From 9abb63057ac267f34189221840b6b6195ff18775 Mon Sep 17 00:00:00 2001
From: Mohamed Mahmoud <mmahmoud@redhat.com>
Date: Thu, 26 Oct 2023 11:29:14 -0400
Subject: [PATCH] WIP: dbg DNS over TCP NA fields

Signed-off-by: Mohamed Mahmoud <mmahmoud@redhat.com>
---
 bpf/dns_tracker.h                  |   8 +++-
 bpf/flows.c                        |   2 +
 bpf/types.h                        |   2 +
 pkg/decode/decode_protobuf.go      |   1 +
 pkg/decode/decode_protobuf_test.go |   4 ++
 pkg/ebpf/bpf_bpfeb.go              |   1 +
 pkg/ebpf/bpf_bpfeb.o               | Bin 92752 -> 93368 bytes
 pkg/ebpf/bpf_bpfel.go              |   1 +
 pkg/ebpf/bpf_bpfel.o               | Bin 94504 -> 95160 bytes
 pkg/exporter/proto.go              |   2 +
 pkg/flow/record_test.go            |   2 +
 pkg/pbflow/flow.pb.go              |  70 ++++++++++++++++-------------
 proto/flow.proto                   |   1 +
 13 files changed, 63 insertions(+), 31 deletions(-)

diff --git a/bpf/dns_tracker.h b/bpf/dns_tracker.h
index 571526958..004d3db03 100644
--- a/bpf/dns_tracker.h
+++ b/bpf/dns_tracker.h
@@ -9,6 +9,7 @@
 #define DNS_PORT        53
 #define DNS_QR_FLAG     0x8000
 #define UDP_MAXMSG      512
+#define EINVAL          22
 
 struct dns_header {
     u16 id;
@@ -71,13 +72,16 @@ static __always_inline void track_dns_packet(struct __sk_buff *skb, pkt_info *pk
 
         u8 len = calc_dns_header_offset(pkt, data_end);
         if (!len) {
+            pkt->dns_errno = EINVAL;
             return;
         }
 
         struct dns_header dns;
+        int ret;
         u32 dns_offset = (long)pkt->l4_hdr - (long)skb->data + len;
 
-        if (bpf_skb_load_bytes(skb, dns_offset, &dns, sizeof(dns)) < 0) {
+        if ((ret = bpf_skb_load_bytes(skb, dns_offset, &dns, sizeof(dns))) < 0) {
+            pkt->dns_errno = -ret;
             return;
         }
 
@@ -97,10 +101,12 @@ static __always_inline void track_dns_packet(struct __sk_buff *skb, pkt_info *pk
                 pkt->dns_latency = ts - *value;
                 pkt->dns_id = dns_id;
                 pkt->dns_flags = flags;
+                pkt->dns_errno = ret;
                 bpf_map_delete_elem(&dns_flows, &dns_req);
              }
         } // end of dns response
     } // end of dns port check
+    return;
 }
 
 #endif // __DNS_TRACKER_H__
diff --git a/bpf/flows.c b/bpf/flows.c
index 219660e64..fe69375c7 100644
--- a/bpf/flows.c
+++ b/bpf/flows.c
@@ -97,6 +97,7 @@ static inline int flow_monitor(struct __sk_buff *skb, u8 direction) {
         aggregate_flow->dns_record.id = pkt.dns_id;
         aggregate_flow->dns_record.flags = pkt.dns_flags;
         aggregate_flow->dns_record.latency = pkt.dns_latency;
+        aggregate_flow->dns_record.errno = pkt.dns_errno;
         long ret = bpf_map_update_elem(&aggregated_flows, &id, aggregate_flow, BPF_ANY);
         if (trace_messages && ret != 0) {
             // usually error -16 (-EBUSY) is printed here.
@@ -119,6 +120,7 @@ static inline int flow_monitor(struct __sk_buff *skb, u8 direction) {
             .dns_record.id = pkt.dns_id,
             .dns_record.flags = pkt.dns_flags,
             .dns_record.latency = pkt.dns_latency,
+            .dns_record.errno = pkt.dns_errno,
         };
 
         // even if we know that the entry is new, another CPU might be concurrently inserting a flow
diff --git a/bpf/types.h b/bpf/types.h
index f9790427b..1205da3b4 100644
--- a/bpf/types.h
+++ b/bpf/types.h
@@ -89,6 +89,7 @@ typedef struct flow_metrics_t {
         u16 id;
         u16 flags;
         u64 latency;
+        u8 errno;
     } __attribute__((packed)) dns_record;
     u64 flow_rtt;
 } __attribute__((packed)) flow_metrics;
@@ -162,6 +163,7 @@ typedef struct pkt_info_t {
     u16 dns_id;
     u16 dns_flags;
     u64 dns_latency;
+    u8 dns_errno;
 } pkt_info;
 
 // Structure for payload metadata
diff --git a/pkg/decode/decode_protobuf.go b/pkg/decode/decode_protobuf.go
index e91797914..d02bd3f78 100644
--- a/pkg/decode/decode_protobuf.go
+++ b/pkg/decode/decode_protobuf.go
@@ -95,6 +95,7 @@ func PBFlowToMap(flow *pbflow.Record) config.GenericMap {
 		out["DnsId"] = flow.GetDnsId()
 		out["DnsFlags"] = flow.GetDnsFlags()
 		out["DnsFlagsResponseCode"] = dnsRcodeToStr(flow.GetDnsFlags() & 0xF)
+		out["DnsErrno"] = flow.GetDnsErrno()
 	}
 
 	if flow.GetPktDropLatestDropCause() != 0 {
diff --git a/pkg/decode/decode_protobuf_test.go b/pkg/decode/decode_protobuf_test.go
index 717faae54..c10281fea 100644
--- a/pkg/decode/decode_protobuf_test.go
+++ b/pkg/decode/decode_protobuf_test.go
@@ -319,6 +319,7 @@ func TestDecodeProtobuf(t *testing.T) {
 				DnsLatency:             durationpb.New(someDuration),
 				DnsId:                  1,
 				DnsFlags:               0x8001,
+				DnsErrno:               0,
 				TimeFlowRtt:            durationpb.New(someDuration),
 			},
 			expected: &config.GenericMap{
@@ -349,6 +350,7 @@ func TestDecodeProtobuf(t *testing.T) {
 				"DnsId":                  uint32(1),
 				"DnsFlags":               uint32(0x8001),
 				"DnsFlagsResponseCode":   "FormErr",
+				"DnsErrno":               uint32(0),
 				"TimeFlowRttNs":          someDuration.Nanoseconds(),
 			},
 		},
@@ -407,6 +409,7 @@ func TestPBFlowToMap(t *testing.T) {
 		DnsLatency:             durationpb.New(someDuration),
 		DnsId:                  1,
 		DnsFlags:               0x80,
+		DnsErrno:               0,
 		TimeFlowRtt:            durationpb.New(someDuration),
 	}
 
@@ -441,6 +444,7 @@ func TestPBFlowToMap(t *testing.T) {
 		"DnsId":                  uint32(1),
 		"DnsFlags":               uint32(0x80),
 		"DnsFlagsResponseCode":   "NoError",
+		"DnsErrno":               uint32(0),
 		"TimeFlowRttNs":          someDuration.Nanoseconds(),
 	}, out)
 
diff --git a/pkg/ebpf/bpf_bpfeb.go b/pkg/ebpf/bpf_bpfeb.go
index bb10a1591..7f6ceebd8 100644
--- a/pkg/ebpf/bpf_bpfeb.go
+++ b/pkg/ebpf/bpf_bpfeb.go
@@ -25,6 +25,7 @@ type BpfDnsRecordT struct {
 	Id      uint16
 	Flags   uint16
 	Latency uint64
+	Errno   uint8
 }
 
