From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-oi0-x229.google.com (mail-oi0-x229.google.com [IPv6:2607:f8b0:4003:c06::229]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id C19B721F308 for ; Mon, 23 Mar 2015 16:02:29 -0700 (PDT) Received: by oier21 with SMTP id r21so153965047oie.1 for ; Mon, 23 Mar 2015 16:02:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=YluGTNQaHX83mb7KIGsBkPLWJuJGb14xbthJr4+Fb3s=; b=md3QnCMySXQqbyyuJ6x1t4THvENfarQV+BKk4TdSGIaEL6nDM48j/ePWguqlg/pce3 dgBkowRYvyAqMzV4QK2q9Zf5W7UZtfh5+hea7BkYuwYLRIBX7hXgzYGo9cXuvIdlrbfO Pgqz2VjnkvWo6/lSqK9Lt8J4uJQC1H9X8IOeDNzNHLttYTQn+uLQqeFQOh2lZNLL234+ 9v3w+0oqak1gV54Xr6fyDnuwlTRv+4uLNxNzI5IbD52U75TQbuRQ8Nbzaon9rrCLo5UQ RJY4LOemAeBjDX2NguTduKQ9rQb96mSHGsJ7Qqc2ULARE/yu2RBMCtdpFON6T64Ejy2L ORsw== MIME-Version: 1.0 X-Received: by 10.202.175.76 with SMTP id y73mr971781oie.81.1427151748934; Mon, 23 Mar 2015 16:02:28 -0700 (PDT) Received: by 10.202.51.66 with HTTP; Mon, 23 Mar 2015 16:02:28 -0700 (PDT) In-Reply-To: References: Date: Mon, 23 Mar 2015 16:02:28 -0700 Message-ID: From: Dave Taht To: John Knight Content-Type: multipart/related; boundary=001a113ce60c0955d70511fca919 Cc: "dnsmasq-discuss@lists.thekelleys.org.uk" , "cerowrt-devel@lists.bufferbloat.net" Subject: Re: [Cerowrt-devel] [Dnsmasq-discuss] dnsmasq 2.55 failures X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Mar 2015 23:02:59 -0000 --001a113ce60c0955d70511fca919 Content-Type: multipart/alternative; boundary=001a113ce60c0955d50511fca918 --001a113ce60c0955d50511fca918 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Mon, Mar 23, 2015 at 3:31 PM, John Knight wrote= : > Hi, > > > > We use dnsmasq 2.55 in our Linksys routers. We have generally had few > problems with dnsmasq, but recently one of our customers reported a failu= re > that did not recover. > I have seen a failure with dns for ipv6 on dnsmasq like this (2-3 days of uptime, then spiraling off into a unresponsive loop) as recently as 2.72. Since ipv6 has now been rolled out universally across comcast's services and this is (to my knowledge) the only crash bug dnsmasq has anymore, I have been meaning to get the 2.73rc1 release candidate up and running full time in an mixed ipv4/ipv6 environment and to pound it flat with queries for some time now. I hope to deploy that candidate in the lab in a week or so. More eyeballs would be helpful on finally tracking it down. What I typically do is pound through the alexa top 1 million, repeatedly, and also namebench, other tests are feasible. I have some hope that the edns0 bugfix in this release candidate actually fixes it. The five years of dnsmasq releases since 2.55 have had many bug fixes (see release notes) and upgrades (notably dnssec), also, and it is well worth upgrading your userbase even if this fix remains difficult to find. folk on your side of the firmware might also benefit from seeing jim gettys do his "insecurity in home embedded devices" talk, filmed here: http://cyber.law.harvard.edu/events/luncheon/2014/06/gettys and updated considerably since, with new data. https://gettys.wordpress.com/2014/10/06/bufferbloat-and-other-challenges/ > > > On the customer=E2=80=99s router, the maximum number of dhcp clients is 5= 0. The > customer happens to be a hotel and experienced a high usage rate and > exceeded the 50 dhcp client limit. As expected, the 50 active clients > received their IP address and those over 50 did not. However, the custom= er > noticed that dns stopped working when this happened. The CPU usage went = to > 50% (49.4% was logged to dnsmasq by top). This may be 100% of single CPU > as this is a dual CPU router. The environment is a mixed environment of > both IPv4 and IPv6=E2=80=A6 I believe we only use dnsmasq for IPv6 for th= e dns > capability; ipv4 uses dhcp and dns capability from dnsmasq. The customer > goes on to say that dhcp renewals were not being handled as well. Custom= er > has also added that sometimes they see issue with only 30 active dhcp use= rs > or so. Apparently it requires a good number of users before it happens= =E2=80=A6 > and it does not occur immediately=E2=80=A6. Sometimes a few days or more = before it > happens. > > > > I looked through some of your release notes and noticed some similarities > on some bug reports, but did not see an exact match. Does any of this ma= ke > sense to you? We tried reproducing this in our lab and were unsuccessful > simulating the scenario. We realize that our dnsmasq version is pretty o= ld > and a lot of fixes may have been applied since version 2.55. If there is= a > good chance that the issues seen have been fixed in a later release, we > will consider upgrading to a newer version. If you could comment on the > likelihood of a fix already being made, I would appreciate it. Since we > cannot reproduce the problem, we will likely have to apply a newer versio= n > (hopefully very stable) and have customer try it=E2=80=A6 something we wo= uld prefer > to avoid unless we have some confidence that the problem may already be > fixed in the newer release. > > > > Thank you for your time. I look forward to hearing from you. > > > > Best Regards and thanks, > > > > John Knight > > > > *JOHN KNIGHT * > Senior Software Engineer > > *Belkin International * > > O +1 949 238 4543 > M +1 949 351 1020 > [image: Belkin-WeMo-Linksys] > > > > > __________________________________________________________________ > Confidential This e-mail and any files transmitted with it are the proper= ty > of Belkin International, Inc. and/or its affiliates, are confidential, an= d > are intended solely for the use of the individual or entity to whom this > e-mail is addressed. If you are not one of the named recipients or > otherwise have reason to believe that you have received this e-mail in > error, please notify the sender and delete this message immediately from > your computer. Any other use, retention, dissemination, forwarding, > printing or copying of this e-mail is strictly prohibited. Pour la versio= n > fran=C3=A7aise: http://www.belkin.com/email-notice/French.html F=C3=BCr d= ie > deutsche =C3=9Cbersetzung: http://www.belkin.com/email-notice/German.html > __________________________________________________________________ > > _______________________________________________ > Dnsmasq-discuss mailing list > Dnsmasq-discuss@lists.thekelleys.org.uk > http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss > > --=20 Dave T=C3=A4ht Let's make wifi fast, less jittery and reliable again! https://plus.google.com/u/0/107942175615993706558/posts/TVX3o84jjmb --001a113ce60c0955d50511fca918 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On Mon, Mar 23, 2015 at 3:31 PM, John Knight <John.Knight@belkin.= com> wrote:

