metron-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From mmiklav...@apache.org
Subject [10/15] metron git commit: METRON-1657 Parser aggregation in storm (justinleet) closes apache/metron#1099
Date Fri, 20 Jul 2018 15:40:38 GMT
http://git-wip-us.apache.org/repos/asf/metron/blob/f4345383/use-cases/parser_chaining/aggregated_parser_chaining_flow.svg
----------------------------------------------------------------------
diff --git a/use-cases/parser_chaining/aggregated_parser_chaining_flow.svg b/use-cases/parser_chaining/aggregated_parser_chaining_flow.svg
new file mode 100644
index 0000000..28529c8
--- /dev/null
+++ b/use-cases/parser_chaining/aggregated_parser_chaining_flow.svg
@@ -0,0 +1,14 @@
+<!--
+  Licensed to the Apache Software
+	Foundation (ASF) under one or more contributor license agreements. See the
+	NOTICE file distributed with this work for additional information regarding
+	copyright ownership. The ASF licenses this file to You under the Apache License,
+	Version 2.0 (the "License"); you may not use this file except in compliance
+	with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
+	Unless required by applicable law or agreed to in writing, software distributed
+	under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES
+	OR CONDITIONS OF ANY KIND, either express or implied. See the License for
+  the specific language governing permissions and limitations under the License.
+  -->
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="787px"
height="967px" version="1.1" content="&lt;mxfile userAgent=&quot;Mozilla/5.0 (Macintosh;
Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36&quot;
version=&quot;8.9.5&quot; editor=&quot;www.draw.io&quot; type=&quot;device&quot;&gt;&lt;diagram
name=&quot;Page-1&quot; id=&quot;c7558073-3199-34d8-9f00-42111426c3f3&quot;&gt;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&lt;/diagram&gt;&lt;/mxfile&gt;"
style="background-color: rgb(255, 255, 255);"><defs/><g transform="translate(0.5,0.5)"><rect
x="1" y="19" width="90" height="60" fill="none" stroke="#000000" stroke-width="3" pointer-events="none"/><g
transform="translate(34.5,42.5)"><switch><foreignObject style="overflow:visible;"
pointer-events="all" width="22" height="12" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div
xmlns="http://www.w3.org/1999/xhtml" style="display: inlin
 e-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2;
vertical-align: top; width: 22px; white-space: nowrap; word-wrap: normal; text-align: center;"><div
xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;">NiFi</div></div></foreignObject><text
x="11" y="12" fill="#000000" text-anchor="middle" font-size="12px" font-family="Helvetica">NiFi</text></switch></g><rect
x="310.5" y="19" width="137" height="60" fill="none" stroke="#000000" stroke-width="3" pointer-events="none"/><g
transform="translate(331.5,28.5)"><switch><foreignObject style="overflow:visible;"
pointer-events="all" width="95" height="40" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div
xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family:
Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 95px; white-space:
nowrap; word-wrap: normal; text-
 align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;">pix_syslog_router<br
/>Storm spout<div><br /></div></div></div></foreignObject><text
x="48" y="26" fill="#000000" text-anchor="middle" font-size="12px" font-family="Helvetica">[Not
supported by viewer]</text></switch></g><path d="M 132 20 C 132 39 242
39 242 20" fill="none" stroke="#000000" stroke-width="3" stroke-miterlimit="10" pointer-events="none"/><path
d="M 132 20 C 132 -5.33 242 -5.33 242 20 L 242 78 C 242 103.33 132 103.33 132 78 Z" fill="none"
stroke="#000000" stroke-width="3" stroke-miterlimit="10" pointer-events="none"/><g transform="translate(137.5,49.5)"><switch><foreignObject
style="overflow:visible;" pointer-events="all" width="98" height="26" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div
xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family:
Helvetica; color: rgb(0, 0, 0