 type BpfFlowId BpfFlowIdT
diff --git a/pkg/ebpf/bpf_bpfeb.o b/pkg/ebpf/bpf_bpfeb.o
index 12b4001b8b2cf7624ef8cbbdfb3d4375a891a48f..89e13aa6e719e262b2b471db45700e7634ebdca9 100644
GIT binary patch
delta 18232
zcmeI3dvIJwm500Uj4W9mIg<PuTMlz2>n+(ck}YfG=lCIe?3h@IACj@b@++2OCy`?(
zQE<p8Bw5T77A4nVRKRZJ$0iP>Kp@vz3oI5J9s;tgAci$y7KNmO6HG-EUT`4n?C*4+
zJGV8-E=ASu{>81*^!?5`-F^CW_qly%?2(IEgFnjZnP=TL`1#1gKH21)^DUTo>}0A}
z;5z91+SgbMiW5CbA3|gu>r3^}&4pR?DMWU@5UEru4!h&d27iULoumGWTegz!@B-nd
z^2q7b7G@vwW@d|d6SHK#RdF4Cs`|G$SN#>c-c5v7-BxZ^Tqh<_iC%6}yg<0EY+!c1
z*vOnkCG1<MJWwYBR31E?iaSTM$`jdtAUyW$e_p5Ze1twl3g)}%2IVd;@8<F_mFHDh
zpno>iuH?_Ac5?YXF5k=L4lcKI`5rE}sdCb@sWuk0I;$tGO>{EdMdhw~?d^qCL_*vb
zQ$@~^GpT)amm$xGd@sr2_H9(&r-u^+?;%Ee`BY}qqxSC6ay1p{j;O(-q(B4rQfV}J
zg!pj14nNB+*!3%UiI_;`kyEK-&XVlqTe^tuQ=N;PBPUb$5g!N&y(CVi-k+hrpZG#G
zePY?!YT5N(2r3khswvMYaYnLd<z|1LgfxN9wd{(78u#H<VlqkHIDzw+ReZo|6+o}z
z0-nTrHSOSBW;Oj_J)ARoy1_ZDSJMv8)|^PG`G-I+(=#cx4#0XDo=K_o0M^U&OiHZ_
zuwLe8QfhsGb!5(@)H*plKfTP=azWg+1E*81)baTkeTv`(XXeCNi96^XO|Va?JDJ@s
z4>G$h9b$I7JizR_bi3k}LWLhO+s}Hv^UkC?m^tPNy_n#@4WvK?wRXU6(DmB!CPl3=
z=-r^JJqC6sMeRMX8+5ff5EDHqr&FEO&w+aS#44+asB%K9E|<HD(%rO&OL%f<aqh@n
zmdks;M+oPY++VEt^LDVYfvH<$gk#PNlhzizZN)pKfzQbYoQr{Q-P?3j^MBe6&Vsy(
zTOJ^*!$DpNCsQ9FK6W<MN9BcH`V`{+S$Z_P3PdIGk!MotsXTZx)lDVu!F=$8&U1PD
z<#A`~<W;g~pl!0xFMFIFg&}#?d7$t^&VbzzK%%EgXcY<ns$Ef_=y0)^PdC`z^PLB#
zG|r3??T^u?$l16`mEz!;)I#TlDHRE|tWZZUk5ef%i(tJaPo>l{1?$yuDy4P~SkL~c
zlv<`>y*f^%)G`LU8AdHruwL$`QmS3BUM;5*Db+CqdcB`YsfNLNi=IlUj=_4ppGv8Q
z!Fs=(N~w;)b7^20^o>-4=P|#FxrVujxmI!FRBAR0s@PyAb2alU<_hK+%z6e-rGm_5
zte?hQ&ODuY4)YY|QYsVhcq$8usRXNe#0W~53t1mxRvQ<3n>nBLsw31_9Ye1i0V~JA
zsvofG7)*{Ns6*u$1gayj>KLpX0V~JAsw1%K7_2kMsg!aItU?XF3O!g&1z1fDSVbDF
zLJ!7NB-Du2+(4j04FeT=u$l_6ni{YQHCTlntfm62rUqQ6B2gz)vO#81IR^SLM@W|i
zLd#F4>d6I)fU21BL=#SbX;ITMRn-=2sN8SUr^q>+FV@n{Mim(>w|udhc)yAe^byhQ
z?3fX%TB)QqeJbfHy4k4Wjam`0g7|Pu#GDOfjo8|kXN0Dyo-T09_t|72@}0i288YbP
z2WQ||H-h_0Cl;Jh7dc|-HjYT`5oeGnI7SuUHm1Jd!}9n*>CB%^DDEMHkeYNnq->(+
zTjmzaEp&(E@|R45IAB%%CDYinBCt)=@<v4dl4<_eGtHd3|A!3IaF!-==?d`-l^HoE
z2f5_`I`^y^_(*xHzfhlorsWIek2=3xt8QKKDLB<|xImv@p#3PgU`xJ8qMQJ$K9mCT
zC#k%krU36BDw&I^bL+(u&SN#DPEKuQ!hIPzA0tx{cvKZ))`d=eb3r{h(h1xCrdrv;
z-j^>V-l1`-@u`Q@v9sFM1D{BJn`$1oJvB@vx0iLHn@An>u2XsNY4vn%R%bF2V6(WV
zv2x;!eC*%fLsAj>CYR?Uip3pGzR<u6wZD@E>Y=%ZAG&)^r=~g==e6QdP#bPk&(-up
zXQMh;sKca1jbwBsoSyKk=|1&neVb}1Twm=|j~pY+>ZFws<{X51f^)g1G@?Um$+@di
zcT;!gbqJ^9{c(smqmMW}P321iJLX@oaG;&NFeGKKv!t;i@n^4lYTX^|;YIqL_J~iY
zQwTqS^EdKi?XWHW#4|W|{6jdsMW(4ijDHOOnOmgnPd=Ux%u0R1xf~72bIx1%9CT(k
zJ(qKMmX4qkDW4(ZPG2zO{I02V;<w15X+jP=rHjIee<tFX%RT%iuuC0~gaGG|9+Roo
z6<BFds#)Swf(=%OLX_&5P3}-V%;5qm*^a&wP^%dFUXmX?nc!pdEDrxkeF$WS$N~M-
zJeg95LYyXSs)(|ZO1$7is6@l{RHET?%nPYBI&L7wKnAHyr>ulch;J)SrIyl7T4583
ze8`v3O@=%O`Qmqw+mJ7M2YDsrP46I&v_lak1xBEbi0p9`+(>eF62Z%fF#?tB5P=wR
z=JvRty4UFp2}n3YOKRjp&ebKYH>wB*)x=Rved+U>_@L9ibiO>~oLE{>yq`3PWH*&K
z04m4Rk(46pJhm+4{9$RYvub(J`OLCj=Qk*~FYk3u$AZqJSg*5bMbP;YO5e($b8rRh
z;z6fq<&%CmFPyKf{G9VV6dzgD>l|4XbQZ7fb>^%NI=@8uBFaxT_c{+Z2c4VN^g8p`
z1f4&id>Q3u);{U<tSw3?w=(7<AI}`T0=&aKS>nNWklV2Tz&pq*A%EZ<<g@{gk^G1(
z6c5o&dY+_szw=zYbn1sXNeqi;^sdVif7~>1E&Ps|_pLh0yqoL)+{}yA*R0-a@8?-`
zJ3IKSUiWxzsErp=KC0)5UhgVhr@v$qPX7E^{EbMKc<c3n7veYgWO(56O=~Urs<Wh}
zcA(|v(|)<ZxpwPk<W#3`(?MA^5ZL_92@_jrjL2yloy+eD%XLm*dswa-ShD?$^ka#h
zcP{U^OP(Lt@ZQ_4+(v9&`rG!{z|hX+mW)5K`(DcuPS@`HvS?T5IoEcV=gRlswg7+a
z1HnB{&$YIE)fwuUSGd(Dgv5)V+>Af0+^rLyc)Y}F-Q|=%US8OGyL#IfvJ~~C5Uuw+
zJ034DX?=vnlp9F=(G0VsbLR2-ceQ?o#q+e8&|f+TdarE#f^+Tha;x==&g>^pJnyWg
z;ycbEDqeI>JW*cW`V%-$PsR_Tlh;tHl!vNxKMS%E-2d7ceWF6X>Et-|R-1H|IOSGb
z(Ai5x%z2E8EzUVA4mp>pc-ZluK=G7Qd!oFs?E*Wv2`%Dk`=PV<#2TyZC(d&x*2<Th
zYbU-VUvq|@oH6s)+1i4P^j9p3w-q>JPflO9ZI-9r7BcRujQbVdeeg%#{k9Fx>W?p~
z-_~k~b{hA08u#}Y_lbf2k9WtN>7()N%DeX+wU^q?`$iWIIHU6{C-Spbi)>t-2anEO
zw)f5>JNMmv_nmjaq<P)VTUTrtc;73(v7Fam$#-6Rb<#9f2jh8ZTW9;f-RR8wM(M!u
zUwleB+pqjLW&_h+d(<kXuH5TwUCxDb&c|LVb2?uNIImxx={)&TjZ^#b*Cx6BlKzh`
z7dc}ucMg2wmp}Jqoe-ib$9d?DRd~Pt`WxlemKO(p^~QH5u4oft(ofUVAPSKOh{Jn@
zoQlm_*vtGmA%i#y74{n(1P?iHzPVWb`#{6*_xKV}F1#IY(>RiiWC`IL)7;o0#3j5f
z`K}v0RS18MX19BPKI;dBxQun_M+eki-AzKgQU$h|v39SNfw5CUPeK2juu8G36aJ_n
zfVciO&5d6d)&e->A7M@jD+<nvXpSxx))I7<#q|}#;jEa}7f%(|YP6Tt!uAJ+Jb{x|
zRy%XAki8R;!?U_r@FgLiqYjQU|A&zM#C;k1vGMu|G0jb3A<w~nLJ#vpLJks-GQTKf
z2flckaK+#$c!o^i1{X;ozf1<#wZWoNA-{%cp|wsSThuPZ8DxxXOaXD}cZE2M4zf9<
zi#{a8xtZVy+Y{%3IYMYgUD<tFA4No7NgyQI{VYI8t{`ODm$-p{67nr{ki!lx&O#Of
zPjva+LUv)nO=O1`6T{(LbVCj*MtiyJ@ZwJj%Z~x(23h|VVI=}o!R8Lz^$2r$MD7T4
z<E-Zq=C&A&5$1MsgKrA!5IUU1BXsLe8q)eDIPhFAf_^y732_|_Od8Pw!51Z1GsFQq
zT|qSvU<Xx$s2|`EFX_UTLkEEv+Y^(X9bSTG<t0o}ppErkNI*aa9W1yaWE2mf0FP)1
zF>-UD+h~wFIBqc2@6imu)fMPxz1!iS!DK(g_UK<-c{yyr4&>z<3<vUf&e&Y!#r3{k
zS|(%;ba@yN?fa$8LIw)K?S>u?+q^F3JwndL6y?ETvQI2^1%0S|KmHtH1+d8SE-`;w
zSW~INQG>D1^R5_7_G8Sy5poENY%&Hw?JbK4c@YDcTxl>Im>f}@&<5yWa?~)uQ+0C8
zU}UPv7;(BmYM_OAw-9mg4X*uJq+vL4gKO{V2ig8bAvVCiz$SL%FCgFsmZP&yC=1*M
zsKE*_cewm!A&w#y7qsaHQB_?99h#S;Y{38uIy3a$tbbgH&7?mLP9Q|fzbHf(5=+5Z
zHXufb3q~>;;3--DGa*Z{2n)uvei@GlK~xda?%+X_uQ^sBWF<yi7-U{4WNjJPrul~h
zF%m#oSZNsGyXL|ubElATtlGjD^G9(?LvMv`%zrOrJ0e0)Le<`@LhdDd8X>h$i~-V<
zk$45ZEa@QqF!H|=+@ha;Q*zkgqe5IP7GesIV8xISkKs%>CBk}Qd=oQ;9bEBCA$o8$