Hi,

=C2=A0

We use dnsmasq 2.55 in our Linksys routers.=C2=A0 We= have generally had few problems with dnsmasq, but recently one of our cust= omers reported a failure that did not recover.

=

I have seen a failure with dns for ipv6 on dnsmasq like= this (2-3 days of uptime, then spiraling off into a unresponsive loop) as = recently as 2.72. Since ipv6 has now been rolled out universally across com= cast's services and this is (to my knowledge) the only crash bug dnsmas= q has anymore, I have been meaning to get the 2.73rc1 release candidate up = and running full time in an mixed ipv4/ipv6 environment and to pound it fla= t with queries for some time now. I hope to deploy that candidate in the la= b in a week or so. More eyeballs would be helpful on finally tracking it do= wn. What I typically do is pound through the alexa top 1 million, repeatedl= y, and also namebench, other tests are feasible.=C2=A0 I have some hope tha= t the edns0 bugfix in this release candidate actually fixes it.
<= br>
The five years of dnsmasq releases since 2.55 have had many b= ug fixes (see release notes) and upgrades (notably dnssec), also, and it is= well worth upgrading your userbase even if this fix remains difficult to f= ind.=C2=A0

folk on your side of the firmware might= also benefit from seeing jim gettys do his "insecurity in home embedd= ed devices" talk, filmed here:


and updated considerably since, with new data.