 ); line-height: 1.2; vertical-align: top; width: 100px; white-space: nowrap; word-wrap: normal;
text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;">pix_syslog_sensor<br
/>Kafka topic</div></div></foreignObject><text x="49" y="19" fill="#000000"
text-anchor="middle" font-size="12px" font-family="Helvetica">pix_syslog_sensor&lt;br&gt;Kafka
topic</text></switch></g><path d="M 243.5 55 L 243.5 43 L 288.5 43 L
288.5 31.5 L 309.5 49 L 288.5 66.5 L 288.5 55 Z" fill="none" stroke="#000000" stroke-width="3"
stroke-linejoin="round" stroke-miterlimit="10" pointer-events="none"/><path d="M 92.5
55 L 92.5 43 L 109.5 43 L 109.5 31.5 L 130.5 49 L 109.5 66.5 L 109.5 55 Z" fill="none" stroke="#000000"
stroke-width="3" stroke-linejoin="round" stroke-miterlimit="10" pointer-events="none"/><rect
x="229" y="155" width="300" height="300" fill="none" stroke="#000000" stroke-width="3" pointer-events="none"/><path
d="M 373 8
 0.5 L 385 80.5 L 385 132.5 L 396.5 132.5 L 379 153.5 L 361.5 132.5 L 373 132.5 Z" fill="#ffffff"
stroke="#000000" stroke-width="3" stroke-linejoin="round" stroke-miterlimit="10" pointer-events="none"/><path
d="M 117 528 C 117 547 227 547 227 528" fill="none" stroke="#000000" stroke-width="3" stroke-miterlimit="10"
pointer-events="none"/><path d="M 117 528 C 117 502.67 227 502.67 227 528 L 227 586
C 227 611.33 117 611.33 117 586 Z" fill="none" stroke="#000000" stroke-width="3" stroke-miterlimit="10"
pointer-events="none"/><g transform="translate(140.5,557.5)"><switch><foreignObject
style="overflow:visible;" pointer-events="all" width="62" height="26" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div
xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family:
Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 64px; white-space:
nowrap; word-wrap: normal; text-align: center;"><div xmlns="http://www.w
 3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;"><span>cisco-5-304</span><br
/>Kafka topic</div></div></foreignObject><text x="31" y="19" fill="#000000"
text-anchor="middle" font-size="12px" font-family="Helvetica">[Not supported by viewer]</text></switch></g><path
d="M 549.5 528 C 549.5 547 659.5 547 659.5 528" fill="none" stroke="#000000" stroke-width="3"
stroke-miterlimit="10" pointer-events="none"/><path d="M 549.5 528 C 549.5 502.67 659.5
502.67 659.5 528 L 659.5 586 C 659.5 611.33 549.5 611.33 549.5 586 Z" fill="none" stroke="#000000"
stroke-width="3" stroke-miterlimit="10" pointer-events="none"/><g transform="translate(573.5,557.5)"><switch><foreignObject
style="overflow:visible;" pointer-events="all" width="62" height="26" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div
xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family:
Helvetica; color: rgb(0, 0, 0); line-height:
  1.2; vertical-align: top; width: 64px; white-space: nowrap; word-wrap: normal; text-align:
center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;"><span>cisco-6-302</span><br
/>Kafka topic</div></div></foreignObject><text x="31" y="19" fill="#000000"
text-anchor="middle" font-size="12px" font-family="Helvetica">[Not supported by viewer]</text></switch></g><rect
x="105" y="669" width="137" height="60" fill="none" stroke="#000000" stroke-width="3" pointer-events="none"/><g
transform="translate(140.5,678.5)"><switch><foreignObject style="overflow:visible;"
pointer-events="all" width="65" height="40" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div
xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family:
Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 65px; white-space:
nowrap; word-wrap: normal; text-align: center;"><div xmln
 s="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;">cisco-5-304<br
/>Storm spout<div><br /></div></div></div></foreignObject><text
x="33" y="26" fill="#000000" text-anchor="middle" font-size="12px" font-family="Helvetica">[Not
supported by viewer]</text></switch></g><rect x="536" y="669" width="137"
height="60" fill="none" stroke="#000000" stroke-width="3" pointer-events="none"/><g
transform="translate(571.5,678.5)"><switch><foreignObject style="overflow:visible;"