zoWc$&#x|Z3*Y+z*ggAkaPw6sv3b-5dPY$FFdJHCmKIUd2`Y?hiXAQ>pGE)W(Mg*q7
zG1cB*Ba>oROtqQ6p`R5~yEU(}grJArw1g`_YNV&#beG?chX*{K&JL|2hC|c)xPiYF
zVvzLx29ti6J0yqU(DV`358-@J55A&#H5T+J)<k0Z7z@_oz<?3W;0{(3V~%I=h!tbb
zW^jkA5y~qFd9Z`)KO@A|Ah<_!Gi=8Sz+7Lk4d#e7FBalj0p>qA$`u|J@&xv6kUeZh
z#TYfn4mLk8#142olX(rI)efG;EchxyCo~1_HY}>toYqHKueKrPzbM86+V_Y+QJk6g
zc~Og@N8?3p%wN>owy4WsY}=wf&FKy?5OQeES|LA`5B-SdFwTd435=lViXp&=vCedb
z(>NetPG{#Bj8r-sji?4mPmDUm%Q(~B$o9)P6W+-7X?-`_zliy#RQN7-!1Xx94Y-*w
z<Tk*WFvK0YnJ{GQ2GjK;n%yY~MKknq)<2H<r&JhfVF8CU)M+q68tTnxppW&O2}6UL
z-Aor6V&+U28a5ctheljZAoC&9g+^JxnJ&Z;iE*a01?xG}*=U49t}+`|y3HeYGo2mN
zdN<SAJfIbv=<I&hCpgpDJc1QNI@8&g*nk+B&K_mvOlPx$Zl<%xwBAi*#kRp%L&cQ_
zBjUwT%?VY34B~7+i32OJxW!=XisE*Ikywg5m^srG4>NP7E8z~^OgG16PIRT36GCM+
zcvQ+BxtXpst{Ys%nXa_WU^raLAzjItuC$BwLpsxy_Gor9U1={fB{mGGOtp{w?`FC(
z9<iJ0%D6)})0O9Q1Dxr~qnh1JSI+g_Ojphk<4h;YyS4qAFAF(_0hAvH)AL^mu#d~x
z<219!Zsx0?3b1eHOj*J9uD()m2b>wJIy6J9t}3qYZtE)4SI>WUA6IdQ=?Z6c1MWVq
z>d$C!i1jL!;%#}DnYVG(6@#&jtMkX#uMYC_-%X9xF>RnyBN9_JPl4hfxFe$hjDSwD
zYknYPgzVwqI39%Vnh<Lz<2?Wou7<;D#>1_86!T94ye`YBRS>}Av_S=U%;5P#)L;Z@
zJvyv`Q;Ol}8H}*THW<@D|7c0+AI9^(2^?j{!>pg|6R1cA@mwLkjK*r(4aNzk1|v@E
zv1n?#n31Sf*MhqZrVfr9j9pdJt6A_>)5rRALT<n|PSjj71juAHJmPf|aAw03vF5tg
zuZ!S}2anOGa%f!}&Tt4}Ek{H#>eD%r9CokTINNi3we8Fw5VA85^Iyv&Tz6iGZiIBM
z%YP8!5%9d>@eR&nht@C0F&v31jGoL6!|c#{tP46-hwTh~rRMcd;%&JA^B<0x0&q)4
z1$JotkA-{yCz^1N*58EZ#tR5}xR-ek4zY+(c!>FFBqB^%m<Mpvzaa5Y{Snp^ClKQB
zs39POG0k{1%UX;eBJ`@>Fb{LS0Bke=4UXlAPy{2QRllJhbBa@Qq>K57LbimkxG^QB
zz77K-emB1GNVH>-)m_P`fDpR|q_1}ypa!uk>Rku8gL-y=8dUbt@$J=PfU3PH-WxEQ
zdhYMtQIU|FtA&`~YjlW3G{2Ae2o@nK%y%2Wsy&1eAqcubV&w7#IR=y7b!ZfG42KtV
zX#LHFSadkFF6eX_&;QPMLD0nwxD{Lvi7_P$#tc0iTyUKmSd29R2O8MnoAI5_BXhxL
zSx*cH8itsk67o0()G*APAORxKz$3i*M?yYU4`v4xW6v$@(G@n%5V8jiEaZqOM*W3m
zhj3tFKil7eQ}tBbU(!qmlwJ&A;h5%x5@3<hZ%;Hw8$XS&-C)odWquj&^H@}kG0iPm
z_#qK5pN;VheGBXHt=S70absJCzMJ)1g&Zw`{<z|VXdyumf<89Dlw3sSYUB}ZbRFOk
zwIE`bXF@-i(ZO}Dk8jOhDH9^f19IDsq7NEi%T;{K1_z@yG4_AjU|1X65)$$%H88>z
z*um%}*554TCG3jmsAku}rX1GaB`o?Ub4?NE=Y{1*M4R9dIdIEQgf$y$s)-_&Fa>RF
z@JC_UWYDeo)~K**u}GVA$b@1{SyK<|w+kzRHPbZ6JS?mQRDX#1Wno2;XPS5bx4Mi0
zB*>#p6Y*Ux3>NVSHtiDD228=S>$-tW4+@JCNpmIh)56+}5jDp&hkqcfy%HSPiEGpM
zkSE}9Ge$_MSuq@LZfAy!z9(GMj{Hvso1;Q>La-Jd6T8>iG0kqSUkis!eH;!GySY9d
z%+TAKH$Q+~g#pFUkLqs-yQmNx!~843&#_IaAm9;fL89nG<v5RE3o_TIh}*RNmUe6-
ztbusDQ6Gyc-eE9SdAv)r;49wE_5Vu9Gnk@y;w)Z1p2DwP`9f48r15@(5s~<y!Bk<`
z;2?O!;HltC22=e}=6QH7kp7Cn=ra)?GX!XG9XwSIQ3cHTx*UVC@7JMHT95m6sH1qZ
z5KGX(I@@5<R~k(1M-2{P{@29}0d){Jm>Otfeh}VM2ki!vz9WOXn0v9c$-diQvOjJz
z=6@Xw)d;>IL>pD;Gnguz&EP@i7w`oH*$){^_QM%`iTQOQI>>(1-~?5;VhD(@Yi`B-
zb)v$0VKDUTb22!{T!|A8+1mz_J>)dNR?-tknb+c-qnj$kJwZ1av}i`Z>RR8C{O}C9
zzUgQH2tDPDg~$m<al+m5B4n1fBl(t}3hTIGr}%szD2IIs_$hO7+*qT{{WkLlm}4k^
zg?HWCn9pYLpyt3f){l*6`e{nlAJuyLWk|dsM9IfAC+MdkCAg{u6Gk=LRN|sven>xu
zHUTdB<wm^eIh5U|*>xa$2z(9pe?*BZXBZzQU(#H<g|t}f>c?~#ut5D1Llp|XqYTvV
zAmaC4hm&Z8V7Ej1nL)he=>vV5)A}JqR2uqG&03GOo)?4wv*m_34@-jBZ6L1&j45hZ
zjD~Sdw()@oxDlZ*>4{za4KdBj&Y;8<9K{Dkj7nTc`kp=d7xdi}8Mqb7yEVHV&^xZ#
zK=r70$XzovJO%Lyu)|f;&3ax#;UO?ZU=&JRbabTw(SWIcb&hcb#PPHEFh)cPme_SD
zK002nmIm~-mm$YR`OmCR`Hgt%`$-EuI}H1~w4e)x(E+8OaSaS=PB(Cg`Bjv-C_9jS
zt6!m5A7sYs2wk+hm42loca|pihUDU<L!{6b{h;jbSJ}rx6h1s$T)B^y8DG}($;%-b
zmfuYVY!ojgm)LSn83hfOM6mqdzzrvW0Qtg~@1f))sIlwkU{+7;a+T;W?#U;$d-5zi
zcU=2Gz9*+2F4OXUPi}obIkgy$MUtzF<<2@xv%vJzWzk6a^8Fe&EEjFA6kg;eFQWFk
zA9-qNduso^hP>UA`(lQ?*OO<JCpVPH?JE!-KOLyKN1rin>vd1w9P_IB4tVnHzU0sx
zIYYL89G^4$JR|Ed&nVEH%rBACt?bI=7|iM@o_zW7g`wNG%3-ejeV#lon(Ub)rza>?
zyO(tuckFW@>Pj(|t)4vB=*RaxPaZJl#GmcS^K!g)tRH*wNkdAWEGw0Ti4o7nNBz1!
zTruSTXvkYUdDe78-r>o8m4@8*<XJeErrYn)a+Mf-_Zx~Kt)NfeSMk9PQTlW*|5pro
z#FZjg%RG5CcR*U-vz}a~MH1rj|AWBJ<qlN-)N<kbJZ@NCIFxKFlXLQHPc&sPdAv-P
zB(f%WGWveZy{vD0a+PISku}+q+lIY=jVCW|XJZup&wBFeZci?H;9IsxR+Y<wg#SU$
zD16;B^6m2EHD>Uh_T=<^ihKD^8uBZy6i)o7C$H)9<UVRs>VLs2YK#iLZC-`uc(SKl
zPT$?!?p5^v(9_3zJ$cqbPu^(Es_(;|eEz6sZ~exTH}oZQD&(AXAy3rQ?V0+2rUIq~
zkFXr8*Vlr3sOX|MF!%C*D0#F(hVLLRSgjsLtoMD(lhc9Cy?meW<m%zX3ZKuAoA!r2
zISzXHm9kNeoR3$^gHpbgJXa;x?)q&3{*ehc;}&q#|96Jmb)4jthCH7uK<<0Zkh_b4
z<WD4bRLhY1Prf`*K~u6Hf6TIfJX^#ap58~@9Q2s}xq~?5als|r-{CR+ay^ba>3Fc$
zFdzqZc}%~fiaj3F&z|GB2W-@*pE=F?MQ6c=1N0-HX&>sN<B4HlLqCp#<15%Pu;C#6
z{9!sozgCRnDA;hYyd7-RuMSccG#sdofsG0(x0n@Z#CPIP;tyB25+8KLahW1ya3lw8
zM3BCr8pnxC5EvcO1Jv}8zF#pb(Dx~(eN$V8JvrEkKX#~T2=_+&O`~9AK-1$k1ct})
zZsKHMF4m^uc;Gn12H$XfJm=eBqo4dZ*yty}Ydq7xnlRg=e<fko2Z`jT=gOsti@3W7
ze|{3-OUO}t+>1Y#uj2kbgUK=KjP(sv(o@c5dJIwLE?4572Ilet+|!C+PBg>-9iE_J
z1MVqcZiT(Lr(Nj7AFc*!oMbLPfP31NE>k3Fm%Drd_qQ3`hkIILTAvUN&jIdE3q->p
z?vEJ!HQZCE-3CW8_;Lnc$>3|_nH~mSdkD|MfGGe6GdKc1ntUuQ6LS0cKtz6|B0(Zr
zf*hpESO&LbaC-)KW^i`~_hfM2c-~q`K`O?d>%edZkAh1K{n&V}$^mcp^i?$G?dK1*
z$%9scX3X+*HD@yTTn5twnf4bm_>~N%2{G(zX$%IR-@09X(MOpJSD0qkh;;aB2ER3)
zBQ%+YePnh9*JkjN4Bo&z!++pV=i#oq4<5Pmj(d*Xcl*)1?wv8Mb=&sy<vZoKEGx1z
zY3-IJ`5RWQY}i>>*C_N&Bw4as&XG;YWxHkLq`JC=THe%<ylb}%C!g7kH-M((`Q375
z(%K`7l4W~jv8+q3-6Pv_xP|)UzwVUN3g*>|d+xmF$iBUG+(h!rdt}6l)G2k+w^y#S
z>LPd@T%C0G%2L^x9Na4#C-%dAT!kaa>%ipa_Q{-N<31UcJ;}~}a(VKNeR59n`}^dL
z$?$D5JNesvvPq66Be%(A*3MwE^ESC$+R1)hjG>rF3kz4z*<^ITT$npXD;HN}N3siC
zXpd-~L~?pX*_|BPFXvgcvE<l(G&&EBcc2V+COcKxo$N=M{OkcZ_S+5_wZeVL$N{qG
oPj;frt!vjUMnrP(fLv(pYEO<qUb2g_9ImY8x=er4Y^&?P0859u=>Px#