https://gettys.wordpress.com/2014/10/06/bufferbloat-and-other-chal= lenges/
=C2=A0

=C2=A0

On the customer=E2=80=99s router, the maximum number= of dhcp clients is 50.=C2=A0 The customer happens to be a hotel and experi= enced a high usage rate and exceeded the 50 dhcp client limit.=C2=A0 As exp= ected, the 50 active clients received their IP address and those over 50 did not.=C2=A0 However, the customer noticed that dns st= opped working when this happened.=C2=A0 The CPU usage went to 50% (49.4% wa= s logged to dnsmasq by top).=C2=A0 This may be 100% of single CPU as this i= s a dual CPU router.=C2=A0 The environment is a mixed environment of both IPv4 and IPv6=E2=80=A6 I believe we only use dnsmasq f= or IPv6 for the dns capability; ipv4 uses dhcp and dns capability from dnsm= asq.=C2=A0 The customer goes on to say that dhcp renewals were not being ha= ndled as well.=C2=A0 Customer has also added that sometimes they see issue with only 30 active dhcp users or so.=C2=A0 Appar= ently it requires a good number of users before it happens=E2=80=A6 and it = does not occur immediately=E2=80=A6. Sometimes a few days or more before it= happens.

=C2=A0

I looked through some of your release notes and noti= ced some similarities on some bug reports, but did not see an exact match.= =C2=A0 Does any of this make sense to you?=C2=A0 We tried reproducing this = in our lab and were unsuccessful simulating the scenario.=C2=A0 We realize that our dnsmasq version is pretty old and a lo= t of fixes may have been applied since version 2.55.=C2=A0 If there is a go= od chance that the issues seen have been fixed in a later release, we will = consider upgrading to a newer version.=C2=A0 If you could comment on the likelihood of a fix already being made, I would a= ppreciate it.=C2=A0 Since we cannot reproduce the problem, we will likely h= ave to apply a newer version (hopefully very stable) and have customer try = it=E2=80=A6 something we would prefer to avoid unless we have some confidence that the problem may already be fixed in th= e newer release.

=C2=A0

Thank you for your time.=C2=A0 I look forward to hea= ring from you.

=C2=A0

Best Regards and thanks,

=C2=A0

John Knight

=C2=A0

JOHN KNIGHT=C2=A0
Senior Software Engineer=C2=A0

Belkin International=C2=A0

O +1 949 238 4543
M +1 949 351 1020=C2=A0
3D"Belkin-WeMo-Linksys"

=C2=A0

=C2=A0

__________________________________________________________________ Confiden= tial This e-mail and any files transmitted with it are the property of Belk= in International, Inc. and/or its affiliates, are confidential, and are int= ended solely for the use of the individual or entity to whom this e-mail is addressed. If you are not one = of the named recipients or otherwise have reason to believe that you have r= eceived this e-mail in error, please notify the sender and delete this mess= age immediately from your computer. Any other use, retention, dissemination, forwarding, printing or copying o= f this e-mail is strictly prohibited. Pour la version fran=C3=A7aise: htt= p://www.belkin.com/email-notice/French.html F=C3=BCr die deutsche =C3= =9Cbersetzung: http://www.belkin.com/email-notice/German.html __________________________________________________________________

_______________________________________________
Dnsmasq-discuss mailing list
Dnsmasq-discuss@= lists.thekelleys.org.uk
http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-= discuss




--
Dave T=C3=A4ht
Let's make wifi fast, less jit= tery and reliable again!