pointer-events="all" width="65" height="40" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div
xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family:
Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 65px; white-space:
nowrap; word-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml"
style="display:inline-block;text-align:inherit;text-decoration:inherit;">
 cisco-6-302<br />Storm spout<div><br /></div></div></div></foreignObject><text
x="33" y="26" fill="#000000" text-anchor="middle" font-size="12px" font-family="Helvetica">[Not
supported by viewer]</text></switch></g><path d="M 431.5 272 L 431.5
260 L 599 260 Q 611 260 611 272 L 611 486.5 L 622.5 486.5 L 605 507.5 L 587.5 486.5 L 599
486.5 L 599 272 Z" fill="#ffffff" stroke="#000000" stroke-width="3" stroke-linejoin="round"
stroke-miterlimit="10" pointer-events="none"/><path d="M 611 486.5 L 622.5 486.5 L 605
507.5 L 587.5 486.5 L 599 486.5" fill="none" stroke="#000000" stroke-width="3" stroke-linejoin="flat"
stroke-miterlimit="4" pointer-events="none"/><path d="M 326.5 260 L 326.5 272 L 178
272 L 178 486.5 L 189.5 486.5 L 172 507.5 L 154.5 486.5 L 166 486.5 L 166 272 Q 166 260 178
260 Z" fill="#ffffff" stroke="#000000" stroke-width="3" stroke-linejoin="round" stroke-miterlimit="10"
pointer-events="none"/><path d="M 178 486.5 L 189.5 486.5 L 172 507.5 L 154.5 486.5
L 166 486.5" fill="
 none" stroke="#000000" stroke-width="3" stroke-linejoin="flat" stroke-miterlimit="4" pointer-events="none"/><path
d="M 166.05 606.69 L 178.04 606.31 L 179.29 646.32 L 190.79 645.96 L 173.95 667.5 L 155.81
647.06 L 167.3 646.7 Z" fill="#ffffff" stroke="#000000" stroke-width="3" stroke-linejoin="round"
stroke-miterlimit="10" pointer-events="none"/><path d="M 599 606.5 L 611 606.5 L 611
646.5 L 622.5 646.5 L 605 667.5 L 587.5 646.5 L 599 646.5 Z" fill="#ffffff" stroke="#000000"
stroke-width="3" stroke-linejoin="round" stroke-miterlimit="10" pointer-events="none"/><path
d="M 324 888 C 324 907 434 907 434 888" fill="none" stroke="#000000" stroke-width="3" stroke-miterlimit="10"
pointer-events="none"/><path d="M 324 888 C 324 862.67 434 862.67 434 888 L 434 946
C 434 971.33 324 971.33 324 946 Z" fill="none" stroke="#000000" stroke-width="3" stroke-miterlimit="10"
pointer-events="none"/><g transform="translate(345.5,917.5)"><switch><foreignObject
style="overflow:visible;" pointer-events="a
 ll" width="66" height="26" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div
xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family:
Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 66px; white-space:
nowrap; word-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml"
style="display:inline-block;text-align:inherit;text-decoration:inherit;">enrichments<br
/>Kafka topic</div></div></foreignObject><text x="33" y="19" fill="#000000"
text-anchor="middle" font-size="12px" font-family="Helvetica">enrichments&lt;br&gt;Kafka
topic</text></switch></g><g transform="translate(437.5,776.5)"><switch><foreignObject
style="overflow:visible;" pointer-events="all" width="100" height="26" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div
xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family:
Helvetica; color: rgb(0, 0, 0); l
 ine-height: 1.2; vertical-align: top; white-space: nowrap;"><div xmlns="http://www.w3.org/1999/xhtml"
style="display:inline-block;text-align:inherit;text-decoration:inherit;">cisco-6-302<br
/>Grok parser output<br /></div></div></foreignObject><text
x="50" y="19" fill="#000000" text-anchor="middle" font-size="12px" font-family="Helvetica">cisco-6-302&lt;br&gt;Grok
parser output&lt;br&gt;</text></switch></g><g transform="translate(22.5,341.5)"><switch><foreignObject
style="overflow:visible;" pointer-events="all" width="120" height="12" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div
xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family:
Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; white-space: nowrap;"><div
xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;">cisco-5-304
