[2005/08/18 16:01:12, 0] smbd/server.c:main(802) smbd version 3.0.20rc2 started. Copyright Andrew Tridgell and the Samba Team 1992-2004 [2005/08/18 16:01:12, 5] lib/debug.c:debug_dump_status(368) INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: True/0 locking: False/0 msdfs: False/0 doing parameter security = user doing parameter encrypt passwords = yes doing parameter socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=262144 SO_RCVBUF=262144 doing parameter interfaces = 151.103.16.159/20 doing parameter local master = yes doing parameter os level = 60 doing parameter domain master = yes doing parameter preferred master = yes doing parameter domain logons = yes doing parameter logon script = %m.bat doing parameter wins support = no doing parameter dns proxy = no doing parameter enable privileges = yes doing parameter oplocks = no doing parameter level2 oplocks = no doing parameter csc policy = disable doing parameter printcap name = /etc/qconfig doing parameter ldap passwd sync = yes doing parameter passdb backend = ldapsam:"ldap://acedev.hvcc.edu" doing parameter ldap suffix = dc=hvcc,dc=edu doing parameter ldap machine suffix = ou=People doing parameter ldap user suffix = ou=People doing parameter ldap group suffix = ou=Groups doing parameter ldap idmap suffix = ou=Idmap doing parameter ldap admin dn = cn=root,dc=hvcc,dc=edu doing parameter idmap backend = ldap:ldap://acedev.hvcc.edu doing parameter large readwrite = no doing parameter kernel oplocks = no doing parameter max open files = 5000 doing parameter wide links = no doing parameter lpq command = touch /dev/null doing parameter max disk size = 0 doing parameter read raw = yes doing parameter write raw = yes doing parameter getwd cache = yes doing parameter time server = true doing parameter logon drive = h: doing parameter netbios name = acedev [2005/08/18 16:01:12, 4] param/loadparm.c:handle_netbios_name(2881) handle_netbios_name: set global_myname to: ACEDEV doing parameter unix password sync = false doing parameter deadtime = 0 doing parameter short preserve case = no [2005/08/18 16:01:12, 2] param/loadparm.c:do_section(3559) Processing section "[homes]" [2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) add_a_service: Creating snum = 0 for homes doing parameter comment = Home Directories doing parameter browseable = no doing parameter valid users = test1 test2 test3 test4 test5 test6 test7 test8 test9 testxp billtest geotest tomtest 98765432 doing parameter writeable = yes doing parameter path = %H doing parameter locking = yes doing parameter guest ok = no doing parameter force create mode = 0644 doing parameter force directory mode = 0755 doing parameter csc policy = disable doing parameter short preserve case = no [2005/08/18 16:01:12, 2] param/loadparm.c:do_section(3559) Processing section "[netlogon]" [2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) add_a_service: Creating snum = 1 for netlogon doing parameter comment = Network Logon Service doing parameter path = /netlogon doing parameter guest ok = no doing parameter writeable = no doing parameter browseable = no [2005/08/18 16:01:12, 2] param/loadparm.c:do_section(3559) Processing section "[x04shr]" [2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) add_a_service: Creating snum = 2 for x04shr doing parameter browseable = no doing parameter comment = Summer 2004 DEVELOPMENT Share doing parameter path = /x04shr doing parameter writeable = yes doing parameter guest ok = no doing parameter oplocks = no doing parameter level2 oplocks = no doing parameter short preserve case = no doing parameter use sendfile = yes [2005/08/18 16:01:12, 2] param/loadparm.c:do_section(3559) Processing section "[test]" [2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) add_a_service: Creating snum = 3 for test doing parameter browseable = no doing parameter comment = Test Share doing parameter valid users = billtest doing parameter path = /s05shr doing parameter writable = yes doing parameter guest ok = no doing parameter create mode = 0664 doing parameter directory mode = 0775 doing parameter force create mode = 0664 doing parameter force directory mode = 0775 doing parameter short preserve case = no [2005/08/18 16:01:12, 2] param/loadparm.c:do_section(3559) Processing section "[printers]" [2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) add_a_service: Creating snum = 4 for printers doing parameter comment = All Printers doing parameter path = /var/spool/samba doing parameter browseable = no doing parameter guest ok = no doing parameter writeable = no doing parameter printable = yes [2005/08/18 16:01:12, 4] param/loadparm.c:lp_load(4113) pm_process() returned Yes [2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) add_a_service: Creating snum = 5 for IPC$ [2005/08/18 16:01:12, 3] param/loadparm.c:lp_add_ipc(2475) adding IPC service [2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) add_a_service: Creating snum = 6 for ADMIN$ [2005/08/18 16:01:12, 3] param/loadparm.c:lp_add_ipc(2475) adding IPC service [2005/08/18 16:01:12, 10] param/loadparm.c:set_server_role(4031) set_server_role: role = ROLE_DOMAIN_PDC [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset UCS-2LE [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) Registered charset UCS-2LE [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset UTF-16LE [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) Registered charset UTF-16LE [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset UCS-2BE [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) Registered charset UCS-2BE [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset UTF-16BE [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) Registered charset UTF-16BE [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset UTF8 [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) Registered charset UTF8 [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset UTF-8 [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) Registered charset UTF-8 [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset ASCII [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) Registered charset ASCII [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset 646 [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) Registered charset 646 [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset ISO-8859-1 [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) Registered charset ISO-8859-1 [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset UCS2-HEX [2005/08/18 16:01:12, 5] lib/iconv.c:smb_register_charset(111) Registered charset UCS2-HEX [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO8859-1' for LOCALE [2005/08/18 16:01:12, 3] printing/pcap.c:pcap_cache_reload(114) reloading printcap cache [2005/08/18 16:01:12, 5] printing/print_aix.c:aix_cache_reload(41) reloading aix printcap cache [2005/08/18 16:01:12, 3] printing/pcap.c:pcap_cache_reload(213) reload status: ok [2005/08/18 16:01:12, 7] param/loadparm.c:lp_servicenumber(4226) lp_servicenumber: couldn't find laser3 [2005/08/18 16:01:12, 8] param/loadparm.c:add_a_service(2393) add_a_service: Creating snum = 7 for laser3 [2005/08/18 16:01:12, 3] param/loadparm.c:lp_add_printer(2513) adding printer service laser3 [2005/08/18 16:01:12, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 [2005/08/18 16:01:12, 2] lib/interface.c:add_interface(81) added interface ip=151.103.16.159 bcast=151.103.31.255 nmask=255.255.240.0 [2005/08/18 16:01:12, 5] lib/util.c:init_names(260) Netbios name list:- my_netbios_names[0]="ACEDEV" [2005/08/18 16:01:12, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2005/08/18 16:01:12, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2005/08/18 16:01:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2005/08/18 16:01:12, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:12, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:make_pdb_context_list(870) Trying to load: ldapsam:ldap://acedev.hvcc.edu [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend ldapsam [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'ldapsam' [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend ldapsam_compat [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'ldapsam_compat' [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend NDS_ldapsam [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'NDS_ldapsam' [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend NDS_ldapsam_compat [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'NDS_ldapsam_compat' [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend smbpasswd [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'smbpasswd' [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend tdbsam [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'tdbsam' [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend guest [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'guest' [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:make_pdb_methods_name(748) Attempting to find an passdb backend to match ldapsam:ldap://acedev.hvcc.edu (ldapsam) [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:make_pdb_methods_name(769) Found pdb backend ldapsam [2005/08/18 16:01:12, 2] lib/smbldap_util.c:smbldap_search_domain_info(169) Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=ACDEV))] [2005/08/18 16:01:12, 5] lib/smbldap.c:smbldap_search_ext(980) smbldap_search_ext: base => [dc=hvcc,dc=edu], filter => [(&(objectClass=sambaDomain)(sambaDomainName=ACDEV))], scope => [2] [2005/08/18 16:01:12, 5] lib/smbldap.c:smbldap_close(889) The connection to the LDAP server was closed [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_open_connection(534) smbldap_open_connection: ldap://acedev.hvcc.edu [2005/08/18 16:01:12, 2] lib/smbldap.c:smbldap_open_connection(630) smbldap_open_connection: connection opened [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_connect_system(762) ldap_connect_system: Binding to ldap server ldap://acedev.hvcc.edu as "cn=root,dc=hvcc,dc=edu" [2005/08/18 16:01:12, 3] lib/smbldap.c:smbldap_connect_system(805) ldap_connect_system: succesful connection to the LDAP server ldap_connect_system: LDAP server does support paged results [2005/08/18 16:01:12, 4] lib/smbldap.c:smbldap_open(869) The LDAP server is succesfully connected [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:make_pdb_methods_name(772) pdb backend ldapsam:ldap://acedev.hvcc.edu has a valid init [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:make_pdb_methods_name(748) Attempting to find an passdb backend to match guest (guest) [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:make_pdb_methods_name(769) Found pdb backend guest [2005/08/18 16:01:12, 5] passdb/pdb_interface.c:make_pdb_methods_name(772) pdb backend guest has a valid init [2005/08/18 16:01:12, 5] lib/smbldap.c:smbldap_search_ext(980) smbldap_search_ext: base => [dc=hvcc,dc=edu], filter => [(&(sambaSID=S-1-5-21-1908802895-3536710745-1580887524-501)(objectclass=sambaSamAccount))], scope => [2] [2005/08/18 16:01:12, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: nobody [2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_username(617) pdb_set_username: setting username nobody, was [2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_domain(644) pdb_set_domain: setting domain ACDEV, was [2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671) pdb_set_nt_username: setting nt username nobody, was [2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_user_sid_from_string(557) pdb_set_user_sid_from_string: setting user sid S-1-5-21-1908802895-3536710745-1580887524-501 [2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) pdb_set_user_sid: setting user sid S-1-5-21-1908802895-3536710745-1580887524-501 [2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_group_sid_from_string(592) pdb_set_group_sid_from_string: setting group sid S-1-5-21-1908802895-3536710745-1580887524-514 [2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) pdb_set_group_sid: setting group sid S-1-5-21-1908802895-3536710745-1580887524-514 [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaPwdLastSet] = [] [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaLogonTime] = [] [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaLogoffTime] = [] [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaKickoffTime] = [] [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaPwdCanChange] = [] [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaPwdMustChange] = [] [2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) pdb_set_full_name: setting full name nobody,Special Id, was [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaHomeDrive] = [] [2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) pdb_set_dir_drive: setting dir drive h:, was NULL [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaHomePath] = [] [2005/08/18 16:01:12, 4] lib/substitute.c:automount_server(337) Home server: acedev [2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) pdb_set_homedir: setting home dir \\acedev\nobody, was [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaLogonScript] = [] [2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) pdb_set_logon_script: setting logon script smbd.bat, was [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaProfilePath] = [] [2005/08/18 16:01:12, 4] lib/substitute.c:automount_server(337) Home server: acedev [2005/08/18 16:01:12, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) pdb_set_profile_path: setting profile path \\acedev\nobody\profile, was [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaUserWorkstations] = [] [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaMungedDial] = [] [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaLMPassword] = [] [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaNTPassword] = [] [2005/08/18 16:01:12, 10] lib/privileges.c:grant_privilege(552) grant_privilege: S-1-1-0 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:12, 10] lib/privileges.c:grant_privilege(552) grant_privilege: S-1-5-32-544 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:12, 10] lib/privileges.c:grant_privilege(552) grant_privilege: S-1-5-32-548 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:12, 10] lib/privileges.c:grant_privilege(552) grant_privilege: S-1-5-32-549 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:12, 10] lib/privileges.c:grant_privilege(552) grant_privilege: S-1-5-32-550 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:12, 10] lib/privileges.c:grant_privilege(552) grant_privilege: S-1-5-32-551 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:12, 10] lib/account_pol.c:account_policy_get(202) account_policy_get: password history:0 [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaAcctFlags] = [] [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaBadPasswordCount] = [] [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaBadPasswordTime] = [] [2005/08/18 16:01:12, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaLogonHours] = [] [2005/08/18 16:01:12, 5] passdb/login_cache.c:login_cache_init(41) Opening cache file at /samba/3.0.20rc2/var/locks/login_cache.tdb [2005/08/18 16:01:12, 7] passdb/login_cache.c:login_cache_read(83) Looking up login cache for user nobody [2005/08/18 16:01:12, 7] passdb/login_cache.c:login_cache_read(97) No cache entry found [2005/08/18 16:01:12, 9] passdb/pdb_ldap.c:init_sam_from_ldap(852) No cache entry, bad count = 0, bad time = 0 [2005/08/18 16:01:12, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:12, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2005/08/18 16:01:12, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2005/08/18 16:01:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2005/08/18 16:01:12, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:12, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:12, 10] lib/system_smbd.c:sys_getgrouplist(116) sys_getgrouplist: user [nobody] [2005/08/18 16:01:12, 10] lib/system_smbd.c:sys_getgrouplist(125) sys_getgrouplist(): disabled winbindd for group lookup [user == nobody] [2005/08/18 16:01:12, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2005/08/18 16:01:12, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2005/08/18 16:01:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2005/08/18 16:01:12, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:12, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:12, 8] lib/util_getent.c:remove_duplicate_gids(330) remove_duplicate_gids: Enter 2 gids [2005/08/18 16:01:12, 8] lib/util_getent.c:remove_duplicate_gids(348) remove_duplicate_gids: Exit 1 gids [2005/08/18 16:01:12, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2005/08/18 16:01:12, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2005/08/18 16:01:12, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2005/08/18 16:01:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2005/08/18 16:01:12, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:12, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:12, 5] lib/smbldap.c:smbldap_search_ext(980) smbldap_search_ext: base => [ou=Groups,dc=hvcc,dc=edu], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=-2))], scope => [2] [2005/08/18 16:01:12, 4] passdb/pdb_ldap.c:ldapsam_getgroup(2107) ldapsam_getgroup: Did not find group [2005/08/18 16:01:12, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2005/08/18 16:01:12, 10] passdb/passdb.c:local_gid_to_sid(1250) local_gid_to_sid: Fall back to algorithmic mapping: 4294967294 -> S-1-5-21-1908802895-3536710745-1580887524-997 [2005/08/18 16:01:12, 10] passdb/lookup_sid.c:gid_to_sid(371) gid_to_sid: local 4294967294 -> S-1-5-21-1908802895-3536710745-1580887524-997 [2005/08/18 16:01:12, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:12, 3] lib/privileges.c:get_privileges(260) get_privileges: No privileges assigned to SID [S-1-5-21-1908802895-3536710745-1580887524-501] [2005/08/18 16:01:12, 3] lib/privileges.c:get_privileges(260) get_privileges: No privileges assigned to SID [S-1-5-21-1908802895-3536710745-1580887524-514] [2005/08/18 16:01:12, 5] lib/privileges.c:get_privileges_for_sids(452) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:12, 3] lib/privileges.c:get_privileges(260) get_privileges: No privileges assigned to SID [S-1-5-2] [2005/08/18 16:01:12, 3] lib/privileges.c:get_privileges(260) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2005/08/18 16:01:12, 3] lib/privileges.c:get_privileges(260) get_privileges: No privileges assigned to SID [S-1-5-21-1908802895-3536710745-1580887524-997] [2005/08/18 16:01:12, 10] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-1908802895-3536710745-1580887524-501 contains 6 SIDs SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-501 SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-514 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-1908802895-3536710745-1580887524-997 SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:12, 5] auth/auth_util.c:make_server_info_sam(829) make_server_info_sam: made server info for user nobody -> nobody [2005/08/18 16:01:12, 3] smbd/server.c:main(835) loaded services [2005/08/18 16:01:12, 3] smbd/server.c:main(850) Becoming a daemon. [2005/08/18 16:01:12, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 9 12 0 1 2 [2005/08/18 16:01:12, 8] lib/util.c:fcntl_lock(1850) fcntl_lock: Lock call successful [2005/08/18 16:01:12, 5] tdb/tdbutil.c:tdb_log(767) tdb(unnamed): tdb_brlock failed (fd=10) at offset 4 rw_type=2 lck_type=6: Permission denied [2005/08/18 16:01:12, 2] lib/tallocmsg.c:register_msg_pool_usage(56) Registered MSG_REQ_POOL_USAGE [2005/08/18 16:01:12, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2005/08/18 16:01:12, 5] lib/gencache.c:gencache_init(59) Opening cache file at /samba/3.0.20rc2/var/locks/gencache.tdb [2005/08/18 16:01:12, 5] libsmb/namecache.c:namecache_enable(58) namecache_enable: enabling netbios namecache, timeout 660 seconds [2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Print] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print] with subkey [Printers] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] with subkey [NULL] [2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Ports] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] with subkey [NULL] [2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Print] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Print] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print] with subkey [NULL] [2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [LanmanServer] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer] with subkey [Shares] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] with subkey [NULL] [2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [Eventlog] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] with subkey [NULL] [2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Perflib] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] with subkey [NULL] [2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Perflib] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] with subkey [009] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] with subkey [NULL] [2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Print] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print] with subkey [Monitors] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors] with subkey [NULL] [2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [ProductOptions] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] with subkey [NULL] [2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [TcpIp] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp] with subkey [Parameters] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters] with subkey [NULL] [2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [Netlogon] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon] with subkey [Parameters] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] with subkey [NULL] [2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKU] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKU] with subkey [NULL] [2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKCR] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKCR] with subkey [NULL] [2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKPD] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKPD] with subkey [NULL] [2005/08/18 16:01:12, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKPT] [2005/08/18 16:01:12, 10] registry/reg_db.c:init_registry_data(128) init_registry_data: Storing key [HKPT] with subkey [NULL] [2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_fetch_values(485) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2005/08/18 16:01:12, 8] registry/reg_db.c:regdb_unpack_values(436) specific: [Samba Printer Port], len: 2 [2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_store_values(515) regdb_store_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_fetch_values(485) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2005/08/18 16:01:12, 8] registry/reg_db.c:regdb_unpack_values(436) specific: [DefaultSpoolDirectory], len: 70 [2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_store_values(515) regdb_store_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_fetch_values(485) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2005/08/18 16:01:12, 8] registry/reg_db.c:regdb_unpack_values(436) specific: [DisplayName], len: 20 [2005/08/18 16:01:12, 8] registry/reg_db.c:regdb_unpack_values(436) specific: [ErrorControl], len: 4 [2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_store_values(515) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_fetch_values(485) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2005/08/18 16:01:12, 8] registry/reg_db.c:regdb_unpack_values(436) specific: [ErrorControl], len: 4 [2005/08/18 16:01:12, 8] registry/reg_db.c:regdb_unpack_values(436) specific: [DisplayName], len: 20 [2005/08/18 16:01:12, 10] registry/reg_db.c:regdb_store_values(515) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2005/08/18 16:01:12, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Control/Print] [2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(248) pathtree_add: Enter [2005/08/18 16:01:12, 10] lib/adt_tree.c:pathtree_add(315) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree [2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(317) pathtree_add: Exit [2005/08/18 16:01:12, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] [2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(248) pathtree_add: Enter [2005/08/18 16:01:12, 10] lib/adt_tree.c:pathtree_add(315) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] to tree [2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(317) pathtree_add: Exit [2005/08/18 16:01:12, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] [2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(248) pathtree_add: Enter [2005/08/18 16:01:12, 10] lib/adt_tree.c:pathtree_add(315) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] to tree [2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(317) pathtree_add: Exit [2005/08/18 16:01:12, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Services/Eventlog] [2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(248) pathtree_add: Enter [2005/08/18 16:01:12, 10] lib/adt_tree.c:pathtree_add(315) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/Eventlog] to tree [2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(317) pathtree_add: Exit [2005/08/18 16:01:12, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] [2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(248) pathtree_add: Enter [2005/08/18 16:01:12, 10] lib/adt_tree.c:pathtree_add(315) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] to tree [2005/08/18 16:01:12, 8] lib/adt_tree.c:pathtree_add(317) pathtree_add: Exit [2005/08/18 16:01:12, 10] printing/nt_printing.c:update_c_setprinter(697) update_c_setprinter: c_setprinter = 0 [2005/08/18 16:01:12, 5] smbd/connection.c:claim_connection(170) claiming 0 [2005/08/18 16:01:12, 3] printing/printing.c:start_background_queue(1315) start_background_queue: Starting background LPQ thread [2005/08/18 16:01:12, 5] printing/printing.c:start_background_queue(1325) start_background_queue: background LPQ thread started [2005/08/18 16:01:12, 5] smbd/connection.c:claim_connection(170) claiming smbd lpq backend 0 [2005/08/18 16:01:12, 10] lib/util_sock.c:open_socket_in(832) bind succeeded on port 445 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 8 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 4 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 8 [2005/08/18 16:01:12, 5] printing/printing.c:start_background_queue(1336) start_background_queue: background LPQ thread waiting for messages [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEPORT = 512 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 16384 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 16384 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 4096 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 8 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 4 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 4 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 8 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 16 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 16 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEPORT = 512 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 262144 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 262144 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 4096 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2005/08/18 16:01:12, 10] lib/util_sock.c:open_socket_in(832) bind succeeded on port 139 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 8 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 4 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 8 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEPORT = 512 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 16384 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 16384 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 4096 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 8 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 4 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 4 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 8 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 16 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 16 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEPORT = 512 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 262144 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 262144 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 4096 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2005/08/18 16:01:12, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2005/08/18 16:01:12, 2] smbd/server.c:open_sockets_smbd(330) waiting for a connection [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 8 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 4 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 4 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 8 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 0 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 0 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEPORT = 512 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 262800 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 262800 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 16060 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 8 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 4 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 4 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 8 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 16 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 16 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEPORT = 512 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 262144 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 262144 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 16060 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2005/08/18 16:01:18, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2005/08/18 16:01:18, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 [2005/08/18 16:01:18, 3] smbd/oplock.c:init_oplocks(1380) open_oplock_ipc: opening loopback UDP socket. [2005/08/18 16:01:18, 10] lib/util_sock.c:open_socket_in(832) bind succeeded on port 0 [2005/08/18 16:01:18, 3] smbd/oplock.c:init_oplocks(1411) open_oplock ipc: pid = 17002, global_oplock_port = 34912 [2005/08/18 16:01:18, 4] lib/time.c:get_serverzone(125) Serverzone is 14400 [2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 133 [2005/08/18 16:01:18, 3] lib/access.c:check_access(313) check_access: no hostnames in host allow/deny list. [2005/08/18 16:01:18, 2] lib/access.c:check_access(324) Allowed connection from (151.103.17.49) [2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x85 [2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) Transaction 0 of length 137 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=133 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=98 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 [020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for [030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. [040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [060] 32 00 2. [2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) switch message SMBnegprot (pid 17002) conn 0x0 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:18, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/08/18 16:01:18, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [PC NETWORK PROGRAM 1.0] [2005/08/18 16:01:18, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [LANMAN1.0] [2005/08/18 16:01:18, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [Windows for Workgroups 3.1a] [2005/08/18 16:01:18, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [LM1.2X002] [2005/08/18 16:01:18, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [LANMAN2.1] [2005/08/18 16:01:18, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [NT LM 0.12] [2005/08/18 16:01:18, 10] lib/util.c:set_remote_arch(2028) set_remote_arch: Client arch is 'Win2K' [2005/08/18 16:01:18, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 [2005/08/18 16:01:18, 5] smbd/connection.c:claim_connection(170) claiming 0 [2005/08/18 16:01:18, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 [2005/08/18 16:01:18, 3] smbd/negprot.c:reply_nt1(337) using SPNEGO [2005/08/18 16:01:18, 3] smbd/negprot.c:reply_negprot(559) Selected protocol NT LM 0.12 [2005/08/18 16:01:18, 5] smbd/negprot.c:reply_negprot(565) negprot index=5 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 5 (0x5) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=27136 (0x6A00) smb_vwv[ 8]= 66 (0x42) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=32771 (0x8003) smb_vwv[11]= 128 (0x80) smb_vwv[12]=37179 (0x913B) smb_vwv[13]=12184 (0x2F98) smb_vwv[14]=50596 (0xC5A4) smb_vwv[15]=61441 (0xF001) smb_vwv[16]=14848 (0x3A00) smb_bcc=58 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 61 63 65 64 65 76 00 00 00 00 00 00 00 00 00 00 acedev.. ........ [010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 228 [2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0xe4 [2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) Transaction 1 of length 232 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=228 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=19264 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 228 (0xE4) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 66 (0x42) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=169 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 60 40 06 06 2B 06 01 05 05 02 A0 36 30 34 A0 0E `@..+... ...604.. [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 22 0...+... ..7...." [020] 04 20 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 . NTLMSS P....... [030] 08 E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 ...W.i.n .d.o.w.s [050] 00 20 00 32 00 30 00 30 00 32 00 20 00 53 00 65 . .2.0.0 .2. .S.e [060] 00 72 00 76 00 69 00 63 00 65 00 20 00 50 00 61 .r.v.i.c .e. .P.a [070] 00 63 00 6B 00 20 00 31 00 20 00 32 00 36 00 30 .c.k. .1 . .2.6.0 [080] 00 30 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .0...W.i .n.d.o.w [090] 00 73 00 20 00 32 00 30 00 30 00 32 00 20 00 35 .s. .2.0 .0.2. .5 [0A0] 00 2E 00 31 00 00 00 00 00 ...1.... . [2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) switch message SMBsesssetupX (pid 17002) conn 0x0 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:18, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751) wct=12 flg2=0xc807 [2005/08/18 16:01:18, 2] smbd/sesssetup.c:setup_new_vc_session(704) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(588) Doing spnego session setup [2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(619) NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2005/08/18 16:01:18, 10] lib/util.c:set_remote_arch(2028) set_remote_arch: Client arch is 'WinXP' [2005/08/18 16:01:18, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 100 [2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_spnego_negotiate(480) Got OID 1 3 6 1 4 1 311 2 2 10 [2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_spnego_negotiate(483) Got secblob of size 32 [2005/08/18 16:01:18, 5] auth/auth.c:make_auth_context_subsystem(482) Making default auth method list for DC, security=user, encrypt passwords = yes [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend rhosts [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'rhosts' [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend hostsequiv [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'hostsequiv' [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam' [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam_ignoredomain [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam_ignoredomain' [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend unix [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'unix' [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend winbind [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'winbind' [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend smbserver [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'smbserver' [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend trustdomain [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'trustdomain' [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend ntdomain [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'ntdomain' [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend guest [2005/08/18 16:01:18, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'guest' [2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match winbind:trustdomain [2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match trustdomain [2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method trustdomain has a valid init [2005/08/18 16:01:18, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method winbind has a valid init [2005/08/18 16:01:18, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0xe0088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2005/08/18 16:01:18, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module guest did not want to specify a challenge [2005/08/18 16:01:18, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module sam did not want to specify a challenge [2005/08/18 16:01:18, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module winbind did not want to specify a challenge [2005/08/18 16:01:18, 5] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2005/08/18 16:01:18, 5] auth/auth.c:get_ntlm_challenge(136) challenge is: [2005/08/18 16:01:18, 5] lib/util.c:dump_data(2053) [000] 7F 2F 81 BE 4C FD FA D9 ./..L... [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=274 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=19264 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 177 (0xB1) smb_bcc=231 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] A1 81 AE 30 81 AB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 95 04 81 92 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 0A 00 0A 00 30 TLMSSP.. .......0 [030] 00 00 00 95 82 89 60 7F 2F 81 BE 4C FD FA D9 00 ......`. /..L.... [040] 00 00 00 00 00 00 00 58 00 58 00 3A 00 00 00 41 .......X .X.:...A [050] 00 43 00 44 00 45 00 56 00 02 00 0A 00 41 00 43 .C.D.E.V .....A.C [060] 00 44 00 45 00 56 00 01 00 0C 00 41 00 43 00 45 .D.E.V.. ...A.C.E [070] 00 44 00 45 00 56 00 04 00 10 00 68 00 76 00 63 .D.E.V.. ...h.v.c [080] 00 63 00 2E 00 65 00 64 00 75 00 03 00 1E 00 61 .c...e.d .u.....a [090] 00 63 00 65 00 64 00 65 00 76 00 2E 00 68 00 76 .c.e.d.e .v...h.v [0A0] 00 63 00 63 00 2E 00 65 00 64 00 75 00 00 00 00 .c.c...e .d.u.... [0B0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [0C0] 00 62 00 61 00 20 00 33 00 2E 00 30 00 2E 00 32 .b.a. .3 ...0...2 [0D0] 00 30 00 72 00 63 00 32 00 00 00 41 00 43 00 44 .0.r.c.2 ...A.C.D [0E0] 00 45 00 56 00 00 00 .E.V... [2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 378 [2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x17a [2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) Transaction 2 of length 382 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=378 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=19328 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 378 (0x17A) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 216 (0xD8) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=319 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] A1 81 D5 30 81 D2 A2 81 CF 04 81 CC 4E 54 4C 4D ...0.... ....NTLM [010] 53 53 50 00 03 00 00 00 18 00 18 00 8C 00 00 00 SSP..... ........ [020] 18 00 18 00 A4 00 00 00 1E 00 1E 00 40 00 00 00 ........ ....@... [030] 10 00 10 00 5E 00 00 00 1E 00 1E 00 6E 00 00 00 ....^... ....n... [040] 10 00 10 00 BC 00 00 00 15 82 88 60 48 00 55 00 ........ ...`H.U. [050] 44 00 53 00 4F 00 4E 00 2D 00 34 00 45 00 35 00 D.S.O.N. -.4.E.5. [060] 36 00 36 00 53 00 47 00 4B 00 62 00 69 00 6C 00 6.6.S.G. K.b.i.l. [070] 6C 00 74 00 65 00 73 00 74 00 48 00 55 00 44 00 l.t.e.s. t.H.U.D. [080] 53 00 4F 00 4E 00 2D 00 34 00 45 00 35 00 36 00 S.O.N.-. 4.E.5.6. [090] 36 00 53 00 47 00 4B 00 3E 91 8E 98 22 F9 DF 4F 6.S.G.K. >..."..O [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] A1 70 C1 21 65 4F 9D 0D DB 07 41 F6 CF 96 47 AF .p.!eO.. ..A...G. [0C0] 92 0B C2 B1 93 D8 70 6B D4 82 53 FF 43 81 00 F7 ......pk ..S.C... [0D0] AF 56 BF 1C 24 71 CF 6A 00 57 00 69 00 6E 00 64 .V..$q.j .W.i.n.d [0E0] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 32 .o.w.s. .2.0.0.2 [0F0] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e [100] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 20 . .P.a.c .k. .1. [110] 00 32 00 36 00 30 00 30 00 00 00 57 00 69 00 6E .2.6.0.0 ...W.i.n [120] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [130] 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 00 .2. .5.. .1..... [2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) switch message SMBsesssetupX (pid 17002) conn 0x0 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:18, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751) wct=12 flg2=0xc807 [2005/08/18 16:01:18, 2] smbd/sesssetup.c:setup_new_vc_session(704) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(588) Doing spnego session setup [2005/08/18 16:01:18, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(619) NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2005/08/18 16:01:18, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606) Got user=[billtest] domain=[HUDSON-4E566SGK] workstation=[HUDSON-4E566SGK] len1=24 len2=24 [2005/08/18 16:01:18, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(66) auth_context challenge set by NTLMSSP callback (NTLM2) [2005/08/18 16:01:18, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(67) challenge is: [2005/08/18 16:01:18, 5] lib/util.c:dump_data(2053) [000] 5B 23 F4 C3 9B D8 1D A4 [#...... [2005/08/18 16:01:18, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 [2005/08/18 16:01:18, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HUDSON-4E566SGK]\[billtest] from workstation [HUDSON-4E566SGK] [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2005/08/18 16:01:18, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:18, 5] auth/auth_util.c:is_trusted_domain(1541) is_trusted_domain: Checking for domain trust with [HUDSON-4E566SGK] [2005/08/18 16:01:18, 5] passdb/secrets.c:secrets_fetch_trusted_domain_password(325) secrets_fetch failed! [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:18, 10] lib/gencache.c:gencache_get(285) Cache entry with key = TDOM/HUDSON-4E566SGK couldn't be found [2005/08/18 16:01:18, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184) no entry for trusted domain HUDSON-4E566SGK found. [2005/08/18 16:01:18, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for billtest (billtest) [2005/08/18 16:01:18, 5] auth/auth_util.c:make_user_info(109) making strings for billtest's user_info struct [2005/08/18 16:01:18, 5] auth/auth_util.c:make_user_info(151) making blobs for billtest's user_info struct [2005/08/18 16:01:18, 10] auth/auth_util.c:make_user_info(167) made an encrypted user_info for billtest (billtest) [2005/08/18 16:01:18, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HUDSON-4E566SGK]\[billtest]@[HUDSON-4E566SGK] with the new password interface [2005/08/18 16:01:18, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [ACDEV]\[billtest]@[HUDSON-4E566SGK] [2005/08/18 16:01:18, 10] auth/auth.c:check_ntlm_password(231) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2005/08/18 16:01:18, 10] auth/auth.c:check_ntlm_password(233) challenge is: [2005/08/18 16:01:18, 5] lib/util.c:dump_data(2053) [000] 5B 23 F4 C3 9B D8 1D A4 [#...... [2005/08/18 16:01:18, 10] auth/auth.c:check_ntlm_password(259) check_ntlm_password: guest had nothing to say [2005/08/18 16:01:18, 8] lib/util.c:is_myname(1874) is_myname("ACDEV") returns 0 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2005/08/18 16:01:18, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:18, 5] lib/smbldap.c:smbldap_search_ext(980) smbldap_search_ext: base => [dc=hvcc,dc=edu], filter => [(&(uid=billtest)(objectclass=sambaSamAccount))], scope => [2] [2005/08/18 16:01:18, 5] lib/smbldap.c:smbldap_close(889) The connection to the LDAP server was closed [2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_open_connection(534) smbldap_open_connection: ldap://acedev.hvcc.edu [2005/08/18 16:01:18, 2] lib/smbldap.c:smbldap_open_connection(630) smbldap_open_connection: connection opened [2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_connect_system(762) ldap_connect_system: Binding to ldap server ldap://acedev.hvcc.edu as "cn=root,dc=hvcc,dc=edu" [2005/08/18 16:01:18, 3] lib/smbldap.c:smbldap_connect_system(805) ldap_connect_system: succesful connection to the LDAP server ldap_connect_system: LDAP server does support paged results [2005/08/18 16:01:18, 4] lib/smbldap.c:smbldap_open(869) The LDAP server is succesfully connected [2005/08/18 16:01:18, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: billtest [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_username(617) pdb_set_username: setting username billtest, was [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_domain(644) pdb_set_domain: setting domain ACDEV, was [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671) pdb_set_nt_username: setting nt username billtest, was [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_user_sid_from_string(557) pdb_set_user_sid_from_string: setting user sid S-1-5-21-1908802895-3536710745-1580887524-7952 [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) pdb_set_user_sid: setting user sid S-1-5-21-1908802895-3536710745-1580887524-7952 [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_group_sid_from_string(592) pdb_set_group_sid_from_string: setting group sid S-1-5-21-1908802895-3536710745-1580887524-1413 [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) pdb_set_group_sid: setting group sid S-1-5-21-1908802895-3536710745-1580887524-1413 [2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaLogonTime] = [] [2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaLogoffTime] = [] [2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaKickoffTime] = [] [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) pdb_set_full_name: setting full name Bill Test,Special Id, was [2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaHomeDrive] = [] [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) pdb_set_dir_drive: setting dir drive h:, was NULL [2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaHomePath] = [] [2005/08/18 16:01:18, 4] lib/substitute.c:automount_server(337) Home server: acedev [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) pdb_set_homedir: setting home dir \\acedev\billtest, was [2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaLogonScript] = [] [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) pdb_set_logon_script: setting logon script hudson-4e566sgk.bat, was [2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaProfilePath] = [] [2005/08/18 16:01:18, 4] lib/substitute.c:automount_server(337) Home server: acedev [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) pdb_set_profile_path: setting profile path \\acedev\billtest\profile, was [2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaUserWorkstations] = [] [2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaMungedDial] = [] [2005/08/18 16:01:18, 10] lib/account_pol.c:account_policy_get(202) account_policy_get: password history:0 [2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaBadPasswordCount] = [] [2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaBadPasswordTime] = [] [2005/08/18 16:01:18, 10] lib/smbldap.c:smbldap_get_single_attribute(293) smbldap_get_single_attribute: [sambaLogonHours] = [] [2005/08/18 16:01:18, 7] passdb/login_cache.c:login_cache_read(83) Looking up login cache for user billtest [2005/08/18 16:01:18, 7] passdb/login_cache.c:login_cache_read(97) No cache entry found [2005/08/18 16:01:18, 9] passdb/pdb_ldap.c:init_sam_from_ldap(852) No cache entry, bad count = 0, bad time = 0 [2005/08/18 16:01:18, 10] lib/account_pol.c:account_policy_get(202) account_policy_get: password history:0 [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_username(617) pdb_set_username: setting username billtest, was [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_domain(644) pdb_set_domain: setting domain ACDEV, was [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671) pdb_set_nt_username: setting nt username billtest, was [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) pdb_set_full_name: setting full name Bill Test,Special Id, was [2005/08/18 16:01:18, 4] lib/substitute.c:automount_server(337) Home server: acedev [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) pdb_set_homedir: setting home dir \\acedev\billtest, was [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) pdb_set_dir_drive: setting dir drive h:, was NULL [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) pdb_set_logon_script: setting logon script hudson-4e566sgk.bat, was [2005/08/18 16:01:18, 4] lib/substitute.c:automount_server(337) Home server: acedev [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) pdb_set_profile_path: setting profile path \\acedev\billtest\profile, was [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_workstations(885) pdb_set_workstations: setting workstations , was [2005/08/18 16:01:18, 10] lib/account_pol.c:account_policy_get(202) account_policy_get: password history:0 [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) pdb_set_user_sid: setting user sid S-1-5-21-1908802895-3536710745-1580887524-7952 [2005/08/18 16:01:18, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1908802895-3536710745-1580887524-7952 from rid 7952 [2005/08/18 16:01:18, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) pdb_set_group_sid: setting group sid S-1-5-21-1908802895-3536710745-1580887524-1413 [2005/08/18 16:01:18, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-1908802895-3536710745-1580887524-1413 from rid 1413 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:18, 9] passdb/passdb.c:pdb_update_autolock_flag(2333) pdb_update_autolock_flag: Account billtest not autolocked, no check needed [2005/08/18 16:01:18, 4] libsmb/ntlm_check.c:ntlm_password_check(326) ntlm_password_check: Checking NT MD4 password [2005/08/18 16:01:18, 4] auth/auth_sam.c:sam_account_ok(120) sam_account_ok: Checking SMB password for user billtest [2005/08/18 16:01:18, 5] auth/auth_sam.c:logon_hours_ok(102) logon_hours_ok: user billtest allowed to logon at this time (Thu Aug 18 16:01:18 2005 ) [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2005/08/18 16:01:18, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:18, 10] lib/system_smbd.c:sys_getgrouplist(116) sys_getgrouplist: user [billtest] [2005/08/18 16:01:18, 10] lib/system_smbd.c:sys_getgrouplist(125) sys_getgrouplist(): disabled winbindd for group lookup [user == billtest] [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2005/08/18 16:01:18, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:18, 8] lib/util_getent.c:remove_duplicate_gids(330) remove_duplicate_gids: Enter 2 gids [2005/08/18 16:01:18, 8] lib/util_getent.c:remove_duplicate_gids(348) remove_duplicate_gids: Exit 1 gids [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2005/08/18 16:01:18, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:18, 5] lib/smbldap.c:smbldap_search_ext(980) smbldap_search_ext: base => [ou=Groups,dc=hvcc,dc=edu], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=206))], scope => [2] [2005/08/18 16:01:18, 2] passdb/pdb_ldap.c:init_group_from_ldap(2001) init_group_from_ldap: Entry found for group: 206 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2005/08/18 16:01:18, 10] passdb/passdb.c:local_gid_to_sid(1261) local_gid_to_sid: gid (206) -> SID S-1-5-21-1908802895-3536710745-1580887524-1413. [2005/08/18 16:01:18, 10] passdb/lookup_sid.c:gid_to_sid(371) gid_to_sid: local 206 -> S-1-5-21-1908802895-3536710745-1580887524-1413 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:18, 3] lib/privileges.c:get_privileges(260) get_privileges: No privileges assigned to SID [S-1-5-21-1908802895-3536710745-1580887524-7952] [2005/08/18 16:01:18, 3] lib/privileges.c:get_privileges(260) get_privileges: No privileges assigned to SID [S-1-5-21-1908802895-3536710745-1580887524-1413] [2005/08/18 16:01:18, 5] lib/privileges.c:get_privileges_for_sids(452) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:18, 3] lib/privileges.c:get_privileges(260) get_privileges: No privileges assigned to SID [S-1-5-2] [2005/08/18 16:01:18, 3] lib/privileges.c:get_privileges(260) get_privileges: No privileges assigned to SID [S-1-5-11] [2005/08/18 16:01:18, 10] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-1908802895-3536710745-1580887524-7952 contains 5 SIDs SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-7952 SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-1413 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:18, 5] auth/auth_util.c:make_server_info_sam(829) make_server_info_sam: made server info for user billtest -> billtest [2005/08/18 16:01:18, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: sam authentication for user [billtest] succeeded [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2005/08/18 16:01:18, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:18, 5] auth/auth.c:check_ntlm_password(294) check_ntlm_password: PAM Account for user [billtest] succeeded [2005/08/18 16:01:18, 2] auth/auth.c:check_ntlm_password(307) check_ntlm_password: authentication for user [billtest] -> [billtest] -> [billtest] succeeded [2005/08/18 16:01:18, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2005/08/18 16:01:18, 10] auth/auth_util.c:free_user_info(1364) structure was created for billtest [2005/08/18 16:01:18, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(117) Got NT session key of length 16 [2005/08/18 16:01:18, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(123) Got LM session key of length 16 [2005/08/18 16:01:18, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(669) ntlmssp_server_auth: Created NTLM2 session key. [2005/08/18 16:01:18, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319) NTLMSSP Sign/Seal - Initialising with flags: [2005/08/18 16:01:18, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2005/08/18 16:01:18, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 101 [2005/08/18 16:01:18, 10] lib/util_pw.c:getpwnam_alloc(98) Got billtest from pwnam_cache [2005/08/18 16:01:18, 10] smbd/password.c:register_vuid(255) register_vuid: (3476,206) billtest billtest ACDEV guest=0 [2005/08/18 16:01:18, 3] smbd/password.c:register_vuid(257) User name: billtest Real name: Bill Test,Special Id [2005/08/18 16:01:18, 3] smbd/password.c:register_vuid(276) UNIX uid 3476 is UNIX user billtest, and will be vuid 101 [2005/08/18 16:01:18, 7] param/loadparm.c:lp_servicenumber(4226) lp_servicenumber: couldn't find billtest [2005/08/18 16:01:18, 3] smbd/password.c:register_vuid(305) Adding homes service for user 'billtest' using home directory: '/home/billtest' [2005/08/18 16:01:18, 8] param/loadparm.c:add_a_service(2393) add_a_service: Creating snum = 8 for billtest [2005/08/18 16:01:18, 3] param/loadparm.c:lp_add_home(2434) adding home's share [billtest] for user 'billtest' at '%H' [2005/08/18 16:01:18, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=106 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=19328 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=63 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [020] 00 2E 00 30 00 2E 00 32 00 30 00 72 00 63 00 32 ...0...2 .0.r.c.2 [030] 00 00 00 41 00 43 00 44 00 45 00 56 00 00 00 ...A.C.D .E.V... [2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 82 [2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x52 [2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) Transaction 3 of length 86 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=82 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=19392 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 82 (0x52) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=39 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 00 5C 00 5C 00 41 00 43 00 45 00 44 00 45 00 56 .\.\.A.C .E.D.E.V [010] 00 5C 00 58 00 30 00 34 00 53 00 48 00 52 00 00 .\.X.0.4 .S.H.R.. [020] 00 3F 3F 3F 3F 3F 00 .?????. [2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) switch message SMBtconX (pid 17002) conn 0x0 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:18, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/08/18 16:01:18, 4] smbd/reply.c:reply_tcon_and_X(618) Client requested device type [?????] for share [X04SHR] [2005/08/18 16:01:18, 5] smbd/service.c:make_connection(811) making a connection to 'normal' service x04shr [2005/08/18 16:01:18, 3] lib/access.c:check_access(313) check_access: no hostnames in host allow/deny list. [2005/08/18 16:01:18, 2] lib/access.c:check_access(324) Allowed connection from (151.103.17.49) [2005/08/18 16:01:18, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user billtest [2005/08/18 16:01:18, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is billtest [2005/08/18 16:01:18, 10] lib/util_pw.c:getpwnam_alloc(98) Got billtest from pwnam_cache [2005/08/18 16:01:18, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [billtest]! [2005/08/18 16:01:18, 3] smbd/service.c:make_connection_snum(477) Connect path is '/x04shr' for service [x04shr] [2005/08/18 16:01:18, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for x04shr [2005/08/18 16:01:18, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2005/08/18 16:01:18, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 5 entries and first sid S-1-5-21-1908802895-3536710745-1580887524-7952. [2005/08/18 16:01:18, 3] lib/util_seaccess.c:se_access_check(250) [2005/08/18 16:01:18, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1908802895-3536710745-1580887524-7952 se_access_check: also S-1-5-21-1908802895-3536710745-1580887524-1413 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2005/08/18 16:01:18, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2005/08/18 16:01:18, 3] smbd/vfs.c:vfs_init_default(215) Initialising default vfs hooks [2005/08/18 16:01:18, 5] smbd/connection.c:claim_connection(170) claiming x04shr 0 [2005/08/18 16:01:18, 10] smbd/uid.c:is_share_read_only_for_user(122) is_share_read_only_for_user: share x04shr is read-write for unix user billtest [2005/08/18 16:01:18, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for x04shr [2005/08/18 16:01:18, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2005/08/18 16:01:18, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 5 entries and first sid S-1-5-21-1908802895-3536710745-1580887524-7952. [2005/08/18 16:01:18, 3] lib/util_seaccess.c:se_access_check(250) [2005/08/18 16:01:18, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1908802895-3536710745-1580887524-7952 se_access_check: also S-1-5-21-1908802895-3536710745-1580887524-1413 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2005/08/18 16:01:18, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2005/08/18 16:01:18, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for x04shr [2005/08/18 16:01:18, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2005/08/18 16:01:18, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 5 entries and first sid S-1-5-21-1908802895-3536710745-1580887524-7952. [2005/08/18 16:01:18, 3] lib/util_seaccess.c:se_access_check(250) [2005/08/18 16:01:18, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1908802895-3536710745-1580887524-7952 se_access_check: also S-1-5-21-1908802895-3536710745-1580887524-1413 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2005/08/18 16:01:18, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (3476, 206) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-1908802895-3536710745-1580887524-7952 contains 5 SIDs SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-7952 SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-1413 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 3476 Primary group is 206 and contains 1 supplementary groups Group[ 0]: 206 [2005/08/18 16:01:18, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,3476) gid=(0,206) [2005/08/18 16:01:18, 1] smbd/service.c:make_connection_snum(662) hudson-4e566sgk (151.103.17.49) connect to service x04shr initially as user billtest (uid=3476, gid=206) (pid 17002) [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:18, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/08/18 16:01:18, 3] smbd/reply.c:reply_tcon_and_X(666) tconX service=X04SHR [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=54 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=19392 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 13 (0xD) smb_bcc=13 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 41 3A 00 4E 00 54 00 46 00 53 00 00 00 A:.N.T.F .S... [2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 76 [2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x4c [2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) Transaction 4 of length 80 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19456 smt_wct=15 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8 (0x8) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=11 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 00 00 ........ ... [2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:18, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (3476, 206) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-1908802895-3536710745-1580887524-7952 contains 5 SIDs SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-7952 SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-1413 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:18, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 3476 Primary group is 206 and contains 1 supplementary groups Group[ 0]: 206 [2005/08/18 16:01:18, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,3476) gid=(0,206) [2005/08/18 16:01:18, 4] smbd/vfs.c:vfs_ChDir(737) vfs_ChDir to /x04shr [2005/08/18 16:01:18, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:18, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2005/08/18 16:01:18, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2005/08/18 16:01:18, 3] smbd/vfs.c:reduce_name(919) reduce_name [.] [/x04shr] [2005/08/18 16:01:18, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [.] -> [/x04shr] [2005/08/18 16:01:18, 3] smbd/vfs.c:reduce_name(1025) reduce_name: . reduced to /x04shr [2005/08/18 16:01:18, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo . (fnum = -1) level=257 call=5 total_data=0 [2005/08/18 16:01:18, 8] smbd/dosmode.c:dos_mode(294) dos_mode: . [2005/08/18 16:01:18, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning rd [2005/08/18 16:01:18, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning rd [2005/08/18 16:01:18, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO [2005/08/18 16:01:18, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) SMB_QFBI - create: Thu Aug 18 14:40:49 2005 access: Thu Aug 18 14:47:15 2005 write: Thu Aug 18 14:40:49 2005 change: Thu Aug 18 14:40:49 2005 mode: 11 [2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 [2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19456 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 80 4E 42 5A 24 A4 C5 01 80 3B 55 ......NB Z$....;U [010] 40 25 A4 C5 01 80 4E 42 5A 24 A4 C5 01 80 4E 42 @%....NB Z$....NB [020] 5A 24 A4 C5 01 11 00 00 00 Z$...... . [2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 70 [2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x46 [2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) Transaction 5 of length 74 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19520 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 00 00 00 02 01 ..... [2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:18, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:18, 3] smbd/trans2.c:call_trans2qfsinfo(2127) call_trans2qfsinfo: level = 258 [2005/08/18 16:01:18, 5] smbd/trans2.c:call_trans2qfsinfo(2240) call_trans2qfsinfo : SMB_QUERY_FS_VOLUME_INFO namelen = 6, vol=x04shr serv=x04shr [2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 0, data_sent_thistime = 30, useable_space = 131012 [2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 0, data_to_send = 30, paramsize = 0, datasize = 30 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=86 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19520 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 30 (0x1E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 30 (0x1E) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=31 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 00 00 90 0B 83 0A 0C 00 00 ........ ........ [010] 00 00 00 78 00 30 00 34 00 73 00 68 00 72 00 ...x.0.4 .s.h.r. [2005/08/18 16:01:18, 4] smbd/trans2.c:call_trans2qfsinfo(2425) SMBtrans2 info_level = 258 [2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 70 [2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x46 [2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) Transaction 6 of length 74 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19584 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 00 00 00 05 01 ..... [2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:18, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:18, 3] smbd/trans2.c:call_trans2qfsinfo(2127) call_trans2qfsinfo: level = 261 [2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19584 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 20 (0x14) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 20 (0x14) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=21 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 00 0B 00 00 00 FF 00 00 00 08 00 00 00 4E 00 54 ........ .....N.T [010] 00 46 00 53 00 .F.S. [2005/08/18 16:01:18, 4] smbd/trans2.c:call_trans2qfsinfo(2425) SMBtrans2 info_level = 261 [2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 70 [2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x46 [2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) Transaction 7 of length 74 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19648 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 00 00 00 05 01 ..... [2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:18, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:18, 3] smbd/trans2.c:call_trans2qfsinfo(2127) call_trans2qfsinfo: level = 261 [2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19648 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 20 (0x14) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 20 (0x14) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=21 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 00 0B 00 00 00 FF 00 00 00 08 00 00 00 4E 00 54 ........ .....N.T [010] 00 46 00 53 00 .F.S. [2005/08/18 16:01:18, 4] smbd/trans2.c:call_trans2qfsinfo(2425) SMBtrans2 info_level = 261 [2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 70 [2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x46 [2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) Transaction 8 of length 74 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19712 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 00 00 00 03 01 ..... [2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:18, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:18, 3] smbd/trans2.c:call_trans2qfsinfo(2127) call_trans2qfsinfo: level = 259 [2005/08/18 16:01:18, 5] smbd/trans2.c:call_trans2qfsinfo(2268) call_trans2qfsinfo : SMB_QUERY_FS_SIZE_INFO bsize=1024, cSectorUnit=2, cBytesSector=512, cUnitTotal=20971520, cUnitAvail=5225348 [2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 0, data_sent_thistime = 24, useable_space = 131012 [2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 0, data_to_send = 24, paramsize = 0, datasize = 24 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=80 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19712 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=25 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 00 00 00 40 01 00 00 00 00 84 BB 4F 00 00 00 00 ...@.... ...O.... [010] 00 02 00 00 00 00 02 00 00 ........ . [2005/08/18 16:01:18, 4] smbd/trans2.c:call_trans2qfsinfo(2425) SMBtrans2 info_level = 259 [2005/08/18 16:01:18, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 70 [2005/08/18 16:01:18, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x46 [2005/08/18 16:01:18, 3] smbd/process.c:process_smb(1114) Transaction 9 of length 74 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19776 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 00 00 00 03 01 ..... [2005/08/18 16:01:18, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:18, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:18, 3] smbd/trans2.c:call_trans2qfsinfo(2127) call_trans2qfsinfo: level = 259 [2005/08/18 16:01:18, 5] smbd/trans2.c:call_trans2qfsinfo(2268) call_trans2qfsinfo : SMB_QUERY_FS_SIZE_INFO bsize=1024, cSectorUnit=2, cBytesSector=512, cUnitTotal=20971520, cUnitAvail=5225348 [2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 0, data_sent_thistime = 24, useable_space = 131012 [2005/08/18 16:01:18, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 0, data_to_send = 24, paramsize = 0, datasize = 24 [2005/08/18 16:01:18, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:18, 5] lib/util.c:show_msg(464) size=80 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19776 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=25 [2005/08/18 16:01:18, 10] lib/util.c:dump_data(2053) [000] 00 00 00 40 01 00 00 00 00 84 BB 4F 00 00 00 00 ...@.... ...O.... [010] 00 02 00 00 00 00 02 00 00 ........ . [2005/08/18 16:01:18, 4] smbd/trans2.c:call_trans2qfsinfo(2425) SMBtrans2 info_level = 259 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 86 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x56 [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 10 of length 90 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=86 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19840 smt_wct=15 smb_vwv[ 0]= 18 (0x12) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 18 (0x12) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=21 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 16 00 56 05 06 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 2A 00 00 00 .*... [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2findfirst(1628) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "*" [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [*] [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = *, dirpath = , start = * [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled * ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component * (len 1) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled * ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component * (len 1) ? [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) New file * [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) reduce_name [*] [/x04shr] [2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [*] -> [/x04shr/*] [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) reduce_name: * reduced to /x04shr/* [2005/08/18 16:01:20, 5] smbd/trans2.c:call_trans2findfirst(1682) dir=./, mask = * [2005/08/18 16:01:20, 5] smbd/dir.c:dptr_create(390) dptr_create dir=./ [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) reduce_name [./] [/x04shr] [2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [./] -> [/x04shr] [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ./ reduced to /x04shr [2005/08/18 16:01:20, 3] smbd/dir.c:dptr_create(509) creating new dirptr 256 for path ./, expect_close = 1 [2005/08/18 16:01:20, 4] smbd/trans2.c:call_trans2findfirst(1739) dptr_num is 256, wcard = *, attr = 22 [2005/08/18 16:01:20, 8] smbd/trans2.c:call_trans2findfirst(1744) dirpath=<./> dontdescend=<> [2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./. [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning rd [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning rd [2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) get_lanman2_dir_entry found ./. fname=. [2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset -2147483648 [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./.. [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning rd [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning rd [2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) get_lanman2_dir_entry found ./.. fname=.. [2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./lost+found [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning rd [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning rd [2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) get_lanman2_dir_entry found ./lost+found fname=lost+found [2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:name_map(613) name_map: lost+found -> 09085312 -> L2I81E~A (cache=1) [2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./xpapps [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning rd [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning rd [2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) get_lanman2_dir_entry found ./xpapps fname=xpapps [2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./dos [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning rd [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning rd [2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) get_lanman2_dir_entry found ./dos fname=dos [2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./ntapps [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning rd [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning rd [2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) get_lanman2_dir_entry found ./ntapps fname=ntapps [2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./common [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning d [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning d [2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) get_lanman2_dir_entry found ./common fname=common [2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./spsspatch.log [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning [2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) get_lanman2_dir_entry found ./spsspatch.log fname=spsspatch.log [2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:name_map(613) name_map: spsspatch.log -> 7EEF1500 -> SZ7WO3~K.LOG (cache=1) [2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./billtest [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning d [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning d [2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) get_lanman2_dir_entry found ./billtest fname=billtest [2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./ghost.exe [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) get_lanman2_dir_entry found ./ghost.exe fname=ghost.exe [2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./ghost75.exe [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) get_lanman2_dir_entry found ./ghost75.exe fname=ghost75.exe [2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./susprod_notify.reg [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:20, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:20, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) get_lanman2_dir_entry found ./susprod_notify.reg fname=susprod_notify.reg [2005/08/18 16:01:20, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:name_map(613) name_map: susprod_notify.reg -> 1E6847C1 -> S8FQAP~T.REG (cache=1) [2005/08/18 16:01:20, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) get_lanman2_dir_entry:readdir on dirptr 0x200590a8 now at offset 0 [2005/08/18 16:01:20, 5] smbd/trans2.c:call_trans2findfirst(1792) call_trans2findfirst - (2) closing dptr_num 256 [2005/08/18 16:01:20, 4] smbd/dir.c:dptr_close_internal(238) closing dptr key 256 [2005/08/18 16:01:20, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 10, data_sent_thistime = 1328, useable_space = 131010 [2005/08/18 16:01:20, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 10, data_to_send = 1328, paramsize = 10, datasize = 1328 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=1396 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19840 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 1328 (0x530) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1328 (0x530) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1341 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 FD FF 0C 00 01 00 00 00 AC 04 00 00 60 00 00 ........ .....`.. [010] 00 00 00 00 00 80 4E 42 5A 24 A4 C5 01 00 68 C2 ......NB Z$....h. [020] 99 2F A4 C5 01 80 4E 42 5A 24 A4 C5 01 80 4E 42 ./....NB Z$....NB [030] 5A 24 A4 C5 01 00 00 00 00 00 00 00 00 00 00 00 Z$...... ........ [040] 00 00 00 00 00 11 00 00 00 02 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 2E 00 64 00 00 ........ .....d.. [070] 00 00 00 00 00 80 89 BC 28 0A A4 C5 01 00 68 C2 ........ (.....h. [080] 99 2F A4 C5 01 80 89 BC 28 0A A4 C5 01 80 89 BC ./...... (....... [090] 28 0A A4 C5 01 00 00 00 00 00 00 00 00 00 00 00 (....... ........ [0A0] 00 00 00 00 00 11 00 00 00 04 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 2E 00 2E 00 00 ........ ........ [0D0] 00 74 00 00 00 00 00 00 00 00 FA A1 A3 9D 57 C4 .t...... ......W. [0E0] 01 00 43 AB 0D 25 A4 C5 01 00 FA A1 A3 9D 57 C4 ..C..%.. ......W. [0F0] 01 00 FA A1 A3 9D 57 C4 01 00 00 00 00 00 00 00 ......W. ........ [100] 00 00 00 00 00 00 00 00 00 11 00 00 00 14 00 00 ........ ........ [110] 00 00 00 00 00 10 00 4C 00 32 00 49 00 38 00 31 .......L .2.I.8.1 [120] 00 45 00 7E 00 41 00 00 00 00 00 00 00 00 00 6C .E.~.A.. .......l [130] 00 6F 00 73 00 74 00 2B 00 66 00 6F 00 75 00 6E .o.s.t.+ .f.o.u.n [140] 00 64 00 00 00 6C 00 00 00 00 00 00 00 00 74 C6 .d...l.. ......t. [150] 9E 61 63 C4 01 00 43 AB 0D 25 A4 C5 01 00 74 C6 .ac...C. .%....t. [160] 9E 61 63 C4 01 00 74 C6 9E 61 63 C4 01 00 00 00 .ac...t. .ac..... [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 11 00 00 ........ ........ [180] 00 0C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 78 00 70 00 61 00 70 00 70 00 73 00 00 ...x.p.a .p.p.s.. [1B0] 00 64 00 00 00 00 00 00 00 80 1F E3 BF 8E F5 C3 .d...... ........ [1C0] 01 00 43 AB 0D 25 A4 C5 01 80 1F E3 BF 8E F5 C3 ..C..%.. ........ [1D0] 01 80 1F E3 BF 8E F5 C3 01 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 11 00 00 00 06 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2005/08/18 16:01:20, 4] smbd/trans2.c:call_trans2findfirst(1828) SMBtrans2 mask=* directory=./ dirtype=22 numentries=12 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 122 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x7a [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 11 of length 126 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=122 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19904 smt_wct=15 smb_vwv[ 0]= 54 (0x36) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 54 (0x36) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=57 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 6C 00 6F 00 73 ........ .\.l.o.s [010] 00 74 00 2B 00 66 00 6F 00 75 00 6E 00 64 00 5C .t.+.f.o .u.n.d.\ [020] 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 00 2E .d.e.s.k .t.o.p.. [030] 00 69 00 6E 00 69 00 00 00 .i.n.i.. . [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "lost+found/desktop.ini" [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [LOST+FOUND/DESKTOP.INI] [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [LOST+FOUND] [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = lost+found/desktop.ini, dirpath = , start = lost+found/desktop.ini [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled lost+found/desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component lost+found/desktop.ini (len 10) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (20058bc8:sizeb) LOST+FOUND -> lost+found [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) reduce_name [lost+found/desktop.ini] [/x04shr] [2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [lost+found/desktop.ini] -> [/x04shr/lost+found/desktop.ini] [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) reduce_name: lost+found/desktop.ini reduced to /x04shr/lost+found/desktop.ini [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of lost+found/desktop.ini failed (No such file or directory) [2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19904 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 122 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x7a [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 12 of length 126 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=122 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19968 smt_wct=15 smb_vwv[ 0]= 54 (0x36) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 54 (0x36) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=57 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 6C 00 6F 00 73 ........ .\.l.o.s [010] 00 74 00 2B 00 66 00 6F 00 75 00 6E 00 64 00 5C .t.+.f.o .u.n.d.\ [020] 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 00 2E .d.e.s.k .t.o.p.. [030] 00 69 00 6E 00 69 00 00 00 .i.n.i.. . [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "lost+found/desktop.ini" [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [LOST+FOUND/DESKTOP.INI] [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = lost+found/desktop.ini, dirpath = lost+found, start = desktop.ini [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) reduce_name [lost+found/desktop.ini] [/x04shr] [2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [lost+found/desktop.ini] -> [/x04shr/lost+found/desktop.ini] [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) reduce_name: lost+found/desktop.ini reduced to /x04shr/lost+found/desktop.ini [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of lost+found/desktop.ini failed (No such file or directory) [2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=19968 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 122 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x7a [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 13 of length 126 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=122 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20032 smt_wct=15 smb_vwv[ 0]= 54 (0x36) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 54 (0x36) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=57 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 6C 00 6F 00 73 ........ .\.l.o.s [010] 00 74 00 2B 00 66 00 6F 00 75 00 6E 00 64 00 5C .t.+.f.o .u.n.d.\ [020] 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 00 2E .d.e.s.k .t.o.p.. [030] 00 69 00 6E 00 69 00 00 00 .i.n.i.. . [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "lost+found/desktop.ini" [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [LOST+FOUND/DESKTOP.INI] [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = lost+found/desktop.ini, dirpath = lost+found, start = desktop.ini [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) reduce_name [lost+found/desktop.ini] [/x04shr] [2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [lost+found/desktop.ini] -> [/x04shr/lost+found/desktop.ini] [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) reduce_name: lost+found/desktop.ini reduced to /x04shr/lost+found/desktop.ini [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of lost+found/desktop.ini failed (No such file or directory) [2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20032 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 114 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x72 [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 14 of length 118 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=114 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20096 smt_wct=15 smb_vwv[ 0]= 46 (0x2E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 46 (0x2E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=49 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 78 00 70 00 61 ........ .\.x.p.a [010] 00 70 00 70 00 73 00 5C 00 64 00 65 00 73 00 6B .p.p.s.\ .d.e.s.k [020] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. [030] 00 . [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "xpapps/desktop.ini" [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [XPAPPS/DESKTOP.INI] [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [XPAPPS] [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = xpapps/desktop.ini, dirpath = , start = xpapps/desktop.ini [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled xpapps/desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component xpapps/desktop.ini (len 6) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (20058bc8:size7) XPAPPS -> xpapps [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) reduce_name [xpapps/desktop.ini] [/x04shr] [2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [xpapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) reduce_name: xpapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of xpapps/desktop.ini failed (No such file or directory) [2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20096 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 114 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x72 [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 15 of length 118 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=114 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20160 smt_wct=15 smb_vwv[ 0]= 46 (0x2E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 46 (0x2E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=49 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 78 00 70 00 61 ........ .\.x.p.a [010] 00 70 00 70 00 73 00 5C 00 64 00 65 00 73 00 6B .p.p.s.\ .d.e.s.k [020] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. [030] 00 . [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "xpapps/desktop.ini" [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [XPAPPS/DESKTOP.INI] [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [XPAPPS] -> [xpapps] [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = xpapps/desktop.ini, dirpath = xpapps, start = desktop.ini [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) reduce_name [xpapps/desktop.ini] [/x04shr] [2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [xpapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) reduce_name: xpapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of xpapps/desktop.ini failed (No such file or directory) [2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20160 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 114 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x72 [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 16 of length 118 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=114 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20224 smt_wct=15 smb_vwv[ 0]= 46 (0x2E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 46 (0x2E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=49 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 78 00 70 00 61 ........ .\.x.p.a [010] 00 70 00 70 00 73 00 5C 00 64 00 65 00 73 00 6B .p.p.s.\ .d.e.s.k [020] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. [030] 00 . [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "xpapps/desktop.ini" [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [XPAPPS/DESKTOP.INI] [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [XPAPPS] -> [xpapps] [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = xpapps/desktop.ini, dirpath = xpapps, start = desktop.ini [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) reduce_name [xpapps/desktop.ini] [/x04shr] [2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [xpapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) reduce_name: xpapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of xpapps/desktop.ini failed (No such file or directory) [2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20224 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 108 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x6c [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 17 of length 112 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=108 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20288 smt_wct=15 smb_vwv[ 0]= 40 (0x28) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 40 (0x28) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=43 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 64 00 6F 00 73 ........ .\.d.o.s [010] 00 5C 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 .\.d.e.s .k.t.o.p [020] 00 2E 00 69 00 6E 00 69 00 00 00 ...i.n.i ... [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "dos/desktop.ini" [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [DOS/DESKTOP.INI] [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [DOS] [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = dos/desktop.ini, dirpath = , start = dos/desktop.ini [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled dos/desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component dos/desktop.ini (len 3) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (20058c48:size4) DOS -> dos [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) reduce_name [dos/desktop.ini] [/x04shr] [2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [dos/desktop.ini] -> [/x04shr/dos/desktop.ini] [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) reduce_name: dos/desktop.ini reduced to /x04shr/dos/desktop.ini [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of dos/desktop.ini failed (No such file or directory) [2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20288 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 108 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x6c [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 18 of length 112 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=108 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20352 smt_wct=15 smb_vwv[ 0]= 40 (0x28) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 40 (0x28) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=43 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 64 00 6F 00 73 ........ .\.d.o.s [010] 00 5C 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 .