https://plus.google.= com/u/0/107942175615993706558/posts/TVX3o84jjmb
--001a113ce60c0955d50511fca918-- --001a113ce60c0955d70511fca919 Content-Type: image/png; name="image001.png" Content-Disposition: inline; filename="image001.png" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: 553e2103845b020e_0.0.1 iVBORw0KGgoAAAANSUhEUgAAAMYAAAA1CAYAAAAanZTqAAAABGdBTUEAALGOfPtRkwAAACBjSFJN AACHDwAAjA8AAP1SAACBQAAAfXkAAOmLAAA85QAAGcxzPIV3AAAKL2lDQ1BJQ0MgUHJvZmlsZQAA SMedlndUVNcWh8+9d3qhzTDSGXqTLjCA9C4gHQRRGGYGGMoAwwxNbIioQEQREQFFkKCAAaOhSKyI YiEoqGAPSBBQYjCKqKhkRtZKfHl57+Xl98e939pn73P32XuftS4AJE8fLi8FlgIgmSfgB3o401eF R9Cx/QAGeIABpgAwWempvkHuwUAkLzcXerrICfyL3gwBSPy+ZejpT6eD/0/SrFS+AADIX8TmbE46 S8T5Ik7KFKSK7TMipsYkihlGiZkvSlDEcmKOW+Sln30W2VHM7GQeW8TinFPZyWwx94h4e4aQI2LE R8QFGVxOpohvi1gzSZjMFfFbcWwyh5kOAIoktgs4rHgRm4iYxA8OdBHxcgBwpLgvOOYLFnCyBOJD uaSkZvO5cfECui5Lj25qbc2ge3IykzgCgaE/k5XI5LPpLinJqUxeNgCLZ/4sGXFt6aIiW5paW1oa mhmZflGo/7r4NyXu7SK9CvjcM4jW94ftr/xS6gBgzIpqs+sPW8x+ADq2AiB3/w+b5iEAJEV9a7/x xXlo4nmJFwhSbYyNMzMzjbgclpG4oL/rfzr8DX3xPSPxdr+Xh+7KiWUKkwR0cd1YKUkpQj49PZXJ 4tAN/zzE/zjwr/NYGsiJ5fA5PFFEqGjKuLw4Ubt5bK6Am8Kjc3n/qYn/MOxPWpxrkSj1nwA1yghI 3aAC5Oc+gKIQARJ5UNz13/vmgw8F4psXpjqxOPefBf37rnCJ+JHOjfsc5xIYTGcJ+RmLa+JrCdCA ACQBFcgDFaABdIEhMANWwBY4AjewAviBYBAO1gIWiAfJgA8yQS7YDApAEdgF9oJKUAPqQSNoASdA BzgNLoDL4Dq4Ce6AB2AEjIPnYAa8AfMQBGEhMkSB5CFVSAsygMwgBmQPuUE+UCAUDkVDcRAPEkK5 0BaoCCqFKqFaqBH6FjoFXYCuQgPQPWgUmoJ+hd7DCEyCqbAyrA0bwwzYCfaGg+E1cBycBufA+fBO uAKug4/B7fAF+Dp8Bx6Bn8OzCECICA1RQwwRBuKC+CERSCzCRzYghUg5Uoe0IF1IL3ILGUGmkXco DIqCoqMMUbYoT1QIioVKQ21AFaMqUUdR7age1C3UKGoG9QlNRiuhDdA2aC/0KnQcOhNdgC5HN6Db 0JfQd9Dj6DcYDIaG0cFYYTwx4ZgEzDpMMeYAphVzHjOAGcPMYrFYeawB1g7rh2ViBdgC7H7sMew5 7CB2HPsWR8Sp4sxw7rgIHA+XhyvHNeHO4gZxE7h5vBReC2+D98Oz8dn4Enw9vgt/Az+OnydIE3QI