Large firms are vulnerable to targeted hack attacks because they do little to strip data from files on their websites, suggests research.

The data gets added as employees create documents, images and other files as they maintain and update websites.
The research found user names, employee IDs, software versions and unique IDs for internal computers in the files.
Attackers could use it to craft attacks aimed at senior staff, said security firm Glasswall which did the survey.
Banks, law firms, defence contractors and government departments were all found to be leaking data.
"This is really low-hanging fruit," said Lewis Henderson, a vice-president at Glasswall, which carried out the survey for the BBC.
To gather the data, Mr Henderson "scraped" target websites for days to ensure he grabbed copies of all the files published by an organisation. Pictures, PDFs, spreadsheets and other documents made public via the sites were all sampled.
"This was all done from a single IP [internet protocol] address and in broad daylight," he said.
Mr Henderson said that a significant proportion of the files contained metadata which betrayed key information about the people who created that file, when they did it, and the version of the software and machine which they used. About 99% of one particular document type contained this data.
In some cases, he added, user names were annotated with internal user IDs and, in one case, he found a detailed guide to a remote login procedure for a law firm's Far Eastern regional office.
The cache of data gathered would be a perfect starting point for any sophisticated attack that sought to target senior staff or their aides, said Mr Henderson.
"We did what a malicious actor would do," he said, "which is intelligence gathering on a large scale."
Armed with the information, Mr Henderson said an attacker would then turn to social media, especially Facebook and LinkedIn, to relate the names found buried in the documents to real people.
Emails bearing booby-trapped attachments could then be crafted for specific individuals after studying their biographical details and recent activity.
"The more information you have the more you can customise the package sent to targets," he said.
The virus code that attackers buried in the malicious attachments could lurk until it hit the machine used by a specific person, he said, guaranteeing it reached a particular target.
Chief executives and finance heads were rarely targeted directly, said Mr Henderson. Instead attackers tended to go after their aides who are busy, deal with a lot of different people day-to-day and receive a lot of documents.
"Organisations are always surprised when they get hit by targeted attacks," he said. "They always ask how they found out all that information."
Cleaning up files to strip out useful data was "simple", said Mr Henderson.
"All of them will probably have a policy that says this should not happen," he added. "But although there's a policy, there's not necessarily the due diligence and process to do it."
The techniques used by Glasswall were "absolutely" the same as those seen in sophisticated, customised cyber-attacks, said Rick Holland, vice-president of strategy at security firm Digital Shadows.
"Anyone doing a targeted attack is going to look at all the documents in a firm's public footprint," he said.
Any data on user names gathered from that file sweep would then be compared to the logs derived from recent massive data breaches, he said, adding that this was a technique used by security firms who were under contract to test the digital defences of a company or organisation.
The breach logs might reveal a password associated with a user name that an attacker could use in a bid to take over an account, said Mr Holland.
The recent slew of "mega-breaches" meant there were a lot of user names and passwords available to attackers, he said. One site that gathers breach data, Have I Been Pwned, has amassed data on almost four billion accounts stolen from more than 226 websites.
Firms failed to view the files and documents on their websites as a security risk, he said, because they were focused more on internal threats.
"Many organisations just do not know that the risk is out there," he said. "Few look at the total risk picture of their digital footprint."
This week BBC News is taking a close look at all aspects of cyber-security. The coverage is timed to coincide with the two biggest shows in the security calendar - Black Hat and Def Con.
We will have further features and videos on Wednesday, and then coverage from the two Las Vegas-based events over the following days.
Follow all our coverage via this link


Oil giant BP's attempts to limit claims over the 2010 Gulf of Mexico oil spill have been given a boost after a US appeals court halted some payments.

A federal appeals court has asked a lower district court to take a fresh look at which claims are legitimate.
The higher court said that if businesses that did not suffer losses from the spill were compensated, the whole settlement could be invalid.
BP said it was "extremely pleased" with the ruling, which justified its fears.
The oil giant, which had agreed to pay compensation for the disaster, argued that the terms of existing settlement meant that people and businesses were being paid huge sums for false claims.
The appeals court has now ordered Judge Barbier at the lower district court to review the wording of the deal in order to draw up a narrower set of definitions that will exclude unfair claims.
By Robert PestonBusiness editor
BP had originally expected the payouts to total $7.8bn (Â£4.9bn). Earlier this year, the company said the payouts had reached $9.6bn, and in July BP warned that the trust fund set up to compensate victims was about to run out.
Judge Brown accepted that BP may be paying out hundreds of millions of dollars for dubious claims, money that it would be difficult for the company to recover.
"There is no need to secure peace with those with whom one is not at war," she said. "The district court had no authority to approve the settlement of a class that included members that had not sustained losses at all, or had sustained losses unrelated to the oil spill, as BP alleges.
"If the administrator is interpreting the settlement to include such claimants, the settlement is unlawful," she added.
BP has faced about $42.4bn in criminal and civil charges since the disaster aboard the Deepwater Horizon drilling rig, which triggered the worst offshore oil spill in US history.
The blast killed 11 workers and released an estimated four million barrels of oil into the gulf.
BP, which has made two previous, unsuccessful, attempts to halt compensation payments, said in a statement that "it was extremely pleased with today's ruling".
It added: "It affirms what BP has been saying since the beginning: claimants should not be paid for fictitious or wholly non-existent losses.
"We are gratified that the systematic payment of such claims by the claims administrator must now come to an end."


Alabama's top judge has been suspended for the remainder of his term for defying federal court rulings that legalized same-sex marriage.

Roy Moore, 69, violated judicial ethics with an order seen as directing probate judges to deny marriage licences to gay couples, a judicial panel ruled.
The decision was a "politically motivated effort" by radical groups, he said. His lawyer has vowed to appeal.
It is the second suspension for Mr Moore, an outspoken conservative.
In 2003, he was removed for refusing to take down a monument of the Ten Commandments he installed at a state building.
He was re-elected as chief justice of the state's Supreme Court in 2012.
In Friday's decision, the nine-member Alabama Court of the Judiciary unanimously decided to suspend him for the remainder of his term without pay.
The move essentially removes Mr Moore from the bench, as he will be unable to seek re-election at the end of his term, in January 2019, because of age restrictions, his lawyer Mat Staver said.
Reacting to the decision, Mr Moore said in a statement: "This was a politically motivated effort by radical homosexual and transgender groups to remove me as Chief Justice of the Supreme Court because of outspoken opposition to their immoral agenda."
The panel found that Mr Moore's ruling in 6 January showed "disregard for binding federal law" after the US Supreme Court landmark decision in June 2015 affirming gay marriage rights.
Testifying in his defence, Mr Moore said there was uncertainty after conflicting opinions on gay marriage from state and federal courts.
Mr Moore is known for his opposition to same-sex marriage, and has called homosexuality an "inherent evil" in the past.
His suspension was celebrated by the civil rights group that filed the complaints in 2003 and 2016.
"Moore was elected to be a judge, not a preacher," Richard Cohen, president of the Southern Poverty Law Center, said in a statement.
"The people of Alabama who cherish the rule of law are not going to miss the Ayatollah of Alabama."


A teaching assistant who tied a six-year-old girl to a chair at a Newport special needs school will be allowed to return to the classroom.

Annette Henderson was a learning support worker at Maes Ebbw School when the incident happened in January 2016.
The Education Workforce Council hearing in Cardiff found allegations of unacceptable professional conduct against her proven.
She was issued with a reprimand but has not been struck off from teaching.
The disciplinary panel heard the girl - who was known as "Pupil A" and has learning difficulties - was tied to the chair with the sleeves of a hooded top in a double knot after allegedly hitting another pupil.
Mrs Henderson, from Cwmbran, Torfaen, then left the classroom leaving another member of staff to untie her.
She was reported to the deputy head teacher and an investigation was launched at the school.
Mrs Henderson, who had been working at the school for 16 years, admitted tying up the pupil but denied using a double knot or that her behaviour amounted to unacceptable professional conduct.
She told the hearing: "I would never do anything to harm any child.
"I know it looks bad but it wasn't done maliciously, it wasn't done as a restraint but from a safety point of view."
Mrs Henderson was found to have breached school rules on child protection and restraining pupils at the hearing.


Striker Chris O'Grady has joined Championship newcomers Burton Albion on a season-long loan from fellow second-tier side Brighton & Hove Albion.

The 30-year-old spent last season on loan with Nottingham Forest, making 21 appearances and scoring two goals.
O'Grady also had a month-long spell with Sheffield United under current Brewers boss Nigel Clough from mid-November 2014.
"I want to contribute to the challenge. It's an exciting one," O'Grady said.
"I was with Nigel a year ago at Sheffield United and I loved it, but it was cut short as after a month I got called back."
Find all the latest football transfers on our dedicated page.


One of the most highly paid head teachers in the country has been suspended amid claims of exam fixing.

Mark Keary is principal at Green Spring Academy Shoreditch in east London, and is reportedly paid Â£220,000 per year.
He was in charge when three girls from the school - formerly Bethnal Green Academy - fled to join so-called Islamic State in Syria.
Green Spring Education Trust confirmed he was one of "a number" of staff suspended pending an inquiry.
In a statement the trust said: "An investigation into alleged misconduct in relation to some examinations has found irregularities.
"The trustees are taking the matter very seriously and are working with the authorities to address concerns and safeguard students taking exams at the academy this year.
"The trust has taken the decision to suspend a number of staff and, in light of this, additional leadership support is being brought in."
The BBC understands the allegations relate to the academic years of 2015-16 and 2016-17.
The academy is one of the top performing schools in the country.
In its latest results it recorded an 83% A-C pupil pass rate for GCSE English and maths.
It was described by Ofsted inspectors as performing "well above the national average" for its progress score, which reflects the amount of value the school has added to its pupils' learning outcome.
The school made headlines in 2015 when three pupils, Kadiza Sultana, Amira Abase and Shamima Begum, aged 15 and 16 at the time, left the UK during February half term for Syria.
A year later, the family of Kadiza Sultana said she was feared dead after an air strike in Raqqa.
Tower Hamlets Council said as an academy the school was independent of the council, but it had made contact and was offering any support it needed.
A spokesman for the Department for Education said: "There is no place for cheating in our schools and while exam malpractice is extremely rare, it is right that any allegations are thoroughly investigated.
"Following an investigation at Green Spring Academy in Tower Hamlets, exam malpractice has been identified resulting in disciplinary action being taken.
"The Regional Schools Commissioner is working closely with the academy trust to ensure students face as little disruption as possible during this time, and we continue to monitor the situation closely."