delta 17494
zcmeI3dvH|8m4~}WBQX*qki=_1jx_?IH)tdfdLW_UEn#fr07CI23<iTR5DQ~t*^rDJ
z+X+eRvYbmiQ;CxZ8OQR5EK1}QTCWpSWp7p+vsu-eY~cziYaKh$#<;9hNLg94JNrA`
zr)OGYc5Aa$*}rnDbo+kiobEn-y6?Gt@4(QTsiPNDdzQNPw0=MEXo~D}UP@V>e&AH>
zgurpk`CUp)!Q*r(MC!5LSd=c#FQBs!)3St!#bT|;PQ`khZSErZW#_oN=+;k@?(lNq
zrt-*hu{)VlnD1bAG2hNCnQv2ENoQ66Q_fX)(XQ=8Xw|gRrnpk1QHfr*Dqb#3E8Ccj
z7dx0!sf2wymHR7&m&yar#af-?sfG2Py9tlI7^6a*3#cLn^LywD<$f+7=JFvb&-Do5
zG)&*&ypa)1?^2o<V-GsV)AA}05uIO4XCWR8sv_&i>DWQKLVKT~@<H8?4}8G6ke2tU
z&yw^ywT_b<R-dENs&$O`aFrfB%U!S=Qu2i&oysG9u}7VC)0)EFL=R%}aCnZKiiPQ7
zzfb51ITianv88{6_<SjyG3kCa>AmND3dQ3p;2uBXI!Kc9${KdvO21;s7d*Li6_07q
zae4B?YTSp{iW#IsJXD;(nanCaU^P9^A0Rn+I_uSZfHRoYynyvcPscjg-oyHR%+oZ7
zV|!Vk*U#ygns_vz*T?DD9@gvib2_%0S+Bp-vAdXc&`!s8DP9&|e<8(HLObwWY$x%#
zAf1Kpypx~4Ap8Jbqf7QFc9hw4d4$=xbU(A{@-VY;=|074gqj(|>|WNZ83K1QbIijr
zwannaOj5u=Ei14Ix?Wa^Nm0uWdJ}ZD_`zmU)J*|4L4QznxQr*|xtO{&_E(V<3(Tp@
z$eFKJDBVAF9A3z`Gp*D;8LKw&ZOG~)FY2X<QY|u+-Bb;wTEZyR2vDk#q0~3bi?L(Q
znT+4aN1cn)H)g9k*76QJ<=(UMG3T<kqVi)pYX5(_HJpabqV127)nOmc{i)dF#K-z$
z{ZyWh(piXy7U<FJ$`-}MM_!11l1h_n*`qA*7f9|5<ScOhIkQFfI5*5#E2D#<87c03
z)mUB*8DKg2>HKQzl6-NIu8@caoO1sc(}Iee@B3@q=(fk%JgX>MP0HbXv5a)c1uLEM
z{F?d7a-TX2&z7~MgG;AltDNKcMPW73sH0a*Urgl;u)a(CVrt=l^@8b(DLb%U5PdOa
z2i6OwFQ)9kCLbv~u)YKOVsof>uwFoY;n-Xj=v$yKHj7!`wSBSK%=#ASi)AzGTc|Il
z0)+;bkQ{?v%=)Fwh0JBli<rw5hx=j$EGS`veCAT-h0I0FdCYo>`(l1()iE6S1heWG
zd?T~!7_4$799I2?A-I7JRL9`?%&KFsdKROC>KHta^?oYBK4uk3uo^k+Rj9!#GGG-+
zuo^j-A|0j%RA?Yjp#-augH@=(Dl%ZTHo$7+V4YO@Vk$CVHB#tTutO>m;A&<yQ1EhQ
zL;`m;1Zu&e0X0%^6&t8XfYnX`dNopTfb}X8;0k7KS1D9|JRECD4t)*lwOzJQ_3>D&
z7c?0#s3U`<=by*PnzyKOJ!$s&=`1{lv&06v*rKKi>o`lO`)Qww4D<o9&hakJD_Koe
z@mc|~M%7X)0JQ=lNPIXbnw&H9YCbVQ)VNxx6?2~3e$Y=+;c<o+&y!hBz&B6&oC#d}
zose%{OYsqxP`xDC2Otkp#UoPt%1Ngd+(hz^jk2|Ht@EBQD0>FW=f9OEqmI{~C;yUU
zRF?WnlJV1;!5#9KB=cuWGP!l<DaeQY;{PGp;Ld(xah~();@N-Bq%zoA_;q(qjD{uV
zWJ&d~SKE|pr8`z%gRuH=w%(@9$x>U1?Cn|NkC3Oqs$bU<A5wW<<#fDksGKckFR2n&
zos(q+<*7pNIjjorU#Efx6@Kenttjv;4v2RJ-hiB;vSJUmZe%Q+u`*xSY)%jLh&M^N
z|I4wTs`8%L2$hf132(>eJN3n}7h;oib>KVtSxO@##uG|C$#A=<XK+%g_3rB?D-rm6
zE)PY;-Qd9&%CE|7wH?^a57*t##cpuUEZu=*@2;p>qT**BGF#}mjRU(#wdqRgg&tcz
z-*zGHC8LiiqZL&yv3Ky<^&eiZ%hMaF%WE6|^e%H7l`{`zQLk{WKlX|$zY}|z%DlsL
z#{Tt%*f5nJ^J}<y!CXBhNvc+iCs)2TxF>Mlg)MTyvOFn!opsBLR<Eaq;t$#X#iN<*
zP4o`e$A+9U%m2hjH9Z%r|C_rf{C|EV?_Z#Ugh#a68pYpSq+U<Zt6)N}wpNy2ZLP5W
zhOv|jSNv7h$AUMpVr}}*Y2b5&yy!I4RD^#<bWYEc+<hvh7S}G7--Q4x4VsLS9oWyM
zvf!@$kgMGsO0}(w58+g-f$ZZho{Fs`hQ61|1E<2g;a;FWU0@fcwvX%(b*Nu8PQ}!A
z2roRvR1sxBH^93(+P&e3$L3UQ6|vQEBe9MR7M$5uh5aPPSCPJ$T0n7ymS;h}jtr9I
zKFHNxFG=o)T<z|X<i(I*cYj7Z{vdULk#C@qJ+1{e5yRsFDw7%{hi|@)oE+YK9XUCC
z({<!w@_5sA6y$Nsb>soan@J7_Z=uq1cq4K0nmey1MyG6iJoNbVS|d{&&eA&<c;<xU
zF$DuTxsFp;D+`?qb-D5pXS{Bi-0R#>UzEO!^qAcf&gS|&+3g&xKP$VO8&;l`oz4ZE
zJDlSUXJyDKZ#*m8oy$14I!~-RGyCuY?ImuOZfXMI^f(PoXYshZg0s(gHh2~}Zu9E1
zve>zXbHF*X=B%uB?pS+P1|9FZGrnC5^njCRzzM9M*O-M3w(=bve3m-kaQMIv6T@dU
zAK<X1_kcg=>{(yn_*-rqOlx`HC6^9fy=kLMzB|}(%Rjm0O^$c#cV)ISwDkZyJGi}J
zFtqI}Y3W<2jX6Tx;#|G0LN+@Ew^ztDgWGODEx&r_0XZ~y@XmW&87uHSqQCa<4UX+>
za><R3|E{AhIq5|2dN4Hw4S1c|y9)<5>^{B3we4-^O3%`q?RelwyrIc$_`{pq_9CbJ
z>4mPg&pWM87v{8mWd`*tBt4d-5N%&~MxUPReCz3~g>BEXitbBN{dJP*5KOCXY`ehX
zrP_=i*Fqp~w7uc@zgp;O`-Rg?#XC+X6<3@n6<3|%uND@zU31gJT8Kx`$-kjgSwV;$
z^q5%y*(k1a9IsO(7dXqED%XyMPKQ(I+EM59P_fGyqT;ACM#Ynk=Ol{LPJoJGr~PDM
z&W<s5a4TBGvExIh=i~<0j%&`PlN+VW@qg|0aK=nEL{dxjXvYQoYR{QQB6YO;t?R19
z^^Hdp*X=8<>!5YL$-2HPaqW9kU#C$I?T4JsXX>lkyAt~LZtMCf>-rh%x_9vMGu_S3
z%(s8--0@bkbM1AHGx*lh!MER9;&Og7mh1d@%sV*kJ&$y%uXGOP{OWfuC-RGBgPp(b
zm4i*=M_q%@UwJzv70JE$g!9D2T707#ohWo|yE-^I@p}5|Rw1VUQU`#}IUSlS_6Ru}
zpL}w9n9mC7O9%H`j0Z{1kmLSnrTmw{;77Yt!ceZb2YUp3s2EKZB4u224H~_Kj~Xcx
z7Q-P-fU-B;yFIKQ6yh?Li91VkCDPwJ_;%q&htz)M=Y<$w4ECe1Z-dVWR{`#<usdK0
z;H|q=bIsog*K#=I9$}6NS1mZTSaa=4;c7tRsa#(%98Rs(`uy3#wGQp2HnaT!Ay4Lk
z+nJ+6M$?fcQaf4jw?dww4!W8DAmjjXG)X@`RiDNk)>R1k6717XXnoxyLJkpMVtzx&
z4lL=kF^gv*OQmsx^-{=J$Y4Sn)E5Z(8m1*}k~t*AY23iH%qWBfKNF%K9Zd7H{)<Aq
zG#^}Sai)G0ki9vknE@dp?}QPOY5lrFEkZJmkWCxq27V;uHFV%%2Un&dDS*=r-z;Po
z7F;?zypk9Wr?bO~(H><Da$w~*gv*TqW@It{Sh&JoRLJmghao+}48LYG!i*s6d4w6w
z7Gs1N9hz7EQMeAG!|6OiQ-Au9);D06GKsHF(}&|67L#aT`iK??KBn^sOaoqa&@|xn
z#~V=fy#eMf+;Zr^TWc}e_p-wcKfqmuDe|_m{s&<Q$RNamaUpB*VDR#Y8i<i9y<Jv=
z)Iqn!RR4r#_Fs7WS#LTVu$b(J*dG0>12Q#7szW%C>9H6NWb&M`xyTIa`?_(lkRC)Q
z6C<Mgym7sd-W+hdrOyU;GVd1h224>V947m4qY*?=`62u{!sW#x%N%9?sc_Av1}|BR
z`#f{ZVzM7+{=JaHSY$IW0BUbl0DEr?V20mfI54AFaabFmgBbzK01vqtwH6~&&A^D`
z4N?Qm%y$XV44!H1`;ms>z)WLr^aE`Fh7g-!pY0<y@fQ$q15N0x6W(T<2B^UzFn8E=
zixBrC6=%2V22oWV*&)qM9YVBX0NE(XVRK}6vHocxwvoOY9EL&D%R+P^v1IqM0Wm_H
zJ(AP_Pf62TLKa{VW{+$ADl?+VsrES@&A}oei!tJyEao*rmM;b)0%7tnNCH5P-!fPP
z4ls8L*^CvMQ_K7$c21bG9F9Qnc_BlH2t5f^d%qTP582ZQseNJ$ke-ahtFw@bNk5GI
zuLQU1r{65W22TocF<*#TJc8B3LOg+e+N@&M6VC&)gR9>Yq6fRRS?r)<+(om3+J4PK
zAx<LXvpOwCXS2F6|Kvd2;Dp6w5M^F3L@!1#tJh+@qs<zy7!jB?#QbGsQrs1@eat`6
z&x+Yyn%BC7poiU@un{0N($j9P;fL`sfyZ;%p|!+tXl|4n_@)p;r0=(w^oWca5IGEo
z=8mu)^2=4=G0p3+pvSN#!gI%2un`*ujA$Nru#OmWJda1L7;`p{J6s1x#}RU0i0i)~
z#1$X-gy!|IoyZ1reZ_t-M{NB{A+Ba){(YCY!sFN=;J)>ZF{7g(HOLOGe^rP(;PHIs
z4Tx3<yntEok&8MM0dpJXqEljX<OW#(G~I@n|J+&@(0z{x<OZ4fKF@8o^nU1DnP1ko
zZEmN<xNUQzn&TbzYTmF>$Y-;lAJJTa{b6q<MvyyZ3E+M1Bv*J28wAWL)}0!`2I3i!
z0gqe|Ud34ri(Khean}2UhuP@6nBUM@??&zm)zp!Pvx*icy*yK&lU^PiR(cLb9{d9%
zY<%Puvq6W>dU*lOaea{WD%^OeH8XSc@=#B8K#b_+^(57gvYwM(-T*QBH(4!jNE@gm
zwipczTMTdWMl42B%e%zPNiA=TnUh-HBr_*9KSw|%F)V6-G4zzSO;+>Q>Ix>S`FTXE
zZ`Dc7-_LqZYJN2WWI;GeNzFgXdSWCsKRalWnx7psNzFgbY1<^Ne4lPWG1g1I-{J+}
zfW@Q_GE<Jg;>vHf7&kzEyT!;M`5|UbYWXH@ui>n=kUKP4ZINM4Y6XTL)=8~^9WqI+
zAgDW7%So-E)nYhYz!6<T4#S~>PRu_onzh3^s}-EkY_eKG5A#Ny)E09GCaEpv5u2p8
zm^(B{t<b~uU(iXdkR3Kjt+0_BFj=jTL&jN66n5zbHoPL_1V&KUZSjmqw->jtNoYl^
zTh9rwhzAqbPjcN<o$yLRngt&vT;J?lO1Qq+r<8Co;`Y6&emI^XOZt-<9Masxw`|EU
zGvBf$V;19<E%i*TUz(-aB)rmE%_`v`-<7IpV+xhP2SF&Q0gQk)ryG7QWPmEb!6`fd
z-Blqr&cM!W2J~<^&Uj{(Ueb)0V3}0{hQo1v5qKONHVrHjq6{O58=%87j6iWa792)c
z1}Ec;X(%gZeiV=OI&gsbRXo<o9wQ|C<_tWgQMU~3#2G2O3<D0w1y~<tU2M=P#0WLm
z%{(B)1!}OL`S*BVA$!QFehY5zv25^=#Yp94!xoc%gt<+~+H&wHQn+e>1k~Xr%K(j*
zjcXQslufe!>p})Ig`n-Cs&ClO{0_E;aG<<c^CnDDD+W*=U|u0)JEo{Si20`mHj#iD
zY}RZ#Ebr3XVj4Wb_O}ZeBKscZuL*G+Q?|tLn?iJhmrhJ=uYw)C3E}TV(yIuwho-}d
zT3z8LIC4K3Bso;k%K9VNydtC(9ZAd%$J=9vZW<EuAlVOT`^{2_4mcPN7y+^xy){?)
zw1H`$iXAW>SFr<eeTW@khpRf1>a#<eza->wOlcK6wD})}?9RdbS4G*Q4}^TI1O~mD
zZ_X3)2|u`>85@@q2wT;FWslpa$_#+&F9eThecZuOu760#9z>vOQs2fmV{fr;Ip%+v
zPYZ7G;Qay-ScXpNKEI_@$j#XPFT;oww_*|H39&qDs(yKh`54v&99%w@WIr)gUv27B
zdtr>A+Bm=+R2v7l!Ro-&2CFYI{{X8Tx@yxQaVc~?R)<)mE27Nr;{}M?;`&>b3K>3#
z5vgz27%>SB;?Y|pbOpuG*RVrdZo{V?I9wBA{S!iVV)sp-2`NHbh_RQb>0~zc?4YWT
zDX1Bb>%+1O9@b2-;D=ZwZ~)(+bc63=PM3gtErtWNLz-LXV@+U0wZj%80<}EC)~#4W
zRbX~NF%nN*k7+NgJE-FhTc5@vnGFMOkakxm;b0v%s2I0p9gm>(w?dwQzTU4Jymb-2
z-eJwu7c;NN*E_r<*TYGQP+VWj9LDF`5saulm}I~qz4aL(FJo2Lce0+?2R^}k9^c_{
zTh;T3;vGa;j}0q*YpU-}YJW^~_}2dra%?dSctom0bbuEl<?$!WvE7G*D?Qu*JFs$q
z^*ixp1*?AL5bHSt4c)Bo7IG31ZRlsdh|h_LSc9$~7N5L=Pdiu?4I^w|cvSP&8N%fw
z{Umb>z8PbYHL`<Si7_RO?BLde!c~kpZw#>go5EF&`i-^BSA{EpXG3Evaaf40M$oPe
z@KwaMoD6sb+wQ|RWQ2H4C+nXQuI4;ERt=vMuFV)x^9il5__=W1f%MwkgKhq|@v}}P
zzTlHSYBBOmb1yh-4B%n&fMwtV4_S;5HV<1&4IpBwgDv<M4Wu8nI17BqVrp;PVj92%
z@_)PmtkUL5%K#0uAjC@l0K$(BS`gwmlOBI@Mh7i^i_t+#vBhY=C15et4<i4o1`vg2
z>Y$koh{>Qei9^hPgV#K=@35HcJCnGZ`3)i3$^L}JWZx4`67({^k6kWR=(m_E3?%We
z<~Do)?;!gTi^+a8iN~0cq&mqyJZ=f7!o*bGB$zQ5U8u0hV=?SE;g2HNMtWjDa|bpc
zWFN4Y^tGDNtU6qqS|hXP%T09$@w1J90cEKbpA)Ww*kEqE3YkkAl6>2L3Rkyfr}$iC
zz8pyjqpHlnFFG5vIsM|J__NIDS0JeVz0AEyJfPY8Db^z{WN(;$@KN>0w4Q!%5g!P#
z@F~q<`oTpBuCT!+&Hgdw3C)XWQRA2v!0C?(ho-e^HXTkI0%QD({sScr&oE9lk7_R1
zjuQ8gNN=7ZP`__bh3warf%<hp{ClFq=`=#H>5x9&i)#tJH>x?VheHx+#YE7H0TOFH
z)^TPQ1eh&jkm=WK8pwo$G$qxP+HuVA;e-g7h|s5RVxyl~t9jLFlsM=UnTpsLk^Vpw
zw@3d1PXT3MD$whv-2uH~+6~YPlD%ficnX@+V26WVH`Iv76w>R$lr=>gDXLEcrvBAa
z*9eFy1IIli9?)z?ObK*~eq3|;Wt2G7Qn4b^;)f8t{Trl(K8O<-_V*HtmJm)5m=0RH
zHJgyO^lFYbFs!+48cG~3V>qFH8y?7XY@!qKI=awzx8mJS{?4Mv6~A2BIHXl{rk`!i
z{VID&qK^~=%E(hFCVaRqME2y%3i-pxNh(GnujR`{i`hUTIPUMkk`sW}XR4v2eG%_M
zS+NW6fkv(WOO`fCX-deahqR2&sd%aydoTIKhnt3Px*0H1h<+7$7Tw6A$c2S+XXU4%
z!Gfp5HK|KFr~E5UEEnyTJUw#9B3aQgoKQ<YuK93(1{YjShKv-=(eBsCqX~IxX5```
zdHZUF$6b*yN$E<Mq|hqhs<az0N6MCjd|EWpStRE!$gn(h9ZKk@M<cxja$eYK)=fE+
zo1NyzH6JM-;)3OwK_i8GGZS)^=2+!!OUN?=347P^gnas>mPb}Bmf128>4Y!yg9+P|
zp@glsKQc<LCbYu!UP3*cO!;tq7Z>d6bSx}$q*Ns2-Z3M^B=lPH=7ii$*_hk$hO}Ju
zpOR-Od|E;0R6NGw73?Y5X~``|Q~DEfN~q>=KX1v4jTEt7A-2XlD78DlIx!vRPFfYd
znUJfD%BqxTLY^}e87q{FGUp{kvj!qrMRMUPH=c>6+0qcM`EdOL7aSOscUkWKLqhHk
zMY;>I^ytf~Iow}M=u5jIz38JYl@d9(RW)HOF)14pa{4x94)?p3yvs;o|A8eRiG+&f
z+`FpA6M7eRWu_ncE@2KAzF!%6z0XJyYbze~4r>l|3$nkp(a5D@xv1qwP_l?#9L(YV
z351+%#bYeRhoO{FT(f;+x3NZ-M<eS>WW^zxaaOB`23w>IB;>TSGDpgn5^~;eC{+q2
zIc}%Lw%?JEV?#DpB5UNxIbW$fAmvAq$I9f!UBAQ&Lb_@saq_^yCoMTx9VGW#ax+(u
zr@U#&eF^)NM<V6rGB3OvB6d(jalI$Ok_KzBi}>z@UOi<x5==k#i~R}C9>w)N3C?Lv
zV$=<bU6w%)uC1g`zaolILhqw%n@@nP`t&28T|c)MY&noi?OFDDQQAgW2J|D0&GaLT
zU4edcu{$W}1c&g)5u^|JQ#b&&I;8LQcKy;U%4L=V^v&9?P#Q|AKqEeYKkl%i71swX
z?wQI}T}eDTm6uWfw#W2cWC{<1tr5_75PJj--QW=Z*dcn$x9uCKLu*RurCnH0zq$05
zZdYh*rwWnFOR+XXxa4-#X4&GIlh9e5<p*1SW;KJYezUr!GX0wYyFUFJ0lPj(L>{h?
zjo}eo-G@IniSV)SB2Gu}XLt<P_ghS_BM(?ijvh@g?O{~_xPJ8w;E<&+#x<=7)`zQ?
z1L&?Z6@s{?DK|_3qtT?`4@dPLoG228J8?~SrD1ybla1jMxZZ8?NnFzs)B3Qe?giW%
z7l`UJxTZ!;14Fo`P#b<NiAR(8auSax@l~4<jul|LgB9K+E&v~n+)*jRvi;oUO8J$d
za4kgn_;ceAM{zSwHiy6q@n`fj9-ApB6j-B=Ch<#P%I!w~+Ei{UzBpA-{7w?nAgu;U
zs3DtYCvgGsxrW>10ay50Tub~>9UNseAvV8~#21p7Ccw78lEl}hayiA@vOiaNr+hhO
z?%w@}KJ&o69i0d6xv%T~eTNSonKx%!Tl=}AyW~H(W>xR34AhFvYt{sI)=*Ksvo5lF
zk6ajeV2{j?d}|MOns4oqC6U-3>5mlMEmx)~qsqw6yXB3tE^_p4Sqz(R-!0pp*((bo
z<$Gm`taNVqU|!_VUfJvl1n@$%KJpQCvOVJ8Cu`Daig4s$;{lYRNOYfUlAV!DRCGst
z9kMAhuR|`1Jlr8aA%`Q;4!O$p>B-0?D5Qw^_N$^DMS8z(>Zu<^diTo}86VK?hoj<h
zWDJ~>N2>|P^kST7kFqmTe2-k}D(#H4--AY%WJRK??2TMf<v_%DfaJrGc2$l>qN*H=
lTtb;q(L=4F{qBhWpj_eFnH6b22>H$uEl(|sjCDxge*vRxCAa_p

