can't capture any traffic on ubuntu 24.04 for chrome/firefox broswer.

[idsinglefunny-ui]

OS: Linux funny 6.17.0-19-generic #19~24.04.2-Ubuntu SMP PREEMPT_DYNAMIC Fri Mar 6 23:08:46 UTC 2 x86_64 x86_64 x86_64 GNU/Linux
chrome: Version 145.0.7632.116 (Official Build) (64-bit)
firefox: 150.0.1 (64-bit)
cmd1: sudo ecapture tls
cmd2: sudo ecapture tls -m pcap -i ens33 --pcapfile=ecapture.pcapng tcp port 443

cmd1 and cmd2 can't got any data from browser while I open the https://www.google.com.

cmd3:

for pid in `pidof chrome`; do sudo pldd $pid | grep -E "tls|ssl|nspr|nss" >>  out; done
sort -u out
cat out

the output of cmd3:

/lib/x86_64-linux-gnu/libgnutls.so.30
/lib/x86_64-linux-gnu/libnspr4.so
/lib/x86_64-linux-gnu/libnss3.so
/lib/x86_64-linux-gnu/libnssckbi.so
/lib/x86_64-linux-gnu/libnss_mdns4_minimal.so.2
/lib/x86_64-linux-gnu/libnssutil3.so

Get nothing traffic from any browser. If i do curl in shell, just like curl https://www.google.com. The ecapture(cmd1 or cmd2) works well.

[dosubot]

Hi @idsinglefunny-ui! I'm Dosu and I’m helping the ecapture team.

This is a known limitation related to how browsers implement TLS differently from tools like curl.

Why curl works but browsers don't:

• curl uses dynamically linked system OpenSSL with accessible symbols, which ecapture can hook via eBPF uprobes.
• Chrome uses statically compiled BoringSSL with stripped symbols — ecapture cannot capture Chrome traffic at all [1]. This is a fundamental limitation since the symbols needed for hooking (SSL_write, SSL_read) are not resolvable.
• Firefox uses NSS/NSPR, which ecapture does support, but requires a different subcommand.

For Firefox, try using the nspr subcommand instead of tls:

sudo ecapture nspr --nspr=/lib/x86_64-linux-gnu/libnspr4.so

The ecapture tls command targets OpenSSL, not NSS. The NSPR module hooks PR_Write/PR_Read/PR_Send/PR_Recv in libnspr4.so (not libnss3.so) [2].

For Chrome, ecapture cannot help due to the stripped static BoringSSL. Alternatives include:

• Setting SSLKEYLOGFILE environment variable and using Wireshark
• Using a proxy like mitmproxy
• Browser DevTools (F12 → Network tab)

To reply, just mention @dosu.

---

Docs are dead. Just use Dosu.

[idsinglefunny-ui]

@dosu

The cmd: sudo ecapture nspr --nspr=/lib/x86_64-linux-gnu/libnspr4.so
The output:

2026-05-10T14:22:33+08:00 INF AppName="eCapture(旁观者)"
2026-05-10T14:22:33+08:00 INF HomePage=https://ecapture.cc
2026-05-10T14:22:33+08:00 INF Repository=https://github.com/gojue/ecapture
2026-05-10T14:22:33+08:00 INF Author="CFC4N <cfc4ncs@gmail.com>"
2026-05-10T14:22:33+08:00 INF Description="Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64."
2026-05-10T14:22:33+08:00 INF Version=linux_amd64:v2.3.0:6.8.0-1044-azure
2026-05-10T14:22:33+08:00 INF Listen=
2026-05-10T14:22:33+08:00 INF Listen for eCaptureQ=
2026-05-10T14:22:33+08:00 INF eCapture running logs logger=
2026-05-10T14:22:33+08:00 INF the file handler that receives the captured event eventCollector=
2026-05-10T14:22:33+08:00 INF skip HTTP server listening
2026-05-10T14:22:33+08:00 FTL config validation failed error="[101] failed to read NSS version: NSS version not found in binary"

[dosubot]

The error happens because ecapture's nspr command needs to read the NSS version from libnss3.so (separate from libnspr4.so). It parses the .rodata ELF section looking for a string matching NSS 3.x or Network Security Services 3.x [1]. Your Ubuntu 24.04 system's libnss3.so either can't be found in the standard search paths, or doesn't contain the expected version string.

