpF|>7^{ku67LzJc!h?O9Sk+ zh|bwnXH-{BhxwkHIqj0M<9XaASh1!fM;6+z#k6^=oN;&l7H5TDpx9n=*7jk}mLJB7 zhx*%L#XR!XDrm9Szu!>do!j9xp)K!pVC%hD{_mdtFQU%^pl`=8U*&Mmxl6YQ;8kV45={eVCIOt);iHJO7XnS_wqE_L`V4 z26YVyg6Xr3CzcKMF$2@Ej^@K_!y$+A@>Mz-b9X(BZO$%MH*6~0n$r(smi~$}Je3gP zAJ1W<5!=Qo$^wB(k!^O@h(j!UleBs&5=gjo{PtdGTAz#c6Y1Xt)+4yO57v)J#%2A} z4)4YN_bq>aupY)47g=5u2nG0QH1Dp}vqru9=# z*R$LBR$9f)|A8>QBJgkHorsBTepSt`=uLHrQ zeRB-3zw5|{Uwtl*GED-e@k1@${<71q<%R*0iaiQh-;_T4yF$PAlDyMhkczw2mvl2Q2EAlzuuc#6lUj8M|`0~QGFU#F#Uro0-nW6)U3B$Py>GeUgFHt7e zOP(4PgG-~h(uFtf%B;YpFy+JD0FM}sNk3nT4a^YKGz7TUZik0Po;S70e45m_qSY^0 zN*I>7!&`r*pF3$Lv43`CnKSLKoJuixp_@xT3X4nZ?F+$viBy?R%D>3r!C4#G3%cZC z$=K1RrXNGa_ipZmMwJB_s-L?0D5p)I(Q0wqNa~9Oich5wb+dg$jcytvYz9SeSM)y@ z002UQ!4xvT%D~jVaR7gf{xASQ5e2aRBo_)`0B9ZA8vTts9Hs9|rwGTp=dlQbd%CB$zh@BkYyql`zf|Ms2!a$&=yr#Wq&&W) zp>OK8DR-mlW>*6Ck@z8%YX zb(&7>I^~5!))(JZd@F0IH{Kv-JPe&k(6B&Q5tmR&6yF$c6#T~YL7Ch>zXKT$8%DGB zt#j8gkpEih-;2>ZOKKk_V3l&MnUS*5A#SR!45W{MtsLJwUL|@6bDW{VUr7N9@nUGK z2?cai9d(tnO>_iNHx+iZ5qwc~htEd&{a9&XqUL zQ+EicP~0lmAS#nvJRv3T{1Eh3!nFxL_2r9oP52&D~i8uKYF8L7a0RsR_fK zeOBRSWc$Rb7gQdFF{EuFwzPe7u_HxTncTHi4ywxrDt9>l&42 zF}cQ+rrR-{i3jz5DqFeJ^Ac8&6@y(AnseT|AU=|lY^;Hm%k=5_Puw@T%-8$C%cquaTO)Fx% z!PvE(Q_=aZyn15ekU~BQ+%+#ke?_mF^K}PXBJRaA3OZbG)AGZ+Zz)EW^VApnk*^x> zwQG~cQNfDWY_<`C(_Su-ryDW1&Uo3IZE7~KDDz`B588bY5cg24$yvzq)!4KPl_K7& zUum!%?fwZb@hcoFQ(&48X_s>F%FtBp66!D=oHofYa2i~a=8+-#q*1#YL04sFi|gVd zSOQOB7P5^~!YX!gxdkxWkt7^Sba+%_GqvOx2Z2Cu(cwPZzxPfc0)~DFq2!1y;O;|Y zp3FQJ<|$zJlQdjR^hbe6Gyr&!41i^#*`uyUJjb!AGH4$XHR|OB#g}t;T@zh%zkK4EzK3~x7+ACJjd^X^2d-si3 zHhL`TJf4WDQuQxLxr@GYY){aMuIss{k5$qx8GL^E#3l@{RMWMfMmpg^pNTC>`RUkh zy=*2+VpB0`cm(K>u2hWOg~~-CY&ShR3iY)T8%^bUPw8o_`+B-KsrWVvL-&^OW5$Si z=z{{RI<1OtpEFyOS+k%pOeiLN99+Ogn1Bnf zMcj>KBQibB8o3$>j!ONK1U+RsIT~f+F8+**IVdbqJA*_#QA-oge&*cj1nM|Vn>^E! z*UJBN&AnB+I5D$2S`4dD0--v9aTWgUYP0e^FPbt{6_lG!xdvtBMZd6VQ8iV4?3|zS zU2C{AUpY=z-Z1>w68c%?jB;zKLU&%VHAf~9jT*?;U{Wj5rHK4jV~sA>t~`fLAW|@D zLx-e}`WMXiKlR>3IICrGJ|#^8!2b*@XH7 zc?WfV_vu&w_x$+_I`f@o5i%-|;mED(DD`e5T_Bt77l7#XJh>LQgDUg?@h%8Qv31O8 zn3rQ8w)d_Mj63FYf*8K2MTM;8^q#c z$GtV{WlswHKW(MyA|kfyewMD zzBE-d+h7s|0ElEsV33K(m<0e1)I&nJcbclm*B%q@j%v;BN@N!IMV@K-gE8+~GuJ+& zw#H`t6{*bw@x*aE;`r?JO!r!c7LryHAXMqto$`(;H+nnzCtbA*aKx~b=~~%3keBJ@ z?ckt_S&cn0Sgr6m*MAf(UF6lmc%U5GnONpt>2!aEJ);Ws*8HHyCjzDJ=BrErF-Xpq ztt?GN4Ntqwp`rGeS;ts6x|j{G5kz1bI^HZ1-`~m~T~$~&obw3t@wD{uV7RFM;gGL^ z2=hSYMYb-BT9Q0UHUVFNfK8oR$pc*FRjM(1JTGFr;5*NGaol-zRBvLOuJO9(Q$WDF z(Vj0x#?vOdDd0JZi|lQcj|2c) zQ+Q@h8hgJfn0ao?5ddBE7+RVGZs0k3f=Mys{tIK!D`SyWw<51V?HH#`8!L>_Fe1Nk zVL?V{)^3~$Aa0K7FHli)qc}vjK@9BT-xpUu7OjZxbw|Rwek#SQZ7FB+-L+r3Gnn#{ zKZ{XxWQ)@NO4kzK+8nrRagT*uyySMgtG5~M9lry*OB zb8IU7+qXbTJsiD1@}wzM{tE0k5vISmjlF@8$ZA9(8aB;287AiU0xxROFm$@a_La(;;zH?c=@eA^xZLPbs6PqMx$m zklXcDAr(_qDy--_1c)g8Ffhu+1*fG`GqDyqj_cFDx%TkaE}y|a>v&x$FXA@U%e6BZ z&!cm35GtC*!EMmW++3RPkJ$`^oomMR=s;!sn5791dlc-vwm_zE2;ca4dBTM#l89Ik z@FO1H@~?gJMh^0Q&OV>MSi%MJo&K(kK7A=EkJofH#fTpuyI!ucE098pbjTr_pnkMx#bF+?5ZpE#^<3G3^4Gu>=7WM-VWzyfplTlqKZXfZS^b5)> z=2tsR`uX3}IPQ8s^26!3-8r6pK#bFExd^TvhO2NlSubS2hUaelLiXWIcJe0)YCLGhIy7=1lH_ ztcG2#dV}reXMaBmhX9Q+<-^&S!J6SV(e@F%0Z zQdYm&`|!6mtt0#vFBu!6i}9jJ-e6RIp3?P98x1~PzP;%1oZz?}mvN;kT^qNjlpip5 zgY9Z>3q2j4CZpAz{bCA8T3{~-v7}6{!SFU~0hjOsdP|@0+Eiu&f;yH`6+kBDb8%)h4OEnd3V>0#1VR{T#cz&0-w8=LtDE~ zHB~b+$_#qp1cUe=E_lDJxE0|rMDJ44&J1bzXC$ex9g$WeD*4~Atbn7oK`k9uNmL#~ z)Gr%;VHaw9m5K9I*%VWz>~K&+bYQ+qYH8}fFWMFZUj+@g6;zycoqaj0=P^`Wi^Xqw zoR8g`o-{njT4EUpMF z3V(Tx+eEmirg7}%7tHA{)1FtH4=eWFrI~~bIuG+~5nww8n2-rnG9f`q#vQ*=j0(r8 zbYJg3Qeo!?{gbl&uYSMq-X@};mlSblY9k-1Hy3>Q73!i|Hsa zo@XS0c`7AX?>@?C01vx4c9{7_9|KzGWg9Poq%Y{RHs@ar9KmP8;#;>S1HJykrMYK4 ze)Ner8~?|ky+-S}v%FnSj+6wD5v+*`Ip;I#u}@HudU3SAkh3jiYh2Gs2Xy|M3Ai{q z+R>>w`3z|I{PQ9Dy9C#dXVANqi{x)-y-lov4f)Y>mGacc;_iss(8xudZ`4vpPz4`Y zVN$~_I8q`!qtPKMRa=G$hF6hP#lj@)6h~`;tvSWfRLYT|(+AHqF=Mo3k5BSDz83P} zt01nK%9Q4&f!OQJ-Ifztkm;S(hzhCdT!2_kK#|L&;*_2mUmL><={kQ#bwb9J__Pz) zLnrQ@`IuziSeW=68u_ZIrRGWQ*{QwJq891H{!XCCehc$QTk&zP@+Nmoa#XCT8q#A0 z#iObX91XR}3rodS5u=8Zu|2da{qg0yncyaeRh!LGRq5Uw-L4&nSuOvr|K{S~7K!jA z@P&$BG%7c`9q8`tBFxA|Pa#I=2vnfJcx`#l?AjJEqJ{-7_= z;^(o!1DW#C?nRo$IG4x0x-_AlSC#cqg@fLe57C#?e$KVIM4Ft^?Vc>#kMMbtRQzG2 zEN1YmZlr!-$LFV);s<(V5|nREOY7{2Ulc{>YxHJI*~dC%BT$O^TNyG(BNH30GRGRI zJcP8`1^>n!k9vIa=U-eMN;>gODNl(Q--vmdGCxtiWyvz>X>#ob)_Pg!0tjwxR4EJZ>PqpI(Dk+rf%eIqapVf2pre>QyH5MGR zyA+j|OE8l)&5toC6F(Elz#Vg>WMr)#cgTzwMeum`4p-{N735uOR-L}hdGch*a~;h^ zVG7iVGB2}{R-r>k=q;sP8gY;^+Wu9%l1)JO3fvRB#8Wom^R zM}{L)^AwKM%*<6;r#jA38^`9cPRHNl^Dppy0pI(&uh07fvjFrPl<3}8DseIISxDX$ z8!x73PU$Xl!m-A%pP@zOV>s|M?Pq2AMe7~f=Q6YROSNznT_PiU-?8RT58Y z0bw^^`Kw~}mh(o6sY!Q7&q#nW@1e{^7fW%_pDN4aFcw2uucKhq>wDshHg@{B;MACzV?&%`Rg7A}fWpJ|*jHZy5x}qh#9J;%Cw6gamLawmP3n3Si7qgzD*;GYFX$h%~m0{;!IIBh+ zoZPDLYhcyEE)<zJ-@m9)StjCCc7>x!jN9E$oRsMz2ifJ1o`%!97~_wvq?=Arsx1^B3zf(P z@%9JD?Ve}-?U>;OikTXJ&hb$i;~A&k1{;>LriyWB`ksJyfRv6Dt2?&bDv+js1HhFA zTt4Fds{GpV(=izCIkX}Z3@V{(-?k~y=;Dk%IgFCG#nM+;su;tb-Ms1Iz(E8f3-3y0 zK(zr3fG-C`6geTRCwRDpnI?TA&nlIN*;x|%K$ie;HfCTb%Z(ZIYIj*VtIKhJ8f2E9fOqIO=u zv;16(y#V0uzy4s4tmR^o#B+*^d^_i~R?Jc2>Xk0qF!s`xcX8~~CbpsZGhwUO<-qU_ zf5*1D9`DlRuePx`>htop;e8TFaLm8itBee%J0wJQv%$HQ*nzUb$9~>g^8JF(fmD ztD$=3V|o?(P(8I(l>*K%ZK}4bqJ|KsQQl;9uFUzyQNxhGL6dj;Vjh?KtX}^9Wh|TB zLa6O2tezLx8$WZx@LeI-rA|+bX92GiL+Ujq1zE%zW|o>-EzFfateWGA?i0GiDKlU+ zbx=`aI!`(yohvme1F?IRsq$tA8svVN$yywi=6`*pu_7Zk?xb;|1dyZZzkO$dIU-#s z7@_Rl_M7gk;8On_J?6;pn%UtI0Rwg(s!97~m&9N|EdL!kOW_msk zV~OMuSMQXzdD=VI`nb%qKC*}dzh|s=otb;bS2pNRsuM27KO40r&NVX{f~jb_|E%Kp zeb|E;XaXBA2g8Bank|@TI@2hcug>c|AHhw0QL$A-wh%2l2F?ua8zk|pv%+wh>DQu% z!IowSo>Yj)R+p)tch8LHucu&JwLpcVw&-x9g#;;IYL4%W2}XGJ24RM;Zc;_YwE?l8 zG~d-=e-?OaRvb(-+kqSFg$V$5poTSLGi@ zI+m@UeS0)7*%;IHnOAo!GjW!=TCXY|7B-8ZcA@}6Rq2_BCLg(niOeYq&hGN!Sc7gXK?l&P}x+2FQq%_Y`O;s{O4z6Eg=9EwtQ5C8Z zU>p=2bwl*w5j{VDd~2PWoMBjf(CN5E8_?jgSW4ma_2bm7m?vkt)MP9AxKd?%7_iz9 z(t~fUku!_Q`sgB;A!Bcn#g(|3q^i@$(Nh10gIe#XO3U1Kux}iaiGYl#euuO;o>I8u zv2ox8*RV)u?-nRlF6wE=HimgDrI5}CVb7B7;y-N5hD+TxcqadP!+l=(QVC)Dy4FVR zLuU2%ZPaxAVWl0?Zh}_^^%)`hNwKc+~?k)i` z;V4&T?hYt$S%6BM(dkcG0)1EvMe6WXVg^-}ai^P2=#Y!iyg0bJ2#B^9+E8qnaP?LO zju&0>{)5QUOz`|%%0y_x6dM-yQ?sW#`zPtG55lpXVow7N$tmauVP}D`|Lp}ZiVDZE z>i%yof$C@fn`o4t#G5{UOi=9ER(0fXr1pi4B=z}d`8wq~v7@u};kD3TKZV$~8HSAC zZ0_N0`g$^gl67_+riQ1LwDX>_Rn%*s-N!cvtwlSC_^_rz_n~`r(kkb^Ukg68cro_u zvt4#F4Q}bTfrJr(~`3N)eit`y_)teKEZ&ua{9E|E~<$aI^n^ zQ%1MqADhOc=-T26H>=kw>WEg3!`Zm>lB_3et(S*JT8jKEL+czWC-ER{s3nspofj$> zUn`3e0cw}!d&yb^s+KdCAQaF49>VcBvi5Gu&L1O~ZgE!HdzFq2+bd5k$tMV^4N44b zg#%V$m8}G%Qfdtnhh$$ZNqt}mz3O47woaNX+5W)eDgrfEGRn6gLMlHFE|thK|H zcE&PU0aZ|AA4iM6dK74{a>nK&EF$%X&DqNwleL2qQm$vQ44jEA<{-D@LoCjZ???q= zK@BK2-~%xZ3JS&7jW4BxPkDu#v-j9jv6X^aYOE>_z&$^=MA)K32E}&gZLxmfw)E9C zNF;iJgjpkD1!@wop}Pwaxf5(|7u^juEHs!2S*$SHnF4|prs``uh0aLiGOmOd|#)Fnd(1vp|J z!DbrrROoxz-7n;U%)cF8ArHg`>m~O(Y1`3sY`knjCua9xdw@a~LnJaGHpu)NM_<$| z%(217y1+-pZgkHhD`KB}YhMB6Z?E$Iwbu$h_)zgAi{K}zm>5&Rs;kbh4ti@BSvRDp z5elDSkfVpgc`F+JPj=2~O@>5OR4z*oa^UFz$vlSq^ewf62G=4e|0d5(ziRw9qf6t& z+>i6RY9F$HS8_F+2owH1H9wD|RdY`U!pN~Jig{$okR?PIKU?c&BM}S6rAK3#YjFFeJ9Ak!GFhML(DY{w*ew?JWVGRJQqS24 z^qIWeWJg@aw8L37?kfm%fu28k&}?nIpn_%oL5SS`ENLrnZZPBH_X zEX4mTak{Q*;G&O!zemkv4u>~`l@E9@2*P`B>!_|I3vY~ z0Y^JNPLd69ESg}ubGMpBR1UGYO?eSG$v9(oes<(L1akaQI4c_Qg8fw z^t2!ahgKTF?sLh`9=4U0Ur=d#l$bq2|AH^t#cpHcy+cflZJ}Sz+TgNCMB)#tZqBY} z6VzqM*5=rjr%nE`$|2Q1fC+WLAEIRicfFt6PFe|XAH4EW4_;BI421;#efh(BXh)<* z-o;}-dOR+)xNX|WSBA=8W++zx3I11p4d#2M%z5sU{!e)Ebb?06DALV2Tv z_0Ix@Qg%H#!Wt>x15_SeRz@!)zIpgcB*0=>umZZy9Rq1E1|g73cmqrRBQNFA$z?B5o@uY7O@q7o39~t_8VU&`Dh#*nL4hLwi`(+8Sy@; z+OIT?cE!D206;@ZPG1g}1~RPs*icl1)f508uX;48l6F~u`RxY38fiW;F0$41Y84<~ z(hFH}9kwj#B2w;fhuJ8`JmMMCKrh!G-2a>9>DfR;Hd^XgFHa)2|FY|hz)RdKX)oyLBIRl)VI4n9>V^Vs zIs0~&;R*t`IqyRWZN2e2i~$);YG<~#x?k+<`zcS^(9d3ek=`;VOhcL#ua2HDd*D;2 zV{B)4^@t5_fsUX7q1Ifkm74i==z{@G7q%+KcE;s#(av72-0mRo82x$b^Pi#O?5Jnx z-=j!Es`%O^vW$|w0u`gi<6ep4$}bFE*#Ih+{q0e|eCjGg-n~JCARV#<^(ns+arvLq z-N@Iw0m_-?WrfjY6;V-q4X5dU zT1f0oXedgcj-=_7CC z%qQWw@@kUDj=vC&U?Wid?Y4!BTaaxVtVz<|N3#oW@bR}CH~Av*=A{@~mFZh`9LZN@ z1TQJa)uVR8r3h`Jt*4UxGtPjalB#grTW6>)16>6`&k1C-a!ZeTV*BFIbk9%m0+sRz zvlYR;fjnvCULr~zE7M>X7l(5+>KRSR{V`y3Z_P~Qr#Z9x*4M<@ zR}oic1sHd1fwerrKh2pv4~ivZIPjgJedk%gs=ORWBQBG}efD+0JmAWWjw_Eo z`--p9_i$43(MP+Eip<^x3yH=mG2~NeO2y@3$*Vt0>gnwXWMA_@AgnYqdX$Iv{DwQK40-9SV$k z=@aR7b5C)WeM8aF7(R34B}KrUBZ1^ghE!Y0$}6=hpF))ahfotyh!O#G=LxcoxKT zEhM^`)(fq#S%AG=|DN5m-TtWp{G7o45d1!%_B9;>-(E#XtzqyUj=V;bR^_t;BjMop zt|o?s;(C0YCuCQEO$DGo(fQ7gUO4X`n&Mc#F~t1RKBEM2-inicEGSxg7hrV$CSSip z^uumUa3`XJuuf+mYnJ=l{O*kaMr~r{^Uun~M{N~>(2NFx@BY6H@>~J6sHUF;QYhpX z;9a!DE%XF)5CHZ&4O#r*o;vzg@i$q*~GVFqw8ZgEGLV3I}uG@M_|!QA0DYz zsVQ7gb2_1^{jyHycE~~~Je^ga+4W-}Qh_iDI9DsDap6nhknG!62Q00hm|35>rLMe0 zRzbX;@gBlOvk*Dr3nu`m-CH@LM^Z)Pl=D8`|ep+q2Ob9r91u0^6RA#n(LrhurV z+K@Vrm!X}gVl@iM1|igDt0CE66iHJcNyd)Qr#08?Q7Cin z(kd^Rt@W+QyP2GgAu*EY8m<}&aSi*l-x?`2M3s%~N5I@!*(Itn{`g!c)}&*KEcQ%NL7TjGQ;- zd7h5sa3S7TRWqwBTOn9F@+Cp}HgP;FKI{3ILsW!tIcVXia4sk=eP=m{y<7QK=GcLR z%FsNSlj*gdI#G)`GJi_fS*yl2gpPT+ob!3(rPNEVR=N(bd2HmU(Xv+NN|B!`XIkYq z7(Gv4#h7mh>)kI0g-AWV(mgsijyO8So4#`YH^t3(9%5K*;x@L~V02$lKcYQZY4eci z!z4eD%D~mXt?K!0P!)Kr~DS-iVC2Yva z*lZDM_qQ~(^cHA0Uh2|zGulce^UUw}px$?!u+nlhx&9;BMSnz81}8F^VFh}BSblXi zVP00yHt_VTceB`@u<5 z1N;QVBbDfpI}?#BuhWCiQ?!F7`vpfohU5mNJlvZu9k>+jCv7lPo9xiMoJI_`e;7$r zjMnsoDs?Ay?M;Y+4gLxun#d@`9whn_0&S&z7nm|bpObThjkmLuG5zET((%fqY(f;# zI~Nf`q}WTvaPYa&Qg!1}Zsp3p0SYw&f&IwTIy#5nVlUc2iM??>aQuq z76Bj1X|wNCEAS8?Pxr*d(l4$X2ae1}?At5dN{#9a&Dm9C8v%cjG*jOxXXu7hdOMax z$Vw)r5xX2T?mi|5Da7K0AT{&t+OZ#*!DWR8ZAJR_%2zfx;U$R^p*b>v=oq|mz<6kF zs!opP^^dm|4~HqLpHKfc=Vx_Eo>3Ng&?wX@e2057H4D}#T2{pbqtcr8BbaDsg*}e6 z{Cb6kCd1kLSizX_AaR(G!h-E8f~0NinRxdmkNo?bY|Bi>;lw5(?3pY-t*P+zn5 zd%Z(=aE4jDzQz5Coh~6V5#(yp1C4a~e76}gLF+xzhTnhJCS4bInEME2#RD7aHpdxx zDh4_e^ZEXUme%=BBuZVE}4*^UM|n$fRhV48@dO8-PvNpKPPhQ!X%@ zd7D&sRViefa9#TGLHh&%L}M2)0;_!(dgiGPB+<6{I)he+bmJ5|TpH4OQE~qCh<75N$)2EevJM=&=B#` zXBJm_WqX*W283GT>T`4UF8ikJTC9)SxV#fy`J;o;EHTV3Y8_Zi7oBa%M!Y&Rls`ykTKbq;1);8~PN93h_J^Y;Fcpz@Gqm{%oFvjAAcBCU#F z6_-`rYfwK$TU5d2i2j%X+IR-EDct8|X_&R-oo4te*G@gZ_iG&$Dl;#8Pmrk^&(ERs zTjM0a**cuh)a)0-Qg^5m5Au+%nFojCwf==D(@aD`4RfTs^_k-byDUum)}y3C1DtFP zOe{W(hMx?@X7~~6jEN608v!8aSHtc-57pz@`j6}=%gAz*I{eug##4o%J2k29r&!Mn zl&nBq7a5SNHw&|jbqINGkQKF3U`kH#JAGrDgfqPDEG1YiPm39bwvHb5s$%6J(^B=C z&78~D4R+^rBWh**&eX{4{xI7AcLzIx;ga);ji8IT^(XlwZnCCuci~W1tyl*YzeKAa z?J!%ApAC~gW6@1bL;hI}M!8n09!<%z+*b>Z?;6Qv=K-PjXRZhIp2{&cvOo2-zD?of z5$IML7z*>Z(|!A~*xxnm&1WWTXFIDoEQ^An*E3m?F8(7by{)(7v~pvgU&b`r*+H_V zOXkGN(hFp?e`p{$?)axh*JliG9>XLtN(7w04_iQC~q z&f;q0j(%5jgMy_k({m|2dj1J?rrc=+Pi;)!$=nUB{4Kg6YjYVR*BZm@r~KXYN@xGB z^~rzU-)dmXjXT*W~#>LwFr zn)pIGwF6$2zWLkxhIAQn783jkEk2njqKZ)&R-TN*R1)7yK@i zH^WnkXJ8zn_wEo_K#9C>q97&ECE>RR2eMx96IDP{Ew=jFS03um^{G+v(?(G3HWf{1 zDBPSp{kL-0@3#{Xr^rbLGb{%aK|2fj!4?@f^R+9VI4?bvII2$AOX#3MZOI!=`Rxx& zpDCwIh`4zYTPrzsGk^Wg1)TqWT!}5lS$R^L7>Cl+kfd#JeWrQxjKTpRV)w+1oR6`* z4uvV>2@PPPU#P;aMuFRM_Ri3*Dy1fy6$ym^1pZr0?lZ+qk)rhyhfjr9lMyp&76(=i zE9H{!NKq_TB4XL{uS!+l==-jIhV40Z-DHomB43Sd3BgEA{0!{4NXaD$%BCXt01#gQ zQ!BMfVM>r#fJreJ0sz2S$Q2PlVlSw$1brk10|5ZwHuyH_(1t#FI+T4r+Fuu>gnUP~ zn`e{MV{un}w3DDjQ}|(alKh>3g=Lr}MX}UgVu*v;#9^u9DS1}{?|Ru7^=MJE7)_c5 z^Zda3e2Fa_<`@-pj%t0ZE^z<2T5O%xFkgbgLI>k^A?@3k2Xu4`4$?xEd?Y}d`Cy*o z((qAwzDG0{1sZyzYDu};LI0d|SxIC4la?5Evc>Dr+#09nTFPOi? zsPv`%r)N-aw=orA*i}9%BLX_gL_eXY|EcMmX;8Q*z$^>YgA8nbQP2xz>2GjpJ0cWw z`(X9E(C=Q@8^>9yQO?lN2>1}FgC+5MPA`UZrUZa0nbDJ2MGcLY4)@?-jI&DJ;mY1T z2|NKBsh|@HQ#Wv1<5Ud~0o}5@AqUxp$)R{zysW{joBK%w zJXGSg7+EVuHh9DP#mJf^WHl94xyv^wFO@noCIx*8%jI7fGa(-JrgTUl9(cMypG>wzB zzCueP7VDFH$M9^NVyqZB1x8wPKQt;P52ZS=G+H!OGln% zfx>WDlS-%)LN%TViv%E)Xh*JcYEINb!x10^9StObZjpcz+bB2*_=p3*v5GpZPQ%l1rH%!s~^}<_jqop-D#ouw)V>4Uiuv3aI&xuh?4@Hwk|!z-)>H z%k-l+3F^B;tfL2V8OGljw|CSGh+4}WZ1;9>rwA;{v;L4>%+6(8r(h@|iC`w^78Cu7 zj~x`I=Hnz(_iJq|Vci=v19_MkN3D6yQ%~heUhG_CJuhDI4NP>X(=ZLO&ag{7QrFsO z+tURO5!kQU?Vl8*G6cuUL>ISs==E*PstB8dgPP*fuRAmd2|z!bp+br&Q9TpLbm!Ifhy$P=PFCwy91c`N$*;tEo_LG9EOUZ^QTr#{=x)d?Kwu?&) zy>k9E@lNjfu!r!=+54}Ek-efbQT@n_0JF8`gyb2kmUp0eqC8BR@DyUi^+F~+hRc$IJ9B+If+plxfBD&$^{YKxTOBeGXA z8#(;Ych696GJz+~(yuoqy{m;?-3H4wXVfs!x0&e32~=!40Kx{mkq12z10^_!d@+zf z2OvbKBc-ryLpH>r8k$S~Vpgr4L_v-#$+-CcY$5v!pl$%m;$0CbRuJI)86P8pee9<8 zZfmSFvCBB@CI_p!7KGETJut5QNnQO&1S_6UoBxlx>$h5q8Mw%}Hcv4~pNQ3ZdF`2_Sa zYsqXyyViC46Kd!MCOY6(i5CERsaoO{AM=8R`N+q9V@tMdpW>G3{BJ||2E}1vTMMe8 zC8venGstHFX`cj`HUXR<4>=czU0Bk%ZXG6IXx60Br z1EVa-6}d|lL(7rRh>^DVXphfP0W8p266UrTUdxpD-xp*h6(v7%AIx>t_S;7t1Ic$u z`LYp9zl_d@!jwsI4OT&Vc#;0rW4+&Hi_2yvlbd|~v1VQE@SQ#`e8yGG?%kBBY004zO`O*pS z@*xn;#sW##5p2K|6K)o^3okA`tXUSXNTFyBE0ODNkCmV0PRNSU%2A(X4&W(}EOLP0 z&`>u?j>6EMwK_|e=%HfPMfnm1>aU8h@)=rrvITKn8hYd`m~){}VOJDH6n4Kd0Zxho>0Y7T@`|_+#XBKd{T3C}&F+h9;LmW-P6oAi{Ev+a;2r>0x(NMFg#N_Ap0JqTBw<%^ z5Iq2N6o+YgWC#B-k7z2sVc?AXskK0;g&vSx<4bt)B|oqsHhlDtCF~ETeY2DNz zoo`BVRr!i@0PeBZQKdw{G1>k9H2G4PT^@lPX;Y6YA3A|Ce6s0lA(ER6^ue6c+3L$3O z3P)!egxO?>j ztkB!an%esmjD&H3ZJg_EIKbP7*DkXF6u~|?2@BYUhirFGvE{st$$hUX^>}&TGbzhM z78CYU8(hw0snTSpl5FLa^037+nPkp~&XxCGOsl#g2r@Ie^ZM)>()^@5VOrQmfh>?{6L zU<$73k26)Vktdf*QHCF`lN4`P+{cc*kH4vp;yT~hqTVoXX;y1#EjF^mUkb5r#q!7| z_lBN_;0cVlDNNM2pOpX9lxS3UyHKU#KcdZ+^oK(z+~sdAR}SGj0`fX@k*v?6=f2 zBK(hf6=c?-Og`+S=s~cqih9@auMhF_vn#tDs~e>jFUJ)3RMpiH3;XOF*BU$LEfrtX zssyW7UjBX~jrG?R+>s)*dFZ9yyG2WDvji9grokfpxvL7v)CT}qfNTN!Fbe>n0<=Xa z7yvXW0Kr6PG%Htv4G4+!lF?TS$daN0-k)8~%b?FnIzEb~*oMYs*`0jzF1+DgpxW$(PctVRX2UCH)vx4F ziO_ohwfI&b9Cp{SOye~UmCaB6-z9iE3+v}KbEJ&Vq+s6i;ZeU3lcJ5Wzm9s<<-6R3 zcWp1Y^HIGalJCBh8cw}$Za4!-dOzRfwtIupi5sO9lNi@6U*OgzOG&I=%Th{Z605?#p(6-cxsJ+R2=`m=s5TjamQJZ@}mJ837}PAs zKHbB|3_zsR^mM*XjNtpfz051te7letE);@FW6hc`>rfeA)77X9eUkoi*^{}xS&W&| z=TVtN5pw@E_JHkvSN(C_W>>>U3mT7Op9Om>nEn-=M^ zQx)s{!*zw!j{LD1n_HnhvvGr;$C$R{&9JLS2A9aC5oJydm;A~~)k?KU5A77pGxMV^ z$E`8OAII$W%s)MJ{ONAFyXE`AOYWg3*KZ#=b^&U#$cj?$^$-7h%J@j|i-;eKVc*Zr zFC1z7{8kb_m_Ozg+l0@Vj=q=XD;L}F)9$KyA|fo0{Ke5;`9uR_zj931y6^NcN7uLc znhhlTDi#k)V{y-YPf3rg$w_%&qs5uYg2du{-lfcjn=ZQFZ4AgSZux}Cn;P_wN(-B zcKPoPO*3&}B@6}mwL`nVzur1@pcj5uqi%(@N;e@ygb$e#);!==Zzt-IBlCP4oP!b` zcWdz8a7+Z)2st35%btEM8YO?xwI?8VqGmD6dG+O}n=nG9mX zJImt^mMh?jhK6h-{yXPh0nBuAwlTGbsvOP>9So+8=!K5t1f$0D>Kb*As~6@z8ZN)_ z@*8ku4=%4A%7NEC^xQk$0%KO#kD_oOgz|eNq=5dN>&{ z(KRo5fkrh!#rq%6QtgcWK0+JA2cGCUVl>#9d2rChePQuw&D#g)DBD%{7n~fEiqaxW zVWC9XUf_PAwj_>a&D~x$`MiJvTt`Fapprq?i`+iAx&MECUEl4TQIx2+dhUl zGsK$zu*6e0axiOK&NA>3p?nsGrRMhXjf*I_(y1nOpidyv_cQdUVNw!@}=TA`=h$s!&h&vgAf+4>@h#{=al9E z(z6lU`u1(FlVhJBqS#S14S|ZsGMp_Y(={@TCs8FT={f&{=v}a;15v`~dH+!L($O&& zmqpHuuT1ROWgD;}0&>rEv=$TNxbH#_yIg$-qRl3eji8XnJDs_Pjoz7ZUq;}@!Zd84 zBP*&pQ>v9|=VXS8D^6cCtu=nDRc%+2ywIoVq4HCEBSt>o0Cl=3?xU4}H;(ff0ON3NAzj^>jmp40IA4%*GI-4!MQ0eet_xOz_A_u60xZ$nR~3T6Ujmq?NmVy6T!e1 zQo)}2-zwJI8QMxk#cnxuj~#VuwbL_;y;Z`?{~5ZKHP&6~F?mY0E2kElEwl+-w)x|S z_*Q4KkmVb1ol9F-Xv(S&{`u{XBeOf-O){yB<5eO#bI}kw`>wTjh&NNz>0s`=b87pS z;UUluhi=qpen#aQ{VUGxap*eIS8PujTvuz`^@?#non9eW9DD{T=C_=lV?)jQtQB=e z?N6k=33AY%yklmRsC+J3HwwDtVU4aciMmvH41w}k=6^7){9F*}b56dxtHQLxv(@ca ze%^tF+LjH+zrvrkmi)B4OMSC*%tE8^W5N|FLSqsp;{yx+ZQ@yuwB@b%{sOl-lD%rK zINPsMRk=LXf!xML2mhY*n84-e<<#EV-%}?SGk#W-j1RX)bI1PfODgeP#to#~hCe4J zm%e5rBwr27lFUXApsXX3Wk#!Y`je^NU)-K4Hy-fb&GUUOzA_k$ZDzI%yR?#|DA)R1 z8Nc4yK**f1f3Nfx;Vlz(Cu$*}u>As9~o2YxL z9p6)LpZVCmEHztW<2YQKdV80HR%T$-^T1~dm4NsxqZy>-nc^)#!L7V18vtYk(7V~v z9_9kx61L8>d;h=}sB7U`#mZOuj2!Ec32pn|d!z0Oj1ggkuc6?t8yBh3cxjI0ZnWf& z=!?rPxVq>PxrIAt>XkCuT3#pJ_P<-K%fV@B)f%(F^ghsbt&)1BbtfBj0GD+GRHY42 zG2SS$r*o&7nT2uK8{+(0N5bPT`Cq6iA_X%I#z?!c;EIqW@b8B>f%Q2zkwc1_4QACk zxz|)j<&rD(fp-Pn^=rGl`r9t$NA&NSdk$FPD^i!h%6xNatVqXfpSW838{0kr8Z zERBDK!W%UxyKGos8`ODgDyZ@HnY+Ix%L5`F1T*TQ^Rn@IQ1%N^-)h}jvQ!v9OEVp) zqiLDWf%|>Vu|~lnI622B8jdn@%l!S&R^}RBXJ82mx8ZB$s8JF`aOP!=Snn!vPz_W{n^e|yQ z(GZVxd-|Eb)#T)Mf0FWIQEP`mh5)S@Fe@MH-Bc!h3U84?DTREcz8q5Sjp!?_TJOF<)Q z`r20M{ZD9pWMVO%$aqsbm86JbEL~*G0G0V=%Q}2u7P^zwU1)Pr-l^;>;11%8U}YIE z#1$woN@~-wW{BD+gZWjc(O9`r>jg8r0OAcB+ZC_Tt~k5E&RhSzR6C@=jf&WXC70$T zm0DalU0+k(z$VGM4@@8Ty!_o#^@NgKK+l8YotJ*94Hyr>-YQg_@XS?~0}krcUD%Yl zXDB`K2o}1NeZoJ-PmU+c2l*l3=>m8fjrjenbSU5c@DS7cmn>@o=9~`Fn8|z;S5Gwb zj6m2)f0g$61$FM@CK+X^3b|(-9nJ`IPx>65UzNLCsdwar;sR;^B9ldkg{J00G`K%F^Cn+m zVdvf|t$@GxGZ;xFhO+3soN3PxA3?h z9M^rFI$uL^ce`|&w*_DL_{%BafBI}IGp)4;+deZS2}P*MhN)U=&C=&7Yo>PMe4m0R zNF@IpQdX*=b$z&~7$m<4=|p~?a78#1RtJlaKl8t|^vANN-+kz}=hoVes?w65M0R>? z7Qm!8c~;R57q~g}uJX_%DVwWm%3aLbxF;V5^>%mAaz8&T8nr&Ddf;w|f*%UY!84^z zhsuGGRBvuhf;c;=-`q|Pq{GTi)Ra0E3S;_+V(74#R}HO?)iCQYzX^LCW{$7lDf5WTneIv^ z@}jt@pa7CvsaZkFzD6lo%)+c{X|`?{o$a#f0HS3lB)0O9}i=Be} zg~C4$OinwG&^Pv3{Q+^uWfkRR>5$88IEwRzdDnsU8J;(eQfVPocynV2@?h9DGwTrcWflRQ-(GV#rC+leG_Dj9J$LpV!MoAKURKZca!04}vdAMeDvenpA!< zyMh{E*Bf{FPWg+g4+6{vUQpdt?^na(XX>rwfN2vl{`q%nujPOr!&v@m2m62#zhUXo z@Kkp0Xkm_@_KV|F4Q;!Z>~H@|jTJ&I)47V&Z2t^(*~~RR)B~rcHRq;?&g@QWX3zy{ zmYO5zph!Qz1s=~A?)y4B{vYDBrC)IXSV?HaXIF1d$Q`uFSH(2(NqIl}BlrIi>2?=c z<7|9=A|JGg>Znzq*`S3pRS$Lw7PfoJ9`&{FbbYjV=(rff0~y_4ZZ~5JefzSQ+gW@* zR`+4$^Y@602;{qT^vhtN`L=-}AehfaRS*l*SzuRwrY^m3-yWUG0-EukJpmdG(XlP1 zCCN`girbTQo!%A+`xAP-=`&4(n!aSsUR~0N8P(fT3Kg1m*zin#y0+H!r050c8*|mN zAs|FOowWPLmH(p>y~zMll~_AurKtI53CjB}G%8Qft`EmQm-!^QA)PtR0h`dlpoddW zP{&Gpte$h9e>q*OX9PT;T|4NCy|JkKB#a>aOt&$|szgG8@HY0ZQT$tKjSCYvN#L!{ z+{v3Td$({?uVwLC99f`h@o(@GHNP-MSeW$}Sjb?GW=>9Q)>uY=m}7p$VD*E8QFrxV za#iZ#Ypr(0krt*g=8gYC9r0W%dhYMk@b@c}7$GclDJN`W?|YX?>H|7YtjaoDO6S93 zCvw0~XF}Lg?H{4BOKPE-Fh3SZCpsdQ^l49OocMIfR}8+rp6j!{ChG`GtI73*?M(xB z=l+nl66VPZ`?Bdf61BF)*Zk*LU!clv)pmlbK{=5}?emK(4LrIP*EbXe2xTF#`YEmK z{vY|x;)0s4>Xn_YLIsJZRVG(=gcl2Z;#_QwN-3T{S#w}e!;78W2QZ+78Z|}lSAUq_ z%6PcC-PH#~^9?ekqc6e(YPu^kFWl4O{&>x7M7A)CM+2i3n=g@s z>Mw1OUAMZ8n(LabX7M%(mfGJvwapPF8lGl1-Emh$_f7`lj1X88O>OD|5VuQ*noVe1 z#^3%zCpFrK8ltzRP=76K38Z9nzEY=e`(Tiwu!8(9}dNM^sVaA`pbiv@Hnl8->K%aGIvdvZTp7srv`_kdqc6JcXo6D*`FN+BOm31r6=dVj8Wwbwn+|&O# z`L|o2lb2()W+dwR#Or%WNQ=cRfmreTgv6Q2g7#Xlq+APqTl4Rn;N9Ba`ELy`Hp@BJ zwHwu6z2=zt+II#$o|JV?sp}HsL=nFv9F@PkO8Q3gd$#>)x3@<+8l9bvQ{Le&%R|T_ zpqyT@fLc{L)^a$!yOUMa%rE(Cl*B%uG@Xom`T?y!BWZ;@?jkjfy@IV(I^A(vVaT6* z=c3}errAw$zDb1H`d+KF;~9M%$bg8OHzyeG-*-;+`7r#A#o%L=(Y$88;7>hIIMr)EH-K69ApCpuP!2V0{BPUc`k>tU!2d~ajbGC5c(D)U z;XDdEf#V()%eZU91BI}FpLb8Nvi&B&k51!i0z0f; ze@S~^F5z`=%C;bNW4_tOWuqs6J7ObEO9a`yv@KZJ?`7_`KVVs`JTfPFrnA1Hz-? zmj{&DOWXa!*{}OkH_=`uO}JKOZ%Nm;wdmQKLDksTyA>}NiuOYIui9f)14X&&Tx@^9 z=k$jJ*_H$$KE)}QZRp@B=sC=J)4%ahz+`%_VHzcjmb=v_~s@b+wjt@=ILoL zG?uboV!u?_&h}{wxjXW*G}5gX=0% z`Tt<)o?1%jb)@jtkQ4`n4(>mzik#8fY?**yuRLUO`YAt_L|r7TIEuRy87Gl!)>K)x z><6uic9y*ske%O>MKGEp=ONSbYI9_EqxRMf6?uEai8&W#E)* zc56WA)-}{u9nlcVLbvn550rMt!?y+P&Ew{An_ZWj=VOhBe9EWQC^g+v#{JRW3C3lV zayOHwn)3x}!H}d(>4!xrB^IsrQjd)$78PBo{aJJQnzyr(C$;MN29uhtd=TnD2b%|% zuHo=z?F5dN`VVe!!t}>F_;vc@U@6PV2ZDIZFV06Ic@9LI9k3VPm>)rK{y&QD`z^`+ z{{uKnmV$`55DjpV6Zgyj_r^Wa!jY+|;mpSA0B%!5b7c!>WM*nsYF6M%%}mYAI%a5U zw#~+A9Y0^be*o9T5BGiD@9Xt`z8=q!oULLLZ*kYKPje1GSi4aJ>#k(5xHh_tW%n$* zCb}pD2l_11m8yeIC0u4~IvLu$URn&$S>Is+0Bm^7bB_${L9-T!2_aTxn5O<)sK!-D2VsNU(zAbpQ_y zesRmqEKTZq^?bG=!`4r_0G*p$7)1K5TMlS!&~i^Iir7nt`Q$;`%MpOIk55*(6eJRD z<~gZ`3wZSbgEIvLy;jv#C8PeZ|9xDcHBoOYyV~|UE9a~>S;H^8Y;T<=Xv8bRafus- z`o9$L3)6WPlXMs#1D5R_!Z)4S?^R(hTbHE0d#E%q`M}EA`q^QE)zy}K&#*znV+mbD zk|^E17hJ?;p%zMCs{nMO|LpbxSSjFpg<6re(jU$l>;AMZ zzupF8kIy4|4m70ww70%jf|Js7t9qx>{P^avXOA{8#a7I+#OCn}M&7ZL8PB#U*|gW5K2np$*?GsAK<$o?uSizDbvg?hC-YQb(HQPzEsOT?QNH6)R; z(g3eRhk45Vs!*SAd+Ngm#~=MG2GSjaW@du4V01YK{N5Yk-}Bv|EGWvy>;~9gez_KS zL)@sM#AHDl=wA|q9US)Tcf2W7NorQ=Gq-b%G#W^smQOjP3#4b3vthV~4JWm$GrZ2# z0P{#7n#`Cb{MgK8EDBM_W0nD0x1ctg8RF{fNFXcbq*a&7;dQtTC^Da)%V{WbQH&5RRTS1(Oynf!6 z$%9EJOvHK&EbC-~%PsI^A#Kjys)z5Y-4>m2XwQ&x0}zw_#)lL{Elfgp_Q&_8X5aWH z>eGqC1Fwue9dR3Jhn~_1lsnPc5_!DLbAzU_RSo4`%0~xZZM*mGzgX&~`{jYA^MMfE zPVUdC%Md5iI|pFe$A5Q7l33t<&wHWr14MKp9E=}?hc@&4%iaIusb1xS6!!`WLZ#H>6L4AXKuXlRwsMS1A zZpjb*d6&=Jy0+K(aX^gd7pi0@*$jg;qLhlBZ&--Oq6X!KG}0Uw6Gva>KR&_s*jrkbHCdE~s$Ur6$GMl^ zJW`a)+!xNDBK{GnCIIVu;6w`jwiI0;@QBm&+Zx3ha1h#JPz^4=s)ni`1`_`SZeOp! ztjQHAv#T*hbd6HF#w7hWU&b#;=}&vXS@)@03-?GqQ&wRbEaqx-LvxzT3rf$S`O9T> zz=NiqfH7^(#^mZ~TKLZ3!cSTZ^WXzKYti{TtP5Az zPDbY*pq$0BQr&Mc*QQG0ZHp%LxEf`yZs`5&P_L%x!wV))_I{L!OR!|`GeVInUeP0O3<@3Xz9%$Ce{BL$qSdb!cZN$sSUCDy0T`rb~KT#VF(q0@P zOE{QJp4P_jIryMkDkwJ6$7P(Z^vAc}Lt?n;74S%ny{J0sx|qPpD_xw}9uVT^g1)1`Evs1wNF zbk=B9PI8}08LUcDZ9R;Ouc1Umzeh(&fwN6|W{bG4w~;v5XlOh!kMcJ{PZ+H?T2`L_ zdkbj=4Qu{?M^>yNbh;u5rH&$B7-?}U1>qVdP^#^b*|umQbaGIgA~Gf4mj;cJ1o{jl25z1?lE94! zdE+;guZ$~H6^P2y8Cp4mq*741La8ZT=EGHPzpcl~X1a1I@N#7|i8d$|I(L);<%JwL zho*t!sp1L`v;}1g5Z+=S+8ugiZX~qXM zQOQ?=vYiLN*S$n)&cyfQi2Z#5FzH_2^KSep- z&OaPDb5K)AXKp^avt*!dQ}m~I^um50JEeGn@k)xvYpA6Z7xud#cxe!G{;#D2CyXba zo~bpi(ddb6+Oa?OxX%Miw!#(Mt5&&XfhiAU`RAle#ev ztt+g-nx6wFm%UQFGhyndyuXZP*T6wT3wLdC!!sSL(f|EbSdOt`6dFrBom?3DMx086W8mhw8l9d&KXH&`UFw) zOyD%atXK$5-{6gVs$1Wchcu*$l7YU{BiUp`<@zxC=#ZJzV$T!uEV`&Qu zMl9ZA1YK9oi6Z1;f`FiSt||@$XAhPu=W2CAh{xrma|Zn^KfiRonw5d}@Swi;VB7a< zc>AYcN5$H6^w9l9TI~B@))Z+nIxi2EiR$@=3+VDj{3cv;;To7f&metjPQG~&m*nII)dS9G+4@A%vDlwIS5vHja_ zAGm`JuKf2`#_syv-!(Np_=qElCg7p}VP1qzbCuiWZ?AY9kH3^P5;KpO_-p0B)Z0rr zpY>)_DJI`na?fkDM-HicrStHwlt(-tJAPP-66X4Uu!{Kb1bwm~{gsx%(o^4D>j4Iw zGTR(haix8*1TDrmbG5aHY}vE6&bidMTxwm^i;tD}!c6oA(uav?>Q7Z))o1=}s6;tY z8_ZZgA1;bpd&G_LS*Sl{Iiu$SdE#b3$<1;s6 zf@Sz6rOH|H;u}lu7X*ukM)X8h?!k8ovU7^n`$y$XnM6vGE-tdYoa-k;Q2uoAQC4Kg zNObtWHx7AT3NLc6Wn=E3K)+WJveNR>=kEoQ_k@GB8ka&fx4{Y8UJp1^gJ?+l^Ry+y zNrnZyUiHB33GMWmJxmHDBavsNSv8z}=*9FiH#rxL3ju(ZUxe&zQRHNz+b}LB#=D|Cc)QCF`>Nlf3sLU~l)cx+jkxEmVc&`Pe-<&3he~ zBm(Yi=7ODRQo0%9okR)CFC!84+}{xM2Cp|hXZk0a=5WBQK|Ri4XdFNfbN|;SFuxt7 z7ddQwAm4p9 zY$w5Hxgb**;&z?|YN3Z3L{$J5KTgIM&nd+&KN@TS#`Qsu*GwZ}eBz*3?fx}2yB76G zAl{;D(st^1(a7GH<y1A}xa^%AUub;(^-UfJfgs+0i--{uNfFUbp&GcSQD?t^=d;rU=vNcL!P2KZ zd>j`e>O-pj^c30&R<3KYc~xGvZTg4X=DDN4s;_L($YG2sKieH+^jGrpF~yPixjF(z z|2-Rl-avJ9kIuve)!%c;-tMf9865#MjpB1_Rw+sGQl6Sn9B3t8OS-F(R~QiwUt?}6 z$(?r8U?_$er{+1nxkayDf{!3Z!skz^e6b)HDm#W|4lgWJFqthU7ky(*@vDJKov(Fp z(%;&h%tO=`d3dR1{W&-98Eve1_Gl56ug*+V<#4)oo{NUtpWL*&rt(6;y6axsxASO^ z-`5RjaDQ{52i_d^uwB}xS$5Wv7nx{KSWfOgsB$fMuD3#Kq;zA|-@DfMoWB_)w>v(lWl!EyLxuu1TClqUj}>gKDL1K~>L_ zx~q^GdR{^saY5Pk8#BYnu5j@QquXDSL$4)`#A}=lthY9ansa%4%tz-IyC%Y=cnjod zkoJ1&q5XXoweF^SoW5?EiPL(_2B;-6*dR!l`dgB=f-4DJ^Sk8Vr0b&pP50@w!26DO zJhD^%xwOOM$Z~Um;onA;kR#TQF6@e*U>u1dU6RIEE67=#*aIUaP8E^8TyUZ9Ag#jc zSux}i@|+#YFCF>9W{P={iQ${qSK0XhNwX>NN zyrS(}WedRa4y=YcIdZRnD{DN4QN>x6(#n{4N?JLTS}IUiCiJd>V0HsUoarcM6{aM` zPL=(>|FbQ{Gzp*cPP-b@_g8BbAJI|JbWR9>D2)oim0GfDPI9)88HOw!QlW*il134c zRA6yapUXt4R=GiylquDpf9FfLd6;8Pw|fsCF1LFD&$G7$+cw{^T+038V7}x9pUHi1 zP7I_l z0B5KyN)2>Y(=2L7YGuV8U52JIUJ09LwA{B;dwx3E3H zh|ZVwv2e^Mj;b{Lz~D2=ECw|o`SiTa^q72ADSuaNF}TrG&RnNxXAUMl({4;9A8fff zTY2PaXJ)|VOBV;;#0VRk>H0hQhO^^sRc&t(`ezThzFTiS-|^G1HKnny{c;-b%6e_j ziN4n+(=!J6Ox`k7b-zHeQbcM`kVb&#x?U3wH8;4b#(kZTQQgCn!&bT4T+TP2VQ}4c zNWruG?tfGdEq=bgd;CMb_PK?Ti&{MOj@~e<*|APpwKLZ?}Oq##;OL{ zTTfo17gG7hB~3dV-i${*V+1v>4;B2--XMZXoNJ+6q{7z*jC4i07p|M9RbHUjI58~j z=F6yC&@mTOmz7uoi1|Xa0{FS_VTp7sJ37p7g2=slM}UP${cQ z`G$lopx&V)dXZ0ctU`=Sc6vv_ergYm z=Yq?0Bd*||T=-ro5F6_214~qXi6#YWy!v}KX9A1Td!*`RLKuDB^Ja{BtZv|eJx641 zXU1##1m;Qc9e8#rm3$e)mz8CXucd%w;1p|%Z4>_Nl zDU*wn97hQXl=1umREp(s3dL2+jLns^Aj%SFdEk|4Sy<#J>~7T|eeDfoOjjDFc1%WJ zF04qsm;(zG4C^Cvnsw2GA^S?eM9Alz+wGmcnH#KI(*j+~Z*P%P$NWxg%nAOtdYJ}K zWNyCiG>A;oJKV4ft`6!s|KY2L-`-zOLI0bEx#MC^-@ZB|PZNNY0OAuF826SA9XK_G zk1G2WjJ(pR`*4&ViijwxpAS1@2XYGEjEu0oVung$f(IU^=Miwjbc=y#`|!FU9q(zl ziA+&-DC;R5ooA4F|K9$zdaz3!2-pq%GHszG5O%{!s^!k@Z zOSl)EsLo~}efh)APWp2I=m91d$;7-fD-#MGZC)WKf^^wRSMy)m;Wud4;}v(D7t6{m z%R6b4kdzyR_UQ^pqp|xagHHL|TY3F7$=h89lflF`3DA6CYS$`Pns$c;eqCrlaRc@X z;#J^`^Vz%f98xyf=ZV|f&Wv_LcPFiNOi51x$XNuq64qD3v&A(5DMFbd8}40t`ymW! zgGOKl$vG~{W5auE_NptS2K@=^1pcOzkiycL%mT&T69F=pWQ$zFuAm%^PHC)kVnPZM zugmp;&LgufoV9wL)p<;X{25|c_pu~D-)!}k@Z^>Mk|UUz0+!ZMe$j4fBIK`)p&i(S z(4F)_+_4{A4Aiv9HZB_T)N?4-t&TlEn29+1S8l!bkuH09V;FdH#H1)@f7?u{euaWF zWA4F{d7Sj-Eul{t7m)w=%Uj*pr;l${*53a*mRP7%zS=RxzF^R5N?P)Q&=Cu93fNiI$F;ASZ=sm0y%LMAJvh$Dc?nc=>(izV=6Qh)oH)5cO@YrjW z*&6=yod0P06o1(}{!fGKu8?92PARH{^=kiGvyAm6ZgpIU%Q$oCc?6qq?AiULt;p-g ztIzzY)Vr;jaBn(YWng(tkmaP-KJA0s;>)E;3+9v)p=JVlS&Z{@vvSs9ias9iJ3XV& z^GrJ8_LnP~pHb*GEfdV_P-px-*IaBhELR{&h^JW0Y1B=VB7cKW(wda2leF_M$Hq^(*j?#OyN;?`?1)Q5*gnRc!9Ev ze?*F3!Q0?U?k5h4P9TBUe>y^0S2kBTg-J6#+k}t1H_@n3 zNNn~yn3T^19UAVR+VpOZ!yWn@H2T>YG#V4XmE69S^y$mp_bNf;FRjZebz*Fe1RpS{ zSI)q9k_aX7JDOI$R=FO`K833uy*(!7{?opzrq?|;jTfvZVA73{l?Gue`)BE}U&J4c z4LZ$S)h!lvi=$d6pE?k&+}2>aZaV8bq-c?=sNbdvxn$uGtr(Jvv(vIQeDx=w$!zbC z<*eUym=<=EhLkSDH;Vo%7tBce>#6MwnDCesXkMDT%J@ME^7FXA%{CsF$mr z%)On=#iIjF%uCASD;1mRYIlKu&-fL+_ASlAB>EPy0ew>;z{&+>6OGQhf@y6o?)|(6m$)lI&wtX1gmw;{ zm#)nNReOOtF`rBqV#qry^^?Vl(+}hV6wp&FjMORBP6)(~*5E)n=_A(pr$y`!v7qG2 zLFZ@=5(dJALV#G_JB1s=(7LYBt%p4!+X#|eKK+>p{|pd|%v2(Z&BV>`KFScXJP6}m zS`o=wM3Vz?qjl-0H2(RlR~~~Gn0(pztds-LI6g=@LH|lw(Ktm;Y@@3O`JEpo>qE_U zpWdmfn!ZE5lC)!sw8zi*1nyk>9N8oQKP!gll72J;)dovdQ)$!)I$mm4&WY8lfSM1+ zl^vrM?MQ4WNjIbWMY43t6|LYX{^j|~&4Jz&ldG3o*%bE5LTXBU6;Ue8ka1!}xukhr ztP#_o(65EXH-m*ujuHt*Ia={!Y<7si5h9cCtC#aORu&wc|Gjw$kMLu;>`FvCLZ^1? z8e>0FZ)CsSwM8K*mi-~X#6+vQN#MO<)QZl5xau_Gw(h6v2MJGY?(3wdHU(WhMzU<#R%X7_p8#@q59-*KH z655psokFEtvRzz@dTZn#r>Fv^`(SxCpW}jmP*J)-$kyvOCydrQTq>+4_sy~F?Z3cI z&|vEv^>4Y3^NNmd*Dm)A`798dS}k-$JvvE-Ny(#Qjf`uPV7Zq9q$p6PL>M{C@tFpA z=eX0KzuFz=5_(tW6Mlb`XI0b%&pXpJM3n&fULrS1LqF%BBs3I~4)Z2P<_Q8fM?{U^ zV|ql}vIidapjYK4zwgp_M=@FU_eBAN&4c>Mfe@}TMt&qUQ>$)}Fta@3DWCAo9JlWi ziSDo4M#4)C;%tBhTW;ge3|a71rG4fbL3 zeg~$4bmQeU+(p=_tP9aFeHCh3rq-#`So<6G- znTw-FE9ws&+PEGz<#+q-m{o#PL{d|L1`H>u#nHG{+g~wXB~pcBx{-*WUV@G;Ywjf} zLmDzSAIVILg6u`MZ2%aXC8J!o%L?P`Ad(3aAUfj$2ZGTX#O_%@fi8MJX}csF@9g*X zYJUG1?dXhw%m^y=z^+*l)GnXx4sNn@L7UllC5sADT8Lq+l6qQX`Kpv&PRydgY+O*? zfxUIvO1;-H!?eAxvx2E4Y~%(eGFG8~NR9>b@4&)VSSu@QL~QDf#m6MW5U*J$2eh*> zEDtO%20hhjb4^j0+PsdRwjOduWvnp`aZ!&s_W7I$>-}>!)V(6Ace#zM)f>#;#0a$q zkzpHiJiVLP#$A}&vliAnMlS2NyW+$io_}kj%u4OU&@#q!xo%cq8`0$@YbbgC?e_=t zY`9-QQT|(Fl7vH=_wr_3_MOy1Nmzk~b+MT=xgRvSVNt;L20*UqJF*8LM^28OX4PL( zyV)%W>Nv7yrK|98KPjS*L>LT#EMwcpwG10;@wH@PsP=^Ttl?qlQ%JsH5pNcHj@LkF zCy(|lzaHdfoQa0aEx$eyW1`PUzFX?~G|}rujOQB=&duMz@kr9d*CcGeMxtCf3#2yM z=vC&eUO#@Ii=^W2*SybF!plIKaF({kz)B#jPw@<1llV;SSlRdjsS*kNL8 z)!+q)E?L|1M_p2`6TTo+vmHoQu42Xdh=`i{CT0fCk)*f$)WUihQzw8@4^Ybm@NyBN zvO)6~4OUM?qq+1Nn%^W#W@-N}7R}*q?DlT9BqLd*$ap`HH}ZZ^C*J7vp357Uu&~`U z#5y1v_yXYc%Eg!V;G_yrQUAg24I;|-Qin!^>N*QU)c0!J@Q<1I!jJnuFOTgBm(3HX zqBqnRZlH&0uu>8H2LM~=3_+42?8hUlT5A61eD9-@|77aelGQ*<)i+Rd>+Ew3iq%1(_p@GLQ5f z%|guq&P4me^JsUI*D6}i^xtja83P-5-h}&IX&F6a*T(a3}*=GSP{pQV_t@r_rJ<*-1 zNQr8A^p&J%s^2tk)aDo4b}=GiBh*s$KwDb3xjy)cRzq{SB=Ecdeq01=r2UKmDiOHB z7fO(|(oCKN5-EXfvsl1?05Cg|41u&}mMbsVzDM++(R}7(${aV#jkW0LGg&vYN9gy2{(>RD*4%v= zSx-Ru`(EYG&JLZV_#ElJy=xSblXL{JzzVkN^co<>AsDiC>hdycYQNQ=u8g3KDQiIh z>?jSk_s`1>_U?6MuYu+gcBsY^-sBL*5E)t#e^}FL>?i z$=%*PFnt5^UhQ6fYxc(Bx8-CuFr@d%<`1<;UXs{uJOh{ke-wE7k-)XX>ONk-*Ew?^cDo7Y! z*Ir5dPQ(t>xqf}wXE696J6Cy1sXsey^!x3>Ca>Mi2Y#JO@e3VQ2zF3NnBw+7kD%NL$n3F_xG z4qOgD|6;F(qGN+1pz-u+ZMT8}*8Q>j6_oM1tNm5+#b=~1EVErzSOPQ8o;2h(Y_Cor z%z1>g`iz~mX6~^;e^fI(;3a3wpUefACoq-Olj`A~T6#W8r&2b&E&4~bT+B6}cJ^V@ z%bd;G&y$g>V>R_q6m-0JS^&0A%1tiV(!PKCimooqvOcgqQQ0TCeBbRI|Pb-j7Bd5Uw;rMuNf&me^epdDx-N)U9fFjb)&6?qo%QveTI^ z*IHBE{jPXk4#Ugxd2_CB{YK=F?%AZfhy&-+Th+>~0N4ap?$M8zU!OmYr1%JqdVcY; zC~yr-Xn5*;onqcK+zpohyNJk8kw!}8%xgQwDR#4lLY5`B-0tl~Ftmx4+iV4IyC7^$ zN@_p0zVo28tF?r9xgTBf(Bz&W9<{6bN0(Dq6yeo4)R7izVqt_=^O7t$Uv7VH&xyDnDH`v%i16w>!R zfyqwjJp;Dr!ntqb6!htUYXf!3-5$Efw7F@hf*+@uvi_w_rD%=h&cW!>tNt$P6_D;T z8paFoTo^TZrARBZ(F_VFmYR;r|Ba{!)M}VCeN1Rr4XVLp&@LC?=`9NGrS&bYZg?My zu2}VCirAIy;*#!8jJ6{?gH<|3gEHtG$%KqT90sVj2QgR%HWW+)78Nod)0fmNBqhY~ zx=pY-**yZjBc{2cATi4Brt>Pc!C?m9c6olgK-Qr7y?DJQxaQ-!({fluKya_ZvjhXz zb=Or~imO{`|607idSkfn*`yMWxU)HmB$)1@)Hr2Wa!TCz7x@gL+HLH~XRh}H?>c1{ z6{o;?fy$0faW@F(#Nsfb`D~gd^TGnd;0o+l;=9YjMo*MwhfO*GAKz0U<4ZBTHd21F zMNVz5xmCaAjV~Z-j%<8qEW2?hI)!|{h46FKrs?4GDkc%)Nb!aL%s`$H#TB&fr^Aza zAv-dOr@tDSc>Q-w;q<)7M)0)||D57xJKfxB6&362a6Hgvu%et;09IdMUF6I@y}Rc| z5|bBD-7wd%GfP_5R4p7<$)@rQW428pm@pAYd$VwV+}nV+VTxxn^GBop+es5f#9%cb zB<;ItWf|?Scps}qcWb;YzAlRC`ZZmsK=cZqOb@YWHkI>q2O`HQQ0pEAQdn>3?)$Y-phr+Z1Yjnko7@)$RcksU(WTKn z7Ik_emoDG1c4-S3&-70kB;T2<`eL(~V5ML+IxxyHXdKgR<3rux42;*65n?tJA)N%u zWpRe}(;Ev6S3eo48p`@I{7(j3Fi?cN0OmZ^a`TTis?OX;>3t{sA44)$BhAU`^)vui zS}KFu1UMb^FO^GXZDUaGxkmUBYu`8v!yCOcFmt>%`2Q1qs=1hCK%;?(V(QJ6oUAj$ zy{m4uc=ef6GF%8AYZrmNL}J+fe|vxXqq7Fyc*mi;G#(P-y_P@wxK*95e~~tPSouhK z0$QP%W8CNveR_z1YydgN0qxtnq7Dqh8fWK5tth!9MAjBq<9#5;|J@iK1Ux(T-VM_s zC{Xy^bN62V+hDn0kA54zDc*Q?4fTcqfvs_xYcCjQ0edu0$R#wk&p?k;S9}1rvf}9l z-Q=>%@I<~vp{oT0u8YaFxzCrmaaWk=^C}nN0|1#eXXn$yy=x7Jo2`h6-WyjMP*1Cd ztiG}PwrO%Pb_G8!hm0$PWZ>G{>fHr27p=h48z5y5z+UWevAq9RC=`d`VJI{ZDQCpC zQHW->D3m?s7qn~kT(#@}wEOXsYk&VwcHviBn&0d~M{C_ozQTK2;1aXYTKRoh1{-ka z?Ha%w{?Es}Q}dCuN7K zxAyf7teIpbJ~(PQ87z-siz+NQQepY3lLA}MqG$Ef$A<=eCk zBAE?zYkvqvZMYhl@qs1r*MaH_w5IDAu3_GYqNa zzP_ZO0RR?FIg_!sl^-R{0$P~+$g&Z9r*9%@311`$eb=SLrE*YlhteQK1FM*d_CFi* z??;E>Z|~aY-CpcotEJ_gcfGZ)QfS>1jZkjBq^0^aq*dt70S_3)@6@yZ=gh|wOX5Z6 zenQjP?s&2%)rnA+%Y$#+I=? zKTe?@*U zpFll#o5D*^TxAcal6*U=?(IwiRr7_pNIZrb z0+i=4K(rDtSDNMQ1lH>+BJ!;#m{u8_gbNs;f^-8^BBM_PTi58U2v-Jb*$8ob{|LeiKA01Hp1xzQ75Bj3KA4o2 z%}F^|k&N?CjvTbPY^j~ zF0%V$BCR0Ki7UDjBbg4`&eJZG|Ft?^WfTr3=(ltepDUpd%CcWYa>p`{-kUbKCz8t> zmfs}+RLMd3F zWIF2Lft>nu^n?Eg?&ND5_aLI22&>gL zX&{!p+(f+r$bY6)E@LR)0!-?95EnU>2TYIk9H2_lspfBx-(slfj5vdE(=!5?HSxGF zMrNCjbYny4e7PYEVqv>Rkp~F0ih*r>w}=pt@}=`3ehHy&H;x)E_gm{^Rvm< zF-AMJA;KlVV(YbUK#Wd#wM>lkhE`R&(;67hl9gi0DxJVNmi0&{kktjeH;vNF0%G?k z8qNT;g19Ooz)KdwftsZI1X3q06qDq7NALKjfxJhDTodbXqe9IfH#Eo}ZxERL@N<>eZJpd#}R4l3S z9pQks7x_ArTk62PqPy$i{ODcR<~5|#3>h432!Wk-)0$AgCI|$ihJZv7$mg*N_p5Yk z7o_wHYy8?bd{*_}CUwWxI=9o{0*<~_5c)Y)&u;GI-5-(Qc>NQz`vTkyUcV`?IS`hY zj#^@#s!gYSQ9|Kq(MSN0#6o-;$xb=!o@R|&Y%_lBJPUb>4ffwWtsV<^qC$>P(eAcLX)(82 zG5FMV2p5A0iM2c!B5SyejTI<{vkDHfWfC@_2~vZO9a7T^S%?N(u{94_GTziGnpMbH zwZ?x`ybP)CRXfXO*J|%>sF&qdqWg#z7i(pg0hNm3a#q=%wF0?o)PRs; zkQE0}hk>1B!);|8Q#;|=f`e`T1e-C{AEr3p7V^&P>iV6+;3N_F zXoPDaj`BDRb&sX@oL883$!Lu^@R->mY(&ipP<>3)zsLazrF?%$dBDFd?0*}(d4+4? zs5^s{I;{IXHo`uS!Uf$fV1Sl3?@VGquUYcjU#Df@8~}`V?jlZ$)}loC7a+Ldzspv z-lc4cdVK5x4smfBaf}1=mq2zO@%E=eTochZXvii2oY^R2z*iM2>KgKOQkTQ>V)tmR zD#9UTPl4c(xY+TD>NS$aZth>3T#a;M{5dN8@Srq-{&SP2Zl`0L7W2U2A4}ljQN65Mx#f)<0K|jF*^?O@7{g zvkMWLj);(B)F| zVG3%QeeKTHEOT4s@rp@9DCX4=5pE zLCBZItR=L#Q!irtKJ!gpZelnO5lPF)vmC??XU{vgQV_9J!RF=5&yT(4#kCVZ4l*c1X%bJ@~Ff%IY(T0wR25*(Tw9j|_ze2{5&nhuLnM%b_qD$PJ0BJHZv;P-B* zDbl+DzxMnuqo*RUcC@~G@FoP;)1cv|)%O0t51f^;0nA5WA>0H{Uy`}^1`4_BgWm~H z7eNcTU@Cx|#+tCTWcc$yrqZs)FSt$xr#MFWjN!v~3+0amh&qmjm(z{CB*G|t*Pi|4 zsd?JT$my2HXFHX((gai9gST45HtyXW3(=N7Ec;CYE=fSw>p^m=Sc-Pg82;{55fu3g zT6uQI&igj8Sh>-BU9ZAOPuPY$YQ{i+rfa29X_uSIU#$hardmuzUQGFnU>mKKGFy`> ze~pDWjgdvS-ra8@TY$a9ymWNe)gxz1MC)fS|Hfo*N#6eY@!0J93@TNr2znJfHcdBVFLhs zI2-^_1pxmi3j|Q_IY>27001BYyygJD5z*f`fCrnXS`4z5+D7@gAi$Uy_93rqqJB-w z|B?uWnackuJlk1w+Dz><@{1Utc;%P?=1&D9mmxnzXkRwCl8D~=ir@giUAx-*!V6+6 zp=B(_#1P1$1EPn4eY~vtXH}U6h96aj9eDs%{+wHg;ni)c>Pl`}i0elf)YPPDIKJA~ zOAEG=yTkSxc^}*om<2akg2ymny9K`Af_k%v0fAJR)162|`p!TmJQNJC<0x6eUaD}- zzNV>Bh4`vie2doEb7@N1G}GuJuPWBi2j+%k|f3>X2+<9fHTK!*CZz={y zjOw61c3l|B^I1Ev)&&Iz%gDQ_u%5u<%2RM%KD0E;&lQ2Psp*~ou#)Kx@1-!>X{e2W zZ2iBKm=(lk*tqk^b9vq+4Ni`7Sh2!Qx*_EIpH2J9osv z)Ok<-vHudYPkhlWEiLArAm#*I_k75n}xHO~|hQ45mDI~&v9ZjE1d|Ih2M z{=N34B}z|#5S!(iLlQBLkW2I`l z4ox;j1z!3X(UY(-y%tfNuDuIQm?JS&PHSGTe46gzRl6y9#1g|p41PS`@Nf30Hs1ey z?u|HIoSyHbQg+7r&|j|ai(1iZzRAw=A+owuJmT8*foIooD}K8)fkbyc=87gq^9zwE zaRGo#G$EBb_97=RZ$AN0w8@ZE>j1thvxN77+*`p7wEQgyvP#dd!}-+Gq{p*chdzJ( z5PSaJ>^tVU$O`he#K*0EJ-a`wr>OVnZ7*K5NdtY*pVQpwUrz7{7-CkELPq~`QYx8K zS52(1yFA-kQfb2>B>I_eR2JJEU+s);f-DAKwl4r8frA)jw+Hp$@A<~dF@o9EQnV*QQICY0TCcdatRVTyCU zE#BJ+P8t?AmG9L25(7~>I^bWVI|$aUw2%^)a@K54v>5VK(1ZlIMDm6$7i}9gT-573Nplt;+c_xqR(v1@%~;}N@>tGaJ~sBp1cH}ENNeS`XNcX%SH z7=u_Qm;k0Dcpd{l2?q?f5mbX2d}pvY$Cd_xQa9YrjnsT*fZza{a~@zgoRfQqvE1G} z6S2dnDxzO%(9Sh39Z+&7j>}X(<-Ge~CCPmWvGC@p8(a7>#+{K)3uj1(jgvMEY}yHW zi?aU`&B@+evJrrw0s0z?x7K@|W!!%xFl23>%l=)avti>bL0%VTh_RmyXMA+FoY`Xi zVmMm1Qd&VoEQH;WRZ^Yc?{f4b{E$4f%h7haNd8LBwt~Df zd(ari%Tqd9r{(auSl@<$`9F&8#h=Ok{{#3=wi#w-PBUzdbDl%a)i!fJG{=x?jv<6p zlH5CCa|$6zay}&?mE`W;=8&X9DoNdQyyfnoQmMQ4{q6TB?D4rC*W=pz^LjsDsbR{e zNIQEmG{k3HJfLC=kW}8Pk(tUL0wM3C6B7>V2ehQ0I9ey!Z!4XFEYYW+Q-rogr(s zPzp~}tl;ToGF-19y4-n=1W$FfDq?lVVDHX5Jdm}{toFTJpXuE@k#E-yS&93Lr(rci zD7(4jdu4Wd{&ChxB!7#evzrcZ1N9CTknx$)hrobFW{#buSpgVKC-q+NiJA|J>SE?@ zKpJu=7}_M?aDP`C6ypz-t2d47d`bL%O__lGxR!KRU><$<}~Rhg99O^ z(2j2vOOdl1T*pC_Xdwp)Y@ak?iW0Ype0n0(SER$%e`e$~b$_2JqX||GIQS6)8Y2ALgN)9iWZ@RTToRtHqRJ8+u4N$SZ5h%wKl6{aLM7=)nI0(V@~Zmt z%l^FqZ;kF-D?|*hqn%LTJk+T7u5VuZ+Ps@wd!R}!K#kPoa~xiajp3(Z)M4fU)t!s<;cwJ?mC>akrSouaYf$^;}6}| zRnBK`ogPYooELjpw6PRU`@3GzOUFKW2b^YtQnVprfeWS=a0W*PeIo;)kA-v}65z#! z1JEAFUgq&(T>!pH;HcY7_klDhz99>stL1V-c`4Xx--~qH*ZpVnUl}bxZ+AV?vdg^W zY`jzo-Fw}NAN_&Z7DnOQ@^mp*0C6cVHbet`*0S1zZn$NX5UBk{qLfVvwnV9WM12U@ z3Prg?aB1>zz!q4R#K6U_u^dP!03@?ny>1?olA10j`n+!6@I&6{BpNxK4c6aeC>-6M zDVayzSFv1G*op)qs;>Imly121{Ut=M>o1-5;8CsbmCGHFZ&EH`aBu^3;zv|JVzuZK zURosWxxsY*okTr1R@FfJYNg;%R;e-n28tVCjZy}xE~B31o2C`+t}Em`GykgVSz{+x zx}khQOmeeVpFyIzBUtT|^=BR+LK|y1*7mandorWsolsSleU2*z0Gv>A%b~ z?pKFJNIi@`S+8pXaEQY)p<)oC_$yK7j|?H?5@xSN$t{|;Eenyk;6ss3r5-5S8*nOl zjks}W@C+>tg>xfzHRY_>+h$1 z(11laX2VgAoRord|GQoNGuQBGXYxpX4qA@*%B}&WTD9EL28Tw7wdR(=yGZ|!pxI_| zWYLiQx);{^@43(1GwD^eOX#(XzM(WqwxwU+cltsIouzpPqF2sYI#6Cv4t7N80WyXy zXPqgO7Be!?pUyGs067kV3WRFC@Pf33n#?RwCPVb{G}SnkTE(QA6pPLYZ7Y76Xf76jZ3Zf=m z_5#ZOOmkl1gl25OML#OMu2D0hZY;Ukn(M%?(dgjzIF_aGaz~y{?hX(r(0PzRb#3N@ywrKv z*(@$m9n@;dmgr{zy+|-mB6L@pjB^+l7=7&*Vz;seH^{hw3Xp=8mTn^z{|o213GTVg zt73#eS>1BiFpe!BVzsI2COaut1a@L@tOr4kOs;Vadv6Dr29}zom9ApsMn5N&+CXzs z)ay{w64>}!0ks5b*wYtM*#`EEzs$s3tn*!PI&1G8wh9SFRKnoW9=;AzA+jo6%PQ?U z9_%9a{n})@@gRz6Xv1)JZC%B;jLPL^&Ku|E-TX=e;vU7|UgfAtQX}5hsS=T4pv*D= zN2{S7fq(!Gr9%cYcmrI7H{xUd7shezt#DH>AFiuVp}Sy3Ldp)ySrbACEB_WIxd0A_ z0Ob*OzHsn1pY17#d1-fSq~&}%xebm8Cd+uzfrtTtd@+X{w%3td`Qho5Y?3c9O3^L> ztSr489RjJilxaLDb5j4yDXYwGP@sar0ESe*Ebg=G6*y#Z9LP^>)FCPW5TYDx002`4 zA;CL&g?+YW#nUF;B6zFFcz{|Z7L|VzS>;@$=eU{vtN)Mh#lr%-lDBNBeS1QE{FJqv za~+lkAR@!^bMd1Sy)bPDK(+%@s{uyNwA1bw-|GN7BnHR;0Q$W*QS)7=0hhhzb2eIxNuqM>2Y84HtA)ly8G8x^O2y zd<)JP;6{7n$`WoLdwBbb;MP@jV8=2mj4Ychu*>3&pACaH3wiqi#4{bRV`T-I%mUiw z+BiJ)_!e|H5PB>PdtwKAj0ge1^P)Rs_BD8%i43{@6GA7IM$C75zxPP*C^)-OklTO^ z#+NRqneJ0Z{+%Y1yk(k2%JZE78xh&MTP%GhD0C-(H!05%kRL$Lv+p&B@WJX1T>lyl z_zv5a2~is4ew|T1rh)%jiAf3Ajs9V2zoWdv*RgZNY`b9GD9xlojA#ZPk zn)&p8|I^CKeae)HGRH8Pcr+(RiQ_dftS!7Cksb?*)9Mfg#)bW*61CU7%o$B7HxaOA ze3bVjTH?g#!2C&glDQS1yKJL!#kTCF&E7EUy+LoSK1`#*;cUa@b9E_yx-ktRto7XA zY9CngeUWVOKOPtFT{a&HqA5e#OE_-u^ENeLJqj!5qK{e{*!;nim6g&))1y5BFI|aN zL9&&O;u};HM?H}}69m$9;x6lxSEq~|e-9|-J>JMc9DaFOt%Yp<|8@hIyzw~Ix~k^j zFe>v=(j8EK=XKLN>=8Hce;k#$p>i01?|&{&=9(=fF8csc=Voz`_#_A+t;XQY9V5s^ z;#7Ou`PcTl1goPLUtOy)rWu(lNJdV6rte*wZcZRK@`9Qi9v>zb+|#(pD0Ypaz_WE_ z+Zqdwcf84UV3tNO{bGq{P95%Q3HuV zceV4O$)@9%eoS*nf||E%R4?~9BmYeQZAR8W7abPA(^bOkYVL!jZ+KLdL9=#bJi}zp zGN5tz#yNPwQ`A*B6E@T@^ExcV;Df@nI`Y|DaT-AOm_tccn2b3GmaJat-jO%Y)Dox3 zq;6eJ6)*cvbBGd8c3etmG#$E<B{(PRY8~kqsDDA9LM%*=}nLZmUj$Vd= z78P}6O|j~?rBqM0GsYZ9H^(^k{)`2G+Q`?bVLN$VQ4w;Ly}-`A$t@*C2-;A)1ME`+ zvgG9<16fuLYJ-=-9`okplNbjc*Z8!q*$m--p3+z)xM{6*&%FvyFAVS%0k;J(j9|Gk zsw(sRk`gVQ8h8J2RQ}l8Yat6+I%An3?Dh02bCXrxAK|iLVr9Y(2gabC5+G_OeUXh| zjEx^b96^|F9OURyEtEh{uRt0fNqQ^BIXb&KILKv=0^y1w6PPax0ow9Fm9PJdYxmI| zk*r4|d`xB{1^&A{YexJcamkT63e6|3S^gZVFbxO)d7vDAT2*Tz4?(d73aiexSsE@q zF$o8sP^v_*AgB%NJ*blY8mi}rx=G|nw0csLMN;#)MsrVI#Dq-S0Oe@lKRrN}*PCPOECk{{YJVjT{J z-c`S!YM;n^T3;b{sB%pv&aC?K_m$*D*V-AY%HHKCgl|9PFh*)FLXjuJ#HkgVDndg9QsZ~&HdN#QiDU!{+@6gqRJ!( zwzC~`ksQr2Xy1rubZdg$R&Be)E z+&g~3j0jQM;lw87(L5pATS{+!v{D+ZK5n76Q5MVbRy8Z>WBaZu&u2-z}?a z)QL6|p?fb^{BN^Nh2-P$lKbJUqK=$0WXAGm8GgeF@=@@>#IboyvJ!tL4r8)h5gCuR z?&rAcDj9_J7?!C%t8)1@W0ld!@q=?I66J+$Rikql+0TF44q~jfw#<5kwhn5}TM!13 zcX{Zb>idBL!;vgRp?6ctJC{tGi3BHsP{EnvVx^~vzVJYc@&Q#j>iQ(i%1^hYjJAT5 zhu{y}QECj|79UiCQ_Qt`>utZjEouxlGkYHy<``}H?eSLeldwBi{w;#}>% z*RW$^o)_u+9>Mn}0@jDrsBCS>(#eWhV4a1z|M_|I<>ix-cCvkLAncho5WU3-C&LcX z##kshANKpi3A@75=%v*0b7@h?Z##(zFsrJh5Lan1B42BQw}_OBB^0`v&y)*p9d0Oy z+hC!#K!;GU_=#ISaG9)W*y0ix_eQH%c*mXW82TvnjM>S?t1_!|vvXm2A)X4)NXH_d z6+{op%p`E>X)>=+QYD$a;l++6!Qv)B7SAER0`Ad2hbmQe+n_-HBo)w$6_vz4X~42I z_7)twZdmaW-?U|-q!%`OKIo(N-iu9&N;SVZD#4p-Vdd3D7K_f)7;`#@Do|4YXrZJI zW;TAZ5A9dv>&S1uG`o!kP7Daa;ew+yh~i{;tL7^%?#>1+vsVzqSAw zn~EPdI&VZ!dM5`N=jiz?sZB|-PllRP!ZD9_^@Ws#N~|Wc!;mf>U_%vk>r~Cu%_DBH ze;2Cy$>{7#oEko@4D-i2rfy89--vI~ut`}Q=nRbWQn5Mee=BNaz0lV_O+4Ur-tb`^ zB}p0{UnTlovWpLHq6B^Jn5=N~vM_fHDyp_k+KG&aTMo2M{5;E2C`dJP>5Xb#qpl^H zzq;8#zFBg&8gp>p$@fDh`Q~-=eUjYYht3;@MTkUCAqcxV)TaSq=^t*xC;gge4{rR* z`O##tV3vv2+VAX%>bHGRRdc$z-T!jZvC8Y6Um~3j+CJFmIbCfZ-fw?wD*9`D+hcp1 zrS0GwAFf$E{}|S1NVzh1BwJ_W?9e-Pt7wl4UL9wGs-ZtFtcx)F0m8h zo2P9D7#wNmO2|`fo3CcdRQMmf6@`fU!N8(DTMZd}#!_U4tVv^9pgd6;%xo!hMLVt< zdLT}#5$ki7A5@&o3oN#sZ~0Opv7QX`Dt4Ugo^3U*<4JRyH`A6Uh_`vvJdBrq08L?~ zCdgNnBj5CZSTh`ur|Kg{Jyl7mvw~?IB{sSdbRz>pRMMEM<7l6GCAbe>26W%sAy{dG zz?xrj4>H|#qSD9De90JjbeM3xdhLqOE^L!{wxikA(HvDCm{f)sVn|`dg5vSdYfJijGfq zIiC8N351EZatK<&*W-u_se0kDOS8=>W}+Usb@%=r4GXc{u}3M);R$S&MHKkz1&CXQ zDs?Iy?O8w14&&(}&QTT%Hgd;!BWQw{Ww1dg z@!=Wc{@cmJw#<~I&QU!Y;dy$g6t%~M^y8O^v*q=xg@k-6HtZ)<YWq?6M~oKeCx!`o3XO)ouJ#kO){94B~)ogp~3(jLYUr!nJ`Dyb4mFUDj9@s z3Kpsl1@oL5eBqhuT)edY(SA@Lm6l))u>9>?uG+KQTqd$ZgTx_O$w%I!R_U`+!!Dsm?O`9k)PmYCiT)`n(N`lc-P+M4ZkBJzMF892kwf*v8)c^}A=QEG} z8Iq?`6BWy;ah2{obEuIZ{l$zt^ML?efR&##Z-RYp7KZw9%_2#m(T$?pRH{U#Dnumk z=aY3|{&7AA$g>YdtE~rj3H%H#`wFqpD3I26EXpYy>|derELPI`${8~QRJdDNTo~OqZE)Q~KJd^vNQ>VfNc{}q^z4}2l(ATS1I(U*aEWJ+3EvSQ^baNpjHL^2UB~m(4ccILkWCHs$tqf|;?p#cE zRhEa!#JK9}!)dyoo%lKTHT!y}L8rt8VRO(^OS0FZwUrgn+rU3Q@ZBL71NatYWM^Hv z5?aFG?;l=PJcP&hbv-Sx%xpx@&_5jUbiMh=={*JI^k!GI6?@@V6LxKjo_hQ);ez|I zq=k-pr|KmcB_3I0X^X38(WrQ~p-KHU(cMZ~piQ5bL@T$b=apB(TkaZ`TVQjGYRF26 z;0CHom}r(;0BrLV@H`sSWsIE~4ecHYWWVq{te^pMlmrm!7@4C9&+at^G$D?tj|ME` zc_DajqmZmZQCF`I^DHgcCylkobeB~*H>5nthVMgesz~lTYH&0Gbm^1<+`NOLkhcR= z9R9Cx5AQRqtYf79$8?u%a`dHLL0)%EhS1s9Vh@zEDYza|&nc@`g$FJ|-=B^XCyXoh zRmywac95Cf)h!^JZtVYSOU3t4g~o+E+Y>6PLOc636I9{qk%hvhjSHEzLBAG_1i=vj zeuRvMQj@#J|YN3oB{zZVlZa_{|tYpr@A>RE5rr*CaMMjqsqPItuPwj3(N*iN! z!!`qz#)8{Eu3eT%shuCA`6W545bQFRO7;{lp~F2jH33Q!DWQm96Mk@4{UoMZV16-? zc|0UQ0Nbt*_zbcy+owLd0_k_AW@>5Ne$o1owP~7ew{}iyyvM z8O7f#GPSn7GdpJ2t`^MmYuAr>am#4$jG$Oj_$qI6YWY;z!)~Yz5&PWWH}*55B)Q)3 z@a1-+fB%^|{W0SEfkm?;=&hN@$a~DlMcrKw9+#9k?>uVbvAilsm}(Ov0#G`oGt#=ZzUgFh8I(O{lrs3xA5*XYk)Lqu`BTQv~Y-C zVUY)c2VU{)co>ijlI(H>eR_aEaM|>OqgWhhKwsX{F{s7Nd(5R!Yw)23r2Mq+{t(+r4%zYK?X}mLGo))nz?_LUS6lfbV*9?(f z&nx3>Rf4(|tc-=V52VEEQV1;)n-&>-St0DxqtW8gr8<@3d6Dfe*ux)rF1{i-$#t^) z@haEVY94gBynbp1ce)oBR#y56SN%AAnhbZB172p()trJwpcBHG(*-{U$N!Bym~(U4 zk1%RUyzDZ~NnPFl%nY8Be$d8gcq^hyBjVInHR|cSm1-rMx zup1?p8PwJmRy*_X`0H{F8WlG|A!I6C3P+5)G+N|&FBDG>J7C5jAj|M@Pg>spI%x~s zBJ|?l3;N1Iyy}W&soGMoa|A;G2;W`QwpelN;9>8yqMHc|zT1~9 z9zDE4T;7}FqnS)?5eOwq%vO1WzgtFcO!<2EDm=!W*FPO>xy0S`aujdSpz&_jRTAQT zrRWDhhVnr1 zXmd-Dz8R2oku^TZ)taE(mSq`JsFas1DbGnAKIifwQVi67(MfP!RNa;4`Za6BaGi~v zj=}*%b~m3kL+0A%SpmNSI)+CBvex|N*{BV`=-5U721xKrg7hk5tdFAatvj&>+EqFI z$jjeh0t{JeUdf4e>c!au!0(ox8M*M!54&-kHrUquGM5M3A&_R0t0N;JKbmMmg=3xk z_LX?7@%Bw0bk*rNcOWq)oy2)N`aC|Qq(B?`#F%FB3whMRf4@tNq;$QK-B7y8^RVsc zutVcZrlCoe+&g^H8x2 z>7e_5{4e&>CnDLxo&SsKqQ0s_1nYN$)?3}ee~D0T8?-ke>y^>#W=iYHRQFP9V>FeM z3o>NR7^Z=Y0DR9tp~4hd!;SU+cbMLw=mWog0uYbu1!_qdQf33Xg`(vP)R7vu4&I$< z_~uN^E7CKa_d$_Ka&gifx^Gv;5X%n-DB|dmh=I9!1AAxu=dwKGfz3M*-*57O<}*xtiF{SJon#m zlJ~^Bwmq_j$FrG}74 zeqK(Mt|k(hFy=uuywH(`a{6WDBmf`gf_Ke_l*O)cCR5yz54a|Lqpi8TBx3#$Mv4m- zpFEg2j7)71sm=N8(Dyq_s;49wZ;M0+?#>XMaIoE&bETWaZ2f;~KXfeLLqdR0^ph|2 z@|cpt%tO1;aewITrHL3Q)%q3ee8V}=-$bz75l-m3c2{G}XD1f$Ea zPIPg8%shvR&ob%g0=7r8aK%Cl4=9&4TKzlDCs_XC+EZJK&uj)`l!<`2d*8-U@!^xt z_8|VAkHWPG4an5qZjoo+QJe#)d)OO#>7u?8=~WAYa7}P`f}%XZvRitnLVk+gfLzT9 z43W*lB~$fX&P%G+e0;W*J@t#*r|^DIkljsTLh4gAjXJQ{u+O_fH+=G*JHjG_HMAY* zH7^brVBp^uyPt&&k&h0Lqo&01Ltz*3JEM3El^zCx+xD!%WyPiy7*1r`rasJqbkbHorN!v(R7UwY6)tQ&)MB>09im5v? zED+CpK5x6?jpZ>UCq9;u&UurR@b@9V3qPAb4f~tjXD{Va7E|26(x;+qOyC7F zHMCn~KRWWBvbxk?Vou$7zeKHvG(@-F1z}HyT~saN8i=mx;8^l>L4-p%5vY_F+cHC^gYMsLs+KdY1Cz#iZAa{vo6ICQW>g= z4IEf_wcTyamAvr}3)Rm676o5$6xcxIAoY;dkMj@n%x!H+gHiAA73gHjaLA9Q9-sTL z05VVGloG)k{?rTH1K#&tT|7triSqZk>v;Hg)xqIBqcqEP^6J+@kv5%z#<4Cn=$j1I z8!fU7A+>K}=gl#jy7;f=G?3vS_4j9r`H5gTYQ(ov{;|L@ z1Vx=I)SiBTixqynBN%XuPmMVIa?14fYFs-?;@j@y?H=bnFzTb?`^rJd+~CvsR9CS~ zo7L@PL`#;BigKUs4C~gT;vTocbeO1r8=}u-PEP=Xg$wXn1=8AjY(GttG1-K&M{c4! zeG0v3=^eX${h6YaAGmWp4!gZe#t(l#j-Zj!q#p5v{yV0116yyJqBSn`8W!K#iR~B| z#c~y}VYrcyDkP6Gnh4a?&zl4r%zQwo(^O0>i;MsqyWVRS|BWRLSG_=Hu?~QYn%-NC zgj$$+(a`)W{kF!7Y_iXty?>`Z3%h;%`AVg)yIJvN7W2N@=atl#p<5L{FVPDiH4C0CJ22Sd*_=R0HTb4z&QrRr);$BzkGQ5|K7HIVtJ z+rP3l<)|C(NwKf{gI)jbA$j_pX;J$X=0}n=C;w)fH(WO*j_9PpY_^~5*>Lr4ceU!? zzBF>}ACH~&UvMd9lm3~P|18fa($aY2hZ2sZSXXY{!P1+1rnM;49b~DUh;7uS>ZOUy z=Y>STi0Wt7!Gy|yUYdtW-Zxn!t-O|ShjLvbr7N;eN1@IQ zNXN6&iw16E(60XRyo;Xf7u}zn`~2qGigM!>R)bSi3{su06O8YNkWywvUN_9&zqp?G ztnKT!-~XK=E!`{l0=1BS^1pt@o~hL;(YT>BnUP)*l;?-D%iM_EJwWWgSb5<^jbjn? zca=#*e{3R`dcV#wv9{%O&RFNGrre-~BVX1P?4EnNmd*Fd!Y)H*yo|I?uLjVCnUg|y z?PGI}FuvEYOuWAX-M{BxjQ2n1NFcaTyl35 z=e)aCo0NLjP;Ku$^(dIapPvkC4gV-N^wcQ_XVkvx9-h6W!@`u_j?CcaYo8D$Tl?s= z{s{0idlq@a*ZhyjFZQq4va^G4)>}S%WxDe$YLDg$^L@0BU3J%dS$+40KmOWON`Pem zWevSQ(q+a?+1M}ryl?m%W=tui{8La=7Un~(*01UJkKZhGXM`-~${MLL(u6eS;7SeG zypWo=u9tJ?ei+uLC6y1%Mwfhryo}v#rF7o+^6OD$|CY5DC4XvXYfW?#f7RKeMMma) zz@C?!LOn_8R%3qp@)C{aVLQXcI8!xfW&3pb5R~&{;<%cYY~V5vDcCiOet^7My+usMjc3o7xb|DGl=WS+&gSz<48}^~`^AY4vg=#lxkoD%njwxWP5QZ$wARGgOBUl3YZYd*g3`vk?iZyB1{p6t z6fQm_b4pB-=`r%2!RoGi{-+%zl0u$k8wi8Su;pSKoaxFLn{{!X*9JY&1}l{KmTIWbe5 zF-KLCPHCyJndZ|B3eBdIb#s=D* z95L9axY=nAK1#GrFZ45uMm46n>96+kJDH;LjE+3(VNzZM{-Fu0llr{}0KSnpb<{`G z2X7Zp-92hvmom*(U2Tw|*fvJ3rTd*;=&dv{(?uebM)6ZdAn&;-RDlCcUuu#3;U1lM zsl!KeJRa8JYk*cg=z4I2Vc#ob+i+3ipyuNSXor^{!cxK$DYTICNOeGBhy!1kVPDNZ zJEm8(!4Ck~Tu_;gl3Du1^uU{_eCjwZi%hJEBju~w`?|Zd&(vgX^g=qq#*Z$)m5W?Q z%l6GT#%#!PapIr?onH-j;*38ISzhs!cf>3+jOMYlfL7dDJ0Ud&V<*?4_5!jq32%g- zlvM}Gij*IR`{VwotXoR-atta|POS}wYpsG*K0XC$s)7RZ8Q0Ie6dwFAy_NqX1u4~0 z!9PhN=&yr7dB15d>~aD0S4UKQfuP6CA;jp`@+&r0r*mF;P{K{5y3E-k01wCuGFS078K(9{YCFoqm zLY)0LfbD&6S^GjU%&v>m?YBt1P&&AB>J#zM=l+SY(rN2{`l^}oXqeWC}bS5 zS*q}k8hQ%(nUS;AV+jxgv=!&LqY(GkyqA7WC*RXd6j8+E^19J*4Oozd%Z{s+`=+FP|@LJc#1+{KhPg0!(rE-8F9XF~%bQU-$n-t56PS$BJLl5?ZY7kE_*o zGRa^qEyA17Yk{0<9<*XP8WIG`QkUof$9+_ zwra3bdRo@7-o((Nf90bwOJ8RAqYS&lvCShR0#()98ZxJ19E;U6>99ScKdoK{u~jph z@)nlcb4&TI8j@u?exVZl@6y(|b%l@HaQT%D(xA7i#65B$$$e){`$JxJ!ro2C~PpNv`47E=&nexNUq#|FlaUJD^pvA5@7R_JuD{th0oUgmDAS8nEuYf^#|f+B@Vx=YH)C}pzn z09x{1F)0dzqfEDn6w+X)NbZ?XjyVPqWf7A(rx3H)APb3V*5z23rRqO!Qm|MtIqC6? z^bf2O*x0jzSd1r~Y`fBx)VwFEhsd$M<(^5^wQzDpE(xZbr%Qle} zzcnb)?#t9R$Swk4L-&(GG105uJuV{T8->~EuI4f*%v$eQnjqocGNU6p7ANX598VLa z>E?iDCs!;aiH*c{;zo+BzN?uoP=V(Tw`fE?{s+x%kPUW~1x>olzV93an=edTQjPv@ z6Ir`7U4zExhYE-bhCSNry{Labm2&>lF5>a-^Rr{tGYB|e{O=rhx#tXmWZWB>`bmF4 zfH-TYcEqZ)CKW|zph`=Rk9Q6%7rdPl$WN~*Obg^UkAQA~QIRa{1oGcrq*gRRDVwa6 z6{Y<+%4@ZeEhcEynreQBgx=$at(JZ`^sc=3i7K~oye#HpM29GWMQ0P#s_*BgB|x&s zuI|3yLa%>9RD_gzI2bR%hvvfqbSTjP+G;O>Mp6e>sL!&v0c1x(xFYPYlwGi_t_kZSHtZZ>c1}^D6 zi(*6rRe?^CX9O5c#<%nctTF5I2JT0!3m5by@zI`o)`)9e5g_wO!SdtiMV?4LH2~=% zRK@)(^6zuVK#!Hd91>Uoqj*&-5KzZud zFm6LzZZ4B2+Zu6`eYgo0PP*RNBt&Q9;ekt99~!miSnOWlzf(P~vjkiZOI!XUF@SP+ z4~yf_F-c#YEFP2A(PNxgZol9~v^eahRoMVVvrXvJ0@P}1L~kC2MMrJn%)Yu{4E{6y z;%g>=7mr%++rhMcA)@oSJp9EKwMv#ckMciur+Gef0 zjl~<+f(W&`&R8mPP7DiO>JFvIug5eSu0J8IJAW`R$ecXt;%ZeDggou15Ol+3(^UaW zQBaMN@oeteG)k(+FLa1oy8tMpJ1PfC+~Fwv&nxy?Q*s4@`kEo*A~teqFu=AcNI~+h zq~wL^6S_+hqDa|g9i)#kI(9Ecrk~oFt!v@ZmmG=*Ul5sYF#ceqqxQTva%po(PD=bW zxobJP@wp(?{k}pAwY^XjW!9W2Cd-A9o2u=B(kDgrBxJp#!y#+s)G9IK zphd=aE45L^vo}TxnF=ugu=ySiaWixyGa41oR$e@kojfVOe8hTjdGFRg3Kh}yOn2Hv zA4=&qb1n)uh=*ec8XqV)JLAHs$9BEK(=$=3?hKVTAJJPKRiVb=ZM#fv+jDFu43tr7 zu`2#4X7{*={k)^3$eGTD`cf+2=RhB|J>*VK`9=t^sNsIiGvE1*2@Q0M3B zZv^e3s6)(<$Qj!MNrbz%6sK}_&SP2X<3gR!ER;M2w*ydtQXXzpap3P&BZ2CvK;V%< zrApQh918T&t+X#X$~ND8c=ON@`0BFm$@%w$97B^K*VjKcP5m*bHvlAbNgTSAgP@{7 ztf;I}A`z_~th$NrY_@mkir!kWFq-SS~1iA~N|lxyuqvD5WOOy=AnYOx_cn$c~no z41b8fZ$_rR76bI!(CW1@8TOTH-c}BVFR}p7{Pk})yl-)g_s5dIqwS7lUKeG%`=6;u z9T@VEC!a!cnTJTrQ6I*w#&yl+8wP5ukh$YZ$rLPh;?5$g?Yb0A1#0vXv@3v!Q~}~% zsd`2+(;zvoC`xAx?={u0N+$U3TfzwBxJ^!6PhQtwS0#5l-jzlYa_)c6t1i%})>l2r zgfP-|j-ea%k~y6lrxv)(BLr;ahX42P0=p-Fe3A28KlP`ziY_0hSdUi>V`&Hyuuk1x zHNwIUAba;$hqM)Jd=#vvrTgy*Jj+O3>>o~b7%x8O=FjJ*$ZL)_gdS&&x!+ZFe>Jf0 z)xa@JH{>G~2g>ibaT> z$JpG0+67J9)SK*D5!n^7h0eOEY+RLJ8S%p{gdN399k$B@M!g-LxEX!4I$kE$PW{21 zx)l#uZ79qMmOS+cJPA%#wJ|V^Hj`{AFGGpHj?0b@9^a#zS>tF8!d_xFHoX7-i9X|@ zZy&O$pO1}rqW8onm!LK7cw=Fu>AFX5CH`$jLESt<9>G$K%|srmJGoq_tKDW(qePw; z9AS>DxJ)KH0|?1wYE(W`4dijs z2#?$^jngm9r!)?P7aKUA$uW3n2feO{xGonD)avKj|Lo~Q{p@~w>KY}(9~0=?BDcMc z)z$mFZw-Fk%^>K(#&(Mkw@q&S+#u~0RqsBForn$c`RFkarPEB=_fuRTS@rVW#pDwM zLTAg%TDhcGTCd9gYqQpN4pC<>-S{C^qZ5WLB+L6YRC9!CVa3?lcWRph_atImb(Hof z@aHx`8^45ZGdN=t7ZF__9_2Na*7^L#)zc%CJLzZ64*}Jyu|rqPFx?k0)Fq`Byy7nw z>N6QPc=tSn)d_nlQOV>3+JmOyy-L#u{*;@hVK$wvJUFyHpXp)p)bswX?ZKEm%Zyq! zaf3PUk8kMq5QI}8k?+s$xoTETjh$DB(*Kf5%uHOpwmiPx>A%umkuNisCgU%LEW=oA)G8==CEQ#)UTIGwy0zM1wL!VdKyLiyky=1Yanqhrs!Qkq@$)5T!{%dGyjPlZ zs3ptGkzfP;ahu#GJzYIBCiGGQ{B#6Th123_@?E6+{Yl7-PY+Pj6BC$8H7adteR`&HJjuozJxM>+Q7{a$CLt>Q+sUyE5lm$k1jc7Z#JF2=6vn?-*?Y_`dN~1esEB5`p4$w&=a)-2@T*czvFtI6%j2z z59mHG!S=skzgSS|{{HXHqlbsGiVRCqS081|937WSj(@ao;{4y+EyH)d{4-ttD(6Gj zg^;AB+{j7E30chXw~vl4{F3nJ+Vhg3s$t((?%Z+p z)PDF2#4xwL!h`x--q!!&g-;PsU|J#FeO$Sa z;3W{!r)J4rGk$r)^}ejDL|Kba8T>UJIBU7(pc$fRpF zyHoEI%4t73DDhe3`&f(avN)Bn9!7y)$&`?fir#9>!?OYGaZT1_xm$H0qL3q(V%9g_ z6S_=)YnYil+pbkUkd*J{AQt?CcEC|h-@=Kvy4OD4$Ny2cpENM7x)?Fg zG91bv{=@dRs65ytQqP%+`hq)>AQfNzY#Wbbo&WPSnm$p3AIFE!mzAOALc)z3;^$?{ zDM#STeDh}soDz>0Wv)o47g;wBIKEFi|JeS)YPzfTioUCS@wlJSWmC(Kk``AddYm4{ zzK4FpI_*^A4U9ck?Qv!3OGs1BpaQa~BjDdR8 zn`ur>H1p-!i(|*XLND&0$-g z6r+mlUrayFet${EwZuH#)#y~_;_<)!%xD|%LDCiluu;DP+#}@I`mozudj;YtkY$P zWT39nGa}7kc0{3g=^SBEtRn4rl75c!R3GyU|4HZK?IN9OZ8nVer4Nc!mg$DhFZqegK@hHo!LgO6DqNM8=7cup+XC3S z@k~yAQd|M2yU~Xk?Mbau#=q)4;>~mGqIGeHlayG~vm!HN1CKu^6;`vWuO-Fh zA8|}PU&NznhTUNwsy-UUN)T!Eli*hBPods-+30yxhixnn`Fr!3sB3`RF4Ki5htrho zDJB#*e%SB+7ELp+ZUX_c@+3Z3^Q0lnL;AY{qrxYsl6N5Z~L z|K#9i@Tik%dG5E%iqi2uq<5kb=iaGjPfsu764qrdITh6(p4c5dwz)L3x#I5UT37cM z_2K7urW@!C26ykW=fNYc-QJ}@u0e>@()(ftBi*|8`#s~M|2IWP!z!3jeDmoJQ52n2U$Fel>eUzEDrCLtG7se&rLj* z1+EAJ8q;`=z6w-0db5V}VAJuWC6p&jhIuh<(PQIp?X7-Q>05DU@Ul=!-y$}e(T3x( z3OBJB+WD1SqidqJb24CPS7GF(jqjEb(~0V{GHss)dApC-_zq=ZlQN(UNh^<38EzmN z&X+Sqkpuh<9|}4& zw&#f{KbqiS15B=8jU0*>L;UArk}i@f@rN#Rk99PSNBVL#Ch>6hs2jmasxvrIuh`AN zA#%~`h%1 zCj^gyYD3wm97n!~7Dz*)dd%pIh-1@wwdg<4W`n1a)!+f@zGGQK`i_Z(d-BbU=2!u{ zV}n)q=e)qBRQP*MmZ2N6O!WWOgFEELF;;Tmv}r_sMA>bfgMlN5FMu1EbGR=ffW3Cn zQojS2O%6NMEVLVrLw7v<=+NsC-?jf?=t{1S$Kw-2_DBBPf8`W7`rd}$Jl*{d(+59gTq zJdWnicZ4JiSTeOY=0C$7*acW4cweKaiRdVWSazCivT)9K?tM`ZHt2NsbNofTz}a^v zqFMbamQDEmmmthHNgZ^iZRH`ibL(?zQhY|Y!GWU>$%7_^D(YI!f0*Y-cd*rR>9FpD z38T(h!68xMZIAD!z&Agfnx1`AQF)Vx^}e7tgi9R~6`|p}@{JRTrQ+w+idl1y1_pE% zHEbNq04Ky=tn2XAxh5pr7#fD0JDnk@E=*NVt2H*+i`D58YYALBDIq7;_8wl|%X$;G z*@9GC85YV3E)qdY{hyejn&X@+Go_sX%1w&e^PAC*|JPU$xlbW$Mv3F3krp_EaRDF>_o zpm3sp(#(D()fp$ps@$+Ru;5EVz$su@<^rNmg4!+tA5~x!bp01QR5JwVS36Xv6___d zbUYS9WuU*&)%4f4zgsjUWvhHyic4fO4R>y6Vd3QUC0%O2$LBJEV1?qJ3i4ngE6sL3 zVX6En#KeBp!Mtax>Sp@?ZNTyK_$X3cVPzIKWoCEl2~9973=fm{vEwbuJsl6JTz5)@ zekDfdC_KXzAbSS1T!=O(SA9%TnZv5ySlA(QKza)GuJjj{HSLmoJqZ8Fl)qj(szqGXJ^>!SGREvR83!f6ew5=a77kP0Uy=%no)`bh~tV$R`Y$Fw;Z zJ=5cIZ4~I2(bp%(Ta^7QSky$KW<4HtP67!MstI(Vog_FHivs9)*NBlEQMTa+#4(a@ zST51t9m5e3mfo+d`w+&VhH=3bak2t9jV0l>ots+<7R>8f=7cXOV^a9C}AUk2jAu-aGrCus>;4r{+ z4duE&{h%0h$RB=cCT(oZW;p9KblvvgW`~G1|Ls|cf0mz(&yo`z7IxA}xMD_X?l;t@3c&D0%ndxmhOiGtDx535N0G zm0Q}t#ASFLu zqVhLg?fZh}B-JNZFXxt`{@HfSgCNiu>=vnzY~f^hAlkjNKX!^~AObcG$Pe!!z%;Mu z%+U*ELUO+(u3^2YE=JI}J^QzX$DRni_afCP&7ydAVHIJ^v~cIOm_p(+J-=$*Nl9!7 zbq7ys@OCq_Jp!yGLgN|GaWM)WS+pl&=UsKr({gD24_zO4(a9zeyNUXz^dc*uw5P9R zda9(Kp)x>+X8_EoPqLTOb|viG68lYePMq~h4o{ha|2c&2X0|Noy&@-gs#AuDmq$lj$Ah+#U?n1G z-`|$$ctjSfrdI>ezJv|Tw%Tg$K%Wi)uG`%5Adtin0~&#-ZVMLv%rOx}Iq(-o%Ci9w z?O2 zZ4lI8$o7;Au#lxl=%AwwxfOO{yteTAQr{O671RXuzYb+ z*P7Kcnos%yf-6cmA&Y3bNeGXEegSR!&CBr1&*=Q=KuG4EVsG=-Gmx@SsU1#dr|T)( z`@DWRdA2xZk$N(t2o5W-{rd3Z3*r3|%uALlT@Eh5E2T&ETVK^z7$&d9=q^(Jj}sTa zvsCTgqHf_$FN#nq0~eosEqNkTSs@|K7T}8%m7V8BJFN68)Lmam&=r(pDGnf|U)fC` zNST6OWnl)es!GoGP6S=4=oR}-*RZ^Xp1 zDq8MPF)^8*+%nH;5&EqNZcl;)EP!oEkS+>x;}qUR0`TnoroSQvSCESOBL3JkWE}j} z`r)5jJQJ=0kbze8 z8)DQw=0T(>-Tv*i0SWTUQ6FOs6jlQTlo`5AwT~~N&dnif@z9_Ju+IV{h=CX;Ay7{` zI4tBvk=^oQco8dZrToN$g+1)|C!E#s8eW>ty;nSv_OuGaZhrK=4C#F^(Fxb4R5OmF zq7bGMaHj;G&V-XlY1u6G+!;cjse_MKMO2c*d@m{RsdY;d>}hjqcx7-HsmgydA)r>%*>L=cersS||^ePsw}h*$_fs z?aA@Ty2IbY>U%-PLPEW--S#&ioeG%RliCpv*kuvDc z0{tf>JcWDqWD+bL0MA;0r7t{uHDCYN4B`BNYeTfjzp{PGqcKE>Te~GHZ$-_EfLkkg z*VhcyWeU1L4t5l)d|~FFFu)8@G+UTQS$`YdVi-Ng>xmZO=1kx|LAtKwDuw#KTFj? z?~K1hG>o{b=<>9pf!dYYyeAagTRAF1GU$Va$ef_7(P+`t;;q#!v-BdpJKWi16^7B% zB-^Jg@3x%1e+l*SB72wFk+-Nm7AjA1m)&Nzc1m;phS|>KjIJsd*_1XlUq?uSCG~=@ zO3)K5$}6l2DE?fp664^ZTozFp(-^fVbRTO79HhBb`??J)Ld`ATIqU4o|mT zl3C_~2%sA$*_;P+OSvKP%7+sv86*Vzp=OeE#6Dp-nO@bmvnqQPnbCW46s{bS>*}6K zi|K(_DhL((oQ8)rk1CwS^L-+%j8DBs*KayrxY2s{l1`xYL;s>)8CACm?rb=6W2B+p z$Yt{Bu(L_D`lcuKjSAyUnV1%$>vwVN3X>1}@7V8o)JZ%v5&*3tseNOp{an~kJ@~K6 ziznranVKfe-cNzr>_uJ3QRG&P4tr61OYpf%L+Awgl&5fDlBIg%t*%z~J=fre_IEzC zy?Ao5Zzj*gwE!4rc)X>7tu^~CT;0*6d8GW>#>Zy3NgwuU(4zM}`O#^i%7pyS69DMl zYq;$s80PymvhjEy}K34ym_cPc>Ezzks4@@E{ z|A4IuCCDQpP#%jOhlk`+E`z5wACV(I*dqMZz~7QAoq9qo8I~lWUoh6sWTcZE63RI} zzw_=5QLjzYF`H62+O%TnDt9_m^_@)r-M4Jr?Pn@&T_-mt{^vh&k2I-6oVrz|)lJA+ zKsnq#xIT~G4R!_fp(^F5ay)dK0W-B1|J)Rl#6Z zvjjITyG+xUyX8>8RO+z6D8a(v+j2>)b2^3#t+xnmCZ)+Ob`RG?y!9_Nat{Z)cf}3y zO~M+T^=;#5hd(ywnQ!iz3$2i~2lc)~X|>Zw3M2mb@!@fM1g*r_@1$0x_2t&Umz<9( zdM?6uXa0-ypN#JbD2NN|Xz4U@O*h#Wyz6;eksDunrO6qYi6iX{`c&Rizw^uPyQhDg zq(u`$Y{Nxf&wpgkrX@Ai2Oj)qY5Zwa|M|9&;@S-rqdPIXH-1wk)Q0|(hB`BEBhK}D zoCK`&wFYdv;DOYb`A=ctnc$K0!Fc%}?N85qGOmSom#>)?*!bJ-4s>)&E42~!6_2fV6Ed_W%33bD-*YR~8t=ZoP3UG@e(zNo-kk-x6yyUBtU{VV zeB)v*szU4{TGUOJSwqEEb4+E=l2tDg<9cmDj8dtVP-#xRa#M`^MsgDpP%mym+SW0W zp{}Y@bD{pHm?Ws$4rU^htQu=t?&>9g`GszjT0B!DpSZQD1!eXr zrlrv8DT!O^^Aur@^;{4v30)^y+)~$#x`_wL* z^Z^z4VySatFg6rWFr4RdO_L^|FUu3rA(DwCAr%Eo)OMJ`HkSt3Exs*}xL$9j;?5L+ zG0v3$h>%=IH^mT^`b{yEI+hfs*Gn!t=gz}&)wEIiJ|!-V32(zx+WHg^T^5vD>drLw zn5`hKu%L5K)(K*3{t~D|nNqiPGvB%KSoR>J>AcfiTGxfA4+xbEGga4(lA#h8NG7yC zYi_e;Vzzu>@8W*kj{Eh8CxZxu#N9bkZ1U%U`;A9pPJOCp7G@G0MtF|;n|B@+C z{_3jW0by6JO61`j34&_1h6V>4%LddAyL=grG|?-tu+?^xTbuc|6uQVUU)EEqx_ zMHm6lfWQ?c-Mk=bocrj`xEPbtW@OycoVeGdtiK~qd&_RUH;7|v?xuw)lgKg*nm=y*q*rr@ts_!9YB&3=SC1X(2z*k!}5w6=g zj&a8==9wdttU#3K{RqN%?cq@udl2MZSUh$9#9|4E@ zuY{;Jh$^r#P)~>q1NZXPHjNkwgCqroh{f~)En+H53%|+&QU@y%NG72Y%TFOl&+rUp9Pq zgP1Y_JK3@4eIE=#)Gi^d*n-InJy zs#v6s&pYFjT&jGzN1}!V;Tqe=%JuUu6ol+b?*F^sW_ma-<`>_wrYw?M$2*c%FpAKU z2?d;CX3g?{)66FAm7pDJTcJD1GC`!7B?xt0CrEE!vYxkRRDmg zj+nL61_1cE002o&vW_q)p!WcYyDSa|k((J}kgr18)!l-a>j>tl63Y zLbhV>TXXgn1UZLbvV>qz*aw)!&2)iY-1Z8uUUU2CMb@Dny0$J*7MP-^Z}HI4_qQdeAWy7+v8GRZik8M;36hX;A7~ej^5|t zlsI)DKseQ;npxbUU5KDzZn}e&TfZu=8}56Rn;^IJCKlSR4Xq^(ie2%6 z(aSgSp0(z0Zx=4W;3+lnEgGJTqP9I%?ioudZTJ0M_u$@dA0v!hAhyIu*yqnoOfI>R zF2NysBsD07Vf-5)@lwTtLX=?q*^L}O1fB&@;-sKgs(*W(1OTA`k@4a4{)$#MI_)<{ zyRiSSg#S#6a7&BELkkeEfUh-eS~{B7atgQmetjMdAn9_+lSIG^@B0hTGi6NPczk!G zzw?_Lef^L;GZu5AJT2&~ulNbbu>B7+LYxEEIEIs1=DSDjM1iVfyap^&ZU+A>4t<$G zHJF&;+i2_VY8`8?USL?v-KG{FYo}{}@g2bgzs%QIs;Irvf4T30G<0u2N5gPM;FhHv zOP{4&8Yb~m6MB%BJT`U|(wPPB@%NW5T?C_4KfFl>2L2Ty5UTu~Q5M$4BQn@AQpLZA-12Zv%>ZY zxYhq2g~vw?)vEafc(gWQc)uPQj0Zw>%iZ>QJj0__1O2Sl7QPAZ z?DZW&WaJ1kByJ5StlLnHw-?z)N~%s?zq7f3r_qO5k`&4cxUM)=%etY1fj7;gXpLD7 z7YiF&^sY>7I9N?~bnML9d<)xCQ4TvPhJb4F0SLC2$}R8;@QeZkSb)OtfRhid9Iwx3 za#=1s)^!y85T&SR43PPo(`T~#27^te}h=6Q|7$v+7JZ%LD1OO3l!7gba5*?(&6fK;( zPD-y(jWnH&)S}LwTVJ`hj!-9ynq4!2hII7+23sqLYe6rw`HD3}m|4YvpYP&X*HsZ> zfrj1X9_iQJky;XuN($cIutwvv$#nu7e|tYSCBEFbR#Rfoq%1LOv#ziKmTwrxL9Dx* zU1$IBOuvqru4ZSJ69il{b>55Z+$6CW9>EPE*=lP-4Epc5D|pBCA>L!0VBjSm8p(v! z9ZUtfXL2=Jc!HQ~aiU7C2W(3LMgdxJe~`41cUKL(7b~v+9n5v$TD)%|OftN02vp)D ztsbT8W;c2NRiwN6*n#oJd(V~XeIIn)0xguyBynHt6seX??cQ%h-Q1hU>!>5YgDgWfbVaMw8dG*G9l7nsq-k%5 z+3$8jWmrSp&HF&BG_EY|Mnenj3L0Hd%|_VHqe1kconi>HKEJCj-`y)e^KITqPdJPP z=*)P8&3SY^7=AEKkU`-e7~>~NxcD?6j?Bp&%fFKWJ)#H8dtm&tqhT9j;DftEAf3M! z1C3(l^=z&$E$TnER$1Yb7mt<4>xHB)4DK}K(iojy8u)-fuKNNwb)B7BYfkFtSSUP4 z{;)SZVei;vcR8fue7s1L#dc-`^JgQmvKy=X2i};m6G{a%G|n z^yY?}N4i`;71t_Z<0EeYr$~>kXN1rFvN{3=z}BzKrS<9l5f(+Zvm)7e(RZxcvcc(Ab4dPdBh9H=McRWfL0es zj|?0bGI<~OhxH}X;k9NYEkJFScN041-GogZ#6uk8Np+h3=}%nNdH;IwQsN_ez-C|S zD*COj`5`tm`c+JH_3R)g?bYWXhUF%Z^4r=my#0w9@Hx$k-%NE8Ji9oKGh>WKXXC(8 zMp!WU0$3yBanQ6jA&q0B(9q5C_vq5nzFO(efAvOdNE{<)IXpTdw4rNJ7+?zd z`qxjQZ;lDl5Id>@($$LGSzc#qjWmWlu{d@2&Lf(mf_`dV}7h0%`7j_ga z2zJP1Wpw1;8lHMPq~)vgm592mzQs%G&n7di)KgSmqhZINAn?n$M0tUEWuITAbYi1l z&{@mhBjLx>^X(VFZ4=O1Jk8ps;kMu*@7x6lRTu_nTm&aTE@L3&SPJ0&ku%8y=1&=$LU zx4+5MxBd559Q7qubqZv%&K~`TeIZtD79^b2(4;w-zDg>$%VcY=N943}tpN}M3+N&> z@yL0h6~`s7EN^j#s7WHsLF#VA1bBIcN~AsZ7ep;)9O2-vOSIcKWn;JfHr}8w@<*M9 zwWF!^ZLIhRTebiG=a04|^@>+n*RVa2;$1uoWRul-Qzr)vLYzhbpj+uYZ=#52G|jcs zs+=j6Q!YQp%6REDJp^n$RszsStaS)NV1j}heo<|@(u$}91vW3coxFMXrp1%Gy zL6l(AqJE{>M;`Sv!O_jQsFgj*Ks-sfN;npqyo)uXb#$Vw!S;WbCIF>X)^k`_Avj9N z7j#3sm`>L1Y#lNu@dvv$?*XocjsD3tZQqZ6wUAN*vIDf8T!*D2@|v1`FB4GlD-TKo zgZn=i7_EaAYZl4;w?_sR$2SlK7`~BzANqHq$>;_m1(2i_B~9^sqcgaZ2SO%NkmN&2 zEy^*geh7aZy1$4x^!$z8&4az0yQBzcnx8=v$jW&~vg;$mrqF}ZR_7`PKW2q$55V_ag|k~s-tkpr?05m3J=s_t=$X^cba@0uOFXhAN7iaO}aA5xZ+dNv_x&H-n2_|AkftPI!*FiW? z^9S#Gs(Mm7GkLgbBJaKndEVYZQ)P{X%EasC*t>}|)H5~oM0+VpWK4oLI4@M~!Rx;p z^#~eWEAMit#e3vvcn^#sO%v8OWMxLNVD&pf^KuPSw*bomHJFu|cY&5u48#=4Q(Z7l zj%OdRtI$G48n=Mm*B?LnH%E}w#8g<0h0z~cG2R3K?po&yKj=yz!`1iq&SDD1FM8}=9iTJqc z9BrOSU3~Pr*Nd8$UDvA_gbtU z@aR{M9`d)ob$)cbb((fqcY^DIlYije3qtS^4TldSt|E<3GGO)ypvtTjTEWj;`Fzuk zqc3u@Sm0#p!9xUj(b$WSTXTo$BkC)l+JE`yxmL!AceFsoa2hYEpLd1O6%sR0rJ3Dx zCvG$jJNBkC;Fqpq*LO!|rH^=1EA%{V0Svq?UVZ}FbS@(Ea(UbUMRbYnb!0(F6eo( z$BpET%5QJV)W*9>LGz9dn!jV%>!#%ZzA69l&mbMZrZKuHY3kmH zWvU!RAhRv7ywedJvIuM|;A&nve`cUs<3wwzd3GHi^8VI`YVLMVPRpXLRw(gIm!_U* ze+A~!%!rG3_@|j&2BmFw)%XWgOYjc{UFr(I7Ww6M)ccIIU)39Z%6bA$+&c6K{a0ZJ z;|~~O69}pkqj?^($f z6#Tq8=Ug+rce=s-V4Rq->G;~}hi{g0k#a=cHlvp~nYOax5Um?FcfH;{U`=Z?dLt$% z{+ie6kN=Eo?!2CKzZ9ynWA*a3Ypj=@L6vpR&CUhQ#milP>So_-l@=E`y^rX)8Ltdw zu9Myj7wT5~MF)hn(;F$;-hVymc@`!*5YeKu{;jw6)c*3z$eg{sY0qX(n@Edm-S$3v zgTwGY?aY{cRYj#^O?e>I6P;*xM^aD;@yq%T?AQAS-w(h3e0MFW!}xKGu##G+ef5=f zNcWDeH&G#Tw{n(tZr;8l0Gg|vH@JBhw1aLE)o%ABYiazvSq(rosvSJ64mZeTaF9j^ z+ou9et`-A9=GBv#i8%es-F$;=`JxOJV$wS1S8|9?t%jLntPjm z$&PMcgKQB=fU}~MLs41sL?6xE7%PZMummsAu_k6h(d4uUh9L`(<#+W^XH%YXg0n0S zJAiV?#~qn$A1&s_%aFyAD`le^dm&kPG?V<7zk&Q(x4%J&>m2_Evvm<^OZpM5mA?5u z(Cn@3=$3~;QaP>Y_G5rkjTvW*+SL~_Gv3rYb2IUM@8h_QQz8TT-1w*wXQp|Q+%>r1 ztD;7zl%sz|U`^dUU+ zjSeF@ymLOrkj~O39;aWu^Yd||2vmUWD6KePSt)7U>RPWgX((mRfh4h}9b z8FlISO1LrU3spj-D}&1=2-J6p+7T2}-8b_WX_}^CuP2LF8{|ob9Dn>yM5-a?AOGp~ z%}_jPJvpOWPx!boqxrzPg2I`=b9uB*!;OO);~a?2 zm|12Q~-dvX(p$D2sSUe!A z{6puiNQ8x=tE}Djr7PHb+Q$Mw8*!Zqs+&(1r5R5=*wkN!Mj7n1-RHN7S)pH zOBRk(I46H$T{Y`qnYY=bg?#kp>9r#V5AA}YmS8%ktF~t>&!G2taUV9Gw{R|Pi4D#w zBmYM@lo`!_G`XZ>Xejb)uSE@<~kAtGLVcLSgehGSQNLmS61nRa1=How3o7y3`7zB_H0kq1Gg8> zGzAi+ltXD8<9qo9WTFW*jmOphB<6i$mr;~!WtN67KJe52ZN{L-=ubRb4@faz;nO17 zxcS7^=k^Vp;CKD4f2PUZT~{Tdz}NimBd~zXv5JPuFLyx}q{yEtmB*PQ_LEIwLF_7C zvtriA@Yn?KjGO z?UQ&gGzPC`^#g8_M&U*cn(3P;Xscuq07_x${#Jm12&Vg)g=~Ge@+^hCA?5-g0Cho* z3n&N9f&v)F-Y-!8zaI06(EVeq3UQ3^t6LP5& zdwzo|0 z67?pRx~%J^g^gTkf8NCZb~*nVaS>1DZ)#7rKe2nCT`@&>UF(wocj-K<<0aP=!bW!v zc}{}WeoNa5<_@oqdgVxglQZsRB(gSTdOTHUsJ1`|dDdbc z(qbe1fz`<=5UBUXYeVAkodDdT{LrFABQ2;ps;E;!#plwrhgEQ?<%#YO_IF9LBB}&A zluDi;wY%V64stz3ibt^Z6l`oeRa=76`pVY3!ZzzQL=I34i7z`5(yVmgbo6{n%~Opu zpi1ad4T;*cQ3O78BPg|&dKJJ~JiQGkX61W5ut*H47LOy-ADkU~Iq#zJd?Dd^zih|g zc|$EBm#{nU)0hFEm}tBE?H#s(7>KK+>WkR=4OELjpr&}*C%0y6hVgq0?>)6x(^ra# z^0mL@Lyq!M9Oc4eR*of{Nma%KT`SrHZ!c3JlC`mw=vCwzT01iKA&mzJMS0vZ`q!$ zn=ftmNKFw*tU}c+Su$e$J0b-W!vZ}Pjac+^Y$X>X#E%uH`3H&5F;{#X=wLU6ad_HL z=&D3-LjXQ4<`|QxTE1*kJ@7JrFrdV%p$ zqzQxd#{Hc^0 z(vTB)yF_<-b8}NCMGyu2PZYSn$x2E! z0OR_-h6a>z6Q%8#f`v%g#SjM@A1iFudHVMS^YyUE!Q69iPDgtDRKay78)io?jF@e{BP}H+=nqTvL)qRIQrn}G zTQ7eY)`L^MiigQk6(T2W3hdE36cp;?gBo&Lp}DTtdd$B{L+HideEe5!N(sAlTw)yL z|6Eub@_KU5*$;XlCm;3~r+hoHG&`9R_IZ2w+){Yb_HCoQr^7N;Uv4~6)wQL`DkV+K zeHt(K3T{yjeULdq-v>yo2~$#nb{gAYR$@|#Qn3L_E=kYlZsRUcio_JWn3D6MO(%u= zL(8bPld3CapGC2=rY1_#q?{fKZmg(q<0-0dT#8QtTK=Zst|dJ_T8)Y4AZFNR{U{>@ zTOgKd*wFZC)v7{tExV9bw}tiTMpwJ-QSl*0|r^QCD75zk5<;NxEfn z$i1C=;Z=HL7Q{`?aV~yhh5cBo9vei{cW}7k@=3qdYC4qXkCU?_gNZ(S5Lf>sc3xe!-^w0|ik-N25_Ij@$p7XrF}!!zOH;)b;%c^j zwNmz-*% zBUP(3$t{*DyCAwJfn8BgQ4JELL~;ViF`Zk+b+UA#)KtdU7zF6Ct<-Rwif=D7>&ud|VG-{G9i{)*-hoGZB#2Ka4To5_=u=Gd#Z3UJL@STba8OF9wJv zf1$wcpAP?f^5efhL)*iLTylm~LuG;2(Ld_mF|sdheE#k}z&YWit95ZC`s4Pt%Sy2K zQq1m)AWMZu=JN;r5MkdCp;+R+5PpgT-lEjD+qr}#>KEL7bu<-AqRblIW4(pn9Ht00cyEmz%bVl@Wc&Z0KiME0s);; z97<~lZ}V_h*EPfVW4Kw$1)Bnuk!@snv61h&Jqa|s+5C~YubR6#dNq>xuT-7MF+*|! zPBf*FCZ9NO@aStHuC>`{Xm#?kiMcc9P=HyRGh3;crk$Xfho=390IARmi{lYi&Kzd_ zo4lH4<>#9VBX8Nh!L^PX)0!I*oa&mYKWV#RwvN!}J4V8uB4Y~vd^Nwvg_e~`GaI~# zNpaQfSiy%%^~fLtB2^o4NL$QS?`C1f*5>r9I%jU)!R{z|BZMRfHxQp56p#-j1Fm}``_#041G`f=z2&piY=x?o@`@(W zpuoQu*bb|74sDs?dc^zuC-wcdTl16p9HHMlppv(?IkGY1%edBd2iso(xo;IE4+koJ z*6qwM+wJ+~?;iZ@;Y|E<>S?RrxV)#u0H@z2|7l!`8Vp(g>fC5HdY1g&svTgtY6T2= zsAg;vxk*8@JsPHW`&GIRsS<1(57y_gJcmIZl>3-cE@1%(*UeYs9aW}w{05`;-sK?V z-~)^wj=fPSqorHEbGHm?nG!*axf%CCnA0%GN&d)DFl6n!ab7bd;AF1Psos2Xh)<6) z#G_=AGHI z9^F=;??OF$PWsQVlvRO@d0sZ{U3l>1F`#?!p+$O$j*=OaR$AGHujerxsN;>P;tLcQ)Fr*#U)WF{cfdKZJ2J%F zJ$*WDsvM?zfqY;VFs=XoVVKjQ`KVt(_aEY%;(CgIIb7b>8J#!UF7$wv_e6VSBh($+ zrY=#FvMF(?eUH?%P33EpKdNlcZH;z!QPxI{iJY>Xt&~~zFhj!G%mZ2{N6}M+1B`g( zlvZi2W^{N1>Be|yt80E0LU}z$MAbHRTE~3$jr$pJFaH*TiH}ew$5sG6H%!Acb))Ac z4mVmS$|cwra)+UH`DH?O;J-SbmXj7sT0i&}_6|ek^Gxv{>5un@DT@4_wSHYHj1#9X zw_VzKuW`%28SlAl4Xp~Z`=2)`x86T{?eBTqH4TuPT;lSGY*q|@F-yd_$Rs`*KIPm&n6bnpC$)<%-pF7}<3?X$dE|DG@F`^xNz`-wFiH@pi(x;Yvbu%X;?i=N8 zp1Qy3^io8i(TiQz>;8V~q&C8seC%I;Yyug8OXvK`^EJ%We^(K9^Y`!rdnx)`$hNWX z=96J8;N`KOrSaS9_TOF^s!tO(WCj0NO|jQYWT{`S-tBMVM|VIfE0BED!=fVW-H>?| z0eJ|&NGG+Usao;OAg3DFFWFzlw!MI4g?T;pQOBhTk^c4Z*AkZv_sYxmK^$$6iM*Y0 zCrk^?$_1vI&PM8UiZ+fecfU70xf0QKPW>NxzW(0k0e<7wjheQYQ-k9>E*yD;Of=q2 zLr69D-d;)4xPjMCRyCQS50z18a(c_C{kRmNKe=p1hdwdStK0=RL@X~Nq9E4`KtTvq z!zxk>MljC;!aP>nn^B%m#Yz}BNxp*$^^06m1 zTs3c0Ea7GEMowz^5lelQa_><^Qej_CP4hY0FmAv01(nUMHXV=ZI2ysCD?__IO?|-F z>(5zT&Sa0fC9C{rBs&f273NYq0fO|!8bX?e%A8#vFP6JQYR8MMy{;v_v8tmSEPnEa zOhtIi36eLEbG?D&jIM?XYhO3L6aBR&Teia(I=YF}V(HT&rxvUdi8fdTqNs#HHQV zUBR}^UR04T*@w??G)KlbICE{3j_-rQ8boF!9fSb+Ha4%Tp^L%LU+I`@sxV$B43Zb@ZD@p7)d$-)lY zld`S@wmy*2p8K18#l>555;d&!z?L)g`r0umEQ`s*FDGjRcz}-IR6vOFi^#}aQ;mc< zo-cYwP2H>%qq-k`H0rqE(E#3(g@3VaRnE8K9a8spAKsST3~}wBOtt+3iK}Gscf49k z+5Cr0dzRAg9GIngL{DiV{)G1_Bq~*+D&0BLJ3C`!8kMYJ{7(y*i$Hlh>EKN;X?{pN zNMlxu{RH3C$H@_)I>*Ox=*YZc<`P!#RIB0M*-#fW%{o@}4D+7iwBf*7&~Q;1cPQ(q zv4S+C(kWp^hKoH`4NaAqOtwB`5iyF+uQW7E-5Onu7t~0htsNXVNWF4#a2j2-vhTf} z>w~{$Anx6Nm2SIr#FG)_b6l@ibZSAFmeTV}8S!j9Ds&UQI|@HJ+XB*lgAW0RQPtd- zG>x(QCcE?0e4GMh{ITOaeCJ!^j}&;p`m=k6(c=adSgvbY8D`+~`Rk{(r#}nljCCA3 zaC3nH9`ekRw3__WRudX3dtxl;IR#o~k}V z!e~1DuA{ciqi>M`K`5wm!%T)Wr2~H%>38U4lKO@3#_1b|J ze~R+mv=dE7tgGrg%!<+i5eGH0JivV{czCZ0-E`q) zfLZ%eQ3L}L$p$SB#P=9)6grzo6mwH>&Yw4Y^ZPXwZGnEV54zqRI%e|P{LG_yinA7k-W=dR+9`w}IFp059i28bP$E7bxCU#HX?F@(O7QKZ};6KEn zQox}vKRw0TybNyLyMp-O*0LC0 zN;^{eEadbu9|*Z)rCt*Ia;E>ZkX7%uIr{2r6#n+7`OF95=3Zq6C^k*v8`aaU7qM}6c5iU?QNJz1;ualmx>tmD zu?r&QkLwmjM+aK?79Q6*e=a}{j6}Ql%voMO|KewbX{1*8LU;QFCbH3DvxU!@3q&34 z1}hHyM4YFNoKB%XLp_<{87DE|u|piKE;`75k^yh-S;Oa21d(3+*{Py;XAa7cS1Jif zW~rewMxa4)3FvDuP>cHp$d5|e|Kh~k@OGItwGphR|6758Llqjtk!GY7w>=UC)|S>~ zdK=S&`+SYiD zfL(U_uX&sfE>SCS71zhuu~2>mMuyi4*#VQ@bG-j27K1MAm}^C(6T^?Px~1p+YPw%X z>AgXdwYrJ$-)7#@2iJfVp#x*8#!1f{yw!cE+Miqh*Unf9sCcG2=`97*d>G2P9m{f? z*T}^|DNDGZp${~ovQ?+z?+sXZt7}|_YoGhTdcvToWvo=$VNk@V{g*BSTdT&^C6DJnml6t3Pz{bBtY4`Ss7iVvhPR zkz%X6=4$i(JOFlPS+UOmRYz?xFvdKD-h~R#JaPPS4?lLjvS!yI^8i6liah-PU*v1;d1>Ois^%7=I4q78Z&_r!D zY;vO5-envaB^o|HipDYFrec%}Qr@rgU>V3Rw}hE>aX8o5Ii>tb!<5khl)tRLBp-#R zE@k8dgyV~e5 z<|jc*C*;bnE=kb+zgSDkG$mW#CFLkK*`@)Mmk&g@K>k)RHb?7PhVm$39`j|X~a zXdj&*pCv--oHQXmLbF6!?OAZuVI)`)`I)M8IS8{pZCX`k<|PN7*Edh_K)Y~69!v5c zs7BI`W%=GmzeVfv#|bGj#g$$jKZ@=pWXvO1B{(lRCYOxEWW(GyC4Vn5>J7A zi+xV*!Y5cNDp?sNJP#AX#Y6DvuEnGDqYopkOn67^^kl9nWa_@=xKQ(^@XBl5+sB75 zceHBo+->T|j;B42siz%^8zz_r8)BjiKhqgIn)f6>e$~#gzbg#*it&EfeQgf2x`45$ zR6^fcDv03mSiIF}FT_2w>dCR*UL}d%$7RYr6}nxbH9T<#KrPO_0-33ny@c4+DlJ~n z#XVW^lZAA@nz+R`D~eOWxf1+|_GH86dt!jj97AIPgD+{;6fp47&FEJ8PR#t#kq#&+ z0fuB~Z!Kxf12oM!Nmn?kQ|^&8qP96vqc!RJ%_Xfm&W8q$&I~~NW`z#W|1a87%pP~J zluf!j^wWXZ%%du>uGpK8YoszsI1fXELg%a}zJ@^bWjUya?Zx#4#ZJOT)e$g#qH`N!xq~f?A|^G_$cdSvc?Pkep+e@hO#B)Nx-UX5u>bw>mi(`W z#cCgt0Xg0-eSAP2k|5(qu%9hjHDq=52s+4G;&s zg#G|LW8RD%lbEEvJv~n_VSTY%e&{$Is%bVZ_L9S`iW2M)@=pn9bD+M2PV)07&so+Q z3=A`OjwTq5I~b6A3(hAbj|z2pOJUoEwPRxGOD#d3g# z73I4kX=#tTU{N&aoi5MmgD-CTTJ5JpyUgGz1Vs-$jfWub_N!N3emmCf!5L5YH?H#q zs#@efP}N$}?;l07xb<-Y6i`KB+YiPCq85%^YN0Bao8e?I;y1GbWSlG2&bxt?psngH z=-814*caI!816OTMs;Zn{sq$Qf4GWj@hE=&vgjp)P|klEV?_nTziREf7`-?k-%k%^W(GGy!~odSi>s3vowEW3+jRhq0E94>PR5DuurY4E5gXbM9q zVJA9ke$=5|V|(*sw`fl3NSoB20y{v>YN;tY6@68=%V!iFfR zRw(>hp2A>5a2&quT0uVbMVT!p;qiie0VC<|hAXXg$7_dPfzoOQ06(Q$`YuI-xhlW0 z<;J({NPl77AY0+)eHG^f*dBuVqOtaMXSL%?GJ5q+3jW6M8mR{sP$xyIRbSPs56{P8A7$44gAQsv7e9STcH?NpRTGq!iVRKC|f zuMZ(KO4H$P|1WT1E#YPpe%lY`?L!(M3f| zg&MdyiN#spgL1?1RNbA5M6%1eRmpxhZnZ^&Wmh(0Y75NHjMw!6eT#aaA#27v_kk3G zS58}UdDs&3%mF>M@GNwD|#^L}5)LcU(Y-KHiR0<=ZuH$SZ&`??zLm#Gp>#LhIW#Y&{GNkeD_ zLFLczwx@vlU3A$w>7LQ%;HhwpAHQ#0TJ?+L_@52Y`f3Nxb8mbHNPj{+xe;}stw=pW z@~Dh3IWEGOxbM2J!ng*d_i zpU=nDBnE5RWiCXQ4UCtK+iE?F?u&*#Xfz7D=#^Qe*EU7+j<|jlZv8f(&j0kh-`w&f z*6`=&M(h2EFtenQ64{$sIi{QL&4Fhdo9^lt&lKs@)CCq+u;v;x{zcfW?`(zNKjm7Q zd&-QKyf~2l4H|s9MEOe6$U&RVgyE7r$>0pluLX?MIk#1r{CQz%;lqoL@gZ7S*I0IB)0?QQWtC_sW z88vX|>jD3NQ@x)`&cJ4ydg@S*mrCkP&ln=YT*@)fii`mGHU*}=_aWr^DNhp92YSYE z8EK6^O0h%kh3bJ3*L_qDyZ(<(?Y&OSp0@UGJQfjeZ}N0LzOwjQ z19h?Q@xw!b5c!hqN7#v&oc3eVVnY$wO?8Q{P*9Gqp3i;pfkAwt9MKQ<{gr%Qe|KAddY%N^yEXdAiPuLN!`MeepLBQ~rxg6(Gr!SuzqFtxdQ*_7@1tcgejx3h1$P(* zpqo5H!r$2tsIhV?4wp%!^7R<526y$m?c^}_!Uh-dfdzNFX^J`<4b;+Wvovw^z+@$X z?$*%@J!zdNw#f686|*q(Q!*s7TNzE->`2_~4AsCssY~#d&mSaUuHw}0eog4g@}5Oj zTJ5~*aSg1wKu0-6$i!1jy@9#ALOGSA@w!8hFuR0U3-cI{l5klZQw(P+LM3f&qU<6) z%EW;;{&fwiW=h00QN;>Rg-`-28BI#F;ufXQW`SuX#HoJer4wT%~$%a1>8P6~J7Vu#E$E$v&A5i<~#=*E;-jX!? zV%N(Jf&HIy65D|v3N^ejQe$RyxKZmB0o1roxoh;KBgpAPb?GYa^C6c9XWkFhT`vpp zL>^lUShqS=zi9g=cYLWc{LHuchXmieemcrlc-W;sxj@lJP7-$5+9BcPdj2{CD##j^ z*Dm5HzNQOywJ>If$@+N7D%7@bxHejkq_~znf=t28{E7)SDHO0Fco?xF-I#D4 z+l>0J8KfQk)7#wq{@J}EQa<#L_kUR&M9$18j@Zq!zaCb;molnw!ePRSX$kaOWBZqW zXt)d}3L@u+!3L8fgttO|J>&w)k;llC_wMoMTVYbWJ@u4p4R^bJz*JIHR4!~ZdLp~R zawkcmI8l#N<8auC`Jzsjx4wHd=Here%H!f_2mxzf>xgVS+c(5@RzgRQ z?SKSqNCVb5FpW11vcgJ$>JxSPP#w!oxXN&}4u7rZLk1VU__ypEtiJ8M+jTYCvWA-4 zi3Y5>+jDetjX}rJXsepGb+e4;b9UEe^n68cn-XIt9UdHgxF?xs?wk6~dC6#p(aj;a z@6fxT@5TFn^o*TzBaiGoNh#2sry`DE_{njW&bQd!YA?tocBV}gaYe)6tsYd=Fw?#w z0Dg=mHEizCIzSx_fhTr z+PT47^~&kA7Oy!f#8@hXncO76twsL04?DNVAl(gvo7|;1F^%i;az$rlW}Eddd)KtQ zwcf(YUFQAq&kI{f+8vYLHq6kI+c&7%b$1cgQVBo%biBOtBp=h;-H`<$VYnEuVVEt< zt$}WLn&xTRM5xSe426FPc$0VLwBftOVTfp~*~0STdDfB~jVt~<6%6Sr?z|UL%T+eC z)q;m+evOHUbv)X%@P_z?LKDnSYFwif*0->gWQ4F%7`njWG(lIUhSpv$wRG0zqP@y^ z+I9ygHqDuVC$pCLJ1JekHL2yj%De~JyW}xt&8jhyF)czE-*0TGER8mzd3gwGJ){u4 zD>j1c{uZWv(@KGKp=dBlBH&$vm(D&I6iE}jw~F^6LT@O}=iboV=fIjx5F0%OI|y_-B)i$+yM_?~4pv0?wr8T5H^X^e`{X9kGMzf9A{k0+$PS&K-;L zKXXjNGo-mIpII9-WFHRmKEZGHel9GEWZ{F{mFEp~niAP(a*c?#VVT_;KmSS10pSBe z?QYT13pUlj3u+}jVb!{rB}(ca4q~cV{pMq5{ekdttb=9k2@m}=pTAYc1snM`OKNQ7Z)x>`vW8ML%zj}z0 zZ>(#%F$-)&pCqPd2ziA9?4eNA{y`8~XhAe=a6|XY8~Vr-a56mWgaoD@x`tQvy->;zS2aD;6vb|!ExC6|ls+mLeGuf6w|M(^k z!3~DwQ)a+fQXy28xMzlG&>ZGfO0YP%9C)wFl!e*Hz?FrQj^c)`jGo0!L>LEB)`~)BO?>x?S1AJHr7YI%;Thd3U$}_^)xo(7B?zTCaGT%MDl)*kFU}vzQBwMvK zT3F{d_JXC|4kGf_P`!GREW;h)pzAoHi&~OXe9zi8h)F*++@P1_bgx; zO5wvW9@BM3Vx+u8pLu3f zA%Pi2!48Um@go12Az+0Ztbrgz84GW0<;;Zbju__vxokD& zjFtKQug!@PK$t98DXy})4*mq(!wWNKSnc79tJ?lY=7=C!6sf%7P9(HM#Fx0+&6osG z>SW;7> zu%Wvkq!CP0ul5m|vuAsIU znNt$fze9?sEaLBO#b0dHMJoIXO;P7Jx&#CEl;8mSV99HW>r~iLfl_EU`VUL-2eojP zp7|o&I`0}w1mpinyGF( zcgSi;3@wm@3+W<01!nlnC{S{)-NU@Mm%Q$=??Bk@mt^x2CZm!WciqPPL}7x7Z{CBi zzI?G~=&CrQ(qIUD5K?XA#$&+xp}`WLeN7&*fH*shspcua=7@mTTY)yl`Z*qP#=i{7 zC2bMy;`e>WOw=jt^M+@uATpIgsyA-tv9*_(0OA46H^BHtU0J)*6Qg6`o)tf`07VO!Ndw9J;ul89rIH{fW3BEV6Z;W?|pxcrG z@J}X)9Dg=~GOb>cffJvt3uNLzgFNKCalT)nCYayWckROb8w3v?L=_lLT+! z9apdH4Mh!#Sk>e5I$TY<U%G#gocezY1YFv0c*<3v3Bztk@4A=Kb#t7 zVuwdWygQiF8?1%}7REYF`D=M+0gl$u-C=JUT)YvXrjhMe zyE_}l=$0yf6(DL~pU})Dp+aS1j9%8+Nm^GE zADy_*)o29y_Y6t%f7dER5M@iXRWi)&LtJPL)NW^g%+Oxftl}|}PpnY?HCaBcb@!nv zgJV_}ktqi2VMfvYWro+G+MapFMp!X!Uv8CA71P*3VmXplS(bIU8E2eMJse2~)jPnN zXWUctp>AKv+$y@C>fS7hoA)EHF_9u?^ql5$u*=21B^d} z+=9XD3D6E^lJ)gGO3%Ju0^)lC`}>!lsd9yPyAtYWwt=kg0*Dl0jtm_58zM!;|;9~5oVGdzH~?)0dbn>a_eb#C`TFP zJS?Y|T`zIn8OPp74AGuWP7A%wlGv+o;OB=%`2{YoXh_a(WI=vdS~lh}8<`S55+6Tu zl-NCKO?}TET@sD%H*@ZK-dJY~T#}Jz_^9l=%2l2+JYPNZXlkgw%jKEc;@tYw{B2f- z_R#Ig}g)$Sp|Da@QU*JtQD=SkLguCID-&cBb()>uF zcVpJHInVMl(@^WGp;mZcXR9Hh)6Z1N_(AQ1kwQzqTq7AI(_FK+9Ft}s0(p?31wtr4 zY}diB(~MQ4Sc&KI*7BQm-_2fA4TBc`N8phOOU)IJ;HSGeBSBdrP&`d4()|JQ4-*}v zK-23X*P|f^-F+*?kOO^DPPA-7gm8mwbvxSfpp}v2@9En$er<)IqI%0hmZdp5*Pmzf zRv$~`cN&J@-gdVW2Qb!oeoWiaN}Qsws(0$_ko9VqjnBV^N4Qph{R7Pq+C~0QVVakn-QYgWPbi65jTV@>x>J}sa)>u8BJRn59loE>m5TVCeO`|`FcL>>6 zhj`Q7irpuZL(W8dV*tfO?kxGGe4BS{hnsT)MjVx78c4Jn24fQDH-k#6%1XnmtTLdNTwteXo-#$C0y=Pf*RD3T03D?*hH-ziM!-sMDFI7Hl|alls2^^A>-sGkKi}^)^?3|PM=>J&N0$|9CGnG zl)7vcLvk4&8rgbi9h8D4*_!VcVJ}ZX(N_yfD-sE?Txpq&*oH5@4SF(G+yq0|D=BF)AKrE%?(b-UC)oDHd8ly8KwL@pw;MHdU&0oAI3!(=MFL`)3l9ye)c`i zAG%>(5!6ksb?*efIfP?VYT0S$C}do*^Gd^=UusGxAQ6 zOFna9Av2yu;DOwWQXQ7Ptx>yN4C8Ea_|2=ik^RskP|tD?QUm~uF}_JDb)SnKLEG01ERWmB=Ds+U4-KPbWR)_IFc`hLF}^L6 zo>?CH!X+!fc=tkrpITC!SD@j6qjTk&`TKIq?YJ+C%k7toJkQ%Lvf_8y_da-va(KCr z{37i_Yqpn@Yf$_v8*t_ramqB?`wscR)_as)p3@4_P%TFnY1~@0Y`5(wnQ6~cippD3 z$M4DepFqWJWPo^4xGL3&&tQAtvTwiFs|xi=F6u4nSZX(`zFGRVuwsqdVNw+`WvbuM z)sx?TD)X|D!7i$Q%L|8NU;V4Y$r@>iB?0gGRfHrw5aGwZ*WS7pjBQohJ-~fyl9INR zcyXi%_*SjB9i6OK)jsQ^lm9lWlvLd{>~lHwkH@di*BvxDm+x#u`BPeG;&$UWR?l6P zovNv6)f4!tX(bx@#`Krz+v1K(>objaPg?lkn@gjaM54yro9Dh}8Qn1uMe?2wMv-0x zZNUC7%=o7tG8S~C;mDul&yH*Dp644swgI9$`JU8(65{CzM5YyV#>hd<|_GjPFbGD6&M{vl$8bmmY3R zb?3~#foY@z{Uf7?Nvh2)TH5}8Ig%$eSz{MS3xHM<+DDb^kn-lS4 zL@LHhcYX-26gL8np?RvF8se%Bc6jT?0{dRFb&1$c-_#Bdf*qg`lk(ojq<0i2cp~ug z%7oiE)mO;1UNm}6ED4OAD~#?2D2wPA{s2bqge=MxXN)q-0%yy{6H(hf@GjGh!G%$8&vFdf>0A=~foRH^Mo+s9XP}?6Y)PA`IrPD$lSDVPZ zNi-M{{G=>;r$N2xZ-)~PO{=WGF)4&=0`iU@bflpf&@p-0v{3~JW3sSwes zt07ZNQ?mfLtDzzKmV=ECb8~kzZ6T9bMV=>?sWvT;&l$JYc*+8ajSJEf?@+2=#lbR9O&FO)Tx6FJMOV89fJ0s7RjL3qk8^k$2t(PTZ-tonQheRB&@A67tbbl@MIyGm2FK#j1EJ1T5wKeOMR^%RB^hc$L>bfyQ=Nii3y>#W; z?>1te+2P|kES`d=d%Gjj1D4zYM90p*vKx?#Hjf_FdEdwT3F$!M_EYiTGq8w*eH3wA8 zcL0NTEpt_k9_R<0QT`dH8{1~`uJ-o#YfFfvq5^fToX+oO8Hh0Y2$CBU^qPE?F_E*7 zkyFh}bW&=xrdH@xxg)c?xwtXBkNwe2_)a0$vQ^G-+0?VNtZ!aXZwqL*Sm0W2ZkztS z&(KZ#SoP`Y-g7!`cWFhWnMOc7J|fTk^H(Y|<-3Q{gX-)v>F%hKQzOcalVFn~_c8^Q z0_zJjfmNK6UCS+Rotb9efEccJy*R$zsysPZr951kRz^^J?B~DZ7Vc)PFP+Y&jB2J= zL+z|c)z{?yT+X|j8u;?L_9yVuGaW+HTyal$HC@3QT5 z63V253o4IfsydCN)PJbb06P?cw)<@lWO3vXoiDvb@SO&+;H#KcJtIcTl2V&CcYG_Z|ux*mP)eF^*E3EN$X~hxRIcQ9p_{NbGUMuJ1TJl ze!?Yg#GrK;Tge6?1*^Jl5dQ!Z*kGP3odgxIPTF%-w8T6z_({@nubXc)R1+?x{kuLv zmDcUZxKeGS^>eKA=Tq-0+Q;FK=Y^F;qxG4R+j=JzSCMS*{jo`d`E8|n{Pq^N>I z?A70}!0fH!WSEmu0S>>+GaNH23E^>-PA??J6ZSWbGC?W^1oz1EoKiXqlAQ&qi81zd z9`b#BzWHjM!w@gLqa@kkRHG5pb;iwb5)`!tt;`ebjfMnnaE&H;#R2~_5&>OjK>kS( z{~6HEct}(O*D3nWUO8xrl%knHDW0Rrud(EF9N_nxHR{6(SCWev7dq*3r@Nz#lVS4v z;`?te^`EoS+KK1y=@>CKJw4J>*2DH-khN-);6f4fe$VL?5&yu8qG*|4worI1>13P; z>`MQiE}47Cx#9IjSFcsWdMUS5z3>QL{>Y5`p(I&RC^UHkT_P4Vjx_R8`?BXs4T8m#G_oCnBFJ5mJZnn#??aVIIKMPZsgxr{_VF zV1mdz+WWRc&(~|;k`xB10wlDdFTTRo%vkj z0|SC<-4&WPBf4O%{6&w|?*ap4al?{FJ5GVo4T*@Mwa2X*ehfV4>KuZA^UnS{ns z1su;pY!T!@1LT8IA-c@dV5`k0zMUsC8XRW0j`-Edf+GX+M>+}*(+aCSjFyv2k6$1c z55as^%YG1K54Ookhp{h{5UlIi=b^DfR>i3zd7TaJzkgt{QhMp=EKnbgGZTX}H@Y2Y z+|SEZ=IUU_A*|vkPpMlKyHW+bcex?Fz!ByKmqnd^Hrr+@g==87Sgz6j=PtL1KA);u z;noo|3&>TK)FPbrU==IV)vTxBZ2`w~peAq$L~JPV*=l?Nysi_o&93TlBiQFK(%InN zmCDCvKLeD$#Bz{Xpc^Lj|1Dhd#MF3FTgCAOq_*oii&fL9Kt~zd>jzR$2Pw?})(Rd6 za&BI{zDRJ2C~Wlk1o4gg#Uf|DQk zmDGom#sVCVt2q`sCVBSIBO6Y|1aenej zMf@Ggf;6@uL&TH&x2;fJI^*JkHs z#K$&(cl`0H770QlCjM){nyEk4ig{wt4NxWPX%vH@xMsTzIVVSOl^4W~0)T|8I68o} zioh?J1z`6lUCuRr9afUw2}QUi)-n1Lnz5>;hx(Tt!%*hg^J& z2;gWgXVnfkrjPDsT6@we-VF#`zsZIk=XcFq{i(nY9Ku|Dsf>{n1Y%4tN_Lr-#nnwM zfL<<~axnc4yQo|q+BjsJWc|E*4MIS+H$0^I{||R&_u-$`@g+i+W=UCN3dYIf6ZGXv#vTxPf2J21|QTiDFUE z)mMoFot-UyBmLf56CFqmUeo1Eu~qCu4J7pDlU=cFK^lwC7%Cw9HCPtlM{FzB?+5$) z#pxu(v2$NG4on{rcb4KErh*;(cw=#L&)-%;Q(kk-G4hF$N2~^DMmGfW6Rygsl^KV| z9j*G!mA;JD=9WQ?P(MN^P?N=Tq(Us$&N<=1sxv_CeBUmYTBV{o&y8EC0u`q%jM>7) zwK<$Y3|OO4Y2S0W?X4T+{1knSDmymE0mcJ%76hq-wDCOC=z3fC2!#<&1NiY~O2Nu? ztVeUTMmFb=Y&X~gV}{@vH5W9RwkBpOZ# z(OU)EH@N-_Def=^GXeYk`jWoC>X%sFlLwdA13;>ibxKsysa*hPGB(HPidC(iZ%nUY zW0lt1)-&^!I?`5sh2_wasB9yqO@nGnoZ68XrWqc)Ck28c$nBBvqa>UJAsFb#mR)!< z``!4?cgN+dkAFU@&jT-f1`Fc>N%4RVxub0y_`>Heb&!`cZmWL$gGsc^hLC@5@S72a ztgm2x?H!qMsv?^7h~^)l26>-`6|p`1`&XyOE*x2m=H|j>QI!PNNX;=YnGFos5-=T_ z(%OUQ-5m_!Ro@{H<^(u^!e=yeTv+hflG===ZtOb}y=ZX}dLZw@d&xqA4?O1~Qcth= zpXrjlGLf(We0wR8I8oL^*)bN16wpr>M(?8elnm#W-rNU`=zwO(oc000u>PIrmG@t& za~CHI64nZjILPb#+0V{+S=w#ltJ~i+TQPh%8+{Pvr*}p$Ivg|e$RE$ynRlU3K|YTK zF)OOGi{`C%z0!g=ds9Bz5%_A)#h&zP?c@R_!YBQrOLJ4NoFoN4R7Q0K?x}UFZ!!4A z@8Wi)dY{e6{q8A0x-8=c#h%0~UcQnqDPp7I0&)t^u>%8DDzGZP)G$9$p_8VNRr3=y zNH!LeNfyeMpvB#Q&8q80F#xH5Sh6#Vqnhce-duo%)^EdJxpTZ#9IhH2s%n^DX@}`S zJy#Cw=4~$$I!c0a9IGlX0Nos`ygN)g+Z~<#ZU^ssMH~iLQ+xsaX5&Y$|7F$6NVuh$ z|4F;zla4`~@wHDGM!kAXb+UzrGn8fH^xJ{Y>rG*xDDvl(3`o^Z9*)j~W8{1~*g!g1 zqX^)$kl}-o`kcXBbdSin3FEMitgg4V}*A- z_CynB0G4D~b9aaO%eTPu3FQaNE6yZ<_p(am6h>Gq*m;2$o4YGYpzs%B_vG6ezejr{ zf)Wkr4U5f;0Yu4+w7+X>cz1%VW#9^Sy$qyN{rx#IPwbs%Jzr66a4ELz(%-vHfa zyr8STB|iG|)%0|Dp4NmM#KLs{wcW+TJ+R~%jvF0%m|eJ+4k35E8%$^yI06mVz7ix{ z&z5n@3}3%bGf^ueDY_UYk3KJ=WkJHoRY`>a_E+Y%DWz{!DP8=yuS69<6pb z`P2e68B`HjpFS|x37nXo9tk$Qz#H9qALvvu*H;`9Wu5HAT1>F5KK1p~)61SW;AX#V zo9vT%dyTT6A)8(>j{o<16afNwcZRvbNV(aWO|IHnqL%D0*hJv!@f;IAw`;$Z4ygPqqrGUs51r$trwEjo%gTuj0I*S*Jo zsz^O$oBFTtj(-cxW4mJDib&y zUMY9_-WncEv8lLcP>3ff1zAVWiT627VXDttP5F7E>~F6wKhWFj)sk2ff~a0?Dz#ed zXgO(>(nh&804y;)%LYyvo}+hl8eSe?wzZZz6}Q>cuCpGx{U#SopggrI$FSa8wA4$! zT9#u+#&2dna$PP8-{Jbbqu`|B_rA3N?KCYYK$RJmG_+lN%7w+3nMy0R?pv5L zuPztHNV9@%633V8oIZGcOE=?2WEQF0ReBeyd+)vmM#Gneu-Z+gOo4n3W}SN*+Qtb} zis8+{jLSuGbk*1nqKqX-Viag(BdY``wY?YbdjB|;$;Ty$;-U$KeE@le!&+apXQYHW zfiQdH{CFoGl`w(xV8!`q8z94aR5gb!pW@7i)&=U|6OrDUm0nDF?Le=$04)=nYrrQN zd6IFWiQbrv_V&<-1)RBadZA`&_ZTiR@*>C6+ks{i86I{Lg575^oQdDo@kca*?_qZb zXvdHNqq{S^hoMNbTRD?n>0EpOHX>9>qlnukTCjs2^0!%=m~ zt;3sk`?_9zKJ^)L*KSv8^WWppeLHK0$9Gp=vAnAsLD>P(57!b=We)1bF!*WcHqfEz z%$mu<0m}V0hu8hx!HC zxnmF=sNF$S{!g8D+$B_DmqW3?@RWq_5<$vnBNu3ZvHu&ZHNzAad!%;F@_3c{+M8s> zsUi%&>U){)ZnFRNAqc-Wle~*c!{b_o)jpB#rpd*Ddw}7vC7W`qSx|6FmeT2lfewd# z{$9X@ySiWH_?lFJB7dQPEZ9UP28k7(O@`H8Y$YS4V$1TBu^Has+0xKFrc%T8`F8U+ z@DR?3O21^Osewl}^Nt69`&j58qVQD5KEV3BA{AmOyoie{+F!cmd#3x$_wR1eS|u0S zO;w`P928>b=2VS#@kk0$vLbqRsC?U|8TOV{oE~u2Vgy^Bo!_GP{}ez}W-+LfXl4^y z9$Dm}T(8aC7re=q2VVuwXaf^Il;owb~Cf^$A<&HYMHhdZuH z!XvwI5GVb7tfYi-Q~yby{V&Zp3a6W`7ME3jtvqV~kmT!h92kKa`_weXYfCK~!hKlt z-7caQ;Kz*NeZ5bxFb48rSeVX6QWW`0XnEGqfYv9NuY*S;I)r5Jr8~7*Oz#V@1*ip5 zrsgs)%!-qbkz<#(AWqa6c@;1Qcd#K)byEGxdEoLMR$hu;tay6zj~>Q^QuKz!;@Zvt zlo|#aP&i$%EfNTU@~s{CB9Xh~c~i1~0fyWTF-v%3PA>KIUK36q?*E)y(_9d|`~-VS zMUWwd=W8(LC`G0swqpH;fzx{f+pZuD-INP{gt>kmTG$41+r^2BPN(pNW>z7?9EHmQ zq1_AvYdm}{p~^?S+J}jaaQ}9b8mxZdeUL#S8{oT2C^T5>W09iA@#8Z*6WX^&vHwTW zefTA{|9=2y3n&V>XP~%8s5mk$K-?qTBP(#FriEr^R>pFVaHOVII5JZ+H7oPh4RB}myb>B zy1io+)5-$O2aObU-)pr=5jzG;J0P}WG2y)0*Yp1zXP-FayYTzqUD`iynF6ZHemYNc zE)03Crq4Q%36B_Q+^O}{ad_v&)Dm0CqJ}YlB#x3+e1#jfxtx5y(ON!u92C5%2{rou z0S=`$vSQ$j1h<{DGjCFZvQ&ok8XES3V_I)JZGD%fZXfwJzcCYRkrpsbq2VtjFiXo?Rq?+3p@LBR!n`>!9DuP-^=MOE6vkepiCxnSTZ zGdjAc=IHqxY8l-d?C!MqEZi`vFIv2Lh^S{9_h8Rbs>E;!UBz!ON|p_e-=On$M^eC1 z&m0hhCn0)-iHNMI#o>#mLYmso4~YX<7^(OOJwJ*Cv}npl0s^L2pJxR#C2D;jPAEl24RVM@_5 zEtNUGQ%RpZw}&zCUh3z(7-8`9z?PPZ`@<+;!`0xcZdxJqC%!X}YYdhBoZXq3!K%bT z{0Q)397Sy%cqKsDgN1tII5^p>vUljQelnGiFs46FnfW<*``IjV1~t~F=!bhnqXh>* zKyzLE$6bT>X83X<{u9rfcR06Z{7{vc+$VD+^EnzO14`>`csPgRmdv9+!u_eRo=7GO}=)O*NR7C~dL<4H83^gcq=%$3Y&q(>r2%A@zKI z*`3KLJKa>(Fu6qfb1&B_=|~2`)jEA&4*NBUOUJ|+oMgt-laOUh*H;sJN=H43M4rRyR3Sf@!3xK2+~~DIVsg%VUa@hRsw>pq@Z_S zloG$3)s47FTgBMbz;lHo+cO8?M6m5NZ}(5|PEz#hj&gkQ{}X8rqueS&Q}-swelXlO zE6|DW`VYREze%;atETuRcF!t?*e5}GA?#+jxMt^8It)bv zW`Ej;63n0#fDcon4dx#yNDGZY7nP^g_3@LkKJXkTFlA17?Wx&O1TDo zT-kcjq51x=fokF$KK^In$~c-D4=;nhu(&r;Br3PIS)Bay9ENz&m%iVc%prV3WS-Bz z8C+erELq^}bIkIz6Y{DnV=Cr6=O%d0&ETp&gGmIzoW{vF6f3OjDmwx@g%>-V1K~s- zXT1d4N}XqcrBq@{TG}3{7x-H)nNz6u5>y)f`kCqr=;b1(O^KN^*ZQaHu2J&& zsuhL1Y<$PSb(4YZ;}SzszQ6Z?C6m|NI@wyj+M2aO^4#*Y3P!dHs7rT}+TCX?H=~j{ zNa9@GjrpWVIQPa5iM}J1Fe27+lo)+$!_Dng9_6S}K|qd3iOjWG=hUBuxe4$wkiCbH zb(-lBe*^qq_lcDK{Wme8rSX- zk>g5(QG5L#M?rtDJVt61kC^#A?)7g5=6qq)8Q=~@`AP`u(@N7~v*5kDDiS3X*=t-yUohx)R+JM&<+fPe$i_u3j4q*rMe;^PQzYv`wVi$>WMT>&$J9&-R{s_G;$C zq1c>@Up{En%ZOQuib){5Wxr`)>nfsEnFut?2H+Ex<)+m;M?ksXQ<~k|YTFX!yH?Ok z94DGQku5Qj)uyFO7RwW4Yvl4NZ%ZLtOJ#ulExIKfdFk*YBLQ_g>qX^^NrV03)KGre zABp98pT9DF%>OLI@Gk|!o6i(Ij*X(EQ^SGB0W=9m(tV)P(e zi9kVpJEzxs(Zn6d*8`%KkxH8qe(Zp-Htd4U{>pfGg_M3VNn)D$&-N|C7a;gn?6^Qp z-BtkDX$Cf&W1Bp$RwmDF$$LsJ*Ya%Wmy&_`rVxQmrmLeTIMwpSg}{Hd9Etyt*FU&Z z6H~a{6iFbu_{c`-W9Mf<4{IAfF&>LJ^7INWiE7=!eezmPtd~1=YG_gg_OUfro9@S4 zpAV1%bOxsaL{rZ!I6C|awQRoHg60F25{G;3cVO?iDt?Za#ona&AQRd%ljNse+95N8 zvOZCNxWwTL2NA^;&$88KC_23=FIx?%@M48%Yad6{$P+#}Un`sj(mf>!3lSTkbG#8y zrRbr%8iV&*jjz6*auq@7zK~jsLZ|AWmefthaj)Z$n9Z>m4eL2mYO~vJ3DQM55vX|gYri5 z=&laEdbVA$XSGP{=X57?s;kGrP6|g5Lj?}WSM5Dx7Bx-34wL0+Vgod9$29Ny+<>D7 zsAI|7Om^tz8)62v{ikBn&uI8Bn!t&q^K)M%yeIC1g!EAqZ*%0k zYFTD9KhF~V`>0wbOnV$?7oxfC=bA?HJF_*)o~vwlf{jwE=>I3JZze00zFDt^Pa$4>dQZ{2yJEg#f<93+ zlNfgX)j#iZnlcT`+$sb_Dag`y;JlDmTa2Cz;MvTHF!_1&SXXC409NekT+Abg3Jtut z$SCTL4n$S6uAg#^-x1G?7bT{&H(S1Xkw=gwkpC6pUKWHmmv(OjlA4R0JzXu)U>Q>G zG8?0^#JMg*SC^>UhcSz}R6qn4qLFUM37C=J_9=g1pIuz9t0OAgBfj zwTOI*W9nX=C^4d5M!;yj_LaJNx!tp5FuP_a72FRrkA>^p{yS>jU)Vh@`|x=BMT`{r z;~?RlTBEJjV?JY3IJbmmckL0entrP2KPBMS9}#FBkXIlA`AT|9#kZ=>|L6`y%#8(A!P|SzOmYX@25=HMg&yKM>aR z^?7&4ogK4q*>kWT`IU9g0J`HLap}ZYcZyBTKvk!KQ?IKNJgaS+SV4oU*UBc5T%j--kpAwa-owHtV=!9zr{M86zZTj$Oc6*Y<1Sy}9I!lVxb_j$RjaIeqxrDAFd8JKVaVyhLDNN5-x$2rR z8yvA9@fErjt<`W`AD|R84ufv4>^O?jaY!Ex_Oi`?T4UW#F2*#)msXjv6s?CaCg=-> zd6LPi(Zgfq^<|R&tCP9@xSfYCbrE6W?EBYlmb`kth%0xo9 z7KOED|EZt}wb$0~YiReK;ZdxPRn>U6vVDn`^(o(|M>fVK=gn^{Y8*~d$@@S~d@8wC zaLZ`f(9Y+^zFwMfy=ur>U;2&2Ew6KAN3{zsf5jHOs!dEei; zWQRP5ib%MzO42lZVgdel4YfiofBD7PysgZx*z+NwS6xdeJu~eVJNVN|yhQNl?GbNKL+1P2I63`wQOJ zCS*6*X_Q)NRfQMjo>PhNC_DdND{uUKu6|N$!%$V?WW$HiA}8;vS01OC?-0hNjtjY| ze+N9ckbZrlW$Fmw1ZPCO7{e@2sHMQPm{}`TZ?pgSWxR?#xdN>b01O|}!;%|@1AP-q zLT0@$cayZ@qcxehxcr9$=nS|FQ$6;k`$I!S!WVv}ry4#^d2cf%PcOZ(z^LY|*@CA= zJ^oXi%5M2T=g0j(FKP5J@|Sjmc6b7n=mEhDwjw>676q>QJA4W{Zj|yAcW4!~m4*+~ zWpwGZz}0*zU4QGbVtZXrmV@nVXBTS1w+ZoA9YaQ_nzs=jE9lfliYb((J`n2f^RfXv z9!8<$`8=v}b$jZ(_^Ee%y5}%rzVY8zy_W*_Ub|@l^BRB}&d{T8nT3Ww>0D#61}t@Q z<@wiI!DUvRZi*Ppo!9N*gT=11A|_NRstYXVl)w! z@D7|KpP%c+qgfi5d|GoO_T7-|{4J(9o}@oMn(t;WDbt)`=jxqfp?0T%%9EsgoUWIb z*A_Jp3;)6akqa=zKSk%TIDk1q2v8ltD!JLWWUYa9CxuYU>FI(>L9|MZMvm~k3NnaH zg`S9n8YeN){67T*?gp)4mV~v=T2Q$n%CSraDmcs*>#P4#znt{0t6*qV{r)Jwgt$85s=k)9{q#+&%%fE? z*Zp5v0j-^poUCkw#v0Rmtu>~8s^V=WrbqhQnAL4HhIa+sC7P0LeE1f(<~?3;U|fQM zF%hQJFE;5TVBH%cf{rP-IQzG4pfh;(=_&U@@+k?XlWvk-84uPTnNQ?;D(E~9au_vn za~~D+bpe<>#~BJbe4eL)3xKPtEMV&euDH-HzTC?tiybQ${q1}89=qi!YPiVjJQvv6 zM**$w1U%M?TF34P2BN&&zzPdExt2tVVkri+?e`UEdlH_QC@9r+4pM(YIbxok&kyXW zfbH6pVy|JixL!u?JyRgen^71U%J}R3X(P8(1Y}Q}sEUkxkW?fn@?V+^{NG3dBKH_D zu5n8Fku(lfhVy^D>&M+ONHpq#t^5h^uM`LjW?qlxZmsk(cq9N7aah!*mM#SUoOp`8 zo|$8qxei9h2BbA;@U^~|!#W;`x8Ilj^*dHx?ALT_(McP}4}U;z7MmywVICd2T&HOCqEjoLAloz{-gI`#N zAgT9Ol!dIpdMhRl&1b4^LfyP!vr<^mmp#Zs21JvaUh;c41UcVSY;~fQPBuT*{U+;0 z36AsdOEnuXt_pWBS1tB`2g1h8w2*pUwiPW|pPg*YwV#3d`{~J_zwa$qutU=$5@MjU z;i%kOSuC9D4n&dm#RM(V@+T`s!#mJ+4$K2EtMQ>X_%$)j;2)u{2Rnhvjwu zuPDlwcj+;twTZgGs8m@sJTp6JxhCaSJxZ|p8|?GLu~Pd2%WmgK#GaJw1(HVsM=5w^ zU`tjMwbsFeTGd>T?^Un08yC|Wy6fK+-=2!CgOlpS{)eSq5Xa49s2g{TfqAMI!Z@ab717T*)~4& zrl!>Nt39o{KVo~C$912^wN5dAE(KhAwfg_T8 z&>E4FJOh|5eWACS55M5VY2_T2sP>NynFZ73ta7=^LUh3u(=$JJmo+|7`1k$$9dA!; zJM^OR|&4^_ZF3fh7>w3hk#XU9JNoF-9_I778u2S!KL|NHqW3gbSn zUvfS#Uwe*_R}_0vE#s&BhXS3q%PGH6lCPWC$4ymQzh!lnJ*@-Uz(O{#=zz(D4aEiotE!HW7~ z1z$^Jt320aeJAdsF}l@sxe;dPL9!~!+E}>K6K`Khb_c~MjvC1avk_+is)bL^B;}8Z`i0&>9P!| zN(Y$NvUiS46qXpSKZl#9sVFK%(P^gSj((o#J`}F-G-~w0ev6RtGd!Nho~4PJSD>p<&# z$%2VSX|h(={Kcx|O|wSz+J>=?;D`*^DgT z4uQRR&ieDm_BqtfH(w8!yE z44flRegAolf}6ys4lnPSouE56sKFZ4vc(WzvhJ5u-Cr0Vl-outMf;K1=e~;XK(MdU zh5%b0{WD*WJgVIY3`&3M`*Qox{-=)|drDg<+9N_G$$Z%A_H7&Uu)z7hzdcrcG@|Oo9Aj+1SD=K(cFRo|Z|^h1Qn_j2nNcIx3OZ5Y3ZlaZTP1Sn=I$bR zP=akyzK7mc9!1fAZ*E%&nHqGi9w zUbiYm&jGh=OVgT0=jR4j7KGS8@rpeFY`WBLQiQPwH^tI+N94KI%J5GL6ei840f34O z&1j!ngA|=AyxJB6YazxuN|oZxZ$&qtza4DW5+_4AiDVV5OAM`Sf_Aki!@1S{=TuXY ztB2Va)GQe_D?9);$Z2LHvah-;zxY%xg+~fgA3*QLGhoAUQOT1U|FrAPnW|?UD;AnO z`8J{aJ=T8^tvX$%+%|H5smJR^x^Q7owH4@_=bLe`IwNn?=i#(qbULW^^4Y_QdqR%< z+5c3q6s-SoIV|d3`M0ggFz0uBt^))7hJuX{6+J5lM%Ogwd=39q3Fv;ORdsf=a30Yp zRK<$1l}vprZs5uJtT8b%R|st+E6JEl>h%EkXW1`0{CUSiLKMonC~9(EnyVt@21j>4 zAnX$pM@vyAH(<0H)T9knaFD7>?g7C~pt%yg=9r;A(?zn-=iDqaOI(rDv}1*)n4V$v=HXRSlmLq!(BgewZI-L#nNfdnU7GiL*&NbrQe z1)$r=^2# zc)Zk;zjSx*aFot%Ic$oK%@6Htal)|4ljkq*lR5YMJQZAls>_6Q<;zDo@9E*{msS)q z?)PT=7m;x!Eb~B4omJe)J7EM)Scoz9`}*1-J-IB>x9;2YiG%M?G=%BdI5kb+x9HX@ z2h#DIYC}Umr-N;>!taG`_B3cT3!?%9w4Q|R<%>uAm^%A~sq;4#h(3 zz1w?zU7eG;(8{mQQv)_WJPRk{PG>S}M4xykNqLr`^h40@EWDh%HDFoO)O8qiMgL_| zw%-i3@9-^&n?K(+3G%L2lo~0o3Ip!$G;k#ULT*SgiQAKem#5=Yk{U1y zM~Y9i&^x@gMZ7o|b^Fpim8`t_kp>4{h!%dVvhlN5{7m|f&^=Ez`WuRBg~vwq6Pb;> zq58zEraR6}C*7(y-PF@5&8jPb-jRBfczxPAS(PMmt68Me&x|&TGZ^hq@5gHj&%zqn zNLa(~b&|%#hgalWT66jZGfMuaE$YUZaz^;8rWE7`;J-$Oy2>Z5C`w^|u5zc7-a>;$ zvbeS{a;kF3(iGGox5_{o8fJqm3MGn8A9$0zD_!8@%Z(}hAVt%EDIlIwKj6ALAEgy) z<%~;WgZhT__cvJH2nFoDc9iJK0s{{_*st@e{qEjbeC{`>SpI&QPPSL(D^CNUbOu_O zX|x`VSYq6M&sMgg$gQR*{AAw_XC#IKFlRnp6(M&X7dVe_GgRQOoO##AcqXI=Z@?5A z<&XPs^Ew<4?vzkTYmFvodFgYq+||8X?&*W5=%eU#w$i3t%4Ab!F?~@=M7;-SkJbUz z001(8iXqFYiZubaTLb`r$WR61su4mm5O*l%qmoXq5{?4rU_-QxJu;a(bsqU z2Q|E1@eO95={3QZ#_}(Tdq@6z6I^;%C#%C(d1Kh>cj?8bGn$e9_q~GBeYHF5alJah z{hOcdYMV~S8UGa*Ai&oJ8)|uL>3J3p)9lp$rYN;CekY3qNR6XeV)X?IHUS4q5Fvww z+PfAWup7qZE^In^HL7p*XYT75+7BylZqQhl!p0w>8yULqf%?w#exwUie>JE{MpWG! z+PyCPyY1a{z@LMMDRJbg2;i=rl7WLMbf>lTym@`_e`D8`fbD|}8ETG&0ayNOnf`5N z+rO|2tcjcLunxNHU1w%4g&TWni)b~h?ykSV7&OeUHV#0w{rfI+G3w5 zbkq%)zp~}g>DGCY9JG)k938>%8z<^(>eH8{2DxW_ElYPz?ode_!{%BfHz!69yFIEv z$?B{7iS%Z}_|T5<8_RT69mh6{p4Itryc3I6BcA8_yItX^L3?gA7JBSV(LX)5e7i)~ z3056UTAtXx<#RU0@zFyYlcG|}(aB~`P(XpEq0*;5&E)|9rYM}kV4)$9Vi6CcS?q-| zZb1M#`|q`#CUf)OE?As6KYegg34IJV_He^yOx4hv0r^VEi>tRQd(k&P)AH~4&#xm2 zKR?MGtNVK7(b@m{TAb@_)*tu2bbaSlLiqXhTpMhePnb= zups1JI%R`2YRbfVo79`w4lD7dxeex+T$5=2#mZ%biLkhJq0p>q8EN-!FkI1z^gLm) zWMw3LjO6@%+2HIXw@=Vy;nJwdgxD&E z`%zTM##ZHtF$*!g>3wZ-XMwy`FC++MKbc>k=n~h$L!F)OUHNc{eM_^LG)Vs9>Cl(J z8?7C&nDyEIx;VyD!CD6cF&t`5jH~5jtgc)U=KfA>YOX5uCHil`-&O98M7$$~XBkM$ zCrv6mR01~Dhn&7CsH7yTu+^xYEdNHY0jK&{rwX!PV4PPH3q^1BWs~?=;K=v3&Ug z-Ll?*iT(LIrqRsw^d)tj6cK(h1HF$>E7G$R!*JrxR8QQY1m*^=gw+T`Qb{)X=&jvj zgLw#Q>z5vbw1jT7Po8DB1bZrRo}-m$5-OmDTfTdahcvtc>7=*vSzhKp%_pgPI*EAWX>m7p6*GX#)sMvGVF>qa#J*v=q|NYk% zeeUf3|J^q)DDYV&Kd6=rimcB))Si%OU2kHGko{aWn$}cJAOA`^ze%eedk%g*xHXjJ zs!>#4Ma&9NIO@rTRYubg;SRF)|6XSljk)mulQcwZHp@jONhTzCT6LtX9x; zB=*4>O$afAJsSb~g0SzQ$Zs^h(179d$>}Awhx7RfOXZmRArQG0iT~6{4p!8Wf>XWf zIS7jur2n!c6cD^rzc*S{3tEbyUqd+&$e>~irFXY<=HY+NixnCf#j6(#biBlM*~U-j%G^F0loiN2m9|*TylmFxfYNA!$jI`chxf)dz>nWexbHVR zK_sc&G!vIjBwnBV39Ztp5$UF^%3eYh(2j6iIzMI)c9a==W~MpH0<3fv07C|83@5S{ zwXYEeX9vsAn;iOWaPG5tyRK?5vaI&1h1Z%E?hoAgrqK-Y- zfN>}*(9y!?*~k2PRIFKVkQ7kN+T^A`wuG65HYmgqN}oPr4>~wamqe==MBLOEEG>Dd zV@Fr*Dv&uUg-*k}kNemQF-$Z)K?3CuH%x)Shz4lLxZPirzjatM@j% zF7-G>oOGTn&k-?=gCB_T84H!J7Swxn3?3GMkuwxFjHR+YwbJZW?TVSIW*V;ez`Xuv z6DeEg*lf;wIb%nM84Wp;XH;F(cg%7B^SHvqzjW=bAC0iD;mnuW(P(hqrNlJE$mN6D zto005V34&h;^Euf)b8%GT!R@B54RRtQGI#-(J9xQ#Zmgv_?s4=WAGXhL`XW~P9-ifPQG*< zkrW&{X`eC_ub&j6pZqR#_EyUG3RadK>cmYmT-f0c&kc4jhfe_v!)@f>FmRvMwonDC z6!w?Lx};%@f^)Lt$bWXuZ4kI=4m#TlanWN6U1acd9No{w53DqclHw-X^zXxTAs z1+5RMX(oHeiF;l0cRTAVOoNs$QLu4!?(P6k!-4Uk|0syx+L&BsE z$+7DC7)LGo6`*o6YU8jqMycshY1kBE}ORwa3_1_>I;YkU3bKjrCvqIc*oz7nRj)A2ZWH<+{0G^ zMvlwm4RQ`Y4p$L^D>G#w(oxRQ1sUOox9*GNg6ML_v8;Olg&DF^f+NJ0=t9SVMun*_ z?ee-b>r!mU?}m3LVNs(*&?*@vD<#|#Tmi{e(f=FOg z^|Q8S#EATYGv|i9pb`7-84*X>laI$PF2IgZth58LSp*0xM(&h>+$jLUnH(4iP;2T{ z4~mnVd+up?IIgSgtMWSAjcvZ7LJ*&gA9pJ9kSk)_`Uwx@_9Ef|U`CmB?XY{m z54E=mKH3}L-9%VR6U?3sHfAH(!njMRAi1(jODb0G2AJG#TcDGcv=<@Yps{cVa!Bm{ zB%B!i#g@whOP{H~JGX_7z5yXUvPZ>Ov!*oE2C$K-aKKH74TW1mw@nl=Tbm)NXpd`C zy2hplyvJ2EfpSjvs)=ZXhpF66x&4tq4J*;vjDS;+468Jc%XR}Y$^x{gQ7RUk_ACgx zq^9S)BWNxl=#GJMxsme2m~G<~kX>l-E_N^j!5Om!{|*2L5EU0#sNQwlYggpQ7=85~ z$F> zt>YB$ZV@4t0!XevPQME|Lq|=U*8O(MTYk@zDTw0$RNoHJGEU*%L--a09x$G^NUj&M z3Kp8 z$d~;^BKH$ZUP$2fqbx+VP~lXqPBcT=zDuT$qhfbl%_r2K%X6JE;DL-r>DQpqO5a%5X4|g4C{#QdZTR1B z!22OHQTsClGUF+(540=NG!JiM{FKFB zpKn@ zdjAW|>KsuiqC?;1fU^i!3^~UVn4Y<@H}$^kpMIfAR)&W%VZ|R+W`K5$4a1+Iep|=( zKTGe0Ho$01TcSZ0^U-B}VE=aUo{j%mv)LtKboAk^@tZ4?2a;Lv7Z_bO3(gh5?8(tw zDg0NlE&X5gQLu9K`VO2BG}P{(a>F~B==|ynEI}|nr7d@a4m(0*-&*u$Tj;f`!Qdv) zP=L$0@>P}mZ8yK)b2}F7c@E-j=i<<%c$cBH%0@jH)*o9zYH-~Ic?Y&l)~7zKkDZ%( z-co&P$8Lu{5$@pNZ9BsN36G3Dg7(dU+K3;_?sgA9A4R=Zwj!&O3b!ZiH993eWr*_L zl%F1#e@d)<%TO%0fpoaR=|pIb=*V7;!QTHFO@~m%uS%lEA{N!2Nd&0XTYEpOBO!J2 zIU?wqKxw;(_O}}9<6myCT#;qVi1BAbTb21Q=A9_fQN#7E7uL@aSJSNWI7EJwM#Dbr z{vhm{J{;3<;xD#txIfBLdvl8DfKueiRG?EDD(W`VxtpB&v>TtL6+kQt(1SJkMz~`%F^tcK#m9P8GC0jA_~_Ml`(9%_;8QA% zV$DRsm9y?Blh&Z;-QJrAx11BkVKz+ImwDJhK+ukJGI7jV>vhr|daBp@gf;GvD*SIR z#^gCC@OB~mD@!rl64ii1_Gszf63ISAZFkTo+5w?QOshvv+~0LN)aK`XN{WH2-}Io? zvz&ry-x`AN1;f1?)86?Xyvhv=UtT+AWAsg`xGae1y=m&?SOf1Ed?qxyCqTVsC_WTH zll;JZX>PTY(o2?4)2$o-)iKAS>b!V1+&2AV>V+7sIDwY`DgvJdD9M;5L)MJ9O8s}X zq6mOrHNcm?=2Vuva5}hlxbgnp-un)6zW(l~RmE1GdFW7PjQkh-bfN9jR1ixD<uhS^rjc`F~iw`Nm9#b`Vdv==85c#E*Wdjs1M! z&P&sA%agh@!B&I;d+?$vi>F32@<=6QzKI1B2jtq>i_>MWGK}>#3-mw0r87F)!0-uC zP|)QJw)VbrT}G3;$Ulrxe}`_dH z{no$QANrg=kODtsD3aaBMC85?8af0<;I&m2il)CzE;o#6Bu@y#(Zz}(x-Xo*g&)^I zDPA#}W360cKwBR|PXM6KT}aA?eA>p*CdIm^W_elnUI3;|jz;s(;6UCr^2b=<(QEGyUcR6N!h{W5EpT-so)1G2>Rt|UX=ub#Ah?Xa zE*O_H03ae5;P`bIARulG%L!5Fw2ost|MpNs5u^ft&-tmkK}^_DF@EUTyRd{ur2SGb`jw`v@#`WkM) z660)~i^1&hP3c?)h2aSr_@{rR%>d1$RK z)fWB0(@96^<_?8CLPUQ^rKm5h$Gi68(UzARmBVqhc53r|UW>V?I>*D)t(>ndzUS=@ z&fTT(;(!1AhuK0e(|?Dk_@7td-5&u2FYLBmrK1ln9r$n4;LqE~yYB9IU25~wSD zl|9bCnkjO-zwnj)(1?ups5 z94LeP>z&rIyI+hnm``Z7es(W>zdmNPee2eW9k+--N8`e&FxS35CNfS^W>n2+lL;Bg zGc;0wn|fStfQRlo%mah=>D($-+MQfY%zp9v>L`;t9Nmn1PkrS6HOd233?-IT2~&qa zsq|zZtj6Q%;E*y#drox-<^@y>N2jC#WsvDlWG5Mv*m}!T9|1AgsmO6fJ7mWglv93& z$K_#gn8pITaiXhjPgScoo?BH@*j8*4X!2&*s(;I*Iqv*xLb;hRM`7P>P~t$2*&5wn z5f3}xRA4xZ9>h?VGBX7}d^A@{x6_BWK;hG46z#MqOhpwwnFDod(ayv<@eNuFNbu-I ze5;mPGlBz7b#*-Ua-TToIxXfoPt`er_d!*mM?S(46gpzc*B`J%JNoNCF3GIZ?(4Pt zyT`TEdiW<(Fp8Y@YA1gt$*D(m52;Nx{GIjj z`kn{FX#)O@lLmKwTpaN_9$fBa+(4pht+!Xc*Rr_o<)O9x-e%ya_1N8ziS^^O_nHa( z^X^tiS@4M^MpMvYGbvDE?^-MU7f;wEu%;mW=>e*}3vhBf%v1+x%cY(V?|o49bZOay_>==*5*-u2{0IAT)%5Ed=fD*rC8$o?poLNb#LIf^I_3Akz z#;A9`p(TRXKQqtVpO%BOnuljSzj3j49OCjz2(x6^D5f~Nk|+A^tlynK`fkV5tXbu4 zzgkOo?P8g%5q@9N?`6QjPI(UWhMjLtNK|jap%3Y0@-Dd&)e+l?jr!Yx2TnAqS)^gU z$0oUax_0Eu*8E55mY{Mfv3R@Jed4yt>G@s1URQceFak>7EE)ZK&Wo4apIB;CQ?lJ_ zQMF*1qn{;(9`#)G^>&&1@1oOlJEnlEK8TBWHf>P%z4g?_Pp;xfFx6j35B`xVx!O5j z;3=Tey3;}m6CBMM^u^FV4Ja@CcLBrtyYk=pgZL`ZE!TQRWP1K%&%+fpnI-WEo=@?i zWgOftYC+D74cXSiK->4aIp%d2xMdkUIo?pFU+b#2!!-?ly#u)YMz`x;5Hok6k7>xe z!9yhra@}zXMM?BWIG2{(i$X?paU~Di0_N2?a-&TE-nuwz7~X<|s&eLF{aNLzgEV>P zEiayCCt0^HA10^Yz>|}*@`Jg`a%KA@6S66$ZHF`=IReDo^-9oI!zT_kk5Gl@US^&i zvWm~|a`UbbkW7v$QU$!&Q6WEX`W-rTxp2F=je~>q_~C%4mu`LNc?Rl+>Ii?G_ z|Hd!bevJd;1cqwcCnO^tEji}p$+3I;s1K|AXyFT8z3foUlH~Pz%1gkw?Ha{pPbOD6 z)?u5mVATcdX1n_4C?Bs8qqiV%H_=j=`S437b<%kVnO)%17fsOvO_)%7+o6`v#|des zzI$l~?gJ(#9SW10Ppsa%koNS-k=ekCi!`NU#H+3Ue(n9uA{jHM_vl`!+Im|(9eLT{ zW@O+qK#*f41)-Pht#eB zQoZjAcgOkefaLXZn0tXx;A)+)nWE? z{onzsHrb9gS^hA!mvzCXm7$O$J*dhUpKYYHpg7~B2}nuJ-J9Yhwc8J~FWFt|A;%%S z22m%Apmpy}ni1JLd`16%!K>6?Sb+&mH#F5c`%weJg8T*HFTDNmv|}^Qu}`aSqqpA9 zeY=7+Pr}xbBLnma?!jZo#$)Bf!JG)kn&a6nxa#2+TM_o^!zika zw%);(Rm||ZFFHC`v7Hgq7%`wq`&jEH496Y44i6@McwBgCX}%-TCq)s1NJ%3c?TPa} z`rJ#GOqeitoXoYK4Ny!;c>48|%yMvY!&6L*g-Q^;&2#@hj_$>u>HdHGxE;(+X3jIC&G~H3bEvi%<`{BLHIkeg(M4Bv z*}?gcW6qlMAqlCFYMVnyg;bKdMiNpH1<55O61i{xPt`c#wN#7ZUxCWC;4IB`Y&-+bSZD7iNEz zW@|0wA^$m8&U}vm5Yw>Q`VcQ3SC7P2Vi0t_xoO!Dzo7C%ySG%ZMj@2aq*n*S$Tp0L z2I|{#wQ%))Lm7}k$=)-=+L-RXo`ND`&qPU;XtBakg1b7!&ZS5y4uH)nLB>o@#$n}@ z=-%=ijfu)TIq9Is!n}eW4t*Q?f=-OE<$98GP7bO>Mso&=un#8L&d^*c=Ko+O2R{}s zD1$msX%xkN*QfQJ4Zw}CEWP2)3z$2lAU-Llt+GOIQ)M%opHKG;o0d+S6{A zz6J$bGup1@NDtA6lXEnfbG1Xew+j{qUZghFh9R=^di6r`-4$|zLOHk&$j7Ss55-bx z>9XWWNu({tVy4hdOXsRjzTrfzwKqqf{(nrGVbNVeJK)vf8?T;T`XA$lGA1i=J9Ft5 z*aMUC+DCx2z1LU?f=7eT8Wyj+%WlSYoIPCc$&^%rWnG#+;QZO+(N!wkMUfv<%D_z)FjlcdH~Op zDk9JKn8%E-^^o-KxM53Nrx~sB8tm=uT!S9f>#wF8XK#D1H_m-kL+f!X&)E895AKry zC{C~`JuHcuLWRTGiah(dmC8c>+z%p*5(8iyWb%%Q!!Q7UbA!7oxrB5O<) z*8viqGDEfn=dAHsCLHZ@n7LW8MDtE)??lx!ts<)(Yf%I;E20_?^cnVmPO)427O;Or zqdI$Xmd`mOIR$?;*w}AFtMw{M&H$7L4q0L`?PyrxwsFng!nDCe@#7n^RaB`ok!A8k zNwRn5fhCTo1otDRCFWeAHR-xl5r>*8c`SYQkD#ohL@ptUrPU7jnJtq(Dw7+dW{8nW z^v?8-D$m#|Iur%|yCb8(2LvxJdP^uqC!&W&Cki!W866o3ym}|Zq)M-BJVx%bg{!OM zWZAszNl@q4<^Jx_$wQpd%H~NhEwf&jDeal{^TVVm!MfE$;iN?geNgVu!wdy}CeF6> z3fHYo>ozR|-%&eN-zXWH2T7^q%2rC6P_j%mGQ;)2v6@_2Blm(uMP2uaKtRSVt**oq zr2`6(gH3bgKqd9z4Dv4b{44H1tJlNzv3Awiy@o2)j$Ua?I9NM~t<#R7djk$^S6UY3 z8w{}9d89#Goo`5_abNZIY_9f1z;)ux^6#Nj`aPmX&dB=hXN%9xG$AQd5 zoYZ$5cf7h6227rBWO!sh39pDwEGU)Fn`AYw8^Dd3Dx7#AAHdBED!4V%_`3vtK^D_& z(Zg!!ZJ4Z5jrb3JA{U`^{rQ4c`+PEas!C14a zOmC!SQ%1UXE)Vgbr{EthNozAO{I^DX5#n4^%}M=={`3I@v|QZogfgqxh$WlG%>#JWrbiQ$r2nx^d7>B5%4H@{}Wkm=yqmWs?@;ItQ2vqa{Us{n638CC)c-5 zxrqBGF)MV}0zV{q&OrT&2=q5$PBOThQaY#qY{EdTI4}hrsF&F>cF&}|xcI!E#ecnE;5Y4L%C3V_Dodh7C7w48&kkHtf%+@_3-$@R?I~fS=lRU40Wwk| z2&sBFk@4*HF9Iq3@{>7Sc@R*B2yN5HI)yKG@T&yTAnkUx5t`$_4%Aa%SGZ>1rQbD= z8F=WS@%J3=Q7`<;UNrQ{zeAZp!v@~X6OEVqXCBI`=JZElHsO-neIu`Em9}(vp({tH z65E{(>L7aE4dz-c43=V`nZe=*HJJXpr}PAC)$-Lp-0UREWo;6`uZu07=(Y%&DQ(xR z4g32>Hn{7yk2^uj*q z*8BgL2Z>vUoFo$z!wFk;Qa-Q2pPrRxaEqi8C669{W}))8MXw@c$HMVL!}uci@Q&nh zJtE!#+;zwQmY&Eeh-DXo@eQ5%CL|Je|5n>&<*1mkQxCm#gN7T3fcHqLI9S{EP*P5w z6LI=4g6D84!e&TFUw~~+0lk9YUfI;mYHBaDDs-NTX@_R?k^;jKcT<~mCYF25mW`tJ zgyUulKSOGxePA}N@V`S%u4OJOX*yjxyb@XlPhKW*c)8D0oo_)M3;8NTL{KaXdS|Bl zMiWS!`MHA6wPZeb3sp*dZI*)><}&j{K;%`)E*>UyqN) z(*<=1vKd)EPXG8H8a46}`d1tkO}yvlCf3?I@qu$IgB| zCKFclnjroHOI18db@CLy+?$Z={USB^(31&L`<9;Ht@+DITY09!<(q`M1?RjOv^bq* z9R*Zq=eQYz%_e{r*`QO>;KbzDp3%4n#pD|l4TJE&#@Bw}d!JJTJ zzxubwHVV96&6zt=!D`42%&*9tK~$#$J_=d2(NHBapw*dW8^?8?(Il6k8`0w9S=jIb zHch``^dH2Gm-esyI&4gBCkfnZucZ2vSTs}H5uBYZ%D%-c*!%i>r=8B(@CB(2yx4`C zle6=l?NX6DpP zB+8|ve@v^C`m^$5T2DOQD(f`;-~j}}qx!l*CC7s(d6JiPhWImW0^~&G{uv~tS|{VT z<}**QxPMnF2z9$O3Ct)eD*Dax56bvtt^Zm3fc%#)UoNU+e;0X5WQ0TcMasX5|2XK- z;`+Z=k;L!%<^^l@8k1@OgOu!#4RfFW%aq5#$Z!n^Lx$ljXH6 z`V#AT(LwJIU;yjo+o)4z@CW6{+rN=d8oHhkI(IW8wTE_qw(O9SF>X0oGvioN>2w$S5)8Ju@ycQokiO2At+cgjXEP!|6y6gvQ^q%s{J)|(C44hYJMhSH089z{Hipx%Y$^@O zDd&x5$a-0cz-kFXa%kRv{y>Eq(>?9%ZYE2S#IoA`D9_ir9n`2zX4OY=jflDH6?;aa zGvtssu{*5=tSlgMNaq}7-;Um&K`5v0oQTm_f!ho8^33H5j+cAq1yyQkAkCCc3`TQ8 z+e`>EtmYZEHN&nA1hr3CO@cGsTRU6WDCF@3nG|qx_ znHYLQuS8XR=4r&1hicSWMWWQ$(5wa=rNY}4k@ZQ}E@g9Ru;$c!z5SnG&rS{$PlpaA zFSjnwf%Uv<4HMS9W6E_e`CR;(dbd>Y?#*3-%X4-8l2zlSfuvG}#6L$}%M#b_J=;m1 zDs2;E=2q~Qw^@Du8A%yQv|NQ&pDQ|tA#uOV^`@$A&U{+>wX^0~ANtOq?!$|X`F776 zkDWfG^e~?FKYAW{+w|C9Uw=RAlxHtL^^$F@LmFClvc* z^}(MfE@eu;>SqYYOJ#n%Iy=zrJF<7-!T3KH65lTLKIlIEzl&SjPpZsRS)Dd%!g*yp zOA?!kXG>|^z?*|t%;8+w!WDRiLVZ$$F<+t-pQWY|rEdMiiBo8Ep@>&#zR5W8%4n8x zJ6D;4DSd)Ct#5wGX3j$g&bUJVk)vA^{YfZPQZd-L$YNbqU^~fVpL79frd+J4ud$t6Gwe` z;FpOLuKqONSq(+$p;3x{eBUG$6~97NWW|-Vszox!oaK`&g_HQIX_gRAU0^_(rTxW% zDD$4#2StdnKu2{iX)8?4dXbDmOY(NME0et9sE}U44-^loY|Yq zr%0hlQA3mP;)tR3fn>0+WR3gzRiJBvQ7;=2OCF-B#v{S)YAmDh2aYEe1>UOPZiRi4 z3+xe$D@s=tXJTWJK=3~4Sbz&IP~d~6m|p|Pxj_7vA@^AeKBo7h1A4*t)jq32QOW(i zKKHU{zNL+MbKm4}u`>cWHU9;G0aEOUN*T{Je=T*`fjV9CbWCR!P;V@*{7WPu4hTWaH1LK9+i4_m{fe#+BpLytu)R zdqbQ3#f_^0Dql4ID}_haLx%s_o1f-s%AoObDLt+k83i5>wm&o)B4- zEr*Ka=n#z%9Wg;ltK{pYM^_n%>GD|gINC-$cbJYIRYXDzt@{NibqQD1xgM}xOjsdR z9Hr`;Ax1x24i4)H7@6luDoJ$aqx9dxzokHBz*`=le>XhAP_NgujDp?^!`nLXvMK&F z&q$`gc|kEd-zW^9;}N7dN0hSKqKJ>`9I@48sjg4~QYF!muJByP040aA>>Y90d}m-o z1EN%e+0~*RHha1cehNFOfxTH0c8!3}tIl>S<4Iy@=F(2~*txxRg7*g6&+coG3%XXs z?U;3Bi;V%}m||FfSYixFWyxpqX8l$<56 z7d2*A{+4dD4RtCEJS9~ta?<<*=%1BW{nq|n+yk2zBM>`p3+WhK`+>on+^?cy%X1Ts zyo-u(#oc%`OS2+by(?ZpM2?Fgk17ws(0C{)t$#1)|m*33j7%VW;u-UR> zJif@HsW;=)M)kpO@$0Dwc&5!|0YcV~ihY5}wM*TzxDwj~ggfH72a!G?UFNddd&ama zm7x95!@vy#o+~xCnZK6;QRwdJHr88(saOkSS=(dAp(1w0?p8rzC!3P4|FCq>0~Uz} z_WLnm#>1N$>z)xUzB=x)t+YtX99OORlaCyi+#K$1vOs6?87&(siBPz zJZTj9Af};=9>qs};pKfMvs9|-Yq74q3U47IQ=SNx!p6RAn10q#L7>(CZ%3tB55noH z6oj4F72x-7_L3QKM-b63I4X^MkDOdrPy9PHp?Y%bMyNsBu%7Ho6e7AWd@<}uIyMIl zax#tkPhRh@?}n5oW|#h;31Ci4w$`|hOyYc#`WjJ6TfHGmS!`yTg|98#H9D7pO#~8qfi^4gcqWy`Rj{_?lpU3jvrq9v6FTk^< z6WSc3-M7x_n!pmXP>95f!ahp}=lf)@?_8Y&aBo zaZycLZxz3Mq{pLTzv}9EJL$SEC`KA&;W#rck)xjUkqgQk4cnV_*MfA6f3lVKy&dULgvcR&;NQ&6Y^%udx@?(CPHh^?V) z54whVh5x8@ET2*%x6^B6a2Fo#T&X%g1C5>xBmBsnq%8J?8=Z?7>yP-#+v?9j+&lfMt21w^ zL&3OO{(Xj9!%0dXlZ~lNhh?*{p=>={;jIOE9C1O#n01?1`A-4(+;@+<6s}88E>#T0 z_D`w~BCjGxt?Q5zl>o%~>3aMXELSL#&%!C>T1Drn1|OvoD>=Qv2MmzJ$kE3=xnJt? z=<6kFal)~lEBE|H`NOn3mNbGOsP=oQF~(Eaz`5VSIWC*wJ3L}S@|N2}QWl2E3g1=% z-H&9A7?Ry(R9gXvUFO~B=ermp?SKc*c_LP8_gnf|t^#$>vrTDi-G7Cs_H=QLepRnA z$nMqjw~}BTe}dwi^c)blAwuoZWQ3~nz_7u(BZ<2Zph|s9QhGCVioa3u@Q8ffIA7vIC&0~qqTJ6&1Jh$AjC)l6h}6ph2bu@PQn~H zadcH|dC_p#WYrq0sCDukHMoFmM7r#Oa+>ycJWCrfoL`b%bu@4gxj*9UXE+)gy;u$P z)+l`U;FqVSFSHi`dQSuD@3N~c#b;@=I>X#=RRW!X!+Sh%u{4yTHqQ#|q{xeu`C28y z=GQB(G}Zi^p<#rpnDx#FH>ZzQZRb5{=h8mSmJX7!dWty7Dz%Mtj3paA&BCX1jl$rn zX%S7B<92dxKhx5`0H#(ca8g65%M4;Wy8cUA{RoonCpH-U9$IuzdM7+oe<3a97R(wS zn%0pIP~oq>Bc0#ma-4E$Ko92$uuDX|Lce)ux!PibTRt&Vb7ZpR zEI%t80*Ywl1gKoff=XRPKlp+FV8w7up~a>QWZw*z`Qh;_K9LXPlA%U?h#$yO1dQtp z8&6X*2@O1D*%mp_8dH9iRkUUSr3a@7l;>-L31K~6j+SW7>6?7?Jl)GcXusfSr@%3E zaE*k*?$jHc^3G22$wr=3Mhpo5kX*$29lM=6JJ=;bL6@4G1h+5K>rZvfY>I?-NLD94nicSi&n{#z+^Em+k!`{(*q*3j) zQ}iwYtRMClgCF!rZjzxbHRYrd)&NVF2TH8wzWkH&cJgTW~2M4LdZLyyTm8LHe-(m9f= zjhy4|As_RC)q(HnivEJlBhF)8@Yri}??S6phZKtd-#3r#b%u192G!N{+UfM!EyeiY z%$KCP&mQ`TpE1p*12~uLjL0(Epo80d;407ruQU9^G)=;B$hrn%wG}b2hVx>kW1b9q zf$S=w;$P9X>|ygqx*UVykw6`^Lli7<)?V6vyq#^?DQSz zl<`ful?%vLBleY^Cb=&0%&-v8Ylj)hTYmJoi{q|#W3GCrU*#456J2GW%lad^fh-SU2)miu9^Wlvb7Wm$>Fa0;h zw(3>#>r{;7t6fX75}qn?MjMhx&wqMIouIklX^Op5^mUJk0i+@;zqJfg)BBR{$4xDd z-lsZR#XpYi>Hc7ceLBBtw?#ETvaakL2k#`1?mK~3LKKF{owMEB^?s7AexwmB55-D+ z$+0=lv7GjXA7h(W;^Ee8-TcnhaAwEacF3cADfBMajORgzhe}y?G;{o(}^Cs z-hDRf-<=k@-z{4n$xf;t7>$l+Q+tTsAS)(lpHh)qo8>+%dU$NyYL7^U61Q(3mt|k%Y=^W-=F^+cG>m= znMaI>|9z$O$THv3flTtWKhFEcWn-dhf5G@6&`sBUhb*_q`*KubI!$EvaL5}okSAW_0u}nJA@0r&DK1gta}*B95-Bf zxsDpWMUzYTD!^r*i#3H=i9ZEQ9&Ts?yfAZ?C{z9#m+-l z_5*SsKrQSqdaxFO3AC{f=8uB7kI;MleEUoDU23MGxXuHS6~et$PTQ}MRn*xS+C!O>a-v|IS#C+SF< zaQwvOSd-SQqCg)i97*Rnwfg`dNp1cc&;6+&1Cmfp0(c+%*Y<~pJeQgq`^OLJ{#I3L z*KB6#1{teCzdUA)@&{OZh{{`b7c1#qENnhyUwb+~&rXrxfmh4_<}Z6c?)cyL)P~E7 zjXQG;D7lyq`45{*$mjFvMD={h>Ac5C98{Vt?#yRhDzXi(_Dk%I$f+_&zy$>RYKt$= zqbmlAg2tvxtl~*_(*v#WIs>^wGiFa)3#!V`0s*;aoLpTjLcF0q7W6C(J$x-Htk}5- zuN>Jev4iP_*NT6mDXZ+e6|Jem7yh}j{r>i6 z{lCPwqX9^7KH$Gs5yg{e4{tPB2G-mj+8pdDgz1+N>*jlkokyZcTQegv6r|6ntbJE2 z7VTNKRuL8Yb-X63v3Q(@viX2X&LF(xz$@K?1m}# zrw>i-u>a<2+pq6zh1;)4G`H6Dd7oILtj@j2za!V=c>S_hU+(Hiz?`96XIl(tlRk_! z?6uN3)1^Vu+pK81YCZH&E5|nGYX4J{T5q+K>cd*OT5$-}j_=*84ugN=UAi;y3G~)| z=g4i}YEDm^=~e}NoA{J5d4%{qGhmaTqwKe<`A*&^Mt}8gD0Sm*Df#Cs|J~&*8=~N? zeB3rA&Y){s_}&z$JAzH@dUH(wN^N0e;B8Njow zLn*rZzf2yw0ewiN!AY+g`3GedV(Y z9aONLVXWFTLT!&!EHa}R#`lb9pn9R00TzmwE`VRgXL;|nFDsv!VZnBZS+?y0Swb)S+M(@=s?#=sU(#IW?l%?aoW&hDY%+L=Ka;batLY-(CC-Szrb4NRMCOFs zZ;X_67tP4)-zlAG5xaNEsqy%i+(7)f3dgM^X+yo7;2%`w%b{~9Hhtu9weNG=Y+oc* zqDC6KLc77+In|z=on_0WE4Op^nn*n8T_)pJA9vLt0LG16kTebS%|x-$KzP8C{DG|q zlu-{wev8~MUkQM)CSGW~xz$@xsWnlf1v~Ec{Bf&RQfUtO1vWyMDNmn`ttA5%b}(L* z&0jUI%dI;yN_b@X8%BTDzrZT_7~Xic*{HBF#gcwH`?d-hArlr6M1Pwb6Qzl(`}8el z-Aqky3EyIs%_i&=Nf{!SK^FU|3CzQTzS0Ev__oXbdkqbtGb?gGHn@lWa?6jf)K!^R zk?JNa-#L^o%q!XzU@GCc-xogJ`e%7Fu-ACFC--}5gw@rUnHa*&*34@O1s?``Uj)k3 zL7lG&Vt1n=5>SuIX?ypBWEqlqsC{BPI*aODw&f<{zRdt2cn`Fcm=Y=9SQ21Hy4_jv z3I(06f|QT|Rk9>7Z{C6o`<5z^lP9d~{}jmEW{7v+5S;1X~bDq_ijRI4!2Vbis%r+BRCi1zQ+CoXEBb)jHHP|*$B?PaNqcE`LL zJk)mkBRnxE&~I@P{h;#NL||36s}9h#w4AG1tQV}fCLWOMqrkG5?vFp!W;oo^GF|=+ zH9l%SIa*|67PfIeNCRM|B{WiJo0-SJtT+85B;#XF%0hB9Csv}4WoU@_(&q8ajk;>x z0;k6fQl$6uz74i(%WB95Nn+Lz(Z%N82rTNFt#~gxso@1=Ofk+S(7HjsI!2M+mh9%D za!yx)7A8*@$j1Q`{dkCQRtI%io*1S;Y*_3v=Jv(IB_m!96i~nd`6R-UPQ=pQMEtoK zW2DO{ZT^wt;x#M2%k@>y?kR8DR=m=-bpMY>YwJDqy#gf>AbAfD#)~8#13)y9#8w!< zC=7jr>m~`>;wk!;cUw%&lTLpmBy_#@k57&i+jk#sn$^>YHU|%MWl$*V|B~UdHpcX{Z z5o0+)jVg7}0Nlv%Xm{Y$gcAGYJxJ>TTv-0|cfoJE1G&uo2M7|j%UoAvj0kmhsxT0-r3J_2PRj4&{$YotyvR!q$|E8qrbCSPNHQrn>%@1Uq8IP+TvE34=Jtin3mnDzkTXH$}zC>FOW5rJb-1#0^^0LLO zBlKBQ;DOShq=s}qup(8Ubbz8rrznv2#IjyGI1(Ti5GJ~`--pG;=w3}`kSx&-&24;yn$ORDXsK(kKx)K8 z&$2d$0g77^(lflzwX+rmGb$}m9pR^|q@x2sVOD+NG;_Locx>+tcOMm-&n zX)5H(C}V2C_tNNeFivAaiBhX0H0#zT?yiL=T{552Xuz`r<|YlN8Ip~M2>6)eqcEdX zXVe-GnT+u02wf1tH=|Kv zK-tX|fr%d7xpWyWCGkM`L@WGqyG|2sWp=UMaENWn_BcKhUdj|TK5x;S@z7#u6pw${ zVzWFNY2EnjG^IB6HHzIPOWi|3O^%?_OqK}|V0;NFeUA3N2JmC2aN;7I2TPutOn-*B z>%6?DV7aW|MWIW*I|O+re=%P1qR7XaQdVuC;1H(Z)?jl%UXgR=L{{mmiyK=PS1{=`)*Bei1A1(V=T>H--u^u1n&5{-GTVa|3$y+QCo+qUsk}z79 zI0gWuiWC*nL8Nqm5gpaR#sXdZAweXoZ53Q70;Bbobs#}&f=Ws$hEv*=nAj&G_?>oyP#o(a|tj)*E$~a1ZLcVnOiYBk$ zVztF3ukGOc)xd#S+1!=`Q*QT|+PH^ia$rgzodP|0Nw|)e?q{IK$>3v@J>Z@xsv4-X zI!O`x4~0oE4VDI@F*tNilHC=c4$>~(@G)eEblx;z%2?)vY@E2tVbu} ztVZ9Ye^PFZ!DLrv|18G@vE<4~vT&B1M;OL~pgRfx67s`@P z@>WT9kuq6UmiuvtzX`KBTW|yViI_{u(;zx3EfrZ@JGW}*qx3r9mSf0sr_M8%uDP5a z|DiktR-X%Fy=i;LM7`fatKfbW6MhxvX<^#K=t_pzNI^TInj46yWbt&@q9Wgt+1Ax4ftpt#-?#YFL@9Mk=%xxf9etKtu5|i%y2XY-o_2Jrk&IDASmStz~b3D45 zAA3&+!6l>C$x$WBS}`qfYeFG)oY?hK-$6oZu}k~IW6ggXnbU~V42@{ZM&Qwv_}!C| zknvHiKJ>VRo|`KwLIagLF3Y7_kbtJ6`W0@Ajbr`C{dUpoVq%iPK1vmc80d>U)VQd6 z&N*OLBXnIDVF_m%or4u^m_DK&n^++ag&$poXx%em*-tg~Xv{1|X$^0kwP>{H3J0jz z6k6Oqz_skBe9ax4P^5}==RM+0)rO9l-Gkj21={i-Z%_y4M>y4;N&%F^{ycP2gVGR* z`jRw|mvvkrf>Nkk7|UWo+Y9TYkY5*U0aYjOymw;IPL6pODQ6cQ{!rAiOkY{O^R@Zi z=sy%=+mc5|N`iY!YF1U0VwEZZ$?IYJW+>|48j27vi$2%f%tzdN7Iu%~uD+{!Blm|Q zjUlE$mFE4O_&2cw0Ob%9)fR8p4V9{ww=P^(akvtU;jxsU!N^ew>iJcrhXUGJH`RWY z>bO6(#7lK3Y@>*Sj$ql8@L}w9<<3H}kB(Y0Lq(O<{jZ~b{tx-pGzFdWo$plus2A4f*@^I-pHjq=c+LZte5s-Y`{Beq$Oh(6Sa_oxkDj9>swpO;ZQ#-Bdf(SS-3 z$>)H&|7qRprdawG`qjbj~ta|HD z7JGU4iT$Z8?rrv{tI10zkr?-mxX>&$+7fnd${0Jd{C=RhVq{r439zQ$f`IZ6>jb6W z3@JJvEY?uh7CbN0oF0$JU!1v>pGIb06^_VPaz<~nwJ>MBr0|le=hJGQa;2}bumh}7 zU9ioiyp z4jVZpbbCOz;;QGq zeA-F}gCym&Cc59;VdLHjFPjjD1YCrwPA#g&GWsdj{vy)0Z*{UvE%0i82-3(z{OG7M0uZ?jz{*Omhn-N_|o&y74Shny-v^59r148 z6-<`?jWtw;6cArdIOm1i@haSt7t5X&S{EwX6vP$y%cH{Haph&yeRf5Ta#sD`G&y5& zhMx3&z6q(DWZCPidU|-m83(jop&ved_hy-4H>o63DXHjWrrO>W8ufvWhm+id?(L$I zRh?RB5>)3*%AD)rN~i`zOJkb|r6zQRLDb|0y+sHUn&q6MztJoN=icR=anvxVpH>vv z)k}4C7fEEP`FF8KsF4a05L9gUAngk3Wfk^Xlg$zqUrb_&Q z3!6X)%d&Oz0n+ReUu_`K}kj3&6Yf{vP`@lH?GpSjTwT<$c| zN~rLg^b$9nnl0xkgByaRhjBexIyhqiYi_VOu5VH=mPJ+c-^uXxFg}sK4bqxgovS}z zn7ZN?eAp@F#JumJ*Uv*!K4w@QyBH>4$jG{IwDMf8C+B5UwVI!BwtXio zqCX=r==}ml{v} zbE2geqUL2goUN8O(4eJn^OrD3(=(wD>O&ioj~<{AXbhN@7T52~hf=i(r=q+r2`@E7 zMb+9WS_U5h8;66hdI$ya86QF=3I3{^--;dMXpyZ{KP-g6HS&u=?au|NGDW}~BZ?oq z0p#o<9I+~<9hJRGmD)@O9`bLHR^yba!l@=+8PPBaBv|SdIg4Hi&}44=)#>?4Dj^$X zIh7n(GC#{U0w5V9@{x~Y3Nz5FL4VnWDK6oQ^dR9!+d@Dx#=f1H-Y`^#H-!+#%&=!o zA4^LXUGo~?=3qVqUD(T|)dIta$;Msq3n8P|6wY?;&w!nvH@>6>Fm4oLrXV|-7%OSlwX~c%FfwIuk!-neO}KxjA-C`{#HuY@`@(!z z`I;v1D1ixGosfQQ>7dt#ILs#Jn1Lc!JDjofO6McW8@pw7H-aC?yZo z8Tn4L8$Iol7YBN{B6bcQT|M>(P`;a_bTBFU`60Q)!$s>t9l0L{frwyv*rC)Su0)Jv z&mwnE&E$g~E^1}~TsQv-zX$snl_=-Vp1LY~^9*;r+|V_oPYZCwP13x((cpsc5a>4|Zfc_2Tr~ z&W3_+Cn@T`Te^|-HtAez)7F2NJy+mEGTVNdNjC&z>3w05i_I#J`ob)#Ca3R6EVHqG z<3|>I8jybC@}6GyGCut>A}TRFeSgiAp7Sii@POP!37a7p<`9R!X+pv+&bMO zgwwxM5DUvPR2-nwHCwoUb6I*j=XyzK3Ou;o_fbnxWArUvW?>uwT0l}dg%zks?7eb( z;Y8Cgv1u|aND?U0qX^6B8qlcAGfdwKrsFstqUPn@_@qKfckf-SBun^t9^V0iCx$+!%j- zT&QBkis&J|SLDB}MKRwY_kAMmkZ7b4(4Y&;Ru+<$xulg?e$dFB- z@k5}NILl<)1Mo0jd2x5>S*O(?CF8T^slE_0+H>HJsh%D)gZ9+9h=x(M5wa8ZaU z;%ZGZlz;NXfu@EG&TAu+duLM`I`m`NGhoaEV6+I9)B`)a?8-2YyN!k=&Bi9*l)a4( zFPwoEFkuEWQYn0mi+;yrw4wXwl&u-cSq!WEMds?gvl ze1?V)7zkES@-|hED0OB#!JLI&S|gUX zVg+qgY5qz>=ciEbzh~3~#m5|o5H?d%R>!?Z>)3-5>Y)n91bis>r|h4-L>|rJ&>u!h zi7xy8A4T{5mvsBK0bBtQP!PclDmZcD#*qmw+&FSqICB<`N}GbXN8mQK+?koVGA%2d zxiVMfs@qvMZ?$n-ncv6fAGm(|jMsS`=lf{0!PcqnD5ji7LN~3{)oO_b>vkv8QSF|3 z_Y)lN4eA^@rS~vVFFF|pttRfJd2xC6+K;k9Q>INFuUgrEA>sI6H}4)ud8y*J%d4A{Or0VDui6RMLj~!Y8si zDEo&hm9-^Vn<^VB%NJyOmgKMe(cG&NXo=>@rYLpzhZYmK~IRm97rSCzPFG{;!_Plse<@L@1M2*@a}{{0Wvlj8cmP)AcD|!c$zFDXPAIirYUWG{=Llmzui$gpbk%+^Viv(FG0|BJv6f20Vdphk3PEk|BW- zXHFGf77U7L6N5Tdc_1*Fb7D*l63fU?L*M)R>f~mvRSchM zx%9jn)+E^P5(mqevLaj`?OnARQRSu*x!IwCv1*5hZr zSyOGx16mN%01{_=pV%ROTk*hrw)W4C8T6Oi2L@CHDVsxvcM>I9I6+PW2Dcc3-7C<; z3lN=67&QgfNf)vlgSqn>7UO|;S43{FfIdnB4O)dfigLX8qimq(Ppw8>YO-+TuXq0D z#A?0mLS~B1NB#a5MCvf`VnP2#7^qhPrWFML+O|>wq5^GJh&HH2CnT&DFz82EQ(<%) zmUaE|b2)|bnLA_MX}R%}jgDKolaDgIxIbe1D@1Rq(uJiBqWu#K!B z`o^8r{ZgGlOnU>+F8=@k6<8Tt#a(w77}FE*&}yh-&rJ@2(rPc&4XZs~J4kUR?zy&9RLi4MS z)4tLUlB25(5RjJ3XWpK(gMU9PrLjkJ_*_M4Cm;!=@6B})qUnt&#SRrBLp$(0rNUAz zk|QwwuK4ONt+PSuKiyH9IX=SEe%D{?`1g zpT;EtVat~Au5D6}W%Z?%u~nKdd6qk^wLH5mGgQ6Yf<`>$tEVeVM2rIBszg>Fi)qheclrolQgE7 z$FYg}0nO%#sSidy-VO59jsEZ%Qr!wG!~r<;w-HF)mnsLEzH?etdLgNwbi?= zWsc;i%oj(q?E7DW(|M{k+Q?r;zNhIxqt@22D$tK0$HTp~L!i@=aOQknmeY6S-p~#4 zZ+4M03aN?r!gzY#9D!8N^jJ&v?p@^dm271+Ym4;lY`Cw zVClY~1;4#qI1CnJ5hbdTi1p)wK~>u4O@>N7ft}z1?8Q& zkX-R($Y-%iB&?DzI8-zja{bf7nPAd8NQ))>Eqft-)p?b3;a%eAs=rdX=F2GeMJ5;f z{+i3}%7Z(%!X*viZfS_69n43|uZJ%LHa~I~G*f#EA=?!>%hC$S5H2HTh$_3(kwoWh za(L>e*^O>et*Nrglrhv$+M-c^d_Xo*6adYzps&?s!h0M;|ajVYh7QQXfi3PQ; zwZtS?ee_u2F~6=cZmsEV^~7nwg6}#YPgbAQ)LpgSKXl#5aia9LyMSPxB~xOvC62I% z!iIg;%$jS+`k@}xB&>6zGEdfYFuUAW!H#oXGnd_1R$wc%qx|Gi)JgY$4)VW{0!kO; zu@>i77kviuEEgFE13AKXsv*pcKi_~)bSB5} zQuI27lw}4I1VA-sgh@D%2vz?{3UEyRfq%{T$Cdb6IRA_0nkNe=VNf0wHps}eO7rgr z;^6@W&PUf1*PD!ChTq`^EvET!qb&2?>E`8RVBTGI*^PYLLE36M#thUB z6Vq_OJ?9sB>$XaDGHG@guo6jr~%sLANK6yBF9laDja zR7~T9VB?>Vhs0@!rEyR9IOT~}SL)7SvD*<{-@N9dnS;^e!go48_gSK!a~(5817XzC z_5pLUObR2@=waRZu&KAt+P}(Pq!tU|2l3TeR0)%f=SE=(>(7-{YMn{@8JKp`!T|t! zhNP_ECV$$|Q<8(|x`@cxfZKQGZTn9rR zU_XVxF1K2Bt6xXf-S2bdA;8Lj%vz|4!QJ)rnfIK5T*C42ATBvNG(HOqc5EQ zjcTOn6A>oh+g7QRrt4=$u$vL4y*;SY-6_B~Z^A?qNbL8P-&KG{swUbzmuubV48!Sa zmutWmc;fq;n8&v*qt$1wTdLyzh(|bl0eW&5-zyTxS%&^hX?aUSuz2!{pd)2SnbHU4 z`8@Z!JL4ysn`o^x;}FxaBd*opmKOqz^7&m8B$j#~r5Pl8+<#-ObL~J}_?l*&%qGFk zFwQ+UBU;GcH>5vl`f-TXCdFm zgmX+$*nXlw^>aGdo=SmN&>@tnO^8bdOX+L1a71EF=}eN~D