diff --git a/pkg/ebpf/bpf_bpfel.go b/pkg/ebpf/bpf_bpfel.go
index 8556d19a5..0f869406b 100644
--- a/pkg/ebpf/bpf_bpfel.go
+++ b/pkg/ebpf/bpf_bpfel.go
@@ -25,6 +25,7 @@ type BpfDnsRecordT struct {
 	Id      uint16
 	Flags   uint16
 	Latency uint64
+	Errno   uint8
 }
 
 type BpfFlowId BpfFlowIdT
diff --git a/pkg/ebpf/bpf_bpfel.o b/pkg/ebpf/bpf_bpfel.o
index 5e001e1de72aa19a7028827941ae9dc6cfda9b3b..a5c7b2d5effc0f2d53b973dab5c3b3aff6ad5593 100644
GIT binary patch
delta 18193
zcmeI3dvsOBy~k&tB$5L}^UldhLQX=+<B*U50YZ3~@G?e}s0a~I!b1&&M~=rTh;;|6
zEmo@0jqX#WZLq91UTuvHy<}PMCH5uN+UBm(nzpo!UaDzpYiiXS70dnpW`08^+un6=
z*IoUuv({nu=lA=~d*(N@XNT_B68hdq=q&a1?R+NO8Rr|B;5-*s?cW!Sof8Oc&iirm
zrtb?jNV*4-1pM|*?38@s2-yfR!4jh3+_`i6f(M+d<4b(6OmOaqFTQe(G>R;ZmqyXr
zYnbDhS2O#VuVzMW2+`WB6sJi9U+MfMzU0cwJ-J-LRu^!p%RITPWY)D<#Y_#MQktB$
zgnX;Pxi2B#er5v6j-!HP6s_GXZKJiDIKG+Vh>XdOLbSGp<r_J^p5yB{-oWvCj@NN~
zEyv9&zN&UD3wCk5lj9v6w{g6k<82(ba(olV?HuoR_Fa%a^F~Q0s#SGwLr)}AwHt3>
zt1U9V4b4fE&DrX_bV0s->;I7I6PzmQNp*|l$W%3alp76fw6=%kep!5ixI)G>XXfIm
zV*eeg(@`rb{lrwM78g0&CZyP^=8@_PrBK&6Qk}%SRpnhhnOU_YQay=T4Pc~tBC{IE
zNVTd<v{4OQq?$^m9#I1rsg_j|QM*x%WTcvBSECxyNHx!%Mm4gLYMxz<YJ?-zYHCCq
z)ksIGd5$-#5s%E)b6kylWGYvHC%|!J7eIxaJ&8eE&4KfEYE*M$tVlH{#;T;|%2<(V
zj*L}F&7DXQ6+mrPb0$*FRccgo>3pBtjcULn)faIBH8CRRJ6%nLu|eU9aK6*kY8e|8
zwTi|%eYYCK**qw<YVvO5iQshlgI168q(3`!06yl#U9uM99!%j=7^VbKECt6=eWz&R
z>utRDg1q*Ey!L{;_JX|jg1q*Ey!L{;^n&|jZ8mKxRjs|fQF2@GP8r{ZVrcQS1v}0O
z=WE${&Q+5dvJa>hq|TOUuJJt<NAqRx6J1X4q?uNy^V>;te4~Hu&7J(~IM9a|<y+lO
zPV#4*%~R%1+8310M(jOuz<F#+Ns6Kf=M@dlc5+hYW!K0OZsJ9<ikEU*<6NgLrNs7e
z`MgZRiOjrA!V{QznS?K3=4BF2VCH2Kj%Vf(3CA(>vIr+J^Q^VQ7qWntMR*c3FPrdW
zW?mLyKQk|z@I>Yc)#>3p<{8XWn5Q%6FqccVqv2c@l(9iJbC@~ET*92i%%dC*Fi&HB
z2D6%6(QqcSnv~IS8gmiZ+aelHXF&mHkiuNZoXVWfd=YbqIhi?=xtKYFc^Y#%a}hJ`
zjy9HYcq$80*`Sa)g}H#4W-r-?n0Zx)^O>ixeg<<Ma|LrQb2)R4EFT$8XF-q+!pzys
zWz6h%!llevtS@1nDLIlhOUY}iq&ym~WPPR5r&K9@aMn3lLNq*68k~4s%Ebh7xz2Tk
zdGi;m1ipG1-vl|$+lW;sd6nug@KUA63YYr0CC-QG`DM$MRHuqtrc$ZeiAdZE$&vU=
zoDU1<VO{Ub$WOaO%1&_3w;^qnbNSRPtJL{gMwS(FK8fdm^Q(-knKT;F&=P4MO|FwM
z`53A}G+EVne2W%k-eVo;{Z8g9K5{9CvoqrhI%UK23uJ0>9K|(#2Rm!(T4aRNTJWFF
z2Hg-z{im}D(R{#C{in0}2RWN*Gu4v)hdP<r-EzGzN`FEQr|D*DXm~^aSogEssV!<I
z-*c$w{y4<W;p`bsa7wDPwRExntFlUTmU*&tZT(|n4mgsc&P5s4K|#CGHP$0So{x@n
z$%bTDhh(Y~{H8Y{P6*oODyBZ@EG?Vn^q1AyCniV}aU!DPo8a0)czl858!SuUba*a7
zR3Nnw+qz$rd2f5-q>S%@j1DLJCXPxzjiZe`$33bxQq)+=$Ie}917_blO>QUgDBv_a
za~(2z0Ws}B`XzAZrwZbF?+CwVrKqFG7T#dD)TTS1DqjnC|I6}u)79aQDo+l6mD=iX
zm{bQikE5^1OH-$T@$#J&bIR1gZtwXHR0lP)11bNCsTVj-*|Z9Jov^SgR8*^@I-Qj%
z=V-8BHrmX;fwoNRRh(N-_^i&}muBZ%R?PWBb%|Y%6hizRGh5p0Hb%bOBg=|b<*R&9
z2O5A?1rkNX_rGkk6UXng=NExGApJiULCODR58ig<8_s=m^Q~jfllZsKd1>y~@*+o6
z_eGO0mTef{jf*n#oul)L{V$=RLS%>+ouACBw7)Bf27n&6@Y#RUCYb>^UUt&nBWg=G
zTNNUEKBsPB556U+j-6YA>VS<}%JgPBnh4QwwUkHg;B5J@?MO_<Z9zUbAK}pns$(Ek
zkiwQ=qDmN4C-8m2kmP;AQchpR`dKpGcH|iI92wt+d}IZJb0yn*kMzk0vxd@Xg%^KJ
zPRlDAUi2|}sgy7Lm^>uq3qB^N17|c`OLAM71<QdC&zA|J!Fe(st8tCw^Mf3`Sn}Q@
z-7?-6tdsG$L8tfAFQXU)a$@9>0^E~QD4hFibFKZ(leKGeRELgN!<}H6-sR*im}Bj5
zu3k`5K&}Gb>_~?!ESgMxCB*qkCeL>+TbS=WyCCNH76qK`3uDeV5C<2<oXv{^&Wngs
zFAg}jFOE6iMjXBvb}LeyQx_kO+j~SfpQ?M>xvMVVG}gzQS@i+u1H`W({+A^&=b<G5
zXWi16vt((&nYb+Gyp8x-#E&mSIm;h$nwAF}_siOtT`I>c)bTO79J7%9F?k4*Xy{Ji
z#IIQCw66%|euf==^metl62z4sQ7Sm@zxF;=@i+ZzZzcKHNmYNJe}$jB?47fe_g)?&
zU1r;7)hup%R4u2ykB|P9?DF|Qzc0*__;HeAtTAZ9sYuR=PY`dM?LD~Skp!!*ck0Sj
zKHqzmbFitrx9f_><E;(O(yO1aUUvR?^%tz!z4xu2Fu{M7OrIgHbRJt@X<g>LgnyU!
zez^XdR$MfA+<Ef4-PSjIbFSa!n>aX62>N|)L+|}9i+#ATe0eioEPT$2Ew?7XzsDyz
z&u=O5uR~L4k8SDw?Ut`r_`bQ?x&Of#DgU)vh&*Uk<2MDr51f}D%xb)5jVwKpZtSkd
zGv5B=>md3aSltX@=0Q$xd?csTbi>er-z|_YMBI<xzBSH_hcd6XAtH4X%s$P}EqLza
zEIROf7|&F_emqk^#pPD^704;Ovv|3qID#G}yI#l(V0(Ox^T<PmzRl~LXCEp~ZCeKw
z3M+$#GP-@8^Y%l<h4-+yg2nfH%wp@DT4$E;sddgSC+O>4=X};F_I+!e^9@AbUFZA)
z(GS--zC*>nQ|p}Yq2g($kpU_ae;3N2PEpq<Li`@`AY=oOz3qJBP>J<{^MymR{l4`O
zqF#-T^>EGwMR?3!?|g8m*k8|zE2JV5iZ$z<#)pgjJ6Um+R1`pQ_j>11D7sj&h7_4o
zq3CBxGYX~f3bKB9h41uwXUQWge6Ou{KKsav_U~Z?y?m#yVMFw>cv~e_Yiol{FP~G5
z=UdgAzm(?~@{sWyHlCLl&p#(0i-jN)U%tWlg<CtT+0eHb&%2H1TaD+A4ZSO3w_f5r
zKGZOw^yV9G2`vgazaN_0oB!$zpYz;rUU%FxNf+L5^Ub?<L$mzSE7sJn?EU?jzxbTn
zUr%<Peq&OW*0s0YGGptm=tjv4g!9%f7xX3%cUjIAznhftH;sCa{O%r~^T3&m$y!~3
z3OG5hO>@q^I@!7PSJ}?z{`0L#T1mQ1XYO+gTdmaInm2!H`Og>EJNZv%6B3r;+Ns}3
zdS|J>9oGXP3`CuC?K>sD7gqP)^-kl&`XM-yU+E==ej8=pis?To-4Y?3gh~H2*pDru
z#^3<B!AUx|!1{CVrRTQ9*?rh)w$H`sE+0qS0c6J93U84)h}<y&NKc#&PG+V7qYz;3
zg?{pBRG0ZOoKDNm2vN#>7kJt*PQBnSp{%FC8AU!@)ENSQkx#TRe-9ZZ;O2Xf`5bYL
zPt@QbP8lq~W)@iJ6HNwZf}5Gs3()#yKGDkD2K)R&mS|^=f&DSt5*;k~76b`TS)!Bq
zUE&@~bbIup9(@DeMyNuS^I?C?5;5le#C?_+X8sBIqE<_c7@TH9Fv<d}76#8@xUmi>
z!y<46j(o|?vIS=>5nz@r7{>TAx4=H(tR<RoW}@`n#Bf1PINuYGfG6#-M2o?81q7{z
zzz=R`Uc3MmiuZ{<%$vX!lYQa<vzh@y^e`WW-oFDwhP{C1%&Xu)q9ulyt%X9QPDYQ6
z>1~k$1KKbsK|T!pxoDw>OTlxXTZLZ&D$v6GY05AiV{C9HxZU6c@E+!;VLuZ++`;_D
zLK`jYw?r2UiWb2EpRz=s!G3VR!KvVr1_!|d24{c=4W{(N%xjRpzX5wOHUnzVVH<*r
z($PgM&<0J|*vQ}oO0ZIhKJ1OeIt()VaXlGo7h;I{Fy}XHa0&7sVO|3J^jomZnbCd~
z65;i!fDJGRHesDJYki3M9@67LP|EyuaPA&_!8JG&-0n%ghxsS4&ndzxQ*57aVV5UC
z4|C4N=z&rU3G-a=v~moI!2$3|gQtQAnYY3|sR2FAydRvp8mmsSEyU*`NN>S1OIAJb
z3reun5~T*`f@_%L>!5GNs$pIZCePW;ydPX}3af(o7<kG-?Dqy|fd`3gbop;!P}GSr
zWCP+n@Gx^`J-Yl5mJ-f1G(^N{;E=(juQHhQb<Fc&pWB5YGPoGr47MplGDwG@g$?cm
zCmh8l#QZFAHwwf?L-y|xKLy6dLOg2;xCflBco#T$3>7js4P3|kAnE&X)=S4L6=gtz
zGzePRKv$@p`55%GP785>IcF*6#1IaL%nQK9XHWoM=P5tpRB(gAN#G{t9ncqHGfK?F
z_)~(%APBsP8fPlDmf-|Bf(#4}ft#5tN&k)z9n5>d7ag+10p`QtKpiT`d>riG0M1hR
zzfar(wgXBaIP^2?Wq8t~A7s|caEMt~V3?WwLUB8MKJ)o?Z|KQy*dkk1K(FJF!L*JW
zm~{o4m=`REk2q|JJ<Rg3(S>zwZ~)xR?7}_`n^%v)7oM@)>60wKO-g|1XQlRnJwa7D
z?bZ62wZ1e*>9v>a%pKpGJ<Qrm_A%@H`W4%P1mq@9vVrcd0cPF$A!a>1!yf%8vmPFi
z=jmO8W$#MHB-Eja4YZqVW!7G>omqRqJqD8(>@b+TU?;Qof-z?81$&6e3285Qk`1&M
z95R@^;0Uw!f}ts@h1v_YFz>HZUa*z<7?`}^0fWg4c7ml7`V9=o3&z-hn7m*YGkHDo
zasvjFmm4&g^uq>|ew0~zL6NU2OkCWBNu1A4NIRVX8)z@Mhgo~UL1yg*2SX}D?F9!5
z6l*UyY%qDjQD*H06ANvXKzqSZ;aCmHEtfKDFIdN{y<h{g_JX4ZlNS_IReq!=FPO-z
zy<q=J7HBUx%&fhjC{h^^lNU^8)?ToRxrf%c`~HPij!lmjj^JH`RoVg8O;cHEf7QUO
z^?l6RL550{Jz60{9kX814a_>fCdIbUE4bN{K`XOf!R;P>2eV$m2bi^g>^7KI@PH@%
zpk$1wc95b}wLm+_fWhP-OPO^Go4|Ay{sDT>Uxj0ahugu!(D_!NhXZiH2B(5!#5N4%
z8yI|Amtjx>gKmRogHIYvuZsiBD^Wn^Q7kZn=~OVxd>i!haS9k=K2G*Mm>p$U(Nx2~
zLJ)WkKL|AEfkOtTfvcFeULr*KG90uFo)4}wI0$ZH);-qD+>P|<E8+9Xu%f9z5+p&;
z#ReaMGvLFznTr}w;}+~m%qzjEIN9|XOeej5kNrtzU4c<%oquu|<4+ZcAj70~yw8Lc
zKMD4Cphu=Fev9~SA@-Cj)){s)&%P8Vw_9+O^yvGUuO~fCLXUpXX2HEMNZA9g?O{<d
zzQ6$UkI4QGbUAZYBgXiLI0Z1T1!oT6bkF=KIPEmfLCnvCGtOZAI}Je!1YOJ@!5|m=
zQV*DBdEsS3RAWpBnC}Anaatc_J_;_t5SGqR_Ai3-n=omawLVa(^zTBS*J9Zs#sZz7
zd%S@-Y3NIk;ef$Zz@W!|*rV^PQU#W;!~|ZAWoK}BHLevJW{%Y;36rde`6fz$N!ZEU
z4bI<z9x=EW+-ET92boX7z63)Wn5FW+;BxGnm}4P>r`QmbvOp(@8BBAc%itt%H*+O2
zEXEvYnym`h2(Gx>63qsefZLfJ=&KIE5gBZUA?Rem%P^RA5M5+&Ik>J`6)@=vWYCEo
zGdK)xX4VyGVO|dV^g}poGs~k&3=JA%TjWB}!-6j&K~fLi!kJ$I7xZIQFuxDZIf++7
zkDk6i(<BY7LYM#05{b+@eGPLX^o2uc(0RuC4?xhuf+!5=nxNH_K|8YpefDW|p-11x
z{0#Kd&cG2dQ-PHKAoCEoWY`izT5q$#0o0yakk*6@-o%hF>kMMdOQ6piL>Dsa7M^6@
z0)0BJl17-1gOhMGG|K#Aa7wOEB;%5f%Cof~z=A)MLC7cSn9Hxkaj@Jc8Vt?_H!-h*
zepVH3ZkV3~r{FfQgZUM325tjm9_~_Xi;u_v*MTS5;F_y21S@@_Z=tH;&EWhdpBP@E
z_)&1uYM&4|BvA`~T8X>xtv-<mCRhGF=%+N{mcZa#a4GXJ^!^<<tSuvZjDPvn5VYgK
zi^P<H4t>npxA%MW1I*gD4|(*I7ya6ie-NukV3#F622RDQNhGHI|7Q@CVVNYe!3C>@
z2z9}6Fqab_hT~vf4bH==sbZ$|B}iXma3Q#XSvRPO`F5mFISRi3w&}hx{u*>?DRwsq
zH2c9F2B&~K4W`pk%;0ozm%)_2o4FAAr&nQjG&mXDw*vb=6-WjF2u>OX`QQPAbHIZJ
zQwBrK4O9T;%do-8;1PoZV1aW5l}Gk;g_(E>#$O9^AV@Y0C<FQ%8`9rQ1vFsN7@Q2Q
z@^BsVL9%Z`K?Wy-n>^fNv*0U~pcxk{1}B5tJ>0?EPxdXCv<4@GJ3ZXR{A;prRVOWK
z5OFft?lBBV(9ir4C1}Tx7@Q0q@bD0G?i$$Rgfnb#GI+$p0=-5RSU~n282^AFNbW$F
zGh?)5s9~1t{2;E5n7@MzL=0WZEN^nUaPz~QwiXANqqr+${!x*-8|z@Mg+BWj#=p}L
zBppMZ%<YsxA7-t=bQ#uXFzNdZCj9{Omnr>o=n;d1;1Pp!Z3spU0U0FXY)4&m3K<mk
zV`Uhe1g>J%Eox%^2=+OnXtBXb;8x~&&8W~>ENg@9AOr^t0U2}}O!_Y79h8B<cFp`H
za83Zboxw@qlgvMdz9<(*HiL7(gUr5bG5$p%?Ds5~el5mi5ItgW5?J6cN<Fd(`rOm#
z5rc!^kin!cHJJ1@%!erb5atjw{>}-RBkW<p_h67$gA<Fv7lJ#Pee1A2FT@GS;2dxl
z^DNTW;fThpa>tx;U(T~u&c6j4FGRF$-HBfU_yss)Y-Tc${6D~x4~*FnCmc9_)fDUd
zads#kpYLfWnW+-cH#_1_GB<$#2-S@trSI`@Kl8Pdm44L2^vRCW4{>_>V)hpJ0bEod
z;IPhuH<dtsG9v?>Kuk~xE}be9h!FT4JbuJnnmC?on6D{P_B|e^4_cJ|r4-U*vC<bS
zYVm?OoM4g=@8eMyNZ)&iwVuA;5XTlNd%6cE))l5(Pt%?*GEIBBF(H=uqkK^}ZF~mw
z7H<woa+%V9fUSoDy(61L)Lwz(3L2m*K(9BX*F#1}U6b39kFFq<FE`=yH3HKns|`p`
zdnobgav~Ju(Thuzeis}(g%Gp0uVdCd+QN(;mF0^LPX=Agzu*k}nMaw2n6uWX0!4$W
zz+7hXw^ZR9LrPEnlUPqua$g@v{Y}b%+z|=10lAyA(m?6Sy%1|Xc@OGxT>yClVy&me
z?KAXU?%rwEbZ2Pe1o!APt9<6?<@&@CI8EiR|2-2&Pd?Fwv}R~<tzs)H`y)=)fkkD8
z6Yfk>cVg{P>Q29@6yi_rCaA6NyL*eR{1h5~3Iklm9`}i2t1|lu&YM10nxV-3Gv&RJ
zYZmjUUvUdcppN6B14(9D?8okvC03=i%H3aLZL}_RUnS#T$-MBAH{Mp%yD6nmzb<Qn
zHyTeT{JUFE>MLbYc){|h*SZm?tslGhmRf7=)}<=*LbmRZWsVj22-ktm{ATFm!s)}i
z8Q$Q0x;=gS9@}?}m%AIw@NJ_G^NvD?G{UaPnUKpd!wHtt{ht};>q4_lDZZKMLg9MM
zP|x-)v?U1PzENfs_`l9AZFW<_R*C;doVL`h4_jH6k~cEL&sZJ6)wvm7;H+_FJ}%tL
z_I2(N<Zka}?1oP=!-rf6x?nWJex2N7Ka-1#dF0<``>HZC7a_i)^0(!EpQ-u_7fkPR
zW|++KkVhWR@*y})Gn8?K=<3D{Uu1i_F+q>tIo&FpNq;pBe;{9Y=}Cte<d&Eq?q-1=
zy+641(=l_eb$>VAs<d-BHF;q({Hv}pPb#f@K-bt~U(52qCE8NO^#5zA9yOkPex~HM
zJPeviCUJ%6jAn+}oDm&=&2WUrs1Hui48LZ1k4OFt%jw95F3ha3QZJ>`lNma=4o#jq
z{D$Rp{4zr>*R9))R9N$@=HpLPSi3E&+|91EF0r0=H&t3$Gux3kMfm048B^j!&LNHE
zY88#if8;(<X)Um?gISDC$p>AJUk^JY&B~2XHw&>5zksZd;>}>eZj|&}@S{JGpg_D8
zKl%#=3YzH;6qs$X9#8Za2`rF)ls=bh#)%Q1x5qPm-KIbpQhNHDO@WyFFn!ylpbMmL
zyPC<qDNi%DY^ouBJ*1!$(8oi~lz=`KYNi6{OO|G;VE@$dOdp;o=n5tmjWMOCk1G^#
zzpE-hA6F>o1f>Sc78!g4><0PtLiRV}NB7<oH1`=y6{IUi3Zy5dD@O{r-&I{mSBw;h
zsX)3gqo5Pe1({~*5xNi4EGua6O;FJNme!L!-Dhbgd%j7^JYVA`Uh!1mjqWFAS@||q
zbcB!Mx*qMuR3UxLU@E8IU@B+C!}K?X6m)*{ryrUry$%zxc++NEbL?(DNn;s_9rztH
zcqf>yGAWRL7k)o9csH1?HYt$49lsHSsiV#sObtrpjwbu9Ld+29hJaRI$Y2`!8fIFQ
zo863RbQ~?h4ThK&b*sVGfp0OGW>km4+rS46-VTl#OdWgF!#!iXS<ay6#suSL6xEY5
zIOWj~dH78a$MX!Lj%jn>t+pPp8jjyH$C_Pc50^oPKq?wo`i@0Gb7FWr(`PIST3_nn
z8V@&kxOqHZFWL=30W$9JaLizG9o-)8H@E@%0h5nEywTd?vsdzxrb^Q$v%$kVJbZ_T
z4|@2phoAEBbL08=ZJVv<<LpCxWYArA)WgR-{9O;9^6(iCzvJQfS!gN(mzO14w%pXZ
zd)wyiH*DQ;^R7*8H}1^JShk|!_!T!=`+XDV&KE0}ESa-$&V2U=t=3XEeVet|n&)1&
z&D!k#+cv8*rKVaL%;R{j``c~SGJnl%C7$aRZnx(6=grdCvfWzd9@}o!TQ%-`+pUMJ
ze)rxsYo1?RrmEHK{s3q-yVeftVyo4yr)ZD6pQ4!iJVkx3wG+{ZTTjubyI)1mBbwON
zqO$qqA$Q^~YwpCncNM44avQ-JH6=8ivG^t`c^0B;-G_Hs(|rRo-EZ%*7W>+(UEglR
zVvf6n;^aB*T@;7rxZkF@YL4q`M_dOzV*kiol_eU|Zq4)cw7TDhcp|z>7V%cR+ql!3
F^50SqNAmyx

