[2003/10/07 09:49:33, 5] smbd/uid.c:change_to_root_user(218) change_to_root_user: now uid=(0,0) gid=(0,0) [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2150 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=6467 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 D8 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 80 62 8A A5 CD ........ ....b... [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (742, 16269) - sec_ctx_stack_ndx = 0 [2003/10/07 09:49:33, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1208164849-443131069-1473614131-2484 contains 8 SIDs SID[ 0]: S-1-5-21-1208164849-443131069-1473614131-2484 SID[ 1]: S-1-5-21-1208164849-443131069-1473614131-33539 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1208164849-443131069-1473614131-1021 SID[ 6]: S-1-5-21-1208164849-443131069-1473614131-1601 SID[ 7]: S-1-5-21-1208164849-443131069-1473614131-1615 [2003/10/07 09:49:33, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 742 Primary group is 16269 and contains 5 supplementary groups Group[ 0]: 16269 Group[ 1]: 16269 Group[ 2]: 10 Group[ 3]: 300 Group[ 4]: 307 [2003/10/07 09:49:33, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(0,742) gid=(0,16269) [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Protect" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/PROTECT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Protect (fnum 13016) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Tue Oct 7 08:22:17 2003 size: 0 dosmode: 0 [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:22:17 2003 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2151 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=6531 smt_wct=3 smb_vwv[ 0]=13016 (0x32D8) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13016 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13016 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=6531 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 194 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xc2 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2152 of length 198 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=194 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=6595 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=27648 (0x6C00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=111 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 50 .r.o.s.o .f.t.\.P [060] 00 72 00 6F 00 74 00 65 00 63 00 74 00 00 00 .r.o.t.e .c.t... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Protect" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/PROTECT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8921, fnum = 13017 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Protect, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x0 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13017 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8922, fnum = 13018 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Protect [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13018, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Protect [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=6595 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=55808 (0xDA00) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 4938 (0x134A) smb_vwv[15]=55761 (0xD9D1) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 4938 (0x134A) smb_vwv[19]=55761 (0xD9D1) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2153 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=6659 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 DA 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Protect" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/PROTECT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Protect] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Protect (fnum 13018) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Wed Dec 31 19:00:00 1969 size: 0 dosmode: 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/Protect : setting dos mode 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Protect [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Protect) returning 040700 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2154 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=6723 smt_wct=3 smb_vwv[ 0]=13018 (0x32DA) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13018 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13018 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=6723 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 240 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xf0 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2155 of length 244 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=240 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=6787 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=39424 (0x9A00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=157 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 49 .r.o.s.o .f.t.\.I [060] 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 .n.t.e.r .n.e.t. [070] 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 .E.x.p.l .o.r.e.r [080] 00 5C 00 51 00 75 00 69 00 63 00 6B 00 20 00 4C .\.Q.u.i .c.k. .L [090] 00 61 00 75 00 6E 00 63 00 68 00 00 00 .a.u.n.c .h... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer\Quick Launch" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8923, fnum = 13019 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x0 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13019 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8924, fnum = 13020 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13020, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=6787 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=56320 (0xDC00) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]=55294 (0xD7FE) smb_vwv[15]=55765 (0xD9D5) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]=55294 (0xD7FE) smb_vwv[19]=55765 (0xD9D5) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2156 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=6851 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 DC 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch (fnum 13020) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Wed Dec 31 19:00:00 1969 size: 0 dosmode: 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch : setting dos mode 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) returning 040700 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2157 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=6915 smt_wct=3 smb_vwv[ 0]=13020 (0x32DC) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13020 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13020 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=6915 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 240 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xf0 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2158 of length 244 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=240 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=6979 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=39424 (0x9A00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=38400 (0x9600) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1536 (0x600) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=157 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 49 .r.o.s.o .f.t.\.I [060] 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 .n.t.e.r .n.e.t. [070] 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 .E.x.p.l .o.r.e.r [080] 00 5C 00 51 00 75 00 69 00 63 00 6B 00 20 00 4C .\.Q.u.i .c.k. .L [090] 00 61 00 75 00 6E 00 63 00 68 00 00 00 .a.u.n.c .h... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer\Quick Launch" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8925, fnum = 13021 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x1 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52) fd_open: name %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch, flags = 01 mode = 0700, fd = -1. Is a directory [2003/10/07 09:49:33, 3] smbd/open.c:open_file(183) Error opening file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch (Is a directory) (local_flags=1) (flags=1) [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13021 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8926, fnum = 13022 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13022, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=6979 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=56832 (0xDE00) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]=55294 (0xD7FE) smb_vwv[15]=55765 (0xD9D5) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]=55294 (0xD7FE) smb_vwv[19]=55765 (0xD9D5) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2159 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=7043 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 DE 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 01 2C 38 D0 ........ .....,8. [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch (fnum 13022) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Tue Oct 7 08:40:42 2003 size: 0 dosmode: 0 [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:40:42 2003 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2160 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=7107 smt_wct=3 smb_vwv[ 0]=13022 (0x32DE) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13022 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13022 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=7107 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 240 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xf0 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2161 of length 244 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=240 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=7171 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=39424 (0x9A00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=157 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 49 .r.o.s.o .f.t.\.I [060] 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 .n.t.e.r .n.e.t. [070] 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 .E.x.p.l .o.r.e.r [080] 00 5C 00 51 00 75 00 69 00 63 00 6B 00 20 00 4C .\.Q.u.i .c.k. .L [090] 00 61 00 75 00 6E 00 63 00 68 00 00 00 .a.u.n.c .h... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer\Quick Launch" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8927, fnum = 13023 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x0 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13023 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8928, fnum = 13024 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13024, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=7171 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=57344 (0xE000) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]=55294 (0xD7FE) smb_vwv[15]=55765 (0xD9D5) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]=55294 (0xD7FE) smb_vwv[19]=55765 (0xD9D5) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2162 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=7235 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 E0 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER/QUICK LAUNCH] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch (fnum 13024) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Wed Dec 31 19:00:00 1969 size: 0 dosmode: 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch : setting dos mode 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer/Quick Launch) returning 040700 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2163 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=7299 smt_wct=3 smb_vwv[ 0]=13024 (0x32E0) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13024 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13024 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=7299 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 214 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xd6 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2164 of length 218 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=214 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=7363 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=32768 (0x8000) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=131 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 49 .r.o.s.o .f.t.\.I [060] 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 .n.t.e.r .n.e.t. [070] 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 .E.x.p.l .o.r.e.r [080] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8929, fnum = 13025 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x0 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13025 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8930, fnum = 13026 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13026, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=7363 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=57856 (0xE200) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]=55294 (0xD7FE) smb_vwv[15]=55765 (0xD9D5) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]=55294 (0xD7FE) smb_vwv[19]=55765 (0xD9D5) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2165 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=7427 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 E2 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer (fnum 13026) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Wed Dec 31 19:00:00 1969 size: 0 dosmode: 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer : setting dos mode 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) returning 040700 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2166 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=7491 smt_wct=3 smb_vwv[ 0]=13026 (0x32E2) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13026 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13026 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=7491 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 214 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xd6 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2167 of length 218 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=214 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=7555 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=32768 (0x8000) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=38400 (0x9600) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1536 (0x600) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=131 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 49 .r.o.s.o .f.t.\.I [060] 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 .n.t.e.r .n.e.t. [070] 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 .E.x.p.l .o.r.e.r [080] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8931, fnum = 13027 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x1 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52) fd_open: name %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer, flags = 01 mode = 0700, fd = -1. Is a directory [2003/10/07 09:49:33, 3] smbd/open.c:open_file(183) Error opening file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer (Is a directory) (local_flags=1) (flags=1) [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13027 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8932, fnum = 13028 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13028, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=7555 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=58368 (0xE400) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]=55294 (0xD7FE) smb_vwv[15]=55765 (0xD9D5) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]=55294 (0xD7FE) smb_vwv[19]=55765 (0xD9D5) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2168 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=7619 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 E4 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 01 2C 38 D0 ........ .....,8. [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer (fnum 13028) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Tue Oct 7 08:40:42 2003 size: 0 dosmode: 0 [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:40:42 2003 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2169 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=7683 smt_wct=3 smb_vwv[ 0]=13028 (0x32E4) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13028 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13028 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=7683 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 214 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xd6 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2170 of length 218 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=214 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=7747 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=32768 (0x8000) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=131 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 49 .r.o.s.o .f.t.\.I [060] 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 .n.t.e.r .n.e.t. [070] 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 .E.x.p.l .o.r.e.r [080] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\Internet Explorer" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8933, fnum = 13029 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x0 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13029 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8934, fnum = 13030 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13030, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=7747 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=58880 (0xE600) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]=55294 (0xD7FE) smb_vwv[15]=55765 (0xD9D5) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]=55294 (0xD7FE) smb_vwv[19]=55765 (0xD9D5) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2171 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=7811 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 E6 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/INTERNET EXPLORER] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer (fnum 13030) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Wed Dec 31 19:00:00 1969 size: 0 dosmode: 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer : setting dos mode 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/Internet Explorer) returning 040700 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2172 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=7875 smt_wct=3 smb_vwv[ 0]=13030 (0x32E6) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13030 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13030 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=7875 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 238 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xee [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2173 of length 242 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=238 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=7939 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=38912 (0x9800) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=155 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 43 .r.o.s.o .f.t.\.C [060] 00 4C 00 52 00 20 00 53 00 65 00 63 00 75 00 72 .L.R. .S .e.c.u.r [070] 00 69 00 74 00 79 00 20 00 43 00 6F 00 6E 00 66 .i.t.y. .C.o.n.f [080] 00 69 00 67 00 5C 00 76 00 31 00 2E 00 30 00 2E .i.g.\.v .1...0.. [090] 00 33 00 37 00 30 00 35 00 00 00 .3.7.0.5 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config\v1.0.3705" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8935, fnum = 13031 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x0 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13031 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8936, fnum = 13032 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13032, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=7939 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=59392 (0xE800) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]=55294 (0xD7FE) smb_vwv[15]=55765 (0xD9D5) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]=55294 (0xD7FE) smb_vwv[19]=55765 (0xD9D5) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2174 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8003 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 E8 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 (fnum 13032) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Wed Dec 31 19:00:00 1969 size: 0 dosmode: 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 : setting dos mode 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) returning 040700 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2175 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=8067 smt_wct=3 smb_vwv[ 0]=13032 (0x32E8) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13032 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13032 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=8067 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 238 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xee [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2176 of length 242 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=238 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8131 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=38912 (0x9800) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=38400 (0x9600) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1536 (0x600) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=155 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 43 .r.o.s.o .f.t.\.C [060] 00 4C 00 52 00 20 00 53 00 65 00 63 00 75 00 72 .L.R. .S .e.c.u.r [070] 00 69 00 74 00 79 00 20 00 43 00 6F 00 6E 00 66 .i.t.y. .C.o.n.f [080] 00 69 00 67 00 5C 00 76 00 31 00 2E 00 30 00 2E .i.g.\.v .1...0.. [090] 00 33 00 37 00 30 00 35 00 00 00 .3.7.0.5 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config\v1.0.3705" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8937, fnum = 13033 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x1 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52) fd_open: name %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705, flags = 01 mode = 0700, fd = -1. Is a directory [2003/10/07 09:49:33, 3] smbd/open.c:open_file(183) Error opening file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 (Is a directory) (local_flags=1) (flags=1) [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13033 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8938, fnum = 13034 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13034, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8131 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=59904 (0xEA00) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]=55294 (0xD7FE) smb_vwv[15]=55765 (0xD9D5) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]=55294 (0xD7FE) smb_vwv[19]=55765 (0xD9D5) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2177 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8195 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 EA 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 F9 22 A6 CD ........ .....".. [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 (fnum 13034) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Tue Oct 7 08:22:18 2003 size: 0 dosmode: 0 [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:22:18 2003 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2178 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=8259 smt_wct=3 smb_vwv[ 0]=13034 (0x32EA) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13034 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13034 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=8259 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 238 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xee [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2179 of length 242 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=238 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8323 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=38912 (0x9800) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=155 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 43 .r.o.s.o .f.t.\.C [060] 00 4C 00 52 00 20 00 53 00 65 00 63 00 75 00 72 .L.R. .S .e.c.u.r [070] 00 69 00 74 00 79 00 20 00 43 00 6F 00 6E 00 66 .i.t.y. .C.o.n.f [080] 00 69 00 67 00 5C 00 76 00 31 00 2E 00 30 00 2E .i.g.\.v .1...0.. [090] 00 33 00 37 00 30 00 35 00 00 00 .3.7.0.5 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config\v1.0.3705" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8939, fnum = 13035 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x0 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13035 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8940, fnum = 13036 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13036, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8323 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=60416 (0xEC00) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]=55294 (0xD7FE) smb_vwv[15]=55765 (0xD9D5) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]=55294 (0xD7FE) smb_vwv[19]=55765 (0xD9D5) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2180 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8387 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 EC 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG/V1.0.3705] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 (fnum 13036) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Wed Dec 31 19:00:00 1969 size: 0 dosmode: 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 : setting dos mode 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config/v1.0.3705) returning 040700 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2181 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=8451 smt_wct=3 smb_vwv[ 0]=13036 (0x32EC) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13036 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13036 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=8451 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 218 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xda [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2182 of length 222 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=218 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8515 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=33792 (0x8400) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=135 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 43 .r.o.s.o .f.t.\.C [060] 00 4C 00 52 00 20 00 53 00 65 00 63 00 75 00 72 .L.R. .S .e.c.u.r [070] 00 69 00 74 00 79 00 20 00 43 00 6F 00 6E 00 66 .i.t.y. .C.o.n.f [080] 00 69 00 67 00 00 00 .i.g... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8941, fnum = 13037 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x0 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13037 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8942, fnum = 13038 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13038, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8515 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=60928 (0xEE00) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 4938 (0x134A) smb_vwv[15]=55761 (0xD9D1) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 4938 (0x134A) smb_vwv[19]=55761 (0xD9D1) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2183 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8579 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 EE 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config (fnum 13038) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Wed Dec 31 19:00:00 1969 size: 0 dosmode: 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config : setting dos mode 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) returning 040700 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2184 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=8643 smt_wct=3 smb_vwv[ 0]=13038 (0x32EE) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13038 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13038 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=8643 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 218 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xda [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2185 of length 222 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=218 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8707 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=33792 (0x8400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=38400 (0x9600) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1536 (0x600) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=135 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 43 .r.o.s.o .f.t.\.C [060] 00 4C 00 52 00 20 00 53 00 65 00 63 00 75 00 72 .L.R. .S .e.c.u.r [070] 00 69 00 74 00 79 00 20 00 43 00 6F 00 6E 00 66 .i.t.y. .C.o.n.f [080] 00 69 00 67 00 00 00 .i.g... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8943, fnum = 13039 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x1 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52) fd_open: name %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config, flags = 01 mode = 0700, fd = -1. Is a directory [2003/10/07 09:49:33, 3] smbd/open.c:open_file(183) Error opening file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config (Is a directory) (local_flags=1) (flags=1) [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13039 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8944, fnum = 13040 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13040, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8707 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=61440 (0xF000) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 4938 (0x134A) smb_vwv[15]=55761 (0xD9D1) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 4938 (0x134A) smb_vwv[19]=55761 (0xD9D1) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2186 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8771 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 F0 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 80 62 8A A5 CD ........ ....b... [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config (fnum 13040) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Tue Oct 7 08:22:17 2003 size: 0 dosmode: 0 [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:22:17 2003 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2187 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=8835 smt_wct=3 smb_vwv[ 0]=13040 (0x32F0) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13040 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13040 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=8835 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 218 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xda [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2188 of length 222 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=218 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8899 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=33792 (0x8400) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=135 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 43 .r.o.s.o .f.t.