Teachers could reduce their workload by outsourcing the marking of pupils' school work to staff overseas, suggests a leading education researcher.

Rebecca Allen, director of Education Datalab, says research has found "incredibly reliable" marking available overseas costing Â£2 to Â£3 per hour.
Dr Allen says there needed to be more radical approaches to cutting workload.
But heads' leader Brian Lightman said he would have "serious concerns" about regularly outsourcing marking.
Mr Lightman, leader of the ASCL head teachers' union, said: "Marking of pupils' work is an integral part of the professional duties of a teacher."
Dr Allen, speaking at an Education Media Centre event, suggested that even though all political parties backed the idea of cutting workload for teachers, there were few practical measures to achieve this and "radically different ways" should be considered.
She said schools should consider re-thinking some of the most time-consuming activities, such as marking pupils' work.
"We've got to look elsewhere. We can't just say things like 'paperwork'. I think we need to be realistic and think in radical ways about things like marking," said Dr Allen, who is also reader in the economics of education at the UCL Institute of Education.
Marking remained popular with parents and was seen as providing evidence for inspections and so teachers were likely to remain under pressure to carry on with large amounts of marking.
As such she suggested that there needed to be more imaginative ways of tackling the workload.
One approach could be to "outsource marking".
She said research projects had found accurate marking could be carried out overseas, in countries such as India, for about Â£3 per hour or less.
Another approach likely to be explored was using computer technology, she said.
There have already been some experiments with outsourcing the marking of vocational qualifications, with candidates' answers being scanned into a computer system in the UK to be checked by staff in India.
But heads' leader Mr Lightman said: "Whilst we would agree that technology can, in appropriate cases be used to process some assessments, I would have serious concerns about outsourcing routine marking.
"Teachers need to see pupils' work themselves so that they can fully understand the degree to which their pupils have understood what has been taught.
"Schools must be resourced adequately to provide them with the time to do this.
"The unnecessary workload surrounding marking has been caused by a high stakes accountability system which places teachers under intense pressure to provide 'evidence' to justify their assessment decisions."
Kevin Courtney, deputy general secretary of the National Union of Teachers, said: "Teachers don't just look at the rightness or wrongness of the student's answer - they want to understand and support the student's learning process. Outsourcing doesn't help at all with assessment for learning."
Teachers' unions have frequently complained that excessive workload is one of the major problems for the teaching profession.
It has been blamed as a barrier for recruiting teachers and a reason for those leaving the profession.
And earlier this year, Education Secretary Nicky Morgan and Deputy Prime Minister Nick Clegg promised that they wanted to find "decisive measures" to "tackle the root causes of unnecessary teacher workload".


Cardiff is to get a public bicycle hire scheme based on London's "Boris bikes".

The city council says 500 self-service bikes will be located across the city from April 2017.
A previous pilot scheme, which saw 70 bikes installed at 10 locations, ended in 2011.
Ramesh Patel, Cabinet Member for Transport, Planning and Sustainability, said: "The new scheme intends to be far larger that the initial pilot scheme.
"The bikes will be based at a number of easily accessed sites including hire stations at district centres, universities and other strategic locations close to existing public transport facilities."
The council wants to secure a provider to supply, maintain and operate the scheme, which it says, will be financed through sponsorship income and at no cost to the taxpayer.
'Boris bikes' were launched in London in 2010, with bikes being hired from any docking station using debit or credit cards. They can later be returned to any empty docking point.
The scheme has since been rolled out to a number of cities across the country.


All five US financial regulators have approved the Volcker rule, designed to restrict the finance industry in the wake of the 2008-09 financial collapse.

Named after former Federal Reserve chairman Paul Volcker, it bans banks from using their own funds for trading activities.
It is considered the centrepiece of the 2010 banking reform legislation known as Dodd-Frank.
Banks will have until 21 July 2015 to comply with the rules.
The five agencies ruling on the measure are: the Federal Reserve, the Federal Deposit Insurance Corporation, the Office of the Comptroller of the Currency, the Securities and Exchange Commission (SEC), which voted the measure through by a vote of 3-2, and the Commodities Futures Trading Commission, which passed the rule by 3-1.
Although the Volcker rule was passed as part of the Dodd-Frank legislation in 2010, it has faced difficulties in implementation, mostly due to opposition from the banking industry.
US President Barack Obama applauded the passage of a rule proposed more than three years ago.
He said in a statement: "The Volcker Rule will make it illegal for firms to use government-insured money to make speculative bets that threaten the entire financial system, and demand a new era of accountability from CEOs who must sign off on their firm's practices."
Paul Volcker, the architect of the measure, said he hopes it will "help the process of restoring trust and confidence in commercial banking institutions."
"It is after all those institutions which benefit from explicit and implicit public support that we count on to provide a strong, safe, and effective financial system," he continued, referring to tax payer bailouts during the financial crisis.
While the bare bones of the Volcker rule have been known for some time, the specifics of its implementation were unveiled for the first time on Tuesday ahead of the vote.
Stretching to 800 pages, at its core, the rule imposes a strict ban on so-called "proprietary trading", which is when banks use their own funds to make trades.
Although banks had been hoping for a less strict interpretation of the rule, recent trading debacles, including JP Morgan's "London whale" loss, seemed to have led to a stronger measure.
Banks have argued that the rule is too comprehensive and makes it difficult to distinguish between trades made for profit and those done simply to hedge against risk.
"This is the era of 'big brother' banking, where the fortunes of banks are tied to the government like never before," Credit Agricole banking analyst Mike Mayo told the BBC.
"Big brother was asleep on the couch before the financial crisis and now big brother seeks to micromanage the banks as a means to prevent future crises, [but] how can anyone in mid-level management really understand a proprietary trade?"
In addition to banning proprietary trading, the Volcker rule also imposes restrictions on how and when banks invest in hedge funds and private equity.
Those looking for stricter market regulation cheered the news.
"[Mr] Volcker himself noted that it's time to make banks boring again. And I think that that's actually correct," Dan Alpert of Westwood Capital told the BBC.
Although banks have been preparing for some time, the stricter-than-expected rules could still hurt profits in the near term.
Q&A: US bank regulation
Proprietary trading was once a big profit generator for banks, and a Standard & Poor's analysis found that even a significantly weakened rule could cost the big eight US banks $2-3bn a year in foregone earnings.
If a more strict rule is established, it could cost them $8-$10bn a year.
It could also further damage Wall Street's ability to compete with overseas markets, unless similar rules are adopted around the globe.
"It will make US banks safer, if the rest of the world goes along with it, then I think it'll make the banking industry safer, but the interlocking aspects of international banking trade are very, very much a threat," said Mr Alpert.
Although individual banks are not expected to sue to stop the implementation of the Volcker rule, some analysts expect that industry groups, such as the US Chamber of Commerce, might engage in litigation to block the measure.
"We are disappointed that regulators may have sacrificed an effective process that could have avoided adverse consequences for Main Street businesses," said the US Chamber of Commerce's David Hirschmann in a statement.
"The Chamber asked regulators to re-propose the Volcker Rule in order to identify and fix unintended consequences before the Rule goes into effect."


Dumex, a baby food brand owned by French firm Danone, has said it will appoint new management following allegations of bribery in China.

Last month, a report carried by China Central Television alleged the firm paid doctors to promote its products.
Dumex said the claims were related to its sponsored programme on nutritional awareness in China.
The company said it accepted "full accountability" for lapses in it and had suspended the programme.
"Disciplinary actions will be taken according to the relevant company regulations including appointing new management personnel to deal with relevant issues," Dumex China was quoted as saying by the Reuters news agency.
The firm added that it would implement a three-month training program in marketing responsibility for all employees to ensure compliance with company policies and government regulations.
The CCTV report, which cited an unidentified former sales manager, alleged that Dumex paid doctors and nurse in the northern city of Tianjin.
The company said at the time that it was "extremely shocked" by the allegations and announced an internal probe into the matter.
Demand for foreign brands has surged in China, after tainted milk scandals in recent years led to a distrust of local producers.
According to some estimates, foreign brands now account for about half of all infant milk sales in China.
Danone is one of the firms that has benefited from the rising demand. It is the country's third-largest baby formula provider.
Danone's baby nutrition unit also makes more than 20% of its overall sales from China.
However, it has faced problems in the country this year.
Danone cut prices for its infant milk formula products by as much as 20% after China's top economic planning body fined it in August for price-fixing.
The firm also had to issue a precautionary recall of its milk formula products last month after one of its suppliers, Fonterra, said some items may have been contaminated.
The allegations against Danone have surfaced amid a government-led crackdown on corruption in its $350bn (Â£220bn) healthcare market.
Some inquiries have targeted foreign firms, including British pharmaceutical giant GlaxoSmithKline, which is being investigated for allegedly using inducements to promote the sale of its medicines.
In the CCTV report, Danone's Dumex brand was accused of giving "sponsorship fees" or payments of up to 10,000 yuan ($1,632) to hospital staff.
A separate report carried by Chinese newspaper 21st Century Business Herald last month, made similar allegations against another Danone unit.
It alleged that Nutricia, maker of Karicare milk formula, bribed doctors to boost sales.
The report, which also cited an unidentified person, claimed that the unit gave gifts and travel subsidies to more than 100 doctors in 14 hospitals in Beijing.
The statement issued by Dumex, did not refer to those allegations.