\.d.e.s .k.t.o.p [020] 00 2E 00 69 00 6E 00 69 00 00 00 ...i.n.i ... [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "dos/desktop.ini" [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [DOS/DESKTOP.INI] [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [DOS] -> [dos] [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = dos/desktop.ini, dirpath = dos, start = desktop.ini [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) reduce_name [dos/desktop.ini] [/x04shr] [2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [dos/desktop.ini] -> [/x04shr/dos/desktop.ini] [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) reduce_name: dos/desktop.ini reduced to /x04shr/dos/desktop.ini [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of dos/desktop.ini failed (No such file or directory) [2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20352 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 108 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x6c [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 19 of length 112 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=108 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20416 smt_wct=15 smb_vwv[ 0]= 40 (0x28) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 40 (0x28) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=43 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 64 00 6F 00 73 ........ .\.d.o.s [010] 00 5C 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 .\.d.e.s .k.t.o.p [020] 00 2E 00 69 00 6E 00 69 00 00 00 ...i.n.i ... [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "dos/desktop.ini" [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [DOS/DESKTOP.INI] [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [DOS] -> [dos] [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = dos/desktop.ini, dirpath = dos, start = desktop.ini [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) reduce_name [dos/desktop.ini] [/x04shr] [2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [dos/desktop.ini] -> [/x04shr/dos/desktop.ini] [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) reduce_name: dos/desktop.ini reduced to /x04shr/dos/desktop.ini [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of dos/desktop.ini failed (No such file or directory) [2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20416 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 114 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x72 [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 20 of length 118 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=114 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20480 smt_wct=15 smb_vwv[ 0]= 46 (0x2E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 46 (0x2E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=49 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 6E 00 74 00 61 ........ .\.n.t.a [010] 00 70 00 70 00 73 00 5C 00 64 00 65 00 73 00 6B .p.p.s.\ .d.e.s.k [020] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. [030] 00 . [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "ntapps/desktop.ini" [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [NTAPPS/DESKTOP.INI] [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [NTAPPS] [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = ntapps/desktop.ini, dirpath = , start = ntapps/desktop.ini [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled ntapps/desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component ntapps/desktop.ini (len 6) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (20058bc8:size7) NTAPPS -> ntapps [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) reduce_name [ntapps/desktop.ini] [/x04shr] [2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ntapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ntapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of ntapps/desktop.ini failed (No such file or directory) [2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20480 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 114 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x72 [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 21 of length 118 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=114 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20544 smt_wct=15 smb_vwv[ 0]= 46 (0x2E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 46 (0x2E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=49 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 6E 00 74 00 61 ........ .\.n.t.a [010] 00 70 00 70 00 73 00 5C 00 64 00 65 00 73 00 6B .p.p.s.\ .d.e.s.k [020] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. [030] 00 . [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "ntapps/desktop.ini" [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [NTAPPS/DESKTOP.INI] [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [NTAPPS] -> [ntapps] [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = ntapps/desktop.ini, dirpath = ntapps, start = desktop.ini [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) reduce_name [ntapps/desktop.ini] [/x04shr] [2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ntapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ntapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of ntapps/desktop.ini failed (No such file or directory) [2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20544 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 114 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x72 [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 22 of length 118 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=114 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20608 smt_wct=15 smb_vwv[ 0]= 46 (0x2E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 46 (0x2E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=49 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 6E 00 74 00 61 ........ .\.n.t.a [010] 00 70 00 70 00 73 00 5C 00 64 00 65 00 73 00 6B .p.p.s.\ .d.e.s.k [020] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. [030] 00 . [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "ntapps/desktop.ini" [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [NTAPPS/DESKTOP.INI] [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [NTAPPS] -> [ntapps] [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = ntapps/desktop.ini, dirpath = ntapps, start = desktop.ini [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) reduce_name [ntapps/desktop.ini] [/x04shr] [2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ntapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ntapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of ntapps/desktop.ini failed (No such file or directory) [2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20608 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 100 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x64 [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 23 of length 104 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20672 smt_wct=15 smb_vwv[ 0]= 32 (0x20) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 32 (0x20) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=35 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 64 00 65 00 73 ........ .\.d.e.s [010] 00 6B 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 .k.t.o.p ...i.n.i [020] 00 00 00 ... [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "desktop.ini" [2005/08/18 16:01:20, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [DESKTOP.INI] [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = desktop.ini, dirpath = , start = desktop.ini [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:20, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:20, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(919) reduce_name [desktop.ini] [/x04shr] [2005/08/18 16:01:20, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [desktop.ini] -> [/x04shr/desktop.ini] [2005/08/18 16:01:20, 3] smbd/vfs.c:reduce_name(1025) reduce_name: desktop.ini reduced to /x04shr/desktop.ini [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of desktop.ini failed (No such file or directory) [2005/08/18 16:01:20, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:20, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20672 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 70 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x46 [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 24 of length 74 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20737 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 03 01 ..... [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfsinfo(2127) call_trans2qfsinfo: level = 259 [2005/08/18 16:01:20, 5] smbd/trans2.c:call_trans2qfsinfo(2268) call_trans2qfsinfo : SMB_QUERY_FS_SIZE_INFO bsize=1024, cSectorUnit=2, cBytesSector=512, cUnitTotal=20971520, cUnitAvail=5225348 [2005/08/18 16:01:20, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 0, data_sent_thistime = 24, useable_space = 131012 [2005/08/18 16:01:20, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 0, data_to_send = 24, paramsize = 0, datasize = 24 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=80 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20737 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=25 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 40 01 00 00 00 00 84 BB 4F 00 00 00 00 ...@.... ...O.... [010] 00 02 00 00 00 00 02 00 00 ........ . [2005/08/18 16:01:20, 4] smbd/trans2.c:call_trans2qfsinfo(2425) SMBtrans2 info_level = 259 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 248 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0xf8 [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 25 of length 252 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=248 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=20800 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 248 (0xF8) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 87 (0x57) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=189 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 60 55 06 06 2B 06 01 05 05 02 A0 4B 30 49 A0 0E `U..+... ...K0I.. [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 37 0...+... ..7....7 [020] 04 35 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 B2 .5NTLMSS P....... [030] 08 E0 06 00 06 00 2F 00 00 00 0F 00 0F 00 20 00 ....../. ...... . [040] 00 00 48 55 44 53 4F 4E 2D 34 45 35 36 36 53 47 ..HUDSON -4E566SG [050] 4B 4C 41 50 54 4F 50 57 00 69 00 6E 00 64 00 6F KLAPTOPW .i.n.d.o [060] 00 77 00 73 00 20 00 32 00 30 00 30 00 32 00 20 .w.s. .2 .0.0.2. [070] 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 20 .S.e.r.v .i.c.e. [080] 00 50 00 61 00 63 00 6B 00 20 00 31 00 20 00 32 .P.a.c.k . .1. .2 [090] 00 36 00 30 00 30 00 00 00 57 00 69 00 6E 00 64 .6.0.0.. .W.i.n.d [0A0] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 32 .o.w.s. .2.0.0.2 [0B0] 00 20 00 35 00 2E 00 31 00 00 00 00 00 . .5...1 ..... [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBsesssetupX (pid 17002) conn 0x0 [2005/08/18 16:01:20, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:20, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:20, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:20, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751) wct=12 flg2=0xc807 [2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(588) Doing spnego session setup [2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(619) NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2005/08/18 16:01:20, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 102 [2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_spnego_negotiate(480) Got OID 1 3 6 1 4 1 311 2 2 10 [2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_spnego_negotiate(483) Got secblob of size 53 [2005/08/18 16:01:20, 5] auth/auth.c:make_auth_context_subsystem(482) Making default auth method list for DC, security=user, encrypt passwords = yes [2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match winbind:trustdomain [2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match trustdomain [2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method trustdomain has a valid init [2005/08/18 16:01:20, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method winbind has a valid init [2005/08/18 16:01:20, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0xe008b297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2005/08/18 16:01:20, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module guest did not want to specify a challenge [2005/08/18 16:01:20, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module sam did not want to specify a challenge [2005/08/18 16:01:20, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module winbind did not want to specify a challenge [2005/08/18 16:01:20, 5] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2005/08/18 16:01:20, 5] auth/auth.c:get_ntlm_challenge(136) challenge is: [2005/08/18 16:01:20, 5] lib/util.c:dump_data(2053) [000] A8 A9 68 40 8E DF 33 EB ..h@..3. [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=274 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=20800 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 177 (0xB1) smb_bcc=231 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] A1 81 AE 30 81 AB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 95 04 81 92 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 0A 00 0A 00 30 TLMSSP.. .......0 [030] 00 00 00 95 82 89 60 A8 A9 68 40 8E DF 33 EB 00 ......`. .h@..3.. [040] 00 00 00 00 00 00 00 58 00 58 00 3A 00 00 00 41 .......X .X.:...A [050] 00 43 00 44 00 45 00 56 00 02 00 0A 00 41 00 43 .C.D.E.V .....A.C [060] 00 44 00 45 00 56 00 01 00 0C 00 41 00 43 00 45 .D.E.V.. ...A.C.E [070] 00 44 00 45 00 56 00 04 00 10 00 68 00 76 00 63 .D.E.V.. ...h.v.c [080] 00 63 00 2E 00 65 00 64 00 75 00 03 00 1E 00 61 .c...e.d .u.....a [090] 00 63 00 65 00 64 00 65 00 76 00 2E 00 68 00 76 .c.e.d.e .v...h.v [0A0] 00 63 00 63 00 2E 00 65 00 64 00 75 00 00 00 00 .c.c...e .d.u.... [0B0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [0C0] 00 62 00 61 00 20 00 33 00 2E 00 30 00 2E 00 32 .b.a. .3 ...0...2 [0D0] 00 30 00 72 00 63 00 32 00 00 00 41 00 43 00 44 .0.r.c.2 ...A.C.D [0E0] 00 45 00 56 00 00 00 .E.V... [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 280 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x118 [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 26 of length 284 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=280 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=20864 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 280 (0x118) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 119 (0x77) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=221 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] A1 75 30 73 A2 71 04 6F 4E 54 4C 4D 53 53 50 00 .u0s.q.o NTLMSSP. [010] 03 00 00 00 01 00 01 00 5E 00 00 00 00 00 00 00 ........ ^....... [020] 5F 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 _....... @....... [030] 40 00 00 00 1E 00 1E 00 40 00 00 00 10 00 10 00 @....... @....... [040] 5F 00 00 00 15 8A 88 60 48 00 55 00 44 00 53 00 _......` H.U.D.S. [050] 4F 00 4E 00 2D 00 34 00 45 00 35 00 36 00 36 00 O.N.-.4. E.5.6.6. [060] 53 00 47 00 4B 00 00 86 9F C0 94 C6 95 D3 27 B7 S.G.K... ......'. [070] 85 14 AC 56 AE 58 A3 57 00 69 00 6E 00 64 00 6F ...V.X.W .i.n.d.o [080] 00 77 00 73 00 20 00 32 00 30 00 30 00 32 00 20 .w.s. .2 .0.0.2. [090] 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 20 .S.e.r.v .i.c.e. [0A0] 00 50 00 61 00 63 00 6B 00 20 00 31 00 20 00 32 .P.a.c.k . .1. .2 [0B0] 00 36 00 30 00 30 00 00 00 57 00 69 00 6E 00 64 .6.0.0.. .W.i.n.d [0C0] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 32 .o.w.s. .2.0.0.2 [0D0] 00 20 00 35 00 2E 00 31 00 00 00 00 00 . .5...1 ..... [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBsesssetupX (pid 17002) conn 0x0 [2005/08/18 16:01:20, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:20, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:20, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:20, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751) wct=12 flg2=0xc807 [2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(588) Doing spnego session setup [2005/08/18 16:01:20, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(619) NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2005/08/18 16:01:20, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606) Got user=[] domain=[] workstation=[HUDSON-4E566SGK] len1=1 len2=0 [2005/08/18 16:01:20, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 [2005/08/18 16:01:20, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user []\[] from workstation [HUDSON-4E566SGK] [2005/08/18 16:01:20, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2005/08/18 16:01:20, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2005/08/18 16:01:20, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2005/08/18 16:01:20, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:20, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:20, 5] auth/auth_util.c:is_trusted_domain(1541) is_trusted_domain: Checking for domain trust with [ACDEV] [2005/08/18 16:01:20, 5] passdb/secrets.c:secrets_fetch_trusted_domain_password(325) secrets_fetch failed! [2005/08/18 16:01:20, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:20, 10] lib/gencache.c:gencache_get(285) Cache entry with key = TDOM/ACDEV couldn't be found [2005/08/18 16:01:20, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184) no entry for trusted domain ACDEV found. [2005/08/18 16:01:20, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for () [2005/08/18 16:01:20, 5] auth/auth_util.c:make_user_info(109) making strings for 's user_info struct [2005/08/18 16:01:20, 5] auth/auth_util.c:make_user_info(151) making blobs for 's user_info struct [2005/08/18 16:01:20, 10] auth/auth_util.c:make_user_info(167) made an encrypted user_info for () [2005/08/18 16:01:20, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user []\[]@[HUDSON-4E566SGK] with the new password interface [2005/08/18 16:01:20, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [ACDEV]\[]@[HUDSON-4E566SGK] [2005/08/18 16:01:20, 10] auth/auth.c:check_ntlm_password(231) check_ntlm_password: auth_context challenge created by random [2005/08/18 16:01:20, 10] auth/auth.c:check_ntlm_password(233) challenge is: [2005/08/18 16:01:20, 5] lib/util.c:dump_data(2053) [000] A8 A9 68 40 8E DF 33 EB ..h@..3. [2005/08/18 16:01:20, 10] lib/account_pol.c:account_policy_get(202) account_policy_get: password history:0 [2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_username(617) pdb_set_username: setting username nobody, was [2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_domain(644) pdb_set_domain: setting domain ACDEV, was [2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671) pdb_set_nt_username: setting nt username nobody, was [2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) pdb_set_full_name: setting full name nobody,Special Id, was [2005/08/18 16:01:20, 4] lib/substitute.c:automount_server(337) Home server: acedev [2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) pdb_set_homedir: setting home dir \\acedev\nobody, was [2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) pdb_set_dir_drive: setting dir drive h:, was NULL [2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) pdb_set_logon_script: setting logon script hudson-4e566sgk.bat, was [2005/08/18 16:01:20, 4] lib/substitute.c:automount_server(337) Home server: acedev [2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) pdb_set_profile_path: setting profile path \\acedev\nobody\profile, was [2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_workstations(885) pdb_set_workstations: setting workstations , was [2005/08/18 16:01:20, 10] lib/account_pol.c:account_policy_get(202) account_policy_get: password history:0 [2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) pdb_set_user_sid: setting user sid S-1-5-21-1908802895-3536710745-1580887524-501 [2005/08/18 16:01:20, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1908802895-3536710745-1580887524-501 from rid 501 [2005/08/18 16:01:20, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) pdb_set_group_sid: setting group sid S-1-5-21-1908802895-3536710745-1580887524-514 [2005/08/18 16:01:20, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-1908802895-3536710745-1580887524-514 from rid 514 [2005/08/18 16:01:20, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: guest authentication for user [] succeeded [2005/08/18 16:01:20, 5] auth/auth.c:check_ntlm_password(307) check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded [2005/08/18 16:01:20, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2005/08/18 16:01:20, 10] auth/auth_util.c:free_user_info(1364) structure was created for [2005/08/18 16:01:20, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(117) Got NT session key of length 16 [2005/08/18 16:01:20, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(123) Got LM session key of length 16 [2005/08/18 16:01:20, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(696) ntlmssp_server_auth: Using unmodified nt session key. [2005/08/18 16:01:20, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319) NTLMSSP Sign/Seal - Initialising with flags: [2005/08/18 16:01:20, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2005/08/18 16:01:20, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 103 [2005/08/18 16:01:20, 10] lib/util_pw.c:getpwnam_alloc(98) Got nobody from pwnam_cache [2005/08/18 16:01:20, 10] smbd/password.c:register_vuid(255) register_vuid: (4294967294,4294967294) nobody ACDEV guest=1 [2005/08/18 16:01:20, 3] smbd/password.c:register_vuid(257) User name: nobody Real name: nobody,Special Id [2005/08/18 16:01:20, 3] smbd/password.c:register_vuid(276) UNIX uid -2 is UNIX user nobody, and will be vuid 103 [2005/08/18 16:01:20, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /samba/3.0.20rc2/lib/smb.conf -> /samba/3.0.20rc2/lib/smb.conf last mod_time: Thu Aug 18 09:16:08 2005 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=106 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=103 smb_mid=20864 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=63 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [020] 00 2E 00 30 00 2E 00 32 00 30 00 72 00 63 00 32 ...0...2 .0.r.c.2 [030] 00 00 00 41 00 43 00 44 00 45 00 56 00 00 00 ...A.C.D .E.V... [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 70 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x46 [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 27 of length 74 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20929 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 03 01 ..... [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:20, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (3476, 206) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:20, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-1908802895-3536710745-1580887524-7952 contains 5 SIDs SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-7952 SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-1413 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:20, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 3476 Primary group is 206 and contains 1 supplementary groups Group[ 0]: 206 [2005/08/18 16:01:20, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,3476) gid=(0,206) [2005/08/18 16:01:20, 3] smbd/trans2.c:call_trans2qfsinfo(2127) call_trans2qfsinfo: level = 259 [2005/08/18 16:01:20, 5] smbd/trans2.c:call_trans2qfsinfo(2268) call_trans2qfsinfo : SMB_QUERY_FS_SIZE_INFO bsize=1024, cSectorUnit=2, cBytesSector=512, cUnitTotal=20971520, cUnitAvail=5225348 [2005/08/18 16:01:20, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 0, data_sent_thistime = 24, useable_space = 131012 [2005/08/18 16:01:20, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 0, data_to_send = 24, paramsize = 0, datasize = 24 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=80 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=20929 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=25 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 00 00 40 01 00 00 00 00 84 BB 4F 00 00 00 00 ...@.... ...O.... [010] 00 02 00 00 00 00 02 00 00 ........ . [2005/08/18 16:01:20, 4] smbd/trans2.c:call_trans2qfsinfo(2425) SMBtrans2 info_level = 259 [2005/08/18 16:01:20, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 78 [2005/08/18 16:01:20, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x4e [2005/08/18 16:01:20, 3] smbd/process.c:process_smb(1114) Transaction 28 of length 82 [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=78 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=103 smb_mid=20992 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 78 (0x4E) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=35 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 00 5C 00 5C 00 41 00 43 00 45 00 44 00 45 00 56 .\.\.A.C .E.D.E.V [010] 00 5C 00 49 00 50 00 43 00 24 00 00 00 3F 3F 3F .\.I.P.C .$...??? [020] 3F 3F 00 ??. [2005/08/18 16:01:20, 3] smbd/process.c:switch_message(900) switch message SMBtconX (pid 17002) conn 0x0 [2005/08/18 16:01:20, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:20, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:20, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:20, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/08/18 16:01:20, 4] smbd/reply.c:reply_tcon_and_X(618) Client requested device type [?????] for share [IPC$] [2005/08/18 16:01:20, 5] smbd/service.c:make_connection(811) making a connection to 'normal' service ipc$ [2005/08/18 16:01:20, 3] lib/access.c:check_access(313) check_access: no hostnames in host allow/deny list. [2005/08/18 16:01:20, 2] lib/access.c:check_access(324) Allowed connection from (151.103.17.49) [2005/08/18 16:01:20, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user nobody [2005/08/18 16:01:20, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is nobody [2005/08/18 16:01:20, 10] lib/util_pw.c:getpwnam_alloc(98) Got nobody from pwnam_cache [2005/08/18 16:01:20, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [nobody]! [2005/08/18 16:01:20, 3] smbd/service.c:make_connection_snum(477) Connect path is '/tmp' for service [IPC$] [2005/08/18 16:01:20, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2005/08/18 16:01:20, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2005/08/18 16:01:20, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 6 entries and first sid S-1-5-21-1908802895-3536710745-1580887524-501. [2005/08/18 16:01:20, 3] lib/util_seaccess.c:se_access_check(250) [2005/08/18 16:01:20, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1908802895-3536710745-1580887524-501 se_access_check: also S-1-5-21-1908802895-3536710745-1580887524-514 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-1908802895-3536710745-1580887524-997 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2005/08/18 16:01:20, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2005/08/18 16:01:20, 3] smbd/vfs.c:vfs_init_default(215) Initialising default vfs hooks [2005/08/18 16:01:20, 5] smbd/connection.c:claim_connection(170) claiming IPC$ 0 [2005/08/18 16:01:20, 10] smbd/uid.c:is_share_read_only_for_user(122) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2005/08/18 16:01:20, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2005/08/18 16:01:20, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2005/08/18 16:01:20, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000001, for NT token with 6 entries and first sid S-1-5-21-1908802895-3536710745-1580887524-501. [2005/08/18 16:01:20, 3] lib/util_seaccess.c:se_access_check(250) [2005/08/18 16:01:20, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1908802895-3536710745-1580887524-501 se_access_check: also S-1-5-21-1908802895-3536710745-1580887524-514 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-1908802895-3536710745-1580887524-997 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2005/08/18 16:01:20, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (1) granted. [2005/08/18 16:01:20, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (4294967294, 4294967294) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:20, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-1908802895-3536710745-1580887524-501 contains 6 SIDs SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-501 SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-514 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-1908802895-3536710745-1580887524-997 SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:20, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user -2 Primary group is -2 and contains 1 supplementary groups Group[ 0]: -2 [2005/08/18 16:01:20, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,-2) gid=(0,-2) [2005/08/18 16:01:20, 3] smbd/service.c:make_connection_snum(662) hudson-4e566sgk (151.103.17.49) connect to service IPC$ initially as user nobody (uid=-2, gid=-2) (pid 17002) [2005/08/18 16:01:20, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:20, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:20, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:20, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/08/18 16:01:20, 3] smbd/reply.c:reply_tcon_and_X(666) tconX service=IPC$ [2005/08/18 16:01:20, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:20, 5] lib/util.c:show_msg(464) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=103 smb_mid=20992 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 13 (0xD) smb_bcc=7 [2005/08/18 16:01:20, 10] lib/util.c:dump_data(2053) [000] 49 50 43 00 00 00 00 IPC.... [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 86 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x56 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 29 of length 90 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=86 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21056 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=3 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 ... [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (3476, 206) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:21, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-1908802895-3536710745-1580887524-7952 contains 5 SIDs SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-7952 SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-1413 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:21, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 3476 Primary group is 206 and contains 1 supplementary groups Group[ 0]: 206 [2005/08/18 16:01:21, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,3476) gid=(0,206) [2005/08/18 16:01:21, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 root_dir_fid = 0x0 [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [.] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [.] -> [/x04shr] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: . reduced to /x04shr [2005/08/18 16:01:21, 5] smbd/open.c:open_directory(1935) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x7 create_options = 0x1, create_disposition = 0x1 [2005/08/18 16:01:21, 5] smbd/files.c:file_new(139) allocated file structure 4515, fnum = 8611 (1 used) [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: . [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning rd [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning rd [2005/08/18 16:01:21, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 8611, open name = . [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21056 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=41728 (0xA300) smb_vwv[ 3]= 289 (0x121) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=16974 (0x424E) smb_vwv[ 7]= 9306 (0x245A) smb_vwv[ 8]=50596 (0xC5A4) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=49768 (0xC268) smb_vwv[11]=12185 (0x2F99) smb_vwv[12]=50596 (0xC5A4) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=16974 (0x424E) smb_vwv[15]= 9306 (0x245A) smb_vwv[16]=50596 (0xC5A4) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=16974 (0x424E) smb_vwv[19]= 9306 (0x245A) smb_vwv[20]=50596 (0xC5A4) smb_vwv[21]= 4353 (0x1101) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 84 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x54 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 30 of length 88 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21120 smt_wct=23 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 4 (0x4) smb_vwv[19]= 23 (0x17) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 8611 (0x21A3) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 ... [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBnttrans (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 10] smbd/nttrans.c:reply_nttrans(2815) reply_nttrans: setup_count = 8 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 17 00 00 00 A3 21 01 00 .....!.. [2005/08/18 16:01:21, 3] smbd/nttrans.c:call_nt_transact_notify_change(1848) call_nt_transact_notify_change [2005/08/18 16:01:21, 3] smbd/nttrans.c:call_nt_transact_notify_change(1863) call_nt_transact_notify_change: notify change called on directory name = . [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 88 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x58 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 31 of length 92 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21185 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 5C 00 00 00 .\... [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 root_dir_fid = 0x0 [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [.] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [.] -> [/x04shr] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: . reduced to /x04shr [2005/08/18 16:01:21, 5] smbd/open.c:open_directory(1935) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x7 create_options = 0x1, create_disposition = 0x1 [2005/08/18 16:01:21, 5] smbd/files.c:file_new(139) allocated file structure 4516, fnum = 8612 (2 used) [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: . [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning rd [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning rd [2005/08/18 16:01:21, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 8612, open name = . [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21185 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=41984 (0xA400) smb_vwv[ 3]= 289 (0x121) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=16974 (0x424E) smb_vwv[ 7]= 9306 (0x245A) smb_vwv[ 8]=50596 (0xC5A4) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=23294 (0x5AFE) smb_vwv[11]=12186 (0x2F9A) smb_vwv[12]=50596 (0xC5A4) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=16974 (0x424E) smb_vwv[15]= 9306 (0x245A) smb_vwv[16]=50596 (0xC5A4) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=16974 (0x424E) smb_vwv[19]= 9306 (0x245A) smb_vwv[20]=50596 (0xC5A4) smb_vwv[21]= 4353 (0x1101) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 84 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x54 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 32 of length 88 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21249 smt_wct=23 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 4 (0x4) smb_vwv[19]= 23 (0x17) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 8612 (0x21A4) smb_vwv[22]= 0 (0x0) smb_bcc=3 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 ... [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBnttrans (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 10] smbd/nttrans.c:reply_nttrans(2815) reply_nttrans: setup_count = 8 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 17 00 00 00 A4 21 00 00 .....!.. [2005/08/18 16:01:21, 3] smbd/nttrans.c:call_nt_transact_notify_change(1848) call_nt_transact_notify_change [2005/08/18 16:01:21, 3] smbd/nttrans.c:call_nt_transact_notify_change(1863) call_nt_transact_notify_change: notify change called on directory name = . [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 96 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x60 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 33 of length 100 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21314 smt_wct=15 smb_vwv[ 0]= 28 (0x1C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 28 (0x1C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=31 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 67 00 68 00 6F ........ .\.g.h.o [010] 00 73 00 74 00 2E 00 65 00 78 00 65 00 00 00 .s.t...e .x.e... [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "ghost.exe" [2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [GHOST.EXE] [2005/08/18 16:01:21, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (20067328:sizea) GHOST.EXE -> ghost.exe [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(170) conversion finished ghost.exe -> ghost.exe [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost.exe] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost.exe reduced to /x04shr/ghost.exe [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost.exe (fnum = -1) level=257 call=5 total_data=0 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO [2005/08/18 16:01:21, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) SMB_QFBI - create: Thu Aug 18 08:05:59 2005 access: Thu Aug 18 14:45:50 2005 write: Thu Aug 18 08:05:59 2005 change: Thu Aug 18 08:05:59 2005 mode: 1 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21314 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 80 2D EB 31 ED A3 C5 01 00 43 AB ......-. 1.....C. [010] 0D 25 A4 C5 01 80 2D EB 31 ED A3 C5 01 80 2D EB .%....-. 1.....-. [020] 31 ED A3 C5 01 01 00 00 00 1....... . [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 106 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x6a [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 34 of length 110 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21378 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 5C 00 67 00 68 00 6F 00 73 00 74 00 2E 00 65 .\.g.h.o .s.t...e [010] 00 78 00 65 00 00 00 .x.e... [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x16, access_mask = 0x20189 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0 [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "ghost.exe" [2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [GHOST.EXE] -> [ghost.exe] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost.exe] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost.exe reduced to /x04shr/ghost.exe [2005/08/18 16:01:21, 3] smbd/dosmode.c:unix_mode(121) unix_mode(ghost.exe) returning 0744 [2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1236) open_file_ntcreate: fname=ghost.exe, dos_attrs=0x80 access_mask=0x20189 share_access=0x3 create_disposition = 0x1 create_options=0x840 unix mode=0744 oplock_request=3 [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost.exe] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost.exe reduced to /x04shr/ghost.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1409) open_file_ntcreate: fname=ghost.exe, after mapping access_mask=0x20189 [2005/08/18 16:01:21, 5] smbd/files.c:file_new(139) allocated file structure 4517, fnum = 8613 (3 used) [2005/08/18 16:01:21, 4] smbd/open.c:open_file_ntcreate(1580) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2005/08/18 16:01:21, 10] smbd/open.c:fd_open(55) fd_open: name ghost.exe, flags = 00 mode = 0744, fd = 28. [2005/08/18 16:01:21, 2] smbd/open.c:open_file(372) billtest opened file ghost.exe read=Yes write=No (numopen=3) [2005/08/18 16:01:21, 10] locking/locking.c:set_share_mode(753) set_share_mode: creating entry for file ghost.exe. num_share_modes = 1 [2005/08/18 16:01:21, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 3, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 8613, open name = ghost.exe [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21378 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=42240 (0xA500) smb_vwv[ 3]= 289 (0x121) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=60205 (0xEB2D) smb_vwv[ 7]=60721 (0xED31) smb_vwv[ 8]=50595 (0xC5A3) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=43843 (0xAB43) smb_vwv[11]= 9485 (0x250D) smb_vwv[12]=50596 (0xC5A4) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=60205 (0xEB2D) smb_vwv[15]=60721 (0xED31) smb_vwv[16]=50595 (0xC5A3) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=60205 (0xEB2D) smb_vwv[19]=60721 (0xED31) smb_vwv[20]=50595 (0xC5A3) smb_vwv[21]= 257 (0x101) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 8192 (0x2000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 9216 (0x2400) smb_vwv[28]= 5446 (0x1546) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 35 of length 76 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21442 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 A5 21 01 01 ....!.. [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 257 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 3, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost.exe (fnum = 8613) level=257 call=7 total_data=0 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO [2005/08/18 16:01:21, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) SMB_QFBI - create: Thu Aug 18 08:05:59 2005 access: Thu Aug 18 14:45:50 2005 write: Thu Aug 18 08:05:59 2005 change: Thu Aug 18 08:05:59 2005 mode: 1 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21442 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 80 2D EB 31 ED A3 C5 01 00 43 AB ......-. 1.....C. [010] 0D 25 A4 C5 01 80 2D EB 31 ED A3 C5 01 80 2D EB .%....-. 1.....-. [020] 31 ED A3 C5 01 01 00 00 00 1....... . [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 116 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x74 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 36 of length 120 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21506 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 A5 21 01 01 00 00 00 00 00 00 00 00 00 ....!... ........ [010] 00 00 00 00 43 AB 0D 25 A4 C5 01 00 00 00 00 00 ....C..% ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2setfilepathinfo(3744) call_trans2setfilepathinfo(8) ghost.exe (fnum 8613) info_level=257 totdata=40 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 6] smbd/trans2.c:call_trans2setfilepathinfo(4405) actime: Thu Aug 18 14:45:50 2005 modtime: Thu Aug 18 08:05:59 2005 size: 1394212 dosmode: 0 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21506 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 ... [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 37 of length 63 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=21570 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8613 (0x21A5) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 12 (0xC) smb_vwv[ 6]= 12 (0xC) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 12 (0xC) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) is_locked: brl start=0 len=12 unlocked for file ghost.exe [2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost.exe, offset = 0, count = 12, type = WRITE [2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 0, count_out = 12 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 0 12 1 [2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 0 12 1 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) is_locked: posix start=0 len=12 unlocked for file ghost.exe [2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (12) too small for minimum aio_read of 0 [2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8613 max=12 nread=75 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 38 of length 76 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21634 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 A5 21 02 01 ....!.. [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 3, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost.exe (fnum = 8613) level=258 call=7 total_data=0 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21634 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 20 00 00 00 00 00 24 46 15 ....... .....$F. [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 39 of length 76 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21698 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 A5 21 02 01 ....!.. [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 3, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost.exe (fnum = 8613) level=258 call=7 total_data=0 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21698 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 20 00 00 00 00 00 24 46 15 ....... .....$F. [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 40 of length 63 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=21762 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8613 (0x21A5) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=16580 (0x40C4) smb_vwv[ 6]=16580 (0x40C4) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=32768 (0x8000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) is_locked: brl start=0 len=16580 unlocked for file ghost.exe [2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost.exe, offset = 0, count = 16580, type = WRITE [2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 0, count_out = 16580 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 0 16580 1 [2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 0 16580 1 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) is_locked: posix start=0 len=16580 unlocked for file ghost.exe [2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (16580) too small for minimum aio_read of 0 [2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8613 max=16580 nread=16643 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 41 of length 63 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=21762 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8613 (0x21A5) smb_vwv[ 3]=16580 (0x40C4) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=16188 (0x3F3C) smb_vwv[ 6]=16188 (0x3F3C) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=16188 (0x3F3C) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) is_locked: brl start=16580 len=16188 unlocked for file ghost.exe [2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost.exe, offset = 16580, count = 16188, type = WRITE [2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 16580, count_out = 16188 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 16580 16188 1 [2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 16580 16188 1 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) is_locked: posix start=16580 len=16188 unlocked for file ghost.exe [2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (16188) too small for minimum aio_read of 0 [2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8613 max=16188 nread=16251 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 41 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 42 of length 45 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=21826 smt_wct=3 smb_vwv[ 0]= 8613 (0x21A5) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/reply.c:reply_close(3247) close fd=28 fnum=8613 (numopen=3) [2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(658) del_share_entry: num_share_modes = 1 [2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(663) del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 3, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(673) del_share_entry: deleting entry 0 [2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(695) del_share_entry: Remaining table. [2005/08/18 16:01:21, 10] smbd/close.c:close_normal_file(203) close_normal_file: share_entry_count = 0 for file ghost.exe [2005/08/18 16:01:21, 10] locking/posix.c:posix_locking_close_file(1249) posix_locking_close_file: file ghost.exe has no outstanding locks. [2005/08/18 16:01:21, 2] smbd/close.c:close_normal_file(270) billtest closed file ghost.exe (numopen=2) [2005/08/18 16:01:21, 5] smbd/files.c:file_free(459) freed files structure 8613 (2 used) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=21826 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 106 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x6a [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 43 of length 110 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21890 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 5C 00 67 00 68 00 6F 00 73 00 74 00 2E 00 65 .\.g.h.o .s.t...e [010] 00 78 00 65 00 00 00 .x.e... [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x16, access_mask = 0x20189 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0 [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "ghost.exe" [2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [GHOST.EXE] -> [ghost.exe] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost.exe] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost.exe reduced to /x04shr/ghost.exe [2005/08/18 16:01:21, 3] smbd/dosmode.c:unix_mode(121) unix_mode(ghost.exe) returning 0744 [2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1236) open_file_ntcreate: fname=ghost.exe, dos_attrs=0x80 access_mask=0x20189 share_access=0x3 create_disposition = 0x1 create_options=0x840 unix mode=0744 oplock_request=3 [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost.exe] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost.exe reduced to /x04shr/ghost.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1409) open_file_ntcreate: fname=ghost.exe, after mapping access_mask=0x20189 [2005/08/18 16:01:21, 5] smbd/files.c:file_new(139) allocated file structure 4518, fnum = 8614 (3 used) [2005/08/18 16:01:21, 4] smbd/open.c:open_file_ntcreate(1580) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2005/08/18 16:01:21, 10] smbd/open.c:fd_open(55) fd_open: name ghost.exe, flags = 00 mode = 0744, fd = 28. [2005/08/18 16:01:21, 2] smbd/open.c:open_file(372) billtest opened file ghost.exe read=Yes write=No (numopen=3) [2005/08/18 16:01:21, 10] locking/locking.c:set_share_mode(753) set_share_mode: creating entry for file ghost.exe. num_share_modes = 1 [2005/08/18 16:01:21, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 4, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 8614, open name = ghost.exe [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21890 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=42496 (0xA600) smb_vwv[ 3]= 289 (0x121) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=60205 (0xEB2D) smb_vwv[ 7]=60721 (0xED31) smb_vwv[ 8]=50595 (0xC5A3) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=23294 (0x5AFE) smb_vwv[11]=12186 (0x2F9A) smb_vwv[12]=50596 (0xC5A4) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=60205 (0xEB2D) smb_vwv[15]=60721 (0xED31) smb_vwv[16]=50595 (0xC5A3) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=60205 (0xEB2D) smb_vwv[19]=60721 (0xED31) smb_vwv[20]=50595 (0xC5A3) smb_vwv[21]= 257 (0x101) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 8192 (0x2000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 9216 (0x2400) smb_vwv[28]= 5446 (0x1546) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 44 of length 76 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21954 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 A6 21 01 01 ....!.. [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 257 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 4, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost.exe (fnum = 8614) level=257 call=7 total_data=0 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO [2005/08/18 16:01:21, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) SMB_QFBI - create: Thu Aug 18 08:05:59 2005 access: Thu Aug 18 16:01:21 2005 write: Thu Aug 18 08:05:59 2005 change: Thu Aug 18 08:05:59 2005 mode: 1 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=21954 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 80 2D EB 31 ED A3 C5 01 80 FE 5A ......-. 1......Z [010] 9A 2F A4 C5 01 80 2D EB 31 ED A3 C5 01 80 2D EB ./....-. 1.....-. [020] 31 ED A3 C5 01 01 00 00 00 1....... . [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 116 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x74 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 45 of length 120 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22018 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 A6 21 01 01 00 00 00 00 00 00 00 00 00 ....!... ........ [010] 00 00 00 80 FE 5A 9A 2F A4 C5 01 00 00 00 00 00 .....Z./ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2setfilepathinfo(3744) call_trans2setfilepathinfo(8) ghost.exe (fnum 8614) info_level=257 totdata=40 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 6] smbd/trans2.c:call_trans2setfilepathinfo(4405) actime: Thu Aug 18 16:01:21 2005 modtime: Thu Aug 18 08:05:59 2005 size: 1394212 dosmode: 0 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22018 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 ... [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 46 of length 63 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=22082 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8614 (0x21A6) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 12 (0xC) smb_vwv[ 6]= 12 (0xC) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 12 (0xC) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) is_locked: brl start=0 len=12 unlocked for file ghost.exe [2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost.exe, offset = 0, count = 12, type = WRITE [2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 0, count_out = 12 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 0 12 1 [2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 0 12 1 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) is_locked: posix start=0 len=12 unlocked for file ghost.exe [2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (12) too small for minimum aio_read of 0 [2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8614 max=12 nread=75 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 47 of length 76 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22146 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 A6 21 02 01 ....!.. [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 4, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost.exe (fnum = 8614) level=258 call=7 total_data=0 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22146 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 20 00 00 00 00 00 24 46 15 ....... .....$F. [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 48 of length 76 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22210 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 A6 21 02 01 ....!.. [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 4, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost.exe (fnum = 8614) level=258 call=7 total_data=0 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22210 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 20 00 00 00 00 00 24 46 15 ....... .....$F. [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 49 of length 63 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=22274 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8614 (0x21A6) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=16580 (0x40C4) smb_vwv[ 6]=16580 (0x40C4) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=32768 (0x8000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) is_locked: brl start=0 len=16580 unlocked for file ghost.exe [2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost.exe, offset = 0, count = 16580, type = WRITE [2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 0, count_out = 16580 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 0 16580 1 [2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 0 16580 1 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) is_locked: posix start=0 len=16580 unlocked for file ghost.exe [2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (16580) too small for minimum aio_read of 0 [2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8614 max=16580 nread=16643 [2005/08/18 16:01:21, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:21, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2005/08/18 16:01:21, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/08/18 16:01:21, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 50 of length 63 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=22274 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8614 (0x21A6) smb_vwv[ 3]=16580 (0x40C4) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=16188 (0x3F3C) smb_vwv[ 6]=16188 (0x3F3C) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=16188 (0x3F3C) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (3476, 206) - sec_ctx_stack_ndx = 0 [2005/08/18 16:01:21, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-1908802895-3536710745-1580887524-7952 contains 5 SIDs SID[ 0]: S-1-5-21-1908802895-3536710745-1580887524-7952 SID[ 1]: S-1-5-21-1908802895-3536710745-1580887524-1413 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/18 16:01:21, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 3476 Primary group is 206 and contains 1 supplementary groups Group[ 0]: 206 [2005/08/18 16:01:21, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,3476) gid=(0,206) [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) is_locked: brl start=16580 len=16188 unlocked for file ghost.exe [2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost.exe, offset = 16580, count = 16188, type = WRITE [2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 16580, count_out = 16188 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 16580 16188 1 [2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 16580 16188 1 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) is_locked: posix start=16580 len=16188 unlocked for file ghost.exe [2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (16188) too small for minimum aio_read of 0 [2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8614 max=16188 nread=16251 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 41 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 51 of length 45 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=22338 smt_wct=3 smb_vwv[ 0]= 8614 (0x21A6) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/reply.c:reply_close(3247) close fd=28 fnum=8614 (numopen=3) [2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(658) del_share_entry: num_share_modes = 1 [2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(663) del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 4, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(673) del_share_entry: deleting entry 0 [2005/08/18 16:01:21, 10] locking/locking.c:del_share_entry(695) del_share_entry: Remaining table. [2005/08/18 16:01:21, 10] smbd/close.c:close_normal_file(203) close_normal_file: share_entry_count = 0 for file ghost.exe [2005/08/18 16:01:21, 10] locking/posix.c:posix_locking_close_file(1249) posix_locking_close_file: file ghost.exe has no outstanding locks. [2005/08/18 16:01:21, 2] smbd/close.c:close_normal_file(270) billtest closed file ghost.exe (numopen=2) [2005/08/18 16:01:21, 5] smbd/files.c:file_free(459) freed files structure 8614 (2 used) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=22338 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 100 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x64 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 52 of length 104 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22402 smt_wct=15 smb_vwv[ 0]= 32 (0x20) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 32 (0x20) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=35 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 67 00 68 00 6F ........ .\.g.h.o [010] 00 73 00 74 00 37 00 35 00 2E 00 65 00 78 00 65 .s.t.7.5 ...e.x.e [020] 00 00 00 ... [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "ghost75.exe" [2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [GHOST75.EXE] [2005/08/18 16:01:21, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (20067178:sizec) GHOST75.EXE -> ghost75.exe [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(170) conversion finished ghost75.exe -> ghost75.exe [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost75.exe] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost75.exe (fnum = -1) level=257 call=5 total_data=0 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO [2005/08/18 16:01:21, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) SMB_QFBI - create: Thu Aug 18 08:07:18 2005 access: Thu Aug 18 14:45:50 2005 write: Thu Aug 18 08:07:18 2005 change: Thu Aug 18 08:07:18 2005 mode: 1 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22402 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 9F 01 61 ED A3 C5 01 00 43 AB ........ a.....C. [010] 0D 25 A4 C5 01 00 9F 01 61 ED A3 C5 01 00 9F 01 .%...... a....... [020] 61 ED A3 C5 01 01 00 00 00 a....... . [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 110 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x6e [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 53 of length 114 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=110 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22466 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6144 (0x1800) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=27 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 5C 00 67 00 68 00 6F 00 73 00 74 00 37 00 35 .