    NU9e(u@he7O? z-SZql93wG>Am1C-oAF4C3+T<^fm)+P1T~s9Q{Jh6po$?KMkTx1$m^ErOT?{MlgP%{ zfMk;Vj+*77Tfg|cWyNY@Jp6D$@EV|vv@y}ajF|^H$%@_Bp8%Vl_95e%S^<5|1Y}&d z^$1Ki%`}IJ-jaTUlhK9X!}-DfCY*n_f$2V{Z^Jr5fN7moV2gda@E6e+G7n8}U!Kf6 z%58MNVX$TTmDd-me_=M2F{J{}SB+mvx^eWwiiwac08uWr1eX*F+bu0KHUx$H~6@Jy`zm@z%TAry0G$ zlAf3sJTlX2N|GN^bjKtYxe`=oHIAC8Fu zLhBuUCFZ8s=zvui05!GIucY>i`Bgo<8-R6!L#^Efs=&K%V*0;Ts?T}e!~a-Doii`{ z$xTNDy>(NP6Qu1FE=ts;+O!(@>myWz( zdHBy^<4fAP488-|li%sX8Y=komo^a#Vaaov>wJQS%lR-T#$i%(ilw+QAfHBE6wTXa z#m=R0l{{WHQS@Q1%U#jg)Je-bm$RLf1j=JePMOPce^Q0}E5dc+@L+O3j(Hj?%V=Kp z;@wKR9>F9fr_|mdHavMHjevkeHWCMT=7HsL7T0O(l7x!(kM^eB_Eu;xK23gm^@zu= z=oc^JN88a}b}?rOz6*5Ru-X~4?Qybo_B#K{jy+>97D!Vx!0(6H*-E+xeEmEn<`N%y z^{6F3j7@t;+wQBy&HxyTs&%pdyh}1eiQRp}h(afPx4J9mUWtLYf10q}P5<&fuS~>a zXY1=hYtJK>u1CP?PxGovG|pOSzBu0<3P$9OTQ%bw`Y5yhiTwlnK;yGQ#^-|JhTUSa zQ`L^7Bf6Y2$`rqDINLV7>^UDv%&BjwUHBxoCB>>+&7Gv4Uz0YjkUQJWD(hCIq({-T z|6Cw3@I3{0pteCu%wNR?i5d8S{_pM(TL;026(Aa!Qo>0)NzI_QrbZ+e=US$*NyIF& zvgZizqMCv+~V5u8peY4YUIV zBT`87T&Vqx_Yr_C4}RS}WNMHNtgO=_Os#q?w$CME0ozN zJK6zV);tGPdmdC!F=v17qS&+p@Mmk2<`n*EO4&@7be44Ayu*PR-ksc-x2Uv!E1wh-3E#DFO;s^;5E-^2=JL zW^+r6i2e63fdhH>7%K*QA9=Qr)PQ6`TiC<@*4P94*(EeV)^=J@DVFmaajHOgbY9nl ze(gvjP@|Elco;Lpv1KvG3dZSH|K z!_7DCv+BAVT$6>tP(4>ExF>1oSm}T^Q}vyG*G4j89f$bq19<1l-}NbXbtx}qx8eim z=E6L8!zXV8BeD!d1E!It87bxiw@iEiU(0|N2aP~9C*@g3#d2%`*0*A9Di>J6xx#w< zD!%d~eH6h+nMl?Hk3QQ=%zw6ycxTr1Qce9?b|>8t@gG6!85UIf0clqXJmkR0^DyIY zl{%~DW>&Ul87Z(OM50ii;}q+tuk7yV$Q251mtPIZ-=wcwrGvTl(hX_UfjAMR@fv?a zKv&)SVzUiH6Ul8vx{uiZLU?t~n2x*O1m)ZK<`zn`Yc}LvN`Zz*Est^DkM5>tQ$k%_ z2U4!b<8WbbVz;Ci0jX2ZeaD%U1OAZflX%coWezfVR%OgKLRWW^LTUx;#Gb4J4p zkA-~mzGP?weopQiEm+-peA#^@uL8c^?XLMZAKGjAUpVZ~22h;FG$D9MCJ_nM_#Y!Y za^hi2na6PItaofGo!D*u++%e{v9(#^%dSTxzh{JHaX8J>4t{)E_W1Q=@Nbl4C7-F9 z)6>Vof{Hm1USV1|Cr!Q)7{M#FT>;OGq&gmo(_3kwF`|T zbIu$H2srVj1|Ypdk?c4vi^X5LBxbKTgCFbjaHuWMxz*(_34!zly0=vvSdKhnlhy$>X8t?h7ZamTLlxZ#nfXgn50Hx@!egp? zQWb|lt_=b4ZWIxQ!FpE=0mv2WgzA1Md&W%Tt1s|BOQsbH@T!&hA5If6DmvEh4t4a~ z8Zb6&onFEqCZleOnjpX6kSEu%f*+qw>~Q->^DQuFBdF1@QPGbO-xHmOkN4CB!IuAq zeCqdL)Z)zeT(bt;;f}){=bdNzT7d@ooVz^rLGkjYq_N?XYLt3$0L*F*Yg#!+yrC*s6bVc5MgvR(pczB4G2ULMHGFWxf%J;_KULp$B zWM-dl6+D{(ezXO0Yt@3hJ)%#XY@g0)F%f=VHQ4h<*mWcaS9{WRL_i10+z&M!jjc5K zbwrZH8NGPqfT1xMk@DGK__+^gl9*%qRc7V0tWd+!GBf2LNS+~$^=YNtGMPVE}~U1OY^Rsana`&)h_av%wI|X`Am9l)3Dc7W(?i7iG|dhi#_D zerbZGK!60$W-K*(99l?A6U`6^ZN=+vq&;m+4QdTlkP(hkXg^k!eq{^nKcCeLEsrX; zK5Re`3l?a{ox0~CROcpBV*=17ojOldIYtvW-!K^IkOe--V$1oa)OA}k9AF(0Rl_)r zNusp^Fr0ag?dvYLS#{?T3;wKJq^2Jkt%2&ZU$x}vVryTTwly^Kj}B|hfHU(xTpEs1X)a;HU6j;pxeeuL%Ck$2)uowd$OW_1uE%l}V^PXS$h6yuo>FQ|iOc zm|EFEk7oY9Yl06_(0uGAOWOpDmSQU&EybR0<5v)1mjGln(a3f`mca^;N@F^X07x`L zY=j}FDR+p8Jm35DWtk{1j7n(BTlO*Xjxr3H(@U-gcD=c_)^qzkql@Xj@NCBZMU&-? zx#n$Ju7iDwqbLx)$4~W1t*e8Di4{@;3l9j)4KgqK)SGD6r+1^y3DEhzFpyu?P%SbB zG1{!!0=iN{m0*%(dNTj<`IfW(M|Bo%eBoGzMq3J~%`u;JQX-Pm7yp7orGS^`1wVMH z_-}zde+%{V*lrmoJQGh}h6vcr!%UsuMLm(}bbRD80#a+_ui0Trkyy2{tfq4Q&MM}v zgPtm5lsEebS#Lva)n*=Z?rWk6$VSC`Iow zjRL-GWnP-)|31R1`VlzAiq-DJ;R6fTI6#Z;2ab&TmORuH_hpQ!rby7EqiQ^&t~xQz zXt&YwPzB_N8l76Q-aG8g+D^8AMBArxZ20oNU+RswdSEYYu(DV1avN!T24uLmWE##k zIh1P+V--ybjWhC{PF`~^xjXbX;pNRi?>2!*dhx2>S?PUJbd|(ew;#`s-8(s762$}m z^W=wRoYcy_vuVjnry&!OJOwqelzVlhXM9qr-al#dbCG-}a1MWYoS*Bx>|?|M6Ca~D zDJ$#jqQ_I&o$J{QNg2xn>ud!oOEQt^$zX{P&&yOX&lA&wO8?ufZ}`>n-Z>nYyw@3y zmNh%4aCxyaQ|z`g*Ssf^bW4=rU2TuSbFMtoZ3=PyS}~}wrybhE9yUDR=v7;qFj`MTIGd##mF*Ri}d5JhR>T+G|H) z=sJ!SN-c!gM@`8yCpzdm6KBPw>kB>Hed~*?0KkbN|G0(vl9MOOo^!fDwa;~CsES|+ zhv1O`EvW;Js{h{daMVJ^TIFh0vjMO)OrGAD>Wu&Zv@)`k|CyylXktyR%!OV1s@epF zu>(cdImV!2SfvuzU2~fio5Y@52S{W&M@7LDTSj$;-eH{vcZ^2 ziosfz%~;0DkUA?NB;EhLY+S~9W}_0u@l2cNl%2bP(X1*{GojFmx$NNJX7S z>H}&$?1fp$ToK`L1}5np0FmxwB7y83RN7v6XQ~b+bw>h=2ueS0crb{!NP4OIr1nNF zDI2lzD?3TuN>HDs?DmywFSEgeqQxkJbbF^$bGrt+$Yu*O%p~;&@NPY?PavVnO6iaS zwW<50bDAS`4nZ#c1`5)_F-IK&kVaUkcSw~aKk5&S$$wqYwss(90QwlcJEdWNZ z(BzHw9f`xb1C!Q`hvPrZ@MH7=%o-ANgB^la<{!oL8Qte*5S1NoQ|4P<<>wu7rZdax zB$v8bTsN?;PPNs;z0{jeE=?fLB;{fji*FuXRAm4o*)mSsDW+mUh)9m_l@`7SAG)!MSqGt#=NR!qIGm?DU>MVbJ?Y zwR&xbyZ&#?K1IAxC)ZM|Mg+d%bOE7MD@@M{u+obk>M~b@;USB6i_aIj(Q6c@vY%OC z`B718A{SFG$o(gCR>8xZBH~U5-11|v@pVC$)56K9NMtIelZE$>09%CnbN}^j(4i-eI1i?J>2tK(0Uu_ z&Gs+~Ahxi2o_U5)hUk*=NIgF-Kx`IeD}I(3ROuYT{V(6azr{#GAV!6lB<%=&c@|yF z;}t%AsWM&O3iY_(74OWIW3jQ!^Ts1@`sA38)klIi(RRDkiB->W;gegJ#^uI*8(QnmB35ytM~< zQutlzo!q)$?NV2*^;vL0S0DVyhPA{c=mh03IU-*T#7rfFEs?qK)w2WAyTRaTO%F&s z4oQ$Ydn6J-;_)5)>lWZ96cIgJ4r>W8=}$75;Oh6Aw9jy}*he^x}X%(#}nWVdcq^BD1rqeHpJ*ysORT(%pD&aLe?~V13K<@X$EO6JCf;m z$x8kvAKS&d)a`TVzv#+?Eo%ZUsM@6zAmUoe{PXrTtFV0lX~+PSrQo0*VtM%Ae{Q-V zV(&~W_R<$0xrylXnJE+QPi8yNVY1(w!Me+iLixqYenEQD8(%dM z%(KxLVXyqDhNvE$K7Lsvw^5r*&&}oi`^d#e-S^r8I*VlQN49!p;^EEtifC(@JuiXh zy<}(t4xaQwgZ;O{?o_k0qsSYggb~dK5#YwJv~455>~-y=)55qzP;F&NxM26ZpTon7 zE{88ufud-QgV76hT1K}vlzUI6W(Ath=bx)oI`QAA>y?Jt0h0;5B~YCvF}Ho%Ob-IL zF0j{nfotVKPd_bJxsx1qI(}&SQY!M7fRR_{%E;edEag0rt!(ZB6CCL8Dg*krE#-m@6}-55Yl$BTaARPYZ9;|IrY=~ z&{mX`yDDt1(2U#b5gsH~Gs2duA*TGS)~WwRyo7R+5hy!1a=m#MWJM26s%<>={0YPB zoqbzccLC+d!^OsBGhK+KkSXiZ6ax2|bF@aOUAVF2{9-m;sE)O zKCA&*##+$dNz_AlC2WMBIaMwd&M(_t;#7!qcA8FT^x@`MG9W5yH(!Eg=NFAl z?1A?+GcQH_zXJ-}?!%H;s(WM4GgqY?(AKn+DX6Sz>xfKyAO>)JvpX=m^MFb^%wULB zPV?IrdA{M8LrtesW^Gdb#X_@1p~Oq2#Ulm8R)iiXB{SxYB1Iu9G)04+VzAG%0j1pN zrVvVxU%P#L_fo$;b7bjqwW>91`PX3Kv4twjxlE@Mgx{k#*_2{mGF+)o%akmZT-MNg z4Q)4ia$3c*Rz;m~*pyU!E(&aX7rCsijoQr~x3O%x-H zlWFa9hj^fBz%hg5phD|kW!7_Sl>JKToRaO!3HGPaad#}`f@OAW<3ERuSG*x`T-(gC zj47F9cd+dA;W~z0Gn06{U*e~dYGWU^g869LNgH3Fb!=5!T^SRCSDGr8lvy|A1_qlp zWJCi9d?`j%t1@W=p(nzyPw=_j_}l=M={I;em(rKVfLr^kvv+4R#1$00Mip$=qWT-m z@b;Sfe7R7dAw=l=2F2*|+P}Z-GZO*K@Afcz>4PGZEEPKC?O7@T`4(L$qHW65+)L5y ze4+IuSuTX4N_z2DdR>K9Mwnx1k)|3li)f#-tP*ltaG+*Jc3Pt#Zsqk7goRBYlPDA! zTDq(-9a|B6WzgE^L|Uw7YRdu_wWoT%dGN_4!0yz`C9T&A27~y-aaFN$8Yx@QWT^F} zn~JFD`EaHdgef)m%6eDGRt4q>amoTuJdt`fLA6mrJ|j<&pG}l`62?zm&Pf_Ug${yp zT2PKYFJ}{9nqHYu>N!CO9ENr=aaAR-MxKs1KD6Iq1EbeJP%bR!tF*Q5yWpV62BR!3C!oxQ*|2^*CN9iW_)SXY zyF8y!x!u*&>VXK#8?Hf6^w`JdC-1U<^hr^zW>!@U_gM>-ql=Z0g8&HQoRt=vrGW$8 zsH9S`wQ+G&)m94CxZ3eIEMe_ES`ED`S4%=7ypF!8+L4~yO@ha>^$Ft2!0`JdBVt>xDREu z=9*QP@dvy<*96ftX;yHss;dLCKJnEd74oyY;V_FxAl_83?Qb~Tmm4w z97D?b6f%SnPJW4B91|A!+hShgm5N_lPbXxs4-xig&tb3QH#MQQKj!{{3#3Uv`i}4R zN$n@YD!{4?mRI8X`LotehawXL086fr3FnV#WsX|LIFcO22Wb!0QUwKGdrVooEOY$# z=1?O7WjFFg8gOT~{i2cB@;s1zqd+jtPHVv%6<%EDtFgTe_fn4U=N5` z9zvABgO@!l3m#Ctie*rD_zJXI4?r)cLI_itH$z2gH9y%FK~zgADj}?5uIHcL7Y*|@ zw>a12N-3%kjcY48Z8^eB{>OK^1PDdLsv8Dbp6-ysvIsHdI|9f_EU`$pvaXg?`GqlZGb_Xs6-9}me zqfEQ`*hIoFAoo#y^H|u1M=u*w$`!OM@g+Haey;gw@B}7yJpMTC5y{4W#mS>o6jN_A zPk8>rCc8HDpA(ux0u94g;Qd$#GuZ%uLU^3`V23`$xx_Ng1mH22cj=9{WL5=-aR;`` zT_BD7sAzMD$G)ngw($AFs+W9Ay!&jSC2Q!Kz=;Yw#Puo^v`M<6PgdD( z&aMk<29N5Sr+i(D)4mA3o}8?=(f=6))cTxaQPr=03208W(lVG_GWnF23^4x;RA;cX z_N?`#jPO+{Ka(A+lazMo^ z`J`_Clb{lZLN1^8F#fYp>=aulG4$9m*YHiYJ8|iMZSHh)=f9O795d3e&HpY7XNVWX zC_KvvhX5v$E0AK4%~yiKiRm)@;5e@J5(>+kxAuO>c9pMt@RGCGoqTQ^Czy%Sa2uWt zlL!3I21kToARnb^ZONXo6WxLi8_xpGM>b($@63R(<6e$NH5Tk#^7OC;ubO51!Q%kM8-&h_fJH{~UMb#Yi65)Qp? zr+oaC_)z6t(qJk<#O@oky+%V4T6~f3Tntgh8CMcMAtC?y4&Qqlt%U@?xrD*X*0^kI zr7c{yrqjulWN{N)sOYnHayC@v$MNnNuQ%4G_ELp%oPr9S?WcyQkZ0UQ&AHuEvO`R) zRDz5FPNysx5kQe}jg`n?Mkock)o5Y5<<5m5yXglrjzQUD!mBP$wsc`T(OYoTuhe4& zpt83dzt7@#%c>yG@Pi}I0$hEknRzH8P9QE^kT-Pc8 zhnb#d(m2O#Xh387yDUaQ#QB2Ak|yFLC0visG)TbTz?0OGXiia~L4taXMM7M^b{?Q!=Y8U+b zRQQT&kY*pWv`?ImBCB;1Md;H_dwZTwfOeq8{)PtfvZl!y7yKSL67+BNSFAAjY+ zi&vT-tkV_fB)(3XzY**F@`-1@;N8JNzK2yJhb?NBfa_n*4X(?#Rqz>K2tE4H!e6gG ztUdnZ?=>sm2CG>^dllmcYqM zI1=yrzaXgA2H@U3);(_p)xFVw)t(%rvjIxN@$EuF^>(v_aF&X>NN33lVJ9=Z(=Bwj zt5C0{N%_CFHXyZb7Owfbb7h}yQ!*UxV^eqpy1l|^eCUEgbr|!lRgoT3Rthnk~R)wX!f-ojy%Pg6MLP& zTVp7F%aTrCRHmXst%F;CTgPDPxMd7S+jnhv^>tnPR%vyLq8bA0(8320OV9N-b)K0h z(+{7*;wkR})I9~=WyKFl=IU;v1Y@gg&H=b@wuWnbjblD*-nV*{H>jMjMNK$d`?5=O zIhE!TsiI%e5VaLv2aF#IX?A$ClG8H`M;JwWHn;^#T34Gy!mhsk`|kPak{G|P*aPhE zc%$(7!5z4LD#Na}`^@i+4<3m->!T&cSLH5W`0?I2>E!?99;^OZnJ$P6z2nsu^tA5B zzt^-5!N&wvY{dJ(YCxaJ>kT zdbp?X&Va=6OQOS4p%vU=nV8<4Va6cA`ua&WQ>FCe&uTmAvuj+H5}M@>NQ}0E))Aww zExgZHE-@cLds7dfXU0{JN^cf=Y^)E8ncrx{XG-UhSh81zBUT~uVTlR_F2vPIv|Cqa zsth@RJHS;(^eE@Mp8hpx#$l5+0(cpOK}eR?`xsb=y$JzYZ=r z!3fN>ENln*-O*cW)WaGC87b;}jzbsK^)zBKKemiORkF36&w3fskij{ou+h^9&*z7C z?hyxExKe(h2$xWkUU)Zm!LDF;LSv+u9&x8a$xrdtMCn;${p-FOV*(>e{Y=IB!wwKP zqjNPW-L^ETV9sGO@xShkL|}@1 z&s~p-dw&5LJch(RW*aO&IMv^;Q-QRTv=Y-LpLH^y#)Q>C(`*A6_SkO|hW}K2lT>?; z#K_`4xDC*?7wqIBdNTzvp4Ts3{zCKm6?QWK%fD&iy>|NA7q<&%0|4ohNzzj3?}u9 zhVXyZxV8&%WF*TNPHG-^?Yk+9ZHH_ht{wjlT9~@T>Z?|+*Eex)2;2nfZ7d<1Dvq8sP)(ILmd} zJQnsfLjiq_c;lNN9dfm<9}23UEuo6SJTfR^4;aeCR!O-=G4;@LDpe_?vDy49=M?&O zA^+^D+y7mLr6K(L@gU}7&c>#864M$V_OY$3sTwhecab;{gt_m1xNrkGsG6J#t(8zW z7m9VD`YX1`L~bjY=~|6$@bzEIr75eCN1fa=`j@(e1huD1dJaBsrCn)jhLMs=Bd78U ztHV9r4WMj{y1T%QBG>wv3-I8sV`UXn)oRs?zT$l2*V{KhSG{SJv-8GitwTWJkfD~k z!k5|K9GH_sekFZ!T|AWQ(4;+|;c*?%>AbRn+!Gp9X==?d6wcA`9nBQ#PAxZ|bP7nX z^gWFQ7qvSzXuDZ4k858XEQ`LIKf&++TCXR~IsYy)5;?dqbI#$@3CTwr_VpLOOOvff zpNY3_q$P((j6a3Cl(0W3>pWOcI5nA3I)vq}%c+V4L0bzW zM9?fUd5y5rCzd3Xx=j_$@PpRW!%aYYGNp}aY|j9T_+oF{MRs=G$2z~{)y{-9h@C;8 z&c(nYB&`a7Y~+opZ>>qerZ-LJs)ISn(Tb7PX5Nr~wCrh|icEN;m4J}KVK(zrxSn(o zF9d$(wz!K;X`1*GYvqX^c=rj^`*e(m{yo(Zdjdi%`|H~I~>yaSeW%GJz&Y+Z%L5>Cpr6Vsx1s!7TnS-0ow(Y>aQ3VK4$ zzP%`jS#*%%2R~4xS69Xi#n!M=7Uu5cbC5cUQ=S(w$&I9;Gb4^!-|`I~Jh5A|@qWd( zXB7VZ^>vNW4F<|=x+ukM+Gy|7Jnt2v{Hy(X{OwN`^{HXLj!~qV zNcsS9?eajHK||X=f5RX=>DP%y4@`1TCi5`hw;ZGJYLSd!Mf=^ImJ*U^)@i9ow`O*iP{%Ndi(EmFwHC(l+bus!}Zrx06q3hmv|9H$ox~m#Ls&~hR*hr>UrXk?WELorXBPOIc z(v>h^!dPg)`{q9fCx95tTljIq5q{*?x`*F$`No4cVYH%GndaX=NJNumq)rzD^2m%2 zWZ2{iV$y1F+?Em|)5MR#(c~NkSLL*2`vceZtz=5=1vtf|w!BG~j<(6S1#7AOwGOVUaZ;2$ege;>HwE ziSN=(Kkegc??T2k;{X9JwJ`TH0b3dV6TB-exK~{tBbs>H{d^G3J59)Sa;!fMb=+FU8I*HKiTG@3LFt*4VF>7TZ8wC2Iu`I6a?mGT(~DFMfrGxzYzVWJ`nx zu06zy8Rf@N`$UKTkD~ig*&C1HktoXgY|H3`axzBZ9*XIkADO*x3;H{D$xiv(6$cgtj z^;t3iE7eSa#xNlln4nUOR~>#Wf&zX{P%`9R9a6iOz=9jJ@1M<5n~i>CChq#zDRp5H995XxfOGb0R|cLYGm)dF+-*AeZLXNF!?VB1A%tM)u2sw$n3@ zH;W@@hb%Epe(2%OTcbwxnfh-uy5_U=l$^h6f~=&S3;i;c_gdG`YO!RH)O@B@R1cz+ zibM-Te(qi9XULHrLofkpPgUz4>Mkf@qhpK}=tuaZn>FqR_an5R$}> zbMvIYOY?S}&VonOGnfLG;bAGm4D}A-2jkp|F_u!9xyGLujo{wp%ykW^Zigtz`*a=G z#temSECCh;Jll(p&8-;9;O9+yPWp59(7B-uovbBrB185PR+&wJ=H`{LuS+b(r4q03^SxmGhhvPgNuAfFAv(whD2b%1>s8e!gAhR*$Y^s{alH34aDt; z+@YHc)8!j^s%p!sYDd)&U}5pdaQH0eF^>CL_XNC`iK-PU9?LdZ6nPZe5&(zfqr+u( zDZO{rMEg7upLL{X4W&j)_Y}TR&8{}X*Z?y8@Fpo>mm#j73|9)*@=MV)_WBAj2pjq# zcoj3WH-N}))v#KIv(H6<@~(Z`%%h?K^8b?eeRYuzcAl1Hbp=Hp#Wd-w(5X8h>O2Qs z&JPtTw5ad_nTD6Ftr@H_#YM4*sut7dM6(0bkBfNdP&-0i71c)p*-=2=0gxJ@!-h_N zHcc1E_Q7^c(*f`4QW4Wrnbt`n`;RxOF+dakB>3k>WH~h}=jQ96GN<4n1b+ze*9g&0 zourkyr4(Jgm4CARR{ZPLJ-Z>@R2bsO3OqMkR;7Ngm7u5uB##kJ&ZQB&8KBy|@gBx9 zj#%TKU9%_#usxn=!vh?DyyUp$v5wVBmQ-FfcMsk2lnQ)z%MHDQhx-ZkhOtK!j+ z`1;#O9bPggLuv~kFZ4|AKn614aU;&vYDRoE!Q<=E%xJ!dVuveSlPi`^QGjKL@8Cr} z@plfi?)?>f>gW|R9beQsrO?z9q7)9%laO&Wm7Cp`)Gzt+cU$)p{ZQN}<^F9-fQ8GS z4_3XmQJTIWN9Jajuhx(T&sa=N*GH{;@@56bQiOG(b0`M~QEdk4Y-MAZL-Q#&wULDO zmusd&H??b2oeV@m`iefLJvrh!*)6-;*50!>9TZPvO3YH!1lo}yn|!$GJJ_ZW%C(~y z^5m$72!bQ3i*LM)3rAK3;dV$yxTUBWA+V6}^KPN(g2{!HWqqWWL9x-aqxUf>zs!lfkb!2MK^OHY!d|o_+erdC{$4XseO3ivE z_{6~{0~DvzPKpDa{6`L6$|(Ikd=P0R&mcJThSz+SU9v1XeUNur5JMKdP3|GM%LJBN zf39>?Ki`t!aEgI$UXolU>?<9SaTb;uQcJVq%1wjMUwgi1bNl8*W4^`gV~5LVW+((` zDaBe#-y4RGMixuFw;ci6-HMV@f{CBPuRT|n@e3DtEq;U4@g?Y7>5aCDKAQBsE~7L0 z!A}o`nBKB@7%d&Vis0d)JdV{Rj^sTGAPp}%!U5`fAPWjf^j10y%C2g`PW)1E`eNGc zci`w1DKu6NOb|5`E)3)n-w(^;m#DF$;Do(EruUy#G3U7x&kuklwXm0>BElnkexYvB z8+AjPqoZRz7=1Ib>V+n=t~cj3{^8R>MJJEdWRlF&RDsa>Ufqt&(^|K(s1LJrA7=4@ zUWfsG3GteuiT9|9MzbQR`SB_`?j0g#?BVB#!!~g;LElA3DB}r~fHG3gJRhh&3d*sW zD{b7C*6hZq>TK<$DW68%(U)4qh~WhqNFK!|BxP_d-Sk_r;DE#Pnp>((ALHEUQc}Nd z1yv_+Su)mVq+k9f+TAVd9g%g6Dic>%-eM^Mn-f*FWFxR>KlM|03Ac5+HRP_N2MF?p z*RNb&SI7&k{Z>&rs1`JR__!&O+OrE$^sJ{v6;qLJ?MC17q zo=X;qo*OR}bkhnjYioAgZ0!c8`6yMbZ^6(v_>#ZDz;u#~CkMFa1Mgr=te;~w8_gTt zyK;6%EU3}A$Vc?i$J0epg7}Q_6ujsT=8{hErQh9Oa<(OV@uH>um%j`>N(_S=auc&C z9d{n`qHHdvH$6^G?@!y*npH(tQ!nhUCVxgIsO5era|w5|Bb>wYcFzc&n47!1g#Z5xK^~#rLif0^IexQUlmz8 zbF<4b%|3%=6E1Gbm9_~#PpmC_spgS{m1|~sOkwduEG7A;_h-3^N0($O!WHgelgbDR zbm3R~XJ7tlQfws%jM_5LMWqAzf4tfhIY0ADr(T!#EG6^{b2}B^+_+or@IjJv*5OSb zx;LpVDZ{OIWmWL>zXuLy$d6<*Q6;ynrKiL9y*YRPcG9w8xZ3THKDV2%PP^HK2}|xJ z}3xRN5m{6dET0l3RV?RX=0 zFk*g()rdpgbb;BoQGK!xudcXlrH1z9&CM6IOAlYEn?8Sya$RL!|g4K z(cLx<#{UGm$heZW&+Z@PS1DJXAOtRm8qVJIAL^wLaWk`I_c$(K^poa6#C)`>c?z_K z117fQCifk-3^|`@cMZHmfkX7r=)dvwkcfuK$sCLw2LXwo-^3$Je_^$us)=fIdUw}u z))X1lCg_X(-Z45Ny(Q|l?p(WdzhCx6JzFX$9Cq%tZ1cYPrAW8ccMUHq5B|MYk&=7w zK38diD_I(@^f_FqlqD0AAtSOOp-zyHCP=DarQ(G#13xxE`a#CwkSqnyozC!~Y?PWR z(78v|B3{PK-7}W`&OS?Jzjw#AlP|f2+K1Z19{099sWjeq$-l~5R5xyj2_4R2gs{Up z1j|3f>}=0qx14>kMLB9(Xh)`-mxX=|M( z|KICsd1}JHE#g|A0`EjOGuXhztKMGq&X#YJ)6+U@vIwX*Qq+6h;;{Yg;F*|Q1sp54 zR`z7Jx$>JqHMcVIivjUVP_ayiYPM1)E~0jC zOuYAzN@`UgME$Fq#hB7hg=%Lh4`d_VUmJoQQTiPHwE?9)aNSup9#TS2jNu4DFpYZ43Y!@K+LeC!$1 z?AYvXpookIxUou~7)_I;ysh8&QIR%pa*};a&jw*XBUVcPj7a%9ng~Wv1Uu}gO7*Ot zr`3Zx^+TSL;bl|z|19glP5-A#^>mpdB^R3i-0j#Jf?NHa_TAc7iDL&9jwvr7VWLkU-y*Z@uLYs+Cd!gA7 zHk7A+QQ2g~CZiu;CGN{kdNSKU8wyfyUKCkSt#v&EQ8K!NsVV#;ELszL_1dkMGAvnB zI)pJ$O;`A;+&gxvnx(uLcfIiE;BUc84(QsaIC% z$8)E99MwG_2h)#Nc*%!+G3uTVk9!cvt&MFtJg!hzEU0`}oS1Tuv?tH{~>K}dWLP;Smy=Rb%WI-M4GiT^f7Wy#OGppT7+SMk0fd((^?+jYs z2)NzO>XbgN=a-@iKM$em?0sP~Uut;C|2j)X;L59K#dX4CUySBtWu=}+bPOUQc z#1tO$FVK>a0vj|ZLZca;A(i;ivF)kCrgVFqX^ev19bf56i;ucR5GRvui6W1%#*nYB z+2%y(MnHNwYAgr zJ*!w);B2MBiYCd+u`*%#~0>Qvg@$o8=7;y(ohT;)%p}q z`Xrl(%}TMv=7o5U%JvI6sVSKdz3n_u!E38Ey%?ZnuJ@seI~WYE>c43QJ@r5yRnc;% zaRH>|h$9m)s%AB%;16{VGx)FximI)^ycJf$;ljLA26z*vns7pj^QuwV90g=%Jyvm> zMr{`pS39(3jn(VDSB7TXOqa)LZysCES(CBu<^~Y{kL9tn#`GjPK8T6v<4n;N99;{3Qjs6Rf!lPSo^iuI$B6Eb;EutZw7$UKhqZnhgVN`g``B3q0qM`7 ze)rzzqKBPjZd8eCCrm-zAl>AAK2^TpD}-Cmg~#)|9q%p6$(6VnZ=^Elc9G%9%}qm_ zJNYMgRF!X4bZ;TIH{WUma;m65Sx|PkYb?f8aiHq6#(jz6i;j{qW;5A-H9tCuj;0U# z2l5PRqNST@%O%r8&UVYbV*&Ri1A4;3I#zn2fh)^-zVj^y3w!|&`uGs863E112|~bp zH@(gF3{k04y!U#nvEKJX{=@=UBP^r#&0nr=FIyWAw69AUm@3+Ita-N<>v(TT`iF?t z{)35Y_E)f@@GqwQ-ngM#v%!mpJy**N;+CuoUbYr}j#si3%53PMes%hHWvWnx=p#2R z&RS$cr6mSoh|C7D3S(O(U<8OB3RD`At&!;zLK6N>@Xgh*pr=m(;Kn!Eo>#8FRT52j zq_g2$@^ZfoSygZ|l}~NmuSIM5c>@_auIt~_PB+$xMn#~8HFiju9v8eJUSyiufO@vZ zg>JWCSD&(>zcXAkUEB2yGcf+CFYjV5udBSH=_yT_ z8Yo7W3HIG}#Lb!{$C2$5Ctn`!@F$oPiSy<8(vNU(R(Pa(7s!D@(@w~O`oR5>KRZRT zqUCePV%^glxm?@aL-#ECn5T8VB8v9?FqtwJM2rwn(|o3Ovd+NA$?#?@PDbf%s~H)c zIV`ix^ae~44V&3nrAj?e&xw{FB^;p6xv#lqk65t98T0JsIQ#oD3yqjM|6f0ouVeId zi9ZXb@{vdctQ$UxY0T*_JGKTYQ9=M6i4(sW27oObRzeP2Yso&-BYgj_?xfL2*gBFHB* zpbr|QJILk%Y$x9>5erh{qjI1bMy!{E+$6!>O~7mEAYsf z9mxS+_N8T|8(Nqu_9|Og`t0mO#3#+A} zpi94Ovwo-&0x+{{w$=8Sh+EnT#tb<|$1J zucZC=O^>loJH&wbG19O!qH!ji;H5+ck+ z{3kP~c)tEku4G9LYK{!WXG`fUafLo+OA$*P*5 z6p@BSm1(8nm7g}A$d{_hd>rl5e!~4*w8--QgUevBB;=eadU+)3U~1(jE6l!TrKoEy zuw{`^78b`Be)XYAUId%MzL@#lE;3Sy*#k7BD8#-KF|pT{Y4o1`t_Yr1oNLyWo3p8- zL(i&G>M$agw_wXl%DTpyRQ$dW63%TDYAgze&}AefP#Yua#Q+cXK=%ksEjGBT zhxmT!ay*;$%NJcG=<)sAgK6-+P_wLHqF&bsXtFhJ6rj%#>O-~Sa-y}Ez>@e z54*)Nl24S7_mz7RAzf%DDs&vSh=$b@^@GwK|6B|4s)E`vtNZ7xH`-;dTFbRZ!-|=r z*QyiU_)fkg$U`=AcNh6L9!}c>aD_mRiQ+(8@h>DeU5IXBEN`$S;zxqrH?BJ)FKNWB zvkgSZ=l9H05YxOKmGemtw(3r+OPz{B4U+2@s&i(3*X#euS<->eaYQ3HM^PCKv^e)^ zCVYHL%&}4#7$f5*0qbXqzhLbF7z&9~`Y*5sht-+W3}vuxT30Fak0t`K%S?!cY#JB1 zp+Ew^ElB4Uw2EiZ*mUA5TldtKyjpvyoFB$5MoVYcH-q2ASpvT*14F8UJGN4T<}EIs zQAmr#%DuNbs5|fo>pdpX{76`5y`tHh+kAKl#v#H-F-B#2Mn48+UYI~K8U77V!23$Q zo`z$Mg#dD+`xc*HLXT=i2E>&I*wyv=)tMZ+Fo%IRVh&zYyl@R8^=ZZ+cX|W@va;gHwossV!}Z7zjlN zQs~eYXetVi26$m0UL?kyL?w5!h+;G#VOp~}?Vu&Ty_(f>jf=gosvugXFx?}7^ir>N zs8L_v$~4NUgrDtftL=PuE!ZFhoymuC@rW4?_rMZYSqXlN)HR+Yy&wU`Z>ulfss7Zi z|1M9j&bX!%4=Us7eLOd8`%Z6Qn)Vf)sQAl?&KCP?BkmYB@|}&m%K@#ZLibdS4WiSY z#C&cGD0Uv`y(Qw$fWF2f*0Sofr?SB&h?ndh<@1Pi8ZxHt;R_TZ;X+cDdcBHp?*kM< zxF%zvc z>JO06GXpBPOPlqxQ{R@t0{%LAUjh11M1{0&H5;ey5zb{?#Y2MOtFN+KT1vEaWSaM< zLSz-9QpmT@hC^_DU{;3C|`F_xS&mYl{9 zzUCpyLI;1u4GLRo9n4hvN<+^b0=4{6_yD=q{z}z6&fAmDxUeeR)Z=IRUO~bSq_Uu( zM^0afQoWN1!S-TKlI7%=6>6uH&dct<^ssRzFoFD7 z*Z8l3;oR@_su`GAqacXAAJ$ve_+3FoLt#Z)i+TtRnY$b~eNX_n-)I|&T~?4YZ4QR{ za3vrQH-b{2_K2`bQhcz?MCXSJa1mZ?zMw~qg-{5U6s!k3c*()4xAs18$n_LigF5}t z5(gHitC}Kuh%}7*`<(PkwsCI*SE8Q`0?-(+j~sEw1o5AIRBi0> zbE??8e;uEi+d>$(7qO`~SD?Xa=6bRMA6(Xi7_#;ilsWy-?hs$ul(upH4F+)IX76gPWKc>R4jf@O}Jj}gyb!v1HSfoCj;uw813BCgg%~gmd=Wu>^e^o zP31p7{a<%IPcQEstjTRuO7O_==HnNa5%Uy-2A~LpO*QAQ209Y^>;SC z=>l-H9GD~rYi1O#!Uap2-`(d-A8T(wqQSyJ*!Z+&snl!D(w4p|tXi$Lza0;p^xO4BYb+}j`$bhu?+eOP zBJ&6J_lxd9sTat){oy|lDWJSS{}|(M{Uz!}81K7W@W5@a4fTs1@o!HuTTTf9=wLt~ zrA4k9td9Xc#{zAPU&a2=zVOXfG)jr{Ju*0c_Ke0Qs5LjOe6~%DDiOAvbqT6VI{Lpx=j`^k4}Y|0wJ_2Ur0Vbv_#W?ai9$9D3D`wsMI zp{NfZNRt5O8ISaQMpoCmyrCdh_{a|&@lCdql~5gI2EIl{-l~TAGR)06d;4zoqXx+V zA*Yu@0&yX%560#+NUYtVipa7{T~lfllQVfek|y(tE2T|*jZc|x1c_;SuDF(Jcr`dy z`@MIsFgS8Q!P={~$Ya{Rs2S`TWaPqB%G%I0SZpD7TVAxk6L;l$$ZLM$w-rcSvyaPu zjem~uhtvZr4cA|}JPW;ddYqUj0veZUZFaw@n)-fS@;VX!ZmP-3XNsZzJ4*R$qWXA~ zcdcu{1N7U>0IIu46jBL0|vUc9;2 z19jljpBo`8rN?eFV4R|5A}?%kdG)NK4f&;U;9F;0-A}UptHFZ%y3d79BCJ%Y!-X1~ zu7)_POC6cWf15aU27V0}1(madd?En$(ITNrD>DgP8QCyZhQ>C)%WS!>wis!%lB|YQ zoZ*<{TkjBAD3d-C0HsluGn|E+AURm5zi72DvR*-rND!vS;6=DH3TwaR1Oy1SAwj&M zA{~?^Yg|}RBg|IiJ02+u^aW%Qc8rB3rFt2OeU{{$CYam=ztbAGIiJ8W@1OvzC!Ukc z5B^n}H1cy(yJ-G^|C|JPe{xqdl_SIwR?yC9=UR-8x3mn_JmSp4xIy4Nc**x&K(ZA{r*0>Qjp)D1DC$9L`AVxbp>=v4@cs7%kbL3RfZ|l3Vrr*yh|- zbT!ugcw-9tw^d`(xSOcT)yuc6>&fmQsAf~KvrSw}W%p`jia%;l{cG4)4aqK?j;2yV zl1`p9srk-iM^l-G4fH?hMbH(ZV3&$JI zBGc?;FGJ$6xpL|f@2@1!A+s#4Yhs5=G{c0Q+e2l~CO`qg2B)rknBZ`W0F}&0sKs

    uvBR5V{f}J-cJ3y zTi1S%%IM7SB2s?LyFM*+&5}B{|J#=n!v|J2o)qAmVY-wz{_}l7 z7NATlfc@a#!Utfbo7C~BZOnvY%q2vp&%Xq7rO$2Qhp6&2R67|mDYRkzrU^hn_T+f^ zv#i=YN-pmO(VK14&GcZ14ApQ=!#J=gPH0lnj(0#2!jcfMb_m5Z<7|DtHbRR-V{~)W zt?I(hK9F)`?fAgRnCYe~U)JLgy z;^=Mj!N);y9id%lb!{TckeFgGot~a4wKAG@W`0=Z1Fv%84xn_C*d({O_0W3Lq}U(0 z1PUNInG9rzMfp>eB<_kDNfQ9*Agt8=HK(-9DRvnzB5Gr-((aTd;*&4CJ~t$K|)bKPlDEsW#8~*4~8iONfdL ze93d>-7#;J{mOGWxXD7EE-;n**yyn`VF9~wHdCsO_|9rAvG~kprdU`j;lO+%O%1mM zt=9JJLA6!1I<6;m^F;g>nTl2`Y}o#P@I<^r_Jsb}9xN~{GcJ^)yO$%SnhsKb9$n?N zi9FL=<0m!nX#W~S3$-1Nh#7ft;2G;W^vR5f!7OZlT)=ScvT*L1&Uf_#o^H-(oc1NP zw_g34d&BpWT9M?4=qzN{=+ZgFvES38LCXog7d0eH#O&W?qFSKVqNU<7pQ-zBJOZ-B zWUpL|g4jYLkb8Z@C~yf~vo+4_(Xar19Qm~hzjck4ol}sbFQ(jht_X)7;>HkN{PF91 zVLt;CuuY7pMN~Na;0{4~*7(Th=v;*ReCda$#t@mu!dVIF05p#ss5gGxFUb6@td>l+ z#RU^Y(f|z_aN;4xT2*d3_Ilf5UOTBZ?@B#w?&fFLtT1k$RF=XEm-XcVKWWpXY`By1 zNsFww*O@jfS4A(v?_E|;z=k#fg(qAKn(sn}5L?88*gP$b0ij%TUWQz17(h|y9r8yz!Q1dm zb#1G=!jJd@xaq5^hU3o3f|^45{%8uNR-L7B&}!)!u^Fz|+B&LsEXy@VbvEH`NOJ^k z>Gq{nTZK@o9wm90;C!fk=EJ~BI7XphbaOaIZ=0}p@58ydu$XXK0=IdnbvYdHiA zNOC{}O*TIIKCAuXB=e(nDNpAjasO8}BRNG4rGM(Koy#3Qkb}uDfI4Y6FIc>7Q5w;H zuyOrO!O-oP%eyl&C)0eJ)XpS*t^ot42z_Z3YMc=+`|V(e+3xR2s)#S^uxNxtehx8L z{YkSfpLD6=1YkoDK-+WzX5!nDg|FC&*37tCBJ7C{YOt>W)GSM4vOfc{LOxOysV$k0 zGQ2X6dGmGo)!N!&qu-1Bb(Ti37kAzElw4LOp;h=0;oFGO;=J>Tb76%NLKJGa%0U&|73TBrch7R@yi2BQ_qOY2|^plSqAYv z=^IS@F1a^Ul`7^qws~2__)Vob(+Xi)Nkb3GA2z?2SezKN1P*Yen;!64jlVFgv^wy} zMp^=-Q)6pD?N&hg5nNR_e;NDa#RcWTBvuOYBxPLs=IR4_j?%VE4S(!PV=XT zmLqoGZ~07gdWKdyFn|yA+oJgf<@YfW8%)GvBCT$hraJ)goA2C}DEYvXlHkI{tlQ0F z#edcSqA7^zpvq>5T)1yuZfK_2S0z*r;DeC#u&#u~S)^5L=0jJ2WlhWNQoZ-K`IQUtwK8+Lo~^-|48cFS+)rOON<>YsRiHVkT%$vSy^c zDkl7f|6r6@@t!&W~^ zrCZGGubr?_%mv`899)Te5SX&%0Kki!_3AtK_U;{|T6516pgU7UHy!9sbhcyCyydgN zO)~DJEXW~svKzOZPxBlrKeA3wAu5dWWda_{`k3BJ@~jBa1{+EhpAi8cqExCw;D++q z=l&lJ6D?2FDud)6AEU=ns?Nn`DegH_#@VM(^hi9N#Gs#c%`OSamdg>*H3rr4!S&kE zFk(mimcsculf-4hvfA~5UCq=oy>N=&8Qq)fhaQ*H_R>V^S&s$xNkZUITwV*LoV@c8 zVp|)+%ukum{sxdcWdgt2Dt2cp@7NmnIwd@!UJRASLX)eiGP@#~6612S!6$LVyQO5>CfcIB3NRmo}FhHv)v zdhRIxyaRNhlXCuc(#KAnzT&Moqa_AI&~y6_1t5ksu;oljj3c6KX$v(2Z~uBdU7t+3 zg0dDuQO^T@R}B;J!rt1d2Dk=!n?kR(f*bJ?_JSq&L6b5_Ny&;f;tzi0U`YwSHB%;? z@z$Lo)0&A52Uu~0_X@Grs7!q#)$^~gG7;ciMV%{ocC%CxZ>+ZDrtBXz`pw-Ya8~tO z3C66EYK{W9{y%&RKrK3jwyGpN>D_=nyt&XEE^QoX=d8jM(P3s98&^6-Wa%)0hg><2 z;$%;)1AA*l0vHt!SlQ_e@Yc*tu9{u4`Mv&~EHVnM>Xn_u1E1j2Phsd>$Zc zU*)58wgYQ5;e6$l(sL$G$Uq78m+Xu-m&M>Rq%nD2d-r+nZ2UXNJi>33j zi6l;6aQ-O*r+-U(JDGM(NbF)x_93Ua2&PzTtGnCzZ2xp&O_GQMQ3oyLp%a@G-kKGL z&syNoBCL%MNZK_IRNy%oZ`PR3`pU34z~gvoso67K-V?nHDuF_CLkS;y2b9@XKk*y* zJqjf!QDlL~q0g4cL6M46dRDCylZ!KOkbgDi0BLPviqIf$YIELf==)hOE1uU(N%0op zYSWYA-LHBh?p|gK#n1Wx%M*y#MA-N|&4CDeO$iE@s(2J+^-R@(TI+)M*fdxn)fUzJWK+|> zC+m)mT=-H2Tk5WJ&RzR?s*N_#J)O3Hp6ZDL`4Vma( z$Ku$aa6bJs=@2&^7>A-i)5~RiJzzJAEZMaA3~^hPavLz6eINbi?Cv#tc|gLL)0FFsLn- zn4M@$_iq)}V$A(75*Vt1kI<$^>|}+FfkO6tkJt)8{$jW-&4P`4BVSZ?gerqUP3t=H zciOh`k{Yp8LM$+PeuTSC%xZ^;<&s$T(uNr$1DpHKNeoiZ|#Nwdr4fG=ro~I=6V<8@U6JERoOP>q_epu>#-`UvMH{W5g{}VehY} z8ci)$_@x>>+|{MZniPhU^CR_e+P@3m@LF15^|L4LoG5-wZfGtJ$k->N1!_%a|1c@8^Q7QTr;K|7dHgl~dr$Sr*W zTUeGNi6y>--*H;c8-$ek7`U#uoXY&Y`0;|wWQ*Wt$Pas})quz<8UPQXfH*?UlBS_N zaENaC7V?Ylx@L7}?YQGT>uERpyeWm2_aO@42!@EB@znlU+hJwf!B5S1T4ln{(gNf~ z&!=Yv?a)I=l}EX>2@M+MEV88+z($5TyYaU8RSyz`)Z#{IaT%>)(9Fa56x1d z+6Tp|T|fG>Zg6RA)#~omLHF{&=OtgDGeFw zr0?qFOv}_{y;x8*O7rASR%{Oa7z!+C__?m4(OR=o=f#Y)ff)8Y??4I{Y4Yn<`T&gH zJ^wr3VQ2PW$9z<1k>!}AqJpH^kl}8r)6c4_{STKCW_thSb?jGuL*mn0F*pmX?kxQ3 z-NuriCHr}T&ge}iok=}^%aA`zz!XCCS>E9j_L(00%%&4m{S2P_T?Lye%epT- z!e4n91~elJzr!Mg6T4;?7BpH>6C`Y{fppR+ONx?l^#=vVM9DHe4M@VWyb=PWajh|* zu;w$~=JV%5ltubyvf||WQR26=0Bp6xr&VE0U(t8{&>W|Y`yCF+)wiE#y|^6V}?2ZeL!0hC7y zW7KeVVhIOS;6L`}uEHkU1atiSjK;Uy`@ZchwEHMDjf3AdMnQr2V~Yywxs2HVerb0E z%r!#fAg8xZLcb@pO%%JwUFM8y^B-6q*Qsz9(HzJKz|c=?(?1S;uN=(1by6v@Ezj^d z11#zInily1ynvLtmQ&zu8Ki1?Rl)5kRVIDtd1so`@=BNkz=W}@kS6*fFUpqjYzY1n zQ=~tJ*|2}N-}9;Lw?Z+f$`5jvjH@z0!4beEePC04gdjF2pX(?3j%F#Cood%lyh(dn zj*}?o1W~D=TAYe^tXq?_SF26rrB;-x`V%GZLNsD|*rlMV_(aTfLge>rwRNXXecN1@ zI_`}l^X}!UX^R0Q1UtDwWSy#8VQZH_VwPT^79n$)(Om&2(OsnOgtNLI$4feTuRiZZ z$c)dt^iBFu6!9l+hV2qCAb%pdedfCNskhGyZQB#Hy;(MirWRRw&57^sZ6Eq&P} zYNh+|3BfP3HD2S3Q@x?jW&6qN(<}#<&lc7x8zY4?QW}p-6iQcFwX&Y_Tl}HygXh6; z`F_$=#q~ciPu&@I?+lYa{(x8Zxme^)41~kv`}hOo;L!@?QC!>us?Uipg8hGYzGctI z1^l=)x4Zl6`Ia+nnRD|6dl5?IGRY%r6r23?Y zd)(EtKZA3ktH+*eHk(W4>HOHaGLAA+-vdRx$C4c3CObr`N-^qtq4}Wa&2n?600%_r zt@&k`4zmgZ%Q@jBk}YO9P{NbM^+}9j53l$;$(&em%*K%StWwolM@cue`PMC}X=N2e z@ItGZ(fhnU-Z|+#I>x^Q#f0|nd8Q`^dYoCOnz5oGpU(a$Z@M3x`nHL2|AUN01Ekbh zCS_%ou0Vfjex>y!FL9%dJb;~T%dR18`1E9=H@r_V^V*3WFYo9olN}|OW0?yIXq}Sz z@OF$?H5aUS2{x4jEsQF8*cror3{%Tyox8ahk|aG z@F}{;KyXC10;qcZxQt#^;utK0k_*KcM{OUM)r;|S#iq7~OTr|Yn8WfBTZxY~%;$h* z-A(bGJ)M>y4S(OjSQA&jzuUtAKo4XwJKC?JS#|>xp?@AivL>41n%s_A@TjwWWSJxt8iugmvN{4WR2%q zpVypVA9*)vTCvEXNx983#`pi%_3N$K&-Zc@Mp=`u5__HgC+wuDb%8&A)?P_L(#Kdq=%2C&_SwX--p- zIeBmhs@0D=)_0H3) z{qB>A9(R_bf*+smb*n`5V?SdvAb+(SE_V~Ml{WY0$O)vkoZ0F-#YI|5 z=ZyJl4EtpjXk9d&Wu>)Tsn414zvXwhX8LD!c+aSJ^MI4ONDmknE9@DQ15j)ygDobo zAv1TbDsFD+$xSbzEE9#5JNsxdd?8WRH@{m$j@cI$qM(;v<|1BDP)1#tf{b}TwD9{O z8GSBNYd%+Oo($5^UV^r?WD22HJ_ zxSvBHH}+8683j-JUYF~{qMLLzGgDf9sxoS^NoAblnYZc!8|As>em0-13nL&--s`ep zmt-f5l)!cFF~R3NMseLG`-ESMDpcPsHlJXb>#3`$+*$)!U1AkD8neLO=|jftCDwd? zMDj~*7u#m6&XT*MxFXeiS*aK68_*arEQ|2!XPZyI-yD|G;;6a2o_pp_<<%NumR{5f%mYX58!?7hm~(Gu1kpGX z|lZC+uF7n*LoAB0Wj#KZE!1^Q}^N{|rPN1qzmB3&FM3l)7>kEH0JgAN$%=Go!sj_HM{g>dWX0Yz|$XtG! zm|=A(e1^}LK9fD@p`N3KNZ~mszn-Vj@36!}F;ZFKrgJj7Bixf23Q9OV1H*Bc`!_>Vf|Z)Dfq00OL29qs|Zl zJbBDsY9KXdFV+6YsVeI`NY*2B@Ur`PWesIANs~(cNGAsk{gY2J5cGG1{p=lvwey`V zch^yLf01J|{fTB|l&8w?9JH*{c+lvrrK}C?%j@#l=J!^_RoNrzWx~a=ykV7=025=c zzr8ZU!*=T#E+vcK4ouU=2!u;wcCQ=Z5sPXP#hhW4pNw3tcAAN!ttZ`%02^csNf)yx z#Tq$TXC?#=O0ueN6rS>OA0Ja#;nvK=tp*p(aS+PywM7?aSv>6(1L$4oqguCk-qPv5 zt}3(G#0CkKw?dKfr8z?g{V7EJioL=U&ahM!2k54)CZBoD-}WV|PYo2s4z9=LEO1ov zavs*3J1eVG56Wi-SaVS+;%a>yF+1TsD9=FJ+kEHY8!rb-Jix+pI7vU7K*$q(tuz8 z3_-EaJl`}u#*Uh?pfjuQY|qDJ~|h0qQqS(K#cj9 zcj98*N7mTiPB%ech7wPB+$4XGvwO0RSAWc{;q%1nVRv?NZ|^*jq{y`fm542hO-0K+ zm_-p5#qQfJSMWLL1r&1o@wItQBP3H{{>7f7^<)Ol2S3`JN;NQ5C|*F0=Qqn=%vezG=w)_Bh^vZ%oYuefC$!B5(_MGY^H+sg6ZL)O z3>OQ&y@@(to4^$sn$RN>ewq+;Q{MhM>}1jBV2vNgL*M@HI=tJquW{e2vXX=<#BXcAjoU`2F@PXZ*Rg93LRPPU43 zTS#$0+b}#%848m(L*Yv4dwp!&))hrf^SbqXnA^7`lbZNQaTS@u=zIT1(Rs!t`S@K} zmI5N8;vNC+y%kLhaO4)vm097)t)Z!zjUS-mHryjCaplU?ENz2(RX8#$D|c4bU(L!E zJv{Gu$%mW!d(OEo+^q-nkw_&BVIEQT#zPI9RqZ`m8>Bc$RE(r61OTCAtnH={AeD=x z5`?G(+u7!VT)Tqh$b#=gy(Bsy6$H$t;Va)-Y7JOAlCF#fg32L*sZ1Rf$+&@^ZoAcw z?_r)Jfdkp@&r|!4^c_C-Cm^_{ zUt55GG|E@o17QWzKNREOo}G#lJ@^JmizjKZ>;0i}w!X{v!aUG`-v9w|hyK{FPqsK$ zw~tA^ap*G#>YN{dCULEd(ti*$ebI$QEF|Yj>#xenUl3;luvG39pR_GWvpTu1E0tzy zji;z~fvK#qs^DiYxu?oS6>^8vU4Rt&po)fRr9xvWF;k4}i#kDcII2zwu0cIMotaBORBg9Ltb< z$y1e_Zta_Zak#J`0R`y|f1W#K^|^}j+O663>2e(+CntL+!=TVR8yMft+R&?OR?ip8 z`@#YIDYgDX6v`ej!3YU~Is0Zozy~DT2mOFq5NManhyK|BK(#?aLV~Z2YVS4Zkrxyn-;k^?`Az8-SQ^7Bg8JUtF#lD-FbX#>+hj1 zm6-0GLtpayuastnpg}zsK^C*xw~J4PB#rK9c?F*z)~e}OZ|}e1K-Zfb4O+KD+i=Ug z`*lX!%p|D~TU##@6puu<73T-#g4?SX_zt;3eoZ`yHj~J6eN)7qt=NCl+pHH%y zPb~c*<^7yCY-bvt^+?O^G7R2~Nd#F^%9Y&wT7!mz~u$ZD_;2%_z?Q9j6{p* zO)$i>#wBLk<+R6w;xw`PPfT_Lw4lr3r1g$!iKAMd%yc7N-C=qH2GE=Y&~E?~gYw)d z%Ck>2%ag|UNsTLOf(7}T*pXw{#yru;&p7)x8dqs@Z^RKb1PqU8nC1L}(Jc7bu*8%n z#`NX(+!F4KXKjtvVJ{i8c;B84059D?7bG-00Cb|^$sKq-p@KvqP&Np-DYTl{0i_V$ zdys_8Ncw#YL$$cWRhfZ&>h+fyB$EdN2BoylE{0YmBScTUI8y+oB+5|*IMm@_HKtbS zQSIjb1M5VTeO6c{Xjf8-M}F09)M?l{&~EhLwvnBRuqJ_o-75Lcb3!LAmUZ{*%=Tw296vm# zTmR-$lh{ZCVJQIf{NX$d+2K$+Kla$;nR+crPp{qD-p*)D{>fHD;D>LGo8dBt;L=P; z#RZ4`gmy!~aeh(5fI8Y4zco1#39_6Aj;FCy-TW%4dA%oLkN)HxhdA8a1S^%rDXh2O zSiFI0n{eArNjM(CdW4aQLV(dR>@X|0>fbfKzcEX+N+Q; zCXfPR25&qql6=(XdM7wXIZCuyX@cm(#mZ%fqH+~$XxBKLR*q1`t|nsg&V>lqX0$|Y z_IMj5$iTo<>7tA2SDe|UMBTq!C|c1rUkJzpnWnB;s0slv96; zY|+4Aflf$BXoFy#(Jz$Tb4Mm6iU!nC8?a6-!>WOdJ4qptZ8}LnT{oh}CIB_KqCw>g zYlZ)S#r<`ORs{q9kG(Bh2QBXv>V{}H+w{4e(ovmbGW3ms%w8V%^J_U~ne`BFAF z7S~T2Zq@q?v40K^yQEiKnN=@MC=!e>IxlI?GcZYmO`SWjIABE_Omos?as9j zUX1O$C7=b#EQ;aqoP(0HJJ6o4hDtXsJ zE)BgmJ4Dm@i3(p2{_}M_`1P{JH~;^>-70Jh7ECJduth~~0Yx8XGR#T?n=)_1#dkNa z{?hD&OtBm_0_Yu6qf$=HcXmMiOwh*2wg2@V>X^xjx+hM+?||W@SB@4cU3i7oo+kMB zI>i-lj7wd2t?>IR*A;uD{m9)O?1ZqGLN|rm;E<;g7wB4{pYGn~7x!w6awifX>KLcc z8$H{TAnKBLv@htc!QWrfUu0W@K3tr#P8%!NB^ItmI+rl{kV2g}&NO=^WT=`TklRP8 zmKQ2_#m#Y&XNCpdd+KJN@vUL^*MyYCzNv{bH!l;C7I`_MDegg*)Wx2v*S-H^yI*rE z`jv6yYj~z4G5!04pWW~6s6l${)6MW2LX^^zr3}&&b!^nfX=A(VF4CsH3kFB(8mQ7e zF&8b7o3Bqb%=#{qZYK77U`#c=uRs5M?iXw$KJb(KWs5J>4@Qgr7x$oYJ9M~!J1n9b zV6^b<$BT&uSoM7f@<7`|?47!_-b~BPcSsKJ2JUha|GE<3gm*|%bj=m<`6$zUr zih7BMnUp&EF#hKt+P0FqoGnx6RL4{+#`n9D5O+svPL;Mm%E$q`_C3#B6rbEOJL0n; zMUG`NFDGtIntI0dz}{EKj1nC$pDMl^e8uN@XNVl7Sz>tV5VpW)+F7}AxWbK@O=n^m zw7SCJv=5op(IMS1PjAoa-A3OdakqUhYZds;9nsFz@T=OJZE7lUBZVu3(Hg&b1!WI4 z%7*5-`@KA=3~`i;U|;a7bZm+8nRoK)cg%8aa88~(ZgaL|hj((9_({p|Hj}kbr*VYkB+}q3IuI! zA>qV!FcHpNezv~bAd#0yJPB6O3uaaYb+!o07rT+Pt4}DUlr>Qzx4~G?pstf4xj}%Y z_hvyvNZE;E(wd~IfpxBU!zxt`rC8lbkCrK?4iwtSSg94;Q3FD-N|T+TQoZwup|;$~ zTW$Ie`Cs!2f1OVk?Vj0q<$7QgbGfbapWaIB+esVM^S353xsg4OfjMCkmfizIQDRSJ zC<+bt3PtvEW^Rbx-iTb$U0(hP%lw)hdfTL|{OGrhq!wr$*p3PiDUny8~mX>MS=PfGO^BE7VC{FJ= zj4j(MO!q_`zf3>O>r1#EBxdaYoD4H5q$8r#K=2y@htPGboDlo`+^6@-+i?~MT?AJ8 z2FB4cXeuwl#!k+_6sF%qzh3ROlH2>r*Y%a$AuGpmzivj3J1b#`A|@((y>m*i49?9J zD`sW(NOTuI7Y)|p7Z(+^)=7tE7E?Ebq~E}WZwThW(g`@(aoQp4X?9OgU$aE5T(;1; zjRE{~QTMAK233wz!Ta_o!k&F2I@GfR=}XRvVn+ko&j0LmcF0#apxB_<(SJ)&RFEow zLLB50<#PnDo6VeI9ebL|si69B!>D<~i!dpFiUTsS4^9Fnl(p?nO1UpqjVJ+bYS_DD z{GHQf)DAL^8_-eSO>k!5WY6mG40bJFQFHk`_RAGEdKLJJ`5N};2Ku^IaiA;_asi~|7c ziaQyH`1&&dq*ANUgWC;5$UJJKVn{DoHb5ixWE=2hTJP-rp!WyQ!JdWg$yBW(3@uql zCclDbEC<2sw#5l5L9=$Y>&H9~ygYnVL3le?;=HHIu95$rKOYMo|MC^+ldc8-RY0bq zHx&z#V=eDVzz>0^-N9~NGWe++P<%MLl7g|_6twg@>(X)glG+MgMD0baR2>SU=~k3u zl+BXPNd;8oavBxdjbILyYZ3yjRl>rG$~Ude$){-e;WS5F3tIMBEFd2<9j0M+*7^25 zh+fzqhMYHxVeFj%vO(0#J+E6}?Fz3VN1W%g-yV7i_T&Hh zW_aV{h9mz@!lgU?L;K=<@OXVW53sR1=f4`MXtird;{H2;bhT+_7rw+N*;WoF?TB0Ujb=29;YK;McXy-#cO@}o|t`aqtPo&0(77`GgbMo zQc&eg`EyLxwb&NX_b8AIez37ceJy{O_h_X){YwP1_MUvPgug)TEIXy+0_ zP(L1MrqX7Z!+>Xq!JqEOC_)eBHii*J`~?{EdbN7H(5pvBfXJX)>o1XkPvJh=A}oHp59{GZUTrlNhtC5&f0JjB234IAxAbD zQfV@RgrGu|$P|)fI2nB9I}ia#e`7UmT4sW@(P*rbV^e>@iSD0G%@@buzT=&`e(9w+zyexvMg zCiwG|mxv6-#r@6h*)qrHy+TZV#{|9RgE5KPXZOomGk;HIUqJ=;Uu$ijE)ng~d67d~6(*4yVzHZ&$``$J%))ny4R5xN z{&Y7i&UAd4%)m(^3&0^uQeW7R88AfTK zIV3hoDE+mN%l_|UZ0kew>x_h73`(A@eo|Vkej=ym>_v`?WH;69?`OR;XkD_NxnybwWPQL9TVm z>4js0)X?@zrfxh_?*@r=j1&_qRoZadjVM1Dtg=p&e9)Gz1#k&#kaGGYA#h|&(xu^a z_!dRU##p?jwl`cavzRhm$br=@LeN~fx4|l#T;+wOpi*{NIg*~1?Eqy2)EWG*sc6f? zk&)AJpy$?PQ3x_>8^`o^T4N@0iX$^~cedQ|OOYhE!P%4hcCp>1@!dg0Q;$;)fokpq zEE{YG)NRvw{8g#qk#LmiKTsr$v{EqtgsmW%*-`!JxdvIc3o;}GfhJ0~G*>GyM zEM@Gx5e!Y_; zG3QrOYFEtWYR|A%PA~K8L>ghH)nCL#51DQXbsR^DeJT)}CY_!oK+QBog|Sy2XaLv) z`}^uGGgxt21+Nw2^wsRz7wn+lLXB;r7ancFelSi?w*qdw2dPFM+_5wFpMg)L+ir%= zEelzYiSHIVHT;3<*|C=YVdc_F)M=*`3{FYSX1J^2Our1d2R2BAyE<=CR;`WYzi{RH zFwnY1;frC?dQOH`|Iam)wlS8s>5`78iFz-Q!ztw45-@Q5!8nkqz)xo>zsTW$?J1tmlXA!bnE3FYJUF>zQGJ(?(nSb7tkcrj6sLK_S z6bLZiM_r11qM7~sjpFa4N7ArXkZC2~S@*q}(As$AHsebMJqj#GL_hI=Hj;8wV##?e zhiJCkz2L9Y0L9XE+1=oMi`+pHTSf^h$w$c&iP%7}q}x(i1I6`081zBpqCvOoeY3?# zM^*VI)l2P1to43PI!Cw^#G+dp$W=)B)z{a{C^oob^Xhy!7DSH{RloV?xHI2u9)F$Q!FPG*7x~f2hRxjzM)39F(ndmaKL~|viPma zM}k!e>l7rJf~x(dGp&a#{tTyJ^b@767nct%51i$#z^k4d=uc#u+=9Ob#?9v%qg#!% zqEk_!#(t*_2wQ2ZItPY%$B&jE6zwd&>B;W4DlL%JFJkvN?Y^yf8pZ88bxBl%$m90m z;wD(BT>|{-B5a2s=}i}HmD<=LQ1aKM%sf_(cSv(wC3gwpcQ#zSxpHA+B6DA%2yWOl z4E*iaUi_N!hSchE7Lz(Do#tdpEefG>`$sz-!+Va%v?!`92{&Wp1B2n~wGW!L6m!4Z zg`UhG*9r;2x&4T-+u!rp-YjUh#74Ioa<>WzVMDyA*K+OpE~YVqPVgxvZEZ4NEsKsd?AEdw{uI9(quT5!N5EYN$_J z8M_)Qu@hqH5|Qk&2-XAH$OOYAsVPaJue|Ndr*X#B&+xA(FdP7n(>G$Zik(LpcA)fm zbs*7tLsBmM_PVZ(rXL`^B`vi1Rew^dpij?A-Co``vkUO`F?DjmecUnrsDESyV=Oe7 zm_b00xQSnG!i2bi5v^0X)U&f1h@rCjQM3+_JL*-<%S$9^S9L7gDF8p%Jv}kF|&?G0V28T7=Y4pplE&Cl`f_ zi5WGkI1=%e0uk+$mz`BBTuFn~)w%|9Y#oY*5y486Y(*wrE|Bd~NO-?oB7JO1Ik!+{ z8LKi)R5*Vp>%!>4B0s+#SI2}>#ZuxLoG!-ien-VBcKuo>1Uz!r%Etc-RxmdrxlY z%wJyu#cKrEER)U#Ri_UvpWQXLom)0El`<}mIN-Nuyeo`oOw0V5eDqkVSXfC!SSna( z&Z8cimGB~b@RWbP_Hh@NTVO4#Yy2?rW;OJ!QqdHy+%PfGm;0e60Bz=hR^euJuAdRquI*{h{=%6 z&yq4lx<E9;Qv!TT&32f-=a9P! zBXxbx__P81;aO@$71cO%ltH2AxLx|6*HceSof#&1)V(SOTVrsQMpTU7(FS@bhXji_ z){5VIrsx-<5nJ~tZHLc))gM#-LZ_|v=jI~#?MtM!khu-!+%bxj$~ZEJgLKnGEpl2S zH33B~uhIr|u6$&tq}O>$Tl0X{Y2OT5Re^RQCL2Jb*3elEc#Go=>xDXlhTPGAlEykx zaXwr4bMs&?o&O96Ok{|4wf7DXL|T_>C5Aa*y~5~K0&KR%D5oMV)f}8|ouoAYeXrUw zP*-0P2z5C8Y-QcBsQQ#r{iy?~ZNW3}57CTo(qaIv6m6+(g6`;x%L)dPTRu^q-P4HG zl65-8g?E?PV7XTtq{Hu=jG-y-u=^fiU7XS#4umH*5>A9WzduiSpD6l1B}TY2Lv%P; z4$qYcaji^<;S1B^m4dc|DghNZgZppPOtmz8GPt+4@t52}%0{#l>+&vP0caW^!T)|> z&~H}gWxpmsO$OkRLFo>aSS~x!n|}Yzkj16T>Lo59kH9F0vU7LiydqWA143}JZned& z`&ATA(s#YNIyiJ;Q`fJ8?lQs8=S>+K0A^U%vNPLidhPvwZApCDFgklAO#)9o@qb& z-yq(k%{TF0*B;cEV8)h&rtMJjzpr5&cP}veaiqv z8lcgdTWUiT*h|q{G+1EDaQH(g*{L_0(lJ7m*Q%3o3&z?>{JF9yoJx#%7%YvHbTah9rSa zF9brTc|ewYOkWpM-T<*7tVHkQQc_;t4bHkqcZ;|ppVCe_A?>TzJ%~-x3vrbGwDz8T zyy$`4a}7fS(n`MJ)4oxxm80Y+Hb##<_+NMrAS>xPS5V_j=qnmh58a?Tt0p!8oRs_p z93W)4lPp{D&-S6x5J6uY}^bNrKGXWj2repyT_1&2y^bxhH&@UfO zW}HB}XjLBXkHWCC4XPvA2@Olm22=J@6VMH_hRaUioQ9X-HPIy zR@_sQ^8A5xqjH7cfn|&uHKa>55eEgXtonT5Ecx0lBf;=xkl7Q%`JfPn*?em9O?`=U z;5fMhJ>zbf@Fa6w-6U%{`^3#SQknijl3k9}0loc$__t19=Uq0G3IveME;aXv85%q~ z;@UBp!-gus_hH&;pKs?xp-y!}lkQMnNynF)XFS#0pWm5o`F5~>k~g!M2*>z>r(w#v zlx0V?xL8K5{QGUWG59}Ui7|y2+=Ofq6`Q_6xE()@HUL+ho*Krz2=2{DPC4%lxfruZ z&6d}OH&ZUU&R4Lr;(ewtO2J1pl~YrcB%N|oR=?CI-@GZJQa%-Buq=sZ$wQN^56I>e zp259S#iR&HX7AE?5+dK{zvhI~o9f4|R|rtEFeod(XjnQS?BB|NvAObmcC6ovwDjmE z?dA`E%qy=da!)z43A95V@Lz>z6nd_khm9iNv02J~S$9d!EE0rNS|HBa4U?x(bss1SDW#b1I)9#oW4~h@gv}jT|zf6?Gg()JxmpN!`ra?6cXf z%5TZTI;167n^J6HQbP^_?0A#%w_lMTt)OCsV_Cx!SsANN{Vr=p4XOGe`K5A04B&_- z1s58!3ZSa{t5CxW<&N8!jld2ob6Zo5ilZ}o17tI?;2PvH)6RsRY>iN^M7ZQ zrPhv5mvJgb9X?M)_jTs^Fy2oOIDtCt%yvX`vkfS*6LEBHzyAzV|vd_-VtP-$l9c*Etn+ z-{R@CbW!WHY@sEBy#`6U>~Mq1C$~fNEUizTy7SF{VbaaftrW%iPVi1kEi#%%$^r51 zF)bd?-D$0h<)v=ipG$_eO{S=$U+vWXRRy=E6-!lg+dXD}`Cu303Sb#N7hgvu3}sq*V)h!%a?WlE@*X{ z6){$+IYH1fhhJ5mH0Y#@iOw{Ns%|i>!-;wO^>UCA_;lq`4s$)K(D8E;U1YPiA|-`` zC~PB%AR_KwgpVG|+A2)8AzRboX0|F9JZSS#SOCeIn3N4xwomdEhBb@Xrg>mw!mLwL zlBD1`??Q-NE$tqcdeGpCvvesAM1Q{pj{E8_W&82R_M!1$bC#6|H>dt7`ss`pBa1XV8lNP(cV(Uo>PN(WW?YW*b4;?um>?&@Uc$u{$a;>Rk4NIQ;Hiw+Zu?k zj%JTC-BtF2lp-1FgQv8=QufPIU!7E_G=hf^#qMIn?$$c1p(P=vGPSFWXbIE1LgHT_ z;_~lZF0uorS;!>{%#RG}Sq6_$6IXezg;R+I+lgbPr1li~F|d(ou!KPmgY9$T*d0uw zP|_WOSh<8GxGVTRR(oqv>;f<81xu8{625R+*i}dbf6``n1^Ay9CWZhnngJ-&G{ZY# zbdItL53oj0jpJE8#o}~3q4+IaV?D-X$J&5T@l*Qdece<|B{B8yiuy;Q@2@3~c?oMo zowxjuhgi2Y;5LCuhWyW-9D@pfhsEUnP`>}w7E*^h6@sCYG;5oD53U`Yo=O!f7Cvnx zLfQhQvmk+Fh(AjWVxl<&)odCl=v2kwx`n;wB2P#bUg(Y*``I_s|s4w$DDI(eIr{zfzGoM5MMe^6et>MXeZpP-=EdER6~x*E*O{ ziq0A#x#8lrEy!uiQBAF5>Z1~Tumt1aPsu%vQdg@((sZZ&6-xSAWrvK7dmP37$sq%a zkc#YdaarnBifj!<_D!w$$s>r4RcIkabciPQVN0yIHpZC>_Kc*h8p-=OQT(8%he|U= z9Zw5jEc^G2P{RpILmKb4Rj$&Q8cB*hn51bGa{RW1fH+oI3ju~Dhj$)8cVo`{P>tg# z>vjT<`(Kop8RMWd{;{iXA+f%@p`*W&iZh$ z@^Gpvh5#k`9vhBqno$j_^S+Pw>W(}s9(E2G=6$!Gus3ipOG8;wEx$-cEBJZjqOtmE z4(uRVB(zpIoTV1a<70wu7rfak08d9QX<2{o(@4OP1w=S`pYzAN&wU>xh=yQ4?hlyn}&X*@BsY;ccCWTol-h478+*4>4n( zn1DAsMVUrmGm74rH^{W};uz=XiiyGh1I2iVRf<@iu{M`_$oL4Nlq@n}gt#qz#Eu33 z-TU8Hvbdx~soPyTn4Nf`wA63BQLEW#6i{Y^FO#_Cr?$caT(`jXxl!7K%qs8>SItNi#V&@8k!{(8%i6 zs%`;C89@(rMkKR@Kf^TH!v%y!Ob$amkr5?_Bf!q7X{>p*9tn*q3)4#0e6n)z=aOK1 zvj45I+EaiEA`sJ6QQ++mE%}l7H&yIkpFb#vq~~*?ip?Ct!2dGgZ9I4oxsD%H3%wVD z{B}sL2vR>K33B~y>K_Kp<%mW%)Ni1~bYKl7MC24kvP1{5KoM=Dz#rD?Gbwr>Wx*!2 zJGLz707uOCRb$dBedmti21dN1yYW`}0B2@g07h(v7{7{QzSc7}l^ww!&wt>i3ve{x3x%|k$`CibQj3S(p6}*h&;@GyXhNuKLWa53M+46 zhtH<;!&OpADs7-MhRp1eAGy1cctMG1U){c=clJRUC+&dz)TWt2L__sb(f&x8FkT)G z^v$|$=3wgbnb@6uu*65>k;<31tO1#R(EiI}YI)FQ+k*0_F{k{)&xJqMLr6j}NSp9y z?KII%@_!-wFIQ+rKd-5JA1>T24A`kg0JWa8t;kK@>WGe)#E!9*{-M{Hbex7ozJ~m2 z?NESL-LP;Xk9f)s_<|<(ubBzSVLR8j-zFm{zeFb~FvTe7r_PdhMu@bnB2zN>Xb`xE zRP@MVXoV8*{RwHC+g##>oTG>>@ywn&G|1AMX15S8J4Gy6UA6v(r|rJ;o|lkp~D_Ui$L*Gn@geI%ALXngcN48ijq3!Wx|;= zy*Zty@vm!C`1CV5TKJd7)spId!~Xrdv)4K*a8)xQ|E9=Ui$JC4H@<|{42NEmm$U|E z;P!n|rW=JLl4|sQ^G2i!k4rwDs0#l>^i>=bz7{Bwi2<@|g`+6ygmCM>QeIWxH6B)m zJ={A}`NLPEdw)?V=C`qzp)xtn;v`?)Ep`8!LRD$<8N0mS^#d{)=Z>w_*2_ffQy#?Z zmJDRb_p%3lKTDP!6-8f1h9HW57>U25!3Q|-!NidRoS{V6@R(7Yy0*a=O2r&)Sl3uS z)<$ASqea&1#ludKK@*VVJp4iDfA@tT=e8Vjm5%*n*k5R1X2;GKh#A65OfD*xT|yXB z!PJgL=xvOtwGgX1U#awhjCs8bo0=5&L2MZVJ6RfgmV(sDYF?_9^o36Rm%|R)kT`)i z&dV@4)Fta&lpXo4Ffbgm<7LXtSL&cH6tX65Fu?OERpqKy+9^O?jMtq?vbk`(e81}D zPO#Y~fW8H5$jRHs08wdtkh?l&?AGPaxuCfIYEen@nCd(FA}~cmlV76z-WcObefDk|Mco&?o3A}c*7=d1c{1QWjNdEaivOMO@VK;(!)-YFIPE@?d`tnq>whxZ*5Nj8EU zw(ns3*vR_9yFXc=H#`pG2_nwk*fj6jhzryoyoqmrD zV49`ds-sF8dS~i)WV9Me%nYBT5dGXaw)CHt_D8b#4=U2yN_@E!-du~gLFpMK$@!H2 zxBsQ#H_qHj;%#cd-2yLUl0L%kFp6Fp^!ppwZ42B^L5_0}FTNwm7|6xV`J`Qg_&=gk zJi~t`V)@55a`~I3g`Y-ipBR-FpgTHcEc%?MF;17=UUq_|NnT@HLgJN|5lZq7dz!Fi zlvu6qy$&U}TefRg=n`LcGB=*TcAauEG1-4;x;BO-9IgdrP?&+WkVIDbn6YpPXJH(p z4mv=N;RyS4Zj9@Yv&gu+Gi_X*rwvADlPK-VLi?v)SC7kCZ-&_%33)5d@YZikxxE4W zeA?1>{j%XntM6%kuw9RT+xtX59%M$S^qP8Q-^zQ`zHj+F_B6@st|}I|d*&b4d*B5& z4X=r6#EEp@^ilVVr*WeNun-R0sxrUVbuqKYc5RC!(LT}luc<|%sXZ!W z_P4_3;hmPlq=hIBFmVf1jse;T!Ty&3L8(72+Ny#3suZPzVmg(Rj2`u^Y<*s>zAVJg zVX6}5>7cTD_4=RtT4&z8f9JiSGGn#8HC%;z-?bg>aIz>A|0+1O2c*dcp>!vGxFNk|7qsBryd9lV8p_ddPpAzDMx4UM{R;G&0P6%70wNP9;U!d=? z0al%|Da0~7XlAOOWSv*qznT^aQ!b&F>l}M^#{J17{Ws7KEBw~dK<3Ma?NVI@(^DrN zHT+hO3%pI?HpQ(ky!;x$tFk=twW;u`?YUi_k>B4xc^gDcPug}%hK;hc-1t|W&W3p? z-xIuSw50g|Idd;@Y^KpJEB-7#YBtUGQ<;^VN$|@|qLgs^d}r`b?pkYTi*I+BU!e5N z+qZwu?QO3;yME%}0VB$1(|`AxzF0&A zu!zz1T)iEu*bq>hGw{^Q)L@kfl8#W4`hP5$(MRuaZRs7+? zf@#!X(LO$kD|uj=Vh7t#H424TKlN?QP&F={q(qk7 z^y`ci%StSc^gMFiMOUYV7ow$VYF`{xV$oEW&ejnQY11$9NNy7g7;^h~vwqqsw2&GAxK)r!=rwi`e!yrgM4KY1!&Z!>m9#FVmgWfN7eLWs@D40N)Yro zWJGcZdio~SJGU?z)Oe?6`QxOmK-H+f)(nuPds zowxUV^{jpJg5y#Hq^*}xOe=d#cs7L;>%d3tH(EnQ8r!LbEEl6R)HH*pPPkGD++3EL zk49IzH#J1+VPAu~AKOl8nZ+ccfnb&#Sb3gMbcq-%k-Aj-s1SJbz{x?~yns4Ii)o1> zCy2Hx_{EmT^Ri6o*wjUZ(JcjU30a?Z4bO}hBjv!#yt~H6O!*fc;3ZfTD_>r1zRJx0 zR`*LtvFUT3qt)tmPxX}n#pzCm)mZMWB#x@`Hzy_z9c=xtS-{%VDxRtHQ**b-igNqy zWuCEZe&fh>+e;HnBWi+WSQzv4JB+Y&09WPF+H~Ar%dr#&QS@HIbbRW}N#lYsOR1$g zV)`wVsqPOqXu&d-El|e~v-0?^eZZ>Xb0{5B8vtl95e@s!1El;FZ_>v3qj z#r%5mjdREFA)2G=Lt?V^EDdc=RHJUP6p6n%?S>eYZSsNSFq{r6@X*L(*sfOe>XX)xZVOd54=cmH{Wu5*l@m0bD{E(}YwS^0MGAD?nB3IzYUDY@hbQ z5F@fL!Z_|;mp!7Ntk<**KW;KKU~yndo4U2+>9?J3Y(_#RG`pP07V)Ki%TYTw z1V4@lY$EVS;pbhxN&g)Ef&Lp;M&p>;dE>GNOY~wPNGqoZ33z4UP*JGzxfROCKB+^C z#tLdu>2jT3RndDA*YxuW%!1C03Y5soZ!01Cv22(-SygU}T4?5Sy6|*{q;eyyab^Q6 zuIgS<;;N`_)f4RE6R&Uj3LtFRbGp}GxL)D$-jJo1F~slBa^+WPl;NANuKd^?0hCzd z!r$K~e$CevU1t@i2PI%5(!N$@i$c_VI^jO4%g$+s!xzyuJ86YdsSpknMhc2 z%TvGLW?dsW`vjA~eBLvp>QMGEpKgwO7*#vDtIU2A6}j^{Q(OA1tF%SJjr)VS=f$`f zV&JlLHd^H1XK9FxG^$}z5G)Y8B z2j_}M`4;C@(hGLFL3`oen`iIRD0t)N0b+6j6$9YB+nAs5G07u_@gLiD@wW-lk_J~W zJ-40xZYYkF1@2?um+nOE)G<%J2lx1u61L--1-X44wC zUMqb}+bIz_<&juiU+`<|NBrDUmDwXej`l2FZU;ggQ9WLT`zaxRWAf>I{ANPwSN(&9 zhrsxK{X_wUc3G+ZBEiz|ZseMQ^11Ww>!!vvA2NcwZ6UOc&XzVb%oBItE%pZsq`T3hcE!u=;3oatuy3oDjMPQ^h` zlR&62BeZYTNb+B&L1Qrf`C0tox=T5VMHC_CiPWMHTE@Ogpv#_cw3F3uxtp4s3V@fF znnDdG2*O{qth%E}nwz9v=O#?LRsYiUDp%`$ufb$O4gZAzNxGO3C}hn(cll2z1kRRh zICmGbqNJLjd@2&68A*TLXRXV-m$Ybo^Y^_@UA68NrhbF4qNwm%uDw%@eNVdm9no&> zu`9i8D2BHLB?lWY2B%uVfw{SNSlQC}3=2G%hyo29rU&wXJ!BPqD#(HZwnAl?89|jW zW#oi(B!Sa4U&6#^-=vk=mfS)LRi*{E{C!>06rjt@hW`4Q>kyUhyj1a*nEiFkOqNPF z_*kNggTaflyFzR&_li64x<$~|C>yBK-tbrLoaBbu$Xm556X*`8Zdo(bc|YtSD$foh zlD{_jYJWOo}O z^&xXqI>QU*DX?(jVe9Oiu0Z-%Y^gaF?f5e{HK@|eTXk@>QY{p&R#K1XsZ2U*nQ~wF z%>9hlt$3amm$#8Wzj0{>YS6sRjLEhH%pmN0xQQI%47qPp;eKL3VfWFhU!21G+IPFO znM4%BH~=D`p&IP=m)7??{VIAgO44t4z5mDcw^7k+fReF~MAc#I>fcRHosdJky8?Qo zD=s;KC$HS%(eE%l9cli;M~y++tasVvDZ4}u-(-d zU&O;QYFXrIPlnK))@)cQN9P&nsl${?CO#*l*`kIg(;-x`a1Iu-T~NTGrxk^f@TTyoPV(wI6M#lWL$o(+TG_0()-FqpwwHPP6WfS}XO?A_+9VGNa$Lq|- z#byyHc}#xHB1menW}J29iBLnCL_v8AGts)?x^|&^F4O#q@E`Kc4x2tjuzKcE{36En z#rYXQE=3W_bR=ZPbC^L}t{kw@5x7Vy$6#W<@O$$Wey)#)wA;mdlA^kkqE?fh&}M0D z=J0tjjf;KYp^ zR{`Q4;mlR3si~=vS!r1h2rACpD>HDVwp^K&6}WO$YG&4Bg`={v9y8m;_vi2b^E&5` zbIyJ4bA7JseId#j#_0lB;Au4^k$9Z2%DE4VK;-O9oKYN#<2` z!@gUA<-|{W7c2)NVYWZGXAEQrK^?ovTog%CVT0{(7s><(E}UC`qy(5rNCIrhcTVC@I|H9Ayw{$({JK%PV8wrs&wkZafelC+~ZsT-&S6Hn) zPAAD-I)kk9zij|bM8HYy<|nF?yON7L)2NfWbN`)GKN3A0%|rRR+)OBGN!yT1S}2^^ z`{IXtt6zUvm{O3E`B2?&?uAJyYY9LewFCjH+c$>K+h^JhnmdP!p`Bl*4xyzDm{~e_ zF2OxZZ44aclG}ZtU+Xh9oKhNk=cfP1m!T#>_27D=Jd+(p-ptMFD;xQ59WHTsuyQ8b z-(#8*3Dh7$4NAF`ATF&_{|Dr3%KG}_e`T; zdOL*tv-`Ue{QT>_-Fyx&5w`Q4vgHpa&r=u9St*?p@>~E_05uuT=gRyx!eh0j|9SK3 z{Dn2?*h|yOhzC{F^1e>K@rO(8)ZkObN#Ha)qQ7?Vwd{xZfEtg*-b*=Z1CO6|6izZ9(7IoC4N;#g zh(73gbvt|A3B4Jaj+?KXJ2nJuk-r&uCU*Dfy-SsQhXi{ctaAT#VSBYnjq6A;D6w`C zC9!p{6>H02wcaaN7E$3)V&uzA5_GMSdrI8={`yPmlbl%HH-krRE;hfGYY8czHeC7L z&|}Zz>E5Aq0?n~tdESf_ne9`;K{2@$28iMgR$gNTHdk~tf*UM+cM5i(eJUwp--qGw z@9>ZxCX#~^gZTLX!go7}h1bmC%-+P_f~4At`h|`hEdDxHaHX!ICjCM$wxU#xaDyQL zhUM1-g#SyDsUY!Oy6^_kHHT^ws^)eS2Isfp|7B{zXh#Uwcrq(ow)hYyq8_{zz>yAk zZWYhTnbP!i7SP{aF2={-9&>7W&J+I5-`Az&kq5JN$SdM;t6+|2u?7Fj+a4!7k>ixe z-TCl8{uF3oGvM*fzaF;4)ya^6Z&|rPcc3bq#~7WYhwc$=^%KwDo9GgneQgx{BolA= z0SwgZ+}~Fd7S!Y8b+4~Z?rAWaf#rH{Y8(7X5+>a?n28H}h_3c3MI~^f(OGu!L41j} z)Na6=I|(I&vi8a3mv4v{>77|>HNbz|voDp$`68r~f5`jV+=gx&Z7$XO43qpcx_wA( zm*VzsuLZ*=^K|<^p{{^T(3~CHka7x8xlP#|1F>X)yyLU1enQy1ntGm1D_%;j?T%Nw zQf(FyeXCt5WN8-BVH8`rZ;J=Zhsed}ABJH6$$8Y?Uy<^2fQRLmjlq>P`C6@adq28J z#llXcRq}}20rE(DU%0h)joC~A8(n$mnM$x~-X}~!A(K}VUzt&A;pyy4oz9}xd>r}> zR7@W*HQH6k%9B>RRD~X+9sxc(bvG#ULO!12R?=G*^L z4CGkana{AKD~ANV9|jt<@9w*nJ_JqbhnS<2~@xXwb^v`<(%7pWcrAYdEtv^$;rr{H^br~ieuS~c*ve?w2v_P z(TMqhoYosFA17RLnHxFuboLvQ6#X`Ka9i%GjZTcU!s~fx;&k$M{fpM)ttS#alh0*p z+sttJJa$a4#V^h8>j2{?SzeKEgBW1-_!Yf)(8qO_Q6z91YVI7u-c2k(30-M~Lr1S& zW_NZ3Li}(nl}|}RBcDp_Q%(DDt#4bE(LD@u$$$UlagFO1tlmpfYwpTm5S3LA6hrLt z+{YFeHw&(@1dCw!`4BC+RQPY@ylZRaoVkSFww`PN_GY@1zW_f~zEra@-&9la<(Xm6 z8p4iTO=UsQZD4Z-I429J8_8)Q_F0Bx>8;(*SwqO?r>n45ly5{$8jVkBceKY-qU|6p zVHF3vDg+Zsx0yZpSlOGB6-3MzVfvMUyEV4gWUp64PjD7p<7!pa({5h)J+79R<=Z&aPBtxLj~fe&jpP9JPW=6Ohq3hZ zM;eddd&jE#m(*DUg&TJb#W3`@0fj7^Oxrt7)IPHUi0}inru_k-Dh?!-=pmmwSXhd?+O8n)>+V32LWX^Hb}=O+LZ0=fW)}t6(}Jx+ zsTR`;mX6k%Ve$#`4BLW^KWXXl@)~8D9g_ag?&xbG-IEV+vCs4_o_F>_91jWT@=>=< z(;SLgkF)R`Evy}^P0IKpWS_IWT?#f_=uN!WEZBK|l6xb5wpCPYa>^!g;Yr7XhZ?u* z`cm)y(;$(Fe!dP4XfSD$W|+@DQ7YkJ!L>pM|Nlw0s=hwqoe(meSu=Ri}Fpb1<&YQX7{*W zlNhxB*ygik1d+e>H0m@T5a4S+Dkw);=F65s2oh}Bu*^8G31$DZc}3lBw57bsX0Cr3 z&i(fHB7xtUpsvx~?0#yn z3)N*=870%6SH7Q9%ia?UDO!EEH{C>_hf2HrxrIg-U5B93W^=2*>$Q8zqUu3>K~itrMe^%3o_ng5|NX#d9vdWM-0Y`^r~2r@ zdMOzse;qpV`4eg``PdBNxYe^b*N&IX1{&E?sk|s7Vd*8>yXW%nVhBz-W$Lwl^CS&# z>p!9D=RJ&TTG=gZUUZ0~tYj$v<5*1J4by+PsQ8sl@ za2gZ5)-&55PqyZMO)3%m3U#d_H@nn2Bl4JQ#4g`4k;Dj_h(Dz26m0#?Y({EoeRojrhoqfSJ&JSuo6Pr zqs6d-)DveN1HB|ku6)m~`wg8P?Una|s;rW6%QSka_@BROr9$gaMlQW0b?Ujwoi+cC z(uxt(*rob=t9&RSVi1y<&d1eFLu`hZqU`1A_)l93@piHDJwxo@7PHiQ-a4tC37Ud1 z(9QFiS*FDuG|#Eddpn;UhTGWDb{121TR(+DJ^>(19J= zp<}MDBSz7sws)dXlbK(-%@F!=PsFtklBzUX1@daMevhn@My-;Xoi*tN%Vu*;mR8H= zXCIH3EdN>{YYn#kx-3$o$X8}{p<%tP5vXc&SIm-*Q-u2B~LGE9b0WGNtC9Esq$Vu6b zH8C7>nFiTazSsKx# zk^IFl0MU1JBSAZPJGsWYo)dl^t^J4-v7JdC$Za0>C`y?7ZvVC9Lg$Dt>HgYf|BwbKS8XSnaG_eI>u+C|_J_vc@r`48@jG)17MWF`(Ub|ZR$QAq&iDG8Gb-E`G6gYUaUW39`TCE>f6s<_l&^5>zC8gcyOQz(u2>-b5avzf=h_(llHnEApynm-ZIECve?w+yHRn#Ke@m!QghxDGo z{Z@?Uzp4e*3~VG|4sKG^7}GF9j3C^2nuhC$xM|ZnUagUlr&?Thl^p72Y%eKu%Zkpe zo~Acjd~~P%oBOKP%3vTT`sH2CD%J6d>*gA&B4OTbr&=8hlI~1accL*M$FCt&n-v_t=caer(R{Bb2wu^ zzaq*$cL|R#i)mm2=@2HyH?A_K7<}9 zHa#8UeM2^`;6>WS1ic-hkG-9mTwP2VRJG^;>94P-uB0=ip2zArnnUf-%hbcaKTiKr zTrs_|!#Z^AO01SFr)@+xaR$aH{Dw(VKOS=;E-A*VC^>6=wWrnynQ#LSUnjYu<05%U zhi~Ivq{J3?mKJEeaJ%K!{rXe#3$bHtGXj?YZb|RIcLEa&5A6W!o?(G@T%n#yV5<{> zvg?X6LWqP8I?qK^DS5pnW;+QYe3R&O682ftQ#IzWw>xB@pXEH4{Y5-XnMVH=s5&D@ zT_Wk>1L~vgXKAqV^Ez0EF0Sp245LP}n}Ktco{6~7KS3jNx1B4#-rReDB`x|WV$kJf z(XjgfeQ#mCg1ex{{X9NIfNQ4ai-Zc>6QVYuZVdHQ6dKRua>aZ0wc-3$5%QZQ`=$!M z#CTpMO$yvK=v0I^Kx$Pe6}kaODV`rQ@fHh|8ls?~=btPQUMf@;V$Am)B5RIMxvqX3 zT|MphI;ufsZ(~bBLn|D7(Qd!)3(a&0*t+6*+ZB)w1*E&JYeNq^W3K z_VV$$eQ7++RAiCkn6sTYM?HI)gaDh?XX*9s_|KqNAL~!7p=ki9=JCiwPQ25`JCdv~ zyj2aifcoq77MU=HnkA*~Rw0Av9~1>0Dw0f9*e;-dz_V@R9FBL+%RFZ_H~3HF>_Xd) zW3Q!u8yw))oE!O^Co?xv7wXjoc2=8U}(9023HjcHw z;t^VsEpaYEhe86xgyn-3Pw>hOnD?~@`>F5Jvq&*+)AS*;bmtv&Y;8leu?TsAe3kCL z=ZW2V*w{J}Q`1}`Yf5ppanCiS-*58+>81k}DIz35p9!U+w*ZRxEZu=Di$64TY`B@2 zX686#nO3LzuJGZa)b0EG5L?nX-QdIKLX6I;!h&I=EWT?ySb53g-wt>j?LJJzzC+9MLHOAo#4n z^kNjBqE;ia>SBk|=@rxEb_ToeHBZv;4F9z0y6NHb1FLfekLuDO)WK&?@}BjD!_>-= z3xU2OAzwWP>-&QMenIHrt4b7QLk6>>+i*VKa$c@k(luDQ@mHXERDrq6j^YKHtmjqi zu%8Ktn#wI-^$f6?{4O5$!;NYIaKZ#Ou7pOdXDRlnAlgK_A@6Z9B3wl=egSCpWKtTG zvs*;@$nuiXh{P+WpTFc&h)S061ucCbI6QOBg}~uDOAl> zwocn2!{#jWfuY-*Sy~jfiq4>gFq+s;%dR+h@j>)MZ|PGs>BGaNINelOU5%+V?|8&eO%Um7Z!anl@!n zk;l^g16UIZoA=e6!?`dPx+=hMITW1hUG99JgNjPng}oeG1T!iCm46e1*_*UhrQ?AZI=b?Eccd`r(zvSpfjo z6}qc`oN2^H9yxoDbqm`%2(`m=siT{Pp4!fL&$T`j;jBP)&7v4GNU{OJM*#7}=Jz2b zQdf%cApvUfY~*^lTJLVx#n|fWqAO|d?uuE@bh$J-^qQXEg};WKtwHkEIdQ3a7UG-_ z8DLA6&@l5&gvX_%)h9QCK3wlGYfXOH*DXy9_J0_ks|I&Ixjblg8Dzv5RNOdhR5-L< zfd@D@WSi;iD0H?Tc6MAGA`@wHTNKS+ka;Hf=q;K#=^|;H9DH0l0bPX)n#b*}vZ6OU zxP0+nl9J{Q897 zX8C%HcCc7#R&42dp^^{~A?_Gf&G+BXu&>Of3Po-7N2jgd4U8%7YxPubp0ugVz7SG> zc`bW3-#7aw;dAe9ce1a`G$dqpN8Y$$y*NA9#dW`bka#d}tFyde3*`iK#aKKdWDa_f zMi1};eA7HRCRA@HdgGtRvTXY6B$eI9ppD@2!0bKSmxjLZPz!O1cn{F$U;Pk^_K;70IuH z9r#TcEQieJ*pS1?bFS(inP)eocYRBnn{#_8Ki4}jyi*r(W(2;08kA#X!3srKEU#s7_10-1P0J=eo{f7&yfa-iWj*ofBI;tcwi^maFO5y@GE3i$%DZ2VTS@Lf3cG z{us)>!PXT)0*Gig$m=~1U8ED5!zr%*;_}e<@V}}St2HBpACG@ed;KS*7o>8(%Z{Gs z)(;=~(n6omqI*Ocv)_{kk>7^lX_VRum$1f9x@&FoRak9PqdRy$6ov~ zep_|o`FYijh~Yh+_3D?UjLY+(cjM3L=-PYfeGO}Eh%);&Au=e*4R;x`CUGoSET@9b zUeD+z!Qo%Oj&i>jO$p;DhwmrR@3)V*+DzA(%nh0mhm06N%^!yWXVa1+Nmfam6;^(jqf89hpW%j#cx)zg48P<}I~$>BQb%+%xCWe>%! z?%}(A=Hq?L$8NUX3m4hvKI~*gAp=Cwr9~|Re7KS7u z^PJO7^~ZhJhi`Spdt_|A)4o8-r@`n)P6adsej@ys3-9va#bkPWHsSD&HbGzF3UHFa4$Ym4tY=tfkS0I zda)1R;j#_rS0UL=ZS8y;59H6u#Znhq{9_5(^NX^~TT>02EBNp~w?-tjkpUTU?>ni$ z1^|i@;PV-{gU2oob5WKZ3_p27&C%8DUlBa%)A@Lv<+`~mRyEz*^!N-)LkV}b6=J3m zba16MgsKge5@L0a>h}oHFe_8fyR>4Ne1F(udUdn`D?CA2_i!NGt?Rf6MqM#);*tt*?$-3lXy9>apYkq)4eKO z{JZZVeRM~>xfJMA!|gs6g}@Wx$Eb2wY+W}ZI8pY=qR0 z&m*c-3pL}m5WeQ|k;GEoFJ*319|7&kBb+M)G$X7xZ{d_ zN506f-p|(dIElLnjh)EGyJf`;L8sdzA2+*54vZSlpWTl2`e+2v{ z5vyyqZ(l}0H7dM6Q8eh^^zFk_@02<25<<_U{?^IwZywyfZ?s#Em>&FO^U0x0^9LV| zLM@Yj>DwH>^yGSq&!g-1X-^yFO;4$xNO^JaUaC}_%v0i?3p^FuGq{Y@*OQeTwb$^I z#CHO+piTD$=7|5W;Gq891Pn3!);P!I&Gk#2`>y7weDC$B?AU$I@pXPqF|PZ-{H*SZ zg%0e%AJu4{N(wd?8)$lS_0G?}FU2=uy7eW4l2!Mc%)7d<)TVsYB_>s%8$pgjve()` z<<`9m{1WpsZJe`Ih+Pa4UELO4WGE(o9^&exZaYMSL$pfVK|j&=tsP6oit%r+jvCW=uDzw18&$90gJ#wcs7rhLkC*l;1Hnl+^EZcgWzcOa?aO(4NibL4cnPD9f*}e>*I+A{3Ney10~}QUc_YY z8?=L(5iShre+DZGX1 zEj)B?Yt~@uce%@2lH>pq`DF{;h!LaReQnm`LD@U-z^Fp|IfgUJXfLa6d)XN?pY(gR zx6xGvoBhT0*xr&kS=?F(SlaeWMZn|aBmLzw&O}7u6!FDe50dA;H`*s#r)ao{vQ|;v zbmCR>ke0)L2P+u)n}1RRA*yqqVY<4;AKSFZFhxoH_bVECa$W~5z%=_+lf&}EvP$r| z&sMSW(ufJvao&*9RXzk`xP(Ybe|&9j8m6%(R){9g<9;ynV&MY$M8G`mOm&WB7tq(Q zLsMfBz}dH#DQ_P(sI{2Zq{Q^dd=(w2qYR|^JwWUyu!od?yO^Caf#_Z~a(53~&M_GU z>eazq$&#eyqMd~-{aNP1kXEa5d4jWn=d%UPpID_N?-eUHMki!e!Mwjh`|LYLXutrw zm>Jom{!}oms8cF?Bz-6`@26Tw{~-2?JF;Zgq^r#YP;PuqTQ!3Pk_#~}OtEssKHH${=w{Q*9Dag!)7jnT-S$54-Z+#Z9?Y$(X zgqYCmjB=@#%x_IsB+@gT8;7)vQ~e3o*}QNyMIV(Vpq%$%f~NiB#t{8R2Lm0(CTEB+ zucPbnuFbuG#QVJHLPuqj+|CKvsvYh+4q~Dfn}L_dSd^YfCi$g=KzwpDU4l-o>+9vy{SWgk^`r(Qdm0ns@^(Kd}IAny%F zLwbbJ-C2Sn8fqje=}5sy&8e=PJ5QVqfydf`zn437$d+bAtOn$SOA2eA2$WXPxmKxu z`~F>vQ;Q}bV`k;go-A}$@ND8*)aOiY)%8?Ge#xK1zEwF%-c-@#=pJjIREi)yR$6jg z%lZk`U@)^Vf{<*47A_xho0dER9Lf3Hmv=-V#F!KCCO8S0KadP^{`4o?YJ)SD-kb_` zBXM`d9N`ic@v1}pD6aG8JhlaPEO`jsfct6^_%o=$9=o#B$ia~}WXM% zBvztr%?6R^%r+Ne&KUWQ{F}1}KsNDtwcF!xRw|nFEC<-J+n{F#O!v|Y;3Ze8~ z`OCw$Gz-%u<)CHPYCc z4(6YBuMrjVZt9l4V|}`7*Lt{}ID6o&lzGOPtQYI9x~2?xu0@3(&!96J_w|RXd9$T& zgqUWe1CAj+a!@<_&xjQp?&i2mD2}0sWU3g@+tgO|y@jJm{e@vqdRwoD(zS)>aQ!Lv z;d{u9gCmi_w)pjYQ%Teyc^#O2ocCqve7VWJ{Ta^yqx9`a4tv12(JkJ=yYg81j<7hDsbc382B57D5| zq)eZ))Ov-Ey1g05G$#m;QgKmfs$+A{Y-+{B>#Y{fT+hu@yzi}wyEyfSdX8@Z`ukc4 zCsdn{#mtsAE47Kdj7r>JF+}r|8Znf_yq&p0}j(zQD18X>=w_otdYc zx}-84b%@LYV)5Wkwld@@^nT;pOl>RlRPCo?k>iwn+ktawYxZg)2Y2B6#g*E|;`-yJ z_n>Y@NlS{P6uu+dK3_z1O~Hi`5cPO?J$^^w5-cndwkcNckJ@PubU0%?COd&TyE2@z zgi-t0&KySFy&`d)crBO$px1=p_;{r=V(HOHStu1ok%G?SJ!$SeSBoa&E{@+l7;Z&# z{^1>PvPE#5-m@t6XeUJ4G16U&+VfmiD=ybfLMI5d6`oHqOqZ`hT-0}IF$(GV>8tc* zE@L^{>mg)*&hr>kN5MvhU_%IKTO(LRBW;$n7hk6ru znWf}1ugEX&Mv@7+kSLTR6`krXSryJhmlSj&fpiK)84var!t_3LtqSFF?4X@o?TAP} zSKWD=Nx#1L=$%n)#R;UAXeMS zoRSEM6JWLU5Blj^8Uq5&bhfmFg{>bgr@7WFMw7f(RIXAr$P^$g5~3Ul?i8p!+%)Qb zXw;CyOk$%hB&?|=p?CYy97T1P+m#z!?4hE;O;Bg$wjQ-ZqCYIH^F_SVAA7Ptrl5z#EZTOJ1uG z_P|Bom)Y$g0lh3K$Wch?;${r!5}qeXrFFPoJ}9V|@gst~3iY|G_uW>TBQ`IpCP?oN z+wI@a_0{^%Q%kgWZ58dPqh%wwruH7+xOR%HwH3DIO8od;nV_JE(5ezbd-Xuk_H>~bn9!zncT9t zy-73{Y(un`)uySjYL6{Pvh;?1&vrDLObP-c*DV4qui834F88#wE*)|hI%@5t zub4d;*c@SiKsKoYS5Vo5@%8pWOZX%!U*|jN#Mf0T+`OtlM`-_&U zol%M;s#13kweyL?ZcDp$-|)&6TA-hAU(4g}Y~6v!#Ro4O48SJ)y>#(2mPDUHN&Q}MI}>L1Pe<^Q@ zl(Ow-y+d8%|DLYyrdxSUf8+XHy+~hO^(W5Fp|lJ>#xfE<5bqF?6sp>vNa+D;zgB=c znxh}M0sU-JYVq}^jnWb$M}5&cY$!{g*c#Z>SnBvhtyfU(of7w_9ozgVMYEagF8JUo zP+^K}kH;NMQ6d+;3psWyeu}No#!^Tngs8r?UKQY4MOE92&S;*&xZcO}KNw8b~<*!<^c%|5go4Ky{V({NOW)(es9r?Qs9&~3! zYsbxu@heEy+yF_gR?LYw+2~N2Yr` zUWEm$0z9`#f(o+?zWkiywe5iBX_A)v56^tVHs|;UCA9~SLtdlB5W;3N9$R#JDz<&O z*%|N=k8O!SoO7KU!T*N1_tEKPo{Y2#=NOj&{}$@!!r4MP8y)zsUfb^0m}?N=-{bM9 zHvkw*>=G8!UGE|@@JLGw$m{*=9?1uX2<3l>r8f@)Nqm`G{1fkml?Fc#1OXtC&mfUJ zxrRVk%<2^lDryzL9lf5vjz6`{!?#~PnmoC0L0qr~Kwrh92Bc68y=VqIM4}kyuRf~Z zTUPuj-sE^|6k@>N0yZt;A; z#rO&wN>c2bn=rhSn26^}&o>+!N=~-0PagYa`P%l>Yvx6ddNpN^xvxkmk=?d~D%Ze= ze)%uhkG(T zzx96f={>kR(#4n8CZMm*2D{AihMgHLUB@;rm0%fI7k_2l7Vp4vvvcj;g|6r3^>lr{ zhq;x6>MOXWVTSwKpR*(opq>;}COY+R)yRSSfT||%r>nwOk177GW3nBq|7{-Gy)Kkb zVo9Ajh?+{14F;O0io9dTyv^7X`&6s+sjACBr5K)Ex3I5EvA1)WTYo@tE7iJ(qxfr9`A>%Vh8KSuqBcO4SKKDtFO9siPMp=AmU66!7X>>Q z;35y~m?J1R3Iev(;tsYtUsU5Bfqf2ayO;I(f!0Bkyb}woQa28B*lUL~pS)wLXaRIc zB`DJ)SH>3=egCnykyU&?@W4Uz)qxP<#8y5-GiC`+Ub!)x?1Amr6E->emMf_BCSW!w za#g?9i&^MDBJ4gErYRCP#m4LeVj5OzH*-E&UEl}qP)uPf_G<*`xMvkk=&3AW#KMb) z;pz^2IN3sG7*J)hBpp5cXBmL55ThltfUr3{vJN0yfk#Hl;pZ>Id)x9gEaN(+%@61^ z_`0PLf$Vtchl4J;Q|Te>rUzwQg-e%1X=Tmo4r%Lw?3K7EynT?~Y(fvzZBp0hIX!=C z{NeV9d49o;p8L?NB5tw9!1KP(v<%p1Of>NHM-T-AFIs+i@z| z<0JX(UN8R7jrM@I_s`m2(#z=50f8;2tLeF^fh|ZpMf1MtUjJhr=WJ54WaK2b(~sDW z7W71w4?L(OAGx}n_iUA1%a54teBEJl<@Wak(cJ<$*L^h^QDd{0^#6CK&L;Ww@_jeA zdw2i-{_*9*qy4_&eO~}jqL>9yhDDM-RdQZs{@BYw*}OMianTyD>B-k`D%>2;!5v>) z(&wiS5)7{P`^%CRo8!e9t5W5A?U!{nCu|qQWk^#KD9k(E1X`|X3J4A;cHC-fdT8CV z3OWl>6_(4K{S@`Zi+t}7=#km1`xh^}ZARdO{5S2ng&9J?0U6V)>5Xsn&SkE>Ima9| zxTr7SYH8`Io}nGo7DQ}L%Gophy-jLky6wbm@>=`~cOPnwiftszKrfgGgG z6XwB}mi(NP`^=gpRf!$#gIfxTW^X<(G?Dtn%W(bHm_|26>)vg2sR?#@_f9{O{D@3h zp{2L}xx&WQx(mJSg8FG!qmR8BSgmJnmkP1(!!scp{pHvV0|AK)+`u(%8{MrshvQUxhNM+mFDyn znp>6lNpf+Z`uhf_rbUSI1VS!8>S+`UyFj0&m|n_knlj8avh*-6A6O>K$r@`;8uH%y zd)YP+p%$LUdzYw_4^(XznSvW#5l1Iop3bTsrECsi!#u~&r;BGKdo$kV)$Tjto`pN-+BCLilay=#ta*x(I**0;UeR^+GY+DkhoYYq_fGkn#fdy=yJqfJJb&PY<^ zE&C#?cf^$u^2^8-gq2;EXI!O8aeG1ASRkg@ag)E>3a5w!V_BzXS-GIc0wL6pgp*B* zG`(9fU|##yyPrJLP45*X`F-HbMbGEDi}Gm11G4rM7Zd0aq9cQfAQcJ}xA@zCsL zBWpRR+k~Q&NNwB_Ps4F;33ZIWqV}8uwW5s-2kOe5ZnT$6KUqPwj|Iuy=n!2kCP6~~ zOrX8D+rKwSsG~KFp%Y=jJv%=eqi=mKO1)KOvXh#hEpHM7hx_(3(UtA#De`IfJXL#f zmQ}A8IuxCS4gL&9{{biv<7t?yLTJsfF4AYaAg7nF(EJQ&kj7*OuzD&C`-Oy{X+*!W zYnc*$H9|84?ydJm5yvt{2iT1<0PjHIP+fu%Z=7MXgtkp+jopW+3Wm~dR?8~#V&T$OqbyXG1-wM!1An1qKsXlg z8X5?Mu~<7JS>P!l1xho|b%q=zDb4uMJinitfnQ9!=;e!B=nS~j7KJ{>U|V#4k@0=@ zsco51Qgia{`R_t~jd#R`zz^Uj9l_Q+|EnF{?7Q{k4fWAZ*^aZE=_n_9dX(yC5>BW8 z>1cc&)42iWM@)^^vk+XP1js_IXQT2Qr<`&3+H%fLHOcH4fiDuDd79LMrvKsp5i6AA9GN)Ocy3 zf|UqbN}4e9P*Cnk(nZgv4H@j|hKyhz$R?AwJ;SQzH$|(MQt}?9#=$P#bfKY!b0>;k9yA9 zg3^&k@Qu;~ZMi!u{0f2=@Di0FN*{$w+M>kk1|Fz{>wMJ1xmO!fg zol++8^0KT;6K9Gf$E2NR*>WOJ4^3!fjxCCEb{9#g=_nS$bV!L%o-;^m0|Z_Z$wJn( z)mHcUUA7qh;urFv4~6=bWzPQBzDxf9C2rU+7GgL4egBX1Y`NA?94*obXvqDO$bD!j zQ(~6N7ufBEAX#VKImmf{EFsqW5CB|$2#`FylJ z!x^(WozpR8SBLlV_AItJ-%%4qDrKeV*p!uxh*>oys)f?g?TQsjJN7cc&6bvf>h`c~ z^MZbf6OC!1ELRbmpqzq=!3RuDQ{@gNh^)y9z-cW%sZuT)uU(q>u~@?y`jhK z^7v9>qR{*Ko0hDnNRWbn1Piy64vhrYRX~pbU^Sg^%?%GrQEVVknbZZH27-gcKqk{v zpf4T90$oS@om{dn7Xt7?S<($zEj+NQ698lZs)RrVw7k5I17) z#s!G#CA}SgMH+$e zDbeY8cv;HVCFB;v>FqQ)pR|o#m79&U6Lh*VoAtglJ734|yoxrObVk0CY#^LAP}_9K zcMQ}!b_h^f_9jzHNHH9wAZNwMl}gm(NSQ1txl8~6$^rnkcer@qHzw+9Cs=_ZcOgXX z!kQFN94gC4kuPe4Yz;40nj|TNAC4|4b~ADO4nL-V;Pa{1H^2d%i0WzB9v!LU7b9Fc z3xlg6q4y*9+=y@%O10y8Ur75tF^(TNQS?0f_)I4=U_tApU|)2!Ci5x0b^~^D1M*#} z=%KE$WCV31j!W07~E0ZLM!S9su6Am=n5G)2kM76K*#oJl?q!U7I& zfQe#w0$PzNKI2DKpw`q0&6B1|agIv3Fn&@O8?gW^W{he2!!)C@ns5szzw6n9kFz(; zQx1gG1G7@T%LlLVQ79Vw#je-mbE_X8p6t%e#4@Eo$iWSn zPZ-`8irmKZjv3a`Rj6#xrpyRwyIWVbbPctlgzD!bMSSGPX+S1J=d=(2K8bP=0v%Yu z_muoCO8(wXfYp7Vt76WH*kY%*di~^Zke$i+rtuxJ`UoGoi(+@FQ~Lg~{no;WseYqv z)`1(p(S>yEcP#7!`uIxA-sjhgmV)S?#K?EncqKKx+W|+eq7m8KdizMkPA0^%vO;D0q0g=m3aq`O#bir+V(7sV;0_;xh@=!YLtQc@p(Q~Gn9C=!v1OL?s zxgmmjZ72(DxB0!kfB>73HfZLw@BSu_+8FSUGH5YV$`b%KwKVtmjNL_0aPEO5F+pS| z=xy1lVn%6<0a2arcYrU81Z<=HVQNxv)$4gB01!BG+dU^;6$uAyNS_A4Id~OFDY}%; z*&(PKmQQkeZBh!9P6EIhzXx1UkR}`yBvh@>Ud#SVWsd&r8iNP# z&qhh!iIK}B6eer$d$imVLo02$;F!C<-Rk)S1+9}~hIvFh5p zL`D~c*k@Rx(V^cEDO1h*e?%rN@_Z`=p0NRXI93?=7Hq;d3cTUswsFJj*8Vvn?>kfO z>vVs$)b&-R{BL5^>qsP0+6b_@W17+++W0?;&ch+;tqYOc!Wm7(GcN2X>4j#4v2v(mCIpq8tynw6Oqj>@)`mAB!2dH;s7x^eze&&IptO%w3KwGV&G@u?#jTKWqH zhJ3Z4UGYY3?QwulC;fdfd5e6#Q$r}M#JpCA|=K}gIQ$O-&2Y^ zrB~SKKCf!T-?ElS5l}XoXmUd=(^X`|;V)ClVxE3znaTzo0cj>RE0dH!DsmbVs;#8k zxq3bI<}Gyn>lj|fjIqoeIY5V)Pn8+#C=_npKd}n5eha$UY;kYWVrtOSXDv2%kHQ!M zQTDX|ZC2Ed(-q$dDjy3FA8?s#0=P5?K8sZDrk|^|zZJ=eHPg9wlLC1!RoNs#+AuBN zNQGn%_PLfT!g#}3HUK}CW z3|vTuB=YKVk%U~a_((3~#{6NKKr^>TF?SIHXZjkc)1rJF)N=t5B+VnKs*pm*Z?%81 z*DmT$LQ}Uv+6ylHn+M$;Qg@23*iDslBS0?_Aa!^}1vj;>l|#1^Mnpv;*=zQeJ=pjx zMHVk{KnT3ZGZMlJQ!ER2Plkz>Pwy??lHu0G3VWIzTbPo+<$lPP7b4hB5wMQGdDn}g z@}&m<7xoH!0nXN^T9XXZ31+r?AFn#vvegM$>s+Gb|hYb zIt7@Vi=A?8>xfr=FI;T9Y4I;l<$b(z2TyT`b#Qj_pN_11bFl}WJE}Z?7&rN(>F}iT z5)LtuwOmrrI$dZnp>XfFC*_Jbftsj({NWM4?K|__)ia(kOkQC z`8?uVNDdEO&a{)xsQF*B{+XzrDTNGN^EZ)G6nBG98A6=+&bb4J^Qs=@OoOg(I?nNk zhq9rSqRZ1-Lw=h6ogIx+LFw69iU;LjeI3dMQn=6xzPdkj?);}MPfw#yKmFeGbQk3A z-`k3E{kMEg*!fnZ+_(T+LXJ;#Am(_*?t85I94+!0Cc44THnUTdZXTIP)>ob)!Q0mq zx6v!gV^qGbT{+kUSzbfDlOf=dpm;5nmwctCYus58TwVfS2}1NCE8m5^=%ZIw9MxmY zoCw@G_2>iiH@ZB8q+FiZY%?_(aq0#+^PgyyCHwgO_9DcV?r(of5WNNaeWV~N5=55n z?O&gd=9wPhUGw2a?MdHL`1vc?V9KAOrKHz9xK)FcDz)*VJ{1;-N;cv|7#c z4Klmt2vaH_8WeD}Qa$X9ueDS@==1THTaj-rwx2zK{ke6ev4e zp+FdNt#J=Q4j4gC2$Ry~rcEdK4hJTuqIz3>Pt$gHhW0EMRqD!MH0d*mNuDSzV(gS) znRc&<#C$*1!7|`sT~a~NnI#(UOmXqdLZ|_F#vFAD4DYSl4cEo)#fC@qO8hbB1J1Y? z{;Y+ccHBENI?(cFwj=)UW?PKl<70>3lzWZv1K}Bjgp6mm3o(yB^rg*@xA_$Ze%g8a z*q`rKTK!Ge(jLr>dp1RWUg{UWt^0~WKihQ7du#cbVRS#nHGO8V<5!(h?S&m}0q49j z8XeMh2yX0GLZw}O6L2AJptn#79h-Ku5Eb%Dp|mag&)a85?kf2cvPpJWh7QD*u2@nB{~U;)g+tpDnoO`g^mkZOyinI?UD*3 zJEI3|nt!y088#e(QdEhJ1XMb{m!b^4PstkSs}Zu|DB@gfLKU@W=_)+nVuAgA(tU>( z^PnBDR(PvgT2iy)6FI|5;(HO9=QWF7QPbt14QpLwHcNi8fXvo8SyGp<$`HrLd(EiX|gBMtH7 z8FX@`3x^v4u>xgphQ?@hMlv6zwq zmG|_$mAtdLbp4S9A)^m(@wW4>ag6QV_e<{@_X1j!b@$~9hnx0E7X2IdNA&ZZdYd#atRKhEqv^0aHLz+m*w(vo z=h-*bIhp+~MyJ1v-XXL;ik{vd{E&F?*`*&+;Go}&zh3942Ro&HPz!xE+Fb7+DPAto zs%9iWwwx%~^w6^!6yDXUm!3VMdfA(Wq%gXw67Ue!cefa6GM0O1GHN43T8BRo8`$@zP%l|HHUuj4$J$f zD($z58is+Gfhb=rxY(#K zK~-f;!#gqGa;qhvWVclPvPN^YizfwNOpENCEFhc^n}w@n&nZu=^NMAS-vy8s>?;B! zaCT8~JDP)xme`&`S0S?6DcD#fSEt#q$htt>il!*mMJjXH{xFZemsJ&(Ood9)rv3)k5Dm^!Y^iTE6`)FW^pcwo0#L3tPlpnm*m@F(}4bM)C}%|gu1G}Be6j52dB zWBP*C4RW~*a--;0Ptl(gD5v*PG3z9RRx*+kZVE)d%~m>i?TT)iu-i?7Q#m}fT=%h0 zL2FI?))-N2G;+y-jRjp?RMsjD>!K*K*F0>$;|fjt_|&4c;!WGL*ZJx$_#=l!?+n(~ zxc;l(RD<&Y>N}+%^{adZ{c-QA$vw)j4_x6E$*37+Z1gh9VpeU13u_;gr=&ht2WYr;qdO-qrIbpDNh7FRtuctkb0a}43U z6>^oc7b$xlBYa0A4ern(sCGHEwEj|ql`L-Ap@OoZL2bxWMiHVvzTPaBoEstSN`Eyz zShlK;SeiXwB_;=7FKwe>uYnRWuEhL0#?{VC(eQylxuU13{97Yg&hd%?X+YW?{F(oHn__A>kL08x}Iv=G35u zj&70Hx?q}2A6jz}oG`{b`d*DV_qNdP`36wq&gY8ERx0NI;e4s;iG6wNEq}#Sgj=n` zz;(uLU8(UA*-2&B=|hihttt?51j^amWz4v=-GRkaPUcW`e?)r!;)_c6%_cg(kV#-q zgDc|YTDFFr#K!J6QGPBX^>!wtMnr5j#^jt>*E}Z$8P|q9Z=QrK?x3ImWaa0wYoF(IX6(43Om=*xG(ZGpv zMek@Po7kge@!Y1J^zvtN;3wG%+Uo*+>2qw8QQpy;#Gf7V)}!qG`Nc<& ziYcT^fvceZ))gpZ|m{ZWeaS8_XCeJ;{moY z3Jr&;A;`jpmZ3m&#|*70+rH_KNJipRnVZ1{IaDkT6q52!wiE!JvJBG_V2c#bkB1>0 z6SZbJy{A?2C0qe99%wYhqSKjXe2y!c6Cej7$)W4wnGOuVD{5;EA5}|(*fZ)|NhdS1 z1trMK5gquQQI{3j>P=*>(-P{VFPA%I!=vE~Be@)&r`{E|Q@sW>1{Dh3)YRgtPu+wr ze$h6PYdZ~rxy(Ua3QqYU*?v;?{szN(8nA2Vl()pyDUxN8#U`5Sn{7RxF~H4mE#dOn zT0^ouO~X9KKd zsK5hw{;t1z=S{`-G9_HBNjg_CR|qmEN|HAel6lzC&CvE;{Gta@%1^|F7U`3-O=OXL zVIp1Lk5ITR9w5;HP^B`ZPW7f8$gxTB2)&qrteD@p_JHmf++P@t0|V0vy?LBhM_CwT z*Jvkl`wDfemxn3X;a zm1_#3n zdx-rvwjx39Yl5>HfJHR|JMttiiWSY^xb&A?CIySt_jDqWYN_Y6q^xHv0Y^qp`>lZ%yG|?(D#Q@X zYIKMp`PKd+pgBL%tv<4JB+{HfWXIh9>+78V+WjiEz^_dzbHR>>J)@Sp;NFYd6i&l- z0ZRO{Au@lgRWo#(SxKu%U^`@iLV4iywQ=3nYia#O z41TdLw{Q)0O(p}%uaFPhwO{e~JH*;`NN3{Twio&4NPkbiU1Sbc(-3Xn5yd0=&OGnUYIK7muy}KHR`4r<*j# z3DG+re`xST>(&dPB%^q!yD8{wWT6YKS%1m8mIy7RYpEjv?!?XK2gTh@wXYrGfmWkq zL>~LyEvPrd@$$Owuan@*Yenv>tQX3RyY&}(Vt3sjimq5H9da%Ed6IFV}a+IxpMM$7SOXsSUCU(<Z!pE?Q5N`o6 zW(`!wjqs(&Klln=2?A=+fJSlJmGTRxkR=ZFnfagHWthi;boK`u>+(!cWHNn!&kv;_YrQNNWIeRQ`x9u1@+djiu8HezcsT}C+$ z^6L3n`5mEk?U`go$;EtVb5G%aze>BYq=s-EpC4S1S(4Y^*C&#SC@l(5~cjR?9G2e@ws%6 zX+4WTP^hsedL|Voe4T8SbXq*wd%Kc+NfS$xGL!irvvzp|9`x5-;q%tF&)ps|_zIU^ zy|t2mH=p*VPDvpqt1t+ib~(BO;<|K#rDAvuwj2jw_|YA#m?k9#4fN(;eA-b z1GcQCPfc^Q4D{(sbX)xs)0va^3*`wZV_(2tRBa$$4&)szUzj@WJYAEmQCIWC#xf_m z7^>Z}R_hogsNiXQTsnU}Wqi{vCVufUO?BBBPEgugdkt7?zj$)gzH}oOPn@69hjC)! znGi++m|Nh5YxA|B%QjV9Db52HR7a9jLSTQ#!G5lL~KyVC0PDNOl zmdT|_jSntx1o^0cbDEudE|0o5=F3-A_daouUqnOl{M6|vw9t~ z8+>kXT&9?kmq5-6(6-=E{bPAsQtU7ah$qQocx%2~h23l5uYdk7@G4g2U-_?$Q9du$ zIHyx)e7bP=E>7i(_P_17B^}n@VLG}9?jtMa6eu5pC}tBl_Vg+8sOg~_XczE6yOs{EUN$!|B`@d*g(y>ct7C?&lb)G$ zPk+5oQcNzsucHz+8R~Oocv3(l%*@r> zx8FzO)A|^yTMxdEb@uBe?4Hc#>8P6@pEU#JPu7Q{l8zfX>HV;sZ}VemD|MNRSk(+wA=9{N>5RYWq*O7QSaL&s+$(oEhip zm^nW#FnF!2dn0S9U-=NlKW^iI!L~z7c|P;b`HS?zFY9mIH-G>9@%7WE|F$1#DW6ed z-hu$jvqy1Po@Vwp7|3de=oAHwlHb8tN74J0QVagvk1bq$DN(<~p!dg^u|PvYwaee6 z1yNOfCXos@U*~cSDnGWX!>#aDy*?%9gjz7uZ#~Y2GS{f2q?n@j?@Co={u16eEKwg< zXPTL~h4+*BMV&B92gVVwdfJAKshu5L%rY`5QIgKb@OhH|KaZpzgJZ6R4JEM10KglZ1LbrofynFEO~!+v|MvwIlk zeU1z3E5a0;i@~@8(V~}5blw#*@M>PjB#vzgq=4YbA__>0h$}YP)bc=z!B=CaM1Si# zOv^c&dWcHIP093qAhS0YFJmj;|GKQ$-6g11O0epoTx9aXUc(ORw!IBcXb_u*l__^# zP%3G}*Jg5hK<zJ}FNAFcWJJ5BZe7(d%5L>O}^qEuRXWA_qFn)~(Jb4ue(WgDj{G0PN z!0mH=O*x9Ju|#xGn9uP$edg)$o5xS*X(!gSwvQ(2+8Em&-P9PHxxf zZTx;Le@pG2-n%6x-x5yTs(N^?WXpQC#O39VME&b}NB9fZe;wnu|L1f1>azQP$3NHP zl-c~yrTBKsY?ED>So)>ROX9#VQ`%@<79dHxwIDS$9#t!CcWhcz&WHzM=A~TMf_T(^ z21RFe#(ZmELZ~mD6)lx3b{Jh`?k*VWL8d6W%5>1^C}3ijr(!~wd<<})Ec)ZR#PMhw zE=e#nx*#;M?-#@K*2e!!-|!#~mm)H!)HM})FA!tpk=deBY$IJs!-0=}#*ovAkY|CF zn>AHegc;S0r;rev8G#ZuA%C=MCEwIs%d>da1Eq01(V6U4AL(msh8<2n`~hjHJH8Nm5mrbM!9eGi`XW`ZIjJ6^OY;s^SqxMan5*sSp-hI1xMRYUNRa zj2Vu8H%9ER?C<;5#q*p+5k^OPWWLQl{|Hk~fwklLcjez;E4a_~O!Df4rf!y;vo*;^ zMR`V5k6U1sR>f52^=OXYlGDD4=YaVII^~H{9oWp<$7$Yf$Gf~r#)>}r@3lLKMEtd^r8^meC8wXyHQYxT6q7%?UC7{w`Rc$u zcdTE<5IR*WvkESpeN{j~ej!xuE4Xm(zt~;h{k2Z)TLH+Dl)BVxJT{gdHLjSmn#rir z&8#0nllcJKqM-7iS_)~0yFJ$f#^)WCXr^tjje=bV4O=N{HfI#iX0#$wXB7hhfWpSd zc_E#w9orxKRac)KHh!z?=zqK8sYBzu;bs%$-q)|3kT?O}yOl$2y7rGU`3aS6s#>eE z5^@2YgQUYYldbaxBr$)Lkex>bssR?mM!%OJWRE4}j{q9Awq3y`{fG5s4%M)AKV$?~ z%JdTs>CYbN%|<0(+S~9ceAIm0skY9#)k{BCbZ@w)oz7V~-li@0E8Iv1Q3#*|&8_h^ z_+pD0MGhN`LmPmIUB?c7+ z|8cjWc7CyGN`K>6b%NR=8hLrq|K%AFTT>z`v?;18#nYLnu6Bh6Z)VBZ759MpYbpd; z8&yPoqKbbOMNPR%W#@v+Ki}takI~onj47I3xTCUe`m?3=C8mS=?p^Rt2P@+?%4=tX zH)p)HpPeIJzr8)=r&@5FICaN~7wS8HKadY3s^Onja^xj3Dprg#tH;qsqHN0|+6(XYm0u3<#H{O_9UPI<@rcgzJCeOQbEa=H ziZ?}C7>l~)*;TGQ-h^rHpG2gD-$0>tN0~TffQf^|W|9o%PiLZl+9;rpM*+}-gxX+< z$CON@s?O-9dJj3JEVfz>+agbNJH5aPn=qJOU;@$-#gayNBcuJ35gwFL)vAkKavF}H zb3&AvtwOIAh3epOd9eU;NKU)kqo<#AXjH+(E+!z(*HSUVBgCP7x-gFI5FkPD*=e=+Z8-YR{}es7I=S`UnT2POFQ(?6 zksF^$(RRZju7vvsxm3LcIgN6leJs%Cyccaw<4CN;rgiA-W@_M%ptGmS0j8z~#aR$j zKESF;a#9(1s82=*l=0#y4Y~%-MWeO(0JGtpTZAmLWQjUa-u35@>%x%B0?j{xYWn`Z zvrK|1fz&M|9S4PN(?Jz;#&X^6mTW5y6h?hd-SSt~E@vIo`HazSCdh{!2 zyOjwd{ZtbkjZGEGJ)<}GlP2hOYJYfFYa_a_k~6WBFrH@=c09sNHKj+4Qm(^pcp8j& z>1WeyO-qWooby*XxhLClje_y}*#;WyqB+VYouOmO9jh(poG$?pvZxzYnx-YlJ}dx1 z3pUIP?%{ZFuuofR zN!{vfRs0DP4~cO-MMj1rDznX!mravTSTvdZ1uLn}0+`LQu;pU&EQ&Er{K18}9nId> zXYge-)NPYn(_Yg2#@pom=G|?L+5)qcAK9a?EL*p`n&epCCEXc2-n!@Gx=CAt>?HuW z-~u2NP;~NHRx%d35N}f=CB;v~%5eL((=$=i(V-KaV(|!87sEkuu42q*nUH+3`Fpaa zVSxJDSgPu@J}r_jg$8e^sG7xJ_4hoN6_Z$WzDm;r)-6(YG(uRGh8M)J?iCvLBwQbi zkjp;R*FNuGInm#Wfi;lT8O#|-(QzNNavBpiM;aC?CXcF_WKl5qXwz85eSAg1xVNoIDX-vaDA{o1#6`<97@^=&=t$5}$~h5Jk@FDm zZ>(ITsRePu%n z!I#S&UNz>10p_{_O4^=rug#h1?Qu0SdC?Ph!|4L|`<;bhV>=#Dh8H-%8M4cg*Fp|i z-T>xvhHQonWH*RqAGS<?%EwbYv8? zlFvfK2O6)6KfvX;4pP7LQ!7cPzv=({s)y7G6@#>ON{x59H?JP1jGg+;v2eOOU%UEq z?fqyaWaDAG$x$8O4bH~r`5?4$Gb7?gLNX*x>$)=XdR$QSRr%^0V(oS@>y5~KkhKZ< zEz+ZP$l6;B%O_$Bs&!?QQQFA4+W4scLO}3zC~oNlBH#+zqZ!NN^VQ5t6oMI^3q|~< zaE0+X-cd8ZGeSNxDxR#t4<^lFWB*SFmMz!KlVxyhg-IU8Ae4S{mSRhkV6!CVocHF+ zlIkp$f8PW)S>Df;#p#iQWa}ttr=bVr`_>yV!pCE1zf1WA2aZY1Z>62%jD+EWemR1A z7$YWFmQLM>8kRE5kXI5G7<73WJ|XQ|6RU9Ltv|Q_$Jq_Zei}VkSk+w!D?y>4W)~yN zYV$6phf^~?iVXc9WPTTG@qwBCY^MTs3sy*u#_Q+)TYxwB0zYlW4Sw;uF@8s3i_rBA z{An1_E>cFp1kT5^ouac)56l>MTe7xuN)Zv2ytEi4Be988FatPbFA7Dt51U@VNieH(TIbkviI*(#QV=1P|5(77~#-PY`ZOCo(eMLXJ zk_P-Pf;KH!{zC35s+4>#32lB>Ty*1~szIn(9!qx*K<|3S)7>nydI_Pu$idP(W8-qV z$J#uI{lIzMib1;=Tc2^$Ru$_Yj@;xZ_wc3?XoZc()jH><^s#l_*zkHv zc+6r+k5wksO-53hx@rnevSuo-z^DaZP_3u6`E=}*JZ7UKESzbu?r&W$w*^v!Ozwn3 zBv5Psjwn$Jo$~VU)aeJjtCaun*5Aqm3Y+EVB#ZA2oKA6)SKj@WJ#ZSg=5wx_99dqz z{t6ZaS_2qdaD&9ndwD1r^EYsQ?m7A9ukbLwJ#Z=H}t@i+bR;^gTpQMe&p^$*ja~ z80ba=n!A~wdVja@V{ria#ScTnhLe=v2ip~!)_rNjU8K3f zrv(Q6E}t~Ps4yi&?8xWN4&8b!%4!-4BGJz$U5*N}B(q=|6dj~e^exY;mVS{@(x37h z$G56pSFMQ7BjO4G^rv@negm8)B@j#5U$(|AG&^&p;%TjnhU5+0;mAZ5SJ;k*)zpI@ zyt}!1<3Yq8La5Ed{IcumeM>lCWpoWN|0p|#-Qdy=j4Otl(0o3art7y=iZ>mr+MmR4 zF)V&gcxQCrJ6&QBDTcR7wym>?N2zl}Rzn7*dUkgAUPkkw9g*%Oj1x|O{cc$4qTuUE zw(GV=G%?(R?7qU*AN}q&^*uI1V#Jqh-_QE}d-egvC+i|~4_o%7INy28)S&%P-6**G zi=<>o*6aoC?uWPu`a(=n*;dvL)`=H^2tj4P)iib@e)!S#F8UeCFydS_FO z!Hn+Ug|4Sw++U`)J|K`zT|FCiCa*PZKsImqHwp zw!{9`zo)#;^H-{8?)gAZKHyk*6e!9KmBT1N23gUeAW$gs0s47g7kjBsTv;qUcxK)3 z0`t@EH1#~W+sSDg^936p=gF5rN)4aX3^C*;&$FFx0+-~J2VdZopF)L1j7Ur%OCThQ z5(>2ABT~8JdXw-oAtoEpD6hN`eS(eF7{sjJ)77etx!qu1zk2rzdeb1+5Rpy zPSMpU#M7geeT0{L;X6~4kU5yol{`8+0Un{s0Tkpbo*^qxK-&p!qkm- zoK5rb)3S-}rVHFMemYbq`_!0hkMkI)PVqZs=v|@za4gi=Etqe3^Wf#P&M8gU47EH92bm`;80lo?~Quj~%MENAkr<3EA} zb6?-9!JKk`mY=4*Z=Ap|y-MBuq5n1(2MhYNu`;wmo*LGv>8P*Qy+q{_f5h3v{5JvV1=ylkWf4LdII zhboD3pObsz4m6N!c2v{GdyRN;vi-=tqjVGDNKC-5u6 zqwm#Ss_RW^dtw>2ci@b1eX1C)6+P)xV;q&-N%o3M9(-BeoAKhHBe0-Tcu+HLJTN_F-D zHE-<@*EbxE>Cl_21}$ElejPX5XXaj=ZjiuGj&w*0+81yH4@>&JsLzdibm;Y2c767$ zesHzERmV+IgZcSR_tdvF^|YR`QhYSz2-mb;NU6T^O}JE~#eysqVp{ng4GFi5BBBm% zSGu=UpK$xhr<36a?wtzAEb(yMs=w*t(KqZp55FFe<+p%%FBKtNUe|wJA8@g_a6cDi zfA>Doex{xZx5Y6%6j1&I0W#${UBH|B3qADR73LH7W7cIc3F-byN|i+>c}Ws8$MWS; zi#bSg6)Nak-hHRKsl;*E>rsFLUS~0xN9NSGz+}y6S7D36!-2z)2izcK_dL2mndJh3 z3N->fOQx&DitunUHbDvRDFtXTNQ%|N0E`0;?zL28a=f<4ylc^KH)I&(y>1o|Cf;%D zb1=$%kwr>RRNYlNrREx69AGJME+cwibgqI_x}>Zy2qM#zQS8)TP3y$!_1V0_o+ebZTjjYr5zl)x$*4lFMo7FZ%b?jr`$4=J-*88H0s>Cqx z;F76#I%f#;cFoImJq(e@AHpo*z^Ju&L@v$)|6CX`Oj(3Q#D36dBoRQI!@`0u?X&##)W%007TBJy-YGN4k-QX4SIBB(3Y?M}5k_OZ5L<7Cpt%JRn~&Sc3#~LrtwT^})W2|ANvz zdK+Ubm(idQzPJEw$t5#*B-^LVGfAA_MswTr~vw<0ccLggVnnN73wyI z3~@n<^MB;r{I9-MNh`kjWpEGjR2E0|_$-Ljw+fT{UHdH*)#Ow!fGamsaeX`iB94ZP zZojCx67Ock9}SIGuHy9Zi(KkWj(>Roz; zQlhxrw=!Ps25Wind_q@}Bj@aVu%_-;v=u2@>F=h2r^gjsXxXUX%7@51_B_0DGUOtD zAWN9?7VUEgrG$Ad%p#7fB93I|XqQOI7L%&l@Z4bCb-uUmUyHEVuKJO_(Gkn!lFFi^ zcQhTlKU;hH24~o%)LVoom}%Z9HsdJ6!V3TzYdmO3y1sEedc;%KLbmfP=yc4@#>$>a zyY^$PskEsUuW1x=P2+nqjIAw! zH~J`ta4Dz&O<${8a(OaZ0;RO9I;WB0_v)Q>u;1FBdqr!A!dxbdJ9<4Lsr}~E`-rj{ zvj9)ZgFB00V(yK=R|G}fv&REn�p?wYX4M{|;z0QetGSy4BB6qLhTB>RQV~-Ph#j zCSFnT{J3J*a{Pgd518mY-iIIB@?EKP);AEo_-zm^ERS(9DSQBpx}f^qEH^bPdKEe-zuR7jH!xf)RdcIxRFr@Fq%<-jhvE; zAySkqrzHDUr7Wr`t?+N#2Qi0$IVNBB6Tj$9ZK_4y0BFr6sFv8X6(3R-i_9&^#Lw`XbGMF?`AT8j(g!W-E(~JS-C%yV)N@=k9#{L_ zYs&%t^D76%m@9Lu`4^d1KNF3ko;I&z-TKsE;s(qdWLgH2L;NZRdcHZ5?--n*m!4EbDC@&=COH7XR z#Y0|-D3!%j2HU?J2#)8M$;m&KF;wrEBM_Oa`OfDb0}j=jAU=M0-py}+RiOU+!+ftd z{JaI?xf~pu>B6+RTgwoWP{Ep>_19tHo+xaH>1W+8X;> zzPArP=VJQB@59AvGM4Kd@>dBNGsCPIT>QGGpj+;#^A|p1woGq@tQUGBTw18(4*VX! z`#b5aTolF8BT3-82-wavj!eMbNzg6FtMK{F6ujETm}zs7QOJ_|=w(A9++asiYxo`Y zSi$L1v8wfEvu5KbMN``DUaQDc+he9la|qVd`=7992K;G8s{erCWt^HLuO%Gc$<{!~ z4EvI7y*0nc(nL^Jir3J0<&d22cMt2AJv`bTxf|KN_OQFaCG``+xNi^7@{y)wkcUWZ zHh%keV2NA;^^32A-=5RItc2RLvQ0Zh{RI+kRr z?~#Kn_IO`V!~h0Qit^2SNKF=+r=>{McO*mtXx}tYF!ZSF{sR4F$fMG**tW{i?!ifm zh(WS;l0eT3ck4OLjxdCNZJ}kntaH&biXRkCFAtXnY2TLDDcN{@%&MC;*M?X zcs8vq4^=0|KKeXbS+00qs!}>@>5>%Jrw~)i)ZWQd+{r{=v$5+FV1Ae7lFpsZ+bFjs5hEV~tZhsQPY2C@wSk5q?vpRc_c{py?(U zBalt=?ZzAR$BAJf@2crOiS#(Yxiqor=oLhAG0Jcey0ZX!hh^C;cdtlJOjd`#ve9N0fEn=+L$VGBk6E(TIZ$h7 zsOCUlN+o>*cmix<44l$hUeOY~k*_s_?;&7{1Exh07!!Jm%2oZEqqJdAm?pRU8Pcx`Wu?!8((jCVgiCrQo#t0+zB}j zPJpQHg~ALG9~E6rA&_UYe8YuMYtG}f@%+OXhoTJ;@tY)sHCfSLIzLAh#ycUU@u~!Q z_?P{Gb<#_mBuKXXg5?U;+5>Sr1Q`k~0EvB843V^9WlgbyJJad6Arbje(0Yum z_vn{osJ<9(_xUK&8krTZ>if>G{chGH(qH{6Qcd~5T2YVj3JB|o0$xNOC@6U~+#|Io zf?I(-tD2s7vx7i+bPsgcdKLDvXNwqf1NY%RH!w^?XNdMOZ}#u5HXU275ut!~*CE0* z0bMH))XMALT(s*XV~+Rv+Gi>OVhO8p|HFG6>-$G%liF6|rMd@rt!os~>J9)^6;`OUSDRQVqI#t=-1^;yyg z#G9Sf-?{aU2KKF9G&$L$8Wm0+uUFp7YYsVOqw!JyyCf_$25>G*O@qR;2rW=!1*@Eu zLNf~(znMSN;vsXXSdUcnW>$e2K;0Vo{rpnIHt}ye!9Uhv3Jr*P_|E^bouf*w( z7ilUB!8fbtn*$x|mbuQe|55)G zYl*UUpaw8p12a4~I&Ggop~`XQ18H{gu9n;a`ss~R?7{X24!-Mq9Dd(kh&IH~9pmmL z+ARvG@5CS<*x<^H%|I+jV87d;*QCi|1APd|N1Ot}{Vx|{Ja zY)vUg>L3=G(yOJoG<@cLH0{8eoPkiHOBOZ|B590Idx%%yMmqlIcJgcP$|!~IpsRjIo7=pzH6i6x=Zo~M;|-V`BsjZa2iADR-XeOSXz z2?ypg8$W}+W}cR;Y<=Xl*J~#mZrsV-yFQK}+fePb@2;tE#U%wexy4ZIk|d!#K2*kX})*E%1XYh%SI*C-2U#A zmobd;{go!aa2BQ)z=tIrB=~HM_*S-xSW5 zOzJMzUCrt@sFychgCc6>7AaB@f@wL*Zp`+Y$~<0)c1><_UT1yASS?;IAX6zs`OM$} z)md?smv0ImC^V)ltFGW1-wD+Q6wVDkReE=A?)aU93TJXhm32LZ^!kn{wwE?@>y zHpI!4t^N?ZIaygZAm=dfq}%7;)+boH)3r$(?VopV)lAA)gOw`Rlt(h9!f+5yKepur zw^OU0uRLe4=^Nuk-05IQH*WT^rINy>g2Sa^r!*rc6igkj9bx8J+KRtjU!8r%T+GOl zcJR05Qer*(zROT1Z?0^GyldU{q5nablbuh_pFtwT{YUMZTVhYdjy}BZVI6iX{38{GS%fq_LR!%_uzxBa zCr}QF+5Z?qSK_E-c9hOgDsvHskDr2I{*ZN?kUuq`u}{`}xzh@0TTL9M@sPKy76&n$GuP;S z)ire4Z?am8NMX`k%?lLueQT^jPyaFwr7(>(bsb*q^waOT5X=*>;%l4r~YN`s5L~ zb8Vp$QI1p{!v!g2D))qp`NvCLG4t0fAyJRyh?N%SitZx|=Wo_k0nTZ3M@Kb0sXCXy z>xwqjWjef=-c`EKIPqb@0UGRdWB#Ed(z7?$m`a)P$uMjtXkAS;t>0)RmFy74k+{-Bioi{-!A6y> z?q;x55)E`-NJn8SE?L%QP93 z$xD)ny}||EA8v+A8G0Uuy?=~7%o;v5$C)hC&he-AA9XCcgCXLq##W2Y- zgL-$v*~zz-S50SFJaj84DvPCShG9X%VzWJSC5vN^!fs;w@cJpHg9*HU`-h$ehG&Z4)$jyUg!UDN&m)UX0>E*azVVr+ub)$gpzNv8;O**G zSl77B)l8Yz?2=DDl!+jN-%%h!F=_Lw2s*R}z!rISYl z@jv#RM+g2Q9OR9IJGd&~1pDl$2k~iKcM0LHrl;gW+H^uy_oRxdQ*2Injh@<_tGoyP z`1&1&SQzx`)ZC1YN&?byRI50TG@`d#BRqm#?uCw?`&jd^M(LTq`pWs3u~0RgAXqR| z{VbOfs_LTa?<}t;z_BS}(dT!)sq$<-_@5kckX{HM5rBu7Mc2Y(w(@rQ0P$>^L9K&U zEC3CVf-5vcgA-}qCs+CPW)3-MJy9{Rd=l5nKa`vhD5EMrqoVuf7`%0SM!GG6v-XDp z*V%e3`hn1Qt6S~_YuT^OZ4j%iEllQ^_piDJ?B=vf)?dZ5Y0Z2HMQVcXoctL1bx`eZ zQ$3%OV3x}B6m{2sH*E*vfUhz>UynA3^6UMw5JvlP!*5taUbBg)&a&@SUtaWhq--ONnBJprF9w#Ekr|5T1+GfX(Xmw69toy!TP!Rx{)IO%=WRbeXDX-rrz^mXAIthmii27Z zOO=tp1yiR@ea<^ql~e9=CVG@zzJ#uery3-VyressGV+>}jVDK&zi=!b{%W^%`Z9(#X}sN9Dq*`( zr`VuvX4YdA6|FixLT|NU#oRMrxP0CG)&@DoDpzh_H5Fi=OqoqXSx=J6~ik>ye_X##aIv?f^nw zNB=DmT#KB_?7odUSvFSVc)BM_ei^JcZK^|t!WG_EO_uuq7pAn`Q*O0f zh%z`Sqx!jWbYBDpbSeb>Vp?Jvhul6Hk&8!8i=oyc!dttdpn)Dj9P(L)#|%lLlYt@> zOFY^^cSoQf(ov^5NQ<=0ng+BqRr31)^P7+4-ayhzf%9Drr1fHiI#pk#IOeLfsNzEZ zLESO*7_xl_I@D$uxPV&f_jpQ2FJ>U0^~bJ=AzKAfASpz51|l?*pw68-X$-*NGW7lBU}LzmlYha48fqF7NDX~yko zn2;WB(^t6PH>)Z!YMWHxT$4pasF(SS@qE*f?qc<9oX&u^qaKs8sHHV01uJBx(i9v{ zbZ8J8>_=r_$ss@%NfZFX`6TE`IwZ19^?j{s(tNO?yl&O^6UX}@yPt}|VS@d7dE&hD{I+_ArWFLD>p1imoTT(?)G{9>NJcGXpc<1!3Z>*d zx_iqG>VX|9Ov@87mVy465!xNK?JO~{gM1=5fBy5X$GfK$e~E#|Gh7D*$7<>ok*`rZ zUt9)VsUOGKdotfIkp(L*C( zFC6$Hom|b3Iu|W}Zpp8>(97+{5T$QLkcmBLrsXL zr*RgZe2|DX98S+$GWDpl4^ZE|bNu@+x<+aTMua!@S~eY!B)aYXV~`9n*ti+=EFG#h4U6SNwnJ0N$+qd1 zx_hE7RYeA#zjSU_vy+7XdhXar%u|wtCJDaXX4KVoDTm_udO)#z2WEi*jo{EPQc;ur z$T=}oW3S?08tA`q@T0d4(Q_opu_|kFP0RJDxeVk$8|n!i(bJDwR6=TTQBR7Xq1vdv z9OPZ;n6U~E;dqzFqpsBkBQ61Du4p`yq2It{T`}*Ruh`R7hingl`}PBUF_xPc^bX^8 z4MFnhw8zqp1fUz<%9nVR;s2SBUK8=m40zWF`AK`Y{ z18I`iL%^(JoZS8xf zcXK)fIh<9H2^|<;2*0fzckIp8h|2s1MnIdQKRpTPwF4UGKrdqaE7}lBjmW+>bWxkX zc_erfhZ^PTT?{bxUAi|Fc;!gBN?*N7W8r}dxmNlq%C}_TMM)|Rbggl{n<@n8T&?}M z5!QBAHKho<>5tuX)S>01R^hO&tFSCPxHWx$j2NW&jao_vzctC;;F{C%dC1p7_0V~K z)++w@U5IN2r1V5sB3s+)nX2J6trWmneNtcoVZgvohtgmhxn4qE6`#$#xox6zS4WGM zjkPi+XqIUt&ST%hN;Eh}H_fm=P7q8}AG(d}yfC6t*Nt;*BwU{*LOMt zdMN@u-i99O2l=gm*eUlL&t^)58v_0q<7yQMR)14}eoC&ULQsoLl=f=Pqs!DM2U zf(<6m+K_|w_b7B4fY9fODH^vzOkrUmi`8wn5(S~pDUQ03QN~JGNl|c;olW7uq05+Y zw;z}Chn$}mT~Vn=A8i9}GmgDJ9A%jvK4yoyCK&VNBQ^zYLR`lJp;IEIW>XA&s7+!$ zBQGz>GxJpCM}^FRX^AJ(68GuI_wnfYb=1FKppES6<(;T~<@#BN##+DW_Qu1H>>wtm z4SC|3fj3w;bUlXL^>P~YHL2t4A@HFR-*iSa%Utqp26`g|wTMIZh{-qMQ2+Ek{vlmG zlYy{59A{E{TzXp&q$pp9q5CFEH0+v3g`3aa6d9}`PkQ{2zP^|nu;k9o+S5dNnNWqC zrC#~FTuqexJ0-g_TZsA@_!m`hO*zQF5M( z3NhcfxjL6=z#bBi+BSQNj}WUwxbs1!p5%wqd#v}wM3~*p*f(EZ7+`)$Waz|=Jpj&b3?V@5$r>T!cUE4?KdgEdB>I(iD47 zV{)!{-C(z)I=pj05c?*qr%wPAkA__jfiZrf-wMzod7lnLn#$yeZ0+yI_Wls_IO@B7 z{vJGS4fY1ROIHlFxcwC_AR!8kYOg;;wBX<=W8hPK0dTuyJL3y!~@ zg;qCqSlYqq<^k}ASnlUCeY*U|>Gtp_M}b}13T#%ISX84&UYv%fj!j8pqqfSEI!AQS zl@^-4L9?8xDZQkSF(tp~Jf0g1d-b|cBwWQb;e)^-W;7Z{Hd)&;m3d37F=ZK65O+vikAp`?&@+przp==wyEEx$&V)y33kxvd(! z%Sq3vG4n^?jOpooe9g}Pse$G82oh@*aHFNXH#*Km*af_~DM5~!Ss;Ue==mtAacVY9 z{c!P9cmK-?fIFG!udavRIlUgbUbMM~AjfLf^B#yg6ZPQixz;DoujN1KnSIePqXCm8 z#m;^6x^er$1(MkJ_g)Xh8Vj`*V$Sz!EAM~s^9>~i@$LA)(UKS~giaK9pgNIFiK>h~ zUl?T{ zLoL){n$Z4x?FI0#k;Fpj}7k>z2tY-6{7D?^JPgB<52 zl|ls-+SRFjQpYZz^jXu8v+tq#6h;hv)~-qJsU4B?vWJ7^BKy2Y)y}Ncj#eGAH{xn~ z?$e?PIQFWMCHbPIb6Ia&@hqGd_A^M<$!3jR>}|IeAs6A zf45P5prX`#o_Y5~$%ohG>ur3ZCE5bIDez~U|R415-VHpl51*k=2Pc{Ms2v+ zKJ;2lp(FabMp4@#*bu65Pp(If_eOa*l6F2L7GqX9hSV>Tz4ti(W`oMRZu8X))J;p} z8A=}IWl=c6VxaO}Q=zMLD{rB)6OpY)v(n=?_y*Ubs+ya1`E}{RVflp`N)uV5H==>i zr;5&fmLrmI(9ToiGwyBuho-M5VV4!H>8Non2c_PKuavOhQ+PNkiKh5$%j*w~kRJ=9Dm?oMHcFFXs}bte zChS5;@m<>D@3`T%>xEzzB|j1K8g9g;NI-^jPvudu8UrJxzh#hmS!1q%bsyAP*VT9! zOXWq#Fe-1JNwm&HoWVhiN+?3r`!V+BCDM?0guGY~Re5`Q&gN4gQolh%&Slx(c;xd9 zM#yW0e-MtExHl-*XH?avV_+i92;pAR5;5vZYqFJUK7M~fu0c$RR-mQt8B!N?jpS_n zWru0~Q%~(B7p%wY=7(o~D7=zhc5TbdxOjIw34ez{tB)1tgo)~QhQ$JjWGNme!XB}Q zq;R*IFL{B)giyImLLmN@n{5aFS2Fl~6P|FOJUO7CNM6TX$cs>v4mB&MNMq%*i0&;g zPZ)FfClwVtX|OgYh^&8p{F8zl2oJz zVuA}ul_BI5l?UG1(pH&N*U2{cHg_|n$kNqkozF4d36 z+h227ZonQ|wKJ4Vrm4D2cHC}1w1!BOd!t1sLHC$C!%w5~vE_eX?n}RAnA)Zie^(QF zV9EZ1DVC0cf&|!@HU|x!lU76NJ1*5HaoT!U|9Hub=AL{vaO~m2mc!)b-wcr zOQ4#fRuJ_nn;{>23syne))Yhz!ASxdsPjx2cJD>$-m11jbZP@t^)o%&l1Rx~cpy0Z z$u%l3{$SFZ9c}hyc zQ!t0G@2RKK(~Q%2b@JCpSFcI;@gg%PG(MEH+5dji6buW+G}#SnVa@jXq=rd)(U_8F z>1<^OQG+`_OQx;`8Wy1;yJ+Q4Blz%xWi`WTeH4P*=Qeu+Ch(E>X z#`PT4Ssd4_$Ii^O-Q$R93QXuQ5S`I`$Ts_$RiI=UDu&Mb|0Xm$dzc3!Uxj8|cI6Yt zY}YAsB}GIn_oX*V*^dE49hiY#-JE8|&O}Pd>wpWDYuDMLZ%czY4vjHl()FCJ8t*$- z=@$jQSbSLSP)3i(2g2Tg+VN?z6q8f`A(NY?f>b(Gi>nQenUlxeg^%sXPwV^lOE7#caaaB|{emS6OY@EBeNft1&QO z)x-2Gjnn%23{g$;&1v9qa+GBcy4?tw|BJz^xf4dxD$}GOSQLj7B^_<@&Li9!H zYjUkV+%r8>ju7e)f}H-)Tl&}8zgjg7OQ~OqvZ3Y=C`juqyc~zFSoEbWk0Aye_-5~D z*teEHp)e?iDcBL5J2ZY)$!$=x>fD0|;59OjDR+|(kR36)c&dk`)V=i7j)bTAL=NTO zp@Vze3v=AL>j&##n_4YL4a$U*-}j%FMm zAXSnmtAp%-AJ|w|SXy=3C!LiKx}J5xNJ~|P8)SLSnGev-=+sHiRHE(I$7I`7?a}|N zXeXmY(O3HTi0hooc8u<#rr3C9w&yLeldND)QdlyHcNeGX<;L2rvP6%ZCSwCFin#EN z&t|t^`BWU@$+J9i4?wX^Tpq(TY64=2Y=dcLkLb2sEp7=4CI#5D_05Cc$dW1+1!KI& zohA3dY(P=sZ?5Gq19?FPxg@yV(^E0ZMad)451SA|jM=^=w&N<#E~Can5tRUxc-6-9 z)z9hY=TpArvc6)gw|JM9@+lv>+P8AfNaUTa*Bd!~v2MK4F0f_uC-E)ras{b+dR0Qz znkO<#pKkT+sRo+SdP_Ppwe2jAe$AcYN^~f}|IWBwQVgW?4JNEw|82ux4!@#bSf^6K zmI{GHaXIp{S0sx#iNwN45!Kq0iL+}sL+6C8?iNbUNZ$C`st4z&{Q}37fVO?I6*XF8 z$c6Fcn6T>FqaaMIB18|y^dn`b|AdHbNG4>+jIyLJ{29$px)QR=Ihw(ahz3&`O!@Lm z4RR5V&yJu&VlyBs6MN#njE)ZOBj#9-cXE<(+2`!CMYv?dG>e_e#HWiBf3gkq!E;@|h}pLo;Uf(Vv$*l;kL1T%2P-F9w0S)2uBS zus2EWNC)Yo4CPZ5P*r4;+GY8=c6x8I-O~X%r^*#bY~A84CB}Z;X=5%~>mQNeAqI)* zhgiEn?<2EGh<^8XE{iH)-(5KPkWzLMdCWS!KjwEIyrd}Mw~54@3!J5NNyz2kvYhW} zx^%i^1?uE1v1w!Os;@gLVqg!IumdhEZ8G}C*wCY~9J3v}qbWB=mzvuGGp|zeHqs09 zLV)ICAWJ$+od}X5vi+-biU4~42MewknIEOXO~lx1@F}M;0A7T5W)KHft2)#3&ot}O zQfuU3G~2g!+4xce5>jFth0gF3)WGMxWiV zI^8kA&x0!s*zNwDEB8&JuigG=3aTs8Y1;j`cJr)xFUn! zoHVh1*!b8ofM$91CJ_NKx(kXVHn5VIQzq6a{hZjbTB}|fk~v5IJ{r44i)(|V_K4KO z>~vE0UR>+3^J~@~E+mn*JoT*CtmK9k4f@0lrbQ*w{pP9~vDHY}y__ zJ>dVx>yc1pOt?Blse&sA zq;LsQH;wc*G0&#LbwLg#{W-7Fv1>o`92vkzil{mS@+GpWoU5uJ6oQ+yOPWyz3KxS!iyXtBh|7d>eXuQ+2L&%9o?1g#rNG~;oxx$}ChhCr4{BM|&ov=V7~MYnOroXS&=w!y4D`OzN#%Jm8*HVA+Xhru3RN;o!smivG3h^Yp66VxUe2>vFyd|ID)wfx>nS z_LkUCGaY_Y@lBy#WzSAVK`A!j9=xUrFx>^5z^QoLQ290V_)HkpY7^Og>f&U`lfE&X zM@eY!dz5F~oWC|+ALXFQO~?iOlX)=*+o)ZG=CJ3F82a7b$n9uW|G9xq-Qm%l0!kB0 zy$Kkl(yL8l8H@q0z^-V2@Ep^HKXPGJ)I=0zv-C5A11p3>BQ(G zZnPqQBIgCz4>4J^#+)Or8%QZ(q`WyyBlmw$*$V6B#x_U4dGMumq4yo2sSM~zvdxLW z`e+z5yHomb=FXYlgvYgAET)6x6D~}>>@2B_rAO3hB zx0H3Vyj6dKg^9}A<6FA$D3-RHoE7BFQO^MR1(qIcFccEVMx=^Q``L&nMRfP z!27M5sS_~&+=TzSC#_p`t5z#U$B|cSgM~P_u{*rkKd+ArnpcEh=*Tn)WW55hwR_lB z^vv7SQ>FxX3Gw-rFa3`*;Qe&C-O`OutCf3XnRFU!%|+#DlinN#dAFIT=78-{hIfzW zo%ov37(<>GLtMYkyK2Pq`k8wISed^kYOw{;eA+@MRdR}?{4x)o^2lK%w%{}N##*$# z1+Ac@E$4**Z54QD_df&CXCji}3orc5i=|rHaZv9#YWvzMEiuO$84{KlcF!8<%F>&z zQ#)(Vn%@S(z1qNuZMZW>G(G`Fq{e$+n_)6kyis(V4<3MIASQ_B7CUdOn^AP2J&49ywW$ z&i?-WTbx*bNUiH*Y}SzsNFtvzYnz~#5sl3$a()_iu&3V}y!v#Potv9L|D5FoV?S>B zm=qg0eTZ$Qoi!HLc&SO^>Q%G}`Pd??@@y{+B zwnqybc32b^GT@&VRi^_1BQpRpP1!s{d@+Pq8VizzWf|<4{at|mR7kz`<+-FfFY@K{ zHA=o&pt$7HX(2r#y+C#0vsl20M}Ly|n=xd%Jh~)Md{YfRK5gn0(OntH9x{gi+I1hK zAQQX1(1SR5^)KWLVx{{=`q54}^sw-jF_6LsI%7Z`MwM^J8&~~UMn5zC8P6zVXZJW{ z{@pZ$d*xZLsBA)VbQS~0^EBp|)=wUXooO}5?84b!xe|oSwBO-~ygBU?K8_^LnV)j3 z&5LiWa7It0)bN5eL}Ba}XY+BigP84^5Rx7*8PUww4CBn{AK|xhhF(L$_-tHyAtR)= zrFhSqH_ns`#rg5-1=l%m>>)f^PS_SF@#n?YPYPFWrGBl6clJ1WVt?4=14u@+Q(}l^ z!qRkBalroymeBhXmN&+In|Mg|u*s&R`Vnt68{2APGQrWS#BXbuv)O ztvH~iOh3E+bZFU#-dLfgXG3}M5B)D)v)3BEJKwk(jO2tI4JW*L^i*e`zr1DNiAQVK z4i>I_D}bpOTwfnnPh6(y&DL)89`5CR)0M6^O8}^L$c*JzXveh91u?370Y9RMv#WDbPVJ&(tL`q3AA2tC50VbWrA^;q z;v@idAatCAMmEkKmb8eC4Lp#g6jv^ut->f5s$#V(+i|K=1MLDOH&DlTzF}AUh_s74Y}6@^!d-9&?>e4|C@+G1_no*}$m>of$LZ7>5t z!=rlHN_Ka1!f}NmCtoYeUdwr{vHa|FNU1+jk*gGC$0eLjoW^srlgGqsurbzpT;-rV z?@`%DbU@CvOA(m^xDWXBI%e%a=4GY$At|WN4I0(MY`NOp!>rTEDY&I^A^81X;f~&o z7Lgs83oD}mvf57(OrDU}Lww`R+HL>I?V2qqi`$KP60A~T{EGB7Tj5c4N`cMmMa?PW zM}*=}ng_lQxf$Q&*5{cnfHY-iUGbA zy2sCSjmr9nougu`-pnA3hRTcG)huYq7cF1WiY4@FNwSx8Tda*2P!_U}U9}BP0cv#0 z&u;inVB6(*k!q(pwu5@v(%#Rj8MD*cwGnkt8MBo)gGd)b5@_E@{0pA(S_7+KOkF=M zFuXuZzF?#N%>aMTJiR_h_LP>Cqwzd1V3!fA6SomOso(hlPBhg2z{4?nK5^f)j(rkw zw$F`cG=^PHn(K~#yq)uxlI2Oaq^W;BClWh8rnx0Qtgr6)T(x5vu5w_O`|8}9W8g3% z+!J<1_1HDVF+_$fY?S4CWCkRW^(UiDIXTaDRG|Cv?G_n*a$?Zz}${+lUTl*qus+XQ=CSomd{jcbU{FebEsdGLfI>Hb-M(*^?9pT($=d? z+uAXQ1P0~r#kYX3@ok8IZ!jy%RtJqyuGZ}38N?@FH67Hpi>N}0eMmt0?k_}>LkeYH zl{lbU8xbqdUO`bruIWyuWYg}Lqv`of9*IY>JGWyGTOI>SaaW=HR|m1$TM*gy>sA++ z1uD~+Y-$Tr@#fvdPFN5sQ|<#_>ABo3u_#n<303(K4dm5>VPAXv8tYyga7)Z-Y&Op+ zTq$>9+(^Xk)(?U3N)3RGY1x3F>G9k7-F337?ClPpGdeFXcJgwao*@g zCb%U47Dq5KI@!jA0~M!r(W%WrkJq=ftCm-;CFW6iF=2CZ!+a-lTM}x#R;FfYRdIb5 z-#a4wO8WH2(eQ4O@!HM!$b7NqNfDb*E|e7z`aZLX_Mtph2UG4e*It&h1JLi%IPCUl zko;gKKbSFWT>f*n<`Az4s=p$Ja58ZuM!!YS`y8}u#Ih!5M`kb5Bjk?hIzX!n9>UHFH1;_$9QBOnn2LVQu>4UJ z<+u87t^1I}lJSgn6^xyJh(QIPTBWFw*(GPwwG8f$Wn1vPRXV~S%Hlse%eD9rI<^`N zlskYWZkCHKp`khG9`yaE!pk<$ z16LgUNS|hL<+l-oYj5`Au5beC3SJQa3rOX&Aj|^S4d~z&u^J1;8N0}Ajgob!DZRpG6q`NYz?*dKhcNJcE zIz2SGoS$-RUhLeHwx&dlR+!_SVBnAlkv&asDVW})#wa;t?5SsC9 z%GtI@EGzOX^?I&~lC}DsEf?Ql)7pq(RF@4qAY&?^@mFl1$(NX=jn06 zDBsU;_>_2TpYxbds=0Gmd;2stetY56_}3TDl3(X?X*#z?^?R)WUv#uq!&I#B`B z0GzRU(7de{ZuzP=lkXOcoE1lZ2%S#b_6__?x5+v%`8a0b9+Q~))J1=62K1;CkL_74 z@T{YsSUF!u`;cSl9B~oy^ihrXX9oAZ*{$@JeYO8YnsX>jOr~$S#=aNM=ZLOzf>pc1 zLnM~&CkE7JOG<*48ak-4O38i&8&%J%#hkS>Id05QR%fCDW+P=b>ohP$&PP=@YIs8dWsfo5e49p2{?%W|UJeb&Z{Oyg z5d)kIM#J_D@UR%Z0qq=-mS*6Rx1vzcMEfrqTD#lha=IsH@mJ32c8YR@IPhPwq^m;c zzu3qZks^Zx04=9a@&hgkXxG2du1DmUo}VtDb0z*f z$q=0w4#81Dg{nRM`1DKvri!6c?TQVAzv3?yGZa8C#$;6iMSjq%Z#41mhacZx$#3Ca z5kutJ1*DK>FnfeWjO^Vdah6eef|%>+rYHaQ%Y!WK4e5bBdAa+RSQbO}>IPzxJFNZO ze!w3gVaOgopNS~XfVX9XdSAL0!IVqHo5=tz#at~m(3(A{T`0ZthR}_pdT9XflPjVz zKrPX1=}v}1kBr^|k!ldg)cQlw zATYl^9_(47_Ex*u^t{oZ&ooY@&gTiye}wvZgXHN!GrC0S$D{xKQV&5~3)u~dgUL3% zsM0ZAHM0u|w^{~W4z(&lLe7WSW-|Ar0^jeA68p(t#--Uy^g!2r*`t5XuKhVrv0y^H}XFM}z0Y_)6nHc6fSz;&?udpT7_x zLh!@`fUgbXW7V=@!IHQws^42$02{^ z^nw1EOikpWLpP^_#CO9|=Svf1!yG^Z!!`Mdw9%t)Ab-J}0f>uiMkt9Yo}r8>1@p5QH|(nd<%t*3?Q^spKIdh z^kho(3lS~-((zBjUd$A%NbdXe>eH(ZNK&wPdVJO&YY|uy0SS@-F{UR76C!<61jOq6Jbn#!pAR7a!!H0er zPN;BJ+=L$4;TgH>LG_A_ECsX7u|D=2_GBW}*L2vJ%OaDvEt>{?(peTwEb=_dGI~OB zD+8TJF^In5lTJ0Ae5O(f`A@z=J`;-Xz!22KwdT%S$Xo=`sLDc~rHH zS#mkhsZhJNec0_3Tc5!+{(#lVU?zXLv2EIz@?{<=n<*(aC50J~Pxi2JVC`C`HVT=? zB3z?xwhe4{t(_V{n8|KBiM>6*cQ6wN9%?T|VOHw@)T$r3wxc`zXN7ih-$p;c0XhxQc-T881Ip_fOZq&M zPv9op>_=ISpL85UKZ6U{pW;IKf48k%;#^N~q-}9VWnYYb$29*N(R88WDdwC@IY^4% zB}DisjEBNsJ{$QSvG}{sg}-z$4Y%~E%sH~c1t+`sYDQSsJZNdK3*668y7cTXW3Jk} z!~NW*Oyve|&i<)FiZ8!=0+eMcm2{wCbY8?hh)zql}E=|as( z;KL#N&Duc&zX8HGad^3CWL#*#j_c9TKU(+JWZbp2DfIIK;(OtoS%jLR_WL`{K$D?C zUu#DLwtiOTTJgCzG1K}Ftdjma=kFo64Aan#BS!V7$fYz5wR0o&j`2&P44(`XuUmM(F@(!EMNX_PWV)+Co@JtK3XtO_)~4=}FZEDVwzFxD6Y z=cpb>l}A+Ybppf@2AR@gfV66g+>khK2SH}?+x51k8{rY z9kF(Wl~xM1TkN1j#q!^ni%pjn!$l zNteBmy;#8zjhZ;E+>enbuClVefZ)Ip?p@$SGjmnibf;$J%B;+z=4>4^>$HyN=Kc?Oe170F-q-bf+3xqQ z8I|8y*W2mOG$4Y~vJip+%npN|H;|*yQdy$&sZ;bLTHLrNNVm7BKBgJ)&$=;kvO7)F zL{#!78D!jHqb_Jd<1(xe877m=E}O=X;01YZKjb6vfQyZ^bL0JK+Ldi5sVkrdJ5J^< znx~d@eP)L4gvRRU5fHJbgX(X&S$vT>W^4}0K!cU=6&5^Sy z&5rI7$)lcM;}3j2p~}J9L|ey1wP~LfBnP=t)223Dj-=D4vt?f`&ivOy zF&Z3D?-#8lk7@NYtd_W7O5v~I=jvOCTEv7zrF`BLcxk&O#r$*iQqK37=}JmrsY3gQ zk;VTMK9>Waws*JD=W{MVaw_Y`(hw(PAq?aj+hh8vL7WVg{cobua|0?-Bqf^7FeSe` z&_VQ{F$H>lDWWPl{g9LaT%2~nQzvucjGI$N7Y7t7uGsy$(u{JEZ7d#{ z8@u@+_V2e&wOGlh*^6c?V$or*6Rya{5-@W2ZpRu0g)ht!J0}kmB|7rYCj2k*JspUe zaXqbc@Kn5*a5FN|9T4pY(C#-j4)796%68*+ivj22(hOeoYbAD#1meXt9I9`u%S=`< zmvD^p$CKb4;)iGqTy{pCD=&oXCRd;FTqE;PrOEzj^nm33{!5#8+CKg>|LdH&XGYU` zo6l*KS2F|bzbtS|x4#g3&jh3;PBB9JM3#Pm_VianUyPoGLvdwCGHn4SLuWMirA~d3 zU+T+Job#`p$~qTMVeuZb4d*j3WAx7KvbmScFRGj|1LcK&F>?=9pP$T*vcHPuq(kK6 zLZXZQ155VyE2`KK9r{#cZAv$}pA6eSo%G1fGd-VLr7d}S$j$q*CstuZ}^KIfu#HR zS1dig(!h{7zUK8N!!oa5e_~oXoS_tF2U6Ili<*hx+H6cuzAf&yR*@9b{liSz%ypv; z91>w2NqyNMt8WR%4pIkDkxwjKgUli)>+F8tiYb-H2YWp=ZPtHzlO>#ZZc}(#eaEnD z*r0pv^l-M}R^BYXIFPRWAnRbpvs z#Pxt19<2Y`Q~xL=t&OqY*r=txlF@eK%bmGp33W z&HFunqd0Od)bZPA)mPql4}rstlfZ2UgMGKFAo+w7WnIf2SFYl|cmggKDtQ)2j(fYG zw0`hzbLK(jK^2QQpuq!6FPvkE-w5kpT|Y?$^MB{)qRHmLCbz`i00^B@zn{yw2Pd+X z9D)_#FO&l7FMkOezDFBsYCjbtOAO9V5p2WC2&|$N&|{Ri5dL?3?sz( z9z$@)X6RY?9xTk88HfxeMIyY;OqrLy{cPfzcNgU&T5d@J) z6^XDMLC>1^hS%pET#LfVNAq-=O64;Z)FCH7e#zvWlB~+amMBg*u2WkJH_A`l58RM- zPNR!)!bg#t<$2cwvjwa)&c@+LYUqS=W9W7mxHx3ANhzoY+k)W-%(rMq_qJ&1)jzxU zvbKS5jmNj{H%xE0w$GhBUU75K=1JSASW25o*K$$p{rlgVa*ZCPDd!pk<2~c7L^hAA zeChjeQo_1>>=&Te(@C+h*k!jv4CWL79qE2Tc(rzH2%Vyd@^T3Q!d|N>ZkUOR7suUN zAxK1&T90}dCJY4!{wa2~4zatURIsyh7grMb^ zS_f36BMN#g$QCDsgdU_t!J`MS8Bsjj6?~&)7(d~R3kPvNz5_14mPKvzB6{*>j($-b zK>Pf@NSo#lX_rW7;#u8L$udpf`fwtP8tTjxH^d+Xz!H1P!p#3Z-;~YWg65?*uRNZAj_3>ii+dkDPQ*( z6@z)&WIN_LC#GeL7>1Zcd1xqR{s=(iB}!f34XL{w&$jW)G%1b_i!nZKuZN!A&rq9- zJdG{1ccUelN2kpAh z!WLLh;-{V2`y@3%+v(bf-{bbPqZU^pN8+Qfc8imb<@(OACd?!+IsKfMkN&fsdJUq2 zw|RW8XlX9pf_*%)EVYSgs&13|}bD5A2f`|F((5uw|wL z3@v{cA(mPPZ)T#QDu6-YX%6b%B;84`_PcXxm8T5$_gz&ugbblk77USp_DJIk0G&d+0$?07blapK{fGGkVg6kySWcFehSB3R{sgBB~YvS!{qY){V zB$d0lH3tL?;NL}M8rM5AO;nS-Yiw|;47+i4whkjJ`$my9HPf0o{zy+S*zM)4X{k~a zhzYjA&?CT9yPZO3b-#Ocdt<1(RA{cyE?Mkgg}XxCU&E$RQl2e#RajI--H`giEvTMB zqT~81;i}Cx5sWg<519@3?E}`++L$a&O z*?F$@@v7GuGR%J9$zW66FJ#D}8z$4S)G(zv{HX3pel`j~LViU&KIk&)R=!TIN9aI~ zhVjK!5%9>F>Q)nkX78RK-;Jz(txlDg_qcfbY}@=nkia7lSq1h}bxRbj;ce;(N*n2W^YpWbQ*drF3`g+PW(Pr~O9 zvru`$99(bgQjNOwgU|U!e^Fym9D=x3&puP8f)*T_T>fGxV#fh}fvb&w0|09Zx(X;< z70L?8t7ky6dMr__xK;r{>Xz9|HjN)sS(aihm{5;fm z@vlJsKX!-by~{0qb;p#u{9RFD<-LHxn|haTZ|~AFr!9jO*2f>Im4%edM2uQjLjCmZ z&*ysQH50S-7%pB#O)8#}K6s7&XphWcl`guLMaO_-egGSQBjiM2L_|cW#LC`bo$$Iv zsd55`AeiRhYyJZYUugCqVx}2&lez=hij#&m(8F@Zej5{XL%CBZUu-F zkrcWgI&gK4RNJ<}GvUk$Msaog7iZORN*rzbRnhBW@l?1%IJ}`>y(!MM8Ff0*L)Xx! z_2pjEnUn9&B;8m=Ntl#PtmeU+xp2^%!Dh<=G#)GSz5g|N0F5G{iYCyOj0|$UnTze) zqZ*bLVG5HWs=dpgoqjZVrD@8wiIX8yvf{dAV36)a7~PQ*dRjqPNaki*4FucZ$C)=q@GgEHmpOXUi*6=Md#c!vKwEbKOfX6NBfE{`R3@`G*gmUDZfT=%g5{e;XJHheTemdHcENbofgGB?7Byk&b* z^RaHH|0EGUiIEanA@6<$v=b359^&#cc!QU#)^fs0@F;K1Z;P&WT;N{Pu!q_re_Zx= z(<~-RyN7Psh62}p5^V(u`7|mpJE|~r-B(KB*x#^$iUyL&ev(iZjJ~ohj-2-Kv&lXb ztQK8dgZH+~8*O8q@Y4&dStEyj^sN|~P~s!^AmARe|VrbDO) zb!$@wbq^x|orCfA2=Ez?mtHiWe=Cq-0M>ifU@dAEF#&QYCPJq5LtACY8L0OdNfW+I z3}3+-`zF2qoOOuVd;04VjwNjX862jNy`t8Jf$Z{RT|~`iViNXeoFrZtnBGUA`aSf$ zhMKv>#B`F*bH&uA?h&bxDWn01Uqb6sT&vOrv?VQ_dR}7P& z3%q;xX_6SxPlhh6x`yEJY{zA)%r6NSFCX}_2ttH3@T?!+PInO6dZQS(s^t@Y)bAA| z>l=j{#SriC^+J~hpP5GTuP4qnCa8HTa5&0uzJFiF(b+ec$M!jc{5V%|pPf@NTtH)K{xH%)|^kyc?8Y5q!}}lC|~j#a{^p4Ka;=Yv82+Xq((7vXX#+A z5Xm{JLpc;tLWCrVqCj-f{bgB8x(K14bnhnXJr1tIkZWS#S&Xm-qIAlJ+TKm0OQCuv zw4Rr&$nJ{3a3Lz6`T8eXrzV=T2{B4NqN-;xh6d`Y3Sx>~B!$mOe5U9%dmak&NnT|N zL)eK6hO380^48Am!^C0)vau%IdW@+_bbNCR;^jo>%L@k5-*#S}bmYaX z;TFQ^AqloDb962F?Q*19VFB8NEEPxWR`Wyvu<$B6F_7N1Ms>dZ*?VcvTi4h-;cqvK z2KSG2XJs9B-gN~&D_dpE!{-^rFq|xd?6MeuLyAURo(BidIr`j0g~h^G8;b+N?OWJ% zxo!3YB~z>=`6)#zh6KD!m0d7~iwxKkhn>89LVtYm&lWf@E<0}1fm6?<;;2&hKY*Ql zCCW5EgZ>`e@O0k4J?vBwUPuZ5;3wiCv*qf#M$cNohUJfksqdtiiwCsev_SS_^l4|UZd*V2vsr^t5_9P+p5Fej($c7 z*nh}S_;>}ZAENS}q#C1s68!bw7_rDYlG;O}WD;M*E>zco6QxT6Ypp7!1w?g?o^Tjs zt>2uT(3-}1XbZ5<<K;>2{mMeLr33t^Z6n?1v5YCo}J7t4a?;=`}O= z!))w<`Tcy=A&W1|pbDb2Rww$l1Wy|S!he_ zV&o8vlPr@E5-zQsFibP;Z$)_UJHr!~L^kyyEF~f5xgp&95NWTWLL>(cNMa#HqRLxb zmB{mDPluGZ22?BB3?~@n=g(hwZ=*U%g4OVV1^v)$Q?&gGTIz`marTrVxN~*mnEY^; zzO(bu6~s|KjO^nxJR(jRmQlUQ=$*^0vKz7ZSg7SPh}L%u%FCeuNWTFOwuWVn4TAjg-ET5AQChYkdlUV3_Lt4-8RT`YWZhyKL`>@H)2T76-sXq5x-b!Kc{y~KKpKc z(R?-HJ~liQ%)9vaGt`}ek})u!mO4iY00izqk~D{5Z?G#M+4py!e6a zrxk(paC9jWaQD93GL4TfHQEidpZIhBVK(6L{XO_95xPosn!`v8Is;R9NFg0vg>l+Z zYI_xqu;j}nkvfw_WqSdYYWKRLun`*{MgB_?CRB4A)Aj@SvO9DbYDMimRx|Sl0X!Sy z0(zmv09+QWk&NkT39Wm`lfEA!NBG@kwUeFvhNt3jM<(>xk1)>u%O=hcGh_0G$)P~G zQ;!Lk>(8xjpa#>ZuZr_V0*q!>@>=+W$@u1_ihE~t(I(i~ms4q1MWoSv$}xOGFi9zf zX+;*5Uekr4&c8jIWn!bD7(~*~;itMx>8Hn-M{R` z6CYfD4)>!M%>ltl*`xZMUUlSvY_eY_z&>a$5Eu7hMqb`?#wL9I+OdOQsAO9gT%Zrq zaUxfvx!rwt%`t&JUMRf(GrX6djeBnmCZs?GCGcmM{l6FckzGXKNxlzI6k*l~PipC+ zD3Skw5u+~9t0nM7O#CJhZYU}{+z%M0md_C-#9pw2ApVm$U-bu%$^Z}OBhKw?wfyvf z$Sq1QI==vKH#QfbTU5L+82j%Pc^}YLYRDZWZ}*zXp1HyxYx-j3+Y&LwxGJCC;b6Di z)Cj@zYVy+v2>dJx-rg^@Mud#=KCLO0SKStW;_r6j$z)Km>EY2b3k9lIl2C;XM?RnpJ?siuv zxZS_!ebNALasOo;sAd`1=7D~8yvbxkU*{-#>CmtpDFcnOBo3g1M3Zq?MT^a1gT6-& zXU#47XOk*U|1LGAgp^E^25wng95jWsQB~UR#hCwT*FSvZ=jex)-^=&;vPb_w@&Zu- z3>kZpj2U0Q=4VrS!yTn4s4gD0HAc}=$}iG1AzaoS{Zec#Qk*U~roW?H zMg|Q9qf58elCP}4zfTSxwsHK-$|=A(;lK5K41b(f82E8d>GzZD;1cJeEx*Tri;oiE z?+v9ud}Nv@0wfC150UJ`!1sAKX`Y|!tfCzkh|mTI;wt`?Cl6`3f^s4L6g^JA)vqR7 z=;XBp9U27eClcF*Dh;I>_r0DJ^HU3pEaWK-o#cnGH z*Tk#VySk$3N4Rtg0KrTGnD2xtjkWXZDZb2@l(2KVAYu}>IjLysKNUqDYRX5LvoGgG zH)uI48APrM%)A>p!ZFRYF-Kd|e0WJ@((S~dSyv^8o+jT}Ki91u>TD70g_dj8RGs53 zVC*mFAhU>)rnG2Hw;Joz$+~}StZzhnH@aWtL+2mui-Y@)FIw$_18!KK-f)_Ypd8qG7r z)?3Ry1dUww9g#Csz5Av&`NPB7_J2OV-JVDkZ>lVbdfsqF@6@yVeP1`HjwG9CvK>q0 z-D1d{!tm#f1isnkZqw&#J(oHYJFB8$CoNCGi9{ji>UCAQXtdIFJ;!HvtG?7?0)LHe za|+Mh;yUB6((8hwulCLyFkeVZes(Amw=#sx{82n1QIsw2ZrN8FR+rN|ZYzD{J#Y3+ zj@JA}=$Y;G*$D|pl|+_IQO6)ut0KxKNV}E=T0Y&dxSDHpt#^$fkwr#PFoqSKOt7AQ zBE&|ow}Y~evFsIbkj+h3q{znVcadeUg-2&8`|5WNmqg;wW7;&8t{mGe6%#Ef-vw-= za%^w-sFHKV3RA)ms2ic|+Z*EGmbI~FZ(HI=%Carad^IDiFDs6fr}#`~Du!7&c{D_= z_7^Fp2+&}a(^Db#O8J5v7%mxta=;X#&A6&kc3!|*C*cFLO70IFMJ{lyhz$*tG|563 zzv=*~=#M)-E-PHJ*CvXo;DJ3$?}l=C04vCGsmvU=$E z%$mHedmz<>`$4UW^o^d#+MEr5r!%ZYFQGP)XuaO2kA0tc*cW#GCz5 zY_t8|sIt;PVJ0F2Li(zr70m}?=z_UjB?45PqU37EXHQ!Tw@6es_tA4Y3B6aM)u{8+(Jd#&{|>6O!>iOIq|0PT5mlDyL0^_m9b?K_qqGmP zI8yPJ#mdjW86SewLCus|Nb$oI%VtaP5-BP|F?1v|j5Ba5p%80AO{k4`PbY{r%16Zl?UJlHTl$V=N>NkXc{x`9ss=^fh9mwFQ#r0Cl(P6_8jI=Wz=a&QXJ%g%g7D({q5U!!DGZFiBl{f^OR&@ z_RL+oLT0$64~_Ck_YI-rzp@Vl|L&K@YfPsMTUY89Z*#n`$3V`Qi6kUraG+z0F5EPU zhiZAh?CUsWbfJ?4_wQw*CJ9+qc_iTcpxku!ylFXl;&=isVU+nqCKTJ29W7#a!qU3D ze##~$n-4OtD$4a0j-URInt8BdKr)s7Nh!?sbRej>;?|a?Do(&UIQ1o0Fy0qa9Flv` zo{-aF*7L0ReAHk2Aj_=X?vC4iu2z3Gz24Sr)l}-_2Wf!w(qjx8MF8gcVuI>Hzq^fu zQu`)HTh8wK-iwZc0=!EnSoi-0+up~A-y;ix=a{4sh{NIGmHePIF`3%5x2Xayw7r0d zt{nqt3J|Q+g=ep>R_tGKRc(&$R1?U>cntj$<@E4Y)pOa~+)?vIr2lu#0fm;{>sE0Z zSKjir4idWl$rz1|Ev0daF*lzuv2o(+EF4isQU}t9l_Gy4LrfAf4VUOHnHd&N{-2M;&oy!?=s~!%=bp}o@eEWDuPE^M# z9E;BQ!Jv4E7?_WRU_Bjtoeecl9PfKi?UL2Hd-e}Cvwt_gp6T<@BJ#D4!3``{!>S-h zQ(O4jm!XHJ?BgstJ1GVOr}BClYRE4C9PRV;;wIH=zVi_voLaNkFvZRp_BkCxTv!S< z!%1iiIA@b^8B>9yTbf9V{s}(=(a2UqU}0mTi*_^(X#MZxLFSU(WZ1r4U2s0`zOs+4$WiCoo_+)3N^oaKcvLIP;-`9Q`d1EUSud5IZ z@Srz;wV_A=YGsu5R_P@waQr4~f~S5>HTLoQaKg7E|ko3;Q7Nzofz z$yJ2(3LVxo4S&m(8vZW9qeHK8p*}kRul_iG2Xw#|R@o2p5c-2cE_E4NNPvY!&?oni zexc?EqO<{hH0YWitvNBUxIW>dmj6*Mz=cL6A*4Tf9Q!qIrOiB(!G;T;`yGV^^<{ty zf#%ItYW}JMJsnu$uUkkDTeLYV#BO|7NnWUkE80fV^NwaL@!SqXu17G|%u(u#K{Yp! zJ%~u{f+pA5Ms)!Ig}S?5hBa$}phPX2M|vGfTYMTdj5rju5Vg1LseH)d|pa44BR{t7Pe7aBjJCsAvMj!2%S<1L3I#XR?rSbWo3F@Ofrf zHtLjM*ttv$x$Y%Qu!Dbk0kgOS#cl|;9$|MHWDC}}`zI(cNoSueAmz&&N9|rz?ZM}D zo!7=4??{4Z+n!+e0)8?%dbau>N==$q#V#GxDHhIAtY`a*K%BTIlXwotJiu%ou$E%v zi~tib;TgtP8|5#rbRSAuMD9?5VF~p2U}t3TeQi4YCevo(Tx<5@}gLkttK z&XWlxc)fS1N2x|F?Bs`gnz;RD{NXQY*TXecz(phMG{wg#CA5xo;`vX^Fj(0&XAK>3 zV{XwP%DM;Iv1+uc9$Yers(yi*K!eTr4%R|AkN}PrLE3=CX|1T+GdX#6=PFUg2Qp6J zp@89uLV5i_q&+elA2Tk1=?Om1;UX(|p7(R~Q` z?zw}ZiD=Jp1@B4)zj3$sO{L9#$|n@fPi@2M&(m*V;1S!(t+41?@9Vcauh-9)A#7NQ zifxwPSksZP>xhy^M2U7DbRb#c!7{A819rV1gF?qwa-mIBSn)R~pO;}fl`)D8EQ9(r zeDSRfQQ0k&*bnspON1U-m+^voNleqLzILbyWi@lUYRmGmm)z2Op2z;>D0ewZ-Q&a8 zF^uhH_&q4i5drifN?!4$iK0|TS0u_(C9d{dGc+bFCXp8FY`_{P^fWZhQF zJpX>3ni3dy6qB$W>ZsTqb_wQrYCiq_IrB#Z2G;|eO21?s9Tfl?iEtn7=vzpU)<8#T57LRsR6&W3oTNk9Y@*{k6z_L0XCIacPd|mskC zQl8YO9kym@hm1h-Iu9J)8-Q8WSpP}{eN;rRNsLaPszw+VrJdJCq}KxrFg}QNF+$*A z^1q>7S`vg5gdudGp`9si-9WA0rEV7C?HmvX0wbEXNQ-9Ym}I2iTK+(a)}Jj}ap*Ox z!Z49vRDDvtn}sn-99eBwl*rT9i3Q7y-$KUJL2UJTp$;Z|hs$P=a;m8v$RL>qnq%vd z&H@uVE|`qgUipxWPtH%jR|hwK{JzLYx>++bNvF~mXmkf*(9pAM<8=7mRYaj-*RX+g ztnSCkV2oUf=LTYUO)PNcq~sS(r=je#)THpuT;K&=us3kOeG;Ty2-L&^E~67V>rkYu z$629zg%EA8y}MPY;OA^Y$}%JfQ#CpO`l#6==Axs@H5vnHa{c!qjXRv{QWai{{qRf~$xx7F zUPiyAYHW=$rnVn*l?Idf2z@0U2tdJv7;nv#;`1ihwW(R9#RIA}U=j~9ggGj6v2s0# zvH2Qf|F1Zk8i!1Jq^;^zLxa8xk^V}M{%6^TwJgnA2KW&rk4!$QyX~cus(yR=rf4IY z*#|4Z06C3A2YH#-jD2n1s-VIMqKArY<0kl$NbC!m< za?sgw-k8A)DY6VY|ASWkh9n^8G|ik6tl7^1^~%=*Yh?=xRc+*zbh1>8)WL85KzK=m z#&hPzo^!96C@5?K1i1iV5+KsnpmGcttYKKMshxlU2k}5p&A``mKzNUE8{V@djJ9A6 zr8*9hzJ0X{19&lN(>L|zk{r&xD#{~od(b|JMilsU~i1niSEdYa`3xIsl>tu zQt`57FnQFGX(vzFx*&L0p~oSfR5u;I-TW~B%k=W;j$axxMw*W-o+^If&qQ8Tj;bt^ z36PvRr--{{sUFd8Rl8}$hSn2ts71`HcY~YB7$?;MC6@ym-b4}?JjC08hbFxAZa;d0 zW}`496w0$6Du!4cd6fy9;Ymf`n0G6M?bB~wARGfI6J1VPw5fT#K+MWeWC!RHy~{8@ z6;?tA@81r1Lz1i{R=TRf>`((wJV$`1olLY0E8d{==mnAovwVs)b61VNqcmOj9KVaD zyP7<{5??#G*C;j6yFaY%jA7Xsc!qsf?@89yElM|%1na#wND>##sYPpFK6w8RR2N)q za(vaO?P5N{``WCK9IZH+t`3gbS)7iKc#M)U<~v+_1xcqttwqFyr=ku+1~-`}y6i3{ zVIXYD6Q4~q6Q-8eLLF_L44nXPuBK{94K3+q6x0LB$*(EdHpUB*I;mo}6`M7ylg>AV zl9AnklHV`APhq1R4Nr?Iw36#N4*?e-5H+0R!UyBS@X#U)u9NvseGpjU?w`-0~(?cA6?i z)B2H@XmvSkU-o5(croqABasbnjSU~$4fw(aQbB5g2+xd1j;-MHm0XC-f(dmX_mfIYlDBk^ v&=+@&p7_)!bWV9_&7i6OSe zBT|>ns^M**)(%9}N-PkizwSu=Jq7b506uV~jip z&A(%dl4127&>O|j3p;?^RDdT2I_z=e)$FXu^!Tj69SB#upPD6B@i$T5#> z?FsB`nm`r!9*%41uA3N@b^f?uJevrWI)wG_6|9a*)m({h1+*p!@)ZxoE>5-BXirUA z#O{l&2tp%Wt1ZroO*3py!wWP$w|Qp8sZqFtvL`H0lq5NhcRGs!lZtyHo^{7d0XZoU zw^DPZ?jRMbF1Tt-Z2RlP`ZbvHL0WjzxJl0A3g_sc*L@YEg&3J=nA`O>Gb-WE0c=Jmy`iRQa?F;hr)W=qphOcOM7NZNK^5+p1R z7Dmb%-KRv>B);c6sGeVI0Vzk<4R|U=+tiE>MW@tgQLw3VNC%mu5_^hfIod=Clkss! zK2=L`r7CJ>ob719)<+H-JOao##ZO>OYg493rmp5M!@FJ0o=Q3>#T@>^Dq$W@)Rd2Y z<}*8K{&cO_l_(x>s-m2nI8vOk)gV)np~g1za@20@@p3jAnZtNkiUNy0$=l>oPY6u2 z#NA>AhxWGq8Sdj@<5>E_^BDhYk;h@tjp{^Z2eZ`8nsKYxlQ3Q~Z}058C*y)z2bB7b zR%nz2S?WZ|c(s3P2#lWN3qjR1hB^oT$5<;v}| zrGBn)^Vi;O=@)ps9?O%Z5r*J7xVi%Eg))d<>s4x5jQQA1(an52PHTsHTW|nBpJ)+1 z4wPTY(AO?I0}F@p%s6Xp#Is_PHw)EvKj7Ntv!jrQM07gLtY;AFa>&cX5n~8&x(-SL ztuzz{4^M?i%8t?-B#dXM_5GIZY2x{}CZm{-%v5ZmTW3^O1??3&`V-ogQ%UdjyPo6@ zKiHb54ZMFxUBV+~$_W$fW}Ca&hTrI|x~-hu)u@O2-^I?y7Ph{!c5Hp{!#cNJ`~YWy zZQgnhaVgPT9FI;Adg6t=COEBaU3P{$zW&Gp8tk|c33bX!0$cxzM>3nv9{cMc;j zwrME@r457Z;_#K~Ncj&fS=Mumf~1}yd-4qOO8TCL0dkzuNAoHg#5MfM!BYl$k=AFI z!ForcnI}z<#Ygu@2EJh~5$Yw?KD{=kAsPxfNh7tpJ`6DpUD1mcUbp57Z{ytgKiLb??138%@xi;s{EY>mQUCb3;U5FVMZVy?j=bj zHPkDN(95-FqV%ngOdR$xlO6QIa$J^Ipd!wL5^Y>bN}A27YyAz{EJ#bNCJrUN0-3lF z2L8FW9vw@!wJ(@eDL2N&PH$6i&&1Kv6{1qr3eL(-nNP0d|4q!b97b_lZrKUW2-iMY zwo@io1t}30Iyr#^&xPu?5xG$dfb$O~-GdP4$ zZ{>)Y>wwAr!N?~gSV~IR?0iTa@)jZkAp}H^?u1B%Dr5-bNDuUeML`)lE?!k0ceE^r zwWK{y*u{AjwtI{<{!X88-Iwajru2s(Q)pFzv<|U%D!^#MfTMCfcO2=WpaXs5e_6{rUM1lWduPdZeDh>p+X%YTB>Yu zH%pflm~TLVw6Rm>Eg^0Yv!%TPbLxv#_qIB@#qrgezFTSX9CtJJ#9_DAqMl!5TmtsG zS6-+LESHS4-WSr59ia+CKS0Klg_63<*xZg)@@1>i7IVLHbOHUHu3-o>n6~O)*Y90- zG(;jgZAk5Fz+>w+0_A^g8W3Uj>mY0lo`4pYt(ijL73?{#DXT#hmYS`?3ANDFQ0f1Y zY)~<@45m2~T|q-XOjsAh*0!Dm3gJ;3FtRW>0$9(0PR`YvAIipQ7b0>3176k?`vJ9l zc{!UWwT@o*71i>4_XPV{2i;_stZ~qI$kXP6ntXV^VYTV|6HJ>Y%~tu*Qpj;(a8Oy0 zr)BWOaWi4QrRUCMgeJARA{~|j3{$H^#t6i5#D0aN*&&D&I!RUu>mZBqk%|^^mF?o~ zgG__@HKb{0FHW(t{$nZiHfN6~bzSA$(5%$6Q>}KoUC_TUK%M#U+81seGJLJ9A&(QL(z?)1h9|g}LH~^ytr_R4rfDcW!XyxSLXO2Rmr?G%{Zw}0 z_Zti2JAHb%&t`efWPifKol9bK&tu25OrpgV=H4dEH6BfEy)sb%&>1BJkaG5qutKEM zqU`jF3iE`uE0rRin5N4B)KL!i=va?Wee1oPiSqFVf4w__f@-(o7L6P4iU|oU8?Typ91nu3y-yWmxUO5TRZV*~!xgT!#jhL3EUGwGD@R1|P_v235pKp!?>be*> zzMzVMn;UTt1~yz1M~lm!P8Z)Ke>LIxcQNx8ffcq;R*1;MzHV~zzdFXRz5VjnE&9!P znb#qz8yFVj*9`<$LEM-pZb8qmrvlZY4jNE6!^Rn=cutU*Qs}$u`yZEcD`?q$mbVw9 za|B+9hg|5xj+_d5F1KIwFDsL*h3qaSH26KFiF+k`y!*@fY}28}k3>Cw8i#@>9okV{ zrd0Afw1ZpwH)9d}Iz$OgG)h-{%!9l6^GGdK+<=my7jVbALbw|)7B*wPr*l2Pn_K$> z+G(tpSkHYkE@4drR^Btfw;Yi8g;Z(D45k3^QH7#OU?DDw;`hE)N99Xo%~S!o$weF) z17#9&#-=dJqdZ_IQ*}!`m75v-gB`QgR?|HU8U+2d+t=uAeb({rL2SDf<6fP!q4KX` zHNNpA5`!ohcw2tiW24{7|*sc23m4S0YGE` z5G#yD?BoppY%Lip$QNW^n#nFi9FW_;pMSGZ^;h@xM^W7Cbk6l1lls>={|F>5m=s*K ztSm*gw(aESOl8ZvTuJNFra9jv1^~)Bq^b{dpBCo6deu~k7`P%j*o5e=L3F>#X|2Q; zST0|&6b$Nxiz`Is=PIM0YTv7&_kKaYq+JCiX4q1OMt1dqF+(zmMZRO=cm;5x zM|o8L(5Z^dBR%B&dxcRDa%wMV}+QvYx10~=a0;49q_<~k>A75)j1b;TZ2)xiW&)n(RcGBBE?;V)pv?r59|1l#_w z)24!lx|u?NFuDU6tiX;{EJYo^sV^L><;l49A3Cm>?LEPAm=YJZ#t%@$nAl9;FV7GC zY^Pv>ryyPK+0X{Bs=6feH*|#26Al+CB~OKPRdRw&V5i&xEc}2DMVZxRH@5cY zR4mU{d@1M~XOcW7o(knTJj+Z0)`}LTREY0WVP-^etJ$%=UJgQ%b7jD!qtc|)(z%+N zUm3u8#NFo>TC%3B00+min-%VmHI?V7&~Jk5dI3|T8y3X&_VYgp*9cVXWYUGj5_AUWN z3KA7Ks+c1o%Y|T!4y*XPYWhOr5yl?d^@r5ZAC7q9Y~=34N+)RbSav?5X)#ckEzek% zU|rejYN#O11$)!qDBP!U>XvnSX3T>>9C?+j+8dDZ=Ig9o0HDr9(O2RMi4Cc#b4)PL zO&@9v>TQ2}7tp}R@6+8kIklDDO%Bg(mf_S)^ zvp3^X`m^Gz2=)8}*qeTff@QsHYx6xKlH7%=G$&5e7IZg9T$v(Hr23y5xl%0PTze() z1t0Q#p`a62{WLFQ@Kvt6GQgc`tC@J?H={_nCE>R$X6LaGO$2SVk&(KVzeEG1u{UC= zpww(Oa>r7+&r+RKnD^FA?+Ylhf^~FDOjUtlw!|>p$~a2wHB?|YL#!Y+fu$z`kE*y| zHFy765@^Z~j3Gc?CO`LDeD(Ds*|PH*&mhP#u)h6Ur`@Q#KaJ(8km=XKlvT|P3Xt_H ze0)CK$UETP3vb!m_uBoVSqW33|Iax`v3y$W#jmpyDB#<`eVk*qn6@P|Sgk@kitREw z>N+JqxQ^2mvfoqUat0cDg8*x*(cRa83ng#*F0nLj8UL5Q$P@-~u9qL*VZSvMe_}2% z79e`^!;#jO{)(|$;t#+v1Fcm=QxQ)k#iU@P&%b3$H(FEwS~lFs_G%kLqS5nKbSSKq z#(A6XHI3DkUd%mFYZ?wKa9w~j|9Iec&wp`1Lg_w?6ybP76qX(YE9np?A;hrU%mWId zo~{{M2&Q#~m@M(sjo^%LFAAELb2*SFJ4Dy{G5CqF*5*WbCxfFN_v8^?YBwNfDI+IU z*E^^cw*7BKYO4z8zQjcoCs3oCLKvKJfwrN>Q}&ZM0`4*HRCZTrYu}i5HB+)}40ger ztLY)8%oUf5JZPTg538gEiRDcP%(n4hjZ-z9N1+FMuMF7dn;`%mc*~zwR%+YG@Cwiw zVyNaQD1;Wb1(3-Nvz@LZtMH%Me-yhwL_K>QU`KxDgb_teF^qOHoGXAxyDa1HpoOad z)B+=rc%!`go%+LfM$?5Zb7Afu1FwC1R|Q}59uKsU`}|kIs}uq{D7(DQH$20m@!$oG zw4Q{tw!`n3YmVdXpS9HOrGTLeu1-Q>?VbGh&|n$w?7c3z?PoXjlhzz7r`#dx{(j=B zT+q>8z{Eujb=^!F4?O71rlpA4j797ZzsS(IbjWe0;gm7kL5PAY)XR;pDVtsi`B~yJ zl_CFs0S6HH@5tpNaDpem1E_5TMbVe}*4r4hlSuf4fsBZ^cqP^;rn5kr-vicI!i)6s z2$7(U^ox%5XtSFU37OCuv{0HwI1lEyikRs@CL`9Lph;OWo@nx%V?(O!7;>wzt84Pr zD!8eLwh6c7CcWl}(J&vf@g0fo2)ASn!+r`}0tA_G1H`z5|6mL?Xo4&#ggW?vL6Abj z;2yj%8edBcv|XkfY+OM4RXpM;8~s0)rsii{4OCi{pj7mLDJ3f6Jes=%EYq>tfA zFT&!TU5%!MREm`tKAhmItH7$Eu!)pd{wln{a#(A&mQo6tEUT2bg2su1IhgB?Vl;>F z3zI-q)?uo({)y*nik;8|O}K++zk^SEpEV2-fK?zNL55%u2VRhYR1k+>5C&-2xYUYb z){0`yroAZG;=+kd5P9K$8g4*o}>CX6SC0{z!T&)PvsV_bzyEBd2Z;A@98c&Tk!ag2YHXD?jYLkM>*Oe3I$fM z1Sr6RZvf^DFJ>v&gH9l#5}!p{!53DnlnLb`HVOq4xCCe%1Rs(lJ8^|=A-rASf){WC zL&yhNID#5@0#*Q(O}H0F(AyvW1C|Guf(f$%%QA;y5QVi{FHQ>5Bk%zqID!{Q@L}i# zS3pM$zmtQA+?y3Lp^|c)SPJ0PD(4W2HD%p5tD2!I44>L5SuYOq1BzrH^reW4Um6P5 zXlv56oS{O(*L4GELMe;Pi7I#{yr7-IQX0Hy2ref+Gq@@B2;M35-U&K}Z9o00cm|f_>5gHMpKS0D(fd1Wbj5A5a60;tw-GgE#m~jev}F((6PQw~7cF zX4(nH3?6!Zp706m>}@hwN*anWn=`Wsm}m{7f(Tk2ik5(b^ePUxNUuXEUHONNuXvsJ z_X(?!3!pJ7lmUn}bm0C3vJ=UUoi%3Qm@#9=OqDif*4Tlwq{@UC+bqeOpUlP2w2G-lq!dExPAQlCDR{P3wXYgXD=vFI_|F=9s_ zX40_z$~742SF>iX%|bVe#22mCa{UUYRGU(xM2Tkp>iP3$#n{57LudN5>2#%0vu@p5 zbvbRoKzaJ~Y11cAwxp3pty;C~;I7k!la|X9a@)$6GjHzvxozahmv2Ju3K%eI!nSko zE({m0p0%5kg8pv)JbLH2Z{yyCDO4*cP|TV7)JfDMJx*F2iSkHPC!dTmN+|^nh{=GX zq_^BHn3U&5W^8eLq2`S}ON#!St1i~IE z2W=7vm^k22g$H(2K?g)ts98lr8LhB{8G#&P1`ZQNl+qG(tZ9cEfwVyfMRo)NM?x9V zaY#ikDa0lmbesgI8)z=!#wJyq6o?xxOiITRYiQ{PMk~1Bf*o{3a!5gem>S8Tk(^nD z3ve6~{>h(qEaE~WTH4V@qiVWfMkGrdRE0%tyyTFok!B%88aR=JMjTZLB8VD%6!L=# zs|+$nAu7y~hMHQK!3G;^Ff`LjFTn|CL~BBH5}PbFRE3~{P;_QP7BwnSqzK80rw4$p zV6Pc^PO4_7^qTprxf2~aYf6#00qLs2da%NrdD7v6oNXN9F|kW%NkFu5b!^GB!e0Lkrcx z&=M9`T`}cVQq@rN3olX4BiJ;^bfwi$pc#c&S7t?nRy6d)(uW9ji!j0nBosS*ZJUr{3KTcAV$Lv` z;Mj^DM;v*?4Xl{b2`QLhQp$n0B{;l;xkVUCEprHgej|gJUYjba+=7id=ZvUG6#3`l zPmxhr(aQF8$BEh?C_xJ9gefS22P?dw21z)A6JBtG{5j!)M>xUl)AO4~ab;N=h#nIX{ zFjKbBgrhL%h{oeCfevXDE*L5WO=b|fP|$P^bgTi6>w@!}*Z|{wsM8H^eEJ)o26c3> zgPk;LK^x*xH9FF1&VYmg46SMhc-;ZdPmWjBu{wto#;cMi5_khijDr}Nz=Ixsqz5KA z;esz{MF&NZAlyhO6rmvACPraaP)rDYC}>16LeYpuTvZhw@`gP|WQ-`hAPUCtM=D;> zB1v?xJyxaBC{8g7=tYwv}z-o z*knVR?FuD29Mepez%e*+QzZ}aRtVVy4(#XwGkVhwI9S0I`E-cvf@!)( z(?6vjT;YGr=PF3HBkr#3!Ux-~>)&a|L}Mohu}oN-VBAOevmi5ROPF)o-)Y^h12 zF+@$1_^4K*v9-VR{gBwLX zoo$f1y3w_+siz?hX|N&H+>v!bxTB7Mdf_{-0uMZ{5Nox=eVgTwf)j7G!Z^m!3Mp8j z22Oaw6X=?RBsjqeddNg40*i@Hl-93Q73?QmQP@EUp%|PPpew3_x>`s>9g^h{JNS2l zCrIHDZvE>Ckw>Fbc%rYNFa^jnAqmvx&qV%}eS#hyp*>R^Ttc{$&ItM4+YOnuJhxEZ zl|CUc^e*8|#eLUtH3>s?Dr6!yoQO$gJV!