Samsung Electronics has said its mobile payment system is safe after a hacking attack against its US-based subsidiary LoopPay.

An article in the New York Times on Wednesday said the hacking incident had occurred against LoopPay's network in March.
LoopPay, acquired by Samsung in February, developed the payment system used to run Samsung Pay - a competitor to Apple Pay.
Samsung said user data was not at risk.
In August, the Korean electronics giant launched its mobile wallet service Samsung Pay in South Korea, followed by a launch in the US in September.
Samsung Pay competes against rival Apple's pay facility, which launched last year and operates in the US and UK. Google offers a similar payment system.
The mobile phone payment systems are designed to convince shoppers to use their handsets to make in-store purchases - rather than using cards.
The New York Times article says Chinese hackers - the so-called Codoso Group - gained access to LoopPay's office network and were not discovered until five months later in August.
Samsung said its payment system "was not impacted and at no point was any personal payment information at risk".
The firm said it was an "isolated incident" and stressed that LoopPay was a physically separate network from Samsung Pay.
"The LoopPay incident was resolved and had nothing to do with Samsung Pay," the firm said.
The hackers behind the attack may not have been solely interested in stealing data they could then sell on, Ken Westin from security company Tripwire told Computerworld.
Instead, he said, they may have been looking for information about individuals to help with tracking their movements.
The Codoso Group has been linked to attacks on US military and government sites and has been suspected of being a proxy for the Chinese government. The hack may have liberated information about the habits and travels of key individuals helping China home in on targets.


Glasgow roared into their first European Champions Cup quarter-final with a crushing six-try rout of a humiliated Leicester at Welford Road.

Warriors, just needing a win to secure a last-eight spot, had four tries and a bonus point in the bag by half-time.
Tommy Seymour stretched over before Glasgow earned a penalty try, Mark Bennett and Jonny Gray also crossing.
Ryan Wilson and Tim Swinson added further scores, the outstanding Finn Russell adding 13 points with the boot.
It was Leicester's record European defeat, surpassing their 38-0 defeat at Munster earlier in this season's group stage.
Rather than playing with the burden of pressure and expectation on their shoulders, Glasgow were carefree and thrilling. They grabbed the game by the throat and didn't let go.
From the opening minutes, when they went through 27 phases before Seymour finished brilliantly in the corner, their quality was not in a different league to Leicester's, but a different planet.
They came with bazookas and found that Leicester were packing peashooters. Wilson and Swinson were ridiculously good as ball-carriers and leaders but they had a heavy-duty cavalry with them.
The wit and variety in Glasgow's game was a joy. Leicester - missing some big names, it's true -  were utterly humiliated in their own back yard. Their heroes of the past would have turned away from it all after barely 20 minutes of play.
Russell's boot had Glasgow 10-0 ahead by then. Mathew Tait was harshly binned soon after for a late shoulder on the splendid Lee Jones and while he was away, Glasgow accumulated a points mountain.
Leicester had no ball, not a lot of discipline and no way of surviving.
When Glasgow went for a try off a driven line-out, the Tigers collapsed it and a penalty try was given. Before Tait returned, Glasgow scored again. Another beauty.
It began in midfield when Gordon Reid and Swinson kept it alive in contact. Russell swept left where Glasgow had numbers, and Jones and Wilson put Bennett over in the corner.
Russell's conversion made it 24-0. The relentless barrage and total monopoly of the ball carried on and on.
Tait returned to the defensive line, but it made no difference. Clever footwork from Jones put Gray over for the bonus-point score. The conversion made it an eye-watering 31-0.
Within eight minutes of the start, Wilson got on the ball yet again from a clever line-out routine and blasted through what constituted Leicester defence. A brown paper bag would have offered more resistance.
Wilson finished what he started to bring it to 38-0. Swinson added another just after the tour - two huge performers on the day getting their reward.
The Leicester fans were vanishing now. This was mortification on an epic scale.
For Glasgow, it was lethal and historic. They had to front-up and they did. To a man, they were remorseless. A momentous day in Glasgow's story.
Glasgow head coach Gregor Townsend: "It's a great end to the chapter, from where Scottish rugby started in professional rugby and where it is today.
"Some 20 years ago, Glasgow were conceding 90 points, and 10 years ago there wasn't that much hope in the future of professional rugby with one of the (Scottish) teams closing down and the other two not doing well.
"Now, we've got a situation where we've had a huge number of fans down here and the team winning."
Leicester head coach Aaron Mauger told BBC Radio Leicester: "Glasgow played very well but they broke us down and sapped our energy.
"We just weren't good enough. There's nothing we can take out of the game as a real positive.
"It was clearly embarrassing for all involved and it's not a situation I've found myself in through my career, I've always been part of successful sides.
"It's not through a lack of effort or a lack of wanting to be better, but a lack of execution and collectively we need to be better."
Leicester Tigers: M Tait; A Thompstone, P Betham, J Roberts, T Brady, F Burns, B Youngs; G Bateman, T Youngs (capt), D Cole, E Slater, M Fitzgerald, M Williams, L McCaffrey, L Hamilton.
Replacements: H Thacker (for T Youngs, 63), E Genge (for Bateman, 50), P Cilliers (for Cole, 67), D Barrow (for Fitzgerald, 62), W Evans (for McCaffrey, 75), S Harrison (for B Youngs, 50), G Worth, M Smith (for Betham, 65).
Yellow cards: Mathew Tait (21), Ellis Genge (79)
Glasgow Warriors: S Hogg; T Seymour, M Bennett, A Dunbar, L Jones, F Russell, A Price; G Reid, F Brown, Z Fagerson, T Swinson, J Gray (capt), R Harley, R Wilson, J Strauss.
Replacements: P MacArthur (for Brown, 59), A Allan (for Reid, 64), D Rae (for Fagerson, 64), B Alainu'uese (for Swinson, 70), C Fusaro (for Strauss, 56), H Pyrgos (for Price, 56), N Grigg (for Dunbar, 64), P Murchie (for Hogg, 70).
Referee: Mathieu Raynal (France)
For the latest rugby union news follow @bbcrugbyunion on Twitter.


Road racer Guy Martin says he will not compete for Honda for the rest of 2017 after a frustrating season.

The English rider crashed at this year's TT and the Fireblade bike has been plagued by mechanical problems.
Martin told MCN that he was quitting road racing but he later clarifying his position on Facebook.
"I've not given up on racing or road racing but I've got no plans to do anymore road racing on the Hondas this year," he said.
Martin didn't race at the North West 200 after team-mate John McGuinness crashed in practice and he will not compete in next month's Ulster Grand Prix.
He added: "The TT was a bloody disaster, aside from walking the dog and racing the Mugen, I didn't enjoy it.
"It was clear even before that we were going to struggle and then it turned into me really being a test rider, which I did.
"But after we did more testing at Cadwell a few weeks back, I said to the team the bike won't be competitive at the Ulster Grand Prix and they decided to withdraw me from the event, although they didn't tell me, which is OK as the decision was made for me.
"There's no unfinished business and I want to race classics and oddball stuff."


A road has been renamed after a Victoria Cross-winning soldier - but the sign does not mention his medal.

Sgt Robert Bye won the award for storming a series of German strong points at the start of the battle of Passchendaele, 100 years ago.
He moved to Warsop in Nottinghamshire and its inner relief road will become Robert Bye Way in his honour.
Organisers said the sign did not carry the letters "VC" to reflect his modesty about his wartime exploits.
Mr Bye, who was born in Pontypridd and served with the Welsh Guards, was awarded the Victoria Cross for his actions at the Yser canal on 31 July 1917 - the first day of the three-month battle.
His company came under machine-gun fire from a heavily fortified system of blockhouses.
He single-handedly destroyed one blockhouse and led men to take several more, capturing 70 enemy soldiers.
Mr Bye came to live in Warsop in 1925 with his wife Mabel. They had two sons and two daughters.
Project co-ordinator Adrian Hardy said Mr Bye's surviving daughter Mary Moody described him as a modest man who hardy ever spoke about his VC -  the highest award available to the British and Commonwealth armed forces for gallantry in action with the enemy.
"But we felt it was right that he should be remembered in the town he made his home," Mr Hardy said.
"He was a big part of the community; he was a special constable and helped the British Legion."
Mr Bye was also awarded the Legion d'Honneur by the French government.
There will be dedication event on Sunday and a plaque is planned for Warsop parish church.
Mr Bye, who worked at Warsop and Welbeck collieries, died in 1962.


The value of the pound has fallen in the wake of an opinion poll which suggested the pro-UK campaign had lost its lead ahead of the Scottish independence referendum.