doRgQgJhM6GC0EK4RHhIeEUkEtWJ1sQAIpe4iVhBPE68QhwlviPJkPRJLqRIkpC0k3SEdJ50j/SK TCZrkx3JEWQBeSe5kXyR/Jj8VoIiYSThJcGW2ChRJdEuMSjxQhIvqSXpJLlWMkeyXPKk5A3JaSm8 lLaUixRTaoNUldQpqWGpWWmKtKm0n3SydLF0k/RV6UkZrIy2jJsMWyZf5rDMRZkxCkLRoLhQWJQt lHrKJco4FUPVoXpRE6hF1G+o/dQZWRnZZbKhslmyVbJnZEdoCE2b5kVLopXQTtCGaO+XKC9xWsJZ smNJy5LBJXNyinKOchy5QrlWuTty7+Xp8m7yifK75TvkHymgFPQVAhQyFQ4qXFKYVqQq2iqyFAsV TyjeV4KV9JUCldYpHVbqU5pVVlH2UE5V3q98UXlahabiqJKgUqZyVmVKlaJqr8pVLVM9p/qMLkt3 oifRK+g99Bk1JTVPNaFarVq/2ry6jnqIep56q/ojDYIGQyNWo0yjW2NGU1XTVzNXs1nzvhZei6EV r7VPq1drTltHO0x7m3aH9qSOnI6XTo5Os85DXbKug26abp3ubT2MHkMvUe+A3k19WN9CP16/Sv+G AWxgacA1OGAwsBS91Hopb2nd0mFDkqGTYYZhs+GoEc3IxyjPqMPohbGmcYTxbuNe408mFiZJJvUm D0xlTFeY5pl2mf5qpm/GMqsyu21ONnc332jeaf5ymcEyzrKDy+5aUCx8LbZZdFt8tLSy5Fu2WE5Z aVpFW1VbDTOoDH9GMeOKNdra2Xqj9WnrdzaWNgKbEza/2BraJto22U4u11nOWV6/fMxO3Y5pV2s3 Yk+3j7Y/ZD/ioObAdKhzeOKo4ch2bHCccNJzSnA65vTC2cSZ79zmPOdi47Le5bwr4urhWuja7ybj FuJW6fbYXd09zr3ZfcbDwmOdx3lPtKe3527PYS9lL5ZXo9fMCqsV61f0eJO8g7wrvZ/46Pvwfbp8 Yd8Vvnt8H67UWslb2eEH/Lz89vg98tfxT/P/PgAT4B9QFfA00DQwN7A3iBIUFdQU9CbYObgk+EGI bogwpDtUMjQytDF0Lsw1rDRsZJXxqvWrrocrhHPDOyOwEaERDRGzq91W7109HmkRWRA5tEZnTdaa q2sV1iatPRMlGcWMOhmNjg6Lbor+wPRj1jFnY7xiqmNmWC6sfaznbEd2GXuKY8cp5UzE2sWWxk7G 2cXtiZuKd4gvj5/munAruS8TPBNqEuYS/RKPJC4khSW1JuOSo5NP8WR4ibyeFJWUrJSBVIPUgtSR NJu0vWkzfG9+QzqUvia9U0AV/Uz1CXWFW4WjGfYZVRlvM0MzT2ZJZ/Gy+rL1s3dkT+S453y9DrWO ta47Vy13c+7oeqf1tRugDTEbujdqbMzfOL7JY9PRzYTNiZt/yDPJK817vSVsS1e+cv6m/LGtHlub CyQK+AXD22y31WxHbedu799hvmP/jk+F7MJrRSZF5UUfilnF174y/ariq4WdsTv7SyxLDu7C7OLt GtrtsPtoqXRpTunYHt897WX0ssKy13uj9l4tX1Zes4+wT7hvpMKnonO/5v5d+z9UxlfeqXKuaq1W qt5RPXeAfWDwoOPBlhrlmqKa94e4h+7WetS212nXlR/GHM44/LQ+tL73a8bXjQ0KDUUNH4/wjowc DTza02jV2Nik1FTSDDcLm6eORR67+Y3rN50thi21rbTWouPguPD4s2+jvx064X2i+yTjZMt3Wt9V