To diagnose, try:

# 1. Check if libnss3.so exists where ecapture expects it
find /usr/lib /lib -name "libnss3.so*" 2>/dev/null

# 2. Check if it contains a version string ecapture can parse
strings /usr/lib/x86_64-linux-gnu/libnss3.so | grep -E "NSS|Network Security Services"

You should see something like NSS 3.98 or similar. If the file exists but has no matching version string, that's likely a packaging change in newer Ubuntu/NSS versions where the version format no longer matches ecapture's regex.

Unfortunately, there's currently no --nss flag to manually specify the libnss3.so path — only --nspr exists for libnspr4.so [2]. The NSS path is always auto-detected from standard locations [3]. If auto-detection fails or the version string format has changed in your NSS version, this would likely need a fix in ecapture itself.

To reply, just mention @dosu.

---

Share context across your team and agents. Try Dosu.

[idsinglefunny-ui]

strings /usr/lib/x86_64-linux-gnu/libnss3.so | grep -E "NSS|Network Security Services"

NSS_IsInitialized
NSS_RegisterShutdown
NSS_UnregisterShutdown
NSS_VersionCheck
NSS_GetVersion
NSS_OptionSet
NSS_IsPolicyLocked
NSS_OptionGet
NSS_PutEnv
NSS_PutEnv_Util
NSSBase64Decoder_Create
NSSBase64Decoder_Create_Util
NSSBase64Encoder_Create
NSSBase64Encoder_Create_Util
NSSBase64Decoder_Update
NSSBase64Decoder_Update_Util
NSSBase64Encoder_Update
NSSBase64Encoder_Update_Util
NSSBase64Decoder_Destroy
NSSBase64Decoder_Destroy_Util
NSSBase64Encoder_Destroy
NSSBase64Encoder_Destroy_Util
NSSBase64_DecodeBuffer
NSSBase64_DecodeBuffer_Util
NSSBase64_EncodeItem
NSSBase64_EncodeItem_Util
NSSRWLock_New
NSSRWLock_New_Util
NSSRWLock_Destroy
NSSRWLock_Destroy_Util
NSSRWLock_LockRead
NSSRWLock_LockRead_Util
NSSRWLock_LockWrite
NSSRWLock_LockWrite_Util
NSSRWLock_UnlockRead
NSSRWLock_UnlockRead_Util
NSSRWLock_UnlockWrite
NSSRWLock_UnlockWrite_Util
NSSRWLock_HaveWriteLock
NSSRWLock_HaveWriteLock_Util
NSS_Get_SECOID_AlgorithmIDTemplate
NSS_Get_SEC_AnyTemplate
NSS_Get_SEC_BMPStringTemplate
NSS_Get_SEC_BitStringTemplate
NSS_Get_SEC_BooleanTemplate