delta 17699
zcmeI3e{@yFwZ~^}NXZ4FH;{yz8z2`F^5a4z34w(0>+;hWsYV4!z-nkH1Ot-m^=T06
z307@tZ5ue~Nh`i4Ep6ixOMIb{RedGC+LqcMFIHQr(i*C(#)ZD(v$|5HkN4d(dy?V$
z`bXDW{jamu&79BPdw$RCnKK9a-%RfLLvlx<udw;aNJo;dKE-_|sa!U@`)hODz_@Vk
zeL{$2{Ps@hynslY=%&9yjF&>xUbt{!Z>YoFJg&gEBE`LTT>dpTDx=t{ampxO^(p2g
z<{OxO%$u2!8$!HlljbQ3!S(J(;|iP&3AtR)R-fQh*Cph#p4rr5BQrIGN~u%4W6C7O
zC(2bMPQyHa$L5+^rO!xODDMBA5F4DNc98-FwRsle;(ghK;y7AGmhq~aRf2fc4vz2S
zc#n$7jzYYuiRIfl-p27~INr)}Bgdasu@kS_!h!~lZ{qlNj{k+@+c=JMd@IK>j$1h1
z&2cNocc^$v?!`TF2YMtZgd^fLw<rVCRivP<ir4Jo44PGZ2U<#96R+CI8Il!d4R<kT
zh;(=Vjr=~#`R%pxn@$<tr3A5DJyWP4nnUrbes}Ts9Qj9g^Y{WsS29+9i7M1oE>@n(
ztSc2O*R71#=t{@RC$e4-W2}4vvmVY^xu01NU#wh>J{qBiF;+fa>zx`sp0RSCm^FG_
zW92;YYV`QV%6Vee=y8sf>j@IC(c>K}=jBnOhdnmmEDt^Wv0Sb|m7WI2^)LyyEhXgW
znJ`+X8a+eCiqtb>tV(*uj1{S8%2<{342tDp9w5YP^vsEsbCqiJj2i88r$&!pto%|=
zphtSF)Ah)X4GItJXs7EnGd3uCEsb@$o~p6=JSbIq3h&5O#R<35A9DJ6uIOPnaagOy
zqnkS5vQFHi`993e7cg|mB3}uP>n4eK=pH=@L;E;x<JjR?Hz^+C$r{p4h=+93;_kct
zGew_Mwp+Fos=VWOUaPn{bia!4Kv~MygxcN36Srq|C~0i+d}Y1C_ec`eea~Y(?$Z-X
zWvBbj#05Taq3?XwktBEU(z2PI%06eNG8e}&Uuu5{$29pRCD<G4bzhzS`SDR@wb$J;
zqatZfcZYj6P>_~#QAzR0V)xY<6<OMHJ9>zw*44aRn`@T2b8-rt37m%4RV2X7>nd_7
zGq0=2CCt38BB{*0t|F6|c?csDnRy*WGMIUqJCRHl@H&c2VdixfNoVGD6iH)7dl2H0
z$;`#fvzaer&S##(oXb2{u@jHvv7m?zW->>ZXE7Hr=P>i=N5agrSwEdw&%AhK2D6^U
z@klmv9@)eHMy9bqk9a(i#XO5M3^C_0Ph}1>2bnXOFJsPNE@n<=p36)-u|r)rhXs?_
zAi|u+T*Ry$emqjh%x)l3z&wNP7c#@SBg7*Mn5Qw9GiR&vVKAQsAvP#u&SEZQW=9n%
zVV=tRdCaAXV^hksysA>k<B<y1&(r#}60HwaT~H;&Ba4*5iEk*m7>_lV;y#f+yELi<
z+llcMlgkxftvd?5QtPqel|E^O`}C}wqSY6tN?N5;=~{_c(i+9FackWxGb*xsRoP3^
z^?W(OdEbFDE8ShWQ)P+!i;StV(0vroVfU{YQ?H<Ih=+CAwmpqcJiJ2X9uMfck~gBd
z#RE|#zqpNm&0XU@kQtR7eLu^5*#|e|&MmyG?^jvFNpMV0PtTG6bT;U<*yMjYo3NTa
z@yI`&%|FQ5Okeb@>f)F$s^WjB)4{r4oSWm`nmhR)>|P$Fqs^hbFDGf=a<`vev~c>t
ziKVY_<BE^O0#GbXpN%r)L_vGb200?s8L7KR`Nj<S0VNVAXvabrkFx-6X2rShxmOm=
zo|7!}>0{5R{oBgUwkIE0ocosh&Enagn4R<nUNPKTidH(u^|?gs8vlw)vg5JmRgpV-
zPOA7mNa<v<cfyF`)5u31?jF#)C>o;V=6Dy6=-t<Lvy*TzJ&p5F6#4uFG3`FPywBjT
z=-U{1Pp0V;NF(p7jaAd!&2u-x*Z0k>n4`~h+u4g>t#>%l9Mb1DyBONBvNJY_7Rp#$
ztXWgMV8V7SM}zyeuKM8rDz$kHmHNXqe{ZSN7jyrsvBg{V*Pc<G()_^pRh*;uX|eat
z0mT>B?Vah_skWpR?U*iK>zi`f37_ojd$A-($}ac4(t;IH)q=lcVJLgkXR&YgyPM1Y
z&fS?dz_P!wP@MnIKD?t__f0&Y=l<9}tq<rsx^*AM1GGYf7}GCQyr+A>eR2L12|f2{
z`5OPrY7{cWZ``xx^PE9N$MKgQ8bf+MZP}tS0qgVnp6*UPGS=xMO!j=bZDhaS7}AH;
z#*jXin^xGT5Ovy!EK&KzozP<Su%o+6#myl;Zg=-<gOENvQUxhAhV%<aJfzR<dqaiF
zZf{7R`I<wOoUTg6qumr*s(7@ULdz68=qL4H*RT==#UpD!CZ~lNkF5Eayimzke@q@$
z@>L&`t9cPwNpeTn1(WB9M^>l=@z8P=kJUJ;cu%)J5ZdW<g|AY2Tdpho$&bl(h1Wsu
zz!M~lX*_b}#}eoo*L+N_D}05L$3vH^c&x(J+Ws486#|`_>DutbH<{t3Q{3c=V&7ir
zE}1yPy|$uK=DT04$ddcqZ&fUi+uT<x3jABt$nWTGcPCcn$ToLQ<x$z{zKXvs?iUvw
zl}+yAs-v>OJ&V6}?jwtj%3AlzB~MI=b?g3!2ijD5d%9EHkCq&j0r&BxM`h66yzD5P
z*~H~Xaddtfe@oov=uuheX0JFZqwddEJTY!dcl8DL^vZSFJG!Z>=!|@~%4)QQ0msc<
zHM_5O?SW*uyl>UIt9`!rrF*1yZr{LF-xw!1yN%a9CV%Rtu76aP^*z3R{CNL0DuWDB
z>ps1Co~&`t;_vFd>>Iu(-BX{sSw7Xb>c$<u2?G^E(C_f(zNZ?N`Q+tpcVo62XuQEU
zBHddWZ%;<ojhp1Y)mYFsZR_D;-*2vS|6~7UX~FeEOh<RE$8QFH*{(b=HUIVvs>~F+
zK6CJl9cCO&n76?CEnSEQHn__UWI7K)y#%TO{0`w+y^z7I0YBP!qlmj8r^|p^Jb#Cu
zN&h6<x8a!rj>PJY;NKyqJkR6hisBfi0p;~P<TGLWOT-A1@}zKIJCNnuQ}2FwAb;{b
z^-6q65lkq@{q=5{n?LIii;G$Otpu~9_3oW+neT`7?swgg@A-Q7c{ktpt9tjp5xrXP
zh7RWYUaxmoB05{|-h42B_It<xH5#`MWl)dkdkmDhNeFt~B>(7lzjv@ern$d6INzTI
zIl?71?uv)9Kaq#Wl1*;aL;3zXR$QeN^sc>YlluS^_p;(zrI-oDBb(e;pg7Ko>q(KB
z3&qPUsY9U@{tH<@yw>;LCifmhf7#?d|M2sU+^l*;y<AtaA-#Y2AxBULmZ{crk@bAL
zeg#)HWtP0cdR}2Y*IUoOB`1LVRpPCi-B4#$*=|dJhxL5F_53C4+1uQAf9LI&yGQ@<
zNB8_|)$Wx;3;XUFD)zabKa=g=cxF=Hch06r_t$T?^!?lG@A}+|)ARcRZ+6MP*M@KR
z^{sj5P1(2bPah>GKZm=RsJrm}RsPzwLWI!?VfUW*3w*=Z^*#Q6&4d-F;L?6)<~Hhl
zj(IEQ;KXz(f;cFW{wUZVl%mAqAUOKaLb+JJ^}SnVW0KR0#db3`)#4l+^#+j{a}yS5
z<|!dYEKUcfU@*wugaC6N>?fVZtvd6SII9)CfvPj#1D-uBL?QU=DC-C~BhTlEN=x9+
z^NBj<A0fkJ+!qfrUm&jZi4q)0DTBpW<-sLBQEhQ1xRyB`bJ4%rCmNWWVV`qQiYDex
zu)ouhqLl?tLy&w#igxDriF>8!O3<H6&_{7trwYwm1p8xBbTIED?w4YS`9<)hO;QY7
zJjH?F91CO>44#o<ggFmf{G1din3Gh1YQY;)1ejF|hB3a(4X{r>FGV%ZAY|V|jOAYq
zpGbTTJh4@ZI*XlR2pTMbAKb*eY%wY{&L>)!w}6W$`9vGDnFBq{hoJZG#E{`YOmpN6
zIG7^EDP{=|Ie8L#WK8dfG#HGqAO{BiX=ov4FJ)jj3|;`;)%Yc&0(H#yQ-<jnV~aDv
zO%^AETbPf+z7##&%KYXM2Q3_sqLT%AOX2)plA_mQKe*rG$>0HtL*SDZXMhJSru0M1
z*CT&_HT*6dF*WFr1Hq-~=pq&vgKF$9WbhM8uuh0xY)Zr?3^MzdVTrW}af<m6=Qm_=
z0rDSaUJ3j3+b|cH(S8o_xKzLmFbLIRoiiJCkoi8+V<!$Xe-}Kh6%NbdOmI^|`WEIF
zVV{lNuwAn=+QQC+1U<~z%h3ac7!u}%;MsFABo+t30~Y6k2bs6RKD8P>%)Adgc|BI0
zVn>LtLXh5oWrpJ(^}s8XV5<~ii>HB0n8!t-Z^Ei!UIQl2*~PpMJo6<iKjvfL84n6^
z(&DM$L1G65z6OK54vZli5KjjWF=wtommkENHx3q5LE<Ukpv9yww3zgj%!^<@tqVhB
zaXz>f>`;bekPbl|8{7>}J}g8(^Y@8+P#`uMvj2ei2pAg+aoI|6FF0NEE#S~GRLJ5f
z;7aEGr0*A^Ivpo;%76q@AZTC%Q=um2W6+nK7NU(gdllxykPz+6i^2JCpnwcr0piKv
zsKu$^YUZ8L=V3DvnHYbnz#|X@-$soyHOtjF#+^e37Kg#L%=1Y9XCYdd_kb@wC`B9d
zA#gB?3NjxD`)>eG)%pL0xB*OW(NqBw`kBo#97xa)GMi<1irG|Ph?)FCev1&p%%khx
z(v#nCMp$6haWG3)h?v%Kl-X3UntAaWOvpo0v@ol~Mi<t##X)cvvj_Vr*t~iyzT^$*
zh~A3@qMzA#!k&<>knwE2%tjy1)_UV9+oxUJqdm;VQ}#0J{ILJ`TLN;G1I(t&PBNPw
zIK^y+XedE{j@b;+2=izUPq%v5p)O{DDWIC!xXK1*;|ZIXjVElem^@*t#pDUwnT;px
zU?xxKkSpwAf$@X`%*GR*vY0&KFthQ5!5O+m#uL^t?~7_r*uZ=YOrEf9j2%I)u$=|3
z!GJtrhsERxJDD@#c*xV8w3s~Ipv9ygvY7Pen2jeK8D*^h{4VTvIl2YL@dTKSCv0Ih
zo^X))1NMZ2VV&N1!oiuEjVBzkm^|S*=KT)4Li*=7wkHfSn+k=QjVG*RHl8rbY&_vP
zi^&s?SWKQ!<m&Pq;|lv(U_9Xvv+;x@7LzAT$<rAaPguy@OY8g`c1w#d0aqq)RI?+D
zYpk5DGc=wo%53z#%*J&F3$#7jqCzFJS?5t^lV3HnS=P0R9g`fJ4;z?u-NbAxTA9td
zZeup<y31nnoF@~~4>B9iIYLbPzj2*`Lfs-_a-CsjQ-NwQor-^oF7}t;0FuB>;9=-|
zYjKE$BWtmEGPr|Ty_yAZ=mk3_0eQYIE5Us5fW?0BN#=DZAhQe0&f;Y75c3_-FX};M
zn2(b^&I>6;x`O`$4)$aJD8l|v6(GTM2!fUYod-&ow_c76Phx*(J`B$MIfjh+P4JXc
zLbNbnQjM3(A#BeUr-9p;YoMQ73C~!B@uv!qU=aizmO%*I#Vk1VFn<~LsZsPu0uM5u
zq6)0Xp_AEn1u9%C#Sn7@Jh={@)UgDq5S(K+2}YPr1qvg&!lr;q=BtrmY6ITwnZE$`
z--W$pj<){=aT^Y)b2Xd%oIw_()!>kb1Hq{TgJI?+q`wW0Btb9mFHfikw?m(XQ*khX
z3z<!UQRX9LzZ3g^3k%+dz~6*1yi8}f=t}TTOfswnDqu8}Xf_p2VK(|8v#D@lg1&_L
zv&cVm7xw>Z7CZ~V<Tfd4nO_GN-HX>{<|*rh2tSBr$GjLky&Z4MmVE*2TP&UhZeunT
zY-iqr^l459wqFQnT_1v=d^IK&^LelzZ!Uw(Gd_v!bRGOcskUDY&cUP_U^e<dnbz-y
zemdqv2eYy7vh)ra3|IyQ$nd1aRKTE>fb547^zHL?f!{`fC7AUc7DvF*^05lhB&}vX
z^GU4#lC4;WESPl_TC@{AVsSpW*J9ESGG7Jzf>zuYEYJnCf%9502`!!h4l^73j#0+?
zPeTTsqXH}=a2NAq$T0sd)EL7<L-bp4F~+pkVjA-%=G3dv1DF#n7DvGC%$Gx7_8@x5
zumizd2%@;%vJ0qYz7P8J4rIuzj${Xsp~cg{oy@<7ed-bP5cAYp%$aB4h?p0Fv!BBd
zGCRg#m<4q(C^!j6l#oHVQdjT+=x3dlqR`?XxSF{S`p_VHh}q;{$NVDnS*NgyG~@gS
z0oAaJ4c-OM9>N@8rUI#e0p{>EsNfrzqzU?#MY@95K|lQ^oPwE6{!!e1Q4ik+efkK7
zOfkm)Bm}AF(Zy^q1Wv=HQF{V+F#E2BKIjwu%uB&DaB(?c@ig#B<_74?3VrJOjVka9
zN<Y^pMo8~KFbqLPiBAM@T}B3mgUpv)2YtCuM47jNL%7*2iE8`Lfpe<C*hMM*<KWbF
zxc6iJ^*mgu-+-G@Fx>;rUJrdCUiZO{5%?i!unf|`EfxpCtrn+)+bpK^?aZrCKza#|
z@fHWbofeau?pcfVPZgj9IS}+(2HD_#iz$Nv<{eZ3PEIE+4uA(O4uXd)rn|&pi?hM!
z)?)mr0+b<TAaIZ%cBz1BoLDRlfCC8}W`2U~YjJ;IaR6MBz)|L(kbNC4Bpgc+fS@*k
z8<@{ff(BfxSsVbjBybz^1+s6#kXRf5cO<aW#ex|dke~%)VsQZ6o4^CiOUb?!Ltt?L
zJea^k%r}sI8_o|F2ih?H0^LeoZbFb*&DsZr2s6Ke3`8folv!P|bm2_M9Jw9`l*2gj
zF#i%S7<6gXz<dq#S;x?07N;IV`K>JYJY~?2F0z<zsX8qteV4_g?`8fzrGExJVsQvO
zXff$eSsZd87-qp)WH4(0U1V`8IDoSo^^j>%33K{J`0^37*y2=hHS<-_Pdkquus8&6
zve+Sm7E3?|ZOose3<P#7=BKE@AY8S@so);wbI|8a!**?PHn^WTs}A}wTsQN|I*fnT
zDRjx0K%|0)m|Kxx+G+HN#UZf3S&@3g=u<2veUSNaN<V}-#Eg_G)G?o~Lyf0bVlx;O
z;MED-!kkqPcew<ciN)FAHs&ixAH{aeYzpY~ZqJeH7VU&nhlrf=-S{PghvA%kY)10`
z22W}mvm;J!JN{9Q{Be>)AJZmCA=Z}a6k+DiGDpGhK(#Hb^*ssP&s;xA>(3=HeM_VC
zL!6#IW&H{K72FmeIO<y#3EtKM^(~9oB%n`K#8=>UfI@J*5PwGeSLSfa#azO?Ay1i$
zo&=^ZO_cs;X{5*Eq)$oI1B(}Mf{8->1&^jc`Vd2G^z>ncxO1ttrwdwQQ(?M}wC(A3
z(YB{+3}Tf($`^DkK?0Kjy+qqXLhrPs{}5XX1$rfwsIakb2a~-SGCFG$n<1lvna#Dx
zhw`HaQTb{U9<33WHd$jpdTgSKPtPUNd!((WJ&^b->y=t<am2<x42Mi?dNj(63aIi$
z0}D(BZOk8WhF#2A<e(7-m@Aowm^U($zoi1Vg~?j`PhvAk$$fnY-WJy7D|bW!V?gc(
zUTQQ0axcV2Pu_!uz!X5<fY|71ar-PiEoNe)M^-wxfrcsG`T{w(^b2aq;s`dy=yd$^
zB#M2a3(4(J={;E>r)Is+$=a~a>~PdOL+Vy6M@rq{x0OQt(Mv0oQ{{KPqC%OIMl*r}
z4%I3&c=d&HUe;GR?_sO}JEVKvNSt*w*Nnbw+Tn!v0;ykRbuiUd;$Mn*vPjO8%e~Sf
zd6S&!?Jt7ykCZXqgfF%grQWlo{=KRR-YF6~;oIK3q%Kme#ECyaeYrO?f>s{)7DeR7
z`s!6W^AEYKHWiN*C^?sE?hT{q;lk-7xgGwK?Ylf#C^M4a!aX@hPIc%wK>;pTg%-9W
zM`MTYnDVgR?T}{j&9bFJ?BjZn!?8ma+t<-XAcW`5ku&`db0cfLXXnTQ|BpFs*n1aM
zyn=j?9e&B`0B)`AaFnyA%WFIAVf#w&nz^#TInUTtVjBtZB3FWL_3ZEiwl68NrFdQ7
z;^-314mWW=O~tlUh>co4Uz~)Cv%}XpBYNw%gP-Nq3%y&5Wq#IEToHQFvO}BqWHIJd
zEt}J8ksV6CGsSY=%=frj<S*^;uPhf{>1CJ?^h#le2&+dD<n;eC;YLJ|=Z{JA1C|Hi
zbnNgt%jxW7hg_D^u@r$_9G>=bYdhhM?C=|wcO=NWSx$#3JM88H=!|2BCho41i|ljp
zPYhT=ha@{p;*8q89rI*`tUca6Pwtj-nwM58FVFIjDoyxD6QuA{wHGVJ;G9KbQtMfd
z7b#Xh<#m_J#m**RCyU4}Y{svb{e$6t)j;ZV{Hp}~f~r26ZvxXl8lgb?2K?w>7*HVI
zf**b0r(igR>jHL^E29tk#(?%F`r2$5=R(}rDpVN|)5l>7lp(o7`WQ@sn9|dyQ3|F&
z`ZQ{o?5pwFOfyD(3!dn^n-*xM?{0=E0expPOa+8zjWJb-zS&Tq0*Qw#rt~R!_=8|7
zNM9fn)2yQk&?g8AWIzeRg+yZssxAIBDR_yKeItH!nM=WN3A-4>bk%9=dzo?Ts%uQw
zT*iP}K-XM`sX}zEWte(^E^!PidyC1Q?r4mj?CB21@K!v~oeM(dXp8BNg#uM*gSV?(
z<~Wq^IX*C(dbU_oh4h^kQ@H~cQ@Q67c`}3uCO`U@6NV|h37FE}#07GJLpPKZXl?Gm
z?~uhegL^D)1|PF{CwRc(UEos|Q%AgEv1+izTZFhuoVNtD`cf9+4+2$)hCa-kglAff
zb1kM8Ra)HOy|Vxvy9weOEHTX}x;Ujk*=)n_HjB4|+brGyelUSM6Zmif_m1&OwMd^C
z6DU5Jz%M26+sxGNChwhv@+)%9@y}Ms`9%(WtD!)une-5$KVuxUm{u-*yP-h##PqF(
z0x^Bys7>IV7W<&T>teo9Jb1A{97^CL3H(d~|2%<D+kE^>TV$ipS<g$HDoL|<YXaYv
z!1pHb!2~{>z{e8!xr_Pu?yd6Kq|8q>Z2ip6Z8vTI^p+jFn{RAtym@NIidAcl|F}u+
z^LZPa<x*MUeW_Wl@m^_`n<rE(5bIX1TyWFE1>U@!a)Ec(PPx?k=}vi>zp_kgDjwb?
zS5I7UQ)MYzddqjowaDcDUGjkJ^0ID`75<?bv=^b)s|U&wZ~rZFxr}-*P*m%s?MBq%
zT|-fax1XYu-U}2BdTA{xx(3mN)&`Y}xXbmv)*=^9`15<350-kbfHT@>Q@^5^30giC
z(e>W!n4IG~HP5>?CYSkI%e(^=r_A?$MR9PxH~Ch?h4Z~@DXyIF9iX@xdc^*ba-C(=
d%ZkeiU*$IM+PGXc;hJq){PH;OmECg2{{lE4*=_&;