t1HaCtuh9uz2mY74jpHO8M6BUytOdXfZdrV9b/T9kdNqp6vOyJ4pOUs4m3924VzOudnzqeenL8Rd GOuO6n5wcdXF2z0BPf2XvC9duex++WKvU++5K3ZXTl+1uXrqGuNax3XL6+19Fn1tP1j80NZv2d9+ w+pG503rm10DywfODjoMXrjleuvyba/b1++svDMwFDJ0dzhyeOQu++7kvaR7L+9n3J9/sOkh+mHh I6lH5Y+VHtf9qPdj64jlyJlR19G+J0FPHoyxxp7/lP7Th/H8p+Sn5ROqE42TZpOnp9ynbj5b/Wz8 eerz+emCn6V/rn6h++K7Xxx/6ZtZNTP+kv9y4dfiV/Kvjrxe9rp71n/28ZvkN/NzhW/l3x59x3jX +z7s/cR85gfsh4qPeh+7Pnl/eriQvLDwG/eE8/s3BCkeAAAIvUlEQVR4Xu2ba4hdVxXHx+9+6Ico ImJHi1qKyCgtKqV4iuCH4mOsghGqDtZHqQ8GIk1FKANaLVbsVNM2YtSpL6RqGkMoalMdlWTiJG0m dppJSJOMadpUrc2YRxUsbP//nbN219lnnTuvc8vIWQd+2Xv99zr73OSu/9n73HszEEJwHCfDFB2n 65ii43QdU3ScrmOKjtN1TNFxuo4pOk7XMUXH6Tqm6DhdxxQdp+uYouN0HVN0nK5jio7TdUzRcbqO KTpO1zFFx+k6pug4XccUHafrmKLjdB1TdJyuY4qO03VM0XG6jik6TtcxRcfpOqboOF3HFB2n65ii 43QdU3T6z8COdUVLXGTN76wOU9RsmL1mBCyAAMatHGfpvGTHumGwAEJLcK4x61rOyjFFjTKFMGTl OYvz0gdePgxCn3BztIgpajJTkMLKcxbnZb9+xTwIfWTQuq6zfExRAyNMKFPMAN/TroCLf/vKIRD6 zLB1bWf5mGIOzFCUuClWyKU7X1WAIEw/OxU2Hftmink0xVdMXhbuf+q+cOa/Z6LOVucqfDvVEvEP FjxY8d0G5w4Ra2wtgdc4aukvBkO/e3UBgrDv9FTYfPyOFPNoig+fPRjjszDET574Xuzz2H7q5ym/ xI3REmIKbpG4VRrRg4hZ8NtAXCk43pDDB3RSMwc0rjStPp9gnslyvkkrtsDYljLncWu837zt9xcX IAiPnN4TtqDwJeZhxV+e2xD7zL/p0U+GG/d/KGqn/n0y6u+fujKdA9wYLcGCMY1R6vKJFM0xXPZJ KnD0/9+Mcdoa7zfFH15TgCDMLOwJE/PjKeZhxaTXMXrgw+kc4MZoifgHisXcSkGT7zBY/GKgCSOv cSsFfU0Yg2D8a4C3Y3O8n7zrj68tQBAOwBi7n3kw9q/dzX+6ELae/EEl/tFf74zwGHvs0+ELMEEO c9W8boyWMEWNLiT2wbIewJGvjTEKuPpIzH7NLNDGgKxiNCbzkvHQX9QY6PNa1AlXu3GJVQ5fm349 84DXbv1Dhvf86ZICBOHRhT9DDuGhv/0yHDt34RmCx3ePfiXFtx68IVy/9x2xT4399VNvDj+FWc7j eYOtnhOs2hgDN+wfAWNsrXEhz1Mxqf37qfHK+83cUheGgJ7L4t2qX3tuhFZ5LarfxPqyHQUFGKxM mIMCsVYMsuTCQa42RhNptUJfDGERzYG2pzHQ6m3fTJaDMMa9XlcyT1t8YNfrChCEW2avC+efv/Ap E4/j5+ZqseRuOrKxVF84mLth5r0pp6QNY0yCwNYaF/I8FZMZUKkRNZ5eI3MAc+W8CcDilLgJFvE2 