#6s!?FdE<{pgCWOsPow|f$LiUKTjJQEi zYP6x5vS<-Fjp~%f=|IRV zpaR2?5JMvep@k1?;RiBMB#nr}6)+*^hIDtv^ZpuIN-SAJbtW+p>Aq+*42RI7{L?cP(E~-$ zBNvG?T-zYcPtB~qpVFWQrcJ_2Nk%l_Mfwc}J}HK%4GyMtfj7KO`e8%j=oDyF17YOC zHK4<+MT1!sj;c}MSL_o3k++aY%#d zpw4oDkhtm2RVjz^jDogp6}JHo43@_aQq{{fA#Q;JCs2YEuvIHa!V4Th4EO-ORZtNW zL6TU(BLq-&_?5pA&y|ougrGt$=l~zo0w;jNCPac+c>-bmf;!m4I~YR{M1d3R&n`%i z6lB81*@ASOkW~$cCxikd{;a|(m;xDsoM}BmD^%elJc9Iyf+*;mgOI|t#mHYlNeFGo zZQKGWegY}lT$j|CO<0QaeO?SP(LnskK-f@BoJ5^n-54E>ujt|@JOnqLQao85nBauy zS&9&$3aY4+N(2H9=#m+@mnK!wLnH)5Xp_-gL_r`5%G66WEyNd{*BDKToPbJ2pb5Mj z7fraqoE%rZgH@(V02pyh5M2rc<#NeF{ zAq%32-k*$-tAJVl$^c4rB^M2Kou6C*N3a2#)j=ab7$8)Ur8E&h&QeS$S3F4sK(fjF z@j^1xgF2W6W++AC_|w`PMJ}*{7jVHlsDn^U1KPMB1rpj)423j=)FhxqOHl@>70xdt zh1O&SO_@cgT|*`4O)PMf2TDWcxL;BXhE|}%7wEvJr33zrpkn5qVuS;*so)Bd262o= z3;see)Itop0uMro>eL`mIok?G)l@Zy4=!ORc1SO1l`tR!G900IV8<;e;S$=8b-02p z+@>oSm2|un6pTYMP)`(Kp%3^#5zJc`YT*mufhp8nB9ftv)Q%DgTqxuMD$tsQaEKj{ zf|O7OWR3m^7o^ty$ifgrLB%QP@{4sD4?)GPnOdhK$sE~7eV~kzDz{Qq{)dDUD35c HKmY(cCWiQ$ literal 0 HcmV?d00001 diff --git a/gui/configs/sample1.imn b/gui/configs/sample1.imn new file mode 100644 index 00000000..c394bbe6 --- /dev/null +++ b/gui/configs/sample1.imn @@ -0,0 +1,510 @@ +node n1 { + type router + model router + network-config { + hostname n1 + ! + interface eth1 + ip address 10.0.5.1/24 + ipv6 address a:5::1/64 + ! + interface eth0 + ip address 10.0.3.2/24 + ipv6 address a:3::2/64 + ! + } + canvas c1 + iconcoords {384.0 456.0} + labelcoords {384.0 484.0} + interface-peer {eth0 n2} + interface-peer {eth1 n15} +} + +node n2 { + type router + model router + network-config { + hostname n2 + ! + interface eth2 + ip address 10.0.4.1/24 + ipv6 address a:4::1/64 + ! + interface eth1 + ip address 10.0.3.1/24 + ipv6 address a:3::1/64 + ! + interface eth0 + ip address 10.0.2.2/24 + ipv6 address a:2::2/64 + ! + } + canvas c1 + iconcoords {264.0 432.0} + labelcoords {264.0 460.0} + interface-peer {eth0 n3} + interface-peer {eth1 n1} + interface-peer {eth2 n15} +} + +node n3 { + type router + model router + network-config { + hostname n3 + ! + interface eth1 + ip address 10.0.2.1/24 + ipv6 address a:2::1/64 + ! + interface eth0 + ip address 10.0.1.1/24 + ipv6 address a:1::1/64 + ! + } + canvas c1 + iconcoords {120.0 360.0} + labelcoords {120.0 388.0} + interface-peer {eth0 n4} + interface-peer {eth1 n2} +} + +node n4 { + type lanswitch + network-config { + hostname n4 + ! + } + canvas c1 + iconcoords {192.0 252.0} + labelcoords {192.0 280.0} + interface-peer {e0 n3} + interface-peer {e1 n11} + interface-peer {e2 n12} + interface-peer {e3 n13} + interface-peer {e4 n14} +} + +node n5 { + type router + model mdr + network-config { + hostname n5 + ! + interface eth0 + ipv6 address a:0::3/128 + ip address 10.0.0.5/32 + ! + interface eth1 + ip address 10.0.6.2/24 + ipv6 address a:6::2/64 + ! + } + canvas c1 + iconcoords {540.0 348.0} + labelcoords {540.0 376.0} + interface-peer {eth0 n10} + interface-peer {eth1 n15} + services {zebra OSPFv2 OSPFv3MDR vtysh IPForward} + custom-config { + custom-config-id service:zebra + custom-command zebra + config { + files=('/usr/local/etc/quagga/Quagga.conf', 'quaggaboot.sh', ) + } + } + custom-config { + custom-config-id service:zebra:/usr/local/etc/quagga/Quagga.conf + custom-command /usr/local/etc/quagga/Quagga.conf + config { + interface eth0 + ip address 10.0.0.5/32 + ipv6 address a::3/128 + ipv6 ospf6 instance-id 65 + ipv6 ospf6 hello-interval 2 + ipv6 ospf6 dead-interval 6 + ipv6 ospf6 retransmit-interval 5 + ipv6 ospf6 network manet-designated-router + ipv6 ospf6 diffhellos + ipv6 ospf6 adjacencyconnectivity uniconnected + ipv6 ospf6 lsafullness mincostlsa + ! + interface eth1 + ip address 10.0.6.2/24 + !ip ospf hello-interval 2 + !ip ospf dead-interval 6 + !ip ospf retransmit-interval 5 + !ip ospf network point-to-point + ipv6 address a:6::2/64 + ! + router ospf + router-id 10.0.0.5 + network 10.0.0.5/32 area 0 + network 10.0.6.0/24 area 0 + redistribute connected metric-type 1 + redistribute ospf6 metric-type 1 + ! + router ospf6 + router-id 10.0.0.5 + interface eth0 area 0.0.0.0 + redistribute connected + redistribute ospf + ! + + + } + } +} + +node n6 { + type router + model mdr + network-config { + hostname n6 + ! + interface eth0 + ip address 10.0.0.6/32 + ipv6 address a:0::6/128 + ! + } + canvas c1 + iconcoords {780.0 228.0} + labelcoords {780.0 252.0} + interface-peer {eth0 n10} +} + +node n7 { + type router + model mdr + network-config { + hostname n7 + ! + interface eth0 + ip address 10.0.0.7/32 + ipv6 address a:0::7/128 + ! + } + canvas c1 + iconcoords {816.0 348.0} + labelcoords {816.0 372.0} + interface-peer {eth0 n10} +} + +node n8 { + type router + model mdr + network-config { + hostname n8 + ! + interface eth0 + ip address 10.0.0.8/32 + ipv6 address a:0::8/128 + ! + } + canvas c1 + iconcoords {672.0 420.0} + labelcoords {672.0 444.0} + interface-peer {eth0 n10} +} + +node n9 { + type router + model mdr + network-config { + hostname n9 + ! + interface eth0 + ip address 10.0.0.9/32 + ipv6 address a:0::9/128 + ! + } + canvas c1 + iconcoords {672.0 96.0} + labelcoords {672.0 120.0} + interface-peer {eth0 n10} +} + +node n10 { + type wlan + network-config { + hostname wlan10 + ! + interface wireless + ip address 10.0.0.0/32 + ipv6 address a:0::0/128 + ! + mobmodel + coreapi + basic_range + ns2script + ! + } + canvas c1 + iconcoords {852.0 564.0} + labelcoords {852.0 596.0} + interface-peer {e0 n8} + interface-peer {e1 n7} + interface-peer {e2 n5} + interface-peer {e3 n6} + interface-peer {e4 n9} + custom-config { + custom-config-id basic_range + custom-command {3 3 9 9 9} + config { + range=240 + bandwidth=54000000 + jitter=0 + delay=50000 + error=0 + } + } + custom-config { + custom-config-id ns2script + custom-command {10 3 11 10 10} + config { + file=sample1.scen + refresh_ms=50 + loop=1 + autostart=5 + map= + } + } +} + +node n11 { + type router + model PC + network-config { + hostname n11 + ! + interface eth0 + ip address 10.0.1.20/24 + ipv6 address a:1::20/64 + ! + } + canvas c1 + iconcoords {192.0 156.0} + labelcoords {192.0 188.0} + interface-peer {eth0 n4} +} + +node n12 { + type router + model PC + network-config { + hostname n12 + ! + interface eth0 + ip address 10.0.1.21/24 + ipv6 address a:1::21/64 + ! + } + canvas c1 + iconcoords {264.0 156.0} + labelcoords {264.0 188.0} + interface-peer {eth0 n4} +} + +node n13 { + type router + model PC + network-config { + hostname n13 + ! + interface eth0 + ip address 10.0.1.22/24 + ipv6 address a:1::22/64 + ! + } + canvas c1 + iconcoords {336.0 156.0} + labelcoords {336.0 188.0} + interface-peer {eth0 n4} +} + +node n14 { + type router + model host + network-config { + hostname n14 + ! + interface eth0 + ip address 10.0.1.10/24 + ipv6 address a:1::10/64 + ! + } + canvas c1 + iconcoords {348.0 228.0} + labelcoords {348.0 260.0} + interface-peer {eth0 n4} +} + +node n15 { + type router + model router + network-config { + hostname n15 + ! + interface eth2 + ip address 10.0.6.1/24 + ipv6 address a:6::1/64 + ! + interface eth1 + ip address 10.0.5.2/24 + ipv6 address a:5::2/64 + ! + interface eth0 + ip address 10.0.4.2/24 + ipv6 address a:4::2/64 + ! + } + canvas c1 + iconcoords {384.0 312.0} + labelcoords {384.0 340.0} + interface-peer {eth0 n2} + interface-peer {eth1 n1} + interface-peer {eth2 n5} +} + +link l1 { + nodes {n10 n8} + bandwidth 11000000 + delay 25000 +} + +link l0 { + nodes {n10 n7} + bandwidth 11000000 + delay 25000 +} + +link l2 { + nodes {n10 n5} + bandwidth 11000000 + delay 25000 +} + +link l3 { + nodes {n10 n6} + bandwidth 11000000 + delay 25000 +} + +link l4 { + nodes {n10 n9} + bandwidth 11000000 + delay 25000 +} + +link l5 { + nodes {n3 n4} + bandwidth 100000000 +} + +link l6 { + delay 25000 + nodes {n3 n2} + bandwidth 100000000 +} + +link l7 { + nodes {n2 n1} + bandwidth 100000000 +} + +link l8 { + delay 50000 + nodes {n2 n15} + bandwidth 100000000 +} + +link l9 { + nodes {n1 n15} + bandwidth 100000000 +} + +link l10 { + nodes {n15 n5} + bandwidth 100000000 +} + +link l11 { + nodes {n4 n11} + bandwidth 100000000 +} + +link l12 { + nodes {n4 n12} + bandwidth 100000000 +} + +link l13 { + nodes {n4 n13} + bandwidth 100000000 +} + +link l14 { + nodes {n4 n14} + bandwidth 100000000 +} + +annotation a0 { + iconcoords {612.0 492.0} + type text + label {wireless network} + labelcolor black + fontfamily {Arial} + fontsize {12} + effects {bold} + canvas c1 +} + +annotation a1 { + iconcoords {142.0 112.0 393.0 291.0} + type rectangle + label {} + labelcolor black + fontfamily {Arial} + fontsize {12} + color #ebebde + width 1 + border #ffffff + rad 25 + canvas c1 +} + +annotation a2 { + iconcoords {492.0 384.0} + type text + label {gateway} + labelcolor black + fontfamily {Arial} + fontsize {12} + effects {bold} + canvas c1 +} + +canvas c1 { + name {Canvas1} + wallpaper-style {upperleft} + wallpaper {sample1-bg.gif} +} + +option global { + interface_names no + ip_addresses yes + ipv6_addresses no + node_labels yes + link_labels yes + ipsec_configs yes + exec_errors no + show_api no + background_images no + annotations yes + grid no + traffic_start 0 +} + +option session { +} + diff --git a/gui/configs/sample1.scen b/gui/configs/sample1.scen new file mode 100644 index 00000000..c2fc5a44 --- /dev/null +++ b/gui/configs/sample1.scen @@ -0,0 +1,28 @@ +# +# nodes: 4, max time: 27.000000, max x: 600.00, max y: 600.00 +# nominal range: 300.00 link bw: 54000000.00 +# pause: 30.00, min speed 1.50 max speed: 4.50 + +$node_(6) set X_ 780.0 +$node_(6) set Y_ 228.0 +$node_(6) set Z_ 0.00 +$node_(7) set X_ 816.0 +$node_(7) set Y_ 348.0 +$node_(7) set Z_ 0.00 +$node_(8) set X_ 672.0 +$node_(8) set Y_ 420.0 +$node_(8) set Z_ 0.00 +$node_(9) set X_ 672.0 +$node_(9) set Y_ 96.0 +$node_(9) set Z_ 0.00 +$ns_ at 1.00 "$node_(6) setdest 500.0 178.0 25.0" +$ns_ at 2.00 "$node_(7) setdest 400.0 288.0 15.0" +$ns_ at 1.00 "$node_(8) setdest 590.0 520.0 17.0" +$ns_ at 3.00 "$node_(9) setdest 720.0 300.0 20.0" +$ns_ at 8.00 "$node_(7) setdest 600.0 350.0 10.0" +$ns_ at 9.00 "$node_(8) setdest 730.0 300.0 15.0" +$ns_ at 10.00 "$node_(6) setdest 600.0 108.0 10.0" +$ns_ at 16.00 "$node_(9) setdest 672.0 96.0 20.0" +$ns_ at 17.00 "$node_(7) setdest 816.0 348.0 20.0" +$ns_ at 18.00 "$node_(6) setdest 780.0 228.0 25.0" +$ns_ at 22.00 "$node_(8) setdest 672.0 420.0 20.0" diff --git a/gui/configs/sample10-kitchen-sink.imn b/gui/configs/sample10-kitchen-sink.imn new file mode 100644 index 00000000..a9e21a4a --- /dev/null +++ b/gui/configs/sample10-kitchen-sink.imn @@ -0,0 +1,848 @@ +comments { +Kitchen Sink +============ + +Contains every type of node available in CORE, except for the Xen and physical (prouter) +machine types, and nodes distributed on other emulation servers. + +To get the RJ45 node to work, a test0 interface should first be created like this: + sudo ip link add name test0 type veth peer name test0.1 + +wlan15 uses the basic range model, while wlan24 uses EMANE 802.11 + +gateway nodes n11 and n20 are customized to redistribute routing between OSPFv2 and +OSPFv3 MDR (the MANET networks) +} + +node n1 { + type router + model router + network-config { + hostname n1 + ! + interface eth2 + ip address 10.0.11.2/24 + ipv6 address 2001:11::2/64 + ! + interface eth1 + ip address 10.0.3.1/24 + ipv6 address 2001:3::1/64 + ! + interface eth0 + ip address 10.0.2.1/24 + ipv6 address 2001:2::1/64 + ! + } + canvas c1 + iconcoords {288.0 264.0} + labelcoords {288.0 292.0} + interface-peer {eth0 n3} + interface-peer {eth1 n2} + interface-peer {eth2 n20} + custom-image $CORE_DATA_DIR/icons/normal/router_red.gif +} + +node n2 { + type router + model router + network-config { + hostname n2 + ! + interface eth2 + ip address 10.0.5.2/24 + ipv6 address 2001:5::2/64 + ! + interface eth1 + ip address 10.0.3.2/24 + ipv6 address 2001:3::2/64 + ! + interface eth0 + ip address 10.0.0.1/24 + ipv6 address 2001:0::1/64 + ! + } + canvas c1 + iconcoords {576.0 264.0} + labelcoords {576.0 292.0} + interface-peer {eth0 n5} + interface-peer {eth1 n1} + interface-peer {eth2 n19} +} + +node n3 { + type router + model router + network-config { + hostname n3 + ! + interface eth3 + ip address 10.0.9.1/24 + ipv6 address 2001:9::1/64 + ! + interface eth2 + ip address 10.0.4.1/24 + ipv6 address 2001:4::1/64 + ! + interface eth1 + ip address 10.0.2.2/24 + ipv6 address 2001:2::2/64 + ! + interface eth0 + ip address 10.0.1.1/24 + ipv6 address 2001:1::1/64 + ! + } + canvas c1 + iconcoords {288.0 408.0} + labelcoords {288.0 436.0} + interface-peer {eth0 n4} + interface-peer {eth1 n1} + interface-peer {eth2 n19} + interface-peer {eth3 n11} + custom-image $CORE_DATA_DIR/icons/normal/router_red.gif +} + +node n4 { + type hub + network-config { + hostname n4 + ! + } + canvas c1 + iconcoords {216.0 528.0} + labelcoords {216.0 552.0} + interface-peer {e0 n3} + interface-peer {e1 n16} + interface-peer {e2 n17} + interface-peer {e3 n18} +} + +node n5 { + type lanswitch + network-config { + hostname n5 + ! + } + canvas c1 + iconcoords {672.0 264.0} + labelcoords {672.0 288.0} + interface-peer {e0 n2} + interface-peer {e1 n6} + interface-peer {e2 n7} + interface-peer {e3 n8} + interface-peer {e4 n25} +} + +node n6 { + type router + model host + network-config { + hostname n6 + ! + interface eth0 + ip address 10.0.0.10/24 + ipv6 address 2001:0::10/64 + ! + } + canvas c1 + iconcoords {792.0 216.0} + labelcoords {792.0 248.0} + interface-peer {eth0 n5} +} + +node n7 { + type router + model host + network-config { + hostname n7 + ! + interface eth0 + ip address 10.0.0.11/24 + ipv6 address 2001:0::11/64 + ! + } + canvas c1 + iconcoords {792.0 288.0} + labelcoords {792.0 320.0} + interface-peer {eth0 n5} +} + +node n8 { + type router + model host + network-config { + hostname n8 + ! + interface eth0 + ip address 10.0.0.12/24 + ipv6 address 2001:0::12/64 + ! + } + canvas c1 + iconcoords {792.0 360.0} + labelcoords {792.0 392.0} + interface-peer {eth0 n5} +} + +node n9 { + type rj45 + network-config { + hostname test0 + ! + } + canvas c1 + iconcoords {576.0 528.0} + labelcoords {576.0 556.0} + interface-peer {0 n19} +} + +node n10 { + type tunnel + network-config { + hostname 10.250.0.91 + ! + interface e0 + ip address 10.250.0.91/24 + ! + tunnel-type + UDP + ! + tunnel-tap + off + ! + tunnel-key + 1 + ! + } + canvas c1 + iconcoords {672.0 504.0} + labelcoords {672.0 536.0} + interface-peer {e0 n19} +} + +node n11 { + type router + model mdr + network-config { + hostname n11 + ! + interface eth1 + ip address 10.0.9.2/24 + ipv6 address 2001:9::2/64 + ! + interface eth0 + ip address 10.0.8.1/32 + ipv6 address 2001:8::1/128 + ! + } + canvas c1 + iconcoords {288.0 624.0} + labelcoords {288.0 656.0} + interface-peer {eth0 n15} + interface-peer {eth1 n3} + custom-config { + custom-config-id service:zebra + custom-command zebra + config { + files=('/usr/local/etc/quagga/Quagga.conf', 'quaggaboot.sh', '/usr/local/etc/quagga/vtysh.conf', ) + } + } + custom-config { + custom-config-id service:zebra:/usr/local/etc/quagga/Quagga.conf + custom-command /usr/local/etc/quagga/Quagga.conf + config { + interface eth0 + ip address 10.0.8.1/32 + ipv6 address 2001:8::1/128 + ipv6 ospf6 instance-id 65 + ipv6 ospf6 hello-interval 2 + ipv6 ospf6 dead-interval 6 + ipv6 ospf6 retransmit-interval 5 + ipv6 ospf6 network manet-designated-router + ipv6 ospf6 diffhellos + ipv6 ospf6 adjacencyconnectivity uniconnected + ipv6 ospf6 lsafullness mincostlsa + ! + interface eth1 + ip address 10.0.9.2/24 + ipv6 address 2001:9::2/64 + ! + router ospf + router-id 10.0.8.1 + network 10.0.8.1/32 area 0 + network 10.0.9.0/24 area 0 + redistribute connected metric-type 1 + redistribute ospf6 metric-type 1 + ! + router ospf6 + router-id 10.0.8.1 + interface eth0 area 0.0.0.0 + redistribute connected + redistribute ospf + ! + + } + } + services {zebra OSPFv2 OSPFv3MDR vtysh IPForward} +} + +node n12 { + type router + model mdr + network-config { + hostname n12 + ! + interface eth0 + ip address 10.0.8.2/32 + ipv6 address 2001:8::2/128 + ! + } + canvas c1 + iconcoords {504.0 792.0} + labelcoords {504.0 824.0} + interface-peer {eth0 n15} +} + +node n13 { + type router + model mdr + network-config { + hostname n13 + ! + interface eth0 + ip address 10.0.8.3/32 + ipv6 address 2001:8::3/128 + ! + } + canvas c1 + iconcoords {552.0 672.0} + labelcoords {552.0 704.0} + interface-peer {eth0 n15} +} + +node n14 { + type router + model mdr + network-config { + hostname n14 + ! + interface eth0 + ip address 10.0.8.4/32 + ipv6 address 2001:8::4/128 + ! + } + canvas c1 + iconcoords {720.0 792.0} + labelcoords {720.0 824.0} + interface-peer {eth0 n15} +} + +node n15 { + type wlan + network-config { + hostname wlan15 + ! + interface wireless + ip address 10.0.8.0/32 + ipv6 address 2001:8::0/128 + ! + mobmodel + coreapi + basic_range + ! + } + custom-config { + custom-config-id basic_range + custom-command {3 3 9 9 9} + config { + range=275 + bandwidth=54000000 + jitter=0 + delay=20000 + error=0 + } + } + canvas c1 + iconcoords {120.0 768.0} + labelcoords {120.0 800.0} + interface-peer {e0 n11} + interface-peer {e1 n12} + interface-peer {e2 n13} + interface-peer {e3 n14} +} + +node n16 { + type router + model PC + network-config { + hostname n16 + ! + interface eth0 + ip address 10.0.1.20/24 + ipv6 address 2001:1::20/64 + ! + } + canvas c1 + iconcoords {96.0 456.0} + labelcoords {96.0 488.0} + interface-peer {eth0 n4} +} + +node n17 { + type router + model PC + network-config { + hostname n17 + ! + interface eth0 + ip address 10.0.1.21/24 + ipv6 address 2001:1::21/64 + ! + } + canvas c1 + iconcoords {96.0 600.0} + labelcoords {96.0 632.0} + interface-peer {eth0 n4} +} + +node n18 { + type router + model PC + network-config { + hostname n18 + ! + interface eth0 + ip address 10.0.1.22/24 + ipv6 address 2001:1::22/64 + ! + } + canvas c1 + iconcoords {96.0 528.0} + labelcoords {96.0 560.0} + interface-peer {eth0 n4} +} + +node n19 { + type router + model router + network-config { + hostname n19 + ! + interface eth3 + ip address 10.0.7.1/24 + ipv6 address 2001:7::1/64 + ! + interface eth2 + ip address 10.0.6.1/24 + ipv6 address 2001:6::1/64 + ! + interface eth1 + ip address 10.0.5.1/24 + ipv6 address 2001:5::1/64 + ! + interface eth0 + ip address 10.0.4.2/24 + ipv6 address 2001:4::2/64 + ! + } + canvas c1 + iconcoords {576.0 408.0} + labelcoords {576.0 436.0} + interface-peer {eth0 n3} + interface-peer {eth1 n2} + interface-peer {eth2 n9} + interface-peer {eth3 n10} +} + +node n20 { + type router + model mdr + network-config { + hostname n20 + ! + interface eth1 + ip address 10.0.11.1/24 + ipv6 address 2001:11::1/64 + ! + interface eth0 + ip address 10.0.10.1/32 + ipv6 address 2001:10::1/128 + ! + } + canvas c1 + iconcoords {288.0 168.0} + labelcoords {288.0 200.0} + interface-peer {eth0 n24} + interface-peer {eth1 n1} + custom-config { + custom-config-id service:zebra + custom-command zebra + config { + files=('/usr/local/etc/quagga/Quagga.conf', 'quaggaboot.sh', '/usr/local/etc/quagga/vtysh.conf', ) + } + } + custom-config { + custom-config-id service:zebra:/usr/local/etc/quagga/Quagga.conf + custom-command /usr/local/etc/quagga/Quagga.conf + config { + interface eth0 + ip address 10.0.10.1/32 + ipv6 address 2001:10::1/128 + ipv6 ospf6 instance-id 65 + ipv6 ospf6 hello-interval 2 + ipv6 ospf6 dead-interval 6 + ipv6 ospf6 retransmit-interval 5 + ipv6 ospf6 network manet-designated-router + ipv6 ospf6 diffhellos + ipv6 ospf6 adjacencyconnectivity uniconnected + ipv6 ospf6 lsafullness mincostlsa + ! + interface eth1 + ip address 10.0.11.1/24 + ipv6 address 2001:11::1/64 + ! + router ospf + router-id 10.0.10.1 + network 10.0.10.1/32 area 0 + network 10.0.11.0/24 area 0 + redistribute connected metric-type 1 + redistribute ospf6 metric-type 1 + ! + router ospf6 + router-id 10.0.10.1 + interface eth0 area 0.0.0.0 + redistribute connected + redistribute ospf + ! + + } + } + services {zebra OSPFv2 OSPFv3MDR vtysh IPForward} +} + +node n21 { + type router + model mdr + network-config { + hostname n21 + ! + interface eth0 + ip address 10.0.10.2/32 + ipv6 address 2001:10::2/128 + ! + } + canvas c1 + iconcoords {240.0 48.0} + labelcoords {240.0 80.0} + interface-peer {eth0 n24} +} + +node n22 { + type router + model mdr + network-config { + hostname n22 + ! + interface eth0 + ip address 10.0.10.3/32 + ipv6 address 2001:10::3/128 + ! + } + canvas c1 + iconcoords {504.0 48.0} + labelcoords {504.0 80.0} + interface-peer {eth0 n24} +} + +node n23 { + type router + model mdr + network-config { + hostname n23 + ! + interface eth0 + ip address 10.0.10.4/32 + ipv6 address 2001:10::4/128 + ! + } + canvas c1 + iconcoords {144.0 168.0} + labelcoords {144.0 200.0} + interface-peer {eth0 n24} +} + +node n24 { + type wlan + network-config { + hostname wlan24 + ! + interface wireless + ip address 10.0.10.0/32 + ipv6 address 2001:10::0/128 + ! + mobmodel + coreapi + emane_ieee80211abg + ! + } + custom-config { + custom-config-id basic_range + custom-command {3 3 9 9 9} + config { + range=275 + bandwidth=54000000 + jitter=0 + delay=20000 + error=0 + } + } + canvas c1 + iconcoords {48.0 72.0} + labelcoords {48.0 104.0} + interface-peer {e0 n20} + interface-peer {e1 n21} + interface-peer {e2 n22} + interface-peer {e3 n23} +} + +node n25 { + type lanswitch + network-config { + hostname n25 + ! + } + canvas c1 + iconcoords {624.0 192.0} + labelcoords {624.0 216.0} + interface-peer {e0 n5} + interface-peer {e1 n26} +} + +node n26 { + type router + model PC + network-config { + hostname n26 + ! + interface eth0 + ip address 10.0.0.20/24 + ipv6 address 2001:0::20/64 + ! + } + canvas c1 + iconcoords {720.0 144.0} + labelcoords {720.0 176.0} + interface-peer {eth0 n25} +} + +link l1 { + nodes {n2 n5} + bandwidth 0 +} + +link l2 { + delay 8000 + nodes {n3 n4} + bandwidth 1024000 +} + +link l3 { + nodes {n1 n3} + bandwidth 0 +} + +link l4 { + nodes {n1 n2} + bandwidth 0 +} + +link l5 { + nodes {n5 n6} + bandwidth 0 +} + +link l6 { + nodes {n5 n7} + bandwidth 0 +} + +link l7 { + nodes {n5 n8} + bandwidth 0 +} + +link l8 { + nodes {n3 n19} + bandwidth 0 +} + +link l9 { + nodes {n19 n2} + bandwidth 0 +} + +link l10 { + nodes {n4 n16} + bandwidth 0 +} + +link l11 { + nodes {n4 n17} + bandwidth 0 +} + +link l12 { + nodes {n4 n18} + bandwidth 0 +} + +link l13 { + nodes {n19 n9} +} + +link l14 { + nodes {n19 n10} +} + +link l15 { + nodes {n15 n11} +} + +link l16 { + nodes {n15 n12} +} + +link l17 { + nodes {n15 n13} +} + +link l18 { + nodes {n15 n14} +} + +link l19 { + nodes {n3 n11} + bandwidth 0 +} + +link l20 { + nodes {n24 n20} +} + +link l21 { + nodes {n24 n21} +} + +link l22 { + nodes {n24 n22} +} + +link l23 { + nodes {n24 n23} +} + +link l24 { + nodes {n20 n1} + bandwidth 0 +} + +link l25 { + delay 5000 + nodes {n25 n5} + bandwidth 0 +} + +link l26 { + nodes {n25 n26} + bandwidth 0 +} + +annotation a1 { + iconcoords {45.0 431.0 220.0 642.0} + type rectangle + label {} + labelcolor black + fontfamily {Arial} + fontsize {12} + color #e6f4f4 + width 0 + border black + rad 0 + canvas c1 +} + +annotation a2 { + iconcoords {642 189 821 404} + type rectangle + label {} + labelcolor black + fontfamily {Arial} + fontsize {12} + color #e6f4f4 + width 0 + border black + rad 0 + canvas c1 +} + +annotation a3 { + iconcoords {200 218 655 463} + type rectangle + label {} + labelcolor black + fontfamily {Arial} + fontsize {12} + color #f4f1f0 + width 0 + border black + rad 0 + canvas c1 +} + +annotation a4 { + iconcoords {600.0 48.0} + type text + label {Kitchen Sink Scenario} + labelcolor black + fontfamily {FreeSans} + fontsize {16} + effects {bold} + canvas c1 +} + +annotation a5 { + iconcoords {648.0 72.0} + type text + label {see scenario comments} + labelcolor black + fontfamily {FreeSans} + fontsize {12} + canvas c1 +} + +canvas c1 { + name {Canvas1} + refpt {0 0 47.5791667 -122.132322 150} + scale {150.0} + size {1000 1000} +} + +option global { + interface_names no + ip_addresses yes + ipv6_addresses yes + node_labels yes + link_labels yes + ipsec_configs yes + exec_errors yes + show_api no + background_images no + annotations yes + grid yes + traffic_start 0 +} + +option session { + enablesdt=1 +} + diff --git a/gui/configs/sample2-ssh.imn b/gui/configs/sample2-ssh.imn new file mode 100644 index 00000000..d79a5f3b --- /dev/null +++ b/gui/configs/sample2-ssh.imn @@ -0,0 +1,248 @@ +node n8 { + type router + model router + network-config { + hostname n8 + ! + interface eth3 + ip address 10.0.6.2/24 + ipv6 address a:6::2/64 + ! + interface eth2 + ip address 10.0.3.1/24 + ipv6 address a:3::1/64 + ! + interface eth1 + ip address 10.0.1.1/24 + ipv6 address a:1::1/64 + ! + interface eth0 + ip address 10.0.0.1/24 + ipv6 address a:0::1/64 + ! + } + canvas c1 + iconcoords {264.0 168.0} + labelcoords {264.0 196.0} + interface-peer {eth0 n1} + interface-peer {eth1 n4} + interface-peer {eth2 n7} + interface-peer {eth3 n6} +} + +node n1 { + type router + model router + network-config { + hostname n1 + ! + interface eth3 + ip address 10.0.5.1/24 + ipv6 address a:5::1/64 + ! + interface eth2 + ip address 10.0.4.2/24 + ipv6 address a:4::2/64 + ! + interface eth1 + ip address 10.0.2.1/24 + ipv6 address a:2::1/64 + ! + interface eth0 + ip address 10.0.0.2/24 + ipv6 address a:0::2/64 + ! + } + canvas c1 + iconcoords {528.0 312.0} + labelcoords {528.0 340.0} + interface-peer {eth0 n8} + interface-peer {eth1 n5} + interface-peer {eth2 n7} + interface-peer {eth3 n6} +} + +node n2 { + type router + model host + cpu {{min 0} {max 100} {weight 1}} + network-config { + hostname sshserver + ! + interface eth0 + ip address 10.0.2.10/24 + ipv6 address a:2::10/64 + ! + } + canvas c1 + iconcoords {732.0 84.0} + labelcoords {671.0 95.0} + interface-peer {eth0 n5} +} + +node n3 { + type router + model PC + cpu {{min 0} {max 100} {weight 1}} + network-config { + hostname sshclient + ! + interface eth0 + ip address 10.0.1.20/24 + ipv6 address a:1::20/64 + ! + } + canvas c1 + iconcoords {72.0 252.0} + labelcoords {86.0 295.0} + interface-peer {eth0 n4} +} + +node n4 { + type lanswitch + network-config { + hostname n4 + ! + } + canvas c1 + iconcoords {120.0 120.0} + labelcoords {120.0 148.0} + interface-peer {e0 n3} + interface-peer {e1 n8} +} + +node n5 { + type lanswitch + network-config { + hostname n5 + ! + } + canvas c1 + iconcoords {708.0 204.0} + labelcoords {708.0 232.0} + interface-peer {e0 n1} + interface-peer {e1 n2} +} + +node n6 { + type router + model router + network-config { + hostname n6 + ! + interface eth1 + ip address 10.0.6.1/24 + ipv6 address a:6::1/64 + ! + interface eth0 + ip address 10.0.5.2/24 + ipv6 address a:5::2/64 + ! + } + canvas c1 + iconcoords {480.0 132.0} + labelcoords {480.0 160.0} + interface-peer {eth0 n1} + interface-peer {eth1 n8} +} + +node n7 { + type router + model router + network-config { + hostname n7 + ! + interface eth1 + ip address 10.0.4.1/24 + ipv6 address a:4::1/64 + ! + interface eth0 + ip address 10.0.3.2/24 + ipv6 address a:3::2/64 + ! + } + canvas c1 + iconcoords {312.0 348.0} + labelcoords {312.0 376.0} + interface-peer {eth0 n8} + interface-peer {eth1 n1} +} + +link l0 { + nodes {n8 n1} + bandwidth 0 +} + +link l1 { + nodes {n4 n3} + bandwidth 0 +} + +link l2 { + nodes {n4 n8} + bandwidth 0 +} + +link l3 { + nodes {n1 n5} + bandwidth 0 +} + +link l4 { + nodes {n5 n2} + bandwidth 0 +} + +link l5 { + nodes {n8 n7} + bandwidth 0 +} + +link l6 { + nodes {n7 n1} + bandwidth 0 +} + +link l7 { + nodes {n1 n6} + bandwidth 0 +} + +link l8 { + nodes {n6 n8} + bandwidth 0 +} + +annotation a0 { + iconcoords {202 75 612 405} + type rectangle + label {provider network} + labelcolor black + fontfamily {Arial} + fontsize 10 + color #f8f8d6 + width 0 + border black + rad 25 + canvas c1 +} + +canvas c1 { + name {Canvas1} +} + +option global { + interface_names no + ip_addresses yes + ipv6_addresses yes + node_labels yes + link_labels yes + ipsec_configs yes + remote_exec no + exec_errors yes + show_api no + background_images no + annotations yes + grid yes +} + diff --git a/gui/configs/sample3-bgp.imn b/gui/configs/sample3-bgp.imn new file mode 100644 index 00000000..f782585e --- /dev/null +++ b/gui/configs/sample3-bgp.imn @@ -0,0 +1,754 @@ +node n1 { + type router + model router + network-config { + hostname router1 + ! + interface eth2 + ip address 10.0.8.2/24 + ! + interface eth1 + ip address 10.0.6.1/24 + ! + interface eth0 + ip address 10.0.5.2/24 + ! + } + iconcoords {168.0 264.0} + labelcoords {168.0 288.0} + interface-peer {eth0 n16} + interface-peer {eth1 n2} + interface-peer {eth2 n3} + canvas c1 + services {zebra BGP vtysh IPForward} + custom-config { + custom-config-id service:zebra:/usr/local/etc/quagga/Quagga.conf + custom-command /usr/local/etc/quagga/Quagga.conf + config { + interface eth2 + ip address 10.0.8.2/24 + ! + interface eth1 + ip address 10.0.6.1/24 + ! + interface eth0 + ip address 10.0.5.2/24 + ! + router bgp 105 + bgp router-id 10.0.8.2 + redistribute connected + neighbor 10.0.6.2 remote-as 105 + neighbor 10.0.6.2 next-hop-self + neighbor 10.0.5.1 remote-as 105 + neighbor 10.0.5.1 next-hop-self + neighbor 10.0.8.1 remote-as 2901 + neighbor 10.0.8.1 next-hop-self + ! + } + } + custom-config { + custom-config-id service:zebra + custom-command zebra + config { + ('/usr/local/etc/quagga', '/var/run/quagga') + ('/usr/local/etc/quagga/Quagga.conf', 'quaggaboot.sh') + 35 + ('sh quaggaboot.sh zebra',) + ('killall zebra',) + + } + } +} + +node n2 { + type router + model router + network-config { + hostname router2 + ! + interface eth2 + ip address 10.0.9.1/24 + ! + interface eth1 + ip address 10.0.7.1/24 + ! + interface eth0 + ip address 10.0.6.2/24 + ! + } + iconcoords {312.0 168.0} + labelcoords {312.0 192.0} + interface-peer {eth0 n1} + interface-peer {eth1 n16} + interface-peer {eth2 n6} + canvas c1 + services {zebra BGP vtysh IPForward} + custom-config { + custom-config-id service:zebra:/usr/local/etc/quagga/Quagga.conf + custom-command /usr/local/etc/quagga/Quagga.conf + config { + interface eth2 + ip address 10.0.9.1/24 + ! + interface eth1 + ip address 10.0.7.1/24 + ! + interface eth0 + ip address 10.0.6.2/24 + ! + router bgp 105 + bgp router-id 10.0.8.2 + redistribute connected + neighbor 10.0.7.2 remote-as 105 + neighbor 10.0.7.2 next-hop-self + neighbor 10.0.6.1 remote-as 105 + neighbor 10.0.6.1 next-hop-self + neighbor 10.0.9.2 remote-as 2902 + neighbor 10.0.9.2 next-hop-self + ! + } + } + custom-config { + custom-config-id service:zebra + custom-command zebra + config { + ('/usr/local/etc/quagga', '/var/run/quagga') + ('/usr/local/etc/quagga/Quagga.conf', 'quaggaboot.sh') + 35 + ('sh quaggaboot.sh zebra',) + ('killall zebra',) + + } + } +} + +node n3 { + type router + model router + network-config { + hostname router3 + ! + interface eth1 + ip address 10.0.8.1/24 + ! + interface eth0 + ip address 10.0.2.1/24 + ! + } + iconcoords {96.0 408.0} + labelcoords {96.0 432.0} + interface-peer {eth0 n4} + interface-peer {eth1 n1} + canvas c1 + services {zebra BGP vtysh IPForward} + custom-config { + custom-config-id service:zebra:/usr/local/etc/quagga/Quagga.conf + custom-command /usr/local/etc/quagga/Quagga.conf + config { + interface eth1 + ip address 10.0.8.1/24 + ! + interface eth0 + ip address 10.0.2.1/24 + ! + router bgp 2901 + bgp router-id 10.0.2.1 + redistribute connected + neighbor 10.0.2.2 remote-as 2901 + neighbor 10.0.2.2 next-hop-self + neighbor 10.0.8.2 remote-as 105 + neighbor 10.0.8.2 next-hop-self + ! + } + } + custom-config { + custom-config-id service:zebra + custom-command zebra + config { + ('/usr/local/etc/quagga', '/var/run/quagga') + ('/usr/local/etc/quagga/Quagga.conf', 'quaggaboot.sh') + 35 + ('sh quaggaboot.sh zebra',) + ('killall zebra',) + + } + } +} + +node n4 { + type router + model router + network-config { + hostname router4 + ! + interface eth0 + ip address 10.0.2.2/24 + ! + interface eth1 + ip address 10.0.10.1/24 + ! + interface eth2 + ip address 10.0.0.1/24 + ! + } + iconcoords {240.0 432.0} + labelcoords {240.0 456.0} + interface-peer {eth2 n9} + interface-peer {eth0 n3} + interface-peer {eth1 n7} + canvas c1 + services {zebra BGP vtysh IPForward} + custom-config { + custom-config-id service:zebra:/usr/local/etc/quagga/Quagga.conf + custom-command /usr/local/etc/quagga/Quagga.conf + config { + interface eth0 + ip address 10.0.2.2/24 + ! + interface eth1 + ip address 10.0.10.1/24 + ! + interface eth2 + ip address 10.0.0.1/24 + ! + router bgp 2901 + bgp router-id 10.0.10.1 + redistribute connected + neighbor 10.0.2.1 remote-as 2901 + neighbor 10.0.2.1 next-hop-self + neighbor 10.0.10.2 remote-as 2902 + neighbor 10.0.10.2 next-hop-self + network 10.0.0.0 mask 255.255.255.0 + ! + } + } + custom-config { + custom-config-id service:zebra + custom-command zebra + config { + ('/usr/local/etc/quagga', '/var/run/quagga') + ('/usr/local/etc/quagga/Quagga.conf', 'quaggaboot.sh') + 35 + ('sh quaggaboot.sh zebra',) + ('killall zebra',) + + } + } +} + +node n5 { + type router + model router + network-config { + hostname router5 + ! + interface eth1 + ip address 10.0.4.1/24 + ! + interface eth0 + ip address 10.0.3.2/24 + ! + interface eth2 + ip address 10.0.1.1/24 + ! + } + iconcoords {528.0 336.0} + labelcoords {528.0 360.0} + interface-peer {eth2 n8} + interface-peer {eth0 n7} + interface-peer {eth1 n6} + canvas c1 + services {zebra BGP vtysh IPForward} + custom-config { + custom-config-id service:zebra:/usr/local/etc/quagga/Quagga.conf + custom-command /usr/local/etc/quagga/Quagga.conf + config { + interface eth1 + ip address 10.0.4.1/24 + ! + interface eth0 + ip address 10.0.3.2/24 + ! + interface eth2 + ip address 10.0.1.1/24 + ! + router bgp 2902 + bgp router-id 10.0.4.1 + redistribute connected + neighbor 10.0.4.2 remote-as 2902 + neighbor 10.0.4.2 next-hop-self + neighbor 10.0.3.1 remote-as 2902 + neighbor 10.0.3.1 next-hop-self + network 10.0.1.0 mask 255.255.255.0 + ! + } + } + custom-config { + custom-config-id service:zebra + custom-command zebra + config { + ('/usr/local/etc/quagga', '/var/run/quagga') + ('/usr/local/etc/quagga/Quagga.conf', 'quaggaboot.sh') + 35 + ('sh quaggaboot.sh zebra',) + ('killall zebra',) + + } + } +} + +node n6 { + type router + model router + network-config { + hostname router6 + ! + interface eth1 + ip address 10.0.9.2/24 + ! + interface eth0 + ip address 10.0.4.2/24 + ! + router bgp 2902 + bgp router-id 10.0.9.2 + redistribute connected + neighbor 10.0.4.1 remote-as 2902 + neighbor 10.0.4.1 next-hop-self + neighbor 10.0.9.1 remote-as 105 + neighbor 10.0.9.1 next-hop-self + ! + } + iconcoords {624.0 240.0} + labelcoords {624.0 264.0} + interface-peer {eth0 n5} + interface-peer {eth1 n2} + canvas c1 + services {zebra BGP vtysh IPForward} + custom-config { + custom-config-id service:zebra:/usr/local/etc/quagga/Quagga.conf + custom-command /usr/local/etc/quagga/Quagga.conf + config { + interface eth1 + ip address 10.0.9.2/24 + ! + interface eth0 + ip address 10.0.4.2/24 + ! + router bgp 2902 + bgp router-id 10.0.9.2 + redistribute connected + neighbor 10.0.4.1 remote-as 2902 + neighbor 10.0.4.1 next-hop-self + neighbor 10.0.9.1 remote-as 105 + neighbor 10.0.9.1 next-hop-self + ! + } + } + custom-config { + custom-config-id service:zebra + custom-command zebra + config { + ('/usr/local/etc/quagga', '/var/run/quagga') + ('/usr/local/etc/quagga/Quagga.conf', 'quaggaboot.sh') + 35 + ('sh quaggaboot.sh zebra',) + ('killall zebra',) + + } + } +} + +node n7 { + type router + model router + network-config { + hostname router7 + ! + interface eth1 + ip address 10.0.10.2/24 + ! + interface eth0 + ip address 10.0.3.1/24 + ! + } + iconcoords {528.0 456.0} + labelcoords {528.0 480.0} + interface-peer {eth0 n5} + interface-peer {eth1 n4} + canvas c1 + services {zebra BGP vtysh IPForward} + custom-config { + custom-config-id service:zebra:/usr/local/etc/quagga/Quagga.conf + custom-command /usr/local/etc/quagga/Quagga.conf + config { + interface eth1 + ip address 10.0.10.2/24 + ! + interface eth0 + ip address 10.0.3.1/24 + ! + router bgp 2902 + bgp router-id 10.0.3.1 + redistribute connected + neighbor 10.0.3.2 remote-as 2902 + neighbor 10.0.3.2 next-hop-self + neighbor 10.0.10.1 remote-as 2901 + neighbor 10.0.10.1 next-hop-self + ! + } + } + custom-config { + custom-config-id service:zebra + custom-command zebra + config { + ('/usr/local/etc/quagga', '/var/run/quagga') + ('/usr/local/etc/quagga/Quagga.conf', 'quaggaboot.sh') + 35 + ('sh quaggaboot.sh zebra',) + ('killall zebra',) + + } + } +} + +node n8 { + type lanswitch + network-config { + hostname lanswitch8 + ! + } + iconcoords {672.0 432.0} + labelcoords {672.0 456.0} + interface-peer {e0 n5} + interface-peer {e1 n10} + interface-peer {e2 n11} + canvas c1 +} + +node n9 { + type hub + network-config { + hostname hub9 + ! + } + iconcoords {120.0 504.0} + labelcoords {120.0 528.0} + interface-peer {e0 n4} + interface-peer {e1 n15} + interface-peer {e2 n14} + interface-peer {e3 n13} + interface-peer {e4 n12} + canvas c1 +} + +node n10 { + type router + model host + network-config { + hostname host10 + ! + interface eth0 + ip address 10.0.1.10/24 + ! + } + iconcoords {576.0 552.0} + labelcoords {576.0 584.0} + interface-peer {eth0 n8} + canvas c1 +} + +node n11 { + type router + model host + network-config { + hostname host11 + ! + interface eth0 + ip address 10.0.1.11/24 + ! + } + iconcoords {696.0 552.0} + labelcoords {696.0 584.0} + interface-peer {eth0 n8} + canvas c1 +} + +node n12 { + type router + model PC + network-config { + hostname pc12 + ! + interface eth0 + ip address 10.0.0.23/24 + ! + } + iconcoords {288.0 576.0} + labelcoords {288.0 608.0} + interface-peer {eth0 n9} + canvas c1 +} + +node n13 { + type router + model PC + network-config { + hostname pc13 + ! + interface eth0 + ip address 10.0.0.22/24 + ! + } + iconcoords {216.0 600.0} + labelcoords {216.0 632.0} + interface-peer {eth0 n9} + canvas c1 +} + +node n14 { + type router + model PC + network-config { + hostname pc14 + ! + interface eth0 + ip address 10.0.0.21/24 + ! + } + iconcoords {120.0 624.0} + labelcoords {120.0 656.0} + interface-peer {eth0 n9} + canvas c1 +} + +node n15 { + type router + model PC + network-config { + hostname pc15 + ! + interface eth0 + ip address 10.0.0.20/24 + ! + } + iconcoords {24.0 576.0} + labelcoords {24.0 608.0} + interface-peer {eth0 n9} + canvas c1 +} + +node n16 { + type router + model router + network-config { + hostname router0 + ! + interface eth0 + ip address 10.0.5.1/24 + ! + interface eth1 + ip address 10.0.7.2/24 + ! + } + iconcoords {120.0 120.0} + labelcoords {120.0 144.0} + interface-peer {eth0 n1} + interface-peer {eth1 n2} + canvas c1 + services {zebra BGP vtysh IPForward} + custom-config { + custom-config-id service:zebra:/usr/local/etc/quagga/Quagga.conf + custom-command /usr/local/etc/quagga/Quagga.conf + config { + interface eth0 + ip address 10.0.5.1/24 + ! + interface eth1 + ip address 10.0.7.2/24 + ! + router bgp 105 + bgp router-id 10.0.5.1 + redistribute connected + neighbor 10.0.7.1 remote-as 105 + neighbor 10.0.7.1 next-hop-self + neighbor 10.0.5.2 remote-as 105 + neighbor 10.0.5.2 next-hop-self + ! + } + } + custom-config { + custom-config-id service:zebra + custom-command zebra + config { + ('/usr/local/etc/quagga', '/var/run/quagga') + ('/usr/local/etc/quagga/Quagga.conf', 'quaggaboot.sh') + 35 + ('sh quaggaboot.sh zebra',) + ('killall zebra',) + + } + } +} + +link l0 { + nodes {n9 n4} + bandwidth 100000000 +} + +link l1 { + nodes {n8 n5} + bandwidth 100000000 +} + +link l2 { + nodes {n15 n9} + bandwidth 100000000 +} + +link l3 { + nodes {n14 n9} + bandwidth 100000000 +} + +link l4 { + nodes {n13 n9} + bandwidth 100000000 +} + +link l5 { + nodes {n12 n9} + bandwidth 100000000 +} + +link l6 { + nodes {n10 n8} + bandwidth 100000000 +} + +link l7 { + nodes {n11 n8} + bandwidth 100000000 +} + +link l8 { + nodes {n3 n4} + bandwidth 2048000 + delay 2500 +} + +link l9 { + nodes {n7 n5} + bandwidth 2048000 + delay 2500 +} + +link l10 { + nodes {n5 n6} + bandwidth 2048000 + delay 2500 +} + +link l11 { + nodes {n16 n1} + bandwidth 2048000 + delay 2500 +} + +link l12 { + nodes {n1 n2} + bandwidth 2048000 + delay 2500 +} + +link l13 { + nodes {n2 n16} + bandwidth 2048000 + delay 2500 +} + +link l14 { + nodes {n3 n1} + bandwidth 10000000 + delay 650000 +} + +link l15 { + nodes {n2 n6} + bandwidth 10000000 + delay 650000 +} + +link l16 { + nodes {n4 n7} + bandwidth 5000000 + delay 7500 +} + +annotation a0 { + iconcoords { 70 55 345 330 } + type oval + label {AS 105} + labelcolor #CFCFAC + fontfamily {Arial} + fontsize {12} + color #FFFFCC + width 0 + border black + canvas c1 +} + +annotation a1 { + iconcoords { 470 170 740 630 } + type oval + label {AS 2902} + labelcolor #C0C0CF + fontfamily {Arial} + fontsize {12} + color #F0F0FF + width 0 + border black + canvas c1 +} + +annotation a2 { + iconcoords { 0 355 320 660 } + type oval + label {AS 2901} + labelcolor #C0C0CF + fontfamily {Arial} + fontsize {12} + color #F0F0FF + width 0 + border black + canvas c1 +} + +annotation a10 { + type text + canvas c1 + iconcoords { 450 55 } + color #FFCCCC + fontsize {20} + label {Sample Topology 1} +} + +canvas c1 { + name {Canvas1} + size {900 706.0} +} + +option global { + interface_names yes + ip_addresses yes + ipv6_addresses yes + node_labels yes + link_labels yes + ipsec_configs yes + remote_exec no + exec_errors yes + show_api no + background_images no + annotations yes + grid yes +} + diff --git a/gui/configs/sample4-bg.jpg b/gui/configs/sample4-bg.jpg new file mode 100644 index 0000000000000000000000000000000000000000..2b3d29dc60c3c76c56a31a1dde3c280ce1c23fea GIT binary patch literal 201030 zcmdSAby!@_)-JfaakoHlcXxMpcXxN!gplAC+#$HTI|O%k5*&hCAOs21`JHpV@6OzN zpJ!&C`Dcpm-EUW|lC@Xus`(27Ow7|008v>$)EM{bcJB(Q3!tH z4jCW>Z~nzL|H4;)vH3q32KpZvO?3$XfWZX-cw{p(cN+jep@ig{y(&1^FLrSGxPsy)6C4~zwp0wfz*U_ zENSQA>S*To&zJu%FHVkLko)yd!h~FrogJ0`+6D*m{$Xh*sQ~#TguMT_I{srbhztnd z%2`VTlJ^%gI-4u2{2L2fyGyG>Fr+R>)zwq{FNWMRkhQC)s^-7*-}&20C_^wZBtO~8 zL+U^6e6cr^|7$Z;NPdI6m%0`NQ$lc`hqs0l1Vd&NXy4yfQ|I3@KP{~!|D6v8TiZ#? z{YwUnY3C{Tx34!4o0B`ZDEu7*q%SZxpa3`mR)81a4!Jr5On@RF0Z9J)$^=*gW{?tZ zNSO!V031TF6QqUc*&lm1&y;(yAK{->S|q~8CzMN+^5BJ1^Eeg3OAQb?cwY10m{ zgy8?=n?d^cTlRN!9wv4n|J~<*B>uMd&uCaHS&vzt|1&0NYG`(7E@*LRA!uP}K7bS& z2O1w>g64$gg%*Prffj(2@d47nKBQ%v|BUf(`%Vqk-svuW{MxpV(!aW!|ECnt{zuyG zzrO!ZBLM8C&sxv^GXencwDN^K2LK@9;_ByaXJhM0Dh7FStr$t=oGq9cN!eN1SpOFP z|0exiv;H;MTlIg|A`s5Zf9JWd0RZ3MHRj`g=b2srK&w6EF~$7vJnB{eKw}4hu`~-W zckh3-2mSX020#SRATtyXAO3bFw?gS9B2)+ z13CuXfF8k6U}W$cFcFv<%mU^Gi-8runqVWa4cHCr5B>y>1E+%vz*XQDa6fngyae6` zpMvk804O9V94Im5(On4UxT&)&tRbv}H?VJL z-pIYNe-r(t`pxv4D{M?`PHb&#U+gUGZtQIwC>&}WIUGlvc$@~DWt_*iL~q63TD^^Y zTl04Q?JrycTv1#r+$h{y+$G#cJW@OTEBz7dp zB)udjq}Zflq>iNNq=TeaWQ1h0WL{+XWYc6% zOUFy+K$k-|OAn^!qPL~bqMu;^GjKE5G2}4JF~TtNF*-9AFs?8mGl?;IGgUI}Fyk;Q zGKVm?GGDMzvgorUu#B+$VdY|VWG!OdV8djSXA5ELV7poyCO#0WRA}65ifhJeZfMbJd1-ys zM$Bm-hp%U+*QO7rudQFAe`g?NkYaFP$YmI2xNJmYgl?W33aslc`g?Gp4hH^Pmf{ zi?7R^D}!s8>$V%eTZ-G2yMlX(2gt+7qs{XT#5tVwqV)>(+VK|l&hmcn(e`Qd#qf3Z zo%Eyki}XA4m-a6XfDW(-_!>wS_#tp7NGvG-9q66;yRYvl-hX<35G)g1_5tyO!-uI5 z){w-IpC5HTc6=iG6#Qu~R3@}C3^mL>Y$aSEJTC$|!Y*Puk|Q!B@=ugy)Oa*&bZYc- zj77|NEL&`P>}#BL+;lv5eC}u1&(5Eh6GRfq5-}3}6Zevol3J2UlcSPI>QnKPd&np=}cloy@%_{HwaYQ9W< zO96F3Y9VZ)ci~}?cF{;NZ*h4Eeo1u6OR00|cA0wFU^!2Dc?Drbd?mQjtMa(Yuxhqi zvbwE?sV2V`r#89{sPn2jsW+`(Zcu3W+Q{2j(?r#j-Hg>7)dFhqYq@H*ZQX9uYnyAA zZ~xjM(9zt<+*#U1)|J(b-5uY9*z>99wb#G*uFtjatly@8@2knzjRD<(#X+^f=^=%o z(P8P~ff2Eh-cg~^t}*_x_Ho|v)(P&3mPxM3<|(eJ=4tNfmKmOzwpqT}jyb`(o_Ue^ z{sqZ};YGQ{i6!Nwxn-^8)fK~)?N!UwA8U?l*X!QvPaDCTFq=`|(7&aAC;VQpMYmPE z&Ar{dBe^rVtFgPWXR&v>@3H@U@aYicF!hM!sQd@}kFI0s*&)2FkrbBy!s z3)+jOOVP{8E8VMuYxnEdo0wa?+tQz$Kfm6o-hID!x_|l=^?>(K_M7+j$fM5V(UZ?J z+;jR1-Al(Gg+H6GPOq=7X6|PH_ySOnE7;l^0B%YlF@zo@c9;bK#J+#U6#qy-!W9ri z27=)ro`O8Y1K0!6L-y@HFdoLxlmh5}|J))+Phj^W!XJZO9~f^H&G;uw+#GE4GxN@c1s8W!3(x>E)@#yqBb775l^ zwpk7oPH`>|?rfeu-fg}YfwzJTLVUtfBI=?RVjkk3B+?`+rFx|oWR7KD<*^kQ6(y7m zlpZuoA`?%zH7JPW--y{&!Zd>Q-@{Z9NR1L^|PgFe0U zdG8kN{=q*a>SO+=?$E7pgb2Y%*QmniIM2vnM3m=c2h@A|b@|@P0VV-%K?VAgj=bpb`SXpde z%3KawF=LNNh`=+Da0s0Q1wzj)AG>S)8{ZuFy1g@vv9D= zvKg@3aJX^$aRqVv^Vstm@G0^O39t&13tfUNZ0#)T$PrY>fh z=A0JD7Q2@1R`J%>HiEVowug3|_6ZJFj{Ht&PJ7O+E)lMJZVZrlG41ii)7?wL8{7NH zr`pJYRI!<@szBZ?yjqIRPH#1h8w#cO}| zNcfysl{A)om{DU!%}tSmR_9ER#Z0 ziqrZtwzEESVe=^q1&g&yUCU!D%c}=#KR2K@-+ZI`&by_!ZL?Fjd%RC`pnn*4RPkfv zc<1Ed4E3DqLgdomD)@T#mg8sA-R&>+ho(o|r_kqzKR*B19~!^_=mBLQ80dre_52`D zP%9V=Rsw$kKS3EojYA7Ux4`hie1%no-Gd8&Cx9P8h()wO5=16I{)4iMI)T=VUW}2B z8HW||CKNjiC;Dv?ZXRAGej7nIVK-3^aW6>^X(w4Tc_l>-Wi*u+wIPitEjb-Pw?W^^ z5Y4E~M9Or++{_Zps=$WBw!>b@;l(M!g}}AIox@|x%gOt|*TWwwpdg4TxGq#6Y%jtt z@+>+mmLP5(hE=pcoflT34u|+9ZSy2T?WkCyj#D!zXylMnP;(=vG-f=8J}=p5#I;DI)A$W z(tx$V|-_rg@f2_WPWq+^W2ZFP8;Wg?>e|B{Ze)%9bmbDnC_i)Uee?)O~N@ zZj5f)YT;-NZ`rGh8&vG&VHhFhx0iHajw3zgWIpx7xq{ z?HjPgx>LFzb`*8edVzKwafkcR{H*iW{{P~Z{_Y8|+yGF#2LRgn0H9_70Hq87K$Qid zO(1-SDhdE-@&RD+cmTAP0f1y`{%ik00capmzBLdIi5$m(QxGbM4WtF~2jzgeKpUWE zNPH&(HV21+E5I}0pHKu)Vo8U6gQJDBfh&bOhG&NNg6~B@LeNL3LIfe|A~qnQA~_??Bl9AEL4ikcNBNE_kJ^q# zi43HWUI3j{udM1-?M z;l$!307*Y-D47yD9{CT7PRax-dunMKDq3XPJGx!^d4@s84yH!tI+j}22DUc#K8^{_ z?_AeB(7f1u6#PsAY=W#p^unYfn4)0OOR){{UWo$92q_n7T^Vs%7CB;hGzBPy2gNI; z6XgSyUDX}6ef3j~Tg?}31f93KG+3@knNt` zivy-3nG?M;vkQ|eog2A3jt7Frqvx?VzK@dcC%<0*KY>y~N$*aBl|FQS`**|zzUC9)NxwY-hP?`+#2c9#wqjv|ha&SWksuF-D; z?#>^qACF#K|5-oK0A@f9!bW8Ry}&*Q3Bm>#fIdMY{t3_}B)aDZn}Q?2b>KB9C`in% z2Neoc548o20$EiYptGQ-An`XFj3rDq#O`RYim;Keqi~3DN^psA>+n?Y?(km`a1b03 zh7lRlqG^D`bzwfM4A+tbeXJx+=D`zl9=*=YMHu~<_m2aT>^a^ zLmXowQzml>OEc>z+jsU~oY-9a+!j1>yxn}40#t$~LRrEaqQqjB;S7#zH36rU_;}<`l zHp8|r_M8rOj=4^AE?`%7H&gdGk511Y-e^8NzNUWB{%rwAL2uv5y$=d*_;B)(;*(Km zX4q=P+ep2r-01ySra0gD;RM`7m!!!Q*3_(Y)Qre1Qs zlWO#ufjZv?mc}2=rLA`DOdU5}9X%m^ieKLj>Yt8J<`7aPJPA^BV zYOGUlg1+r;4ewO$#UHpIX&e)rP2ZT@Ufu=&LVL(~B!0?!!T%HgkNw{Q zVt^}zIhp}pA-1;$Wq^i2w_tLxI)uY%1)o8<8ePcqJ_Zd1;Sl|yTcPh@xL~|tx?y2p zRbaDVPv8XLKEwThmxM1ufJbme*hExB>_g&#SXvx;5=9T?1oa&nHd-CJ3i>rhDyA^z zF;>nS4Qv$bah%Aviny4#>v+ZZ?gV0lScIoU!^A}-VWbXZn&e^>?36TAB-8{n__U;S z4D@^q3XEn`@~k1QRd$s&)e-CR82oDKKAY^d}{rLU$ z^_ChER3rkxOTz2xQ^D)&OCcoKfSiH!IsWUs;;%3)gmce^kbesY`UA#5w;{AmNin1ex}zb`Q41xZjakR=QX3Kkj~3I+}qLi|CP zK{$9M1UPs^cvx5j6a+*hBxGb{I0O__6l7EgMEcvv-?~u$)P+HUhlPi5dH)a7Yaf6C z559nwfdY{OUkh>U(LW!&@hk@LB;_QXhw$&9|{T#87vGm zT_3=9OmvJ2#7duaq;k}sA*{F z=sCH#d3gEwB_yS!Wn|^#H8i!fbs!Y9g{76Xjjf%%ho_gfkFTHq$4{YQ;SrHhiAl*R zscGpMnFWPK#U-U>ZS5Uj2L^|RM@GlS=NA^2mRDBS)^~RI_74t^ejJ}% z-`xJZyZ`m@`|+<{Ac$Y_pY$)y{x5oAK=cAbYyb`SS1%CQ=da=z&@g0du$W?MaAs~; z4gmA~oN}XWWj%cbtUD(_sX+FJ zDW6PaD!~GDmY=2SI#4oVS1|hxjB_35$OO1T?X_B0Eyeo@N0ltgb%FvFGB8aJl<5m0F z4hLDn^x#^C>#dQjYKFlEUEiSnKB&@(u`0R?`*^$N1{U_=eQqHJ!yog{l~%!GV~}Q0 zOM@!yV!bL-SrTGe0yOzchk_JTuE`~=2tyT|T#D`ZkS}U%xZ^0gPUovIo%UdfW7YhY zAHS!e3{5y?mr-I1*;}@x>Z%%`jO7-s2z*E{fjgit#^tcR4%@}utOH&AFI&yAs-3<0?*t5aAzX{wQW zCc$W2gT5;}KU>PFw!*jN%seux{AK7wZf2iq)%4t(E=f-RAlT^{5&5;r7Ri`eYJ}kV zo41(|`_gWl)}MH<4hAQR;KzT>Wy%xV!ahqhUK>ObY>3Y!`=&{(EMVRdA*f)s>)`um z`j1sR3A5&Ykc^sV-RhSed7j_PSe6QLvQPM_rz=`*e40u{OlRK%e}sR`}V1 z-=L1eyzS28?Oua`xoBzLh$B7{`5(!@6EGg)dc~|3Eroq>h3J5omcbq$_DFP7`ZI4wwdy-#FXy@V7J+dD zB|GYS>fnUAK&+T#35TA}+X8~mfRMePnMXz9UR1~<@T-uBL({at)1UfNn!aaJBU-vM zd8OP@5Vk=AtN&ClK2708i*nz7NH{LJb6p|a}WJkl)d5@L4@f3OF z^CsHcK4Hg$f=*%*1=zHa<<7;DbJk#{MseJwd;P*-bQYSHGd}nyR8jMYru_EM$8l|< zNqAVETTLX`U_<7Lccb2{J0Egz@ChI9vma?A*3O>d1~H=T=qCxq>v#AYeDB#Uc9-wb7nZw7gK*1uCD9aItHx-XyKHuqAKb#%RjXzf_fnun%fUPFou%**G~>;AF?4$W$6D zP`3~aT(=wLBj<>66}8y5&J(Pv`90oO>ch6e6ldv4IpKbz^Pt|u$kxh8?)tswB-DI`=7TVHZjB?$ zPcC=K?hOtw%76R6oa}b_Z41%J#ab;?_RVgAJ-O-)%VnKkP>=YLCXgSI>PfQuP}BAzXrJ*d+?9!q29EWsqo~`|Y`iDVwJuB9^P!e&9j1_s!y+39 zg5A^%^ovi=S_XJe*VCiCGXt;=<0?E<7Vqe2TH&{UR<_*ycJE^Nwdl?uqGdtwf&6?* zG1xnyX;52ZQ9CsSJi`V{3S`tW<#8r(+heupm3|Rh9 zqgookG5l*I2cW63qmrD8zUqvoS-vlJx47=Bb3n&+G2XYz87n#pBc8T^j zTQI7?Q1QD1ZiYtB=1A;~Hta#0$cJ%et5J*0DLY?hmgPVqu}W5^t-Igfv1Kn%#d4vL zob@Hqqwf>Q%xNH_) zq&c2%OlteB0Gdqj^HSEmS9yq9yh(&_oeH)Ooi}&9=PWp5R-+8}pP%t&egn#mYIbs* z!Eqb18IKx#$x6!gEuADR#CVQm_q$Zb8(N)FbW=_LmWLUI_ilQ};&^fP+jvwXE@eg!h%{%3(el((S7qKB#)<9wLM2$khpienTs}csil4d`$PF~ z;B%jQa}lz&M%#7JR3zI514gzcy1j>z>+QGww?y>bH^mw6R8`*5F71sEGlk;~IaY$ zja??Du~F7H?P=&y^j7`3IGOInz)vS{tF1QIJ2v&FtUI&0EzkAW&7QbMa%HBa07Yx` z;kx*)QtGsUtA;VxfyE^~+~)CyoBdmZ4#xLZtqC=n%ztFMnH_9xXuoAlb)SccJq<@K zHr?cIIRLWe{%R_DleyX!4`DK0^D)b%b|d!vSH=k*LGCs^jQt2)a}KKMoD0~!{yv}1 z_ZNP)BY%UhInhtH^er83N{bC!NK)%NX?Nr!t7Q&`!h3U>gUC9gLrkK59j8Xt!$K#3|(38X%a( z`xzc(rqow?^Il^6x^c-_1lUgcu(A5qf5kcP@*ys0R}fM*LABSx?8}u1dj*u_WUyK- z;DvzuDSxkVJQ5FPHrvyRzaoUcsY)6Ms zL~gnqqMiy9vNn{Qa45M;%8wV9UwJ0($MBav{yF*K?i_C`dxmECq&3zh0~d+8Yh=!5 zS4NE_k+Y$)a;!g>2OW;f~J;h+LypMT5F*wGK-2Z zj^Rsi!CJ+jhZ^Kys=biTn;^4`8ntZFqcJlzfb>3e$ZEjrV2Jr5im&=u2*~tHIozaA z&h#)egoT4zFU~v`3?5s~vo|{bMWrgwEs5kuseyZdr?ppX7_J&dmdA+ov*Kob{50FE ztU&t1D-b9!>miqVDJVugDH;w}gH!9P+-EsS(RPjPT;KCms_{BlW|1l z4*vELusrPWQ>@|My>kr4K+Ecub8w$Ww;{xb{66eRb1;2)@A*_k9m8OZ(3U@2ZTu~T zSJ1XW2!&bFU0Kr;Mx>&}X9n|MR-s*Pdxr@;+R8beW_pdA=Iw{gJaL2TT0gnb8+!zY z++tpAudVAIYbqghfR@e&z0_1DFU|&$&1p9cd;DbcWh%8)rk0|7XSI1a1&gqx%=Ya( zB|qeDD~J^HJLC{5TWJJI9XhMWUsmiD_A8NaXEoPB=TUFO1hKjB~4_Xd+lgbgkoQpy%aq-?3=1 z&aTXnnIXWCsj)0OoVPRey$0tHe4HCZ-y87<4aI+8VzI=!Z)9u8->P{-4lV_L9T<|J zP7jUj{2c$aCRF^ipBQ7O_mj6=^_X3$%7L6S&xgaOl^S1Ro~!52y7rc%4J;a4geypU zuRwS!ze?oZa-a~0pN8--$aloJdG&|Rh<;0J$}6y9P$n^>G2cOb;V~fXDIa!eusN^~ zpypJnjMBNnRI^X_=eOw|?u>^$pUTgZ)X&`B-c=z4#O2P_kg0|rO{>gT>*_PAntRO1 z`wtJRAJ0ZroE@oZ(S$65Doc!G8RZV*5cA$Gp~RreI5Nla^md!HwZ;(%I-g8v{j5bA z3$mZf=Z&#WGN&~fV@lcdkjSa=+Y@q-zqf8pgp>FcQNldNW6;Zl26t8N1P|GkgrK(7 zT=6N~T&?h?ly+8AcI{Zg;XZ6+_F7<0lySl}Q|L3Yj^NE;T9>GZI*1cw?KwZe!TVbm zK2a`=*19AX#q1WZnCnr-Qfx0zXOw0U@%m*@g}RT0pwKcx|J;q$OVy-^@hb6?CJ9_r zmo_P{GTlU19fgp3l!4qBHYl(5*?p>vks+&kK~ZeCGzIcxJFc1N*z zI8~r==)F1&rrol4VN{dDft{y-MqT_}kQ6k|_7s73NKf!d7aBdTsz5&O&xu^(iRB;4 zkpoc-l<$FNSrph7+HD2~>2a_gn$=6sO+G^9tvuyE{?IC(4@YgRQi!ET&$76WMAtsVQrqoCx!O&KHG6_ z+$HIeI6Y0i(~nnecL>sq@F%7PWrh_x!4yvwf)3@mTD~Z45{vDaA?e-xn0Q}y zX>of*(aochb=EpblGCLM^9rDjGu;{Ni4dFDnpEptBbVEl?kZaC!?*{X6u(@@s}k!z zJ!@5V({(AC*5uvvFOmeR!pel7X?4B3^yM{8pP4URWK8xQbL6%bC@?9_A7aOgT^V#~ z?C+0}$s4aeUH`n$B}KG{oMrMYZ*XyJ4awunqGQrm596^?>LrIjns@eSNV=Oc#T(zo zs}GHbE#Ie=AEphrCccy~sPh4`$^jTU%w8Fs-I&Wxd7V*=pgaq;Nd{uS3S&8uNasHq z$r1NIVQYMSKSg();qvb4~%ph`b}8!q>Y!{I~QN3niz8JTM@o^=&}8n%6~AwKg&+SGo@9x zXyDlIj{5E$v7LdscULlo**_U*U1_&&AX^a7+f6emoctoaX9r>^K;5ylm4KQ;_d}Jz zws$}uE&8bGdAiJfQa!ud#LU7?3L6O%V%YD@z2s&ZfdpEvIeU_-D{H#r;UiArL84&S zB=!>ApyMOF)~V%8tkNZ!uk@qjrYljbl3cFPNzj^Viyb5Mu56I>zOm0)V`EmSwj-J> z(rJsp^edC50+!)8@5|@7>0S$Oq|9< ziCrlcD^Dx`4nt+OBV%8PYH6Y4;v_M4lZ!%$lm7WXCzE}ESJuk=`yyHu#Q#7RB0`j#7$31cMo}dw;1GUC5W}R$Kbl#fh+OX z3V6^AjbG@7s!#CZ;2QnKWp5Bds(LFV9UDY>{@&TuS>Mw%Dyrl1KqDp~WE^?VRM7?ekf z`IwE#P_0)KWky&rk|#fLO-W+ANbz<1R)*{A*~HwlV5YZKx9h;f4`shff5LdC1p>2n z&FdkZ<@3@+tMEfD3i7IB9;KZC9QIn?69=Al+x6CKwOeF&D@4>y&2^Iq<5xf(R@yPh z;d5hVko-%@dcTVQ*4+8N*7qpiD$CfN`cr<`X@^hzDV$2A+*_i(4_f0`NmY87}>Iu+wJH`%i* zW3x!zH6=~F{e0U}wIg>d7Y5#lfK0Vwv8&>76_qX{c}q^PB<{D|CNV!3JC5oEcG!ovZ*Kq3&#@b{xKM zV$Yyj^SLwB*n)nP$*PMo5LIM37gA+(XCC{G2gwy7YBSdGFF4Qe50Yk9qp?Yj1PCQ&F2BoPizgX9-Nlxp(_f*TnF&Lu)lS?+r4*Bu-wbH%}nE=#?oBw#g(OJ z4%l{Qg-@P>F}F>R@&32H1ke0`Mk5cCr@q!l#iopnRB=o|TLITxpUi%N(X%YD;x#~L- z4x!ZDVW}q5^u8)x$B*)dCV!gUTS#!4QOMUEs|+8)j^cUCfPwh#+>cQ!vpuAC{0D2T zsTXg${_x5jpcV5j9%_qsPlYZN(D0EcFK$#eH{-_G{Gi`yl5o~v8$f+hc7WZz9BU)@ zNVwFON?x*MCluJS_bV;{dgsmhad-7C{BI-~vTbsMJEaIZq z>lSJyD))X`x7ZxXLu+{kr=fd<5e=^dW3wWOGZB`n(5_6d-&~R;MJ+f1WQrayEpl@gIiD|FW1AGu~b%&)}_lohp!pR8>IzeDoI=^1!t;l?Cs5lFaplEiW1N5z( ztiJ9MC^Oj4gX~JCD4+B~_OYfJa90%^$|SYo4x>eibvvFU>>A3g@$|ncYSUz?Ch7Q| z7aE3uHUk2ztL!s5wJ~ecSKq>!9(8Lpb@9U_;^3t!iwU8wy$w!(d;Tue}yct%-c@c%Na+CTh?zk0(O%nc3Eig!=e*17Lv5TH!reJ&Ang_hr8Jbf|cJwYex2 z3E?Lth(EkFErTcnyfEa<)jHjs+phNswlq-Tf?6qq_*b+oLiY5D1Vc}cb@kte?kos8 z`FNOr8S!G^rO3zb(wknJJDx?*#HNbi9jlITvecZOeOHiSQ7ZGsEFX%AORP~za!`pdg0oS^vwr+7{7if(^a#Tw}TnO&(NZQ7^B17~t% zs9!8H=f>D|o{7F@Fgb-`*UZ*x4_FCOa!imp=C z_;WQENLV3g)w)^xT}Wixo)y|Y^Zjg3v?8G0p6t z?Pnt&e3Rk2Y;!8!H)*NVOHAq4O8DD}m`{ z!+CG;nfJ>Rq%=N+N136S8t(gtEq!nK?aNPxSZR%= zot<`g`DSRk9vdIKYD}~~qi2rUa5)SF$@y3DKA<3q+i#i8vZXwT(lA&{m{525Lgg-c_al!KqBm2o(1=$4D`cN{(~0k2fA| z_!~ocN`3A;O8l^9H;TaWkT1E}s3}rp30z_ndk+3fV|RG*_c3mk2v;1xHC(WQsubRQ zoa{SZ&Zy?i$R(e*#NXEtcmHw(ta#+Z7hEllKcEiy4SA$`pS8+%M1%g^nWW_6(y-Ov zTxk+7hWHbH=@8qcrH=S)lVvTV@iFRMJ?>&N9;1Osm($>qt>=OZch+I9MLV;{aVMA1 z%esN@r_rvD&&J8iB}Pi|*na*-aY=SaT@Br%+V1YM8=FhLk^cL_c=e4fflUphAkon( z6D$)6;yjBW49qdY-+S3^dXF_8(4VPhhE-C9hZ;*6rRh)=!gpE8 z_K8%Bh+Yl)zYX4;X`Sqbnw+_^`0Z7xRLb33v9X0avu4hKv*~t|+iWqyD!AghZYSBK zQ?$==WgZQh@l_FxlpnQB)U@N?i4*;G*!+&lK3usiWWEp1AkY%@dF?1qzk6qb!3b$! z1?hd0{HOD8D_*7s$G`j!3yG#it&s;?g5c!mC@J_)9(_%}pP=r1hO-}SO*K+Jz4$Dg zQV276j(uWWNWyGho-k|P#2Kwy(7^lyG@@@xiOv*S=R^9LEh-YDB=0@%6xY1MveT#J zDczQ@C^@Hi7wU{-Ug=+Jq)eJq zSPC8{z6@F}*;(I`OO(ww_=jC1eNQV9rG zk5b_@WQ;jg5}Eka8584EMpnnMi8F)fG1Kf|&zjB@0*DRMGteT#OMWDHDA=B_$J)HU z+1K{^Zb?&ZXRO;qkzbK3Yq2@&p_g#nqD;9pO?MmiBun@TBcSUT(7GOWi+*okN?$jkzxy9#^q+sjsk{h0Ls%k}& zE^W7IwADRoB9$2+O=9k2soBkoIw3iopQ_<)tIsrDZ*iU85*n5ajU-Ou&uO)h1S~hO zRK-BJ98Egn6zv5=EPGLLVPzP5`=m4}x=R^W_l&eh`x77d6%kT#K4T6|K?ApaatTBV z7R7`qCn+rDV4meN2Y;U|TH)k{b|zix9G8RR4~4NlB=(E*%z~BL2A{;Vs;zFS#Vv}( zd!AF=nFH_9B?4iaooJ8b_=d&QJjZ*Uf`*a!9nE@fkXh5RsrIf6?FO$T*$nnL@;!sV*g{Ytyq!>6dQX+y@< z0Jg0+I+t?Ur70sk^owmuecS`yeH9DXH`T#_Hf?By%tp=!va{pW^jdkkceL2F=qizH z1P)EKK6x#z+YP8~P;`XA%1jyJWb82riL*OBJloqgms4dqRdqVd+%pjj+Z4@|%M|xz zt#S-)lvSN}cBAdN)p8oic=(PUJDr8* z1xYB**yqCsDht2IwY@x|N*WDd%qjz3`i2a6Z?nHC#Q0)Vso&eL8r5?JM@<6t2 zIj3sJymSAY^$*l5P!1MtTq6c3K`{7L_eSp)QLxV6!XHFqe8T(fkl5RVF-)_7wr!;z9!n%(8|q`k_vG{!vh-r9f1(I|aTlymPpv}5V-qiD$G z9Wq$xVOVo`%+mi(SuUiA&8Qn zTsXnbc~EFEk9{I;8#SZ4n_-W_#4spV0k5Pb9CY~+C7j6jbjS&hDK~Fr({yeAv?cog z0C+%$zh`$3kj%ntmdVa3$uE+?64*46YMOSt1aoM&NpKK++j~@zNgT2b!;0t#>`QQA z@<~%6BzC4ly5=H?8yz}VN2KWX(^+}U0c9D*HXSMDxF*>+6b$0cfVI8<07~8mwPxya zvDAFEAG;usPg?0bXMVa&pxq(reXEt!??m^}x(*!)AC)vj$~unLidH$?i;-FP66V^QI9P%q{J9AXA@Og3aDFV1RtpBgVo&t=^?* zg{B?5P;?MlT(!K%1sk}>LjWjY+ass(yeSI6-vl16>J64VU zo)XV&&ckr$nuEXwBqgUKAx%HT_bsSu1#NS*5m-tL5yV?D)1q1w7!Mdkow zjAL=?MQ_5eMQ%>1fcWDznQX5%t^1&SjmPq>;&VvWjTSgR(aG}tPh8U4S<7)YRY6as zNp)y$86dD9FB$sQw#Lx(z^pRuS-r-Kx?YN99Ng>3(fmXjzC|#fB=rffmVTzK~{V0LVQ!sdTFotdl6< zFUo$kX5!dd!L?5YrcS|Yk))40$m9W&yNZ@2lH*SjAVS2E&svh%R9O%>BvZ6K7F(%7 zR|=WnVz88rV-rup`f_<}_luL7m&`@fU+kljG0#ep<|oqP0Z#9wL#IF5t_w=LHVowV ztZ%8ZRwdM~WRevZI8dXERVye&7f*7nmfL_2N}lpDtY55AIL2{S^=%0>_+eFWOA($u zYRW50P(u{X#7QP{GsR=+@JXp}xtBZRl&AxyGgrJqh7GG9@Mkq^L?$lnR%DYvTINFaq{A;vi+4oUbMz+>NbgRv4F=4LF?9;HV&OBSkM$W z7^>EHCG2Hp?53oK^a~_eKjo;+MBR#sIMklj$`B3=t`z$WQySmw_tKRm(>xaB(=`|c z%#p_*@Q~GdTz_XW{{R|*4M#CWZB7woBt`;T%*H|On#tF%n@pB#du$Uo9QMU)-8h!w z6@T`BomIH8j{C$n9)DQA?t9UDfv@3hFZ&pzn$QUZmgkYd$paP5OwDtt+@+D-6lWl} zTIjwa>JR?_2-UPt$L}K_g>%~6KW3lH($5kqf=6yC0jaENAK6W3HK0b6LR5oUUIP~P zBK*s|NhE!JIjOHaKP*~G+{qw)g9Ku;{{Z14gG$pLW{j3`w;7-e>x0f2>V+eX2RT0W+rli*zt;Fqz znF!iDR-Tvsip?^BUDSpLwra*3J0A-*Y&3YC|X1g(!JpjSv3U<9}9?fIXG9LRstF>|}$~v#ICX?X^N+35yIZoX=t0pdKPsWmJm(x%f-YU? zpV?YmEqpTfU`Y7vPaIWS^jM&{OML8!ay?CLwZhz`v+4{QHID>(b5x&C`(C5x$NvBx z(r`rsDd{kcNx>a)h7*8-k`I*iBx5H&0#&p zidJx$?7!21M;!pF^IQ!+P$1+VTDPc8=IV$cA0Y=dPUlTOf45qwkuohtPdEa5`c{41 zdmJLO1tTY#vwp-vc5*fWD)xXR4?u1M=PDcQxPqUaol7vZYYu#S$4skR8|l)S#H9v>2rph?irv9D-nzRK_}}< z_Qd?sl0KCMAQ4{{VUO z(h&QbJ)gW8%~F;HmQy^LG9EB`aa)%xuW!X06Edo#uI*Y#9~L-oj*@uWZsSBRV^x?0mz(qNKUf$ZwF* zOl55*&CZt2RdJ5ysoaqjtA+zD(zUPdQ%=(YM}SGibNcj+{h7Tpla6cCvCDHeO_o?M zngt)dA3wGay>vQ#?)oUr-+6LA4 zjoKTJEqva%;Z7@}@aoNRVwYFEK`9|}dHkxJ`g{^wtg9AV9MxOT7LgPdF%7$0fsa#I zN*>cjbivr_Ena;(>^rh~Ey($~{Hsph7&S}G+(xddGB+-9T$ZC}bg;uF=GsPUOH%P$ zXnK9QiE`4oLUEqd<4r^)xwkyu;{LU$SorPj^!eq6&&(hyJ_a%AUSFu%-#>}Wmv0Dm7@GDTzwTUK%+F5PN{J31^wo_>tIuYE% z@IQ;<(%}oLG~l;Qs9X70tavX^O-6K>w96Zeg20ZoJbp@zyy=O75PpKJ`( zeHTlH!ZZOIBOg0h@+xcHEBjAQxQ!&n{NQJ=73Ni1n?)XH;(v}dnr@MB+C zItsizBE9FiH7ZSet7C=nUxqATy}Ob~plJ#m@B{ z5Ii(>Jz8n3H8=u<1V$KTkEL=;r_X3}aTAZiy?A0YvB5aI-IHrN)KS_Ye$pO6UYQ6`?Frk_*U z{{Uq_jw|qA$Ff>@^8WdB%gDcV8Y@bIM#vv1>CQQ?u5Iou^*;#PUdQ{@lO@J8w!b`~ z)ULG!7cn$#EDiGfqqjBfKLbB%O>)v$^q&y2No{$BRPsP49*6O)H}ax3E^AZV!b!T8oOG<2CLxtQdJ;4vq$qJz;+eo*Nv}Zx|MlJ9*-2(^ISZ3 zVWgD~31z_i>Kl+}R{MGK(Rn2~H4lY+Ne-vs)RH9z=0FL@T+&-=9$u!lx`@Y^dyH2k z5vMyReJTsxJS6dpn^{Ie$hic2gIw2&J`~yOsIh5|_7Q{3Pz{LZxFCAher%1qgjN08 z@IIA1Q9!dMeei2rvV-^WN2X~JaAmW6O5@b3io4*?6^6Kz`%)d6 zWx5m+$hei5a6VJdHS{Rch4qYUZ5WYp^9*EH8RH*@`X;G2{7&u6Yz{`pF^v0xSxGoQ zb^L@<@K=en9am3zt>o5#Nl@2$+&Uuav6 z8q9Bs)(@6KzJ!iXHRsx=#7%QdkImE>tgWIxTvoHLBy}Cec_8$rsyqA3{D!qVzZvUG z;#tFxL~KqnxU7rkh8vhylZfyzJ*y{6_=gUw6Q31sV+oP$#|vCcw725K!>`4+%j3=evkUR#qtcVayv)nd~`(J%^drw5$XxLs`5e7v)C z<29F|$8A4`=6iY7nP%u8>sB<|@i~np?0C&hNLV2G$ws3r_XmFipy#zv*Cv(7OHjfcRUh{6c*{qBD% zx24Xp!~}T+jC85zxHs0K+EcU+Iik|lWrTTH;MC3Y2`d`5aI6rAx&A(#>SaWNa3s!H zWMF2Sb83IG<2mRBThpyR(2DYdk;P}qFqvKP<@Bq%V*dco&rP)HVOYmXeX9f@<2|Ub z#;i*6m4qIBu~u~ZRI`w^-Up^Rt0`(8Eyy{hN2j&am|}1#sXLBQ(1vX@`)cScyby8* zc&$r)6Z<(9CRNJ}0xD}u4=U|R?N;?a^@!Q&TSiRgYQ^si=&|YSP0$(Zlh5l}y7kCy zS8T`kL#8>amzv96X{&2#{F}VK#`l=O% zOS{+9CI0}A3HdzpjAN(NR)&XqlIaijtOjw68mW13$)+u&OVf;F-!+`2Vc2bie__$3 zir0x{pL%nFw~qAPUS+jyvvPmgl(x~7pH zw|wvgByJ2cJJePaz5H^diX+&YvN)-=7ZN;3!#salwSR80SPZcqjD8- z`qimu7DShtd_vYEk>&Lo8^f5^&NkI&sY!q#{IsSrxYa)0456YM*+tCunsGmAKB5FS?6Uor=;;okMy7b_s9PLuA1BmJ|uR% z)UD#w1|TqRA6yJ^RQx%mNvLaE01X*zWS)Yi@%`T0*c#ktY6Rl7d zN5gM2{{Td|)GySOfp=t#4zziPnSaHC(?=FIx_dBV7yu~XaacNyj&*A%fC6r1NR;<2 zoO4k=vigP9#r5buQors=90fdaT9L%qg6d^EEm%&Z^cd!y><42V`e-gEVvb=D z{gCOt8M19p0_B${2X{HEcD9!=XsphkBeq91F1w@)!Dtb(W9$uU-RiK%V{d7+1|$MM z8aazgsga^wc{9Lom9~@DZfjolMW1wTSffZ7V~_@GM^Q^i;COA&d9V!QxT^je(gQ7EIw4~VX=aKg?Qm5VUPLCyzy^DSpczws`!cQfx6reEBR z-B;;d)$flX@r-u54uXo(w5BVEL7$YK=CpiGr41ud(=D{9vm8+sn1Q?I$i_`*qLG@4 zY|gOoQV2F_(JGCDcN>!H$`Z4XVD zn2(tyxzEe$4L`#E9!*ohQ$4!vxnMeQXbwbj6Wu-bhW8h0qGgywz;b)%AC*l#oCe!P zx3oJ%>_oZa9eUQi$Ao;J5?k7ke$VBJB_ z{{Xk|QEGDw=F^@JmP-jtjDNkxD^%`g)sBiS8Y>M_TWd0`xMpJ907YgSA*or*AO|3_ zsUx_p5ed{`ZH@EYuzkSv=aEnGJTmFgTIsra97w})13!D-l%aNK%+5_MOIl9x4bKY& zY*XcLGSdU^R>rBNCx#+uEWvs1zG5@D@yAN%^(1)QE^y3w6x31^cOtZcIX5i$sy9}a zc9$%&u?>ybQQECt>GHvBT}jVhty9x9_PCx&Z;3cU26(DY#HglMz7G|rpJ?R8^}+nA z2DWR^A+sTUc@YM6u8Fo$E`LCKeJ5F zCN`d!HFE1sg(EH)XZ`B007;mJZl3gW2eU;hdxm8`enm-PV;sA{2lS!z@=Ey$C zGCjGiZ6@3;s^on5rl!o=u<24olq}(PW1eb9((Ils$@jjMQu=3(<7<=BqL)$fW5z(u zYPB+QXrZazlKxoxpyxH6e&o0)dQ`K{B$?Dx{M@WxTG=zdSG3%6ZloDIU}ABSMMKc%z`$SAq5g<3tJb5-R1#BMv_;;u@bQs<>olo^S~ zGzi6SIgidW_|}G<0VHo7s>B*-bMuO^_CF(>Vy5FJv`nxH2NkOvVIldz6`!X>%^)Nk z8q&DJMfg#0GH*9VSi|3~WL!u*{(kjoT+N0#&P_uVn#{$IT5C}hSnm7ORg1((4lzYE z2QlIih|_z78R||eH(0ubbm-K}9ta=AE6aaxUl3}RJ`wQ4Xm@bUrH6?%%V=IDxV1^V$qoe7B5X#W6a@o$AZQKMbi<$ld|3~MC+0PXNux}n%{laBS|w|}nf~be{p**8%f)}T z{{Y92hx#Xnd^6&03&J|&lX;qz(Gfx;SR|222>Cf=3;59tHAy=)U~O)8I)1Sgf=JiS zjCbRf718KEB?}Ljtrz|EUmE!L!qRwbYPuwetiAQOi(=5zQdwK70+ZJV@~&E#YLwmDHm6ZGdfVN-&4fVo0<7u{ZFg#dU=Naa z)r}uYfo@Nl;}wbHZ8j?jg!ayHyOEyN&UBqFjp7S5vyI_w6a$Kv;;)Qv^@faewIz6D3}R((h)&ln<`6F98~9aF;kLe1j)b-f^e%R*_; z{?V2)YBAcuZxx9L8Ad!;p?HH(`*VGrP!v6KD}?d)z`JQ|n(s|$yz)W79P?PpSJ1^C zq2P}kTWeON8NB8yK4N(_(3yi?MvyVXj(+eME2;U02c&Pwci26`fN{P@wV0H0=0~pjG~X9Fa96H z70KKiucc+`o)LpfX4x!?ZhLJXEqyTF3$xUsi|yW6+D3TxtUn$2Q^Mp3uANp?;d*th zno@1qn8_r3$v%a3rCx~bC6Sg+c^WMt}WP>DRvwBD>Pe zmR?zjK`Kb=T+fHEHG3UoM)2YozUyP}S5HHpTb`E(?1L%LVZ7FF?&CAMOhTfOCV9!P zS@2(iY`j0=JBvwYc?2+=M8IJ_l~cg~01z(jv>2hjMk){vdF@v(FYTpzBgz)8+DhY!3D3_jWfrqM~V-4UNr@QC+uy zHJgoY*<`x`9B@?D4mLMC%^@SyG^=vM<|s2%_1!&eoI3kfmxdM5Cc$2Ff$3P%L30+Z zBgl6Tew5U?MqjY;WcGIB?5YS~z0XSLJWJwM@deh>0+4%Ewv;r}362Y67^?4Nk!DFY zj8<}YU{#T1j@ZP2O3XM`;5B*Qifwf5YhMS%5sm1+Qm7dK=Zft0FBGJAUuR5^PSQte z!q%;p#uvG?+RSosjGEE{I6o15IFCiXd+Bq2@O;tR%fbWo9M?N}bk-Nid#T*bZFMgY z*r3c`H*EFdy&B&5>Y7ZFUkn^~tlNm;f(^F_tS4M&0Fjzfrk1Nm{d|gvgQDuP%dR!1 zxf;QGimu3~E3}NSKT1tb)JdrpC+_sB+RlOflMEKOK4g#wEvLw*EexdRG9K%n(ywV= zMf_eyvm%?Q_$#^{)tk(>ytc}O>sI^Nkw%x^TZ4`#$MBE?vK&yTS)SJSdB3oR(yNn3vCa> zs>r0B+b}WD6{IiJ3{4luzuGtJYWM?o)6YuuXe|~vV<<)$L9ZR~9i5lNtE=lt8_Akh z`A%>~FnfI~({yMpwB0#vQJv<1?FT(-z|*+5EW)foWFSD&az2#(KEhkZR-H&y^{tDm zXSIoCwc5Z9xWy(lxl>P(W+4=Cc&!!D+9lqUnoYgM$Ub7I&$Vml`b)(lnOS;q`BbgS zmd8H#TUZf{)9xknZTEXpTj|EgvdnoVtxu)nO=e7TD`=e3GN$nqT6UX-0M5jKf0bzX zQ^OPL5Sz_hlOGrcvwS__n6*7aeb_sLS7EB^V#d*JY)3xSr6Wkev|__eI9w5IOi@Yc@Q;pTnDTg5hb}{PcSO7LY zIISB?F&?4j+>es0_);KcG5hmff@#oN+F%UUPNj{hs~9@P#j;4V+5k3sRb#3RX7V`@ zVMzn>t$92>1?XZAC!AGnAH%I}sXTIkut~z2l|Exq2?Bp;MjT{g`qbL}!d+ZL1*Z(n zhWb^T_mjfY7_1Y_6LXwr+M%@5#l66iQask=k4km|VW9nr#${}p%f5y!BT0r=9JKg9 zOp53(E|%B=$G0_^s+HB`jZ+v54KOlwdx3W_8fVHm=}fus>e^a)_s1uS&`$~#)y%<$ z-1Mx!7jBnQM2wOF!5QL!DDM$GbHF%|@%*bw*4>unCOvUhG`%Cukwk!CbRLy!QB$Ok zkYpO3a58Rg!fH~Pz&>aIXSHWZD@S?fbBNBt`0-luTZ`?oNygr5Mh_21b7W;g4hCrF zU}RjyxW=o|F!gi8+E?36!yoSot!Zs0p{+#}eK&x9mA!MN{{Ur~r8xp7!Np5=11H3m z&Mo3qJb9Hy=Gse5j>O}wXzDg*JvudGk|f_&n$kT_MmRq?1FzPQjLV&D`3R>R_cf#} z1lL+?WZ<)ZN;TacEmur|Br6$+gPeL+eaGANyXfuo54mi9a((`k*5FpUyG!j-NaY#X za98jKx?dGUwt7{yrKSU24WCTbr-%L<$pfv$^ToSvPaM}h@fZnwNoxu=FzPd&m7vQ1 z01<8uhoso)=a!x=#Qr#^X!FIR_;TY)MH{D&1o~AS15>f_#;q)RqR7!{(s>No@7An* zWYlBuR-0umiyO7Y{N6-^x~|;jfH}+0E@5w_K)k{Nvkv8Xu8UZ@iZ2RWLZb{IW&JCk z@aD5FnWbG>l@BhU!eDWdFmu=NsXS-mrq#44ukRytT=@(K94{0Bi=%kjOE|RaJ7rUq zA&EUYR^FMROR4HjDd-fQE0gd)hAq5vcYO|)SOV+GJwBMOs_NEHgnk})We+a)+qfTJ ztpH7Vax{ppE-nt`wZX@)Z|hcd%V^`avD5*`k&};C}OtmP{*c_dxTeGN~n-N~rx z?P&;T?eG^Z*jAP9p)`?O2thGfCzrd|CpE7*l78{a*m#=q&iU-;7-G22PZfczcz)&X z@0u27o=HJaN4T!9QJOs$U5aaw^Io@=k52WaVPhTMw9pn%v6F^9@H0m-sn5Y@abu|@ zI=X%Pa6bYKbXN9|cuz)2Pu!EBBd#kpO-X!5<5@hS3R}V>&(k%f%t_|} z8p8O9EqpuSOGML&-!?;SJvpTj3E`btv}iRs?zw@k3aCA}seCJ?9~SB`TUipX3vQbo z)byxyn3G$uhR;p=uAAJS?^eHqZSHhC`5=f4GJsfC@iLLO;V5FUz0~dX9)8U`BxfCg zrdTBRK0K0Zpbe}_tPXtzPbI9nbTa1z%-g-{tk5;6$R{!k92&M@L*pyEd%qc3wwOzu zt+;+Q&TG134M!|-^JcfNZDY}6`%)dwdB=LCX=yiz!EHor2zT?|kcqP z9M{P!d1TPBM-q~x(L6tD)h;AZFp3O3edfhgOXH^6%8WM|n{%J;oKPbElVBlyOU`Rc zP=IOn=0qUkxzn!y0A<>d7F!~-qSmClc5+*;a7{EP6QG7+tOGC@!Q1&(KZsxK=jA!5 zpw$?bBoI1QRn5nleVmd$wY*Fm1#7|-lj<vADiD9A>qye7Pd|NZm_d7C6p8=h}&G zB(0$wr^!GQ(x-}Y7w6)kwz4u@7S9xFSA`BS(vZdbKxw{8a^7sY*xdB0@fWyXlvUe% zOj>2Y-9Uu7h)Ld-5@I90L*?yrlU8GJK*wqTmhA3>p5l{EwG&3<_5{>d&$==c^H5n5 zje<|-MaEc3cABvd`cVM$Rpem&de!|GO=z4uXBh8LBUZ~wSoGv^_poY>+2n&-ETz6+ zPtussdE7QA0~TE~%^9eE&E*n3D_ZYO`z(8q=YLwx8f(0S=Zw`YfX3A#W|KV8TK6$| zA1i@HJ6vZa;~xdv-oh=lNMoKdPs;p?`PR=yT^HeZ#(Qf75Wx-TSmRy-jH$r<>+3t; z3?;SkUlYn?amezU9M{JG03EdN9C%B_{x#9O6Ke$8KZ|ce?t5mEL|>Pq1A)jj^jKfr z$@4SLb5q#n{tn*U{?6annzfVOS;8f~w^;8aiZ{UrArt}u1Yvqt zSK_adw6Vu`ZUMkeI>qNPX@IJ#JkB@BCdsufBn>}CPZ-S=KwGWG4 zF}d*zd?~fH@hiaIG_`^`t{~qkppR>#f+QeE%ASLv!L8rh55YbcxbUaI?;YrR)LuIA z7NxF>dyg1TW+1)PqmD;KS0NMSQ0|}w1LipEURUsk_O|$^@Z-b2Bhc@39}MbxH;Q!= ztIm_@vP!~W{$hdiV{YTnioNkm+!l9AiFXHYjB z=bG8Fuz7FQWMhzhYv(0aF?Kx_sfXbGI&C7^t?v|&ymQTTG3)V8i*Ic%84gN{yW)*H zEjLXvTK@p9E8ORr^J{w>tv^(f?sjpXUX@B*>q2EdT@Oe5V@kjv$@Qyi6wx4Q8KhtC zlT^MQ>sES=yPZ&t!yOwH(`dF-Ot!0 z9&jOtL5$|EX}%Y*)Zmj*olsmNk}{_`u8UF9AdRBAjRUbfgUF{vBoj;tRbB`ocomDS z2E@~6%-<1VzVV-nri$WuZIa&}T9bfrRJ=8-+*{qrV{>rwG7vVCn)OePKMzw^y*HXP za-@-f-@E8Y^{+Is_*-$|N!wf1q;^+3ikAMBtSUi}<0C&+@m#UoyacxyuRQpL8eC2G zo5_k5JGt*(u-cD>b-3PpC@*8VQOS4tPw8HN<39`7_~P`zC!Vn(!7;u8{A;2W74$Kh zan*-|zAD2mlr1KZ2-A#_*1C-Y#o8{tDTQ7Idwz3_Zq0eU{{X_flZ#&qi53vNv*eup zYm?Rd4dM?6-}%<t6CX-md4@z8AWK%3mZaE-}Szrk`hXBD<7R^sf^5 zFY$xRwt@|13uFc1dChxG=8-0+rNeV!4bsOr>$LIs;=KCMe8)v9iaU__S5ucj)@}vK zEUzc-@^kXnN2WBoSBV_1W3+V}Pw?k8%^eozJNO#)9Z?g5w2bpwnvK=wxuv`sVT?7n z-lrUs)0)MzsYx@_G<{L6WL7eM?oL6g+RUid#o}SPhpl2Gakx3)!;w&gi*rE||xlDQqOlQq@RcFy0eCyT9ET5YsHG2r62?DXj&(nPk( zO2{%YGg;!qUSF`BIY6Y3_o@_%9Ii5%9@k|nDgfxnLFo;b)v$Kh1(*k9bnmftePfycE; zsA)b#1VT>d;PX@Xe@c!>{{Ya7d7%8;&VIFR-2_-`c5A6<<_+5Mck3gDsI{~{KFZ=Ve9$?UMaFz#GqX=<~NPN zDm^n<$_?tbE$U|5d_%X^*UhrN0l-rFX#Z0#g+zyT4JU_%Ud^`{5TsMo!rTUU0_ zbe5LH?#MV%+lujz8u(|$J~g;9p?0_a;h6{NUc2IZWw+F&9&igJSw&{x6Pn=sEAZ!3 zUlUyF9yz*@X-Gjufwpnpy(%(Y4tmt(6RP-Er0d!Sof_-*VIc?xe8p}t>}#g+Z`p6O zTj8`|~ z4*+Spg@WB`3v}1nC**U%`d1C(Hg+X#&ilb17h|>1lG9mbl2V`~t;qtjuP^NN9~L%l z6`jK2b6!hja}|!G9jvcBb97%Zurc`8Rb$~P4z~uWr%vrMl{-u2c=oIIT3k(}dj5fU zQr3G_U5vzI6$S5u?L1Su)^LsG{_uh-#*r|6I9y$(ZhPz;epRjEtqrWDmg4ttGNun~ z0&`f-(FE>!Jl_wleja>7w7${NlG0fTVx2HXE4|gHi^94q>JujUSxlV|rfY9oo*hwQ zvIwOj`BjMdy?WLCL&Ndvx)+mtppu0E9C3<{VvbwjKgLz~l(%tCn>>)XBx9|1w$o3U zRx-^HkdJP)%=|z2X=&hjraEf63BV1{rFI%zA7(8S87RkjCzD0f&=+#erR=u&86cXT z^6ugo)z#Q%-m6H$;_GC1+`p|qUbDH6Sh2QW`1hI;?s3j@*waxPl4Wlb&AN0J$0t3$ zm19gVC9=mhc@-VivMk}4D{;hE&K3%Ie)AI0ZDs4R2 zTFEWQ!?4diYePd-x4C0?pDzb)eQQs|I#s@-;r5lu5^cx|*d1#Yu3A?x{vSeSy^-V} zDb6demS|wK+dcyyQCM09lIZ$jnm!+Q8R=JMx&F|HcBO@ruwE;kr8zR^+J*3F`rrXYPPfFc7c(Z9#sUIOL_3clY42Dfa!(?5n zpVO_5uc{Z9<{2brr@W6+xPSxX`78JEy#92)7m47wF)?2;vPOL<=0HuXPHb;BTbvL; z;-$VTEr4sY&O6nMy$sE$%PiU2xFhnc-xJ89#Eg-*(z0o`I}zGOt!m_vjB!uX^@fH9 zfmoivRXs72QPYtXwv;(M<27qe(gYVCW43YXX>zdTCD7;o$h$LLE--gw*1gpK0NXk( z*^8Eyffbj2{{U~ihTZmv-Ga8>xIXov;nip)y0=baiGrp^Nf_@`gO!x;E!yi(S5c9| z{y3ztw;Eg9{jv6|kC+~ zSk20-O_V7;rPwD9bn6!7d)|cTb4fJshAgD0 z&lT!kF`9XFs~9x$v)oEp6pQ97$8b7RTZODo;bzozSY&&tpJ)fG3gNt6q}|^5&KT{> zF=+q?JuAD?EiODcqA}HBxq?Pq0_s#`{b_tL;W;L^gHzNZcYWoz0CtQTu4E#wg+3N( zo(Rw`_ zQjIOc?_7+WV;onSd>Ykf_)YP1#Me54B0+Iu8YWi*A;~|^j$|V?+rnN)j_zUF80oI? zu=L~q0Iym8H@?#?bo-qy>NvsJ&ZBSfFs+{s_?A0A7i;>iw(6r(xoKd@!hmoGTH^jG z=-0Oz{k6@$$>X_^7x!a#8TP6fzwoEQAMlKLF6&p)V#k(L$W(MV;-tCpo}cjt!V|sn zM=X%J>bX2-y-pn}!@(a11)bcG`I^e^DqL<|ymal>ym!LB9JJ9PxwX@Tj?=RoG2PVA z0(g7E+Etfd447I+{q%5q<3x+#}3FrCNQ-hPxY1vrkyi@TDQ1Iu$ z?M_b&EVE5}7TDEz$sF}HulpxxkK%s=e`$D-2~1GtbZ?t%nCNluS{k;Ur`r4>v$d5} z%B8%Yo0d4|KDEgH$R81#;px}3jY&Mgbv&~T>yW&Yf$hyG#fn;;E}dqcJMjj;ZKlL6 z+R_4Jz`@QtW~=z}Q{bI9Ow(CGxxR?X=efbfY1-c2{{U*wt!c4FVbqw!1S!GC9jg<> zcKWA}JY{7i_>Ee^CW7|6xq~s2cOahQ+N97wXhHD{!uAluV{`Va$bpI0 zBd`wVr>1FYS=4+bn8T+}b$u~uq`7p-IX!9m_l)4X)#b8-4{-+o0m#i`X|_;kOEtEY zGsen>=n0?xS`nW8vIiB9;EP>DN%6!QuZsM+zqAfWjC{O$espRFYiWJ|00_pV6f>d4 z;Mz_)7Ofu}{5*ntXjVY3Ao-Yf8Rz=dtwL)(abkIwY^yjZz~BMsYailI#J13NYrPiP zKGCY`%COpOUCSF_a=?2E(j;@D)vton!>t^e792c9+i&oivEbPZz8<)|zsH)ZoSwaF zS4q;_MewXrm*0CNf4vTJ17oo5So&R~+G!BOsfSd$Vy7Hu>089jyP7eJo7)KPW(1*7 zN8?Slw|kUtw5~DIx*G_R4H#PaZm5a^79EGZ7WSg**&1-5I}}~KWYx14wK%5JntS59 zi6S1^JW_a{S68}NG<6CbZ25T2TGxEdPX23U+No}Kv0lHOV1I1eiK1&Cnd5vN$2}*Y zI^FHXjB!J043bFf9lW$B89h!rP&Dk#SlDRSQM@sa^uvZD_%U3ck8h&YHQ>*U(Wzgr zy>&h$)h%>S3<+SCJB#T-;aD(>9;3BzdR45RBfT=~7gn-L%0OFo0F3&Ko@g(b54MLE zNhD)GX3G!us-~}`1(g*40L#)DeulOq(_2QKC@%;$@SLwdGiRPpdd9len)k%QIb&}j zRDeSC{Adnja`1`#win^J>6(3-6$GgHYowP)ZDz`O7AHd*?q8P~sI(sp+)g4{LhN)U zxS-Lr(a+*r$-J92Vo#-7yYSqaJ+GUpF5LRpXW;(;1g4dAFYj>n;qkN{at&mBXw{Cb zJW*MMirWW0oAa$y(lTo26|}R7Vq#F7b*oZF=@=t4-5*P1bL1}L2Hna}UEf;Pn?|{| zUH9R9kTbyN6grCLO<187!L^8!-m|8?YnS7i)xHqkuH7?t$~oL~S?gxUA7;Tm^eHAH z)ttr%!EuV4?d8*h_*7_;7_o7T`wDzEpScXAb@i%RisTZObCsuAvj#i*Vx$0;z$;68 z1KUQ84i4jkPR)hLo_{hzGJ4bV<&p1Ir6w7{_3Kw$BfzcvRC0>wd}+DCZfkDN`C2fF zMsZmd&Z0BtewAxWFqy{U-<@T0jf;6W0qRNQRZ?R-)fc$t4IvQ}81Ig>}M=}cz zv}rEnaXxma<25rzv9BOhkxr2=cp0kqlcos=^`@qVqS=$HkkgPjqM^T=biTAxY?htQ zZs%H(-sz{in9kVXV-;IKvY*A;)7;&{Qr!tXb60#7;UBYWVhv!IE(S7p4CcCBZvO!L z5=)CqXyQna>?J@3z1cgf9$ZzmIG-0?Y`&3nek1b2em(0m!k%`JW@~|;HwLtC7kq{- zHCW}h7GcIsI{L~+fj2ZtM_eAY!#Zw9WjdB9>pCiGdT}yMRSyknCg$92SeX}$pTApCk1T9OS#vv^+FqY5 z){OhfByc@Atgjh7QTSX%tRLQ-<29%+e#R8rmMnS2VEEq2yh(K*ng{@%I#o!hY;hKT z6uLIvWt$%@jz$G^%Kz#j>HxXR5TKP!I?aT=bA*3g@18!{h5 z#de(kTOB&syfGsnVovYf*o~KjLY&oxvCp`BYlIsV1lsV8#YI=9{Zu zE~%`{<=1XOC6BddUwEFz)x5Z+Qp?vB$vATdG17gh;nEdk2*Z_FPy>s`zKDxBIh2vsEur09jU9OYyGRwp|L&d8Z8M_8t)~cO@nDZ-d z2UvKzKe1@`;s!r?!O!VfJ}LM~bK$FxvFT&XF_5hI!9Rs-LvgM6cgF_d5(U!>9F=T7 zGwF{?^`H1i?0iXSYc7hLiU4OaCJFj_)#`-f?KC(G&xVg-@Ze2iF?MoK9@U@lv*85a z5p)}?Ytnq>3%iWeTc&AKQ^mmFfgAOJ6N4;g~wov#W+%>E1mQVwEXO1ga)^X5Y z#Q96WUkonnJ~>=z6J?^dX_y>;b%lKrpAaszd7DWV*@n?aJG$g%vc`>MzAAl2!N|Rk zw&L7%Jo8;Omxo57slzJCZeC^rP0iF)N^U{yZK-3#ddzqB)?mf4oIY#Jm}&w$CJh}kOT`cHdC4j(M)F24!Nvvi3CQ z+DOSHjBC#Z>HZ8*r;hqB?G-B6J4QbDHJ>vpLx}Nn6(M<~E0cVaMDD___LZuUFIl7Y$gnvAioGA1G$P%_gPrCVviTR~o;FUeZfd`J_mj zdy;q7Lj){pwV>y02hV2yI~Tq3&wg?*tA8|kXTLo%V{{yD@(xFnq8)z z+Fy+1hTh=ro+-e@8xP%5{{Y_Okyx6i#6fG~Xe~4+wlKs_>0E%HopjQxrO}m1bC$Ks z3H&u|CZ1w#paDYT91fMm>Rvd$@eSU5H*dZePFoGuwnxLezlvTa`yPvNcPvg!k};9I zvClZ?r#0xe-V@V)0{9kqY>lctdJiqz2TT6AD4ZU_V9=QY3yT1i~(Uy8W zlUT;?!X+EbtMcR9H4uYLe%ksKJZ<6KIxAtT>W~2}Bm)^eN#m_g;ZGLW$r43rZWkv2 zhRt=?9w*W~Po*u@l$NsGI0PdAQ=d^>2ah7w^ox|f)9v*2w2X#3Fb)S?04sT2B9!@$ zYVaP4_t2M=VK~KHpI6(uIrspPSzZM33tspx+DoSL9(Br|m11bV-!KRXAKvX;ZSylo zO2pRMdR$xyZO03)i7OVN-RAHX2JZZ zZ9KOEi&zw|pqh4%A-Fdg z=yQx!w$y*LBr>?>+xLBc8kU{%l1&jkv)){#59sw}Ks`K4-2t{OK~y0|LfWr40(|8i$ws9B=wnJvAtKO-MSn;F-@Ah2uXP$eOC#+C`GUDLcAm zrnuL?vV)mRo!P-0)<=i!X1mrTy1hhbkKOKTU^UcBYh~oj$Nej>;Yp=fh)KVd_>cEk z$NBWB^?Y1FqB4BbpD)^}YO2)ZgMv9SX;i`r^;>)K5yw& z^yik>!`82Ma+h0zbCcBdsevD0k$Z!m(wS(XWoTL`#i79`n&`gD(AfhcWZ-9t%{!a&86`qpLlgKf0k3(S!b zOWS#Qj1Ak!{{SBKOW}8gFT6G2FuIeOSqzRw;>QJv7^Fdje)R5>OZSiE9*1GBaojQbx z0n3IQl2^AB0mOL!0Kqf(iaQ%EHHsu^s$Ut#J*utm+Pnd-*jUM%(8e?U-MKaC`lgcF z#lde1ZCJs{GW@3=)yRB8(ysKKUdrOa6En1kjLtFv&#h{PXL#27X>~~C)#v$FK3rsd z&t7Xo;r{@IZuPxUE;Q)~3Ni*OGsPD1YC3|*(kn?0MZ)JG6Vq*U8WrkU4=YERlL@(q zYz%#91Gv_oT%I`WWo8zPHpqRelK89QpRwFocyD$@s<#B^{j7BSDYiZ=SMdeBa^6nm z*pI$S9u0Gvgz#(LI-25g?<5eER>nZaPg*P%J6%@C`(Do2ESQf^CC?plG5sr=m%>*% zUa2MChzy@auSWP18m{)Qxq6|u08w91?0G9DDKPz?Z0 z;fu{@;rD~|+gpv-1`CIkzlQ;vKh~`4y7ZnOajM-CO~@^`)A6d8-Z8VYlETg9l1trM zZ?hsEe6}Y5xA#ZAa~>(xqQ3Zvr|A~gA8PW@i-lI)sN1*{0h8nJ1Lz(jwMZ`!eEY{c zk6ygh&kcMr{{Vz?O)k^J>O@*}CNMziHk$4}D%)B^YYbLU#4eiw2tY7#>t1iGHP(%F zZEV*wol1Vu$aW80p4?CbmVO(8`sV4il05vfjE>!_D)&Lu?|f;X+3BFH5f{lHg?5%Y zWzC=2r?pt0b1wFf@J@LZ(D>t5w6QvT7b&+XM?jxsKE++Ii{{RfznPi_x z)LRn$pt?(r;G7Ir%Xl`+K=H+_nt=OOvpbEs8%zgp2j7av(0m82S@@6b+VO~5M8-g< zG@X7elNB0 z^k}+rNCuvK!t*B8Z1M7*=DH#V&ZVg?r5&ZTQTb)!8EogZKrPb3*`l5DEXSXmel?#x z^zurm0u21h!?3JRh`Q=q=`uWX6D7=M5)|{(6>N!aRMvH?T{}=|QL=Ax{{WZ&0Is=- zJT!EhRgnJx%Sm!L^~tS23U~@zq_>}2ksdw2BCGB=_Z6?J+rxioR^C|8*}ij@>^S`C z5?Aorq*_j(?f1aoRt1ie;tf+%p8G|1OI1S~;Aer?^r+*O@)W$ihyFZ+0!DsfG6zcO zFD+M8@XDBOrL}+qBkXdFc;|uFr2tp(cZalTbWK80iDxRlZy5EjE%2|xr|{p3ue?cN zd|OQqBy9kX06QKI@4(lhYJM`e(fln3_EG|qX9ZK{Z}+R3)vuQKOa|o2uPY2e58Wj9 zDmeUT8BOl)wabRNV0?(qah{-6oi^R|>wvZ}V4(n=)wQMgLr~K^DAz6_TXLnaTjnD^ zm48a{HKvoN2sC(syp(SxlK_4+0N)t8>AG^kr$>jEt0=2TuCee8d3_D`G+2rZ~JC#O7>fOciR&`-p&^SgF-z@IrLk1n|GOMxRAX$?_4Ig z3wV=Qjqg8k0L}+o*QINN&M{h8t4R^ZBxG(qYa?Iqy2#O{pcPbhi>&~1uV~hKlC84t zgJ%uuYe)M!>iXD=-XSBOr8imeEw+Vi51$mjWHN}9?D@lc`*B-(oy$w7*u!fq4mAb+ z*;dZq_q{q)OLH0SaC*gxY4;&?!;<_QQy{Z_Hhq$gYf61COG}2AD=0}Y+fGjgqt+Hp zTT}Ba#>D>sZ-ZA7Ox;6!$N~%kX%gMUn+e5Q)Z``AB1SGa$Q3kpqwH@b%CgBC?m6%D zt&^~=a=U3_A-ug-lItu}JGRqixod(1VorUkYfTzRERybc-BNe*)Dg~l^ry@mq$16) zc@;8R>`W8)Yj(oLEVRicxLy!*$2Eg@edgY@afak)r4CmPQZq4?fL!9Ww2d*ChGUL9 z)>XWIT;Df(=+(TdKv0f@yN>IBpQA1@W5a{8w}? zZ!eu(5M=9GUM7x2(CwsF%XytM?OYd#wHe~Exo$}=ILEzvi8greb4OCTeLG14+;T}d z#d7-gwImh=rI-gj1xMm7TK3}13r)LrRt|~b4NJuLVQ*cLJA2h~iH7?P1G>znpuk3cb@d8b5r|iZo40PSiMSY>Rl04mZV5|Pu6|r-8x)qF8j7OML zcH>-UjXYOvC5cU1;l7}QS<6#+=!+LVH?qIYu7P(Eo2C@x)lFl<6V0Y1+O&tvoRGxv z$KhUAXMJU-Yo>iR=2P<%^DwVi(7Z?g00{?&qHC87sh)>DD<+y|jp%uoi>%LtbtwM; zvgU8z0!|Kl*InSx8R|&w6w2m5EEUKdYJVQ-I&J2VZb4xzLmc9~_ro4Nx%*KjB{74y zjP|aYaZMaGB-7Cz_u+3Be&9!`NDS zSLP}WdLM)QUk&}VFkBL{qYN6xs^vDNEAD!Jts+@oZv;8^u3J+0i04&Um5Pkkt&HDk zy4!Yl1K+J@Ay?JcMfAJUkkm?q|dF(<;J|JZZ{g! zN7Ey>^59f=0~rMKSoW!LdvErgdPi7K+zHn{;;Y=>eWCol3NmCI0^rv0rny6y)@$Ul zVn&}NiQTi11yz$%hU##1+r+eg?$d01O|59@oIpXcV zpX*#tjI3=++{NVxif|DJ%D+mOQ|5Y?3E7^_;XjBLn%0(XEpMZZi980aX?0fAEECIp z{-kr7`IAC}QMW>DWsxFQ&I!eO@51ki5&e~*)Krrg9I(Y@I(BB9=B}j_me&Q{nMP{P zovX6#G2CI7r!{k4mfu&j&7m1Q@macmg5;XYS)!4S&|88lSW;ZAv2&iG;ENcpG?$X$ zgtNKGC$2GAwsDOQ#20WV*=u^9TIZoT$)n-MxHSDTNpH7);lz7Semd7f;|Q&8{5x$m zqMte`3-Q$PTyiES9jjmyJ$#k$u$uY69_u5XMwRlIM>1)*q?=%hUaYwVN8?z!{<~}8 zTVk4>%+kyOcc*C1>7g?jw7UNjIM8C6l%AL%k z9jbjp<2AL;rDgvB2}8#av_g%%<2?IUk$841<<#Xx)o*-^{oTW*Ht)kx>MwAMb8|5* z%RVwbl>LD|*`Dhs#}5n}ggSlgsQO51_Pg;4J%2!v?C(+Rw&lQVf-Au-{uysw;Q(( zdgF}Zy%+X#_y-S*Ehf|ad#Hguxltr?wi};uTOS1U4+VG|!Oq&+o85A7`;5Ctjfmin zp{zTP5Kp0NuuTJ)wFsD-5U1q4_4B@*V;;4X>3b)Boqx~#%Y(k>x%l7WH-$fDy)XM8 z!f9)1sZ9V>Y?fx@oMygT@dw4ta{mCtx6wHa<@PSZZlT?Blx!O#(p9G*oru= zZY`9>By#6!w|&1tE5yDq{882XBrdgCU{!LtSX4ICjxpX7ck4^y7?+-Z{?3&XbXYA$EKnTq_}n(X?tZh79(^Ar3w@%*0;^w_`QGuP4(paxlA z8&6?hNBk)GouhnC@R75;)~w!H1Eha9EPGR42qe3vRG1!>;itaR< zs|SzF@bV?~hBLl1mB(Y6@Gse~<8_b6?*M8#cf}~}tw;BSZ$=;@_fK@5|5Z0+VND8_nXz03A~*QfD^gGJutnn~s*vU7vS6uC!s z&q21HS>OE{CqGKLbEaNhT7?NDIV0w)dRK4SX%{9dITr97x82QGi$tF8=uY_n9PO@>!$ywoGy1bTPi2US^D^tOCSJsnD9ooLkjAU0y6^L1yTVOT?+mEF|Hl%D|k%Fivy&H*c zQM}dGcl#_LD=Th4g+6Oww%dzyie`_XwbIFW+1zq5^{O}5PPax9c(lU zp}DZagXRy;qr8oxUCZg3wV>W&+{qvr{_Q4Nwcz=nvb8CwZS%3ldeS|_sdqn_ow&|@ zt1>v6^6SqBVy|PyXw@}IB+Ep+k&4Ek8aix$+Azu_UNc#ZWi`wBP=XdCy0vWLlTYyE zljH_&ah`fs9+%=rx3@CRpqWn2D;4np9-V4iC~P11hV zelB@AJH4uJ7HTc_aUH)W7~{2U1gmT>wHtE}%!4%_iEb86L+tRNB%$d~(%9*GU9^&% zvu7FaQCrrU0}E%fV55}>&Cr`#e<9nPo& zFPJhH9Wlj2c!{jq#K4{i9DQk)iyj;Bmd!Z|{JHn*R(wrjZM4xGXkCF*kH)sGtj)_M zy^cVK<|e0Ah3^_0vABd|pP-}%D{B+IrQP8LNSW9!gAkh7GmhP*;P-&w_n(nQ6 zJiAxPIZ^%I1#jw_wY-bu+s3OL5r)PwoM2Tg3rbst^WiM3dCA9W0B)0GZ+?<;3r0vE zg-Ecw+}of8?O%bS6050M73$)%R3I8f0YEBlIa&3orbKh0rR7| z!f-RU6wBWaPdVnRzUd*ZQT@h1NO18O$cYqCoOGcI^6 zNyaWk3^zMX1fW>Cq%=kHVeL#i&L;rQc;6^c1xa54pDcvU0TG`%WYz~Qd#{KgpM z9CxllYn@i_;>FgTU_r2s-CVYMXF2DkXn;=;cv{-d^=@rtU-Z1RqjyYntYbX7PLF#G zQWJF~ZL`-Mv0HvKNNs8%x7se;U6;r3lZWRpP(ITv@(C9ls0t4vr?Byf()>4Z zsNP$!mT7|_J=KqDzwrmdaa~rHDo;G9hI*eowt!IABXj9@Aui{O7v)f->i6b%-g&TSbx#6z} zx5c@pxYVLB=}{-{(-;{Ydi&R3;XNYDMAPmxxYcm(85w$j1pqr;@tk^wyBglexQX}k z*j4Wg_-fZx@nqVLp|zu8%>iS^HukO}>f#R*_~POXKXKb0K3;jwE6_B{2e#5}k}^Zt zAVwX})KCNN@1wHtg^YI?jlZ>cW8HVJ6$#Pgo8lejp>vtwwqfOtp)**Y6|beZeJ@7S zQM}l$W4m@xPs&&m{Hw3gZa=WDF3zMp#MDSD-)231I?yI`UL2idGTwNsD!ib>6S%-C zdM*djxgQ$*KTQJS{{U0?VG_Zw%Dc=7hI^*R00!fwYTo#|Ke0w&i_N=fRuqJTun+Hj zc&l0wI=74D)9(zCURo9NoD6LQWNjzdig7S|o^#;s6UCaYx90p|)Ldz-Hnp>&$FTYm zwdmG&9vkrXn)VL_Fu`Uwpxl3YPZ-ZrReV$7yJ$6EJ{zmal@7vf7LQ)f`1C=H7Mk^yObE-c!Nc{ySufq@TIht@j^~O`M;e{eSHUk@1i&M-fiHI zZcq4htzBzfzqIk)#CMkPMI2;c#gm#{LrZTG>+1KBN8~I;w|^FU3Ithi7Ej_|3)&+o zjx{ID1CliIf@bhOe9y|Ur1L5wIIj(sZ*9}T9Vu0YqmZX#W$ zk9q*FY2Y~gORU^pTg2kgka;*KZtU}l=vPmI3rKA2;3nw+S0k=RTI}N0>}@mzv(sUT zB(eSL6TxAOVz}6ROyApb%N#N9orwVFjL>Rt+O@8UZ5X>nUioiY#?z;Y{{Y4g_YSRZ zo-@*+_?LDZvA*#9_cmIruO!xoY$3X?eLn+T#l_<3{%S;bO0G`f&PHkt4@Ofh-m$6z z7Ehf)7zej{iEd#vsc*xYC9aEWC-%c5O*k@zW6w|iwO|W5^?RJ#qbldHt5=r~b*&5O z*@d!4<$!usQ{twwl&z#{*y=z$Rm73kcEd+-W20ZeYA78-lws) zpI*LMCj_DAir&^9+egtv8Zrql??H=>c9YQYS~sCk+{*Cofop8cb*R*w{JHe}D^gp_ zPZ9W&$%YkOG8GJjecjzU){lmCIP^^;&hcAret-%aPPFjGoJl!WC6wf6o@+asSscH_ zT|(bav%7~&+J0aFU#PBW?PV;o1U#T8>026)m#=-fls6BNk$`y>l{L)Eeql|!1Y^BB ziKSvVqw{%AYVmj+D(d*}Tu04&PjHT^ri1rJ#`pPAM3etuNW(7Uh0*;M27I zHc2JR2F7Y-DLv1c;DX0E#c0I9CL;h)A=eh-7~>1v^H6Gfa;>)TIW=a=*_qtRbF^_) zZ?76x*^U9l2GQ7~Yp40SC38h;>F@fu zh2gQOD3%R3CH4XP(^$~tfM^FFRFMN)yV!U^#yia#)7LPsS9Nn~gP6y5T*O@Dw>tl?t@UwV+&`T}cW!wTr4Qk8ht+Wqk zbr~LDEC4>W=T`d7&aW-P+|4)}zEDZ0SnAjIS24uTGb2a<&rVHt(rL$2l4+@EeI?+X zL_M)A<2+W5wW{p4ZRd|#@}Cc1Ug_sD$l*WU>0P?&Fl*XTjV8>53c^u4l(Z^b>r>37 zC%Q(oA9gHrkF8Vw-}@i@g7mwYk9Q0)RcG+>$+`$;lkF?pwtlsm`uBHsVJ9B?NI&N8?ME`DfEEAdb55#LrS}mPO)h#xjjP;Dy`k6fxF$OUPl6V zM&z33^%1T3N??}umimf5K4y?H=B?$+qy+;&kG;C~vXBUMt+P6P~Mlm2=! z$fxSsa^G5*?BrQ4RC6dCIr>!#y;|-|fX}B|t*@vfKb2V2^*=h+1E9y{vX7X7wv$G* zw=hPbE{AcmTaBD&f;g*JemH{3BU|jOGUsPFr16i4((6u0UffAOFk5Cw{AxcBcmmVM zwjNfcGRG`Ds3+E@$k^P|{94vlCA9f}a7ImV{w)2c^&bW5Ou8v~AXEF$tT`R({-N-T zUDIzq$!8>n(atvsc*km%KiP#WuOXjQmN}u7voL7`ao>thU_B$@7sjZ(ccsNVz@(=G zX&|4{y@m^?VH}Gf2hi8deiHCg_;Ej4&?`ASxG?P0V z0&~q@@W+K_@lE&IwV@kZgPc1IV0%|I;c(_Tq47rd#j?6tY1cN^{TMqBo9T+|JTstc z9v!m#ZG_1Uu^DA$B=gT&>xQ|Z_*+hvSnPDi5Mv;!o!^Ig^Zx)7e$!8^!z31#Ht^c1 zAgX`?$F*w+Xf9%J82HLN-woefTIvw}rU>$4{wF?yyfeo7t>xPZ5RzDP-nV>1t=o8u z&$!Z&U}4KDuH2vNT+Nm9Pk7PaAD5ubUm#ptdo7w@pCc~u+Z9D*5$aJhpT4})@8G(I z{{RfcTl#L|n{iZLSPvier!^bWyKflu9`d551bn5?sVui4KVqIL1nIEPnj<+Ks`lY)-?lV z2vl-2=xZgpy{uBU(pOE?OC#h}y=Y0PTkVI2{uVu}He03`a>lhRHF(zFFUcO&)MY7L z$(^FQ3pIpo_KR{BTVLZUIB7ng<5@o!d=qWr-v|r+B&4aZusF{k{{W42dhN2uZT7u1 z`4?quuxsmf zxwu)eAyNR~*H`fK#`ovKcV_N5rgcK1DI8$?{uSoB*0F7)>8&okEVl0?&UQqlz{%sK zZ59@>pR8$3;a?Ocx8SWoEN5JnMg-*N*y6sR{hU4}Yd1EwGb*}FWnJM1DyFl97LL_$EoVQQqUn1E2YQO!Ke14jA8eQ$)ndYprc`TqDx6D3oVP8f3 zAMwTQo}H*@*E36TG(<+y6Sy}Z{p!j6r@v>V_^siysCa%KB1>oqa~RlJloC(9dD4~H z-$_|&b6Q9I6zpm~JG_d^!g}SVksde6B#~`l&rCIaH}KEJ{u}Y-v=@E^yFnGoiDk7X zbeqp4$BJHSeQ&{r7_1@0QX<@h zb_c%C!nBk<#>S`bq@CY2)B^??70N;zMg?B$lHtP>g;RLf+jjbdNV#`F%58EH+Wz zSxRlx7YKOAwPtGiK-9cGW1kU~A4<~t8JNB(@dD^p(8;A7?;$V`wPA~Sbxm0=ZaNdV zgY>RX#vUV<*ItWGftmI&Y<20yby|J&^Fa{WN6XD)CTxpuG;!S?eq>zYnWVDLmlyLX zR@y#VT?Ot zYw`j=12s!d@W>N}yuojNYfk$1b866Af&^o7dDuqix}T%VCLz#0IztK1cvLxqps-=ET}u>Q-ll?Nr}-TIoB zUfX~DpLK2bW8M8KmEGdWe5)bj8;GC@ukK8izFfR16q**FzFfnCGfmYdT}Iq3pDso? zt?vVAhT06?E>3&%S+F%Ul=~y@xEY9#pV(F=tF0uOl$|v-FSX4! z-A~Gh+lcIPDm^>Hwq6SGExpVthg7+djOQOV!g$I0R#l0ablpPtExtJbjOUOsRS-5c zSpNXDY#!$rD8+vPR^o|m^j$Jd34=*+nVfnaY6XwT)7@YFT+#90<~3Wxs-6_HdGBZ3 z2qdXF^8Ww|pfY|c_=IM-9 znfuUKbU8gKfl|WuS$rDzNC=*3Rq^OCT+fRT_X@&7N2O}XuiNUnmaAzT z9$%E;7V`1CuYUD5k3Eyx+&-cbI7CG^k=~`Nfz13$Q>&QUL2y=LH;%aH{{XE?;``^b z*YulMMrSrkNgkVxVcl!i;_B+(!#6)^Xj>Qur!^sJ`}CPoj$?-N{To+#5in4~Q7umB%wq2iAkS>AkT(e#U`9%$~Y+Ifg!g>VN4@ik}T zSH>+OeG66BG{|F>boj)U6tLlX*9q}r;?&&PTE%RRk)a!cXB_&_qhMAodQY}ck= z_@d8BxVgEzjhgCAvVcIYBJad;_$tQUO%v~4VjL*Oc+FJR{C^d{iu8LuY6Irnqhu7$ zPSZ?hW$?Q0>%{u(x6&>kS1X1YJXcwDrdu-V%VwozyDNfu>6+&L6Kk<)5?)2Zs79M+ zJ7YaR3f=I(itW5|(k7OH9vp5vcJ-pbJK^q^ajxl->N4Uu^!F%343^u+AC*(_w~UUk zP0xk_NskZQoN?RfS|1TL**rbr2mb(sT$rJG1X6@MLow@--n_fPH+O4wt4(|w8*3%= z7_q>|U+Yy9Bh)PQv2hK&(>Mr`VpTm$SDSv)ek{AW@Mf89;8>*lUZrr*-SeHX?8rZz zbYB7OSK>9z_3ib~mt|`?i)m~IAZMp~yKxP){xi6a+SM8N{{R){g78gyrFr=CWqg>q=V~3we%Xy(2F7DTJ zz(>qT;;DF-!WRgZmzrTzcex7Sj&aE~-d@?qpxP|)FqT3xk~jLq9^LCD=FgorttXRg ziRLcjjJMK`VmVBUa0az4m{QV8aLt}Gisd|O;^pu*n9r)j^Ipp_i8hchhX8f@*FoU_ z0E+qr?AqihGD)aJ`(tgKgU3VktS=n+Vm}k>kY4IC#MY{cKzAQ_9Q31@T&FXwTij_e z+g{q`4e=o7sKssgcf+R3#P;i|Tt_5R!e%M~7(5^ATd??jJWnOOUn{`@%3$PkSNuWY zD0HcX!@K#37nY!pS~-Wxa2_YThS%b{e`Srzu9?R{^4CFgcVjf|Eyw~z9XPBn40wJ; z@nz-Sp&sQ2DqEh^#nNWJ)vhI!6@gxkVC6F}FOI2llDe<~y?WM{g*-krpA(~%`BXPJ z_N(?*_IJ_69jYnAe|EYJI{wqcO8He;0=Gr>q-=SA#&x;XHA`I|Phlmraw|%MuF`p_ z^>46f9u#X22wF;yDE;$p91+r{(Y!$#c%JW4dv>{LGad|OfC8xat4`E!FC&*ojUs~V z68Lbq$F%@*ek0Un@cf80NtR8@0RyqFuRy)M*Sr%7c&&kCkNp^99qWPAB3moPx3qVj zNhQNM1cg2MuA5Z5z0mC}BFjzod;|fvXFvYB0O|ETBG>FuMX55iuubF+Fx3W);jC%* z_tsz=CPC($bQ!9*8ePPfHtBTDBzF;qWzKeF`c}V)^~Lbtg~o%V9qXy)H(~rZ_n-`C z)klVWKP%}&bI*;K{^_ZH8%=AZ=rd|7^J)_BB}wNw;;QS~VX^RRQbF^}YSG(c*PK?S zli^6T3oB`^+YK)zKC}v38Tt+7_lb2YmedK1Z~1p~+M8|R`|VFsYkftt1YbHF9!+WM zQ+YRWe`n$?<2-SmYkI|(M)Ky=*cEIHlbQ_9OX4k*dM<|&THwl52LrLLZ^Ql;I-AKo z(c2OsZhb{|d|z_+XEt{d69_zvV~#1>T01>CNVu9(PTspuy#N}1qAv90 zw~2mFTANX0rJ^Jp?jUhm7Fq;44~19l7#9R_>sWxzD-Spm&l#W!_u>Blw9!ERA^fW2 zz{Y6zam8raSgf)_*DAa7%{N~uXK?YN98WAdnbnnz-$kER*evBebR)>BU(cnr~2o`f~2<+{bi)aw~lC0(%CUe(NM zS2sQ!)|N{ULL8RdH+HFh4*Xq*$G#sz@uuO=-X^wuLuT5o$&NG`AmIKL_BgD)(?^4a z$11GzUmN^Zo$sQK-(wky#`sQg(zZN5q`bG5^UfV(OyCn)x-Y{*{xlD&1LdTO_{SY< zu)T_1LtQr7O6`gxgIqMDW_MK8T;+Ui@h1M$HhLOIwcBYvR!%;(#p|{=Hdf6&?2OMa z$xv{AD(F0K;)_2IZ$?CWgplVaA6ntHKZp_P<(@no+XlNCvBh%@F-GI zGjVbxTbN|9HjpR|1_2$hSeAB@X;V3!)HpfIR^^?vb{d4SOU$ZB{A(Y@1tf{LHYN0_ zsV;S4!amL1?YG;oZzHZtetTVY#xn%}L@r74Xi5440^lIhP99 z;Bqlt_9O8Gg`{&A+4$Nyt`FjTS31Pv%E=3ez;J4*NGB7O);=O?$*f!1M{{fC%1-ay zjQ(}pct1~zoF=-NuD+!5M_#A#Us+Z3W7DK&# z>z%|o*%Vi>U)#x)NT!Hx{ovugg0gLeuZV6M-&P{o@G+q)4a0r#k;_=Tjc!4ug$@7a^5 z=~8JD>9Dg|U&v-MWkDmRY8_PAcydsd*2yq$;yhCspL6jQlJFF=xRM^o5R+YBhxOZC zUeOCD*^I;eTky&3YdXurXIhKS(!TdyqM=U)-aY#nS)-I5R1Suvno``_x$w;KNM+Lu zO&fK}hpJI%7M9+1!uiW~0Ki!YAC+wBZ*io;BfMfk^{BPGc-f+RB1vrKk+}?C5Vfu1 z((>E=8_Uk~1`a^u=BYI8CjS6h(d4+d)L~X&#KgpJZh8UhRpB93{88|;PttX(o10O#KQ9sCN8ayPsHV<-V>7@W9=N{L zBz=D9O)a@QnOkTl=~}wa#650Fn@-SYMTG`9OrOrVNo@5m3I@1GW{&IT8T2(Cnc}bP zTaP;A26+#2TB<3BF*W9+e+}NztD-`cyw5}bR}_DKgZB+nyUD?=g-b{*=y&67zk{Nc0IQrm0rUI|v&0B*!~rwJr+ z){kZ`VJ^(Kun6u5+C2sj=S!j82_!amSTK*zk9vlAoij~}18;Vc6Uz+I$ztN}Xxv<` zpL6zGGl(0pIXv~|w4l^h+eVm12K8V8Joc;x2Io}=K9#@W%Q){XZc=m3@sG;0lue>T zWbB(IgCUsU)czo0Jdh0KoP5}*qd&fA(0$siek4~jw;~?Z&&#Q__GF20s@`1WZT)K0 zqjWg3>G{@VF&odHk(##+@Ul2=Yg3U*<^3}J>IY@)Vj0T-)TI?AW@@8ytk&>pj|gIy7LL24aCZxFpY?8kz2BO` z_@nUcwW|@TXsA_TC8PtUF6qb9w{Z~37(9vh(QqJ2(AwK928Zb_pJ$#3aNbElihl_P}cke z*tj!&oN}w*By_CA)nUFRbxBAfy06*8L!33l7H_jMSo>%*NK z-q(?zX#USyevzwqd5?#tjt6yLFij@sWBBu4=cXHdDkXyPBf5#B!vq=Y*1jJ274f4_ zvA7f5xVB41{qhb+C;tGhEA6j?o+8scbK#WLG_*N`^+gh{_kq{JsLl?UBX=>8&Hgd10uM;hyD`M^jNLaM2}^vIl$YFGhL^N zt|E-vu8#XyN6tRA$aNW7g}gdF_xcd(d-F@I+&uPSnMQqE=#)tU)AXEjwk*d!5#Bpxba?pxTPreh(s-I(*!9PwRNnL7A;Mn@k+@j%vhD0Q*QcSJ{nE@SY78^S%4d(Z*wm6DrI&CqA_z z*vWk-+BGb}Y&rqR{b??B<<@|)(P9EMJh(ib)B&GuqRFdY!t&?J!7sOr@lm#*moZ6e zYxlBHoc60)wz7OBV(8drUzF#H#?kMhw4J1w4bq&C#(*^}yq!NyHu{9F;HAa>@*fKh(EX zKjU5GP)aSJ!j%mk=Hjw+jX(Q33oBVhUIzKe>T+{eJYC|`q}@jhQH(SP9Mmu}{6pec zlHK98QpV%tPWUxv!&*d9$!IQOc@Dw6^%<%@6Vuk~LARe!Ov=o54|>1hUl*pGr|Sbz zjZDzHEO|5ld`i4c7W!qg1^(3v#}LjyVmk_Uk)|>5+$%h8BP;%pKici|tRIK>7alLP zH~u1A3whm;b;wi2cRCf+myp~+BtS=U!IbBqs*b={wXzqn+gZC0H6;#t{v1~y@ejgx z-|(5;T50U&#`ZzIhaxZlJ$rPoL6+JrKT&J>8v|#S2W-`e?V;85rCTQ7E$S9$?-?BN z`Bec=!#X5-PKP{G!5nD?tI56B?+~Q$PtveH51Tz(!TOe>u>#jes#pyi1sbLMxZIR}4vY0Dp~acn?_8{0-m;ZZ#4X;~c}#AI5+$_^#&LLbkJ5T0b^L zL**~u0FO^<%<->;^!PM`tzZ42r761$DFQrqBDwop-}p?m)z;yVos)S&AK?m5uU;`- zw~MWo{=-t!W6K+xV1R$mGE{V=2N`06O}(_Z(zv#rH$HxC$31^4>b3h*Kc6jz3{%Io z$>ihM)^3TQvC!7pv%25p&MQLV^xAlQ#-B4c%k-cOhPj8sdVRi>@~OVmls%%OVS)}$ zM}9L_ym{frlf%|3k-I&lqTxdI3_U@RZPeL9_8kisfT%r6a`@WPGGB+BvT0 z!(Jm@Z^ZXzbPZ@C%4GM!u5N#Nz-MXE$KTwjRcmxGdlcUK4TKU;erhgVjxNCdLU zh1=AgYt=RDPwg!(PqL3GSAYjOuQ~DW!#U=+w~?KiHI-es>s@r!!1F(aJ{E_-9vHUP zuEoKF_LmCFKhdIR@+R~`F9{A;|ofL!=xqcXbr8wzh2JZB!f^{ZbNekR^p_~zq5 z(e2Vm6@*|GBR?oL!P#l|`h>Gz_=3hYwMh(0Hxf60lUwqb)OKg6d?@fGx5Tf6QE5Mqg;ra1*k>njDi>#7JUgUn7Z*(`T}^IKox~~Q0|Kn+ z@<(yu8&h!6%{A(Iih8n&qW&2E-n_H5@hbU9Boj<}{Ef){E0^)4bDy;z2VA=?gu)ot z7|NbaOqGg@)bu}wKiMA{wlta;twC`NuVl2saXbA zW^AfqPI5k#Bpx5rz8vZ|`u2$_mgY+pSr~vf;|BzfeAgMTd`Pkybb95boNaq@gvh&& z6`SSjP-=CSek0Qn^(&n&c;~xIH;eajWN!+4eQRssHQnEZz8+iZT8w4x^##j-n8^dM z?bf*u*^lAWwpQ1dUM03&x6(->XQ$25yUVkv=@NlGx(f?GxHomr{{X6hJ4iH3O@783 zd*k-#7_G}g3w-F^a&gWEd9OA2{o<=%4{2T?)9q~KL3;p-*_30?I25<26w-J%8Zef&T#F zg@WTxOPCSBX$IrNI zv?Xn%$WnMYQCgo2e0gi|*xJde+KgV#SOUK=+-sZoU+^bNu$W>$wk_H7mi?3oAHGN& zb6%;act+DliYuFoNbl0r2LeO4r_z;2W+tv)@dw5&G+m3^$>V2>A{ayCk9F@{o&NyE zH29MDOXCa6eLqYwm4e)`f@3FRoaBsEFNjzE9?;-Tb6J5PTodG|%Kml1-TZv;R+nM+ z%gac08{4MxE#Q#t3dfK^>)NyC7b+=yAn>^duUa;djC7zZYuB;$2eaeKoF+n+1|6WKc#nx6|(K$_}fSt9IWIyjAg<6L+Uu z{{Uub(EP?p?Y53O44(DZc%MnoVDP2ft78?cKnvud%;_#F|H&q)iEh{{Yqjf^+q+mb^u- zNv&#LZQhXs&uT=1Lgys@RowVD;}y?=H1t_)VR+^~VFp4m+tQ9{A%@&ez zbc>bT`>=h*Qr7ib8(#_CYF;9qKR(om-w(7FV~z*oSeh5cy$f5jn^J*e-+Z1@4D?~m zbGoqq0ELUFMWwR?IKOA${cg)T9ghPBw9<{v$$w%QSxjk(CJ-wF70QI|xE`%oB+FiYi{fg>B+kRvRXs!9YE@ANb+U+Cx>C}7FzBTaXtE;S5wzlDvD(92NMFN(` z1E|R+siPaUnm;xo6%cU1b?I7n`Tz?-^uBHWtz`(B>LU(DV*m#nR-MO!Ej$Xbwyi5o zJ;2}PGK>sWbhK?=TbrAI+$?eBQF#V~Ga~lVEqBBkWrCwD7HU>j&p87;nz;tDr(J0_ ztkA}S6d+_N9<_t3c!p08r_-6B zUb&mQ;9omH;}x^5!qyrT5V6dtK5EU1+}vA#v}gjIwY+UBJh|X;%~#Yz@60>6Ja?@) z>_Vmw82xHH*j6ZssC$}6V;V(!q5hOf1JjBsEB!;tkcFbH68Ao1_#*_K2Dgo7236n^ zoh#a-@dS4Z9n=nhZTqLMHRNxp#o=!U8PIv8XP-)s;djQZKUug~wIoI(j4`j(GgvuC z+&&ip%Sopr)$V1I;x?2tV4U;QisJl5@d^AcCKhVuX*t|FS3%-kb}QW^O{1d1n8wxh z^{!TZF5gtKFR5+a>ecbwm0>H)`UzqqINAr2O>2MRTc`8oPd-_Tu_WVZB%jBc>EFW| zM}_o+l5}}4w&jX}w>5I>OS991J(D4mIODBz`px^@E8EP+ao}dUo4J$|`$tpYtzOz2 zd7d4;8vp^Gm1D#I01;-=barF7#~{W#@m$Ye%a2Wsc!ac4|l zF~s~()1O+kmi`!2M&luNjlz;!kL*hrB$+~k0*qsxK(4yzM)2GV#b2|hO!Ta;6Zmxa zxzTjoY>pssI&oV2MinBK#~^$`Z-~rJ{(Ohlx3qm`TVkT=UO?Q8b6C1Z!}R{$i7!v@ z5%~wTb$Y#$=(EC>stF1@eQH~|6xTN9<))-;(D{%#Sq2ZwNh}cF^K7dUw_X4ymJM~L zi_5%^fH=)07NX*8hT1(UO=OaK6xzp5)1>AZnr7(00-)8&A%gbXWa^GRhD}^y10aG> zxs&DGe}_HmHt)mFrd(#u=(_uKpphcdEi|<)r$=_Op5)JPGsj79<&kgQya)#tz(f{A+K;J|dgqM~qqvg5gzIh3%2krBm0u4*F(?V?6Pc zxrNI|#!hp^I6iH`&Dg^DS);$hQFn1=BmJgHH$~<#BrY+7n&~0&>3^H_(&Rh9e_2 z%zwg1ZT9V&-O|T5VAZ-@-oyf228jELwFHiCW27-{vw;C_6n?xa|`})%*#mZt)ASw{8GtQ{UROPT|bXp&7K) zo9#YX-_R)LtlLkR_cD+xJ5;@oT8vGlHdu3o?^YIR4xSQR?lqfsG>W+;)S^&KY`;oN z=|0mGMiGLbDbIRti)9R7Hl)BWy*B>rE~2qOGaDVtk4nO%+BLT+V@tGW)Z{|S8YK)# z?lD*NO+{=kBr|R+p4FGAT$nW?@SJ(77moZ^hL(^EcWaWnv)-}ilQfIDe$Ftn$tFe_ zc>L=+;zw4VDOpO$ayjW%VZ4AG1{GfJIOcQZ5xCOTn>Te~mYR}9XPgo96{u0Z*7BXe z2>Rsp`cxOT@>;Bc6tb!p!;{vpLd;!FEWdnAv;m(j}D0IGKNsC*{k1LkTNc{7j+>rSOEQmI#6O~@ll zi+8uw!kc$LboI_Uio(>bWYX<^!K-KA6p>g(m)g$G*Ylw7oDOsYmm$G7`I5!>sVZY{2ca`y;ue-r%LI+O zg)CQ;H30;VtbW z{lmLw1^Nuvg;tE=Ef0E)RVeGZ^fX%IX<|DESZ3UI?uc+RR&_59MGWy>Oj*89xTl)t zbPp3~9z+_Zm8rpX=3#=V&MTqP^{D(;dA`Qrs6m1{d-tjLhUAPt5b8oE+XAuzd($)x z7CW1So_>4gtaygRYZq(wRp@!eXb7Ou^k3fv)MM79)TB*sRoiIW?g;|})3r$2K!e2kdO|aGhWURHP~_R9Vy$xn z!&-UK?QSkD<7B*cWjOHDIMit8UZK&1EPs_GX^ z_KNWh%t_*(GZ6dB3;zHWL>l3vj@5YEk{YjSK2L@8IL(x7a@%)cWO3e|r|SyZS^HV? z$mk7W>b@$MQ-Q3)mS5pM^wZZ-txONKzle2vm@ffiE9G0T1D(O`z!*}isIIaHx4`{cV7L&4I*}fR$ z@-b5xw(JEt^!RiawmubE7I3PPhx?_wupX7v+ugRC6{B3AGWO){mB%VaU_T1MyoT<< zl6c~2959C;UNc>#ri~4*hZMTXfiwWfo4S+NirflTej>Ef^lR_5tBG1{1A*yN_-jVp zXsLS2=Q#v&E1S|pel~{wD{N*vfDh$ewwr907Ec5`%B%R$2R*A>!>sE+VKOU087lE1 z`IwHJRn02NG)bNak%FMyTO1I3Rb4wwveGBX#Gf5?3x9~3#+M7p zcbex1mpCsD{G;pm5*Ay)&`{nqSGWqakOdY~ za=!B0wli$=e+T>; z)OD?VuBmfrJ=UWk^5k5Qo%tu8g0en7d@GYq@iw2KMR1nr@ubpahz#4Yk&mT)1Knv*fRbBV!Jz zOm@z^e86*z{cDr>gu0J{Y@o8xwDTNM#v;3!af2=}N%c9V<|Rq9)Vw(azB|xNw+g;x z-LSU~Iwlt!n$7rg@TW``PJHDO|WyQQX1!x#26@Zv~U!Id>5|Vi_2j4+r$D ze+p@umx+88VWn#p4`)28g5{+^0btqrO?n=aqul5kxSPaNG?_cXJ_zLIw0uY6sP!oB zE^hW)!EM4f7|%h|-jdY0SrtAi_@7Mpf2QdA6zg?ye;|p!(Rw1Wz$cN@n&&)Eccu8Z z#dTUX&3Qh#sd)PL;{Dz3p{CtU3fYB_|8fzK+9Y<2$t7JNzI?}dI0mGw8fmhmMKLmRMm zbI@ZarBL_}V;98ROI<_6RuQ5|#gaFPa}deKMmYQ{#r_-oIq?VW3-LN%5d1`WbuAXy zymr=emGabv`6d|0AP?5QjT2k^HqmDL9oi-%#uKRRz^BTK+}8NRu2^^@K}%a}izsdx zcdwEHfS!i{b6#hs_zLUeP3?#Fe6fuzNtN7A?2(U~9jm4Am&2_$#d_lF9~O#FXy59s zt}@Fi_09+7UFE*5qD6CYY2Xbq-@_Vpnuiiwp$c=yPHNMz{YpMFySe?HVAJh9IW4Ws zl0>LSTx4_9ReOI8>K-|`eQRBjt?VU?ZX1XP9dJ5Qc#})E@qPWR+gz@tZ*PTrmOT$) zk8@p?r{SGT#9kM+vbVVY%+hUsc2#xRFzUelYGk>$6^>I#)}wuP3qK4b4-8wR=~yj^f&Xv<7AU)_UU@_pYzQ`i6_7c*53wD#G6RwD3`(UPPq# zCpFM`^Tiho!ooE%M90nCIwpI5w7F1NZT_vQ#}sE#dm$~NfgF(xMf|-gl>R&Z)4TGa z0}&?a81y7{#d2Eb#4;4<(-LD(-I;%0wTFN4J45j9pEN&ch+GwJaC6d=k74MyG(I)_ zOp{pfJ;=0*L2qm_;YJD1rF@lrIkmdqX&u5vG4nEb>&`mY&@*_mPw^MS`@2{#!p(A^ zbU8nzc=w4k__WJW6!)g$L<13(^zYKAm5Z7seILZ~x<)PmME?Mmg}aYx*h^ILMYOA@ z&aCRBFU`aun2P9^_ zAL4JuxoxhX)9>yLw0es9iVsWynz~YQ(U8o~8hk>NRn?Nw7GZEg^ymTUQ$aWO4eh1X z?X=SE2QC01e-m6(zB{wf^;f#LRMoGhQ5Zln$>?jL(vOKXeI{A1B)F2^Y#*}_K40rw z&qZ`gZES4#n_O7*V)hawliW$Oc>AgkZ>?bXW5m~90*6t!yqY=MA-ir%6Vs-CwNpW1 z6ynQLkIRqD-?a1dX1Z9u4@u&i+2*ta!7dI5LO86WCdQ1<18dsX#6KO!eQN@xx+skK ztM8oGyMJMupt0YWWb*kUAy|F{(rr93q^uSYN9L>TZKIm&^@|12bmY9TU`&Sudg7lm z8Rwoe)-1H$cHc(Qw=Lw(B~ssX1vw(SxuCd`%gu!pUC9tqNaKOUVCjDjY&>(~$n}ej zg67&b;Demvy18|~v084vU7>zlpFv5kC`G4R+pS zTOm9Rst4y?4~li@XB+KgQ-FF`DSP4wwF?QNlL5;7r@m`=$C+H`l&o|wn-(ri9ix#DeN;{H-}-gv+#_uMi6R}DB4Hg&Uvc# z-U@vh%kA2l=5Xcm-EcXq=J|FshNcV}HO0)bCDzsZKMYSppGv3V%|zKn8PoDuFkUOB z);0JpG>K+isM7bYPeQeQX`3L+wYPIq%*0!3SDl0TRI;7)rA*O}EW%g9F2$*hf2 zRYkvRbtBB5G9do|WOGQk>|(`h{iQRie5|LP)Ks=tC~uy4xQ)JCj+q^3tr48BbK`#v zd|uOhL*cfujI6A~gPhl&c>6`y{0bjd@S?`?=Xg@3xIaqpAA-LWq|h#ecL3mkI{Vkw zeiQMXw~BlkBbeaH81I_>j+7MsBlC=BG(Hkv*{9>(-^3Ur(|lR>Xs-mUts4BK4DfJH zYu)vahi`vtjWx*wuG5e|D*1cimxXlS418jJQsDzhFi64a-~RxwUs723wrwL%llwUc zS@1_bmFH$SXj|Pk%InLU-aMOA@SVqpb-5mSOsRq~ob#H^zSEla0a4u;5!SMKGCL;zZvOILM(5hiBy|_<0n14QOu*b;;wm3kAZI5 z-tBL^t^39lj1$Fkek0IsEwu?mkt(5FD}^9u>t40vogRC=L(I|mxWUhUYl+wGH3_^l zBGj1qqC!YDH%zNo14@Byb7hxN8rG zcbcBBXi%S+6P$Y*>GXeum*U-aF$c}#<@ce*G&MUj)x1@1r^8OMTtpgC*Ldcjg3{x{ zqTgeQ7HEJhc>^GKt}nzM0oK|G;*hZs=e2g)B=Sk2#SWyO>O$wAL0l(7_l+xW3q|H7 z+>!$y=#X#Ub02;;waOj^&n6F^(`RM?+S=lm&1%b_TC%x;zrVE zc%tXRdazAuXJ|TLo@?1YCbP}rGVy<@=Rciro-+7%Z{rddM`7n@CydtS2Hu6@t6f}) zZQb1uDgns?wcxw7)n99uRvoj7@~;nlv*C`gZSL&aQ4?%p8*YCJ@22rIGg_qZSd@^D z?}`A@)Gk4B1Vx0O^31v5SC;t8!CoVmToP&*Fw1SbA!9i>{Oi!{{8eM9fd;su86^9X z6P=#CP&C+rOBRnPxo1;}fX3g#t~&wC=z4gG?ct4zG2zRc0b06_j?gAnSl_-Cfi=f# zx(27E>Q@omUU~7#d40GM{{W3^cuwE!cGCESaigFIFeS7p?8 zHZ&b6wZjM70ggid0Cm1r$I#Pm+IKfV9(tJ^)!Q#7PYbDyQ zMl-iH;@=d$72o&@5jTb}gBH(3$4|z)sI+t9NBBR+cODwmr z#jRRRQ76zI7KunZai8U0b!DvUB0no%x%119yNp(chh@|>Jw+t`%xR!z$s#~Fs;gtp zN>@IK_+9ZvPZw#5-XSnYaTAEbr^}JYI5pY$hGl6kHmL-s869iE^h>*$wYyuL7e;kJ zqs)`c95#NH=_}*gOTQFFZ?EcW17u+e=bz57<&BQ0IU}UfYz&aXWpz~wGn0z9;+s>a z!(l#*sibN64=R&Dh5(%%@g`9!fhXLuE{b9WnfeQoak5&EQQxnnVff!qyV9kJE)m2H2qm_h=j&ed_hV4k=8s)WLplEdL!6#2hB|@x zAIh+Nf8kj*=pHSvT;p_=`nYSp3U?1}n&^LdfooTc1a0zB96p zBL4s*gU0NFD!#p~F0+vacDFoNf$I_Ymq@XOGPa&cpt=eCc#TxpkTxdg*hF4DQ`SaZKR}e ziG*|S-Lt+4;;CsmptZQvZdy&vaOyz%X0SRI#JXmeaeH|*x7%J(xShQK&0W6L{{Z5j zmfqZ{eVD@Xdiqr@CtYhTE>?j^l4dA*>}uAFrrT+D-)p;I9#5O4NktzB_&R++JeNV# z7SAIUcH$(HSc1?3VMgTk{OfAxSaGEvu(kxBC?mFOl-DnZg|uc%o6$Al-~hO$gg;;L zHNC3OXUFd4+M~I_td^X`KiU}K8}6a&`Be`L!rGHP#;I;)o06RJYo+l20Ed%Y-Epk1 z+2)7lR3kXYPH6#;Err*Jr2-Am4{^6YN}E}-Ukd5L-AuCs+vYthV&hVck^J@0Gw8@e@w)&W7uI4sNc=w~TJ;$ACXGQ*LsNeIMc-myLh6 zv~3OtS?mfcTy5azIQhDEu44ZHPPMa_&aiJb;xn>Gje~u2irM%>;ak58X;+c!$ZbEi zHjqz0cmDv_Tt9;}8}A0)>S=CGZ5_m>Tb5IaL2sBN^e44; zz6JPNnjP<-;w!6#iFsT}f=9haqkKKpH2HLkUkFe3UkT}Qtfe;OParv$2ew+fUlw>? zeO=?3+sm_HPBEVKsL@s%s6H+DBF*&yaRb|G8&oD!AwdA2YPqcVE%dEk61jU-{vpT% z9<^e|6E~G-p(fQ*32fH?0E_OV(0m%u$pMg*P|uuaky%J(O)F2+tu%G>p_Q4X>PH#k zt?Hg1xV{p7n*~&U><-koTB1v!SlK{4xg>RS&T*0}uCnmtmUocB1;8(Gah<&@ID9~J zdcLD&@cY6)+dd=m%uwxzYmhSMf%?}qp?qA6;(QO}!0`(lvjC+-3fJ+^hHZW)_=-&n z#0& z{o2>id}S4to#pnRR5WqqDf;?WFZ?C8{s!)t7zd%P=L&SPgh0-44$^sR3P zSxw>(0qVB8J>Z7s*@Cyro9 z2gChWP4J_O7PFw_uA~ zt}EeohTb~VZmf4Ok*7BX;D4(T@s-`vJRU2cwD?`8X^~yQYa-mF;BJ5}H|GZ#t($Eg zKLq%0T{}ayHlpELW6pUaAJV3GPeV#h>ryR#C^bu{?7S=&%CI}3e!EHI<~8QtC-GPO zB_1hX316kBnL8OIl?Tj99Go2c)erbw8h^vPSu~riK^Ff2QT^E%#xc+Jtj`bWRyUVY zYr1v9-D)=E!T=aN@PCzDAmkI8iPUQ!0`BxZR_;#^T+VIdfnG5yq(f zFR~yGHi9}o{)8a+ZM3k#8)4*Y#HRTvrj zOPz?;^q&xFwwL}Gwz-~LeVTlqDR`Y!;FE#Zp0&;R-p1nFR@Jo00>%VW<*wZB z$oxfmrL?{p{h9t5!(*)8A=It`Wfi2e%YWRsQ+iE=hR-dRWVtbdFD02j0?4-CO?qFQ~X z;xGrABm-}@D}mCRRq^hpaJozl6WkyHv!3(}v+%|%pC0(W_eii8Q0ekKjlTqAZzBzi zS3~2!4_#@#1%C?IUh1BEZ}TSJcZGA<vz@laD97k%0|Vg)gJAe^;rQaSlIrSA4>n7t-sI!4s{a5JJ|)Me-=>Tth3{lL z_XY)kt*;z-^4CGOjyrgK=@CdcY*&$ZH^4?u9b9X^E&cqAhszkoGT9%c07c_Zi*RTc zuxNL-lKrmW`DWn8aqFGc&3s>meFyCC;jgpat;7OG1NW>6&PD}ne0|g+xxa#U9$abn zM_w_C^REZXd7}7`-WJ89f!nF7j{2F@_;faWF{<6hx_Q2}*c_eX$|D^+RNf)8vDB|+ zo-oYgDYP8m{VQ_oQo7deV0|qKQcg~5j_|&XcP_bnqHVGnT%VV=O=)y<*__qa!wIJG z0^BqH=Wsg#=M~iIa#?8_RB`F?$YfE@MnE;uXokkaRf#o1B$szRtD5nI?QplNqz!?l z#%NYyW?b-X-lt{aGjn_`Jf{F~a zbiO6l$)3V^yrqid=W8!hgI@UhW{u&?3;U}JYpJfJAjW_eiGKhoJOie#k)k5qA-uE; z{Q_vWu@UOCaVZF%7H7k1z}`%{j?lI3P@ znc+D+J7;x!cKeV{Sb}>2n#R{WSpF^5^v2U=NbFih&Q1Z~R?o(d99d|77?wLZ0Sv9c zIL<|RmxZ;9S^OoW-CV=v+iA|yOBQpy5IE0jqEB42xr)x~%F|WDo-zjpsd)bYR9~?h zHOHExB#znUn|Sh-WqdsjBHM|gyzgm`{)lZ@9{ulR3MlS6Ao)bQ=dPb~icjdGf0gckanSn9EF zy8|TWt#s4a<(}oA30ci`t}XkLBSKgy=-hU$vgcJkB8qivDkMd5(>Ml?3utog-1g_l zwL4dy)fdE#a?3)IV$q=7T>)%2LVDIUO=+Aji0zH#y{)#Jxw`HP$sb%*-ve4Mhj}1% zG650D#&K4($)WK5thcDYyqgCZ$4a~4gd!`Oi=@GrHaYdF2f58_nv-hUxJyJQb6^0x z)LO-h#?gmjueUfoe=5;tI(E8lZ8N^rx4-%PYL|(x|!c&y!30PmAnjX89wwbUgRlTe^&vwx{e`r~2gNRtJZ#e$lGkHQIjS-I_7Y29el` zeJym|D`;WNtaoSB`q5OpPkePW7J4LkSlf1U>+MBaA?|)5-7{F~Yvla6J-Dx5_)+mL zTUjmbq?S%b+-A5fu9OiOD3cP66YZ^--+AE#QM-8$r*@Up#)zUlCxv(k;VJ8BZ{--22zH-N-K` zSuI#1itr^F&Dus2aigqF`?=D}`_3GrCfsAaP`kTn!x+EWzz+ye6JxxCVXd_cD(nJp2o|P7-;VXOXN#qvlgmn1;uR-w6 znHPj~p)JfLI}DP3mB(scERy?Pxr*K_$APm8)0*<#WSyElIHfI^z7o@-u)S|N@Tv&L zYKMwuU-(H;v}6*qGJ-&*)--#aH%FH0c}hs^Hs_ADx$sv&Q>V{)t$^~z8Pj*QMQPqQ zM%3Y{%IY_N*!K-A$^^uH(mAesPVmgWCyrU?0|Xol``2f8WpCnd5M4FQCPt00q;ZOm z!`9%`bsJIw{HlMEtMXjWVGw0egp)PV=uH;8c`&^UE;w?snGRBhs{)AcE#6Gc$IF zAZOmJ_=8+s8KSvV7ZJMTDP7p-(z!;F?=_WSDj2dbG3{N1Ru;2q>Q$Ab$8(yFMvbRg zO=x4^YPTBg#B$vfTXNh)t;qiXfYomm_VQqzubcNWEI=-R~6f5+ny_||5L ztlrLrEv+R8x!lEa2=CUq8y^hKtXp}JBPZcYn7b2AdzAgl7Bv;Vs=|G;gOGWv)?OHE zCI0|Pm?0nDsAI6UI+$CD<9)}m>rOLBP4b!+^GhUIjC{49s9POE?i5AOCpD*{Pb4x- zlDKG89itTnfiq34b_PT8?8s$(}VL?#=8V*C9IZYDRKj2 zikn&Sq*^`PmfF_Fa>Oo14MBShPo=|jWmuzfNoG7K&sy4?9j-*BZ47S`YEY^et}sa* zaa`V*Tf>*1YP9+D*mLh)Hmjo9Yqsa?uCp*0-mSo{Mn+u*;G=2~yAzKusjUo!@t2DX zwzAwwYZJ{O-O2)USY8CC${HY$yANb1%?WHQ?`yQt3M6t!lG_B8H$)vb)(M4gXi@Xw93A0OZ17L{US ziOi90#~riQpx69AXQt{R?@5u0bI3TY zza3b~p;||6p~EEi88|9;cCJ5H{?RteCH|c~rSgClR$Ou4fmtofs+(FJ)Y`?JtDQE* zvS2&U9=z1T2yO15cwgs{NjR4BKv&GRE9j9bQrDeC+#T3p9y9vkfKBONo|x_w(xf^=)0G$YB>D-I2C`u2@&b!d}m$I85{EymCaZ@c3s+Eq;)+ukGGAuU8{Q3%uP0%OTugqGEc8;U_#2TTd z-@Vs|lIj=9^NO}T1!6(t8~bk;{{W!FES8}16mj{}rF#mbl=M0V_%owvo*-MR$i#tL zB|-)j=vN*t@akzXSXyaT`BmGz+9>^TT+~|YzLd{%6M4mf861I8c$-*RJS;!6qX~S< zL2miarA2zYsJc|qzo>Y!%fi|N!KT>SGTb)u!XcI873UxDs&p?Bc(40YUXtP_QWynX zioas>3p6^pG82M9t>NVBR+x$-6Ap&6g>4FyRrERO?n~-&*?4B&R=0_cC1l%xD#iZ* zj%=sWZ7k%Fi%KCH_PeFHnK{{V##s@iXO<5?A7 zE>0SPpX&jn3f)&I|$R3C5Qt8&J7$jqr z;AfiiD${a$9n|GyV0llEFLwA^6KI|u#urM@!RG#zpr?%8~s|u>9I=`7XgpW z9^CY)?U8NuFDCEG9%dARqc}Bt#WoR5;fs_T4b`>-FtiGJ}gc6w@~E;jq#p ziJEjF)O?`i3OcDw3sxyq@xJ$+k(N823U4>Ax1!MB@$*W!<@dk+cJ(M~` zi{`l7G(tjKJn`*Ww_?+|yW($&`d^3i0StEp$UO&o<$N`xzm9MJ0JQF&^DMpF3?V#yc&*EC5nNlv zD_gGU2rGcSeQI4qhM-_;z6p}+P=T!9(aJq?&w-<)8)hQV$=Md&RDy9+9M4-f9;LA+wJSlaFfh?})z;9=}SZuIL)&m4YU=me%Vv z(D|X0o=Nl-)_4<1T{B9xNZ4ujH(%@3&)&yQJ5u<+#ad1Fx|)8eJTfdR<^mfSW$1XS zl~q?{M5Lp+&v=(ue}x4XRFUVkzEHcE?>NPH-lyT6W8d# z(l4pwpR`YjZG08*!%Fa1!{=jf6wk6`8&S^8VVHKWL+~Y*k7MxDLeTsX6Gy1rT17ql z;x8?H!~vWMJA!{Y!qt8aT3&d2O|XInxVH0{$lJ>kkkef8i;QPFUZ`wsb%2 z=buXFz9jfBc+;$OSkKs_on6rn-pR{k^{u&O(zJH6O=ftYiXM)<1I5#vha27&Z^OvBMMZP$;RPP{3+EfWfIMN(c8@_3x9pf$tlnggs-MUm+%b_xyS5wenlGjHTSNei) zM7LKPS9eZm(7bym#GesOE{rCEJ8TflzF%KT;q~v2eiE^^vC^mU7L#gWg;r4{!#MBO zn;-3g@SnjjTw2BAzYfIc2On$zy=zMkDM-#(h{Xr(3$I-GDN^f8XBTtKw&hgv+s+C9 z0PEJipQ#TC{40z5X-t=E6G-P9i{#`C_v>Fd{AvFHf`IrZQuvE)aI@KJmR8XaJgJK= z;fx+Dm-wmw00kU}###-nzr)B>%D*Xz7kPhfYo=IvM2O;}Bk3QEekQc|mEbEqGf#}g zBPe6?ZSPTPUK7zQ{5Y~ja~j=ByE@?Xua>+U`%Y_m{6=k3;8@KW^42*b0N{%3W3lls zj zJUMw5vwRw2uOfpc?xTw0JXP@X#+oIx*Zvx^ynR{|^4tUj9R1^hanii|RPc_!@l#cb z%f`C$S!yg*9wz}Am$1OC6$fjXI=4C<2jdQptz3igH&oSa;fMV|vkxM$@3;d}Mf*o- zI#-G&yzshe_XEi=sgl))85lhMD&K;?XWtL$H&SW7D2N3@16)ZV3f1abi3k4+bFnU)P;Xe>JhBctRDoY7tpXWYS zBqJWYaa;$7z8mQ&%yryANUK$mzs}+R%mWyLV`AdUvh@X02#JdtkN$b$oSBkX{ z5#7xM-Wbp|XrqHWSs37F{sqlyk-Tc8eXXnfLDJg%TWK>%HPr9>-P4P8G2}J6vyth|dPF`v)-Ls1Tc3-1 zeb${cgn854e2E|f8NfL7u6GvMvZ#+%_<7-5ui8^zlGnlTEv>WZ{Yg&c6+eVaB`CG8VoKg687#AGBcq0CRpT2Sd7V4roF3WD`qqC&;+pfO#KE*YTf>ESplfvDTsx zK<&YE_rDs=9wO7?SXTZZXICCxN$1mwm!Q<{a(@&2DF=%5JB!Uwi)DZY+J0W+wRs1O z^=o^(cx^Okfbz&v0mgZ+r@U|Qw*LU)w}w$HG<&_5NH@rw0yEdGc)!H2*{UCg{w%i! z!r`O)I?VEJB~;|(9(}4?zKCt1z7_G2)9p0Xw^YuGh_~(qPq`2f`wS8l#`14J?Nulusw$};) z0B{X>w}~xu%WZyE(AGGjnYTU;Mty%OaZczQqhrT>QF(c9@a`vuDdd((Ss9!jnDwu4 z_&cNj0Kz@s9Sc$MF;y*MvPP(P92Krd zO3@J6`LF@{SJ0miJ_y)&S{Jvw*LBOMVm?`>cV0fGvA{!$CS=x!4>1h^E15pMOjn%hUR zg}^0vL0F##ehlAu>Nb;GySlW7+y-bGQoe3`ZSP*>-wQOoH%XHI`rSm$KJ_ld{Ja{M zO^Vx9@e*9wBEqp8g1isQy-W8`c>~2_?9SaV1q_X71|pM zj)R(gkB7#M;R%F)yPhCE@#d^scp2<0)%7(pOCkvYK7?ob)N=^q^=Tzn-E1=^q4MMW z{VP9M(qBOGrcAWB3|Bt&y{Q(1R1-uttPPaN=~%xIwK+b(C$&GmD~$F1D$=;OD%@Bn zh%cnou1+vBgHuOu1;2(bB#{D%+&DXVIWmAz~8pICs$Z~}}Dwbb|%;_ji~ z2Vb#CCd1AZy({G^;dx{gVRd8lzecqXNOwNwD_dS3xc{86UF zFXr;+Dn9ddW8nlven&)&)B5b^nNF!cI&TC`C8oJAK8tbwyQ0BgW6PI$kqtL@+n|2}b zp>1PcwzpDN4Zxgw3hPr#OBv*CEsxn+6(5c{tbwPa_>|n3+G}DM4ZX9{tZSE#q-f?V zJd_!3J?qD>NyS+Au=RP&i(9*WGgX;D1*B}$mNyaTx~nzn29D@?U>?UgsQe?QF0rWj zvvGspy>yzsmuG6yO{g-2i86z}>cS8@Co>CDczimSQ)$3{^Ct(2@!yCZC3_nyn~1Pq z=D^QKB@g>A$sxXsxC{C}ZizZ>4qmJdw>_(l@xR60AHmn+($3IcO`W6_BxmraXnuXojlgM_ zI|e${-wpUNbh~HNE+vJg>H%DyYZ)uEXv)gQXz_KlQIjVJb51%C>s_DK%tF zoy_R0a~y)umLMPHR{kFSni(2>YvlVj3j5ZdgLE^eO*_wt6}J(OrE~hMt215(iON6+ z0R8OOG`=IIpTbe`E~BA%r&yL(lWB?1Om;PvNfe2g*I+Px>hUI~)c#x%FRidE`dX9GOfZ9R-CYRtE{hey{KTu*TsC;eKF zlCr#ErVUE%TH+Ysh@bV5{p#;^=;qQR2zJb*a>^^4*6cjHLvdp?Z7*G&=?{^dMfQ{; ziJCYgnkatjzusZ$ed`8G{XfK$8*Nw2wF+=dL!5p!*|wP_%89NN#L^ASTcN62fr1Mq znhSPpw!%g`P#lLX{hQ&h4_`)?8iu2BYTxS>)lNSlRc!wN;T(A99uc%Jl27kbZboaU z)MK}M3|Xj-XXh+4P~Bc#&1|t4a~3dgy=vCRE}y+~iq$++nk2Sye_`3l7$i#Labefe zulRe!@Xf2n)|SErVg>?{-`=H=-uQOr;^y9HmfW2AOu1}&W}RtysCb&?UO8fcSNqG? z@~q@<2=blQso~kuXs+!MCOPQe{c6M3{3iyhtR%PBHzRP|(SSCo^c4jDCe^$*Iz8RQ za=<$%Ki0MG_4l7l7g|;tSHqvjt!B41o4Ms57PH|G5F_ZYd66#Dmjr(*vEd(x5o%V= zF0>-GF|Z0^Y?JxdsaRNPzZLvE_Fg9o6~PRJ*bIADjr>yh6>IR;VR7LLnE3^qbA~yp zGd(Ke{@26?6x7PvHbGe9KP!E6P;1^1wTkLFEG{LL6dyH78)7)sc4Yblq|pb(={HRwV90jLDx*%AzynG^ZY8 zqE8gH-lr0@NU0=yvCp+-_=i)vUl0|xMKR=HbLmxeEkx?B)7r|mAOgsej&ay=SnIFe z!D%Jz>ST@(SdsiddQ?^O)m(MM z8t42yucp0fBe_P0%o*psTZ7^Cwe-=gqZMfm4=3gN()L`jGF3UGbedM7cYUKgcS{g< z8Tnf#yz|D|z2=AJ!)}|rz(#rRUW24~HV+9;=1nMR6c8Jnb5!+)w7OXgu^Wf&vmDh? zc4g1rN0h^*U3got?+-0{{XaM^QLTUUDcE0NpJi?ZT2f03F3@#mc~Cy zEycZ^pV?rBK`SUybHFv}dqrc7LsPOkoVuGVurb8^=CtfI+uc6xB+?W#*I0%}JyjUs zpU9ev!5V5yp;g2G`trezGP$4rb@4R)rQXH`FRtMKnnx6?H{ z-73}ERnx-!?bWlN!?k)BhL|nK$T=CWI?*g;({JOp)BgZ*7L<2iPX7RQRXs7^vFl#J z;k#I4vq@tc)?gV}bRgHA8C~nT{=Xg0mn{u_Hs9^BjCHNe8I7qcCp^}7hv7E&>aECQ z*V4BE0`wq5$ot)^c@q-+w~M7gwlWTVYF#4nOlDp)*16qHK-caCZnp& z;z$MUoHuNdZrpIV9+l``75L?)YnyHENVA$w4%3W&b<^l6Hl1N~U{pj3 z!fSsRc$Zfi#f8S$kxX+h3JE7Q%{bYc#oYF2wKaQHmrlKFrA#iyU_l>+EV{HXhnnn| zVIrI;|ZStXdBGBd?^U&Vjh;O~W?z486zrYR@#qs9--f`6ra3!?tt z9}u+LGM*oiq!ROxdUmQ_D)`Ou1LBsS6~BwY)T541HDZVysmES^wb}Jp*yDJaUdPxL zpSC}Qd}|wNdPKq2;C~Up80NYU1o*c>eIEBxFj_RKj*7*(Tm#6jfqXCEUl5DC%geh9 zn`LRuRO;yd(@%nZd?w>cd;*DUbSHHCL$&@Vr1&kgu1LMKw2 z?H6i3P3NcOUnx)fWB95+iIX7* zB@!j9QZq!yZZVQG-!-|e{{X>5F0?IDY5X#f$k$3##$;dPAvY_UNZ3D*>83BhyxZz zX%2FJm8}o$tD84h_CESddn%eLx5G-)sGtf z%y*hTs)?t%Ned7IB9I?Fs~Qj4w_1l#c;_h`6LJe7;}l91WM@BX6Mw~jwU3GPc_KC! zzqt{HDkMIFxs&@#>-xf8-bHjo(|pJ0J$hF?7r|L=_0|&GO(Q!L^EoOx>x%1i-`Rj% zT(6NVZ#2i}3a67!DvB~{v()nR)%8Cfc!o)}JznlP3vD}CbkDtYGkiAFtv=3Syqfyr z=#ejg}ywR`iklbzgJg3OX`qkYt{t4sbO-A7Tn^3p53)P+n zA^x24PIIQC?(P)n)pGZ?EBqtI8NHe))usOOjz1dr?+O0MJ{Ry+@>`kUd#3}- zEa}4$USFgB!Z-E-t#yemCX@o@;b%Zd{A*X?ckEZD_=CqDPl;DljcptkFL3_=ILB^l zf^|8L_*1d%QTRW>o&mLce-J?o^T^x7C=Ju;QR`o{7l%A6c`9g7$YVs|Q3?K4=sp$w zoV+FAt0?EOf^Cql!jd-TbLulp&^{k&8ZU_FlGZepf`ZBvXBqddNh`CiIwR#T+AsE- z)I3S0vUm}-OLvID~vD0Ai!rp81 zTr~0w$Q^hePg=d=O;^IYeTSc-`NDRLC?zq@E2@^x-{MDx3a!<;e`kEQgpMW+)Qo*A zo%qqB-26V#^!+=@4TYN)~U0+kbXxh^|9~*nubARy)ABGyfnr##98f*39&iDH95k9~*^qF{)a0Lf?&p0c!rl?N zvAonRpt!V!r1Kv;WX~W9!|->EyfNY}3gxu{$8OcH4~hfcO{8i+z6zVt z>3BoWPg>@@Q>#s3y52OBHHhJ4bCEdpTAysqJ(BEmem3}7rfL2iGHDFr;Xx;X>02KK zbbDVI_+D)~Vpi~N0OOj9)5S1r${|}Th{*X%u^U+XRgEi3ZwvU6)?F@m;d_#IWFM0r zxTD&z_C-$+cyCAecdNx?uX)hVD}b(v&T9kX2Zk@L?%*Z?w&aRLOl5%TMRJ}s)Fk+G;u|;73IZPbK(i;bhk}iEMmb z6k0i&PmyiU1RgSXcdn1(FYKSH_y{f6fbZ_^)^m(L4mi*7)~|^E4JVImX1dYlT{8Kf z&&0rzz;njmrF5SFek|N-mhx$hZ#;JzYKD=eA%lW($K_9$M~?ph!dK%ThgJ_CiK1JG zTx{~CEEJQ#HO<3m;ypK5gI&6WSXr4vmbN670QIk-em-eee-s)xZS7fhvV-#VAob#= z_wcOB~Xw<&;L$v3dRi|`I+&&z5;#g0C zJVO-PoC$Fpjg$lu7d(!X-yeJ=O-_9v#Tv6)M8j$>44jTdWnXy9REQlu{{S1J= zKBM9(L6dgSr#Zo+nTIMke+B$y*01%clUXMLvDDX3;ja~4Ynt;U>_lMlbK0@>NNwQN z6>V+bdl9+DFHu36FSRXa5?nzk3Zlk?& zKLY*}YQ8i0?`f=ST2;NPM$aU$rc8014g(&&E7&cb>P;A1*~*60{q+NqE28iYrZlZO zOM7-j90A85dR1a^E>W>GaOph{s{R@4mYyW=#4V*i`h@aGJ&N#aU7-(eBFWc^`Pbmz z#n?38iN{NYWR5+E#Y+xLbv5tSn!0N`v5M5>o-vy9p*ES`>7+xMum3Ixl%?PgWOdeQ&@PfG?8v_CL}k%TJ4Qi&RUAhrQ@#= zO|N*y4I@tC6pR+z-@a3hJlebTH5`Gou_L_uVANanIY9tq)+)5j^GDa)8(jjeI zT4QaP<6Lmv>v((nkS~VA+Xh?rW7ip|_4k#ac%j6R$S}%#16LnReQQ&1C4@2Ck{Gw~ zVzVT^mR}IwE|n9N^1}M=IPF&`a;u4)XN@iNzX&zFnpr01W!