Sterling fell by about 1.3% against the US dollar to a 10-month low of $1.61.
Shares in some firms with Scottish links have also fallen.
The SNP has dismissed a promise by the Chancellor to unveil a timetable for further devolution if voters reject independence as a last-minute "bribe".
George Osborne had said on Sunday that a "plan of action" would be set out in the next few days to give "more powers to Scotland; more tax powers, more spending powers, more powers over the welfare state".
BBC Scotland's political correspondent Glenn Campbell has reported that a new body will also be set up to hammer out more powers for Holyrood if there is a "No" vote on 18 September.
It came in the wake of a YouGov poll for the Sunday Times over the weekend which was the first mainstream study to put the pro-independence Yes Scotland campaign narrowly ahead.
The poll of 1,084 people, carried out between 2 and 5 September, suggested that, of those who have made up their mind, 51% planned to back independence, while 49% intended to vote no.
On Monday morning, shares in Scottish-based firms dominated the top fallers on the stock market.
Edinburgh-based Standard Life fell 3%, Royal Bank of Scotland slipped 2.4% and Lloyds Banking Group, which owns Bank of Scotland and Scottish Widows, dropped 2.7%. Their share prices recovered slightly later in the day but remained in negative territory.
Perth-based energy supplier SSE, Glasgow pumps specialist Weir Group and fund manager Aberdeen Asset Management also all fell between 1.5% and 1.9% early in the day and were still down by the end of trading.
Alistair Darling, head of the pro-UK Better Together campaign, told BBC Radio 4's Today programme that the referendum race was "clearly very tight" but said there was no panic.
He added: "We are in a position now where every voter in Scotland could potentially tip the balance in the referendum.
"But I am confident we will win because we do have a very strong, positive vision of what Scotland can be, both in terms of the opportunities and the security that come from being part of the UK, a strengthened Scottish Parliament, with more powers which is what people want and you can do that without having to break up the country to do it."
Mr Darling stressed that no new powers would be put on the table beyond those already announced by the three main Westminster parties earlier this year.
He added: "The additional powers coming to the Scottish parliament were announced by the party leaders, north and south of the border, some time ago.
"People have said, 'Yes we want to know the timetable and the process' and that is something the government is going to announce this week.
"But remember this, this is a referendum on whether or not we stay on the United Kingdom. It is not a referendum on what further powers we are going to get. We are going to get them anyway, if we stay in the United Kingdom.
Analysis: Brian Taylor, BBC Scotland political editor
It may not be outright panic. But it is hardly calm, measured insouciance either.
Better days may - or may not - return for Better Together but, right now, it is scarcely glad confident morning.
The reason? TOP, that opinion poll. You know, the one by YouGov in the Sunday Times which suggested that the "Yes" campaign might win this referendum.
At the core of the Better Together campaign, a series of interlinked challenges.
Firstly, they are seeking to negate a proposition, that of independence. They are saying "No". They are advocating a "No" vote.
The challenge is to say "No", positively. To project an upbeat vision of the continuing and reformed Union while talking up the downside of independence.
Secondly, they may be Together - but they are scarcely chums.  Indeed, Labour, the Liberal Democrats and the Tories will soon be clutching each warmly by the throat in the UK General Election.
That creates a temptation to diss their comrades as well as their opponents.
Labour leader Ed Miliband has joined Mr Osborne in saying the process of handing more powers to Scotland should begin immediately after any "No" vote.
SNP leader Alex Salmond said it was a "panicky measure" announced without credibility because his Yes Scotland campaign was "winning on the ground".
Neither Prime Minister David Cameron nor any other Conservative Cabinet Minister is expected to visit Scotland this week, but Downing Street denied any suggestion of complacency over the referendum result.
A spokesman for Number Ten was also unable to give any details of when an announcement would be made on setting up a new body to agree a timetable for handing more powers to Scotland. He said this would be an issue to be settled by the political parties.
It is understood discussions are still going on between the three main parties to finalise the details.
Number Ten also confirmed that no contingency plans are being put in place for a possible "Yes" vote in the referendum.
Scottish Finance Secretary John Swinney told the BBC that it was a fair assessment of the polls to say the Yes campaign remained behind in general, but said his experience was that undecided voters were moving to Yes by a factor of two to one.
He added: "The movement is in our favour and the campaign is exciting an enormous amount of interest and activity and participation on the ground across Scotland. I think it is the formidable strength of the 'Yes' campaign that is motivating that."
On the morning after the poll before, "Vote No and get something better" summed up George Osborne's message. It's a tried and trusted message which worked in the independence referendum in Quebec when a last minute poll lead for Yes was transformed into a narrow No. It is, though, a message with a difficult history in Scotland.
Thirty five years ago it was precisely what Scots were told when they were voting in a referendum on a much more modest proposal - to create a Scottish Parliament with some devolved powers.
A former prime minister, a Scot and, as it happens, a Tory, Sir Alec Douglas Home urged his countrymen to vote No and get "something better". What they got soon afterwards was 18 years of Margaret Thatcher's government and no devolution at all (until, that is, Labour were re-elected in 1997).
That is just one reason why Osborne's promise of a plan to transfer new powers to Holyrood - covering tax raising, spending and benefits - caused such confusion yesterday. It is why Alex Salmond felt able to attack it as a sign of "panic" on the No side.
The other reason is that the three rival Westminster parties - the Conservatives, Labour and Liberal Democrats - have not agreed a plan for which precise powers to devolve. Each party has published its own set of proposals which overlap in the areas Osborne listed.
Read more from Nick
Referring to Mr Osborne's announcement, Mr Swinney said: "There is nothing new being offered this week. We may well get a timetable but the substance, the actual powers, the things that matter, Alistair Darling made absolutely crystal clear yesterday in contradicting George Osborne, that on the substance there will be absolutely nothing new.
"If I look at the different offering of the the Labour party, the Liberals and the Conservatives they are all different. I can't answer to you today, neither could Alistair Darling, what would be the proposition that people get under this alternative scenario? So it is vague and it has all been offered before.
"The second point is that in 1979 Scotland was told vote 'No' in the referendum and you'll get a stronger parliament and what we got was a Conservative government for 18 years that we never voted for, industrial devastation and no parliament.
"So I think the moral of the story of recent history in Scotland is if you want a guarantee of strong powers for the Scottish Parliament you have to vote 'Yes' in the referendum a week on Thursday."
Canon Kenyon Wright, who chaired of the Scottish Constitutional Convention that paved the way for the creation of the devolved Scottish Parliament in 1997, said Mr Osborne's announcement had a "whiff of desperation about it".
Canon Wright, who now supports independence, added: "It's now clear that devolution has two main problems. One is that it is incomplete and will never cover the areas needed to protect the people of Scotland on issues like welfare. The second is that it is insecure and always will be, so long as sovereignty remains at Westminster."
BBC political correspondent Ben Wright said the outcome of the referendum now looked "utterly uncertain".
He said the "sleepy assumption" in Westminster among the pro-Union parties that there would be a relatively comfortable vote against independence had been completely destroyed over the past few days.
Voters in Scotland go to the polls on Thursday 18 September, when they will be asked the "Yes/No" question: "Should Scotland be an independent country?"
In the last full week of campaigning, Mr Miliband is expected to be joined on the stump by Gordon Brown.
The former Labour prime minister has said Westminster must deliver on its promise of further devolution so "a No vote doesn't mean nothing happens".
A YouGov poll for the Sunday Times over the weekend was the first mainstream study to put Yes Scotland narrowly ahead.
The poll of 1,084 people, carried out between 2 and 5 September, suggested that, of those who have made up their mind, 51% planned to back independence, while 49% intended to vote no.
The cross-party Better Together campaign had previously retained a lead in polls, often reaching double digits.
In London, the Tory mayor Boris Johnson said Scotland going independent would be "an utter catastrophe".
"We are on the verge of trashing our global name and brand in an act of self-mutilation that will leave our international rivals stunned, gleeful and discreetly scornful," he wrote in the Daily Telegraph.
What are the No parties offering?
And over the weekend the leader of the pro-Union Better Together campaign, Alistair Darling, clarified that the chancellor's announcement was "about the process and timetable" for more devolution, not new powers.
The UK government said the timetable for new powers for Scotland would not break rules on what can be discussed during the referendum period.
Elsewhere, Mr Miliband will on Monday thank trade unions at the TUC general dinner in Liverpool for their work on the Better Together campaign.
He will say the unions have signed a joint statement, "declaring that our strength comes from staying together and that separation would damage the rights and conditions of working people".


We knew that our hopes of qualifying for Euro 2017 rested on getting a positive result in Kazakhstan and we we really pleased to get the job done.

In her latest column for BBC Wales Sport, Seattle Reign midfielder Jess Fishlock looks back at Wales women's Euro 2017 qualifier in Kazakhstan.
We needed to get the three points to keep the campaign alive and did so with a 4-0 win.
Only the eight group winners and six best runners-up are guaranteed automatic qualification to the 2017 tournament in the Netherlands and we are currently third and looking to make up ground.
Had we slipped up against Kazakhstan, we would have been in a difficult spot.
You can only beat the team in front of you and this was a good result.
Considering the conditions out there, it is a testament to the preparation we had, it was a very well-played and professional performance from the girls.
We are still competitive in the group and we have three games left and are looking for three wins.
We have a big game in June against Norway and then a huge double-header with Israel and Austria.
We want to win them all, we definitely need to win at least two out of three.
But I am confident in the girls and we have to keep believing, we keep getting stronger and stronger as the campaign goes on.
There was a lot of travel this time around. It was tough and especially at this time of year, because a couple of days after I get back to Seattle, the new season starts.
For footballers these are factors and, for some of the girls, their travel ended up exceeding 24 hours.
For myself, the trip from Seattle added about 20-hours to the rest of the journey.
I flew from Seattle to London and then on to Cardiff from London to meet up with the squad.
We then went from Cardiff to London, then from London to Moscow, Moscow to Shymkent, which is in the south of the country and then we drove to where our hotel was.
Then on the way back it was Shymkent to Astana, then Astana to Frankfurt, and then Frankfurt to London. Then most of the girls went from London to Cardiff. That's around 24-hours.
I stayed in London and got a hotel in preparation for my flight back to Seattle to play in the season opener.
It can only be passion for your country can't it? I am not going to lie, before I got on that flight to London from Seattle I did think 'this is going to be a long week'.
But for all the girls to play for Wales, we have to have that drive and passion to play for our country. For me that's what it is. It is still like the first time.
That excitement makes me like a little child.
We know how much the success of the men's team has resonated with the public and we feel that buzz, that excitement.
When we get together in the Wales camp, we will be talking to the admin people and the backroom people, asking them 'what are you doing for the Euros?' because it is just such a huge event. Everyone shares the excitement.
We can't go and support them because it is during the season for us, but I will be watching the games, you can count on that!
I will have a ringside seat to see if the Euros makes a big impact in the States.
I will be sending out some tweets to find out which sports bars in Seattle have my boys on.
To be honest, I don't think it will be too difficult. Plenty of people in Seattle will be following the tournament and I just hope I can convert a few of them to be Welsh for a few weeks.
The season starts this weekend for me with Seattle and it is always important in a new season to make a good start.
I am really excited to get back to Seattle actually, we have had a very good and successful week with Wales, so I can go back in a good place.
Jess Fishlock was talking to BBC Wales Sport's Michael Pearlman.