\.g.h.o .s.t.7.5 [010] 00 2E 00 65 00 78 00 65 00 00 00 ...e.x.e ... [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x16, access_mask = 0x20189 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0 [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "ghost75.exe" [2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [GHOST75.EXE] -> [ghost75.exe] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost75.exe] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe [2005/08/18 16:01:21, 3] smbd/dosmode.c:unix_mode(121) unix_mode(ghost75.exe) returning 0744 [2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1236) open_file_ntcreate: fname=ghost75.exe, dos_attrs=0x80 access_mask=0x20189 share_access=0x3 create_disposition = 0x1 create_options=0x840 unix mode=0744 oplock_request=3 [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost75.exe] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1409) open_file_ntcreate: fname=ghost75.exe, after mapping access_mask=0x20189 [2005/08/18 16:01:21, 5] smbd/files.c:file_new(139) allocated file structure 4519, fnum = 8615 (3 used) [2005/08/18 16:01:21, 4] smbd/open.c:open_file_ntcreate(1580) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2005/08/18 16:01:21, 10] smbd/open.c:fd_open(55) fd_open: name ghost75.exe, flags = 00 mode = 0744, fd = 28. [2005/08/18 16:01:21, 2] smbd/open.c:open_file(372) billtest opened file ghost75.exe read=Yes write=No (numopen=3) [2005/08/18 16:01:21, 10] locking/locking.c:set_share_mode(753) set_share_mode: creating entry for file ghost75.exe. num_share_modes = 1 [2005/08/18 16:01:21, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 5, dev = 0x1e0001, inode = 20 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 8615, open name = ghost75.exe [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22466 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=42752 (0xA700) smb_vwv[ 3]= 289 (0x121) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 415 (0x19F) smb_vwv[ 7]=60769 (0xED61) smb_vwv[ 8]=50595 (0xC5A3) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=43843 (0xAB43) smb_vwv[11]= 9485 (0x250D) smb_vwv[12]=50596 (0xC5A4) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 415 (0x19F) smb_vwv[15]=60769 (0xED61) smb_vwv[16]=50595 (0xC5A3) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 415 (0x19F) smb_vwv[19]=60769 (0xED61) smb_vwv[20]=50595 (0xC5A3) smb_vwv[21]= 257 (0x101) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=15360 (0x3C00) smb_vwv[28]= 2643 (0xA53) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 54 of length 76 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22530 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 A7 21 01 01 ....!.. [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 257 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 5, dev = 0x1e0001, inode = 20 [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost75.exe (fnum = 8615) level=257 call=7 total_data=0 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO [2005/08/18 16:01:21, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) SMB_QFBI - create: Thu Aug 18 08:07:18 2005 access: Thu Aug 18 14:45:50 2005 write: Thu Aug 18 08:07:18 2005 change: Thu Aug 18 08:07:18 2005 mode: 1 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22530 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 9F 01 61 ED A3 C5 01 00 43 AB ........ a.....C. [010] 0D 25 A4 C5 01 00 9F 01 61 ED A3 C5 01 00 9F 01 .%...... a....... [020] 61 ED A3 C5 01 01 00 00 00 a....... . [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 116 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x74 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 55 of length 120 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22594 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 A7 21 01 01 00 00 00 00 00 00 00 00 00 ....!... ........ [010] 00 00 00 00 43 AB 0D 25 A4 C5 01 00 00 00 00 00 ....C..% ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2setfilepathinfo(3744) call_trans2setfilepathinfo(8) ghost75.exe (fnum 8615) info_level=257 totdata=40 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 6] smbd/trans2.c:call_trans2setfilepathinfo(4405) actime: Thu Aug 18 14:45:50 2005 modtime: Thu Aug 18 08:07:18 2005 size: 676668 dosmode: 0 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22594 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 ... [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 56 of length 63 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=22658 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8615 (0x21A7) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 12 (0xC) smb_vwv[ 6]= 12 (0xC) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 12 (0xC) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) is_locked: brl start=0 len=12 unlocked for file ghost75.exe [2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost75.exe, offset = 0, count = 12, type = WRITE [2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 0, count_out = 12 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 0 12 1 [2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 0 12 1 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) is_locked: posix start=0 len=12 unlocked for file ghost75.exe [2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (12) too small for minimum aio_read of 0 [2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8615 max=12 nread=75 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 57 of length 76 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22722 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 A7 21 02 01 ....!.. [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 5, dev = 0x1e0001, inode = 20 [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost75.exe (fnum = 8615) level=258 call=7 total_data=0 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22722 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 3C 53 0A ........ ..... [ghost75.exe] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost75.exe] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe [2005/08/18 16:01:21, 3] smbd/dosmode.c:unix_mode(121) unix_mode(ghost75.exe) returning 0744 [2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1236) open_file_ntcreate: fname=ghost75.exe, dos_attrs=0x80 access_mask=0x20189 share_access=0x3 create_disposition = 0x1 create_options=0x840 unix mode=0744 oplock_request=3 [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost75.exe] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/open.c:open_file_ntcreate(1409) open_file_ntcreate: fname=ghost75.exe, after mapping access_mask=0x20189 [2005/08/18 16:01:21, 5] smbd/files.c:file_new(139) allocated file structure 4520, fnum = 8616 (3 used) [2005/08/18 16:01:21, 4] smbd/open.c:open_file_ntcreate(1580) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2005/08/18 16:01:21, 10] smbd/open.c:fd_open(55) fd_open: name ghost75.exe, flags = 00 mode = 0744, fd = 28. [2005/08/18 16:01:21, 2] smbd/open.c:open_file(372) billtest opened file ghost75.exe read=Yes write=No (numopen=3) [2005/08/18 16:01:21, 10] locking/locking.c:set_share_mode(753) set_share_mode: creating entry for file ghost75.exe. num_share_modes = 1 [2005/08/18 16:01:21, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 6, dev = 0x1e0001, inode = 20 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 8616, open name = ghost75.exe [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=22978 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=43008 (0xA800) smb_vwv[ 3]= 289 (0x121) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 415 (0x19F) smb_vwv[ 7]=60769 (0xED61) smb_vwv[ 8]=50595 (0xC5A3) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=23294 (0x5AFE) smb_vwv[11]=12186 (0x2F9A) smb_vwv[12]=50596 (0xC5A4) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 415 (0x19F) smb_vwv[15]=60769 (0xED61) smb_vwv[16]=50595 (0xC5A3) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 415 (0x19F) smb_vwv[19]=60769 (0xED61) smb_vwv[20]=50595 (0xC5A3) smb_vwv[21]= 257 (0x101) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=15360 (0x3C00) smb_vwv[28]= 2643 (0xA53) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 63 of length 76 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23042 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 A8 21 01 01 ....!.. [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 257 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 6, dev = 0x1e0001, inode = 20 [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost75.exe (fnum = 8616) level=257 call=7 total_data=0 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO [2005/08/18 16:01:21, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) SMB_QFBI - create: Thu Aug 18 08:07:18 2005 access: Thu Aug 18 16:01:21 2005 write: Thu Aug 18 08:07:18 2005 change: Thu Aug 18 08:07:18 2005 mode: 1 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23042 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 9F 01 61 ED A3 C5 01 80 FE 5A ........ a......Z [010] 9A 2F A4 C5 01 00 9F 01 61 ED A3 C5 01 00 9F 01 ./...... a....... [020] 61 ED A3 C5 01 01 00 00 00 a....... . [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 116 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x74 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 64 of length 120 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23106 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 A8 21 01 01 00 00 00 00 00 00 00 00 00 ....!... ........ [010] 00 00 00 80 FE 5A 9A 2F A4 C5 01 00 00 00 00 00 .....Z./ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2setfilepathinfo(3744) call_trans2setfilepathinfo(8) ghost75.exe (fnum 8616) info_level=257 totdata=40 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 6] smbd/trans2.c:call_trans2setfilepathinfo(4405) actime: Thu Aug 18 16:01:21 2005 modtime: Thu Aug 18 08:07:18 2005 size: 676668 dosmode: 0 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23106 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 ... [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 65 of length 63 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=23170 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8616 (0x21A8) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 12 (0xC) smb_vwv[ 6]= 12 (0xC) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 12 (0xC) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(109) is_locked: brl start=0 len=12 unlocked for file ghost75.exe [2005/08/18 16:01:21, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost75.exe, offset = 0, count = 12, type = WRITE [2005/08/18 16:01:21, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 0, count_out = 12 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 0 12 1 [2005/08/18 16:01:21, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 0 12 1 [2005/08/18 16:01:21, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:21, 10] locking/locking.c:is_locked(121) is_locked: posix start=0 len=12 unlocked for file ghost75.exe [2005/08/18 16:01:21, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (12) too small for minimum aio_read of 0 [2005/08/18 16:01:21, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8616 max=12 nread=75 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 66 of length 76 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23234 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 A8 21 02 01 ....!.. [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:21, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x840, access_mask = 0x20189, port = 0x0, type= 0x0, file_id = 6, dev = 0x1e0001, inode = 20 [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost75.exe (fnum = 8616) level=258 call=7 total_data=0 [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:21, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:21, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2005/08/18 16:01:21, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23234 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 3C 53 0A ........ ..... [xpapps] [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = xpapps/desktop.ini, dirpath = xpapps, start = desktop.ini [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [xpapps/desktop.ini] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [xpapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: xpapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of xpapps/desktop.ini failed (No such file or directory) [2005/08/18 16:01:21, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:21, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23490 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 114 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x72 [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 72 of length 118 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=114 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23554 smt_wct=15 smb_vwv[ 0]= 46 (0x2E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 46 (0x2E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=49 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 6E 00 74 00 61 ........ .\.n.t.a [010] 00 70 00 70 00 73 00 5C 00 64 00 65 00 73 00 6B .p.p.s.\ .d.e.s.k [020] 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 00 00 .t.o.p.. .i.n.i.. [030] 00 . [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "ntapps/desktop.ini" [2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [NTAPPS/DESKTOP.INI] [2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [NTAPPS] -> [ntapps] [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = ntapps/desktop.ini, dirpath = ntapps, start = desktop.ini [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [ntapps/desktop.ini] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ntapps/desktop.ini] -> [/x04shr/xpapps/desktop.ini] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ntapps/desktop.ini reduced to /x04shr/xpapps/desktop.ini [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of ntapps/desktop.ini failed (No such file or directory) [2005/08/18 16:01:21, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:21, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23554 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 122 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x7a [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 73 of length 126 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=122 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23618 smt_wct=15 smb_vwv[ 0]= 54 (0x36) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 54 (0x36) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=57 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 6C 00 6F 00 73 ........ .\.l.o.s [010] 00 74 00 2B 00 66 00 6F 00 75 00 6E 00 64 00 5C .t.+.f.o .u.n.d.\ [020] 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 00 2E .d.e.s.k .t.o.p.. [030] 00 69 00 6E 00 69 00 00 00 .i.n.i.. . [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "lost+found/desktop.ini" [2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [LOST+FOUND/DESKTOP.INI] [2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = lost+found/desktop.ini, dirpath = lost+found, start = desktop.ini [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [lost+found/desktop.ini] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [lost+found/desktop.ini] -> [/x04shr/lost+found/desktop.ini] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: lost+found/desktop.ini reduced to /x04shr/lost+found/desktop.ini [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of lost+found/desktop.ini failed (No such file or directory) [2005/08/18 16:01:21, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:21, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23618 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:21, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 108 [2005/08/18 16:01:21, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x6c [2005/08/18 16:01:21, 3] smbd/process.c:process_smb(1114) Transaction 74 of length 112 [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=108 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23682 smt_wct=15 smb_vwv[ 0]= 40 (0x28) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 40 (0x28) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=43 [2005/08/18 16:01:21, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 64 00 6F 00 73 ........ .\.d.o.s [010] 00 5C 00 64 00 65 00 73 00 6B 00 74 00 6F 00 70 .\.d.e.s .k.t.o.p [020] 00 2E 00 69 00 6E 00 69 00 00 00 ...i.n.i ... [2005/08/18 16:01:21, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:21, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "dos/desktop.ini" [2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [DOS/DESKTOP.INI] [2005/08/18 16:01:21, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [DOS] -> [dos] [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = dos/desktop.ini, dirpath = dos, start = desktop.ini [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled desktop.ini ? [2005/08/18 16:01:21, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component desktop.ini (len 11) ? [2005/08/18 16:01:21, 5] smbd/filename.c:unix_convert(324) New file desktop.ini [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(919) reduce_name [dos/desktop.ini] [/x04shr] [2005/08/18 16:01:21, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [dos/desktop.ini] -> [/x04shr/dos/desktop.ini] [2005/08/18 16:01:21, 3] smbd/vfs.c:reduce_name(1025) reduce_name: dos/desktop.ini reduced to /x04shr/dos/desktop.ini [2005/08/18 16:01:21, 3] smbd/trans2.c:call_trans2qfilepathinfo(2844) call_trans2qfilepathinfo: SMB_VFS_STAT of dos/desktop.ini failed (No such file or directory) [2005/08/18 16:01:21, 10] smbd/trans2.c:set_bad_path_error(2583) set_bad_path_error: err = 2 bad_path = 0 [2005/08/18 16:01:21, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2589) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/08/18 16:01:21, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:21, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23682 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 106 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x6a [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 75 of length 110 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23746 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 8192 (0x2000) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1280 (0x500) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=23 [2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) [000] 6C 5C 00 67 00 68 00 6F 00 73 00 74 00 2E 00 65 l\.g.h.o .s.t...e [010] 00 78 00 65 00 00 00 .x.e... [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x16, access_mask = 0x20 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2005/08/18 16:01:22, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "ghost.exe" [2005/08/18 16:01:22, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [GHOST.EXE] -> [ghost.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost.exe] [/x04shr] [2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost.exe reduced to /x04shr/ghost.exe [2005/08/18 16:01:22, 3] smbd/dosmode.c:unix_mode(121) unix_mode(ghost.exe) returning 0744 [2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1236) open_file_ntcreate: fname=ghost.exe, dos_attrs=0x0 access_mask=0x20 share_access=0x5 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost.exe] [/x04shr] [2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost.exe reduced to /x04shr/ghost.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1409) open_file_ntcreate: fname=ghost.exe, after mapping access_mask=0x20 [2005/08/18 16:01:22, 5] smbd/files.c:file_new(139) allocated file structure 4521, fnum = 8617 (3 used) [2005/08/18 16:01:22, 4] smbd/open.c:open_file_ntcreate(1580) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2005/08/18 16:01:22, 10] smbd/open.c:fd_open(55) fd_open: name ghost.exe, flags = 00 mode = 0744, fd = 28. [2005/08/18 16:01:22, 2] smbd/open.c:open_file(372) billtest opened file ghost.exe read=No write=No (numopen=3) [2005/08/18 16:01:22, 10] locking/locking.c:set_share_mode(753) set_share_mode: creating entry for file ghost.exe. num_share_modes = 1 [2005/08/18 16:01:22, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20, port = 0x0, type= 0x0, file_id = 7, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 8617, open name = ghost.exe [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23746 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=43264 (0xA900) smb_vwv[ 3]= 289 (0x121) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=60205 (0xEB2D) smb_vwv[ 7]=60721 (0xED31) smb_vwv[ 8]=50595 (0xC5A3) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=23294 (0x5AFE) smb_vwv[11]=12186 (0x2F9A) smb_vwv[12]=50596 (0xC5A4) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=60205 (0xEB2D) smb_vwv[15]=60721 (0xED31) smb_vwv[16]=50595 (0xC5A3) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=60205 (0xEB2D) smb_vwv[19]=60721 (0xED31) smb_vwv[20]=50595 (0xC5A3) smb_vwv[21]= 257 (0x101) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 8192 (0x2000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 9216 (0x2400) smb_vwv[28]= 5446 (0x1546) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 76 of length 76 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23810 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) [000] 00 00 00 A9 21 02 01 ....!.. [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20, port = 0x0, type= 0x0, file_id = 7, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost.exe (fnum = 8617) level=258 call=7 total_data=0 [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=23810 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 20 00 00 00 00 00 24 46 15 ....... .....$F. [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 77 of length 63 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=23874 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8617 (0x21A9) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=16580 (0x40C4) smb_vwv[ 6]=16580 (0x40C4) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=32768 (0x8000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) is_locked: brl start=0 len=16580 unlocked for file ghost.exe [2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost.exe, offset = 0, count = 16580, type = WRITE [2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 0, count_out = 16580 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 0 16580 1 [2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 0 16580 1 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) is_locked: posix start=0 len=16580 unlocked for file ghost.exe [2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (16580) too small for minimum aio_read of 0 [2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8617 max=16580 nread=16643 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 78 of length 63 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=23874 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8617 (0x21A9) smb_vwv[ 3]=16580 (0x40C4) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=16188 (0x3F3C) smb_vwv[ 6]=16188 (0x3F3C) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=16188 (0x3F3C) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) is_locked: brl start=16580 len=16188 unlocked for file ghost.exe [2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost.exe, offset = 16580, count = 16188, type = WRITE [2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 16580, count_out = 16188 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 16580 16188 1 [2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 16580 16188 1 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) is_locked: posix start=16580 len=16188 unlocked for file ghost.exe [2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (16188) too small for minimum aio_read of 0 [2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8617 max=16188 nread=16251 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 41 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 79 of length 45 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=23938 smt_wct=3 smb_vwv[ 0]= 8617 (0x21A9) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 3] smbd/reply.c:reply_close(3247) close fd=28 fnum=8617 (numopen=3) [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(658) del_share_entry: num_share_modes = 1 [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(663) del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20, port = 0x0, type= 0x0, file_id = 7, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(673) del_share_entry: deleting entry 0 [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(695) del_share_entry: Remaining table. [2005/08/18 16:01:22, 10] smbd/close.c:close_normal_file(203) close_normal_file: share_entry_count = 0 for file ghost.exe [2005/08/18 16:01:22, 10] locking/posix.c:posix_locking_close_file(1249) posix_locking_close_file: file ghost.exe has no outstanding locks. [2005/08/18 16:01:22, 2] smbd/close.c:close_normal_file(270) billtest closed file ghost.exe (numopen=2) [2005/08/18 16:01:22, 5] smbd/files.c:file_free(459) freed files structure 8617 (2 used) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=23938 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 106 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x6a [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 80 of length 110 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=24002 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1280 (0x500) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) [000] 00 5C 00 67 00 68 00 6F 00 73 00 74 00 2E 00 65 .\.g.h.o .s.t...e [010] 00 78 00 65 00 00 00 .x.e... [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2005/08/18 16:01:22, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "ghost.exe" [2005/08/18 16:01:22, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [GHOST.EXE] -> [ghost.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost.exe] [/x04shr] [2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost.exe reduced to /x04shr/ghost.exe [2005/08/18 16:01:22, 3] smbd/dosmode.c:unix_mode(121) unix_mode(ghost.exe) returning 0744 [2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1236) open_file_ntcreate: fname=ghost.exe, dos_attrs=0x0 access_mask=0x20089 share_access=0x5 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost.exe] [/x04shr] [2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost.exe reduced to /x04shr/ghost.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1409) open_file_ntcreate: fname=ghost.exe, after mapping access_mask=0x20089 [2005/08/18 16:01:22, 5] smbd/files.c:file_new(139) allocated file structure 4522, fnum = 8618 (3 used) [2005/08/18 16:01:22, 4] smbd/open.c:open_file_ntcreate(1580) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2005/08/18 16:01:22, 10] smbd/open.c:fd_open(55) fd_open: name ghost.exe, flags = 00 mode = 0744, fd = 28. [2005/08/18 16:01:22, 2] smbd/open.c:open_file(372) billtest opened file ghost.exe read=Yes write=No (numopen=3) [2005/08/18 16:01:22, 10] locking/locking.c:set_share_mode(753) set_share_mode: creating entry for file ghost.exe. num_share_modes = 1 [2005/08/18 16:01:22, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 8, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 8618, open name = ghost.exe [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=24002 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=43520 (0xAA00) smb_vwv[ 3]= 289 (0x121) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=60205 (0xEB2D) smb_vwv[ 7]=60721 (0xED31) smb_vwv[ 8]=50595 (0xC5A3) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=62357 (0xF395) smb_vwv[11]=12186 (0x2F9A) smb_vwv[12]=50596 (0xC5A4) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=60205 (0xEB2D) smb_vwv[15]=60721 (0xED31) smb_vwv[16]=50595 (0xC5A3) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=60205 (0xEB2D) smb_vwv[19]=60721 (0xED31) smb_vwv[20]=50595 (0xC5A3) smb_vwv[21]= 257 (0x101) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 8192 (0x2000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 9216 (0x2400) smb_vwv[28]= 5446 (0x1546) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 81 of length 76 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=24066 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) [000] 00 00 00 AA 21 02 01 ....!.. [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 8, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost.exe (fnum = 8618) level=258 call=7 total_data=0 [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=24066 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 20 00 00 00 00 00 24 46 15 ....... .....