messages<br /></div></div></foreignObject><text x="60" y="12" fill
 ="#000000" text-anchor="middle" font-size="12px" font-family="Helvetica">cisco-5-304 messages&lt;br&gt;</text></switch></g><g
transform="translate(647.5,341.5)"><switch><foreignObject style="overflow:visible;"
pointer-events="all" width="120" height="12" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div
xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family:
Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; white-space: nowrap;"><div
xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;">cisco-6-302
messages<br /></div></div></foreignObject><text x="60" y="12" fill="#000000"
text-anchor="middle" font-size="12px" font-family="Helvetica">cisco-6-302 messages&lt;br&gt;</text></switch></g><g
transform="translate(324.5,171.5)"><switch><foreignObject style="overflow:visible;"
pointer-events="all" width="108" height="26" requiredFeatures="http://www.w3
 .org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display:
inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2;
vertical-align: top; width: 108px; white-space: normal; word-wrap: normal; text-align: center;"><div
xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;">Aggregated
Storm Parser bolt</div></div></foreignObject><text x="54" y="19" fill="#000000"
text-anchor="middle" font-size="12px" font-family="Helvetica">Aggregated Storm Parser bolt</text></switch></g><rect
x="244" y="337" width="80" height="80" fill="none" stroke="#000000" stroke-width="3" pointer-events="none"/><g
transform="translate(251.5,363.5)"><switch><foreignObject style="overflow:visible;"
pointer-events="all" width="64" height="26" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div
xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 
 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top;
width: 64px; white-space: nowrap; word-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml"
style="display:inline-block;text-align:inherit;text-decoration:inherit;">cisco-5-304<br
/>Grok parser<br /></div></div></foreignObject><text x="32"
y="19" fill="#000000" text-anchor="middle" font-size="12px" font-family="Helvetica">[Not
supported by viewer]</text></switch></g><rect x="434" y="337" width="80"
height="80" fill="none" stroke="#000000" stroke-width="3" pointer-events="none"/><g
transform="translate(441.5,363.5)"><switch><foreignObject style="overflow:visible;"
pointer-events="all" width="64" height="26" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div
xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family:
Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 64px; white-space:
no
 wrap; word-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml"
style="display:inline-block;text-align:inherit;text-decoration:inherit;">cisco-6-302<br
/>Grok parser<br /></div></div></foreignObject><text x="32"
y="19" fill="#000000" text-anchor="middle" font-size="12px" font-family="Helvetica">[Not
supported by viewer]</text></switch></g><path d="M 243.5 705 L 243.5
693 L 278 693 L 278 439.5 L 266.5 439.5 L 284 418.5 L 301.5 439.5 L 290 439.5 L 290 693 Q
290 705 278 705 Z" fill="#ffffff" stroke="#000000" stroke-width="3" stroke-linejoin="round"
stroke-miterlimit="10" pointer-events="none"/><path d="M 278 439.5 L 266.5 439.5 L 284
418.5 L 301.5 439.5 L 290 439.5" fill="none" stroke="#000000" stroke-width="3" stroke-linejoin="flat"
stroke-miterlimit="4" pointer-events="none"/><path d="M 534.5 693 L 534.5 705 L 480
705 Q 468 705 468 693 L 468 439.5 L 456.5 439.5 L 474 418.5 L 491.5 439.5 L 480 439.5 L 480
693 Z" fill="#ffffff" stroke="#000000" stroke-width="3" 
 stroke-linejoin="round" stroke-miterlimit="10" pointer-events="none"/><path d="M 468
439.5 L 456.5 439.5 L 474 418.5 L 491.5 439.5 L 480 439.5" fill="none" stroke="#000000" stroke-width="3"
stroke-linejoin="flat" stroke-miterlimit="4" pointer-events="none"/><path d="M 325.5
383 L 325.5 371 L 335 371 Q 347 371 347 383 L 347 851.5 L 358.5 851.5 L 341 872.5 L 323.5
851.5 L 335 851.5 L 335 383 Z" fill="#ffffff" stroke="#000000" stroke-width="3" stroke-linejoin="round"