%Ze0nR&Al4){(Z>8xZ zG^!V8W$&8S)jl5DY8r%h8iJT-{`2$|ZfzU;PUbmu;t`bLiReeQK_&-|E`G{lwzC+x zy{mo>@bJ)KX*GPi$&xpF)LQnR=ln&|nXsbVFk*Til-EUPomW(m?$r579?|t3={33-q@8*M|OVayjh}KX^bOycj3bBA+W&*(zEV7G`F4}Ep?th!nU-l0~WJy z4d?v5HsAW^-0&#k`kM86=P)Sc~`q!EG!@}zC zAt>0-75!UUnrQs`gq8O^JH$JH+N+l9RN}TWT7LKMcCP;bT=0S$g3PC-XD@=*bv;Hs z>*uj_64@Q?CXRcX1+`q$v!h{IK~L=WKka!Jnzn)5A3$MfEP_ADV!;@g2niScDM zOX%${uI>KOBWwd87W4wXZ!p74mhnfqgpyiZ^?fo+O)}h=N(c7uTvx$aLIso|&&Bk;ikf$sTJbhUeF}8*7$u z4?i|DTh{Vi_5eIcjR%PbNDzj46Fde$qd zF_enF4wBZ8K*ugeb_iR{>Ml3d@CCK$pwC zu|jkA$jPpYPrHHj6LE8U72VqqT1aIECO*I%RGQjdYeXzBY^jWW(VD_W@gmVK%v0|} z@;6oNDu;|baV@m6Ev$?pk2wRU6+F6Q_-{zLmRSS4CIAOGuQk29*0s228h)F5a;(_h z90jmH3XzP{z9s5DDe)nLPL^$vFv-p_UW4K9AAe)dvsBe?5sCY}kZYXyVc-aKdpVy_ zUn1({GL?|wmp;a~qVR`?ttH2Zh0Vm@-iqLWKPm#}VXOGFO24oVsH)x}$KQ;%YPI1F ze$rpD$E2W&-cAt$6##uJ63*LBvV?zQK{LnMT$eSu;XkupYOoYdlBxdyRyZs56%)}7 zYI-+`SZJOYS#5Bv>z+FFt`|v~SJN-9ulZ63Q=HcC#NAonNrniRC?F51tlb+$lH*NC zE*ppY>(JK>o#b{?*z@>o^bZtk<_TemB-+kTlzNYP>a=K6!*&T3kt~vux%3sYap0X7 zL$Yh9jpDcsvnBDt>&0fZ{+DF3$t~r$j@)kTV3gP@$ zY?eBok)^)rGsqlQbzwZ3{g{_Qy|*x)p;#Kj@h5|Pq%+$wdz|{`^r<&d(BUD}?;+Ki z9}!00KqW!@z>INQ5_l?YQ^H9;jDW@Fu{`6yJXVH>5B9a{Tk7_%&Y*%-F_J5;OCRjt z2#ECdRZ$}rM&*E@e5a7hqNAO%rrA^4qPWtv6--+v$^P)JyTmhF$s}gpG8+di*w!wq zCDo(_;du6r*vYF;L2{#z)pQA7H*G-+9;9`tET*;ck{c*?$PYL|DoK7IU0L3NKAClM z5+9kPfRT#V(!67%TrZli6quZBW5_>BmW1qv>mCa_{)i%h2bzBht>KRbUg*}14AGa` zHsd+Pb=F=cw?!@jqpu|!ujN~MHm?e}dE*QvT=eOh&do9#zQ>bZ=rh>f$ndj5-Ea;m z-X5`n{pPmuj7d3^<})Jiz{Pc+6SS{7>+L#ra4<@adRIFo@Vki^1&(M&&<_Q_4)nxa z@UMhCCE;HRoBNwvF))zhF!SEI9}#$t-^5zzO#;F>BbD-Sm>8#gLTkHy4&DoP1sZIy z#&9uOp9#D}qUqW_2)w<;lPvwZ%TSsOuguhTp@-%eGemhTNQDx5KOMV~cj!)V$CFBK?G_8)31qanqX6 z@K&bt>hhH(l2r>IJq~L&$4}HXJGo;KN|=3zC`Rvk?))q8m9(30I%mMP`N1Z-DkN~y z=6j;nvElc>iB0r|IF)eCp8cznUkuBqYMZU6c_JituA{{F?JcL-rDKW6akqj;UMje_ zwX?HTF-q-@xy^D#*`AVDMy8LT$9n)Q7k8LNO1*Z2k&(w0-|5;y+(IOXWjgL1KRV3uXMhZGHlv^-{iF?!jq^sxe(?+a z??YHl51XDl{(skUQ`W~tXKcUNiFFB9`F92fHLE1)4~M?d{{SsB_}7{EPsPokPX&yD z#*Zs)^5o`QJpJaCk1Dz3XR#IBHQMSMA+m8Lvy6sQkbfGu%}re!#F-hd<=()MIjJt- z4xAigty-|!woJ^pz^X?#jN=~+F^(+gpP83diLn%MC?!fi4qgO@;m3dqr7WxJ9o zdI7i^xfH@kB}<|J2LmS=tR}THzNbOq{{Y`A&%6LbK^c^yB(x#W$ZBXZW}IJ7B{ug`ICS$OPl zE2c|0^gjpPLo^YIu9I&3a&hlmwaxlTphED(+t7dpKU%wa<2TfFh@hCEb`ohQQDKCxz|`Ux%`UY`E<+|5X_qDljlwy=^vEe@o{tHW? zX;9txg2oiJKkH=#F>&ZX>t9R!Irw+spB4CZMVi|!q9Ev)=eHG#`hJ~hq#Y{V&}s1U zWG|fOkG)xzP+a^hxl4-&d34*JQ3uReH$o43=btx0`$+aXYj1_RMUJM8eQRxTZ3~8l zU2++RY<8{W(sUb}dCk9vG@GfAfwEZC0rV!gc)lii4()%y3BSt6&lvvk9+kUeackmB zI8F5aTyu@fvQ34D)}20WZpf32x*Qjdz8Yxye~bLvEhf-R2JvW-e(0R~^sCxOg{(Cl ze@^mr9Wu`HQ<B`)TWQ5|)n*cK7$@T^7@%7sncI&`O6YZ1w(k1A2A#OZ!=-fh0*nsU&AR ztD-g*Gf5t&Z)I&9Qh?IBfCvD3SC@Q5@#psDnH&}{vd;ihhF(VBYQykH#ocb^{cUxX zS+s>aWf8@PWbPHcYgId({JoD%qx1jpgP|z+l?RGow0$#%qjR^8x!yjLmdevQH#o|plBk@EeT!tc73$Z}< z^r|H2Z?$R0p9Qop=0hrjGj1O#te+HkhTeNfbS*`JvecMci3rXa_&?6EuWYWYqqdt( zm^Phqp~mC5f!pS+t#40le&G2sjhb4Ew8L`lyx<=Ej+Ien*3i<|JSnDlVkk6CKT?+9yF+Lwf_qg^w}11g(GUr(iQdX<;bm`$ z6E(VU?S?1Z*G=KQV%G1$);eaPYc|cqG`Jy09<|I(YMMR$=9zY~-dWvm5xhjOLHr<* zL}{Ru&ouGR$1Nw~hOc#F1Q4yuD2Y@rB;x|Ph<+{E{5jMutvp#`y9o;#tVT?XNapLu{%3kfGxo}-oO5=*L`cG>0Tqf zlHX8xUfEy`8zX_`pL6u8`p1H;wA&FP$2_TQyJ4AFnAjdOp8abMR9`zh(*DTJ<4^3p z1SnYTmVB?vmpS9~t<672hQ*_k#V7Z&bp&oJ`Bufh!dr_AOMPMoKWjGtvN6jT!3U?O zTFBS+xFhjh%j>MM+p*x2v`6*yqm>6cH*aq(^qo2)(5tMHs)M&Y8e!7(%biwBo6AU? z!-tP_dBMkOspCyXKLY$V{@T@UEt`xyyI*NLM ze@ghDr}*Mq?H@{oEp@#%UnLYqRL&Iq&AXxEtZEvq%+?cGM}2b!qYP!Fwp{EB*zW1g zbN0R)m&DqH8ux<)dS0}V7xOMgAu31C8BPIWI(yac27FG_{8z6&ldJ@bRe#);`@7FU zf$3XQe(5iBF3-gG9x)*_ZCdsTG{4-2cZ-2+F zUGYx2r+g&v&bJn+XC=+;#LCea2S5f6;5ya4cJ2=!$sOLGh$C1RpSm-F#Y~MNdCO_- zrQY4g_o8ONCYf=M2*fX?!47fjT|}B(D`9i?hEmJXv)A#jI{1^WAM9@?*!k=v#?<+U zsf2l@W;&DQLp~_Or`*`-_x2K}n|96SAmca{#Ohk3O%K`aj>pI#4mhfs-HrP}9QQ8E z92qgAe;3o%s%m#_aPeJQef2=BxaX%lS5L7<3cbwzZ^V=7cP$eF(jEsq=ArN`moe+@ zaj(eB3vvTCMk<}v@AihUuXt5kaO=ivGgsCwHNA2x8x~X`bOQv8)VfI(8m*qWp=y^J zq$Fqz#y2HX%UaH{E2~`{MOyqi6FO^aEQq${vp!5 z%_Qw}(xlq6W>&AQ-}qJGzJfLytg;020r`UGj%%>fzA$*3;oP>G#;dB`u#grp`JnXn zta}Svj}_egres%wA)TQ)7_6@n>BC&rB8ovYs+kKClau&Wsz`Ne=zRyT{@eOjjXXUX zqWKq*D!WJ`A&3K>YL~;mj&Jb~#M(kw&*nu8oaM2{HRIZjg=(4u3yV95OD~oI1zV+J z_&>qA=Y(T7z7?O#E0;xay1Hr7R@CL@zNgw+``hc^5p?-2t!?CyEmaE)5Whs!4u!5xd9RU1m>2HMJ5TNnKjWzwv%s;)<5-b?1{_1N%VyRPkTK8{sd7qn{ixD8OdDhrpVP_}fvr zxz!Y`T5~iIu^0}cfJd)NkH=mOw(-<3Lw6i#S@xE0Ff-Pt+Fx-qgZL5g16}xqq&e~I zb1bvCXv>|)ZaL}iUa{i~h&(mnnJ%>aD1~<%40f+5@$bb{_$8@W+G!eWm!dQ)m?1I_ zxb0oXh&6-bp99PwQy-rfDn<(AQ@JM_;GY!Sd`f%EyCTf?(qJ6m^~HL1o}VmsD7g9E zaCxsj_%-1r_!Imu%M?a1xZ%0$TVE12>%BJaC?PqLd@Hhy?Bl< zE#|iRvn!T|Fp-bF-#GkhXo1N1r&?bEYCBIWa&`g-<6eQF-W_MdcJfM~$K|VYT(89c z00Mt#Swc#@vO>j%(~@|tsP)LSPlj=l$r*)Xjq-lsCm244t?olB!=fJ>Yx6=tb%{nZ zMQD6HyGOWrU)K_& zbbe(AW5{(s3W86VIX=}y_)P?7iuGHc4=u!7u)T3r&xM!EJS}BfhXyGN?Uz*Ts6yi7l+z00Y*GPaNOq@tBrLRZpXlUm=LY z%AAguE2HbrivIw$q*`n<+UVdMHa`7$Y~LHTtB)91YT9MP0|mg7%g?5J*OpDG$$KG| z;zwe~Jh3!Ks}1Op7fEx}@U*?6<+C}|`6YAjzlNXiQj2?QTYGOCX;I58BVduP5Awx( zhM(gLKZ?E^gI3b+Jjm{xAcPJRBRS1}Qs}z0yJwE+qm_$fZ8sEnuK6O3YOcS zzA@6ZZDfbVnmwP0d^<3iB#cY5JoCp&xqqg&h~SQWivy?2^9{MheC1^Dua%wfN_w29 z!oLK;q-wKja9b^fmOj=^!ref$_MWxL5@eQX5?!WXXw8S?ffsGLmY7|4xpWYbR_1YlS;UP zZOBgAv*W#5>dwt%c@^bxl2GJ+6%U5B3!O&GHwsA2VJRENB+_Y%t=pKTkjJ!Vf%mE# zon5{fXj05v#Rwd?u4+#g>ehZ3(Sz!KZrg%WF^rYtJl6~1PX%j!HP;$X1K(RsWXww? z+>F2vr!^_uQdVXE00rxid`i5yzSCs$W4Fsl*ytCnbe39PpELcTfOy-GYevi9o|I;a zJ$`nI@rV+AiMGf800PE1^{zw4Qr!3_#GhfYQ!Rlf_k)qapp&k#vD8@HO>Xp)H zb}-vtCZLOnX8DNpJv!H)Y0^HMI$UW|d9k0oyNUfPx6^!9j~%<*p-|(Ij+K>VbX*;o zudYoVthWAQjwez2irBx8`#)2Evqzs(o|P7vZ62*>1eWWc-;Unmv^-}ywbZ0ba0mB^ z73axWo$z-@JK}!|KZMz8&rCeUDT!Sn9e$*Tf)8%gTt14bfp45y)jGTZ7OTKOzA9E zUt!X$+W5IO8(df`82g-5T7~k#Zd%#%C#Go~2RCoyC-AWYQWq0Y5M&ZhtED z3lE7uXRr`zV8{pqfu7YI)?`XIJeEs2ZR4L$TgQf3a)5>DUVY=QhI*Z)z+Vnt$t}x| zGdpl|n)h!Ku9L3al}M#Yr9Ufe0|)C_8a9~?hO_1X%opU#bIolEwmGLsv&HQ$JW=qE zPyXET^`XCxegeCc>B;81?}c9&Bk_#ME5NX&z}^rxb`MJIz9ZksbEijXdmIx(5hoi% zV~=|CjS?$g32Od*!ieLLlAtI6165M5Ijyjt~w$*f@nLuk*vWLf6=W}^QL=i!1$ zt;cf_-c;@bZ(5hdKM$RCU+oPpKp<8m;f-lQt$%3geol_zuMu!Ee>w+q&i*i8+gSLb z*>9{8U6G*4Z+h+i9cqxzWh3bjECl23ny+W!d#@8|vdyZ+8%U1JoM)wD>$)}Hhb&`j zd7^`Me~6FeQlo80&3%t=@Z5{2X^$F9zA`>>j{WMUkKoH;s{2yM`D3T&N%2A8@YjTm$R2AvfU*IeewE81inANv5=Dyh7zSmIpVqtj{@DT#ueLd9jPC}-(}PP0JU^R5xf{(fbA`lj)J;h z4r&ukr>MF6=RIi_X4&{+OBBxHexkaM4c?{HqCG5p!-GktX!2dkOoU_WU2ns02F2m) zvn-`px8vThs~&3+DOk|b{3&u^S+29wHN^a5)O8CzMhjgrNrZ)C&N{|?&3%lIhf_{GB8z#{irI?z`94bZJoTsC#+ETf1WEuT zjs;B~m@TJSAG%f*cLc7^6XG|97CTFgN-y2QP@C`v`uN9V_*E~5zAk$bmU@I@*xZfw zQRh43>7UNKi{}yvQItGvFjS0#_*ax`8a2+F;xdsCxAHfcZzB`r#SlEHJ&t<{=91-n z%Wl8d^`WusnogLH3@Ds&liVy%z^T_#&OMF*2Tr7@=s)p7?5x{^sadu!(-c`mQ6a=*xa!y(TrxJ zjh5d2Z!v$?04p=YuRg7!*|w^7?N!E2XzO~2T}lzR@0@h5dWz=Jb}s6XS?U*--e?~z zdr#$1{{UdcHStl!y_O{$el?t$h-;=SKIEHgTJrmRH?cvS$p+m0MPq{+rUQc13#TXZSs2JK*RjQF>9AWh)V5dgf1`k9iT01YdVeZ8O*w|yt)>3AJi7V`E(sVWpwl$# z*zPWtXFp?L-!406iY_$^eF{(B{ObI<2QB7GxJhf#7(=ur%xLV5mm-RZ1mwXwXqV5tc#h)-TmYRJ{RI&ZIJ zmdJ-P9pq=FYZqe&x#m9L6jDwGA>O3*v3kj_znoly)c^D9} z{EB$?qCm{M&k{b5tgXGg#%8%+B%$K8tRBxo@iw1pYcG>_#EX?3jtTz&3e)(rY;3$K zZ4x8}qm(x2)NjT;de@ZPS~Rd->N-!_CAxrye3D4y4zz;jsq1>(ww-)h+H!8C9$ESx zKdo}!G|=W#YW7n$*hw-;jCo_VLk_v7Po>4ETp7INUoD0|h*cZU8cBI)Bsyw8+9w!Y zS7>nCOaBVb{;=UPkJ7FqGj;y}6y3B}RyX5`NWsrq&VnTHpNWyztHJd2t3ESXX7c2f3i&{Q zan_~1(?7L!sN|QRw;#w>@iCC=-Co;VxLEE0-6_YdR?)QCwQW?x7DQ-xtnFgaEU!fH zw-6lltsO64YjjyO^(D#Y6y}Vg(mN}k65VL=3lNM)ccw&iwEGIk`z0&RMmep&4(rdRcvkaE)rp?T09YnG5CH^n zSX#yGdPcah?-v%g2mtbq>@nolZPokh$*5T~eV*FT?Oo?<5IL;*OS#qRTKu+N8cjl3 zP8vf3{RjU5uDt8wXN6q2&zEm}_Np4JI^yZC;q6Xn;#uVL;gOv4gYxtE)}$UC*M1*(XH5HjVKirdDvwxV0B#3c%ikF*~&`g_q}IqAF>*S;OpzQ)Jq zn{;cBy1D83SC07K;eFkvuD&4f*6+1hkmrx?d)LvLHl=9SUu%v*w&pfwPwwP&BBl6y z;ahwE0JXW;@W@+sMsPdRB3qtarpc%H!^2jRcz}Uu24SCPP4~R!awx3Ax6e3wx z>B!vJ#CwPb^2K{6jD8Bo6~3fwCRLhu4FZP87_R~FZ;Ney9sbkWtX?~h7MJ>G*=@*B zN1MDJ{WzeOdLP7X0rmYYrtp-dBO@%TI2GoWIx07df3oh_#Vf=dzA|~puS(OdVbOd| zeCB`jV);ZZ*pE(~>V~2$-&2*Z<7ApdJ7fv~+In+U2;GrWV~o`PA6ng9$qbr<%xrl8 zpzr?x>aGLE{{Ro}bXzCA(FJ!rUgumJp2Q7?yAFXC; zekl>_UPa6==Jd+mSkhP-r@} zj-vZQDBau|;uA{^8+B8Vkhb~2VUstxLqOl5E9S))5FZe>V!uDtk za^xOy*10=>8zbHu`yd3i$Jf@kd`Ews2kf^Ild~_JXRUG?4v`JK(wn9VmqaiJ+N+FpQn(&X-dL_Wo}-?Ex+&D=S2?FomDp79@c5zQ%d0Pj z_QD%$c@4e9igT9l$I#bV<9~*?p9cIQZTvp$@wP$8$3g90o8b=$+59B%`f2_jXdd$8 z_tz2tKKbDD)}N?o(|DrVNGB^G1G&#yyP`Qv--N#wEo?p-Bv;6$=!6*E-m$(gd`QbG!y&KFU>sX#D@cMX5TeN|Hid7p&*1d1WUKZ1QN#NwS)Z?9A-T>zd^71oL zJ&S~OK6dc;inR}j9xJt5@@spiPdJUDNBP``|bJHfdy(3V#Wz)a3$tfrVWahf-t985aP)RYeD@BlJpzB(_jAgN% zYv9+jx{~fTCPI2+rDk2|!A!UJu0zM3F_dgVN`l1DYg+<0-d>AXRtlbDU^aB z&2Xef;Aex3)+dBCIW07)uh(n5jwE6^CnuV>xr<~PcZ7F%GT6+&=?d(Gdjo+*Y{lZa zE;Y#}w1k^88lwEXZUYDPqLC-&oVJCrbUx;4&KIe5wSucG{4;f9h{Ax<&r zUSs0V4>B%xo^#s1Qy+v+Q`Dy`qseZqO|oDDF;#rvapnw>T~4#2mEDkQpSja~yw}ZF zpy8=er_RW<>*cVV$!c~v>T2|NhGlDr&gQiJ?gs?cEy{Uq#}yabCW=Ki{HQ;?9;;n+ zWgbg2mT%d}`vdkp{kxOEc6xn>j&9W0+$zSAOxO{O;1ABe?XcEuJXPTUwbq=3#2wIcQfl#!6ImoMr~)ix4%n+&-Lm*w#S%n5Yj!vU z^U|rqdZPK#$Z;lXRu<;j-RGmNcL!RB8&il@t$k3_+O&f zd_2*Gw}+xys^@j?Uziq zFDnwViHF@C%KkOZc!R((>Q~QoZRR8v3=BPq9{&KDq}9-yvF!c|U+nD?IW3pYi5tu( zw;cZfN{7Zb<6WLBy*fd*f7yuV4a*Sz@++@HFfoE~@-=J6fphpz(NIbo4m%9}+-rO!jU(9PSi zy?x=j=e=iZe+%ukds1#9SptEx+OBw4S5Fhew6IqC*GmSR$!x=TAvo((1= zV|{CR{{Rx@kz!Mj2TFdYqH7JPTfr=H$!oOl=m0sdRMYi)YbYf1l}S)*$-XXpQ`8`K zhr(8|%Evp7!o(lKtjO0k5@{A~2BMqoEqN@ zi!(-@k9y;EOHU8@t5EwkzR*VL(%rMgbiWC$CekcLkCP_gNNFTO0nfcd@iXD&zU}t$ z%^ktd?^IxZb)@5CC`#u$;r{@GnpcCaH|W}AP(1Q*>z+aUYt}Ri3!e_HsCj&-Wc$iM z>0HmlyKBvVPfxa>{{TlJLBZ!7S7&t@zMdGai9sJ6aa>g;W_H3Ul>A+%+iJEi454S< zcXjA%lF~dAcDjR0EUkmvirUq6G}G@|7~HmdlbWiRcP}ns=zS^0-5OfPskV|Ea|}SY z86(#fr{Jqs)+2QgoyneRzLh&*d5gKo$4c0^y>AF;k2REFy8?P=nxUIkOqP(C+7M(N z>!$FgpL0Cm&AGVX8soknY7*maY-zIPp{Ev9+aXn`2QT z_T(Ct`oqhA+zcog{A%2C1yPI&t*Ks-F42xfZ75k8)1A(K;_ny3?L;=y#%kuHtVQ-v zRE+Q|CjK^S+~bO^eJ1QKYs{_j9g!989%)aK$CFe%UEs&@29m-V3^T7g$5J|xSF9OU zKzQp`?=>GS2wZY1Jxe^}!P>afZ^NvA+1hQ>c^3BFKylQL{MV%dKFAgMY*(51lEQ5d zQ5QA|=DquQQ6r4U0qeWl>s>#Ayjk|x4W;P~bz%Fd*c_{{>Qwg?oITgc{a6l`-Zx7f z=-XJa$nREd?xTj-l~A%D;;i}aT3fJT{{UCV6{l-#H7Lr)2sETpGNSOiYL|^Pe>{pe zdy3JQM-LnV7K<2Ac2uiLb%d(7>~-Nzm4o<{IDEv8#Y zV2<@fh!AZam0MHQVVYFP22?py+*L2_mGk39Iog#3EH1S$=R0dQuF7u3xTcL*iI5j| z+;iO4j-KWK2toJ0ad)`<<}4<9^sM`oL#W5)^zT|%5v)3tMiYTK3yL{Vxs1J6Op@DI zu$5hd7|!GP){duiURfc5zEGLK^{Tq#yqbyu{{Sq8(fQSgEQp=ulbog~O~x=zH%K# z0ez*U%O*}ZH9eo7HL`iv1jaGJro&{AcyS|lV%YVl%K0`S6^LVsIZ$&O?P#;<@iey~ zqCu5k?$fl}`0XWcv9L#Bw701IYMzA@31J#u%GUBan&igmU)(^%&pT7)A?UkB#I zEuGKV{Ij||9)`T$`(L;4{{V>Q`y>G0qq565Jh|>q*0tMO)NMmasySHHWiiH0VCxp? zCZ!d`19`e3-@Y?jL=o6{H%E(Ewv$tuQ52E_A_ub%PsX-1?Ly;Cxl^u6W>M2W{c6Y4 z;EoG11adkE7tH`3r1Mv2V}GZHAAEMFAT>Ny;#ekrEL*_T3!t_t_|46*Q0`4M~Gk}KJvfqde%d{ zjv+4Fg{j>a`zEwCtukFf3&2PO=ZepYHnfPxCq0g8xkYl0t*VQugI*oZIv+~T)V04o zN7|oo2a2_+=}jrzGm6I4>>5y2Ged}6sSUGf+K<|7i9tEsee+tno}QD!mjmzjIjs8| zX)YZie2*`R)4aEr$q}g}R3l}vlj2*})Kb@@TO1v`c=W3`dO?9# ze>=ZQuM{UwaUx)v-X>BRt@uggv4521$0n)hdRyAJml4BfrFGg((AI6XOMuwLRk85f zTk3A)oM+axwa!^PGk3!FY5-PHWHr!uihs4~=^Ap#0-S#;=Cr%EveiQ$x+|d4FB14p z&(F+Aqm>iPQ?`;l8%#+p&_^U>up_a}Q1K4^Yffpc*a^=hfHKu{#SRXf=0D*ExZA%F z&2MoGP~&M|n>3t985$NEqv*O{&gaiVl_!!7F??E=S_Sm_+XHa_0P@keJe+o{twQWe zI9DSFty9)wit@>=;$o`!$sWeDsU^|g&T}LqCQrLhlsSa)w!GS}h~s@iBP^EDW*E8< z1~7Q5FRR^nufqpWypgBB(~!Nrx%<%(*nSlTw<<5hI5)-`;Mr~2jt>KzRi6%MmpXro z?dAhNZj%oYA1*QJOw^}u<9khV;s}1t<<1vu$DSWO>(K3WwS&Wg)5KcBtX5-vxPCrk z!NJEoS2=g5>AFXZJgYc2dCR&|26n!2k7~>K!D0Qers+1CJ4%w-&eB{m{{Rvdzz6Z5 zXH9qUelG@1Y9BXI+~Bi};|9B%KabWLJ@i(-8ksGi)sbL;u6dP)4m001=Y9yk(_!%* zouzn+*i4gKGpn-a1PqRPR;P=+H(@hDtR!rc=+b?wWJC8`Q<3=MgE?+{IM?7AB zQ*{(%24l>g{+08m?LXkHE5(s%+P03drR9#IC6Z*$=1>k->0YF|mxjD!;p= zF4KEp?I8aEv60fee^&7gyxuCGMMrmwX=X3iZgG+R)dZLH^|kS&DLs_Rj^H%7C-($; z{#AEex(}zXn7?Wf4=W?uxx1#d_;;tyE##AJ#y-ou^NjQ6e!i8xqUyHSHeu{pW{9Te z$p;VKsxsww6tybbf1+E*G>2qya;fQDFN!=ps(6#cOLM1OIJ5+l7*UM&HP=BqYS&X4 z4%kx%X!os68ar0BX)RAG`*2Nk#=Vf^69U6Rx`NpkQY_(y7#`w}5oq>SI!Q}7V_p9M zGXeZYyIYF{y0p(63gdiPX3h#mPeYGtVUgXG=ELU~!T$`Woo8 zojTIi@c#g1N}xy4MtW3tb~EU|Ws>vHxJjki@~Ljw?OQiG#+#+yTccTDshM)b!oYO; zQ9CuEgf5wx;~ibK8*3QtU&&^jQe*w(&mjI4L&iE8p4g2UO8FcsCu-Hy{5Kzo)>hE` z!N%s`1IG_Kav;|Q=9z~S+W*C-Qy#-V^a86!;JnQgG~{Z`%8W7b~Ww3JN=P-HLZL; z->+NTMSZ0~y(ElnJG$pM_o9vBtSYvX9pOI`U2BtG>V6-)I?b)k*(yB`(ToTW)0+9W;B~Z~2(;87(l6Rb66Me=(gH^Uz0=`Og(B3n=^FBBf6~AW zmKC+kxl5if@cdpOzOtAq$#W@Lk-LG`y8i$YLwr0ZGhNKlm4giD9DpmC*SyUi#TIbe zW!41p*F5A7D_2tSB$k)A>Egk&OP<^;Bn%RE^U33_Or6G+kDEMuq1@g0g(cJS)}Qj( zfEXt|{{RZ~--otMbE(`x;Q(W_7T}dbk(`Y6u44N}y}s4%(@c!DgpZYCq_#bcdauC! zDjx~yi9G69+#e{0>+4j7Bd61}*l)ZwZYMx)tPm;n2Q?>)btcfXgw#S4CCdGgPk%xD z>U+QRFBQf1fB5yeCEw6-T=$DSc?P}XD6|MsUMNCNq;vC=>-bi$V+m|SscZU=hx{VT zZ5)x@5%-5$@yKLC}?#bh#@T$ATXTZ zeJePO>3$pA&u^>gQo|u=q?h-gW9A(7uVdHr^K+vH)8EPGoOk@|fcSgiPwY<)KBaKQ zqqk2na(Y*0(@m>r$u+6OX1XFXh4`DOrJ}=WZ4TgEi2(i~isZZ{tX=8)h0UI`Gg?|m z9imsp6+qxuS>p(#)HReA$-U9C+-A9-7U&Y{S4wpt&;SYofT z_u`z$Bwj^fQVp@kbB5M*V=+1OuRigYh6AQT_pfibutv$+58+(TinJ)?L$yccUUnx9 zb+PEts?V4FU*YzLf7ZB7TEU}d=kTwfym{fZ+W0}&(!7twnmLN%O{?2HSIlED)>|Hp z3YKS@>Q>FT;PNXZ-OFz-BP0XE4^in|R;O*Xj^SMHsRtQcXEpP+oS^g_N-&7`3Y>{{To;%f@+Ru);r%dxf?t)o?yrx(;E{hB+TX=D zJ{9pr%#516k^P-q?og@#KTb`3zvC?~OD$Sx^!4H$lyi$3cf}^<3)2-AgQxwAS!uNRTgx4Ade+ax>Bf!WyK|*RN;C38)ISS# zIQ&}-)^@}sz=898y{l-{i!qfnk2upj8-JyE!%)<`O{lH)w9&G~2#l$SmdGTN&m2?y z@|V`g@tde;IM@z2uBXL*47|{9Ws2>??S@dr=^o29{iW(q|j1KjL)b#G3Rrnp`NR z7g_mTxKMM~@U4w9`b|!IkDfBD1~A<#f^u@)>87o*QcGxJP4h2a)y??tRD(*>rFA=g zUcQyR<0vK4EtTd!DPhp&sQ&$+=G!~WB&L#!P~ z%4u}vKQx1&K9%X76!B%BjBN_powpGH&lx!&bgo0kUk&_k@gG|ICxVwuvhe82$_?L= z<+H&E2RwV#Ei>Vae+D(wvcJE+ZBAS)r3*R{*Y9`cyE)a2k4lF@wYj)EaE^Ze0Dfva zZ-)LC@h+la@n(%AslYcLU<;3?J5_BHNV$#XW|4@P?m}CVD#hNZcXOx7rrV55&(EA3 zA9|M97``z00pLjPe2)t%Tg}ch&idr-bO8jHQN4tglE)JyZq1PRI0x~@YZK!4#9L2? z3vX{7%#!M?8v%Y|2=}ivy7<%LUl3m{^sLJaTx}9^e+uoTR?tbFZD=<$qSQP?;$0I_ z`#koN&t(%3(gT2tRxWkBYl|@^rkiCa0y23c*EQ9A82F_n+PvN+vx-PAhsq^DLw*L9 z_P}c1B%1#KL(^cE(`iN$#usaUvIwG5iwMR@$MElnEi}nlMC%IxHmUwP>GVB%>gUW? zbGA&7eJh&q{+%7?h>|I6qcFg8D@z_21O43fu8Ujnr`d$FX;aDNlayTJ1L@kacIays z-s9#iX3i&*&GQC0;;_sScxv&kE@oARQ@M#9Dl0py(R4!(Gim-Kny=#9>2(`XZ+!xJ zdFKN^r6P?j7gvf+Volh&h%R!xW18Ra_l-1dX8PvIMkR&9pO}27isTNYEwyyK(Jj>3 z1q$P4I)AfI(|kJ&n$7;RVxCgoNF@umX*~x|!i(4vzKr(k$%Unryl6hr8{-9d+nSSB z)8)Iij@M9OExYlz9V?vhr^FjOZ7ow(EE+uHDVo)|_=jP8Xjvyv%g|$`Cst2$RYEJF zEv2$}ZPwn{*OF<1a5P{;eV&G>u6)9CuVlHE4zec2$ke@fl9)GT#< zTNdx+h3k>9Q&DR~9LuTMXp=%+URB%0ZCTqLLI#fI3r5+&uMqL~#2LTgAd5!u+>X;b z0v%2U7nAc>u6P#a?L0XG-mx;A=jP388f}?6sU2Q{rY)pqC>$sxcCP;b!d_gns(FAN zy>VP-mlE1pd6zv;wrgYI)~=S?s2Y%9q~npE_0dY7F0ACN)k|FTOV}Z?RX%#TJ%Gh! zUXd=Kp>jb{&3A{xx_+yntIP|NYA|iVT7UXi@OM-*Nts+sIwHt?MY( z(hu*quS(3Z(BDqASsSY!#R_%;;{{ZTcu046Ii-OA$E%))wYIsUe!MwxHYdcwv;%c_>>ekH- z(&Rul59M5!hwP-Z)+I}i^<|FF_D5>#FX!^FT&duU8mDw3lx7SDKG>>Fpyp+mY@@X? znNOVCvcz$b=~u+@q=dk`SJJurd#8oM%ugrQw4k4GJpQ!XyD2;FCH#b3?}&j*9;C44 zgk;EioYQV&$vozvw<^uGjZ|WpE<-L=uNb`2VSNo_UupL8$(F$@(-mi3nc^fua6PLI zdEO+;6Z3o4oT|hrw(KSS^GB43;0`M;;_+FClx3U0rCVYo2XV>z)=sX31}WDSC32$6 z-o}s>BPZ6eocVVf@sN8{72JK|ez~VD%BSBv&@NIrV+n9%L$tZhJu2$BhTk$B#zR??k+0RdEplr+_iGO%1&Ydap7`;b6sGGK& z=jm3Wkv`Fo*_MiZupNbu1oo{Dw#jdR=XpKqtV!muk}=bovy_#2#zkC7dhTj0W9*(` z;w?TlT#R6fHwzpU<)g|sd6)vKz0eRcV6*fU)7@!t{gJsDu1fyZ#LO+e{_Z)& zD*+~xVoNlT}%#RhxI^MTT@* zeZ*_xaj0Fmn&G1`tBy8Qd(>G1n>ue0Sn56o(kHpPf#tZqpUqG>I5-)pwVTC* z!FOM1B0WLVmp$u8{t^q17x-Bx)k>LQaEPU|$6ABM8dMkVtuqbMa2M8&RBaht#Q0&V zrlFve*Cz)0B?2e(QPgAUUWwpDUlQn-i4DT}433h+jF`uEC*Q4c+FysPG}uh9#HxI- zp?c?v?EEJUx5IrtNpF5uzf!Npa;A$SB=t6aGicWqz7z1&-WHu;{?E5`RokCD5;-22 z#bRjx00k^{>$r6mQTB^`O(@&R9sdAY^nFroKKHawOXr`Zht!o*H8JBkNLDPXnkvz=X{h>TB1L?Zm&6Ea6?lI*6f7SFA=Y9i< z^WlBswxGuIO}b6nlx-2Sa8&26E8hH3;dynDrs&=e{{Tt2od}cdXJY3CxhA+>OW{VT z1+&`t>8xTRVij$t5+Gj3fH|p@Q$U^BfnnkcSgvobp`B-f5WZw1f}MJr+VI7#&Y=(5 zt!$*XwUx3Nj&q)dx$Q#Td?Tn_Sy|Yu(GIeCS@XW9y?PC{tp|mCH4)V&Wwx0V?HueR zZ~*O!l&oFsRlmCX1b4Bd!J67V_{KMJoL4&?!s=RzK{UY{c*|suyV|6=mruRcV{1#| z&wkrBvtu=bs(rJ;dg;5ng(ZPb)g$KOqEJkwHj&Wix_q`8MYXC*zGb|H_v5eOT}9@* z74%RIR}JLHw?4dAG@d55)E$4bK_veGvs?B)9RAd{2I)!$8K`o1H04H2T1+{a zz05(wb>lTJQLPR);5Uji-Dh2~wbU2MzPDw>goB)M(!Q_pbjIq&D{V~qmiG}AX6P7g zuZ`Qm(0Fg+)U&&_v=KnkAzm`s99PgD2l0D&gTbkFtK3ZSK@loRB;%z+T8Yiv@E;6# zBHK;)ovK4~0hZoNvnXJ22T$;?pfrtQ2t2!8F$mwnus?RZzf|yS-X&X|M?#;-Sg!dj z{$AiPabBPB%Jk}Y7UoMt7(I4U%0x2RMtrAYi57WQ{`PB|@D`UHkAyUY zgLd-=rF3#=iKi+Eeq1(vGHQ(5xo=t3E%e_HOed6i(yz+c{{U6&eQN{Z$An{!C)BP- zop@i`#PC^xaPG^>ry2Z za{mB@ZKKkye#xf+1jtJq^TDFC-&7BL+N5NJnM8OVtHI)mtveCOkICOKdeP<&TCe60 zdOX4JU)Xj(CLbxw@lBu{(MSNU{W3HRm2L(Y)AXW1Nv+ zJ(y5VIvq5tYJBJ7T^q`j?Nf^5^*c})iuOMhczgzI=bG~$6KQ{Cb}O9Z*TrKf^0T@% zIg!ar5c7{c`c{^m9@H89Dul6O=>2O-)waiz*i>QFjymf1J=69v)-UwWjQSc42cqg% zdGalr7{>!8PxP{fe0zm7;5uD4kDeWz+SJMHtZpFvc0-5qp$5f!NUap_+W>RD)gWjLoTPG-*g?K47V z1fAUbR{WkFj(7~wH_k{P2ISNc=t&KVN`&uYgIgXOD=dK~JXb2J*|li<#-+8DrmNwr zdwoVNIRkcUvehwSpXmKD&1FYz_L=<4kGtzy#%$!2 zOzRCE^HJCQ{bzLX58?xkwX3UY_crF@+R@Q0z`~8A1u%pC(Iz6pGv5!j{K(o0En+!Sg?&Qh#(cu z;aXa5nlAh-_WE>8<HkOC#yUI;-|xHQ^K02k)`PxZOjnD zaLu!*#(LFVBjOeQg*WzIx`?O_^I=rbUJrE!SiuAok&16RV7~7HBxX%zz4wVG0swjCu`3dYO14cbG zSlGq(2aZ@={OATq0SthL`B1REMp*7V*6p|;G zE0Y`WMJKT1x;A`G;W)J|A}O@dusV#8d)FJK{64#rUsb%jFj_IecWfy9YoU_QQt;BO z(n|B%w>u9(`Bwg&HLj~;=Sl}3^3SzqbeztC;w$eA>QdWTvs?hhS7^@Ro}#zY#P=81 zLObZ%7j6h)gHfVELvFPSsOp<$0XOD zd}Hvv%zASF0Kzg}+Vz-#omsf)iuLaYK)0G%k`?{nd{nycgkZhCg5vBSGB(dj-WIl} z9aj07)501Q>jE2=#AlWnIg zCC}Z(Q@M^cXO2U;m=@-^>d5S*a@x}w2``*_)?_4y%7RC&PpjNK`j3$pLrRt=(p|G2 z7*`DBb}fM=CxqnGbD2Z@>cD*|j{_w6iH}#C(gW=09V@z3Yfn~5hco@z~^Zh9JN46$+zL0~f z5cbjbP&)qrI_BDKbbpzwbg|pPW=^nP;~{nuGwW8bAu*J92cA?_l5zf zW{>Sq+HU^DoO`^(v3v9nk~VDaSOW~epC+BV3)IW3G1)n?XaxVE>(KX!#pRkW~pm3+MCerY)9 z9L(u->xWG=22!VQ85K&_-R8Pxxyr9%c&B}$O^A$n#a;UuYhuKnl`)8OF=4VQ`_$*( zHD<-yTcPIt!PL_%WzDAC@_lN1ZZ|CscmkEw*-%B zwD1I7$Gugxm&=`+iBb-BJ5sr68?Ps?wNy!(JeYoF^rzm-nX~IvTI1}QVcxKk? zd8sg%8-wMM&>kw~j;>sCz~-@a89v`G=Icvp#vYZO?#qmhoZl8+c^=hLd(i)wOyG=)#JBNR z+N6>;#uFH=)~L-(Qq0H8WvL!6}xVtjvhy;s)cEWjYo0<^p^7 zB^91X;XqW4-D&BkB)Dg6el--c83+gXYFOVC0b<+tZV`GOGgQsQvEGouf@iKN(%cjz zr(V>OE4*dg)kF(2To|MVBcG*e>GQS3V+5W#tPMW!O)l95X;|NVkg#5qz|)rXq2P7& zs+aeocnOifBeAJ%6|X^KSo+*j{iG~oBNW6}xw!qo1;t{l32}5n$f3#4TD5&}VN$Y= zYaNV>9A^nkJA6N#cml~{3CVA0{&k~Bn*TExCdHEV?y;O+!wx=Le>X%GDQ@;}exP$Xksokv4?e3xk=SNT;}wQ2)4qaBs|NJ^uU>N^Z~s`omWSe`k+ z+<6r~i@JXeIzoDi4WY5K;E;9C88n)VE-ce~0(et_!LEw(QSm3lcDj9}ZeXyHT*$w6 zP&%kJ%Gq1q>6%1MXiGB%7$>poT|}DT@P~(N<x7xhFT-0xT9d!k_iIWj23Q5gi%jRaE_VMuk zvh!SBq;`s-gE9F@`qqw*@taAwndQB@w{3@p-PXB3jW_oC*Mt-M3MKMYH#3jD)1E7o z_(k!D;mxj|`d5i$pZi3RFk<%ipgGywc;m(19Px}VCH3vCtEu^1%eQ&-72kXgytTdX zQozu?#i~b*%Ets}*1Ya-3uqdwV2ELRRc|p*86KQgx5ABA{t^9qQkK$Z{>HauDwyMM zAJ(v`D=<$}y7BMA?N3+uad#(#>~5@lnOc01PVlRo{Wz;%u;;`XzAD%;Auc4e3S|g` zDU;vwuT;DEm#0hcdP%ft7I`H`grgpSt~-5e%|BsV8!v|bCD*O=)f;7wE~6b7)N`|F zGt+#1scEv<-rEwbFq>&bZgZbX;3Lq|D?6)uxa5i}lqwb2^P1^AQ=&A!Hk6=0={E*W z2dS)oi#I>m`qk7@I{|5Kk^%n!0nJopc3ieL{698_;n{TM)^4rst)YmkG?HOd=b<%o zSb+Gl-UH#7+H#WaCO&>z@mnj1{vg98z1*@YgPsO|op;}}kBH`%TDgwGXO<`;`GM#F zY*wTgpAvi}tG2Mx!*6jQw~!WKyh1WE4R^l}HQh5<@q$OGgz^%}P_s4^NCD42y(-nO ziXy!DiFakGU|U{F+mGQ`UM}$Mzk>cKDp|!TDh#-AC zQ|7TRa<7EEEHC^%KG~Fv%;Xcm&U#T@Ux=bl3HV;x*%xze-gEEG6m$8Lx%ji@8a%^Q z{KoY)Djbe$`!AIIjGiNvr&IyR=xRuqw^K(b5-RTNQX+9t5=JrWQ$%u{)Hpld<;GS+ z)i|mefWSGcuEY)rs?w;C9pgV*ww-~><_@V3nGyG{Kg8A>pnMLZyPZ-kpyTir&Fj$v z17${Q&c;!Ew`Eg$o;l*pFXd|S{{S1>d3=$Ku@&$BE45Zr@{aZ5{{RpzKu@|p@vo1} zu+ARyJxWf<^6RKTyC>eR*v1*qKiwyvr9rJHmoeBdeX4C5-LBaYnEdUx>6-E=e(^gQ z)ptJj{{VtcctTBA$8%2zA7!?Y265^u^uqI2x3Rc3_Cydt3~S^s_#@Sqhx|L>y%W^V;-F%+#87D5;Tpq$mbcagW@GOEzh9IX;~84Xm2&LJ+lIbnv&~A zNg>6?G6gNSiXhT$MVt%^$J|wGuNFrpM5qZp&3v3`%2C|+Z_6VWQG?6jakNx=U8~(( ze&eXA?-EI!3;@U^I3v=uye+5sI*?QYanBWsN+(pOa;Bo@$$YDiyu$3l{lbjvHr^~hp&iW2I~GF0P?SCY29eXPyqcyitFddi#;TE=M^Jx!ky_<&jI zZEX4TpMYwQg1j`^k|*|;%746SmW$xK-D6oaOPy((=S?Kr!gKZm?Vx@50BbEM_@ z+BwJPRByDauM_J+>gMhxgdF)tIX{O=;9}DC9Ush^8D7)1cv>q9RFZhpBm>g2 zF09?{NVFKvaf6ETr+S+mHYiQw%|F9>sI=E)WV5~H&Ts}je>&;DHF&6a2jR*z1V<&y zBE-XjRfin?FjG#XUY7cs1MUp|;v$jPR+n zU}KKLrXKF$eGfCg`0=3pIK7AaLqpXyJ$q6o&A5pX(Hoo=EOG_~VQas&`#k173esC? zPZ*FW=kTd~UGO(m(B_r(y+ZK;`}ZMBGJEhp3Oo<+uR-v#wx#iA8+l+2n5LRDBS;4$ zAaX0Jo+1(59Q7&6eN6oe;?3`fFL(IL?+d5!mLJ?*5u6cDFU8tEj%xMH}OV96n3iRxjxY+vDR5M7SSuDf^=ibgPeYJ?OMj#&fH#T>>6(IgU{tyfAEFfz3fuh#&SKYvG`-JU0arcXOUxY11@+x(Wx@CJ1-8~#~_hoAQ+C)O=>N?rZ(Fu zDuGP0(1bwC0t83pvHV7tTY&wP$7sb13>inAB@b;Ui=zc1SGc>}{BLmCN%f(l;(3M5p z^!W6aEE!l-8m=r)n=5o&QE9CSbrOY&#=X0At{cbxI}lw-YLgO3$j55rsa;=0b<@MN zuX4otykk%@rBKv033a_dEMF@6n#l0ONp&eVWt~nqYUv`<@i=Q$3&%lOs%~18<;q#G zuvjg@nTHffBA3KWIH_XNC!2;WMOnA-%BL=%8jXQU=6$A#{jU49Cjpm{n$v?!kw=pW z9$DixX%+(5^3y*`wu|!OBadNF=VL^!RkHAs+!<}b4V2t}8uOhp)x06&8{JRD5(wba z91CsNj$@V&z7u=xThm_Z&#F@i#n zKA5fBUnbL2mMPInxx)fDG|F0%M$IMkYP}gj{cAu&pFAHyRBWUY>TY7-DiFTaX4Y5x z7&5Ue+%Y{(G-pvZNYeRN_UZosO#c9-WO$<7O{gfx-XK(-C%t8O8r8}=;ADDKTC6il zKF}Dl1q2-QAXOxpi&h}hq*$$PGyecA+z-;NL3Y1xWKq#`R5VHAmT3~_7;}~w>sIZO zDK%M5y9PTtW1!6vr|#U8^|4|?^Ia%G-n8V7M1e;<)hkHPoC)h%j_l|IF+5grMOcc_ zHp)k1Npo}L&KEeV5JY|zHeinn8Z zy5DTg+a+GdRy-eA+nGAoFq-g- z{a?%Usej=rlm2=&79E+?Bwj)($7)$)7Z9JNV(GfeT)O?DR$zM`m9#F9L-OEpSo=kL z49AmCDCgdn?B^Y-W;>6mt3X)LyfC6o&PO$V9}W5PJ}^Kgt!YpP;6LkHYN8iagy5dI?^dGO z4pu5?x-XZM;;ju12yX;;U~Z6PaoVR5$sDR;C2q*TE`FnXarQxpv+O_mQX$$iy?d@7u{u;TG+s&Psi0)4!j|(w3AueBg41iBw zl|Idy9R0V0;LvsXrI;y<^x~tn(4P0io@`(kbLm^xwvTnGk#U(9Jr7FX(L6q&{^wikiz?Xe|ocmPpI$oGH{u@= z{ene}q#@LWR_+Bl&S^C{^CPsVfHH&F`id=Jm%Ptu_;;!Ovsk+Ob;N6Gt~#E)R&<)J z&b#7xZ!A=pE#^7*0Fho{pzHUR^4y`gmuBI{YtTFq;~1=T0|5%MM&4tba?4QVVtG$! z@U{GLNqKo|8S^g)W5DF_Kc!)K_VZAST!uR1CcFZ7ZyIgcwwG zLEj&duS@YQ=It^aPTdwlkch|_&f(t`Dty`vD;{g&*rf3No$uS>npv*^5dqK<^{=1o zd^-A_{p@;#vBa+stQ+27EnzsrY&+_04+f;?7hD$aC`G_UTzR zB?iUuufop-_+wN1R*`a-J7Z8$8zUpH6@Yvv;Exh3JT^rxy-KBeKa0K==?2XoOR=vJf>+H z;JHni>419luSC>-2A_tJe`k14Q?S(Z{A{|G5K4j9Jp0zZiQ&KO+v!ETF*U)rB2_K` zE5>>6RP^mkTS;@K_--|gu0Ba2UJ?C?JXAVvr@WbQq~dU|@agn_iVJaR;(anbH|!;( zftmB>bH}E7RKE(oCh6V^yT84=cKOkI5!jm6@fW~JZoJ#QTE^Pklq?w}3{M`$zGwJ_ zqiQ-9p>l37CXUkNZHge@C?l>bFJ$jyRU03o5_q#r)^uwPRv)@;R#VeFu4~Tq-xgSS z>g8`Fibjg{{?EIPcAd56KeN}x;dk)=0PK3po3A3@%N}Pq0Am%K2gDyaX0Y(lF^CzS zC{u-viOxs9Yj{v`*5Nl~dhf&g&k9ei-0AUxv!iV}$E9>12lNd);lk=)+5Z4M_pzAx z>^EkfFywPnjE=8G3Hk~sB~LT5Ut=> z33&vAudYQ{@t1&L@g4nyhII22%SPn%2CzH}cJ}(K4O2dJxiUz4$Z^!w{aaf|H1v2U zWw`rCQP*xoHScOfpDyQ5ta-i@w3ZDVmW#eCow@LgI_yziNK{Ia1I=|2TrR8O(}TK3 zA2W9~=RXu~^)CzGSdA{~duSeH-l%wN`qai?cQbg2E;O6XF@Z+%_7^=5O4jgRr3IK8 zMay}!%MqDQasuFv{{TwmVV>LjP|16>*7;N@BRDu8;ZBZa&=Om@B>w)65ZwJVJQJ-!ouQTx9#3ug1 zjvJZXz-AyHtrWHukI8DCI#ga?y**oKuk9o9A@wXZ2s?#M4FEa2eQJ1qs`u*{6@XY#F}{#whehlj4bjAJ=oXFX3_T#LK4vM-xFJTH!qRU z)S3{+4;jxDq2tRD9mIqj<-IF2LROKLS0|eJ>>PJSRb^x9pV(jH=Aqzk9mQa>{_5$0 zAda}N)&XX94Fb~Q0>P$@9P{b{ugBlmtHP4_qvGw7TtVfnyKOI=?#?UrH^X}D8ux^t zO9+BXYZ}G3InL37e@ghSB&BA1`7L|I&WlNCTg-N5X7{VsnsVw65_O!>%$swH-`6}{;X7LsHKwu^)O7Oy0Q&Xu>qwsJnsX9O6zE<^QRW+_*t};4 zt!yua8^XGK>R0jr`*$jq$6spWG_Q@?P2};tl*0L~&h5FzDzA)uRjPbUyZR4Tlx=kuO9|~HVO)eFXAL2hZ>sWF4S@hLa z1fw_JZ(6=9hmM5;#cKFx_HgLd&Z+ytPEBlTmkD_$ ze7&RVS$-wc;keLeXyn}JI9znC<0~0TCx!e(@zg#Sca%mY+Stb2)^CG+aVL-17~(Om zarbdrk;Q9$s!I;NXe3h123xN+-uN5gESin04-D9OamYUSIot1DajRpVap-dTk`?gu z(Lo=W;kyj>uCMlaX${O#-@?nt>V$W$^Wh)CUnfzP4-uWp(q|-e7_PU(z8lg!3#r6y zSOAUJ9cvoZIf8{N7~d2uQHINWgU0~Zi+ow}b^ic@VIO1L$Oo0pddH7^XQn{!b#rnR zbC5CCyi?+iq@NV;7CjP8fiSro=M|MVbGAyxx5Ez?-FV8;n_F12xY$Z<{&lhAZx`Np z2FuUW($&Bts&3-5ybIxpG)p+`@6KgEb0hCn&mU+rUg_p5@#TU>4_c{5Q$5OF1o-T} zHolG@6xmrk4obLKa7{t0_!7fYzqq@-wwy=LlN)3vJ8_EO^&KMX!m-LU82tN#%zWVH zx(^3@W|-;gW8+2JdFF*wE%#91W~Y=aV%YdTEk9V2`&RQ{bmlliY>1z9?_E}n<4N^` z(LIW)Ejf=}%kg8t@0Hssd{;g1^2rI=#5I4-|;KX$4f>jtiB z-0AOoscw8k2_D$1I^D0?9tMVO!4!jr&N;0KWe;vA@_x`9XBovsEv#484i+!75_62^ zx?wXJM#nSa?G-L9mPRKe`ukQ@sPZjEmd&DJ%K?Hh&sx~jUQJjCSL6{K=dOEIE3yP1 zHw_5JeQS8Tm`WsiPO@y}FoxU*sm)u5#A#`H_Y|D>8LSO9<{_yN*d>lLTDq5nrcy2} zeO= zjss^kgraQ|v(erSX5LRcjlr-g=9i=mF7P}V$LCmDcZTkxCU~SOsCr|qbXr!XCSaEf zvmNtMYZ{)7;p^|WY3UK_z;o$Z4dGcQb!-y3u5-iMj8QTy54rKuy%R{+;A;Wq;4l=x zulvRNDwJAvy!YGWz&Q1(^-XdoJ5jI=V_n~XhIVf)Q2KSG`v;ku@fTDc8S`4z zzGms(xlajrI$s#f*Ls<4#rA>IiackmFN^g>OJ@H7R^0ypwOiUQzxEF^%SG#PB? zCb4v`?rN%ALvVaQi%f(Vk6(Ipc4JH)Y@C7e)q5WrTWaj;ZZ?$YF`U(*Ghf=Ub^X|H zz3W;f%B)16F?!PBZes-p=~cA@By2XERht{7w15SVKaEq>FMiP63|10|L|K50XEa;h z5aS0mLVL2qlTzsu38xC&d)5vn@i%nu-+<5D;-c|~g<|nGi8ZCcaFX@f+fV0LY-}(C z2f*~jE#=9CVFv1rnWr)5UkiLkJ=ct-zqSI`MS&W?MI!BXlpJTCqvb!HdKKM=o2!T9 zZaMuc%{A!ehvExbtUqSbEh0CsE^-;c9Aoh{={_9St^8r5T55Vr?zfq8hx^#$`cy|t z$G7Fsn9HFK*Rj;_x%q}DxSj36LHso~w|Vv%(nA=2oMxiGxJjdF&sP}R=~O;zoc#Ke z-%Q|=b{^i0*E(JbPH8_ZU7lZ;~~w1Jd_ zNo{njo1$`k>eh#IZ*zAe*_PZ>oSgBR<~1!w4O3f7Ik+q`4R#(L)9vHZ%UYmTQOgeE zw0{Yb_>0!$2{LKdH=-v{4+Pd_wz!XS(WuD>A6jk9uW>L0Z5bTqvr#rT;k{BgIjFB? z-ai`1wY}YT(e=UWQyo)#m1X5c0KBq%l)y*DYq4bqHP%&+TN_&G3{La z)~a#MZEH5BNqFs9(rDsX_a3z=ShntEoo@%9$iY9)d2_E){nKVQk3~;h0RTCYA$~9+xSx%v!>mU5Q^A~P;V#= z!m_lDGtFEpecHH?IGbltT-=vn002S%zFC6!!uc5Hhty2hBQ#H^n|Sv#eFZYc-C9lM zx^}Ij5f{=@*AXjY3~F1(FrhIK(yCm_Bm}71$yxI2Wn9MN@v60hV)dtp=eCpY3fi;r zS(0Sjz?$S_iI2_L`_nY*#rshkxdyh5=2F=7E3X!LAx`Dupw+%47#1KINF%WKt|wg8 z+wR7>0ClXp%l`m20347=&(gJf8O7P2w!aagpG0lOGQ?IEhvJ~xp7bLbIIlT}RAQz) z@#|Y&8I7ZvesW3nsW#?4MjcKkB3Ut$S0BZq)*x;1{OgE&mUuwjj1ILE_>|d15=gwy z#}t@z9R{P~nQpEO(m2TCs-~kRp({%7oc9&V-QT?MGO63R?$4*SK^DC=g_}hf-I0vv z7_1)T$8wLvn`C`yGIAO`o_*^M+f+?3ZMP$z#-HM=`R^pmgXRmtu3FCN#E#Mo?Hwr^ zqi0;wjpW5r=&DuFm_#D;|sr{LQl) zY1-z7bW$u&a$_0G3Y$dNPxi5d^qF=ZD?7uUB1@N2JnY3<_}-C!^?{(bAvJP+cv*5xw6aS~i8+p<<3QD66cYs>FEJ@%`HyAqJE z^D^V5Uhw78Y5R;8!sZnuwAscFrYa*HMt7bl@mx{dGHILI{{Y*VKPrdA_wjg&183sf zAZ}Rh4Geo@!1ed6Ee};+9euLjNVoeGmiXHsJGbV$9|!1D=(<^s_Tb%5yF9KcWCoU< zVPW8#Vl=oN45QPgX_j6O6WmLF%_wFBkDJ=GtxM{x1o2=mzgp0oPWIkRDYbFe(y)+^ zBKU!!M|0sdn^WG>i4Hl(YU;iUX*U!2J}1P2B#dK&(zxG@vHgQek8Y%8MUejh20MLg zZ{b(OokBkc#SVjPZh}Um@8fk0(kG$GJ+;Jam)~e+jDM>}ApTW|d_NwsaMD?|?Xss` z%vP>=dsM&It=fCNH|$qWnDgdt!0dWf#)l-@BFHs}zT4)JjGefwByST7Qqr{htsE`O z-$ybx5-g=d5!jq_^sas+n%RnKDI!^pJk$kW9=pA3zQ6GM>XtiVkN09t{$KZf>KmOd zON}w0j^FJl7X)V*ttraTEaf!4LI@T`@YMHr8^I2<$>#lVD~9;p`#9WuLGa$4KZQ5h zHN1?^_JT(Reeqpg?S$SRzi06LJ6V2b0R7)uvuEQA{{R!|mq}?Myh#)Qy*Acd`iS|T zMbx!Vf|FcYc#>Otly+nS5t4KCHR+!PEG#vxJNrV*e0OrQ6BMoU4tV)bHP3uy_^lejXx26UG&%JfVSB;G7Y<&sgT?*E3 z7&B{oQNw(=ZMD_-&sM$Dr$MI18VJro37^)yS4;7VLE>oT@vZ0C7@w38obz8nX;%4zwsfhCVavz z5>e0b^Iac_muG;rOHm)6XaEsTPB1bsab92Wvr@2^$7asrK^@yL0QJZxiq@XS6?Z;_ z@U_AFEQk*S6^-$7$#rX6bB)Co2Sd++k+P0JWhFTn=x5`7VjeP_lAwqpE^a6 ze|OXMtRgb+hWs%esijA8bmTR%?p|?JHN;Eb3th+w^B|m{0QCT7sC+m0lMjq^YbA|- z%^}EzlgW?GunrW;T0o0@v!HUUa{fFZC}W11F=eE8e%-l#9Dlw8`hrE z9mFDo>(+|&9e=^Z>(X4@pEG)>#yU|(`|q+&kwYA^%_{{&jAfXUz!lm2L$zsSkjA9*SAS$p3fo%!r#vkNr)n<;_NAWK z8~$3KIDEg4O8IViVX4Y#YE?Q)y+sLZdl&3gs?G5G#1}W-GSIw78Qi5dTW>hWJsQ5S z_;>qr_+~r%%{7OJBe^Q=u-dpNGt~3It^@X*@#pOU;7^Yl-H*aAhnHXQkHAOSf{QVZ zTR(ll#x~cVf5A1ir}*RhUVKiq_{*iL-Ra&2)Gk`uTmuEt&Vi50aga_prI>_{-s2n{hqWhl^*n zo99!=Dng8}_-^i~uzE zHo_-WjzCV`zG)0G-F?k<{sF)E)vS0{-uvPQ#d~iHYuc^4-)VXU#f(2_zJ!eYgK6Ez zzZtGdxkQ|=N$KWx#}JbDk@j}6r^%=jB9#OV25Xnn0d&=u>dM)P%d(XOC}FoG@l4wksb?;U{vWB^Yin$kHvYwo|VkmHGg_Kd{&MF%8`@z0Gvw4aCm z1>Hw);}^b`YxXFKZ3&oyqbDGAt`AuFd+}$%{w>oJ#{U2vbgeJLdeTI?Zm~V3x<*?Wbf$90y)UuhW ze(~w#Oz{za3GKcG5PVwOt9W6_wJo^s`B-PM9<}r*!`~HLcq>Sb*4`lMMj3$3d}HIU zguXESob>+y8DDr1%RBDWFWIBzVfGXg^w`EYPa=~>S!tIue)Vm+){yFT93 zd{uQMpJ=zr@y-q_2gLf%_WiDIi|-vP;~iV$AIGl?`1?-q3dwt_>K-MH?{r;NAb>6H zq-?1q$hpSVE~MlG&j8m$ao|si-YxKFjI~dKzZ`V07hU)tPa2M^X=QD1BiY8x$fiNG z6$RswN4htmtp5PAYsuQ^))nCnhqnAm(`NA}hRvi16ru$Uj1!M~@JPHNu6Sp}gvBce zw}X)>^{*50U&pVGehc_>;hz$CgT`rdXW}bpCRm1_664LlTpqk+Rqqq{uj6-z{AH%; z52?-KE3Xm357}de(j+jn*$Q*UaD8h^d0kj_K|DlW$JbsK@Vx#d@^62%7&V6sJmb!P z{Z-a#7bW9aH3o2h1EPUZ*K^>x0Co){!z0$ z^=wzI{5bfzJ00AG3c)y4ILw664+C5(1%mywPF77gU&3ZS6d?9^hXK@l;o7+i7 z91LNFHZKb$pNJav@G7FfVG)tnuRpDFSsHUAU%)q7ZjU{c%#%qx1-?{&m>pR8h|9bQWdL(x&~)h$Mpf7#@fXLmlf!s3+Q!3y+nL zLqu*VG-N}oMFycF6geaNzV%t>YkSw4)(R^HJzBZVJ6OZHxsu_x&uJWO?0{BAvEn<(6f6qBdsg0~aeF+!zPSuNln?1y*Nb)s z`X!6qpY}km*)`FescKK9_^NnO2B`#P2pPiWtlr#NYOResbT0kC*^kPww40YtGy8hz zDapi4F}K_BtF~7*Zy^B&@8LN-)-EQ|Hf(fD{U$8i-FdOO+(DF*D_=?RK(-+-BYgUW z&2u)_H+ItIMtEZEr=7#rw7=mjh=8Ko%zy6+#l_sv?kuhoi{OqTHPz8g?~5vN|=U20Dp+P$;G9zaHJhtj3)ib~5;*M{Ux1AO-Yvp*w@*D>)k zQ`R*I!)RNUCTt&=ukx;sSk$d-G*+7V)e<$yE$LjBgZ?eY;=Nu=T_slMPl<}O$}+0s zsL!uT>4H`{Cp}KD;eUayrnibq$Px|t)5 zv9l+G^sdhK=t|8DQV9fnaqU=5JDn8$Nri9;L%Q|c0RC~^nsR6#NV>Bt@G zC1z<7N43i2Q?%3(TmpEg;=40KOh*ehOmhDc)k!LNdZ?(IURL&!qN5|I{v#i`LtOU*f06f9^aaCT?_1y}2wePpHj$X}KC)M$#;nbG(s(W*8a9AUky zSFxR+F$S06d7-`+6Mfb>>s=gnQ8KA~40Wbzx}f_W+YB;+$ra3M-Yzzf$f+(4)1PW_ zMy9RJ{hgkq<~Ic9vm?J3*RCKr>x$$wl)cw)o=ZLQryP#;t)^-EhLdp5Boe4OPmYT#~N#7{NRgM<@=3cVC23Z640~CF= zOt|;-tSB`|&D#W!eBC|kMl|xU*B>tKg!is_BWT>UJkgVu?d?@=Cs|wM18qfjCL|a? zDXlAA6V9~r6mIl2jFGfu+~vGaZmS7p#&byrh9552XT26y4{oAq*04B2a8%Ztirj9|-cCOdJm%CZ~^#dw;ip$sSKjLXTlE<|h zq3u?XwmAc0bMp$3Bl3^RD(0yoLOOv}?f(FKmg+rd*n66u8oCk7^ZVC9Vk4Sd@%dLT zVII=W7EjW(v}=YgLpL=kTnm0Ba1ngIz}6+L;ZSkbwY3xG!6yDltUG_2LaK6oD`=#H zV%OSO#M^l$tDOQ_SWLuYuUfZjXz_C@5nR8CJ|W!0sEbV?8A!k(M^0%@*8`}$CL1B` zS+8{kv?bS;>ToHSULnqo5^@&j`-iPX;Y~I55dQ$$C|7n!-B%MC42NHi{m4~vN2=8= zPt3cR6a_+zdRFzmk!z-1w&h>(rJB`lBtBYTcCB8h#`Zb8OE(ha*F&aU3o@+4e6>>U z(XF~BD!ylwVO6%8n~#{@o5Tf=%6|;h52^XTd-bfy7o1FRed-Q#>O+$iq;yVOPU@Zk*3xeLE|;hVe~K~wk4g+7dWw3!%_^{yks9x1o8d@HQGea&jWiiPy}w6JMd9>%bc?9RKyIuzb4@UPi# zEp+5_$R$AS^sZ~ezYTSt1=tnS1%WOwpf~>jTD1lB{mr^Ir*vS!=s>Rb!*SVNXi>PH zJG+EY@&m~YaVyJA20K+lIv0v zMrD#AZ8D9bHW@e_4Pst+w*DzLtE#X4b6@bRWScjOExxBe*$~F56}~|`xMS^8U0to^ zhW#NzkUngTX0ls%h(Jrru@b4?bHHzE(YLc6QmvB(RUC}{>Mv-NV9&2XaMD}HY<%Vg zSeV8Rci&(zlg;th60@U)s|kL+IH!W^`WG4hj<(z|I*G-p;W#~E>;j}^w3 z7SdVD$=S#xcl57a@F&Drw66~)ovX$}z7`^@l@0ED3h`eEcywQC?*0yQ9lEgGib)@@ zwR`7sie<%crrm;vHG7BhcWqb(!Uid7(~W@0{0> ze0T61nxDrzJzL?-o>juwz>+TG9D9LcagO}gp^pseo(hr)^=PG&NVh^I4akdv22WnK z%XnwRHrkiOg%I2)*@GzvdmQ@Ku+bS+TAk0re-~?>7}xD#@xXZn+4)Ff_{Uzgf8uA0 z7seVL!HPFPE_|Vt$8tZVbbk?TggRxGsci?GwqcI-9W(y`>aJ(vhN-65*x1@>epc_U;3+vp#{}ozz4yUh z8EtP*x3{~Ap#cs z1xvw&tb6G4Pg>o)Ok|46zFgGFU0A4`roR{NkJ7xW$2Q(-bN%Y|{{Rq2h>dw)jniV} ze|o-SGlh+z(DA<<*U)y?5a4OG8aI zRvuD`!Tu)y0B`ADW&Z#K$?%4?@RRn|_^A)YOPe*+Z$2GrQ?!X72<+Dp90R!I=RND? z*gSdSh?6&(yXXC;a(^;wC@ub>u08zM?$;7VVs=(#ET^a>9!DK3%!Xf9viDCz`%;Q$ z)t&|YqwlrP**{$HwfB@QESmDxGq~ih+FS$qSK7Z5J|1|!4;Fk1@xQ`hpkK$Pcouy= zSgz*)2bx&Q@*9iXnJSpWz;C9k{#YpCi#&gISJ?q{70A;Nj>%}*a>6e=HO9C*7 z6@#1u#~jx_VU@~~_m-VX!e%t#d%ma9o-o&-{eb=!Xu7|~3GA=+pA_Fcp0Ntb9t&tz zH=BBeB#u;!la57w731HE-w^dJJHXnP!XJm<3-!ARG-SB6yVNh9D~o%7D{vn!Mo7TN z6~%Z9{t1oXd9;VS@pM1huYRFjzHEB%8#t_af8dfym_L^{{RWUXdj8c7=AW*uTjvvCGh_MQWn}^wZ76XFIZW` zv8mkgo~4LAG1{g0_Wlt4oWE&bf&Mb_+gV#aqho&3>DIELw6$RH;Z$cJbKLf-5`V!X zG;a#bv-oFHTPx)|+D)(f!|nketxw^P_$3F0wOQ{j{wK(Fdxvmhf0zh{IRG&@=hC@n znp38=xzijpr?KDbKNkKlcz?tmEYv(Z@WNVhUtmjzU)7$<2`MtaxE zzqUulE58Cw|iF^M51j5qix>%&Vi0P4VkQmtQA6(ReB-#U zIA8cCo|O84ZD#T*;)o9=b~aF0Dr8mXX2;q z{jL7nKd~RflkhuMw6zI+E#lixDulORwV4JKup@!`*F$Un00jHeE^ng$0EFK6`%cb0 ze&;XC4utL`8o#f9!9BDK%}(O)!1o7Big?u;GF*TF!Qc=EYF=kWJ9HYQBcs$lCHQCI z=k1~J2Fu15%PV+m!MdKAsmQXa32`LW`v5%#cDG+j%Ke4EVE+Ig`~dJL?NQ<%9%|M{ zP4ORxl3O)`wQW08*YwXCczV}N)1|kQY*z9`EY8f!BX<&@`Eq_vdsdV)8dav^ zv?`?uL0r-B$G|OD_RRf{{22cL32$`N{{Vzi(!$>PZe&o~qmfm>8;7Bnbi1qDM4o8K zf0>(;(1G5%Yw!3c4~O+Bu8)c?*8Sv&tS&c(iSTg1lb#QyX0tjewbY+uEzffJ)$#k{ z_rnhwc(Ys6{ug{BZ7$A4`%U`la;?R|JGm$njsW#NdsoFjv4mRBjI_TNYICfX38`!M zx`V|UvZ6H8$telAa-g{Y_ZT(mWBv)k*V;T9ezU9_ojwKH5rl-d)RyP*uW|4P!EGbK zIwEP-Pa3MITmjbu6!BQ7)~9HhIJmt|N8yg8JUYY{FL5*Zjko4Jel_U+G?E=JMEL?d zrB5g6P}%%9x6`#GTPtRkM{Ww&R~LsgTdg?7tXRqCu6nTauL=A{(b)O=)@#+dY2{@J z)Bhk-n|?>VdKCTxwA8h8Yi*~?u%BAEo*GRSOdH#Rfw42DtwK7-_R=TCz)Eg(FjwPX7Resq`7( z5)#2UVVQJW2Wx7VfoXE zfyhN{bsN?fF<=6D!RD=BcyiorWthfCqYAqwsMmIkVT^@5gIKZnUHnCMOtY+ejyVU4 z);j^E3@Hc$&N6}Aka1U1^3o*vRd-i8f8n`2DRQvGD48T1$pDO1yJ_IZ%)@Fg~|F`U*+=!}i83;1OCs`gl< z4dkl~U{d^K@y)lwZ88VeqmtoPK%rw&{k!72e}wwwwXKYhk^9_^{?!kUz7<{gmPn@1 zwHtJ?GUh;IE&XZ~d6-ms9&2UsF4N;>vRm53wwBT9QOx89`#>Qz3 z^2o>cyNUU+?SWpo;$PX$!s0k?JUf4Gm(i|W!W?JmUN7+<;oEB7AvQXN>~rb@J*jjM zgg|%zuU-vr2pkgJ^k0Ra7_>cVdDFuhj-eyO2E~|wIs7Zzd@tfiFQ-VQf8M-Bi5)YF z`2PUH{{RYaei_|CCy4w(X?l^LnGzEj{YkHJ@II>l0A?2uKki85=xXOq(PvF3WO}9D zrrUWKzsrJp)iTPqf4hF9cdSd#7DqmeVh!^$ky&^8ul7!c(#-vN73cDsa~(g4^*FRy z!`j!@=0F!+$4T7_;l zT~v0L>wLSS=ssFVqVq0lB#l$LFB{_{uutySp7^#e>>m;vT@@r3o+*8gAP3~Y&Ozg0OUODgHyd2HV|t{a-b@m-7Qddv>L#>2Kc*2bG*zs6D_`_CF}`t7Y? zG-_GfuAdCWe)={LdsT@og2+$su;c4g_2xF3oCJNyRIB@()H7=tg(K&3w(RG%YSqvV z)-PVl(bg{Yi=^0%PFHKLbDj@+wXJIi;462m4P(SBq(Ip_cPZ!7-l8$o&Qdk4wHNT_ zp@?FLL+w?ypNW>weyb}LUi)j$wNH)OO`;1kc#_QAaKoDCz9M``xA3=xWW6@>OnAoD z1FzP)V-pET^q&xFQ0f=5O{PdpZGyQqLeo&2aaK7MWS*wxlXjOEgJ~P1=DJ&((=b3sKm~YCjqzSRH^r03F6=M> ze8bkggG2EoI+mFntKC7YWfN$~(A93$V_uwAg_nvAzL-=M{A&hDmsO3#eQ-djt#qe~ z#}gXOL~~-MrE7O18^2nkt6ceEhMq>w)mu{2LPSVB*D?P932*jo{Fd@$h|W6kS;-Xx zUUJi9+!})2i*Mi1bf^vFny=4q(x#3kOor-f7Zai^xuWXrZ9W(2SGCq_iwR{v!kMge zhwSVfs@%RNjWpRIkRO>y&U#lxC83Q;7&kE+lpbKI<7Bn9Imb#_H7E)Vn4;t*#i85j zQ&m{1QY6!qw0qR>{Nl7U=kgyf*13VINoZ97J4XVxZMBq&B{I}4i@C7(fU5<~bTi#o?!Siw6yi4|k@Xn!oa2nC}A(PP1BhnMaR<}MHp5Z6U zB4lBOa!F|nmqzXx33fiUf$+P*qUXZz4x@6r&=Cw29aF>2jBITTIc`Nf?~+)fbAiB=URKrMLPy zKsvC^RPjvTxTBOVaFgik9^;JSsp-wQp%U zlzN_m(A!~UjDh)8D?M`3+SQhReBq9?+Xx}Gc3Vapqy@P2tfdo3$kFipuWfR7zX1Bz zec&7Pd$YN@&#igJjcex4+mGj6e}Yykd%`z>N$coqo=a0@Ee}RneC7*zyKl905O|kO z@TQVwklY3f*?;=g!fCd;y55F;N*Nch2zai7{{UW^D`5@j^Rh5;#%MX#-~09 zE{SVxC5Ga@WZ4pAb*tKzwk}}}h=jhG;;^iAsqUl_KsLZn`n+?V^`|z2V8}k#Ya+k* zw@_~ljM+6!YH4=O4XVMO8a$T%bWR$Yw%LA47t=lW+ z(!qJq{kb6C3=y7!76#aS-Veq|$(SQ=id3{jCYI-0fd2Jq|ChO$yh4xMw3Ym`{E zJzD%MR&uJ>G~#U;9g5x!LK7LDK&Q5Ap4Ov}PnJtVZE1FwBWCG&Zfi_vcaXrVBn}$_ zxW9_KJ_7iyZQ^Y^P>)Wto(8(N z@@5X1Ic&Ypg@Gcww02AC@Tiqht#O!gj@y8#nSn)@NH7#=AP|!6<%(g#gc8&4CBpO#j zJ*VLJ#oasNAAvr`%N)xn9OoogJ*nw-TK@o;QHx$$&48I1*rbk?^JnbQ@l5q1{=o$~Sl~6}*qOa+f5GDlTM6?u0BvPTep@G=z`HLN6ca$%By%E#df|VSK0`Q5tSt8J*oQk zzYN;+O1U8;ZvKL$obvdL&l+1rsOT|$p!~tle|js6*L+DfxpgEqSpqioqLE1a=D_r$ z1Ja5s`%wIVFg+?n1B#BMPSgP=2cr+q{|R{(r(2^bD7toXNZy073E$$wsROG`}OS_otTm%kzR4*T^!92 z3Z&tQ;=H_WAKD{mo+siG*hoOC&_BD;XK(RIi<=qqExelwR#e=8~m zd#!cOamFhc){BAqA@H;Q3Mr^*wlP`X-dwuFjE2bqzQz5UKW~2t>aakbB9<4LMCW`v zj%)FX!&kd_jJB=;Vb2xS_zU7Lp`&UMvATH5`|(~@BOz0Fv2-(+hDr^exn3vnu8;8! z+}(I(?SR{nw+qs;W7ODHwyf~@MrCr;*Sc&40>(iyeQc@i*`qT^{?U& z+S|oGDL#A`iko`~@%?M&@ti&6dpLe1QQe<>-s#r&4$oud$&z^-n$CM>k~v`!pl*tL z*UDeB@9oPp8p7H5#(1{v!7Q75`q$Ti;qjM*bj^3dmk~;rkqL-K4Z*LN#$@jdxsP`T zo~&Etxynm!(a6^KQLgfG8@?&NNwvMv$VpHGV0+c3@)XG`;FrdE zuM&T|XS+xDrXaDA-!GhfX{O=ru2nL@Nx>eqEc(MN#bX?OC{y;CRJiX>H58Gvp>0iD z3CNG+I6l=&R`8XFiKWi9V{dlArYNZG9HzMM`xjLVS`N_r_yZ_E&SsiwUc`C%Hf!tpTfAG#8h@P;k<^{ z@JSvN=cpCSc#3Z~P?kXK<(!-v*84Fq?qgY6v=GG^c$hnb$j)(BEsZ2%TuF0#cCp(+ zI)R$sm%%grfiABfU`58={c1lBUVW}iDuCee^47PA;=Pwak>ohoaG)+TRT54nZ5C^3 zNxYGxj!%_-Znc}O*bfZZJ;b(=UbEn)@EbhVhs8VT?rdyhv&ui5GlA_|F(X4BlNI`T zf#UhHIOuD4u%5#_Eq4NGOL28=9!`EunFH{tujI1TmwZ;xxgAlH0Z7{}o)P_67+ zp>BWFK=pQ zQ6i&ZSZzJ4rntLHdpFn%OTQ!@d90g@>5}>jtJD#ywm~b5R;zt8=EGc(%?wR z#u=-T)8QuNqq?_+eGe6>CA_l4msYnwx+CUY-A!fP+(oHPh-6h^)Pqzj*t2`4&ushR z$Cduct?vNFHnPZY4s)8z)8vg{7V}E1Tc^$GS7MY{#(u=ZarEZ0k*s8HSrMe_`>k7U zWqlxVXal(vqSjv2i(YvFc z@l}Yo&?OpZSY~AV$-&Kehll(U6w5ZMi!H&JknhW5>t3m@%f5Dxs^=AxabX%c!ha5W z*0HXRIc{*5+Es(zUj4qx3ygt{@rL!T7sWmzyVG@uqSDN^_No9e$HM+q>bi)xw~{uI zf7c&gwS}wb+IFstV?fepZwIAl>Rnjqhr(X)9p$HpbYv|yW>LsJ&1#i{Q{8KP0gZAw z85QRmhM7NrZUx4kU&_wnI`LgDi{hBPM`OMw3n=^C;MR5*Gb$&C($eg%f%1TRe4@2< z--xN<>$I`en3ivpoMx4EJ18_sCDPeUz<+x+!0E8Qzv5S)T{~4Akbdnu2Rl95$5gi# zYBcA{x6RWSCahX&!UxNopHp0ShprUDpI{`!K3wND(%ahoqXgG1`kj#2+y2xOju?V_ z)r~v?=gj%HWOMYa-?AZz7jOg--n6Z+Eo~%?WR*9Q{p#hOB z-%+xbJ7iMt8CA*0IO4q%#I`Kfqh>RT<8@sr@P5*8ozG4yNW|upjtfNiEu^Q1jNU!A zw6&Q)#IUH5&#xl9hsJ&|w$ybgbS)|kLiWhHUpcLu-~)~_E9h-YKvuF342?Ch>>D_( zNbcN*%XA2#T>Gkh+!(=BXcbkn16mQo0if=M|YdYbl2 z9a0@B_n!+; z$KaCE#Tt@uJirL8d2}&S)aQOI_)7h?8%v)K*+;y}clmyp?_Qtqs%az8V_j*4a;gEa zp7rDZ01m%t`{O+D>hQ!LXbNP2V4U{NbP?#@G4Y0~n!cHP1QtqnmGVFsHH@NkMn|&g zAjx~@Oz#YFoxm>vv0B>4i!LR!3u6_&-(A2O^Z5QDt;LLXnvM0Ko*{<=3R<}xcjJ$T z{5h&DI)v@ax2O`lJGNmDikX z#sRM7ELwGG!lv0i=*}@*HlN|UEhkg7he^mrL}wxLGoEXu)UPjXujP&>A7_j1V1HWY zaX08K?wvXod5$9<_0H=W)q=`kGyeU)P%+fkL3!eDH%N54E1Y%4E6gX*BGo)jmtt@A zQU=EQ>ZKhHO0v}I*+tX=EsxA9OZ`c-y(p^!T=AM_i)LcF-p4DSTF}>)0|xoW%02N> zS|w7E&%t=oc?~HiaLx^GT%sF9X27g3l`c`w5gt?NQ|r2^5TLg?QCz1<*Z6Ys7~>Cs zp?dMwx$hh5k?XpG!bVp;F~vuuU-^-sR=^|XsWlA|468I}Cpqgt31i`uwepR!g&px% z=hK!5@*`aL;-s;kWtcJ^P*s_(R(Jt8&1+3u%5KAS-7Gvsp$e_)IIC0X?P!6+9mlE7 zXI*NoXKsGa&(fZ{oVPG1o83X_T~LY7IR)LpDoH;#t!KwGwc7d4%$|htS8lQ7Gk3*v z`kmyku3-o225VIlH1#yE@`RgVw?3RzSgxgx%3bA*r|zEhw%SCgr$Z#D-#G)PwI;Ek zwWYLDh|U-TQsQY1&T7X(y_)zfw~S(-wbQ1DaV&6pRU6SH7dxGg2cBr< zA;{XmHw(`g;;Y|S{ia+5geNV`^^blTx+1mdrF~4eA@3lStDf z+q&d$Y;`9!2Zn8R9eQS2GOL_@+*etoTBL2ZP%=0*gv&7@)9&u?LPpXA&H&E>y4^m} ztnAj)P~Q1F@q$M+XHSCK8-;Ewq_(`Y7JJW8Ws4xhY&em_!V^i9Y?o0nq9-(=CC0fb{h7r4gUa@XB1}K^k#4lewDDAeez5$ zHCY(Me}q2a`Bx*Xc*SilQVV-4ndIR4k%CsXX7L8AHi$mXJdQu*q<`Z`=#Iy2rE1!B z?23>_$%ubU~bISxA0n9ruC3M{{Vh!EiTPGJ*vpJb42<4=R8%< z5O~4-I?7_UlMF{8YcpQdBJmPh++AWPb{PcV)(vu+w{%qTSBGKOJQZ-3mUhW-;~{_m z^!2Zvzh~=fuMYfA)O7C=Trdw76f@*E&(gk?xt`Jss3KX@VQ_+e){SfC#UQ&=7$Ed5$MvI_XUAW(kAzd< z{{W2ayhq{4qZYS?+ULvv0G62PxDLHdd$)tNEhEI<612OwkuGo6G;~Q9mH9_Z`d63y zL(nddkK4k&Ak5ZCcA+DmLx!rFb?f*G$D-dyG6t*tpTrrbmf1;IcONh+V;BRqL-3p8yTc4JYf>nhZWRdI z&(gZcY;3%3t^WYUa;qJ)50K}|&*CWN8G-QD@vS^VaV4ZmH2G8n81J7-(fErcrjKhj zrv=6wHt2Z=?Es^S=6jO2Rbo@lBqADt9Y zMSp3ZkA+B`sydN7Py^WQ6sa$@BlM(BwQ&N#d{bq8!ir&HdeZ@{+i8*~m~v`DySS&M zIa>M%dWNZ|Ng!+i*0Nhdlg{0=W372uoFpaC-AUN<9ecv1##wP(Cy9JM zn^-nipGx;%5a~`%N^$hA6UEvZO#@(j#MjMc7zEac$}@3#9vQ1?OBKY67bDiNFLZZV zw?^y;?OvU#_)X2kjkd9Gyf(;rU(&vD)2%`KhQA)?H>CKwZ5;mqrp&=l1KztY5BS#4 zQb4TOY;~@4P|za@{*a8rJYaOJp`|^n+pSU873tH&)#UfyryX1kIm+!Gw`s2%Lahv? zqX#5=R)wdGiMZUCEQn9s9V^9dHOs41D9qhGO-FCyX+im!`1h&ys&C#n>tNIux{shG z@ind13``@F`@@r8RQ~|MIe%&UyT6H=H-bDzJ~Vl^L-wuz05m~Rk%j1Ta4Yk>PuC@z zA3J_^)_5!8P2YkwiyNI9Nfza0N8GGIA281&+ckzi1&74Ze(t7ub!wPe>EA>4-&pYc zng+U7;xRRy#td^e1cS%Yv30u$w9P_T!?BG0(~h;D`!D=+hxV2D2c@Jee%)exr!Um( z#(A#3W{h6EH$VqY5Yc zbVo(s6tD#~M&rYV?{mG)xj6fyIW@;CLe?rZrzY;sbZSQ(D&3By~m^&rvk0Q_qQ9$!P!oRYC16UB5wnp+WaU2cCgF7*$A z`Bn@T@<(;%BNgX3t(&PrIs?u{SHG1OKag`>3U1agoKs~>+o>4PEBw1pewE!rrpak- z<~?7~pwjJQX@q#4hDl`|YT}dJ8*JosKL=_p7`wPrZ~R+VkykJENuX7U+{~wwp4Go5 zr9Jbyt0;(c6^V6j8dn(SHKK|{>T>=sm-}K!aTtfnec2r6ir6>tUHEb}l>$ow1rOez zE`jHqwm7I0M|*k3d5m=wOJLQQw;Ilq9#dU~Cq0?FRxS3bmU8d#+mfI2&!DXj5=#lZ zDDX%#9eVeJQ(pYK&s_qQR$m9FEuh&}?b<+1BfYIbSjT|dYZG(ko;D9v)d zG0?BDbM}z-vZ%KmP?MU=nX=;) z(FK*eYHhd3SX20=2bHVV`gNX=zHGOW$ji>sqXweA(XTFK7d9jaRD99@01?lnP>)TL zX~@0=QZ!LW>9kE15NaR&UY=;{ho{wX7bV^2oFvBCQ(QW803&Dm z3g@X5+0jmIBGuKE#-h7y82N*eJ*$ZEXw@`LVH#3OhUuOwy@vPuM{X6O@1B)cUhvyq z$Q?d@bI&!)IGqYtDqLOK_=m!Zb%s0bzj}#`hGpb_pjBUk-Xqj?D~ruj#((ICT2+qT z*d5CmQc1x)_Z86T+9dw~WZUJg2VN_Lv+(m>c<)lY)?|OO=<2fBqA?g^NI4xk0a;4Q z(*Cvo0E1yk_C1jlNu@~vKs{QY;JIOn&}s5~p;?G-{G9Zx?E?Ar8yKZ;`EG%~I=iLW zqXpblx^4qMp%ax&7F{`c+*)2AwEo9Sw9wZ0B)BjWP$& zd^nm`gPS`T(5fPIKu%BVT!)H$Johm*zx;d|y1NV>c&@$li=9(UOQ;C)*d?#(XVZUB%0x4w9-d%ZF2?G2@^x>~{03UkF;ZxCt| z<^oj}ITOZs9kBW6%>KarnFKMy! zSFlea$_N0K?e(Ox)}KryI)Z+bjUst$pR(2Ni-xw>wGSu$co^4cu8+e0AH4AHoir0# zt;#|+qq)H!m3G$}rN!v;8yiJr+}_I5NtaM1=qYYeZ4~V%5ooft#3>xPY!GvfIILmf z3GOUoNhV;&zpXC2eD+LYW(RQ39`%tm$hq>C9D^2fSB-AxX z#8-Ba#xe%&=QYy!n#a%5%yLLjAL1O>o_M5#U*pAnh7K%Mlvb3mT-B(8`4LZcLR=< zSHgEPt$Tn1MKQP5h)YVGbm1KkF%JJ=0uA-60$VjW&g|ouPXX#Ku zBLa6)vLCc)vQg62e8wXR4RiYLskAcnKE3OA#CF#ZS*bl4K^4Vb$0X9Rm)5!6$-5n8 zc`2LsM z8xZHMZV5!uffrm?Jkeb2UTscNMsw(D#4UF_2UjSc-5m{7w6$Y#mgECkV%lk3CAa_@ zRQD5;CyFWO;aHD)*s$=rI)=Qyo2T8{F;%SW9>ocnmnN3p&F8(`Tx|fJrnHhAUZtzO z0yu&4=4Ky3QfZoD!6-L@>qpvD$K?)Nrf7p#Iw?EBA-yY|qoORhn!;Kx%S&_((>bku z4m-Qp_hhI%;8zcGtg_r;6!L3NOxLa%l_GGN^)<;Wo1~9R@V$lHat}5YbPb*4@@uG` z((_tD3{a||;E-$0^zBMZXccbm6lb0o)~=u8sq9bsER5jy3~L!SbVVbmw9xH58FnY0 zcAd}4V_*Ot`4o7kT(Q@o3#Z-5X(0X-0M=X%y2OG=7_`m90&{`hw(NWr8^9%u$L8ZW z@0zGdwWy|*$aIV4x3b$kSjxmBTYiB{#F7$h;^!tP+35iwXj8xh`hK`%4OEt(F56%WF zCe31#IKLnGhFE+_9=WL?X>Cb6N#acUn(5`ybdQL7N82nITV5E%nM@wpBbul27S`9q zx_O5i9#2p!lJH-Lt~3jVG2E`q6v1O!QGCx)SkkqcUk_@wPkiOl-b}uDz~;ScO!1=l z(#i=f)qJaRBP1OA*OYjp!L#^>!@8Vyvmu^%h>U`GJXC)GZm+x*c={%`9p2#iigS_3 z$9n0URflAKNvvxT>K+W9*`Q0P9Wfk?d4&3bUpxF2yp}JD8kM)2-dt14o4b)-w+^jw zqIe;!ZqMQ$DcM*aIr>y$CD=((z^j)LjGcm_SQ)s%!S<}VInBBm*Y+^p z+T{Ra^sW~B!XInCD=K`Xp4I9T+sADI80N9#w~AY?m4#d)sJ0`i<$C`BgYB&^UOkJR zFfrD-&3nL)1b$=NfP`>s);v$6EdC%RRFRR}+NJRihvJt9 z%`8$&d1$W|K2k+vUwBG8hh(v~Qb!m9z0tIopFwm$a)P*RH%V31CETYOVO}mH3gC?* z)$Dkmi98ta-vpjLjKmC92DhLlkl((-*RFg>vPd;lZM*`cn)Ckv8$lKCDs$JpeD!we zvw2dCkvT0^cp6$d||h~nPNp|;iZwbh5C|3ez;BW_e0P$=DzWy z7Uo&U?)<<{PPoN?JYNEQRX>BiB-!bq@^7 z9MXd!pJCmBfsEs&e8&)Fi6=WBLy}|VbxoOrn6 zylQiiv>IOt*m<_%E8UyVT>94a-Gb?B7U3Skd9ThTO}U?Pw2jV3RkOHt%yFKaS2L=^ zcW9-ijexI6@eI(Vp6hTkjMpV08j_WiWP8@=laGS+r+K#3TkeE zebyqMtzG?*l_DH*T`?I(Xk-bx=}P17)mYK52^cH|YhFfXvO>V~Q)s#-_=&;htj0zZ znoROI5XMTLywv)QmCluFtu$Ly;O9B5OyR~1mG(eCzeYmMF{1pBVvyCn84ac0ji7&etqn(eG z!Mn1N7yTVG>x!W?qA1yCTuJC_K_zyPl%8ulQnfaBEpc{|JWHH}87DM3G4hmkMYoFC zr4~_2z-K+{mTwc=-LV(Uwvn%YO4gLk6f?HZ_F}#T1o_8W)Up zc(3z+1Ed2ZVIvLcTWKtssOihrMEH$occ>eCc+kt`jE<+DYU%tcZFL)| z6H_;E9E@|YAJVjOx-(L-iT?lz2aD{rJ@+~j{{Uy?fc|P@Ipd7xyG;wllHAy+)a|~{ zCOPklmVXT0MQi()GTUzBJe>V%1=6RCjmm#2!f-c?%TaiU#N|cfpl&vS*YvJO;)b%G z4)FEd+d%tr?Pmj(1Dfli(b_@tL`n7AT&KoMCAQP-Bh--sf@8JC^OKh-vSlAz5lvUjuR*v_@Qo}5`nlPo4&|;tAQwn%$!4L%t0)Pi@DFgfdm$*DI zz~+~_ZxFWEIqB)eTk#Apc9^-(0~N199L}|BPUsiX>Si9H1~P%Q1X z*lzqYL2)h3;xv}P#bEoJ&~aR6i9Af!6T~ID*(&|@$jX|(e92%>+gr-dzAKiO;5FZg zwdpl@?_@TYE#@Nmy$4DPE~cXTrlA|V86&_2s^+C>_6du}9@ypJA6m0-r9=ESj#&c0qU|W>*NxZYU8@3HU>wM}0S&5G4I;K0~c5 zMKc}Cwaj5h$lVP^uGpZsPauun)qm{LK_qaL%Rk*Dbgo~=o-BvKx)_@M*UdA8!9Q9# z0o1Y9>5+kG5<~N_z!|M87>0I%^H-L5JK{8cBDt8yaU60F^?RHFUB-*!n4n)S=y|de z_oL>as|m}UT-VmtTWG^=IH~+LX4Di7Q8vT}%1@_i&b!v`Sb3K5jlPm0tNs~#nV7Y} z06#bbirNMeEo%B`8UD;XW3^@rC;J?-Kh3bMI9{*uaA~I0ynw_q4O@LJEur5p8TFt!jNcge zx#6`{xKgSB70kt~#i&F|Hz(S!c(UpB71+u0gMr6d&#=)@TawIF z+-C&mf-2XD?&dJ6u_Gq3rZ1+;m>Y2Gp0#GySJl7QcIKBTZdvf(hnrD!GcHu}b6fhK zgyUO4EtO6MV1I2sm_%0O0ywUZM!1&x*clJrsgw$i#vstLg+>V#9i-+b+FOyvE1k&m*~buF$_s*F~r6MXwQ5 zo6S6o zVw{SO=RA-I7_*WXa%(SI*A_35GA&98uED$7 zi|dNK*6Dk8hen%sKf}dm&7}#C0M-2;Ns`sULPcRH+_fX18e7VW*X&AwGTm!uPo1HK zQ%1I1qI&0yes!CrU)@n=@dMD3}_44^@e?hUoiD4Rw{SD@RAC_L%VTF&DK z2eoZ!$#EQ>Wv$yWJnhY3!xR^`2?M;URD->n8T@Nb(@aY^frj9oKfjtuSknC3mNl&t zP}dn+NnJv7)N%(kX6ou_v}E#w9>0x8ZE-k_wlQEo8hpB{&!wuB+t;=!ffcT&bS>1f zkOnJe+ftI^-{fM>N8Qb2%`)3ruF?)b<22bVQSE-!1p8+{!Mt|%sg}ZFs$5HG>Iu3)o7)|6SWLK` zXT*JW9}nm;Y77E}P)p;~;+>&*wLC%L$nNJjhb2o9*j0}ZczO+g!UEFl?;iT?FcU#;(C06`;*8c#+-wL*s zt--5!V%cVB2u3T%@n^kxOj@7|7t_y&?~Zhr~V+Nbsgv2J?Z=aa%%M z;C3D^@r!ES54fDe<<5zoI-2rdg)_yjX!^t7D*d<5EQ&`bn(Xxd029Ri0G;o^F6)9i zVz@sI>lXSI>#RFeT%$iH+PXP3IcM=RLqhSuyw&E@FW3p-8@3+6^rEx_!rQp1w-eNpNPcg< z%?htBe?nzA;xNkt`g?gXz5p_8DbAX+N;eNAmbcYEqSTvX&BhROI5SCls_TH zE115vip0w&)Yof!ZRbXC2NlZd`eQpdJdE_OClgBXWLfiE@{b+M9;GbV?6v1Q-Hbxm z7hzt#;_nWTGZj&SKRWZ@6zHZQ_Y@3Q#AXzI#RH4m@w9{8N-hH2(mzC8p!|fdsK1jealL+-#KjWT_*yevE&?4?w-td{(k% zKpxy+^Vrt;#j0W1!IsO|;t~35<1Y^B7Iy~cM!Zt2`2%lbT;GY2uGRqsz+s-4>sF_h zICZs(W%)Lq2;z&Cw>OQn;{ae+7)otUjfVjqMQ*WJg zKx2<{P-^-o+E@U3p60MD;tK(M(w>fUQ(mNZB^cw3R+Yzw8EzN=2nL@Xf_ z#uN^f4ZH7P=an3s)g5of_Bv#qUF__fbnQ_Zyw27st7=$)#FhmZVAAOK3v0V_@yO0= zA}@$KIp!(Vy^l4c;eB$~UbVRUGb<3s9CWQJw-lJ@zGl%h){yEh%w`BjsLf_xT&=1+ zNg$Uet}%+ZY$a=HS}}kD=DCZ%9$RQvUu3>ayx%Zjna6ImoL@1!(3UMR%!Tt=UM|(= zwbQ1K$+k_=TD9&xQ)}d6DNzf5c;d5fbvsD(`6QluSsRWw0@bpn?Q=OzMO@-E``biG zB=IVJu6&#hpGxIEA^6Kvi%VcpwEaK(#O|*_@t24EH+`Tz#m)1@a8%)AI6221>&SK2 zTRk36G4Af|@xYfXKO$?Yim}e|DfB$cLimt;SF6pY>hPVLn5>)gyaU0%aJrhv6(qNW5g)rn}u4}dM70f#3g>i8kMdk-82jN^NigZcu z_2c&GOevq?d;?i6M5l53KZ%8v>%6yOOtJYfit6kyEw%e1Iy(Y7=Dhn=@Zwp@4Uyis z<+E4(DXSel_Le*vW{KR^8fxgei7wd$=cRgwhgiv{p>9C}yz&PA*ti%_*!8bP@HO(t z;T>~@#xccnVtN`zH#&g;I$9MR;-rcL8>=^^Tgv$(3NenDs`r-)(2%DDS1G3#Ig^X+mgt2AXQoHOa0CXs){bh zJE$PBgAn5c;&;cMurt6}eo>F5bVSZn?s#vH z(%a#0h~&M}m`!-Gf*~I%IO)xH9|t}v>RvswmQN7qlE8>Y9i<1T`c&RLw=?*I$om{K zWmor%fS!A1pQCs>>dNvn6ox33Ua)AMAT=nP?5Pqi*tcX1X0#54CZ9Ix4DLv9;@=Bg$zo6{wD$i1G;N+#`x@q}9$k&;d*#0g_|-jZpywcRYbeU{u~N|-^u8ZBC6DP?I^LWibGN7*S7t`>$<1Wz zc7gY80GwBRPH8iih8bgkG=%%s)`luIVOw*Q3US9?Ymf1cgw}HN>FHh1fIMGqHid2^knSLYr?)i+jcwu82suy) z>(aGEo=YZ^g=6bk^J!_)gv!>bUIF?C6y;h&dNZ~HJfTA5tfLNk4`8qCMC{`YvMg%L9aN7 z6V66!No`^9{IXeT_W|v#{#4@}f0I>pDE!%pU^i#4dWj_8`>bV`f^paJprWnzp11c! zqC3c{&m6{die)GP;;%~0Xns+&pGpxPQ@&1d)7GYH=r3(bcY0H#id6OXtJ-wOPnsbw z3%i<*>i9@DDLaK$8El6nlf`7AV>a$@po;eAa<>Ae*FMhndl2*QRO})0?Rx`9k{Ud) z2kTm?5zDCiTU^;j6Pztomj3|kQ*D=#S~gmOMFzqKdQ?UwxGc=7bLuH`qo zyK~K_WP zZoEeo)uhD38}9O&L$LAb(z@RZ_+M1Am}AM=pSmB9%Cnl*!5Q+Rwv+K&R`CX=Vbty3 z#v#*lZm&hrwfltf);ze|fOFQlUm00lEuJ8P)mxmfz(2~Q@cUn8*g&l0APs}ktu9?m z{jW2z+urLF8B|WE2Oa6&AhJnxp)>rrT9tHi+H%W!cE|>BO>$m3_=y*W-Y9P)xspdh zP$XrP^WLM|tJu?#wR0jZF2}={jj7558?W5sr@eN%7P8k`NBSgXVo*8Gd)JQ5;lCF6 z!%|DTD`2)Uw&0G%K>RDyJUOn#rD)3zwCNP_rq)n+Cbd$zi;G8TW2uM|GWjPt>q+Cy zbIQ?GqvM0mt#A$TBH8auP)oa>D)0OxY~+2XG9m24BB^RaZ5cMd5}#F@$=H5gGrK)2 zU2lV1Zj|GSn6q z^xa{tV~IdKoM$!V8n%@dI+OxP@||h=Q+<*$ zTd6fZp(U&;i#rf~s{P%iq|rufnBbs1@y$hpnGr!dvj!XkT}OxYF?u|gJ#pa^d6L!cL{4M`Pe7a^IDhM znmw@c6b?HKRt)KjIrl3W!u6>wOtOEg%~%Zu$^F^M>&UBClD(fXDiA%Y8@Wn03mqEf z=3ynZ&e?i-duyrDwCSzaI?9udmCes1U6C+j6oZeDI*vdYl60x&lKew3Hq zDbwU2Tm7IfZ<7_2pv@ITcAgPbe2G5j>-4L>Akl60SW$F*1C!I58_ri1Of;PNADaTP*{vy(aj=0y6N;Z{WlOBWCx_NwG zZxyT`+6Gy07e6lQcD-+D;>%=f0~~w)P#A4Ll}-7yDWlJPLibwaAGn0=QHbyazS@`e4@oPF`fh-|+CN`d&@mE(+YR4D<00{l(_AIbW34oysRQws@U+kkd zp1XuBW9yF9(`g#q+V6yJXJo>(WG`%B;<$^lmP;cx2It8hwXPZsvK*{+-V@YcSFqPo z^dBk+6_e^%*PD2!TV&IW_N3C%mZ-k8#C zVg&_6ChJi@N+z88QxUwwgG-@9U#&!Xnwmu!;M8RWF|Ec?PuM-^*gfkR8<0BYLQO+D zaaNf^u{BcaU8Cja70)fkQn}#?u73Fb^@;VZyPM6ZcVn97wQWUXciV$l*0(04Jeqs{+h;1Pb$C7wX1C$X@mFd4gQWRU^;5THrHs1#!1BV^p^} z?thhZ{w0)3PdwKra7${CFJMj&;a)!~a?sYN!p$fzF)_t{nSa3o-7Yo17YT;%-dkha z<*&?WU?Oh3SL$c{8_}eP)ck8B0KiFW%YV9Sn>C%Nv~pl+b5>0K67ificD^J)Hmemq z>mKt@M!)kTJaOK(ej{mVbKN9cXT>-l}tlL@cUh8X&1J;Iosa6U*l)P?L$_PrPCTw^8Wx0dv(?LlHH?Re8Uxmty&A4a;Kcun0sGSR~-+N zm&0Bq)21OB<-ZE{U)j~Q8%1>0yue#I+$*cF@Vduv%wSnR-W9vyFAv3SddwpUxRb!? zUAU;l#aPA{i#jWnHXa+5)iTVDjw{J^eKDqzYrR8Cp6sE*xX9W)E8A}_qkTL>a*7ie zC%sU;w$tu3hD&{+LHUmvtf|2YQfJP3rMc9>Y3wc`MfGAa`qv-gpAB8zTFU+rGySxG zt5C&`d+<$t39i^_31IOvo=N0mHO5b-Xc`rT#KP+A$T|=KBk5g=3ze8kOz`VZhn^^$ z3H(ggUQ#w$NWj4Q8tOHV6zHeH=E^0ATqx(}$*tcOc#hXk@a+3;W-jX6R!j`>#dueV zyek#&hiARhwJVXTk(IX$yGi4O;kphztI+&s;raYaZnD@h$T=l`mE>_t7l`~r zZ6AT|XILVO_q(tL;B)+|y6_*w$n{NHO(rIj&4>-m;{fF2gIO($Mg1<>E$#lvf6TbS zC$AMkeH^99Yd}w?E2GqWJYMv=Fxn5y+3!+m`a|2cQ)HR-G#bRm(6wpw>x?{Y`B$a* zM(QXhRtyHFmMwoM5VggQ zrx1+cdF@`Uu4z`}I$&2sWn^&FUh_Jy25O&Y)YYyq zGZr#`3h8xgfqiaFI3$kM=hpJgYRUF+9E=PfO6>eUcjnqClzjN!m(hlU&M@B7h@ znzl79HLf)VnO7s}Sun>Y;8j2wu9xibuAgj7k`}lnNc5~LK4V%>l;iwE;A>wH$29tk zAUsNTKR~Ck$4c?3d@1666IYt@)6LZ0=$NCwg%m|(2Lad&0vEp(?mrhbHt=_XZakum zG_I(Co=#13{{RIoZeZ}TMXhE0*K*3;2q!h?)k*5n*%i!jehT=reW&XQW8w>Ux{Wxv z)WF*kx4-l0UZbMxQR})$y3?+sxwd1pG8~N64;XwP)4WkCwTY6+QBLUL18k?UY}cDy z-s(RMEmZ35@c zY~vj(Aymdf%&U>suE40#sq?BD{T`ia8%;6^u{tdVxW~d9`yp`EKP9G!~o-p z4DKy6Q_E^@;|0NArB{*4FP7`YAmk~1rP0)qes1-x708O)E=6!H%?I(XDF>+&caI#yV+(Ij#Gzh;*cN5U~Dfm&LW(rU695G+VLEo5ph353OM z^GbV>(zqMT(66M zBI$NF0v$hGvVe@_76gyZyRQ=7#|62CH%$``S-RIRYw*j$_i`Jn)sjh1@RbBs>RK2| zCj;>p#9C$6h$Fbvt=zE;aM<1NUQ?_5PSmXJ2AS~od^>!BkvHQf-o4+(o*B_JsFv$p zw?%|FMGCxQwOY`0uMM?=PvMO=%5OAs@(eQj@mnHKF!)Pvsy)O}`2PFPmR1f48#a$l zE8guin605yvX}_Z930mrrua)tj^auD;$MDnNC7>EwRg56DRit`gklF!a%q5BX;MKd zh}=mL9OAVt>}24mBc8&uH2rUEX4I(OPY1ZgbUJ;khRDe?VL&H2tSUzAxVsL4{?0#o z*!t8qx{UEcMb_Y@xX7v!T*0Z`c~*_JeG|rw68Lyp|H#E?ATGsLrIbksb!{YZ<`OJDM}!yA?SixAcH6 ztp0PF!CQ2a(OO0zj>5P6Dv5IwD;5BHRuYNR9g1II@>rW}@$XhGqPic%K>AgXk;OLI z2?DBW*8Xd4ww^`LrDe!#b4nOpE%#0HzqLBoOifBp-bO*IUJHqA?G_8xGLppZZoJmc zqkR^ifol|bJ?P{MkXY!6rjYkBw9)?ncP6%0I~)5y^jlw?4#ebDZ70NW+Kt+TNXsDF z2Rsv6_6FM2`O%TJxy4MPE^9KbjjpbaWJ}ompg{w7Z+e|>t!2|y*7i9MUK+E!OW={> z+0pH8Cxr$#1;l4Hq9Bw$Q4MC#5)g(GRq13O;6z2lC{{R?k3#(0T_VC3K+IM5I&2D%~{YIu> zxANFZp;@;rbGkk2*=r(?SmW*6rouf5Pz9J20!w&|wn`A1=3k+k9wb*KJXKQnF zZ>R$zAs`%Nn&98vzD5@Eh^%xoIE1ri-x$!56A=07T<(O{3&N;<)(vK<6DHn#n zs(9+|-qyw$oCeEnUt0Cw1N;+`YZa4PMookGxUWh0Bl|a4cx4*u_sn_G6qRr>)|v6s z#1i;g#zoR2LAij(Jabyrsi7)2)U)87Av`CggQo!7i5VQ`ip}^-uH9;W96@^+KQkQj zp0rn)Em_eRs~;VC)Opnhn!dE)bJD-Ju6{RiRc+0hmA>Gr@wijXOl1WHJB84h!~PWQ z$JEqKC}V+1yn52Ou1&c5nl~R)Q12eJZyvPnJCklcrlWI~Ii~L(w4mmJ#Ex#X)NQ7n zFv+ON$68k`R&3OAOSd#UgVv#u!Rl#qA)(%HJ*e}3m0ih0^Lo^6dWrXs=~>9!o@ut{ zBvlK`pRGD;fZ1SpJq>5x%nJ3cd96U9tzGSiV?Aq(*YC>jB>iik)~}St05J7GDqe1I0R&<8RspyD7(90xR-2M2rbwx05DGWnH5g$RrB=`u_le zR(v;K34Y9RO?Pbywx)^~JzH=80Is<6**H>nH_GYWq3arspBA+n%{y{EO;XbB?KJo% z4B2)cFFos_@kXIzqG{eihzXg8-He~sv!k)Kz0($0qfsX(rZHcc{{RwAqwN~^Rg8md z#rFYFYA{Q)b#6RZfN(SQti4wF8)C8Y)y|r@%*$Kyl7S|3Q{CQ)BfvF{J2Wm?@(+4g zE?QRVYo;YxvOPw~-V%F?sb{A&GjMpVp&M*FFnxKd`~0Kx0h*eYv7aO65o0UXtfT?c z=B)dPqz}1xUiEuUpUh93*9)AJ(CBf{p32%Zen6|OX0~h{2j1qHXo$_tT8<{TVh#$9 zoYtzmq>_=0DeI{Yr*3aF=Gbs{n&355meD1Nr3z#@9c#Gp4x#oNS6GiY=qrKMZ6?*F zGD*Eka53JxY1I^|9PXtEvQpEw;NFIpM9~vckIl4YiTZ|dkSku_!P4sFD=zFF_0;Ho z9k%ekn$M`)#`_eKg>nsdLZ>!|Jn5?*1@ZU5<6YLREo8fiFQgHwO@py=a5(zYBmJH{ z9q_8!4Oij~yxNYq`7vF>Ld1l1%C|M&S@?DziC+;;p(Hz2#Hm;c;TvJk>sVhFZsdYDq!uKo`QTWZ#VYo|aDtrlg)qQ`}G81*>w zaVS&o-n%agUbdv}q;RW_Yl4fxYK(ufrX&uyIIg$CHxpXM&l-)YxH&jA%Zb+3I_aHf zg(7=>Vodbhf0cR%!?3q^a>m4DlU{S+yZ+ZV^}&7AblHIt}Z$Klu+?oJ~o9=&=| z$_CDzq`)+?@v!sulaG35hwLV~zhQsE=Zx1c{{RVMzzmi$xhJCI6qY_M)o<<&#ARII z5Y=fkwF{k|qX4p)FOvM9UbR;8IFJJH$hr5fR_YC2=TKI-)UJei>*jQ)c!x;7y|z)O zYPUte9B;*Hq=M$tYB#pGhCMcAirWC~Zn^JOt}asM=NAsF=D2zM6|709d6&A~^k_g` zqD+dGZwBhx8?DW?)YmE3=8~ItIpnU+>dV4Y8-pwhkXJm4-0+>NTi=DfQUEpP(tLE( z{3T|RYu3g)UBW*xK69U-`crOyYhMmn+ZiL0Xg_Ez&t7|c@0fV50HF!UhvTSdlB>Dc0wG(5k<-xRGi zJ6M+TDRld(hZge@yna=qByDp0(zyQsiysLubf{9}PiDA=eEp|U&+qK<(5G{rdU{n| zAL1Oo7`TGZ#IDSx0FFR6w1XToW1%CSYo;|dN$z0c&cgjjX3lq1cJdVmbw@6z9s7B< z?in0p5lSwiROFC;mA^9|E`%DypvCi7HZ_SXuRnB8TH3mrH)HmeA$xIIv)M=H7EVPw zu~`u6I?cuOOs||U!8K0*08pO7!4}&jDKF&dtE>CJl_9w&{hpo$4{iU4}j z3q456zodD#w0E&N%JY#94SpnhMNx5ao0Auy8FH?DSxFMGC z{_y8^O(xZbt#b}S+SaVf2LzK_cHS5J8IN`_#+jvBM`e5%aQ(hg-Fg1wNsBtR(!}fr+bIGae9}B{NbDd?rSppM{8Ua zAd2n$M{cgWG|(BBgW9lf?59W%+R!dN^GPRj8A%-Wvu@WGk(l%HgPPUw7J!$^!sLO+ zdaoV)42>2^bK4cM;ZS3jVh|a+VAj#t#!P;%;Y)2bnphckFCzl0-y&$5c$@E*8NjZK zS@7M$Sjjc+He)#rlU%jkrOmpQ)mL?>A1^z zt;2rxCmWSls)O3Rr{af*HS2is;ag>UT%6^?ar8B@@UzEyoYrxTWelo`f(vd6YM#Wc z&rXL-ZCzS*kz!CYw2pYJ%h0UMBU9!l8TF{5*52rDw~^yh{42n%Eh5S8?w9Qfflqzi zYl3ln*Rk59tYQxfCYc**8tn1xUP9pJxUFa619-p1DW!OR85SmD45tM~276bc{7ul) zQH5Zd;nFgC1IJ3{v|k9@=&*TOOi}r+IGhYP_st13XDboKq|PmbGL>RIs=Ru1mU169 zGDp(3>^wbjY{pBwi3lA1?AC6pb2+*q2WJD`x+5bAE1rMx;Umy|CFR_qxOwJ6p*Y5V zwZZr+z}mQm+U-e#(a!Cx4nVJQ@ehaXFZ6YNSr+bPaKTt^#Z7FM`lf{yyT-P#qLK2h zIQmy=YQ`L=nL(oH5zFOxhV2F0oPoO;729}H%Ew5H8dSbwk?Wewy!bhzUuwT;xgu%D z+$@CgTDnbyejmFC&?=`)ft=G7i`QlDB>51i>z>r7R=A%^n${*Dl`0R`wnmvgrmAe! zM0m-|0s2;6wPw0}n6o6y+z;`nmf~`;d)<#nY@j6{&mIp$Kk!jrkf?!k99QBgOihjzd=cAE@Q3J{8=^K;>l|~VRN0G z>(IP8ti9%$yo@k7KK1ig!!(BXUkP=p-bX4n3~U$xYufa$6vg5BqJgD%gy5DSo@i*O zJF~oL8txJ#1XnMp*|mlL0G%H^;~!e=E%gg~%_GjVAb>NRVz5YC%aZN^k3Ics87rL; zYUa0xpcl5w=Wq>mdK~teQN)KN*C}Bk3KrD!OFBp;Q!|h<4_d}hchKpJH~c|le$Y0N z$<0@S(A&ta)ni+`dxDZ$WT5N$Q!Qr~aEz1kj%zMk8gnCGPTMmF&rT|9>Cv2I@+ys> z-EW(7^5l+cSgf9R%W^4MB8@n1?Yx9brwFV-1p3y6=Z8~Hg>NI&?cD&}5Cfm3RkHB< zT&~%nj(l^6=soINjV4%zW3`G%*PVonRJ3I`sdr8BD{2tzw7QBWPMe2X*3h+$UsStW zZAN5{ISv3KxLro~bc&W*dO+ZevMvbst?}VotzY{-T`O6-`%F$uid?A2)YcP4#hne` zi6PVP=F%m$l1U_1!;E7hxt#+Vmo8m1)SMep@kFUcWzN6)h>Z}=du;b<&bgp@$M)Wyv8T>bWe@VHQ!}2I-jt2+R zHRK)-yVSf3sI2n!EVKZ$%h2s1B&DRDSRS>UGSyi!b04l znFc+6wa-0@i!`*K66p=3CZLin%+jD@s(H!!)d}pO@hscpQ*DEsH}QT|;yx0R=ixjs zpAt(viNI8Busqkbcym!75G~d8pe@}Z+@O4ch^}dCvAkP2c9vfQ{6}kvi4aV3K;xxq z{6IGLaxLzUAOdV|!S&?SUl1)m(FluN*%jL7_<{Xv!#*JVS)WLh>CsIrvToXeeqqPG zX+jcDR4Gd4r^IW!o2^k|@Uh)J!v%Z__AlAz;52$PG3wgu#BUsi#?znHytm+;g~7SB z)V0XB&ogc++~csXr#vs={Y11E7r;eo$&dtq@$|0wG?s=^P3(1+H>oYe`HY_L5uTMwZPPUFndr@tGzGXRIii3Ie zry?( zFP)97+~U7Hqx-caeMB}KlgMNFn>9*HjLY)^Xo7c0&i?>fs``v;A@ea@%R!TFP^~DBhP*SGQoKXSH6@n7Z>^<&-S$hu*r49vnt0Ie^i& zaE;Fu75=&Qbzun^6;|f##K#p^?5#AJZjH@Eyl&8IHn+&!OO4gi+sAFmV9fHu7L?iL4nxqj=If`YRN!N>+C{r_{k78`HcmWYg(Uk2X+q&U)7)XW&SNwslCYNuQ}ZbNW|rtw|J9ZI6{5 z1!HO&<<6S9fh5(@IXPLw=>7`xd`&K)uaj`w*aau(WaK& z)@I(Z?9W`BS1s^sPSUL%HEEOsaM=SD(=Cp8?s|-`4wm8_9b}cyTpiW3X<#OdTr=!- z8QGj?@TwYg6D`Nvw5w&7KD}{Um;OzgrM1!9cQ-1(THvV`&geT9bOo1RxL>ocmm(f8 zF`x0RyWKYY-mJHAvN|A9l*T~sSOxEXA3!g4W!ebbob{>~9~kv5a_CDWA!7qz`N_!j ztoa$IIyPU#kEiNC@iHI*(>zp~pNOrzMC%A}N8aH2S1YSte{OvD9DcP;uPyAM{{TX4 z&N#=ndZ@wNPH69Jw0LBQ6v4;6T88=^DB?u|xgQL8)5>*@;|JHCmC?>2)glZHRH9EY zajrZ7&OkB0=*i%BsxWHgUTi0f;-3@kUA?NM#ix-em)|wbDC!)={aWY;KnUz>Ku(vM zUeD`TQYpQ(^G|L+Dt?i2z!fJVwvNQ!r-m0C8W{4w1lr*Qv;sUd?%!6T7&u8L{3>xK30FFOQ`%e@czBv z%gHCwphmY%!w44{{3~|G@;T&Vc7AQ9m%|%%dpr9$!qKUkpCV_gDH9Zz(Fp z(T?&|^$X~IE7&!OhNq@)PAdw+aRs~igQa$>Nm-oC@ed1lhEETDoXHIF>9UjiiE?Js z#!gJc@}QnZdl6m7+abTV5?V5{u*fQM4QG5o@Tc~+wQ+l+F7|G2ZAVMtjBR7vx8+=h ziKtz8diF@|GddHwp(g_0{gLZURB(2d-Twg3{KKKu-_5<04_aio5%Hdt4v~Epxe&Ot zZOGN7J*W`+n(Ty(<*m%9l(S$1lU21jB#$V|*VI<5R{mU@m#E}cUx;G3nfFFI^{Z^c zMlnl^7BX5RXZ_sP#)YU}$QDVMjojlHs`hfsapE@DSsT*~u;?VQ#5 zZ%^5y9-pmJU!Fm@RiO};H3PR=nae;SH-t%=(9?C6jzk#)p17(rT5aSE)pHvM`Aua2 zI>>b&w7>6JO<$i;j@~iQ=DhafSC>whZ{&SzR>Qn9@7}ijI)*J-1;NEh9gErR z@`nemYCSq&HN^W@12i^;W_nGZM3N)^sjpGKZLYj0opXWgqgU&&Qw-6#194B>$+{l z?w55X(>sTbGPnQ}(=>A;tjhi!ytjiw7Z9R9NBIJS2IjSB2 z)OC9uG3`8ErYgiY0Q*>a8&+6%qutw%Ngn4LZ?piCsYA6ZgB;B^rYE#!WMc0b)PDTu!s%y*I-*CQJ8FzVC`( z9(dnI@Kk|iaey=FUOVx#;>LlmXrS9js(I;6ZVc=7pN~35lXq)b*mgmD$3FldMGUFKMpXEj8jV`VoJ<9{vsAp3y!$J#(ir; zPrLrqgUxY;H7ch*p(t46b)9x=DZ;XyzwXypqu4>KLLTEDM$x!u6zjbr&r)r!K5wN+ zbh$K#3mN^v9PwJlMDm;mj{Y9Scj7^D;V6tjA1qg#*GHr2QQuod9oYTsV+SW0sC+@= z`&}ng7Pblt7TQj0drUU#EO!oZy+OrXo`XuqMd4MABQ~yHZkisZCpvNt_* zS^8CyY8S#wcE{4Yo9#Er&_t|GMg?VZ;&S%M_IJSJ6t~a62d*hDU-$UWH7Y^ou1;w) zq9*=_sl_$3M{uKY90DpNf?It<0F#ww+rG_jv>K5wdl8i+u1-$jm)6eEQD45 z$d%;{7F7u3R*kK{kU2lCSNmMMLiF~eGD#mV-nr$u(-TE+q=1YP0XXSf7MCv-hVrGd zGmLevb{$G9hE$gWY0YcJ;)r1j5)Ah1R~?C#thJ=-@%^BSt8cz>lASYI+K#mZJ|KNR zPxBP7@dp02Z&A8+gM1N!NXX{0?EFJxp)<{`z@KQ7jFahE&tlQ9;lB`Qc2|=pi!PgT zZozAfxFWgF9(dP5(46Z27rIGq6y`!E^9~o*wC%h(;qMmP%O;}1C7&g5p!Kgl)cyLbgH6axhHtR=B>*zJBE_|^}K8ePk1QZL#!fcsk{oM)v+;_KaB!rhIW zMU{AvnDR08t{+R&f8n0ITV!d`0%nWE7Q1;0*Pzs`Ot9T6j_j zO}cNL6am|{bvWo|q+)ne;KUkrt)RM78^g<~IK_3TE5WBVsF#&|Cp_({T9=3>Tj@p6 z3oQ5;&q||ztt?X|&Ui)g&(^V&P2(e`Tk)qnYXqZWpYLY0t$a@g=4oVHkVoFG3+-d< zZe5N*%{DpITO+e|#U%q}J0n9`y^1YfS(NbD=QLCvBf7G)(&Bj-Ze!0BRq_z(9|cjI zQAK}dpOSKuMaomE6_aSEdEZ(E%Eg=Rb5K88k>7Pj{c7Sh7DRsWr_^q7nrU;I0>sqd z_+NUj<{Em*#V~5aoxOY0Gm1u%qi4rT&O#eI=a6c&j15gQ{JeFll0U6uA)%AD2Ngo# z^Z3=Nq`;~d4~984laaYj_D`7BZS2@XR<$X%vu!ntsa;_X4{F9z0~1-e7&$e@Yxg7O z=C^gb?V$5qSBNi(E(y;y;${-u)|_vtf#NHWQb12tBE0X!GkGi4y3Y`57%lU5t{cR2 z`S`)kE8_7E^Jinx8K^$dCIwv6EyHTC!1?{_Z9bJ#O+)5$UB|-D1%JYG6+S-<%?%O#Va4JfADW#?DTvu@Y?6ay1X%uwO?IZDP_xGI{VQ%t1SeV}o9E`xbmCi{MA>&!TAY+O4dUuiJS{mlM##dx;f z&sp(|jc=$alXD%TIqO=M8fK*x)Om@X#1ZC7NW!nJeC99rZ$sNo$eUHU`#eYN**sPa zuAw%ebGBeqS3#{LR?E83i4z==T*R96FDY1X8o8c|sH8Nx8@?OL&FDCi`;0Qr3h ztjpa(8>@jV3NXFJPcvm2T6`i4n7aJNwgmfE10(5J+HLpS<%ywO?fokJ*DkzmG;;wg zuFln?pkUk$;F`?0caxwsyP&*b!6-N!)Ji~fb`qi>z{OunkYf3B_||N9u_E9BQmx|3 zKX=9}N^&A(lD^|lM_ss+?wW<4jGC=Izzc)YyHw734ZG7|k(t=nKXnC^_nRI@{P?ZM zxsG_5bIu5^J5bV9H4??JKDAM;eF)_`S&|(l0LZFFIO4g@YV_Vr%n8FBeQM0Nl4>X; z1dyX2l~ld3F~Zm%HEkJOIZS;@2(BP8N@N}WLyF=4AO_Vmt9uA{CIxVs429K4+|g2IQA7s z;a9+q9NT!N+fewWs@+UvMlTGZF)2UA@{TLsWB70Vpw_x}oo~3vz&_FIT~hc?XzoGq zo5MQo?}r{Q3&rNfgaXoJ_N|?M3tt9bHQ$YIEo8Yw`BEm!1Nhf*<8O<4U+lZ^*)23t z0MzGF#Q^#8IPYJd9~1uoXdP4H*Tg5dY3?+*QQ4TDjm>kyH)llUWRIx4LGfDG$2xTJ zJa>xRr0T3~l$PKTNx*7s z^=laZ(-O@e8RoXMd*(&}vvu{ZPs3g&h-t`@IL$R~<5b zl~VTOaImp5N)a}ty3nyC%vop4mPIH^(NSu+y?^u|b*ucza2&hEYH{gs+& z$-dFP{{R_U$-UJiNQiK9Mh0s~!Hgz~(i`R*rA?2PY_9KKZmiRt}aL(VIz-xSI*ut z&=PHIY99*|?AI}pWmtNjOy<2C;m^k1GsYI{qy~=LR*i8eB<^jzH(z==taC`y)AS)d zm}MbkImsv9vHVHkxUOJfgju?Rqk?_Sb~hSKldsuqL5@Y>u5(vnB*8` z_9C|KJRu&YliX@?sd6)GA?pizkHWmmT=1>`0EYExFJ^azi|6e?f2=3idi^S*-7ine z{sEI)o{%olT}8kFiQ|fnTVZi^k&IS9gSDmCnoCa+;@4ESkIWG<<(D5TWO2x?LnB*_ z&5@eu=S?PzBuA-e*pw8&s&`s@D)FDfw~@u&zJB#bHL!bC$mbMu5@K7#SGU%!S)blD zPAu{c(NOt6XJS|$Xlx5DASuWdO7<@>FS0`r2R zkL?nyb`lhx0O?f^ga?Oh!lL1gHZgEdQN3|24YXtMsb)|?s_z+a zRxnO|C{npHRzx;7hDeSwe;T)^Sa}leoHH+QJJ#NT;kS~|u|h^TrF(N=?fbpV4@zcc zCbMT}q*^=P!2^kukDf5ZWP8`oUlYG$e-8Xl)SFP$p7{`xc3Za5&#)j@(>I!Rhlt|a ztrd@N01#`Q*OuqQ@rb-FryIEaSN{O7LJiNBG|%`Y_lET^5J!2Z-_30VVB zNgH5xuSwHx8b*pSU@bvkm|%Rz)~a}(7lPmmaugGcE-RL&ymUgJAg}yy+TS+s#-qH1UAN24S8Jw`hn@(>9E#d9Bb0{I!hdVO7e+XaPVQ7@wl6KisLH6? zF~FzkT8UH$i^ocSph@6&=C!@hq^ye`6qHAB26|VcX_oM6Q3&-C?HL)u_0MYazYOVe zytxWZ4?JYKzNo1}?<;%6aPhfMU%QPs5wCW)5XUB?*X zHF4Nd+}G1C?(RuP(Ro?}+>n<4dhG#g?;LO85bouS3xB z?O4ds>}>o}@FuC^6p|A)qXzk-`Htlt+;LqOz+1~76WCm6tn-WQGBGu8KGnB!tNE7z~>dK3QYv&Dba@0(DRCeQia{XRXD6A6L`qyzqV%7WmqFt z!W^DD)xApAO*YI)DLuHYi)}vFPC+PD4%`~2tzE97hBpImrByg+5}Px$nAcm6GLk^( z4HULZ9+#0DD&~sclgP=`J}%fj=-55!Xs_$z^Ef)#NIq4@&8E2(YHPjdbl(^sK9BO`AB)ZgN2^YlPQtvm}6#$*#Y|vuswcIPnG9 z6ThZw<}+HYMcL|UhEtVKBM-#aL43leqUN}(+t-#s<$yRmex{5RdN&GQ+)eq?*NX!4xX{5g`^{N8z>I}^jO9clXBkF6!JTWPaz zDB9(D!1guQ_`c@DUC|OjXi{I4&h z=FdGV83a!o)$LkqQ6;%!Fvdqv4Kl^vJ51eYdXs@&Hou}bhI~UMyN$}uKpyrbxYWL0hKRu$*qX;kg5EsFShu;TuWZ9Bw;2Me!E+|o z*;Oy*x{?PF=Qys2Bo;Yeh&Ps!FimjVfP-?WUm2i&hz~uGk(!8(Z?}hch z5%^*lH0$-t%?V@?oRA!6y={2^0OAvPf56&5g0x7U+Vf8fbu{_NVCQ$;>)6*qmGn8B zY%TW`~pC73Eic71exkGm&9qY(V+En8-iQy{A|4=9#5S zcG`riE#B|F(y+9BYfl#p+76`|XXJpswbMp1)WV}@jNIsYkAh@tYhio1oMjN7%Zl`G zhT6WPVd2-8SV@RhW(H&-x_kDm?PB%P@nw6ZcLzUqovCZ{YF1$`)Veb4-O{c}bQEsR ze*0Bl8Cdy|HrZF415#=B65HKFY8^;q-g12^sPKfaF}_PU)V$02fMo?b zRvk^WNbGc05b9CGET1k$aMjg5qLz{(SQ7c`yPoytx@2BPvXaRtBXA^9cvy`ZFgdo^~{>azSo+E$g!~?N5C|f+RmM;%mvhWc*X_?Tzb+)b>-T$ zBxSLWt!3I-nDuDHkrJ{v9eqs>BIaawEZSw;-rGkK#ni4o^>KQ?!@X0)TBCTI!G2Yg zwq&u0{Gwj{I-J*{_=sCtYE5kb`*Y`rSLHE(jc3|v7nTL*xSQ>OWUMN?OkY#&T=I!G zFMK%o@cuZ`?QHy3mi9Wj4=#0#Y#@Vy!*kFI?XFlgxDB#(Bkw;ZzGwKs;mNG^OP>>H zmm#%B0p)}*BWS=G`d4@RFMM{k@!B?<;`T6IMEeHj&Umd7(6iBJvJG!Hl1O5|AU!io zgF&^6!gmsQqAxcfE-}C-fr{!bd^j%dytv3%;Q5uY!{(@K5nN5JTIrKSS_zlTE!*Yi zrB&FPOz~e6_zveyv5x8yF-YWTEu~!fjM?F3KinNVaZ8|h^>q@Ko+ed}=c7DaMn4l? z#jnPbYjWF0F=s3*6pQLHgI-tTe}!$Q$t(DB(eG?Q{pGS87WC$bryXPWf03Nvj;0$A zut2^^-4k^uo++~we5@qka6M~}@E43^(UGluL3D2{3ELg!HmHC3<&RP8?Ol`!9O$## z5Yfr=DfO-6D9K$I$~GV?r-mg8 zfslBsDW($KpVF;CrUk(#r!{&G%*~Dy=~e_A$IqJ37OD*&XXk;Me8FZ?`!L{hS8Z(- zBi+e0BiZeY9y(LuL*?Vrv2NufKU8M9+N5AEdR0Wz6%OuAYyFqZW9?4+Fg+-^&T{(L zkZ=uL(V3L4N%?zLoVs54*!QPtI#-!K2d||onnPlyx{ZCcm~=c~S3dS`ByKy`rC<1O z%C`l(*Egu?q9VkKE?tge>`eSNYe&Pr8f{Kuk!N;k(h!nqXd_ zRyr$aqtGJqF96=d01D=OPS0s}SxjoKax!_Yh~3*>?$mW@1`uRszH0d0@ow{8__Ga< zhPMl4m4P7VfGegNoOK7bf4Kv#eNf$%f0a;>keCYm@Q0uKiS6P zUa{b>32GW8fsa&|d*dB3PnnBy{=KXl%Wtu$P!0}9UMoJ+Pzw=@cg!b9c8bdnst zagVKJ8&*lY-0_^&koT6Nv2xP-Nbd-kF4BD|x0;c-kO&oe`c+$-&y*MIQ)zNSA2GJ$ ziqQp)ttw}V*fgrWJt|Rh_b_lL{r&3Wy!WQKTWU0Y4olP2jmk_jD+Z#})t z*eIwI=~>Y&y^O{}o1`4)IH$+rsV?T&6sn(m)Yx|_YSSquCLy1&&w9$WmR&0McA*SD zSv+NW)|Jkg7{3!n;hlbBF;)CcbN#z-<;FIY80(r1W3H@SYV9uU+Cyyy(5H~R^sZCD zkx6r^Pd&0az`$qBQX8*o>U3mj?Mx@{DC6ALMwzZnqj-p}y$KN?d{JwZaMwQ+FFqH1 zLYD7Aj`ic-;r!Ux#xi|Ct$!B$NPmhc9w*BvDIk^Ny$i(lmcA>~U0{b6>^@_h z*O$-XJI@MR-amwOIODTbEgip>avQ%n^`**%Cek)^nc}q2q`kVhxQ0~w<95-Ud)Lk% z8-6_MpAs)+()FaZ%r03>0G9)xCcV?euWwEf@adb z7TMTB(MJq(wCd#k@RC8nK9%za?CF&1YZhD>OLU`qw*gBoj^h(_HlK z-lmDOtA|oUw|~qD``)#7Mzxa6u)xG6u7>es zI@gHW-s5ey(}T`yGyW1bx|?LX27Nl#G_Po-Yi zK@Qm?xuURqRWF(pp&h8Mh`kJ3K4zkdEBf^O;A{1$r0Qx{>rqM6&;uf1t&>k_K@}Ag z0IYIJsIon3L&&H~WY7b*4_Zy&wkbTndOW^p5UjuhRZM_4HDQyAts-+k#>nBiR4*B3 z;->Qb=rPa+bzuQu@=!U-JbjMquxZDibM zbB+ygI{ojM?l*Nc@_6e0(C)*NhJaQC!Ju<@Q-h?yq#!tczPNp%i=WS#s%&k@#1iYd0|Xn^JGHvc)_n zGOloW_OFz!KWNW(5V4J<&1n7=mc-3>CGw7?Ndp~zYTz_IKT?~-FBSf!c$Vn@05pDS z+DE1<&?C9K(C^#Jw`Ps9rM6@r#mzj~#nD)%laLEwlk}{4ERMLlBWJ)@(0D#~ zxhj*zyeZx?bM&u4eKyZf)eY^^q&`xIZ!C7NE4Q|{mdvuq3M&BLH+uA63PtvtSB7>a z_5$4Yu1SPTej(8Gj~8neGili>idsV=Z6^cYt$B~fo0}Q+NK?W)@}UunCeN64uTHvx zJu_3YS3X=DcCjal%lNJE_es66icbzSa$Mv&+WUz=O2S7(c05Z?zLQUuV|2TkGBc5% z%DV3l>Q@@HONARxOz~N|#)&43js3S7LoX}1V>qpiKU%cY^p!C*VYu(@QkBX&eLumM zSFj?FC00)Rz#_ISbekU!L$>+Jll_sq^{z78$MWJOf>Dlx6*RsgYsU?6`K{pqJ3Th^ zTub|vLZ9slxu{qpplGlO^sZ~e`hrL?8)V|Q<+x(16rPoBSeXnEeV#I3n$Ent#Gfe6 zYfa;MVmZmGaoBEV^D3ZYBQ{y2Zh+NWku1>_BRQ?PEY(IuSC$1)+P7O6zli4L)8yVx z(NWx6u}}c!x)w!0!%-V$Cy*&b*ylyO=!7EkQd-(x1tHcxdS$C-?Zj#F4xZJCsB073 zvGT`GoL59Zn@-X$8tARU#1!+L)n*+nY^Hy<2;^cgqdU2*gW^e+#n_xk4;*_{9}Q|( znvSAP;c}y;8Hrs%u9EZ#+^5(USu3;#iY2%ND zIvQy3>QZX%(Ojuwe9X7yn(>=&5$c{F*P1N~!buTH!+CvIJR0|%8{l4#s`#GcMAxse zYa8M{_Y4N!{N}n#t4$kN*H+)*jifTc2=Zi-FeDiq9#6Qgh*Yu9Qk~BexcHkMo2OgL z;<)98Nf$U+%V5-cf5uCFc*h=!%+Lu!lOk<7$n0vb?F;bF#+SZ7xlIpDxxCV?rTP4* z7Yeu?^Y2_nvt?`HkF!CgMAmm(m86ZBmfxOE4Qi@$8MR~6yienM-49of%5(_i^m>-u z4PQlTi^QE#KDvy=BF*Z8wkk(-}Fgsawb7>ETrT_#aw|J7`wW$#)=G&TBVwL-4-KL#}Oy$&B5-e~r?&|u$k!wP~h#2=+g;mhm2GFc|n^$3Doo${lB@;|4y(x+nj9MA0Q z@zm>rBr2MrE|#q zLGa}@XfEgQ#7IFb?QG+0YIFD0blv_n$#{EQz3{P-FN?jUq1!T(mjnHU@7BHVQ`6(o z^^Ypd0J1_DfzES^K2JL zlWz_)z~p-$LssC0-ARxDJ68#&YIj}=)R}Eydsw&Tdr1alk+aOBJcT};IIjBB#1>v8 zwOKS-qjz8Rij9(f76%t<6Dj1aYxk1_O%Qn0%ya zS$H*W-XkI4R2C5%j$e~n*7jQ$flHVaO4ktXi)!_#5;GVf>q($HjWw+Ib)bTRA!2q8 zX~NC(lZ;j9?Sx884wY8watz78M>91{WXu{#Z%U=47V~WoQ>2L zWL&|SNdt&WhHvNg|RvSDL57vt!~0 zythP?1h8g2^sh(M*X)Q|P5||;FU9`=5RQ>!H}+1`bTAVGaXjFn>C{h6(d%eSduR=IBn-#XZRs`ZduN=e#A54RQ9THRhvq&M0?iCA?g25UN| zlue|xlUK0+0Ev{1<|z4abCFbTHA!@cMZLIU-3h8%M~bd3Nm&8fILThMHQu}S$w}Li zeXAnPuMel%?vdjxP>eV|cYP~<{{X>KJNfFP${d`Ye=5lMZ>YdEwEot@rbk`{ddG-G zwaftNflOzv4rl}C4;@>N?W5(Z2#}E6W17vejOtQ|;!>b@ae-cs zy;N68;ca28EknN!8m;_4v$eUhSYK;oV-od}oRInpy-Uu!*h2sTJk#bEA*pIYlYEU7%GuHzWzn&x9Qn45Mjb{7nI@5NrzjfxO%NE^QH7M-eC zS_^az>Ki=es*S~subUWIlnfu@qy%^N&{}G{?c`x`nCJshSc&U@c(L}3hsLD4F;wFNO?RV||5Z6)K^5EId+@i=z zjP&BQjoqqiRx+y-ZqBA;#~AO$L#S%{PNO_F^Gy_u$2&&4@Gav10KP?X9w)JfOmgx>in;77xWdE^ z`r-a0->HGNp7n$GOGh& z1y?SnRV8K@*EbhSlstCHqPQOyd{(*BJV`CBg}j9kLC9RuT@j6uk1@efMHT&QetI$b z)N*w+>Aw9kfFq)$qJSf!q^4{%0F>Ni>H7^iMh7&Tux>>npw=S%x>6*z~BYnfmss z^Jiu{*B7eZO4GJaex8-JuHVS1n?v=@a}!<3eK`_y&3LM-sQFDK{hPRsB$2WYJ*%bg zhlZxtb;}5$5;HLXgk8syJ60v4#rBAnOysc1?O$?#!61KSslF|IPrKD;Sd2P#(n7n? zuppwgN9SD?WT?|Q)SY=BseiEd?B8qfU*M*nWu_}E(Z?OblAsd12Oq6^z4wY6#Cn?A zXqM<+Gqu>{8lLkK7r3i5x9-VmR|OC{Eb&Gv@RnlXXx(!FZed=Z0U;R)%w zu)J%b-D+~$wxJ|b1t$SPsqe+WC;#?ftvJ>0BTmBZ&kHYCBW;_vy?6+ z6S3AJvehokGj3H50+2gZyT6C__7`sU(>#O84gmuh#dRs+A%CEG_)js^F(6ko@_%Kq zNl858t#Zv+(K{YF@ry&byoFxjLIekAzH83y^y#Fv+qmEw`V-@KhvL`tYY71Pky{x2 zE5I*dzR_-2L5+Zs(ykF!EiuV?{f{g@cPgjm&2-vb{kEe9;A@h$owd2X&wLJLI49D( z4-9yED_DX;LFTnqL`rsNN8wpuf>XQNw@vQ%`FR=Qvb5a+p*w)!*HdX@8o-@5W16S$ z5~t2G(Zj{fA%o1$ILBI<+{6fvwNbsDq+nYk0~FyCISsmpYSkwJU+3nM`%*EC9!+Py zpiF@CTd3U`buHZ7Bw+Db(`t%`>rzVp0BBsXtozvvA9I>&7B(u+eKWHR@J&{kUO~?} zttCy$3CA?PSJJdjz-2C$WVUBbDmGTtD=uoU<;%@g65hn=)1V(;@iFaYH8dVAFN6Txex zOuCLaAcI`Th~S4>)CcyV6Tri6Bkf%gPDV}L9QTXAYI~myMvLM52z5u*P8-a21apt! z2hzDuAN&y1z9+q|vkWU?bud%qN6PiidFH(fPVoN#g+3kKKBWXMmnST~W(WqkO>g4n zd_>YoX?Lqfw-Liw$4vOCO(a_2< z<~t27bos3Q+jWB^V|V3QS{>9npNU#)Y>kI)Y3aWYH%2hvk4|fUN$?WeDJ!%Q&q~G0 z=R#IGPYokS7vWtkuxV|&_O3(1m#yX%Il%t_8tY;NjPf&3<8wspbGpnZx}lCnU`Q2z z$Za;$d<~zetqpHTg8u+d1;5s3t#e)_ww4VoQr~dmxm@h*btqjXZQA&nO>Wt(u2ps* z-@zx5ShpJZOaA~RK*On#ISvj?(O{wpe#G>(MslbT|xg)~h7jlAyA)X|AMZ zVm!6o%}Q1@Q@)0T(MM|r>yB8A)He4YX_Mp_KzaI7TZ5_PdIj~SuB0vI@}n6b_U~Fb zluLa*tS9$tpK8$l)nwAiwMEVcddt)&8TsLK`qF8!#c?JYWKUviH>ip9v>I|Qr!B;W z?qXO&#?>Q?de=dtU763HZD|eEMCL&uBM<3VGf$_b$C4j>(RCp3YICc{cNdamRZ-X+ zRxfizY51qa`ieg6Q#-yPa`gTrmU8(EU&#CZgP$**_#0sBSR{8+xYj(2pr z-UioU=}Eg9!p$C!g=)`(dS9&-RnK*c@Z)SrA-Y zT*ol^R3C1Xxrm;I7mU6iS$L`fZlrsAy|@y_0VH~JUQw^S!R=o`avBi*1Md2Mo z`eTlswe6Bym~5S<$vHhM6H>Cb@f=XcbfEcJBXG}JEzZ|-9=e=fk?|+Zx`NNd5u_KB z#pZ=VN`c37^{wdGUe3D?k)!z7E`JT6Cks6U3I1xSC~fOSf_q_O5$F@g4Vs zNam2_oxZhh-W`$TiW9k{HZpEvXix6A zs$$g1C(L;!uj@T4It#xn^PVUy)V8w%9(z!lTFR{FA1ze=*8w~8PqNjcG8L7vlj~I& z^D<=Yj1L!Ed6Beg52bmRi2Nb;DH{6anWBw>BOQ6Ka@K4j)GdzE2YTYKyfCSD&fhQx zk=WNvRgOt6V~m@`x=wAOh2&XI-Z9@b)3=D=MT#5gO2l*1sGxWv+U`=!ia!dDABI+X zmDbrG81*$XhcQt1O+jWSQTAoZk&t~wUa;`nu@4~Pt=n5kZ{@^;DG&+{I}R(T(`{Bu zFW%sBTrHPin{0Ez?Vd=Z~B><4Lb; zi>_I1VaWBQ9EL6B-PP){1`D|7AoldHB>3z#FR;xgha$JLk`&xoUkvyi>(U3D<*n=_ z5y%eU&C>&|c$de22x-3({vz4K;#lvc^4=icM4MHB_RVciVq~m%PNDl_>pmIO8%-V= zwwC33-K$Di{!5S6yRU_RwME~FZ&n{0+5Mkz9>sRkJT05e&3_SZJE z87@&(M;QjaUS9xP+$@U=b6orUFgkp5Pb{k%@&Rn%`&2mC(#IOQt8T%@D($?UYUB!% z+e?Dr3Fb1h=Hfue| zeg+L`=vS!M2@`M!6(%P`szDc=i8Hq2j+IMV)1!t+jB*}9&2+EfcDmA|o&mZX_4;+L zXT(o!X>}STGj8W6Gyx8?aTbvra$UJ)I2_kM;$I%Y3I&ER;P>XbeOA{`OI_X}x1MMv zU5K&cD(9g&?O3-y6PHNRUR@$DHr`Q@9x~umwrdTEye+0l;%zzRwnPCzCkNWOi1a%T z66$hWBQjhJbAg)K(Jf!Y(3#TS;@zcgOP&U5^!@~WX5pI3_SPw8;LC%w{V_)|MoxwB z5iK5RZzqwQZYppMO{UrSk4ac<^yH39M39Zl0df;OD-O+84dvGd>U_XX+jwwU^yain4< z+yUVH!o6qqF1NEj5)Gu=pbrXz#}(k8wuX+wLl;_pJRhTDg+% z6R`>pty|Tm`$Hz#Ju`z*DP5XDa_D9Fibl0ugZkH<_@_6>!HLFe(7aKlET##BszPTy zYs&S15JpV4;aQKIdVNh{h?g$L-pt^yJ?O2K7u@7^JdR_`qs*n)J?Pjy>-w&&&lmJmh z6aZ894|-)vqb7hGuzS;y2HKG#80MPiV_;EhfQCAX^}ox^snh^s4sRinty zHJy6<2^|e=PZ*9Px2<7n88dUua@C!f*5@nZ3xRJLAlH!i-&`mhEBCKc_>5L4aT)z< z!aQws#os54;=X4!#3-j@zKuR(n(+p@WHK(}lU$wr%*3`y`qlkT;Qguh8pGA~GZK)S zYv3_89Z6_*xcf6NSiW|Ih**Q)6_cm5itNvmQwdv8xWtDDIXL2;RqdM=Yn5Yxk($<& z6k*KFWiD+Fli`1Yu0ACAyG_z`xID|9PT*TZ*p@lR@-_SC{{RHV{gPq*o4yvM#{On%9_hs7_6o*CDsvv!Y9)I{j}4!~5A&$lMOa=c0Kms5|y zqB~jPU8C;D#w!5ZKqSA%%<sOQGtoZJ?w+D2`Ir>=_CIxgcYoTCoSj_l&pMp&L&CGG`U=RVuoZx%Cv` z$rGQry1CP3+o_j`3Z4y1?UxDmH*0{0=g9lDQ^lIq*N7#^NYrDpVxjQnvvJ{wZV6bN zN(Of>NXPQ5WNi}GrDbC!(@2P(Xat-NYl!hzjMgN)vblqFGN!|o;|9CCO;bd1;@2KbZv1qwMewYtY(q}@`qw?;?Ly=2&Me`BX(uPk%YFu` zX!@PZ^6a|dN221FF_fOCui5yH31is-Qb(m|MR=tF-^m>-&b&Kvw)b4I{7rPw-r_(( zBp*t+JF;Q9w?3d$e5W-J+eDcX@M(}ZxKZV+XWUZU+JtfEj!5GiR`A?XDPCHMc@d`3Nh$Sc}AgX0cn}BB%I?l-FWWi;nq@%y+d#| z=DC|c41aCitdlIE!5j_;X)aX~^rE*(8WK{deJo$B$EHqi!v+_qpb%eUC`^ zN2f~KJWyO}st)&IhS`prk8ZW(Gi;`fHM-xuc6=6PUw2I5w2 zhbQ0Cw28%2bA!3~f#BZ|Joi>`T3G75d7B|1zouKIKf!)2(xR27u(?rlxPpof4tku{ zZn@x1A3@MRvoCc0M^TPWGh|t%{8>RYx$v9zXEypl6zvE`9#+-V^7o2YUDsh z+UYIszx zcBU&cRn!{56_ju|;8lAY(Q$^1oM(*IJcS(%tSPkT2AZ-eJBV?XTya_BQ+SsOMn07# zgvF$0>PY64qhvVlX<2Nvvv4pShvS;dw9{rw=9*AR>bX7pROa?5=F5|~d+}Eu>|WcE zkN_XU*0MG;@6G+!{C%be`{31kTYETLH_{Y8LTbb|K6fygNcTCW-CGET3iIzk8W2Zk z_FdK%P))pXGjPrM)jLfV>I=gw*}~D2(732=)9oQ+y4+55$kYrYXOrKvl}iLf~Kuchp? zkh>#yC1g8T=bTm_i?q8T{0~(WYdK!PS*XXD+ z@Wqm^*CUGb>k@CIo@-akOmd(e)$qrK=N|$*aXn6o524j@++o@y&0=X$8VX8;24x!{FkyGd#=0KMD06Kh2*=cAiO} z%{TjimfU}Edv~SKJ}%v9aG13M_gYd63&{o@o4DK8^siKgF=ZT!7~G)rZbfn0?||X) zY@T|?u-sdpG9*uyE#K`gaZ$?StbgDMn)*fkmbqgM#-B2}PNCC05CI~RQ{ue0cP8Im1LW&+tF{t-19Zsx(~Pg9(U`T= z?k0qm9qLqItAmQIrfLyiz|utGMC{6P4NSi~W~@RiU%v$O&07tXBB`~=Swi~N$Tl$f zkLyhu!(%^DwDXTj%DB>5GC=QL9oEs(pq&xp=hB%+EhVdNBL=Em*vxJa$DWnY&uj~v z3WedsfB-qFgR>Ns(OE7eSc1srq>E1bXWtuvr^}}jazVhWx?>Am6$fzad9At3xk^J# zi4~V%2h$awYo@Fh*<*_6V4W`RNSSbdDyOThrL?(s$NUQva}SiXg%}J0`BdpI%Y`_q z_E%P>E%Mw$un+Hy)@G;i4@J{wC|tQ-yI(bc`Hq7wmQK6ARynN8h#oi(lh&Q1_^!{y z)-3u);ELN@ammeHc*J%@pybjHW1ssIPK-mea({Sr_pUoz(5~UtP1cQN9ptD%+{6RN z*1aQ3wGv3rBIh8AhyD?TwP_@=4q3DJjzw)xVq3Z7J}&s1ujny}CeuVLpyO+UTyB%` zBgDQi-1XvO5wj6Pz34Ep`o~EWosL8c6UU|0D-OB06@=x9RRcq}U zT>{*`pNk^LC89Yk`Bd;;vcT(cu|WrM=--`X$>PXtW-(YK(-u7M`M|6txHDASB+zaL zJZ7M?jW?eljpNg;2`q3!<=ami2LAwP99Fi8;cHl}P1LOH{{VXd`u-G*9_L5ly=PQU z3P&0<7=(?%Ve3!3YiY`Twitws(4Mtlz?0c)cQn?@0*T8)N!YG+X_0882>P)h})A zmMy~7f7P!X_Ns7rxcJ+|2GUqXt*S99(k9mVdSsgK^>DVn2D=_*oRIkpGafe|$28HM zU5}e$)U7;q;`_zAu!>n?oG+Nm&#zkgNE_`k$|be85uio+m43xtNp# zt7f@f3qp$T#Dncft{F@6GAY`vmZv<@N9V+_$@jC?oezlD!#4`~j#*W9anBW zkB#(*XYo|YX@yiPg&bpnT=$Kk{{V?_iX)O2n$x}2ms#;0#p_6s?;x_1jB$>Y&3La> zZ?qF;%OVb^8LPw7%>}Z{!!*1MSDtu_!a7%kw0oCW zqa9h5O^zIVKwlF0s^;!F&73&$*KbDK#TB=p{1nkOn|#{CsN2NExGyUVlgZ@KTce6k zQfeu_aQCCm9`*f7d|2?Cy(sd<&;d-ks(TdH`>g^rOo9Q@p|NN0>e65Z^E9LjCG@ zm_6wg2xb?VNWsfgbKem)?eYF~;r=ny_cP@8 zuJgy*&RUu^#X!6yFzW=o%m9~CV%{Za_yvC`q1+Ceh%?n;1H)O@G&tueJ> zO>(AiQch1)ew}~8D}QJ6@W0?bmpUmEPST9y7|Vb4>*+m8O?J;!3T9`3b>kIZ;M_5I zAHeq7ZPEx5J;hEi4t*8=I0H!kzPZGE~m366%=-Q zj)?-=vjeo?_O3-OQSTlQ`~2QIbge%YYa48L`Gf+!jd}gIi<3{(R#@Gi2cG7+r`~jQ7kQFThPrb4hoEl&0TIn zS2*$EIW(O*Pq(@9*M;J;?4{H!-*%Yi$_=0KuAjxTPp;{5MFg=a9gASsEudZ8*sI#R zMov#t>s>Ij6ZdyLOTivBO-Dt0E7k&eF@kCz66>;fMN;1Qd9lpE44ieYM@foJJ^bjl ziC3pQAEk8KH;$q4Ez+-uVGLjy`+>S~-nr_h%v@TrnXl=wPj4N}5CD=4vCm57Z_IYn zje{9Jwe3%=L*kn+FH43bvA0}G9Rj%@?26-jPvQGJxsUdGHdn4!6`h%zTAaOwl#@rk zJ~3Snh9a3H4R#K|DwV#uZDsz7Ah`2Ac5zXk7fETp8PSvzfyHY}N2xLQcRRa1S{8(e z6mK5&Rx6jhmHyN*u;5oOq3V)Zxsk{!$0Dw_u`A2D%Hg>if30-JO61B&>62=XDVI2S z$Wc`E`CeXF8oje(mTscAQ&uxulqI*o=ZdQ;Z8fDkZyhR>(H!%NvtotKj@JwhbIn{6 zt-Xg{K%!M4eta6MENtZT#R9oO?~KghhB@`DjbaU{ob@%gaU5v>04O=frE}W6k8w80 zzgo%4Ns#^H9xDa9zQp4yb357170@EP8>OK&qtFnw^X~O^Qyd=B%&fje{jg z=O@~_={F+>B^}Q=)HGRV$-O)uYUeytqps>bm&##&%0n(SMdW@ znr$It)nae8NEaSh`9gR6YiR4BqU^Oiul^Ey`20_E6Gm^X%kd#Qa6XlDbNuUe9Y`!+DdN0l&&3i)s{wTWX#gG3oUL`5M~-dm}0BN9NzwMSqDs3GLdQ@hn-w$tL-Bl&wq zcAoXl>s}^~+E5^A3C(1qZOtUp*xB(sCV1P*8?t?CCrxIzfGneH0&`8a@l&(_u;bp9 zZqB3o#lYRir9BxW@?PPFD)pW3+1D(7@Wo)<$YFf9=~mw7&WQqb%}niLqq(IdKWRIG zr>3R$6e><~D?Rl;u|xxtlhYNOscL~7JcWq#9c!A*)adQ}V771^AkWsbqVXL1rS90% zgYQ^3I`nsE{T)~jaf+JDQXRx7LCT)htpqW?(-Cf+ z={q5*CTh&997@~y9Q3Ey>oMEMAePujN&DNeS&5FkLn!^;;1n_32o>%hv%kjcj|$xBS_g|v zsFq}fJdoMOYMfeEGmTe!Gw5+LU+c(?$CfbPg=}2dLmls(5y+4LzgpleJW~`JjpU!a zf3!%(GNT{@c+GbDICJ4WGE0J9LhM+BoDIjVLAsKA5P`Z`6#CR!WGfO%$I_%@`{`KZ z0C@MT=rvJ07+?-wLxIOntxqyEP;%IJh@$?{(wZBD-vf?Dde@&_d^RR0HYBy2B+4vt z#I4kf_RV@V&Cb|OyoF1}@}Ev9(%@NRaJUV~p}5Iem^izhFQ)jC{{TePCR<3#+(;DtzGAZymtn#a&2cKJHVTsEaz{pKU&kg@V%76<{eo!%{c}+V_%tn;9W&= zUNZP`d!<|KvUvXhvtn^Ek~TkSayw_K9QxGj3tLtA{{X=bTb;GS?vY(jLzcvI0tG$Lw6NX=6D_F@(Vxp|IHQGZj zN>YqdntGs#L1GA^E7Hbsl=hmBTX10*|qiJ>ZqnIp5rM%Zy zWu;An>zdB-rjRb!Voj%>*{+(#a$zOaK|X@BrqLHrye&I$J?Q2Yj}-Bao2qzX)>HPD zD(%M@;MRY`sUp0%^EKB8Cy+&YUyi&v_WAbB%xZmWjMh9JE$36G;Zz=bRdTbPy-xoC zz|&hq%?_1;8#YcoYq^~^K&$IsdGO-MT1bU5KqGh7y%PFiBC94q_o;5eyC>4D!BM-R zt*tXpSx}FttZgS!NTpFIZMeq+y=ldIZ2oWy#}S+u?~ae-I9m$tG3!Tt+JiV z^BTsN#WF`AWL6-1R^{i4G|4Q)inGQ*8Q!?(6{W|_j6H6~YYEKO9S1!tF3Vn;Ul1k6 zpv6jnzkoHj4~lIyBElJ0Xzbl;t$5E)N$IPi&3+^UDLqu z$UC%P3e$?>_fpf^-%q`_jv_EWdQ^cyn~N=Ydj4%D>R8epvX#NP-O2XHwRKZ?mrvHb zEcSZVq5I*030{Alc|`vJ3vcdkfw|OoMI!(f8QXSiqtP^-Q%Db|`F6fTWA~GN{{YO2 z1^!jR4&ZzBsBcq9=#GwZwz_uT3C1pyKX*HG?O8Kvmki?L zSJTFjta^vv{uRwX#oHeTMBZh-q8)*eaTf#ir)i(IW{0Wit7qanO-4xvbhh3kxjf8p}Sf5yD$;>C`&;5)nHX>{M&iwI?pZU;_lUtRG(hJGSx;XEsI ze`RyQ`GJS0UWU1E6MQOqG`e z=Dyg_ym=Ldnvm%SGr|FE9@X)8z&NMyC&lZ#XcZW=xj7m3udKBD+ga_^SYL(rku9$rG)J?(kDTtk25uLMN1zHe{NXcY7kr%Ns}r9=cg5crQ0Q)ozmXPxrB!q80}kH z$BIzS{#bY;myMupQTPhuwOebq)OXtC#N3{G*HG0a+KG4l``{DMn z@?)<#%~T9#&J)0Y73`zaBelA=TZV~oo%qES*?7wPN7n44xv@(%8S==56daBZK}B!Q zk;>ric-<6HU)1NslSB6@)YyLII)Dl&qJkdbQjVgcsYhC9M9cSS-KnYfX~&?dhK#80 zDs-wh@@y@Ny&rnd)XoD}TbH^WPCvyui$){_@m^EoO?by7pFbgUUXA06jfp7-7_SuZ z)%zQX0Q9ex%q3>ePYtofc(=q-+~ad*xIJRwq*7Stn&|vNHxgI!=>sEb_?z0J~Hf;ONA^{%yw-+A+K$`Xb~D$2y({RCiJukX z*1TtVZ+gg)G^`?2Zx#c180y$M+Qm&E#n zddG$Q-9Kn!gOT*E3qWWsuGU-WluMkpO?e-Nzi7L!5NHMq7mMzWjn7Jfe1CA|R(X&~ z+y<_Cl&=%J+H8BrjXXtTE|?M-(4Dy8*PmFGS>2WQ2Ci58dTa2b&fT8C=DIBg648?T zz4O|NPYvYY4=OK9w}8W9K->KT4pwh_r_wgMnDrzBDU%5P))V#Y`zQ6)IVs zrkyItpS^tkHG0+?HgBA*a(Z8g8cCwz_%m8J;vbRqMrVXnz%Edx2{lXt62B%m}EZI~P|| zlGAh@PTJ&uY(XkV7auU|Ofda}P%^?cqi{&+UazU%+IWjhD;R}jUZqIqHN*I~Li+@9 z#~3ZXKr%V4+q)t=7Q8X3c?=mp)IZt&u4kx)vR27Gz&tG`CyqVBFd20IZJ`Bit&qQIO*sushdRWQiOiTmhe6D<1n; zw^o=+7dwcc&T8f!o2WCwBaW!f-)l~LUdM^X27;YZ3kR%OQx z&0e^;GIbS3bCPmJb@LlC3zr9_S9ke2sV-kXcbcy6gdow(VJ(U`mwrsRJ;rMc+!=KN z!6WHfx6TFPh8fD#Fu;Q798#OQ6dJjpbm4bw6b+<|=Cg%|+3v9~AR5)Vx(#j;-Isnn zYcK6*%wZ?z=}MGt%Bd|1`sSslSjYaGG*O%%ylcrd{{Y%oPw>QP3VCxyH2z5d=Wkwr zN?(tbw^smvXWk@yANgnpdho9Rd_2^(e;VIjYm!Aan+>^SUD-SLb^NQrQF09)_ax?c%dRMb} zwg~SotnGX;Z3(-%Z@nV@+;#m0dS`|-$JAuChU(r05kjHD4hbFWLq1ZsfII^Sh4ia? zPYHn(Ys1U;zMQpE_^0BCEbbE0ZC)EzTo$)%IL@G`7>_t^$?ejv4$kDb=uz>d?xW(3WmCZGCEKYOnj!#W>&_~lhGX%o zc!TV|A~U2aGs>q=sH{C(#JazX?WUJajx81h&K^9**ax=i>^>XWTIre}+Gf>muCF(M zeCZT}$7<=7OOY6zUYp`eH1Nc!E|Nvi1Ot&y-HKN?>dW_9~r%n-=mCJwi>#5bQ ztls4s)HdFy(zI=4if9z+GyKzJ*CpYv7tdi5+v>*LobAr)>CPo!5R4x~UVTM&bn_M_)V@uzpTezK zYhPou3daOhX|&I>+xd^idzz+@o5+Ln)QnVeiB_X>yebYFyMVnp45fDx8k@ETM@bJkxD%{L*~RKE3NlOtup% zZsV^evz$(zVwKgGKe-1U)q6&>WO3(%_|=h0e26VEOGs6-^3pe7j@Nb zU*@;VMpnJU;upic7vpck2~xs4xG!|Q+i#Z8{-s{5Uqej6v^fm7P0JBfUYf@86@d^I`Nw^+bu{aqc-m;RptvwG|y1W;9NV|Z1 zmj3{{kdNZ5U07p5exh`gLqO(ZgEMNt`s?noIGqpI55{{Uug z91K!2ZtUmoZzI0ACK580Pi4);;8zW>_9Kc$bhN*TW5M%tn%C5>BC=Iw13XsI24L%d z3ZT@kKHH;2Al0#$XX~-CjDUaFoV zc8E2$(#z0O?ll9cS`^h{jn#+UAk&mncj^e>JU{Vb3wuSA#Z0!gvvF^6A>wn~51_8Y zMw%T(7HbI+(owxio}kwq;*W>%$vL^vWAoiPirP{8ls>>$FQm4y;qMW7dK)>rkQrr; ze2aL;RtkN)b5YFTz5f8b4`#TEW$Z|*(%DIOI+COSIjmm?{6|j^U3m^dNgoVY;Ysg; zde?3(!z^sLA%{^~Z>WsxjVV$NNZnZ<+0s466rGu_w&O>4kEx{7v@o|SB?MVY z?h|X&PYjYaVaUyOH$D|xi8B^R9mQno@r@mL8K#7CI+6?7iZBdR)(40*2L2T|?Oj!- zpZ1HUkx5`lJadX}rD`R(RaGa~0=hY_j&`*(JQ1h=0B2e=+>hemn(I}5-3VyPUh5q5+#wyg?OlSj~?n;%Ke_!87@KN zDhCzISj<2yyLsoWZRs8;Hc*%F#8FL-AJ6JNaf*E7_Gq`F_$N}1WuAMroe0v%QQ=f-?P>`u?@2;Exm7YpxEo?-k(w1UO9oHPhY1n&qgARFQ4%k+K>l z0f_u)=D0X=o@4!xzYaCP+T$Hs-r(S#a540!Yx+ln^-W11Ll&!W!_8}DbGy`>A4>E~ zjYmRZ9j1{4w{E>&<#Gq&E6%)K@K;RNd{%CCi_7~6{Io-p`xqj+aWl=yE{*6uC>oOz5JpTJeGhn^qQUqgAM zWt$8D-g4N*0C)G2!FOf;l2&i0AIiDOwB=IgO)YLo;N zId3%dl0`Wr)AbE{^G?z>#b*;ofrr|2oO;$3r-&YF7nb7MGUK1RayhJ~M2&A2YFbXO z7$;4Pf}1geT;GMf6XC0CsRi|f7Q}&tVr#qb-jbdv(L;#gjECFF$MdY86?i8|v%O)g z%c*^*JPTpDe?V&Eu_j%&!;KFv9|Rlj&N$hMkX}C)Q-s{{U!Mn?O?W z0({+rJnrvbQ)*hBrPZ8wGsFyTp;Q8X_ABKr8(y~feetKu*1}A07`n3@frE|>eODMo z(BLp4x{@0W&N!(sl(jjl+t>5h*rO`vj`dnp)+alynapFB0Y@XfbT@Y~ObWC}ht)+@ z7l~oQmnFCZ92!SuIbJ1ucwYM3DFdmdNu_EsTa|`pjC}=YF1K?OTUrPdA3$qAS-oYk zW@#ON-K}WLm7LFW$$mQO8t#g)#iiUxS~K%9f$Lot!p&~`TG0_T35!lK)C}~lH{%AO zI4Z~{o6O*0OCG+}4}cBspCocQo-p_!SQY+t*D3P|^p6m%u!oA`aE3vFkU6hC__g9o zn}xN~?Qg_PVcGJi2Z8J>(QjdUdpRzp+cd7fD!(KjrFia_9;vDPNs{-(c50SzJB7?_ z0Uf&06=Y*Q$UGnLmsZidI;}pbD~Tj_8;7aQ73ucgD{mS~Z2UiG8ZEdS?L7L?Qui9z z@tuZ^hNjp(=-55$`n>o7A{b6-)B%bp0UxCzb)|lkiPo79a%z=+^+i&z-lQT}`_ee( zmOk`IaE6`iG&n!Y!K{s5QMBT;cj7*K)-I_p4O=;Tqv~*eI6H*7^{*W9ykyNM(z<^R zjU(bO#!nGxUlhDWt7tZsx2tb!4Hmr(Jyj`euW<)_+h zfSO4+h6JuaZaJ^dGc5Lxw3R+rblUrme+`14DwWp9$G$0)K^8r0&ULG-%uaL7be<#r z(TYo>rs?{{{+|dNZk7gg{93rw`%bt|_Fa|r(JhbNLR+6tt$dCqP^i?CIvp9qO9i~K z%{sNbER#ZVWha7b(*FQvZ-sLFT=*Yaxsg&)ytUc!dgjGb)toK8NTh#t(`z`~tUM z19&QN8d$FUjss+47_JM!dc58vl1r};#`0V_EE_#dc-Eo&OL%+Y1^m)@g5y-b@dOGC z;tMHm7z4oE$_VUhOTqsD8!aCEM|UQrVTCNB>fPWB2d3aF!ml?|-ZZ63N;;$JFNPi< z)M1>Z?Z|@EAG*VmE1vkQWbrSH?V^U|MYs$)d)JtFclM&tqCRe^{l6u>u`JTVrcX3P z4!LDgFx_y zAPy_7pGdZZ+DR|Y@_phv)g2A(JS(8fd8%7m2}E5Af@>?l{{Rt(inYZT5aI&IXUoPt zs-;PCnkucHpQmY-+IN#RhBuH7E3vb>xtiU|zA`x#=XRRxHoCGTt+hxP7~;AOF7oqH z)MoM=h?k}t8Lu+6El)y}-Hwk?x*C3#?=xidt|AR>=bBf55)|gTKOU*F@Px8663Pd9 z`J!Ksw>lq+TFufy6G^q3Zx}RFqMm}OGwCl5-pg{pwtCm4_%6v`4EW?%&wd5?vu|~7 zq`Ao>wS5clyHtl*)Au8P2sO`$!Wv=fHqFrlQe7~Ne8AQ}h~aOwD#(Xt9M#*4!(*y9 zk~d+o)2(j8k!x1!E@NHCjFqoD*dBw_hr*r>gHsWWIN<*P7kcP?L*VO+3w4SH3{E>$ z&jk2c^qKs~P89psS9fgJR|xzNzNVCworJbLx<3nQFt~|bJiSe7kS9OKgQlJF!?A^Q^WEEWk`~a4|qLCjM((4^1%X_+|r)RzHWW zCDc;lYlS0g;AiPtJ{<7s+{*8K`>~#BODbDnCosIb&5sk;aQoFbYGQiPu3F=k505C1o3d_ILf&vzePVt@oLV8wN zR+0XCyWJQmd&14Bn^I&TkT|TJTf`S5MY(Hh#J2@o?+n*N3dE5gIRlJz#%m*7_Ju)JoCQv`ADE7qKOQaDzvoRr=Uw41~Y zadmD$4WH7c)qF)3fokjF+esRB1w#fMYTmV~&UFb8qN-;dYmU}DZDFSBUt+tJqqsPe zDx`ouwTV_aeN#-D^HXQ>^}D)D)0|d*rEOuLq>17Cc7PNuxR6D6TD`uT;)`XHeMV_a zeB+ah*N6OE@dSEp=}$LNOKsjzXkun0o&X?r_oDXH8oD`eh&qE)T8E4#B~+v z`hSaWWV;u){{X#*8$sQ<`Sz%lLL(hccS($2*pvuC1E-~QJ{Hgx)&?#*jMkNwg%+Lj zJYa6;rD;Q{+gqm6pd5d8u$1g{MkYJiLve1=Ao6F){psoL#c+N-*Z%X}(!Jji?F-nvfdE$q2D>8$gTeW8>oAVkG*$HI*{c1s^!4yHV4Q1(IS#c-sV->7lh7_VXRUx%XAJacL!%ogQPI>tUy zcXQIT{y6v!$3f8TA47^2j$**FfD2%EqKvtwkrIW`@~yqa#FnDpQC!$XuU_~` z@eF)K@T_|xkL{Kim6(hlPPK!HUed>Tpw5~us%&K$VhGRSRD4?~Z8Wt0C^O5gYFN{zSWFs}SM%hx@+-bpOkC$FWP`>d*#_TJp=B;1dZH&noBp}UEk57|P zlg(JgTM@Tsa;*qyarstup{7CNtu}ad1qDo-K=0SBMS9Xj9>pXdOw`&%tG&v}6aMK? z?&tWa0mgW%;kDm_=0}q{m4-uG+e9|BZQmsI=9}SPix>VDne6Z4msER~-xM*Bt!Sf- zt)9NTS6Xjxbt{RYk({s?kLK^%uSwvm4NF9OFpFud+HHz%do5PS_cN}bSYR@7ujn{z~_w}!uHE#`S{{RfGS@ij2 zioymjx)#eydxE2_b$$~4pk-T2cy&d8D^Xp+isj=UPNSs?dfDj4dfICXrFp{N?(@>Q zEo)R4;n}K$-Y|<$uz&2?M5VKg9zm;~3ewi*&E?ik7mvNoSciCe%-cj{u|i@zxb^j? z%^F@iNux*hcV1YxIsB^Pc+XGKA(BMFiadh5KKJ2Vp0V*6d~b0iUKohl4DBQ*m6{_f zv2v9>SK=GA)Djy;-SYh8de$w&-E7Rn)}@x0Dl@$8<}f^xbIn%QZUaO@u;RKRt{kT~ zs0IYc?glF&>rnHh+EnNMc=sOv0F6oF9cC>m))_b#|UxsRu8PtUu+Kv8`zCR@p#=j(Fm}c$?#%sTQ^5+QBDWDys1} zyL;EKcz;-uSW)iF0?G*vPD_2<1{N#&QC9CrGg@ukdfyZ~@LtC-efkHGQCJ-q78 zBj*E(_8mjPwj)rwy73TOR|~i-190i>UUzq|m~U=k)AXA?LIC&;a)TrDpbA=a?R-N* z;x)h|9&=kzT^ zX|8ar%)o$g?Ot!Hd^MNBx9xFbuU?o{iD=exRYrX)D_^>A5nNlpgfE_JqIqV0y!7i? z&vKThrg-~Fk3jIMrj2_XlQa3d6;4mL=~+G)_{uyrnS5V5=>BK`dEYj1Tu!rfulzZ6 zxYv!f*fDvSYk?sH>0HeE_0Px6Br&to4=j&d1@uOIVD?L=(K+&beu~kAwLB(+wcHSAW(v63Q^?gpyREPyBZ3~FO9e!cP zD>6S0Yr2d!=IZiW)n~?KpK~zJaBD}gGImFc_|sEayho=OvXuRudhQ?I2EM)UPmI^Z zo&&MJ(&2S8GQz;HBn`FUUmZL(bKwh1N0Uv6G_f-V3O#GA{fPW|BwiYQKgA2c`Jz+v zVY5{{R*SFCfo2u;4*K*|aTvs)#YGYD$ z7g6me)KZ(}Aj9%4go0BEV23B(mr^$R{;z5yfPor-c^UxM=A?SjBBmKWvuu~amR zeM?P@9|KD92xM#Ep#$LIGLrz4tL2*IL&5&BXm zT36{voobN}a%xc_29k=a2zZ@`N_mvDSv3tvKh)A_sEm0?LyE)IB{^!^lkOVB)jG8~ z=@VF_?0CP&ZwuMSr^~3r8IJ94pl#~JWcjJqwSR8CDERy0f5D#&>oZ(Ehl(yVeJ15R z)=<$;I7b-=BPvM9ru=oan(x9lqQN}Lk(T9d*e2};oH40OM^?l z@QilNZ0RdW``8b?~3z9uQ6WzZiA znKi7U>N|I7AIT()?octo;}!F)Kk!o@30_a9>R%qd19(%#UM0{8BI5H^Z!=UbM&et@ zCOx2g=RK>`{{Uk@+P6gT7wpU9e;R7u0nxQxCt22~@-zu=8Ync_?j~kXk_08ZrER0- z8?oBHK5=n+p0_f44~Ijw{{Vudd>ZhUr{irR$4c=nstGUeEiL}XZFjZu1ZXk<+5qZ% z*3ZPR+XCD6YWS1jFND4m@UEX1g>{J1%Tim5AtlYl%#+0e$sFu*s04(O&rU1K?tf`t zAAZ&vO{a%HV=sqLcz)Ny5_!hwPt<(Izh5(XLX4}ha#yM2pQp3xf3{8Kj*Fz<{A~CY zphM!n3|bvFHJe$Hn(*-7XlD@ohj;LR-*j_CpwhcSQ;T-F=pV9w?DgP(*(>9}?Og_+ zp~t8n4ftnA)U>vdjlx<>Ecd=)JF}2>uO8LoSAHk9{kZ=C;F}&T_^I(fK()E?M}&1N zD{Bcfn`2`bjqijzJhfsOnGW2O)aQ=f-~1AP_O8?|wf_Lxzr`OK^a~wod*2Rd>h_lx zOc2JiUJwK0Kg35))#E-R{jt13@zdc{J{I^9@ZU=Ce}*+zw$(2qv(%n-m7$eqP*ldf zSw}hiE1k(CYjtDoAK7o=eZ)RK@E3s~)&3v+KJZV7jkUe^g*-=Yjj!G$`~262X(ZkR zycGFP0yaAQzdLx3!dg%4;rnNNP4M@DR~jadsiIp)<{4F2=Uf7PkXGiC{{RI`g#1JB zzmNVRd<^imz2jdAeVz+LajZzM5VqX0u$RasavAsojpTD)Q{oL<#NV{v$4?miNE%{j z5cr1SC7Qw+Own65U9hfIOMU!j1MZ5>qfR7LX~xIXJ}9@i@%Ehnu`gN!A9}na=XLZQgvOM*#oV2eTYTEtG+D^5n z#Gh^^7?*iIW_unhqKdVyVNzFRPXzd~N$u5icxF3D%K%8Pq<#VXXlpE5-&{mw+CE$W zde@YAfA)O4(XGYovrBK2pCv%sU4MssIvuzDnJpPd`s6udT4EAtbem5@>wg1B2EPHG z<}zJ|<*uJVwTfGfmmmTgj@99x2!147Y1dYod;atU+9YFw-uSO(@b&lFHOPd=Xl(AiT5^lhAUtS z9E|QY$7bHAL}j7Y2mZ~Sqn(#07=k@H8G3u=4?8F}smmW~~6|Ko`H_^@`j56pRiHb4d)**1SNF zT8QRfosKva&fPPMg=ar2@gER)EJxtQrobX1+zsbCdABV*9`BnPvPUGNi*-ZJ9-gOYZ`i3J35oe z{&g0gs;r}9fr|Ag#w}`$Bv76vGY|phqIfn8up+fJBBtRCT?*7UQSXG;M=W-+%{8f+ zF0Q(I?zbzvar1N5vh`g`ZHMfV1ui)PtWBnQmuJo-A<3xjETIZc^YV{M-kp}lGHl6` z;_fSd-7*s0a=EMz6BB26{{UvZg=F&b6p%h~?I+}qzo&xMW@8_;{=yvN5M8N|1+ zUPXOv65OJKu14j_uceQ{FAscWg5hUj9recyr~&fNwrh^@pZpQyPr1E<`qRbQ{l@lJ z7R?kMTAcJBCUN-H=qtYG5AeHJytb9E7gK^uNimfq9xK0HVjWXSn&!aSL5JGXPa3k3 z+zj_M-{`-vmaX8;2*Vw?mfQ?^i~v8Cas&2TeM%|prqyq4(9e>Ji;fSyDO$rxD#@8g*EQ8QgyBF-5_9Y; zFIVuiFT2Y;{VSGfoiMSUd``C(q8ppE7N7ITHXEM2)Yh7P>)SK%5eCGh$dB?&VFlEiXFEsmN7igMhl{{UL*i*Iw4#cqjo z>nP&W<2LF;Zy6)0uTb#K#8$RjNJQEOHwyE;3@X_W-9vF(dVZwvrrYPo>si)mTE)>@ z+~~EZx$!l?i0YbjD5rozf-zL@G^3+xNN(<F@xkLAlUTYq9Z)9|SEz>Q$Po~830__^(hUwm`Uus4_4aI38U5fnx=clb_%c{wz zM6tIZj`d_(9Y)kMbfcMtk{#i_S+tz3lWkMf9&=qzh+z-s44E6L&2qMSPnR&~sjkDr z`c`66PkL7waqZ)|kQqTFd)1Jn$F>~f(vo{$Eb;l%BAuaXRs#6Z;knW_PQ*NlLk;*f zm8bYbXp=MPC4qC3mfig7;s=@ch9O(@snSq`8_B3(LYjTv{mjA7vevbppwU7S>t_QW zcNIoGSM1rx&!5t(&wgf;Jt|yN8f_X<+O5=}#yXzWqdtzX>AR!O{{XIQ7SmP`M~*XA zCh-|~0t|k2l}Pq3GBxyQr@ORexo$m%D&B^xq&&JqYsaCTWeY507adnb_vaKFxtT-t2-WYO6EPnsz$c3Nt5Cg@!G0~dwATP%v_2Cf9c$=~ zQr&*v_LP*k0OTH(iOJ1& ze+~5r{0}at9)^t?NdN>fE&N{f&98%++U^+?mNBk6Q|@jrZ5m^37;iCl(sH=DPg&44 ziz|8tpn^^Ena@-&UNXmQg4N^$fGO?}U?OHz&wWx{KIbsA$p60L3Y5xET7lxkV)Rdmy zd_O%@WF9M#@V1XWr{d^g(-@-9&P94At8Ek(@W-Mbk)#ny2d{Jaie}Mw+`zT7mgYDX z2Fy2{AR{|*>VFE;wVkwh&z|UGA12&$nzIU9=$eh~tc*yDA7?(90RI3}SURQJ$*7kt z`<=Ug;D6^8GGk$Pd>;74B9>_RatBdWKeoQX6tQW|wPbC?9!RQJx{RrhgfNpggYpp^Sh8hK0Yb;5~&u@D3e-!v!SY1sghSch_ zzc4JPXtn(o1S^#=GuhnC&pI`^qub2P5#VgGlk^myE3n=}+^4gY~T;B{g&-qtTW%jKd^> zx15|B$?jU&F6^h=CZR{WZc2A zAKv4d@>}m0Kf_&D?7IEz5L@xOIfw@buUh(EO(x{LlGqH+6ySFEt{UUvEr*X@n#OO2_k?!tbj1V#o z0UTAc@E1b0wtHPGSiI63(%v-wwUv4MHOH#BO=D2Fc=N$1xnb*Db0eI$q<+yF6pM?E zM$H@EP%Cds{in2@6yn=cv~(vRtf2E%G(Xs@!nYR6*H@PXh{^rZRN9~H72!=r&1ARM zwF_qtff_>|55FR^uO-T9PvSij!~X!aBkI~q?bYm5W90`Gzu`}hFzV0?eM0Uxn|9@B z+iy>$cu$D`0AbBm5eNJrnuXoUE_ZK5A5N9rcyr)ZtKnN)aje1-&?qu@&MSuK>E&n9 zdQXV&HJvQU6RXC{{oLeMO!jbG85Z_4&Pm(yl79-y@Q;aG!ge^V1B?dE4I z19+OP&5$2H5m)8>>KeNlt)P4X*F1Tp$A99fW{|1dw0ygibBtD>{4-vIB*l%r=9o`a zYllq!70zl}zNO*qH7)GCNvM#dau9z?x2HwoFA)sdU(b4@_~hWxupJzK3N$YS+B-uB zm=6sjNLxAgHC;S4q+4kzb>Yn_^7`a4VDURTsRy{}SG1oO%e|mOib)usiqwKE@>-vX?p@!o_3vP^smvms380}T;G?luymj3`= z^OEsoWGq~&x{iPjm51rh@IH=UM2b(cgYum2I5neju3hWl;F2K-h0B5tcjC9j z#X%;D!AqLyjlQ>vBlf5{@3D?rvUMAk)W3Tu5pDhwFilIVUOWhATp17iv+Y@y*7Iu; z`S(A$E71oa*B<7wrq-ihPm^0DTPrHR4hZd6ue>Y$rKPQ|p4f5JW|^$(L&KUwO|%JJ zd0O++@lyW)O1^pGT&X|aHM|wJAcEu}LPyP)O`6*Su5z04;0De0DQC{VU`1E!oin=WmI&zwt3v+B?@j zZL8`QT2onCUR}p#?YW>^i54b4rZ9Gs?nQQ=5UdQhSu31oxS7z$Ce!O*3yO-AwLKqc zC_N8w{fB>Qb^Vt9BG}#PQQm)MPjEid>tb9AxG&Hol zwlZv%GV&&Q!(+ZH@T_uv+(KDW2dwbf;cGR_MK zl}0hoO2ZSSG1AqZMWBDdEIuW8qsF?W--ortv9Q+EMRg1&;y*P(I1jQwt_E8Hfdf2O z*B%Z1k9;fe6X8S}R@gMht*@S5@Gj+8e;$D$&2QHO~!cQA>Ne z-Yd6EwYfY89Q7S(z83JR_;nNd&r{ryqp_ILmJgX+I0RKH9b2y~5qh z{#vU5N|Vnu!pR<;qx91lw9n&^XHtf z1taG_%vWV$@Uz1I01eW`JR@&ub#ZREp5;)6bB?5%%B!**Rm?Ai4W#%pMU5e|xV5xD zGNULGuh$h*RQ;nZKjA2z+ed=!mcs-;7;O9J+PE*;KjI+MH8EkJYV8gE$^el^>f8?A zwa)k(!}^DVv|`>Y^C!Q$03G8cvF<7rE^S2W@-x={C;0m7#M%;HSw}NX8B!Oub3PmK zJ^uiTZmjP7LkE)f5^qKd1~Kbg*NydG6G!2%_?E2Nd|6yHY^OhmH5bBtd&Js+hfmdP z=e@PNV-&Y?VSJ@I`LV}JPuyk2^B(ap#XV-nOaR~M^II_g093gyKT3axp62Wu+c@P; z@~VEc+UgYnXmZ2P?7|IMC*~)wP{{jw9PNr2}yJEu;7ZFyd8Oa9BpwibAi-~&HJIu zV12UE#?TE&W>@G%Xna4_Bhz*G<&s0?l1S#0#GVLtodmHf^TthPYF-_x~89F6M^KJqhql^Fs^=$~Z-V|O>V6Ek zMb%`N%SOrEc*S~6x5eKMd_~fvveo3bH;uw>2RQ!#_0p6}K4|flpxX7sX2i5HMA>C? z$^5HFO1Ki)M%ILdiEzq#wQKxK_;LRL2!;DibB2OOH~{2&_O43ONf%O%OA`@nDw zVJHmgqHW8$xT`krzwWRY^{nXcM5+6-DfZU$NZ-5N`P9NTWXOH|Uu)s9!K$NANCrUW zv`w=Qybfv6S(k5|ab0kgj3iRBw)0T#9Oj|a;Wo+ZTaj4=91gWlQLr-b%bM9v?1vMQ zye8!t5m=K|Ep!PaX7d$}>h3H&G7E>;3CDW77LqN_OlmRhTgGM*iRAj9fZW`9j)ad& zz`XD#o2@%dbrsd56aL|vQ-BYz2im=(TADbQ42#maZDxB9_(XoiuDVT(d?Vvn0|erWcMjYm@p#0a+W8!JU}$~K0sYU4||vTyjD2bMPI6z3nEZ_4*@TzQvj z#OFMksjBL;UB*?DpfxK~R;*y_*3uY1(V0tscfE7TaV@Ne?ZJ?b;XO@BcjHS<3Q{!- z);C0u0Yk^*imh|0T5FN{`i`PfW6Wwn{{RZnQn@azi7zZpqi)wIL`(r5T%Ark*EIK+ zQ(TymFu3D5;yC!6&wR3f=L4!;MBO>2(XXb%26C@FSY%bX(MGrnQ1{B`0qkYHwnr0n-|u~W}A)oDg3EJ_x~9V;11=8%smZVhNb zZdTAJW#c4OJ1tA?8mmirgCW5AdQoo-KsGVWLuG28+N=joJ5&~GOe4Rz1Jbsw;PRo` zg-!)$Sy{r8fs{`#)7=-Qnr6gjx+xcUTKrCDGt*;JWOArOJPBGSy7eZ`=M!<&^SgBUzoK@?9 z(%dxC3~s8|S1MG10PJcQ2^*kNCdoaqRPSGp-JD{PQQB4~Jt>mF(gHa-pa`SA@|)%) z(i_$jhTI7Brc0;3(m*{amfCYS-Xv7YHxqU>;MDh^8U1Q&eL()V&Z60QygdS7I~o!F~UY7TBempJ#Sbr@lq>M3R;%2Eq` zDHFvzJ|CN|MX+2jy7tj!x)xWAMnI{_S>!n>=)({)WS$EEp3LNGDGt`g5dyzsWF z)9MJu9P!+B_MjX}`rPtaYG>`J4oSfSpsvHgI{m%hgk;ifk%iQy@Yowh?v+KNw(+dn zZ6Z?mC#EsQVfYhJUkUt3lG|E7Tv$>!bmp{19M)%|ct1tD(ynbSqqv2ykYGqNwSK+p zv(aF+w~kp=kCq7z3FN+cBlWL6@V2-1-xunaHqsLXyowa|8P7`XbsbYrxA2M^c^B;x z&N>60b3wFZXU5RmYPz-NxLKf(<^m7g;C20LHd!FlRGl^{S|Z(l+V%QXeS1yRwE$vm z;>J!SIT#D?TDm2Knhmb_#_L^#XFO*WGB#SH2KUXq5gZREL@Xh;S`+PDYrQK>$mX|;Z4g$5iFDZ^_cn2Y$~fkLF5P@T(>!Bt z%XYFwAb&ARe4&rNJ69Frp9!A_>uq(ZLp8*zL9sT&2@_)(liRIy`Zm9JJ=u!LzSJc~ zJ*#h0x45~mVR;#S%g%6Uloa<7#c3Wsmd@0{s)Kzbr_2&T%ECXo+3()E{{RMFTX?F) zj+-J$$6nRMYJLlv-6c;C$aM9Q{K*kN<*DzVsN$&T`qOwCJvTv=PD>+4??@|v=b6qs*B(yV}Ihn$EivHd!fjm&k0`=f#wJda~wHSoJ z$e;}T#-?u%{{U!NzuO`J=e=6F@a6D{Q%((x4gnQ@(4S;KPQMnT%CnAEBaPjwcSF6q zWn(kKsm>L;)^?GjUg_5Px{U6}d{yl>!b!<%%&TtT6WX(>Qs}5tvo$o$a`M2s$sj7- zHlCDQXp&#twCM61f=hhNO5?pc3rL}F-W|i#+z{8HI=&EhUo0UN&L-2K9j0h4>Qh_PtPM^2l3-H z`Nhgu8cv&}TQ8Xew&Wf}pmSMwemIv#j^VV)tdi3t8;rGbf{$*A}$+}ptfa_&5{pllDui_LUK zz+SqO>lXs8SYAy8MYTKGZk}EMW$T{ZDlJRGGo3g|9gK0esA2vzfQ7W^?(NL8B<~kf zwDV51z0mXxFwb*gdvYhr?AomB`I;>B-9_|C6)t6ffsdE9N$}#zOF6URuk@&u$=xr1 z!m0soW1PM4bPn&R=__|{1e}=56><3*`Tqd+s_?u&@QlTGY3FY9@TOCe4i8%U4_nr3 zW|PaawTQ)zfN@_u{@6NWYCZv!>2{kuhcabHwO$wFCl;*&x9n%)1h&#NxA8opQEdj$ zk)BTn*1dzoz9G5Pb)x!0ZGjLK80R9sEB%>%Bul6G%SY4i=VVzCgDF0M*V_IXyoP@c ztnh`BM`EDYRySmE;3cV+Z7+2TnC?LR>wgL8KMK3zFA_)L`*^>$BXzhq3$y?#p1I;{ zfo|~lcR$)N@Iv4ae;z89sbhJoyis`RPulhg5IF?&_O1ieoYO@ON-M7w-cHg>9?&zl zo|Qt=K>Jqs<+pqx!D0q0q0{^`b88WMVtmFOGg?y_bbS%qP*J$&oP*l8iRaaedmept z6}Fb=Ysd5*Yoz`0@NAP>ErTN}%b&(gTx66p5j zvmqU8<1sN#N2P1(bMJ9&_HC{%S;+Z}MDh7o(I2pf$IVCKPmis%Uk=?BvcF*~CCSL% z$7%GhpZ>&c75@OU--);b71jJ6kyGN1iyg}DcDT1ula5Tv2kL8^7ft&+qewWxAFJ1X z3DW#adMCYf?9Pt*@l~NC0MSRRs z>UYz$qjTo37W^@?@L!2yx6!VqxN9a^nd6(xjQ8p|?OLA>JYRXJX&xZFjNM#MWpJ^; z04*2=bI29+HidQJ&mCDEBjJC;i6*pkF(#z9YqEAc6$%$Tbgp;B-?Lt|@Iykl@-3dy zEor>=On<1_Hsju$th$udjK7A~ch-~KCC}QH?I82sR0KlGaq@%HJoL?N>pnV?=fL;u zlH0>95#tU*yBzie^{y`OTGVuFODlbIUOF^pb=ZbI{{U)if2-;-p1Jm~Oz^*lbPZLO zUli%9bu_qQ3*f|mt#i%Xs4Jdn@OSoj(!M<3OX3e2+v_$rnslsUGrPeYf-|@k3;)x#R`XX1tT(<>YX|XzkZ!dmn|hB)PU-wap}VQ=2p{v?kOeS*0ZTJ#c+%f5ZA{ zzOXUf0*j8V#X+X(kil;x7YqKs7&)mXmR(BG;Z7=->c zpD#J2Va$0CjdZUQ86#~c%a;W7jJ7``S#Wrk`%3wBOL+{7#Gkt(n)RFLZz7w@(j_S4 z+OY3pOSh3V3>lP=kRvQ^%}JVlzBUi`cRe zTY6`TG>GhCGJ&`rd9Op#*TUX0(1bF&dAR(kxFlmze5ar3@QcM(JnjJTQ{CFFvh@{W z_9*n}q>jVxM#VuMfYvUle9~k$-l=}+oL@O+(s1$|k$`bl<$+yu!K{rTcgF2;*LM|t zZ<0O}6w@D*EyrP+ z&9(5wou#9!%W%>Wk>(yVT@BUnvjFl;z1N7#u517f)uzWM{eY|fa z)!39=CO2g8zh6q(*RQj5e$XM{e5bh-m-C$_))NW;0Fa?7{@DKj_0|rhZYQ^S^$U+F zVs9)GGweT=bVilgl)c4rzN>m9X4|xZT!z2mkFd$MBo0XIGg^9;t7+k$JFW4z`!&gU zhF4J1Y3g0@dUrLvXr6)eS55`xzW}h^EGSeGRj#5@DmXjhz^u|3ot_R`movxwdTU*T{^>uh+jsDOS1^X)z z_j~5GNh2v#Z1&4f7#pk``C#)v#t?up+r4LNekHh$aBWBfxyKdc-ZJqp(|lIVq>!Km z9$tEy>-<0CIWM%ID^ao_zA)RUoGyhLj^}%-YLZ@fM>p~$sO%SPM=TC2knqoe>>$;e z@^+m`ZQD!Z^sV0s=p#zDYl&vx6r2e0j1%8Aee_7LrQSH*&2ZFKJE^{HMYVeym-5%m z8+ZpjYRd(ROay#=DqAlNq#!o#hdnAw%fB)}BjXj#b7{L+SRq4?mAMsrO|gW`U4hM0 znf}XaWR>>ddQIGMO`BFG8Dh+c%18IOt6C?U zcYU$~HuKG4M|&;upEHWx@X8owTpnvC>}a(*S#91Je3u)YM>yuPF6`PjEc=)0E2prx zFBp?|%+;CV2xOK}GsY=e;A0Doy{YLS##myPQMda%2y>I3o|Maf^q>J9DCGiX0z@H3 zc&bknk>_AFc~996)BIH?6m!KKqH5-9MFT_#G!q>zItlofN)`YfD+M(2zV~#T_;h7=xmu|kRZ-;!Nq9>%yQ0`E4|F$hki8sKZjCH%3kblm}iwE`B$iT zGWrd7$cFcN?O^#l3i-?78p&_tT}MvV*YC)?Pp1|1e}Lt*dkgEWLlMOlvquhj%!8-$ ztCc$tr>Sejn#}e(&GocfKE}8Tamx%2hrKq!>gH<7tTiV=e zOiXr#jDU`#Cm+(czQHD{##md*fk&1GGg(`h*;H{bZZxm7PHuFBkUackjs;(R3E_@8 zRGC>o^8$0vdXgLYY_9&nWDK59BbG+SY#&a&l5myw=&*IpCt z_8agqis5u!GI(Q+by<0hKpc8jtKI4m$K_gOpgd>Voy}IHI?{%}3lI!3gN}RFZn@!T zHFz<0ppo}U>ZjVTT|9bvZ=O*O?puuJv~=qcso9w<8||ES;}q^Q&F;J(eWAxBejj+` zjzhXfpXZSWaEG;N_&dc*rCZLHpnqn-g|=M(0LR3y{6TZqC!oc2TDE}3-ba#Ovq+}_ zcILUe-wnre51V-popAx*47taa!=cBuN~g^EqU^|&xlW4SYabQqiu!mq^2x}B&e#09 z)tK~qtuGHC%5>aEADwyJwinhG^GNq4@2(Eyy~aMw2T_js>s=RyJ}yj}Sc6tZz0;#S z-fqBl92LjsO-jzv)AAQLV{=x!m*r&ISJVzEZOcg_nN)&DVT#e$?bF2m1Gc~L{C{MD zqYkG#go8DW2D;ai#-Zd07rrG&CD^!wWUTQqOLgDveDEf-I|g* zPQ!QVYM+WNE;QM9c!$IvW!uP%#h=$T<(?tc?k=_99>D8RuPEX6VCRoo)7kYibu4;@ zfuY=Mx&GXR!;V4PRcofxykB?WqBPx}9b0z!0~8*1KD)ZtnrQR*%UiPBd34rDMn3NB z4@&HO3-AiXm-|!2`k1|$M)IaCWS@M~<|mTpQ){DXabK+S-rY*%hcL%DG5!iGPRqvH zHLO>|S4+567;M9A+&>Y`Q_wE-CZ1H$EtK9O>=B0KW1*>Ze+paO>Qc?)8T|AFZMG|n zdhaHk8PEQ%l`NO09uv9 zkmLMM;~if>CNB=d4cI(#a!97Zl-^kUEiXIcO*FGKJLw)3# zS~G=K0g1<@T!Z1lTHTwQOP{kTdkW)%Y3-S6l!}pT#Q70q-=g` z>Yf*u!rvHUI)3yvld^5@p!$!-zSa0ge%C$+iwqrzBoJ~pSIhqZv|gArUyjnxX>bB+ zbG(C(MgIWnSH6D47qEDrMQa<&zzh>e_}kZ<*P|q{5!CVHCqh<7QQ@x*U(0c--996@ zQoBrp3VQUd+5FG=NYMD3X^>hSo>;&q0~NdC3l_S$o;z2eEo+hs*KE9M11sjV-z$R}349lDLP>Cp~zs`Y)O{IA;Ch)TF(aSkj{V z1IEF9d7`oO7#qVnEJ-W;{{X}>iYrT?vFEf?a@6%*!oRBzff~{fFov$_>o4)=29nyq zOBiw2H6)&NV-dIm=|Bq7MzbhAN%W({If6B4x?-wF4$F=AM?RlgwQ(z7AQBv?=|M8w zlEkZN#isk%Kgz1;aWRDEq!$YeB^>cl*BKuAATOm-o@o{)5*)5GQ&HJi zxSo6C<;R>o>&QG^ZRSZK9ff-zjbb+sE(UUI%zRI$F=xu0W19J#bsl@2Fg(jzwAo-> zfH~rB8eOtuVnzpbNzR9UVIT=4Jh}Go^vT645MPhL)@hR)Ny;JsW@r|E{ zY^S!ok~ro!UTWmv?!dwP#c3*h@Ug{Kt4Y}Xi`G6Q=>9IW{?0JGY$G09MFnEJ1>YKslb*e5{{ZYe;REAe0_h$n@x|145<=VE zn+hCYae-Q%J@E#G;xCIgt*1j2Ee+ck-I%iQM`Oi&Rz4D^QP}nJ`i;_8F8KTQmezDH z2U%&~vv-DKf(wNRkAG$@S$B1Bx=23t*yx@Y@Zj)ejqkz@`_$sLZN z1X>Zen0$~=Bb4O!$CwRrH-85HDSQC&KaR9-0sJo4Jb7i}#f3D@VhQbbO405N7tNVZ z@dJ_tbkn?GoK~fy&$VA3*!&9pp|qVd_FcTxHQhhNR?T_j+&e1Tv*EJpN!Y8LbmKMd zzZNxLk3JUoU##mo%)bq_Jtiv#p6)F#QG1K)ctYg-rXhyMY}bnX5&efXUxdH6EvBER zc;4FY#2TlEZnX>RNf{-3Wi0`g(Nv5f49YmzKbgOhBCw79@K05eQ`xk28v={92ta#Vqjn0v!_=-J6L{~b* z#@YmZir_n{lhlsYyW*ePL*hrkuNo(W{xxZub>_7?ELwcpI<>{E%((lZ%Bkt8w zU$*fAO>=K`<%_6S?Cd#2W>TSu92OjoX-m0DHQyTi-sJ2Ij#(K2vVob6>UxFYV3WZG%!ZvJeBEznwP>l z1oj$)vdH_AR3Hu6>rz-~>kAjvS8@}^PAg8|TeVA+7W+b{p|1(9XLF&($H)Hww=}w! zgS=C9e`#vsAi?*l^x$``AK4@J?9=pHc=XQ}Ng@_-325`ziu$+Wcf(Bw;}?dew(%v5 zH%T;Q7@j{-UlV@PKk!Z6Tf_Q;>c0(Oxwo_tmQ{<9xN*{h~Z~@F!FnZ;G$3V0GY$P;-j?8TdQmxV|rZ zHMYNwM0<}RWOp6TIjtJ8GpTc))E!~7ed(6ke}=fL*bVfq(n;lQI0HD%biOt50gB>C z?FPdc!yj7awP=?0Vr!LVc2ZQ1Kb2u1jORX-J~_Lh3620BCTc z4r9sbn#0wi)3hM(tGmqrQpFH&JG*gR9lf&4c=BF0Ee1YPahmyq_Lt;_F#zY9DgXxFwL7PqmK z9l~QX;GbT#r!mjS&jIk~h5UcwuM=sf#X5GGK8qat=MuK}3F@j>t$VD{=$2NOI%kG7 ztvcPN`D1psNXsvB#~pE+if@SxErjrB&kRc%@hDJ6D}eDgk8Lb8TdSQ%Q-JCa@Qe-# z&s+gZm^lpJia!T@0d1r%%ZdL0wxy7kRgdKa^yf9^+W!E;8MLpnytfl13=T0N$*X=8 zwA4N%c${8{ZXIHf5zhoE>t2cCpATL5$_TBk?gUS62*%Nony!5Wp=NR#ea)Vb@xfyE zlF77WNTjFp>s?Kq;>%e5&!S28X{0X7bGvqW(iuL`+w8XoJoT*&FkCk?Nr`>MTw+Oj7(BVNDgA2w zwZvv}0ptpyXK5_gAL&wV6+Fuhp5=haZaUVywm@vc>f?-5f*@EH>6*f^xwyEv9$6tt z^sa{5*!e@vY?E2Nid&M5$PbV!Tf?a|a{}Y_s#XY*1JHZcuAMZGAo84kRn0BUqIFt) zfCMtWGut&jppZ)zLyY6ru@*OF9&3Ev>920bs~ml5kl9mI>Huv1G}|NO44(A{vOdJB z>T%CK>ZO*lF69xkf+!KMIQvh`J5&!VH{Cd^5s?ZUebOo?xr-kt=7d~T$XXX+-lGIz1wHyG)a8YMiyg{SjfIo-Lzk69cuoYYZ>zcwg|>KtXo^d7ZGG;t=mhv ziRV4*2@WyTxp!c$NJk%?RT^j6SWhuBBz%<|?))lEAV!LQ04Cmxik}3^Ka~O2# zzSq846}j@dntUW)% zfG}_GBGR?nd*p&Hru$M>U3@kN%Sp{~m*glhQXKD<|Fr@>{c=u=tvhfgxQ z<8FAy54BP8*MX*wz`G!_kfddq2U0&8x<*w`C-}{Dd?zw$+A0$z&RKSjPAk~Fd9B)O zz7W%Fd?_Z@REp+O2HcRNBO|XSysN}O>i!H=y|-gMqTzGYX1X8Qjaymp<@Ej`wUX(h zMo7sdV1vbNQ)7-ho`K+GxQYuoQ0|83{a^>{+wiV~S-$&B0?y66u6Lex*BO7~_V9;> zAdcG2?VJJ{M&vIhs!!rOnfyNbmCeTIY^ZEwjC8Jen=`A`d`)NIt5>HuLJbqfL7-aRJ*BtLG!!R=%|@*NBiWhu`d0 zjmMToPCN2>sdRr2LE+eZ?<~B8<<3dmXnO&trFe?pOw(p-XyaS0m;sau;jagayiI#^ zadC8zSSw_R?pQWEU<&Ex(c{%z-0d-AsLxtSEoP3%i-OWJGGg;B^=eGeh zTjq7=2I0TPr0~V=u2kFouJ5-ZR{sDR?rgj#T8V(b%L>0HK3?#~gFVTI>8XrHv~;fmSX{~H_{;bDitz&%D}?mGI6T$p@2)&Qcs!jRS)=Ug zqly6FEcCC45?u>#6-#0ym*&b`lB4vlocL45R{9zH6X|krak}7>{HuQJP_@6iTdhLo zJb-`E3B&XL6sdpbz~9+{qsQIko@u9GYUU1);vHwgnmhjh!e3zwySjNx<^%dw9Un=$ z@rBSA(0!6<-_C{<8(?$Wa2$S>*Jv8Pp{iUxuC+Qm0R7V%{{V$AhxJRlsUw+J%7ter z$6)!CXZ$I)o{XC_3&mI3&V)YCsuqh-lz*ee0~2PL?8l;vdv&g3K=Fr(H62myBZ|gC zIWzD5*!JCyzSZe}6t$zO>Nfgzf>kZ<0a?CK#PRBR6~|e8JJfV-0%Y*S#!Cd5rh8>j z&hOOx$DVQPShV1+4OegSDJwgj9*N+K?Rp^ICz3eO^k`(_wdD9&q3AISt1VwsGpWYU zF|p6%Tt9^VCTb9@(P~7Y!23R!zzK8Q1Jw5KTe>fat#zB#j_v%Lpxc_=o90Y)2kA}? zHaQpWEv+uK6#mwZN#jB}l{XSU8p+mtQKv_#tPxwRD1(Brh0it9-OK%}sg*ztwg8U< zzB%T&?Qc)Ax4o7>5Ct+Z{nkz}wa~UPk?5Wb)%4wZ+_t+QjxYua3X<;5!tYfP_*!d; zQ#iw93iE9eSS>FFoGQg%j0QZ{tN2Cid?jfdkXnBEmpLSppT@Fg!|uE<{htF%rNXga zvU22YTw{-#u(Yin^3qvuH91}9I5{p#es$VvTAcdMo+Z1Le4=n5+5>)lXpci0hLTq1 zWrEoCR_cEm1Z3F==dm-|$7wa-IBz%u9^UvQb*nIVs?y%rrTx1^;9#3*xcmskRgO(6 zJ9n|u?Kwld$Q_PxRPH6Xf+tNOc5(gCf1Lm}?$1u~6wc>Rxr<;VEUr|XduFihd_@hl z-;@R3-(9AaJTx^6#+O`2XG4&86~;O3P)%>DYFByE3EQ5?4FGKF4`U1hTUoBW!`q(! z0F7AFW!5eo)hmaw>;{eb4L+~^nXe$yPyr`|ZjLf^xV zoKb6vOtNk@KM<1+p!RTMgNZTyDuwN$cw!0G&0x5mWY|Xx0P9GaTvjr9z9+a6x#v5I z{{Sk{X*40FTu-LPk8qLX9pwK2I?cXT5?sjnclNmOMyYnXcCBY)Y6YSa$7lzTN2k4c zx9t7#8&LRJ;x(64@}Y|AZ!GOSHxMi8?})8&@dx3R^|iczzevDSuxG7&jpDzDH#4+} zsL0JVtcFzs<H^I%~$Z$E2XU0H!>eJoTwSk zQ(VXFtML{sd&9D6+MI|cw%QaoQJU6(rRRxei~`Wa?BoN%Ak&fELZ!}z;zxZGQn-+F z6nnpwP`ADjeVDXl`G7aw_pKQxI*p`)&34*cF4aDBB7J5e_UAn?&G7K<4h+?V@&KxCY3=Rl)U>= zvmMB=(l_r9PHByN(3~jEOEQ)m8emWd&IvRU_0+zx6Niy-Z+Yid+a<;N2Pi_++TZ+Yn|4#)|yNVSDjK9PUi5Ex#6BN(7w)tZs0lXUQgpI8K4YM zcdw)TdEvrFJnDrwf!Tv<7~v~s^N zJ!;OqrWIKWk+}1k%!XM6VlcxQ=ia=y%{ba1;Fjm;_xuxI_Mz2&Ab2YO0K;oC!~Kf{ zQgG)lypS>v`?d6xeh;{wx$p_i=CE`y1zVUY~QR@DF?EB&U@Hq3b1-nK4w&R7DF)@?ZaZ z1wU){Jf9Ld>R{)h7`%uS7at8x39Z1lsMy|ifx3{Xaf7Dm<64AeQx+|T&(Jp2ID@-h zEgUDhARtm97@ndU&X7ezXO7SbDX>ET_-lIqVfbT3%@67p4YAJU*fXR3;ay@nfux6U zCFG|bqxzOGfps%cL00lCyiTYK3VkSkE`|{4HVeC1!$I!mcvC|Dyx+gZR^lbVp$~oK z2@R@)M#Q0P4P!{K4Ofi}X#*+<>PjB=JywO3D12(J4t@YQ20~-T{|+RMJ4B;v~-Y|xdWRmZ30RaXS9Od z%5N|%U7oN^OkrJyFJk2?raH{k6m*QTNe`rXkOHW^v7sh`zqf=opYPjGewURiSe79maQ-jrW)Q47i;eIiFi6U)0qkwlpXYq>`pY z>De@NpDl81L3_?fRu2Nnk?K(ELQ~it%podQB+<@fU>$>C8O^!gNE1XI>1FqVDIfH< z>?KvJVrx{Z2kukGb#6f?27%NX(N8>6Jf7*<5l>8r(WQid!jYaE!%vAO#=ZOrHTXIT zH-VeGB`AgKS~MFcuQv_)%by>B<|AtLd@Y!Rl&rl?LTrH&osYYq**tUEt?~0?l3rE1(Uvf3$+1RK(Y052R#VXsP9~NdiN9y_Kk);W{3%h&udxy-?{;b?jT=ml%#;xb2EzcHa@%`UT znytusk=)VySgz=S5f{BfNRsZ9ES9OiUMWaX;~-1csI;jLl*di|S%A9_fuaVCR;wx6 zT-;6kRYvkSdn@A5jQ73wWijwUbaL=@FbQlxJ^7d}w7YP+wzs7vMKsqvDp~qZ1v7fi zpnjl7ICa9d)IJiX$fhU`>W;$=N;P*ECSh_041H%or@YjTFP+$Yb?;t%}G zEUg+_A`g_%t|!b6&&gV#=JvC=$q_0UEmLNs-V-5TF{n@~3ol}~hxQ+a@jm#HVcw{x zeLzapgwt`n(ccqsy0P+^mHRU>9&H8nmUWALinL+xuiybn1aA|168nfO$r9tM(@vIU ze&q!Ci@159SVGq#!6-$ZiVA$0cY5kz@nL=WYgrX?HK*}1p-icY4FSb;pUX0f8HKJ2 ztxbg!!Mq3UNh*EIgr#pEeKZA9q#yKv9$$gI)$hKn;`+ifIjAkGg;{yNVn+YwC{U(& z)*9d-YVNn+F&Wn&>?Gmx>h%IHR&r@Xm3_r8t`buIKIL;9T2uVex$AzvpeBNVBh4|& zjFXqu@Fs}1@%6ikV>xT`K{)m-Iy5>@qpCEB#(Bl}LUZ-M>7@G2zHjLAZFPM0;7fMt z8;AWOWyOt5{ag}KHK{ZowoMJ}h`i1F0Ku+QTdl{V)kgj(UJck~*^+v)XZhz$*`Ajt zYS~YmCAumY*!T4*tWivL(^YTJzIwKlT!k6b`JuZ|X+Mw4#6y`-skUfbqY{q?RWL+{ z{?Q#M6YM(>k!PZz6?Cwx{Y^Vn#>3U1!IW&m-@No=7GGVecDN|4<@xfM4~!)?>Iui6 z3)#`D5g~GfINj5338(OhUy~ofqaVCg$MwH~`p-*~t@v|KIddR&f+0`E*@3H1c0Jx$ z3`jF|qoXv9AD8wg{zTqDoc-?K$ctxJl-o@F^#L|qku83|`|cXQjpAeMewU2g7!SGv zzce-h#iOI_Yq%L&Sumo$Q?QX?xx;unDDI^CX6I5)SQCiX@-CtBvk&OXBnZeO`IW_F zBq7U+)gkzp|HRlfqIP<-jrqja51;Tw5~G7y9c>p1+&}-uD!tcBQGV-hvXi<4Y(4_s z%5glG^KAcP+5{r&#}+t(8b_3OV+!)cnMm?;&&%bA^j_c3^WRU~VHIn#pv5IqVXo}4 z3h{)qi7tD(9VPdM%VO55m`x?dQlRF@y;_f<`~Yk5{#ywUUB3X$X|C&AdIwp`?gh2; zsJV9Z_S%8nNnV~`8wk<$xlwFlN^Y`!)0SDqLvP9WEFVI4yqNh|U1@sa)d>UkFi^9) z*Po(iHm>q~y;Sp)^U$@5eJX+QaGvuYx_k6SCB{+vl+SByUh5r4&11WLD4l%CAm^6g zFq<(JsNXNBukzum^&*S4#%iMG{>_xE3`a!q=7~JxY^e&nfYN!q@sv%K_z|t?p^!!3 zm5HA&e? zGUlk4f2o4lb~7ueY#w1Z1mCYZ3u`|x)g=?HXGdWYgUaH2xOi0}_$(DAc$C-zvaYaG z@9Al1OY*+gn4{&appP_e;&Wtnv!YeNGdW>9L*oi!zX%8rlXF|AKA!Y@n2~hyPwxdU zx|@5W1?|YvZc7$_pj3eUd+q@yBP{JJ9xhsvK_|SDXE$1T7v}2KNQQb?I9#6Q%z*6U zzL$Z2=vt}x;d^)M713*oXB|Fhx@kb^xzr}YxjqS+cP(Ut7X<(`}Q7vA_?kn=CxS6-i@5NXd1LWL& z35~n9JsN2f>^Xa$(l4lNl(;Y-{h-@IofchA?V`p#8AAVKvk9t;s2?Xf^wOOp!xsG5 z=+qe}S`iT`7a@^35arJg27CO}(N-aIJ8t_>>OH-<3i4lAZ0fG(eBw;i&w5%{^ZV5l z{A7TM`A&Q$uSZv!ZpxtW+eMAjl6b_fA-zEI>dYGR#J8Yct14EGgA)T?Ura;Tb&73c zirJs!Ta4@ifZ<`N&iO2GRWdIlL98NVM5A_+<-$@!z#s%3(>rVYS&gHotk~eTh8(9W zvuygR{6t<)Jj!CxyNhP&_6ovzwlF--Kg_(zK&Qh0m?M3JH~N*27&7F3$gfmM>zXGa z&mNWZ%M-K4)|~B6<(uTd^Q@3M&xSP7kN6mok|k&Q;H7x|9S_tS0rHro;11=j0JHrsP%gHN9g(msns(zUSRahq+ag`16@85)Ob~v zFE!~UNmA6!P1zD|6mRf)az3|S1nBWr?2#*DzBRxn04nGFrZz#Y2AAdvGQvkNa=v1R zXlwCaA3rbLm;{)_RNwcA&_NoOc!4}QNl{N{V&x|+!z%WF*o|Mz!szwdr-p}$nI#At z9FPx(S8*a;d&$Y}4;&CnPFBVKU7hMKU)42VkMnUwMQ<$@}2eA-+(NSFxM$D7ucqc^ewoOU57OQ(vgY$7Fax2A#65kINNXSVS4CqTgS{3g;;iYMl)V#H>~-Ht1MV!jJB z71z3K69?0n)$*~*5+KhRz~Zo=r?pLy70fq8BYQz_XRmXYqT^y^C9IhTjy^=j+h4CS z%@x)sah3Kex`}ZJkFKFIzs+pNu+hs|3YX-ht|5-JSO+OGBJ?31i|hfN&R4nc|742` z7TBU(VQSxc*&X48XAw|8OXel;q_sBFm89>bmu^4DAI4Z$<$c1cad)RRt7w{ml5&Xd zogYMhRS{pl^VWw!3n!CkNWgSxH;>`OaAlG&CsxHs>iyVP2CMi45<~l3_H=pmVjfR= z{=GaGskh9}7YrPH;~NNufB6qMe@)w0dys8yDN~|eiPz(~isn$KHS%7=6=i8Ul&IdS zoyjQ!`Ki=42gsNdd(xY zDCEFYdoY425^r*&E%`>ttE?r?wb5#RoasMA^i!-mRdjK-K;TDFT-^DXx_N(o)F01{ zXd6c6K35ek@rPdw&-T%#^{s`CzbmFi6V(S^cj|wHT(io~=NNMzQ|2@^MvYj{OMOF{ zowt|CPZTk1*!BVyoW~%B#zgANqmgf`GD!XAG>h1LzosRuc#sJ-8!53;l19T$xnicQ zQjO<#Vn*1}Nsjz8SZRk)zEAPo799Mm51D}{W)mI&6Kaz>KMV~02+=DG{QTWOi@FYd=36`Csf6nU{f4DrQ7aF!aI4`GI_(pP3G9@hCE2=!ss{u8bH( zM&_>4Ba>MC3c@caLb2hZQe}I8^mt4-9>`RlbRJQCXvC~3`X)usjFBd@1Kpru)Cyrq zSb9>^Qj51&t;d6!ySUK4?$;uUJqvweTlHIGdwpQV_f*t&5i)~aesG=cWFpICW8>~&a*7QdaJ!vH0^*)G-y2L zazicyOvMEkv=d|Z)wcSxWy&!Zb0QicomEu08BPEuxb?N~ zman56rQv%oI1u$m{@Eoo2W-)?#H10_&RZ9$-;#PIa-os3OBK^uvw>dVLjr{eqjN*R&xkLjb&+Ngn ztt+?BKMVjRg5%il-em;g)z2f?E7KliVI{b~@RJ`vw%m zP!A~EsRD7hPvk}I2uDG4jngwtH@BJgJYBMDIr`P!-)z=HixjwzuAw~dCMxAFpn=It z#tQ|xBG*ZRtpCGC5= zBsd}ign-p*kY-)W2dA&n22|T7p}g0X0dakP^n;2_VdbtTW=??r9pzNu8ez>$9SD-m z*zR>Qdkt1bF3nlq&7e&hOP-MDc~4A$4GF%5t+o4Jff0Da%&Es9=>SH;&de)D3^Awy z%KDzoEc#gv0vrZC;pWA7sqpxBbP|4_f6fIxdS}SUpWw%|n&V(9hCYjvBXQMHK>Iw9 zW#9E(^r*;?y?>mMn4Y;nc%>ZHatr__O>fV0&+s(fOd(Ux_>}Gn;GTX{m*ma*HE43l z^5$bPE4OIg2F1>1{Wl`RS@DjM0er;xCDz1EH{YPTyfrGSqvmi|nv>JFS>u4eAbj?AW$rU#8| z%(dk)QqhB@@r&lk@VU!jy&BwK3;X-8qN4NBX!)`(_$uFZC<=y5SAEPlJ3bM{ZxsXp z-IjyXOqt(**5>UY2~iTar5$(8Xrq3@ZwUapzfar@a5ku)Wcp$renm?Qk1d=ycEgc6 znx=okd)$l`QLjY5i&Bqu1rDxiyT&Vwy0(J6BrgnNo@QMLHxTDffy0m=(5vO=e@V9vgYH@4e%H*NAnG2vj-L;1ar>rNDDRSk zJf#Q)B+={&))$PBLF|VCyX_ZO!Z1+e6W&e{sNx#`iREx9B?m-|@^Y9eO7e3l=aSPw z)1lQIF7yriIKr>k>VI^FI^`a^h;xc<`)TPf>5=D8mZ7~zGe{k1SUdNFdE}=?^2bQM zh7gN3%GU1-Xp(30|9E_IvBOeJOHtP_t3FIj>*f! zK+@l6kkLJDqN0jv6KM*)GF1MiPn?aZ+7}}Q2d`zNGcKW0HB)ED!YY6+#!3%!mUl@` z%X8>SHU^9-JRahvMBD)IwzPFr3f|K!dwu#$3Iu)LIO{~NMNQhe2LK)_XWS7S7Aa|L zO8ZfZP1ndM%UJ)zK)tQ&=dO?uPL{t_#O3~*->{dvSXv!l=IE4>SU#I4Ad^8g>kgH9@J_R453!t8fy zk{-P+0(nwb4vHAt6_5%4p)&^1=v{l>(lWJeg0n09H9AjBv^0iTuPvxhTuWCJ=GUh; z*C4GnJtUANLN#t^c`!ED9?-a=VK~!>V9#N*r!V<~!VZQxWaF*w`>G$XMO8gv3V_ip z;W9Bx9R}k$EdbRzkRKRBbv`~<3-p+;uSQpUPWUK*gFTjvXcP1B!IroqA66g#1#Pkd z?zBv_{){voEFd3jo18pL@m(7(wg+L>u|bwbuj8ZtXA_il>5|C-UGhxaV2~<4h+%#f zT+?x~Xj^e)?