$F. [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 82 of length 63 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=24130 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8618 (0x21AA) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=16580 (0x40C4) smb_vwv[ 6]=16580 (0x40C4) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=32768 (0x8000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) is_locked: brl start=0 len=16580 unlocked for file ghost.exe [2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost.exe, offset = 0, count = 16580, type = WRITE [2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 0, count_out = 16580 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 0 16580 1 [2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 0 16580 1 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) is_locked: posix start=0 len=16580 unlocked for file ghost.exe [2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (16580) too small for minimum aio_read of 0 [2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8618 max=16580 nread=16643 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 83 of length 63 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=24130 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8618 (0x21AA) smb_vwv[ 3]=16580 (0x40C4) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=16188 (0x3F3C) smb_vwv[ 6]=16188 (0x3F3C) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=16188 (0x3F3C) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) is_locked: brl start=16580 len=16188 unlocked for file ghost.exe [2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost.exe, offset = 16580, count = 16188, type = WRITE [2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 16580, count_out = 16188 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 16580 16188 1 [2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 16580 16188 1 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) is_locked: posix start=16580 len=16188 unlocked for file ghost.exe [2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (16188) too small for minimum aio_read of 0 [2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8618 max=16188 nread=16251 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 41 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 84 of length 45 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=24194 smt_wct=3 smb_vwv[ 0]= 8618 (0x21AA) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 3] smbd/reply.c:reply_close(3247) close fd=28 fnum=8618 (numopen=3) [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(658) del_share_entry: num_share_modes = 1 [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(663) del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 8, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(673) del_share_entry: deleting entry 0 [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(695) del_share_entry: Remaining table. [2005/08/18 16:01:22, 10] smbd/close.c:close_normal_file(203) close_normal_file: share_entry_count = 0 for file ghost.exe [2005/08/18 16:01:22, 10] locking/posix.c:posix_locking_close_file(1249) posix_locking_close_file: file ghost.exe has no outstanding locks. [2005/08/18 16:01:22, 2] smbd/close.c:close_normal_file(270) billtest closed file ghost.exe (numopen=2) [2005/08/18 16:01:22, 5] smbd/files.c:file_free(459) freed files structure 8618 (2 used) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=24194 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 106 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x6a [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 85 of length 110 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=24258 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 256 (0x100) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) [000] 00 5C 00 67 00 68 00 6F 00 73 00 74 00 2E 00 65 .\.g.h.o .s.t...e [010] 00 78 00 65 00 00 00 .x.e... [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2005/08/18 16:01:22, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "ghost.exe" [2005/08/18 16:01:22, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [GHOST.EXE] -> [ghost.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost.exe] [/x04shr] [2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost.exe reduced to /x04shr/ghost.exe [2005/08/18 16:01:22, 3] smbd/dosmode.c:unix_mode(121) unix_mode(ghost.exe) returning 0744 [2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1236) open_file_ntcreate: fname=ghost.exe, dos_attrs=0x80 access_mask=0x20089 share_access=0x1 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost.exe] [/x04shr] [2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost.exe] -> [/x04shr/ghost.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost.exe reduced to /x04shr/ghost.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1409) open_file_ntcreate: fname=ghost.exe, after mapping access_mask=0x20089 [2005/08/18 16:01:22, 5] smbd/files.c:file_new(139) allocated file structure 4523, fnum = 8619 (3 used) [2005/08/18 16:01:22, 4] smbd/open.c:open_file_ntcreate(1580) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2005/08/18 16:01:22, 10] smbd/open.c:fd_open(55) fd_open: name ghost.exe, flags = 00 mode = 0744, fd = 28. [2005/08/18 16:01:22, 2] smbd/open.c:open_file(372) billtest opened file ghost.exe read=Yes write=No (numopen=3) [2005/08/18 16:01:22, 10] locking/locking.c:set_share_mode(753) set_share_mode: creating entry for file ghost.exe. num_share_modes = 1 [2005/08/18 16:01:22, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 9, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 8619, open name = ghost.exe [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=24258 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=43776 (0xAB00) smb_vwv[ 3]= 289 (0x121) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=60205 (0xEB2D) smb_vwv[ 7]=60721 (0xED31) smb_vwv[ 8]=50595 (0xC5A3) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=62357 (0xF395) smb_vwv[11]=12186 (0x2F9A) smb_vwv[12]=50596 (0xC5A4) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=60205 (0xEB2D) smb_vwv[15]=60721 (0xED31) smb_vwv[16]=50595 (0xC5A3) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=60205 (0xEB2D) smb_vwv[19]=60721 (0xED31) smb_vwv[20]=50595 (0xC5A3) smb_vwv[21]= 257 (0x101) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 8192 (0x2000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 9216 (0x2400) smb_vwv[28]= 5446 (0x1546) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 86 of length 63 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=24322 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8619 (0x21AB) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 2 (0x2) smb_vwv[ 6]= 2 (0x2) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) is_locked: brl start=0 len=2 unlocked for file ghost.exe [2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost.exe, offset = 0, count = 2, type = WRITE [2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 0, count_out = 2 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 0 2 1 [2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 0 2 1 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) is_locked: posix start=0 len=2 unlocked for file ghost.exe [2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (2) too small for minimum aio_read of 0 [2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8619 max=2 nread=65 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 87 of length 63 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=24386 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8619 (0x21AB) smb_vwv[ 3]= 60 (0x3C) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4 (0x4) smb_vwv[ 6]= 4 (0x4) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) is_locked: brl start=60 len=4 unlocked for file ghost.exe [2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost.exe, offset = 60, count = 4, type = WRITE [2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 60, count_out = 4 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 60 4 1 [2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 60 4 1 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) is_locked: posix start=60 len=4 unlocked for file ghost.exe [2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (4) too small for minimum aio_read of 0 [2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8619 max=4 nread=67 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 88 of length 63 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=24450 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8619 (0x21AB) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 240 (0xF0) smb_vwv[ 5]= 64 (0x40) smb_vwv[ 6]= 64 (0x40) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 64 (0x40) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) is_locked: brl start=15728640 len=64 unlocked for file ghost.exe [2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost.exe, offset = 15728640, count = 64, type = WRITE [2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 15728640, count_out = 64 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 15728640 64 1 [2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 15728640 64 1 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) is_locked: posix start=15728640 len=64 unlocked for file ghost.exe [2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (64) too small for minimum aio_read of 0 [2005/08/18 16:01:22, 10] smbd/fileio.c:read_file(105) read_file (ghost.exe): pos = 15728640, size = 64, returned 0 [2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2585) send_file_readX fnum=8619 max=64 nread=0 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=24450 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 41 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 89 of length 45 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=24514 smt_wct=3 smb_vwv[ 0]= 8619 (0x21AB) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 3] smbd/reply.c:reply_close(3247) close fd=28 fnum=8619 (numopen=3) [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(658) del_share_entry: num_share_modes = 1 [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(663) del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 9, dev = 0x1e0001, inode = 19 [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(673) del_share_entry: deleting entry 0 [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(695) del_share_entry: Remaining table. [2005/08/18 16:01:22, 10] smbd/close.c:close_normal_file(203) close_normal_file: share_entry_count = 0 for file ghost.exe [2005/08/18 16:01:22, 10] locking/posix.c:posix_locking_close_file(1249) posix_locking_close_file: file ghost.exe has no outstanding locks. [2005/08/18 16:01:22, 2] smbd/close.c:close_normal_file(270) billtest closed file ghost.exe (numopen=2) [2005/08/18 16:01:22, 5] smbd/files.c:file_free(459) freed files structure 8619 (2 used) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=24514 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 110 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x6e [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 90 of length 114 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=110 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=24578 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6144 (0x1800) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 8192 (0x2000) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1280 (0x500) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=27 [2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) [000] 00 5C 00 67 00 68 00 6F 00 73 00 74 00 37 00 35 .\.g.h.o .s.t.7.5 [010] 00 2E 00 65 00 78 00 65 00 00 00 ...e.x.e ... [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x16, access_mask = 0x20 file_attributes = 0x0, share_access = 0x5, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2005/08/18 16:01:22, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "ghost75.exe" [2005/08/18 16:01:22, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [GHOST75.EXE] -> [ghost75.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost75.exe] [/x04shr] [2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe [2005/08/18 16:01:22, 3] smbd/dosmode.c:unix_mode(121) unix_mode(ghost75.exe) returning 0744 [2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1236) open_file_ntcreate: fname=ghost75.exe, dos_attrs=0x0 access_mask=0x20 share_access=0x5 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost75.exe] [/x04shr] [2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1409) open_file_ntcreate: fname=ghost75.exe, after mapping access_mask=0x20 [2005/08/18 16:01:22, 5] smbd/files.c:file_new(139) allocated file structure 4524, fnum = 8620 (3 used) [2005/08/18 16:01:22, 4] smbd/open.c:open_file_ntcreate(1580) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2005/08/18 16:01:22, 10] smbd/open.c:fd_open(55) fd_open: name ghost75.exe, flags = 00 mode = 0744, fd = 28. [2005/08/18 16:01:22, 2] smbd/open.c:open_file(372) billtest opened file ghost75.exe read=No write=No (numopen=3) [2005/08/18 16:01:22, 10] locking/locking.c:set_share_mode(753) set_share_mode: creating entry for file ghost75.exe. num_share_modes = 1 [2005/08/18 16:01:22, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20, port = 0x0, type= 0x0, file_id = 10, dev = 0x1e0001, inode = 20 [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 8620, open name = ghost75.exe [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=24578 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=44032 (0xAC00) smb_vwv[ 3]= 289 (0x121) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 415 (0x19F) smb_vwv[ 7]=60769 (0xED61) smb_vwv[ 8]=50595 (0xC5A3) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=23294 (0x5AFE) smb_vwv[11]=12186 (0x2F9A) smb_vwv[12]=50596 (0xC5A4) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 415 (0x19F) smb_vwv[15]=60769 (0xED61) smb_vwv[16]=50595 (0xC5A3) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 415 (0x19F) smb_vwv[19]=60769 (0xED61) smb_vwv[20]=50595 (0xC5A3) smb_vwv[21]= 257 (0x101) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=15360 (0x3C00) smb_vwv[28]= 2643 (0xA53) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 91 of length 76 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=24642 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) [000] 00 00 00 AC 21 02 01 ....!.. [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20, port = 0x0, type= 0x0, file_id = 10, dev = 0x1e0001, inode = 20 [2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost75.exe (fnum = 8620) level=258 call=7 total_data=0 [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=24642 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 3C 53 0A ........ ..... [ghost75.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost75.exe] [/x04shr] [2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe [2005/08/18 16:01:22, 3] smbd/dosmode.c:unix_mode(121) unix_mode(ghost75.exe) returning 0744 [2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1236) open_file_ntcreate: fname=ghost75.exe, dos_attrs=0x0 access_mask=0x20089 share_access=0x5 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost75.exe] [/x04shr] [2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1409) open_file_ntcreate: fname=ghost75.exe, after mapping access_mask=0x20089 [2005/08/18 16:01:22, 5] smbd/files.c:file_new(139) allocated file structure 4525, fnum = 8621 (3 used) [2005/08/18 16:01:22, 4] smbd/open.c:open_file_ntcreate(1580) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2005/08/18 16:01:22, 10] smbd/open.c:fd_open(55) fd_open: name ghost75.exe, flags = 00 mode = 0744, fd = 28. [2005/08/18 16:01:22, 2] smbd/open.c:open_file(372) billtest opened file ghost75.exe read=Yes write=No (numopen=3) [2005/08/18 16:01:22, 10] locking/locking.c:set_share_mode(753) set_share_mode: creating entry for file ghost75.exe. num_share_modes = 1 [2005/08/18 16:01:22, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 11, dev = 0x1e0001, inode = 20 [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 8621, open name = ghost75.exe [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=24834 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=44288 (0xAD00) smb_vwv[ 3]= 289 (0x121) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 415 (0x19F) smb_vwv[ 7]=60769 (0xED61) smb_vwv[ 8]=50595 (0xC5A3) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=62357 (0xF395) smb_vwv[11]=12186 (0x2F9A) smb_vwv[12]=50596 (0xC5A4) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 415 (0x19F) smb_vwv[15]=60769 (0xED61) smb_vwv[16]=50595 (0xC5A3) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 415 (0x19F) smb_vwv[19]=60769 (0xED61) smb_vwv[20]=50595 (0xC5A3) smb_vwv[21]= 257 (0x101) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=15360 (0x3C00) smb_vwv[28]= 2643 (0xA53) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 96 of length 76 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=24898 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) [000] 00 00 00 AD 21 02 01 ....!.. [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:22, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x5, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 11, dev = 0x1e0001, inode = 20 [2005/08/18 16:01:22, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo ghost75.exe (fnum = 8621) level=258 call=7 total_data=0 [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2005/08/18 16:01:22, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=24898 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/18 16:01:22, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 3C 53 0A ........ ..... [ghost75.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost75.exe] [/x04shr] [2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe [2005/08/18 16:01:22, 3] smbd/dosmode.c:unix_mode(121) unix_mode(ghost75.exe) returning 0744 [2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1236) open_file_ntcreate: fname=ghost75.exe, dos_attrs=0x80 access_mask=0x20089 share_access=0x1 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(919) reduce_name [ghost75.exe] [/x04shr] [2005/08/18 16:01:22, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [ghost75.exe] -> [/x04shr/ghost75.exe] [2005/08/18 16:01:22, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ghost75.exe reduced to /x04shr/ghost75.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 10] smbd/open.c:open_file_ntcreate(1409) open_file_ntcreate: fname=ghost75.exe, after mapping access_mask=0x20089 [2005/08/18 16:01:22, 5] smbd/files.c:file_new(139) allocated file structure 4526, fnum = 8622 (3 used) [2005/08/18 16:01:22, 4] smbd/open.c:open_file_ntcreate(1580) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2005/08/18 16:01:22, 10] smbd/open.c:fd_open(55) fd_open: name ghost75.exe, flags = 00 mode = 0744, fd = 28. [2005/08/18 16:01:22, 2] smbd/open.c:open_file(372) billtest opened file ghost75.exe read=Yes write=No (numopen=3) [2005/08/18 16:01:22, 10] locking/locking.c:set_share_mode(753) set_share_mode: creating entry for file ghost75.exe. num_share_modes = 1 [2005/08/18 16:01:22, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 12, dev = 0x1e0001, inode = 20 [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ghost75.exe [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:22, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:22, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 8622, open name = ghost75.exe [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25090 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=44544 (0xAE00) smb_vwv[ 3]= 289 (0x121) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 415 (0x19F) smb_vwv[ 7]=60769 (0xED61) smb_vwv[ 8]=50595 (0xC5A3) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=62357 (0xF395) smb_vwv[11]=12186 (0x2F9A) smb_vwv[12]=50596 (0xC5A4) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 415 (0x19F) smb_vwv[15]=60769 (0xED61) smb_vwv[16]=50595 (0xC5A3) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 415 (0x19F) smb_vwv[19]=60769 (0xED61) smb_vwv[20]=50595 (0xC5A3) smb_vwv[21]= 257 (0x101) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=15360 (0x3C00) smb_vwv[28]= 2643 (0xA53) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 101 of length 63 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=25154 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8622 (0x21AE) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 2 (0x2) smb_vwv[ 6]= 2 (0x2) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) is_locked: brl start=0 len=2 unlocked for file ghost75.exe [2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost75.exe, offset = 0, count = 2, type = WRITE [2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 0, count_out = 2 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 0 2 1 [2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 0 2 1 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) is_locked: posix start=0 len=2 unlocked for file ghost75.exe [2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (2) too small for minimum aio_read of 0 [2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8622 max=2 nread=65 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 102 of length 63 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=25218 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8622 (0x21AE) smb_vwv[ 3]= 60 (0x3C) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4 (0x4) smb_vwv[ 6]= 4 (0x4) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) is_locked: brl start=60 len=4 unlocked for file ghost75.exe [2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost75.exe, offset = 60, count = 4, type = WRITE [2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 60, count_out = 4 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 60 4 1 [2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 60 4 1 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) is_locked: posix start=60 len=4 unlocked for file ghost75.exe [2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (4) too small for minimum aio_read of 0 [2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8622 max=4 nread=67 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 103 of length 63 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=25282 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8622 (0x21AE) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 240 (0xF0) smb_vwv[ 5]= 64 (0x40) smb_vwv[ 6]= 64 (0x40) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 64 (0x40) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(109) is_locked: brl start=15728640 len=64 unlocked for file ghost75.exe [2005/08/18 16:01:22, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File ghost75.exe, offset = 15728640, count = 64, type = WRITE [2005/08/18 16:01:22, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 15728640, count_out = 64 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 15728640 64 1 [2005/08/18 16:01:22, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 15728640 64 1 [2005/08/18 16:01:22, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:22, 10] locking/locking.c:is_locked(121) is_locked: posix start=15728640 len=64 unlocked for file ghost75.exe [2005/08/18 16:01:22, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (64) too small for minimum aio_read of 0 [2005/08/18 16:01:22, 10] smbd/fileio.c:read_file(105) read_file (ghost75.exe): pos = 15728640, size = 64, returned 0 [2005/08/18 16:01:22, 3] smbd/reply.c:send_file_readX(2585) send_file_readX fnum=8622 max=64 nread=0 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=25282 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 41 [2005/08/18 16:01:22, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2005/08/18 16:01:22, 3] smbd/process.c:process_smb(1114) Transaction 104 of length 45 [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=25346 smt_wct=3 smb_vwv[ 0]= 8622 (0x21AE) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2005/08/18 16:01:22, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 17002) conn 0x20094140 [2005/08/18 16:01:22, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:22, 3] smbd/reply.c:reply_close(3247) close fd=28 fnum=8622 (numopen=3) [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(658) del_share_entry: num_share_modes = 1 [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(663) del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 12, dev = 0x1e0001, inode = 20 [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(673) del_share_entry: deleting entry 0 [2005/08/18 16:01:22, 10] locking/locking.c:del_share_entry(695) del_share_entry: Remaining table. [2005/08/18 16:01:22, 10] smbd/close.c:close_normal_file(203) close_normal_file: share_entry_count = 0 for file ghost75.exe [2005/08/18 16:01:22, 10] locking/posix.c:posix_locking_close_file(1249) posix_locking_close_file: file ghost75.exe has no outstanding locks. [2005/08/18 16:01:22, 2] smbd/close.c:close_normal_file(270) billtest closed file ghost75.exe (numopen=2) [2005/08/18 16:01:22, 5] smbd/files.c:file_free(459) freed files structure 8622 (2 used) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:22, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=25346 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 124 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x7c [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 105 of length 128 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=124 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25410 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 9728 (0x2600) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 256 (0x100) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=41 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 5C 00 73 00 75 00 73 00 70 00 72 00 6F 00 64 .\.s.u.s .p.r.o.d [010] 00 5F 00 6E 00 6F 00 74 00 69 00 66 00 79 00 2E ._.n.o.t .i.f.y.. [020] 00 72 00 65 00 67 00 00 00 .r.e.g.. . [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "susprod_notify.reg" [2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [SUSPROD_NOTIFY.REG] [2005/08/18 16:01:24, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (20066818:size13) SUSPROD_NOTIFY.REG -> susprod_notify.reg [2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(170) conversion finished susprod_notify.reg -> susprod_notify.reg [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) reduce_name [susprod_notify.reg] [/x04shr] [2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg [2005/08/18 16:01:24, 3] smbd/dosmode.c:unix_mode(121) unix_mode(susprod_notify.reg) returning 0744 [2005/08/18 16:01:24, 10] smbd/open.c:open_file_ntcreate(1236) open_file_ntcreate: fname=susprod_notify.reg, dos_attrs=0x80 access_mask=0x20089 share_access=0x1 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) reduce_name [susprod_notify.reg] [/x04shr] [2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 10] smbd/open.c:open_file_ntcreate(1409) open_file_ntcreate: fname=susprod_notify.reg, after mapping access_mask=0x20089 [2005/08/18 16:01:24, 5] smbd/files.c:file_new(139) allocated file structure 4527, fnum = 8623 (3 used) [2005/08/18 16:01:24, 4] smbd/open.c:open_file_ntcreate(1580) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2005/08/18 16:01:24, 10] smbd/open.c:fd_open(55) fd_open: name susprod_notify.reg, flags = 00 mode = 0744, fd = 28. [2005/08/18 16:01:24, 2] smbd/open.c:open_file(372) billtest opened file susprod_notify.reg read=Yes write=No (numopen=3) [2005/08/18 16:01:24, 10] locking/locking.c:set_share_mode(753) set_share_mode: creating entry for file susprod_notify.reg. num_share_modes = 1 [2005/08/18 16:01:24, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 8623, open name = susprod_notify.reg [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25410 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=44800 (0xAF00) smb_vwv[ 3]= 289 (0x121) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=16974 (0x424E) smb_vwv[ 7]= 9306 (0x245A) smb_vwv[ 8]=50596 (0xC5A4) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=52150 (0xCBB6) smb_vwv[11]= 9315 (0x2463) smb_vwv[12]=50596 (0xC5A4) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=16974 (0x424E) smb_vwv[15]= 9306 (0x245A) smb_vwv[16]=50596 (0xC5A4) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=16974 (0x424E) smb_vwv[19]= 9306 (0x245A) smb_vwv[20]=50596 (0xC5A4) smb_vwv[21]= 257 (0x101) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 3072 (0xC00) smb_vwv[28]= 5 (0x5) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 114 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x72 [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 106 of length 118 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=114 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25474 smt_wct=15 smb_vwv[ 0]= 46 (0x2E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 46 (0x2E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=49 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 73 00 75 00 73 ........ .\.s.u.s [010] 00 70 00 72 00 6F 00 64 00 5F 00 6E 00 6F 00 74 .p.r.o.d ._.n.o.t [020] 00 69 00 66 00 79 00 2E 00 72 00 65 00 67 00 00 .i.f.y.. .r.e.g.. [030] 00 . [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "susprod_notify.reg" [2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [SUSPROD_NOTIFY.REG] -> [susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) reduce_name [susprod_notify.reg] [/x04shr] [2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo susprod_notify.reg (fnum = -1) level=257 call=5 total_data=0 [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO [2005/08/18 16:01:24, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) SMB_QFBI - create: Thu Aug 18 14:40:49 2005 access: Thu Aug 18 14:41:05 2005 write: Thu Aug 18 14:40:49 2005 change: Thu Aug 18 14:40:49 2005 mode: 1 [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25474 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 80 4E 42 5A 24 A4 C5 01 80 B6 CB ......NB Z$...... [010] 63 24 A4 C5 01 80 4E 42 5A 24 A4 C5 01 80 4E 42 c$....NB Z$....NB [020] 5A 24 A4 C5 01 01 00 00 00 Z$...... . [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 114 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x72 [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 107 of length 118 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=114 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25538 smt_wct=15 smb_vwv[ 0]= 46 (0x2E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 46 (0x2E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=49 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 73 00 75 00 73 ........ .