Faf6QZ+FLfo40K+rCZ7DOZk7H2OZMAfFoZ8xeLfVxbbkT7CQmxcgC5R35VSoYL7MpS5aXE0A7/yi 5UVeMwaQZ56YD+IbhDZdr4zzlYvX5oohWivbPmH97tcXIGg+9/DV4d7jt4aNB96XtHuO3By+cejG Sh6R3F888e3Yfnz68loOWCvGIAsgrfLoy3h8jWhzU8SfG6GVPBao3NFzWMg8n9eQa8X3Ga3MyfOZ I/NzXmsuMgg45zDgarPoisEiS7+PQr/2qdRisMCAFFvlHxuxLk5eSwozGkDl0ZiSNwiajEEjyBxx pVNz5MaIfZCuhb5+rasuMs11MAYImlEU+49R5GxF+w6McQeMofOI5G6FMZjzKRgjzwFrwRi62JM5 0Mo4C5HbJSlqkmoKfT0PizUnrUTos5BlDq4OnFvieGNTMVej2nwyV44ptklWbBVTIa580qX6vWBe kzE0+bWajFH5YaTSWzXGyNQbChCE2x77SHhObZ1OnJ+rxZK75fGbS/WFg7m3/GU45ZSsBWOwOHnX lYKM5gAyvrnUZLzyPiFmActYE+nvib7eUsm86T1FnyuHjFvwnJpBKkE/QIHpgq88KCHmCiRjOo93 exayBVcWtszLjSFbKMKVI91d0JcchM0GaNJXy/V7Li1AEA79axpyCLv+cX80gRw/m/9qir9/9Ith 4/53xj419nnu1w9+NBqD6DnBmjBGGefmkAJdzBjc/rDYOV9OKvIsX8/Hfr6qWHMROW+b5KfzcqEf oMikYNP2Bi23RHpPz1gevPOipmmsbVFuDLaV5xTjHIQxlpwXxRifgDFAEA7DGPuf3Rn7n997BVJC 2Hnq3kq8/eSmCA9q+vy7Dn8m6rfDJEpfM8YoNW0OgSuK+XyxGMhLW6VM19epGK0XyG38u1aCfoEi 088IJBVpSfxuBK1eQWgiPoPoZ4ZoFrSNxshiElcprZWxjDcaA9CQ/BEl4YcAyZzL5bPTlxUgCEfO TIcHnrwrxTysmPAQXbht9tqo3zn3Ma23aYxeD798WF3UGKXOotV39DiONjdHrAG0nNu6JpFrILVy DT4vyDz5x8HWPIKsQEszBgsAsJDSXTsbZ6Es2ZmkPEeKTlO5Dvq5iQQaI34ahrbJCBLrT9SIfi5B SsyRsUZjlDENwrlo0BV/UnXTw28sQBCOnt0bHnzq7hTzsOL75r8U+2xljOx7hothCOMHP6j1No3R CxbikoxRjumH7TSOfs0cQBd5E5VCRtzLGPq8JurfheQCKYuAxVFzEjS9VVnWHRT5LFCeL5iFBp3b Kp3Hu7U2D42btld5rOagFvWSGJfjMlb5Pwy5zhbI+eaNYimMzbypAEGYhzEmn74nxTya4qefOxTj mX/+Kmo8V2LJL2nDGLzDW3dXDe/qkhdvkCo231PoNIc5Do3fXcjc16i+BXMr7wNivcpU3k+lN2F+ 9VATSFkENEet8FkcgM8CtZ+GOM3cPjtUgCCcOLcv7Pr75hTzaIq/NXdVmD29PWo8/vP82UquYtXG cC5gik773D33liEQ+sySv3h1emOKTn/44ZHL50HoI4MDO9b5f29tAVN0+sPWY28dBqFPjMMUE2AB 1LbAzvIwRad//ObE20fAAggtcuF3RjvW0RxujBYwRae/7HryyotA0RLVT2h8K9UCYeB/P1rx60FE aEIAAAAASUVORK5CYII= --001a113ce60c0955d70511fca919--