~G*GnSJ+{mb7xr=fI4(m2NDtu&v|TbD#A6%mpi347YjKDfubD+5qf9%W%zXR9wg`vhzv>i3$tONh6r>D9ATrJ@Zj>JCARl`^gBX`mALhUeX2i-6WB8=Y^{BD_o~%ub|iQ0p5>t^eoGz@YE?Q|xp}lq+3IoWVbDpDT3^YAK+4SoZ4evMl4#hXeVY(BCMIdf!RU&HZvXnTd@m z=||4(dF_B5H@%je9r6doswukN@&1r&$!(&PvsW1R#pNIwI}JknYN^!FI+d`~j6D*< z{s5UUz2+`wTeoQ8!-J-;qXP2n<_|~R(t=OpfiF;HTQVZ5NxYDsG$BjJd6*g|5q6~e zPZA*C;XC-fo89YX{DhCExJb&;wFjpLWaf4y2ycWdZ*zI%zfj!l-v|J`272DHL8tC6 z{e}C@M5YH`%;@~FzD5y+&5E$+ZjP5_tN7^%~@+g+7X|;Y%n~yA2r|~ z7=lykJtyLCjqotuamDzhMe2u9>lfXoW)T5~bBB)we;Wl-5@6s+aNd;CwIxj%hwwK^ z|1Li%;Z!^qWfk5uqi;2#%7J6ogN!uhdLIC*=n5 zjFF6?&JGvL(4W4#OduNzw{gi%eecD}z+d8EMw&Pb%) zGFhSNVrf9>J`=;mwU`%ZSrX$78c1>k$U zhvPtox2WWslOB4XJi)59P2Bt$kM`f>$3-8?)Mwuq0~y=6(!MlOb8jU`c&y*F*SXrJ z4i89bzxP}D&r>FaOXY^Y=YIaP=&3^jU(VQy^^UYpamo;zKT`LKCPm?v_5*H(gHRoT zU~8a9zY1j%;N@cU!d5{;T_fiZx}B#quPTbM0-q7bcV;g2BKWrPAIA4NH}=oJxp^hW zG>$al(y9Zs1N>G|V{` zDZQ#C+9QQWUBWw*XQqX*HSiA7GRF+Ry3>pae2mu%6!sTZ)7qT9DhlRErKY*S8aCdm z7o2JWV}RChCjMbmUC~6v0%)9Y#lA)yyYDKH#d0;B(K*!-LCWu%zWl>*{4lo>)B3FQ zfyi>zzWOlL=KL|@^){z4VDqjhtd%QQMIbq3Na-7BMZh7zbzZOSoO@M=x>6YS#>S~_ z`*Q)a_{Q&CO#YP@T3bHSvwWG^d>oWT`6|!L!PdaPS=%!=hMH0>zxx$0&orgAh#A?{ z)Q>#A9gnMCK@@`y%65AHCeD?kT<0d)48G&y(w35&{_1c;u?pdG;^Y;!?eWA3%KynX zI+*gAe{J;b^zGGJ!LHnW&iGXIlvu^-M`arMfvg!^&eXEc(p7<5EAPTQx;o1*C$v|O zlk_b8S*9Q|E+S%#O%;J^!L0{YpTHkoKe+vASbCvEd(Xw#36JoK2e>*DTL1oWW+*OM zzZ4b4>Vo266H(rW_;WcI>%R-yde!T(4g(P3f2|SYA)a-rW98|(kB+#cntN@85jQMn zQF$4QEmyD%yWZvPJI8Z+F0LlNM$*Ial76tuBAYwLSiTsOS}xS zUITQqzIdnpwkT9Mc!Gt` z2%r4XlW4$-Y1NJgR4y&00|rw$;zm2>8frU2H4oBA(gl=H%M!%1>IVIlf=o1&tq|AG zyR8+m*a9hMiNX^mrYGyfHXB*`|J%{H308o#2=`x`L}|RzdxIDwGLjGPF917CXIQY{ zoDDbowS*T~+@<$dXsq_*mkA2ho>8RZc~!VcmGa2%_$#-Y7GT0?kKruYn=pP}HWL5$ z3R(IY1Wgs|M)rR4DcF1MJuMV?d!8`d;{`e^6<25cb)rNhfk-h^TWLz-*5aj!g@l^4 zZo(6SmT5{Oh2GI^xE$0;*;0IzyR{S8MX!=ofOD+r(Eh9j`95W8-6_NvD>)$c_Nv(B zh>?aaO(qg39H9C)-O(;@l&0J16c^&iTRAy~8#1Qg?`oTgOQ6%WPA9*YSy;{1ovi8b+Bi9N1%BYff8Ka9Hr znaZ8$$b^-Px$*^2k6Oo4id!Fd*~qcu$rbKe(VV{q!f5CHyll9*CYOwF6iap@JdzO^(9N6pQ&*u4RgaPn|BE$Vl4G|?- z{x0LYSz3MJ_MO*)<5Hy(fIn-i-tX+reHh#Ye{CRbhzjoSK^M7q!YYAV=Ghh zdR-H3tQtk2t-d6CIw$6_UxF)E1`~>hgBCatrOoUOlH!9($ER!t`U)-Pthf>55Li}K z)ka6{`=BK>JmAEE-u2o~U{@2jfPVtvy`QBdG~`ssCuwUmXyAmU^D6^ zGH7}0O~!jQ_M?u*TZY6dsKunvEls*gAZ^nTI*v&Oqt&W|IFL`yng6ZnHYWW(;1q@* zjn3=J0d~ee8xySBF2aUgYI>toHjQm`${V$7r#^vh^-nYdMT*RE-tLv|1@Y+aBkUw$^=uEYVvUO zctPB{co*D)D?7bJb6am!z7}UweKkXyDtbD2WcD}Oalso_>u`k!iSy~F7{U$jCmgjW z;YZJ>D(mdam&^kXvE$M?XoGaNGvXhH;9j^aPoIeW6*QOr3ID=w;7OeXeZ_OwlTbF| zEK=i6ROZJzidqCU`F}6}c_<3Kz5a(mav|*%kIyjeMR$iDt{Yj`zg+KSABe{v1JD<* zqr3|m9vPTB&mIWV9~_uTcT&*{Wi0&ZGdD5&dJj1CHd}(?m0m~Sh$VBS!ii`09frNk z-Fx3!@J3e30QBTJ0&O+K+(r8@k83r8()5l`?r8!ieA(711L;B2hNz$U3rh#$fj>R^ zH?#2BxbfUCY(f3}Q4I6Zy|iOkl&QJ}=z*D8o_uwac(QQZY0fp>`%&wsis@?hp9|do zPe#(GR~IxvA6Uo%n=wrYzb8CPWKqvL+2yTJo6UUh9e0gkOJ1$RO;=pPuNc{J!%byh z9T%HF?j08$kL)aC%=aHJ&CH4@OJ!x+bWa0Us2}Dtm1?myTrUD z#LiDU8EdUcO};PhH+-&X>-g4STs%N=^};RKciWrM8kU{+%VJIJ_^ z0L-lH?>Vfu;RuS>c2_>KJk|JR*6?NKIAy&zz5+9*n%s0?Gdp@oFUsS9Wonhx zn}$XVItt;_^|KvZ=}_mYLvZvOMU!2r>IoF3fgU$$9?>AOgaFG=VKHyDO~xmejqK}A z@N-4Dk6Je@+GI9$`tyhXCR)wyiFO+bdxU3{Y1ug96nxi^ z&y(onGd-pHMmQE(SK^=bd~*>r<6C-~zf)WK%${C4fJupKpKAXQ{Plklv!5-nsILFd zo4(_C-eY-h9O+CSXm&~JjAo6Lq79WEI`+Gp$Z6hqy26vu((#?)P>q*6+5z8k@8mCq zFfDSn2S9F9$%l3*UcInHLWjr0!L?`6o*>?kO!xPh)^0lw9b#}x6pv5tK3W0Fi1dLJ z&IT?!bNrqXf;3!=0rXPOFNM)U)68Q_=ye;)<}QPpYVDPX2%gN8xfRC8g>9@X06_K; zB8dghrj#?^JTca&EIGf9vXwD>Fq)Kp2`bv6oS43hc9>U)pUfU@PWdeOoL2O$o4dlV zJtTFHnoV~%M{5FNEo|*jjDF;szK7#(Wipd#NL9c4aUe>rcmY(Tt5`m$KaN4{ZVc{= z3_*Do^*xrnZt!ZNH6I@uN4FNY`#mPgIP+nFNP57FGUQIq^E$tZFNkRs7@XZ ztc5LrYwsV%A~n1tRGJ*Hd$y&d$SU$IGFvs`ZW%3Sc^9FMdQuJjO*s%1so0Z1oKv-5 z#Q6JM+a%Fhlqe%aS&s&Dn5Q4m_N%7;`>ao4pqm@00!fluMq}#|KGX8O--8Rv?_L%~ zFce6+N~F6h#+WA1h(Xc0+fISBJstvY+VeO+$O@&TG!RrD>tMf<{2||RZ;(xFhba1a zd86VON7#$yaa|!WZH#2@mHG$>x0vIgHY)fsB`E*>4s(Uz#zjo4aCP#6CTc8GE58o; zl#a$9xGQW9lAYRHYNO#~#8PD{YUlwLarvgHb<$(g-PY~NDt}ndd_X+|X}FI0gnfW+ zbT|T2o}F0!Qa0FFyw-!G+t%gbUb1fF6 za!j1R-F1ze%n}A{#lG~nYQ5(O5z^mj984d-X+&t8Jx$zJx%d$`qE zfNPU-kNw_v+)JTSJJWvBrw>_2`@H$i5J<5qsDa3@IYB>Mm=m|z<8Sl{LmW}u&hBvc z%Tdp;DIP6Dn|ZTl&!oZqWw)AmozZfbE$a%nv9BYOd9g|i9%H+*Mue``68iJHJgK$U zBZ-2o9@j382Bw;;(AJr+C|QdUXCPu+CDob9c6q@Tv22!BV*+#RD_>i{5qoy`B&>X- z)A&2P!RJNhLlungcp-g&<~T5i1jRYtH4^3z)7yMXDXP4;WRf{cd;M4kwjB>gru#h- z^nBuYGE{gScX5T;!J~V}mPF{%$<#97>-jkS{e_xytU1hWc7)|rI5Jgue5&m17c(YW ziY(M1d{CO@K7BJ9zuX6S_9Z|-R(SS-WujFDp=A_fhOyG#ko)Prx8^1NyKzZA%3I*( zKMc}DpHY#iy6(lSh%&}XGEneS7DLi2sF&DV#3{l)M zMKcV4sk*O1Ov3|{kp!c1P+7{hsSQ$k?+Xafz1x8@f2u%0cDAv<>&Pq)jN7r1leQPS zjSt0&?%9<~yq#YM*WjM~MBkaoWO*b2%$A}aK{fAv_Asv5bl(Q(AFwJ#2W{4bz>F^) zukCrVRqE`Www;ep3-_1>h!>bm->$Yb8BwNOx#;f-K3*LI{vxBOs`a}n464V0;^D9B z)D51&iQ5E?O*@L|KL#mmeWbw%+^h4?V)#Vel)Ji$QW+foX7BG^7LctHV; z%rvu4yDf{BJJ%)9$=$#=rf}Ki*L!)f-DbOyRZ7Jycle|8Kyz#)de^=e@_OdmN=v@T zi$64bxoM|?qz^*kPL<7PF_(k2ZJ$H%v^uV&FPqgNo&{B*>cFuF|9oWHa_k8Su=(1& zH6w0R&CbeGX7O6Y(5Ry6en{Obfh&0SGW_^OzgYUQ!F?l~()KHon+kDUA2+-zDpo<> zC(Q-GJS*0y=iYOIf1nhGQrgq0mt4Dq?S91Muy$X+sF3NGA#-AzwVck0Hg}ER!(q$r z&PCQ26q+1>m!25w+S_N?*-7Jyf%z^ZX1*5?_2oWkiA8(w%@fl_iw$*40%E^yhPn9g z5l#mHDi;2{KC@WRfhJ^@+Wgg?-#?6uc~*FKbo00A*IDfP@1w#gwy%y18XA@~BJ1W6 zH<7gv3$Z+{os%%PLl=Cp14FE9MkM>P+NYHTxm-o>up**e>`OE$jwbT=8p<6R$VWpN zv1HbO(RdrfZ$fm^TQzX*JIgg5Y-sj_=ask#WHgnKY1fVd2-BN>kZ<4$fqk|HP|_MN zPxEZg@F4kI)t?421t~(e%ji5$k7QPfXVL(5eUk>wwry^MYh?W3%FUW)9^gp8+u#-P z!W!4@d?*=*7{hK0C%1VJa1ndPUAbC}AQRVIU*nTAbxCT$LG`|_(W#S3I>WYiSsFu1 z!#wutpnoT5E2lney!d%0+mf0A^7%<&Sk>>GB>n+J#F&6h|27_(#v0vX@XY6Px{JIm z{IfTY{Qz&(w#JB8HkVfwNzleq&jWuTL||pZyIf5{_x=+c>#C@($JpLsW&7vDAq4Ux zbHp`jj?XO;S(HsPjzDL$&rCx?;}ioO=u1S%{%agQ;k#2lxq?vGSVqlx$La6*#yG$d zhWFTWKMmHfaVr@5ztF;JEU~OhZby{WdrekIt~gcLA8TXR(!ScN<$=JuZY8vog77ZX zerknLox`l0BGG571fk7n9RjOnoy>MkpJFpD+J5ACo5EhGm>zQ`7E=nTTnT^VT<)yU zA70+BC}f)cmbBOLZUy6qE*eKSDLX8x^O3K5)+=jYM9m7`)Tiz;tn;%&SB}WW)Iqpu zA> z$L>-ONg+)|kS#rA8t~%NOVmJ$UgZ<3&gazy9ZM@;=O3$^i0yaFv8$yRZ%^Cu!B)!< zSc8D*P=&&VOk{pD(j+E05VA|P;68ntXc`O|Wtpd2f+yo*P1RPEPl^U;(dHb)ui1y} z?n!^6?dQBsiyz_Ke_LP0P_IvwA2x3IQv+PfNtiK*tH4?K!->!mB8wBp5kLAs3My+R z&KSH+EU;H%aNJ`oCZr8793b7RQ*dF85%^+V_Hk57g4J&D=-76_B()g(^ zU&W4lapZO)P#c#se3J)rslPXy8^;{2^*he8Q%y(r_8u(RPVTQbzJvNa zn7F~mxrWEc2Cp;a+iW=X$;UK~@Z6edL#1%Hcdc_S{-b-@&A#JNl4jo6mdDOJy^W$c zwXIxRu_z@W?1Y0G)!w{-XMO%nNaiixsx5s8Ec6fk@K7+f0`|S0Q9dg7s8d|~-Kqp_ z#k>Q?z?q2h$+dTQT8T}-YoQU5P$#0pGb1<50De=SO}+@XeK%v6$M?aOAh!Sz1RP?@ z-rP2A9;qK)UwIq8+l==r^tkZs%X==eCT0(Cu#ab+ZO**9p4fV5M=dV|3aVG}L)9-0 zZrl1uTC^!BOmp)J-EzpVB~%UdS;_hVy$clF{|1EO38;5HQQT)!F9Rxh|8R#TW_fcE z!YIbVAKobWKePRN$e|fO+IumGMH%cTB;F7vJvhV6KAVxp}Zp0ki{n?BCh*+bPY zUH60J`{-RxoFayQ<{yZvip$|hvFx@Hx)IT2s`hIU*|ckW{e#5DzK|Vus)Uj$fMme1 zDdk%l7%{=pHuKd^%dr-NN>~$67THqwae>%QM335my(wxl;Ip`5^n=8vgmTp5e^`17 zlUY(m!zpqNc8*&$=ne~=kR?6DcK_JPt$iG3cg|$RPMZLmy5VPRTlR8$1dKMxK`rBQ z_q!MmwMtWE73S@-YBbx0^h`$W+2a(6>N%i&+CP9Pwa_S=e3_feg&+9J@lV^}iT-;! zz+rP}3azT*GGdiW&JYo~ENE=U4Fx@HS*Y597a1GN3#h42PnMtX9>z*Jo>sz5C+p<{ z#I_1jx<#oyn=0sgqIv&#%`M3(IrRF>ldY1m+MJSJ9Q1h_ibT{NrGwTEvL;lz@lm{f zTL}qHtMaA|Ax3kHtp0V9DML2?Ax+j?V=LN;`9Pd|cHF3-x4*vrj_Gl@kK%NDU% zS2Yzl)GzsNfpq=vGBgiA_Vls~S2w6o%deOaZ}m*4#SA`Ha2v_HpK{J!dmp*q$KwqY zm*RR!yW0&2i21V}&exa8y96K9QD5-ydFp1gJ{=plc*V5-Fx<5D^11!xLlwGb8+8>X zDFbf-q-*W9x`*0IlAC!wjiNWdJkqa01Z$(!?Yk+q{p*PB^~L+ASP2Dm zZ_BTL7-;!LOyoKcZG;({M9FZXy53z+&#M55itHR)Ui3V zUh@y*k;yCeAI4Aoe;EDA;Ef0~3|8RKz3l;kf@`rl-lGEniJU<@PM5;T_?g*57#L_F zp>PV`^*!q`3tA^c`&bs7;jumI!Dy*Q2pU1x5nGput5a#WXPdTRG#uoqxzdnQj4!r9 zD#g{$ura-UrtN%Fwl6T+oTaC*Fa<1IH@Q|BsT$CG$*q062RJE${KNQ)H?C=4@e?SX zEWhP$T5I@8>4ko1p@SR&{5$7|&XSMTYEJe1jw3T3JI%2-5j6MnxLaq0;c^zdR|k$F zFLc#Qz9o{k>SY>c&J|WA*Gm$bBKTA8w6>8)2Gpj{Zb?o*KmoJ0`mpH@g3;zl%k!}f zu0H55wPTO|{FZDfbdJ%PV}vRQJ8e@^HkbSP2-NqE1IF0e3(q|e=|u;du;oKc7~{wQ!?Bo7jYk>r(A|I+X}$Trn5oD&% zQFLJ4-^8(t54U$gBnM{i9(YlyewcZyO5D>uZ=bP>aO~2;0>JQb>>i}XW_x^jYb=mw z!btuL=ox7I$W-1u-tVoq$Otk)M{3u9Gk@VohN;zrIDO+$+%LWFjkA+QqWufksEaFT zL92JUefD#<7-u5;$%DxOyGo^w(MzOzrV+IEq`$Df##QqltJ84?$yjSE6@LFv)-Ee$i$eB;2kLf< zj}cUOC{YIcc)hyr=#n4R@qPKHiAX2&f^DA}Rh&aRcWqPUWah;#%!B6HOa|4s@_s8b zB3&H;yACfO?f^96j&kz-H-KAQezwGSojKPk;?Nuzac2HZqs7rHrt!?oAf&6GzeQo( z0x6Icp4kxFPUtU$l5hwL&{IKv)s(Gv(I=M9ywl49WYcd=LRJHrg$$M7b@z~AvS>Z9 zzM4O+QIFz0oV=KIP}i)s_1rRJG6skx z8nyals_)#^Z#+JC^}UIyux&I+Rr`fa;;>uSK{3u2tbl>kzwu6ZHwH+lU?KIRn=IgH z5%yPr@aAV9#O^X|+cXUcr-#YOQABSu5qJqDI5&P{EbSFneD&Tf;E1GxJytW5@jWM_ zyf*Hz9<$sRBKa+jRZ=uj`I|l5+lh1i8}5Bavg-)NeOiBpAHzcf*`QLYD|_Dkr($Wf z?q=|@;y8O=>ZeG_y|k{aot1s+NrMQ_Bv{PX91k+^F)?Iw@Z<)tMfSSaH}ha!p42@hBx(G}AFJg_xz` zz7BOY8R(7;zk~Kj8JpTQmtUv-_<|KOhT}egywgjw7mHCPPn(*4(pwj^ah=AEDAnPd zRZ}wFDKE&2th!UUrv-O?Ipe8I=b_$uM0WVat_I}#V~8FFW9TiQ+4$*O>53H(65d2R zZNvDg#crh8n-5%wiykKKw5bz1VV!uA;iH@20Ka>}r@6GTpU|$qs2^&NzY=j*G|q5# z`^Dgx?M6bwv${JJzQ11#P1jnDPe53;RS-bM3%n;m-F3xKjkw2J{G=GcrDDZ+2WQIN zUl7O81n7`Vvf0Jc+#%Z@hE2OJgj!DSaDPrGd34$D_c3(wgj8O3BWBj@%iK=der-&z zW!m%%59@cTuP|$vQ}xU20&`j;w;jSmD*>>57smr@nB~)P9%{Tun5~0AC=xC1wpv3J zyiR{q@Z{s(03WA+7zVy=7uWrRxvW5jXXdiRpBQrmlL^bUvj&9i*fg87KJ@&|TAOXC zY44Ywjyv#|*@O~<#Npsz;0a_KO9qYHlR0r8_}`l-aw35w9_eLOMG%fN$hn+bD8?Rs z_T`8Qd~IgmPA`B8BxG|77Euk3-3LTGW(N{?A?XLa=^CPW_fkAPyFV>k(q0QsQzR&+ z+Lq)Y0Gp;Y#rsH9!LxJ=JwMeNp1n5P-3(W2pj))3%@8F&4EIHbPJ zdvk39H@%iBliQUMFR%UFldviju!MWeMy$>A4$~gD1yw-%Rtq#f4hjq;-KG2eMrc)I z(UVJ!m{5WmD3y=VHjf<#;)3~%N3zr+G)ug+8snqp@$Wx8%`L4pzzZgMc(_lFr+Dr= zrEO&I;1p=DN#W7fb-g80^7eDrGxwF5p~8>O?lTWBp>kyl&IXt-Y$+j5a#bm-=k0Z) zpd;nb&AA-P!sOOG(jxX+A((3K4^qZp**&OmRD!Ju$I7g|^!$6)Kn2`22zwq`L&|qr zZL6%S60BczK|-8T}eq_l#~3MT_pdrIIIi&XXcuojm?H5b{N|M5w?fE{IrAW1>9HC^sXH zOTBwcbVn3BYM$-NsUMLNR>D|+U;m=jqOcL&1b0D);jlB6FMwI5=*bu!MYo#>C}}m2 zUsgo(;XiB@j_R&rP-=XgV-h1Mru=yRxGlNyO`EGmCC~2YEzZl(shp<;`QN9kUV!&Q zFQOA1hL<@q+*`!1az~XF8>b$kv9EH1Ksr^FLQm?9X_0_R1gD9<>KtG1-1Gq|LfQtI7Pv-Pt`-ZJYy}ricd&f8V#^T3~ z5exOml~dso1bH9%I!Ic@!1calIOMvsEbx2=-V!-+)IL?n$`!d}y2yhH$4ME^nS>y%_Wr(xwf%4m$5=wAk&{U}-pe z6`e#J0P|xG;%H%_^r=v*O(@==kkFX1X|yd93ZCpa@?P2ty}YnR%zsKaogjh;h?+{d z^q1N-AKEqGOSjQRoGjoFWyJXE$w5#H+ya?4WEGjuiv~jviQJYdI!GeE>9seUuW=9* zN(k)*4F}3m6t)c7L9E4Z@jt5G=6_)OFQtlx86lL4oAsh!(5*T zD@Ep`c++{mD)f-u0&#R^ed_wix1tW3Y+TQsc`GnGg;c6p{q_%-D4=M?&q4oPZuTQ znBR_p8y2{`u&!YYk%#K zyxPKW1)Fyxr%}afSY7!Ig;06#TE0nS-wPBXv6@eFMP`m>%KHBRNtrEl=^s$so9E;K zXh7vT#&OfVbv_>PaKF^R>Eaor zzPNUcY}b9fR_9`u1FPq#C#_=S;I-9$AvK}dSnET6h&auC_x7I1RF4uZHZ z4|wY8X%uTw!6BRGLmKVcJ@Z}0pLrb8Vl*n)L(rlv>Gv&(1j43qjQSGnXEO9b39A_e)6GlcZDoa#;cl>zx zJ8z))qgT`8g(imA=7f3^&mWy~KL|A;;hk8;sV2>`jhXB#=+2&RY?J +without output it will stream to stdout. +} + +node n1 { + type router + model mdr + network-config { + hostname n1 + ! + interface eth0 + ip address 10.0.0.1/32 + ipv6 address a:0::1/128 + ! + } + iconcoords {186.2364578872143 137.89039496012572} + labelcoords {186.2364578872143 161.89039496012572} + canvas c1 + interface-peer {eth0 n11} + custom-image $CORE_DATA_DIR/icons/normal/router_green.gif + services {zebra OSPFv3MDR vtysh SMF IPForward UserDefined} + custom-config { + custom-config-id service:UserDefined:custom-post-config-commands.sh + custom-command custom-post-config-commands.sh + config { + route add default dev eth0 + route add -net 224.0.0.0 netmask 224.0.0.0 dev eth0 + } + } + custom-config { + custom-config-id service:UserDefined + custom-command UserDefined + config { + files=('custom-post-config-commands.sh', ) + startidx=35 + cmdup=('sh custom-post-config-commands.sh', ) + } + } +} + +node n2 { + type router + model mdr + network-config { + hostname n2 + ! + interface eth0 + ip address 10.0.0.2/32 + ipv6 address a:0::2/128 + ! + } + iconcoords {49.97421009111123 297.31725181124926} + labelcoords {49.97421009111123 321.31725181124926} + canvas c1 + interface-peer {eth0 n11} + custom-image $CORE_DATA_DIR/icons/normal/router_green.gif + services {zebra OSPFv3MDR vtysh SMF IPForward UserDefined} + custom-config { + custom-config-id service:UserDefined:custom-post-config-commands.sh + custom-command custom-post-config-commands.sh + config { + route add default dev eth0 + route add -net 224.0.0.0 netmask 224.0.0.0 dev eth0 + } + } + custom-config { + custom-config-id service:UserDefined + custom-command UserDefined + config { + files=('custom-post-config-commands.sh', ) + startidx=35 + cmdup=('sh custom-post-config-commands.sh', ) + } + } +} + +node n3 { + type router + model mdr + network-config { + hostname n3 + ! + interface eth0 + ip address 10.0.0.3/32 + ipv6 address a:0::3/128 + ! + } + iconcoords {176.46110847174833 328.14864514530865} + labelcoords {176.46110847174833 352.14864514530865} + canvas c1 + interface-peer {eth0 n11} + custom-image $CORE_DATA_DIR/icons/normal/router_green.gif + services {zebra OSPFv3MDR vtysh SMF IPForward UserDefined} + custom-config { + custom-config-id service:UserDefined:custom-post-config-commands.sh + custom-command custom-post-config-commands.sh + config { + route add default dev eth0 + route add -net 224.0.0.0 netmask 224.0.0.0 dev eth0 + } + } + custom-config { + custom-config-id service:UserDefined + custom-command UserDefined + config { + files=('custom-post-config-commands.sh', ) + startidx=35 + cmdup=('sh custom-post-config-commands.sh', ) + } + } +} + +node n4 { + type router + model mdr + network-config { + hostname n4 + ! + interface eth0 + ip address 10.0.0.4/32 + ipv6 address a:0::4/128 + ! + } + iconcoords {145.04062040794378 195.27962082775758} + labelcoords {145.04062040794378 219.27962082775758} + canvas c1 + interface-peer {eth0 n11} + custom-image $CORE_DATA_DIR/icons/normal/router_green.gif + services {zebra OSPFv3MDR vtysh SMF IPForward UserDefined} + custom-config { + custom-config-id service:UserDefined:custom-post-config-commands.sh + custom-command custom-post-config-commands.sh + config { + route add default dev eth0 + route add -net 224.0.0.0 netmask 224.0.0.0 dev eth0 + } + } + custom-config { + custom-config-id service:UserDefined + custom-command UserDefined + config { + files=('custom-post-config-commands.sh', ) + startidx=35 + cmdup=('sh custom-post-config-commands.sh', ) + } + } +} + +node n5 { + type router + model mdr + network-config { + hostname n5 + ! + interface eth0 + ip address 10.0.0.5/32 + ipv6 address a:0::5/128 + ! + } + iconcoords {137.9101266949479 257.51849231830334} + labelcoords {137.9101266949479 281.51849231830334} + canvas c1 + interface-peer {eth0 n11} + custom-image $CORE_DATA_DIR/icons/normal/router_green.gif + services {zebra OSPFv3MDR vtysh SMF IPForward UserDefined} + custom-config { + custom-config-id service:UserDefined:custom-post-config-commands.sh + custom-command custom-post-config-commands.sh + config { + route add default dev eth0 + route add -net 224.0.0.0 netmask 224.0.0.0 dev eth0 + } + } + custom-config { + custom-config-id service:UserDefined + custom-command UserDefined + config { + files=('custom-post-config-commands.sh', ) + startidx=35 + cmdup=('sh custom-post-config-commands.sh', ) + } + } +} + +node n6 { + type router + model mdr + network-config { + hostname n6 + ! + interface eth0 + ip address 10.0.0.6/32 + ipv6 address a:0::6/128 + ! + } + iconcoords {119.15850324229558 93.2505296351548} + labelcoords {119.15850324229558 117.2505296351548} + canvas c1 + interface-peer {eth0 n11} + custom-image $CORE_DATA_DIR/icons/normal/router_red.gif + services {zebra OSPFv3MDR vtysh SMF IPForward UserDefined} + custom-config { + custom-config-id service:UserDefined:custom-post-config-commands.sh + custom-command custom-post-config-commands.sh + config { + route add default dev eth0 + route add -net 224.0.0.0 netmask 224.0.0.0 dev eth0 + } + } + custom-config { + custom-config-id service:UserDefined + custom-command UserDefined + config { + files=('custom-post-config-commands.sh', ) + startidx=35 + cmdup=('sh custom-post-config-commands.sh', ) + } + } +} + +node n7 { + type router + model mdr + network-config { + hostname n7 + ! + interface eth0 + ip address 10.0.0.7/32 + ipv6 address a:0::7/128 + ! + } + iconcoords {79.1102256826161 50.123535235375556} + labelcoords {79.1102256826161 74.12353523537556} + canvas c1 + interface-peer {eth0 n11} + custom-image $CORE_DATA_DIR/icons/normal/router_red.gif + services {zebra OSPFv3MDR vtysh SMF IPForward UserDefined} + custom-config { + custom-config-id service:UserDefined:custom-post-config-commands.sh + custom-command custom-post-config-commands.sh + config { + route add default dev eth0 + route add -net 224.0.0.0 netmask 224.0.0.0 dev eth0 + } + } + custom-config { + custom-config-id service:UserDefined + custom-command UserDefined + config { + files=('custom-post-config-commands.sh', ) + startidx=35 + cmdup=('sh custom-post-config-commands.sh', ) + } + } +} + +node n8 { + type router + model mdr + network-config { + hostname n8 + ! + interface eth0 + ip address 10.0.0.8/32 + ipv6 address a:0::8/128 + ! + } + iconcoords {159.90259315202974 8.220638318379141} + labelcoords {159.90259315202974 32.220638318379144} + canvas c1 + interface-peer {eth0 n11} + custom-image $CORE_DATA_DIR/icons/normal/router_red.gif + services {zebra OSPFv3MDR vtysh SMF IPForward UserDefined} + custom-config { + custom-config-id service:UserDefined:custom-post-config-commands.sh + custom-command custom-post-config-commands.sh + config { + route add default dev eth0 + route add -net 224.0.0.0 netmask 224.0.0.0 dev eth0 + } + } + custom-config { + custom-config-id service:UserDefined + custom-command UserDefined + config { + files=('custom-post-config-commands.sh', ) + startidx=35 + cmdup=('sh custom-post-config-commands.sh', ) + } + } +} + +node n9 { + type router + model mdr + network-config { + hostname n9 + ! + interface eth0 + ip address 10.0.0.9/32 + ipv6 address a:0::9/128 + ! + } + iconcoords {150.43010603614704 165.70781621981482} + labelcoords {150.43010603614704 189.70781621981482} + canvas c1 + interface-peer {eth0 n11} + custom-image $CORE_DATA_DIR/icons/normal/router_red.gif + services {zebra OSPFv3MDR vtysh SMF IPForward UserDefined} + custom-config { + custom-config-id service:UserDefined:custom-post-config-commands.sh + custom-command custom-post-config-commands.sh + config { + route add default dev eth0 + route add -net 224.0.0.0 netmask 224.0.0.0 dev eth0 + } + } + custom-config { + custom-config-id service:UserDefined + custom-command UserDefined + config { + files=('custom-post-config-commands.sh', ) + startidx=35 + cmdup=('sh custom-post-config-commands.sh', ) + } + } +} + +node n10 { + type router + model mdr + network-config { + hostname n10 + ! + interface eth0 + ip address 10.0.0.10/32 + ipv6 address a:0::10/128 + ! + } + iconcoords {64.19289632467826 42.49909518554088} + labelcoords {64.19289632467826 66.49909518554088} + canvas c1 + interface-peer {eth0 n11} + custom-image $CORE_DATA_DIR/icons/normal/router_red.gif + services {zebra OSPFv3MDR vtysh SMF IPForward UserDefined} + custom-config { + custom-config-id service:UserDefined:custom-post-config-commands.sh + custom-command custom-post-config-commands.sh + config { + route add default dev eth0 + route add -net 224.0.0.0 netmask 224.0.0.0 dev eth0 + } + } + custom-config { + custom-config-id service:UserDefined + custom-command UserDefined + config { + files=('custom-post-config-commands.sh', ) + startidx=35 + cmdup=('sh custom-post-config-commands.sh', ) + } + } +} + +node n11 { + type wlan + network-config { + hostname wlan11 + ! + interface wireless + ip address 10.0.0.0/32 + ipv6 address a:0::0/128 + ! + scriptfile + sample4.scen + ! + mobmodel + coreapi + basic_range + ! + } + iconcoords {0 0} + labelcoords {0 0} + canvas c1 + interface-peer {e0 n1} + interface-peer {e1 n2} + interface-peer {e2 n3} + interface-peer {e3 n4} + interface-peer {e4 n5} + interface-peer {e5 n6} + interface-peer {e6 n7} + interface-peer {e7 n8} + interface-peer {e8 n9} + interface-peer {e9 n10} + custom-config { + custom-config-id basic_range + custom-command {3 3 9 9 9} + config { + range=200 + bandwidth=54000000 + jitter=0 + delay=50000 + error=0 + } + } +} + +link l1 { + nodes {n11 n1} + bandwidth 54000000 + delay 50000 +} + +link l2 { + nodes {n11 n2} + bandwidth 54000000 + delay 50000 +} + +link l3 { + nodes {n11 n3} + bandwidth 54000000 + delay 50000 +} + +link l4 { + nodes {n11 n4} + bandwidth 54000000 + delay 50000 +} + +link l5 { + nodes {n11 n5} + bandwidth 54000000 + delay 50000 +} + +link l6 { + nodes {n11 n6} + bandwidth 54000000 + delay 50000 +} + +link l7 { + nodes {n11 n7} + bandwidth 54000000 + delay 50000 +} + +link l8 { + nodes {n11 n8} + bandwidth 54000000 + delay 50000 +} + +link l9 { + nodes {n11 n9} + bandwidth 54000000 + delay 50000 +} + +link l10 { + nodes {n11 n10} + bandwidth 54000000 + delay 50000 +} + +canvas c1 { + name {Canvas1} + wallpaper-style {upperleft} + wallpaper {sample4-bg.jpg} + size {1000 750} +} + +option global { + interface_names no + ip_addresses yes + ipv6_addresses yes + node_labels yes + link_labels yes + show_api no + background_images no + annotations yes + grid no + traffic_start 0 +} + +option session { +} + diff --git a/gui/configs/sample4.scen b/gui/configs/sample4.scen new file mode 100644 index 00000000..939176e7 --- /dev/null +++ b/gui/configs/sample4.scen @@ -0,0 +1,2791 @@ +$node_(1) set X_ 196.387421 +$node_(1) set Y_ 462.134022 +$ns_ at 0.000000 "$node_(1) setdest 196.387421 462.134022 1.000000" +$ns_ at 0.000000 "$node_(1) setdest 195.956911 462.201568 0.435777" +$node_(2) set X_ 108.414716 +$node_(2) set Y_ 393.160360 +$ns_ at 0.000000 "$node_(2) setdest 108.414716 393.160360 1.000000" +$ns_ at 0.000000 "$node_(2) setdest 108.686466 392.778045 0.469055" +$node_(3) set X_ 14.254378 +$node_(3) set Y_ 541.257030 +$ns_ at 0.000000 "$node_(3) setdest 14.254378 541.257030 1.000000" +$ns_ at 0.000000 "$node_(3) setdest 14.839150 541.372844 0.596131" +$node_(4) set X_ 41.851670 +$node_(4) set Y_ 545.867138 +$ns_ at 0.000000 "$node_(4) setdest 41.851670 545.867138 1.000000" +$ns_ at 0.000000 "$node_(4) setdest 42.442273 545.926217 0.593550" +$node_(5) set X_ 182.809226 +$node_(5) set Y_ 513.055969 +$ns_ at 0.000000 "$node_(5) setdest 182.809226 513.055969 1.000000" +$ns_ at 0.000000 "$node_(5) setdest 183.335280 513.337339 0.596575" +$node_(6) set X_ 122.027997 +$node_(6) set Y_ 524.087717 +$ns_ at 0.000000 "$node_(6) setdest 122.027997 524.087717 1.000000" +$ns_ at 0.000000 "$node_(6) setdest 122.475860 524.470641 0.589248" +$node_(7) set X_ 186.692167 +$node_(7) set Y_ 453.103964 +$ns_ at 0.000000 "$node_(7) setdest 186.692167 453.103964 1.000000" +$ns_ at 0.000000 "$node_(7) setdest 186.362331 453.043815 0.335275" +$node_(8) set X_ 6.841010 +$node_(8) set Y_ 411.004614 +$ns_ at 0.000000 "$node_(8) setdest 6.841010 411.004614 1.000000" +$ns_ at 0.000000 "$node_(8) setdest 6.715910 410.970880 0.129569" +$node_(9) set X_ 180.514289 +$node_(9) set Y_ 395.901964 +$ns_ at 0.000000 "$node_(9) setdest 180.514289 395.901964 1.000000" +$ns_ at 0.000000 "$node_(9) setdest 180.863640 396.303766 0.532438" +$node_(10) set X_ 148.853602 +$node_(10) set Y_ 357.991260 +$ns_ at 0.000000 "$node_(10) setdest 148.853602 357.991260 1.000000" +$ns_ at 0.000000 "$node_(10) setdest 148.959253 358.166829 0.204906" + +$ns_ at 1.000000 "$node_(1) setdest 194.187758 463.051431 1.962694" +$ns_ at 1.000000 "$node_(2) setdest 109.321754 390.842582 2.037058" +$ns_ at 1.000000 "$node_(3) setdest 16.393600 542.808055 2.115690" +$ns_ at 1.000000 "$node_(4) setdest 44.634359 546.049079 2.195526" +$ns_ at 1.000000 "$node_(5) setdest 184.328928 515.246522 2.152281" +$ns_ at 1.000000 "$node_(6) setdest 123.835691 526.192539 2.194099" +$ns_ at 1.000000 "$node_(7) setdest 184.877733 452.038170 1.793140" +$ns_ at 1.000000 "$node_(8) setdest 6.671562 410.117567 0.854465" +$ns_ at 1.000000 "$node_(9) setdest 181.894113 398.159435 2.122590" +$ns_ at 1.000000 "$node_(10) setdest 148.870931 359.695988 1.531708" + +$ns_ at 2.000000 "$node_(1) setdest 190.851655 464.311512 3.566145" +$ns_ at 2.000000 "$node_(2) setdest 110.783099 387.546466 3.605539" +$ns_ at 2.000000 "$node_(3) setdest 14.881262 545.183484 2.815996" +$ns_ at 2.000000 "$node_(4) setdest 48.394729 546.584695 3.798324" +$ns_ at 2.000000 "$node_(5) setdest 184.473917 519.006641 3.762914" +$ns_ at 2.000000 "$node_(6) setdest 126.386821 528.676353 3.560561" +$ns_ at 2.000000 "$node_(7) setdest 182.160868 450.006458 3.392523" +$ns_ at 2.000000 "$node_(8) setdest 8.577394 409.839307 1.926038" +$ns_ at 2.000000 "$node_(9) setdest 182.309184 401.800750 3.664895" +$ns_ at 2.000000 "$node_(10) setdest 149.229189 362.797090 3.121727" + +$ns_ at 3.000000 "$node_(1) setdest 185.998912 466.082945 5.165955" +$ns_ at 3.000000 "$node_(2) setdest 114.977824 384.500577 5.183932" +$ns_ at 3.000000 "$node_(3) setdest 12.849462 546.572220 2.461056" +$ns_ at 3.000000 "$node_(4) setdest 52.522431 543.493688 5.156767" +$ns_ at 3.000000 "$node_(5) setdest 181.227267 523.091806 5.218171" +$ns_ at 3.000000 "$node_(6) setdest 122.849749 526.513462 4.145958" +$ns_ at 3.000000 "$node_(7) setdest 178.377101 446.748671 4.993003" +$ns_ at 3.000000 "$node_(8) setdest 11.957948 411.081133 3.601427" +$ns_ at 3.000000 "$node_(9) setdest 179.694536 406.348826 5.246083" +$ns_ at 3.000000 "$node_(10) setdest 150.721736 367.286506 4.731021" + +$ns_ at 4.000000 "$node_(1) setdest 179.555767 468.148449 6.766123" +$ns_ at 4.000000 "$node_(2) setdest 121.705230 383.835205 6.760230" +$ns_ at 4.000000 "$node_(3) setdest 12.743213 545.655478 0.922878" +$ns_ at 4.000000 "$node_(4) setdest 54.718112 536.856974 6.990493" +$ns_ at 4.000000 "$node_(5) setdest 174.581069 521.988831 6.737099" +$ns_ at 4.000000 "$node_(6) setdest 117.358177 524.776868 5.759612" +$ns_ at 4.000000 "$node_(7) setdest 173.583229 442.224357 6.591709" +$ns_ at 4.000000 "$node_(8) setdest 16.085272 414.253650 5.205734" +$ns_ at 4.000000 "$node_(9) setdest 174.174132 410.497488 6.905523" +$ns_ at 4.000000 "$node_(10) setdest 152.442894 373.377115 6.329131" + +$ns_ at 5.000000 "$node_(1) setdest 184.255964 467.324102 4.771939" +$ns_ at 5.000000 "$node_(2) setdest 130.096253 384.724742 8.438041" +$ns_ at 5.000000 "$node_(3) setdest 13.104636 545.386686 0.450418" +$ns_ at 5.000000 "$node_(4) setdest 60.821055 533.607888 6.913933" +$ns_ at 5.000000 "$node_(5) setdest 176.727658 522.545813 2.217673" +$ns_ at 5.000000 "$node_(6) setdest 109.928718 524.861347 7.429940" +$ns_ at 5.000000 "$node_(7) setdest 168.331832 435.943930 8.186631" +$ns_ at 5.000000 "$node_(8) setdest 20.338476 419.569962 6.808298" +$ns_ at 5.000000 "$node_(9) setdest 166.303912 413.725191 8.506376" +$ns_ at 5.000000 "$node_(10) setdest 153.598648 381.217946 7.925553" + +$ns_ at 6.000000 "$node_(1) setdest 190.713020 468.199291 6.516097" +$ns_ at 6.000000 "$node_(2) setdest 140.041968 386.083359 10.038083" +$ns_ at 6.000000 "$node_(3) setdest 15.010480 545.397474 1.905875" +$ns_ at 6.000000 "$node_(4) setdest 69.199175 531.278561 8.695899" +$ns_ at 6.000000 "$node_(5) setdest 180.271997 521.405130 3.723372" +$ns_ at 6.000000 "$node_(6) setdest 100.969155 523.987540 9.002072" +$ns_ at 6.000000 "$node_(7) setdest 162.840946 427.835646 9.792553" +$ns_ at 6.000000 "$node_(8) setdest 24.574187 426.845069 8.418339" +$ns_ at 6.000000 "$node_(9) setdest 156.473605 416.105660 10.114424" +$ns_ at 6.000000 "$node_(10) setdest 153.809976 390.743972 9.528370" + +$ns_ at 7.000000 "$node_(1) setdest 198.802940 468.836289 8.114961" +$ns_ at 7.000000 "$node_(2) setdest 151.520674 388.001681 11.637897" +$ns_ at 7.000000 "$node_(3) setdest 18.516288 545.400428 3.505809" +$ns_ at 7.000000 "$node_(4) setdest 79.188417 528.784398 10.295912" +$ns_ at 7.000000 "$node_(5) setdest 185.412195 520.020244 5.323489" +$ns_ at 7.000000 "$node_(6) setdest 91.080154 520.135759 10.612660" +$ns_ at 7.000000 "$node_(7) setdest 157.194066 417.952547 11.382569" +$ns_ at 7.000000 "$node_(8) setdest 29.470473 435.584536 10.017580" +$ns_ at 7.000000 "$node_(9) setdest 144.909476 418.020989 11.721670" +$ns_ at 7.000000 "$node_(10) setdest 154.204220 401.865406 11.128419" + +$ns_ at 8.000000 "$node_(1) setdest 208.501664 469.415232 9.715988" +$ns_ at 8.000000 "$node_(2) setdest 164.443430 390.863715 13.235894" +$ns_ at 8.000000 "$node_(3) setdest 23.619197 545.235409 5.105577" +$ns_ at 8.000000 "$node_(4) setdest 90.784905 526.131143 11.896146" +$ns_ at 8.000000 "$node_(5) setdest 192.096154 518.214428 6.923603" +$ns_ at 8.000000 "$node_(6) setdest 80.107574 514.731340 12.231323" +$ns_ at 8.000000 "$node_(7) setdest 153.494434 405.549908 12.942672" +$ns_ at 8.000000 "$node_(8) setdest 34.279206 446.159167 11.616658" +$ns_ at 8.000000 "$node_(9) setdest 131.868827 420.741097 13.321318" +$ns_ at 8.000000 "$node_(10) setdest 155.452554 414.535462 12.731405" + +$ns_ at 9.000000 "$node_(1) setdest 219.760670 470.533402 11.314394" +$ns_ at 9.000000 "$node_(2) setdest 178.682089 395.031168 14.836006" +$ns_ at 9.000000 "$node_(3) setdest 30.308442 544.767661 6.705579" +$ns_ at 9.000000 "$node_(4) setdest 103.964771 523.226201 13.496205" +$ns_ at 9.000000 "$node_(5) setdest 200.282657 515.840475 8.523761" +$ns_ at 9.000000 "$node_(6) setdest 69.403546 506.039069 13.788828" +$ns_ at 9.000000 "$node_(7) setdest 157.365544 391.985292 14.106179" +$ns_ at 9.000000 "$node_(8) setdest 38.646714 458.620995 13.205010" +$ns_ at 9.000000 "$node_(9) setdest 117.255049 423.747093 14.919736" +$ns_ at 9.000000 "$node_(10) setdest 155.850673 428.857711 14.327781" + +$ns_ at 10.000000 "$node_(1) setdest 232.472738 472.803312 12.913139" +$ns_ at 10.000000 "$node_(2) setdest 194.127048 400.653131 16.436339" +$ns_ at 10.000000 "$node_(3) setdest 38.581962 544.035935 8.305815" +$ns_ at 10.000000 "$node_(4) setdest 118.685377 519.880090 15.096115" +$ns_ at 10.000000 "$node_(5) setdest 210.050487 513.181447 10.123286" +$ns_ at 10.000000 "$node_(6) setdest 59.302514 494.374293 15.430420" +$ns_ at 10.000000 "$node_(7) setdest 169.643190 381.472758 16.163353" +$ns_ at 10.000000 "$node_(8) setdest 40.877385 473.255023 14.803063" +$ns_ at 10.000000 "$node_(9) setdest 100.860701 425.784585 16.520473" +$ns_ at 10.000000 "$node_(10) setdest 154.521863 444.723981 15.921817" + +$ns_ at 11.000000 "$node_(1) setdest 246.478612 476.598268 14.510900" +$ns_ at 11.000000 "$node_(2) setdest 210.951195 407.159256 18.038337" +$ns_ at 11.000000 "$node_(3) setdest 48.438708 543.050999 9.905834" +$ns_ at 11.000000 "$node_(4) setdest 134.861031 515.746212 16.695530" +$ns_ at 11.000000 "$node_(5) setdest 221.527307 510.799257 11.721444" +$ns_ at 11.000000 "$node_(6) setdest 49.457411 480.494289 17.017067" +$ns_ at 11.000000 "$node_(7) setdest 180.598709 367.456279 17.790028" +$ns_ at 11.000000 "$node_(8) setdest 39.538357 489.562934 16.362792" +$ns_ at 11.000000 "$node_(9) setdest 83.020566 428.952409 18.119203" +$ns_ at 11.000000 "$node_(10) setdest 151.821820 462.044995 17.530195" + +$ns_ at 12.000000 "$node_(1) setdest 261.629729 482.087033 16.114679" +$ns_ at 12.000000 "$node_(2) setdest 229.245871 414.133015 19.578776" +$ns_ at 12.000000 "$node_(3) setdest 59.881260 541.845844 11.505842" +$ns_ at 12.000000 "$node_(4) setdest 152.423948 510.621388 18.295352" +$ns_ at 12.000000 "$node_(5) setdest 234.527040 507.889458 13.321411" +$ns_ at 12.000000 "$node_(6) setdest 40.966307 463.915095 18.627091" +$ns_ at 12.000000 "$node_(7) setdest 185.609934 356.000078 12.504276" +$ns_ at 12.000000 "$node_(8) setdest 30.885561 505.096833 17.781252" +$ns_ at 12.000000 "$node_(9) setdest 63.625003 431.905828 19.619138" +$ns_ at 12.000000 "$node_(10) setdest 146.050593 480.248923 19.096860" + +$ns_ at 13.000000 "$node_(1) setdest 278.393127 487.812114 17.714064" +$ns_ at 13.000000 "$node_(2) setdest 248.189196 420.533024 19.995242" +$ns_ at 13.000000 "$node_(3) setdest 72.938784 540.726815 13.105387" +$ns_ at 13.000000 "$node_(4) setdest 171.235204 504.613101 19.747478" +$ns_ at 13.000000 "$node_(5) setdest 249.025623 504.352557 14.923758" +$ns_ at 13.000000 "$node_(6) setdest 30.880946 446.819434 19.848832" +$ns_ at 13.000000 "$node_(7) setdest 184.657559 357.512927 1.787661" +$ns_ at 13.000000 "$node_(8) setdest 14.206642 507.144149 16.804101" +$ns_ at 13.000000 "$node_(9) setdest 44.005432 428.793757 19.864857" +$ns_ at 13.000000 "$node_(10) setdest 132.025204 492.782747 18.809792" + +$ns_ at 14.000000 "$node_(1) setdest 297.118073 492.525399 19.309031" +$ns_ at 14.000000 "$node_(2) setdest 267.609451 425.285611 19.993334" +$ns_ at 14.000000 "$node_(3) setdest 87.624368 539.967665 14.705193" +$ns_ at 14.000000 "$node_(4) setdest 190.013797 497.736791 19.997979" +$ns_ at 14.000000 "$node_(5) setdest 265.067340 500.390654 16.523722" +$ns_ at 14.000000 "$node_(6) setdest 22.990420 428.699834 19.763105" +$ns_ at 14.000000 "$node_(7) setdest 182.833109 360.375049 3.394165" +$ns_ at 14.000000 "$node_(8) setdest 11.626599 492.727976 14.645227" +$ns_ at 14.000000 "$node_(9) setdest 26.668091 418.946242 19.938830" +$ns_ at 14.000000 "$node_(10) setdest 123.299921 486.526765 10.736287" + +$ns_ at 15.000000 "$node_(1) setdest 316.902786 495.404161 19.993052" +$ns_ at 15.000000 "$node_(2) setdest 287.409944 428.039581 19.991095" +$ns_ at 15.000000 "$node_(3) setdest 103.927453 539.724173 16.304903" +$ns_ at 15.000000 "$node_(4) setdest 208.447762 489.981073 19.999056" +$ns_ at 15.000000 "$node_(5) setdest 282.569771 495.688589 18.123038" +$ns_ at 15.000000 "$node_(6) setdest 32.358017 413.328574 18.000764" +$ns_ at 15.000000 "$node_(7) setdest 180.522818 364.802409 4.993892" +$ns_ at 15.000000 "$node_(8) setdest 17.250049 478.879349 14.946828" +$ns_ at 15.000000 "$node_(9) setdest 19.305071 401.972918 18.501562" +$ns_ at 15.000000 "$node_(10) setdest 122.308127 476.484801 10.090823" + +$ns_ at 16.000000 "$node_(1) setdest 336.810376 497.321840 19.999742" +$ns_ at 16.000000 "$node_(2) setdest 307.390871 428.541832 19.987239" +$ns_ at 16.000000 "$node_(3) setdest 121.831706 539.952811 17.905713" +$ns_ at 16.000000 "$node_(4) setdest 227.120033 482.822730 19.997389" +$ns_ at 16.000000 "$node_(5) setdest 301.236586 489.579183 19.641151" +$ns_ at 16.000000 "$node_(6) setdest 46.948370 420.814042 16.398495" +$ns_ at 16.000000 "$node_(7) setdest 177.898557 370.854610 6.596658" +$ns_ at 16.000000 "$node_(8) setdest 30.672025 469.903968 16.146420" +$ns_ at 16.000000 "$node_(9) setdest 28.762169 396.296220 11.030031" +$ns_ at 16.000000 "$node_(10) setdest 119.039643 465.199922 11.748680" + +$ns_ at 17.000000 "$node_(1) setdest 356.723919 496.365486 19.936494" +$ns_ at 17.000000 "$node_(2) setdest 327.327857 427.009656 19.995774" +$ns_ at 17.000000 "$node_(3) setdest 141.310307 540.046329 19.478826" +$ns_ at 17.000000 "$node_(4) setdest 246.180029 476.772114 19.997335" +$ns_ at 17.000000 "$node_(5) setdest 320.056175 482.812486 19.999128" +$ns_ at 17.000000 "$node_(6) setdest 50.106366 436.546462 16.046245" +$ns_ at 17.000000 "$node_(7) setdest 175.044087 378.536882 8.195444" +$ns_ at 17.000000 "$node_(8) setdest 48.497193 467.760705 17.953557" +$ns_ at 17.000000 "$node_(9) setdest 38.413556 402.420929 11.430719" +$ns_ at 17.000000 "$node_(10) setdest 114.693546 452.584125 13.343422" + +$ns_ at 18.000000 "$node_(1) setdest 376.664288 496.703412 19.943231" +$ns_ at 18.000000 "$node_(2) setdest 346.945189 423.241158 19.976018" +$ns_ at 18.000000 "$node_(3) setdest 161.304062 539.571077 19.999402" +$ns_ at 18.000000 "$node_(4) setdest 265.558802 471.836704 19.997378" +$ns_ at 18.000000 "$node_(5) setdest 338.448532 474.970956 19.994209" +$ns_ at 18.000000 "$node_(6) setdest 54.288270 451.088370 15.131272" +$ns_ at 18.000000 "$node_(7) setdest 172.073073 387.868710 9.793362" +$ns_ at 18.000000 "$node_(8) setdest 67.655050 465.445201 19.297281" +$ns_ at 18.000000 "$node_(9) setdest 49.709921 408.850378 12.997910" +$ns_ at 18.000000 "$node_(10) setdest 114.878490 437.804560 14.780722" + +$ns_ at 19.000000 "$node_(1) setdest 396.221169 500.830441 19.987596" +$ns_ at 19.000000 "$node_(2) setdest 364.910034 414.653995 19.911680" +$ns_ at 19.000000 "$node_(3) setdest 181.265387 538.352550 19.998483" +$ns_ at 19.000000 "$node_(4) setdest 285.155517 467.848358 19.998454" +$ns_ at 19.000000 "$node_(5) setdest 356.023480 465.435990 19.994859" +$ns_ at 19.000000 "$node_(6) setdest 59.822992 466.650093 16.516669" +$ns_ at 19.000000 "$node_(7) setdest 170.484709 399.136223 11.378916" +$ns_ at 19.000000 "$node_(8) setdest 84.504418 457.452149 18.649130" +$ns_ at 19.000000 "$node_(9) setdest 63.410973 414.003103 14.637944" +$ns_ at 19.000000 "$node_(10) setdest 124.979075 425.189235 16.160700" + +$ns_ at 20.000000 "$node_(1) setdest 414.959731 507.703787 19.959373" +$ns_ at 20.000000 "$node_(2) setdest 380.876777 402.624609 19.991073" +$ns_ at 20.000000 "$node_(3) setdest 201.169537 536.405487 19.999156" +$ns_ at 20.000000 "$node_(4) setdest 304.943032 464.963448 19.996711" +$ns_ at 20.000000 "$node_(5) setdest 372.787924 454.543588 19.992274" +$ns_ at 20.000000 "$node_(6) setdest 70.020001 481.532051 18.040280" +$ns_ at 20.000000 "$node_(7) setdest 170.249709 412.128831 12.994733" +$ns_ at 20.000000 "$node_(8) setdest 93.638312 442.200433 17.777595" +$ns_ at 20.000000 "$node_(9) setdest 78.562641 419.829513 16.233302" +$ns_ at 20.000000 "$node_(10) setdest 142.579167 424.108364 17.633250" + +$ns_ at 21.000000 "$node_(1) setdest 429.209520 521.348596 19.729097" +$ns_ at 21.000000 "$node_(2) setdest 397.102346 390.982114 19.970398" +$ns_ at 21.000000 "$node_(3) setdest 220.965783 533.570502 19.998213" +$ns_ at 21.000000 "$node_(4) setdest 324.852277 463.066604 19.999402" +$ns_ at 21.000000 "$node_(5) setdest 388.665021 442.382765 19.999195" +$ns_ at 21.000000 "$node_(6) setdest 86.716919 491.602850 19.498924" +$ns_ at 21.000000 "$node_(7) setdest 169.847567 426.715435 14.592147" +$ns_ at 21.000000 "$node_(8) setdest 97.710618 423.903178 18.744951" +$ns_ at 21.000000 "$node_(9) setdest 95.770736 424.404680 17.805917" +$ns_ at 21.000000 "$node_(10) setdest 161.156216 426.885868 18.783538" + +$ns_ at 22.000000 "$node_(1) setdest 430.473009 540.114895 18.808785" +$ns_ at 22.000000 "$node_(2) setdest 416.281990 386.251137 19.754515" +$ns_ at 22.000000 "$node_(3) setdest 240.636740 529.963240 19.998972" +$ns_ at 22.000000 "$node_(4) setdest 344.804967 461.695943 19.999714" +$ns_ at 22.000000 "$node_(5) setdest 405.064820 430.950640 19.991171" +$ns_ at 22.000000 "$node_(6) setdest 105.990772 495.255793 19.616967" +$ns_ at 22.000000 "$node_(7) setdest 167.385262 442.713557 16.186502" +$ns_ at 22.000000 "$node_(8) setdest 103.162186 405.249727 19.433755" +$ns_ at 22.000000 "$node_(9) setdest 115.163365 425.341594 19.415248" +$ns_ at 22.000000 "$node_(10) setdest 179.829755 431.479678 19.230293" + +$ns_ at 23.000000 "$node_(1) setdest 415.678953 543.404262 15.155331" +$ns_ at 23.000000 "$node_(2) setdest 435.187649 392.319327 19.855651" +$ns_ at 23.000000 "$node_(3) setdest 260.149758 525.579574 19.999361" +$ns_ at 23.000000 "$node_(4) setdest 364.757106 460.319210 19.999581" +$ns_ at 23.000000 "$node_(5) setdest 423.001973 422.178788 19.967143" +$ns_ at 23.000000 "$node_(6) setdest 123.055577 489.304227 18.072872" +$ns_ at 23.000000 "$node_(7) setdest 163.127378 459.989903 17.793305" +$ns_ at 23.000000 "$node_(8) setdest 100.668183 387.349777 18.072860" +$ns_ at 23.000000 "$node_(9) setdest 134.745751 421.781273 19.903410" +$ns_ at 23.000000 "$node_(10) setdest 192.254617 443.561434 17.330494" + +$ns_ at 24.000000 "$node_(1) setdest 406.160525 540.747525 9.882242" +$ns_ at 24.000000 "$node_(2) setdest 449.530999 405.814727 19.694098" +$ns_ at 24.000000 "$node_(3) setdest 279.642597 521.105699 19.999658" +$ns_ at 24.000000 "$node_(4) setdest 384.596757 457.826144 19.995677" +$ns_ at 24.000000 "$node_(5) setdest 442.473674 417.861163 19.944649" +$ns_ at 24.000000 "$node_(6) setdest 134.199736 475.485411 17.752521" +$ns_ at 24.000000 "$node_(7) setdest 160.485918 479.161017 19.352233" +$ns_ at 24.000000 "$node_(8) setdest 89.621312 373.738896 17.529673" +$ns_ at 24.000000 "$node_(9) setdest 151.033770 410.479558 19.824942" +$ns_ at 24.000000 "$node_(10) setdest 187.121532 459.497919 16.742763" + +$ns_ at 25.000000 "$node_(1) setdest 409.358404 540.925330 3.202818" +$ns_ at 25.000000 "$node_(2) setdest 458.447905 423.373342 19.693049" +$ns_ at 25.000000 "$node_(3) setdest 299.300679 517.470033 19.991455" +$ns_ at 25.000000 "$node_(4) setdest 404.207394 453.940099 19.991959" +$ns_ at 25.000000 "$node_(5) setdest 462.251199 419.968804 19.889511" +$ns_ at 25.000000 "$node_(6) setdest 137.331615 457.789340 17.971076" +$ns_ at 25.000000 "$node_(7) setdest 163.430534 498.853924 19.911840" +$ns_ at 25.000000 "$node_(8) setdest 77.657124 359.369184 18.698407" +$ns_ at 25.000000 "$node_(9) setdest 164.260780 395.480602 19.998061" +$ns_ at 25.000000 "$node_(10) setdest 184.039441 474.459839 15.276071" + +$ns_ at 26.000000 "$node_(1) setdest 413.898194 539.190016 4.860144" +$ns_ at 26.000000 "$node_(2) setdest 472.249585 436.422368 18.993774" +$ns_ at 26.000000 "$node_(3) setdest 319.267001 516.756455 19.979069" +$ns_ at 26.000000 "$node_(4) setdest 422.915330 447.007413 19.951166" +$ns_ at 26.000000 "$node_(5) setdest 477.938097 430.823097 19.076018" +$ns_ at 26.000000 "$node_(6) setdest 140.850027 439.467490 18.656618" +$ns_ at 26.000000 "$node_(7) setdest 173.893091 515.708878 19.838210" +$ns_ at 26.000000 "$node_(8) setdest 62.077819 360.254769 15.604455" +$ns_ at 26.000000 "$node_(9) setdest 179.407140 382.455787 19.976437" +$ns_ at 26.000000 "$node_(10) setdest 185.534654 490.826466 16.434784" + +$ns_ at 27.000000 "$node_(1) setdest 419.345130 535.713495 6.461836" +$ns_ at 27.000000 "$node_(2) setdest 485.947996 449.586921 18.998734" +$ns_ at 27.000000 "$node_(3) setdest 339.044367 519.533812 19.971427" +$ns_ at 27.000000 "$node_(4) setdest 438.826119 435.000710 19.932740" +$ns_ at 27.000000 "$node_(5) setdest 473.471267 424.832381 7.472701" +$ns_ at 27.000000 "$node_(6) setdest 135.925019 421.904243 18.240706" +$ns_ at 27.000000 "$node_(7) setdest 186.435379 531.166580 19.906018" +$ns_ at 27.000000 "$node_(8) setdest 57.119411 374.294350 14.889447" +$ns_ at 27.000000 "$node_(9) setdest 192.143744 373.866180 15.362370" +$ns_ at 27.000000 "$node_(10) setdest 185.569664 508.866862 18.040430" + +$ns_ at 28.000000 "$node_(1) setdest 425.125458 530.097247 8.059430" +$ns_ at 28.000000 "$node_(2) setdest 493.049174 466.718934 18.545421" +$ns_ at 28.000000 "$node_(3) setdest 358.303469 524.898542 19.992332" +$ns_ at 28.000000 "$node_(4) setdest 450.847143 419.080495 19.948891" +$ns_ at 28.000000 "$node_(5) setdest 466.757695 428.118270 7.474565" +$ns_ at 28.000000 "$node_(6) setdest 128.600444 404.149699 19.206072" +$ns_ at 28.000000 "$node_(7) setdest 190.977325 534.505975 5.637449" +$ns_ at 28.000000 "$node_(8) setdest 50.549060 388.112799 15.300949" +$ns_ at 28.000000 "$node_(9) setdest 191.629729 374.111864 0.569712" +$ns_ at 28.000000 "$node_(10) setdest 181.834449 527.981880 19.476543" + +$ns_ at 29.000000 "$node_(1) setdest 431.663417 522.972367 9.669997" +$ns_ at 29.000000 "$node_(2) setdest 500.999975 483.730217 18.777619" +$ns_ at 29.000000 "$node_(3) setdest 378.191935 526.327594 19.939741" +$ns_ at 29.000000 "$node_(4) setdest 458.446194 400.622892 19.960678" +$ns_ at 29.000000 "$node_(5) setdest 461.699992 435.699961 9.113857" +$ns_ at 29.000000 "$node_(6) setdest 122.697249 385.435598 19.623081" +$ns_ at 29.000000 "$node_(7) setdest 183.725190 529.813555 8.637839" +$ns_ at 29.000000 "$node_(8) setdest 38.920729 400.522858 17.006694" +$ns_ at 29.000000 "$node_(9) setdest 190.433575 375.757305 2.034271" +$ns_ at 29.000000 "$node_(10) setdest 169.338208 541.367431 18.311990" + +$ns_ at 30.000000 "$node_(1) setdest 440.262619 515.700706 11.261586" +$ns_ at 30.000000 "$node_(2) setdest 500.811238 501.442061 17.712850" +$ns_ at 30.000000 "$node_(3) setdest 397.439899 521.321197 19.888392" +$ns_ at 30.000000 "$node_(4) setdest 464.984365 381.792314 19.933348" +$ns_ at 30.000000 "$node_(5) setdest 458.178246 445.894374 10.785581" +$ns_ at 30.000000 "$node_(6) setdest 117.489012 366.365374 19.768641" +$ns_ at 30.000000 "$node_(7) setdest 174.343370 525.704745 10.242113" +$ns_ at 30.000000 "$node_(8) setdest 24.090640 411.759729 18.606419" +$ns_ at 30.000000 "$node_(9) setdest 187.828459 378.293814 3.636002" +$ns_ at 30.000000 "$node_(10) setdest 152.821188 535.712898 17.458113" + +$ns_ at 31.000000 "$node_(1) setdest 451.405438 509.290896 12.854885" +$ns_ at 31.000000 "$node_(2) setdest 491.700571 517.036414 18.060678" +$ns_ at 31.000000 "$node_(3) setdest 413.171544 509.240492 19.835022" +$ns_ at 31.000000 "$node_(4) setdest 480.918024 372.117997 18.640651" +$ns_ at 31.000000 "$node_(5) setdest 456.464076 458.133299 12.358384" +$ns_ at 31.000000 "$node_(6) setdest 116.659357 360.796271 5.630563" +$ns_ at 31.000000 "$node_(7) setdest 164.951174 518.581014 11.788168" +$ns_ at 31.000000 "$node_(8) setdest 8.936318 423.738537 19.316970" +$ns_ at 31.000000 "$node_(9) setdest 184.393707 382.243473 5.234245" +$ns_ at 31.000000 "$node_(10) setdest 139.669561 526.256345 16.198509" + +$ns_ at 32.000000 "$node_(1) setdest 464.725397 503.658293 14.461934" +$ns_ at 32.000000 "$node_(2) setdest 479.083065 531.312050 19.052435" +$ns_ at 32.000000 "$node_(3) setdest 421.035268 491.095019 19.776156" +$ns_ at 32.000000 "$node_(4) setdest 490.592449 383.745440 15.125870" +$ns_ at 32.000000 "$node_(5) setdest 456.762816 472.118321 13.988212" +$ns_ at 32.000000 "$node_(6) setdest 116.717596 368.408818 7.612770" +$ns_ at 32.000000 "$node_(7) setdest 156.422329 508.202089 13.433662" +$ns_ at 32.000000 "$node_(8) setdest 11.745791 420.358995 4.394820" +$ns_ at 32.000000 "$node_(9) setdest 180.640795 387.951388 6.831153" +$ns_ at 32.000000 "$node_(10) setdest 126.512644 516.165541 16.580976" + +$ns_ at 33.000000 "$node_(1) setdest 480.312677 499.837211 16.048799" +$ns_ at 33.000000 "$node_(2) setdest 464.103605 542.498822 18.695670" +$ns_ at 33.000000 "$node_(3) setdest 415.566812 472.559995 19.324884" +$ns_ at 33.000000 "$node_(4) setdest 492.444864 398.380771 14.752097" +$ns_ at 33.000000 "$node_(5) setdest 454.811405 487.581008 15.585336" +$ns_ at 33.000000 "$node_(6) setdest 117.946938 377.618577 9.291444" +$ns_ at 33.000000 "$node_(7) setdest 147.983933 495.750139 15.041861" +$ns_ at 33.000000 "$node_(8) setdest 16.630884 421.422038 4.999419" +$ns_ at 33.000000 "$node_(9) setdest 176.046756 395.024567 8.434160" +$ns_ at 33.000000 "$node_(10) setdest 114.664512 502.380973 18.176703" + +$ns_ at 34.000000 "$node_(1) setdest 497.919072 498.422291 17.663158" +$ns_ at 34.000000 "$node_(2) setdest 467.653826 541.046000 3.835981" +$ns_ at 34.000000 "$node_(3) setdest 405.186017 464.081358 13.403290" +$ns_ at 34.000000 "$node_(4) setdest 490.175129 414.347121 16.126873" +$ns_ at 34.000000 "$node_(5) setdest 451.792079 504.480069 17.166671" +$ns_ at 34.000000 "$node_(6) setdest 121.883147 387.777476 10.894815" +$ns_ at 34.000000 "$node_(7) setdest 138.114893 482.374086 16.622777" +$ns_ at 34.000000 "$node_(8) setdest 22.994022 423.191629 6.604618" +$ns_ at 34.000000 "$node_(9) setdest 170.044883 403.068060 10.035948" +$ns_ at 34.000000 "$node_(10) setdest 107.004140 484.410586 19.534997" + +$ns_ at 35.000000 "$node_(1) setdest 517.152845 499.275087 19.252670" +$ns_ at 35.000000 "$node_(2) setdest 469.760083 536.639542 4.883974" +$ns_ at 35.000000 "$node_(3) setdest 406.522026 464.499466 1.399905" +$ns_ at 35.000000 "$node_(4) setdest 486.192447 431.664927 17.769867" +$ns_ at 35.000000 "$node_(5) setdest 441.963945 520.294525 18.619593" +$ns_ at 35.000000 "$node_(6) setdest 124.346991 399.961894 12.431032" +$ns_ at 35.000000 "$node_(7) setdest 124.150809 470.712739 18.192929" +$ns_ at 35.000000 "$node_(8) setdest 30.684577 426.047417 8.203668" +$ns_ at 35.000000 "$node_(9) setdest 162.654904 412.053873 11.634287" +$ns_ at 35.000000 "$node_(10) setdest 107.841118 465.759378 18.669978" + +$ns_ at 36.000000 "$node_(1) setdest 536.528998 504.082029 19.963517" +$ns_ at 36.000000 "$node_(2) setdest 474.403635 532.108135 6.488160" +$ns_ at 36.000000 "$node_(3) setdest 409.528015 464.468428 3.006149" +$ns_ at 36.000000 "$node_(4) setdest 484.427652 450.881008 19.296950" +$ns_ at 36.000000 "$node_(5) setdest 426.470273 532.788799 19.903788" +$ns_ at 36.000000 "$node_(6) setdest 120.932715 413.505237 13.967084" +$ns_ at 36.000000 "$node_(7) setdest 105.532349 464.813463 19.530707" +$ns_ at 36.000000 "$node_(8) setdest 39.253080 430.783080 9.790084" +$ns_ at 36.000000 "$node_(9) setdest 153.536221 421.645072 13.234104" +$ns_ at 36.000000 "$node_(10) setdest 117.666134 450.695452 17.984794" + +$ns_ at 37.000000 "$node_(1) setdest 554.428542 512.921944 19.963411" +$ns_ at 37.000000 "$node_(2) setdest 481.127335 527.610678 8.089206" +$ns_ at 37.000000 "$node_(3) setdest 414.102043 465.013680 4.606412" +$ns_ at 37.000000 "$node_(4) setdest 489.773407 469.940100 19.794597" +$ns_ at 37.000000 "$node_(5) setdest 408.058188 532.100718 18.424937" +$ns_ at 37.000000 "$node_(6) setdest 109.012095 423.192684 15.360592" +$ns_ at 37.000000 "$node_(7) setdest 85.728992 467.102452 19.935205" +$ns_ at 37.000000 "$node_(8) setdest 48.361002 437.630220 11.394629" +$ns_ at 37.000000 "$node_(9) setdest 142.102893 431.075459 14.820701" +$ns_ at 37.000000 "$node_(10) setdest 131.161133 437.935237 18.572509" + +$ns_ at 38.000000 "$node_(1) setdest 566.932229 527.655226 19.323866" +$ns_ at 38.000000 "$node_(2) setdest 490.148231 524.075412 9.688895" +$ns_ at 38.000000 "$node_(3) setdest 420.185075 466.255244 6.208443" +$ns_ at 38.000000 "$node_(4) setdest 501.252538 485.927117 19.681340" +$ns_ at 38.000000 "$node_(5) setdest 405.981429 521.845202 10.463677" +$ns_ at 38.000000 "$node_(6) setdest 91.954174 422.557957 17.069726" +$ns_ at 38.000000 "$node_(7) setdest 66.578736 472.830545 19.988581" +$ns_ at 38.000000 "$node_(8) setdest 58.379443 445.916629 13.001297" +$ns_ at 38.000000 "$node_(9) setdest 128.348746 440.069498 16.433785" +$ns_ at 38.000000 "$node_(10) setdest 139.114132 421.205939 18.523488" + +$ns_ at 39.000000 "$node_(1) setdest 567.143596 529.512240 1.869004" +$ns_ at 39.000000 "$node_(2) setdest 501.202329 521.792270 11.287418" +$ns_ at 39.000000 "$node_(3) setdest 427.677364 468.446739 7.806218" +$ns_ at 39.000000 "$node_(4) setdest 511.141012 502.780491 19.540167" +$ns_ at 39.000000 "$node_(5) setdest 413.374406 514.767835 10.234513" +$ns_ at 39.000000 "$node_(6) setdest 75.493177 413.507199 18.785117" +$ns_ at 39.000000 "$node_(7) setdest 46.764183 471.773954 19.842703" +$ns_ at 39.000000 "$node_(8) setdest 69.942011 454.838968 14.604833" +$ns_ at 39.000000 "$node_(9) setdest 112.291115 448.251876 18.022176" +$ns_ at 39.000000 "$node_(10) setdest 141.846200 402.561193 18.843852" + +$ns_ at 40.000000 "$node_(1) setdest 564.578377 527.996748 2.979440" +$ns_ at 40.000000 "$node_(2) setdest 514.059687 520.805131 12.895197" +$ns_ at 40.000000 "$node_(3) setdest 436.538030 471.609166 9.408100" +$ns_ at 40.000000 "$node_(4) setdest 519.473141 520.208352 19.317213" +$ns_ at 40.000000 "$node_(5) setdest 419.858457 504.879506 11.824634" +$ns_ at 40.000000 "$node_(6) setdest 87.235668 420.830481 13.838951" +$ns_ at 40.000000 "$node_(7) setdest 64.203274 476.552061 18.081820" +$ns_ at 40.000000 "$node_(8) setdest 84.829204 454.481993 14.891472" +$ns_ at 40.000000 "$node_(9) setdest 125.059425 443.474044 13.632954" +$ns_ at 40.000000 "$node_(10) setdest 148.729503 397.886383 8.320679" + +$ns_ at 41.000000 "$node_(1) setdest 560.539286 525.794333 4.600531" +$ns_ at 41.000000 "$node_(2) setdest 528.559240 520.724740 14.499776" +$ns_ at 41.000000 "$node_(3) setdest 446.636223 475.986259 11.006019" +$ns_ at 41.000000 "$node_(4) setdest 526.125692 538.415388 19.384339" +$ns_ at 41.000000 "$node_(5) setdest 424.189640 492.212788 13.386743" +$ns_ at 41.000000 "$node_(6) setdest 102.775617 424.456016 15.957271" +$ns_ at 41.000000 "$node_(7) setdest 83.933552 478.414079 19.817945" +$ns_ at 41.000000 "$node_(8) setdest 101.442514 452.999884 16.679290" +$ns_ at 41.000000 "$node_(9) setdest 140.551926 441.300742 15.644194" +$ns_ at 41.000000 "$node_(10) setdest 158.699125 396.791989 10.029510" + +$ns_ at 42.000000 "$node_(1) setdest 554.946328 523.113767 6.202145" +$ns_ at 42.000000 "$node_(2) setdest 544.648492 520.084739 16.101976" +$ns_ at 42.000000 "$node_(3) setdest 457.867768 481.716252 12.608743" +$ns_ at 42.000000 "$node_(4) setdest 542.996006 542.160589 17.281030" +$ns_ at 42.000000 "$node_(5) setdest 427.836410 477.619041 15.042485" +$ns_ at 42.000000 "$node_(6) setdest 120.073180 427.461833 17.556783" +$ns_ at 42.000000 "$node_(7) setdest 103.908927 479.371110 19.998288" +$ns_ at 42.000000 "$node_(8) setdest 119.693903 451.998492 18.278840" +$ns_ at 42.000000 "$node_(9) setdest 157.508841 438.167173 17.244020" +$ns_ at 42.000000 "$node_(10) setdest 170.268449 395.614996 11.629039" + +$ns_ at 43.000000 "$node_(1) setdest 548.011229 519.540767 7.801405" +$ns_ at 43.000000 "$node_(2) setdest 559.640611 513.386833 16.420280" +$ns_ at 43.000000 "$node_(3) setdest 470.540438 488.142494 14.208911" +$ns_ at 43.000000 "$node_(4) setdest 557.442321 534.605141 16.302785" +$ns_ at 43.000000 "$node_(5) setdest 432.038134 461.515754 16.642426" +$ns_ at 43.000000 "$node_(6) setdest 139.110535 429.593024 19.156274" +$ns_ at 43.000000 "$node_(7) setdest 123.907121 479.374828 19.998194" +$ns_ at 43.000000 "$node_(8) setdest 139.427933 451.544210 19.739258" +$ns_ at 43.000000 "$node_(9) setdest 176.047394 434.787992 18.844013" +$ns_ at 43.000000 "$node_(10) setdest 183.465605 394.695269 13.229166" + +$ns_ at 44.000000 "$node_(1) setdest 540.245181 514.250782 9.396566" +$ns_ at 44.000000 "$node_(2) setdest 557.197334 501.679640 11.959430" +$ns_ at 44.000000 "$node_(3) setdest 484.194340 496.104414 15.805733" +$ns_ at 44.000000 "$node_(4) setdest 569.805764 524.976564 15.670489" +$ns_ at 44.000000 "$node_(5) setdest 437.187949 444.017164 18.240648" +$ns_ at 44.000000 "$node_(6) setdest 159.082551 430.599768 19.997374" +$ns_ at 44.000000 "$node_(7) setdest 143.880972 478.393510 19.997942" +$ns_ at 44.000000 "$node_(8) setdest 159.427822 451.554805 19.999892" +$ns_ at 44.000000 "$node_(9) setdest 195.825003 432.098619 19.959623" +$ns_ at 44.000000 "$node_(10) setdest 198.232049 393.331915 14.829248" + +$ns_ at 45.000000 "$node_(1) setdest 531.522089 507.546145 11.002022" +$ns_ at 45.000000 "$node_(2) setdest 547.805553 492.435892 13.177725" +$ns_ at 45.000000 "$node_(3) setdest 499.562490 504.256506 17.396455" +$ns_ at 45.000000 "$node_(4) setdest 586.131716 520.450839 16.941632" +$ns_ at 45.000000 "$node_(5) setdest 444.245357 425.600998 19.722124" +$ns_ at 45.000000 "$node_(6) setdest 179.081213 430.697528 19.998900" +$ns_ at 45.000000 "$node_(7) setdest 163.775015 476.359693 19.997735" +$ns_ at 45.000000 "$node_(8) setdest 179.427632 451.479451 19.999952" +$ns_ at 45.000000 "$node_(9) setdest 215.744509 430.326634 19.998166" +$ns_ at 45.000000 "$node_(10) setdest 214.511122 391.127338 16.427671" + +$ns_ at 46.000000 "$node_(1) setdest 521.224593 500.285353 12.599902" +$ns_ at 46.000000 "$node_(2) setdest 537.140911 482.188971 14.789658" +$ns_ at 46.000000 "$node_(3) setdest 517.239989 511.230267 19.003350" +$ns_ at 46.000000 "$node_(4) setdest 596.737679 531.230366 15.122323" +$ns_ at 46.000000 "$node_(5) setdest 450.567683 406.626744 19.999853" +$ns_ at 46.000000 "$node_(6) setdest 199.077088 430.293213 19.999963" +$ns_ at 46.000000 "$node_(7) setdest 183.547456 473.359299 19.998794" +$ns_ at 46.000000 "$node_(8) setdest 199.426772 451.293967 19.999999" +$ns_ at 46.000000 "$node_(9) setdest 235.727172 429.545275 19.997933" +$ns_ at 46.000000 "$node_(10) setdest 232.313482 388.287908 18.027380" + +$ns_ at 47.000000 "$node_(1) setdest 509.132728 492.839445 14.200519" +$ns_ at 47.000000 "$node_(2) setdest 529.956513 467.566241 16.292323" +$ns_ at 47.000000 "$node_(3) setdest 530.443547 512.706866 13.285868" +$ns_ at 47.000000 "$node_(4) setdest 593.888061 544.610217 13.679939" +$ns_ at 47.000000 "$node_(5) setdest 455.365546 387.217155 19.993791" +$ns_ at 47.000000 "$node_(6) setdest 219.066969 429.662345 19.999833" +$ns_ at 47.000000 "$node_(7) setdest 203.164862 469.479130 19.997458" +$ns_ at 47.000000 "$node_(8) setdest 219.417361 451.789967 19.996742" +$ns_ at 47.000000 "$node_(9) setdest 255.709496 428.728816 19.998997" +$ns_ at 47.000000 "$node_(10) setdest 251.796297 386.439234 19.570326" + +$ns_ at 48.000000 "$node_(1) setdest 494.811654 486.211110 15.780621" +$ns_ at 48.000000 "$node_(2) setdest 523.405915 450.824130 17.978004" +$ns_ at 48.000000 "$node_(3) setdest 527.369831 511.982215 3.157982" +$ns_ at 48.000000 "$node_(4) setdest 596.143329 540.896760 4.344652" +$ns_ at 48.000000 "$node_(5) setdest 452.127739 368.087344 19.401882" +$ns_ at 48.000000 "$node_(6) setdest 239.040183 428.633694 19.999686" +$ns_ at 48.000000 "$node_(7) setdest 222.507492 464.407083 19.996575" +$ns_ at 48.000000 "$node_(8) setdest 239.319828 453.699710 19.993882" +$ns_ at 48.000000 "$node_(9) setdest 275.658454 427.303064 19.999843" +$ns_ at 48.000000 "$node_(10) setdest 271.767272 385.393628 19.998328" + +$ns_ at 49.000000 "$node_(1) setdest 477.936814 482.029186 17.385301" +$ns_ at 49.000000 "$node_(2) setdest 511.589591 435.283606 19.522638" +$ns_ at 49.000000 "$node_(3) setdest 522.811495 510.411820 4.821262" +$ns_ at 49.000000 "$node_(4) setdest 596.364469 534.992612 5.908287" +$ns_ at 49.000000 "$node_(5) setdest 441.999585 365.539662 10.443668" +$ns_ at 49.000000 "$node_(6) setdest 259.000403 427.373742 19.999946" +$ns_ at 49.000000 "$node_(7) setdest 241.427668 457.938519 19.995384" +$ns_ at 49.000000 "$node_(8) setdest 258.949550 457.488811 19.992080" +$ns_ at 49.000000 "$node_(9) setdest 295.601472 425.794473 19.999995" +$ns_ at 49.000000 "$node_(10) setdest 291.764641 385.099501 19.999532" + +$ns_ at 50.000000 "$node_(1) setdest 460.251786 475.213570 18.952911" +$ns_ at 50.000000 "$node_(2) setdest 494.572859 425.450831 19.653312" +$ns_ at 50.000000 "$node_(3) setdest 516.437962 509.551212 6.431374" +$ns_ at 50.000000 "$node_(4) setdest 595.905073 527.487889 7.518771" +$ns_ at 50.000000 "$node_(5) setdest 435.704871 370.756310 8.175380" +$ns_ at 50.000000 "$node_(6) setdest 278.984020 426.603522 19.998455" +$ns_ at 50.000000 "$node_(7) setdest 259.940900 450.373613 19.999189" +$ns_ at 50.000000 "$node_(8) setdest 278.151718 463.062180 19.994642" +$ns_ at 50.000000 "$node_(9) setdest 315.561187 424.532692 19.999558" +$ns_ at 50.000000 "$node_(10) setdest 311.760339 384.687257 19.999947" + +$ns_ at 51.000000 "$node_(1) setdest 445.750485 461.773203 19.771980" +$ns_ at 51.000000 "$node_(2) setdest 477.062237 431.160008 18.417833" +$ns_ at 51.000000 "$node_(3) setdest 508.417207 509.293695 8.024888" +$ns_ at 51.000000 "$node_(4) setdest 596.138322 518.372789 9.118084" +$ns_ at 51.000000 "$node_(5) setdest 427.847555 376.601237 9.792885" +$ns_ at 51.000000 "$node_(6) setdest 298.977580 426.115506 19.999515" +$ns_ at 51.000000 "$node_(7) setdest 278.425975 442.746479 19.996779" +$ns_ at 51.000000 "$node_(8) setdest 297.021088 469.690556 19.999713" +$ns_ at 51.000000 "$node_(9) setdest 335.550946 423.983930 19.997290" +$ns_ at 51.000000 "$node_(10) setdest 331.755079 384.949165 19.996455" + +$ns_ at 52.000000 "$node_(1) setdest 440.756113 442.613683 19.799772" +$ns_ at 52.000000 "$node_(2) setdest 463.491729 442.499863 17.684767" +$ns_ at 52.000000 "$node_(3) setdest 498.797256 509.801163 9.633327" +$ns_ at 52.000000 "$node_(4) setdest 595.872849 507.661271 10.714807" +$ns_ at 52.000000 "$node_(5) setdest 421.543150 385.787102 11.141168" +$ns_ at 52.000000 "$node_(6) setdest 318.966418 425.467482 19.999339" +$ns_ at 52.000000 "$node_(7) setdest 297.432455 436.535728 19.995493" +$ns_ at 52.000000 "$node_(8) setdest 316.154504 475.504807 19.997327" +$ns_ at 52.000000 "$node_(9) setdest 355.519975 424.976200 19.993668" +$ns_ at 52.000000 "$node_(10) setdest 351.681172 386.619992 19.996020" + +$ns_ at 53.000000 "$node_(1) setdest 439.775796 422.648723 19.989013" +$ns_ at 53.000000 "$node_(2) setdest 454.163430 457.931863 18.032299" +$ns_ at 53.000000 "$node_(3) setdest 487.566288 509.968935 11.232221" +$ns_ at 53.000000 "$node_(4) setdest 593.366650 495.626354 12.293098" +$ns_ at 53.000000 "$node_(5) setdest 426.618346 394.729658 10.282360" +$ns_ at 53.000000 "$node_(6) setdest 338.963772 425.552181 19.997533" +$ns_ at 53.000000 "$node_(7) setdest 316.854629 431.777866 19.996452" +$ns_ at 53.000000 "$node_(8) setdest 335.626595 480.039122 19.993058" +$ns_ at 53.000000 "$node_(9) setdest 375.323130 427.689354 19.988150" +$ns_ at 53.000000 "$node_(10) setdest 371.379909 390.033338 19.992278" + +$ns_ at 54.000000 "$node_(1) setdest 445.215882 403.632184 19.779365" +$ns_ at 54.000000 "$node_(2) setdest 454.059564 475.725275 17.793715" +$ns_ at 54.000000 "$node_(3) setdest 474.763417 509.199397 12.825977" +$ns_ at 54.000000 "$node_(4) setdest 586.634251 483.521630 13.850977" +$ns_ at 54.000000 "$node_(5) setdest 434.740699 390.416312 9.196607" +$ns_ at 54.000000 "$node_(6) setdest 358.922646 426.804947 19.998152" +$ns_ at 54.000000 "$node_(7) setdest 336.584130 428.536703 19.993958" +$ns_ at 54.000000 "$node_(8) setdest 355.462297 482.552656 19.994323" +$ns_ at 54.000000 "$node_(9) setdest 394.479217 433.330580 19.969455" +$ns_ at 54.000000 "$node_(10) setdest 390.644077 395.375055 19.991051" + +$ns_ at 55.000000 "$node_(1) setdest 453.489395 385.467485 19.960143" +$ns_ at 55.000000 "$node_(2) setdest 462.180023 491.875553 18.076873" +$ns_ at 55.000000 "$node_(3) setdest 460.781091 505.762029 14.398644" +$ns_ at 55.000000 "$node_(4) setdest 575.183381 473.135665 15.459324" +$ns_ at 55.000000 "$node_(5) setdest 443.385083 383.339482 11.171700" +$ns_ at 55.000000 "$node_(6) setdest 378.818295 428.840950 19.999553" +$ns_ at 55.000000 "$node_(7) setdest 356.438978 426.133796 19.999724" +$ns_ at 55.000000 "$node_(8) setdest 375.442154 483.043104 19.985875" +$ns_ at 55.000000 "$node_(9) setdest 411.603795 443.510768 19.922032" +$ns_ at 55.000000 "$node_(10) setdest 409.167270 402.886591 19.988293" + +$ns_ at 56.000000 "$node_(1) setdest 459.358776 366.350314 19.997896" +$ns_ at 56.000000 "$node_(2) setdest 474.439207 506.513884 19.093672" +$ns_ at 56.000000 "$node_(3) setdest 448.331346 496.551801 15.486266" +$ns_ at 56.000000 "$node_(4) setdest 559.796949 465.725065 17.078034" +$ns_ at 56.000000 "$node_(5) setdest 453.233562 375.205933 12.772907" +$ns_ at 56.000000 "$node_(6) setdest 398.640054 431.491358 19.998170" +$ns_ at 56.000000 "$node_(7) setdest 376.341269 424.293425 19.987200" +$ns_ at 56.000000 "$node_(8) setdest 395.289271 480.727854 19.981702" +$ns_ at 56.000000 "$node_(9) setdest 424.686463 458.541108 19.926549" +$ns_ at 56.000000 "$node_(10) setdest 426.588462 412.682524 19.986450" + +$ns_ at 57.000000 "$node_(1) setdest 474.147494 357.589355 17.188968" +$ns_ at 57.000000 "$node_(2) setdest 487.397435 521.211648 19.594386" +$ns_ at 57.000000 "$node_(3) setdest 449.175044 489.763733 6.840299" +$ns_ at 57.000000 "$node_(4) setdest 541.945847 460.100331 18.716289" +$ns_ at 57.000000 "$node_(5) setdest 461.910819 364.190126 14.022938" +$ns_ at 57.000000 "$node_(6) setdest 418.176323 435.711193 19.986816" +$ns_ at 57.000000 "$node_(7) setdest 395.624998 428.517124 19.740868" +$ns_ at 57.000000 "$node_(8) setdest 414.491546 475.216368 19.977584" +$ns_ at 57.000000 "$node_(9) setdest 432.332273 476.914703 19.900939" +$ns_ at 57.000000 "$node_(10) setdest 442.302058 425.016869 19.976315" + +$ns_ at 58.000000 "$node_(1) setdest 481.754901 367.368742 12.389877" +$ns_ at 58.000000 "$node_(2) setdest 501.253150 535.247087 19.722434" +$ns_ at 58.000000 "$node_(3) setdest 452.555239 490.811571 3.538882" +$ns_ at 58.000000 "$node_(4) setdest 523.200618 453.356899 19.921282" +$ns_ at 58.000000 "$node_(5) setdest 462.037992 362.225513 1.968725" +$ns_ at 58.000000 "$node_(6) setdest 436.692511 443.161055 19.958699" +$ns_ at 58.000000 "$node_(7) setdest 407.232993 444.170234 19.487570" +$ns_ at 58.000000 "$node_(8) setdest 432.402128 466.376774 19.973166" +$ns_ at 58.000000 "$node_(9) setdest 433.371712 496.829333 19.941738" +$ns_ at 58.000000 "$node_(10) setdest 455.460442 440.041839 19.972301" + +$ns_ at 59.000000 "$node_(1) setdest 490.840101 378.013714 13.994866" +$ns_ at 59.000000 "$node_(2) setdest 517.254096 544.656606 18.562578" +$ns_ at 59.000000 "$node_(3) setdest 456.805761 493.906270 5.257765" +$ns_ at 59.000000 "$node_(4) setdest 505.296597 444.480311 19.983688" +$ns_ at 59.000000 "$node_(5) setdest 459.985759 364.047842 2.744548" +$ns_ at 59.000000 "$node_(6) setdest 452.558464 455.227354 19.932988" +$ns_ at 59.000000 "$node_(7) setdest 405.781902 462.093611 17.982022" +$ns_ at 59.000000 "$node_(8) setdest 448.131072 454.084488 19.962465" +$ns_ at 59.000000 "$node_(9) setdest 431.643951 516.751552 19.996999" +$ns_ at 59.000000 "$node_(10) setdest 465.450760 457.326282 19.963928" + +$ns_ at 60.000000 "$node_(1) setdest 498.659527 391.489267 15.579922" +$ns_ at 60.000000 "$node_(2) setdest 534.755136 543.334674 17.550895" +$ns_ at 60.000000 "$node_(3) setdest 462.401977 497.870630 6.858118" +$ns_ at 60.000000 "$node_(4) setdest 488.791604 433.220713 19.979823" +$ns_ at 60.000000 "$node_(5) setdest 456.842494 367.045729 4.343667" +$ns_ at 60.000000 "$node_(6) setdest 465.331500 470.591333 19.980047" +$ns_ at 60.000000 "$node_(7) setdest 408.815556 476.318798 14.545068" +$ns_ at 60.000000 "$node_(8) setdest 460.493008 438.434407 19.943483" +$ns_ at 60.000000 "$node_(9) setdest 438.396275 534.407383 18.902969" +$ns_ at 60.000000 "$node_(10) setdest 472.292912 476.109195 19.990319" + +$ns_ at 61.000000 "$node_(1) setdest 506.422494 406.848972 17.210003" +$ns_ at 61.000000 "$node_(2) setdest 550.122906 534.408750 17.771901" +$ns_ at 61.000000 "$node_(3) setdest 469.441169 502.553605 8.454613" +$ns_ at 61.000000 "$node_(4) setdest 473.810761 419.970774 19.999664" +$ns_ at 61.000000 "$node_(5) setdest 452.869841 371.468100 5.944690" +$ns_ at 61.000000 "$node_(6) setdest 475.369253 487.873233 19.985509" +$ns_ at 61.000000 "$node_(7) setdest 420.177106 474.634595 11.485703" +$ns_ at 61.000000 "$node_(8) setdest 468.519800 420.146652 19.971764" +$ns_ at 61.000000 "$node_(9) setdest 456.064353 537.336055 17.909162" +$ns_ at 61.000000 "$node_(10) setdest 480.398446 494.324173 19.937028" + +$ns_ at 62.000000 "$node_(1) setdest 514.243671 423.949759 18.804460" +$ns_ at 62.000000 "$node_(2) setdest 558.597008 518.822165 17.741252" +$ns_ at 62.000000 "$node_(3) setdest 478.289486 507.332608 10.056420" +$ns_ at 62.000000 "$node_(4) setdest 459.228341 406.299144 19.989007" +$ns_ at 62.000000 "$node_(5) setdest 448.065246 377.284900 7.544488" +$ns_ at 62.000000 "$node_(6) setdest 483.292150 506.217705 19.982291" +$ns_ at 62.000000 "$node_(7) setdest 431.806592 467.919195 13.429130" +$ns_ at 62.000000 "$node_(8) setdest 473.157337 400.709492 19.982741" +$ns_ at 62.000000 "$node_(9) setdest 471.569985 531.759731 16.477864" +$ns_ at 62.000000 "$node_(10) setdest 493.533931 509.329068 19.942113" + +$ns_ at 63.000000 "$node_(1) setdest 526.606177 439.546625 19.902105" +$ns_ at 63.000000 "$node_(2) setdest 563.865355 500.625921 18.943568" +$ns_ at 63.000000 "$node_(3) setdest 488.865584 512.231308 11.655519" +$ns_ at 63.000000 "$node_(4) setdest 443.896167 393.463964 19.995435" +$ns_ at 63.000000 "$node_(5) setdest 443.134296 384.956898 9.119968" +$ns_ at 63.000000 "$node_(6) setdest 483.704532 525.909424 19.696036" +$ns_ at 63.000000 "$node_(7) setdest 441.488756 456.383377 15.060524" +$ns_ at 63.000000 "$node_(8) setdest 471.609423 381.023538 19.746717" +$ns_ at 63.000000 "$node_(9) setdest 484.411309 520.929706 16.798483" +$ns_ at 63.000000 "$node_(10) setdest 509.195143 521.746549 19.986681" + +$ns_ at 64.000000 "$node_(1) setdest 540.433816 453.956062 19.970865" +$ns_ at 64.000000 "$node_(2) setdest 568.124533 481.658093 19.440142" +$ns_ at 64.000000 "$node_(3) setdest 501.350038 516.664198 13.248098" +$ns_ at 64.000000 "$node_(4) setdest 433.455434 376.647829 19.793718" +$ns_ at 64.000000 "$node_(5) setdest 440.254466 395.258128 10.696204" +$ns_ at 64.000000 "$node_(6) setdest 469.652755 537.742107 18.370216" +$ns_ at 64.000000 "$node_(7) setdest 449.511886 441.764181 16.676076" +$ns_ at 64.000000 "$node_(8) setdest 457.550576 367.766860 19.323320" +$ns_ at 64.000000 "$node_(9) setdest 498.202162 508.754862 18.396045" +$ns_ at 64.000000 "$node_(10) setdest 527.839755 528.576108 19.856093" + +$ns_ at 65.000000 "$node_(1) setdest 536.004799 446.599409 8.586997" +$ns_ at 65.000000 "$node_(2) setdest 564.983309 461.913673 19.992735" +$ns_ at 65.000000 "$node_(3) setdest 500.747238 516.306833 0.700769" +$ns_ at 65.000000 "$node_(4) setdest 438.545894 357.691580 19.627842" +$ns_ at 65.000000 "$node_(5) setdest 441.586829 385.431591 9.916452" +$ns_ at 65.000000 "$node_(6) setdest 457.118274 526.488725 16.844935" +$ns_ at 65.000000 "$node_(7) setdest 457.806607 425.470338 18.283646" +$ns_ at 65.000000 "$node_(8) setdest 439.123220 364.402269 18.732003" +$ns_ at 65.000000 "$node_(9) setdest 510.416367 493.167415 19.802912" +$ns_ at 65.000000 "$node_(10) setdest 547.813104 529.300629 19.986485" + +$ns_ at 66.000000 "$node_(1) setdest 535.511187 436.310624 10.300619" +$ns_ at 66.000000 "$node_(2) setdest 562.492130 442.069901 19.999531" +$ns_ at 66.000000 "$node_(3) setdest 500.517193 514.277017 2.042810" +$ns_ at 66.000000 "$node_(4) setdest 445.642038 338.993091 19.999719" +$ns_ at 66.000000 "$node_(5) setdest 444.691682 374.116179 11.733655" +$ns_ at 66.000000 "$node_(6) setdest 455.508240 510.110942 16.456730" +$ns_ at 66.000000 "$node_(7) setdest 468.428808 408.858654 19.717485" +$ns_ at 66.000000 "$node_(8) setdest 419.931073 364.342807 19.192239" +$ns_ at 66.000000 "$node_(9) setdest 524.816169 479.714481 19.706235" +$ns_ at 66.000000 "$node_(10) setdest 567.683020 530.920241 19.935814" + +$ns_ at 67.000000 "$node_(1) setdest 534.977282 424.421906 11.900701" +$ns_ at 67.000000 "$node_(2) setdest 560.569724 422.162987 19.999522" +$ns_ at 67.000000 "$node_(3) setdest 500.250852 510.644079 3.642688" +$ns_ at 67.000000 "$node_(4) setdest 452.955902 320.378413 19.999972" +$ns_ at 67.000000 "$node_(5) setdest 448.073535 361.217857 13.334303" +$ns_ at 67.000000 "$node_(6) setdest 451.399100 495.313815 15.357083" +$ns_ at 67.000000 "$node_(7) setdest 481.733772 393.932468 19.995327" +$ns_ at 67.000000 "$node_(8) setdest 408.322022 365.329378 11.650896" +$ns_ at 67.000000 "$node_(9) setdest 539.158447 466.290889 19.644179" +$ns_ at 67.000000 "$node_(10) setdest 586.678542 530.162271 19.010638" + +$ns_ at 68.000000 "$node_(1) setdest 534.442950 410.931909 13.500575" +$ns_ at 68.000000 "$node_(2) setdest 558.901130 402.232965 19.999749" +$ns_ at 68.000000 "$node_(3) setdest 500.103546 505.403612 5.242537" +$ns_ at 68.000000 "$node_(4) setdest 460.080618 301.691006 19.999519" +$ns_ at 68.000000 "$node_(5) setdest 452.196525 346.864412 14.933869" +$ns_ at 68.000000 "$node_(6) setdest 438.416880 485.903560 16.034056" +$ns_ at 68.000000 "$node_(7) setdest 492.545093 377.214664 19.909034" +$ns_ at 68.000000 "$node_(8) setdest 416.839668 364.609333 8.548026" +$ns_ at 68.000000 "$node_(9) setdest 555.040544 454.694707 19.665006" +$ns_ at 68.000000 "$node_(10) setdest 586.825175 529.031950 1.139792" + +$ns_ at 69.000000 "$node_(1) setdest 534.282344 395.832941 15.099822" +$ns_ at 69.000000 "$node_(2) setdest 557.329589 382.294855 19.999950" +$ns_ at 69.000000 "$node_(3) setdest 500.199783 498.561725 6.842563" +$ns_ at 69.000000 "$node_(4) setdest 466.364502 282.705492 19.998423" +$ns_ at 69.000000 "$node_(5) setdest 457.330300 331.148052 16.533591" +$ns_ at 69.000000 "$node_(6) setdest 422.274174 478.513804 17.753744" +$ns_ at 69.000000 "$node_(7) setdest 503.862909 361.836359 19.094115" +$ns_ at 69.000000 "$node_(8) setdest 427.020554 367.160258 10.495602" +$ns_ at 69.000000 "$node_(9) setdest 571.735283 444.352269 19.638745" +$ns_ at 69.000000 "$node_(10) setdest 585.455531 526.966140 2.478608" + +$ns_ at 70.000000 "$node_(1) setdest 534.838474 379.142686 16.699517" +$ns_ at 70.000000 "$node_(2) setdest 555.525020 362.376742 19.999692" +$ns_ at 70.000000 "$node_(3) setdest 500.519465 490.124854 8.442926" +$ns_ at 70.000000 "$node_(4) setdest 471.472022 263.373599 19.995221" +$ns_ at 70.000000 "$node_(5) setdest 463.120393 313.962864 18.134383" +$ns_ at 70.000000 "$node_(6) setdest 408.213514 466.311334 18.617262" +$ns_ at 70.000000 "$node_(7) setdest 507.696506 363.297112 4.102471" +$ns_ at 70.000000 "$node_(8) setdest 439.013807 368.678079 12.088916" +$ns_ at 70.000000 "$node_(9) setdest 589.464572 437.178961 19.125482" +$ns_ at 70.000000 "$node_(10) setdest 583.204839 523.564669 4.078679" + +$ns_ at 71.000000 "$node_(1) setdest 536.112282 360.887514 18.299561" +$ns_ at 71.000000 "$node_(2) setdest 553.523133 342.477773 19.999413" +$ns_ at 71.000000 "$node_(3) setdest 501.048110 480.096108 10.042669" +$ns_ at 71.000000 "$node_(4) setdest 475.511485 243.786853 19.998948" +$ns_ at 71.000000 "$node_(5) setdest 469.394485 295.340571 19.650802" +$ns_ at 71.000000 "$node_(6) setdest 409.735707 449.316228 17.063139" +$ns_ at 71.000000 "$node_(7) setdest 509.753088 368.161673 5.281428" +$ns_ at 71.000000 "$node_(8) setdest 452.539013 366.922685 13.638644" +$ns_ at 71.000000 "$node_(9) setdest 593.411094 420.224329 17.407888" +$ns_ at 71.000000 "$node_(10) setdest 580.200954 518.748793 5.675913" + +$ns_ at 72.000000 "$node_(1) setdest 538.243058 341.252788 19.750004" +$ns_ at 72.000000 "$node_(2) setdest 552.067476 322.531052 19.999766" +$ns_ at 72.000000 "$node_(3) setdest 502.043198 468.496468 11.642244" +$ns_ at 72.000000 "$node_(4) setdest 478.483272 224.011916 19.996990" +$ns_ at 72.000000 "$node_(5) setdest 475.540955 276.308901 19.999589" +$ns_ at 72.000000 "$node_(6) setdest 417.775607 434.844392 16.555181" +$ns_ at 72.000000 "$node_(7) setdest 510.902737 374.952179 6.887138" +$ns_ at 72.000000 "$node_(8) setdest 467.088300 362.216077 15.291629" +$ns_ at 72.000000 "$node_(9) setdest 588.386379 404.792399 16.229363" +$ns_ at 72.000000 "$node_(10) setdest 576.937804 512.244383 7.277053" + +$ns_ at 73.000000 "$node_(1) setdest 540.337760 321.362851 19.999934" +$ns_ at 73.000000 "$node_(2) setdest 550.508182 302.593413 19.998521" +$ns_ at 73.000000 "$node_(3) setdest 503.738640 455.363500 13.241955" +$ns_ at 73.000000 "$node_(4) setdest 480.607929 204.125582 19.999511" +$ns_ at 73.000000 "$node_(5) setdest 482.491192 257.559586 19.996064" +$ns_ at 73.000000 "$node_(6) setdest 424.060892 418.184577 17.806018" +$ns_ at 73.000000 "$node_(7) setdest 511.222289 383.432144 8.485983" +$ns_ at 73.000000 "$node_(8) setdest 483.575039 358.506602 16.898898" +$ns_ at 73.000000 "$node_(9) setdest 581.016072 390.553508 16.033323" +$ns_ at 73.000000 "$node_(10) setdest 573.633501 504.005362 8.876930" + +$ns_ at 74.000000 "$node_(1) setdest 542.640833 301.496124 19.999775" +$ns_ at 74.000000 "$node_(2) setdest 547.211487 282.875900 19.991211" +$ns_ at 74.000000 "$node_(3) setdest 506.228546 440.731667 14.842176" +$ns_ at 74.000000 "$node_(4) setdest 483.949062 184.414401 19.992345" +$ns_ at 74.000000 "$node_(5) setdest 490.772371 239.358717 19.996239" +$ns_ at 74.000000 "$node_(6) setdest 428.971719 399.458697 19.359101" +$ns_ at 74.000000 "$node_(7) setdest 510.977845 393.521870 10.092687" +$ns_ at 74.000000 "$node_(8) setdest 501.649850 360.807649 18.220692" +$ns_ at 74.000000 "$node_(9) setdest 574.169947 374.218269 17.711845" +$ns_ at 74.000000 "$node_(10) setdest 569.666315 494.308359 10.477138" + +$ns_ at 75.000000 "$node_(1) setdest 545.286982 281.676690 19.995301" +$ns_ at 75.000000 "$node_(2) setdest 541.579801 263.698851 19.986873" +$ns_ at 75.000000 "$node_(3) setdest 509.521933 424.622555 16.442319" +$ns_ at 75.000000 "$node_(4) setdest 489.316472 165.158057 19.990394" +$ns_ at 75.000000 "$node_(5) setdest 499.170013 221.211394 19.996143" +$ns_ at 75.000000 "$node_(6) setdest 433.995690 380.248856 19.855938" +$ns_ at 75.000000 "$node_(7) setdest 509.830491 405.143663 11.678292" +$ns_ at 75.000000 "$node_(8) setdest 514.956828 375.067165 19.504088" +$ns_ at 75.000000 "$node_(9) setdest 563.225009 358.537277 19.122897" +$ns_ at 75.000000 "$node_(10) setdest 564.059199 483.616863 12.072607" + +$ns_ at 76.000000 "$node_(1) setdest 550.377288 262.356101 19.979900" +$ns_ at 76.000000 "$node_(2) setdest 533.540653 245.403103 19.984051" +$ns_ at 76.000000 "$node_(3) setdest 513.154562 406.949557 18.042473" +$ns_ at 76.000000 "$node_(4) setdest 496.890661 146.658823 19.989748" +$ns_ at 76.000000 "$node_(5) setdest 507.041942 202.829163 19.996842" +$ns_ at 76.000000 "$node_(6) setdest 441.406995 362.103882 19.600192" +$ns_ at 76.000000 "$node_(7) setdest 506.263148 417.944045 13.288180" +$ns_ at 76.000000 "$node_(8) setdest 523.622151 393.089514 19.997322" +$ns_ at 76.000000 "$node_(9) setdest 562.694870 356.369564 2.231598" +$ns_ at 76.000000 "$node_(10) setdest 556.855146 471.989381 13.678331" + +$ns_ at 77.000000 "$node_(1) setdest 559.088417 244.398391 19.959036" +$ns_ at 77.000000 "$node_(2) setdest 521.840951 229.244414 19.949593" +$ns_ at 77.000000 "$node_(3) setdest 516.301733 387.623702 19.580433" +$ns_ at 77.000000 "$node_(4) setdest 505.320440 128.522356 19.999815" +$ns_ at 77.000000 "$node_(5) setdest 515.254078 184.596382 19.996837" +$ns_ at 77.000000 "$node_(6) setdest 437.257639 351.072545 11.785905" +$ns_ at 77.000000 "$node_(7) setdest 500.846086 431.809163 14.885767" +$ns_ at 77.000000 "$node_(8) setdest 529.413794 412.094108 19.867504" +$ns_ at 77.000000 "$node_(9) setdest 565.572234 358.356299 3.496619" +$ns_ at 77.000000 "$node_(10) setdest 548.808724 459.002515 15.277551" + +$ns_ at 78.000000 "$node_(1) setdest 568.615890 226.866730 19.953243" +$ns_ at 78.000000 "$node_(2) setdest 506.765408 216.107743 19.996103" +$ns_ at 78.000000 "$node_(3) setdest 518.586099 367.756661 19.997941" +$ns_ at 78.000000 "$node_(4) setdest 511.394728 109.548785 19.922183" +$ns_ at 78.000000 "$node_(5) setdest 521.978222 165.767794 19.993245" +$ns_ at 78.000000 "$node_(6) setdest 429.959797 352.164602 7.379098" +$ns_ at 78.000000 "$node_(7) setdest 494.140339 446.876872 16.492510" +$ns_ at 78.000000 "$node_(8) setdest 525.963760 430.106023 18.339351" +$ns_ at 78.000000 "$node_(9) setdest 569.000240 362.124933 5.094490" +$ns_ at 78.000000 "$node_(10) setdest 540.470647 444.327845 16.878077" + +$ns_ at 79.000000 "$node_(1) setdest 574.185687 207.679959 19.978859" +$ns_ at 79.000000 "$node_(2) setdest 491.733402 202.925804 19.993117" +$ns_ at 79.000000 "$node_(3) setdest 519.783067 347.795031 19.997485" +$ns_ at 79.000000 "$node_(4) setdest 508.990521 89.908093 19.787293" +$ns_ at 79.000000 "$node_(5) setdest 526.722730 146.349523 19.989487" +$ns_ at 79.000000 "$node_(6) setdest 421.402925 354.646309 8.909485" +$ns_ at 79.000000 "$node_(7) setdest 484.722595 462.296802 18.068430" +$ns_ at 79.000000 "$node_(8) setdest 513.980626 443.368125 17.873971" +$ns_ at 79.000000 "$node_(9) setdest 572.479374 367.825573 6.678447" +$ns_ at 79.000000 "$node_(10) setdest 529.744275 429.315243 18.450834" + +$ns_ at 80.000000 "$node_(1) setdest 576.539904 187.859407 19.959875" +$ns_ at 80.000000 "$node_(2) setdest 480.207033 186.703672 19.900119" +$ns_ at 80.000000 "$node_(3) setdest 519.812887 327.797852 19.997201" +$ns_ at 80.000000 "$node_(4) setdest 497.292409 73.848971 19.868096" +$ns_ at 80.000000 "$node_(5) setdest 528.886672 126.481962 19.985060" +$ns_ at 80.000000 "$node_(6) setdest 415.020974 363.015006 10.524466" +$ns_ at 80.000000 "$node_(7) setdest 471.817545 477.042190 19.595070" +$ns_ at 80.000000 "$node_(8) setdest 503.184441 458.887502 18.905255" +$ns_ at 80.000000 "$node_(9) setdest 575.661628 375.491501 8.300193" +$ns_ at 80.000000 "$node_(10) setdest 514.499292 416.740217 19.762106" + +$ns_ at 81.000000 "$node_(1) setdest 574.626392 167.968199 19.983034" +$ns_ at 81.000000 "$node_(2) setdest 475.821624 167.311287 19.882063" +$ns_ at 81.000000 "$node_(3) setdest 518.646194 307.835016 19.996899" +$ns_ at 81.000000 "$node_(4) setdest 483.578324 59.304461 19.990471" +$ns_ at 81.000000 "$node_(5) setdest 527.651007 106.553198 19.967035" +$ns_ at 81.000000 "$node_(6) setdest 410.440591 374.312692 12.190882" +$ns_ at 81.000000 "$node_(7) setdest 456.292988 489.616829 19.978324" +$ns_ at 81.000000 "$node_(8) setdest 498.005915 477.169448 19.001228" +$ns_ at 81.000000 "$node_(9) setdest 579.725346 384.508368 9.890283" +$ns_ at 81.000000 "$node_(10) setdest 495.634540 410.515884 19.865074" + +$ns_ at 82.000000 "$node_(1) setdest 573.744222 148.036265 19.951446" +$ns_ at 82.000000 "$node_(2) setdest 474.558082 147.369780 19.981497" +$ns_ at 82.000000 "$node_(3) setdest 516.187480 287.990063 19.996686" +$ns_ at 82.000000 "$node_(4) setdest 474.515345 41.610136 19.880309" +$ns_ at 82.000000 "$node_(5) setdest 522.091375 87.379602 19.963374" +$ns_ at 82.000000 "$node_(6) setdest 414.780703 386.764139 13.186170" +$ns_ at 82.000000 "$node_(7) setdest 438.763875 499.134151 19.946158" +$ns_ at 82.000000 "$node_(8) setdest 500.792450 494.938482 17.986199" +$ns_ at 82.000000 "$node_(9) setdest 588.726105 391.049918 11.126794" +$ns_ at 82.000000 "$node_(10) setdest 475.806091 412.296842 19.908270" + +$ns_ at 83.000000 "$node_(1) setdest 577.404142 128.397041 19.977341" +$ns_ at 83.000000 "$node_(2) setdest 471.772322 127.583434 19.981491" +$ns_ at 83.000000 "$node_(3) setdest 512.431069 268.349770 19.996293" +$ns_ at 83.000000 "$node_(4) setdest 467.791067 22.805362 19.970865" +$ns_ at 83.000000 "$node_(5) setdest 513.352198 69.412545 19.979699" +$ns_ at 83.000000 "$node_(6) setdest 426.772346 396.441652 15.409535" +$ns_ at 83.000000 "$node_(7) setdest 419.593750 498.212291 19.192278" +$ns_ at 83.000000 "$node_(8) setdest 513.064464 506.922013 17.152474" +$ns_ at 83.000000 "$node_(9) setdest 594.729903 387.107313 7.182599" +$ns_ at 83.000000 "$node_(10) setdest 456.101092 415.641689 19.986870" + +$ns_ at 84.000000 "$node_(1) setdest 583.213841 109.262849 19.996747" +$ns_ at 84.000000 "$node_(2) setdest 476.419501 108.372979 19.764560" +$ns_ at 84.000000 "$node_(3) setdest 507.266385 249.033080 19.995211" +$ns_ at 84.000000 "$node_(4) setdest 462.492387 11.625346 12.372096" +$ns_ at 84.000000 "$node_(5) setdest 502.089366 52.902858 19.985523" +$ns_ at 84.000000 "$node_(6) setdest 437.511332 409.573265 16.963640" +$ns_ at 84.000000 "$node_(7) setdest 412.014189 481.555847 18.299914" +$ns_ at 84.000000 "$node_(8) setdest 526.654692 519.163066 18.290371" +$ns_ at 84.000000 "$node_(9) setdest 592.714197 381.218901 6.223863" +$ns_ at 84.000000 "$node_(10) setdest 436.259652 418.153011 19.999737" + +$ns_ at 85.000000 "$node_(1) setdest 587.867212 89.874667 19.938793" +$ns_ at 85.000000 "$node_(2) setdest 489.338727 93.291200 19.858662" +$ns_ at 85.000000 "$node_(3) setdest 500.466087 230.231287 19.993786" +$ns_ at 85.000000 "$node_(4) setdest 463.199929 17.989912 6.403773" +$ns_ at 85.000000 "$node_(5) setdest 487.155522 39.734993 19.910107" +$ns_ at 85.000000 "$node_(6) setdest 443.956620 426.937800 18.522117" +$ns_ at 85.000000 "$node_(7) setdest 404.982373 466.107830 16.973145" +$ns_ at 85.000000 "$node_(8) setdest 537.501281 535.276226 19.423759" +$ns_ at 85.000000 "$node_(9) setdest 588.601285 374.648766 7.751304" +$ns_ at 85.000000 "$node_(10) setdest 417.844644 423.934655 19.301293" + +$ns_ at 86.000000 "$node_(1) setdest 583.707241 70.590453 19.727804" +$ns_ at 86.000000 "$node_(2) setdest 507.837671 86.031211 19.872553" +$ns_ at 86.000000 "$node_(3) setdest 492.487335 211.892008 19.999741" +$ns_ at 86.000000 "$node_(4) setdest 460.684485 25.836346 8.239780" +$ns_ at 86.000000 "$node_(5) setdest 468.395888 33.126211 19.889693" +$ns_ at 86.000000 "$node_(6) setdest 439.617458 445.683926 19.241766" +$ns_ at 86.000000 "$node_(7) setdest 405.686381 458.064025 8.074554" +$ns_ at 86.000000 "$node_(8) setdest 552.956635 544.737738 18.121484" +$ns_ at 86.000000 "$node_(9) setdest 579.604555 372.897661 9.165562" +$ns_ at 86.000000 "$node_(10) setdest 417.084191 434.018891 10.112869" + +$ns_ at 87.000000 "$node_(1) setdest 568.163720 58.723273 19.555844" +$ns_ at 87.000000 "$node_(2) setdest 527.597802 85.380885 19.770830" +$ns_ at 87.000000 "$node_(3) setdest 484.486710 193.561998 19.999982" +$ns_ at 87.000000 "$node_(4) setdest 458.575323 35.422524 9.815466" +$ns_ at 87.000000 "$node_(5) setdest 448.529777 33.971581 19.884089" +$ns_ at 87.000000 "$node_(6) setdest 425.906823 457.123064 17.855963" +$ns_ at 87.000000 "$node_(7) setdest 408.452236 458.872840 2.881690" +$ns_ at 87.000000 "$node_(8) setdest 568.879506 540.146677 16.571531" +$ns_ at 87.000000 "$node_(9) setdest 569.851338 377.857203 10.941769" +$ns_ at 87.000000 "$node_(10) setdest 421.850394 441.875446 9.189240" + +$ns_ at 88.000000 "$node_(1) setdest 548.683399 54.449519 19.943618" +$ns_ at 88.000000 "$node_(2) setdest 546.933768 82.546059 19.542668" +$ns_ at 88.000000 "$node_(3) setdest 476.681038 175.148773 19.999384" +$ns_ at 88.000000 "$node_(4) setdest 461.366028 46.344763 11.273125" +$ns_ at 88.000000 "$node_(5) setdest 430.847089 43.014463 19.860795" +$ns_ at 88.000000 "$node_(6) setdest 410.587500 453.395095 15.766401" +$ns_ at 88.000000 "$node_(7) setdest 412.362473 461.216708 4.558911" +$ns_ at 88.000000 "$node_(8) setdest 582.276440 530.346179 16.599024" +$ns_ at 88.000000 "$node_(9) setdest 560.884729 386.754776 12.631979" +$ns_ at 88.000000 "$node_(10) setdest 424.841637 452.326111 10.870324" + +$ns_ at 89.000000 "$node_(1) setdest 529.270019 51.276340 19.671004" +$ns_ at 89.000000 "$node_(2) setdest 565.972708 77.913315 19.594477" +$ns_ at 89.000000 "$node_(3) setdest 469.023624 156.673222 19.999549" +$ns_ at 89.000000 "$node_(4) setdest 471.973165 53.282586 12.674571" +$ns_ at 89.000000 "$node_(5) setdest 419.286989 58.968693 19.702116" +$ns_ at 89.000000 "$node_(6) setdest 404.803098 439.911564 14.671910" +$ns_ at 89.000000 "$node_(7) setdest 416.934945 465.341967 6.158349" +$ns_ at 89.000000 "$node_(8) setdest 595.673075 523.961962 14.840082" +$ns_ at 89.000000 "$node_(9) setdest 554.608120 399.466950 14.177277" +$ns_ at 89.000000 "$node_(10) setdest 428.943927 464.092911 12.461395" + +$ns_ at 90.000000 "$node_(1) setdest 510.446672 45.560687 19.671987" +$ns_ at 90.000000 "$node_(2) setdest 581.900465 67.427062 19.069739" +$ns_ at 90.000000 "$node_(3) setdest 460.852421 138.421298 19.997532" +$ns_ at 90.000000 "$node_(4) setdest 486.548028 54.559831 14.630720" +$ns_ at 90.000000 "$node_(5) setdest 417.520328 78.793399 19.903267" +$ns_ at 90.000000 "$node_(6) setdest 412.989536 428.553731 14.000647" +$ns_ at 90.000000 "$node_(7) setdest 421.706379 471.443160 7.745395" +$ns_ at 90.000000 "$node_(8) setdest 596.698144 525.418757 1.781297" +$ns_ at 90.000000 "$node_(9) setdest 552.296746 415.092034 15.795117" +$ns_ at 90.000000 "$node_(10) setdest 437.002050 475.535203 13.994977" + +$ns_ at 91.000000 "$node_(1) setdest 491.216630 41.851459 19.584506" +$ns_ at 91.000000 "$node_(2) setdest 597.391272 59.977823 17.188841" +$ns_ at 91.000000 "$node_(3) setdest 451.041441 121.016462 19.979581" +$ns_ at 91.000000 "$node_(4) setdest 502.763761 55.445814 16.239919" +$ns_ at 91.000000 "$node_(5) setdest 420.064577 98.608541 19.977814" +$ns_ at 91.000000 "$node_(6) setdest 427.036725 421.558974 15.692359" +$ns_ at 91.000000 "$node_(7) setdest 425.224219 480.087841 9.333043" +$ns_ at 91.000000 "$node_(8) setdest 595.078325 527.548271 2.675565" +$ns_ at 91.000000 "$node_(9) setdest 555.215513 432.214111 17.369074" +$ns_ at 91.000000 "$node_(10) setdest 450.540971 483.206577 15.561245" + +$ns_ at 92.000000 "$node_(1) setdest 471.659908 39.220660 19.732878" +$ns_ at 92.000000 "$node_(2) setdest 599.260739 62.844430 3.422330" +$ns_ at 92.000000 "$node_(3) setdest 437.200521 106.710742 19.905394" +$ns_ at 92.000000 "$node_(4) setdest 520.463512 57.440346 17.811775" +$ns_ at 92.000000 "$node_(5) setdest 425.407301 117.784600 19.906430" +$ns_ at 92.000000 "$node_(6) setdest 441.106703 411.581456 17.248628" +$ns_ at 92.000000 "$node_(7) setdest 426.330437 490.960272 10.928563" +$ns_ at 92.000000 "$node_(8) setdest 592.410482 530.533599 4.003694" +$ns_ at 92.000000 "$node_(9) setdest 564.412524 448.873432 19.029397" +$ns_ at 92.000000 "$node_(10) setdest 467.267881 487.413523 17.247838" + +$ns_ at 93.000000 "$node_(1) setdest 453.466313 33.175001 19.171774" +$ns_ at 93.000000 "$node_(2) setdest 598.291343 67.449039 4.705545" +$ns_ at 93.000000 "$node_(3) setdest 420.425409 96.070528 19.865007" +$ns_ at 93.000000 "$node_(4) setdest 539.462165 61.491498 19.425773" +$ns_ at 93.000000 "$node_(5) setdest 434.020030 135.209813 19.437519" +$ns_ at 93.000000 "$node_(6) setdest 455.272226 399.073428 18.897428" +$ns_ at 93.000000 "$node_(7) setdest 427.424847 503.463387 12.550921" +$ns_ at 93.000000 "$node_(8) setdest 593.809342 529.223559 1.916510" +$ns_ at 93.000000 "$node_(9) setdest 576.244847 464.961799 19.970965" +$ns_ at 93.000000 "$node_(10) setdest 485.902916 490.396138 18.872215" + +$ns_ at 94.000000 "$node_(1) setdest 440.069927 20.181823 18.662418" +$ns_ at 94.000000 "$node_(2) setdest 596.289520 73.428855 6.305989" +$ns_ at 94.000000 "$node_(3) setdest 418.138459 85.885901 10.438235" +$ns_ at 94.000000 "$node_(4) setdest 559.121472 65.074947 19.983229" +$ns_ at 94.000000 "$node_(5) setdest 433.752323 153.363814 18.155975" +$ns_ at 94.000000 "$node_(6) setdest 468.907539 384.565199 19.910059" +$ns_ at 94.000000 "$node_(7) setdest 423.892158 517.002474 13.992382" +$ns_ at 94.000000 "$node_(8) setdest 594.496732 525.690274 3.599529" +$ns_ at 94.000000 "$node_(9) setdest 587.176402 481.519615 19.840871" +$ns_ at 94.000000 "$node_(10) setdest 505.557558 493.894481 19.963551" + +$ns_ at 95.000000 "$node_(1) setdest 427.052116 6.847278 18.635275" +$ns_ at 95.000000 "$node_(2) setdest 594.485579 81.120759 7.900607" +$ns_ at 95.000000 "$node_(3) setdest 420.911514 86.122459 2.783127" +$ns_ at 95.000000 "$node_(4) setdest 579.042638 65.882017 19.937508" +$ns_ at 95.000000 "$node_(5) setdest 419.915636 161.815294 16.213618" +$ns_ at 95.000000 "$node_(6) setdest 479.384927 367.530238 19.999139" +$ns_ at 95.000000 "$node_(7) setdest 413.636242 520.451794 10.820426" +$ns_ at 95.000000 "$node_(8) setdest 595.480416 520.598937 5.185494" +$ns_ at 95.000000 "$node_(9) setdest 588.142218 501.154215 19.658340" +$ns_ at 95.000000 "$node_(10) setdest 525.501306 495.121901 19.981483" + +$ns_ at 96.000000 "$node_(1) setdest 410.783725 0.750524 17.373284" +$ns_ at 96.000000 "$node_(2) setdest 593.127576 90.529264 9.506006" +$ns_ at 96.000000 "$node_(3) setdest 424.469755 88.906562 4.517998" +$ns_ at 96.000000 "$node_(4) setdest 589.252016 52.033514 17.205011" +$ns_ at 96.000000 "$node_(5) setdest 406.673798 155.191050 14.806312" +$ns_ at 96.000000 "$node_(6) setdest 483.266169 352.608643 15.418108" +$ns_ at 96.000000 "$node_(7) setdest 410.018337 513.556034 7.787216" +$ns_ at 96.000000 "$node_(8) setdest 595.625065 513.990687 6.609832" +$ns_ at 96.000000 "$node_(9) setdest 576.073216 515.525770 18.767056" +$ns_ at 96.000000 "$node_(10) setdest 544.912679 490.672198 19.914850" + +$ns_ at 97.000000 "$node_(1) setdest 419.156506 3.762852 8.898179" +$ns_ at 97.000000 "$node_(2) setdest 591.679304 101.541365 11.106928" +$ns_ at 97.000000 "$node_(3) setdest 429.445594 92.463295 6.116317" +$ns_ at 97.000000 "$node_(4) setdest 580.554829 37.419012 17.006609" +$ns_ at 97.000000 "$node_(5) setdest 406.950962 153.565137 1.649367" +$ns_ at 97.000000 "$node_(6) setdest 479.856644 351.887222 3.485012" +$ns_ at 97.000000 "$node_(7) setdest 408.684567 504.276932 9.374469" +$ns_ at 97.000000 "$node_(8) setdest 590.406909 507.617288 8.237073" +$ns_ at 97.000000 "$node_(9) setdest 559.752265 523.162622 18.019294" +$ns_ at 97.000000 "$node_(10) setdest 561.124452 479.086372 19.926187" + +$ns_ at 98.000000 "$node_(1) setdest 429.488659 2.608879 10.396395" +$ns_ at 98.000000 "$node_(2) setdest 589.054917 113.968791 12.701509" +$ns_ at 98.000000 "$node_(3) setdest 436.124983 96.326552 7.716151" +$ns_ at 98.000000 "$node_(4) setdest 574.740693 23.094755 15.459253" +$ns_ at 98.000000 "$node_(5) setdest 409.384783 153.230897 2.456664" +$ns_ at 98.000000 "$node_(6) setdest 474.746734 352.016833 5.111553" +$ns_ at 98.000000 "$node_(7) setdest 413.021931 494.129886 11.035183" +$ns_ at 98.000000 "$node_(8) setdest 580.882175 505.117671 9.847266" +$ns_ at 98.000000 "$node_(9) setdest 542.784470 531.635980 18.965860" +$ns_ at 98.000000 "$node_(10) setdest 575.265149 465.030323 19.938201" + +$ns_ at 99.000000 "$node_(1) setdest 441.489099 2.335719 12.003549" +$ns_ at 99.000000 "$node_(2) setdest 586.056851 127.939810 14.289078" +$ns_ at 99.000000 "$node_(3) setdest 444.433154 100.546506 9.318461" +$ns_ at 99.000000 "$node_(4) setdest 563.604426 11.802092 15.860034" +$ns_ at 99.000000 "$node_(5) setdest 413.431025 153.540340 4.058058" +$ns_ at 99.000000 "$node_(6) setdest 468.323715 353.930297 6.701979" +$ns_ at 99.000000 "$node_(7) setdest 422.987216 486.505659 12.547341" +$ns_ at 99.000000 "$node_(8) setdest 569.510780 507.343850 11.587256" +$ns_ at 99.000000 "$node_(9) setdest 530.489038 544.913627 18.096231" +$ns_ at 99.000000 "$node_(10) setdest 581.656414 446.357042 19.736760" + +$ns_ at 100.000000 "$node_(1) setdest 454.447553 5.677176 13.382334" +$ns_ at 100.000000 "$node_(2) setdest 586.790587 143.764948 15.842139" +$ns_ at 100.000000 "$node_(3) setdest 454.264488 105.292106 10.916769" +$ns_ at 100.000000 "$node_(4) setdest 547.205392 5.747685 17.480967" +$ns_ at 100.000000 "$node_(5) setdest 419.055426 154.172769 5.659845" +$ns_ at 100.000000 "$node_(6) setdest 468.513902 353.682612 0.312280" +$ns_ at 100.000000 "$node_(7) setdest 425.531876 476.300999 10.517147" +$ns_ at 100.000000 "$node_(8) setdest 568.125928 506.009333 1.923214" +$ns_ at 100.000000 "$node_(9) setdest 534.125064 533.948308 11.552442" +$ns_ at 100.000000 "$node_(10) setdest 574.270722 427.825799 19.948820" + +$ns_ at 101.000000 "$node_(1) setdest 463.974595 17.337902 15.057791" +$ns_ at 101.000000 "$node_(2) setdest 588.818288 160.985039 17.339062" +$ns_ at 101.000000 "$node_(3) setdest 465.953584 109.763324 12.515061" +$ns_ at 101.000000 "$node_(4) setdest 528.686907 4.225543 18.580936" +$ns_ at 101.000000 "$node_(5) setdest 426.301451 153.959775 7.249155" +$ns_ at 101.000000 "$node_(6) setdest 468.409172 351.964764 1.721038" +$ns_ at 101.000000 "$node_(7) setdest 425.627464 463.860769 12.440598" +$ns_ at 101.000000 "$node_(8) setdest 568.230938 502.795685 3.215363" +$ns_ at 101.000000 "$node_(9) setdest 534.843844 520.422103 13.545289" +$ns_ at 101.000000 "$node_(10) setdest 565.376509 409.915463 