Tropical storm Hagupit is heading to Manila, but has been downgraded from a typhoon after crossing the country.

At least 21 people were killed by the storm, the Red Cross said, with the eastern island of Samar worst hit, but it caused far less damage than feared.
Thousands of people are heading home after about a million people were evacuated from vulnerable areas.
The city of Tacloban, which bore the brunt of Super Typhoon Haiyan last year, has emerged relatively unscathed.
Albay province, which evacuated more than half its population, has called for those people to go home.
After spending three days at a school in Polangi, families are packing into small military trucks, holding one or two plastic bags with the essentials they brought with them.
They worry about the state in which they'll find their homes but many are most worried about their rice fields, their only source of income.
One woman reached her house and found it flooded and uninhabitable. For her that means at least one more night in the evacuation centre.
Hagupit: What did the Philippines do differently?
Hagupit - pictures, tweets and videos from the Philippines
In the capital, residents are preparing for heavy rain and strong winds.
The typhoon is still travelling westwards across the Philippines, and has weakened into a tropical storm, according to the Philippine meteorological authorities.
A government alert on Monday morning stated that residents of the capital and surrounding regions should expect winds of up to 100km/h (62mph) in the next 24 hours, and to prepare for possible flash floods, landslides, and storm surges of up to 2m.
Thousands who live along the coast and riverbanks were evacuated on Monday, reports said. A total of 11.8 million people live in the national capital region.
Manila Mayor Joseph Estrada said the city was "prepared and trained for this", but added: "It's the flooding that we are worried about."
Financial markets closed their doors on Monday along with schools and government offices. Flights and other public transport were halted.
Hagupit has been nowhere near as powerful as Typhoon Haiyan - known as Yolanda in the Philippines - which tore through the central Philippines in November 2013, leaving more than 7,000 dead or missing.
In Tacloban, Hagupit blew away roofs and flooded streets, but the area has escaped the wider devastation of last year.
"There were no bodies scattered on the road, no big mounds of debris," local woman Rhea Estuna told the Associated Press by phone from Tacloban. "Thanks to God this typhoon wasn't as violent."
Tacloban Mayor Alfred Romualdez told the BBC that the immediate task was assessing damage to the temporary shelters in which some people have been living.
He said that the weather was good now but that high tides were making it harder for waterways to drain, despite work to clear debris.
UN official Orla Fagan told Reuters that a lot of people have begun returning to their homes. "In Tacloban this morning, the sun is shining, people just started going back," she said.
The storm made its fourth landfall on Monday night, hitting Batangas province some 100km (60 miles) south of Manila with winds of roughly 100km/h.
At its height, as it approached land on Saturday, gusts of up to 250km/h were recorded.
The authorities said they were better prepared than when Haiyan struck, and organised the largest peacetime evacuation in the history of the Philippines.
Justin Morgan, Oxfam country director for the Philippines, told the BBC that a key factor was a greater focus on the dangers of storm surges, meaning people were moved away from coastal areas.
Joey Salceda, governor of Albay province, told the BBC no casualties and only "negligible damage" had been reported in his province.
He said the storm had been identified as a threat in late November, giving officials time to identify population at risk, evacuate them two days ahead of the storm and prepare food supplies.
Known locally as Typhoon Ruby, Hagupit has nonetheless caused major damage in several towns in the east.
The Philippine Red Cross said at least 21 people had died over the weekend, with 18 of those on the eastern island of Samar, where Hagupit made landfall on Saturday.
The mayor of Dolores, a town on Samar, said that 80% of homes there had been destroyed. One resident reportedly died after a tree fell on him.
Two more people - a one-year-old girl and a 65-year-old man - died from hypothermia in the central province of Iloilo, the National Disaster Risk Reduction and Management Council said.
A total of 183 flights had been cancelled and five airports closed, the agency said, and there were power outages in 16 provinces.


The Sun has become the first British newspaper to publish the photos of a naked Prince Harry taken in Las Vegas.

Its owner News International said it was making the move despite warnings from the Royal Family's lawyers that it would be an invasion of his privacy.
The Sun said the images were widely available around the world, its readers had a right to see them and freedom of the press was being tested.
The pictures emerged from a private weekend the prince spent with friends.
The two photos of the prince and a naked woman in a hotel room are believed to have been taken on a camera phone last Friday.
They first appeared on US website TMZ earlier this week.
In Friday's Sun, under the headline "Heir it is", the paper says: "Pic of naked Harry you've already seen on the internet".
David Dinsmore, managing editor of the Sun, said the paper had thought "long and hard" about publication and added: "For us this is about the freedom of the press.
"This is about the ludicrous situation where a picture can be seen by hundreds of millions of people around the world on the internet but can't be seen in the nation's favourite paper read by eight million people every day.
"This is about our readers getting involved in the discussion with the man who is third in line to the throne - it's as simple as that."
In an editorial, the newspaper said the pictures represented a crucial test of Britain's free press.
St James's Palace had contacted the Press Complaints Commission (PCC) on Wednesday because it said it had concerns about the 27-year-old prince's privacy being intruded upon, in breach of the editors' code of practice.
The palace said it had heard a number of UK newspapers were considering using the pictures, although none had until now.
In reaction to the Sun's decision, a palace spokesman said: "We have made our views on Prince Harry's privacy known. Newspapers regulate themselves, so the publication of the photographs is ultimately a decision for editors to make.
"We have no further comment to make either on the publication of the photographs or on the story itself concerning Prince Harry's private holiday in Las Vegas."
TMZ reported that Harry had been pictured in a group playing "strip billiards".
The Sun said in a statement that in publishing the photos it was not making any moral judgement about the prince's activities.
It said: "He often sails close to the wind for a royal - but he's 27, single and a soldier.
"We like him. We are publishing the photos because we think Sun readers have a right to see them. The reasons for that go beyond this one story."
It added: "There is a clear public interest in publishing the Harry pictures, in order for the debate around them to be fully informed.
"The photos have potential implications for the prince's image representing Britain around the world. There are questions over his security during the Las Vegas holiday. Questions as to whether his position in the Army might be affected.
"Further, we believe Harry has compromised his own privacy."
The non-publication of the photos by British newspapers despite their publication elsewhere had prompted a debate about the impact the Leveson Inquiry was having on press behaviour.
Former News of the World executive editor Neil Wallis said it showed British newspapers had been "neutered".
The Leveson Inquiry was set up to investigate the practices and ethics of the press following the phone-hacking scandal.
Commons culture, media and sport select committee chairman John Whittingdale said of the Sun's decision: "The fact that [the photos] happened is well known. How the public interest is served by doing this is not clear."
Ex-Deputy Prime Minister John Prescott said the Sun had shown "absolute utter contempt" for the law and the Leveson Inquiry.
Former Sun editor Kelvin Mackenzie told Newsnight that in his opinion the decision to publish the pictures could not have been made without News International boss Rupert Murdoch's consent.
Mr Mackenzie added: "I'm unsure why the establishment hate newspapers so much but what I'd like to see is editors get off their knees and start pushing back against these curtailments in what will eventually, I promise you, lead to the closure of newspapers.
"People should stop worrying about privacy and start worrying about what free speech will mean to this country if the Levesons and the Camerons of this country have their way."
Both the Daily Mirror and the Independent said they had not published the photos because they considered that they breached the prince's privacy.


A man has appeared in court charged with killing a woman from Cardiff whose body was found in a hotel room over a year ago.

Sammy Almahri, 44, a US national who was living in New York, denies murdering Nadine Aburas, 28, who was found in Cardiff's Future Inn on 31 December 2014.
The case at Cardiff Crown Court was adjourned for a further hearing on 25 January.
Mr Almahri was remanded in custody.


A woman and her three children who went missing from Inverness have been found safe and well.

Kelly Maclean, 32, had last been seen in the early hours of Sunday morning.
Her children Lee, aged 12, Dean,11, and five-year-old Kelsey had also not been seen since.
Officers said they were concerned for Ms Maclean's welfare and had urged anyone with information on her whereabouts to contact them.


Britain's deaf children are being "failed by the education system", a new study suggests.

Researchers say more than half the deaf children they assessed had reading difficulties as severe as the problems faced by hearing dyslexic children.
The team found there are no specific interventions routinely offered to deaf children to support reading.
The Department for Education says it is giving Â£1m to councils in England over two years to help deaf children.
The study was carried out by a team from City University London, and was funded by the Nuffield Foundation.
It compared two groups of children across the UK aged 10 to 11.
One was made up of deaf children who communicate orally rather than by using sign language (known as "oral deaf"), and the other hearing children with dyslexia.
In all, 79 children with a severe-profound level of deafness took part in the study, representing a significant proportion of oral deaf children in the UK in this age group.
As a result of their hearing loss, deaf children have difficulty hearing the speech sounds that make spoken language and upon which reading is based.
The report says that hearing children with literacy difficulties are "likely to be described as dyslexic", which results in them being given the specialist support they need.
The team found that the oral deaf children were not offered the right kinds of support, and were "needlessly falling behind" their peers.
Dr Rosalind Herman, one of the report's authors, said: "Too many deaf children continue to fail at reading.
"Poor reading is not an inevitable outcome for every deaf child," she said.
"With a proper understanding of their reading deficits and appropriate support, the outlook for deaf children in the UK can change."
Josh Hillman, of the Nuffield Foundation, said the report "reveals the extent to which the education system is currently failing to address the needs of deaf children with reading difficulties".
However, he sees some cause for optimism.
"It also demonstrates that it is possible to identify and address those difficulties at an early stage," he said.
"We now need to see specialist reading interventions for deaf children who communicate using spoken language to ensure they receive the equivalent support to their hearing classmates."
The Department for Education points out that in 2013 "more deaf children than ever before achieved five good GCSEs including English and maths" in England.
Last year, 42.7% of deaf children achieved 5 GCSEs at A* to C including English and maths.  This is compared with 37.4% in the previous year and 28.3% in 2007/08.
"We are providing Â£1 m over two years so that councils can work together more effectively to help deaf children," a DfE spokesman said, "and we are also funding the National Deaf Children's Society and the National Sensory Impairment Partnership to look at how well councils support deaf students."