stroke-miterlimit="10" pointer-events="none"/><path d="M 347 851.5 L 358.5 851.5 L 341
872.5 L 323.5 851.5 L 335 851.5" fill="none" stroke="#000000" stroke-width="3" stroke-linejoin="flat"
stroke-miterlimit="4" pointer-events="none"/><path d="M 432.5 371 L 432.5 383 L 424
383 L 424 851.5 L 435.5 851.5 L 418 872.5 L 400.5 851.5 L 412 851.5 L 412 383 Q 412 371 424
371 Z" fill="#ffffff" stroke="#000000" stroke-width="3" stroke-linejoin="round" stroke-miterlimit="10"
pointer-events="none"/><path d="M 424 851.5 L 435.5 851.5 L 
 418 872.5 L 400.5 851.5 L 412 851.5" fill="none" stroke="#000000" stroke-width="3" stroke-linejoin="flat"
stroke-miterlimit="4" pointer-events="none"/><g transform="translate(217.5,776.5)"><switch><foreignObject
style="overflow:visible;" pointer-events="all" width="100" height="26" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div
xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family:
Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; white-space: nowrap;"><div
xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;">cisco-5-304<br
/>Grok parser output<br /></div></div></foreignObject><text
x="50" y="19" fill="#000000" text-anchor="middle" font-size="12px" font-family="Helvetica">cisco-5-304&lt;br&gt;Grok
parser output&lt;br&gt;</text></switch></g><rect x="328" y="215"
width="102" height="102" fill="none" stroke="#000000" stroke-width="3" pointer-
 events="none"/><g transform="translate(331.5,252.5)"><switch><foreignObject
style="overflow:visible;" pointer-events="all" width="94" height="26" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div
xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family:
Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 96px; white-space:
nowrap; word-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml"
style="display:inline-block;text-align:inherit;text-decoration:inherit;">pix_syslog_router<br
/>Grok parser<br /></div></div></foreignObject><text x="47"
y="19" fill="#000000" text-anchor="middle" font-size="12px" font-family="Helvetica">pix_syslog_router&lt;br&gt;Grok
parser&lt;br&gt;</text></switch></g></g></svg>
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/metron/blob/f4345383/use-cases/parser_chaining/aggregated_parser_chaining_flow.xml
----------------------------------------------------------------------
diff --git a/use-cases/parser_chaining/aggregated_parser_chaining_flow.xml b/use-cases/parser_chaining/aggregated_parser_chaining_flow.xml
new file mode 100644
index 0000000..22cda9f
--- /dev/null
+++ b/use-cases/parser_chaining/aggregated_parser_chaining_flow.xml
@@ -0,0 +1,14 @@
+<!--
+  Licensed to the Apache Software
+	Foundation (ASF) under one or more contributor license agreements. See the
+	NOTICE file distributed with this work for additional information regarding
+	copyright ownership. The ASF licenses this file to You under the Apache License,
+	Version 2.0 (the "License"); you may not use this file except in compliance
+	with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
+	Unless required by applicable law or agreed to in writing, software distributed
+	under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES
+	OR CONDITIONS OF ANY KIND, either express or implied. See the License for
+  the specific language governing permissions and limitations under the License.
+  -->
+<!-- This is a draw.io diagram.  You can load it from http://www.draw.io -->
+<mxfile userAgent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36" version="8.9.5" editor="www.draw.io"
type="device"><diagram name="Page-1" id="c7558073-3199-34d8-9f00-42111426c3f3">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
 Sq1PHMYVHq0+Jow48ygcv1jQnUyNbNXZJA9vp6Sc0t7zPKtOCmSv6U6ao4J7JlyeOb7B2aZwNemspWpBswz3Y9YN+ss6h6Hjr6JjtNj0tENbJVDakjQ+zwBqFN56neCA9LR6/Fx6MnRsSGdLRfYvlh1+x4WiCqChaJ7zsFG46lr4ik4Kk+VCrBteQeyNFAnUo/PhuSontp8JI4Gr+aowc+OxtHpJ0cH4ejbcrczrzuqJ6DvW3f09AzB9Dukz5SuXSnxHQkxxzFUSixHR6wWvgIy2mx+7FdZZ/OLSnD7Pw==</diagram></mxfile>
\ No newline at end of file


Mime
View raw message