NSS_Get_SEC_GeneralizedTimeTemplate
NSS_Get_SEC_IA5StringTemplate
NSS_Get_SEC_IntegerTemplate
NSS_Get_SEC_NullTemplate
NSS_Get_SEC_ObjectIDTemplate
NSS_Get_SEC_OctetStringTemplate
NSS_Get_SEC_PointerToAnyTemplate
NSS_Get_SEC_PointerToOctetStringTemplate
NSS_Get_SEC_SetOfAnyTemplate
NSS_Get_SEC_UTCTimeTemplate
NSS_Get_SEC_UTF8StringTemplate
NSS_Get_sgn_DigestInfoTemplate
NSS_Get_CERT_CertificateRequestTemplate
NSS_InitializePRErrorTable
NSSUTIL_DoubleEscape
NSS_Init
NSS_InitReadWrite
NSS_Initialize
NSS_InitContext
NSS_InitWithMerge
NSS_NoDB_Init
NSS_Shutdown
NSS_ShutdownContext
NSS_Get_SECKEY_DSAPublicKeyTemplate
NSS_Get_SECKEY_RSAPublicKeyTemplate
NSS_Get_SECKEY_RSAPSSParamsTemplate
NSS_Get_CERT_SubjectPublicKeyInfoTemplate
NSS_Get_CERT_SignedDataTemplate
NSS_GetAlgorithmPolicy
NSS_SetAlgorithmPolicy
NSSUTIL_EscapeSize
NSSUTIL_Escape
NSSUTIL_ArgStrip
NSSUTIL_ArgFetchValue
NSSUTIL_ArgSkipParameter
NSSUTIL_ArgGetLabel
NSSUTIL_ArgDecodeNumber
NSSUTIL_ArgIsBlank
NSSUTIL_ArgHasFlag
NSSUTIL_DoubleEscapeSize
NSSUTIL_ArgGetParamValue
NSSUTIL_ArgParseSlotInfo
NSSUTIL_ArgReadLong
NSSUTIL_ArgParseCipherFlags
NSS_LockPolicy
NSSUTIL_ArgParseModuleSpecEx
NSSUTIL_AddNSSFlagToModuleSpec
NSSUTIL_MkSlotString
NSSUTIL_MkNSSString
NSSUTIL_MkModuleSpec
NSS_Get_SECKEY_EncryptedPrivateKeyInfoTemplate
NSS_Get_SECKEY_PointerToEncryptedPrivateKeyInfoTemplate
NSS_Get_SECKEY_PrivateKeyInfoTemplate
NSS_Get_SECKEY_PointerToPrivateKeyInfoTemplate
NSS_GetSystemFIPSEnabled
NSS_Get_CERT_TimeChoiceTemplate
NSS_Get_CERT_CertificateTemplate
NSS_Get_SEC_SignedCertificateTemplate
NSS_Get_CERT_SequenceOfCertExtensionTemplate
NSS_Get_CERT_IssuerAndSNTemplate
NSS_Get_CERT_CrlTemplate
NSS_Get_CERT_SignedCrlTemplate
NSS_Get_CERT_SetOfSignedCrlTemplate
NSS_Get_CERT_NameTemplate
NSS_3.2
NSS_3.2.1
NSS_3.3
NSS_3.3.1
NSS_3.4
NSS_3.5
NSS_3.6
NSS_3.7
NSS_3.7.1
NSS_3.8
NSS_3.9
NSS_3.9.2
NSS_3.9.3
NSS_3.10
NSS_3.10.2
NSS_3.11
NSS_3.11.1
NSS_3.11.2
NSS_3.11.7
NSS_3.11.9
NSS_3.12
NSS_3.12.1
NSS_3.12.3
NSS_3.12.4
NSS_3.12.5
NSS_3.12.6
NSS_3.12.7
NSS_3.12.9
NSS_3.12.10
NSS_3.13
NSS_3.13.2
NSS_3.14
NSS_3.14.1
NSS_3.14.3
NSS_3.15