A man has been arrested on suspicion of arson over a fire which destroyed a Grade II-listed church.

The Church of the Ascension in Lower Broughton, Salford, was gutted by a blaze on Sunday night.
A 22-year-old man has been arrested and bailed until 30 March pending further police inquiries.
Det Sgt Karl Dalton said officers want to speak to anyone who may have seen "a group of youths on bikes near to the church around the time of the fire".
The fire, which began at about 23:00 GMT on Sunday, took firefighters several hours to bring under control.
Following the blaze, the top part of the two gable ends of the church, which was built in 1869, were dismantled to make it safe.


All-rounder Mohammad Nawaz has been banned for two months as part of an investigation into corruption in the Twenty20 Pakistan Super League.

Nawaz, 23, failed to report a suspicious approach inviting him to engage in "corrupt conduct".
He will only serve half of the ban if pays a £1,500 fine and co-operates with the Pakistan Cricket Board (PCB).
He is the second player to be suspended by the PCB, after Mohammad Irfan was banned for a year in March.
The 7ft 1in seamer twice failed to report approaches by bookmakers linked to spot-fixing.
The PCB has already initiated proceedings against Sharjeel Khan, Khalid Latif, Nasir Jamshed and Shahzaib Hasan.
Nawaz, who has has played three Tests, nine one-day internationals and five T20 matches for Pakistan, admitted wrongdoing and the ban will begin with immediate effect.


A crofter on the Western Isles got more than he bargained for when one of his pregnant ewes gave birth to five lambs.
Usually sheep have between one and three offspring.
Sam MacDonald, who has more than 700 sheep at Baleshare on North Uist, said of the ewe: "She was very uncomfortable beforehand.
"I think she was relieved to get the lambs out and is doing fine now."
The ewe is raising two of the lambs while two others have been given to other ewes and one is being looked after by a neighbour.


A man arrested on suspicion of criminal damage, assaulting a police constable and breach of a court order, has escaped from custody at hospital.

Jordan Georgiou, 22, fled from Colchester General Hospital while being treated for injuries on Friday evening.
Mr Georgiou, from Clacton, is 5ft 6ins tall, with short brown hair and was dressed in a hospital gown.
An 18-year-old man and two women aged 19 and 21, all from Clacton, have been arrested for assisting an offender.
Anyone with information on Mr Georgiou's whereabouts is asked to contact police urgently.


The UK box office has seen a 10% rise in ticket sales in the first half of the year, compared to the same period in 2014.

Figures released by the British Film Institute (BFI) show there have been 83 million tickets sold so far this year.
The BFI added that the market share of UK films was 32% - up from 26.8% last year.
The figures include joint UK-US productions including The Avengers: Age of Ultron and The Theory of Everything.
But it also includes independent films such as the Shaun the Sheep Movie, which made £13.7m and Far From the Madding Crowd, starring Carey Mulligan, which made £6.1m.
It is the highest share for UK films since 2012, the BFI added.
A total of 358 films were released in cinemas in the UK and the Republic of Ireland in the first half of the year.
Together they grossed £591m, compared to £490m from 342 films over the same period last year.
The biggest earning film so far this year is Jurassic World, which has grossed more than £57m so far.
The Avengers: Age of Ultron which was made in the UK is in second place with £48m.
Amanda Nevill, CEO of the BFI, said the report "shows that UK audiences are continuing to flock to the cinemas, ensuring film continues to be a vibrant contributor to the economy.
"It is particularly exciting for the UK creative sector to see films made in the UK achieving a strong share of the UK box office market."
The box office should continue to be healthy over the next six months, with the likes of Star Wars: The Force Awakens and James Bond film Spectre boosting cinema attendance.
The BFI report also includes details on how much is being spent on film production in the UK.
The first six months of the year has seen £594m spent on film production spread across 79 films.
Inward investment has accounted for £518m of that figure, across 21 movies.
Domestic UK films budgeted at £500,000 and above have contributed £56m, across 24 films.
Amanda Nevill called the figures "encouraging".
"At this stage of the year, the overall spend on film production is encouraging with a higher percentage of spend being made in the UK but with new productions in the pipeline and due to start filming in the coming months, the full year's statistics at year end will give us a fuller picture," she said.
Figures released also show that £279m has been spent so far this year on 30 high-end TV productions, including the  final series of Downton Abbey, Churchill's Secret, The Dresser and the third series of Endeavour.


Three flood warnings have been issued for the River Wye in Hereford.

The Environment Agency recorded a water level of 13ft (3.87m) at the Old Wye Bridge Gauge at 12:30 GMT and warned the level was rising.
It said a peak level of up to 16ft (4.8m) was expected overnight. The River Severn is also rising and was expected to reach a peak of up to 19ft (5.7m) on Friday.
The Met Office has also predicted heavy rain and strong winds overnight.


While Tuesday night's face-off between Republican Mike Pence and Democrat Tim Kaine likely won't have a lasting impact on who wins this presidential race, it should make for some interesting political theatre.

Historically, the vice-presidential debate is given scant media attention compared to the top-of-the-ticket showdowns. With one notable exception - Palin v Biden in 2008- the television audience is significantly smaller, as well. Chances are a showdown between two middle-age white men with Mid-Western roots isn't going to move the needle as far as national attention goes.
For political junkies longing for a fix before Sunday's second presidential debate, however, the event can reveal the state of the two campaigns and what could be in store as the race heads into its final weeks.
Here are four things to look for when the bottom of the ticket takes the stage in the small central Virginia town of Farmville at 21:00 EDT (02:00 BST) on Tuesday.
Back in 2012, Barack Obama had a lacklustre first debate performance, putting rank-and-file Democrats into a state of near panic, as polls showed Republican Mitt Romney pulling into a dead heat.
A week later, Vice-President Biden went up against Paul Ryan and gave the kind of aggressive, animated performance that rallied his partisan troops from their doom-and-gloom stupor.
Mr Pence faces a similar situation on Tuesday night. While Hillary Clinton may not have delivered a knock-out blow to Donald Trump in New York last Monday, the Republican nominee has spent the last week punching himself in the face.
Thanks to his feud with beauty pageant winner Alicia Machado, his early morning Twitter meltdown on Friday, the New York Times article on his 1995 tax returns and renewed questions about his charitable foundation, Mr Trump is in a slump. Mr Pence's task is to be this year's Biden and calm his party's frazzled nerves.
The big question: Mr Pence needs to post a clean sheet in this debate and change the subject from Mr Trump's tumultuous week. Mr Kaine needs to keep the Clinton momentum rolling. Who can pull it off?
One of the traditional roles for vice-presidential nominee is to serve as the campaign's attack dog - going after the opposition with a ferocity that would be unbecoming for the top-of-the-ticket candidate.
Of course enthusiastic aggression hasn't been a problem for Mr Trump in the past, but after his debate Monday night, some of his supporters were left wishing their man had been more direct in his criticism of his opponent.
Now's the chance for Mr Pence to go on the offensive. The problem for him, however, is he's not exactly the most adept rhetorical swordsman. While someone like New Jersey Governor Chris Christie would have joyfully tried to demolish Mrs Clinton, Mr Pence's Mid-Western reticence may make him ill-suited for the task. Where he does decide to strike could preview the areas the Trump campaign plans to focus on in the campaign's final weeks, however. Will it be on personal issues? The Clinton Foundation? Economic policy?
Mr Kaine isn't much of a bomb-thrower either. His past attacks on Mr Trump have been more along the lines of awkward-dad humour than outright belligerence. He's been given plenty of material to work with over the past week, but his challenge will be to find the best way to draw blood. Mr Trump's taxes are an obvious target that's much in the news, but rehashing his questionable behaviour toward women may prove to hold more electoral opportunity.
The big question: Which mild-mannered politician can find his inner mean streak?
Google the words "Mike Pence defends", and the nearly half a million hits will reveal the size of the task confronting the Republican vice-presidential nominee.
He's been called on to run interference for Mr Trump on taxes, immigration, Vladimir Putin, Donald Jr's Skittles tweet ... just about every bit of controversial news coming out of his team's campaign since he joined the ticket.
Playing Donald Trump's straight man is a thankless job made all the more difficult because Mr Pence is a conventional politician expected to behave in conventional ways. While the New York real estate mogul has been singularly adept at shrugging off criticism, Mr Pence - who wants to stay electorally viable - is more constrained by political norms.
Mr Kaine will have his own challenges, although they're of the more traditional variety. He could have to explain his candidate's shifting stance on global trade deals - such as backing away from support for the Trans-Pacific Partnership - even though he has praised trade deals in the past. And he will almost certainly be pressed on Mrs Clinton's email controversy and conflict-of-interest allegations involving the Clinton Foundation.
The big question: Mr Kaine won't get off easy, but has any vice-presidential nominee faced a more extraordinary challenge than Mike Pence?
All the focus will be on Mrs Clinton and Mr Trump, but that doesn't mean the two vice-presidential candidates can completely avoid questions about their own records. They may lob a few attacks each other's way, if only to throw their opponent off balance.
The Republicans are already telegraphing a possible attack against Mr Kaine's past with a web video criticising him for representing death-row inmates convicted of violent offences. The Democrat also may be forced to answer for gifts he accepted from lobbyists while he was governor of Virginia.
Mr Pence also has some potential vulnerabilities. As Indiana governor he became mired in the controversy surrounding his state's law allowing businesses to discriminate against gay customers. He also wrote a newspaper column and hosted a talk-radio show in the 1990s that could provide fodder for Mr Kaine. For instance, he called climate change a myth and said tobacco smoking "doesn't kill".
The last thing a participant in a vice-presidential debate wants to do is to become the story because it's almost never good news. Dan Quayle made headlines for all the wrong reasons in his 1988 debate, when he blundered headlong into Lloyd Bentsen's "you're no Jack Kennedy" takedown.
The good news for Mr Quayle, of course, is that even that historic humiliation didn't prevent his ticket from winning the White House.
The big question: Could either candidate mess up so badly that his moment in the spotlight lives on past this election?
49%
Hillary Clinton
45%
Donald Trump
Please enable Javascript to view our poll of polls chart.
Last updated October 3, 2016
The BBC poll of polls looks at the five most recent national polls and takes the median value, ie, the value between the two figures that are higher and two figures that are lower.