19.997179" + +$ns_ at 102.000000 "$node_(1) setdest 469.266398 33.192266 16.714186" +$ns_ at 102.000000 "$node_(2) setdest 583.250087 179.129202 18.979345" +$ns_ at 102.000000 "$node_(3) setdest 479.708421 112.845067 14.095839" +$ns_ at 102.000000 "$node_(4) setdest 513.846746 13.845484 17.685407" +$ns_ at 102.000000 "$node_(5) setdest 434.772540 151.433158 8.839861" +$ns_ at 102.000000 "$node_(6) setdest 467.957451 348.674042 3.321581" +$ns_ at 102.000000 "$node_(7) setdest 425.462374 449.821538 14.040202" +$ns_ at 102.000000 "$node_(8) setdest 568.504849 497.988118 4.815363" +$ns_ at 102.000000 "$node_(9) setdest 536.479818 505.366286 15.144440" +$ns_ at 102.000000 "$node_(10) setdest 555.303153 392.642708 19.995513" + +$ns_ at 103.000000 "$node_(1) setdest 465.730169 51.026601 18.181541" +$ns_ at 103.000000 "$node_(2) setdest 566.879047 186.735999 18.051989" +$ns_ at 103.000000 "$node_(3) setdest 495.386590 112.701027 15.678831" +$ns_ at 103.000000 "$node_(4) setdest 498.374210 23.147625 18.053509" +$ns_ at 103.000000 "$node_(5) setdest 443.971210 146.477076 10.448841" +$ns_ at 103.000000 "$node_(6) setdest 467.040158 343.838883 4.921401" +$ns_ at 103.000000 "$node_(7) setdest 424.846982 434.193648 15.640001" +$ns_ at 103.000000 "$node_(8) setdest 568.959563 491.588797 6.415456" +$ns_ at 103.000000 "$node_(9) setdest 539.291404 488.859842 16.744184" +$ns_ at 103.000000 "$node_(10) setdest 543.978114 376.161913 19.996828" + +$ns_ at 104.000000 "$node_(1) setdest 453.885584 66.862210 19.775255" +$ns_ at 104.000000 "$node_(2) setdest 550.420005 182.065219 17.108953" +$ns_ at 104.000000 "$node_(3) setdest 512.035228 108.074256 17.279588" +$ns_ at 104.000000 "$node_(4) setdest 480.422154 28.888008 18.847502" +$ns_ at 104.000000 "$node_(5) setdest 453.481156 139.084396 12.045363" +$ns_ at 104.000000 "$node_(6) setdest 465.522276 337.496223 6.521756" +$ns_ at 104.000000 "$node_(7) setdest 423.890552 416.980065 17.240133" +$ns_ at 104.000000 "$node_(8) setdest 569.408345 483.586152 8.015219" +$ns_ at 104.000000 "$node_(9) setdest 542.421361 470.785101 18.343743" +$ns_ at 104.000000 "$node_(10) setdest 532.315171 359.914903 19.999739" + +$ns_ at 105.000000 "$node_(1) setdest 441.554672 82.598803 19.992292" +$ns_ at 105.000000 "$node_(2) setdest 539.013776 170.214626 16.448058" +$ns_ at 105.000000 "$node_(3) setdest 529.234106 100.206225 18.913152" +$ns_ at 105.000000 "$node_(4) setdest 461.595790 33.254097 19.326011" +$ns_ at 105.000000 "$node_(5) setdest 463.150011 129.433979 13.660795" +$ns_ at 105.000000 "$node_(6) setdest 464.066377 329.507246 8.120554" +$ns_ at 105.000000 "$node_(7) setdest 423.478241 398.145310 18.839268" +$ns_ at 105.000000 "$node_(8) setdest 569.653858 473.974181 9.615106" +$ns_ at 105.000000 "$node_(9) setdest 544.689190 451.144354 19.771242" +$ns_ at 105.000000 "$node_(10) setdest 521.557519 343.060211 19.995192" + +$ns_ at 106.000000 "$node_(1) setdest 426.035377 95.120154 19.940731" +$ns_ at 106.000000 "$node_(2) setdest 527.796998 156.046188 18.070991" +$ns_ at 106.000000 "$node_(3) setdest 546.577423 90.292431 19.976836" +$ns_ at 106.000000 "$node_(4) setdest 442.458573 31.949902 19.181606" +$ns_ at 106.000000 "$node_(5) setdest 473.667535 118.375737 15.261160" +$ns_ at 106.000000 "$node_(6) setdest 463.038352 319.841988 9.719776" +$ns_ at 106.000000 "$node_(7) setdest 424.022196 378.194573 19.958150" +$ns_ at 106.000000 "$node_(8) setdest 569.813158 462.759869 11.215443" +$ns_ at 106.000000 "$node_(9) setdest 547.190950 431.303404 19.998052" +$ns_ at 106.000000 "$node_(10) setdest 512.059389 325.464003 19.996025" + +$ns_ at 107.000000 "$node_(1) setdest 413.339629 110.424764 19.884997" +$ns_ at 107.000000 "$node_(2) setdest 522.889895 138.019659 18.682489" +$ns_ at 107.000000 "$node_(3) setdest 562.785458 78.657080 19.951987" +$ns_ at 107.000000 "$node_(4) setdest 424.326276 36.316554 18.650680" +$ns_ at 107.000000 "$node_(5) setdest 485.278736 106.151196 16.859994" +$ns_ at 107.000000 "$node_(6) setdest 462.686740 308.528017 11.319434" +$ns_ at 107.000000 "$node_(7) setdest 425.056084 358.221365 19.999950" +$ns_ at 107.000000 "$node_(8) setdest 570.011307 449.945947 12.815454" +$ns_ at 107.000000 "$node_(9) setdest 550.802202 411.635114 19.997070" +$ns_ at 107.000000 "$node_(10) setdest 504.100758 307.123887 19.992490" + +$ns_ at 108.000000 "$node_(1) setdest 403.484524 120.881194 14.368718" +$ns_ at 108.000000 "$node_(2) setdest 522.671723 118.777356 19.243540" +$ns_ at 108.000000 "$node_(3) setdest 566.030236 61.969468 17.000146" +$ns_ at 108.000000 "$node_(4) setdest 406.729266 43.449566 18.987750" +$ns_ at 108.000000 "$node_(5) setdest 498.299352 93.063657 18.461314" +$ns_ at 108.000000 "$node_(6) setdest 463.350139 295.626592 12.918469" +$ns_ at 108.000000 "$node_(7) setdest 425.713473 338.232633 19.999539" +$ns_ at 108.000000 "$node_(8) setdest 570.151839 435.531284 14.415348" +$ns_ at 108.000000 "$node_(9) setdest 553.849836 391.873169 19.995562" +$ns_ at 108.000000 "$node_(10) setdest 497.862638 288.126445 19.995423" + +$ns_ at 109.000000 "$node_(1) setdest 403.989736 119.896423 1.106803" +$ns_ at 109.000000 "$node_(2) setdest 528.443915 101.055487 18.638209" +$ns_ at 109.000000 "$node_(3) setdest 555.086711 59.581719 11.200986" +$ns_ at 109.000000 "$node_(4) setdest 419.658364 34.543594 15.699616" +$ns_ at 109.000000 "$node_(5) setdest 512.018250 78.744240 19.830629" +$ns_ at 109.000000 "$node_(6) setdest 465.226532 281.230082 14.518276" +$ns_ at 109.000000 "$node_(7) setdest 425.892742 318.233998 19.999438" +$ns_ at 109.000000 "$node_(8) setdest 569.845697 419.519895 16.014315" +$ns_ at 109.000000 "$node_(9) setdest 555.287187 371.932228 19.992677" +$ns_ at 109.000000 "$node_(10) setdest 493.133245 268.700773 19.993096" + +$ns_ at 110.000000 "$node_(1) setdest 405.689023 117.799747 2.698820" +$ns_ at 110.000000 "$node_(2) setdest 542.452784 89.981334 17.857360" +$ns_ at 110.000000 "$node_(3) setdest 541.878384 60.468639 13.238071" +$ns_ at 110.000000 "$node_(4) setdest 431.508634 26.710829 14.204967" +$ns_ at 110.000000 "$node_(5) setdest 525.437273 63.918876 19.996540" +$ns_ at 110.000000 "$node_(6) setdest 468.870766 265.532533 16.115008" +$ns_ at 110.000000 "$node_(7) setdest 425.465752 298.239034 19.999523" +$ns_ at 110.000000 "$node_(8) setdest 568.423672 401.966936 17.610467" +$ns_ at 110.000000 "$node_(9) setdest 554.604727 351.953670 19.990211" +$ns_ at 110.000000 "$node_(10) setdest 490.462288 248.888314 19.991687" + +$ns_ at 111.000000 "$node_(1) setdest 409.267839 115.417933 4.298949" +$ns_ at 111.000000 "$node_(2) setdest 559.897956 86.045463 17.883655" +$ns_ at 111.000000 "$node_(3) setdest 527.059137 59.782209 14.835137" +$ns_ at 111.000000 "$node_(4) setdest 443.573833 19.915640 13.847152" +$ns_ at 111.000000 "$node_(5) setdest 538.192908 48.515225 19.999468" +$ns_ at 111.000000 "$node_(6) setdest 473.714036 248.485385 17.721809" +$ns_ at 111.000000 "$node_(7) setdest 424.698720 278.254092 19.999656" +$ns_ at 111.000000 "$node_(8) setdest 566.060462 382.899839 19.212989" +$ns_ at 111.000000 "$node_(9) setdest 551.708859 332.174554 19.989984" +$ns_ at 111.000000 "$node_(10) setdest 489.396329 228.922479 19.994270" + +$ns_ at 112.000000 "$node_(1) setdest 414.950785 113.903111 5.881374" +$ns_ at 112.000000 "$node_(2) setdest 578.124561 87.480642 18.283021" +$ns_ at 112.000000 "$node_(3) setdest 510.636699 60.626058 16.444104" +$ns_ at 112.000000 "$node_(4) setdest 457.652786 13.663710 15.404660" +$ns_ at 112.000000 "$node_(5) setdest 551.827674 34.309326 19.690465" +$ns_ at 112.000000 "$node_(6) setdest 478.228138 229.700152 19.319992" +$ns_ at 112.000000 "$node_(7) setdest 422.398639 258.396580 19.990277" +$ns_ at 112.000000 "$node_(8) setdest 565.174425 362.924990 19.994490" +$ns_ at 112.000000 "$node_(9) setdest 546.871512 312.774624 19.993929" +$ns_ at 112.000000 "$node_(10) setdest 491.447099 209.200491 19.828325" + +$ns_ at 113.000000 "$node_(1) setdest 422.446166 114.130760 7.498837" +$ns_ at 113.000000 "$node_(2) setdest 591.915195 78.408014 16.507397" +$ns_ at 113.000000 "$node_(3) setdest 492.624699 59.666840 18.037523" +$ns_ at 113.000000 "$node_(4) setdest 472.214347 5.489961 16.698779" +$ns_ at 113.000000 "$node_(5) setdest 551.486872 35.177611 0.932773" +$ns_ at 113.000000 "$node_(6) setdest 482.217820 210.104151 19.998020" +$ns_ at 113.000000 "$node_(7) setdest 417.831564 238.927314 19.997762" +$ns_ at 113.000000 "$node_(8) setdest 564.744712 342.930184 19.999424" +$ns_ at 113.000000 "$node_(9) setdest 540.209785 293.926814 19.990462" +$ns_ at 113.000000 "$node_(10) setdest 504.489346 196.354667 18.306158" + +$ns_ at 114.000000 "$node_(1) setdest 431.271998 116.305610 9.089845" +$ns_ at 114.000000 "$node_(2) setdest 588.736507 63.560605 15.183860" +$ns_ at 114.000000 "$node_(3) setdest 473.963039 54.031040 19.494096" +$ns_ at 114.000000 "$node_(4) setdest 473.434460 2.312632 3.403542" +$ns_ at 114.000000 "$node_(5) setdest 548.218838 37.090081 3.786501" +$ns_ at 114.000000 "$node_(6) setdest 484.657569 190.258834 19.994725" +$ns_ at 114.000000 "$node_(7) setdest 414.150519 219.279742 19.989426" +$ns_ at 114.000000 "$node_(8) setdest 563.955033 322.946138 19.999642" +$ns_ at 114.000000 "$node_(9) setdest 531.976806 275.701992 19.998151" +$ns_ at 114.000000 "$node_(10) setdest 520.244752 190.438199 16.829659" + +$ns_ at 115.000000 "$node_(1) setdest 440.908069 120.949190 10.696574" +$ns_ at 115.000000 "$node_(2) setdest 580.431419 50.836504 15.194645" +$ns_ at 115.000000 "$node_(3) setdest 456.876131 43.692246 19.971307" +$ns_ at 115.000000 "$node_(4) setdest 472.869595 2.467477 0.585704" +$ns_ at 115.000000 "$node_(5) setdest 543.700691 40.023340 5.386804" +$ns_ at 115.000000 "$node_(6) setdest 485.938648 170.301151 19.998756" +$ns_ at 115.000000 "$node_(7) setdest 414.076804 199.317789 19.962089" +$ns_ at 115.000000 "$node_(8) setdest 563.190475 302.961948 19.998810" +$ns_ at 115.000000 "$node_(9) setdest 522.369871 258.168219 19.993159" +$ns_ at 115.000000 "$node_(10) setdest 534.924858 194.630099 15.266877" + +$ns_ at 116.000000 "$node_(1) setdest 451.284786 127.573697 12.310985" +$ns_ at 116.000000 "$node_(2) setdest 569.402032 38.175636 16.791217" +$ns_ at 116.000000 "$node_(3) setdest 440.770647 31.838598 19.997390" +$ns_ at 116.000000 "$node_(4) setdest 472.841751 4.274661 1.807398" +$ns_ at 116.000000 "$node_(5) setdest 537.436100 43.104717 6.981403" +$ns_ at 116.000000 "$node_(6) setdest 486.954575 150.332081 19.994896" +$ns_ at 116.000000 "$node_(7) setdest 417.830901 179.685288 19.988205" +$ns_ at 116.000000 "$node_(8) setdest 563.641683 282.971460 19.995579" +$ns_ at 116.000000 "$node_(9) setdest 511.298664 241.517648 19.995328" +$ns_ at 116.000000 "$node_(10) setdest 550.011999 194.908027 15.089700" + +$ns_ at 117.000000 "$node_(1) setdest 462.138089 136.267655 13.906081" +$ns_ at 117.000000 "$node_(2) setdest 556.634968 24.940619 18.389225" +$ns_ at 117.000000 "$node_(3) setdest 425.324448 19.136132 19.998443" +$ns_ at 117.000000 "$node_(4) setdest 473.314494 7.680851 3.438840" +$ns_ at 117.000000 "$node_(5) setdest 529.438223 46.226951 8.585708" +$ns_ at 117.000000 "$node_(6) setdest 490.129007 130.598208 19.987566" +$ns_ at 117.000000 "$node_(7) setdest 423.966373 160.668563 19.981989" +$ns_ at 117.000000 "$node_(8) setdest 565.740884 263.087161 19.994799" +$ns_ at 117.000000 "$node_(9) setdest 499.055031 225.704650 19.998936" +$ns_ at 117.000000 "$node_(10) setdest 563.557238 186.500635 15.942326" + +$ns_ at 118.000000 "$node_(1) setdest 473.241458 147.092544 15.506870" +$ns_ at 118.000000 "$node_(2) setdest 539.814754 14.774438 19.653774" +$ns_ at 118.000000 "$node_(3) setdest 409.111886 8.883379 19.182442" +$ns_ at 118.000000 "$node_(4) setdest 473.692202 12.706450 5.039772" +$ns_ at 118.000000 "$node_(5) setdest 519.739209 49.337753 10.185674" +$ns_ at 118.000000 "$node_(6) setdest 496.431453 111.642085 19.976371" +$ns_ at 118.000000 "$node_(7) setdest 432.569997 142.630498 19.984847" +$ns_ at 118.000000 "$node_(8) setdest 568.702436 243.307677 19.999970" +$ns_ at 118.000000 "$node_(9) setdest 485.443278 211.070870 19.985678" +$ns_ at 118.000000 "$node_(10) setdest 570.192106 171.160831 16.713200" + +$ns_ at 119.000000 "$node_(1) setdest 487.251601 156.862702 17.080401" +$ns_ at 119.000000 "$node_(2) setdest 520.683497 9.021841 19.977421" +$ns_ at 119.000000 "$node_(3) setdest 417.073766 12.056418 8.570864" +$ns_ at 119.000000 "$node_(4) setdest 474.036968 19.336302 6.638810" +$ns_ at 119.000000 "$node_(5) setdest 508.315867 52.234824 11.784981" +$ns_ at 119.000000 "$node_(6) setdest 506.265369 94.271345 19.961175" +$ns_ at 119.000000 "$node_(7) setdest 443.201855 125.694874 19.996294" +$ns_ at 119.000000 "$node_(8) setdest 571.628211 223.523019 19.999821" +$ns_ at 119.000000 "$node_(9) setdest 470.395480 197.901690 19.996588" +$ns_ at 119.000000 "$node_(10) setdest 581.059668 156.562270 18.199503" + +$ns_ at 120.000000 "$node_(1) setdest 504.954771 159.215359 17.858813" +$ns_ at 120.000000 "$node_(2) setdest 501.192874 10.606251 19.554916" +$ns_ at 120.000000 "$node_(3) setdest 423.571462 19.617907 9.969763" +$ns_ at 120.000000 "$node_(4) setdest 474.472309 27.560057 8.235270" +$ns_ at 120.000000 "$node_(5) setdest 495.207683 54.945946 13.385614" +$ns_ at 120.000000 "$node_(6) setdest 520.516470 80.409235 19.880946" +$ns_ at 120.000000 "$node_(7) setdest 453.570709 108.596480 19.996705" +$ns_ at 120.000000 "$node_(8) setdest 573.762328 203.638794 19.998422" +$ns_ at 120.000000 "$node_(9) setdest 453.975818 186.542303 19.965996" +$ns_ at 120.000000 "$node_(10) setdest 592.135494 143.826225 16.878411" + +$ns_ at 121.000000 "$node_(1) setdest 509.718099 146.506082 13.572583" +$ns_ at 121.000000 "$node_(2) setdest 484.117793 19.082124 19.063023" +$ns_ at 121.000000 "$node_(3) setdest 433.058684 26.201559 11.547808" +$ns_ at 121.000000 "$node_(4) setdest 476.147484 37.254243 9.837858" +$ns_ at 121.000000 "$node_(5) setdest 480.493467 57.703401 14.970361" +$ns_ at 121.000000 "$node_(6) setdest 537.165573 83.737558 16.978527" +$ns_ at 121.000000 "$node_(7) setdest 464.612917 91.921714 19.999454" +$ns_ at 121.000000 "$node_(8) setdest 575.622097 183.725674 19.999777" +$ns_ at 121.000000 "$node_(9) setdest 435.402591 179.523497 19.855186" +$ns_ at 121.000000 "$node_(10) setdest 589.495037 140.928854 3.920047" + +$ns_ at 122.000000 "$node_(1) setdest 501.618767 135.407562 13.739589" +$ns_ at 122.000000 "$node_(2) setdest 468.354636 30.000884 19.175412" +$ns_ at 122.000000 "$node_(3) setdest 444.780251 32.212762 13.173066" +$ns_ at 122.000000 "$node_(4) setdest 478.682436 48.409195 11.439359" +$ns_ at 122.000000 "$node_(5) setdest 465.298067 64.267961 16.552753" +$ns_ at 122.000000 "$node_(6) setdest 544.950948 98.256877 16.474910" +$ns_ at 122.000000 "$node_(7) setdest 475.946542 75.443825 19.999297" +$ns_ at 122.000000 "$node_(8) setdest 576.534377 163.749996 19.996499" +$ns_ at 122.000000 "$node_(9) setdest 434.434766 179.467028 0.969471" +$ns_ at 122.000000 "$node_(10) setdest 584.521690 139.425209 5.195683" + +$ns_ at 123.000000 "$node_(1) setdest 492.075637 123.450755 15.298253" +$ns_ at 123.000000 "$node_(2) setdest 455.863068 44.093278 18.831751" +$ns_ at 123.000000 "$node_(3) setdest 458.619999 37.371581 14.769972" +$ns_ at 123.000000 "$node_(4) setdest 482.138433 60.980026 13.037244" +$ns_ at 123.000000 "$node_(5) setdest 449.568122 73.372764 18.174944" +$ns_ at 123.000000 "$node_(6) setdest 555.460624 109.423500 15.334495" +$ns_ at 123.000000 "$node_(7) setdest 488.072608 59.566099 19.978580" +$ns_ at 123.000000 "$node_(8) setdest 575.616599 143.782691 19.988386" +$ns_ at 123.000000 "$node_(9) setdest 437.345563 182.540188 4.232854" +$ns_ at 123.000000 "$node_(10) setdest 578.082071 137.243055 6.799300" + +$ns_ at 124.000000 "$node_(1) setdest 481.629922 110.164467 16.900841" +$ns_ at 124.000000 "$node_(2) setdest 442.838643 58.392410 19.341686" +$ns_ at 124.000000 "$node_(3) setdest 474.615429 40.719637 16.342070" +$ns_ at 124.000000 "$node_(4) setdest 486.172579 75.052483 14.639275" +$ns_ at 124.000000 "$node_(5) setdest 430.524277 77.428350 19.470897" +$ns_ at 124.000000 "$node_(6) setdest 570.380491 116.561320 16.539374" +$ns_ at 124.000000 "$node_(7) setdest 503.421106 46.832482 19.942953" +$ns_ at 124.000000 "$node_(8) setdest 571.969243 124.135771 19.982610" +$ns_ at 124.000000 "$node_(9) setdest 437.850553 188.097996 5.580703" +$ns_ at 124.000000 "$node_(10) setdest 570.292753 134.115544 8.393736" + +$ns_ at 125.000000 "$node_(1) setdest 468.764309 108.362457 12.991198" +$ns_ at 125.000000 "$node_(2) setdest 424.365917 65.103086 19.653874" +$ns_ at 125.000000 "$node_(3) setdest 458.785742 38.071495 16.049662" +$ns_ at 125.000000 "$node_(4) setdest 485.862028 75.256264 0.371442" +$ns_ at 125.000000 "$node_(5) setdest 410.538520 78.179722 19.999876" +$ns_ at 125.000000 "$node_(6) setdest 586.519711 124.964926 18.196017" +$ns_ at 125.000000 "$node_(7) setdest 522.204110 40.543630 19.807850" +$ns_ at 125.000000 "$node_(8) setdest 565.283378 105.313652 19.974308" +$ns_ at 125.000000 "$node_(9) setdest 438.236927 188.566948 0.607619" +$ns_ at 125.000000 "$node_(10) setdest 561.454881 129.437687 9.999516" + +$ns_ at 126.000000 "$node_(1) setdest 453.894330 110.665395 15.047252" +$ns_ at 126.000000 "$node_(2) setdest 404.988454 70.046829 19.998166" +$ns_ at 126.000000 "$node_(3) setdest 440.858781 37.340840 17.941845" +$ns_ at 126.000000 "$node_(4) setdest 484.107042 74.965456 1.778916" +$ns_ at 126.000000 "$node_(5) setdest 390.542704 78.440085 19.997511" +$ns_ at 126.000000 "$node_(6) setdest 592.964875 127.196911 6.820696" +$ns_ at 126.000000 "$node_(7) setdest 542.036992 42.707094 19.950533" +$ns_ at 126.000000 "$node_(8) setdest 554.346165 88.643407 19.937896" +$ns_ at 126.000000 "$node_(9) setdest 438.863799 187.609138 1.144713" +$ns_ at 126.000000 "$node_(10) setdest 550.853562 124.755186 11.589383" + +$ns_ at 127.000000 "$node_(1) setdest 437.536983 113.753231 16.646247" +$ns_ at 127.000000 "$node_(2) setdest 385.400042 74.078678 19.999042" +$ns_ at 127.000000 "$node_(3) setdest 421.408233 35.863244 19.506591" +$ns_ at 127.000000 "$node_(4) setdest 480.756885 74.527052 3.378720" +$ns_ at 127.000000 "$node_(5) setdest 370.587368 77.185177 19.994756" +$ns_ at 127.000000 "$node_(6) setdest 591.806569 125.973434 1.684805" +$ns_ at 127.000000 "$node_(7) setdest 561.938216 44.598425 19.990894" +$ns_ at 127.000000 "$node_(8) setdest 538.791423 76.225827 19.903424" +$ns_ at 127.000000 "$node_(9) setdest 439.851088 185.026858 2.764582" +$ns_ at 127.000000 "$node_(10) setdest 538.598737 119.856049 13.197813" + +$ns_ at 128.000000 "$node_(1) setdest 419.670201 117.456660 18.246569" +$ns_ at 128.000000 "$node_(2) setdest 365.724919 77.666346 19.999545" +$ns_ at 128.000000 "$node_(3) setdest 401.445644 34.670369 19.998197" +$ns_ at 128.000000 "$node_(4) setdest 475.797670 74.087926 4.978620" +$ns_ at 128.000000 "$node_(5) setdest 350.726157 74.834010 19.999892" +$ns_ at 128.000000 "$node_(6) setdest 589.270539 123.860295 3.301031" +$ns_ at 128.000000 "$node_(7) setdest 581.791247 44.803262 19.854088" +$ns_ at 128.000000 "$node_(8) setdest 520.702123 67.707079 19.994795" +$ns_ at 128.000000 "$node_(9) setdest 441.303563 180.909826 4.365734" +$ns_ at 128.000000 "$node_(10) setdest 525.473635 113.036002 14.791260" + +$ns_ at 129.000000 "$node_(1) setdest 400.190414 120.538102 19.722002" +$ns_ at 129.000000 "$node_(2) setdest 345.957172 80.701765 19.999440" +$ns_ at 129.000000 "$node_(3) setdest 381.449576 34.354000 19.998570" +$ns_ at 129.000000 "$node_(4) setdest 469.225898 73.791977 6.578432" +$ns_ at 129.000000 "$node_(5) setdest 330.797553 73.177839 19.997304" +$ns_ at 129.000000 "$node_(6) setdest 585.243076 121.062983 4.903612" +$ns_ at 129.000000 "$node_(7) setdest 588.511397 48.281694 7.567028" +$ns_ at 129.000000 "$node_(8) setdest 502.905331 58.615452 19.984581" +$ns_ at 129.000000 "$node_(9) setdest 443.695561 175.443621 5.966662" +$ns_ at 129.000000 "$node_(10) setdest 511.499269 104.458277 16.396959" + +$ns_ at 130.000000 "$node_(1) setdest 380.319010 122.788460 19.998421" +$ns_ at 130.000000 "$node_(2) setdest 326.114659 83.198800 19.999013" +$ns_ at 130.000000 "$node_(3) setdest 361.450892 34.562067 19.999767" +$ns_ at 130.000000 "$node_(4) setdest 461.047591 73.796428 8.178308" +$ns_ at 130.000000 "$node_(5) setdest 310.805689 73.087262 19.992069" +$ns_ at 130.000000 "$node_(6) setdest 580.472921 116.653619 6.495912" +$ns_ at 130.000000 "$node_(7) setdest 586.575808 48.184730 1.938017" +$ns_ at 130.000000 "$node_(8) setdest 485.758668 48.322000 19.999080" +$ns_ at 130.000000 "$node_(9) setdest 446.859035 168.570017 7.566637" +$ns_ at 130.000000 "$node_(10) setdest 497.658476 92.981586 17.980044" + +$ns_ at 131.000000 "$node_(1) setdest 360.365366 124.127494 19.998522" +$ns_ at 131.000000 "$node_(2) setdest 306.164975 84.538799 19.994637" +$ns_ at 131.000000 "$node_(3) setdest 341.453459 34.881321 19.999981" +$ns_ at 131.000000 "$node_(4) setdest 451.277647 74.201781 9.778349" +$ns_ at 131.000000 "$node_(5) setdest 290.929481 75.205162 19.988725" +$ns_ at 131.000000 "$node_(6) setdest 575.708834 110.114534 8.090498" +$ns_ at 131.000000 "$node_(7) setdest 583.023276 48.266735 3.553478" +$ns_ at 131.000000 "$node_(8) setdest 468.711352 37.876329 19.993075" +$ns_ at 131.000000 "$node_(9) setdest 451.428019 160.631101 9.159804" +$ns_ at 131.000000 "$node_(10) setdest 485.035837 78.081245 19.528215" + +$ns_ at 132.000000 "$node_(1) setdest 340.372607 124.577953 19.997833" +$ns_ at 132.000000 "$node_(2) setdest 286.178506 84.073191 19.991892" +$ns_ at 132.000000 "$node_(3) setdest 321.454012 34.894377 19.999451" +$ns_ at 132.000000 "$node_(4) setdest 439.923459 74.951472 11.378912" +$ns_ at 132.000000 "$node_(5) setdest 271.481106 79.805860 19.985138" +$ns_ at 132.000000 "$node_(6) setdest 571.726779 101.275821 9.694308" +$ns_ at 132.000000 "$node_(7) setdest 577.934453 49.068828 5.151648" +$ns_ at 132.000000 "$node_(8) setdest 450.507813 29.624318 19.986609" +$ns_ at 132.000000 "$node_(9) setdest 457.527500 151.759105 10.766428" +$ns_ at 132.000000 "$node_(10) setdest 474.583709 61.040590 19.990771" + +$ns_ at 133.000000 "$node_(1) setdest 320.380450 124.065568 19.998722" +$ns_ at 133.000000 "$node_(2) setdest 266.383509 81.306673 19.987384" +$ns_ at 133.000000 "$node_(3) setdest 301.478147 33.972686 19.997117" +$ns_ at 133.000000 "$node_(4) setdest 426.974114 75.826178 12.978853" +$ns_ at 133.000000 "$node_(5) setdest 252.963837 87.304381 19.977914" +$ns_ at 133.000000 "$node_(6) setdest 568.310797 90.505002 11.299534" +$ns_ at 133.000000 "$node_(7) setdest 571.352734 50.591970 6.755663" +$ns_ at 133.000000 "$node_(8) setdest 430.748481 26.892605 19.947266" +$ns_ at 133.000000 "$node_(9) setdest 464.585787 141.605483 12.365900" +$ns_ at 133.000000 "$node_(10) setdest 461.707413 45.848981 19.914416" + +$ns_ at 134.000000 "$node_(1) setdest 300.449527 122.443033 19.996858" +$ns_ at 134.000000 "$node_(2) setdest 247.068943 76.153410 19.990212" +$ns_ at 134.000000 "$node_(3) setdest 281.620279 31.641423 19.994242" +$ns_ at 134.000000 "$node_(4) setdest 412.407798 76.413196 14.578139" +$ns_ at 134.000000 "$node_(5) setdest 236.182515 98.124469 19.967150" +$ns_ at 134.000000 "$node_(6) setdest 565.493969 77.924687 12.891814" +$ns_ at 134.000000 "$node_(7) setdest 563.139327 52.127120 8.355642" +$ns_ at 134.000000 "$node_(8) setdest 416.947036 15.226109 18.071719" +$ns_ at 134.000000 "$node_(9) setdest 472.330576 129.982714 13.966765" +$ns_ at 134.000000 "$node_(10) setdest 445.040272 34.848403 19.970135" + +$ns_ at 135.000000 "$node_(1) setdest 280.660058 119.566270 19.997470" +$ns_ at 135.000000 "$node_(2) setdest 228.579859 68.567935 19.984636" +$ns_ at 135.000000 "$node_(3) setdest 261.870140 28.489966 19.999992" +$ns_ at 135.000000 "$node_(4) setdest 396.230443 76.619532 16.178671" +$ns_ at 135.000000 "$node_(5) setdest 221.570082 111.764000 19.988997" +$ns_ at 135.000000 "$node_(6) setdest 565.462360 63.456976 14.467745" +$ns_ at 135.000000 "$node_(7) setdest 553.580974 54.883009 9.947715" +$ns_ at 135.000000 "$node_(8) setdest 426.301069 2.292969 15.961330" +$ns_ at 135.000000 "$node_(9) setdest 481.564388 117.456807 15.561543" +$ns_ at 135.000000 "$node_(10) setdest 426.598641 27.230647 19.953044" + +$ns_ at 136.000000 "$node_(1) setdest 260.964022 116.093665 19.999821" +$ns_ at 136.000000 "$node_(2) setdest 211.157455 58.763950 19.991455" +$ns_ at 136.000000 "$node_(3) setdest 242.069536 25.684400 19.998378" +$ns_ at 136.000000 "$node_(4) setdest 378.451498 76.635633 17.778952" +$ns_ at 136.000000 "$node_(5) setdest 207.405609 125.883222 19.999618" +$ns_ at 136.000000 "$node_(6) setdest 570.550150 48.286694 16.000721" +$ns_ at 136.000000 "$node_(7) setdest 543.178360 59.884928 11.542685" +$ns_ at 136.000000 "$node_(8) setdest 439.426261 7.213786 14.017314" +$ns_ at 136.000000 "$node_(9) setdest 492.799836 104.479486 17.165259" +$ns_ at 136.000000 "$node_(10) setdest 416.515775 29.332216 10.299553" + +$ns_ at 137.000000 "$node_(1) setdest 241.166659 113.273096 19.997279" +$ns_ at 137.000000 "$node_(2) setdest 193.607811 49.185768 19.993288" +$ns_ at 137.000000 "$node_(3) setdest 222.148163 23.923978 19.999004" +$ns_ at 137.000000 "$node_(4) setdest 359.072806 76.657629 19.378705" +$ns_ at 137.000000 "$node_(5) setdest 192.886203 139.634471 19.997750" +$ns_ at 137.000000 "$node_(6) setdest 583.970533 42.100482 14.777547" +$ns_ at 137.000000 "$node_(7) setdest 532.296270 67.248819 13.139511" +$ns_ at 137.000000 "$node_(8) setdest 453.839916 9.148842 14.542968" +$ns_ at 137.000000 "$node_(9) setdest 505.861846 91.012627 18.760928" +$ns_ at 137.000000 "$node_(10) setdest 417.284418 30.284041 1.223431" + +$ns_ at 138.000000 "$node_(1) setdest 221.227107 111.767797 19.996292" +$ns_ at 138.000000 "$node_(2) setdest 175.271841 41.218919 19.991961" +$ns_ at 138.000000 "$node_(3) setdest 202.333247 21.224188 19.997993" +$ns_ at 138.000000 "$node_(4) setdest 339.081034 77.216611 19.999585" +$ns_ at 138.000000 "$node_(5) setdest 177.604021 152.479213 19.963278" +$ns_ at 138.000000 "$node_(6) setdest 588.327423 50.944124 9.858625" +$ns_ at 138.000000 "$node_(7) setdest 521.858823 77.648040 14.733774" +$ns_ at 138.000000 "$node_(8) setdest 470.072953 9.536007 16.237653" +$ns_ at 138.000000 "$node_(9) setdest 520.526387 77.499927 19.940959" +$ns_ at 138.000000 "$node_(10) setdest 420.076823 30.790374 2.837939" + +$ns_ at 139.000000 "$node_(1) setdest 201.240697 111.066682 19.998704" +$ns_ at 139.000000 "$node_(2) setdest 164.466411 38.985513 11.033831" +$ns_ at 139.000000 "$node_(3) setdest 184.238943 13.733066 19.583686" +$ns_ at 139.000000 "$node_(4) setdest 319.132136 78.610994 19.997570" +$ns_ at 139.000000 "$node_(5) setdest 159.330537 160.396138 19.914767" +$ns_ at 139.000000 "$node_(6) setdest 588.282286 62.792033 11.847995" +$ns_ at 139.000000 "$node_(7) setdest 512.243129 90.872745 16.350976" +$ns_ at 139.000000 "$node_(8) setdest 487.878750 9.368775 17.806582" +$ns_ at 139.000000 "$node_(9) setdest 536.534192 65.547922 19.977493" +$ns_ at 139.000000 "$node_(10) setdest 424.324084 29.536639 4.428439" + +$ns_ at 140.000000 "$node_(1) setdest 181.242347 111.274656 19.999432" +$ns_ at 140.000000 "$node_(2) setdest 175.502159 37.272010 11.167982" +$ns_ at 140.000000 "$node_(3) setdest 182.074451 1.712658 12.213731" +$ns_ at 140.000000 "$node_(4) setdest 299.283899 81.049008 19.997411" +$ns_ at 140.000000 "$node_(5) setdest 139.532044 162.682204 19.930038" +$ns_ at 140.000000 "$node_(6) setdest 589.138402 76.155223 13.390586" +$ns_ at 140.000000 "$node_(7) setdest 501.789191 105.467392 17.952396" +$ns_ at 140.000000 "$node_(8) setdest 505.637603 16.818056 19.257951" +$ns_ at 140.000000 "$node_(9) setdest 554.813129 57.628754 19.920661" +$ns_ at 140.000000 "$node_(10) setdest 429.800533 26.943825 6.059223" + +$ns_ at 141.000000 "$node_(1) setdest 161.247046 111.473323 19.996287" +$ns_ at 141.000000 "$node_(2) setdest 185.373829 29.829709 12.362755" +$ns_ at 141.000000 "$node_(3) setdest 183.778520 1.889613 1.713232" +$ns_ at 141.000000 "$node_(4) setdest 279.550001 84.297092 19.999419" +$ns_ at 141.000000 "$node_(5) setdest 119.793534 159.666849 19.967502" +$ns_ at 141.000000 "$node_(6) setdest 592.156148 90.830024 14.981874" +$ns_ at 141.000000 "$node_(7) setdest 488.189099 119.413179 19.479412" +$ns_ at 141.000000 "$node_(8) setdest 523.321051 26.105433 19.973976" +$ns_ at 141.000000 "$node_(9) setdest 571.486632 63.791740 17.776055" +$ns_ at 141.000000 "$node_(10) setdest 436.921300 24.140901 7.652561" + +$ns_ at 142.000000 "$node_(1) setdest 141.772095 115.540184 19.895051" +$ns_ at 142.000000 "$node_(2) setdest 196.339570 29.318053 10.977671" +$ns_ at 142.000000 "$node_(3) setdest 184.812005 4.915605 3.197612" +$ns_ at 142.000000 "$node_(4) setdest 259.803815 87.459443 19.997808" +$ns_ at 142.000000 "$node_(5) setdest 100.096591 156.319135 19.979409" +$ns_ at 142.000000 "$node_(6) setdest 590.692452 107.433540 16.667908" +$ns_ at 142.000000 "$node_(7) setdest 471.797782 130.833795 19.977632" +$ns_ at 142.000000 "$node_(8) setdest 541.126366 35.173355 19.981403" +$ns_ at 142.000000 "$node_(9) setdest 567.782585 75.167477 11.963585" +$ns_ at 142.000000 "$node_(10) setdest 446.013398 22.445407 9.248835" + +$ns_ at 143.000000 "$node_(1) setdest 127.450194 128.944032 19.615810" +$ns_ at 143.000000 "$node_(2) setdest 197.147859 36.740438 7.466266" +$ns_ at 143.000000 "$node_(3) setdest 185.893987 9.604906 4.812507" +$ns_ at 143.000000 "$node_(4) setdest 239.858385 88.607005 19.978416" +$ns_ at 143.000000 "$node_(5) setdest 80.175258 157.537770 19.958571" +$ns_ at 143.000000 "$node_(6) setdest 585.791697 124.971994 18.210293" +$ns_ at 143.000000 "$node_(7) setdest 454.924266 141.549003 19.988276" +$ns_ at 143.000000 "$node_(8) setdest 556.871642 47.471369 19.978860" +$ns_ at 143.000000 "$node_(9) setdest 558.206517 84.854499 13.621287" +$ns_ at 143.000000 "$node_(10) setdest 456.841721 21.664948 10.856413" + +$ns_ at 144.000000 "$node_(1) setdest 118.524599 146.840858 19.999066" +$ns_ at 144.000000 "$node_(2) setdest 196.591811 45.826445 9.103005" +$ns_ at 144.000000 "$node_(3) setdest 187.092769 15.899568 6.407796" +$ns_ at 144.000000 "$node_(4) setdest 220.066145 86.102236 19.950103" +$ns_ at 144.000000 "$node_(5) setdest 60.964143 162.769298 19.910697" +$ns_ at 144.000000 "$node_(6) setdest 574.313128 140.914141 19.644582" +$ns_ at 144.000000 "$node_(7) setdest 441.557267 156.254138 19.872536" +$ns_ at 144.000000 "$node_(8) setdest 571.374396 61.086555 19.892289" +$ns_ at 144.000000 "$node_(9) setdest 552.626228 98.963335 15.172307" +$ns_ at 144.000000 "$node_(10) setdest 469.299904 21.561095 12.458615" + +$ns_ at 145.000000 "$node_(1) setdest 112.115498 165.696718 19.915321" +$ns_ at 145.000000 "$node_(2) setdest 190.250128 47.613148 6.588570" +$ns_ at 145.000000 "$node_(3) setdest 187.313861 23.900730 8.004216" +$ns_ at 145.000000 "$node_(4) setdest 203.065906 94.794565 19.093577" +$ns_ at 145.000000 "$node_(5) setdest 45.972008 175.619703 19.745810" +$ns_ at 145.000000 "$node_(6) setdest 560.255115 155.135300 19.996727" +$ns_ at 145.000000 "$node_(7) setdest 438.601722 175.534770 19.505846" +$ns_ at 145.000000 "$node_(8) setdest 588.750250 69.671374 19.380903" +$ns_ at 145.000000 "$node_(9) setdest 551.878665 115.778256 16.831530" +$ns_ at 145.000000 "$node_(10) setdest 483.345939 22.123346 14.057284" + +$ns_ at 146.000000 "$node_(1) setdest 111.731159 185.496144 19.803156" +$ns_ at 146.000000 "$node_(2) setdest 183.547590 43.776632 7.722881" +$ns_ at 146.000000 "$node_(3) setdest 185.862180 33.389020 9.598699" +$ns_ at 146.000000 "$node_(4) setdest 190.626206 108.639388 18.612503" +$ns_ at 146.000000 "$node_(5) setdest 47.072918 193.458445 17.872681" +$ns_ at 146.000000 "$node_(6) setdest 545.916182 169.049201 19.980032" +$ns_ at 146.000000 "$node_(7) setdest 444.782179 193.174570 18.691190" +$ns_ at 146.000000 "$node_(8) setdest 586.255822 69.734557 2.495228" +$ns_ at 146.000000 "$node_(9) setdest 554.631147 134.007561 18.435936" +$ns_ at 146.000000 "$node_(10) setdest 498.884774 24.015570 15.653623" + +$ns_ at 147.000000 "$node_(1) setdest 111.899554 186.471049 0.989342" +$ns_ at 147.000000 "$node_(2) setdest 175.795557 38.607572 9.317360" +$ns_ at 147.000000 "$node_(3) setdest 182.523745 44.090935 11.210537" +$ns_ at 147.000000 "$node_(4) setdest 179.070997 123.870067 19.117961" +$ns_ at 147.000000 "$node_(5) setdest 62.376736 192.812895 15.317427" +$ns_ at 147.000000 "$node_(6) setdest 531.919229 183.302102 19.976483" +$ns_ at 147.000000 "$node_(7) setdest 436.724006 199.709287 10.374810" +$ns_ at 147.000000 "$node_(8) setdest 576.168467 67.370369 10.360701" +$ns_ at 147.000000 "$node_(9) setdest 562.586604 152.129905 19.791631" +$ns_ at 147.000000 "$node_(10) setdest 515.441797 28.772088 17.226708" + +$ns_ at 148.000000 "$node_(1) setdest 108.990066 180.641200 6.515540" +$ns_ at 148.000000 "$node_(2) setdest 167.327952 31.720295 10.914894" +$ns_ at 148.000000 "$node_(3) setdest 179.086940 56.426752 12.805624" +$ns_ at 148.000000 "$node_(4) setdest 163.850105 134.459779 18.542318" +$ns_ at 148.000000 "$node_(5) setdest 69.482057 179.583763 15.016508" +$ns_ at 148.000000 "$node_(6) setdest 513.623888 191.062746 19.873276" +$ns_ at 148.000000 "$node_(7) setdest 426.833193 195.609739 10.706749" +$ns_ at 148.000000 "$node_(8) setdest 564.268369 67.203121 11.901272" +$ns_ at 148.000000 "$node_(9) setdest 570.951086 170.282477 19.987006" +$ns_ at 148.000000 "$node_(10) setdest 531.755709 38.134043 18.809304" + +$ns_ at 149.000000 "$node_(1) setdest 104.753756 173.710069 8.123232" +$ns_ at 149.000000 "$node_(2) setdest 156.878825 24.944390 12.453801" +$ns_ at 149.000000 "$node_(3) setdest 176.599709 70.622921 14.412410" +$ns_ at 149.000000 "$node_(4) setdest 146.434634 142.639565 19.240778" +$ns_ at 149.000000 "$node_(5) setdest 75.707512 165.318603 15.564417" +$ns_ at 149.000000 "$node_(6) setdest 493.935495 190.646337 19.692796" +$ns_ at 149.000000 "$node_(7) setdest 417.399684 187.603159 12.373213" +$ns_ at 149.000000 "$node_(8) setdest 551.157370 70.606676 13.545571" +$ns_ at 149.000000 "$node_(9) setdest 576.243443 189.189175 19.633448" +$ns_ at 149.000000 "$node_(10) setdest 546.734747 51.323269 19.958137" + +$ns_ at 150.000000 "$node_(1) setdest 99.278520 165.679385 9.719573" +$ns_ at 150.000000 "$node_(2) setdest 143.075068 24.363392 13.815978" +$ns_ at 150.000000 "$node_(3) setdest 173.400696 86.306718 16.006723" +$ns_ at 150.000000 "$node_(4) setdest 130.649757 153.943580 19.415023" +$ns_ at 150.000000 "$node_(5) setdest 88.488112 154.041636 17.044464" +$ns_ at 150.000000 "$node_(6) setdest 475.349957 183.326049 19.975206" +$ns_ at 150.000000 "$node_(7) setdest 414.624429 174.179041 13.707991" +$ns_ at 150.000000 "$node_(8) setdest 537.189239 76.498837 15.160021" +$ns_ at 150.000000 "$node_(9) setdest 575.465562 180.778988 8.446085" +$ns_ at 150.000000 "$node_(10) setdest 560.401937 65.884227 19.970318" + +$ns_ at 151.000000 "$node_(1) setdest 91.813160 157.170777 11.319364" +$ns_ at 151.000000 "$node_(2) setdest 138.004596 35.391633 12.138031" +$ns_ at 151.000000 "$node_(3) setdest 168.114267 103.099736 17.605447" +$ns_ at 151.000000 "$node_(4) setdest 119.996573 169.374810 18.751351" +$ns_ at 151.000000 "$node_(5) setdest 105.657672 146.388340 18.798051" +$ns_ at 151.000000 "$node_(6) setdest 459.956503 171.347805 19.504788" +$ns_ at 151.000000 "$node_(7) setdest 416.813764 158.732695 15.600731" +$ns_ at 151.000000 "$node_(8) setdest 521.788366 83.114604 16.761720" +$ns_ at 151.000000 "$node_(9) setdest 577.687876 171.392622 9.645857" +$ns_ at 151.000000 "$node_(10) setdest 569.087851 83.782994 19.894998" + +$ns_ at 152.000000 "$node_(1) setdest 82.097039 148.659628 12.916759" +$ns_ at 152.000000 "$node_(2) setdest 146.119591 45.797946 13.196382" +$ns_ at 152.000000 "$node_(3) setdest 160.937701 120.920891 19.211888" +$ns_ at 152.000000 "$node_(4) setdest 105.936747 181.378621 18.487028" +$ns_ at 152.000000 "$node_(5) setdest 124.801631 141.076851 19.867135" +$ns_ at 152.000000 "$node_(6) setdest 448.544469 155.827294 19.264495" +$ns_ at 152.000000 "$node_(7) setdest 417.880719 141.561761 17.204051" +$ns_ at 152.000000 "$node_(8) setdest 503.612706 85.135031 18.287612" +$ns_ at 152.000000 "$node_(9) setdest 582.520079 161.274967 11.212365" +$ns_ at 152.000000 "$node_(10) setdest 569.702380 103.596801 19.823334" + +$ns_ at 153.000000 "$node_(1) setdest 70.379904 140.091185 14.515835" +$ns_ at 153.000000 "$node_(2) setdest 158.134566 54.430381 14.794545" +$ns_ at 153.000000 "$node_(3) setdest 156.219850 140.328761 19.973071" +$ns_ at 153.000000 "$node_(4) setdest 88.725972 189.580626 19.065247" +$ns_ at 153.000000 "$node_(5) setdest 144.327183 138.526583 19.691395" +$ns_ at 153.000000 "$node_(6) setdest 442.382049 137.609253 19.232068" +$ns_ at 153.000000 "$node_(7) setdest 416.376540 122.816638 18.805376" +$ns_ at 153.000000 "$node_(8) setdest 483.914674 83.287628 19.784472" +$ns_ at 153.000000 "$node_(9) setdest 586.204849 149.285184 12.543222" +$ns_ at 153.000000 "$node_(10) setdest 559.010783 119.996465 19.577008" + +$ns_ at 154.000000 "$node_(1) setdest 55.997138 132.866034 16.095551" +$ns_ at 154.000000 "$node_(2) setdest 172.406373 62.536019 16.412977" +$ns_ at 154.000000 "$node_(3) setdest 151.635699 159.667002 19.874155" +$ns_ at 154.000000 "$node_(4) setdest 78.054821 195.479620 12.193096" +$ns_ at 154.000000 "$node_(5) setdest 163.592391 140.383876 19.354528" +$ns_ at 154.000000 "$node_(6) setdest 441.383428 118.459568 19.175706" +$ns_ at 154.000000 "$node_(7) setdest 412.338720 103.315957 19.914330" +$ns_ at 154.000000 "$node_(8) setdest 464.344857 79.349340 19.962160" +$ns_ at 154.000000 "$node_(9) setdest 576.816577 139.350201 13.669073" +$ns_ at 154.000000 "$node_(10) setdest 540.866973 128.225326 19.922651" + +$ns_ at 155.000000 "$node_(1) setdest 41.252307 123.224103 17.617516" +$ns_ at 155.000000 "$node_(2) setdest 186.611964 72.729002 17.484157" +$ns_ at 155.000000 "$node_(3) setdest 144.090830 165.764530 9.700768" +$ns_ at 155.000000 "$node_(4) setdest 84.150229 193.306525 6.471193" +$ns_ at 155.000000 "$node_(5) setdest 178.718241 150.366969 18.123286" +$ns_ at 155.000000 "$node_(6) setdest 439.600336 99.066105 19.475263" +$ns_ at 155.000000 "$node_(7) setdest 407.087226 84.024775 19.993196" +$ns_ at 155.000000 "$node_(8) setdest 447.207539 69.162889 19.936185" +$ns_ at 155.000000 "$node_(9) setdest 561.438062 134.917972 16.004480" +$ns_ at 155.000000 "$node_(10) setdest 526.487380 140.831521 19.122992" + +$ns_ at 156.000000 "$node_(1) setdest 34.078752 105.954513 18.700231" +$ns_ at 156.000000 "$node_(2) setdest 187.094893 73.875178 1.243760" +$ns_ at 156.000000 "$node_(3) setdest 141.135685 162.335572 4.526658" +$ns_ at 156.000000 "$node_(4) setdest 92.326017 193.380787 8.176125" +$ns_ at 156.000000 "$node_(5) setdest 191.326981 163.978216 18.553877" +$ns_ at 156.000000 "$node_(6) setdest 441.938872 80.015861 19.193242" +$ns_ at 156.000000 "$node_(7) setdest 410.869511 64.803585 19.589788" +$ns_ at 156.000000 "$node_(8) setdest 431.974289 56.242401 19.974757" +$ns_ at 156.000000 "$node_(9) setdest 545.448883 127.932357 17.448572" +$ns_ at 156.000000 "$node_(10) setdest 515.851572 156.904956 19.273705" + +$ns_ at 157.000000 "$node_(1) setdest 43.916030 90.582641 18.250109" +$ns_ at 157.000000 "$node_(2) setdest 185.047818 73.249294 2.140618" +$ns_ at 157.000000 "$node_(3) setdest 137.743986 157.188007 6.164499" +$ns_ at 157.000000 "$node_(4) setdest 102.029528 194.793971 9.805877" +$ns_ at 157.000000 "$node_(5) setdest 189.463671 163.013794 2.098103" +$ns_ at 157.000000 "$node_(6) setdest 447.800127 61.558044 19.366087" +$ns_ at 157.000000 "$node_(7) setdest 421.274390 47.730933 19.993423" +$ns_ at 157.000000 "$node_(8) setdest 417.596276 42.348809 19.993978" +$ns_ at 157.000000 "$node_(9) setdest 533.516072 113.369140 18.827619" +$ns_ at 157.000000 "$node_(10) setdest 508.458281 174.872098 19.428817" + +$ns_ at 158.000000 "$node_(1) setdest 55.511989 78.080336 17.052094" +$ns_ at 158.000000 "$node_(2) setdest 181.442077 72.235518 3.745545" +$ns_ at 158.000000 "$node_(3) setdest 134.731133 150.035278 7.761367" +$ns_ at 158.000000 "$node_(4) setdest 113.388357 195.826949 11.405702" +$ns_ at 158.000000 "$node_(5) setdest 189.430347 155.904971 7.108901" +$ns_ at 158.000000 "$node_(6) setdest 451.172245 42.328961 19.522521" +$ns_ at 158.000000 "$node_(7) setdest 430.947390 30.485112 19.773347" +$ns_ at 158.000000 "$node_(8) setdest 416.344354 24.696906 17.696242" +$ns_ at 158.000000 "$node_(9) setdest 532.772610 95.462924 17.921644" +$ns_ at 158.000000 "$node_(10) setdest 499.709975 191.961210 19.198193" + +$ns_ at 159.000000 "$node_(1) setdest 62.113656 61.761513 17.603579" +$ns_ at 159.000000 "$node_(2) setdest 176.123023 71.889821 5.330276" +$ns_ at 159.000000 "$node_(3) setdest 131.954733 141.086339 9.369734" +$ns_ at 159.000000 "$node_(4) setdest 126.380996 196.373692 13.004139" +$ns_ at 159.000000 "$node_(5) setdest 187.683229 147.360821 8.720947" +$ns_ at 159.000000 "$node_(6) setdest 451.279335 22.737061 19.592193" +$ns_ at 159.000000 "$node_(7) setdest 436.024525 11.839659 19.324342" +$ns_ at 159.000000 "$node_(8) setdest 426.226077 23.617931 9.940454" +$ns_ at 159.000000 "$node_(9) setdest 526.035117 80.351338 16.545509" +$ns_ at 159.000000 "$node_(10) setdest 503.894359 181.756466 11.029318" + +$ns_ at 160.000000 "$node_(1) setdest 65.960718 43.172044 18.983367" +$ns_ at 160.000000 "$node_(2) setdest 169.348075 73.331064 6.926551" +$ns_ at 160.000000 "$node_(3) setdest 128.796997 130.584343 10.966459" +$ns_ at 160.000000 "$node_(4) setdest 140.930810 195.800748 14.561090" +$ns_ at 160.000000 "$node_(5) setdest 187.045369 137.058154 10.322393" +$ns_ at 160.000000 "$node_(6) setdest 444.402909 18.604950 8.022441" +$ns_ at 160.000000 "$node_(7) setdest 434.909325 14.365720 2.761278" +$ns_ at 160.000000 "$node_(8) setdest 424.301771 22.863179 2.067028" +$ns_ at 160.000000 "$node_(9) setdest 512.812174 79.050168 13.286808" +$ns_ at 160.000000 "$node_(10) setdest 495.740867 177.608074 9.148147" + +$ns_ at 161.000000 "$node_(1) setdest 72.042419 24.842076 19.312556" +$ns_ at 161.000000 "$node_(2) setdest 161.871350 77.405615 8.514892" +$ns_ at 161.000000 "$node_(3) setdest 126.355196 118.254232 12.569568" +$ns_ at 161.000000 "$node_(4) setdest 150.057613 187.830197 12.117269" +$ns_ at 161.000000 "$node_(5) setdest 187.048576 125.133800 11.924355" +$ns_ at 161.000000 "$node_(6) setdest 434.736032 18.300064 9.671684" +$ns_ at 161.000000 "$node_(7) setdest 431.202382 15.736051 3.952118" +$ns_ at 161.000000 "$node_(8) setdest 421.173291 24.251968 3.422882" +$ns_ at 161.000000 "$node_(9) setdest 497.627026 80.566955 15.260713" +$ns_ at 161.000000 "$node_(10) setdest 485.182776 174.616363 10.973770" + +$ns_ at 162.000000 "$node_(1) setdest 76.823348 6.990102 18.481078" +$ns_ at 162.000000 "$node_(2) setdest 155.188412 84.965774 10.090474" +$ns_ at 162.000000 "$node_(3) setdest 123.148854 104.452853 14.168934" +$ns_ at 162.000000 "$node_(4) setdest 146.530739 184.039119 5.177945" +$ns_ at 162.000000 "$node_(5) setdest 185.580284 111.692807 13.520953" +$ns_ at 162.000000 "$node_(6) setdest 423.465948 18.099012 11.271878" +$ns_ at 162.000000 "$node_(7) setdest 426.070562 17.854362 5.551829" +$ns_ at 162.000000 "$node_(8) setdest 416.609786 26.350567 5.022917" +$ns_ at 162.000000 "$node_(9) setdest 480.789422 81.428650 16.859639" +$ns_ at 162.000000 "$node_(10) setdest 473.049914 171.315733 12.573802" + +$ns_ at 163.000000 "$node_(1) setdest 74.663686 11.270534 4.794396" +$ns_ at 163.000000 "$node_(2) setdest 150.947840 95.880837 11.709870" +$ns_ at 163.000000 "$node_(3) setdest 117.765575 89.646315 15.754785" +$ns_ at 163.000000 "$node_(4) setdest 140.287067 180.992837 6.947177" +$ns_ at 163.000000 "$node_(5) setdest 184.617717 96.618690 15.104819" +$ns_ at 163.000000 "$node_(6) setdest 410.594549 18.024662 12.871613" +$ns_ at 163.000000 "$node_(7) setdest 419.556244 20.806580 7.152058" +$ns_ at 163.000000 "$node_(8) setdest 410.491787 28.885939 6.622539" +$ns_ at 163.000000 "$node_(9) setdest 462.331560 81.229685 18.458934" +$ns_ at 163.000000 "$node_(10) setdest 459.326921 167.770043 14.173654" + +$ns_ at 164.000000 "$node_(1) setdest 77.700460 16.056801 5.668364" +$ns_ at 164.000000 "$node_(2) setdest 148.502806 108.986321 13.331613" +$ns_ at 164.000000 "$node_(3) setdest 109.149818 74.597894 17.340307" +$ns_ at 164.000000 "$node_(4) setdest 131.820856 181.190189 8.468511" +$ns_ at 164.000000 "$node_(5) setdest 185.147114 79.901197 16.725873" +$ns_ at 164.000000 "$node_(6) setdest 396.123158 17.912799 14.471824" +$ns_ at 164.000000 "$node_(7) setdest 411.667762 24.597608 8.752145" +$ns_ at 164.000000 "$node_(8) setdest 402.783503 31.748758 8.222735" +$ns_ at 164.000000 "$node_(9) setdest 442.549827 79.886156 19.827305" +$ns_ at 164.000000 "$node_(10) setdest 443.980346 164.127469 15.772942" + +$ns_ at 165.000000 "$node_(1) setdest 80.751011 22.632665 7.248989" +$ns_ at 165.000000 "$node_(2) setdest 147.928686 123.907075 14.931795" +$ns_ at 165.000000 "$node_(3) setdest 96.035595 60.970960 18.912329" +$ns_ at 165.000000 "$node_(4) setdest 122.502042 185.210639 10.149105" +$ns_ at 165.000000 "$node_(5) setdest 185.141179 61.579353 18.321845" +$ns_ at 165.000000 "$node_(6) setdest 380.051979 17.762097 16.071885" +$ns_ at 165.000000 "$node_(7) setdest 402.404607 29.219681 10.352276" +$ns_ at 165.000000 "$node_(8) setdest 393.507649 34.981420 9.823012" +$ns_ at 165.000000 "$node_(9) setdest 422.735375 77.199676 19.995742" +$ns_ at 165.000000 "$node_(10) setdest 426.942629 160.730540 17.373052" + +$ns_ at 166.000000 "$node_(1) setdest 82.726194 31.276530 8.866665" +$ns_ at 166.000000 "$node_(2) setdest 148.987588 140.420750 16.547590" +$ns_ at 166.000000 "$node_(3) setdest 78.637722 51.317801 19.896468" +$ns_ at 166.000000 "$node_(4) setdest 111.343377 182.740860 11.428718" +$ns_ at 166.000000 "$node_(5) setdest 183.940304 41.880407 19.735515" +$ns_ at 166.000000 "$node_(6) setdest 362.380169 17.752944 17.671813" +$ns_ at 166.000000 "$node_(7) setdest 391.653384 34.440900 11.951984" +$ns_ at 166.000000 "$node_(8) setdest 382.669885 38.590161 11.422790" +$ns_ at 166.000000 "$node_(9) setdest 403.199353 72.940877 19.994837" +$ns_ at 166.000000 "$node_(10) setdest 408.274085 157.340788 18.973796" + +$ns_ at 167.000000 "$node_(1) setdest 83.836001 41.676120 10.458640" +$ns_ at 167.000000 "$node_(2) setdest 153.399183 157.898562 18.025984" +$ns_ at 167.000000 "$node_(3) setdest 58.975217 50.354423 19.686091" +$ns_ at 167.000000 "$node_(4) setdest 103.966143 171.791634 13.202619" +$ns_ at 167.000000 "$node_(5) setdest 192.412042 25.101152 18.796642" +$ns_ at 167.000000 "$node_(6) setdest 343.128857 18.513654 19.266336" +$ns_ at 167.000000 "$node_(7) setdest 379.364734 40.154703 13.552065" +$ns_ at 167.000000 "$node_(8) setdest 370.163237 42.213745 13.021007" +$ns_ at 167.000000 "$node_(9) setdest 384.109842 66.996327 19.993677" +$ns_ at 167.000000 "$node_(10) setdest 388.699756 153.273291 19.992471" + +$ns_ at 168.000000 "$node_(1) setdest 84.894126 53.682119 12.052537" +$ns_ at 168.000000 "$node_(2) setdest 167.272527 171.355308 19.327536" +$ns_ at 168.000000 "$node_(3) setdest 50.795974 63.637111 15.599033" +$ns_ at 168.000000 "$node_(4) setdest 99.748116 157.437131 14.961400" +$ns_ at 168.000000 "$node_(5) setdest 198.947067 22.026635 7.222133" +$ns_ at 168.000000 "$node_(6) setdest 323.346757 21.396871 19.991109" +$ns_ at 168.000000 "$node_(7) setdest 365.975599 47.239433 15.148014" +$ns_ at 168.000000 "$node_(8) setdest 355.878352 45.327028 14.620207" +$ns_ at 168.000000 "$node_(9) setdest 365.020316 61.038320 19.997696" +$ns_ at 168.000000 "$node_(10) setdest 369.105098 149.269829 19.999458" + +$ns_ at 169.000000 "$node_(1) setdest 89.451531 66.521653 13.624375" +$ns_ at 169.000000 "$node_(2) setdest 185.788334 169.598855 18.598931" +$ns_ at 169.000000 "$node_(3) setdest 57.023606 66.857513 7.011019" +$ns_ at 169.000000 "$node_(4) setdest 94.375213 141.785412 16.548244" +$ns_ at 169.000000 "$node_(5) setdest 197.685641 21.098308 1.566202" +$ns_ at 169.000000 "$node_(6) setdest 303.800583 25.627234 19.998722" +$ns_ at 169.000000 "$node_(7) setdest 351.976358 56.428967 16.745934" +$ns_ at 169.000000 "$node_(8) setdest 339.845401 47.794114 16.221653" +$ns_ at 169.000000 "$node_(9) setdest 345.625203 56.166910 19.997526" +$ns_ at 169.000000 "$node_(10) setdest 349.412594 145.778646 19.999576" + +$ns_ at 170.000000 "$node_(1) setdest 98.595971 78.660537 15.197805" +$ns_ at 170.000000 "$node_(2) setdest 191.824229 152.854155 17.799355" +$ns_ at 170.000000 "$node_(3) setdest 65.505872 65.288800 8.626105" +$ns_ at 170.000000 "$node_(4) setdest 84.771789 126.399680 18.136882" +$ns_ at 170.000000 "$node_(5) setdest 194.447590 20.748193 3.256924" +$ns_ at 170.000000 "$node_(6) setdest 284.422089 30.561769 19.996891" +$ns_ at 170.000000 "$node_(7) setdest 336.488392 66.266943 18.348375" +$ns_ at 170.000000 "$node_(8) setdest 322.137911 49.798598 17.820583" +$ns_ at 170.000000 "$node_(9) setdest 325.954317 52.576373 19.995892" +$ns_ at 170.000000 "$node_(10) setdest 329.735957 142.201287 19.999189" + +$ns_ at 171.000000 "$node_(1) setdest 112.977297 87.271027 16.761953" +$ns_ at 171.000000 "$node_(2) setdest 191.611035 136.352639 16.502893" +$ns_ at 171.000000 "$node_(3) setdest 75.600405 63.592078 10.236135" +$ns_ at 171.000000 "$node_(4) setdest 69.325659 114.455881 19.525298" +$ns_ at 171.000000 "$node_(5) setdest 189.626370 20.167736 4.856036" +$ns_ at 171.000000 "$node_(6) setdest 265.427300 36.816797 19.998184" +$ns_ at 171.000000 "$node_(7) setdest 319.125355 75.725898 19.772377" +$ns_ at 171.000000 "$node_(8) setdest 302.740361 50.564467 19.412663" +$ns_ at 171.000000 "$node_(9) setdest 306.097225 50.200000 19.998782" +$ns_ at 171.000000 "$node_(10) setdest 310.324303 137.409564 19.994322" + +$ns_ at 172.000000 "$node_(1) setdest 130.889740 91.652087 18.440426" +$ns_ at 172.000000 "$node_(2) setdest 188.195099 119.984720 16.720568" +$ns_ at 172.000000 "$node_(3) setdest 87.261624 61.566337 11.835863" +$ns_ at 172.000000 "$node_(4) setdest 50.408455 108.069384 19.966171" +$ns_ at 172.000000 "$node_(5) setdest 183.210315 19.462493 6.454698" +$ns_ at 172.000000 "$node_(6) setdest 246.804372 44.105199 19.998357" +$ns_ at 172.000000 "$node_(7) setdest 300.903681 83.960245 19.995847" +$ns_ at 172.000000 "$node_(8) setdest 282.761368 49.802834 19.993506" +$ns_ at 172.000000 "$node_(9) setdest 286.178420 48.427559 19.997508" +$ns_ at 172.000000 "$node_(10) setdest 291.419852 130.900985 19.993495" + +$ns_ at 173.000000 "$node_(1) setdest 150.117221 96.445478 19.815968" +$ns_ at 173.000000 "$node_(2) setdest 186.605797 101.739334 18.314476" +$ns_ at 173.000000 "$node_(3) setdest 100.596739 59.980711 13.429055" +$ns_ at 173.000000 "$node_(4) setdest 30.490170 107.030632 19.945353" +$ns_ at 173.000000 "$node_(5) setdest 175.384564 17.552862 8.055375" +$ns_ at 173.000000 "$node_(6) setdest 228.279753 51.641445 19.998913" +$ns_ at 173.000000 "$node_(7) setdest 282.201859 91.043224 19.998168" +$ns_ at 173.000000 "$node_(8) setdest 263.086759 46.344289 19.976279" +$ns_ at 173.000000 "$node_(9) setdest 266.189461 47.940458 19.994893" +$ns_ at 173.000000 "$node_(10) setdest 273.195059 122.679443 19.993419" + +$ns_ at 174.000000 "$node_(1) setdest 168.902350 103.226473 19.971554" +$ns_ at 174.000000 "$node_(2) setdest 184.513754 82.093305 19.757102" +$ns_ at 174.000000 "$node_(3) setdest 115.623096 60.000922 15.026371" +$ns_ at 174.000000 "$node_(4) setdest 11.378375 105.199769 19.199290" +$ns_ at 174.000000 "$node_(5) setdest 165.905684 15.739495 9.650776" +$ns_ at 174.000000 "$node_(6) setdest 210.524312 60.821660 19.988297" +$ns_ at 174.000000 "$node_(7) setdest 263.237099 97.391304 19.999006" +$ns_ at 174.000000 "$node_(8) setdest 244.452806 39.179900 19.963784" +$ns_ at 174.000000 "$node_(9) setdest 246.259591 49.492870 19.990241" +$ns_ at 174.000000 "$node_(10) setdest 255.875893 112.695630 19.990749" + +$ns_ at 175.000000 "$node_(1) setdest 179.680069 118.492693 18.687341" +$ns_ at 175.000000 "$node_(2) setdest 180.258778 62.740869 19.814682" +$ns_ at 175.000000 "$node_(3) setdest 132.021670 62.570627 16.598693" +$ns_ at 175.000000 "$node_(4) setdest 5.755446 88.484328 17.635853" +$ns_ at 175.000000 "$node_(5) setdest 155.223912 16.670444 10.722262" +$ns_ at 175.000000 "$node_(6) setdest 194.092342 72.196532 19.984929" +$ns_ at 175.000000 "$node_(7) setdest 244.024859 102.944527 19.998711" +$ns_ at 175.000000 "$node_(8) setdest 226.039257 31.479843 19.958700" +$ns_ at 175.000000 "$node_(9) setdest 226.666973 53.441639 19.986582" +$ns_ at 175.000000 "$node_(10) setdest 239.867016 100.730485 19.986216" + +$ns_ at 176.000000 "$node_(1) setdest 178.455056 113.826735 4.824088" +$ns_ at 176.000000 "$node_(2) setdest 170.317497 46.270492 19.238045" +$ns_ at 176.000000 "$node_(3) setdest 148.852278 69.512159 18.205884" +$ns_ at 176.000000 "$node_(4) setdest 7.747696 72.189753 16.415914" +$ns_ at 176.000000 "$node_(5) setdest 155.067960 17.267330 0.616923" +$ns_ at 176.000000 "$node_(6) setdest 179.520253 85.870172 19.982848" +$ns_ at 176.000000 "$node_(7) setdest 224.758061 108.308526 19.999549" +$ns_ at 176.000000 "$node_(8) setdest 206.348654 28.206572 19.960815" +$ns_ at 176.000000 "$node_(9) setdest 207.773501 59.963121 19.987322" +$ns_ at 176.000000 "$node_(10) setdest 225.733708 86.607919 19.979922" + +$ns_ at 177.000000 "$node_(1) setdest 175.246544 108.496016 6.221826" +$ns_ at 177.000000 "$node_(2) setdest 157.726290 31.362125 19.514044" +$ns_ at 177.000000 "$node_(3) setdest 164.683417 81.103727 19.621148" +$ns_ at 177.000000 "$node_(4) setdest 17.513917 60.031501 15.594941" +$ns_ at 177.000000 "$node_(5) setdest 156.535342 17.780235 1.554439" +$ns_ at 177.000000 "$node_(6) setdest 167.122891 101.545865 19.985543" +$ns_ at 177.000000 "$node_(7) setdest 205.299075 112.923724 19.998805" +$ns_ at 177.000000 "$node_(8) setdest 186.493072 30.105946 19.946222" +$ns_ at 177.000000 "$node_(9) setdest 189.928589 68.956396 19.982989" +$ns_ at 177.000000 "$node_(10) setdest 213.261658 71.046403 19.942738" + +$ns_ at 178.000000 "$node_(1) setdest 172.424003 101.197065 7.825690" +$ns_ at 178.000000 "$node_(2) setdest 142.888376 19.133692 19.227539" +$ns_ at 178.000000 "$node_(3) setdest 174.810337 98.211073 19.880034" +$ns_ at 178.000000 "$node_(4) setdest 31.152481 49.569283 17.189195" +$ns_ at 178.000000 "$node_(5) setdest 159.699097 18.019297 3.172774" +$ns_ at 178.000000 "$node_(6) setdest 157.052647 118.802745 19.980234" +$ns_ at 178.000000 "$node_(7) setdest 185.768249 117.229326 19.999784" +$ns_ at 178.000000 "$node_(8) setdest 167.818405 37.111714 19.945525" +$ns_ at 178.000000 "$node_(9) setdest 173.871013 80.833808 19.972948" +$ns_ at 178.000000 "$node_(10) setdest 196.419365 70.738967 16.845098" + +$ns_ at 179.000000 "$node_(1) setdest 170.753363 91.918408 9.427858" +$ns_ at 179.000000 "$node_(2) setdest 125.010723 12.749372 18.983414" +$ns_ at 179.000000 "$node_(3) setdest 181.874760 116.920836 19.999033" +$ns_ at 179.000000 "$node_(4) setdest 46.551054 38.789818 18.796620" +$ns_ at 179.000000 "$node_(5) setdest 163.906434 16.048997 4.645834" +$ns_ at 179.000000 "$node_(6) setdest 150.159618 137.551322 19.975559" +$ns_ at 179.000000 "$node_(7) setdest 166.344084 121.993628 19.999919" +$ns_ at 179.000000 "$node_(8) setdest 150.738069 47.480338 19.981147" +$ns_ at 179.000000 "$node_(9) setdest 160.581359 95.722920 19.957469" +$ns_ at 179.000000 "$node_(10) setdest 195.672687 84.091040 13.372934" + +$ns_ at 180.000000 "$node_(1) setdest 170.379290 80.898702 11.026053" +$ns_ at 180.000000 "$node_(2) setdest 106.108663 11.307135 18.957001" +$ns_ at 180.000000 "$node_(3) setdest 186.831517 136.224536 19.929934" +$ns_ at 180.000000 "$node_(4) setdest 63.824239 28.948857 19.879825" +$ns_ at 180.000000 "$node_(5) setdest 169.419179 13.556525 6.050023" +$ns_ at 180.000000 "$node_(6) setdest 147.828308 157.269197 19.855216" +$ns_ at 180.000000 "$node_(7) setdest 147.059157 127.267473 19.993046" +$ns_ at 180.000000 "$node_(8) setdest 134.966214 59.765581 19.991963" +$ns_ at 180.000000 "$node_(9) setdest 151.747848 113.601200 19.941509" +$ns_ at 180.000000 "$node_(10) setdest 189.493134 92.502152 10.437130" + +$ns_ at 181.000000 "$node_(1) setdest 171.163052 68.288192 12.634842" +$ns_ at 181.000000 "$node_(2) setdest 91.123305 20.053465 17.351060" +$ns_ at 181.000000 "$node_(3) setdest 188.637831 156.141046 19.998253" +$ns_ at 181.000000 "$node_(4) setdest 82.685943 28.747684 18.862777" +$ns_ at 181.000000 "$node_(5) setdest 172.747269 19.290485 6.629817" +$ns_ at 181.000000 "$node_(6) setdest 160.476531 170.330272 18.181563" +$ns_ at 181.000000 "$node_(7) setdest 128.509912 134.706388 19.985292" +$ns_ at 181.000000 "$node_(8) setdest 117.253969 68.951910 19.952752" +$ns_ at 181.000000 "$node_(9) setdest 145.153561 132.482364 19.999575" +$ns_ at 181.000000 "$node_(10) setdest 178.683836 98.024600 12.138302" + +$ns_ at 182.000000 "$node_(1) setdest 172.888706 54.198358 14.195116" +$ns_ at 182.000000 "$node_(2) setdest 83.890009 35.949121 17.464032" +$ns_ at 182.000000 "$node_(3) setdest 190.094980 176.021799 19.934083" +$ns_ at 182.000000 "$node_(4) setdest 96.855632 39.340425 17.691417" +$ns_ at 182.000000 "$node_(5) setdest 173.027925 27.952089 8.666149" +$ns_ at 182.000000 "$node_(6) setdest 177.244737 175.603016 17.577672" +$ns_ at 182.000000 "$node_(7) setdest 111.416146 145.032855 19.970798" +$ns_ at 182.000000 "$node_(8) setdest 97.650034 72.426294 19.909435" +$ns_ at 182.000000 "$node_(9) setdest 139.260466 151.590578 19.996310" +$ns_ at 182.000000 "$node_(10) setdest 167.962697 106.536181 13.689040" + +$ns_ at 183.000000 "$node_(1) setdest 180.428826 40.405392 15.719393" +$ns_ at 183.000000 "$node_(2) setdest 80.665629 54.207418 18.540821" +$ns_ at 183.000000 "$node_(3) setdest 196.076606 187.662698 13.087794" +$ns_ at 183.000000 "$node_(4) setdest 113.096835 43.407822 16.742771" +$ns_ at 183.000000 "$node_(5) setdest 175.004921 38.052270 10.291850" +$ns_ at 183.000000 "$node_(6) setdest 192.567746 173.044954 15.535067" +$ns_ at 183.000000 "$node_(7) setdest 94.933105 156.301721 19.966922" +$ns_ at 183.000000 "$node_(8) setdest 78.202415 68.303846 19.879749" +$ns_ at 183.000000 "$node_(9) setdest 128.466810 168.153105 19.769176" +$ns_ at 183.000000 "$node_(10) setdest 155.692441 115.659456 15.290302" + +$ns_ at 184.000000 "$node_(1) setdest 194.682139 32.290056 16.401695" +$ns_ at 184.000000 "$node_(2) setdest 71.721236 70.341996 18.447948" +$ns_ at 184.000000 "$node_(3) setdest 195.005636 184.210017 3.614967" +$ns_ at 184.000000 "$node_(4) setdest 131.373418 43.329977 18.276749" +$ns_ at 184.000000 "$node_(5) setdest 177.681189 49.641032 11.893773" +$ns_ at 184.000000 "$node_(6) setdest 192.538130 172.725928 0.320398" +$ns_ at 184.000000 "$node_(7) setdest 76.208559 163.180223 19.947993" +$ns_ at 184.000000 "$node_(8) setdest 59.386392 61.528995 19.998534" +$ns_ at 184.000000 "$node_(9) setdest 119.659162 170.816167 9.201443" +$ns_ at 184.000000 "$node_(10) setdest 139.468774 119.990598 16.791848" + +$ns_ at 185.000000 "$node_(1) setdest 195.613467 33.069178 1.214250" +$ns_ at 185.000000 "$node_(2) setdest 72.027737 89.787372 19.447792" +$ns_ at 185.000000 "$node_(3) setdest 194.672645 188.582756 4.385400" +$ns_ at 185.000000 "$node_(4) setdest 134.492679 47.692958 5.363338" +$ns_ at 185.000000 "$node_(5) setdest 173.964993 62.431439 13.319333" +$ns_ at 185.000000 "$node_(6) setdest 191.099665 172.527656 1.452065" +$ns_ at 185.000000 "$node_(7) setdest 56.380453 165.404161 19.952436" +$ns_ at 185.000000 "$node_(8) setdest 40.804330 54.137082 19.998335" +$ns_ at 185.000000 "$node_(9) setdest 119.805941 169.859912 0.967454" +$ns_ at 185.000000 "$node_(10) setdest 121.371407 116.477413 18.435216" + +$ns_ at 186.000000 "$node_(1) setdest 195.523460 35.547228 2.479684" +$ns_ at 186.000000 "$node_(2) setdest 72.860222 109.769952 19.999913" +$ns_ at 186.000000 "$node_(3) setdest 193.465576 194.532746 6.071194" +$ns_ at 186.000000 "$node_(4) setdest 134.472696 54.482129 6.789201" +$ns_ at 186.000000 "$node_(5) setdest 169.445995 76.675295 14.943519" +$ns_ at 186.000000 "$node_(6) setdest 188.017704 172.548818 3.082034" +$ns_ at 186.000000 "$node_(7) setdest 36.936529 161.362410 19.859555" +$ns_ at 186.000000 "$node_(8) setdest 21.592497 48.640305 19.982719" +$ns_ at 186.000000 "$node_(9) setdest 120.575903 167.393762 2.583551" +$ns_ at 186.000000 "$node_(10) setdest 104.372214 106.231584 19.848162" + +$ns_ at 187.000000 "$node_(1) setdest 195.465659 39.626432 4.079614" +$ns_ at 187.000000 "$node_(2) setdest 73.033876 129.767033 19.997835" +$ns_ at 187.000000 "$node_(3) setdest 192.328990 202.117959 7.669894" +$ns_ at 187.000000 "$node_(4) setdest 134.718626 62.867220 8.388696" +$ns_ at 187.000000 "$node_(5) setdest 165.002660 92.609977 16.542591" +$ns_ at 187.000000 "$node_(6) setdest 183.363363 172.076516 4.678243" +$ns_ at 187.000000 "$node_(7) setdest 27.040671 147.302132 17.193587" +$ns_ at 187.000000 "$node_(8) setdest 15.086590 34.481154 15.582310" +$ns_ at 187.000000 "$node_(9) setdest 122.262624 163.566603 4.182365" +$ns_ at 187.000000 "$node_(10) setdest 87.019330 96.377428 19.955625" + +$ns_ at 188.000000 "$node_(1) setdest 195.493442 45.306014 5.679650" +$ns_ at 188.000000 "$node_(2) setdest 72.088632 149.742168 19.997487" +$ns_ at 188.000000 "$node_(3) setdest 191.694603 211.364885 9.268662" +$ns_ at 188.000000 "$node_(4) setdest 135.397225 72.832879 9.988737" +$ns_ at 188.000000 "$node_(5) setdest 160.860419 110.273346 18.142567" +$ns_ at 188.000000 "$node_(6) setdest 177.331385 170.366266 6.269746" +$ns_ at 188.000000 "$node_(7) setdest 33.339932 142.144690 8.141247" +$ns_ at 188.000000 "$node_(8) setdest 25.950932 28.357513 12.471284" +$ns_ at 188.000000 "$node_(9) setdest 125.574753 158.840877 5.770848" +$ns_ at 188.000000 "$node_(10) setdest 73.723879 81.531864 19.928868" + +$ns_ at 189.000000 "$node_(1) setdest 195.501926 52.585695 7.279686" +$ns_ at 189.000000 "$node_(2) setdest 70.118723 169.643281 19.998371" +$ns_ at 189.000000 "$node_(3) setdest 191.784503 222.234607 10.870094" +$ns_ at 189.000000 "$node_(4) setdest 136.587465 84.360558 11.588963" +$ns_ at 189.000000 "$node_(5) setdest 157.134792 129.574013 19.656960" +$ns_ at 189.000000 "$node_(6) setdest 170.511875 166.445811 7.866110" +$ns_ at 189.000000 "$node_(7) setdest 42.075135 137.545000 9.872230" +$ns_ at 189.000000 "$node_(8) setdest 39.756298 24.207709 14.415582" +$ns_ at 189.000000 "$node_(9) setdest 131.266657 154.174797 7.360033" +$ns_ at 189.000000 "$node_(10) setdest 62.437001 65.038639 19.985497" + +$ns_ at 190.000000 "$node_(1) setdest 195.416493 61.464644 8.879359" +$ns_ at 190.000000 "$node_(2) setdest 67.278825 189.439428 19.998811" +$ns_ at 190.000000 "$node_(3) setdest 192.074302 234.702462 12.471222" +$ns_ at 190.000000 "$node_(4) setdest 138.172614 97.454006 13.189051" +$ns_ at 190.000000 "$node_(5) setdest 154.020435 149.328771 19.998742" +$ns_ at 190.000000 "$node_(6) setdest 163.520779 160.060724 9.468092" +$ns_ at 190.000000 "$node_(7) setdest 51.690561 131.290754 11.470484" +$ns_ at 190.000000 "$node_(8) setdest 55.087819 19.437284 16.056541" +$ns_ at 190.000000 "$node_(9) setdest 139.311546 150.191848 8.976865" +$ns_ at 190.000000 "$node_(10) setdest 59.419189 45.948052 19.327640" + +$ns_ at 191.000000 "$node_(1) setdest 195.032236 71.937101 10.479504" +$ns_ at 191.000000 "$node_(2) setdest 63.774126 209.129366 19.999414" +$ns_ at 191.000000 "$node_(3) setdest 192.134525 248.773197 14.070864" +$ns_ at 191.000000 "$node_(4) setdest 140.151210 112.110209 14.789156" +$ns_ at 191.000000 "$node_(5) setdest 151.528492 169.172266 19.999351" +$ns_ at 191.000000 "$node_(6) setdest 156.653106 151.371539 11.075507" +$ns_ at 191.000000 "$node_(7) setdest 61.020362 122.160481 13.054006" +$ns_ at 191.000000 "$node_(8) setdest 72.246356 15.431568 17.619908" +$ns_ at 191.000000 "$node_(9) setdest 149.037901 146.020315 10.583179" +$ns_ at 191.000000 "$node_(10) setdest 62.233515 26.981985 19.173735" + +$ns_ at 192.000000 "$node_(1) setdest 194.328858 83.995651 12.079047" +$ns_ at 192.000000 "$node_(2) setdest 60.068139 228.782066 19.999074" +$ns_ at 192.000000 "$node_(3) setdest 191.210367 264.413225 15.667308" +$ns_ at 192.000000 "$node_(4) setdest 142.034412 128.390629 16.388976" +$ns_ at 192.000000 "$node_(5) setdest 149.209226 189.037194 19.999859" +$ns_ at 192.000000 "$node_(6) setdest 149.885588 140.648727 12.679826" +$ns_ at 192.000000 "$node_(7) setdest 70.178665 110.699923 14.670341" +$ns_ at 192.000000 "$node_(8) setdest 91.480263 14.579377 19.252776" +$ns_ at 192.000000 "$node_(9) setdest 160.621424 145.650484 11.589425" +$ns_ at 192.000000 "$node_(10) setdest 71.531198 10.851366 18.618372" + +$ns_ at 193.000000 "$node_(1) setdest 193.150556 97.624358 13.679549" +$ns_ at 193.000000 "$node_(2) setdest 56.962041 248.539067 19.999673" +$ns_ at 193.000000 "$node_(3) setdest 188.728422 281.499973 17.266065" +$ns_ at 193.000000 "$node_(4) setdest 143.661611 146.305417 17.988535" +$ns_ at 193.000000 "$node_(5) setdest 146.639128 208.871240 19.999870" +$ns_ at 193.000000 "$node_(6) setdest 141.678111 128.965386 14.278065" +$ns_ at 193.000000 "$node_(7) setdest 77.526460 96.240451 16.219323" +$ns_ at 193.000000 "$node_(8) setdest 111.285642 11.901841 19.985551" +$ns_ at 193.000000 "$node_(9) setdest 162.320582 151.191100 5.795306" +$ns_ at 193.000000 "$node_(10) setdest 69.434904 14.512209 4.218556" + +$ns_ at 194.000000 "$node_(1) setdest 191.331293 112.793988 15.278331" +$ns_ at 194.000000 "$node_(2) setdest 54.045499 268.325206 19.999938" +$ns_ at 194.000000 "$node_(3) setdest 184.809887 299.958796 18.870163" +$ns_ at 194.000000 "$node_(4) setdest 144.576980 165.824228 19.540263" +$ns_ at 194.000000 "$node_(5) setdest 143.541952 228.628802 19.998844" +$ns_ at 194.000000 "$node_(6) setdest 132.011405 116.363647 15.882350" +$ns_ at 194.000000 "$node_(7) setdest 81.390315 78.832201 17.831897" +$ns_ at 194.000000 "$node_(8) setdest 130.995388 8.526521 19.996672" +$ns_ at 194.000000 "$node_(9) setdest 158.304055 156.109234 6.349844" +$ns_ at 194.000000 "$node_(10) setdest 64.357297 23.822765 10.605120" + +$ns_ at 195.000000 "$node_(1) setdest 188.282059 129.392447 16.876216" +$ns_ at 195.000000 "$node_(2) setdest 51.150472 288.114471 19.999904" +$ns_ at 195.000000 "$node_(3) setdest 179.637007 319.243200 19.966145" +$ns_ at 195.000000 "$node_(4) setdest 144.982177 185.819869 19.999746" +$ns_ at 195.000000 "$node_(5) setdest 139.870629 248.288518 19.999576" +$ns_ at 195.000000 "$node_(6) setdest 122.921583 101.453520 17.462438" +$ns_ at 195.000000 "$node_(7) setdest 80.824768 59.414565 19.425870" +$ns_ at 195.000000 "$node_(8) setdest 150.685052 6.112369 19.837111" +$ns_ at 195.000000 "$node_(9) setdest 153.669623 162.564787 7.946831" +$ns_ at 195.000000 "$node_(10) setdest 62.963882 36.031903 12.288395" + +$ns_ at 196.000000 "$node_(1) setdest 183.957321 147.358510 18.479253" +$ns_ at 196.000000 "$node_(2) setdest 48.611087 307.952411 19.999809" +$ns_ at 196.000000 "$node_(3) setdest 172.922634 338.070779 19.989011" +$ns_ at 196.000000 "$node_(4) setdest 145.105736 205.819344 19.999857" +$ns_ at 196.000000 "$node_(5) setdest 135.716006 267.851495 19.999273" +$ns_ at 196.000000 "$node_(6) setdest 114.965812 84.111046 19.080244" +$ns_ at 196.000000 "$node_(7) setdest 77.199943 39.771797 19.974427" +$ns_ at 196.000000 "$node_(8) setdest 170.172454 10.569598 19.990641" +$ns_ at 196.000000 "$node_(9) setdest 146.820750 169.209669 9.542616" +$ns_ at 196.000000 "$node_(10) setdest 65.562221 49.704614 13.917413" + +$ns_ at 197.000000 "$node_(1) setdest 179.424231 166.672897 19.839215" +$ns_ at 197.000000 "$node_(2) setdest 46.811525 327.868842 19.997566" +$ns_ at 197.000000 "$node_(3) setdest 163.939414 355.929108 19.990452" +$ns_ at 197.000000 "$node_(4) setdest 145.006109 225.818471 19.999375" +$ns_ at 197.000000 "$node_(5) setdest 130.662166 287.197475 19.995206" +$ns_ at 197.000000 "$node_(6) setdest 106.357417 66.062345 19.996501" +$ns_ at 197.000000 "$node_(7) setdest 75.946021 20.181201 19.630684" +$ns_ at 197.000000 "$node_(8) setdest 188.099728 18.417830 19.569923" +$ns_ at 197.000000 "$node_(9) setdest 138.645810 176.738594 11.113701" +$ns_ at 197.000000 "$node_(10) setdest 71.277978 64.136289 15.522342" + +$ns_ at 198.000000 "$node_(1) setdest 175.356307 186.254820 19.999992" +$ns_ at 198.000000 "$node_(2) setdest 45.427324 347.820835 19.999951" +$ns_ at 198.000000 "$node_(3) setdest 152.416252 372.246071 19.975649" +$ns_ at 198.000000 "$node_(4) setdest 143.832197 245.780166 19.996183" +$ns_ at 198.000000 "$node_(5) setdest 123.549176 305.874927 19.986041" +$ns_ at 198.000000 "$node_(6) setdest 95.007893 49.716550 19.899666" +$ns_ at 198.000000 "$node_(7) setdest 89.910882 8.256505 18.363434" +$ns_ at 198.000000 "$node_(8) setdest 186.767229 35.321285 16.955895" +$ns_ at 198.000000 "$node_(9) setdest 140.360459 185.666801 9.091364" +$ns_ at 198.000000 "$node_(10) setdest 79.585340 79.054188 17.075010" + +$ns_ at 199.000000 "$node_(1) setdest 171.310371 205.841290 19.999985" +$ns_ at 199.000000 "$node_(2) setdest 45.246485 367.808943 19.988926" +$ns_ at 199.000000 "$node_(3) setdest 141.026187 379.353825 13.425861" +$ns_ at 199.000000 "$node_(4) setdest 141.471649 265.638334 19.997976" +$ns_ at 199.000000 "$node_(5) setdest 113.615585 323.205618 19.975712" +$ns_ at 199.000000 "$node_(6) setdest 77.769915 49.534854 17.238935" +$ns_ at 199.000000 "$node_(7) setdest 106.824065 10.366785 17.044326" +$ns_ at 199.000000 "$node_(8) setdest 175.640526 47.155431 16.243476" +$ns_ at 199.000000 "$node_(9) setdest 145.881782 184.022631 5.760929" +$ns_ at 199.000000 "$node_(10) setdest 88.755604 95.337817 18.688240" + +$ns_ at 200.000000 "$node_(1) setdest 167.224719 225.419522 19.999993" +$ns_ at 200.000000 "$node_(2) setdest 49.050666 387.354600 19.912420" +$ns_ at 200.000000 "$node_(3) setdest 144.119591 377.312601 3.706177" +$ns_ at 200.000000 "$node_(4) setdest 138.256986 285.377161 19.998884" +$ns_ at 200.000000 "$node_(5) setdest 100.527566 338.285629 19.967548" +$ns_ at 200.000000 "$node_(6) setdest 72.091162 65.514596 16.958785" +$ns_ at 200.000000 "$node_(7) setdest 122.081158 16.304017 16.371610" +$ns_ at 200.000000 "$node_(8) setdest 160.926667 51.839992 15.441592" +$ns_ at 200.000000 "$node_(9) setdest 149.142428 177.126205 7.628401" +$ns_ at 200.000000 "$node_(10) setdest 99.613365 111.937528 19.835356" + +$ns_ at 201.000000 "$node_(1) setdest 163.241486 245.018750 19.999897" +$ns_ at 201.000000 "$node_(2) setdest 61.654558 402.610167 19.788644" +$ns_ at 201.000000 "$node_(3) setdest 149.076068 375.294812 5.351461" +$ns_ at 201.000000 "$node_(4) setdest 134.200711 304.958942 19.997488" +$ns_ at 201.000000 "$node_(5) setdest 84.538504 350.240382 19.964123" +$ns_ at 201.000000 "$node_(6) setdest 67.136324 80.376662 15.666251" +$ns_ at 201.000000 "$node_(7) setdest 139.717702 18.648063 17.791633" +$ns_ at 201.000000 "$node_(8) setdest 145.832431 59.287246 16.831446" +$ns_ at 201.000000 "$node_(9) setdest 152.552155 168.551362 9.227902" +$ns_ at 201.000000 "$node_(10) setdest 117.014782 121.404332 19.809839" + +$ns_ at 202.000000 "$node_(1) setdest 159.391115 264.644218 19.999609" +$ns_ at 202.000000 "$node_(2) setdest 78.236392 413.777419 19.991617" +$ns_ at 202.000000 "$node_(3) setdest 155.820516 373.560161 6.963950" +$ns_ at 202.000000 "$node_(4) setdest 129.372934 324.366691 19.999203" +$ns_ at 202.000000 "$node_(5) setdest 66.671342 359.206049 19.990464" +$ns_ at 202.000000 "$node_(6) setdest 59.005599 94.783951 16.543236" +$ns_ at 202.000000 "$node_(7) setdest 158.694781 17.342255 19.021952" +$ns_ at 202.000000 "$node_(8) setdest 128.180124 62.164422 17.885247" +$ns_ at 202.000000 "$node_(9) setdest 155.239978 158.052038 10.837906" +$ns_ at 202.000000 "$node_(10) setdest 136.907991 122.875448 19.947530" + +$ns_ at 203.000000 "$node_(1) setdest 156.090421 284.369430 19.999465" +$ns_ at 203.000000 "$node_(2) setdest 95.064626 424.526948 19.968521" +$ns_ at 203.000000 "$node_(3) setdest 163.970693 371.055823 8.526259" +$ns_ at 203.000000 "$node_(4) setdest 123.550868 343.497632 19.997233" +$ns_ at 203.000000 "$node_(5) setdest 47.626658 365.068247 19.926499" +$ns_ at 203.000000 "$node_(6) setdest 44.129184 104.390756 17.708711" +$ns_ at 203.000000 "$node_(7) setdest 173.699979 7.360376 18.022038" +$ns_ at 203.000000 "$node_(8) setdest 113.299302 53.211896 17.366248" +$ns_ at 203.000000 "$node_(9) setdest 158.404079 146.023580 12.437658" +$ns_ at 203.000000 "$node_(10) setdest 156.369232 118.860713 19.871034" + +$ns_ at 204.000000 "$node_(1) setdest 153.023861 304.132837 19.999901" +$ns_ at 204.000000 "$node_(2) setdest 111.823384 435.393263 19.973301" +$ns_ at 204.000000 "$node_(3) setdest 169.826488 362.901841 10.038813" +$ns_ at 204.000000 "$node_(4) setdest 116.289633 362.124419 19.992067" +$ns_ at 204.000000 "$node_(5) setdest 28.522161 370.489417 19.858773" +$ns_ at 204.000000 "$node_(6) setdest 27.051512 112.644070 18.967447" +$ns_ at 204.000000 "$node_(7) setdest 180.486356 8.534284 6.887160" +$ns_ at 204.000000 "$node_(8) setdest 98.103987 42.322359 18.694375" +$ns_ at 204.000000 "$node_(9) setdest 161.029362 132.243002 14.028416" +$ns_ at 204.000000 "$node_(10) setdest 172.443816 107.486758 19.691600" + +$ns_ at 205.000000 "$node_(1) setdest 149.277393 323.777154 19.998380" +$ns_ at 205.000000 "$node_(2) setdest 129.394110 444.945228 19.999261" +$ns_ at 205.000000 "$node_(3) setdest 168.110917 364.353857 2.247562" +$ns_ at 205.000000 "$node_(4) setdest 106.734376 379.674290 19.982515" +$ns_ at 205.000000 "$node_(5) setdest 24.594624 377.857992 8.349937" +$ns_ at 205.000000 "$node_(6) setdest 9.174780 116.138563 18.215078" +$ns_ at 205.000000 "$node_(7) setdest 181.039157 13.299606 4.797278" +$ns_ at 205.000000 "$node_(8) setdest 82.787587 30.297708 19.472656" +$ns_ at 205.000000 "$node_(9) setdest 162.200630 116.656242 15.630705" +$ns_ at 205.000000 "$node_(10) setdest 181.116590 90.598550 18.984958" + +$ns_ at 206.000000 "$node_(1) setdest 144.598638 343.219337 19.997231" +$ns_ at 206.000000 "$node_(2) setdest 147.113812 454.211788 19.996424" +$ns_ at 206.000000 "$node_(3) setdest 161.975039 369.257123 7.854363" +$ns_ at 206.000000 "$node_(4) setdest 94.731875 395.657510 19.988080" +$ns_ at 206.000000 "$node_(5) setdest 28.110519 380.700946 4.521493" +$ns_ at 206.000000 "$node_(6) setdest 5.389523 111.880557 5.697261" +$ns_ at 206.000000 "$node_(7) setdest 182.643028 19.505356 6.409660" +$ns_ at 206.000000 "$node_(8) setdest 66.703839 19.152674 19.567798" +$ns_ at 206.000000 "$node_(9) setdest 163.096529 99.441502 17.238037" +$ns_ at 206.000000 "$node_(10) setdest 185.879217 71.902868 19.292773" + +$ns_ at 207.000000 "$node_(1) setdest 138.750622 362.341225 19.996146" +$ns_ at 207.000000 "$node_(2) setdest 163.876030 465.070012 19.971805" +$ns_ at 207.000000 "$node_(3) setdest 153.481555 373.421602 9.459501" +$ns_ at 207.000000 "$node_(4) setdest 81.367103 410.535184 19.999058" +$ns_ at 207.000000 "$node_(5) setdest 33.182405 384.121656 6.117622" +$ns_ at 207.000000 "$node_(6) setdest 7.670427 109.002037 3.672656" +$ns_ at 207.000000 "$node_(7) setdest 183.240979 27.459965 7.977052" +$ns_ at 207.000000 "$node_(8) setdest 48.471800 15.353912 18.623584" +$ns_ at 207.000000 "$node_(9) setdest 164.150679 80.632580 18.838438" +$ns_ at 207.000000 "$node_(10) setdest 185.014933 52.993766 18.928844" + +$ns_ at 208.000000 "$node_(1) setdest 131.154711 380.829290 19.987657" +$ns_ at 208.000000 "$node_(2) setdest 180.272876 476.520635 19.999333" +$ns_ at 208.000000 "$node_(3) setdest 143.368479 377.932962 11.073692" +$ns_ at 208.000000 "$node_(4) setdest 69.391507 426.525693 19.977769" +$ns_ at 208.000000 "$node_(5) setdest 39.946435 387.849275 7.723163" +$ns_ at 208.000000 "$node_(6) setdest 10.931499 104.858445 5.272945" +$ns_ at 208.000000 "$node_(7) setdest 180.816137 36.719425 9.571701" +$ns_ at 208.000000 "$node_(8) setdest 30.381523 9.369616 19.054393" +$ns_ at 208.000000 "$node_(9) setdest 164.385587 60.684667 19.949297" +$ns_ at 208.000000 "$node_(10) setdest 174.507313 38.662418 17.770695" + +$ns_ at 209.000000 "$node_(1) setdest 121.092963 398.095887 19.984348" +$ns_ at 209.000000 "$node_(2) setdest 189.211708 490.664051 16.731375" +$ns_ at 209.000000 "$node_(3) setdest 131.945788 383.417256 12.671044" +$ns_ at 209.000000 "$node_(4) setdest 59.975120 444.153298 19.985015" +$ns_ at 209.000000 "$node_(5) setdest 48.328073 391.937141 9.325369" +$ns_ at 209.000000 "$node_(6) setdest 14.411675 98.942625 6.863568" +$ns_ at 209.000000 "$node_(7) setdest 175.728098 46.705469 11.207551" +$ns_ at 209.000000 "$node_(8) setdest 12.204122 7.859309 18.240037" +$ns_ at 209.000000 "$node_(9) setdest 159.026552 41.578356 19.843648" +$ns_ at 209.000000 "$node_(10) setdest 163.369819 23.521448 18.796083" + +$ns_ at 210.000000 "$node_(1) setdest 108.982057 413.993854 19.985480" +$ns_ at 210.000000 "$node_(2) setdest 180.764820 496.526252 10.281795" +$ns_ at 210.000000 "$node_(3) setdest 119.741871 390.808564 14.267692" +$ns_ at 210.000000 "$node_(4) setdest 53.047125 462.900705 19.986555" +$ns_ at 210.000000 "$node_(5) setdest 57.929229 397.148381 10.924249" +$ns_ at 210.000000 "$node_(6) setdest 16.629371 90.783736 8.454918" +$ns_ at 210.000000 "$node_(7) setdest 170.109979 58.216735 12.809079" +$ns_ at 210.000000 "$node_(8) setdest 7.612919 9.823576 4.993745" +$ns_ at 210.000000 "$node_(9) setdest 144.943214 27.647777 19.809125" +$ns_ at 210.000000 "$node_(10) setdest 151.654646 8.351943 19.166615" + +$ns_ at 211.000000 "$node_(1) setdest 94.765433 428.045068 19.988722" +$ns_ at 211.000000 "$node_(2) setdest 169.488840 501.292361 12.241876" +$ns_ at 211.000000 "$node_(3) setdest 106.907423 400.126968 15.860507" +$ns_ at 211.000000 "$node_(4) setdest 49.262673 482.502882 19.964153" +$ns_ at 211.000000 "$node_(5) setdest 68.775716 403.409497 12.523891" +$ns_ at 211.000000 "$node_(6) setdest 18.101119 80.820271 10.071578" +$ns_ at 211.000000 "$node_(7) setdest 164.220636 71.367090 14.408894" +$ns_ at 211.000000 "$node_(8) setdest 8.398181 10.582628 1.092152" +$ns_ at 211.000000 "$node_(9) setdest 126.252440 20.979851 19.844553" +$ns_ at 211.000000 "$node_(10) setdest 150.671362 7.925031 1.071962" + +$ns_ at 212.000000 "$node_(1) setdest 79.694798 440.482197 19.539862" +$ns_ at 212.000000 "$node_(2) setdest 158.086396 509.199851 13.876027" +$ns_ at 212.000000 "$node_(3) setdest 93.891593 411.784206 17.472923" +$ns_ at 212.000000 "$node_(4) setdest 51.602803 502.238394 19.873768" +$ns_ at 212.000000 "$node_(5) setdest 79.786377 412.225707 14.105326" +$ns_ at 212.000000 "$node_(6) setdest 18.082994 69.169270 11.651015" +$ns_ at 212.000000 "$node_(7) setdest 156.452151 85.357032 16.002119" +$ns_ at 212.000000 "$node_(8) setdest 10.252534 12.543807 2.699046" +$ns_ at 212.000000 "$node_(9) setdest 106.444082 18.349570 19.982227" +$ns_ at 212.000000 "$node_(10) setdest 150.561643 9.241322 1.320856" + +$ns_ at 213.000000 "$node_(1) setdest 74.331248 439.156532 5.524948" +$ns_ at 213.000000 "$node_(2) setdest 147.109484 520.059714 15.441154" +$ns_ at 213.000000 "$node_(3) setdest 78.802986 423.444845 19.069257" +$ns_ at 213.000000 "$node_(4) setdest 64.714464 515.886813 18.926040" +$ns_ at 213.000000 "$node_(5) setdest 90.367257 423.848581 15.717704" +$ns_ at 213.000000 "$node_(6) setdest 15.231940 56.211466 13.267750" +$ns_ at 213.000000 "$node_(7) setdest 146.294162 99.736602 17.605590" +$ns_ at 213.000000 "$node_(8) setdest 12.764348 16.030199 4.296992" +$ns_ at 213.000000 "$node_(9) setdest 87.094251 13.355646 19.983875" +$ns_ at 213.000000 "$node_(10) setdest 150.265932 12.167440 2.941022" + +$ns_ at 214.000000 "$node_(1) setdest 75.387413 435.963971 3.362726" +$ns_ at 214.000000 "$node_(2) setdest 134.637490 531.303365 16.791972" +$ns_ at 214.000000 "$node_(3) setdest 63.111503 435.821747 19.985253" +$ns_ at 214.000000 "$node_(4) setdest 82.741655 517.689625 18.117113" +$ns_ at 214.000000 "$node_(5) setdest 100.190863 438.094362 17.304495" +$ns_ at 214.000000 "$node_(6) setdest 11.435316 41.831751 14.872477" +$ns_ at 214.000000 "$node_(7) setdest 134.405054 114.825240 19.209838" +$ns_ at 214.000000 "$node_(8) setdest 15.786921 21.097420 5.900227" +$ns_ at 214.000000 "$node_(9) setdest 67.206233 11.386313 19.985283" +$ns_ at 214.000000 "$node_(10) setdest 150.233247 16.709509 4.542186" + +$ns_ at 215.000000 "$node_(1) setdest 78.105600 431.749429 5.015068" +$ns_ at 215.000000 "$node_(2) setdest 119.211728 527.255675 15.947976" +$ns_ at 215.000000 "$node_(3) setdest 48.423135 449.394750 19.999364" +$ns_ at 215.000000 "$node_(4) setdest 100.521552 517.808971 17.780297" +$ns_ at 215.000000 "$node_(5) setdest 109.423660 454.614792 18.925357" +$ns_ at 215.000000 "$node_(6) setdest 16.762073 29.826767 13.133696" +$ns_ at 215.000000 "$node_(7) setdest 121.638439 130.219167 19.998986" +$ns_ at 215.000000 "$node_(8) setdest 20.223833 27.143327 7.499279" +$ns_ at 215.000000 "$node_(9) setdest 47.635785 14.277190 19.782811" +$ns_ at 215.000000 "$node_(10) setdest 149.981298 22.846536 6.142197" + +$ns_ at 216.000000 "$node_(1) setdest 82.316111 426.647880 6.614696" +$ns_ at 216.000000 "$node_(2) setdest 110.714063 514.069971 15.686717" +$ns_ at 216.000000 "$node_(3) setdest 34.234170 463.437881 19.963373" +$ns_ at 216.000000 "$node_(4) setdest 119.756878 518.623367 19.252559" +$ns_ at 216.000000 "$node_(5) setdest 118.021417 472.643823 19.974168" +$ns_ at 216.000000 "$node_(6) setdest 24.439905 33.577223 8.544883" +$ns_ at 216.000000 "$node_(7) setdest 109.264356 145.928934 19.997868" +$ns_ at 216.000000 "$node_(8) setdest 26.436807 33.784570 9.094347" +$ns_ at 216.000000 "$node_(9) setdest 34.763093 28.005283 18.819318" +$ns_ at 216.000000 "$node_(10) setdest 149.466985 30.571752 7.742318" + +$ns_ at 217.000000 "$node_(1) setdest 87.966643 420.681429 8.217484" +$ns_ at 217.000000 "$node_(2) setdest 106.139891 497.477479 17.211446" +$ns_ at 217.000000 "$node_(3) setdest 24.871837 481.006527 19.907551" +$ns_ at 217.000000 "$node_(4) setdest 139.198045 521.043816 19.591262" +$ns_ at 217.000000 "$node_(5) setdest 125.144910 491.320562 19.989115" +$ns_ at 217.000000 "$node_(6) setdest 29.906717 42.714611 10.647906" +$ns_ at 217.000000 "$node_(7) setdest 95.624683 160.464758 19.933160" +$ns_ at 217.000000 "$node_(8) setdest 35.012079 40.154365 10.682209" +$ns_ at 217.000000 "$node_(9) setdest 26.794592 44.498695 18.317469" +$ns_ at 217.000000 "$node_(10) setdest 148.822317 39.891733 9.342250" + +$ns_ at 218.000000 "$node_(1) setdest 95.567803 414.482141 9.808608" +$ns_ at 218.000000 "$node_(2) setdest 101.751650 479.151427 18.844119" +$ns_ at 218.000000 "$node_(3) setdest 21.772410 500.718610 19.954264" +$ns_ at 218.000000 "$node_(4) setdest 156.440799 529.170085 19.061711" +$ns_ at 218.000000 "$node_(5) setdest 136.804828 507.434328 19.889875" +$ns_ at 218.000000 "$node_(6) setdest 34.936287 53.901566 12.265583" +$ns_ at 218.000000 "$node_(7) setdest 77.559907 162.800620 18.215168" +$ns_ at 218.000000 "$node_(8) setdest 46.265277 45.048070 12.271219" +$ns_ at 218.000000 "$node_(9) setdest 18.369496 61.553834 19.022618" +$ns_ at 218.000000 "$node_(10) setdest 148.315037 50.819341 10.939376" + +$ns_ at 219.000000 "$node_(1) setdest 105.384019 408.666566 11.409602" +$ns_ at 219.000000 "$node_(2) setdest 105.257830 460.439311 19.037767" +$ns_ at 219.000000 "$node_(3) setdest 20.836622 520.669754 19.973078" +$ns_ at 219.000000 "$node_(4) setdest 169.726291 541.962081 18.442870" +$ns_ at 219.000000 "$node_(5) setdest 151.392428 509.951508 14.803185" +$ns_ at 219.000000 "$node_(6) setdest 39.985524 66.816926 13.867275" +$ns_ at 219.000000 "$node_(7) setdest 65.983518 149.611440 17.548997" +$ns_ at 219.000000 "$node_(8) setdest 60.002002 46.833409 13.852258" +$ns_ at 219.000000 "$node_(9) setdest 12.671632 79.346833 18.683052" +$ns_ at 219.000000 "$node_(10) setdest 149.329428 63.307247 12.529038" + +$ns_ at 220.000000 "$node_(1) setdest 117.372851 403.595980 13.017025" +$ns_ at 220.000000 "$node_(2) setdest 114.312002 443.838623 18.909280" +$ns_ at 220.000000 "$node_(3) setdest 32.633983 533.959274 17.770455" +$ns_ at 220.000000 "$node_(4) setdest 186.809428 545.300049 17.406194" +$ns_ at 220.000000 "$node_(5) setdest 154.136381 499.903314 10.416116" +$ns_ at 220.000000 "$node_(6) setdest 38.966285 82.245893 15.462596" +$ns_ at 220.000000 "$node_(7) setdest 74.429529 163.526860 16.278023" +$ns_ at 220.000000 "$node_(8) setdest 62.748658 50.955781 4.953592" +$ns_ at 220.000000 "$node_(9) setdest 16.722542 97.580963 18.678688" +$ns_ at 220.000000 "$node_(10) setdest 147.564335 77.337282 14.140630" + +$ns_ at 221.000000 "$node_(1) setdest 130.510749 397.211113 14.607220" +$ns_ at 221.000000 "$node_(2) setdest 126.001789 428.533431 19.258765" +$ns_ at 221.000000 "$node_(3) setdest 47.085796 524.976442 17.016055" +$ns_ at 221.000000 "$node_(4) setdest 195.470877 545.496075 8.663667" +$ns_ at 221.000000 "$node_(5) setdest 153.537843 487.668110 12.249835" +$ns_ at 221.000000 "$node_(6) setdest 37.659369 99.258980 17.063211" +$ns_ at 221.000000 "$node_(7) setdest 81.550077 180.240654 18.167363" +$ns_ at 221.000000 "$node_(8) setdest 62.598894 57.433367 6.479317" +$ns_ at 221.000000 "$node_(9) setdest 23.470822 116.374653 19.968527" +$ns_ at 221.000000 "$node_(10) setdest 144.701469 92.814988 15.740247" + +$ns_ at 222.000000 "$node_(1) setdest 145.829089 392.029894 16.170856" +$ns_ at 222.000000 "$node_(2) setdest 140.217574 415.094347 19.562657" +$ns_ at 222.000000 "$node_(3) setdest 60.241100 516.107987 15.865420" +$ns_ at 222.000000 "$node_(4) setdest 195.175480 544.049314 1.476611" +$ns_ at 222.000000 "$node_(5) setdest 153.773151 473.824698 13.845411" +$ns_ at 222.000000 "$node_(6) setdest 36.836689 117.903151 18.662312" +$ns_ at 222.000000 "$node_(7) setdest 88.469997 198.652396 19.669203" +$ns_ at 222.000000 "$node_(8) setdest 62.213896 65.503403 8.079215" +$ns_ at 222.000000 "$node_(9) setdest 31.284840 134.781911 19.997150" +$ns_ at 222.000000 "$node_(10) setdest 140.588071 109.660694 17.340642" + +$ns_ at 223.000000 "$node_(1) setdest 163.506752 392.575980 17.686096" +$ns_ at 223.000000 "$node_(2) setdest 154.063643 401.028161 19.737558" +$ns_ at 223.000000 "$node_(3) setdest 74.782464 518.041618 14.669363" +$ns_ at 223.000000 "$node_(4) setdest 194.480877 541.034819 3.093486" +$ns_ at 223.000000 "$node_(5) setdest 154.461775 458.388033 15.452018" +$ns_ at 223.000000 "$node_(6) setdest 36.889515 137.817056 19.913975" +$ns_ at 223.000000 "$node_(7) setdest 93.285752 218.049531 19.986004" +$ns_ at 223.000000 "$node_(8) setdest 61.558857 75.160595 9.679381" +$ns_ at 223.000000 "$node_(9) setdest 40.120888 152.722334 19.998363" +$ns_ at 223.000000 "$node_(10) setdest 135.370957 127.870138 18.942073" + +$ns_ at 224.000000 "$node_(1) setdest 181.923802 396.004220 18.733408" +$ns_ at 224.000000 "$node_(2) setdest 167.390779 386.339495 19.833544" +$ns_ at 224.000000 "$node_(3) setdest 88.812375 526.590208 16.429145" +$ns_ at 224.000000 "$node_(4) setdest 193.757794 536.395966 4.694870" +$ns_ at 224.000000 "$node_(5) setdest 155.534575 441.369278 17.052534" +$ns_ at 224.000000 "$node_(6) setdest 37.937125 157.787942 19.998344" +$ns_ at 224.000000 "$node_(7) setdest 95.263234 237.932451 19.981015" +$ns_ at 224.000000 "$node_(8) setdest 60.618285 86.400311 11.279002" +$ns_ at 224.000000 "$node_(9) setdest 49.705686 170.274483 19.998657" +$ns_ at 224.000000 "$node_(10) setdest 129.766491 147.053821 19.985588" + +$ns_ at 225.000000 "$node_(1) setdest 169.232343 395.048481 12.727394" +$ns_ at 225.000000 "$node_(2) setdest 178.021040 369.992559 19.499353" +$ns_ at 225.000000 "$node_(3) setdest 105.697669 532.818640 17.997403" +$ns_ at 225.000000 "$node_(4) setdest 193.626695 530.109972 6.287361" +$ns_ at 225.000000 "$node_(5) setdest 157.030780 422.777712 18.651674" +$ns_ at 225.000000 "$node_(6) setdest 39.945670 177.684547 19.997729" +$ns_ at 225.000000 "$node_(7) setdest 93.862395 257.856020 19.972755" +$ns_ at 225.000000 "$node_(8) setdest 59.031456 99.180711 12.878534" +$ns_ at 225.000000 "$node_(9) setdest 59.205275 187.873059 19.998802" +$ns_ at 225.000000 "$node_(10) setdest 124.063931 166.223553 19.999945" + +$ns_ at 226.000000 "$node_(1) setdest 156.800156 391.440287 12.945205" +$ns_ at 226.000000 "$node_(2) setdest 181.618992 357.273651 13.218014" +$ns_ at 226.000000 "$node_(3) setdest 124.505138 538.184199 19.557865" +$ns_ at 226.000000 "$node_(4) setdest 193.643917 522.227082 7.882909" +$ns_ at 226.000000 "$node_(5) setdest 158.657327 402.933793 19.910469" +$ns_ at 226.000000 "$node_(6) setdest 43.108409 197.429911 19.997057" +$ns_ at 226.000000 "$node_(7) setdest 88.502871 277.089742 19.966486" +$ns_ at 226.000000 "$node_(8) setdest 56.808037 113.487980 14.479003" +$ns_ at 226.000000 "$node_(9) setdest 67.791820 205.933327 19.997551" +$ns_ at 226.000000 "$node_(10) setdest 117.964834 185.269423 19.998604" + +$ns_ at 227.000000 "$node_(1) setdest 142.278798 390.812500 14.534922" +$ns_ at 227.000000 "$node_(2) setdest 180.809611 361.122439 3.932972" +$ns_ at 227.000000 "$node_(3) setdest 139.353761 542.830733 15.558660" +$ns_ at 227.000000 "$node_(4) setdest 190.918757 513.212438 9.417553" +$ns_ at 227.000000 "$node_(5) setdest 158.201943 382.958722 19.980261" +$ns_ at 227.000000 "$node_(6) setdest 47.461748 216.947467 19.997164" +$ns_ at 227.000000 "$node_(7) setdest 79.883191 295.123722 19.988080" +$ns_ at 227.000000 "$node_(8) setdest 54.120836 129.341065 16.079222" +$ns_ at 227.000000 "$node_(9) setdest 75.603470 224.344458 19.999791" +$ns_ at 227.000000 "$node_(10) setdest 111.317961 204.132478 19.999894" + +$ns_ at 228.000000 "$node_(1) setdest 126.803939 394.954915 16.019702" +$ns_ at 228.000000 "$node_(2) setdest 181.453885 366.636563 5.551636" +$ns_ at 228.000000 "$node_(3) setdest 139.679950 541.809477 1.072084" +$ns_ at 228.000000 "$node_(4) setdest 182.221684 506.884617 10.755483" +$ns_ at 228.000000 "$node_(5) setdest 147.532398 367.471383 18.806830" +$ns_ at 228.000000 "$node_(6) setdest 53.185240 236.106169 19.995355" +$ns_ at 228.000000 "$node_(7) setdest 69.135376 311.964610 19.978263" +$ns_ at 228.000000 "$node_(8) setdest 50.220110 146.582020 17.676713" +$ns_ at 228.000000 "$node_(9) setdest 83.229589 242.832888 19.999493" +$ns_ at 228.000000 "$node_(10) setdest 104.487873 222.930048 19.999968" + +$ns_ at 229.000000 "$node_(1) setdest 112.719153 405.732941 17.735474" +$ns_ at 229.000000 "$node_(2) setdest 184.190891 373.250673 7.158048" +$ns_ at 229.000000 "$node_(3) setdest 138.130687 540.190583 2.240767" +$ns_ at 229.000000 "$node_(4) setdest 170.893314 511.903508 12.390368" +$ns_ at 229.000000 "$node_(5) setdest 131.769906 373.894402 17.020909" +$ns_ at 229.000000 "$node_(6) setdest 60.421096 254.745402 19.994464" +$ns_ at 229.000000 "$node_(7) setdest 55.227342 326.293985 19.969086" +$ns_ at 229.000000 "$node_(8) setdest 46.727716 165.535396 19.272448" +$ns_ at 229.000000 "$node_(9) setdest 90.276455 261.550003 19.999718" +$ns_ at 229.000000 "$node_(10) setdest 98.003508 241.846149 19.996647" + +$ns_ at 230.000000 "$node_(1) setdest 96.091336 415.488575 19.278400" +$ns_ at 230.000000 "$node_(2) setdest 183.469209 381.617058 8.397453" +$ns_ at 230.000000 "$node_(3) setdest 135.135321 537.790149 3.838527" +$ns_ at 230.000000 "$node_(4) setdest 159.237705 520.178185 14.294178" +$ns_ at 230.000000 "$node_(5) setdest 126.003487 389.332246 16.479642" +$ns_ at 230.000000 "$node_(6) setdest 69.231636 272.693606 19.994091" +$ns_ at 230.000000 "$node_(7) setdest 39.927801 339.173368 19.998862" +$ns_ at 230.000000 "$node_(8) setdest 44.917086 185.446450 19.993211" +$ns_ at 230.000000 "$node_(9) setdest 96.877144 280.425405 19.996247" +$ns_ at 230.000000 "$node_(10) setdest 92.829898 261.161671 19.996390" + +$ns_ at 231.000000 "$node_(1) setdest 76.542960 419.096553 19.878544" +$ns_ at 231.000000 "$node_(2) setdest 176.455767 382.214395 7.038833" +$ns_ at 231.000000 "$node_(3) setdest 130.270647 535.384863 5.426828" +$ns_ at 231.000000 "$node_(4) setdest 147.767236 531.122795 15.854216" +$ns_ at 231.000000 "$node_(5) setdest 120.093704 403.690952 15.527329" +$ns_ at 231.000000 "$node_(6) setdest 79.612346 289.781035 19.993483" +$ns_ at 231.000000 "$node_(7) setdest 24.003817 350.585990 19.591355" +$ns_ at 231.000000 "$node_(8) setdest 44.961975 205.440954 19.994554" +$ns_ at 231.000000 "$node_(9) setdest 99.747344 300.145262 19.927640" +$ns_ at 231.000000 "$node_(10) setdest 89.013268 280.789285 19.995247" + +$ns_ at 232.000000 "$node_(1) setdest 57.010907 414.931045 19.971292" +$ns_ at 232.000000 "$node_(2) setdest 170.625082 375.887436 8.603912" +$ns_ at 232.000000 "$node_(3) setdest 123.401898 533.915668 7.024119" +$ns_ at 232.000000 "$node_(4) setdest 133.831007 536.334199 14.878750" +$ns_ at 232.000000 "$node_(5) setdest 112.784511 418.983603 16.949616" +$ns_ at 232.000000 "$node_(6) setdest 91.565883 305.808159 19.993893" +$ns_ at 232.000000 "$node_(7) setdest 24.991666 366.397074 15.841913" +$ns_ at 232.000000 "$node_(8) setdest 46.668910 225.364489 19.996521" +$ns_ at 232.000000 "$node_(9) setdest 95.297668 319.497789 19.857489" +$ns_ at 232.000000 "$node_(10) setdest 86.767611 300.658389 19.995606" + +$ns_ at 233.000000 "$node_(1) setdest 39.647141 405.570459 19.726149" +$ns_ at 233.000000 "$node_(2) setdest 163.274148 368.970881 10.093313" +$ns_ at 233.000000 "$node_(3) setdest 114.780291 533.380993 8.638170" +$ns_ at 233.000000 "$node_(4) setdest 131.539148 532.333883 4.610330" +$ns_ at 233.000000 "$node_(5) setdest 104.102864 435.367253 18.541710" +$ns_ at 233.000000 "$node_(6) setdest 103.303347 321.997575 19.996631" +$ns_ at 233.000000 "$node_(7) setdest 30.412033 380.296306 14.918748" +$ns_ at 233.000000 "$node_(8) setdest 49.123918 245.211852 19.998622" +$ns_ at 233.000000 "$node_(9) setdest 83.212825 335.267364 19.867635" +$ns_ at 233.000000 "$node_(10) setdest 86.025912 320.638077 19.993450" + +$ns_ at 234.000000 "$node_(1) setdest 27.316123 390.616503 19.382332" +$ns_ at 234.000000 "$node_(2) setdest 152.190026 371.188100 11.303708" +$ns_ at 234.000000 "$node_(3) setdest 104.559734 533.881666 10.232813" +$ns_ at 234.000000 "$node_(4) setdest 134.437047 528.843275 4.536757" +$ns_ at 234.000000 "$node_(5) setdest 99.490371 454.660971 19.837405" +$ns_ at 234.000000 "$node_(6) setdest 113.260598 339.320990 19.981180" +$ns_ at 234.000000 "$node_(7) setdest 34.878867 395.284625 15.639767" +$ns_ at 234.000000 "$node_(8) setdest 52.561370 264.911186 19.996995" +$ns_ at 234.000000 "$node_(9) setdest 66.066130 345.377223 19.905235" +$ns_ at 234.000000 "$node_(10) setdest 87.285070 340.587013 19.988635" + +$ns_ at 235.000000 "$node_(1) setdest 20.218846 372.865040 19.117682" +$ns_ at 235.000000 "$node_(2) setdest 142.051256 379.923957 13.383193" +$ns_ at 235.000000 "$node_(3) setdest 92.840981 535.571717 11.839993" +$ns_ at 235.000000 "$node_(4) setdest 138.217326 524.011125 6.135160" +$ns_ at 235.000000 "$node_(5) setdest 91.141238 472.512581 19.707562" +$ns_ at 235.000000 "$node_(6) setdest 120.629818 357.902574 19.989513" +$ns_ at 235.000000 "$node_(7) setdest 37.667906 412.302677 17.245082" +$ns_ at 235.000000 "$node_(8) setdest 57.399640 284.312240 19.995243" +$ns_ at 235.000000 "$node_(9) setdest 47.135371 351.684805 19.953928" +$ns_ at 235.000000 "$node_(10) setdest 91.171326 360.189136 19.983649" + +$ns_ at 236.000000 "$node_(1) setdest 24.598928 356.149629 17.279760" +$ns_ at 236.000000 "$node_(2) setdest 133.409494 392.148552 14.970664" +$ns_ at 236.000000 "$node_(3) setdest 79.429653 536.017371 13.418731" +$ns_ at 236.000000 "$node_(4) setdest 141.644180 517.087121 7.725617" +$ns_ at 236.000000 "$node_(5) setdest 82.659254 489.792059 19.249010" +$ns_ at 236.000000 "$node_(6) setdest 124.911845 377.382671 19.945173" +$ns_ at 236.000000 "$node_(7) setdest 36.308163 431.068874 18.815394" +$ns_ at 236.000000 "$node_(8) setdest 63.770885 303.263885 19.993940" +$ns_ at 236.000000 "$node_(9) setdest 27.530214 350.712658 19.629245" +$ns_ at 236.000000 "$node_(10) setdest 98.063978 378.939773 19.977363" + +$ns_ at 237.000000 "$node_(1) setdest 40.321183 353.037350 16.027339" +$ns_ at 237.000000 "$node_(2) setdest 125.329380 406.653920 16.604033" +$ns_ at 237.000000 "$node_(3) setdest 64.843715 532.584356 14.984497" +$ns_ at 237.000000 "$node_(4) setdest 144.634350 508.245730 9.333344" +$ns_ at 237.000000 "$node_(5) setdest 82.909106 508.254419 18.464050" +$ns_ at 237.000000 "$node_(6) setdest 118.133725 394.817452 18.706002" +$ns_ at 237.000000 "$node_(7) setdest 29.233267 449.643599 19.876483" +$ns_ at 237.000000 "$node_(8) setdest 71.818285 321.564343 19.991683" +$ns_ at 237.000000 "$node_(9) setdest 29.921966 351.885394 2.663792" +$ns_ at 237.000000 "$node_(10) setdest 108.291461 396.089794 19.968090" + +$ns_ at 238.000000 "$node_(1) setdest 45.596210 362.703271 11.011628" +$ns_ at 238.000000 "$node_(2) setdest 116.291703 422.438321 18.188648" +$ns_ at 238.000000 "$node_(3) setdest 50.905662 523.641287 16.560429" +$ns_ at 238.000000 "$node_(4) setdest 147.083186 497.586315 10.937090" +$ns_ at 238.000000 "$node_(5) setdest 86.823206 527.075434 19.223704" +$ns_ at 238.000000 "$node_(6) setdest 100.295091 394.820595 17.838634" +$ns_ at 238.000000 "$node_(7) setdest 14.754694 462.701263 19.496965" +$ns_ at 238.000000 "$node_(8) setdest 82.106778 338.696777 19.984329" +$ns_ at 238.000000 "$node_(9) setdest 29.384525 352.572171 0.872069" +$ns_ at 238.000000 "$node_(10) setdest 121.581838 411.004409 19.976983" + +$ns_ at 239.000000 "$node_(1) setdest 43.050325 374.782260 12.344371" +$ns_ at 239.000000 "$node_(2) setdest 109.603123 440.967025 19.698985" +$ns_ at 239.000000 "$node_(3) setdest 40.281591 508.934509 18.142774" +$ns_ at 239.000000 "$node_(4) setdest 150.186991 485.439022 12.537557" +$ns_ at 239.000000 "$node_(5) setdest 88.363743 540.891623 13.901811" +$ns_ at 239.000000 "$node_(6) setdest 83.872867 392.609649 16.570387" +$ns_ at 239.000000 "$node_(7) setdest 2.120167 462.131925 12.647348" +$ns_ at 239.000000 "$node_(8) setdest 94.881055 354.058754 19.979301" +$ns_ at 239.000000 "$node_(9) setdest 28.147365 354.727230 2.484924" +$ns_ at 239.000000 "$node_(10) setdest 137.437686 423.128242 19.959841" + +$ns_ at 240.000000 "$node_(1) setdest 38.556092 388.011135 13.971445" +$ns_ at 240.000000 "$node_(2) setdest 102.994537 459.843356 19.999731" +$ns_ at 240.000000 "$node_(3) setdest 34.511155 490.212704 19.590914" +$ns_ at 240.000000 "$node_(4) setdest 153.699183 471.745840 14.136432" +$ns_ at 240.000000 "$node_(5) setdest 87.677276 538.921027 2.086741" +$ns_ at 240.000000 "$node_(6) setdest 67.844685 393.430187 16.049172" +$ns_ at 240.000000 "$node_(7) setdest 2.807388 458.762773 3.438526" +$ns_ at 240.000000 "$node_(8) setdest 109.948493 367.184167 19.982596" +$ns_ at 240.000000 "$node_(9) setdest 26.581030 358.478450 4.065102" +$ns_ at 240.000000 "$node_(10) setdest 155.787822 430.945677 19.945921" + +$ns_ at 241.000000 "$node_(1) setdest 36.249641 403.358559 15.519767" +$ns_ at 241.000000 "$node_(2) setdest 95.054734 478.197050 19.997464" +$ns_ at 241.000000 "$node_(3) setdest 38.588756 470.902314 19.736210" +$ns_ at 241.000000 "$node_(4) setdest 158.039693 456.618076 15.738147" +$ns_ at 241.000000 "$node_(5) setdest 85.810743 535.721185 3.704447" +$ns_ at 241.000000 "$node_(6) setdest 50.254348 394.635888 17.631610" +$ns_ at 241.000000 "$node_(7) setdest 5.492504 454.380668 5.139327" +$ns_ at 241.000000 "$node_(8) setdest 125.740547 379.432191 19.985071" +$ns_ at 241.000000 "$node_(9) setdest 26.686133 364.112657 5.635187" +$ns_ at 241.000000 "$node_(10) setdest 175.328309 429.760207 19.576413" + +$ns_ at 242.000000 "$node_(1) setdest 37.522192 420.480349 17.169015" +$ns_ at 242.000000 "$node_(2) setdest 90.631305 497.645680 19.945323" +$ns_ at 242.000000 "$node_(3) setdest 50.739464 455.055826 19.968748" +$ns_ at 242.000000 "$node_(4) setdest 162.672725 439.910564 17.337991" +$ns_ at 242.000000 "$node_(5) setdest 82.862827 531.310088 5.305468" +$ns_ at 242.000000 "$node_(6) setdest 31.030156 394.391413 19.225746" +$ns_ at 242.000000 "$node_(7) setdest 9.560885 449.014231 6.734268" +$ns_ at 242.000000 "$node_(8) setdest 138.863619 394.470220 19.958891" +$ns_ at 242.000000 "$node_(9) setdest 30.044622 370.532583 7.245336" +$ns_ at 242.000000 "$node_(10) setdest 184.068040 414.234527 17.816555" + +$ns_ at 243.000000 "$node_(1) setdest 37.985476 439.243636 18.769005" +$ns_ at 243.000000 "$node_(2) setdest 87.433717 517.377092 19.988827" +$ns_ at 243.000000 "$node_(3) setdest 62.449094 438.866145 19.980520" +$ns_ at 243.000000 "$node_(4) setdest 167.366807 421.571460 18.930323" +$ns_ at 243.000000 "$node_(5) setdest 79.256025 525.421283 6.905580" +$ns_ at 243.000000 "$node_(6) setdest 11.506341 396.543000 19.642013" +$ns_ at 243.000000 "$node_(7) setdest 15.539098 443.203051 8.337197" +$ns_ at 243.000000 "$node_(8) setdest 147.973211 412.218070 19.949207" +$ns_ at 243.000000 "$node_(9) setdest 36.059140 377.050285 8.868758" +$ns_ at 243.000000 "$node_(10) setdest 177.685561 398.128349 17.324694" + +$ns_ at 244.000000 "$node_(1) setdest 39.206090 459.137583 19.931358" +$ns_ at 244.000000 "$node_(2) setdest 83.154377 536.500088 19.595961" +$ns_ at 244.000000 "$node_(3) setdest 78.636311 427.281132 19.905741" +$ns_ at 244.000000 "$node_(4) setdest 170.390886 401.818715 19.982892" +$ns_ at 244.000000 "$node_(5) setdest 74.252665 518.545692 8.503374" +$ns_ at 244.000000 "$node_(6) setdest 7.973051 410.375276 14.276414" +$ns_ at 244.000000 "$node_(7) setdest 23.323807 437.026222 9.937551" +$ns_ at 244.000000 "$node_(8) setdest 153.374916 431.467556 19.993027" +$ns_ at 244.000000 "$node_(9) setdest 44.032723 383.856539 10.483469" +$ns_ at 244.000000 "$node_(10) setdest 172.718843 382.551826 16.349201" + +$ns_ at 245.000000 "$node_(1) setdest 34.618867 478.486864 19.885606" +$ns_ at 245.000000 "$node_(2) setdest 84.300844 531.592510 5.039713" +$ns_ at 245.000000 "$node_(3) setdest 94.940590 415.825326 19.926490" +$ns_ at 245.000000 "$node_(4) setdest 172.304961 394.881002 7.196912" +$ns_ at 245.000000 "$node_(5) setdest 68.133382 510.504064 10.105117" +$ns_ at 245.000000 "$node_(6) setdest 17.059711 420.972002 13.959154" +$ns_ at 245.000000 "$node_(7) setdest 32.971174 430.706107 11.533236" +$ns_ at 245.000000 "$node_(8) setdest 157.601063 450.999458 19.983881" +$ns_ at 245.000000 "$node_(9) setdest 53.145590 391.780127 12.075909" +$ns_ at 245.000000 "$node_(10) setdest 169.004729 365.196387 17.748406" + +$ns_ at 246.000000 "$node_(1) setdest 23.314948 494.915448 19.941839" +$ns_ at 246.000000 "$node_(2) setdest 80.388414 526.333405 6.554791" +$ns_ at 246.000000 "$node_(3) setdest 105.925896 399.190915 19.934407" +$ns_ at 246.000000 "$node_(4) setdest 172.261920 400.073454 5.192630" +$ns_ at 246.000000 "$node_(5) setdest 60.662128 501.492990 11.705516" +$ns_ at 246.000000 "$node_(6) setdest 25.067644 434.285222 15.536049" +$ns_ at 246.000000 "$node_(7) setdest 44.416211 424.250797 13.140012" +$ns_ at 246.000000 "$node_(8) setdest 157.547382 470.971881 19.972495" +$ns_ at 246.000000 "$node_(9) setdest 61.816142 402.356439 13.676142" +$ns_ at 246.000000 "$node_(10) setdest 159.697284 354.841814 13.922848" + +$ns_ at 247.000000 "$node_(1) setdest 11.471594 510.982443 19.960295" +$ns_ at 247.000000 "$node_(2) setdest 73.667647 521.515333 8.269373" +$ns_ at 247.000000 "$node_(3) setdest 115.687404 381.745967 19.990329" +$ns_ at 247.000000 "$node_(4) setdest 172.542353 406.883343 6.815660" +$ns_ at 247.000000 "$node_(5) setdest 53.043729 490.595790 13.296201" +$ns_ at 247.000000 "$node_(6) setdest 35.532652 447.799237 17.092249" +$ns_ at 247.000000 "$node_(7) setdest 57.583686 417.635230 14.735946" +$ns_ at 247.000000 "$node_(8) setdest 155.807521 490.895157 19.999102" +$ns_ at 247.000000 "$node_(9) setdest 70.586313 414.874960 15.284936" +$ns_ at 247.000000 "$node_(10) setdest 150.705382 353.022498 9.174106" + +$ns_ at 248.000000 "$node_(1) setdest 6.250205 530.216206 19.929890" +$ns_ at 248.000000 "$node_(2) setdest 64.550481 517.738746 9.868400" +$ns_ at 248.000000 "$node_(3) setdest 129.575043 368.902786 18.915967" +$ns_ at 248.000000 "$node_(4) setdest 172.766820 415.295599 8.415251" +$ns_ at 248.000000 "$node_(5) setdest 45.664917 477.649441 14.901504" +$ns_ at 248.000000 "$node_(6) setdest 49.236481 460.622756 18.767994" +$ns_ at 248.000000 "$node_(7) setdest 72.542200 411.059556 16.340032" +$ns_ at 248.000000 "$node_(8) setdest 154.151119 510.826019 19.999573" +$ns_ at 248.000000 "$node_(9) setdest 80.048453 428.859710 16.885062" +$ns_ at 248.000000 "$node_(10) setdest 150.693495 353.348529 0.326248" + +$ns_ at 249.000000 "$node_(1) setdest 15.633937 545.116140 17.608591" +$ns_ at 249.000000 "$node_(2) setdest 53.897778 513.466205 11.477573" +$ns_ at 249.000000 "$node_(3) setdest 147.143605 364.268821 18.169425" +$ns_ at 249.000000 "$node_(4) setdest 172.715108 425.310616 10.015150" +$ns_ at 249.000000 "$node_(5) setdest 40.276620 462.090927 16.465147" +$ns_ at 249.000000 "$node_(6) setdest 66.591813 470.358500 19.899554" +$ns_ at 249.000000 "$node_(7) setdest 89.011277 403.945945 17.939731" +$ns_ at 249.000000 "$node_(8) setdest 153.637467 522.766334 11.951358" +$ns_ at 249.000000 "$node_(9) setdest 90.366944 444.196722 18.484999" +$ns_ at 249.000000 "$node_(10) setdest 152.055411 354.274810 1.647062" + +$ns_ at 250.000000 "$node_(1) setdest 32.767440 547.185729 17.258045" +$ns_ at 250.000000 "$node_(2) setdest 42.327370 507.405581 13.061605" +$ns_ at 250.000000 "$node_(3) setdest 166.110136 361.566966 19.158010" +$ns_ at 250.000000 "$node_(4) setdest 171.517760 436.860424 11.611706" +$ns_ at 250.000000 "$node_(5) setdest 39.663162 444.108944 17.992445" +$ns_ at 250.000000 "$node_(6) setdest 82.640473 482.268268 19.985046" +$ns_ at 250.000000 "$node_(7) setdest 106.691634 395.709099 19.504889" +$ns_ at 250.000000 "$node_(8) setdest 156.539558 511.951326 11.197613" +$ns_ at 250.000000 "$node_(9) setdest 102.661633 459.753615 19.828673" +$ns_ at 250.000000 "$node_(10) setdest 155.016298 355.644768 3.262459" + diff --git a/gui/configs/sample5-mgen.imn b/gui/configs/sample5-mgen.imn new file mode 100644 index 00000000..925266c4 --- /dev/null +++ b/gui/configs/sample5-mgen.imn @@ -0,0 +1,131 @@ +node n1 { + type router + model router + network-config { + hostname n1 + ! + interface eth0 + ip address 10.0.0.2/24 + ipv6 address a:0::2/64 + ! + router ospf + router-id 10.0.0.2 + network 10.0.0.0/24 area 0 + ! + router ospf6 + router-id 10.0.0.2 + interface eth0 area 0.0.0.0 + ! + } + canvas c1 + iconcoords {312.0 120.0} + labelcoords {312.0 148.0} + interface-peer {eth0 n2} + custom-config { + custom-config-id service:UserDefined:mgen.sh + custom-command mgen.sh + config { + #!