NSS_3.15.4
NSS_3.16.1
NSS_3.16.2
NSS_3.18
NSS_3.19
NSS_3.19.1
NSS_3.21
NSS_3.22
NSS_3.30
NSS_3.31
NSS_3.33
NSS_3.34
NSS_3.39
NSS_3.43
NSS_3.44
NSS_3.45
NSS_3.47
NSS_3.52
NSS_3.53
NSS_3.55
NSS_3.58
NSS_3.59
NSS_3.62
NSS_3.65
NSS_3.66
NSS_3.77
NSS_3.79
NSSUTIL_3.94
NSSUTIL_3.21
NSSUTIL_3.13
NSSUTIL_3.59
NSSUTIL_3.17.1
NSSUTIL_3.38
NSSUTIL_3.82
NSSUTIL_3.12.3
NSSUTIL_3.12.5
NSSUTIL_3.31
NSSUTIL_3.24
NSSUTIL_3.14
NSSUTIL_3.39
NSSUTIL_3.12
NSS Internal Module
NSS_STRICT_SHUTDOWN
NSS_ENABLE_PKIX_VERIFY
NSS_OUTPUT_FILE
NSS_USE_DECODED_CKA_EC_POINT
CKO_NSS_BUILTIN_ROOT_LIST
CKO_NSS_TRUST
CKO_NSS_SMIME
CKO_NSS_CRL
CKT_NSS_TRUSTED
CKT_NSS_VALID_DELEGATOR
CKT_NSS_TRUST_UNKNOWN
CKT_NSS_MUST_VERIFY_TRUST
CKT_NSS_NOT_TRUSTED
CKT_NSS_TRUSTED_DELEGATOR
CKA_NSS_TRUST
CKA_NSS_DB
CKA_NSS_PQG_SEED_BITS
CKA_NSS_PQG_H
CKA_NSS_PQG_SEED
CKA_NSS_PQG_COUNTER
CKA_NSS_KRL
CKA_NSS_EXPIRES
CKA_NSS_PASSWORD_CHECK
CKA_NSS_PKCS8_SALT
CKA_NSS_SMIME_TIMESTAMP
CKA_NSS_SMIME_INFO
CKA_NSS_EMAIL
CKA_NSS_URL
NSS_POLICY_FAIL=1
NSS_DEFAULT_DB_TYPE
NSS_ReturnModuleSpecData
Vendor NSS FIPS Interface
NSS_DEBUG_PKCS11_MODULE
NSS_FORCE_TOKEN_LOCK
NSS_DISABLE_UNLOAD
NSS_POLICY_LOADED=1
NSS_POLICY_WARN=1
Vendor NSS KEM Interface
NSS Internal PKCS #11 Module
NSS_USE_SHEXP_IN_CERT_NAME
name="%s" parameters="configdir='%s' certPrefix='%s' keyPrefix='%s' secmod='%s' flags=%s updatedir='%s' updateCertPrefix='%s' updateKeyPrefix='%s' updateid='%s' updateTokenDescription='%s' %s" NSS="flags=internal,moduleDB,moduleDBOnly,critical%s"
NSS-POLICY-FAIL %.*s: unknown value: %.*s
NSS-POLICY-FAIL %s: unknown identifier: %.*s
NSS-POLICY-INFO: LOADED-SUCCESSFULLY
NSS-POLICY-FAIL: internal failure with NSS_GetAlgorithmPolicy at %u
NSS-POLICY-INFO: %s is enabled for KX
NSS-POLICY-INFO: %s is enabled for SSL
NSS-POLICY-INFO: %s is enabled for CERT-SIGNATURE
NSS-POLICY-%s: NUMBER-OF-SSL-ALG-KX: %u
NSS-POLICY-%s: NUMBER-OF-SSL-ALG: %u
NSS-POLICY-%s: NUMBER-OF-CERT-SIG: %u
NSS-POLICY-FAIL: policy config parsing failed, not loading module %s
NSS-POLICY-%s: NUMBER-OF-%s: %u
NSS Internal FIPS PKCS #11 Module
pkix_pl_Cert_CreateWithNSSCert