Aberdeen manager Derek McInnes expects "a fight" to secure the runners-up spot in the Scottish Premiership.

The Dons moved above Rangers into second on goal difference on Saturday.
"There's still a lot of football to play, but the table is probably what we thought it would be like," said McInnes after his side beat Partick Thistle.
"There's no surprises. We always felt we were going to be competitive and, as long as we're there in 15 games' time, that's all I'm concerned about."
McInnes' men, who have finished second in the last two seasons, beat Thistle thanks to second-half goals from Jayden Stockley and Ryan Christie.
Meanwhile, in Glasgow, Rangers drew 1-1 with Ross County and the Ibrox side and the Dons now trail Celtic by 27 points.
"There's still a lot of football to play, but we recognise we're in a fight," McInnes said.
"Celtic were going to be ahead of others if they played to their potential.
"A lot of our players are playing, individually, well, but I'm fortunate I've got different players available to suit what's needed.
"We've a settled team, but it's important to stress the ability and capability of the rest of the squad because they're team players, but they're itching to play their part."
Rangers fans voiced their discontent following the Ibrox side's draw, which followed a 4-1 loss to Hearts on Wednesday.
Manager Mark Warburton said: "They are going to boo. They expect Rangers to win at home.
"I thought the support were generally good in the second half. I don't think they can accuse the players of not giving everything in the second half. It was wave after wave going forward."
Jon Toral set up Lee Wallace's equaliser for Rangers, cancelling out Alex Schalk's opener.
The on-loan Arsenal midfielder said: "We need to win these types of games, we know that.
"It is a big club. Everyone expects to win every week and we have to do that and we have to perform at the levels to win the game.
"Obviously we haven't in the last two and we are very disappointed about it."


The UK is to establish the largest, continuous marine reserve in the world, around the Pitcairn Islands.

The Pacific zone will cover 834,000 sq km (322,000 sq miles) - more than twice the land area of the British Isles.
The intention is to protect the wealth of ocean life from illegal fishing activities.
A satellite "watchroom" has been established to monitor vessel activity, and to gather the information needed to prosecute unauthorised trawling.
The announcement of the reserve came in Chancellor George Osborne's pre-election Budget.
The Pew Charitable Trusts and the National Geographic Society, who campaign on the need for marine reserves, welcomed the news.
NatGeo explorer and TV presenter Paul Rose told BBC News: "Ocean leadership like this from our government is exactly right. It protects the pristine waters of our overseas territories and sets an example to the rest of the world, giving hope and encouragement to future generations. Thank you UK government."
The UK already had the largest continuous, fully protected marine reserve in the world - around the Chagos Islands in the Indian Ocean. This area, established in 2010, is 640,000 sq km in size. (The US Pacific Remote Islands Marine National Monument is larger at 1.2 million sq km but is not continuous).
Conservationists believe such zones are an essential component in the toolbox of measures required to tackle the colossal trade in "dark fish".
It is thought as many as one in five fish are landed outside of national or international regulations. The value of this trade could exceed more than $20bn (Â£13bn; 17bn euros) a year, according to some estimates.
Much of the theft is perpetrated by industrial-scale pirate operations that think the vast expanse of the oceans can hide their behaviour.
Some of the confidence to establish reserves leans on new satellite technologies that are able now to track and follow the pirates. This is being done in the new watchroom, established at the Satellite Applications Catapult in Harwell, Oxfordshire.  It is a partnership between the Catapult and Pew, and is called Project Eyes on the Seas.
Its smart systems not only track vessels but analyse their movements. And by incorporating additional data, such as sea conditions and probable fish locations, Project Eyes can make predictions about what the vessels are likely to be doing.  Algorithms provide automated alerts.
In conjunction with the Pitcairn designation, The Swiss-based Bertarelli Foundation has agreed to HELP fund the watchroom to support the designation of the Pitcairn reserve for the next five years. Project Eyes, which has been in a demonstration phase until now, is ready go into full operation and it could be used to provide support for other reserves as well.
Jo Royle, who manages Pew's Global Ocean Legacy campaign in the UK, said: "There is talk from the UK government that they will now designate Ascension Island. They're talking to islanders to understand their marine resource needs.
"We're also trying to get South Sandwich Islands designated as well. And this year could be a big year because Chile are talking about designating Easter Island, and Palau are talking about designating the waters around themselves. The issue is rising up the political agenda."
The Pitcairns are one of the most remote island groups in the world.
The British Overseas Territory comprises four islands - Pitcairn itself, Henderson, Oeno and Ducie.
Pitcairn is the main island with a population of about 60 people. Famously, most of the inhabitants are descended from crewmembers of the mutinous British Royal Navy's Bounty ship, who settled the area with their Tahitian companions in 1790.
A survey of the waters around the islands shows they are not particularly productive in terms of the high-value pelagic species.  Tuna fishing, for example, takes place well to the north.
But there is concern that if illegal operations do move into the immediate waters around the Pitcairns, they could decimate the marine life that does exist there very rapidly.
The waters' main claim to special status is really their pristine nature. The range of species that occupy the complex community of hard and soft corals is impressive. These include two species found nowhere else on Earth: a species of squirrelfish and the many-spined butterfly fish. Also, the area is home to many important bird species, such as the Henderson petrel (endangered), whose only known breeding spot in the world is on Henderson Island.
The UK government said it would proceed with the designation of Pitcairn on the basis that all the satellite monitoring arrangements are put properly in place, and that any naval costs can be accommodated within existing departmental expenditure limits.
Jonathan.Amos-INTERNET@bbc.co.uk and follow me on Twitter: @BBCAmos


Extreme weather could kill up to 152,000 people each year in Europe by 2100 if nothing is done to curb the effects of climate change, scientists say.

The number is 50 times more deaths than reported now, the study in The Lancet Planetary Health journal said.
Heat waves would cause 99% of all weather-related deaths, it added, with southern Europe being worst affected.
Experts said the journal's findings were worrying.
If nothing is done to cut greenhouse gas emissions and to improve policies to reduce the impact against extreme weather events, the study by the European Commission's Joint Research Centre says:
The research analysed the effects of the seven most dangerous types of weather-related events - heat waves, cold snaps, wildfires, droughts, river and coastal floods and windstorms - in the 28 EU countries as well as Switzerland, Norway and Iceland.
The team looked at disaster records from 1981 to 2010 to estimate population vulnerability, and combined this information with predictions of how climate change might progress and how populations might increase and migrate.
"Climate change is one of the biggest global threats to human health of the 21st century, and its peril to society will be increasingly connected to weather-driven hazards," said Giovanni Forzieri, one of the authors of the study.
"Unless global warming is curbed as a matter of urgency and appropriate measures are taken, about 350 million Europeans could be exposed to harmful climate extremes on an annual basis by the end of the century."
Paul Wilkinson, a professor at the London School of Hygiene and Tropical Medicine, who was not involved in the study, said the findings were "yet another reminder of the exposures to extreme weather and possible human impacts that might occur if emissions of greenhouse gases continue unabated.
"It adds further weight to the powerful argument for accelerating mitigation actions to protect population health."


Women from Northern Ireland will be able to get free abortions in England, the government has said.