diff --git a/pkg/exporter/proto.go b/pkg/exporter/proto.go
index b8d47be2f..800971dc6 100644
--- a/pkg/exporter/proto.go
+++ b/pkg/exporter/proto.go
@@ -79,6 +79,7 @@ func v4FlowToPB(fr *flow.Record) *pbflow.Record {
 		PktDropLatestDropCause: fr.Metrics.PktDrops.LatestDropCause,
 		DnsId:                  uint32(fr.Metrics.DnsRecord.Id),
 		DnsFlags:               uint32(fr.Metrics.DnsRecord.Flags),
+		DnsErrno:               uint32(fr.Metrics.DnsRecord.Errno),
 		TimeFlowRtt:            durationpb.New(fr.TimeFlowRtt),
 	}
 	if fr.Metrics.DnsRecord.Latency != 0 {
@@ -128,6 +129,7 @@ func v6FlowToPB(fr *flow.Record) *pbflow.Record {
 		PktDropLatestDropCause: fr.Metrics.PktDrops.LatestDropCause,
 		DnsId:                  uint32(fr.Metrics.DnsRecord.Id),
 		DnsFlags:               uint32(fr.Metrics.DnsRecord.Flags),
+		DnsErrno:               uint32(fr.Metrics.DnsRecord.Errno),
 		TimeFlowRtt:            durationpb.New(fr.TimeFlowRtt),
 	}
 	if fr.Metrics.DnsRecord.Latency != 0 {
diff --git a/pkg/flow/record_test.go b/pkg/flow/record_test.go
index 8709af0b6..316bbe699 100644
--- a/pkg/flow/record_test.go
+++ b/pkg/flow/record_test.go
@@ -43,6 +43,7 @@ func TestRecordBinaryEncoding(t *testing.T) {
 		01, 00, // id
 		0x80, 00, // flags
 		0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, // latency
+		0x00, // errno
 		// u64 flow_rtt
 		0xad, 0xde, 0xef, 0xbe, 0xef, 0xbe, 0xad, 0xde,
 	}))
@@ -82,6 +83,7 @@ func TestRecordBinaryEncoding(t *testing.T) {
 				Id:      0x0001,
 				Flags:   0x0080,
 				Latency: 0x1817161514131211,
+				Errno:   0,
 			},
 			FlowRtt: 0xdeadbeefbeefdead,
 		},
diff --git a/pkg/pbflow/flow.pb.go b/pkg/pbflow/flow.pb.go
index 16ad2116c..a0ed4ddcd 100644
--- a/pkg/pbflow/flow.pb.go
+++ b/pkg/pbflow/flow.pb.go
@@ -191,6 +191,7 @@ type Record struct {
 	DnsFlags               uint32               `protobuf:"varint,22,opt,name=dns_flags,json=dnsFlags,proto3" json:"dns_flags,omitempty"`
 	DnsLatency             *durationpb.Duration `protobuf:"bytes,23,opt,name=dns_latency,json=dnsLatency,proto3" json:"dns_latency,omitempty"`
 	TimeFlowRtt            *durationpb.Duration `protobuf:"bytes,24,opt,name=time_flow_rtt,json=timeFlowRtt,proto3" json:"time_flow_rtt,omitempty"`
+	DnsErrno               uint32               `protobuf:"varint,25,opt,name=dns_errno,json=dnsErrno,proto3" json:"dns_errno,omitempty"`
 }
 