This is what we expected?
NSS_3.44 NSS_3.45 NSS_3.47 NSS_3.52 NSS_3.53 NSS_3.55 NSS_3.58 NSS_3.59 NSS_3.62 NSS_3.65 NSS_3.66 NSS_3.77 NSS_3.79

[idsinglefunny-ui]

`strings /usr/lib/x86_64-linux-gnu/libnss3.so | grep -E "NSS|Network Security Services"

NSS_IsInitialized
NSS_RegisterShutdown
NSS_UnregisterShutdown
NSS_VersionCheck
NSS_GetVersion
NSS_OptionSet
NSS_IsPolicyLocked
NSS_OptionGet
NSS_PutEnv
NSS_PutEnv_Util
NSSBase64Decoder_Create
NSSBase64Decoder_Create_Util
NSSBase64Encoder_Create
NSSBase64Encoder_Create_Util
NSSBase64Decoder_Update
NSSBase64Decoder_Update_Util
NSSBase64Encoder_Update
NSSBase64Encoder_Update_Util
NSSBase64Decoder_Destroy
NSSBase64Decoder_Destroy_Util
NSSBase64Encoder_Destroy
NSSBase64Encoder_Destroy_Util
NSSBase64_DecodeBuffer
NSSBase64_DecodeBuffer_Util
NSSBase64_EncodeItem
NSSBase64_EncodeItem_Util
NSSRWLock_New
NSSRWLock_New_Util
NSSRWLock_Destroy
NSSRWLock_Destroy_Util
NSSRWLock_LockRead
NSSRWLock_LockRead_Util
NSSRWLock_LockWrite
NSSRWLock_LockWrite_Util
NSSRWLock_UnlockRead
NSSRWLock_UnlockRead_Util
NSSRWLock_UnlockWrite
NSSRWLock_UnlockWrite_Util
NSSRWLock_HaveWriteLock
NSSRWLock_HaveWriteLock_Util
NSS_Get_SECOID_AlgorithmIDTemplate
NSS_Get_SEC_AnyTemplate
NSS_Get_SEC_BMPStringTemplate
NSS_Get_SEC_BitStringTemplate
NSS_Get_SEC_BooleanTemplate
NSS_Get_SEC_GeneralizedTimeTemplate
NSS_Get_SEC_IA5StringTemplate
NSS_Get_SEC_IntegerTemplate
NSS_Get_SEC_NullTemplate
NSS_Get_SEC_ObjectIDTemplate
NSS_Get_SEC_OctetStringTemplate
NSS_Get_SEC_PointerToAnyTemplate
NSS_Get_SEC_PointerToOctetStringTemplate
NSS_Get_SEC_SetOfAnyTemplate
NSS_Get_SEC_UTCTimeTemplate
NSS_Get_SEC_UTF8StringTemplate
NSS_Get_sgn_DigestInfoTemplate
NSS_Get_CERT_CertificateRequestTemplate
NSS_InitializePRErrorTable
NSSUTIL_DoubleEscape
NSS_Init
NSS_InitReadWrite
NSS_Initialize
NSS_InitContext
NSS_InitWithMerge
NSS_NoDB_Init
NSS_Shutdown
NSS_ShutdownContext
NSS_Get_SECKEY_DSAPublicKeyTemplate
NSS_Get_SECKEY_RSAPublicKeyTemplate
NSS_Get_SECKEY_RSAPSSParamsTemplate
NSS_Get_CERT_SubjectPublicKeyInfoTemplate
NSS_Get_CERT_SignedDataTemplate
NSS_GetAlgorithmPolicy
NSS_SetAlgorithmPolicy
NSSUTIL_EscapeSize
NSSUTIL_Escape
NSSUTIL_ArgStrip
NSSUTIL_ArgFetchValue
NSSUTIL_ArgSkipParameter
NSSUTIL_ArgGetLabel
NSSUTIL_ArgDecodeNumber
NSSUTIL_ArgIsBlank
NSSUTIL_ArgHasFlag
NSSUTIL_DoubleEscapeSize
NSSUTIL_ArgGetParamValue
NSSUTIL_ArgParseSlotInfo
NSSUTIL_ArgReadLong
NSSUTIL_ArgParseCipherFlags
NSS_LockPolicy
NSSUTIL_ArgParseModuleSpecEx
NSSUTIL_AddNSSFlagToModuleSpec
NSSUTIL_MkSlotString
NSSUTIL_MkNSSString
NSSUTIL_MkModuleSpec
NSS_Get_SECKEY_EncryptedPrivateKeyInfoTemplate
NSS_Get_SECKEY_PointerToEncryptedPrivateKeyInfoTemplate
NSS_Get_SECKEY_PrivateKeyInfoTemplate
NSS_Get_SECKEY_PointerToPrivateKeyInfoTemplate
NSS_GetSystemFIPSEnabled
NSS_Get_CERT_TimeChoiceTemplate
NSS_Get_CERT_CertificateTemplate