\.s.u.s [010] 00 70 00 72 00 6F 00 64 00 5F 00 6E 00 6F 00 74 .p.r.o.d ._.n.o.t [020] 00 69 00 66 00 79 00 2E 00 72 00 65 00 67 00 00 .i.f.y.. .r.e.g.. [030] 00 . [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "susprod_notify.reg" [2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [SUSPROD_NOTIFY.REG] -> [susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) reduce_name [susprod_notify.reg] [/x04shr] [2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo susprod_notify.reg (fnum = -1) level=257 call=5 total_data=0 [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO [2005/08/18 16:01:24, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) SMB_QFBI - create: Thu Aug 18 14:40:49 2005 access: Thu Aug 18 14:41:05 2005 write: Thu Aug 18 14:40:49 2005 change: Thu Aug 18 14:40:49 2005 mode: 1 [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25538 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 80 4E 42 5A 24 A4 C5 01 80 B6 CB ......NB Z$...... [010] 63 24 A4 C5 01 80 4E 42 5A 24 A4 C5 01 80 4E 42 c$....NB Z$....NB [020] 5A 24 A4 C5 01 01 00 00 00 Z$...... . [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 108 of length 63 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=25602 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8623 (0x21AF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 2 (0x2) smb_vwv[ 6]= 2 (0x2) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 10] locking/locking.c:is_locked(109) is_locked: brl start=0 len=2 unlocked for file susprod_notify.reg [2005/08/18 16:01:24, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File susprod_notify.reg, offset = 0, count = 2, type = WRITE [2005/08/18 16:01:24, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 0, count_out = 2 [2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 0 2 1 [2005/08/18 16:01:24, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 0 2 1 [2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:24, 10] locking/locking.c:is_locked(121) is_locked: posix start=0 len=2 unlocked for file susprod_notify.reg [2005/08/18 16:01:24, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (2) too small for minimum aio_read of 0 [2005/08/18 16:01:24, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8623 max=2 nread=65 [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 109 of length 76 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25666 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 AF 21 02 01 ....!.. [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo susprod_notify.reg (fnum = 8623) level=258 call=7 total_data=0 [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25666 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 0C 05 00 ........ ........ [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 110 of length 76 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25730 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 AF 21 02 01 ....!.. [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo susprod_notify.reg (fnum = 8623) level=258 call=7 total_data=0 [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25730 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 0C 05 00 ........ ........ [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 111 of length 63 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=25794 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8623 (0x21AF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4096 (0x1000) smb_vwv[ 6]= 4096 (0x1000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4096 (0x1000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 10] locking/locking.c:is_locked(109) is_locked: brl start=0 len=4096 unlocked for file susprod_notify.reg [2005/08/18 16:01:24, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File susprod_notify.reg, offset = 0, count = 4096, type = WRITE [2005/08/18 16:01:24, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 0, count_out = 4096 [2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 0 4096 1 [2005/08/18 16:01:24, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 0 4096 1 [2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:24, 10] locking/locking.c:is_locked(121) is_locked: posix start=0 len=4096 unlocked for file susprod_notify.reg [2005/08/18 16:01:24, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (4096) too small for minimum aio_read of 0 [2005/08/18 16:01:24, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8623 max=1292 nread=1355 [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 112 of length 63 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=59399 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=25794 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8623 (0x21AF) smb_vwv[ 3]= 1292 (0x50C) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 2804 (0xAF4) smb_vwv[ 6]= 2804 (0xAF4) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2804 (0xAF4) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 10] locking/locking.c:is_locked(109) is_locked: brl start=1292 len=2804 unlocked for file susprod_notify.reg [2005/08/18 16:01:24, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File susprod_notify.reg, offset = 1292, count = 2804, type = WRITE [2005/08/18 16:01:24, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 1292, count_out = 2804 [2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 28 11 1292 2804 1 [2005/08/18 16:01:24, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 28 11 1292 2804 1 [2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:24, 10] locking/locking.c:is_locked(121) is_locked: posix start=1292 len=2804 unlocked for file susprod_notify.reg [2005/08/18 16:01:24, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (2804) too small for minimum aio_read of 0 [2005/08/18 16:01:24, 10] smbd/fileio.c:read_file(105) read_file (susprod_notify.reg): pos = 1292, size = 0, returned 0 [2005/08/18 16:01:24, 3] smbd/reply.c:send_file_readX(2585) send_file_readX fnum=8623 max=0 nread=0 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=25794 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 124 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x7c [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 113 of length 128 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=124 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25858 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 9728 (0x2600) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 256 (0x100) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=41 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 5C 00 73 00 75 00 73 00 70 00 72 00 6F 00 64 .\.s.u.s .p.r.o.d [010] 00 5F 00 6E 00 6F 00 74 00 69 00 66 00 79 00 2E ._.n.o.t .i.f.y.. [020] 00 72 00 65 00 67 00 00 00 .r.e.g.. . [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "susprod_notify.reg" [2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [SUSPROD_NOTIFY.REG] -> [susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) reduce_name [susprod_notify.reg] [/x04shr] [2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg [2005/08/18 16:01:24, 3] smbd/dosmode.c:unix_mode(121) unix_mode(susprod_notify.reg) returning 0744 [2005/08/18 16:01:24, 10] smbd/open.c:open_file_ntcreate(1236) open_file_ntcreate: fname=susprod_notify.reg, dos_attrs=0x80 access_mask=0x20089 share_access=0x1 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) reduce_name [susprod_notify.reg] [/x04shr] [2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 10] smbd/open.c:open_file_ntcreate(1409) open_file_ntcreate: fname=susprod_notify.reg, after mapping access_mask=0x20089 [2005/08/18 16:01:24, 5] smbd/files.c:file_new(139) allocated file structure 4528, fnum = 8624 (4 used) [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(409) share_conflict: entry->access_mask = 0x20089, entry->share_access = 0x1, entry->private_options = 0x40 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(412) share_conflict: access_mask = 0x20089, share_access = 0x1 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(463) share_conflict: [1] am (0x20089) & right (0x6) = 0x0 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(463) share_conflict: [1] sa (0x1) & share (0x2) = 0x0 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(465) share_conflict: [2] am (0x20089) & right (0x6) = 0x0 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(465) share_conflict: [2] sa (0x1) & share (0x2) = 0x0 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(468) share_conflict: [3] am (0x20089) & right (0x21) = 0x1 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(468) share_conflict: [3] sa (0x1) & share (0x1) = 0x1 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(470) share_conflict: [4] am (0x20089) & right (0x21) = 0x1 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(470) share_conflict: [4] sa (0x1) & share (0x1) = 0x1 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(473) share_conflict: [5] am (0x20089) & right (0x10000) = 0x0 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(473) share_conflict: [5] sa (0x1) & share (0x4) = 0x0 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(475) share_conflict: [6] am (0x20089) & right (0x10000) = 0x0 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(475) share_conflict: [6] sa (0x1) & share (0x4) = 0x0 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(477) share_conflict: No conflict. [2005/08/18 16:01:24, 4] smbd/open.c:open_file_ntcreate(1580) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2005/08/18 16:01:24, 10] smbd/open.c:fd_open(55) fd_open: name susprod_notify.reg, flags = 00 mode = 0744, fd = 29. [2005/08/18 16:01:24, 2] smbd/open.c:open_file(372) billtest opened file susprod_notify.reg read=Yes write=No (numopen=4) [2005/08/18 16:01:24, 10] locking/locking.c:set_share_mode(775) set_share_mode: adding entry for file susprod_notify.reg. new num_share_modes = 2 [2005/08/18 16:01:24, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 14, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[1]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 8624, open name = susprod_notify.reg [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25858 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=45056 (0xB000) smb_vwv[ 3]= 289 (0x121) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=16974 (0x424E) smb_vwv[ 7]= 9306 (0x245A) smb_vwv[ 8]=50596 (0xC5A4) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=52150 (0xCBB6) smb_vwv[11]= 9315 (0x2463) smb_vwv[12]=50596 (0xC5A4) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=16974 (0x424E) smb_vwv[15]= 9306 (0x245A) smb_vwv[16]=50596 (0xC5A4) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=16974 (0x424E) smb_vwv[19]= 9306 (0x245A) smb_vwv[20]=50596 (0xC5A4) smb_vwv[21]= 257 (0x101) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 3072 (0xC00) smb_vwv[28]= 5 (0x5) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 114 of length 76 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25922 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 B0 21 02 01 ....!.. [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 14, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[1]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo susprod_notify.reg (fnum = 8624) level=258 call=7 total_data=0 [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25922 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 0C 05 00 ........ ........ [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 115 of length 76 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25986 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 B0 21 02 01 ....!.. [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 14, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[1]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo susprod_notify.reg (fnum = 8624) level=258 call=7 total_data=0 [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=25986 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 0C 05 00 ........ ........ [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 72 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x48 [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 116 of length 76 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=26050 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 B0 21 02 01 ....!.. [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2759) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 258 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 14, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[1]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo susprod_notify.reg (fnum = 8624) level=258 call=7 total_data=0 [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3089) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=26050 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 10 00 00 00 00 00 0C 05 00 ........ ........ [010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 41 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 117 of length 45 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=26114 smt_wct=3 smb_vwv[ 0]= 8624 (0x21B0) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 3] smbd/reply.c:reply_close(3247) close fd=29 fnum=8624 (numopen=4) [2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(658) del_share_entry: num_share_modes = 2 [2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(663) del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 14, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(673) del_share_entry: deleting entry 0 [2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(695) del_share_entry: Remaining table. [2005/08/18 16:01:24, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 10] smbd/close.c:close_normal_file(203) close_normal_file: share_entry_count = 1 for file susprod_notify.reg [2005/08/18 16:01:24, 10] locking/posix.c:posix_locking_close_file(1249) posix_locking_close_file: file susprod_notify.reg has no outstanding locks. [2005/08/18 16:01:24, 2] smbd/close.c:close_normal_file(270) billtest closed file susprod_notify.reg (numopen=3) [2005/08/18 16:01:24, 5] smbd/files.c:file_free(459) freed files structure 8624 (3 used) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=26114 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 124 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x7c [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 118 of length 128 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=124 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=26178 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 9728 (0x2600) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=41 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 5C 00 73 00 75 00 73 00 70 00 72 00 6F 00 64 .\.s.u.s .p.r.o.d [010] 00 5F 00 6E 00 6F 00 74 00 69 00 66 00 79 00 2E ._.n.o.t .i.f.y.. [020] 00 72 00 65 00 67 00 00 00 .r.e.g.. . [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "susprod_notify.reg" [2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [SUSPROD_NOTIFY.REG] -> [susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) reduce_name [susprod_notify.reg] [/x04shr] [2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg [2005/08/18 16:01:24, 3] smbd/dosmode.c:unix_mode(121) unix_mode(susprod_notify.reg) returning 0744 [2005/08/18 16:01:24, 10] smbd/open.c:open_file_ntcreate(1236) open_file_ntcreate: fname=susprod_notify.reg, dos_attrs=0x80 access_mask=0x20089 share_access=0x3 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) reduce_name [susprod_notify.reg] [/x04shr] [2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 10] smbd/open.c:open_file_ntcreate(1409) open_file_ntcreate: fname=susprod_notify.reg, after mapping access_mask=0x20089 [2005/08/18 16:01:24, 5] smbd/files.c:file_new(139) allocated file structure 4529, fnum = 8625 (4 used) [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/08/18 16:01:24, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(409) share_conflict: entry->access_mask = 0x20089, entry->share_access = 0x1, entry->private_options = 0x40 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(412) share_conflict: access_mask = 0x20089, share_access = 0x3 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(463) share_conflict: [1] am (0x20089) & right (0x6) = 0x0 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(463) share_conflict: [1] sa (0x3) & share (0x2) = 0x2 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(465) share_conflict: [2] am (0x20089) & right (0x6) = 0x0 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(465) share_conflict: [2] sa (0x1) & share (0x2) = 0x0 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(468) share_conflict: [3] am (0x20089) & right (0x21) = 0x1 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(468) share_conflict: [3] sa (0x3) & share (0x1) = 0x1 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(470) share_conflict: [4] am (0x20089) & right (0x21) = 0x1 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(470) share_conflict: [4] sa (0x1) & share (0x1) = 0x1 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(473) share_conflict: [5] am (0x20089) & right (0x10000) = 0x0 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(473) share_conflict: [5] sa (0x3) & share (0x4) = 0x0 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(475) share_conflict: [6] am (0x20089) & right (0x10000) = 0x0 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(475) share_conflict: [6] sa (0x1) & share (0x4) = 0x0 [2005/08/18 16:01:24, 10] smbd/open.c:share_conflict(477) share_conflict: No conflict. [2005/08/18 16:01:24, 4] smbd/open.c:open_file_ntcreate(1580) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2005/08/18 16:01:24, 10] smbd/open.c:fd_open(55) fd_open: name susprod_notify.reg, flags = 00 mode = 0744, fd = 29. [2005/08/18 16:01:24, 2] smbd/open.c:open_file(372) billtest opened file susprod_notify.reg read=Yes write=No (numopen=4) [2005/08/18 16:01:24, 10] locking/locking.c:set_share_mode(775) set_share_mode: adding entry for file susprod_notify.reg. new num_share_modes = 2 [2005/08/18 16:01:24, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 15, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[1]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 8625, open name = susprod_notify.reg [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=26178 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=45312 (0xB100) smb_vwv[ 3]= 289 (0x121) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=16974 (0x424E) smb_vwv[ 7]= 9306 (0x245A) smb_vwv[ 8]=50596 (0xC5A4) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=52150 (0xCBB6) smb_vwv[11]= 9315 (0x2463) smb_vwv[12]=50596 (0xC5A4) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=16974 (0x424E) smb_vwv[15]= 9306 (0x245A) smb_vwv[16]=50596 (0xC5A4) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=16974 (0x424E) smb_vwv[19]= 9306 (0x245A) smb_vwv[20]=50596 (0xC5A4) smb_vwv[21]= 257 (0x101) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 3072 (0xC00) smb_vwv[28]= 5 (0x5) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 59 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 119 of length 63 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=26242 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 8625 (0x21B1) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 10] locking/locking.c:is_locked(109) is_locked: brl start=0 len=512 unlocked for file susprod_notify.reg [2005/08/18 16:01:24, 10] locking/posix.c:is_posix_locked(706) is_posix_locked: File susprod_notify.reg, offset = 0, count = 512, type = WRITE [2005/08/18 16:01:24, 10] locking/posix.c:posix_lock_in_range(642) posix_lock_in_range: offset_out = 0, count_out = 512 [2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(659) posix_fcntl_lock 29 11 0 512 1 [2005/08/18 16:01:24, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 29 11 0 512 1 [2005/08/18 16:01:24, 8] locking/posix.c:posix_fcntl_lock(689) posix_fcntl_lock: Lock call failed [2005/08/18 16:01:24, 10] locking/locking.c:is_locked(121) is_locked: posix start=0 len=512 unlocked for file susprod_notify.reg [2005/08/18 16:01:24, 10] smbd/aio.c:schedule_aio_read_and_X(213) schedule_aio_read_and_X: read size (512) too small for minimum aio_read of 0 [2005/08/18 16:01:24, 3] smbd/reply.c:send_file_readX(2561) send_file_readX: sendfile fnum=8625 max=512 nread=575 [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 41 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 120 of length 45 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=26306 smt_wct=3 smb_vwv[ 0]= 8625 (0x21B1) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 3] smbd/reply.c:reply_close(3247) close fd=29 fnum=8625 (numopen=4) [2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(658) del_share_entry: num_share_modes = 2 [2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(663) del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x3, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 15, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(673) del_share_entry: deleting entry 0 [2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(695) del_share_entry: Remaining table. [2005/08/18 16:01:24, 10] locking/locking.c:print_share_mode_table(463) print_share_mode_table: share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 10] smbd/close.c:close_normal_file(203) close_normal_file: share_entry_count = 1 for file susprod_notify.reg [2005/08/18 16:01:24, 10] locking/posix.c:posix_locking_close_file(1249) posix_locking_close_file: file susprod_notify.reg has no outstanding locks. [2005/08/18 16:01:24, 2] smbd/close.c:close_normal_file(270) billtest closed file susprod_notify.reg (numopen=3) [2005/08/18 16:01:24, 5] smbd/files.c:file_free(459) freed files structure 8625 (3 used) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=26306 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 41 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 121 of length 45 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=26370 smt_wct=3 smb_vwv[ 0]= 8623 (0x21AF) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 3] smbd/reply.c:reply_close(3247) close fd=28 fnum=8623 (numopen=3) [2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(658) del_share_entry: num_share_modes = 1 [2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(663) del_share_entry: deleted share_mode_entry[0]: pid = 17002, share_access = 0x1, private_options = 0x40, access_mask = 0x20089, port = 0x0, type= 0x0, file_id = 13, dev = 0x1e0001, inode = 21 [2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(673) del_share_entry: deleting entry 0 [2005/08/18 16:01:24, 10] locking/locking.c:del_share_entry(695) del_share_entry: Remaining table. [2005/08/18 16:01:24, 10] smbd/close.c:close_normal_file(203) close_normal_file: share_entry_count = 0 for file susprod_notify.reg [2005/08/18 16:01:24, 10] locking/posix.c:posix_locking_close_file(1249) posix_locking_close_file: file susprod_notify.reg has no outstanding locks. [2005/08/18 16:01:24, 2] smbd/close.c:close_normal_file(270) billtest closed file susprod_notify.reg (numopen=2) [2005/08/18 16:01:24, 5] smbd/files.c:file_free(459) freed files structure 8623 (2 used) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=26370 smt_wct=0 smb_bcc=0 [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 114 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x72 [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 122 of length 118 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=114 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=26434 smt_wct=15 smb_vwv[ 0]= 46 (0x2E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 46 (0x2E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=49 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 73 00 75 00 73 ........ .\.s.u.s [010] 00 70 00 72 00 6F 00 64 00 5F 00 6E 00 6F 00 74 .p.r.o.d ._.n.o.t [020] 00 69 00 66 00 79 00 2E 00 72 00 65 00 67 00 00 .i.f.y.. .r.e.g.. [030] 00 . [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "susprod_notify.reg" [2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [SUSPROD_NOTIFY.REG] -> [susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) reduce_name [susprod_notify.reg] [/x04shr] [2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo susprod_notify.reg (fnum = -1) level=257 call=5 total_data=0 [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO [2005/08/18 16:01:24, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) SMB_QFBI - create: Thu Aug 18 14:40:49 2005 access: Thu Aug 18 14:41:05 2005 write: Thu Aug 18 14:40:49 2005 change: Thu Aug 18 14:40:49 2005 mode: 1 [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=26434 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 80 4E 42 5A 24 A4 C5 01 80 B6 CB ......NB Z$...... [010] 63 24 A4 C5 01 80 4E 42 5A 24 A4 C5 01 80 4E 42 c$....NB Z$....NB [020] 5A 24 A4 C5 01 01 00 00 00 Z$...... . [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 114 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x72 [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 123 of length 118 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=114 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=26498 smt_wct=15 smb_vwv[ 0]= 46 (0x2E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 46 (0x2E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=49 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 01 01 00 00 00 00 5C 00 73 00 75 00 73 ........ .\.s.u.s [010] 00 70 00 72 00 6F 00 64 00 5F 00 6E 00 6F 00 74 .p.r.o.d ._.n.o.t [020] 00 69 00 66 00 79 00 2E 00 72 00 65 00 67 00 00 .i.f.y.. .r.e.g.. [030] 00 . [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2819) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "susprod_notify.reg" [2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [SUSPROD_NOTIFY.REG] -> [susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) reduce_name [susprod_notify.reg] [/x04shr] [2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2qfilepathinfo(2870) call_trans2qfilepathinfo susprod_notify.reg (fnum = -1) level=257 call=5 total_data=0 [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 10] smbd/trans2.c:call_trans2qfilepathinfo(3062) call_trans2qfilepathinfo: SMB_QUERY_FILE_BASIC_INFO [2005/08/18 16:01:24, 5] smbd/trans2.c:call_trans2qfilepathinfo(3075) SMB_QFBI - create: Thu Aug 18 14:40:49 2005 access: Thu Aug 18 14:41:05 2005 write: Thu Aug 18 14:40:49 2005 change: Thu Aug 18 14:40:49 2005 mode: 1 [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 36, useable_space = 131010 [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 36, paramsize = 2, datasize = 36 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=26498 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 80 4E 42 5A 24 A4 C5 01 80 B6 CB ......NB Z$...... [010] 63 24 A4 C5 01 80 4E 42 5A 24 A4 C5 01 80 4E 42 c$....NB Z$....NB [020] 5A 24 A4 C5 01 01 00 00 00 Z$...... . [2005/08/18 16:01:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(615) got smb length of 120 [2005/08/18 16:01:24, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x78 [2005/08/18 16:01:24, 3] smbd/process.c:process_smb(1114) Transaction 124 of length 124 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=120 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=26562 smt_wct=15 smb_vwv[ 0]= 52 (0x34) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 52 (0x34) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=55 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 73 00 75 00 73 00 70 00 72 00 6F 00 64 00 5F .s.u.s.p .r.o.d._ [020] 00 6E 00 6F 00 74 00 69 00 66 00 79 00 2E 00 72 .n.o.t.i .f.y...r [030] 00 65 00 67 00 00 00 .e.g... [2005/08/18 16:01:24, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 17002) conn 0x20094140 [2005/08/18 16:01:24, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/08/18 16:01:24, 3] smbd/trans2.c:call_trans2findfirst(1628) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2005/08/18 16:01:24, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "susprod_notify.reg" [2005/08/18 16:01:24, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [SUSPROD_NOTIFY.REG] -> [susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) reduce_name [susprod_notify.reg] [/x04shr] [2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [susprod_notify.reg] -> [/x04shr/susprod_notify.reg] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) reduce_name: susprod_notify.reg reduced to /x04shr/susprod_notify.reg [2005/08/18 16:01:24, 5] smbd/trans2.c:call_trans2findfirst(1682) dir=./, mask = susprod_notify.reg [2005/08/18 16:01:24, 5] smbd/dir.c:dptr_create(390) dptr_create dir=./ [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(919) reduce_name [./] [/x04shr] [2005/08/18 16:01:24, 10] smbd/vfs.c:reduce_name(988) reduce_name realpath [./] -> [/x04shr] [2005/08/18 16:01:24, 3] smbd/vfs.c:reduce_name(1025) reduce_name: ./ reduced to /x04shr [2005/08/18 16:01:24, 3] smbd/dir.c:dptr_create(509) creating new dirptr 256 for path ./, expect_close = 1 [2005/08/18 16:01:24, 4] smbd/trans2.c:call_trans2findfirst(1739) dptr_num is 256, wcard = susprod_notify.reg, attr = 22 [2005/08/18 16:01:24, 8] smbd/trans2.c:call_trans2findfirst(1744) dirpath=<./> dontdescend=<> [2005/08/18 16:01:24, 8] smbd/trans2.c:get_lanman2_dir_entry(1076) get_lanman2_dir_entry:readdir on dirptr 0x200683e8 now at offset -1 [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./susprod_notify.reg [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning r [2005/08/18 16:01:24, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning r [2005/08/18 16:01:24, 5] smbd/trans2.c:get_lanman2_dir_entry(1166) get_lanman2_dir_entry found ./susprod_notify.reg fname=susprod_notify.reg [2005/08/18 16:01:24, 10] smbd/trans2.c:get_lanman2_dir_entry(1307) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2005/08/18 16:01:24, 10] smbd/mangle_hash2.c:name_map(613) name_map: susprod_notify.reg -> 1E6847C1 -> S8FQAP~T.REG (cache=1) [2005/08/18 16:01:24, 5] smbd/trans2.c:call_trans2findfirst(1792) call_trans2findfirst - (2) closing dptr_num 256 [2005/08/18 16:01:24, 4] smbd/dir.c:dptr_close_internal(238) closing dptr key 256 [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 10, data_sent_thistime = 132, useable_space = 131010 [2005/08/18 16:01:24, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 10, data_to_send = 132, paramsize = 10, datasize = 132 [2005/08/18 16:01:24, 5] lib/util.c:show_msg(454) [2005/08/18 16:01:24, 5] lib/util.c:show_msg(464) size=200 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=3032 smb_uid=101 smb_mid=26562 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 132 (0x84) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 132 (0x84) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=145 [2005/08/18 16:01:24, 10] lib/util.c:dump_data(2053) [000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 84 00 00 ........ ........ [010] 00 00 00 00 00 80 4E 42 5A 24 A4 C5 01 80 B6 CB ......NB Z$...... [020] 63 24 A4 C5 01 80 4E 42 5A 24 A4 C5 01 80 4E 42 c$....NB Z$....NB [030] 5A 24 A4 C5 01 0C 05 00 00 00 00 00 00 00 00 10 Z$...... ........ [040] 00 00 00 00 00 01 00 00 00 24 00 00 00 00 00 00 ........ .$...... [050] 00 18 00 53 00 38 00 46 00 51 00 41 00 50 00 7E ...S.8.F .Q.A.P.~ [060] 00 54 00 2E 00 52 00 45 00 47 00 73 00 75 00 73 .T...R.E .G.s.u.s [070] 00 70 00 72 00 6F 00 64 00 5F 00 6E 00 6F 00 74 .p.r.o.d ._.n.o.t [080] 00 69 00 66 00 79 00 2E 00 72 00 65 00 67 00 00 .i.f.y.. .r.e.g.. [090] 00 . [2005/08/18 16:01:24, 4] smbd/trans2.c:call_trans2findfirst(1828) SMBtrans2 mask=susprod_notify.reg directory=./ dirtype=22 numentries=1 [2005/08/18 16:01:24, 10] smbd/mangle_hash2.c:name_map(613) name_map: susprod_notify.reg -> 1E6847C1 -> S8FQAP~T.REG (cache=1)