 func (x *Record) Reset() {
@@ -393,6 +394,13 @@ func (x *Record) GetTimeFlowRtt() *durationpb.Duration {
 	return nil
 }
 
+func (x *Record) GetDnsErrno() uint32 {
+	if x != nil {
+		return x.DnsErrno
+	}
+	return 0
+}
+
 type DataLink struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
@@ -670,7 +678,7 @@ var file_proto_flow_proto_rawDesc = []byte{
 	0x07, 0x52, 0x65, 0x63, 0x6f, 0x72, 0x64, 0x73, 0x12, 0x28, 0x0a, 0x07, 0x65, 0x6e, 0x74, 0x72,
 	0x69, 0x65, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x0e, 0x2e, 0x70, 0x62, 0x66, 0x6c,
 	0x6f, 0x77, 0x2e, 0x52, 0x65, 0x63, 0x6f, 0x72, 0x64, 0x52, 0x07, 0x65, 0x6e, 0x74, 0x72, 0x69,
-	0x65, 0x73, 0x22, 0xef, 0x07, 0x0a, 0x06, 0x52, 0x65, 0x63, 0x6f, 0x72, 0x64, 0x12, 0x21, 0x0a,
+	0x65, 0x73, 0x22, 0x8c, 0x08, 0x0a, 0x06, 0x52, 0x65, 0x63, 0x6f, 0x72, 0x64, 0x12, 0x21, 0x0a,
 	0x0c, 0x65, 0x74, 0x68, 0x5f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x18, 0x01, 0x20,
 	0x01, 0x28, 0x0d, 0x52, 0x0b, 0x65, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c,
 	0x12, 0x2f, 0x0a, 0x09, 0x64, 0x69, 0x72, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20,
@@ -733,35 +741,37 @@ var file_proto_flow_proto_rawDesc = []byte{
 	0x6f, 0x77, 0x5f, 0x72, 0x74, 0x74, 0x18, 0x18, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67,
 	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44,
 	0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0b, 0x74, 0x69, 0x6d, 0x65, 0x46, 0x6c, 0x6f,
-	0x77, 0x52, 0x74, 0x74, 0x22, 0x3c, 0x0a, 0x08, 0x44, 0x61, 0x74, 0x61, 0x4c, 0x69, 0x6e, 0x6b,
-	0x12, 0x17, 0x0a, 0x07, 0x73, 0x72, 0x63, 0x5f, 0x6d, 0x61, 0x63, 0x18, 0x01, 0x20, 0x01, 0x28,
-	0x04, 0x52, 0x06, 0x73, 0x72, 0x63, 0x4d, 0x61, 0x63, 0x12, 0x17, 0x0a, 0x07, 0x64, 0x73, 0x74,
-	0x5f, 0x6d, 0x61, 0x63, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04, 0x52, 0x06, 0x64, 0x73, 0x74, 0x4d,
-	0x61, 0x63, 0x22, 0x6b, 0x0a, 0x07, 0x4e, 0x65, 0x74, 0x77, 0x6f, 0x72, 0x6b, 0x12, 0x25, 0x0a,
-	0x08, 0x73, 0x72, 0x63, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32,
-	0x0a, 0x2e, 0x70, 0x62, 0x66, 0x6c, 0x6f, 0x77, 0x2e, 0x49, 0x50, 0x52, 0x07, 0x73, 0x72, 0x63,
-	0x41, 0x64, 0x64, 0x72, 0x12, 0x25, 0x0a, 0x08, 0x64, 0x73, 0x74, 0x5f, 0x61, 0x64, 0x64, 0x72,
-	0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x0a, 0x2e, 0x70, 0x62, 0x66, 0x6c, 0x6f, 0x77, 0x2e,
-	0x49, 0x50, 0x52, 0x07, 0x64, 0x73, 0x74, 0x41, 0x64, 0x64, 0x72, 0x12, 0x12, 0x0a, 0x04, 0x64,
-	0x73, 0x63, 0x70, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x04, 0x64, 0x73, 0x63, 0x70, 0x22,
-	0x3d, 0x0a, 0x02, 0x49, 0x50, 0x12, 0x14, 0x0a, 0x04, 0x69, 0x70, 0x76, 0x34, 0x18, 0x01, 0x20,
-	0x01, 0x28, 0x07, 0x48, 0x00, 0x52, 0x04, 0x69, 0x70, 0x76, 0x34, 0x12, 0x14, 0x0a, 0x04, 0x69,
-	0x70, 0x76, 0x36, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0c, 0x48, 0x00, 0x52, 0x04, 0x69, 0x70, 0x76,
-	0x36, 0x42, 0x0b, 0x0a, 0x09, 0x69, 0x70, 0x5f, 0x66, 0x61, 0x6d, 0x69, 0x6c, 0x79, 0x22, 0x5d,
-	0x0a, 0x09, 0x54, 0x72, 0x61, 0x6e, 0x73, 0x70, 0x6f, 0x72, 0x74, 0x12, 0x19, 0x0a, 0x08, 0x73,
-	0x72, 0x63, 0x5f, 0x70, 0x6f, 0x72, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x07, 0x73,
-	0x72, 0x63, 0x50, 0x6f, 0x72, 0x74, 0x12, 0x19, 0x0a, 0x08, 0x64, 0x73, 0x74, 0x5f, 0x70, 0x6f,
-	0x72, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x07, 0x64, 0x73, 0x74, 0x50, 0x6f, 0x72,
-	0x74, 0x12, 0x1a, 0x0a, 0x08, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x18, 0x03, 0x20,
-	0x01, 0x28, 0x0d, 0x52, 0x08, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x2a, 0x24, 0x0a,
-	0x09, 0x44, 0x69, 0x72, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x0b, 0x0a, 0x07, 0x49, 0x4e,
-	0x47, 0x52, 0x45, 0x53, 0x53, 0x10, 0x00, 0x12, 0x0a, 0x0a, 0x06, 0x45, 0x47, 0x52, 0x45, 0x53,
-	0x53, 0x10, 0x01, 0x32, 0x3e, 0x0a, 0x09, 0x43, 0x6f, 0x6c, 0x6c, 0x65, 0x63, 0x74, 0x6f, 0x72,
-	0x12, 0x31, 0x0a, 0x04, 0x53, 0x65, 0x6e, 0x64, 0x12, 0x0f, 0x2e, 0x70, 0x62, 0x66, 0x6c, 0x6f,
-	0x77, 0x2e, 0x52, 0x65, 0x63, 0x6f, 0x72, 0x64, 0x73, 0x1a, 0x16, 0x2e, 0x70, 0x62, 0x66, 0x6c,
-	0x6f, 0x77, 0x2e, 0x43, 0x6f, 0x6c, 0x6c, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x52, 0x65, 0x70, 0x6c,
-	0x79, 0x22, 0x00, 0x42, 0x0a, 0x5a, 0x08, 0x2e, 0x2f, 0x70, 0x62, 0x66, 0x6c, 0x6f, 0x77, 0x62,
-	0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x77, 0x52, 0x74, 0x74, 0x12, 0x1b, 0x0a, 0x09, 0x64, 0x6e, 0x73, 0x5f, 0x65, 0x72, 0x72, 0x6e,
+	0x6f, 0x18, 0x19, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x08, 0x64, 0x6e, 0x73, 0x45, 0x72, 0x72, 0x6e,
+	0x6f, 0x22, 0x3c, 0x0a, 0x08, 0x44, 0x61, 0x74, 0x61, 0x4c, 0x69, 0x6e, 0x6b, 0x12, 0x17, 0x0a,
+	0x07, 0x73, 0x72, 0x63, 0x5f, 0x6d, 0x61, 0x63, 0x18, 0x01, 0x20, 0x01, 0x28, 0x04, 0x52, 0x06,
+	0x73, 0x72, 0x63, 0x4d, 0x61, 0x63, 0x12, 0x17, 0x0a, 0x07, 0x64, 0x73, 0x74, 0x5f, 0x6d, 0x61,
+	0x63, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04, 0x52, 0x06, 0x64, 0x73, 0x74, 0x4d, 0x61, 0x63, 0x22,
+	0x6b, 0x0a, 0x07, 0x4e, 0x65, 0x74, 0x77, 0x6f, 0x72, 0x6b, 0x12, 0x25, 0x0a, 0x08, 0x73, 0x72,
+	0x63, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x0a, 0x2e, 0x70,
+	0x62, 0x66, 0x6c, 0x6f, 0x77, 0x2e, 0x49, 0x50, 0x52, 0x07, 0x73, 0x72, 0x63, 0x41, 0x64, 0x64,
+	0x72, 0x12, 0x25, 0x0a, 0x08, 0x64, 0x73, 0x74, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x18, 0x02, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x0a, 0x2e, 0x70, 0x62, 0x66, 0x6c, 0x6f, 0x77, 0x2e, 0x49, 0x50, 0x52,
+	0x07, 0x64, 0x73, 0x74, 0x41, 0x64, 0x64, 0x72, 0x12, 0x12, 0x0a, 0x04, 0x64, 0x73, 0x63, 0x70,
+	0x18, 0x03, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x04, 0x64, 0x73, 0x63, 0x70, 0x22, 0x3d, 0x0a, 0x02,
+	0x49, 0x50, 0x12, 0x14, 0x0a, 0x04, 0x69, 0x70, 0x76, 0x34, 0x18, 0x01, 0x20, 0x01, 0x28, 0x07,
+	0x48, 0x00, 0x52, 0x04, 0x69, 0x70, 0x76, 0x34, 0x12, 0x14, 0x0a, 0x04, 0x69, 0x70, 0x76, 0x36,
+	0x18, 0x02, 0x20, 0x01, 0x28, 0x0c, 0x48, 0x00, 0x52, 0x04, 0x69, 0x70, 0x76, 0x36, 0x42, 0x0b,
+	0x0a, 0x09, 0x69, 0x70, 0x5f, 0x66, 0x61, 0x6d, 0x69, 0x6c, 0x79, 0x22, 0x5d, 0x0a, 0x09, 0x54,
+	0x72, 0x61, 0x6e, 0x73, 0x70, 0x6f, 0x72, 0x74, 0x12, 0x19, 0x0a, 0x08, 0x73, 0x72, 0x63, 0x5f,
+	0x70, 0x6f, 0x72, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x07, 0x73, 0x72, 0x63, 0x50,
+	0x6f, 0x72, 0x74, 0x12, 0x19, 0x0a, 0x08, 0x64, 0x73, 0x74, 0x5f, 0x70, 0x6f, 0x72, 0x74, 0x18,
+	0x02, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x07, 0x64, 0x73, 0x74, 0x50, 0x6f, 0x72, 0x74, 0x12, 0x1a,
+	0x0a, 0x08, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0d,
+	0x52, 0x08, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x2a, 0x24, 0x0a, 0x09, 0x44, 0x69,
+	0x72, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x0b, 0x0a, 0x07, 0x49, 0x4e, 0x47, 0x52, 0x45,
+	0x53, 0x53, 0x10, 0x00, 0x12, 0x0a, 0x0a, 0x06, 0x45, 0x47, 0x52, 0x45, 0x53, 0x53, 0x10, 0x01,
+	0x32, 0x3e, 0x0a, 0x09, 0x43, 0x6f, 0x6c, 0x6c, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x12, 0x31, 0x0a,
+	0x04, 0x53, 0x65, 0x6e, 0x64, 0x12, 0x0f, 0x2e, 0x70, 0x62, 0x66, 0x6c, 0x6f, 0x77, 0x2e, 0x52,
+	0x65, 0x63, 0x6f, 0x72, 0x64, 0x73, 0x1a, 0x16, 0x2e, 0x70, 0x62, 0x66, 0x6c, 0x6f, 0x77, 0x2e,
+	0x43, 0x6f, 0x6c, 0x6c, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x52, 0x65, 0x70, 0x6c, 0x79, 0x22, 0x00,
+	0x42, 0x0a, 0x5a, 0x08, 0x2e, 0x2f, 0x70, 0x62, 0x66, 0x6c, 0x6f, 0x77, 0x62, 0x06, 0x70, 0x72,
+	0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/proto/flow.proto b/proto/flow.proto
index 35803d7d6..bf3209caf 100644
--- a/proto/flow.proto
+++ b/proto/flow.proto
@@ -53,6 +53,7 @@ message Record {
   uint32 dns_flags = 22;
   google.protobuf.Duration dns_latency = 23;
   google.protobuf.Duration time_flow_rtt = 24;
+  uint32 dns_errno = 25;
 }
 
 message DataLink {