NSS_Get_SEC_SignedCertificateTemplate
NSS_Get_CERT_SequenceOfCertExtensionTemplate
NSS_Get_CERT_IssuerAndSNTemplate
NSS_Get_CERT_CrlTemplate
NSS_Get_CERT_SignedCrlTemplate
NSS_Get_CERT_SetOfSignedCrlTemplate
NSS_Get_CERT_NameTemplate
NSS_3.2
NSS_3.2.1
NSS_3.3
NSS_3.3.1
NSS_3.4
NSS_3.5
NSS_3.6
NSS_3.7
NSS_3.7.1
NSS_3.8
NSS_3.9
NSS_3.9.2
NSS_3.9.3
NSS_3.10
NSS_3.10.2
NSS_3.11
NSS_3.11.1
NSS_3.11.2
NSS_3.11.7
NSS_3.11.9
NSS_3.12
NSS_3.12.1
NSS_3.12.3
NSS_3.12.4
NSS_3.12.5
NSS_3.12.6
NSS_3.12.7
NSS_3.12.9
NSS_3.12.10
NSS_3.13
NSS_3.13.2
NSS_3.14
NSS_3.14.1
NSS_3.14.3
NSS_3.15
NSS_3.15.4
NSS_3.16.1
NSS_3.16.2
NSS_3.18
NSS_3.19
NSS_3.19.1
NSS_3.21
NSS_3.22
NSS_3.30
NSS_3.31
NSS_3.33
NSS_3.34
NSS_3.39
NSS_3.43
NSS_3.44
NSS_3.45
NSS_3.47
NSS_3.52
NSS_3.53
NSS_3.55
NSS_3.58
NSS_3.59
NSS_3.62
NSS_3.65
NSS_3.66
NSS_3.77
NSS_3.79
NSSUTIL_3.94
NSSUTIL_3.21
NSSUTIL_3.13
NSSUTIL_3.59
NSSUTIL_3.17.1
NSSUTIL_3.38
NSSUTIL_3.82
NSSUTIL_3.12.3
NSSUTIL_3.12.5
NSSUTIL_3.31
NSSUTIL_3.24
NSSUTIL_3.14
NSSUTIL_3.39
NSSUTIL_3.12
NSS Internal Module
NSS_STRICT_SHUTDOWN
NSS_ENABLE_PKIX_VERIFY
NSS_OUTPUT_FILE
NSS_USE_DECODED_CKA_EC_POINT
CKO_NSS_BUILTIN_ROOT_LIST
CKO_NSS_TRUST
CKO_NSS_SMIME
CKO_NSS_CRL
CKT_NSS_TRUSTED
CKT_NSS_VALID_DELEGATOR
CKT_NSS_TRUST_UNKNOWN
CKT_NSS_MUST_VERIFY_TRUST
CKT_NSS_NOT_TRUSTED
CKT_NSS_TRUSTED_DELEGATOR
CKA_NSS_TRUST
CKA_NSS_DB
CKA_NSS_PQG_SEED_BITS
CKA_NSS_PQG_H
CKA_NSS_PQG_SEED
CKA_NSS_PQG_COUNTER
CKA_NSS_KRL
CKA_NSS_EXPIRES
CKA_NSS_PASSWORD_CHECK
CKA_NSS_PKCS8_SALT
CKA_NSS_SMIME_TIMESTAMP
CKA_NSS_SMIME_INFO
CKA_NSS_EMAIL
CKA_NSS_URL
NSS_POLICY_FAIL=1
NSS_DEFAULT_DB_TYPE
NSS_ReturnModuleSpecData
Vendor NSS FIPS Interface
NSS_DEBUG_PKCS11_MODULE
NSS_FORCE_TOKEN_LOCK
NSS_DISABLE_UNLOAD
NSS_POLICY_LOADED=1
NSS_POLICY_WARN=1
Vendor NSS KEM Interface
NSS Internal PKCS #11 Module
NSS_USE_SHEXP_IN_CERT_NAME
name="%s" parameters="configdir='%s' certPrefix='%s' keyPrefix='%s' secmod='%s' flags=%s updatedir='%s' updateCertPrefix='%s' updateKeyPrefix='%s' updateid='%s' updateTokenDescription='%s' %s" NSS="flags=internal,moduleDB,moduleDBOnly,critical%s"
NSS-POLICY-FAIL %.*s: unknown value: %.*s
NSS-POLICY-FAIL %s: unknown identifier: %.*s
NSS-POLICY-INFO: LOADED-SUCCESSFULLY
NSS-POLICY-FAIL: internal failure with NSS_GetAlgorithmPolicy at %u
NSS-POLICY-INFO: %s is enabled for KX
NSS-POLICY-INFO: %s is enabled for SSL
NSS-POLICY-INFO: %s is enabled for CERT-SIGNATURE
NSS-POLICY-%s: NUMBER-OF-SSL-ALG-KX: %u
NSS-POLICY-%s: NUMBER-OF-SSL-ALG: %u
NSS-POLICY-%s: NUMBER-OF-CERT-SIG: %u
NSS-POLICY-FAIL: policy config parsing failed, not loading module %s
NSS-POLICY-%s: NUMBER-OF-%s: %u
NSS Internal FIPS PKCS #11 Module
pkix_pl_Cert_CreateWithNSSCert
`

This is what we expected?
NSS_3.44 NSS_3.45 NSS_3.47 NSS_3.52 NSS_3.53 NSS_3.55 NSS_3.58 NSS_3.59 NSS_3.62 NSS_3.65 NSS_3.66 NSS_3.77 NSS_3.79