/bin/sh + SCRIPTDIR=$SESSION_DIR + LOGDIR=/var/log + if [ `uname` = "Linux" ]; then + cd $SCRIPTDIR + else + cd /tmp/e0_`hostname` + fi + ( + cat << 'EOF' + # mgen receiver script + 15.0 LISTEN UDP 5001 + EOF + ) > recv.mgn + mgen input recv.mgn output $LOGDIR/mgen.log > /dev/null 2> /dev/null < /dev/null & + } + } + custom-config { + custom-config-id service:UserDefined + custom-command UserDefined + config { + files=('mgen.sh', ) + startidx=35 + cmdup=('sh mgen.sh', ) + } + } + services {zebra OSPFv2 OSPFv3 vtysh IPForward UserDefined} +} + +node n2 { + type router + model router + network-config { + hostname n2 + ! + interface eth0 + ip address 10.0.0.1/24 + ipv6 address a:0::1/64 + ! + } + canvas c1 + iconcoords {72.0 48.0} + labelcoords {72.0 76.0} + interface-peer {eth0 n1} + custom-config { + custom-config-id service:UserDefined + custom-command UserDefined + config { + files=('mgen.sh', ) + startidx=35 + cmdup=('sh mgen.sh', ) + } + } + custom-config { + custom-config-id service:UserDefined:mgen.sh + custom-command mgen.sh + config { + #!/bin/sh + HN=`hostname` + SCRIPTDIR=$SESSION_DIR + LOGDIR=/var/log + + if [ `uname` = "FreeBSD" ]; then + SCRIPTDIR=/tmp/e0_$HN + LOGDIR=$SCRIPTDIR + fi + cd $SCRIPTDIR + ( + cat << 'EOF' + # mgen sender script: send UDP traffic to UDP port 5001 after 15 seconds + 15.0 ON 1 UDP SRC 5000 DST 10.0.0.2/5001 PERIODIC [1 4096] + EOF + ) > send_$HN.mgn + mgen input send_$HN.mgn output $LOGDIR/mgen_$HN.log > /dev/null 2> /dev/null < /dev/null & + } + } + services {zebra OSPFv2 OSPFv3 vtysh IPForward UserDefined} +} + +link l1 { + nodes {n2 n1} + bandwidth 0 +} + +canvas c1 { + name {Canvas1} +} + +option global { + interface_names no + ip_addresses yes + ipv6_addresses yes + node_labels yes + link_labels yes + show_api no + background_images no + annotations yes + grid yes + traffic_start 0 +} + +option session { +} + diff --git a/gui/configs/sample6-emane-rfpipe.imn b/gui/configs/sample6-emane-rfpipe.imn new file mode 100644 index 00000000..9e0cc045 --- /dev/null +++ b/gui/configs/sample6-emane-rfpipe.imn @@ -0,0 +1,271 @@ +node n1 { + type router + model mdr + network-config { + hostname n1 + ! + interface eth0 + ip address 10.0.0.1/32 + ipv6 address a:0::1/128 + ! + } + iconcoords {263.148836492 76.94184084899999} + labelcoords {263.148836492 100.94184084899999} + canvas c1 + interface-peer {eth0 n11} +} + +node n2 { + type router + model mdr + network-config { + hostname n2 + ! + interface eth0 + ip address 10.0.0.2/32 + ipv6 address a:0::2/128 + ! + } + iconcoords {184.35166313500002 532.524009667} + labelcoords {184.35166313500002 556.524009667} + canvas c1 + interface-peer {eth0 n11} +} + +node n3 { + type router + model mdr + network-config { + hostname n3 + ! + interface eth0 + ip address 10.0.0.3/32 + ipv6 address a:0::3/128 + ! + } + iconcoords {121.17243156500001 313.104176223} + labelcoords {121.17243156500001 337.104176223} + canvas c1 + interface-peer {eth0 n11} +} + +node n4 { + type router + model mdr + network-config { + hostname n4 + ! + interface eth0 + ip address 10.0.0.4/32 + ipv6 address a:0::4/128 + ! + } + iconcoords {443.031505695 586.805480735} + labelcoords {443.031505695 610.805480735} + canvas c1 + interface-peer {eth0 n11} +} + +node n5 { + type router + model mdr + network-config { + hostname n5 + ! + interface eth0 + ip address 10.0.0.5/32 + ipv6 address a:0::5/128 + ! + } + iconcoords {548.817758443 209.207353139} + labelcoords {548.817758443 233.207353139} + canvas c1 + interface-peer {eth0 n11} +} + +node n6 { + type router + model mdr + network-config { + hostname n6 + ! + interface eth0 + ip address 10.0.0.6/32 + ipv6 address a:0::6/128 + ! + } + iconcoords {757.062318769 61.533941783} + labelcoords {757.062318769 85.533941783} + canvas c1 + interface-peer {eth0 n11} +} + +node n7 { + type router + model mdr + network-config { + hostname n7 + ! + interface eth0 + ip address 10.0.0.7/32 + ipv6 address a:0::7/128 + ! + } + iconcoords {778.142667152 489.227596061} + labelcoords {778.142667152 513.227596061} + canvas c1 + interface-peer {eth0 n11} +} + +node n8 { + type router + model mdr + network-config { + hostname n8 + ! + interface eth0 + ip address 10.0.0.8/32 + ipv6 address a:0::8/128 + ! + } + iconcoords {93.895107521 135.228007484} + labelcoords {93.895107521 159.228007484} + canvas c1 + interface-peer {eth0 n11} +} + +node n9 { + type router + model mdr + network-config { + hostname n9 + ! + interface eth0 + ip address 10.0.0.9/32 + ipv6 address a:0::9/128 + ! + } + iconcoords {528.693178831 84.9814304098} + labelcoords {528.693178831 108.9814304098} + canvas c1 + interface-peer {eth0 n11} +} + +node n10 { + type router + model mdr + network-config { + hostname n10 + ! + interface eth0 + ip address 10.0.0.10/32 + ipv6 address a:0::10/128 + ! + } + iconcoords {569.534639911 475.46828902} + labelcoords {569.534639911 499.46828902} + canvas c1 + interface-peer {eth0 n11} +} + +node n11 { + bandwidth 54000000 + type wlan + range 275 + network-config { + hostname wlan11 + ! + interface wireless + ip address 10.0.0.0/32 + ipv6 address a:0::0/128 + ! + mobmodel + coreapi + emane_rfpipe + ! + } + canvas c1 + iconcoords {65.0 558.0} + labelcoords {65.0 582.0} + interface-peer {e0 n1} + interface-peer {e1 n2} + interface-peer {e2 n3} + interface-peer {e3 n4} + interface-peer {e4 n5} + interface-peer {e5 n6} + interface-peer {e6 n7} + interface-peer {e7 n8} + interface-peer {e8 n9} + interface-peer {e9 n10} +} + +link l1 { + nodes {n11 n1} + bandwidth 54000000 +} + +link l2 { + nodes {n11 n2} + bandwidth 54000000 +} + +link l3 { + nodes {n11 n3} + bandwidth 54000000 +} + +link l4 { + nodes {n11 n4} + bandwidth 54000000 +} + +link l5 { + nodes {n11 n5} + bandwidth 54000000 +} + +link l6 { + nodes {n11 n6} + bandwidth 54000000 +} + +link l7 { + nodes {n11 n7} + bandwidth 54000000 +} + +link l8 { + nodes {n11 n8} + bandwidth 54000000 +} + +link l9 { + nodes {n11 n9} + bandwidth 54000000 +} + +link l10 { + nodes {n11 n10} + bandwidth 54000000 +} + +canvas c1 { + name {Canvas1} +} + +option global { + interface_names no + ip_addresses yes + ipv6_addresses yes + node_labels yes + link_labels yes + ipsec_configs yes + remote_exec no + exec_errors yes + show_api no + background_images no + annotations yes + grid yes + traffic_start 0 +} + diff --git a/gui/configs/sample7-emane-ieee80211abg.imn b/gui/configs/sample7-emane-ieee80211abg.imn new file mode 100644 index 00000000..b1323f6f --- /dev/null +++ b/gui/configs/sample7-emane-ieee80211abg.imn @@ -0,0 +1,274 @@ +node n1 { + type router + model mdr + network-config { + hostname n1 + ! + interface eth0 + ip address 10.0.0.1/32 + ipv6 address a:0::1/128 + ! + } + iconcoords {115.14883649199999 139.941840849} + labelcoords {115.14883649199999 167.941840849} + canvas c1 + interface-peer {eth0 n11} +} + +node n2 { + type router + model mdr + network-config { + hostname n2 + ! + interface eth0 + ip address 10.0.0.2/32 + ipv6 address a:0::2/128 + ! + } + iconcoords {190.35166313500002 519.524009667} + labelcoords {190.35166313500002 547.524009667} + canvas c1 + interface-peer {eth0 n11} +} + +node n3 { + type router + model mdr + network-config { + hostname n3 + ! + interface eth0 + ip address 10.0.0.3/32 + ipv6 address a:0::3/128 + ! + } + iconcoords {142.172431565 307.104176223} + labelcoords {142.172431565 335.104176223} + canvas c1 + interface-peer {eth0 n11} +} + +node n4 { + type router + model mdr + network-config { + hostname n4 + ! + interface eth0 + ip address 10.0.0.4/32 + ipv6 address a:0::4/128 + ! + } + iconcoords {395.031505695 589.805480735} + labelcoords {395.031505695 617.805480735} + canvas c1 + interface-peer {eth0 n11} +} + +node n5 { + type router + model mdr + network-config { + hostname n5 + ! + interface eth0 + ip address 10.0.0.5/32 + ipv6 address a:0::5/128 + ! + } + iconcoords {250.817758443 27.20735313899999} + labelcoords {250.817758443 55.20735313899999} + canvas c1 + interface-peer {eth0 n11} +} + +node n6 { + type router + model mdr + network-config { + hostname n6 + ! + interface eth0 + ip address 10.0.0.6/32 + ipv6 address a:0::6/128 + ! + } + iconcoords {757.062318769 61.533941783} + labelcoords {757.062318769 89.533941783} + canvas c1 + interface-peer {eth0 n11} +} + +node n7 { + type router + model mdr + network-config { + hostname n7 + ! + interface eth0 + ip address 10.0.0.7/32 + ipv6 address a:0::7/128 + ! + } + iconcoords {909.142667152 593.227596061} + labelcoords {909.142667152 621.227596061} + canvas c1 + interface-peer {eth0 n11} +} + +node n8 { + type router + model mdr + network-config { + hostname n8 + ! + interface eth0 + ip address 10.0.0.8/32 + ipv6 address a:0::8/128 + ! + } + iconcoords {351.895107521 337.228007484} + labelcoords {351.895107521 365.228007484} + canvas c1 + interface-peer {eth0 n11} +} + +node n9 { + type router + model mdr + network-config { + hostname n9 + ! + interface eth0 + ip address 10.0.0.9/32 + ipv6 address a:0::9/128 + ! + } + iconcoords {528.693178831 84.9814304098} + labelcoords {528.693178831 112.98143041} + canvas c1 + interface-peer {eth0 n11} +} + +node n10 { + type router + model mdr + network-config { + hostname n10 + ! + interface eth0 + ip address 10.0.0.10/32 + ipv6 address a:0::10/128 + ! + } + iconcoords {568.534639911 526.4682890199999} + labelcoords {568.534639911 554.4682890199999} + canvas c1 + interface-peer {eth0 n11} +} + +node n11 { + bandwidth 54000000 + type wlan + range 275 + network-config { + hostname wlan11 + ! + interface wireless + ip address 10.0.0.0/32 + ipv6 address a:0::0/128 + ! + mobmodel + coreapi + emane_ieee80211abg + ! + } + canvas c1 + iconcoords {65.0 558.0} + labelcoords {65.0 590.0} + interface-peer {e0 n1} + interface-peer {e1 n2} + interface-peer {e2 n3} + interface-peer {e3 n4} + interface-peer {e4 n5} + interface-peer {e5 n6} + interface-peer {e6 n7} + interface-peer {e7 n8} + interface-peer {e8 n9} + interface-peer {e9 n10} +} + +link l1 { + nodes {n11 n1} + bandwidth 54000000 +} + +link l2 { + nodes {n11 n2} + bandwidth 54000000 +} + +link l3 { + nodes {n11 n3} + bandwidth 54000000 +} + +link l4 { + nodes {n11 n4} + bandwidth 54000000 +} + +link l5 { + nodes {n11 n5} + bandwidth 54000000 +} + +link l6 { + nodes {n11 n6} + bandwidth 54000000 +} + +link l7 { + nodes {n11 n7} + bandwidth 54000000 +} + +link l8 { + nodes {n11 n8} + bandwidth 54000000 +} + +link l9 { + nodes {n11 n9} + bandwidth 54000000 +} + +link l10 { + nodes {n11 n10} + bandwidth 54000000 +} + +canvas c1 { + name {Canvas1} + refpt {0 0 47.5791667 -122.132322 2.0} + scale 350.0 + size {1000 750} +} + +option global { + interface_names no + ip_addresses yes + ipv6_addresses yes + node_labels yes + link_labels yes + ipsec_configs yes + remote_exec no + exec_errors yes + show_api no + background_images no + annotations yes + grid yes + traffic_start 0 +} + diff --git a/gui/configs/sample8-ipsec-service.imn b/gui/configs/sample8-ipsec-service.imn new file mode 100644 index 00000000..bb686742 --- /dev/null +++ b/gui/configs/sample8-ipsec-service.imn @@ -0,0 +1,967 @@ +comments { +Sample scenario showing IPsec service configuration. + +There are three red routers having the IPsec service enabled. The IPsec service +must be customized with the tunnel hosts (peers) and their keys, and the subnet +addresses that should be tunneled. + +For simplicity, the same keys and certificates are used in each of the three +IPsec gateways. These are written to node n1's configuration directory. Keys +can be generated using the openssl utility. + +Note that this scenario may require at patched kernel in order to work; see the +kernels subdirectory of the CORE source for kernel patches. + +The racoon keying daemon and setkey from the ipsec-tools package should also be +installed. +} + +node n1 { + type router + model router + network-config { + hostname n1 + ! + interface eth3 + ip address 192.168.6.1/24 + ipv6 address 2001:6::1/64 + ! + interface eth2 + ip address 192.168.5.1/24 + ipv6 address 2001:5::1/64 + ! + interface eth1 + ip address 192.168.1.1/24 + ipv6 address 2001:1::1/64 + ! + interface eth0 + ip address 192.168.0.1/24 + ipv6 address 2001:0::1/64 + ! + } + canvas c1 + iconcoords {210.0 172.0} + labelcoords {210.0 200.0} + interface-peer {eth0 n2} + interface-peer {eth1 n3} + interface-peer {eth2 n7} + interface-peer {eth3 n8} + custom-config { + custom-config-id service:IPsec:copycerts.sh + custom-command copycerts.sh + config { + #!/bin/sh + + FILES="test1.pem test1.key ca-cert.pem" + + mkdir -p /tmp/certs + + for f in $FILES; do + cp $f /tmp/certs + done + } + } + custom-config { + custom-config-id service:IPsec:ca-cert.pem + custom-command ca-cert.pem + config { + Certificate: + Data: + Version: 3 (0x2) + Serial Number: + df:69:1f:ef:e5:af:bf:0f + Signature Algorithm: sha1WithRSAEncryption + Issuer: C=US, ST=WA, O=core-dev, CN=CORE CA/emailAddress=root@localhost + Validity + Not Before: Mar 20 16:16:08 2012 GMT + Not After : Mar 20 16:16:08 2015 GMT + Subject: C=US, ST=WA, O=core-dev, CN=CORE CA/emailAddress=root@localhost + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + Public-Key: (1024 bit) + Modulus: + 00:c4:d7:fc:c3:bc:a0:ee:76:7b:58:5c:96:6d:1f: + 74:26:c2:93:c1:a4:94:95:13:5e:4f:8b:3f:00:27: + e5:1b:b1:3b:70:3e:72:71:4d:c9:67:54:33:29:49: + 1e:de:a6:91:d9:00:ec:84:b8:64:f8:06:51:82:f4: + 84:9b:a2:fe:16:34:5c:e1:2f:3d:ad:34:b9:8e:ad: + 8e:ea:8a:e9:40:56:5b:f5:09:2c:bf:a0:08:db:81: + 7f:fb:d8:b9:6c:a6:be:4c:1f:b1:4e:b3:b0:8d:8d: + e4:04:8e:f8:8e:e9:c7:aa:e7:4a:b4:87:89:a7:25: + 72:38:74:bb:e5:b6:7f:86:7b + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Subject Key Identifier: + 98:0E:C7:0A:74:5D:FB:56:5B:B7:91:80:2A:3A:D4:89:AD:6C:B9:51 + X509v3 Authority Key Identifier: + keyid:98:0E:C7:0A:74:5D:FB:56:5B:B7:91:80:2A:3A:D4:89:AD:6C:B9:51 + + X509v3 Basic Constraints: + CA:TRUE + Signature Algorithm: sha1WithRSAEncryption + 39:7e:99:fd:40:44:0a:20:4c:3c:9a:bf:01:aa:94:c8:76:bb: + 80:53:4f:cd:28:2f:5b:7f:0b:52:09:14:cb:ac:ee:74:7f:17: + 4b:79:21:db:e1:a3:9b:e5:b1:72:83:f7:88:02:20:d6:23:33: + e4:ff:50:58:c6:88:e0:22:d7:2b:96:b3:dd:31:1a:80:52:0d: + 61:4f:47:72:63:39:1e:7f:a1:ad:f0:2b:82:53:05:ca:3d:0a: + 8f:3c:72:58:74:57:ae:8b:66:16:d9:a4:50:99:bc:d3:a7:c5: + 54:63:f0:87:cd:06:1a:d4:61:ed:d3:b8:33:5d:5a:d6:a4:f0: + a4:96 + -----BEGIN CERTIFICATE----- + MIICijCCAfOgAwIBAgIJAN9pH+/lr78PMA0GCSqGSIb3DQEBBQUAMF4xCzAJBgNV + BAYTAlVTMQswCQYDVQQIDAJXQTERMA8GA1UECgwIY29yZS1kZXYxEDAOBgNVBAMM + B0NPUkUgQ0ExHTAbBgkqhkiG9w0BCQEWDnJvb3RAbG9jYWxob3N0MB4XDTEyMDMy + MDE2MTYwOFoXDTE1MDMyMDE2MTYwOFowXjELMAkGA1UEBhMCVVMxCzAJBgNVBAgM + AldBMREwDwYDVQQKDAhjb3JlLWRldjEQMA4GA1UEAwwHQ09SRSBDQTEdMBsGCSqG + SIb3DQEJARYOcm9vdEBsb2NhbGhvc3QwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJ + AoGBAMTX/MO8oO52e1hclm0fdCbCk8GklJUTXk+LPwAn5RuxO3A+cnFNyWdUMylJ + Ht6mkdkA7IS4ZPgGUYL0hJui/hY0XOEvPa00uY6tjuqK6UBWW/UJLL+gCNuBf/vY + uWymvkwfsU6zsI2N5ASO+I7px6rnSrSHiaclcjh0u+W2f4Z7AgMBAAGjUDBOMB0G + A1UdDgQWBBSYDscKdF37Vlu3kYAqOtSJrWy5UTAfBgNVHSMEGDAWgBSYDscKdF37 + Vlu3kYAqOtSJrWy5UTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4GBADl+ + mf1ARAogTDyavwGqlMh2u4BTT80oL1t/C1IJFMus7nR/F0t5Idvho5vlsXKD94gC + INYjM+T/UFjGiOAi1yuWs90xGoBSDWFPR3JjOR5/oa3wK4JTBco9Co88clh0V66L + ZhbZpFCZvNOnxVRj8IfNBhrUYe3TuDNdWtak8KSW + -----END CERTIFICATE----- + + } + } + custom-config { + custom-config-id service:IPsec:test1.pem + custom-command test1.pem + config { + Certificate: + Data: + Version: 3 (0x2) + Serial Number: + df:69:1f:ef:e5:af:bf:10 + Signature Algorithm: sha1WithRSAEncryption + Issuer: C=US, ST=WA, O=core-dev, CN=CORE CA/emailAddress=root@localhost + Validity + Not Before: Mar 20 16:18:45 2012 GMT + Not After : Mar 20 16:18:45 2013 GMT + Subject: C=US, ST=WA, L=Bellevue, O=core-dev, CN=test1 + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + Public-Key: (1024 bit) + Modulus: + 00:ab:08:f3:3e:47:ce:95:9f:a2:ec:75:14:6e:7d: + bc:33:a5:4c:60:f0:bb:1f:a1:17:17:70:84:43:3c: + 43:f7:37:9e:b1:ed:ff:0f:e3:70:e6:22:21:18:ec: + 9c:af:30:a8:cb:70:83:e7:7e:f5:85:77:15:69:2a: + db:d1:13:e9:8b:fb:5e:85:a8:a3:fa:95:f2:37:c8: + 91:5a:e5:c9:a8:56:a6:56:6a:14:34:ce:61:ad:90: + 63:d7:45:e2:4a:b8:7a:2c:38:17:ad:bd:6d:1d:80: + 16:4b:2f:2d:25:6a:2c:c9:d6:d4:7a:66:6f:57:c8: + 07:fd:7d:ac:41:f0:11:05:33 + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + Netscape Comment: + OpenSSL Generated Certificate + X509v3 Subject Key Identifier: + 71:90:B8:F7:1C:CA:93:7A:F4:11:E5:70:E2:F5:A0:2C:A6:71:E8:36 + X509v3 Authority Key Identifier: + keyid:98:0E:C7:0A:74:5D:FB:56:5B:B7:91:80:2A:3A:D4:89:AD:6C:B9:51 + + Signature Algorithm: sha1WithRSAEncryption + 06:67:4a:ed:5a:e9:a6:c7:16:32:3d:e8:2a:22:fb:06:4b:c9: + a3:8b:c5:2d:13:4d:d7:80:d3:df:3f:27:5b:cc:93:43:96:48: + 2a:64:19:7b:ce:c4:ec:f1:88:ee:47:3c:9e:85:40:2f:5a:19: + ea:e6:75:cc:8d:0b:70:41:5e:e8:76:98:49:27:fe:19:21:f1: + 64:70:f6:b0:26:91:94:fe:dc:2c:56:86:8a:ac:d0:52:d5:1e: + 30:42:68:aa:43:37:17:3b:a0:97:e4:7d:68:05:09:b2:fd:b3: + 2c:a0:f1:6f:07:0b:e2:5f:e8:a1:a3:39:6b:ba:83:ca:fa:ca: + 30:1e + -----BEGIN CERTIFICATE----- + MIICpzCCAhCgAwIBAgIJAN9pH+/lr78QMA0GCSqGSIb3DQEBBQUAMF4xCzAJBgNV + BAYTAlVTMQswCQYDVQQIDAJXQTERMA8GA1UECgwIY29yZS1kZXYxEDAOBgNVBAMM + B0NPUkUgQ0ExHTAbBgkqhkiG9w0BCQEWDnJvb3RAbG9jYWxob3N0MB4XDTEyMDMy + MDE2MTg0NVoXDTEzMDMyMDE2MTg0NVowUDELMAkGA1UEBhMCVVMxCzAJBgNVBAgM + AldBMREwDwYDVQQHDAhCZWxsZXZ1ZTERMA8GA1UECgwIY29yZS1kZXYxDjAMBgNV + BAMMBXRlc3QxMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrCPM+R86Vn6Ls + dRRufbwzpUxg8LsfoRcXcIRDPEP3N56x7f8P43DmIiEY7JyvMKjLcIPnfvWFdxVp + KtvRE+mL+16FqKP6lfI3yJFa5cmoVqZWahQ0zmGtkGPXReJKuHosOBetvW0dgBZL + Ly0laizJ1tR6Zm9XyAf9faxB8BEFMwIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCG + SAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4E + FgQUcZC49xzKk3r0EeVw4vWgLKZx6DYwHwYDVR0jBBgwFoAUmA7HCnRd+1Zbt5GA + KjrUia1suVEwDQYJKoZIhvcNAQEFBQADgYEABmdK7VrppscWMj3oKiL7BkvJo4vF + LRNN14DT3z8nW8yTQ5ZIKmQZe87E7PGI7kc8noVAL1oZ6uZ1zI0LcEFe6HaYSSf+ + GSHxZHD2sCaRlP7cLFaGiqzQUtUeMEJoqkM3Fzugl+R9aAUJsv2zLKDxbwcL4l/o + oaM5a7qDyvrKMB4= + -----END CERTIFICATE----- + + } + } + custom-config { + custom-config-id service:IPsec:test1.key + custom-command test1.key + config { + -----BEGIN PRIVATE KEY----- + MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAKsI8z5HzpWfoux1 + FG59vDOlTGDwux+hFxdwhEM8Q/c3nrHt/w/jcOYiIRjsnK8wqMtwg+d+9YV3FWkq + 29ET6Yv7XoWoo/qV8jfIkVrlyahWplZqFDTOYa2QY9dF4kq4eiw4F629bR2AFksv + LSVqLMnW1Hpmb1fIB/19rEHwEQUzAgMBAAECgYEAnGREt5BFcD9WZMzx7859BuSB + IKs/D77nNIGoDyrOIwHy1FQBRG/+ThCrHvVMmEzwK4Yotsc6jd3D8DRGZ7nDdMMJ + bvDiyOsyFhnNYnpGQbMJnVuFiYCqyp97lkKkhKw8ZoU2o2ATss1MBPuKXfDk0qH5 + TFHopVOJRtSl23EAHUECQQDdnVkhckDK+OwBKwLGKwuMpwKknHVJviQbtgGnrqdB + 7lOwZMdq7G0c8rVM9xh8zAcOOauLC7ZVPSpH2HGF+ArxAkEAxZKM1U/gvpS2R1rg + jbIXtEXy/XXhlOez9dpZXz0VGhR1hn07rlg/QxzyGXnFfI+6gn53faIW8WSNp6m6 + BG1qYwJATuCYPr1JrnSWm3vRivL7M16mJCzD2jFg7LQFNseFJIRNKTVVfQsVcv43 + 5WL1RkXgJQIFuoG6rfANQnEZRtOYIQJACPQdQcV+7+QZZp5tsr4xaNAKtQXUlUTy + 2N9uUWyZOjdXJCMkwz/ojggPyKvGEWEKGMPWcnEYDRR7fu+oKG809QJAA8QbP3Vl + crpixSGR5nkRlOcM84igHasqOYIKz4V8m/HCaHTMcpfdBjEHk4v9grSoTESw7xZW + JIssE0c6pf/S6A== + -----END PRIVATE KEY----- + -----BEGIN CERTIFICATE REQUEST----- + MIIBjzCB+QIBADBQMQswCQYDVQQGEwJVUzELMAkGA1UECAwCV0ExETAPBgNVBAcM + CEJlbGxldnVlMREwDwYDVQQKDAhjb3JlLWRldjEOMAwGA1UEAwwFdGVzdDEwgZ8w + DQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKsI8z5HzpWfoux1FG59vDOlTGDwux+h + FxdwhEM8Q/c3nrHt/w/jcOYiIRjsnK8wqMtwg+d+9YV3FWkq29ET6Yv7XoWoo/qV + 8jfIkVrlyahWplZqFDTOYa2QY9dF4kq4eiw4F629bR2AFksvLSVqLMnW1Hpmb1fI + B/19rEHwEQUzAgMBAAGgADANBgkqhkiG9w0BAQUFAAOBgQAkIofXRWqtHX7XAa6E + 6p7X67MRC+Qg0ZX5orITdHhSNNIKgg8BEBxpEiUKIwDrexXp/zOccdbTkbYCKeNm + s8mpVRuHfKsp1Q6+6sKtcfEHWJSalckvPQO96SPhVD03b+jg1rW3ecwxXFKuM9nC + z5NxVmroFYDvhaRsaToLfEkXPw== + -----END CERTIFICATE REQUEST----- + + } + } + custom-config { + custom-config-id service:IPsec:ipsec.sh + custom-command ipsec.sh + config { + #!/bin/sh + # set up static tunnel mode security assocation for service (security.py) + # -------- CUSTOMIZATION REQUIRED -------- + # + # The IPsec service builds ESP tunnels between the specified peers using the + # racoon IKEv2 keying daemon. You need to provide keys and the addresses of + # peers, along with subnets to tunnel. + + # directory containing the certificate and key described below + keydir=/tmp/certs + + # the name used for the "$certname.pem" x509 certificate and + # "$certname.key" RSA private key, which can be generated using openssl + certname=test1 + + # list the public-facing IP addresses, starting with the localhost and followed + # by each tunnel peer, separated with a single space + tunnelhosts="192.168.0.1AND192.168.0.2 192.168.1.1AND192.168.1.2" + + # Define T where i is the index for each tunnel peer host from + # the tunnel_hosts list above (0 is localhost). + # T is a list of IPsec tunnels with peer i, with a local subnet address + # followed by the remote subnet address: + # T="AND AND" + # For example, 192.168.0.0/24 is a local network (behind this node) to be + # tunneled and 192.168.2.0/24 is a remote network (behind peer 1) + T1="192.168.5.0/24AND192.168.8.0/24" + T2="192.168.5.0/24AND192.168.4.0/24 192.168.6.0/24AND192.168.4.0/24" + + # -------- END CUSTOMIZATION -------- + + echo "building config $PWD/ipsec.conf..." + echo "building config $PWD/ipsec.conf..." > $PWD/ipsec.log + + checkip=0 + if [ "$(dpkg -l | grep " sipcalc ")" = "" ]; then + echo "WARNING: ip validation disabled because package sipcalc not installed + " >> $PWD/ipsec.log + checkip=1 + fi + + echo "#!/usr/sbin/setkey -f + # Flush the SAD and SPD + flush; + spdflush; + + # Security policies \ + " > $PWD/ipsec.conf + i=0 + for hostpair in $tunnelhosts; do + i=`expr $i + 1` + # parse tunnel host IP + thishost=${hostpair%%AND*} + peerhost=${hostpair##*AND} + if [ $checkip = "0" ] && + [ "$(sipcalc "$thishost" "$peerhost" | grep ERR)" != "" ]; then + echo "ERROR: invalid host address $thishost or $peerhost \ + " >> $PWD/ipsec.log + fi + # parse each tunnel addresses + tunnel_list_var_name=T$i + eval tunnels="$"$tunnel_list_var_name"" + for ttunnel in $tunnels; do + lclnet=${ttunnel%%AND*} + rmtnet=${ttunnel##*AND} + if [ $checkip = "0" ] && + [ "$(sipcalc "$lclnet" "$rmtnet"| grep ERR)" != "" ]; then + echo "ERROR: invalid tunnel address $lclnet and $rmtnet \ + " >> $PWD/ipsec.log + fi + # add tunnel policies + echo " + spdadd $lclnet $rmtnet any -P out ipsec + esp/tunnel/$thishost-$peerhost/require; + spdadd $rmtnet $lclnet any -P in ipsec + esp/tunnel/$peerhost-$thishost/require; \ + " >> $PWD/ipsec.conf + done + done + + echo "building config $PWD/racoon.conf..." + if [ ! -e $keydir\/$certname.key ] || [ ! -e $keydir\/$certname.pem ]; then + echo "ERROR: missing certification files under $keydir \ + $certname.key or $certname.pem " >> $PWD/ipsec.log + fi + echo " + path certificate \"$keydir\"; + listen { + adminsock disabled; + } + remote anonymous + { + exchange_mode main; + certificate_type x509 \"$certname.pem\" \"$certname.key\"; + ca_type x509 \"ca-cert.pem\"; + my_identifier asn1dn; + peers_identifier asn1dn; + + proposal { + encryption_algorithm 3des ; + hash_algorithm sha1; + authentication_method rsasig ; + dh_group modp768; + } + } + sainfo anonymous + { + pfs_group modp768; + lifetime time 1 hour ; + encryption_algorithm 3des, blowfish 448, rijndael ; + authentication_algorithm hmac_sha1, hmac_md5 ; + compression_algorithm deflate ; + } + " > $PWD/racoon.conf + + # the setkey program is required from the ipsec-tools package + echo "running setkey -f $PWD/ipsec.conf..." + setkey -f $PWD/ipsec.conf + + echo "running racoon -d -f $PWD/racoon.conf..." + racoon -d -f $PWD/racoon.conf -l racoon.log + + } + } + custom-config { + custom-config-id service:IPsec + custom-command IPsec + config { + + ('ipsec.sh', 'test1.key', 'test1.pem', 'ca-cert.pem', 'copycerts.sh', ) + 60 + ('sh copycerts.sh', 'sh ipsec.sh', ) + ('killall racoon', ) + + + } + } + services {zebra OSPFv2 OSPFv3 vtysh IPForward IPsec} + custom-image $CORE_DATA_DIR/icons/normal/router_red.gif +} + +node n2 { + type router + model router + network-config { + hostname n2 + ! + interface eth3 + ip address 192.168.8.1/24 + ipv6 address 2001:8::1/64 + ! + interface eth2 + ip address 192.168.7.1/24 + ipv6 address 2001:7::1/64 + ! + interface eth1 + ip address 192.168.2.1/24 + ipv6 address 2001:2::1/64 + ! + interface eth0 + ip address 192.168.0.2/24 + ipv6 address 2001:0::2/64 + ! + } + canvas c1 + iconcoords {455.0 173.0} + labelcoords {455.0 201.0} + interface-peer {eth0 n1} + interface-peer {eth1 n4} + interface-peer {eth2 n9} + interface-peer {eth3 n10} + custom-config { + custom-config-id service:IPsec:ipsec.sh + custom-command ipsec.sh + config { + #!/bin/sh + # set up static tunnel mode security assocation for service (security.py) + # -------- CUSTOMIZATION REQUIRED -------- + # + # The IPsec service builds ESP tunnels between the specified peers using the + # racoon IKEv2 keying daemon. You need to provide keys and the addresses of + # peers, along with subnets to tunnel. + + # directory containing the certificate and key described below + keydir=/tmp/certs + + # the name used for the "$certname.pem" x509 certificate and + # "$certname.key" RSA private key, which can be generated using openssl + certname=test1 + + # list the public-facing IP addresses, starting with the localhost and followed + # by each tunnel peer, separated with a single space + tunnelhosts="192.168.0.2AND192.168.0.1" + + # Define T where i is the index for each tunnel peer host from + # the tunnel_hosts list above (0 is localhost). + # T is a list of IPsec tunnels with peer i, with a local subnet address + # followed by the remote subnet address: + # T="AND AND" + # For example, 192.168.0.0/24 is a local network (behind this node) to be + # tunneled and 192.168.2.0/24 is a remote network (behind peer 1) + T1="192.168.8.0/24AND192.168.5.0/24" + + # -------- END CUSTOMIZATION -------- + + echo "building config $PWD/ipsec.conf..." + echo "building config $PWD/ipsec.conf..." > $PWD/ipsec.log + + checkip=0 + if [ "$(dpkg -l | grep " sipcalc ")" = "" ]; then + echo "WARNING: ip validation disabled because package sipcalc not installed + " >> $PWD/ipsec.log + checkip=1 + fi + + echo "#!/usr/sbin/setkey -f + # Flush the SAD and SPD + flush; + spdflush; + + # Security policies \ + " > $PWD/ipsec.conf + i=0 + for hostpair in $tunnelhosts; do + i=`expr $i + 1` + # parse tunnel host IP + thishost=${hostpair%%AND*} + peerhost=${hostpair##*AND} + if [ $checkip = "0" ] && + [ "$(sipcalc "$thishost" "$peerhost" | grep ERR)" != "" ]; then + echo "ERROR: invalid host address $thishost or $peerhost \ + " >> $PWD/ipsec.log + fi + # parse each tunnel addresses + tunnel_list_var_name=T$i + eval tunnels="$"$tunnel_list_var_name"" + for ttunnel in $tunnels; do + lclnet=${ttunnel%%AND*} + rmtnet=${ttunnel##*AND} + if [ $checkip = "0" ] && + [ "$(sipcalc "$lclnet" "$rmtnet"| grep ERR)" != "" ]; then + echo "ERROR: invalid tunnel address $lclnet and $rmtnet \ + " >> $PWD/ipsec.log + fi + # add tunnel policies + echo " + spdadd $lclnet $rmtnet any -P out ipsec + esp/tunnel/$thishost-$peerhost/require; + spdadd $rmtnet $lclnet any -P in ipsec + esp/tunnel/$peerhost-$thishost/require; \ + " >> $PWD/ipsec.conf + done + done + + echo "building config $PWD/racoon.conf..." + if [ ! -e $keydir\/$certname.key ] || [ ! -e $keydir\/$certname.pem ]; then + echo "ERROR: missing certification files under $keydir \ + $certname.key or $certname.pem " >> $PWD/ipsec.log + fi + echo " + path certificate \"$keydir\"; + listen { + adminsock disabled; + } + remote anonymous + { + exchange_mode main; + certificate_type x509 \"$certname.pem\" \"$certname.key\"; + ca_type x509 \"ca-cert.pem\"; + my_identifier asn1dn; + peers_identifier asn1dn; + + proposal { + encryption_algorithm 3des ; + hash_algorithm sha1; + authentication_method rsasig ; + dh_group modp768; + } + } + sainfo anonymous + { + pfs_group modp768; + lifetime time 1 hour ; + encryption_algorithm 3des, blowfish 448, rijndael ; + authentication_algorithm hmac_sha1, hmac_md5 ; + compression_algorithm deflate ; + } + " > $PWD/racoon.conf + + # the setkey program is required from the ipsec-tools package + echo "running setkey -f $PWD/ipsec.conf..." + setkey -f $PWD/ipsec.conf + + echo "running racoon -d -f $PWD/racoon.conf..." + racoon -d -f $PWD/racoon.conf -l racoon.log + + } + } + custom-config { + custom-config-id service:IPsec + custom-command IPsec + config { + + ('ipsec.sh', ) + 60 + ('sh ipsec.sh', ) + ('killall racoon', ) + + + } + } + services {zebra OSPFv2 OSPFv3 vtysh IPForward IPsec} + custom-image $CORE_DATA_DIR/icons/normal/router_red.gif +} + +node n3 { + type router + model router + network-config { + hostname n3 + ! + interface eth2 + ip address 192.168.4.1/24 + ipv6 address 2001:4::1/64 + ! + interface eth1 + ip address 192.168.3.1/24 + ipv6 address 2001:3::1/64 + ! + interface eth0 + ip address 192.168.1.2/24 + ipv6 address 2001:1::2/64 + ! + } + canvas c1 + iconcoords {211.0 375.0} + labelcoords {211.0 403.0} + interface-peer {eth0 n1} + interface-peer {eth1 n5} + interface-peer {eth2 n6} + custom-config { + custom-config-id service:IPsec:ipsec.sh + custom-command ipsec.sh + config { + #!/bin/sh + # set up static tunnel mode security assocation for service (security.py) + # -------- CUSTOMIZATION REQUIRED -------- + # + # The IPsec service builds ESP tunnels between the specified peers using the + # racoon IKEv2 keying daemon. You need to provide keys and the addresses of + # peers, along with subnets to tunnel. + + # directory containing the certificate and key described below + keydir=/tmp/certs + + # the name used for the "$certname.pem" x509 certificate and + # "$certname.key" RSA private key, which can be generated using openssl + certname=test1 + + # list the public-facing IP addresses, starting with the localhost and followed + # by each tunnel peer, separated with a single space + tunnelhosts="192.168.1.2AND192.168.1.1" + + # Define T where i is the index for each tunnel peer host from + # the tunnel_hosts list above (0 is localhost). + # T is a list of IPsec tunnels with peer i, with a local subnet address + # followed by the remote subnet address: + # T="AND AND" + # For example, 192.168.0.0/24 is a local network (behind this node) to be + # tunneled and 192.168.2.0/24 is a remote network (behind peer 1) + T1="192.168.4.0/24AND192.168.5.0/24 192.168.4.0/24AND192.168.6.0/24" + + # -------- END CUSTOMIZATION -------- + + echo "building config $PWD/ipsec.conf..." + echo "building config $PWD/ipsec.conf..." > $PWD/ipsec.log + + checkip=0 + if [ "$(dpkg -l | grep " sipcalc ")" = "" ]; then + echo "WARNING: ip validation disabled because package sipcalc not installed + " >> $PWD/ipsec.log + checkip=1 + fi + + echo "#!/usr/sbin/setkey -f + # Flush the SAD and SPD + flush; + spdflush; + + # Security policies \ + " > $PWD/ipsec.conf + i=0 + for hostpair in $tunnelhosts; do + i=`expr $i + 1` + # parse tunnel host IP + thishost=${hostpair%%AND*} + peerhost=${hostpair##*AND} + if [ $checkip = "0" ] && + [ "$(sipcalc "$thishost" "$peerhost" | grep ERR)" != "" ]; then + echo "ERROR: invalid host address $thishost or $peerhost \ + " >> $PWD/ipsec.log + fi + # parse each tunnel addresses + tunnel_list_var_name=T$i + eval tunnels="$"$tunnel_list_var_name"" + for ttunnel in $tunnels; do + lclnet=${ttunnel%%AND*} + rmtnet=${ttunnel##*AND} + if [ $checkip = "0" ] && + [ "$(sipcalc "$lclnet" "$rmtnet"| grep ERR)" != "" ]; then + echo "ERROR: invalid tunnel address $lclnet and $rmtnet \ + " >> $PWD/ipsec.log + fi + # add tunnel policies + echo " + spdadd $lclnet $rmtnet any -P out ipsec + esp/tunnel/$thishost-$peerhost/require; + spdadd $rmtnet $lclnet any -P in ipsec + esp/tunnel/$peerhost-$thishost/require; \ + " >> $PWD/ipsec.conf + done + done + + echo "building config $PWD/racoon.conf..." + if [ ! -e $keydir\/$certname.key ] || [ ! -e $keydir\/$certname.pem ]; then + echo "ERROR: missing certification files under $keydir \ + $certname.key or $certname.pem " >> $PWD/ipsec.log + fi + echo " + path certificate \"$keydir\"; + listen { + adminsock disabled; + } + remote anonymous + { + exchange_mode main; + certificate_type x509 \"$certname.pem\" \"$certname.key\"; + ca_type x509 \"ca-cert.pem\"; + my_identifier asn1dn; + peers_identifier asn1dn; + + proposal { + encryption_algorithm 3des ; + hash_algorithm sha1; + authentication_method rsasig ; + dh_group modp768; + } + } + sainfo anonymous + { + pfs_group modp768; + lifetime time 1 hour ; + encryption_algorithm 3des, blowfish 448, rijndael ; + authentication_algorithm hmac_sha1, hmac_md5 ; + compression_algorithm deflate ; + } + " > $PWD/racoon.conf + + # the setkey program is required from the ipsec-tools package + echo "running setkey -f $PWD/ipsec.conf..." + setkey -f $PWD/ipsec.conf + + echo "running racoon -d -f $PWD/racoon.conf..." + racoon -d -f $PWD/racoon.conf -l racoon.log + + } + } + custom-config { + custom-config-id service:IPsec + custom-command IPsec + config { + + ('ipsec.sh', ) + 60 + ('sh ipsec.sh', ) + ('killall racoon', ) + + + } + } + services {zebra OSPFv2 OSPFv3 vtysh IPForward IPsec} + custom-image $CORE_DATA_DIR/icons/normal/router_red.gif +} + +node n4 { + type router + model router + network-config { + hostname n4 + ! + interface eth1 + ip address 192.168.9.1/24 + ipv6 address 2001:9::1/64 + ! + interface eth0 + ip address 192.168.2.2/24 + ipv6 address 2001:2::2/64 + ! + } + canvas c1 + iconcoords {456.0 376.0} + labelcoords {456.0 404.0} + interface-peer {eth0 n2} + interface-peer {eth1 n11} +} + +node n5 { + type router + model host + network-config { + hostname n5 + ! + interface eth0 + ip address 192.168.3.10/24 + ipv6 address 2001:3::10/64 + ! + } + canvas c1 + iconcoords {50.0 472.0} + labelcoords {50.0 504.0} + interface-peer {eth0 n3} +} + +node n6 { + type router + model host + network-config { + hostname n6 + ! + interface eth0 + ip address 192.168.4.10/24 + ipv6 address 2001:4::10/64 + ! + } + canvas c1 + iconcoords {44.0 292.0} + labelcoords {44.0 324.0} + interface-peer {eth0 n3} +} + +node n7 { + type router + model host + network-config { + hostname n7 + ! + interface eth0 + ip address 192.168.5.10/24 + ipv6 address 2001:5::10/64 + ! + } + canvas c1 + iconcoords {41.0 62.0} + labelcoords {41.0 94.0} + interface-peer {eth0 n1} +} + +node n8 { + type router + model host + network-config { + hostname n8 + ! + interface eth0 + ip address 192.168.6.10/24 + ipv6 address 2001:6::10/64 + ! + } + canvas c1 + iconcoords {39.0 121.0} + labelcoords {39.0 153.0} + interface-peer {eth0 n1} +} + +node n9 { + type router + model host + network-config { + hostname n9 + ! + interface eth0 + ip address 192.168.7.10/24 + ipv6 address 2001:7::10/64 + ! + } + canvas c1 + iconcoords {653.0 69.0} + labelcoords {653.0 101.0} + interface-peer {eth0 n2} +} + +node n10 { + type router + model host + network-config { + hostname n10 + ! + interface eth0 + ip address 192.168.8.10/24 + ipv6 address 2001:8::10/64 + ! + } + canvas c1 + iconcoords {454.0 48.0} + labelcoords {484.0 59.0} + interface-peer {eth0 n2} +} + +node n11 { + type router + model host + network-config { + hostname n11 + ! + interface eth0 + ip address 192.168.9.10/24 + ipv6 address 2001:9::10/64 + ! + } + canvas c1 + iconcoords {654.0 460.0} + labelcoords {654.0 492.0} + interface-peer {eth0 n4} +} + +link l1 { + nodes {n1 n2} + bandwidth 0 +} + +link l2 { + nodes {n1 n3} + bandwidth 0 +} + +link l3 { + nodes {n2 n4} + bandwidth 0 +} + +link l4 { + nodes {n3 n5} + bandwidth 0 +} + +link l5 { + nodes {n3 n6} + bandwidth 0 +} + +link l6 { + nodes {n1 n7} + bandwidth 0 +} + +link l7 { + nodes {n1 n8} + bandwidth 0 +} + +link l8 { + nodes {n2 n9} + bandwidth 0 +} + +link l9 { + nodes {n2 n10} + bandwidth 0 +} + +link l10 { + nodes {n4 n11} + bandwidth 0 +} + +annotation a1 { + iconcoords {8.0 6.0 514.0 99.0} + type rectangle + label {Tunnel 1} + labelcolor black + fontfamily {Arial} + fontsize {12} + color #ffd0d0 + width 0 + border #00ff00 + rad 22 + canvas c1 +} + +annotation a2 { + iconcoords {8.0 6.0 137.0 334.0} + type rectangle + label {Tunnel 2} + labelcolor black + fontfamily {Arial} + fontsize {12} + color #ffe1e1 + width 0 + border black + rad 23 + canvas c1 +} + +annotation a5 { + iconcoords {263.0 127.0} + type text + label {} + labelcolor black + fontfamily {Arial} + fontsize {12} + effects {underline} + canvas c1 +} + +canvas c1 { + name {Canvas1} +} + +option global { + interface_names yes + ip_addresses yes + ipv6_addresses no + node_labels yes + link_labels yes + ipsec_configs yes + exec_errors yes + show_api no + background_images no + annotations yes + grid yes + traffic_start 0 +} + diff --git a/gui/configs/sample9-vpn.imn b/gui/configs/sample9-vpn.imn new file mode 100644 index 00000000..2a5696f2 --- /dev/null +++ b/gui/configs/sample9-vpn.imn @@ -0,0 +1,850 @@ +comments { +Sample scenario showing VPNClient and VPNServer service configuration. + +This topology features an OpenVPN client and server for virtual private +networking. The client can access the private 10.0.6.0/24 network via the VPN +server. First wait until routing converges in the center routers (try using the +Adjacency Widget and wait for blue lines, meaning full adjacencies), then open +a shell on the vpnclient and try pinging the private address of the vpnserver: + + vpnclient> ping 10.0.6.1 + +You can also access the other 10.0.6.* hosts behind the server. Try running +tcpudmp on one of the center routers, e.g. the n2 eth1/10.0.5.2 interface, and +you'll see UDP packets with TLS encrypted data instead of ICMP packets. + +Keys are included as extra files in the VPNClient and VPNServer service +configuration. +} + +node n1 { + type router + model router + network-config { + hostname n1 + ! + interface eth2 + ip address 10.0.4.2/24 + ipv6 address 2001:4::2/64 + ! + interface eth1 + ip address 10.0.2.1/24 + ipv6 address 2001:2::1/64 + ! + interface eth0 + ip address 10.0.0.1/24 + ipv6 address 2001:0::1/64 + ! + } + canvas c1 + iconcoords {297.0 236.0} + labelcoords {297.0 264.0} + interface-peer {eth0 n6} + interface-peer {eth1 n2} + interface-peer {eth2 n3} +} + +node n2 { + type router + model router + network-config { + hostname n2 + ! + interface eth1 + ip address 10.0.5.2/24 + ipv6 address 2001:5::2/64 + ! + interface eth0 + ip address 10.0.2.2/24 + ipv6 address 2001:2::2/64 + ! + } + canvas c1 + iconcoords {298.0 432.0} + labelcoords {298.0 460.0} + interface-peer {eth0 n1} + interface-peer {eth1 n4} +} + +node n3 { + type router + model router + network-config { + hostname n3 + ! + interface eth1 + ip address 10.0.4.1/24 + ipv6 address 2001:4::1/64 + ! + interface eth0 + ip address 10.0.3.1/24 + ipv6 address 2001:3::1/64 + ! + } + canvas c1 + iconcoords {573.0 233.0} + labelcoords {573.0 261.0} + interface-peer {eth0 n4} + interface-peer {eth1 n1} +} + +node n4 { + type router + model router + network-config { + hostname n4 + ! + interface eth2 + ip address 10.0.5.1/24 + ipv6 address 2001:5::1/64 + ! + interface eth1 + ip address 10.0.3.2/24 + ipv6 address 2001:3::2/64 + ! + interface eth0 + ip address 10.0.1.1/24 + ipv6 address 2001:1::1/64 + ! + } + canvas c1 + iconcoords {574.0 429.0} + labelcoords {574.0 457.0} + interface-peer {eth0 n5} + interface-peer {eth1 n3} + interface-peer {eth2 n2} +} + +node n5 { + type router + model host + network-config { + hostname vpnserver + ! + interface eth1 + ipv6 address 2001:6::10/64 + ip address 10.0.6.1/24 + ! + interface eth0 + ip address 10.0.1.10/24 + ipv6 address 2001:1::10/64 + ! + } + canvas c1 + iconcoords {726.0 511.0} + labelcoords {726.0 543.0} + interface-peer {eth0 n4} + interface-peer {eth1 n7} + custom-config { + custom-config-id service:VPNServer:copycerts.sh + custom-command copycerts.sh + config { + #!/bin/sh + + FILES="vpnserver.pem vpnserver.key ca-cert.pem dh1024.pem" + + mkdir -p /tmp/certs + + for f in $FILES; do + cp $f /tmp/certs + done + } + } + custom-config { + custom-config-id service:VPNServer:dh1024.pem + custom-command dh1024.pem + config { + -----BEGIN DH PARAMETERS----- + MIGHAoGBAIYQUzZ+2aYWFfdRWRL/Tc8bFqK8ve/0ihW1BPhe0z3b5D5+2/r9HAsG + u7oMkyM2oWp5N1DlzKgTizCRPRno5vgTz01kw4h6Y9ux496+huOHJGZXiCZlkZvM + daP8CC8z1naCC9MZLImQTkb1d1sH9BDRZAyfQYiXVYrHdqtNtqQjAgEC + -----END DH PARAMETERS----- + + } + } + custom-config { + custom-config-id service:VPNServer:ca-cert.pem + custom-command ca-cert.pem + config { + Certificate: + Data: + Version: 3 (0x2) + Serial Number: + df:69:1f:ef:e5:af:bf:0f + Signature Algorithm: sha1WithRSAEncryption + Issuer: C=US, ST=WA, O=core-dev, CN=CORE CA/emailAddress=root@localhost + Validity + Not Before: Mar 20 16:16:08 2012 GMT + Not After : Mar 20 16:16:08 2015 GMT + Subject: C=US, ST=WA, O=core-dev, CN=CORE CA/emailAddress=root@localhost + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + Public-Key: (1024 bit) + Modulus: + 00:c4:d7:fc:c3:bc:a0:ee:76:7b:58:5c:96:6d:1f: + 74:26:c2:93:c1:a4:94:95:13:5e:4f:8b:3f:00:27: + e5:1b:b1:3b:70:3e:72:71:4d:c9:67:54:33:29:49: + 1e:de:a6:91:d9:00:ec:84:b8:64:f8:06:51:82:f4: + 84:9b:a2:fe:16:34:5c:e1:2f:3d:ad:34:b9:8e:ad: + 8e:ea:8a:e9:40:56:5b:f5:09:2c:bf:a0:08:db:81: + 7f:fb:d8:b9:6c:a6:be:4c:1f:b1:4e:b3:b0:8d:8d: + e4:04:8e:f8:8e:e9:c7:aa:e7:4a:b4:87:89:a7:25: + 72:38:74:bb:e5:b6:7f:86:7b + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Subject Key Identifier: + 98:0E:C7:0A:74:5D:FB:56:5B:B7:91:80:2A:3A:D4:89:AD:6C:B9:51 + X509v3 Authority Key Identifier: + keyid:98:0E:C7:0A:74:5D:FB:56:5B:B7:91:80:2A:3A:D4:89:AD:6C:B9:51 + + X509v3 Basic Constraints: + CA:TRUE + Signature Algorithm: sha1WithRSAEncryption + 39:7e:99:fd:40:44:0a:20:4c:3c:9a:bf:01:aa:94:c8:76:bb: + 80:53:4f:cd:28:2f:5b:7f:0b:52:09:14:cb:ac:ee:74:7f:17: + 4b:79:21:db:e1:a3:9b:e5:b1:72:83:f7:88:02:20:d6:23:33: + e4:ff:50:58:c6:88:e0:22:d7:2b:96:b3:dd:31:1a:80:52:0d: + 61:4f:47:72:63:39:1e:7f:a1:ad:f0:2b:82:53:05:ca:3d:0a: + 8f:3c:72:58:74:57:ae:8b:66:16:d9:a4:50:99:bc:d3:a7:c5: + 54:63:f0:87:cd:06:1a:d4:61:ed:d3:b8:33:5d:5a:d6:a4:f0: + a4:96 + -----BEGIN CERTIFICATE----- + MIICijCCAfOgAwIBAgIJAN9pH+/lr78PMA0GCSqGSIb3DQEBBQUAMF4xCzAJBgNV + BAYTAlVTMQswCQYDVQQIDAJXQTERMA8GA1UECgwIY29yZS1kZXYxEDAOBgNVBAMM + B0NPUkUgQ0ExHTAbBgkqhkiG9w0BCQEWDnJvb3RAbG9jYWxob3N0MB4XDTEyMDMy + MDE2MTYwOFoXDTE1MDMyMDE2MTYwOFowXjELMAkGA1UEBhMCVVMxCzAJBgNVBAgM + AldBMREwDwYDVQQKDAhjb3JlLWRldjEQMA4GA1UEAwwHQ09SRSBDQTEdMBsGCSqG + SIb3DQEJARYOcm9vdEBsb2NhbGhvc3QwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJ + AoGBAMTX/MO8oO52e1hclm0fdCbCk8GklJUTXk+LPwAn5RuxO3A+cnFNyWdUMylJ + Ht6mkdkA7IS4ZPgGUYL0hJui/hY0XOEvPa00uY6tjuqK6UBWW/UJLL+gCNuBf/vY + uWymvkwfsU6zsI2N5ASO+I7px6rnSrSHiaclcjh0u+W2f4Z7AgMBAAGjUDBOMB0G + A1UdDgQWBBSYDscKdF37Vlu3kYAqOtSJrWy5UTAfBgNVHSMEGDAWgBSYDscKdF37 + Vlu3kYAqOtSJrWy5UTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4GBADl+ + mf1ARAogTDyavwGqlMh2u4BTT80oL1t/C1IJFMus7nR/F0t5Idvho5vlsXKD94gC + INYjM+T/UFjGiOAi1yuWs90xGoBSDWFPR3JjOR5/oa3wK4JTBco9Co88clh0V66L + ZhbZpFCZvNOnxVRj8IfNBhrUYe3TuDNdWtak8KSW + -----END CERTIFICATE----- + + } + } + custom-config { + custom-config-id service:VPNServer:vpnserver.pem + custom-command vpnserver.pem + config { + Certificate: + Data: + Version: 3 (0x2) + Serial Number: + df:69:1f:ef:e5:af:bf:14 + Signature Algorithm: sha1WithRSAEncryption + Issuer: C=US, ST=WA, O=core-dev, CN=CORE CA/emailAddress=root@localhost + Validity + Not Before: Apr 12 15:09:45 2012 GMT + Not After : Apr 10 15:09:45 2022 GMT + Subject: C=US, ST=WA, O=core-dev, CN=vpnserver + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + Public-Key: (1024 bit) + Modulus: + 00:af:da:e2:fb:f7:e1:ca:97:bb:94:1b:8f:f7:70: + 2f:c5:dc:71:22:b6:d2:f3:8b:fc:3a:d1:ef:65:60: + 21:0f:e5:49:ed:71:45:1c:e9:f7:b9:f7:00:74:05: + a3:ab:63:05:5c:be:23:fd:18:c6:b7:17:52:21:3a: + 86:5f:68:07:a6:1b:2f:fc:df:ce:ac:45:55:cd:2a: + d4:8a:66:d1:46:99:e4:b2:57:49:53:df:d0:c0:1e: + 0f:84:6f:52:8d:2c:6e:4b:cb:f7:7e:c4:27:51:72: + cd:db:68:54:fd:4d:c4:42:1a:27:be:9f:03:03:d8: + ff:11:58:46:2f:58:13:2c:37 + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + Netscape Comment: + OpenSSL Generated Certificate + X509v3 Subject Key Identifier: + 56:F2:E8:73:73:76:FD:14:13:1C:1A:AB:F2:8F:30:D4:91:7D:83:62 + X509v3 Authority Key Identifier: + keyid:98:0E:C7:0A:74:5D:FB:56:5B:B7:91:80:2A:3A:D4:89:AD:6C:B9:51 + + Signature Algorithm: sha1WithRSAEncryption + 29:62:f5:4a:40:ce:65:e0:73:ff:d1:80:ca:89:a3:29:4e:d8: + 63:52:f0:76:21:b7:83:49:a4:fa:54:f7:0d:58:eb:af:fb:59: + 61:63:02:57:de:4d:c1:8d:f1:de:d6:00:40:53:12:25:3c:9b: + 48:9a:a7:3b:95:5d:67:83:11:b2:b2:ef:c2:71:95:23:e5:42: + 88:09:ac:95:c9:cf:e8:5c:d8:14:9e:d8:4f:6f:af:10:4f:f5: + 19:a2:71:f3:96:5f:1b:19:53:e9:16:4d:4e:be:e5:8a:83:57: + 0a:93:7a:a4:53:05:1a:64:bf:25:69:fc:3c:3b:9b:aa:43:f4: + 1d:fc + -----BEGIN CERTIFICATE----- + MIICmDCCAgGgAwIBAgIJAN9pH+/lr78UMA0GCSqGSIb3DQEBBQUAMF4xCzAJBgNV + BAYTAlVTMQswCQYDVQQIDAJXQTERMA8GA1UECgwIY29yZS1kZXYxEDAOBgNVBAMM + B0NPUkUgQ0ExHTAbBgkqhkiG9w0BCQEWDnJvb3RAbG9jYWxob3N0MB4XDTEyMDQx + MjE1MDk0NVoXDTIyMDQxMDE1MDk0NVowQTELMAkGA1UEBhMCVVMxCzAJBgNVBAgM + AldBMREwDwYDVQQKDAhjb3JlLWRldjESMBAGA1UEAwwJdnBuc2VydmVyMIGfMA0G + CSqGSIb3DQEBAQUAA4GNADCBiQKBgQCv2uL79+HKl7uUG4/3cC/F3HEittLzi/w6 + 0e9lYCEP5UntcUUc6fe59wB0BaOrYwVcviP9GMa3F1IhOoZfaAemGy/8386sRVXN + KtSKZtFGmeSyV0lT39DAHg+Eb1KNLG5Ly/d+xCdRcs3baFT9TcRCGie+nwMD2P8R + WEYvWBMsNwIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQfFh1PcGVu + U1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUVvLoc3N2/RQTHBqr + 8o8w1JF9g2IwHwYDVR0jBBgwFoAUmA7HCnRd+1Zbt5GAKjrUia1suVEwDQYJKoZI + hvcNAQEFBQADgYEAKWL1SkDOZeBz/9GAyomjKU7YY1LwdiG3g0mk+lT3DVjrr/tZ + YWMCV95NwY3x3tYAQFMSJTybSJqnO5VdZ4MRsrLvwnGVI+VCiAmslcnP6FzYFJ7Y + T2+vEE/1GaJx85ZfGxlT6RZNTr7lioNXCpN6pFMFGmS/JWn8PDubqkP0Hfw= + -----END CERTIFICATE----- + + } + } + custom-config { + custom-config-id service:VPNServer:vpnserver.key + custom-command vpnserver.key + config { + -----BEGIN PRIVATE KEY----- + MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBAK/a4vv34cqXu5Qb + j/dwL8XccSK20vOL/DrR72VgIQ/lSe1xRRzp97n3AHQFo6tjBVy+I/0YxrcXUiE6 + hl9oB6YbL/zfzqxFVc0q1Ipm0UaZ5LJXSVPf0MAeD4RvUo0sbkvL937EJ1Fyzdto + VP1NxEIaJ76fAwPY/xFYRi9YEyw3AgMBAAECgYBcUveOP5KsUULqvBm2V5DNOTGw + fvl7Ycf3fZZIy9IvzTolzazyRCeJ25LCVt+ZsC/1g+HTE/nnz/ePeHFpj21LuVWJ + uWsV9qmdO0K5WxfXM4M08df+EVRrOh4rmgnHZp7jBW6srwGSSJxsvRAe0cRlZcCW + JsgJcyLJfZk0ypsSgQJBAOTtkUfJvqdU0CslBSmDY6skxjneS6kLQGvrELHRTZgd + K31E5WDYJgkpVGhWur19kUYIj7Fs3/Z1Q0KC0bRWokECQQDEpp52u4ilaP9nJsMm + 5l/JVEO5gIzbqStVTmU64wLgx3mapL6P8Sa1gbJMlc5NMyayjRP0PoN0cvz+V9t4 + 3cB3AkEAxhLHINXtn9pCQxJE5SZJlkq7OFaeICUcGEPKrg/qkzKp7jkuPhzGzCZ2 + YdCowkti5rWBnoIVRakwCNwnlWFgAQJAEhyWc7EKANIO091KFAcbw1szcZ5ZWtHV + 3+F8iVPnK/SzSn7p3jADtKvhVBRoD8wqQD+mGtS3Hr6IdpR47kTeOQJBAJhd4vi6 + LxbQZlS009DamuSrqgwsmTcfylu58bhFN4YkWCw8CPk3iKJXH6beomDvYEIQl8C5 + jWe+PqSX6XcwnTk= + -----END PRIVATE KEY----- + + } + } + custom-config { + custom-config-id service:VPNServer:vpnserver.sh + custom-command vpnserver.sh + config { + #!/bin/sh + # custom VPN Server Configuration for service (security.py) + # -------- CUSTOMIZATION REQUIRED -------- + # + # The VPNServer service sets up the OpenVPN server for building VPN tunnels + # that allow access via TUN/TAP device to private networks. + # + # note that the IPForward and DefaultRoute services should be enabled + + # directory containing the certificate and key described below, in addition to + # a CA certificate and DH key + keydir=/tmp/certs + + # the name used for a "$keyname.pem" certificate and "$keyname.key" private key. + keyname=vpnserver + + # the VPN subnet address from which the client VPN IP (for the TUN/TAP) + # will be allocated + vpnsubnet=10.0.200.0 + + # public IP address of this vpn server (same as VPNClient vpnserver= setting) + vpnserver=10.0.1.10 + + # optional list of private subnets reachable behind this VPN server + # each subnet and next hop is separated by a space + # ", , ..." + privatenets="10.0.6.0,10.0.1.10" + + # optional list of VPN clients, for statically assigning IP addresses to + # clients; also, an optional client subnet can be specified for adding static + # routes via the client + # Note: VPN addresses x.x.x.0-3 are reserved + # ",, ,, ..." + #vpnclients="client1KeyFilename,10.0.200.5,10.0.0.0 client2KeyFilename,," + vpnclients="" + + # NOTE: you may need to enable the StaticRoutes service on nodes within the + # private subnet, in order to have routes back to the client. + # /sbin/ip ro add /24 via + # /sbin/ip ro add /24 via + + # -------- END CUSTOMIZATION -------- + + echo > $PWD/vpnserver.log + rm -f -r $PWD/ccd + + # validate key and certification files + if [ ! -e $keydir\/$keyname.key ] || [ ! -e $keydir\/$keyname.pem ] \ + || [ ! -e $keydir\/ca-cert.pem ] || [ ! -e $keydir\/dh1024.pem ]; then + echo "ERROR: missing certification or key files under $keydir \ + $keyname.key or $keyname.pem or ca-cert.pem or dh1024.pem" >> $PWD/vpnserver.log + fi + + # validate configuration IP addresses + checkip=0 + if [ "$(dpkg -l | grep " sipcalc ")" = "" ]; then + echo "WARNING: ip validation disabled because package sipcalc not installed\ + " >> $PWD/vpnserver.log + checkip=1 + else + if [ "$(sipcalc "$vpnsubnet" "$vpnserver" | grep ERR)" != "" ]; then + echo "ERROR: invalid vpn subnet or server address \ + $vpnsubnet or $vpnserver " >> $PWD/vpnserver.log + fi + fi + + # create client vpn ip pool file + ( + cat << EOF + EOF + )> $PWD/ippool.txt + + # create server.conf file + ( + cat << EOF + # openvpn server config + local $vpnserver + server $vpnsubnet 255.255.255.0 + push redirect-gateway def1 + EOF + )> $PWD/server.conf + + # add routes to VPN server private subnets, and push these routes to clients + for privatenet in $privatenets; do + if [ $privatenet != "" ]; then + net=${privatenet%%,*} + nexthop=${privatenet##*,} + if [ $checkip = "0" ] && + [ "$(sipcalc "$net" "$nexthop" | grep ERR)" != "" ]; then + echo "ERROR: invalid vpn server private net address \ + $net or $nexthop " >> $PWD/vpnserver.log + fi + echo push route $net 255.255.255.0 >> $PWD/server.conf + /sbin/ip ro add $net/24 via $nexthop + /sbin/ip ro add $vpnsubnet/24 via $nexthop + fi + done + + # allow subnet through this VPN, one route for each client subnet + for client in $vpnclients; do + if [ $client != "" ]; then + cSubnetIP=${client##*,} + cVpnIP=${client#*,} + cVpnIP=${cVpnIP%%,*} + cKeyFilename=${client%%,*} + if [ "$cSubnetIP" != "" ]; then + if [ $checkip = "0" ] && + [ "$(sipcalc "$cSubnetIP" "$cVpnIP" | grep ERR)" != "" ]; then + echo "ERROR: invalid vpn client and subnet address \ + $cSubnetIP or $cVpnIP " >> $PWD/vpnserver.log + fi + echo route $cSubnetIP 255.255.255.0 >> $PWD/server.conf + if ! test -d $PWD/ccd; then + mkdir -p $PWD/ccd + echo client-config-dir $PWD/ccd >> $PWD/server.conf + fi + if test -e $PWD/ccd/$cKeyFilename; then + echo iroute $cSubnetIP 255.255.255.0 >> $PWD/ccd/$cKeyFilename + else + echo iroute $cSubnetIP 255.255.255.0 > $PWD/ccd/$cKeyFilename + fi + fi + if [ "$cVpnIP" != "" ]; then + echo $cKeyFilename,$cVpnIP >> $PWD/ippool.txt + fi + fi + done + + ( + cat << EOF + keepalive 10 120 + ca $keydir/ca-cert.pem + cert $keydir/$keyname.pem + key $keydir/$keyname.key + dh $keydir/dh1024.pem + cipher AES-256-CBC + status /var/log/openvpn-status.log + log /var/log/openvpn-server.log + ifconfig-pool-linear + ifconfig-pool-persist $PWD/ippool.txt + port 1194 + proto udp + dev tun + verb 4 + daemon + EOF + )>> $PWD/server.conf + + # start vpn server + openvpn --config server.conf + + } + } + custom-config { + custom-config-id service:VPNServer + custom-command VPNServer + config { + + ('vpnserver.sh', 'vpnserver.key', 'vpnserver.pem', 'ca-cert.pem', 'dh1024.pem', 'copycerts.sh', ) + 50 + ('sh copycerts.sh', 'sh vpnserver.sh', ) + ('killall openvpn', ) + ('pidof openvpn', ) + + } + } + services {IPForward DefaultRoute SSH VPNServer} +} + +node n6 { + type router + model PC + network-config { + hostname vpnclient + ! + interface eth0 + ip address 10.0.0.20/24 + ipv6 address 2001:0::20/64 + ! + } + canvas c1 + iconcoords {120.0 133.0} + labelcoords {120.0 165.0} + interface-peer {eth0 n1} + custom-config { + custom-config-id service:VPNClient:vpnclient.key + custom-command vpnclient.key + config { + -----BEGIN PRIVATE KEY----- + MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAM49tCuXw4Wjt8iY + 84nU+fdOCw5M9RXXDfwHOxd1ILSP4KDLB7FfqVo9/DZOMlqNHYBeeF0WXLnr+zda + kKQUWpWHJQGQ4qHIJ+xCsBRCVbTPsRngeQMCCQw5ekW7NZKpKj6ANWkIm4dhiuTr + ZshR5Q6idNFG/b/ksNQsARK8vlJlAgMBAAECgYEAoKeKMKcAxJpasGUM2OJRcWaW + 0CX8iG3EU/2h90zjFCQ7m6VsMaxN9KDyVa8mJElmoLd2VTT1OFLtlxnyMA423Hro + 0tlKGErCH2yWMnrcjO30w7pmWSONn0yU/iAbzYAsmLNwYKCPAX2tJ9FZKsfVhctd + MEDMf/skhYL6CFe4XwECQQD1pV7C9lj0vsno22WoVg8n6/7OZu/ZBtCXoAQKAo14 + bUqknK+SDMgqnexDQjarkQFrq4yxrPmp3Mv4a6M9vKglAkEA1u8i+1m4VMAARe9N + 3qiFA0hk9v3Nm7f/ZVrkddoZNChV8CQW9y3Caltrlrjj0ugTAaWKdOhOcWeRcDo9 + EMrNQQJAbXwpgkf+Wgd3QrwW0TKaSrbauPAUUuzAp/QAGN4OY/CCZmAXuMbNqID+ + vvOSHmHg+jZZ3Q81r8njd3OyLGAbqQJAURqn3qT6c7CH6dvlTHHWz2hQAQvAvFPw + IbTspLQJ8q6NzzIvIFK6HBwnOxbFkV5VXbezyW2nvA9SyECRrnZ4gQJAfV2In/xB + qxyrHHInJPtwzsKjfgw9787ulXeDa+gYQrmwfrqYvPo6NtfJ9i2ahl8tr3LIFWIH + NavHWA5NKc4GVw== + -----END PRIVATE KEY----- + + } + } + custom-config { + custom-config-id service:VPNClient:vpnclient.pem + custom-command vpnclient.pem + config { + Certificate: + Data: + Version: 3 (0x2) + Serial Number: + df:69:1f:ef:e5:af:bf:13 + Signature Algorithm: sha1WithRSAEncryption + Issuer: C=US, ST=WA, O=core-dev, CN=CORE CA/emailAddress=root@localhost + Validity + Not Before: Apr 12 15:09:01 2012 GMT + Not After : Apr 10 15:09:01 2022 GMT + Subject: C=US, ST=WA, O=core-dev, CN=vpnclient + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + Public-Key: (1024 bit) + Modulus: + 00:ce:3d:b4:2b:97:c3:85:a3:b7:c8:98:f3:89:d4: + f9:f7:4e:0b:0e:4c:f5:15:d7:0d:fc:07:3b:17:75: + 20:b4:8f:e0:a0:cb:07:b1:5f:a9:5a:3d:fc:36:4e: + 32:5a:8d:1d:80:5e:78:5d:16:5c:b9:eb:fb:37:5a: + 90:a4:14:5a:95:87:25:01:90:e2:a1:c8:27:ec:42: + b0:14:42:55:b4:cf:b1:19:e0:79:03:02:09:0c:39: + 7a:45:bb:35:92:a9:2a:3e:80:35:69:08:9b:87:61: + 8a:e4:eb:66:c8:51:e5:0e:a2:74:d1:46:fd:bf:e4: + b0:d4:2c:01:12:bc:be:52:65 + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + Netscape Comment: + OpenSSL Generated Certificate + X509v3 Subject Key Identifier: + A0:59:F2:02:46:86:A3:2A:BD:C0:33:DA:31:71:1F:78:88:16:43:CE + X509v3 Authority Key Identifier: + keyid:98:0E:C7:0A:74:5D:FB:56:5B:B7:91:80:2A:3A:D4:89:AD:6C:B9:51 + + Signature Algorithm: sha1WithRSAEncryption + 0a:39:71:f3:9f:50:68:f9:de:3e:47:eb:73:6b:4e:d8:6c:ff: + d5:38:0a:a0:8f:52:8f:cb:7e:6f:95:62:b6:04:2f:1d:3f:42: + 32:26:38:c5:89:ea:ef:fc:27:ab:f0:81:39:e2:58:d6:fd:f8: + 3e:f8:db:22:ce:39:dd:13:49:6a:7b:eb:90:8a:cc:bc:7d:87: + c5:d4:25:5f:f5:9a:0a:8f:1e:28:86:50:46:e2:fd:4e:ff:5d: + b8:0e:48:2d:bd:0f:38:b4:85:0f:4e:05:c6:60:cf:5a:d9:d0: + 5c:32:ed:70:3c:72:28:fd:75:c5:38:d5:52:cb:57:f9:4b:86: + 0a:74 + -----BEGIN CERTIFICATE----- + MIICmDCCAgGgAwIBAgIJAN9pH+/lr78TMA0GCSqGSIb3DQEBBQUAMF4xCzAJBgNV + BAYTAlVTMQswCQYDVQQIDAJXQTERMA8GA1UECgwIY29yZS1kZXYxEDAOBgNVBAMM + B0NPUkUgQ0ExHTAbBgkqhkiG9w0BCQEWDnJvb3RAbG9jYWxob3N0MB4XDTEyMDQx + MjE1MDkwMVoXDTIyMDQxMDE1MDkwMVowQTELMAkGA1UEBhMCVVMxCzAJBgNVBAgM + AldBMREwDwYDVQQKDAhjb3JlLWRldjESMBAGA1UEAwwJdnBuY2xpZW50MIGfMA0G + CSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOPbQrl8OFo7fImPOJ1Pn3TgsOTPUV1w38 + BzsXdSC0j+CgywexX6laPfw2TjJajR2AXnhdFly56/s3WpCkFFqVhyUBkOKhyCfs + QrAUQlW0z7EZ4HkDAgkMOXpFuzWSqSo+gDVpCJuHYYrk62bIUeUOonTRRv2/5LDU + LAESvL5SZQIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQfFh1PcGVu + U1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUoFnyAkaGoyq9wDPa + MXEfeIgWQ84wHwYDVR0jBBgwFoAUmA7HCnRd+1Zbt5GAKjrUia1suVEwDQYJKoZI + hvcNAQEFBQADgYEACjlx859QaPnePkfrc2tO2Gz/1TgKoI9Sj8t+b5VitgQvHT9C + MiY4xYnq7/wnq/CBOeJY1v34PvjbIs453RNJanvrkIrMvH2HxdQlX/WaCo8eKIZQ + RuL9Tv9duA5ILb0POLSFD04FxmDPWtnQXDLtcDxyKP11xTjVUstX+UuGCnQ= + -----END CERTIFICATE----- + + } + } + custom-config { + custom-config-id service:VPNClient:copycerts.sh + custom-command copycerts.sh + config { + #!/bin/sh + + FILES="vpnclient.pem vpnclient.key" + + mkdir -p /tmp/certs + + for f in $FILES; do + cp $f /tmp/certs + done + } + } + custom-config { + custom-config-id service:VPNClient:vpnclient.sh + custom-command vpnclient.sh + config { + #!/bin/sh + # custom VPN Client configuration for service (security.py) + # -------- CUSTOMIZATION REQUIRED -------- + # + # The VPNClient service builds a VPN tunnel to the specified VPN server using + # OpenVPN software and a virtual TUN/TAP device. + + # directory containing the certificate and key described below + keydir=/tmp/certs + + # the name used for a "$keyname.pem" certificate and "$keyname.key" private key. + keyname=vpnclient + + # the public IP address of the VPN server this client should connect with + vpnserver="10.0.1.10" + + # optional next hop for adding a static route to reach the VPN server + nexthop="" + + # --------- END CUSTOMIZATION -------- + + # validate addresses + if [ "$(dpkg -l | grep " sipcalc ")" = "" ]; then + echo "WARNING: ip validation disabled because package sipcalc not installed + " > $PWD/vpnclient.log + else + if [ "$(sipcalc "$vpnserver" "$nexthop" | grep ERR)" != "" ]; then + echo "ERROR: invalide address $vpnserver or $nexthop \ + " > $PWD/vpnclient.log + fi + fi + + # validate key and certification files + if [ ! -e $keydir\/$keyname.key ] || [ ! -e $keydir\/$keyname.pem ] \ + || [ ! -e $keydir\/ca-cert.pem ] || [ ! -e $keydir\/dh1024.pem ]; then + echo "ERROR: missing certification or key files under $keydir \ + $keyname.key or $keyname.pem or ca-cert.pem or dh1024.pem" >> $PWD/vpnclient.log + fi + + # if necessary, add a static route for reaching the VPN server IP via the IF + vpnservernet=${vpnserver%.*}.0/24 + if [ "$nexthop" != "" ]; then + /sbin/ip route add $vpnservernet via $nexthop + fi + + # create openvpn client.conf + ( + cat << EOF + client + dev tun + proto udp + remote $vpnserver 1194 + nobind + ca $keydir/ca-cert.pem + cert $keydir/$keyname.pem + key $keydir/$keyname.key + dh $keydir/dh1024.pem + cipher AES-256-CBC + log /var/log/openvpn-client.log + verb 4 + daemon + EOF + ) > client.conf + + openvpn --config client.conf + + } + } + custom-config { + custom-config-id service:VPNClient + custom-command VPNClient + config { + + ('vpnclient.sh', 'copycerts.sh', 'vpnclient.pem', 'vpnclient.key', ) + 60 + ('sh copycerts.sh', 'sh vpnclient.sh', ) + ('killall openvpn', ) + ('pidof openvpn', ) + + } + } + services {DefaultRoute VPNClient} +} + +node n7 { + type lanswitch + network-config { + hostname n7 + ! + } + canvas c1 + iconcoords {824.0 458.0} + labelcoords {824.0 482.0} + interface-peer {e0 n5} + interface-peer {e1 n8} + interface-peer {e2 n9} + interface-peer {e3 n10} +} + +node n8 { + type router + model PC + network-config { + hostname n8 + ! + interface eth0 + ip address 10.0.6.20/24 + ipv6 address 2001:6::20/64 + ! + } + canvas c1 + iconcoords {801.0 264.0} + labelcoords {801.0 296.0} + interface-peer {eth0 n7} +} + +node n9 { + type router + model PC + network-config { + hostname n9 + ! + interface eth0 + ip address 10.0.6.21/24 + ipv6 address 2001:6::21/64 + ! + } + canvas c1 + iconcoords {885.0 305.0} + labelcoords {885.0 337.0} + interface-peer {eth0 n7} +} + +node n10 { + type router + model PC + network-config { + hostname n10 + ! + interface eth0 + ip address 10.0.6.22/24 + ipv6 address 2001:6::22/64 + ! + } + canvas c1 + iconcoords {954.0 353.0} + labelcoords {954.0 385.0} + interface-peer {eth0 n7} +} + +link l1 { + nodes {n6 n1} + bandwidth 0 +} + +link l2 { + nodes {n4 n5} + bandwidth 0 +} + +link l3 { + nodes {n1 n2} + bandwidth 0 +} + +link l4 { + nodes {n3 n4} + bandwidth 0 +} + +link l5 { + nodes {n3 n1} + bandwidth 0 +} + +link l6 { + nodes {n4 n2} + bandwidth 0 +} + +link l7 { + nodes {n5 n7} + bandwidth 0 +} + +link l8 { + nodes {n8 n7} + bandwidth 0 +} + +link l9 { + nodes {n9 n7} + bandwidth 0 +} + +link l10 { + nodes {n10 n7} + bandwidth 0 +} + +annotation a1 { + iconcoords {661.0 187.0 997.0 579.0} + type rectangle + label {private network} + labelcolor black + fontfamily {Arial} + fontsize 12 + color #e9e9fe + width 0 + border black + rad 25 + effects {bold} + canvas c1 +} + +canvas c1 { + name {Canvas1} +} + +option global { + interface_names no + ip_addresses yes + ipv6_addresses no + node_labels yes + link_labels yes + ipsec_configs yes + exec_errors yes + show_api no + background_images no + annotations yes + grid yes + traffic_start 0 +} + diff --git a/gui/core-bsd-cleanup.sh b/gui/core-bsd-cleanup.sh new file mode 100755 index 00000000..a73c6daa --- /dev/null +++ b/gui/core-bsd-cleanup.sh @@ -0,0 +1,60 @@ +#!/bin/sh +# +# cleanup.sh +# +# Copyright 2005-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# Removes leftover netgraph nodes and vimages from an emulation that +# did not exit properly. +# + +ngnodes="pipe eiface hub switch wlan" +vimages=`vimage -l | fgrep -v " " | cut -d: -f 1 | sed s/\"//g` + +# shutdown netgraph nodes +for ngn in $ngnodes +do + nodes=`ngctl list | grep $ngn | awk '{print $2}'` + for n in $nodes + do + echo ngctl shutdown $n: + ngctl shutdown $n: + done +done + +# kills processes and remove vimages +for vimage in $vimages +do + procs=`vimage $vimage ps x | awk '{print $1}'` + for proc in $procs + do + if [ $proc != "PID" ] + then + echo vimage $vimage kill $proc + vimage $vimage kill $proc + fi + done + loopback=`vimage $vimage ifconfig -a | head -n 1 | awk '{split($1,a,":"); print a[1]}'` + if [ "$loopback" != "" ] + then + addrs=`ifconfig $loopback | grep inet | awk '{print $2}'` + for addr in $addrs + do + echo vimage $vimage ifconfig $loopback $addr -alias + vimage $vimage ifconfig $loopback $addr -alias + if [ $? != 0 ] + then + vimage $vimage ifconfig $loopback inet6 $addr -alias + fi + done + echo vimage $vimage ifconfig $loopback down + vimage $vimage ifconfig $loopback down + fi + vimage $vimage kill -9 -1 2> /dev/null + echo vimage -d $vimage + vimage -d $vimage +done + +# clean up temporary area +rm -rf /tmp/pycore.* diff --git a/gui/core-gui.in b/gui/core-gui.in new file mode 100755 index 00000000..2aeed1b2 --- /dev/null +++ b/gui/core-gui.in @@ -0,0 +1,164 @@ +#!/bin/sh +# +# Copyright 2005-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# + +# +# Copyright 2004-2008 University of Zagreb, Croatia. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions +# are met: +# 1. Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# 2. Redistributions in binary form must reproduce the above copyright +# notice, this list of conditions and the following disclaimer in the +# documentation and/or other materials provided with the distribution. +# +# THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND +# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +# ARE DISCLAIMED. IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE +# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS +# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) +# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY +# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF +# SUCH DAMAGE. +# +# This work was supported in part by Croatian Ministry of Science +# and Technology through the research contract #IP-2003-143. +# +case $1 in +-h | --help) + echo "" + echo "Usage: `basename $0` [-h|-v] [-b|-c ] [-s] []" + echo "" + echo "Launches the CORE Tcl/Tk X11 GUI or starts an imn-based emulation." + echo "" + echo " -(-h)elp show help message and exit" + echo " -(-v)ersion show version number and exit" + echo " -(-b)atch batch mode (no X11 GUI)" + echo -n " -(-c)losebatch stop and clean up a batch mode " + echo "session " + echo " -(-s)tart start in execute mode, not edit mode" + echo " (optional) load the specified imn scenario file" + echo "" + echo "With no parameters, starts the GUI in edit mode with a blank canvas." + echo "" + exit 0 + ;; +-v | --version) + exec echo "`basename $0` version @CORE_VERSION@ (@CORE_VERSION_DATE@)" + exit 0 + ;; +esac + +SHELL=/bin/sh +export SHELL + +export LIBDIR="@CORE_LIB_DIR@" +export SBINDIR="@SBINDIR@" +# eval is used here to expand "~" to user's home dir +if [ x$CONFDIR = x ]; then export CONFDIR=`eval "echo @CORE_GUI_CONF_DIR@"` ; fi +export CORE_STATE_DIR="@CORE_STATE_DIR@" +export CORE_DATA_DIR="@CORE_DATA_DIR@" +export CORE_USER=`id -u -n` +export CORE_START_DIR=$PWD + +init_conf_dir() { + echo "Setting up user config area $CONFDIR, $CONFDIR/configs, and " + echo " $CONFDIR/myservices" + mkdir -p $CONFDIR + if [ $? != 0 ]; then echo "error making directory $CONFDIR!"; fi + mkdir -p $CONFDIR/configs + if [ $? != 0 ]; then + echo "error making directory $CONFDIR/configs!"; + else + cp -a $CORE_DATA_DIR/examples/configs/* $CONFDIR/configs/ + fi + mkdir -p $CONFDIR/myservices + if [ $? != 0 ]; then + echo "error making directory $CONFDIR/myservices!"; + else + cp -a $CORE_DATA_DIR/examples/myservices/* $CONFDIR/myservices/ + fi +} + +cd $LIBDIR + +core=$LIBDIR/core.tcl + +# locate wish8.5 binaries +WISHLIST="/usr/local/bin/wish8.5 /usr/bin/wish8.5" +for wishbin in $WISHLIST +do + if [ -x $wishbin ] + then + WISH=$wishbin; + break; + fi; +done; + +if [ a$WISH = a ] +then + echo "CORE could not locate the Tcl/Tk binary (wish8.5)." + exit 1; +fi; + +# create /home/user/.core directory if necessary +if [ ! -e $CONFDIR ] +then + init_conf_dir +fi; + +# check for and fix write permissions on /home/user/.core directory +while [ ! -w $CONFDIR ]; +do + echo " CORE requires write permissions to the '$CONFDIR'" + echo " configuration directory for the user '$CORE_USER'," + echo " would you like to fix this now [Y/n]?" + read yn + if [ "z$yn" = "zn" ]; then + break + fi + echo -n " (sudo may prompt you for a password; if you do not have sudo set" + echo " up for the" + echo " user '$CORE_USER', su to root and run this command:" + echo " chown -R $CORE_USER $CONFDIR )" + sudo chown -R $U $CONFDIR + sudo chmod -R u+w $CONFDIR +done + +# GUI config directory should not be a file (old prefs) +if [ ! -d $CONFDIR ] +then + + mv $CONFDIR $CONFDIR.tmp + if [ $? != 0 ]; then echo "error moving $CONFDIR!"; exit 1; fi + init_conf_dir + echo "Old preferences file $CONFDIR has been moved to $CONFDIR/prefs.conf" + mv $CONFDIR.tmp $CONFDIR/prefs.conf + if [ $? != 0 ]; then echo "error moving $CONFDIR.tmp to $CONFDIR/prefs.conf!"; exit 1; fi +fi; + +case $1 in +-b | --batch) + TCLBIN=`echo ${WISH} | sed s/wish/tclsh/g` + exec ${TCLBIN} $core "$@" + ;; +-c | --closebatch) + TCLBIN=`echo ${WISH} | sed s/wish/tclsh/g` + exec ${TCLBIN} $core "$@" + ;; +-s) + exec ${WISH} $core "--start $@" + ;; +*) + exec ${WISH} $core $@ + ;; +esac + +cd $CORE_START_DIR diff --git a/gui/core.tcl b/gui/core.tcl new file mode 100755 index 00000000..d5110a78 --- /dev/null +++ b/gui/core.tcl @@ -0,0 +1,280 @@ +# +# Copyright 2005-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# + +# +# Copyright 2004-2008 University of Zagreb, Croatia. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions +# are met: +# 1. Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# 2. Redistributions in binary form must reproduce the above copyright +# notice, this list of conditions and the following disclaimer in the +# documentation and/or other materials provided with the distribution. +# +# THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND +# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +# ARE DISCLAIMED. IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE +# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS +# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) +# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY +# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF +# SUCH DAMAGE. +# +# This work was supported in part by Croatian Ministry of Science +# and Technology through the research contract #IP-2003-143. +# + +#****h* imunes/imunes.tcl +# NAME +# imunes.tcl +# FUNCTION +# Starts imunes in batch or interactive mode. Include procedures from +# external files and initializes global variables. +# +# imunes [-b|--batch] [filename] +# +# When starting the program in batch mode the option -b or --batch must +# be specified. +# +# When starting the program with defined filename, configuration for +# file "filename" is loaded to imunes. +#**** + +if {[lindex $argv 0] == "-b" || [lindex $argv 0] == "--batch"} { + set argv [lrange $argv 1 end] + set execMode batch +} elseif {[lindex $argv 0] == "-c" || [lindex $argv 0] == "--closebatch"} { + set argv [lrange $argv 1 end] + set execMode closebatch +} elseif {[lindex $argv 0] == "-a" || [lindex $argv 0] == "--addons"} { + set argv [lrange $argv 1 end] + set execMode addons +} else { + set execMode interactive +} + +# +# Include procedure definitions from external files. There must be +# some better way to accomplish the same goal, but that's how we do it +# for the moment. +# + +#****v* imunes.tcl/LIBDIR +# NAME +# LIBDIR +# FUNCTION +# The location of imunes library files. The LIBDIR variable +# will be automatically set to the proper value by the installation script. +#***** + +set LIBDIR "" +set SBINDIR "/usr/local/sbin" +set CONFDIR "." +set CORE_DATA_DIR "." +set CORE_STATE_DIR "." +set CORE_START_DIR "" +set CORE_USER "" +if { [info exists env(LIBDIR)] } { + set LIBDIR $env(LIBDIR) +} +if { [info exists env(SBINDIR)] } { + set SBINDIR $env(SBINDIR) +} +if { [info exists env(CONFDIR)] } { + set CONFDIR $env(CONFDIR) +} +if { [info exists env(CORE_DATA_DIR)] } { + set CORE_DATA_DIR $env(CORE_DATA_DIR) +} +if { [info exists env(CORE_STATE_DIR)] } { + set CORE_STATE_DIR $env(CORE_STATE_DIR) +} +if { [info exists env(CORE_START_DIR)] } { + set CORE_START_DIR $env(CORE_START_DIR) +} +if { [info exists env(CORE_USER)] } { + set CORE_USER $env(CORE_USER) +} + +source "$LIBDIR/version.tcl" + +source "$LIBDIR/linkcfg.tcl" +source "$LIBDIR/nodecfg.tcl" +source "$LIBDIR/ipv4.tcl" +source "$LIBDIR/ipv6.tcl" +source "$LIBDIR/cfgparse.tcl" +source "$LIBDIR/exec.tcl" +source "$LIBDIR/canvas.tcl" + +source "$LIBDIR/editor.tcl" +source "$LIBDIR/annotations.tcl" + +source "$LIBDIR/help.tcl" +source "$LIBDIR/filemgmt.tcl" + +source "$LIBDIR/ns2imunes.tcl" + + +source "$LIBDIR/mobility.tcl" +source "$LIBDIR/api.tcl" +source "$LIBDIR/wlan.tcl" +source "$LIBDIR/wlanscript.tcl" +source "$LIBDIR/util.tcl" +source "$LIBDIR/plugins.tcl" +source "$LIBDIR/nodes.tcl" +source "$LIBDIR/services.tcl" +source "$LIBDIR/traffic.tcl" +source "$LIBDIR/exceptions.tcl" + +# +# Global variables are initialized here +# + +#****v* imunes.tcl/node_list +# NAME +# node_list +# FUNCTION +# Represents the list of all the nodes in the simulation. When starting +# the program this list is empty. +#***** + +#****v* imunes.tcl/link_list +# NAME +# link_list +# FUNCTION +# Represents the list of all the links in the simulation. When starting +# the program this list is empty. +#***** + +#****v* imunes.tcl/canvas_list +# NAME +# canvas_list +# FUNCTION +# Contains the list of all the canvases in the simulation. When starting +# the program this list is empty. +#***** + +#****v* imunes.tcl/prefs +# NAME +# prefs +# FUNCTION +# Contains the list of preferences. When starting a program +# this list is empty. +#***** + +#****v* imunes.tcl/eid +# NAME +# eid -- experiment id. +# FUNCTION +# The id of the current experiment. When starting a program this variable +# is set to e0. +#***** + +set node_list {} +set link_list {} +set annotation_list {} +set canvas_list {} +set eid e0 +set plot_list {} + +#****v* core.tcl/exec_servers +# NAME +# exec_servers -- array of CORE remote execution servers +# FUNCTION +#***** + +# IP port monitor_port active ssh username +array set exec_servers {} +loadServersConf ;# populate exec_servers + +# global vars +set showAPI 0 +set mac_byte4 0 +set mac_byte5 0 +set g_mrulist {} +initDefaultPrefs +loadDotFile +loadPluginsConf +autoConnectPlugins + + +# +# Initialization should be complete now, so let's start doing something... +# + +if {$execMode == "interactive"} { + # GUI-related files + source "$LIBDIR/widget.tcl" + source "$LIBDIR/tooltips.tcl" + source "$LIBDIR/initgui.tcl" + source "$LIBDIR/topogen.tcl" + source "$LIBDIR/graph_partitioning.tcl" + source "$LIBDIR/gpgui.tcl" + source "$LIBDIR/debug.tcl" + # Load all Tcl files from the addons directory + foreach file [glob -nocomplain -directory "$LIBDIR/addons" *.tcl] { + if { [catch { if { [file isfile $file ] } { source "$file"; } } e] } { + puts "*** Error loading addon file: $file" + puts " $e" + } + } + # end Boeing + setOperMode edit + fileOpenStartUp + # Boeing --start option + foreach arg $argv { + if { $arg == "--start -s" || $arg == "--start" } { + global currentFile + if { [file extension $currentFile] == ".xml" } { + after 100; update; # yield to other events so XML file + after 100; update; # can be loaded and received + } + startStopButton "exec"; break; + } + } +# Boeing changed elseif to catch batch and else to output error +} elseif {$execMode == "batch"} { + puts "batch execute $argv" + set sock [lindex [getEmulPlugin "*"] 2] + if { $sock == "" || $sock == "-1" || $sock == -1 } { exit.real; } + if {$argv != ""} { + global currentFile + set currentFile [argAbsPathname $argv] + set fileId [open $currentFile r] + set cfg "" + foreach entry [read $fileId] { + lappend cfg $entry + } + close $fileId + after 100 { + loadCfg $cfg + deployCfgAPI $sock + puts "waiting to enter RUNTIME state..." + } + global vwaitdummy + vwait vwaitdummy + } +} elseif {$execMode == "closebatch"} { + global g_session_choice + set g_session_choice $argv + puts "Attempting to close session $argv ..." + global vwaitdummy + vwait vwaitdummy +} elseif {$execMode == "addons"} { + # pass control to included addons code + foreach file [glob -nocomplain -directory "$LIBDIR/addons" *.tcl] { + if { [file isfile $file ] } { source "$file"; } + } + global vwaitdummy + vwait vwaitdummy +} else { + puts "ERROR: execMode is not set in core.tcl" +} + diff --git a/gui/debug.tcl b/gui/debug.tcl new file mode 100644 index 00000000..c1bd0ef1 --- /dev/null +++ b/gui/debug.tcl @@ -0,0 +1,54 @@ +# +# CORE Debugger +# Copyright 2005-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# +# author: Jeff Ahrenholz +# + +.menubar.tools add command -label "Debugger..." -command popupDebugger + +set g_last_debug_cmd "puts \"Hello world\"" + +proc popupDebugger {} { + global g_last_debug_cmd + + set wi .debugger + catch { destroy $wi } + toplevel $wi + + wm transient $wi . + wm resizable $wi 300 200 + wm title $wi "CORE Debugger" + + frame $wi.dbg -borderwidth 4 + label $wi.dbg.label1 \ + -text "Enter TCL/Tk commands below, press Run to evaluate:" + text $wi.dbg.cmd -bg white -width 100 -height 3 + + pack $wi.dbg.label1 $wi.dbg.cmd -side top -anchor w -padx 4 -pady 4 + pack $wi.dbg -side top + + $wi.dbg.cmd insert end "$g_last_debug_cmd" + + frame $wi.btn + # evaluate debugging commands entered into the text box below + button $wi.btn.exec -text "Run" -command { + global g_last_debug_cmd + set wi .debugger + set i 1 + set g_last_debug_cmd "" + while { 1 } { + set cmd [$wi.dbg.cmd get $i.0 $i.end] + set g_last_debug_cmd "$g_last_debug_cmd$cmd\n" + if { $cmd == "" } { break } + catch { eval $cmd } output + puts $output + incr i + } + } + button $wi.btn.close -text "Close" -command "destroy .debugger" + + pack $wi.btn.exec $wi.btn.close -side left -padx 4 -pady 4 + pack $wi.btn -side bottom +} diff --git a/gui/editor.tcl b/gui/editor.tcl new file mode 100755 index 00000000..9bf28880 --- /dev/null +++ b/gui/editor.tcl @@ -0,0 +1,5149 @@ +# +# Copyright 2005-2013 the Boeing Company. +# See the LICENSE file included in this distribution. +# + +# +# Copyright 2004-2008 University of Zagreb, Croatia. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions +# are met: +# 1. Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# 2. Redistributions in binary form must reproduce the above copyright +# notice, this list of conditions and the following disclaimer in the +# documentation and/or other materials provided with the distribution. +# +# THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND +# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +# ARE DISCLAIMED. IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE +# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS +# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) +# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY +# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF +# SUCH DAMAGE. +# +# This work was supported in part by the Croatian Ministry of Science +# and Technology through the research contract #IP-2003-143. +# + +#****h* imunes/editor.tcl +# NAME +# editor.tcl -- file used for defining functions that can be used in +# edit mode as well as all the functions which change the appearance +# of the imunes GUI. +# FUNCTION +# This module is used for defining all possible actions in imunes +# edit mode. It is also used for all the GUI related actions. +#**** + + +proc animateCursor {} { + global cursorState + global clock_seconds + + if { [clock seconds] == $clock_seconds } { + update + return + } + set clock_seconds [clock seconds] + if { $cursorState } { + .c config -cursor watch + set cursorState 0 + } else { + .c config -cursor pirate + set cursorState 1 + } + update +} + +#****f* editor.tcl/removeGUILink +# NAME +# removeGUILink -- remove link from GUI +# SYNOPSIS +# renoveGUILink $link_id $atomic +# FUNCTION +# Removes link from GUI. It removes standard links as well as +# split links and links connecting nodes on different canvases. +# INPUTS +# * link_id -- the link id +# * atomic -- defines if the remove was atomic action or a part +# of a composed, non-atomic action (relevant for updating log +# for undo). +#**** + +proc removeGUILink { link atomic } { + global changed + + set nodes [linkPeers $link] + set node1 [lindex $nodes 0] + set node2 [lindex $nodes 1] + if { [nodeType $node1] == "pseudo" } { + removeLink [getLinkMirror $link] + removeLink $link + removeNode [getNodeMirror $node1] + removeNode $node1 + .c delete $node1 + } elseif { [nodeType $node2] == "pseudo" } { + removeLink [getLinkMirror $link] + removeLink $link + removeNode [getNodeMirror $node2] + removeNode $node2 + .c delete $node2 + } else { + removeLink $link + } + .c delete $link + if { $atomic == "atomic" } { + set changed 1 + updateUndoLog + } +} + +#****f* editor.tcl/removeGUINode +# NAME +# removeGUINode -- remove node from GUI +# SYNOPSIS +# renoveGUINode $node_id +# FUNCTION +# Removes node from GUI. When removing a node from GUI the links +# connected to that node are also removed. +# INPUTS +# * node_id -- node id +#**** + +proc removeGUINode { node } { + set type [nodeType $node] + foreach ifc [ifcList $node] { + set peer [peerByIfc $node $ifc] + set link [lindex [.c gettags "link && $node && $peer"] 1] + removeGUILink $link non-atomic + } + if { [lsearch -exact "oval rectangle label text marker" $type] != -1 } { + deleteAnnotation .c $type $node + } elseif { $type != "pseudo" } { + removeNode $node + .c delete $node + } +} + +#****f* editor.tcl/updateUndoLog +# NAME +# updateUndoLog -- update the undo log +# SYNOPSIS +# updateUndoLog +# FUNCTION +# Updates the undo log. Writes the current configuration to the +# undolog array and updates the undolevel variable. +#**** + +proc updateUndoLog {} { + global changed undolog undolevel redolevel + + if { $changed } { + global t_undolog undolog + set t_undolog "" + dumpCfg string t_undolog + incr undolevel + set undolog($undolevel) $t_undolog + set redolevel $undolevel + updateUndoRedoMenu "" +# Boeing: XXX why is this set here? + set changed 0 + } +} + +#****f* editor.tcl/undo +# NAME +# undo -- undo function +# SYNOPSIS +# undo +# FUNCTION +# Undo the change. Reads the undolog and updates the current +# configuration. Reduces the value of undolevel. +#**** + +proc undo {} { + global undolevel undolog oper_mode + + if {$oper_mode == "edit" && $undolevel > 0} { + incr undolevel -1 + updateUndoRedoMenu "" + .c config -cursor watch + loadCfg $undolog($undolevel) + switchCanvas none + } +} + +#****f* editor.tcl/redo +# NAME +# redo +# SYNOPSIS +# redo +# FUNCTION +# Redo the change if possible (redolevel is greater than +# undolevel). Reads the configuration from undolog and +# updates the current configuration. Increases the value +# of undolevel. +#**** + +proc redo {} { + global undolevel redolevel undolog oper_mode + + if {$oper_mode == "edit" && $redolevel > $undolevel} { + incr undolevel + updateUndoRedoMenu "" + .c config -cursor watch + loadCfg $undolog($undolevel) + switchCanvas none + } +} + +proc updateUndoRedoMenu { forced } { + global undolevel redolevel + + if { $forced == "" } { + if { $undolevel > 0 } { set undo "normal" } else { set undo "disabled" } + if { $redolevel > $undolevel } { set redo "normal" + } else { set redo "disabled" } + } else { + set undo $forced + set redo $forced + } + + .menubar.edit entryconfigure "Undo" -state $undo + .menubar.edit entryconfigure "Redo" -state $redo +} + +#****f* editor.tcl/redrawAll +# NAME +# redrawAll +# SYNOPSIS +# redrawAll +# FUNCTION +# Redraws all the objects on the current canvas. +#**** + + +proc redrawAll {} { + global node_list plot_list link_list annotation_list plot_list background sizex sizey grid + global curcanvas zoom + global showAnnotations showGrid + + #Call_Trace ;# debugging when things disappear + + .bottom.zoom config -text "zoom [expr {int($zoom * 100)}]%" + set e_sizex [expr {int($sizex * $zoom)}] + set e_sizey [expr {int($sizey * $zoom)}] + set border 28 + .c configure -scrollregion \ + "-$border -$border [expr {$e_sizex + $border}] \ + [expr {$e_sizey + $border}]" + + + saveRestoreWlanLinks .c save + .c delete all + set background [.c create rectangle 0 0 $e_sizex $e_sizey \ + -fill white -tags "background"] + # Boeing: wallpaper + set wallpaper [lindex [getCanvasWallpaper $curcanvas] 0] + set wallpaperStyle [lindex [getCanvasWallpaper $curcanvas] 1] + if { $wallpaper != "" } { + drawWallpaper .c $wallpaper $wallpaperStyle + } + # end Boeing + + if { $showAnnotations == 1 } { + foreach obj $annotation_list { + # fix annotations having no canvas (from old config) + if { [getNodeCanvas $obj] == "" } { setNodeCanvas $obj $curcanvas} + if { [getNodeCanvas $obj] == $curcanvas } { + drawAnnotation $obj + } + } + } + + # Grid + set e_grid [expr {int($grid * $zoom)}] + set e_grid2 [expr {$e_grid * 2}] + if { $showGrid } { + for { set x $e_grid } { $x < $e_sizex } { incr x $e_grid } { + if { [expr {$x % $e_grid2}] != 0 } { + if { $zoom > 0.5 } { + .c create line $x 1 $x $e_sizey \ + -fill gray -dash {1 7} -tags "grid" + } + } else { + .c create line $x 1 $x $e_sizey -fill gray -dash {1 3} \ + -tags "grid" + } + } + for { set y $e_grid } { $y < $e_sizey } { incr y $e_grid } { + if { [expr {$y % $e_grid2}] != 0 } { + if { $zoom > 0.5 } { + .c create line 1 $y $e_sizex $y \ + -fill gray -dash {1 7} -tags "grid" + } + } else { + .c create line 1 $y $e_sizex $y -fill gray -dash {1 3} \ + -tags "grid" + } + } + } + + .c lower -withtags background + + foreach node $node_list { + if { [getNodeCanvas $node] == $curcanvas } { + drawNode .c $node + } + } + + redrawAllThruplots + foreach link $link_list { + set nodes [linkPeers $link] + if { [getNodeCanvas [lindex $nodes 0]] != $curcanvas || + [getNodeCanvas [lindex $nodes 1]] != $curcanvas } { + continue + } + drawLink $link + redrawLink $link + updateLinkLabel $link + } + saveRestoreWlanLinks .c restore + + .c config -cursor left_ptr + + raiseAll .c +} + +#****f* editor.tcl/drawNode +# NAME +# drawNode +# SYNOPSIS +# drawNode node_id +# FUNCTION +# Draws the specified node. Draws node's image (router pc +# host lanswitch rj45 hub pseudo) and label. +# The visibility of the label depends on the showNodeLabels +# variable for all types of nodes and on invisible variable +# for pseudo nodes. +# INPUTS +# * node_id -- node id +#**** + +proc drawNode { c node } { + global showNodeLabels + global router pc host lanswitch rj45 hub pseudo + global curcanvas zoom + global wlan + if { $c == "" } { set c .c } ;# default canvas + + set type [nodeType $node] + set coords [getNodeCoords $node] + set x [expr {[lindex $coords 0] * $zoom}] + set y [expr {[lindex $coords 1] * $zoom}] + # special handling for custom images, dummy nodes + # could move this to separate getImage function + set model "" + set cimg "" + set imgzoom $zoom + if { $zoom == 0.75 || $zoom == 1.5 } { set imgzoom 1.0 } + if { $type == "router" } { + set model [getNodeModel $node] + set cimg [getNodeTypeImage $model normal] + } + set tmp [absPathname [getCustomImage $node]] + if { $tmp != "" } { set cimg $tmp } + if { $cimg != "" } { + # name of global variable storing the image is the filename without path + set img [file tail $cimg] + # create the variable if the image hasn't been loaded before + global [set img] + if { ![info exists $img] } { + if { [catch { + set [set img] [image create photo -file $cimg] + createScaledImages $img + } e ] } { ;# problem loading image file + puts "icon error: $e" + set cimg "" ;# fall back to default model icon + setCustomImage $node "" ;# prevent errors elsewhere + } + } + if { $cimg != "" } { ;# only if image file loaded + global $img$imgzoom + $c create image $x $y -image [set $img$imgzoom] -tags "node $node" + } + } + if { $cimg == "" } { + if { $type == "pseudo" } { + $c create image $x $y -image [set $type] -tags "node $node" + } else { + # create scaled images based on zoom level + global $type$imgzoom + $c create image $x $y -image [set $type$imgzoom] \ + -tags "node $node" + } + } + set coords [getNodeLabelCoords $node] + set x [expr {[lindex $coords 0] * $zoom}] + set y [expr {[lindex $coords 1] * $zoom}] + if { [nodeType $node] != "pseudo" } { ;# Boeing: show remote server + set loc [getNodeLocation $node] + set labelstr0 "" + if { $loc != "" } { set labelstr0 "([getNodeLocation $node]):" } + set labelstr1 [getNodeName $node]; + set labelstr2 "" + if [info exists getNodePartition] { [getNodePartition $node]; } + set l [format "%s%s\n%s" $labelstr0 $labelstr1 $labelstr2]; + set label [$c create text $x $y -fill blue \ + -text "$l" \ + -tags "nodelabel $node"] + } else { + set pnode [getNodeName $node] + set pcanvas [getNodeCanvas $pnode] + set ifc [ifcByPeer $pnode [getNodeMirror $node]] + if { $pcanvas != $curcanvas } { + set label [$c create text $x $y -fill blue \ + -text "[getNodeName $pnode]:$ifc @[getCanvasName $pcanvas]" \ + -tags "nodelabel $node" -justify center] + } else { + set label [$c create text $x $y -fill blue \ + -text "[getNodeName $pnode]:$ifc" \ + -tags "nodelabel $node" -justify center] + } + } + if { $showNodeLabels == 0} { + $c itemconfigure $label -state hidden + } + global invisible + if { $invisible == 1 && [nodeType $node] == "pseudo" } { + $c itemconfigure $label -state hidden + } +} + +#****f* editor.tcl/drawLink +# NAME +# drawLink +# SYNOPSIS +# drawLink link_id +# FUNCTION +# Draws the specified link. An arrow is displayed for links +# connected to pseudo nodes. If the variable invisible +# is specified link connecting a pseudo node stays hidden. +# INPUTS +# * link_id -- link id +#**** + +proc drawLink { link } { + set nodes [linkPeers $link] + set lnode1 [lindex $nodes 0] + set lnode2 [lindex $nodes 1] + set lwidth [getLinkWidth $link] + if { [getLinkMirror $link] != "" } { + set newlink [.c create line 0 0 0 0 \ + -fill [getLinkColor $link] -width $lwidth \ + -tags "link $link $lnode1 $lnode2" -arrow both] + } else { + set newlink [.c create line 0 0 0 0 \ + -fill [getLinkColor $link] -width $lwidth \ + -tags "link $link $lnode1 $lnode2"] + } + # Boeing: links between two nodes on different servers + if { [getNodeLocation $lnode1] != [getNodeLocation $lnode2]} { + .c itemconfigure $newlink -dash ","; + } + # end Boeing + # XXX Invisible pseudo-liks + global invisible + if { $invisible == 1 && [getLinkMirror $link] != "" } { + .c itemconfigure $link -state hidden + } + # Boeing: wlan links are hidden + if { [nodeType $lnode1] == "wlan" || [nodeType $lnode2] == "wlan" } { + global zoom + set imgzoom $zoom + if { $zoom == 0.75 || $zoom == 1.5 } { set imgzoom 1.0 } + global antenna$imgzoom + .c itemconfigure $link -state hidden + .c create image 0 0 -image [set antenna$imgzoom] \ + -tags "antenna $lnode2 $link" + .c create text 0 0 -tags "interface $lnode1 $link" -justify center + .c create text 0 0 -tags "interface $lnode2 $link" -justify center + .c raise interface "link || linklabel || background" + } else { + .c raise $newlink background + .c create text 0 0 -tags "linklabel $link" -justify center + .c create text 0 0 -tags "interface $lnode1 $link" -justify center + .c create text 0 0 -tags "interface $lnode2 $link" -justify center + .c raise linklabel "link || background" + .c raise interface "link || linklabel || background" + } + foreach n [list $lnode1 $lnode2] { + if { [getNodeHidden $n] } { + hideNode $n + statline "Hidden node(s) exist." + } + } +} + + +# draw a green link between wireless nodes (or other color if multiple WLANs) +# WLAN links appear on the canvas but not in the global link_list +proc drawWlanLink { node1 node2 wlan } { + global zoom defLinkWidth + set c .c + + set wlanlink [$c find withtag "wlanlink && $node1 && $node2 && $wlan"] + if { $wlanlink != "" } { + return $wlanlink ;# already exists + } + + set color [getWlanColor $wlan] + + set xy [getNodeCoords $node1] + set x [lindex $xy 0]; set y [lindex $xy 1] + set pxy [getNodeCoords $node2] + set px [lindex $pxy 0]; set py [lindex $pxy 1] + + set wlanlink [$c create line [expr {$x*$zoom}] [expr {$y*$zoom}] \ + [expr {$px*$zoom}] [expr {$py*$zoom}] \ + -fill $color -width $defLinkWidth \ + -tags "wlanlink $node1 $node2 $wlan"] + $c raise $wlanlink "background || grid || oval || rectangle" + return $wlanlink +} + + +#****f* editor.tcl/chooseIfName +# NAME +# chooseIfName -- choose interface name +# SYNOPSIS +# set ifcName [chooseIfName $lnode1 $lnode2] +# FUNCTION +# Choose intreface name. The name can be: +# * eth -- for interface connecting pc, host and router +# * e -- for interface connecting hub and lanswitch +# INPUTS +# * link_id -- link id +# RESULT +# * ifcName -- the name of the interface +#**** + +proc chooseIfName { lnode1 lnode2 } { + global $lnode1 $lnode2 + + # TODO: just check if layer == NETWORK and return eth, LINK return e + switch -exact -- [nodeType $lnode1] { + pc { + return eth + } + host { + return eth + } + hub { + return e + } + lanswitch { + return e + } + router { + return eth + } + rj45 { + return + } + tunnel { + return e + } + ktunnel { + return + } + wlan { + return e + } + default { + return eth +# end Boeing: below + } + } +} + + +#****f* editor.tcl/listLANNodes +# NAME +# listLANNodes -- list LAN nodes +# SYNOPSIS +# set l2peers [listLANNodes $l2node $l2peers] +# FUNCTION +# Recursive function for finding all link layer nodes that are +# connected to node l2node. Returns the list of all link layer +# nodes that are on the same LAN as l2node. +# INPUTS +# * l2node -- node id of a link layer node +# * l2peers -- old link layer nodes on the same LAN +# RESULT +# * l2peers -- new link layer nodes on the same LAN +#**** + +proc listLANnodes { l2node l2peers } { + lappend l2peers $l2node + foreach ifc [ifcList $l2node] { + set peer [logicalPeerByIfc $l2node $ifc] + set type [nodeType $peer] + # Boeing + if { [ lsearch {lanswitch hub wlan} $type] != -1 } { + if { [lsearch $l2peers $peer] == -1 } { + set l2peers [listLANnodes $peer $l2peers] + } + } + } + return $l2peers +} + +#****f* editor.tcl/calcDxDy +# NAME +# calcDxDy lnode -- list LAN nodes +# SYNOPSIS +# calcDxDy $lnode +# FUNCTION +# Calculates dx and dy variables of the calling function. +# INPUTS +# * lnode -- node id of a node whose dx and dy coordinates are +# calculated +#**** + +proc calcDxDy { lnode } { + global showIfIPaddrs showIfIPv6addrs zoom + upvar dx x + upvar dy y + + if { $zoom > 1.0 } { + set x 1 + set y 1 + return + } + switch -exact -- [nodeType $lnode] { + hub { + set x [expr {1.5 / $zoom}] + set y [expr {2.6 / $zoom}] + } + lanswitch { + set x [expr {1.5 / $zoom}] + set y [expr {2.6 / $zoom}] + } + router { + set x [expr {1 / $zoom}] + set y [expr {2 / $zoom}] + } + rj45 { + set x [expr {1 / $zoom}] + set y [expr {1 / $zoom}] + } + tunnel { + set x [expr {1 / $zoom}] + set y [expr {1 / $zoom}] + } + wlan { + set x [expr {1.5 / $zoom}] + set y [expr {2.6 / $zoom}] + } + default { + set x [expr {1 / $zoom}] + set y [expr {2 / $zoom}] + } + } + return +} + +#****f* editor.tcl/updateIfcLabel +# NAME +# updateIfcLabel -- update interface label +# SYNOPSIS +# updateIfcLabel $lnode1 $lnode2 +# FUNCTION +# Updates the interface label, including interface name, +# interface state (* for interfaces that are down), IPv4 +# address and IPv6 address. +# INPUTS +# * lnode1 -- node id of a node where the interface resides +# * lnode2 -- node id of the node that is connected by this +# interface. +#**** +proc updateIfcLabel { lnode1 lnode2 } { + global showIfNames showIfIPaddrs showIfIPv6addrs + + set link [lindex [.c gettags "link && $lnode1 && $lnode2"] 1] + set ifc [ifcByPeer $lnode1 $lnode2] + set ifipv4addr [getIfcIPv4addr $lnode1 $ifc] + set ifipv6addr [getIfcIPv6addr $lnode1 $ifc] + if { $ifc == 0 } { + set ifc "" + } + if { [getIfcOperState $lnode1 $ifc] == "down" } { + set labelstr "*" + } else { + set labelstr "" + } + if { $showIfNames } { + set labelstr "$labelstr$ifc " + } + if { $showIfIPaddrs && $ifipv4addr != "" } { + set labelstr "$labelstr$ifipv4addr " + } + if { $showIfIPv6addrs && $ifipv6addr != "" } { + set labelstr "$labelstr$ifipv6addr " + } + set labelstr \ + [string range $labelstr 0 [expr {[string length $labelstr] - 2}]] + .c itemconfigure "interface && $lnode1 && $link" \ + -text "$labelstr" + # Boeing: hide ifc label on wlans + if { [nodeType $lnode1] == "wlan" } { + .c itemconfigure "interface && $lnode1 && $link" -state hidden + } +} + + +#****f* editor.tcl/updateLinkLabel +# NAME +# updateLinkLabel -- update link label +# SYNOPSIS +# updateLinkLabel $link +# FUNCTION +# Updates the link label, including link bandwidth, link delay, +# BER and duplicate values. +# INPUTS +# * link -- link id of the link whose labels are updated. +#**** +proc updateLinkLabel { link } { + global showLinkLabels + + set labelstr "" + set delstr [getLinkDelayString $link] + set ber [getLinkBER $link] + set dup [getLinkDup $link] + set labelstr "$labelstr[getLinkBandwidthString $link] " + if { "$delstr" != "" } { + set labelstr "$labelstr$delstr " + } + if { "$ber" != "" } { + set berstr "loss=$ber%" + set labelstr "$labelstr$berstr " + } + if { "$dup" != "" } { + set dupstr "dup=$dup%" + set labelstr "$labelstr$dupstr " + } + set labelstr \ + [string range $labelstr 0 [expr {[string length $labelstr] - 2}]] + .c itemconfigure "linklabel && $link" -text "$labelstr" + if { $showLinkLabels == 0} { + .c itemconfigure "linklabel && $link" -state hidden + } +} + + +#****f* editor.tcl/redrawAllLinks +# NAME +# redrawAllLinks -- redraw all links +# SYNOPSIS +# redrawAllLinks +# FUNCTION +# Redraws all links on the current canvas. +#**** +proc redrawAllLinks {} { + global link_list curcanvas + + foreach link $link_list { + set nodes [linkPeers $link] + if { [getNodeCanvas [lindex $nodes 0]] != $curcanvas || + [getNodeCanvas [lindex $nodes 1]] != $curcanvas } { + continue + } + redrawLink $link + } +} + + +#****f* editor.tcl/redrawLink +# NAME +# redrawLink -- redraw a links +# SYNOPSIS +# redrawLink $link +# FUNCTION +# Redraws the specified link. +# INPUTS +# * link -- link id +#**** +proc redrawLink { link } { + global $link + + set limages [.c find withtag "link && $link"] + set limage1 [lindex $limages 0] + set limage2 [lindex $limages 1] + set tags [.c gettags $limage1] + set link [lindex $tags 1] + set lnode1 [lindex $tags 2] + set lnode2 [lindex $tags 3] + + set coords1 [.c coords "node && $lnode1"] + set coords2 [.c coords "node && $lnode2"] + set x1 [lindex $coords1 0] + set y1 [lindex $coords1 1] + set x2 [lindex $coords2 0] + set y2 [lindex $coords2 1] + + .c coords $limage1 $x1 $y1 $x2 $y2 + .c coords $limage2 $x1 $y1 $x2 $y2 + + set lx [expr {0.5 * ($x1 + $x2)}] + set ly [expr {0.5 * ($y1 + $y2)}] + .c coords "linklabel && $link" $lx $ly + + set n [expr {sqrt (($x1 - $x2) * ($x1 - $x2) + \ + ($y1 - $y2) * ($y1 - $y2)) * 0.015}] + if { $n < 1 } { + set n 1 + } + + calcDxDy $lnode1 + set lx [expr {($x1 * ($n * $dx - 1) + $x2) / $n / $dx}] + set ly [expr {($y1 * ($n * $dy - 1) + $y2) / $n / $dy}] + .c coords "interface && $lnode1 && $link" $lx $ly + updateIfcLabel $lnode1 $lnode2 + + calcDxDy $lnode2 + set lx [expr {($x1 + $x2 * ($n * $dx - 1)) / $n / $dx}] + set ly [expr {($y1 + $y2 * ($n * $dy - 1)) / $n / $dy}] + .c coords "interface && $lnode2 && $link" $lx $ly + updateIfcLabel $lnode2 $lnode1 + # Boeing - wlan antennas + if { [nodeType $lnode1] == "wlan" } { + global zoom + set an [lsearch -exact [findWlanNodes $lnode2] $lnode1] + if { $an < 0 || $an >= 5 } { set an 0 } + set dx [expr {20 - (10*$an)}] + .c coords "antenna && $lnode2 && $link" [expr {$x2-($dx*$zoom)}] \ + [expr {$y2-(20*$zoom)}] + } +} + +# Boeing +proc redrawWlanLink { link } { + global $link + + set tags [.c gettags $link] + set lnode1 [lindex $tags 1] + set lnode2 [lindex $tags 2] + set coords1 [.c coords "node && $lnode1"] + set coords2 [.c coords "node && $lnode2"] + set x1 [lindex $coords1 0] + set y1 [lindex $coords1 1] + set x2 [lindex $coords2 0] + set y2 [lindex $coords2 1] + set lx [expr {0.5 * ($x1 + $x2)}] + set ly [expr {0.5 * ($y1 + $y2)}] + + .c coords $link $x1 $y1 $x2 $y2 + .c coords "linklabel && $lnode2 && $lnode1" $lx $ly + + return +} +# end Boeing + +#****f* editor.tcl/splitGUILink +# NAME +# splitGUILink -- splits a links +# SYNOPSIS +# splitGUILink $link +# FUNCTION +# Splits the link and draws new links and new pseudo nodes +# on the canvas. +# INPUTS +# * link -- link id +#**** +proc splitGUILink { link } { + global changed zoom + + set peer_nodes [linkPeers $link] + set new_nodes [splitLink $link pseudo] + set orig_node1 [lindex $peer_nodes 0] + set orig_node2 [lindex $peer_nodes 1] + set new_node1 [lindex $new_nodes 0] + set new_node2 [lindex $new_nodes 1] + set new_link1 [linkByPeers $orig_node1 $new_node1] + set new_link2 [linkByPeers $orig_node2 $new_node2] + setLinkMirror $new_link1 $new_link2 + setLinkMirror $new_link2 $new_link1 + setNodeMirror $new_node1 $new_node2 + setNodeMirror $new_node2 $new_node1 + setNodeName $new_node1 $orig_node2 + setNodeName $new_node2 $orig_node1 + + set x1 [lindex [getNodeCoords $orig_node1] 0] + set y1 [lindex [getNodeCoords $orig_node1] 1] + set x2 [lindex [getNodeCoords $orig_node2] 0] + set y2 [lindex [getNodeCoords $orig_node2] 1] + + setNodeCoords $new_node1 \ + "[expr {($x1 + 0.4 * ($x2 - $x1)) / $zoom}] \ + [expr {($y1 + 0.4 * ($y2 - $y1)) / $zoom}]" + setNodeCoords $new_node2 \ + "[expr {($x1 + 0.6 * ($x2 - $x1)) / $zoom}] \ + [expr {($y1 + 0.6 * ($y2 - $y1)) / $zoom}]" + setNodeLabelCoords $new_node1 [getNodeCoords $new_node1] + setNodeLabelCoords $new_node2 [getNodeCoords $new_node2] + + set changed 1 + updateUndoLog + redrawAll +} + + +#****f* editor.tcl/selectNode +# NAME +# selectNode -- select node +# SYNOPSIS +# selectNode $c $obj +# FUNCTION +# Crates the selecting box around the specified canvas +# object. +# INPUTS +# * c -- tk canvas +# * obj -- tk canvas object tag id +#**** +proc selectNode { c obj } { + set node [lindex [$c gettags $obj] 1] + if { $node == "" } { return } ;# Boeing: fix occassional error + $c addtag selected withtag "node && $node" + if { [nodeType $node] == "pseudo" } { + set bbox [$c bbox "nodelabel && $node"] + } elseif { [nodeType $node] == "rectangle" } { + $c addtag selected withtag "rectangle && $node" + set bbox [$c bbox "rectangle && $node"] + } elseif { [nodeType $node] == "text" } { + $c addtag selected withtag "text && $node" + set bbox [$c bbox "text && $node"] + } elseif { [nodeType $node] == "oval" } { + $c addtag selected withtag "oval && $node" + set bbox [$c bbox "oval && $node"] + } else { + set bbox [$c bbox "node && $node"] + } + set bx1 [expr {[lindex $bbox 0] - 2}] + set by1 [expr {[lindex $bbox 1] - 2}] + set bx2 [expr {[lindex $bbox 2] + 1}] + set by2 [expr {[lindex $bbox 3] + 1}] + $c delete -withtags "selectmark && $node" + $c create line $bx1 $by1 $bx2 $by1 $bx2 $by2 $bx1 $by2 $bx1 $by1 \ + -dash {6 4} -fill black -width 1 -tags "selectmark $node" +} + +proc selectNodes { nodelist } { + foreach node $nodelist { + selectNode .c [.c find withtag "node && $node"] + } +} + +proc selectedNodes {} { + set selected {} + foreach obj [.c find withtag "node && selected"] { + lappend selected [lindex [.c gettags $obj] 1] + } + foreach obj [.c find withtag "oval && selected"] { + lappend selected [lindex [.c gettags $obj] 1] + } + foreach obj [.c find withtag "rectangle && selected"] { + lappend selected [lindex [.c gettags $obj] 1] + } + foreach obj [.c find withtag "text && selected"] { + lappend selected [lindex [.c gettags $obj] 1] + } + return $selected +} + +proc selectedRealNodes {} { + set selected {} + foreach obj [.c find withtag "node && selected"] { + set node [lindex [.c gettags $obj] 1] + if { [getNodeMirror $node] != "" || + [nodeType $node] == "rj45" } { + continue + } + lappend selected $node + } + return $selected +} + +proc selectAdjacent {} { + global curcanvas + + set selected [selectedNodes] + set adjacent {} + foreach node $selected { + foreach ifc [ifcList $node] { + set peer [peerByIfc $node $ifc] + if { [getNodeMirror $peer] != "" } { + return + } + if { [lsearch $adjacent $peer] < 0 } { + lappend adjacent $peer + } + } + } + selectNodes $adjacent +} + +#****f* editor.tcl/button3link +# NAME +# button3link +# SYNOPSIS +# button3link $c $x $y +# FUNCTION +# This procedure is called when a right mouse button is +# clicked on the canvas. If there is a link on the place of +# mouse click this procedure creates and configures a popup +# menu. The options in the menu are: +# * Configure -- configure the link +# * Delete -- delete the link +# * Split -- split the link +# * Merge -- this option is active only if the link is previously +# been split, by this action the link is merged. +# INPUTS +# * c -- tk canvas +# * x -- x coordinate for popup menu +# * y -- y coordinate for popup menu +#**** +proc button3link { c x y } { + global oper_mode env eid canvas_list node_list + global curcanvas + + set link [lindex [$c gettags {link && current}] 1] + if { $link == "" } { + set link [lindex [$c gettags {linklabel && current}] 1] + if { $link == "" } { + return + } + } + + .button3menu delete 0 end + + # + # Configure link + # + .button3menu add command -label "Configure" \ + -command "popupConfigDialog $c" + + # + # Delete link + # + if { $oper_mode != "exec" } { + .button3menu add command -label "Delete" \ + -command "removeGUILink $link atomic" + } else { + .button3menu add command -label "Delete" \ + -state disabled + } + + # + # Split link + # + if { $oper_mode != "exec" && [getLinkMirror $link] == "" } { + .button3menu add command -label "Split" \ + -command "splitGUILink $link" + } else { + .button3menu add command -label "Split" \ + -state disabled + } + + # + # Merge two pseudo nodes / links + # + if { $oper_mode != "exec" && [getLinkMirror $link] != "" && + [getNodeCanvas [getNodeMirror [lindex [linkPeers $link] 1]]] == + $curcanvas } { + .button3menu add command -label "Merge" \ + -command "mergeGUINode [lindex [linkPeers $link] 1]" + } else { + .button3menu add command -label "Merge" -state disabled + } + + set x [winfo pointerx .] + set y [winfo pointery .] + tk_popup .button3menu $x $y +} + + +#****f* editor.tcl/movetoCanvas +# NAME +# movetoCanvas -- move to canvas +# SYNOPSIS +# movetoCanvas $canvas +# FUNCTION +# This procedure moves all the nodes selected in the GUI to +# the specified canvas. +# INPUTS +# * canvas -- canvas id. +#**** +proc movetoCanvas { canvas } { + global changed + + set selected_nodes [selectedNodes] + foreach node $selected_nodes { + setNodeCanvas $node $canvas + set changed 1 + } + foreach obj [.c find withtag "linklabel"] { + set link [lindex [.c gettags $obj] 1] + set link_peers [linkPeers $link] + set peer1 [lindex $link_peers 0] + set peer2 [lindex $link_peers 1] + set peer1_in_selected [lsearch $selected_nodes $peer1] + set peer2_in_selected [lsearch $selected_nodes $peer2] + if { ($peer1_in_selected == -1 && $peer2_in_selected != -1) || + ($peer1_in_selected != -1 && $peer2_in_selected == -1) } { + if { [nodeType $peer2] == "pseudo" } { + setNodeCanvas $peer2 $canvas + if { [getNodeCanvas [getNodeMirror $peer2]] == $canvas } { + mergeLink $link + } + continue + } + set new_nodes [splitLink $link pseudo] + set new_node1 [lindex $new_nodes 0] + set new_node2 [lindex $new_nodes 1] + setNodeMirror $new_node1 $new_node2 + setNodeMirror $new_node2 $new_node1 + setNodeName $new_node1 $peer2 + setNodeName $new_node2 $peer1 + set link1 [linkByPeers $peer1 $new_node1] + set link2 [linkByPeers $peer2 $new_node2] + setLinkMirror $link1 $link2 + setLinkMirror $link2 $link1 + } + } + updateUndoLog + redrawAll +} + + +#****f* editor.tcl/mergeGUINode +# NAME +# mergeGUINode -- merge GUI node +# SYNOPSIS +# mergeGUINode $node +# FUNCTION +# This procedure removes the specified pseudo node as well +# as it's mirror copy. Also this procedure removes the +# pseudo links and reestablish the original link between +# the non-pseudo nodes. +# INPUTS +# * node -- node id of a pseudo node. +#**** +proc mergeGUINode { node } { + set link [lindex [linkByIfc $node [ifcList $node]] 0] + mergeLink $link + redrawAll +} + + +#****f* editor.tcl/button3node +# NAME +# button3node +# SYNOPSIS +# button3node $c $x $y +# FUNCTION +# This procedure is called when a right mouse button is +# clicked on the canvas. Also called when double-clicking +# on a node during runtime. +# If there is a node on the place of +# mouse click this procedure creates and configures a popup +# menu. The options in the menu are: +# * Configure -- configure the node +# * Create link to -- create a link to any available node, +# it can be on the same canvas or on a different canvas. +# * Move to -- move to some other canvas +# * Merge -- this option is available only for pseudo nodes +# that have mirror nodes on the same canvas (Pseudo nodes +# created by splitting a link). +# * Delete -- delete the node +# * Shell window -- specifies the shell window to open in +# exec mode. This option is available only to nodes on a +# network layer +# * Ethereal -- opens a Ethereal program for the specified +# node and the specified interface. This option is available +# only for network layer nodes in exec mode. +# INPUTS +# * c -- tk canvas +# * x -- x coordinate for popup menu +# * y -- y coordinate for popup menu +#**** +#old proc button3node { c x y } +#Boeing +proc button3node { c x y button } { + global oper_mode env eid canvas_list node_list curcanvas systype g_prefs + + set node [lindex [$c gettags {node && current}] 1] + if { $node == "" } { + set node [lindex [$c gettags {nodelabel && current}] 1] + if { $node == "" } { + return + } + } + set mirror_node [getNodeMirror $node] + + if { [$c gettags "node && $node && selected"] == "" } { + $c dtag node selected + $c delete -withtags selectmark + selectNode $c [$c find withtag "current"] + } + + # open up shells upon double-click or shift/ctrl-click + set shell $g_prefs(shell) + if { $button == "shift" || $button == "ctrl" } { + if { [nodeType $node] == "pseudo" } { + # + # Hyperlink to another canvas + # + set curcanvas [getNodeCanvas [getNodeMirror $node]] + switchCanvas none + return + } + # only open bash shells for NETWORK nodes and remote routers + if { [[typemodel $node].layer] != "NETWORK" } { + if { [typemodel $node] == "wlan" } { + wlanDoubleClick $node $button + } + return + } + if { $button == "shift" } { ;# normal bash shell + spawnShell $node $shell + } else { ;# right-click vtysh shell + set cmd [[typemodel $node].shellcmd $node] + if { $cmd != "/bin/sh" && $cmd != "" } { spawnShell $node $cmd } + } + return ;# open shell, don't post a menu + } + + # + # below here we build and post a menu + # + .button3menu delete 0 end + + # + # Configure node + # + if { [nodeType $node] != "pseudo" } { + .button3menu add command -label "Configure" \ + -command "popupConfigDialog $c" + } else { + .button3menu add command -label "Configure" \ + -command "popupConfigDialog $c" -state disabled + } + + # + # Select adjacent + # + if { [nodeType $node] != "pseudo" } { + .button3menu add command -label "Select adjacent" \ + -command "selectAdjacent" + } else { + .button3menu add command -label "Select adjacent" \ + -command "selectAdjacent" -state disabled + } + + # + # Create a new link - can be between different canvases + # + .button3menu.connect delete 0 end + if { $oper_mode == "exec" || [nodeType $node] == "pseudo" } { + #.button3menu add cascade -label "Create link to" \ + -menu .button3menu.connect -state disabled + } else { + .button3menu add cascade -label "Create link to" \ + -menu .button3menu.connect + } + destroy .button3menu.connect.selected + menu .button3menu.connect.selected -tearoff 0 + .button3menu.connect add cascade -label "Selected" \ + -menu .button3menu.connect.selected + .button3menu.connect.selected add command \ + -label "Chain" -command "P \[selectedRealNodes\]" + .button3menu.connect.selected add command \ + -label "Star" \ + -command "Kb \[lindex \[selectedRealNodes\] 0\] \ + \[lrange \[selectedNodes\] 1 end\]" + .button3menu.connect.selected add command \ + -label "Cycle" -command "C \[selectedRealNodes\]" + .button3menu.connect.selected add command \ + -label "Clique" -command "K \[selectedRealNodes\]" + .button3menu.connect add separator + foreach canvas $canvas_list { + destroy .button3menu.connect.$canvas + menu .button3menu.connect.$canvas -tearoff 0 + .button3menu.connect add cascade -label [getCanvasName $canvas] \ + -menu .button3menu.connect.$canvas + } + foreach peer_node $node_list { + set canvas [getNodeCanvas $peer_node] + if { $node != $peer_node && [nodeType $node] != "rj45" && + [lsearch {pseudo rj45} [nodeType $peer_node]] < 0 && + [ifcByLogicalPeer $node $peer_node] == "" } { + .button3menu.connect.$canvas add command \ + -label [getNodeName $peer_node] \ + -command "newGUILink $node $peer_node" + } elseif { [nodeType $peer_node] != "pseudo" } { + .button3menu.connect.$canvas add command \ + -label [getNodeName $peer_node] \ + -state disabled + } + } + # + # assign to emulation server + # + if { $oper_mode != "exec" } { + global exec_servers node_location + .button3menu.assign delete 0 end + .button3menu add cascade -label "Assign to" -menu .button3menu.assign + .button3menu.assign add command -label "(none)" \ + -command "assignSelection \"\"" + foreach server [lsort -dictionary [array names exec_servers]] { + .button3menu.assign add command -label "$server" \ + -command "assignSelection $server" + } + } + + # + # wlan link to all nodes + # + if { [nodeType $node] == "wlan" } { + .button3menu add command -label "Link to all routers" \ + -command "linkAllNodes $node" + set msg "Select new WLAN $node members:" + set cmd "linkSelectedNodes $node" + .button3menu add command -label "Select WLAN members..." \ + -command "popupSelectNodes \"$msg\" \"\" {$cmd}" + set state normal + if { $oper_mode != "exec" } { set state disabled } + .button3menu add command -label "Mobility script..." \ + -command "showMobilityScriptPopup $node" -state $state + } + + # + # Move to another canvas + # + .button3menu.moveto delete 0 end + if { $oper_mode != "exec" && [nodeType $node] != "pseudo" } { + .button3menu add cascade -label "Move to" \ + -menu .button3menu.moveto + .button3menu.moveto add command -label "Canvas:" -state disabled + foreach canvas $canvas_list { + if { $canvas != $curcanvas } { + .button3menu.moveto add command \ + -label [getCanvasName $canvas] \ + -command "movetoCanvas $canvas" + } else { + .button3menu.moveto add command \ + -label [getCanvasName $canvas] -state disabled + } + } + } + + # + # Merge two pseudo nodes / links + # + if { $oper_mode != "exec" && [nodeType $node] == "pseudo" && \ + [getNodeCanvas $mirror_node] == $curcanvas } { + .button3menu add command -label "Merge" \ + -command "mergeGUINode $node" + } + + # + # Delete selection + # + if { $oper_mode != "exec" } { + .button3menu add command -label "Cut" -command cutSelection + .button3menu add command -label "Copy" -command copySelection + .button3menu add command -label "Paste" -command pasteSelection + .button3menu add command -label "Delete" -command deleteSelection + } + + .button3menu add command -label "Hide" -command "hideSelected" + + # Boeing: flag used below + set execstate disabled + if { $oper_mode == "exec" } { set execstate normal } + + # + # Shell selection + # + .button3menu.shell delete 0 end + if { $oper_mode == "exec" && [[typemodel $node].layer] == "NETWORK" } { + .button3menu add cascade -label "Shell window" \ + -menu .button3menu.shell + set cmd [[typemodel $node].shellcmd $node] + if { $cmd != "/bin/sh" && $cmd != "" } { ;# typically adds vtysh + .button3menu.shell add command -label "$cmd" \ + -command "spawnShell $node $cmd" + } + .button3menu.shell add command -label "/bin/sh" \ + -command "spawnShell $node sh" + .button3menu.shell add command -label "$shell" \ + -command "spawnShell $node $shell" + } + + # + # services + # + .button3menu.services delete 0 end + if { $oper_mode == "exec" && [[typemodel $node].layer] == "NETWORK" } { + addServicesRightClickMenu .button3menu $node + } else { + .button3menu add command -label "Services..." -command \ + "sendConfRequestMessage -1 $node services 0x1 -1 \"\"" + } + + # + # Tcpdump, gpsd + # + if { $oper_mode == "exec" && [[typemodel $node].layer] == "NETWORK" } { + addInterfaceCommand $node .button3menu "Tcpdump" "tcpdump -n -l -i" \ + $execstate 1 + addInterfaceCommand $node .button3menu "TShark" "tshark -n -l -i" \ + $execstate 1 + addInterfaceCommand $node .button3menu "Wireshark" "wireshark -k -i" \ + $execstate 0 + # wireshark on host veth pair -- need veth pair name + #wireshark -k -i + if { [lindex $systype 0] == "Linux" } { + set name [getNodeName $node] + .button3menu add command -label "View log..." -state $execstate \ + -command "spawnShell $node \"less ../$name.log\"" + } + } + + # + # Finally post the popup menu on current pointer position + # + set x [winfo pointerx .] + set y [winfo pointery .] + + tk_popup .button3menu $x $y +} + + +#****f* editor.tcl/spawnShell +# NAME +# spawnShell -- spawn shell +# SYNOPSIS +# spawnShell $node $cmd +# FUNCTION +# This procedure spawns a new shell for a specified node. +# The shell is specified in cmd parameter. +# INPUTS +# * node -- node id of the node for which the shell +# is spawned. +# * cmd -- the path to the shell. +#**** +proc spawnShell { node cmd } { + # request an interactive terminal + set sock [lindex [getEmulPlugin $node] 2] + set flags 0x44 ;# set TTY, critical flags + set exec_num [newExecCallbackRequest shell] + sendExecMessage $sock $node $cmd $exec_num $flags +} + +# add a sub-menu to the parentmenu with the given command for each interface +proc addInterfaceCommand { node parentmenu txt cmd state isnodecmd } { + global g_current_session + set childmenu "$parentmenu.[lindex $cmd 0]" + $childmenu delete 0 end + $parentmenu add cascade -label $txt -menu $childmenu -state $state + if { ! $isnodecmd } { + if { $g_current_session == 0 } { set state disabled } + set ssid [shortSessionID $g_current_session] + } + foreach ifc [ifcList $node] { + set addr [lindex [getIfcIPv4addr $node $ifc] 0] + if { $addr != "" } { set addr " ($addr)" } + if { $isnodecmd } { ;# run command in a node + set icmd "spawnShell $node \"$cmd $ifc\"" + } else { ;# exec a command directly + set localifc $node.$ifc.$ssid + set icmd "exec $cmd $localifc &" + } + $childmenu add command -label "$ifc$addr" -state $state -command $icmd + } +} + +# Boeing: consolodate various raise statements here +proc raiseAll {c} { + $c raise rectangle background + $c raise oval "rectangle || background" + $c raise grid "oval || rectangle || background" + $c raise link "grid || oval || rectangle || background" + $c raise linklabel "link || grid || oval || rectangle || background" + $c raise newlink "linklabel || link || grid || oval || rectangle || background" + $c raise wlanlink "newlink || linklabel || link || grid || oval || rectangle || background" + $c raise antenna "wlanlink || newlink || linklabel || link || grid || oval || rectangle || background" + $c raise interface "antenna || wlanlink || newlink || linklabel || link || grid || oval || rectangle || background" + $c raise node "interface || antenna || wlanlink || newlink || linklabel || link || grid || oval || rectangle || background" + $c raise nodelabel "node || interface || antenna || wlanlink || newlink || linklabel || link || grid || oval || rectangle || background" + $c raise text "nodelabel || node || interface || antenna || wlanlink || newlink || linklabel || link || grid || oval || rectangle || background" + $c raise -cursor +} +# end Boeing + + +#****f* editor.tcl/button1 +# NAME +# button1 +# SYNOPSIS +# button1 $c $x $y $button +# FUNCTION +# This procedure is called when a left mouse button is +# clicked on the canvas. This procedure selects a new +# node or creates a new node, depending on the selected +# tool. +# INPUTS +# * c -- tk canvas +# * x -- x coordinate +# * y -- y coordinate +# * button -- the keyboard button that is pressed. +#**** +proc button1 { c x y button } { + global node_list plot_list curcanvas zoom + global activetool activetoolp newlink curobj changed def_router_model + global router pc host lanswitch rj45 hub + global oval rectangle text + global lastX lastY + global background selectbox + global defLinkColor defLinkWidth + global resizemode resizeobj + global wlan g_twoNodeSelect + global g_view_locked + + set x [$c canvasx $x] + set y [$c canvasy $y] + + set lastX $x + set lastY $y + + # TODO: clean this up + # - too many global variables + # - too many hardcoded cases (lanswitch, router, etc) + # - should be functionalized since lengthy if-else difficult to read + + set curobj [$c find withtag current] + set curtype [lindex [$c gettags current] 0] + + + if { $curtype == "node" || \ + $curtype == "oval" || $curtype == "rectangle" || $curtype == "text" \ + || ( $curtype == "nodelabel" && \ + [nodeType [lindex [$c gettags $curobj] 1]] == "pseudo") } { + set node [lindex [$c gettags current] 1] + set wasselected \ + [expr {[lsearch [$c find withtag "selected"] \ + [$c find withtag "node && $node"]] > -1}] + if { $button == "ctrl" } { + if { $wasselected } { + $c dtag $node selected + $c delete -withtags "selectmark && $node" + } + } elseif { !$wasselected } { + $c dtag node selected + $c delete -withtags selectmark + } + if { $activetool == "select" && !$wasselected} { + selectNode $c $curobj + } + } elseif { $curtype == "selectmark" } { + setResizeMode $c $x $y + } elseif { $activetool == "plot" } { + # plot tool: create new plot windows when clicking on a link + set link "" + set tags [$c gettags $curobj] + if { $curtype == "link" || $curtype == "linklabel" } { + set link [lindex $tags 1] + } elseif { $curtype == "interface" } { + set link [lindex $tags 2] + } + if { $link != "" } { + thruPlot $c $link $x $y 150 220 false + } + return + } elseif { $button != "ctrl" || $activetool != "select" } { + $c dtag node selected + $c delete -withtags selectmark + } + # user has clicked on a blank area or background item + if { [lsearch [.c gettags $curobj] background] != -1 || + [lsearch [.c gettags $curobj] grid] != -1 || + [lsearch [.c gettags $curobj] annotation] != -1 } { + # left mouse button pressed to create a new node + if { [lsearch {select marker link mobility twonode run stop oval \ + rectangle text} $activetool] < 0 } { + if { $g_view_locked == 1 } { return } + if { $activetoolp == "routers" } { + set node [newNode router] + setNodeModel $node $activetool + } else { + set node [newNode $activetool] + } + setNodeCanvas $node $curcanvas + setNodeCoords $node "[expr {$x / $zoom}] [expr {$y / $zoom}]" + lassign [getDefaultLabelOffsets $activetool] dx dy + setNodeLabelCoords $node "[expr {$x / $zoom + $dx}] \ + [expr {$y / $zoom + $dy}]" + drawNode $c $node + selectNode $c [$c find withtag "node && $node"] + set changed 1 + # remove any existing select box + } elseif { $activetool == "select" \ + && $curtype != "node" && $curtype != "nodelabel"} { + $c config -cursor cross + set lastX $x + set lastY $y + if {$selectbox != ""} { + # We actually shouldn't get here! + $c delete $selectbox + set selectbox "" + } + # begin drawing an annotation + } elseif { $activetoolp == "bgobjs" } { + set newcursor cross + if { $activetool == "text" } { set newcursor xterm } + $c config -cursor $newcursor + set lastX $x + set lastY $y + # draw with the marker + } elseif { $activetool == "marker" } { + global markersize markercolor + set newline [$c create oval $lastX $lastY $x $y \ + -width $markersize -outline $markercolor -tags "marker"] + $c raise $newline "background || link || linklabel || interface" + set lastX $x + set lastY $y + } + } else { + if {$curtype == "node" || $curtype == "nodelabel"} { + $c config -cursor fleur + } + if {$activetool == "link" && $curtype == "node"} { + $c config -cursor cross + set lastX [lindex [$c coords $curobj] 0] + set lastY [lindex [$c coords $curobj] 1] + set newlink [$c create line $lastX $lastY $x $y \ + -fill $defLinkColor -width $defLinkWidth \ + -tags "link"] + # twonode tool support + } elseif {$g_twoNodeSelect != "" && $curtype == "node"} { + set curnode [lindex [$c gettags $curobj] 1] + selectTwoNode $curnode + } elseif { $curtype == "node" } { + selectNode $c $curobj + } + # end Boeing + } + + raiseAll $c +} + +proc setResizeMode { c x y } { + set isThruplot false + set type1 notset + + if {$c == ".c"} { + set t1 [$c gettags current] + set o1 [lindex $t1 1] + set type1 [nodeType $o1] + } else { + set o1 $c + set c .c + set isThruplot true + } + #DYL + #puts "RESIZE NODETYPE = $type1" + global resizemode resizeobj + if {$type1== "oval" || $type1== "rectangle" || $isThruplot == true} { + set resizeobj $o1 + set bbox1 [$c bbox $o1] + set x1 [lindex $bbox1 0] + set y1 [lindex $bbox1 1] + set x2 [lindex $bbox1 2] + set y2 [lindex $bbox1 3] + set l 0 ;# left + set r 0 ;# right + set u 0 ;# up + set d 0 ;# down + + if { $x < [expr $x1+($x2-$x1)/8.0]} { set l 1 } + if { $x > [expr $x2-($x2-$x1)/8.0]} { set r 1 } + if { $y < [expr $y1+($y2-$y1)/8.0]} { set u 1 } + if { $y > [expr $y2-($y2-$y1)/8.0]} { set d 1 } + + if {$l==1} { + if {$u==1} { + set resizemode lu + } elseif {$d==1} { + set resizemode ld + } else { + set resizemode l + } + } elseif {$r==1} { + if {$u==1} { + set resizemode ru + } elseif {$d==1} { + set resizemode rd + } else { + set resizemode r + } + } elseif {$u==1} { + set resizemode u + } elseif {$d==1} { + set resizemode d + } else { + set resizemode false + } + } +} + + +#****f* editor.tcl/button1-motion +# NAME +# button1-motion +# SYNOPSIS +# button1-motion $c $x $y +# FUNCTION +# This procedure is called when a left mouse button is +# pressed and the mouse is moved around the canvas. +# This procedure creates new select box, moves the +# selected nodes or draws a new link. +# INPUTS +# * c -- tk canvas +# * x -- x coordinate +# * y -- y coordinate +#**** +proc button1-motion { c x y } { + global activetool newlink changed + global lastX lastY sizex sizey selectbox background + global oper_mode newoval newrect resizemode + global zoom + global g_view_locked + global thruPlotCur thruPlotDragStart + + set x [$c canvasx $x] + set y [$c canvasy $y] + + if {$thruPlotDragStart == "dragging"} { + #puts "active tool is $activetool" + thruPlotDrag $c $thruPlotCur $x $y null true + return + } + + # fix occasional error + if { $x == "" || $y == "" || $lastX == "" || $lastY == "" } { return } + + set curobj [$c find withtag current] + set curtype [lindex [$c gettags current] 0] + + # display coordinates in the status bar + set zoomx [expr {$x / $zoom}] + set zoomy [expr {$y / $zoom}] + .bottom.textbox config -text "<$zoomx, $zoomy>" + + # prevent dragging outside of the canvas area + if { $x < 0 } { + set x 0 + } elseif { $x > $sizex } { + set x $sizex + } + if { $y < 0 } { + set y 0 + } elseif { $y > $sizey } { + set y $sizey + } + + # marker tool drawing on the canvas + if { $activetool == "marker" } { + global markersize markercolor + set dx [expr {$x-$lastX} ] + set dy [expr {$y-$lastY} ] + # this provides smoother drawing + if { $dx > $markersize || $dy > $markersize } { + set mark [$c create line $lastX $lastY $x $y \ + -width $markersize -fill $markercolor -tags "marker"] + $c raise $mark \ + "marker || background || link || linklabel || interface" + } + set mark [$c create oval $x $y $x $y \ + -width $markersize -fill $markercolor \ + -outline $markercolor -tags "marker"] + $c raise $mark "marker || background || link || linklabel || interface" + set lastX $x + set lastY $y + return + } + # disable all other mouse drags in locked mode + if { $g_view_locked == 1 } { return } + + # don't move nodelabels in exec mode, use calcx,y instead of x,y + if {$oper_mode == "exec" && $curtype == "nodelabel" } { + set node [lindex [$c gettags $curobj] 1] + set curobj [$c find withtag "node && $node"] + set curtype "node" + set coords [$c coords $curobj] + set calcx [expr {[lindex $coords 0] / $zoom}] + set calcy [expr {[lindex $coords 1] / $zoom}] + selectNode $c $curobj + } else { + set calcx $x + set calcy $y + } + # drawing a new link + if {$activetool == "link" && $newlink != ""} { + $c coords $newlink $lastX $lastY $x $y + # draw a selection box + } elseif { $activetool == "select" && \ + ( $curobj == $selectbox || $curtype == "background" || $curtype == "grid")} { + if {$selectbox == ""} { + set selectbox [$c create line \ + $lastX $lastY $x $lastY $x $y $lastX $y $lastX $lastY \ + -dash {10 4} -fill black -width 1 -tags "selectbox"] + $c raise $selectbox "background || link || linklabel || interface" + } else { + $c coords $selectbox \ + $lastX $lastY $x $lastY $x $y $lastX $y $lastX $lastY + } + # move a text annotation + } elseif { $activetool == "select" && $curtype == "text" } { + $c move $curobj [expr {$x - $lastX}] [expr {$y - $lastY}] + set changed 1 + set lastX $x + set lastY $y + $c delete [$c find withtag "selectmark"] + # move a nodelabel apart from a node (edit mode only) + } elseif { $activetool == "select" && $curtype == "nodelabel" \ + && [nodeType [lindex [$c gettags $curobj] 1]] != "pseudo" } { + $c move $curobj [expr {$x - $lastX}] [expr {$y - $lastY}] + set changed 1 + set lastX $x + set lastY $y + # actually we should check if curobj==bkgImage + # annotations + } elseif { $activetool == "oval" && \ + ( $curobj == $newoval || $curobj == $background || $curtype == "background" || $curtype == "grid")} { + # Draw a new oval + if {$newoval == ""} { + set newoval [$c create oval $lastX $lastY $x $y \ + -dash {10 4} -width 1 -tags "newoval"] + $c raise $newoval "background || link || linklabel || interface" + } else { + $c coords $newoval \ + $lastX $lastY $x $y + } + # actually we should check if curobj==bkgImage + } elseif { $activetool == "rectangle" && \ + ( $curobj == $newrect || $curobj == $background || $curtype == "background" || $curtype == "grid")} { + # Draw a new rectangle + if {$newrect == ""} { + set newrect [$c create rectangle $lastX $lastY $x $y \ + -outline blue \ + -dash {10 4} -width 1 -tags "newrect"] + $c raise $newrect "oval || background || link || linklabel || interface" + } else { + $c coords $newrect $lastX $lastY $x $y + } + # resizing an annotation + } elseif { $curtype == "selectmark" } { + foreach o [$c find withtag "selected"] { + set node [lindex [$c gettags $o] 1] + set tagovi [$c gettags $o] + set koord [getNodeCoords $node] + + set oldX1 [lindex $koord 0] + set oldY1 [lindex $koord 1] + set oldX2 [lindex $koord 2] + set oldY2 [lindex $koord 3] + switch -exact -- $resizemode { + lu { + set oldX1 $x + set oldY1 $y + } + ld { + set oldX1 $x + set oldY2 $y + } + l { + set oldX1 $x + } + ru { + set oldX2 $x + set oldY1 $y + } + rd { + set oldX2 $x + set oldY2 $y + } + r { + set oldX2 $x + } + u { + set oldY1 $y + } + d { + set oldY2 $y + } + } + if {$selectbox == ""} { + # Boeing: fix "bad screen distance" error + if { $oldX1 == "" || $oldX2 == "" || $oldY1 == "" || \ + $oldY2 == "" } { return } + # end Boeing + set selectbox [$c create line \ + $oldX1 $oldY1 $oldX2 $oldY1 $oldX2 $oldY2 $oldX1 \ + $oldY2 $oldX1 $oldY1 \ + -dash {10 4} -fill black -width 1 -tags "selectbox"] + $c raise $selectbox \ + "background || link || linklabel || interface" + } else { + $c coords $selectbox \ + $oldX1 $oldY1 $oldX2 $oldY1 $oldX2 $oldY2 $oldX1 \ + $oldY2 $oldX1 $oldY1 + } + } + # selected node(s) are being moved + } else { + foreach img [$c find withtag "selected"] { + set node [lindex [$c gettags $img] 1] + set newcoords [$c coords $img] ;# different than getNodeCoords + set img [$c find withtag "selectmark && $node"] + if {$curtype == "oval" || $curtype == "rectangle"} { + $c move $img [expr {($x - $lastX) / 2}] \ + [expr {($y - $lastY) / 2}] + } else { + $c move $img [expr {$x - $lastX}] [expr {$y - $lastY}] + set img [$c find withtag "node && $node"] + $c move $img [expr {$x - $lastX}] [expr {$y - $lastY}] + set img [$c find withtag "nodelabel && $node"] + $c move $img [expr {$x - $lastX}] [expr {$y - $lastY}] + set img [$c find withtag "twonode && $node"] + if {$img != "" } {; # move Two Node Tool circles around node + $c move $img [expr {$x - $lastX}] [expr {$y - $lastY}] + }; + set img [$c find withtag "rangecircles && $node"] + if {$img != "" } {; # move throughput circles around node + $c move $img [expr {$x - $lastX}] [expr {$y - $lastY}] + }; + $c addtag need_redraw withtag "link && $node" + } + if { $oper_mode == "exec" } { + set newx [expr {[lindex $newcoords 0] / $zoom}] + set newy [expr {[lindex $newcoords 1] / $zoom}] + sendNodePosMessage -1 $node -1 $newx $newy -1 0 + } + $c addtag need_redraw withtag "wlanlink && $node" + widgets_move_node $c $node 0 + } + foreach link [$c find withtag "link && need_redraw"] { + redrawLink [lindex [$c gettags $link] 1] + } + foreach wlanlink [$c find withtag "wlanlink && need_redraw"] { + redrawWlanLink $wlanlink + } + $c dtag wlanlink need_redraw + $c dtag link need_redraw + set changed 1 + set lastX $x + set lastY $y + } +} + + +#****f* editor.tcl/pseudo.layer +# NAME +# pseudo.layer +# SYNOPSIS +# set layer [pseudo.layer] +# FUNCTION +# Returns the layer on which the pseudo node operates +# i.e. returns no layer. +# RESULT +# * layer -- returns an empty string +#**** +proc pseudo.layer {} { +} + + +#****f* editor.tcl/newGUILink +# NAME +# newGUILink -- new GUI link +# SYNOPSIS +# newGUILink $lnode1 $lnode2 +# FUNCTION +# This procedure is called to create a new link between +# nodes lnode1 and lnode2. Nodes can be on the same canvas +# or on different canvases. The result of this function +# is directly visible in GUI. +# INPUTS +# * lnode1 -- node id of the first node +# * lnode2 -- node id of the second node +#**** +proc newGUILink { lnode1 lnode2 } { + global changed + + set link [newLink $lnode1 $lnode2] + if { $link == "" } { + return + } + if { [getNodeCanvas $lnode1] != [getNodeCanvas $lnode2] } { + set new_nodes [splitLink $link pseudo] + set orig_nodes [linkPeers $link] + set new_node1 [lindex $new_nodes 0] + set new_node2 [lindex $new_nodes 1] + set orig_node1 [lindex $orig_nodes 0] + set orig_node2 [lindex $orig_nodes 1] + set new_link1 [linkByPeers $orig_node1 $new_node1] + set new_link2 [linkByPeers $orig_node2 $new_node2] + setNodeMirror $new_node1 $new_node2 + setNodeMirror $new_node2 $new_node1 + setNodeName $new_node1 $orig_node2 + setNodeName $new_node2 $orig_node1 + setLinkMirror $new_link1 $new_link2 + setLinkMirror $new_link2 $new_link1 + } + redrawAll + set changed 1 + updateUndoLog +} + + +#****f* editor.tcl/button1-release +# NAME +# button1-release +# SYNOPSIS +# button1-release $c $x $y +# FUNCTION +# This procedure is called when a left mouse button is +# released. +# The result of this function depends on the actions +# during the button1-motion procedure. +# INPUTS +# * c -- tk canvas +# * x -- x coordinate +# * y -- y coordinate +#**** +proc button1-release { c x y } { + global node_list plot_list activetool newlink curobj grid + global changed undolog undolevel redolevel selectbox + global lastX lastY sizex sizey zoom + global autorearrange_enabled + global resizemode resizeobj + set redrawNeeded 0 + global oper_mode + global g_prefs + global g_view_locked + + set x [$c canvasx $x] + set y [$c canvasy $y] + + $c config -cursor left_ptr + # place a new link between items + if {$activetool == "link" && $newlink != ""} { + if { $g_view_locked == 1 } { return } + $c delete $newlink + set newlink "" + set destobj "" + foreach obj [$c find overlapping $x $y $x $y] { + if {[lindex [$c gettags $obj] 0] == "node"} { + set destobj $obj + break + } + } + if {$destobj != "" && $curobj != "" && $destobj != $curobj} { + set lnode1 [lindex [$c gettags $curobj] 1] + set lnode2 [lindex [$c gettags $destobj] 1] + if { [ifcByLogicalPeer $lnode1 $lnode2] == "" } { + set link [newLink $lnode1 $lnode2] + if { $link != "" } { + drawLink $link + redrawLink $link + updateLinkLabel $link + set changed 1 + } + } + } + # annotations + } elseif {$activetool == "rectangle" || $activetool == "oval" } { + if { $g_view_locked == 1 } { return } + popupAnnotationDialog $c 0 "false" + # edit text annotation + } elseif {$activetool == "text" } { + if { $g_view_locked == 1 } { return } + textEnter $c $x $y + } + + if { $changed == 1 } { + set regular true + if { [lindex [$c gettags $curobj] 0] == "nodelabel" } { + set node [lindex [$c gettags $curobj] 1] + selectNode $c [$c find withtag "node && $node"] + } + set selected {} + foreach img [$c find withtag "selected"] { + set node [lindex [$c gettags $img] 1] + lappend selected $node + set coords [$c coords $img] + set x [expr {[lindex $coords 0] / $zoom}] + set y [expr {[lindex $coords 1] / $zoom}] + if { $autorearrange_enabled == 0 && $g_prefs(gui_snap_grid)} { + set dx [expr {(int($x / $grid + 0.5) * $grid - $x) * $zoom}] + set dy [expr {(int($y / $grid + 0.5) * $grid - $y) * $zoom}] + $c move $img $dx $dy + set coords [$c coords $img] + set x [expr {[lindex $coords 0] / $zoom}] + set y [expr {[lindex $coords 1] / $zoom}] + } else { + set dx 0 + set dy 0 + } + if {$x < 0 || $y < 0 || $x > $sizex || $y > $sizey} { + set regular false + } + # nodes with four coordinates + if { [lindex [$c gettags $node] 0] == "oval" || + [lindex [$c gettags $node] 0] == "rectangle" } { + set bbox [$c bbox "selectmark && $node"] + # Boeing: bbox causes annotations to grow, subtract 5 + if { [llength $bbox] > 3 } { + set x1 [lindex $bbox 0] + set y1 [lindex $bbox 1] + set x2 [expr {[lindex $bbox 2] - 5}] + set y2 [expr {[lindex $bbox 3] - 5}] + setNodeCoords $node "$x1 $y1 $x2 $y2" + set redrawNeeded 1 + if {$x1 < 0 || $y1 < 0 || $x1 > $sizex || $y1 > $sizey || \ + $x2 < 0 || $y2 < 0 || $x2 > $sizex || $y2 > $sizey} { + set regular false + } + } + # nodes with two coordinates + } else { + setNodeCoords $node "$x $y" + } + if {[$c find withtag "nodelabel && $node"] != "" } { + $c move "nodelabel && $node" $dx $dy + set coords [$c coords "nodelabel && $node"] + set x [expr {[lindex $coords 0] / $zoom}] + set y [expr {[lindex $coords 1] / $zoom}] + setNodeLabelCoords $node "$x $y" + if {$x < 0 || $y < 0 || $x > $sizex || $y > $sizey} { + set regular false + } + } + $c move "selectmark && $node" $dx $dy + $c addtag need_redraw withtag "link && $node" + set changed 1 + if { $oper_mode == "exec" } { + # send node position update using x,y stored in node + set xy [getNodeCoords $node] ;# read new coordinates + sendNodePosMessage -1 $node -1 [lindex $xy 0] [lindex $xy 1] \ + -1 0 + widgets_move_node $c $node 1 + } + $c addtag need_redraw withtag "wlanlink && $node" + } ;# end of: foreach img selected + if {$regular == "true"} { + # user has dragged something within the canvas boundaries + foreach link [$c find withtag "link && need_redraw"] { + redrawLink [lindex [$c gettags $link] 1] + } + } else { + # user has dragged something beyond the canvas boundaries + .c config -cursor watch + loadCfg $undolog($undolevel) + redrawAll + if {$activetool == "select" } { + selectNodes $selected + } + set changed 0 + } + $c dtag link need_redraw + nodeEnter $c + + # $changed!=1 + } elseif {$activetool == "select" } { + if {$selectbox == ""} { + set x1 $x + set y1 $y + rearrange_off + } else { + set coords [$c coords $selectbox] + set x [lindex $coords 0] + set y [lindex $coords 1] + set x1 [lindex $coords 4] + set y1 [lindex $coords 5] + $c delete $selectbox + set selectbox "" + } + + if { $resizemode == "false" } { + # select tool mouse button release while drawing select box + set enclosed {} + # fix occasional error + if { $x == "" || $y == "" || $x1 == "" || $y1 == "" } { return } + foreach obj [$c find enclosed $x $y $x1 $y1] { + set tags [$c gettags $obj] + if {[lindex $tags 0] == "node" && [lsearch $tags selected] == -1} { + lappend enclosed $obj + } + if {[lindex $tags 0] == "oval" && [lsearch $tags selected] == -1} { + lappend enclosed $obj + } + if {[lindex $tags 0] == "rectangle" && [lsearch $tags selected] == -1} { + lappend enclosed $obj + } + if {[lindex $tags 0] == "text" && [lsearch $tags selected] == -1} { + lappend enclosed $obj + } + } + foreach obj $enclosed { + selectNode $c $obj + } + } else { + # select tool resizing an object by dragging its handles + # DYL bugfix. if x,y does not change, do not resize! + # fixes a bug where the object dissappears + if { $x != $x1 || $y != $y1 } { + setNodeCoords $resizeobj "$x $y $x1 $y1" + } + set redrawNeeded 1 + set resizemode false + } + } + + if { $redrawNeeded } { + set redrawNeeded 0 + redrawAll + } else { + raiseAll $c + } + update + updateUndoLog +} + + +#****f* editor.tcl/nodeEnter +# NAME +# nodeEnter +# SYNOPSIS +# nodeEnter $c +# FUNCTION +# This procedure prints the node id, node name and +# node model (if exists), as well as all the interfaces +# of the node in the status line. +# Information is presented for the node above which is +# the mouse pointer. +# INPUTS +# * c -- tk canvas +#**** +proc nodeEnter { c } { + global activetool + + set curtags [$c gettags current] + if { [lsearch -exact "node nodelabel" [lindex $curtags 0]] < 0 } { + return ;# allow this proc to be called from button1-release + } + set node [lindex $curtags 1] + set type [nodeType $node] + set name [getNodeName $node] + set model [getNodeModel $node] + if { $model != "" } { + set line "{$node} $name ($model):" + } else { + set line "{$node} $name:" + } + if { $type != "rj45" && $type != "tunnel" } { + foreach ifc [ifcList $node] { + set line "$line $ifc:[getIfcIPv4addr $node $ifc]" + } + } + set xy [getNodeCoords $node] + set line "$line <[lindex $xy 0], [lindex $xy 1]>" + .bottom.textbox config -text "$line" + widgetObserveNode $c $node +} + + +#****f* editor.tcl/linkEnter +# NAME +# linkEnter +# SYNOPSIS +# linkEnter $c +# FUNCTION +# This procedure prints the link id, link bandwidth +# and link delay in the status line. +# Information is presented for the link above which is +# the mouse pointer. +# INPUTS +# * c -- tk canvas +#**** +proc linkEnter {c} { + global activetool link_list + + set link [lindex [$c gettags current] 1] + if { [lsearch $link_list $link] == -1 } { + return + } + set line "$link: [getLinkBandwidthString $link] [getLinkDelayString $link]" + .bottom.textbox config -text "$line" +} + + +#****f* editor.tcl/anyLeave +# NAME +# anyLeave +# SYNOPSIS +# anyLeave $c +# FUNCTION +# This procedure clears the status line. +# INPUTS +# * c -- tk canvas +#**** +proc anyLeave {c} { + global activetool + + .bottom.textbox config -text "" +# Boeing + widgetObserveNode $c "" +# nodeHighlights $c "" off "" +# end Boeing +} + + +#****f* editor.tcl/checkIntRange +# NAME +# checkIntRange -- check integer range +# SYNOPSIS +# set check [checkIntRange $str $low $high] +# FUNCTION +# This procedure checks the input string to see if it is +# an integer between the low and high value. +# INPUTS +# str -- string to check +# low -- the bottom value +# high -- the top value +# RESULT +# * check -- set to 1 if the str is string between low and high +# value, 0 otherwise. +#**** +proc checkIntRange { str low high } { + if { $str == "" } { + return 1 + } + set str [string trimleft $str 0] + if { $str == "" } { + set str 0 + } + if { ![string is integer $str] } { + return 0 + } + if { $str < $low || $str > $high } { + return 0 + } + return 1 +} + +proc checkFloatRange { str low high } { + if { $str == "" } { + return 1 + } + set str [string trimleft $str 0] + if { $str == "" } { + set str 0 + } + if { ![string is double $str] } { + return 0 + } + if { $str < $low || $str > $high } { + return 0 + } + return 1 +} + +proc checkHostname { str } { + # per RFC 952 and RFC 1123, any letter, number, or hyphen + return [regexp {^[A-Za-z0-9-]+$} $str] +} + + +#****f* editor.tcl/focusAndFlash +# NAME +# focusAndFlash -- focus and flash +# SYNOPSIS +# focusAndFlash $W $count +# FUNCTION +# This procedure sets the focus on the bad entry field +# and on this filed it provides an effect of flashing +# for approximately 1 second. +# INPUTS +# * W -- textbox field that caused the bed entry +# * count -- the parameter that causes flashes. +# It can be left blank. +#**** +proc focusAndFlash {W {count 9}} { + global badentry + + set fg black + set bg white + + if { $badentry == -1 } { + return + } else { + set badentry 1 + } + + focus -force $W + if {$count<1} { + $W configure -foreground $fg -background $bg + set badentry 0 + } else { + if {$count%2} { + $W configure -foreground $bg -background $fg + } else { + $W configure -foreground $fg -background $bg + } + after 200 [list focusAndFlash $W [expr {$count - 1}]] + } +} + + +#****f* editor.tcl/popupConfigDialog +# NAME +# popupConfigDialog -- popup Configuration Dialog Box +# SYNOPSIS +# popupConfigDialog $c +# FUNCTION +# Dynamically creates a popup dialog box for configuring +# links or nodes in IMUNES. +# INPUTS +# * c -- canvas id +#**** +proc popupConfigDialog { c } { + global activetool router_model link_color oper_mode + global badentry curcanvas + global node_location systype + global plugin_img_del + set type "" + + set wi .popup + if { [winfo exists $wi ] } { + return + } + catch {destroy $wi} + toplevel $wi + + wm transient $wi . + wm resizable $wi 1 1 + + set object_type "" + set tk_type [lindex [$c gettags current] 0] + set target [lindex [$c gettags current] 1] + if { [lsearch {node nodelabel interface} $tk_type] > -1 } { + set object_type node + } + if { [lsearch {link linklabel} $tk_type] > -1 } { + set object_type link + } + if { [lsearch {oval} $tk_type] > -1 } { + set object_type oval + } + if { [lsearch {rectangle} $tk_type] > -1 } { + set object_type rectangle + } + if { [lsearch {text} $tk_type] > -1 } { + set object_type text + } + if { "$object_type" == ""} { + destroy $wi + return + } + if { $object_type == "link" } { + set n0 [lindex [linkPeers $target] 0] + set n1 [lindex [linkPeers $target] 1] + # Boeing: added tunnel check + #if { [nodeType $n0] == "rj45" || [nodeType $n1] == "rj45" || \ + # [nodeType $n0] == "tunnel" || [nodeType $n1] == "tunnel" } { + # destroy $wi + # return + #} + } + $c dtag node selected + $c delete -withtags selectmark + + switch -exact -- $object_type { + node { + set type [nodeType $target] + if { $type == "pseudo" } { + # + # Hyperlink to another canvas + # + destroy $wi + set curcanvas [getNodeCanvas [getNodeMirror $target]] + switchCanvas none + return + } + set model [getNodeModel $target] + set router_model $model + wm title $wi "$type configuration" + ttk::frame $wi.ftop -borderwidth 4 + ttk::entry $wi.ftop.name -width 16 \ + -validate focus -invalidcommand "focusAndFlash %W" + if { $type == "rj45" } { + ttk::label $wi.ftop.name_label -text "Physical interface:" + } elseif { $type == "tunnel" } { + ttk::label $wi.ftop.name_label -text "IP address of tunnel peer:" + } else { + ttk::label $wi.ftop.name_label -text "Node name:" + $wi.ftop.name configure -validatecommand {checkHostname %P} + } + $wi.ftop.name insert 0 [getNodeName $target] + set img [getNodeImage $target] + ttk::button $wi.ftop.img -image $img -command "popupCustomImage $target" + + if { $type == "rj45" } { + rj45ifclist $wi $target 0 + } + # execution server + global exec_servers node_location + set node_location [getNodeLocation $target] + set servers [lsort -dictionary [array names exec_servers]] + set servers "(none) $servers" + if { $node_location == "" } { set node_location "(none)" } + eval tk_optionMenu $wi.ftop.menu node_location $servers + pack $wi.ftop.img $wi.ftop.menu $wi.ftop.name $wi.ftop.name_label \ + -side right -padx 4 -pady 4 + # end Boeing + pack $wi.ftop -side top + + if { $type == "router" } { + ttk::frame $wi.model -borderwidth 4 + ttk::label $wi.model.label -text "Type:" + set runstate "disabled" + if { $oper_mode == "edit" } { + eval tk_optionMenu $wi.model.menu router_model \ + [getNodeTypeNames] + set runstate "normal" + } else { + tk_optionMenu $wi.model.menu router_model $model + } + # would be nice to update the image upon selection; binding to + # will not work + #tkwait variable router_model "customImageApply $wi $target" + set sock [lindex [getEmulPlugin $target] 2] + ttk::button $wi.model.services -text "Services..." -state $runstate \ + -command \ + "sendConfRequestMessage $sock $target services 0x1 -1 \"\"" + pack $wi.model.services $wi.model.menu $wi.model.label \ + -side right -padx 0 -pady 0 + pack $wi.model -side top + } + + if { $type == "wlan" } { + wlanConfigDialogHelper $wi $target 0 + } elseif { $type == "tunnel" } { + # + # tunnel controls + # + ttk::frame $wi.con2 + global conntap + set conntap [netconfFetchSection $target "tunnel-tap"] + if { $conntap == "" } { set conntap off } + # TODO: clean this up + ttk::radiobutton $wi.con2.dotap0 \ + -variable conntap -value off \ + -text "tunnel to another CORE emulation" + ttk::frame $wi.con2.key + ttk::label $wi.con2.key.lab -text "GRE key:" + ttk::entry $wi.con2.key.key -width 6 + ttk::radiobutton $wi.con2.dotap1 -state disabled \ + -variable conntap -value on \ + -text "tunnel to the virtual TAP interface of another system" + pack $wi.con2.key.lab $wi.con2.key.key -side left + pack $wi.con2.dotap0 -side top -anchor w + pack $wi.con2.key -side top + pack $wi.con2.dotap1 -side top -anchor w + pack $wi.con2 -side top + set key [netconfFetchSection $target "tunnel-key"] + if { $key == "" } { set key 1 } + $wi.con2.key.key insert 0 $key + + # TODO: clean this up + ttk::frame $wi.conn + ttk::label $wi.conn.label -text "Transport type:" + tk_optionMenu $wi.conn.conntype conntype "UDP" "TCP" + $wi.conn.conntype configure -state disabled + pack $wi.conn.label $wi.conn.conntype -side left -anchor w + pack $wi.conn -side top + global conntype + set conntype [netconfFetchSection $target "tunnel-type"] + if { $conntype == "" } { set conntype "UDP" } + + + # TODO: clean this up + ttk::frame $wi.linfo + ttk::label $wi.linfo.label -text "Local hook:" + ttk::entry $wi.linfo.local -state disabled + set localhook [netconfFetchSection $target "local-hook"] + if { $localhook == "" || $localhook == "(none)" } { + # automatically generate local hook name + set ifc [lindex [ifcList $target] 0] + if { $ifc != "" } { + set hname [info hostname] + set peer [peerByIfc $target $ifc] + set localhook "$hname$peer" + } else { + set localhook "(none)" + } + } + $wi.linfo.local insert 0 $localhook + pack $wi.linfo.label $wi.linfo.local -side left -anchor w + pack $wi.linfo -side top + + ttk::frame $wi.pinfo + ttk::label $wi.pinfo.label -text "Peer hook:" + ttk::entry $wi.pinfo.peer -state disabled + $wi.pinfo.peer insert 0 \ + [netconfFetchSection $target "peer-hook"] + pack $wi.pinfo.label $wi.pinfo.peer -side left -anchor w + pack $wi.pinfo -side top + } + + # interface list + if { [[typemodel $target].layer] == "NETWORK" } { + # canvas used for scrolling frames for each interface + ttk::frame $wi.ifaces + set height [expr {100 * [llength [ifcList $target]]}] + if { $height > 300 } { set height 300 } + canvas $wi.ifaces.c -height $height -highlightthickness 0 \ + -yscrollcommand "$wi.ifaces.scroll set" + scrollbar $wi.ifaces.scroll -command "$wi.ifaces.c yview" + pack $wi.ifaces.c -side left -fill both -expand 1 + pack $wi.ifaces.scroll -side right -fill y + pack $wi.ifaces -side top -fill both -expand 1 + set y 0 + + foreach ifc [lsort -ascii [ifcList $target]] { + set fr $wi.ifaces.c.if$ifc + ttk::labelframe $fr -text "Interface $ifc" + $wi.ifaces.c create window 4 $y -window $fr -anchor nw + incr y 100 + + set peer [peerByIfc $target $ifc] + if { [isEmane $peer] } { + ttk::frame $fr.opts + set caps [getCapabilities $peer "mobmodel"] + set cap [lindex $caps 0] + set cmd "sendConfRequestMessage -1 $target $cap 0x1 -1 \"\"" + ttk::button $fr.opts.cfg -command $cmd \ + -text "$cap options..." + pack $fr.opts.cfg -side left -padx 4 + pack $fr.opts -side top -anchor w + incr y 28 + } + + ttk::frame $fr.cfg + # + # MAC address + # + ttk::frame $fr.cfg.mac + ttk::label $fr.cfg.mac.addrl -text "MAC address" \ + -anchor w + set macaddr [getIfcMacaddr $target $ifc] + global if${ifc}_auto_mac + if { $macaddr == "" } { + set if${ifc}_auto_mac 1 + set state disabled + } else { + set if${ifc}_auto_mac 0 + set state normal + } + ttk::checkbutton $fr.cfg.mac.auto -text "auto-assign" \ + -variable if${ifc}_auto_mac \ + -command "macEntryHelper $wi $ifc" + ttk::entry $fr.cfg.mac.addrv -width 15 \ + -state $state + $fr.cfg.mac.addrv insert 0 $macaddr + pack $fr.cfg.mac.addrl $fr.cfg.mac.auto \ + $fr.cfg.mac.addrv -side left -padx 4 + pack $fr.cfg.mac -side top -anchor w + + # + # IPv4 address + # + ttk::frame $fr.cfg.ipv4 + ttk::label $fr.cfg.ipv4.addrl -text "IPv4 address" \ + -anchor w + ttk::entry $fr.cfg.ipv4.addrv -width 30 \ + -validate focus -invalidcommand "focusAndFlash %W" + $fr.cfg.ipv4.addrv insert 0 \ + [getIfcIPv4addr $target $ifc] + $fr.cfg.ipv4.addrv configure \ + -validatecommand {checkIPv4Net %P} + ttk::button $fr.cfg.ipv4.clear -image $plugin_img_del \ + -command "$fr.cfg.ipv4.addrv delete 0 end" + pack $fr.cfg.ipv4.addrl $fr.cfg.ipv4.addrv \ + $fr.cfg.ipv4.clear -side left + pack $fr.cfg.ipv4 -side top -anchor w -padx 4 + + # + # IPv6 address + # + ttk::frame $fr.cfg.ipv6 + ttk::label $fr.cfg.ipv6.addrl -text "IPv6 address" \ + -anchor w + ttk::entry $fr.cfg.ipv6.addrv -width 30 \ + -validate focus -invalidcommand "focusAndFlash %W" + $fr.cfg.ipv6.addrv insert 0 \ + [getIfcIPv6addr $target $ifc] + $fr.cfg.ipv6.addrv configure -validatecommand {checkIPv6Net %P} + ttk::button $fr.cfg.ipv6.clear -image $plugin_img_del \ + -command "$fr.cfg.ipv6.addrv delete 0 end" + pack $fr.cfg.ipv6.addrl $fr.cfg.ipv6.addrv \ + $fr.cfg.ipv6.clear -side left + pack $fr.cfg.ipv6 -side top -anchor w -padx 4 + pack $fr.cfg -side left + bind $fr.cfg <4> "$wi.ifaces.c yview scroll -1 units" + bind $fr.cfg <5> "$wi.ifaces.c yview scroll 1 units" + } ;# end foreach ifc + $wi.ifaces.c configure -scrollregion "0 0 250 $y" + # mouse wheel bindings for scrolling + foreach ctl [list $wi.ifaces.c $wi.ifaces.scroll] { + bind $ctl <4> "$wi.ifaces.c yview scroll -1 units" + bind $ctl <5> "$wi.ifaces.c yview scroll 1 units" + bind $ctl "$wi.ifaces.c yview scroll -1 units" + bind $ctl "$wi.ifaces.c yview scroll 1 units" + } + } + } + oval { + destroy $wi + annotationConfig $c $target + return + } + rectangle { + destroy $wi + annotationConfig $c $target + return + } + text { + destroy $wi + annotationConfig $c $target + return + } + link { + wm title $wi "link configuration" + ttk::frame $wi.ftop -borderwidth 6 + set nam0 [getNodeName $n0] + set nam1 [getNodeName $n1] + ttk::label $wi.ftop.name_label -justify left -text \ + "Link from $nam0 to $nam1" + pack $wi.ftop.name_label -side right + pack $wi.ftop -side top + + set spinbox [getspinbox] + ttk::frame $wi.bandwidth -borderwidth 4 + global link_preset_val + set link_preset_val unlimited + set linkpreMenu [tk_optionMenu $wi.bandwidth.linkpre link_preset_val a] + pack $wi.bandwidth.linkpre -side top + linkPresets $wi $linkpreMenu init + ttk::label $wi.bandwidth.label -anchor e \ + -text "Bandwidth (bps):" + $spinbox $wi.bandwidth.value -justify right -width 10 \ + -validate focus -invalidcommand "focusAndFlash %W" + $wi.bandwidth.value insert 0 [getLinkBandwidth $target] + $wi.bandwidth.value configure \ + -validatecommand {checkIntRange %P 0 1000000000} \ + -from 0 -to 1000000000 -increment 1000000 + pack $wi.bandwidth.value $wi.bandwidth.label \ + -side right + pack $wi.bandwidth -side top -anchor e + + ttk::frame $wi.delay -borderwidth 4 + ttk::label $wi.delay.label -anchor e -text "Delay (us):" + $spinbox $wi.delay.value -justify right -width 10 \ + -validate focus -invalidcommand "focusAndFlash %W" + $wi.delay.value insert 0 [getLinkDelay $target] + $wi.delay.value configure \ + -validatecommand {checkIntRange %P 0 10000000} \ + -from 0 -to 10000000 -increment 5 + pack $wi.delay.value $wi.delay.label -side right + pack $wi.delay -side top -anchor e + + ttk::frame $wi.ber -borderwidth 4 + if { [lindex $systype 0] == "Linux" } { + set bertext "Loss (%):" + set berinc 1 + set bermax 100 + } else { ;# netgraph uses BER + set bertext "BER (1/N):" + set berinc 1000 + set bermax 10000000000000 + } + ttk::label $wi.ber.label -anchor e -text $bertext + $spinbox $wi.ber.value -justify right -width 10 \ + -validate focus -invalidcommand "focusAndFlash %W" + $wi.ber.value insert 0 [getLinkBER $target] + $wi.ber.value configure \ + -validatecommand "checkFloatRange %P 0 $bermax" \ + -from 0 -to $bermax -increment $berinc + pack $wi.ber.value $wi.ber.label -side right + pack $wi.ber -side top -anchor e + + ttk::frame $wi.dup -borderwidth 4 + ttk::label $wi.dup.label -anchor e -text "Duplicate (%):" + $spinbox $wi.dup.value -justify right -width 10 \ + -validate focus -invalidcommand "focusAndFlash %W" + $wi.dup.value insert 0 [getLinkDup $target] + $wi.dup.value configure \ + -validatecommand {checkFloatRange %P 0 50} \ + -from 0 -to 50 -increment 1 + pack $wi.dup.value $wi.dup.label -side right + pack $wi.dup -side top -anchor e + +# Boeing: jitter +# frame $wi.jitter -borderwidth 4 +# label $wi.jitter.label -anchor e -text "Jitter (us):" +# spinbox $wi.jitter.value -bg white -justify right -width 10 \ +# -validate focus -invalidcommand "focusAndFlash %W" +# $wi.jitter.value insert 0 [getLinkJitter $target] +# $wi.jitter.value configure \ +# -validatecommand {checkIntRange %P 0 10000000} \ +# -from 0 -to 10000000 -increment 5 +# pack $wi.jitter.value $wi.jitter.label -side right +# pack $wi.jitter -side top -anchor e +# end Boeing + + ttk::frame $wi.color -borderwidth 4 + ttk::label $wi.color.label -anchor e -text "Color:" + set link_color [getLinkColor $target] + tk_optionMenu $wi.color.value link_color \ + Red Green Blue Yellow Magenta Cyan Black + pack $wi.color.value $wi.color.label -side right + pack $wi.color -side top -anchor e + + ttk::frame $wi.width -borderwidth 4 + ttk::label $wi.width.label -anchor e -text "Width:" + $spinbox $wi.width.value -justify right -width 10 \ + -validate focus -invalidcommand "focusAndFlash %W" + $wi.width.value insert 0 [getLinkWidth $target] + $wi.width.value configure \ + -validatecommand {checkIntRange %P 1 8} \ + -from 1 -to 8 -increment 1 + pack $wi.width.value $wi.width.label -side right + pack $wi.width -side top -anchor e + } + } ;# end switch + + ttk::frame $wi.butt -borderwidth 6 + # NOTE: plugins.tcl:popupCapabilityConfig may read this command option + ttk::button $wi.butt.apply -text "Apply" -command \ + "popupConfigApply $wi $object_type $target 0" + focus $wi.butt.apply + # Boeing: remove range circles upon cancel + if {$type == "wlan"} { + set cancelcmd "set badentry -1 ; destroy $wi;" + set cancelcmd "$cancelcmd updateRangeCircles $target 0" + } else { + set cancelcmd "set badentry -1 ; destroy $wi" + } + ttk::button $wi.butt.cancel -text "Cancel" -command $cancelcmd + #end Boeing + pack $wi.butt.cancel $wi.butt.apply -side right + pack $wi.butt -side bottom + bind $wi $cancelcmd +# bind $wi "popupConfigApply $wi $object_type $target 0" +} + +# toggle the state of the mac address entry, and insert MAC address template +proc macEntryHelper { wi ifc } { + set fr $wi.ifaces.c.if$ifc + set ctl $fr.cfg.mac.addrv + set s normal + if { [$ctl cget -state] == $s } { set s disabled } + $ctl configure -state $s + + if { [$ctl get] == "" } { $ctl insert 0 "00:00:00:00:00:00" } +} + + +#****f* editor.tcl/popupConfigApply +# NAME +# popupConfigApply -- popup configuration apply +# SYNOPSIS +# popupConfigApply $w $object_type $target $phase +# FUNCTION +# This procedure is called when the button apply is pressed in +# popup configuration dialog box. It reads different +# configuration parameters depending on the object_type. +# INPUTS +# * w -- widget +# * object_type -- describes the object type that is currently +# configured. It can be either link or node. +# * target -- node id of the configured node or link id of the +# configured link +# * phase -- This procedure is invoked in two diffenet phases +# to enable validation of the entry that was the last made. +# When calling this function always use the phase parameter +# set to 0. +#**** +proc popupConfigApply { wi object_type target phase } { + global changed oper_mode router_model link_color badentry + global customEnabled ipsecEnabled + global eid + + $wi config -cursor watch + update + if { $phase == 0 } { + set badentry 0 + focus . + after 100 "popupConfigApply $wi $object_type $target 1" + return + } elseif { $badentry } { + $wi config -cursor left_ptr + return + } + switch -exact -- $object_type { + # + # Node + # + node { + set type [nodeType $target] + set model [getNodeModel $target] + set name [string trim [$wi.ftop.name get]] + set changed_to_remote 0 + global node_location + if { $node_location != [getNodeLocation $target] } { + if { $node_location == "(none)" } { set node_location "" } + setNodeLocation $target $node_location + set changed 1 + } + set node_location "" + if { $name != [getNodeName $target] } { + setNodeName $target $name + set changed 1 + } + if { $oper_mode == "edit" && $type == "router" && \ + $router_model != $model } { + setNodeModel $target $router_model + set changed 1 + if { $router_model == "remote" } { set changed_to_remote 1 };#Boeing + } + +# Boeing - added wlan, remote, tunnel, ktunnel items + if { $type == "wlan" } { + wlanConfigDialogHelper $wi $target 1 + } elseif { $type == "tunnel" } { + # + # apply tunnel items + # + set ipaddr "$name/24" ;# tunnel name == IP address of peer + set oldipaddr [getIfcIPv4addr $target e0] + if { $ipaddr != $oldipaddr } { + setIfcIPv4addr $target e0 $ipaddr + } + global conntype conntap + set oldconntype [netconfFetchSection $target "tunnel-type"] + if { $oldconntype != $conntype } { + netconfInsertSection $target [list "tunnel-type" $conntype] + } + set oldconntap [netconfFetchSection $target "tunnel-tap"] + if { $oldconntap != $conntap } { + netconfInsertSection $target [list "tunnel-tap" $conntap] + } + set oldkey [netconfFetchSection $target "tunnel-key"] + set key [$wi.con2.key.key get] + if { $oldkey != $key } { + netconfInsertSection $target [list "tunnel-key" $key] + } + + set oldlocal [netconfFetchSection $target "local-hook"] + set local [$wi.linfo.local get] + if { $oldlocal != $local } { + netconfInsertSection $target [list "local-hook" $local] + } + + set oldpeer [netconfFetchSection $target "peer-hook"] + set peer [$wi.pinfo.peer get] + if { $oldpeer != $peer } { + netconfInsertSection $target [list "peer-hook" $peer] + } + } elseif { $type == "ktunnel" } { + # + # apply ktunnel items + # + set oldlocal [netconfFetchSection $target "local-hook"] + set local [$wi.linfo.local get] + if { $oldlocal != $local } { + netconfInsertSection $target [list "local-hook" $local] + } +# Boeing changing to interface name for RJ45 +# } elseif { $type == "rj45" } { +# # +# # apply rj45 items +# # +# set ifcName [string trim [$wi.interface.name get]] +# puts "$ifcName\n" +# + } elseif { $type == "router" && [getNodeModel $target] == "remote" } { + if { $changed_to_remote == 0 } { + set i 1 + set remoteIP [string trim [$wi.remoteinfo.ip.text get $i.0 $i.end]] + if { $remoteIP != [router.remote.getRemoteIP $target] } { + router.remote.setRemoteIP $target $remoteIP + set changed 1 + } + set ifc [string trim [$wi.remoteinfo.ifc.text get $i.0 $i.end]] + if { $ifc != [router.remote.getCInterface $target] } { + router.remote.setCInterface $target $ifc + set changed 1 + } + set startcmd [string trim [$wi.remotecommands.start.text get $i.0 $i.end]] + if { $startcmd != [router.remote.getStartCmd $target] } { + router.remote.setStartCmd $target $startcmd + set changed 1 + } + set stopcmd [string trim [$wi.remotecommands.stop.text get $i.0 $i.end]] + if { $stopcmd != [router.remote.getStopCmd $target] } { + router.remote.setStopCmd $target $stopcmd + set changed 1 + } + } + } + + if {[[typemodel $target].layer] == "NETWORK"} { + foreach ifc [ifcList $target] { + set fr $wi.ifaces.c.if$ifc + set macaddr [$fr.cfg.mac.addrv get] + global if${ifc}_auto_mac + if { [set if${ifc}_auto_mac] == 1 } { set macaddr "" } + set oldmacaddr [getIfcMacaddr $target $ifc] + if { $macaddr != $oldmacaddr } { + setIfcMacaddr $target $ifc $macaddr + set changed 1 + } + set ipaddr [$fr.cfg.ipv4.addrv get] + set oldipaddr [getIfcIPv4addr $target $ifc] + if { $ipaddr != $oldipaddr } { + setIfcIPv4addr $target $ifc $ipaddr + set changed 1 + } + set ipaddr [$fr.cfg.ipv6.addrv get] + set oldipaddr [getIfcIPv6addr $target $ifc] + if { $ipaddr != $oldipaddr } { + setIfcIPv6addr $target $ifc $ipaddr + set changed 1 + } + } + } + } + + link { + set mirror [getLinkMirror $target] + set bw [$wi.bandwidth.value get] + if { $bw != [getLinkBandwidth $target] } { + setLinkBandwidth $target [$wi.bandwidth.value get] + if { $mirror != "" } { + setLinkBandwidth $mirror [$wi.bandwidth.value get] + } + set changed 1 + } + set dly [$wi.delay.value get] + if { $dly != [getLinkDelay $target] } { + setLinkDelay $target [$wi.delay.value get] + if { $mirror != "" } { + setLinkDelay $mirror [$wi.delay.value get] + } + set changed 1 + } + set ber [$wi.ber.value get] + if { $ber != [getLinkBER $target] } { + setLinkBER $target [$wi.ber.value get] + if { $mirror != "" } { + setLinkBER $mirror [$wi.ber.value get] + } + set changed 1 + } + set dup [$wi.dup.value get] + if { $dup != [getLinkDup $target] } { + setLinkDup $target [$wi.dup.value get] + if { $mirror != "" } { + setLinkDup $mirror [$wi.dup.value get] + } + set changed 1 + } + if { $link_color != [getLinkColor $target] } { + setLinkColor $target $link_color + if { $mirror != "" } { + setLinkColor $mirror $link_color + } + set changed 1 + } + set width [$wi.width.value get] + if { $width != [getLinkWidth $target] } { + setLinkWidth $target [$wi.width.value get] + if { $mirror != "" } { + setLinkWidth $mirror [$wi.width.value get] + } + set changed 1 + } + if { $changed == 1 && $oper_mode == "exec" } { + execSetLinkParams $eid $target + } + } + + } + + popdownConfig $wi +} + + +#****f* editor.tcl/printCanvas +# NAME +# printCanvas -- print canvas +# SYNOPSIS +# printCanvas $w +# FUNCTION +# This procedure is called when the print button in +# print dialog box is pressed. +# INPUTS +# * w -- print dialog widget +#**** +proc printCanvas { w } { + global sizex sizey + + set prncmd [$w.e1 get] + destroy $w + set p [open "|$prncmd" WRONLY] + puts $p [.c postscript -height $sizey -width $sizex -x 0 -y 0 -rotate yes -pageheight 297m -pagewidth 210m] + close $p +} + + +#****f* editor.tcl/deleteSelection +# NAME +# deleteSelection -- delete selection +# SYNOPSIS +# deleteSelection +# FUNCTION +# By calling this procedure all the selected nodes in imunes will +# be deleted. +#**** +proc deleteSelection { } { + global changed + global background + global viewid + catch {unset viewid} + .c config -cursor watch; update + + foreach lnode [selectedNodes] { + if { $lnode != "" } { + removeGUINode $lnode + } + set changed 1 + } + + raiseAll .c + updateUndoLog + .c config -cursor left_ptr + .bottom.textbox config -text "" +} + + +proc assignSelection { server } { + global changed + .c config -cursor watch; update + + foreach node [selectedNodes] { + if { $node != "" } { + setNodeLocation $node $server + } + set changed 1 + } + + redrawAll + updateUndoLog + .c config -cursor left_ptr + .bottom.textbox config -text "" +} + + +proc align2grid {} { + global sizex sizey grid zoom changed + + set node_objects [.c find withtag node] + if { [llength $node_objects] == 0 } { + return + } + + set step [expr {$grid * 4}] + + for { set x $step } { $x <= [expr {$sizex - $step}] } { incr x $step } { + for { set y $step } { $y <= [expr {$sizey - $step}] } { incr y $step } { + if { [llength $node_objects] == 0 } { + set changed 1 + updateUndoLog + redrawAll + return + } + set node [lindex [.c gettags [lindex $node_objects 0]] 1] + set node_objects [lreplace $node_objects 0 0] + setNodeCoords $node "$x $y" + lassign [getDefaultLabelOffsets [nodeType $node]] dx dy + setNodeLabelCoords $node "[expr {$x + $dx}] [expr {$y + $dy}]" + } + } +} + +#****f* editor.tcl/rearrange +# NAME +# rearrange +# SYNOPSIS +# rearrange $mode +# FUNCTION +# This procedure rearranges the position of nodes in imunes. +# It can be used to rearrange all the nodes or only the selected +# nodes. +# INPUTS +# * mode -- when set to "selected" only the selected nodes will be +# rearranged. +#**** +proc rearrange { mode } { + global link_list autorearrange_enabled sizex sizey curcanvas zoom activetool + + set activetool select + + if { $autorearrange_enabled } { + rearrange_off + return + } + set autorearrange_enabled 1 + .bottom.mbuf config -text "autorearrange" + if { $mode == "selected" } { + .menubar.tools entryconfigure "Auto rearrange all" -state disabled + .menubar.tools entryconfigure "Auto rearrange all" -indicatoron off + .menubar.tools entryconfigure "Auto rearrange selected" -indicatoron on + set tagmatch "node && selected" + } else { + .menubar.tools entryconfigure "Auto rearrange all" -indicatoron on + .menubar.tools entryconfigure "Auto rearrange selected" -state disabled + .menubar.tools entryconfigure "Auto rearrange selected" -indicatoron off + set tagmatch "node" + } + set otime [clock clicks -milliseconds] + while { $autorearrange_enabled } { + set ntime [clock clicks -milliseconds] + if { $otime == $ntime } { + set dt 0.001 + } else { + set dt [expr {($ntime - $otime) * 0.001}] + if { $dt > 0.2 } { + set dt 0.2 + } + set otime $ntime + } + + set objects [.c find withtag $tagmatch] + set peer_objects [.c find withtag node] + foreach obj $peer_objects { + set node [lindex [.c gettags $obj] 1] + set coords [.c coords $obj] + set x [expr {[lindex $coords 0] / $zoom}] + set y [expr {[lindex $coords 1] / $zoom}] + set x_t($node) $x + set y_t($node) $y + + if { $x > 0 } { + set fx [expr {1000 / ($x * $x + 100)}] + } else { + set fx 10 + } + set dx [expr {$sizex - $x}] + if { $dx > 0 } { + set fx [expr {$fx - 1000 / ($dx * $dx + 100)}] + } else { + set fx [expr {$fx - 10}] + } + + if { $y > 0 } { + set fy [expr {1000 / ($y * $y + 100)}] + } else { + set fy 10 + } + set dy [expr {$sizey - $y}] + if { $dy > 0 } { + set fy [expr {$fy - 1000 / ($dy * $dy + 100)}] + } else { + set fy [expr {$fy - 10}] + } + set fx_t($node) $fx + set fy_t($node) $fy + } + + foreach obj $objects { + set node [lindex [.c gettags $obj] 1] + set i [lsearch -exact $peer_objects $obj] + set peer_objects [lreplace $peer_objects $i $i] + set x $x_t($node) + set y $y_t($node) + foreach other_obj $peer_objects { + set other [lindex [.c gettags $other_obj] 1] + set o_x $x_t($other) + set o_y $y_t($other) + set dx [expr {$x - $o_x}] + set dy [expr {$y - $o_y}] + set d [expr {hypot($dx, $dy)}] + set d2 [expr {$d * $d}] + set p_fx [expr {1000.0 * $dx / ($d2 * $d + 100)}] + set p_fy [expr {1000.0 * $dy / ($d2 * $d + 100)}] + if {[linkByPeers $node $other] != ""} { + set p_fx [expr {$p_fx - $dx * $d2 * .0000000005}] + set p_fy [expr {$p_fy - $dy * $d2 * .0000000005}] + } + set fx_t($node) [expr {$fx_t($node) + $p_fx}] + set fy_t($node) [expr {$fy_t($node) + $p_fy}] + set fx_t($other) [expr {$fx_t($other) - $p_fx}] + set fy_t($other) [expr {$fy_t($other) - $p_fy}] + } + + foreach link $link_list { + set nodes [linkPeers $link] + if { [getNodeCanvas [lindex $nodes 0]] != $curcanvas || + [getNodeCanvas [lindex $nodes 1]] != $curcanvas || + [getLinkMirror $link] != "" } { + continue + } + set peers [linkPeers $link] + set coords0 [getNodeCoords [lindex $peers 0]] + set coords1 [getNodeCoords [lindex $peers 1]] + set o_x \ + [expr {([lindex $coords0 0] + [lindex $coords1 0]) * .5}] + set o_y \ + [expr {([lindex $coords0 1] + [lindex $coords1 1]) * .5}] + set dx [expr {$x - $o_x}] + set dy [expr {$y - $o_y}] + set d [expr {hypot($dx, $dy)}] + set d2 [expr {$d * $d}] + set fx_t($node) \ + [expr {$fx_t($node) + 500.0 * $dx / ($d2 * $d + 100)}] + set fy_t($node) \ + [expr {$fy_t($node) + 500.0 * $dy / ($d2 * $d + 100)}] + } + } + + foreach obj $objects { + set node [lindex [.c gettags $obj] 1] + if { [catch "set v_t($node)" v] } { + set vx 0.0 + set vy 0.0 + } else { + set vx [lindex $v_t($node) 0] + set vy [lindex $v_t($node) 1] + } + set vx [expr {$vx + 1000.0 * $fx_t($node) * $dt}] + set vy [expr {$vy + 1000.0 * $fy_t($node) * $dt}] + set dampk [expr {0.5 + ($vx * $vx + $vy * $vy) * 0.00001}] + set vx [expr {$vx * exp( - $dampk * $dt)}] + set vy [expr {$vy * exp( - $dampk * $dt)}] + set dx [expr {$vx * $dt}] + set dy [expr {$vy * $dt}] + set x [expr {$x_t($node) + $dx}] + set y [expr {$y_t($node) + $dy}] + set v_t($node) "$vx $vy" + + setNodeCoords $node "$x $y" + set e_dx [expr {$dx * $zoom}] + set e_dy [expr {$dy * $zoom}] + .c move $obj $e_dx $e_dy + set img [.c find withtag "selectmark && $node"] + .c move $img $e_dx $e_dy + set img [.c find withtag "nodelabel && $node"] + .c move $img $e_dx $e_dy + set x [expr {[lindex [.c coords $img] 0] / $zoom}] + set y [expr {[lindex [.c coords $img] 1] / $zoom}] + setNodeLabelCoords $node "$x $y" + .c addtag need_redraw withtag "link && $node" + } + foreach link [.c find withtag "link && need_redraw"] { + redrawLink [lindex [.c gettags $link] 1] + } + .c dtag link need_redraw + update + } + + rearrange_off + .bottom.mbuf config -text "" +} + +proc rearrange_off { } { + global autorearrange_enabled + set autorearrange_enabled 0 + .menubar.tools entryconfigure "Auto rearrange all" -state normal + .menubar.tools entryconfigure "Auto rearrange all" -indicatoron off + .menubar.tools entryconfigure "Auto rearrange selected" -state normal + .menubar.tools entryconfigure "Auto rearrange selected" -indicatoron off +} + + +#****f* editor.tcl/switchCanvas +# NAME +# switchCanvas -- switch canvas +# SYNOPSIS +# switchCanvas $direction +# FUNCTION +# This procedure switches the canvas in one of the defined +# directions (previous, next, first and last). +# INPUTS +# * direction -- the direction of switching canvas. Can be: prev -- +# previus, next -- next, first -- first, last -- last. +#**** +proc switchCanvas { direction } { + global canvas_list curcanvas + global sizex sizey + + set i [lsearch $canvas_list $curcanvas] + switch -exact -- $direction { + prev { + incr i -1 + if { $i < 0 } { + set curcanvas [lindex $canvas_list end] + } else { + set curcanvas [lindex $canvas_list $i] + } + } + next { + incr i + if { $i >= [llength $canvas_list] } { + set curcanvas [lindex $canvas_list 0] + } else { + set curcanvas [lindex $canvas_list $i] + } + } + first { + set curcanvas [lindex $canvas_list 0] + } + last { + set curcanvas [lindex $canvas_list end] + } + } + + .hframe.t delete all + set x 0 + foreach canvas $canvas_list { + set text [.hframe.t create text 0 0 \ + -text "[getCanvasName $canvas]" -tags "text $canvas"] + set ox [lindex [.hframe.t bbox $text] 2] + set oy [lindex [.hframe.t bbox $text] 3] + set tab [.hframe.t create polygon $x 0 [expr {$x + 7}] 18 \ + [expr {$x + 2 * $ox + 17}] 18 [expr {$x + 2 * $ox + 24}] 0 $x 0 \ + -fill gray -tags "tab $canvas"] + set line [.hframe.t create line 0 0 $x 0 [expr {$x + 7}] 18 \ + [expr {$x + 2 * $ox + 17}] 18 [expr {$x + 2 * $ox + 24}] 0 999 0 \ + -fill #808080 -width 2 -tags "line $canvas"] + .hframe.t coords $text [expr {$x + $ox + 12}] [expr {$oy + 2}] + .hframe.t raise $text + incr x [expr {2 * $ox + 17}] + } + incr x 7 + .hframe.t raise "$curcanvas" + .hframe.t itemconfigure "tab && $curcanvas" -fill #e0e0e0 + .hframe.t configure -scrollregion "0 0 $x 18" + update + set width [lindex [.hframe.t configure -width] 4] + set lborder [lindex [.hframe.t bbox "tab && $curcanvas"] 0] + set rborder [lindex [.hframe.t bbox "tab && $curcanvas"] 2] + set lmargin [expr {[lindex [.hframe.t xview] 0] * $x - 1}] + set rmargin [expr {[lindex [.hframe.t xview] 1] * $x + 1}] + if { $lborder < $lmargin } { + .hframe.t xview moveto [expr {1.0 * ($lborder - 10) / $x}] + } + if { $rborder > $rmargin } { + .hframe.t xview moveto [expr {1.0 * ($rborder - $width + 10) / $x}] + } + + set sizex [lindex [getCanvasSize $curcanvas] 0] + set sizey [lindex [getCanvasSize $curcanvas] 1] + + redrawAll +} + +proc resizeCanvasPopup {} { + global curcanvas + + set w .canvasSizeScaleDialog + catch {destroy $w} + toplevel $w + + wm transient $w . + wm title $w "Canvas Size and Scale" + + frame $w.buttons + pack $w.buttons -side bottom -fill x -pady 2m + button $w.buttons.print -text "Apply" -command "resizeCanvasApply $w" + button $w.buttons.cancel -text "Cancel" -command "destroy $w" + pack $w.buttons.print $w.buttons.cancel -side left -expand 1 + + set cursize [getCanvasSize $curcanvas] + set x [lindex $cursize 0] + set y [lindex $cursize 1] + set scale [getCanvasScale $curcanvas] + set refpt [getCanvasRefPoint $curcanvas] + set refx [lindex $refpt 0] + set refy [lindex $refpt 1] + set latitude [lindex $refpt 2] + set longitude [lindex $refpt 3] + set altitude [lindex $refpt 4] + + + labelframe $w.size -text "Size" + frame $w.size.pixels + pack $w.size $w.size.pixels -side top -padx 4 -pady 4 -fill x + spinbox $w.size.pixels.x -bg white -width 5 + $w.size.pixels.x insert 0 $x + $w.size.pixels.x configure -from 300 -to 5000 -increment 2 + label $w.size.pixels.label -text "W x" + spinbox $w.size.pixels.y -bg white -width 5 + $w.size.pixels.y insert 0 $y + $w.size.pixels.y configure -from 300 -to 5000 -increment 2 + label $w.size.pixels.label2 -text "H pixels" + pack $w.size.pixels.x $w.size.pixels.label $w.size.pixels.y \ + $w.size.pixels.label2 -side left -pady 2 -padx 2 -fill x + + frame $w.size.meters + pack $w.size.meters -side top -padx 4 -pady 4 -fill x + spinbox $w.size.meters.x -bg white -width 7 + $w.size.meters.x configure -from 300 -to 10000 -increment 100 + label $w.size.meters.label -text "x" + spinbox $w.size.meters.y -bg white -width 7 + $w.size.meters.y configure -from 300 -to 10000 -increment 100 + label $w.size.meters.label2 -text "meters" + pack $w.size.meters.x $w.size.meters.label $w.size.meters.y \ + $w.size.meters.label2 -side left -pady 2 -padx 2 -fill x + + labelframe $w.scale -text "Scale" + frame $w.scale.ppm + pack $w.scale $w.scale.ppm -side top -padx 4 -pady 4 -fill x + label $w.scale.ppm.label -text "100 pixels =" + entry $w.scale.ppm.metersper100 -bg white -width 10 + $w.scale.ppm.metersper100 insert 0 $scale + label $w.scale.ppm.label2 -text "meters" + pack $w.scale.ppm.label $w.scale.ppm.metersper100 \ + $w.scale.ppm.label2 -side left -pady 2 -padx 2 -fill x + + bind $w.size.pixels.x