More than 50 MPs from the major parties had backed a Labour-led call for the women to have access to NHS abortions in England. They currently have to pay.
The BBC's political editor said ministers made the concession because it appeared some Tory MPs might back the call, risking a possible defeat.
Northern Ireland's abortion laws are much stricter than the rest of the UK.
Abortions are only allowed in Northern Ireland if a woman's life is at risk or there is a permanent or serious risk to her physical or mental health. Rape, incest and fatal foetal abnormalities are not circumstances in which they can be performed legally.
Women seeking an abortion can travel to England to have one privately, but had not been allowed to have them free on the NHS - a position that was backed by the UK Supreme Court earlier this month.
An amendment on the issue, co-ordinated by Labour's Stella Creasy, which had cross-party backing, had been selected for inclusion in the Queen's Speech debate - which meant Theresa May's government ran the risk of possible defeat.
Since the election Mrs May no longer has a majority of MPs so has to rely on backing from the 10 DUP MPs - but even then she remains vulnerable to a rebellion from her own Conservative MPs.
The news of the change of policy was welcomed by the British Pregnancy Advisory Service which described it as a "landmark moment: for years the women of Northern Ireland, despite being UK citizens and taxpayers, have not been entitled to NHS-funded treatment".
Without an overall majority, the Tories were facing a defeat after an impressive campaign by the Labour backbencher Stella Creasy that had garnered support among plenty of Conservatives who looked like they might rebel and vote with her, rather than with their party bosses.
Rather than risk a defeat on a critical day when the Queen's Speech has to pass, Conservative ministers were willing to shift in the end - to make a big concession to avoid being beaten.
Queen's Speech votes are seen as a matter of confidence votes in any government. After chucking away her majority, it is vital today that Theresa May avoids any further embarrassment.
Read more from Laura
Abortion provider Marie Stopes UK said it was "a hugely positive step forward, but there is no reason why these services shouldn't be provided in Northern Ireland, saving thousands of women each year the cost and stress of travelling to the mainland".
But anti-abortion charity Life said the government should be "neutral on the issue of abortion". "This action by the Department for Women and Equalities not only undermines that neutrality, but also shows an abject disdain for Parliament, by seeking to bring this change in via the back door, avoiding full debate on this issue."
In a debate on the Queen's Speech on Thursday, Ms Creasy said women were having to spend Â£1,400 to get an abortion in England. Conservative Sir Peter Bottomley asked why, in the case of women from Northern Ireland, "only the poor should be denied lawful abortions".
Chancellor Philip Hammond replied that Justine Greening, the minister for women and equalities, "intends to intervene to fund abortions in England for women arriving here from Northern Ireland".
He later said: "We will be funding [the Government Equalities Office] with additional funding so that she can make a grant to the external organisations that provide these services".
Analysis: James Gallagher, health and science reporter, BBC News
Secrecy and stigma surround women from Northern Ireland deciding to have an abortion.
They will, effectively, be left with two choices - ordering abortion pills online or travelling across the Irish Sea, often to Liverpool.
Online pills are illegal and taken without medical supervision. Going to England comes with the expense of the journey, accommodation, time off work and the procedure itself.
About 700 women came to England, from Northern Ireland, for an abortion last year.
The cost is thought to stop some women from the poorest Northern Ireland families having an abortion in England.
So, the announcement that the procedure, but not the other costs, will be free in England could influence some of those difficult, personal decisions.
But this does not change the culture or visceral debate around abortion in Northern Ireland.
The courts have ruled any decision on abortion law lies with the Northern Ireland Assembly, so any change in the law is deeply unlikely.
Campaigner Sarah Ewart, who travelled to England for a termination in 2013 after doctors said her unborn child had no chance of survival outside the womb, said of the chancellor's announcement that it was positive news, but it was unfortunate that women from Northern Ireland found themselves in this position in the first place.
The prime minister's official spokeswoman said later the government had estimated the cost of the decision to be "around Â£1m a year" and that the government was "prepared to fund in excess of this" if needed. The estimate was based on the 724 women who travelled from Northern Ireland last year to have an abortion.
She added that ministers had "had concerns about the issue and that's why we're taking action".
Following the concession from the government, Stella Creasy's amendment was withdrawn.
Liberal Democrat deputy leader Jo Swinson congratulated the Labour MP and said: "I'm glad that Justine Greening has acted on this issue, but it is embarrassing that the health secretary had done nothing on this so far and only the threat of a defeat prompted change.
"Women deserve better than having their rights reliant on House of Commons arithmetic."
The concession on abortion came on the same day Belfast's Court of Appeal ruled abortion law in Northern Ireland should be left to the Stormont Assembly, not judges - effectively overturning an earlier ruling that the current abortion laws were incompatible with human rights laws.


Alistair and Jonny Brownlee will go into Sunday's World Series triathlon in their home town of Leeds looking for their first wins of the season with the Rio Olympics less than two months away.

Jonny finished third on the Gold Coast and second in Cape Town in April, while Alistair finished back in 36th on the Gold Coast as he hunts the form that made him Olympic champion in 2012.
With fellow Leeds residents Non Stanford and Vicky Holland and training partner Gordon Benson, five of the six GB athletes for Rio will be in action.
Britain's round of the series, which has been held in Hyde Park since 2009, has moved to Leeds for the first time and it promises to be an emotional afternoon for the Brownlees, who are assured of passionate support around the city's streets.
"Starting triathlon a long time ago you never thought you'd race on the streets of Leeds with big crowds. I'm very, very proud," said 28-year-old Alistair.
Media playback is not supported on this device
Younger brother Jonny, who won bronze in London in 2012, added: "It is a bit strange and a bit daunting as well. If we weren't training here it might not have happened.
"You get called a role model and the next thing, there's an event here because of you. At some point, when I've retired I'll step back and think about it and go, 'Wow'."
After a two-lap swim in Roundhay Park, the 40km bike leg winds through the suburbs where they have cycled and run for years, before finishing with a four-lap run that ends in Millennium Square.
With the year's dominant athlete Mario Mola missing from the men's race and reigning world champion Javier Gomez making his 2016 World Series debut, the opportunity is there for the brothers to get their own world-title bids back on track.
Gomez and the two Brownlees have not all raced each other since the Grand Final in Edmonton two years ago, while Stanford and Holland will be taking on the woman likely to go to Rio as favourite for gold, USA's Gwen Jorgensen.
Media playback is not supported on this device
The reigning world champion has raced sparingly this summer, but with only two more World Series events before the Olympics the world's best are looking to use the first European leg of nine-race series to fine-tune their preparations.
For Jodie Stimpson - overlooked for Olympic selection for the second successive Games this week despite winning in Abu Dhabi and taking second in Cape Town this season - the focus is entirely on the world title.
Currently second in the standings, she knows another strong performance this weekend could not only move her ahead of current leader Flora Duffy but leave her in pole position as her rivals turn their focus to Rio.
The third member of the women's team for Rio, Welshwoman Helen Jenkins, is not racing in Leeds.
Media playback is not supported on this device


Billy Bodin hit a second-half double as Bristol Rovers kept alive their slim League One play-off hopes with victory over 10-man Shrewsbury at the Memorial Stadium.

The midfielder fired the hosts in front from the penalty spot in the 54th minute after being fouled inside the box by Aristote Nsiala when there appeared no danger.
And Bodin made sure of the points seven minutes from time, showing neat skills to set himself up for a crisp right-footed finish from 10 yards.
The first half was most notable for the two yellow cards picked up by Shrewsbury midfielder Ryan Yates, sent off for a sliding late challenge on Rovers goalkeeper Joe Lumley in the 41th minute, having previously been booked for a foul on Bodin.
Rovers started brightly and Shrews keeper Jayson Leutwiler had to make early saves from Tom Lockyer and Chris Lines.
At the other end, Pirates defender Ryan Sweeney had to clear a shot from Gary Deegan off the line after Tyler Roberts had rounded Lumley to set up the chance.
Match report supplied by the Press Association.
Match ends, Bristol Rovers 2, Shrewsbury Town 0.
Second Half ends, Bristol Rovers 2, Shrewsbury Town 0.
Jermaine Easter (Bristol Rovers) wins a free kick on the left wing.
Foul by Aristote Nsiala (Shrewsbury Town).
Attempt missed. Chris Lines (Bristol Rovers) right footed shot from the centre of the box is close, but misses to the right.
Foul by Daniel Leadbitter (Bristol Rovers).
Alex Rodman (Shrewsbury Town) wins a free kick on the left wing.
Attempt missed. Stephen Humphrys (Shrewsbury Town) header from the centre of the box is just a bit too high.
Corner,  Bristol Rovers. Conceded by Junior Brown.
Attempt missed. Jermaine Easter (Bristol Rovers) right footed shot from the centre of the box is close, but misses to the left.
Ryan Sweeney (Bristol Rovers) wins a free kick in the defensive half.
Foul by Stefan Payne (Shrewsbury Town).
Substitution, Bristol Rovers. Jermaine Easter replaces Luke James.
Goal!  Bristol Rovers 2, Shrewsbury Town 0. Billy Bodin (Bristol Rovers) right footed shot from the left side of the box to the bottom right corner.
Attempt saved. Stuart Sinclair (Bristol Rovers) right footed shot from the centre of the box is saved in the centre of the goal.
Substitution, Shrewsbury Town. Stefan Payne replaces Shaun Whalley.
Attempt missed. Shaun Whalley (Shrewsbury Town) right footed shot from outside the box is close, but misses to the right.
Attempt missed. Billy Bodin (Bristol Rovers) right footed shot from a difficult angle on the right is close, but misses to the right.
Substitution, Bristol Rovers. Byron Moore replaces Cristian Montaño.
Chris Lines (Bristol Rovers) wins a free kick in the defensive half.
Foul by Gary Deegan (Shrewsbury Town).
Attempt saved. Lee Brown (Bristol Rovers) right footed shot from the left side of the box is saved in the bottom right corner.
Attempt saved. Cristian Montaño (Bristol Rovers) header from the centre of the box is saved in the centre of the goal.
Attempt saved. Alex Rodman (Shrewsbury Town) left footed shot from the left side of the six yard box is saved in the bottom right corner.
Delay over. They are ready to continue.
Delay in match Chris Lines (Bristol Rovers) because of an injury.
Attempt saved. Gary Deegan (Shrewsbury Town) right footed shot from outside the box is saved in the centre of the goal.
Foul by Luke James (Bristol Rovers).
(Shrewsbury Town) wins a free kick in the attacking half.
Attempt saved. Billy Bodin (Bristol Rovers) right footed shot from a difficult angle on the right is saved in the centre of the goal.
Corner,  Bristol Rovers. Conceded by Junior Brown.
Attempt blocked. Billy Bodin (Bristol Rovers) right footed shot from the right side of the box is blocked.
Chris Lines (Bristol Rovers) wins a free kick in the attacking half.
Foul by Gary Deegan (Shrewsbury Town).
Goal!  Bristol Rovers 1, Shrewsbury Town 0. Billy Bodin (Bristol Rovers) converts the penalty with a left footed shot to the bottom right corner.
Penalty Bristol Rovers. Billy Bodin draws a foul in the penalty area.
Penalty conceded by Aristote Nsiala (Shrewsbury Town) after a foul in the penalty area.
Attempt blocked. Alex Rodman (Shrewsbury Town) right footed shot from the left side of the box is blocked.
Attempt missed. Billy Bodin (Bristol Rovers) right footed shot from outside the box is too high.
Corner,  Bristol Rovers. Conceded by Junior Brown.