\.C [060] 00 4C 00 52 00 20 00 53 00 65 00 63 00 75 00 72 .L.R. .S .e.c.u.r [070] 00 69 00 74 00 79 00 20 00 43 00 6F 00 6E 00 66 .i.t.y. .C.o.n.f [080] 00 69 00 67 00 00 00 .i.g... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft\CLR Security Config" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8945, fnum = 13041 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x0 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13041 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8946, fnum = 13042 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13042, open name = %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8899 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=61952 (0xF200) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 4938 (0x134A) smb_vwv[15]=55761 (0xD9D1) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 4938 (0x134A) smb_vwv[19]=55761 (0xD9D1) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2189 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=8963 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 F2 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT/CLR SECURITY CONFIG] -> [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config (fnum 13042) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Wed Dec 31 19:00:00 1969 size: 0 dosmode: 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config : setting dos mode 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inheriting from %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft/CLR Security Config) returning 040700 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2190 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=9027 smt_wct=3 smb_vwv[ 0]=13042 (0x32F2) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13042 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13042 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=9027 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 178 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xb2 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2191 of length 182 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=178 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=9091 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=23552 (0x5C00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=95 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 00 00 .r.o.s.o .f.t... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inheriting from %u_bombur_%H_Win2K/Application Data [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8947, fnum = 13043 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x0 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13043 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8948, fnum = 13044 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13044, open name = %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=9091 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=62464 (0xF400) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=31411 (0x7AB3) smb_vwv[ 7]=55760 (0xD9D0) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=31411 (0x7AB3) smb_vwv[11]=55760 (0xD9D0) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 4938 (0x134A) smb_vwv[15]=55761 (0xD9D1) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 4938 (0x134A) smb_vwv[19]=55761 (0xD9D1) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2192 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=9155 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 F4 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft (fnum 13044) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:23 2003 modtime: Wed Dec 31 19:00:00 1969 size: 0 dosmode: 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft : setting dos mode 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inheriting from %u_bombur_%H_Win2K/Application Data [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) returning 040700 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2193 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=9219 smt_wct=3 smb_vwv[ 0]=13044 (0x32F4) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13044 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13044 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=9219 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 178 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xb2 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2194 of length 182 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=178 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=9283 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=23552 (0x5C00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=38400 (0x9600) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1536 (0x600) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=95 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 00 00 .r.o.s.o .f.t... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inheriting from %u_bombur_%H_Win2K/Application Data [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8949, fnum = 13045 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x1 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52) fd_open: name %u_bombur_%H_Win2K/Application Data/Microsoft, flags = 01 mode = 0700, fd = -1. Is a directory [2003/10/07 09:49:33, 3] smbd/open.c:open_file(183) Error opening file %u_bombur_%H_Win2K/Application Data/Microsoft (Is a directory) (local_flags=1) (flags=1) [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13045 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8950, fnum = 13046 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13046, open name = %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=9283 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=62976 (0xF600) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=31411 (0x7AB3) smb_vwv[ 7]=55760 (0xD9D0) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=31411 (0x7AB3) smb_vwv[11]=55760 (0xD9D0) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 4938 (0x134A) smb_vwv[15]=55761 (0xD9D1) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 4938 (0x134A) smb_vwv[19]=55761 (0xD9D1) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2195 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=9347 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 F6 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 80 62 8A A5 CD ........ ....b... [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft (fnum 13046) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:23 2003 modtime: Tue Oct 7 08:22:17 2003 size: 0 dosmode: 0 [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:22:17 2003 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2196 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=9411 smt_wct=3 smb_vwv[ 0]=13046 (0x32F6) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13046 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13046 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=9411 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 178 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xb2 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2197 of length 182 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=178 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=9475 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=23552 (0x5C00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=95 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 4D 00 69 00 63 .D.a.t.a .\.M.i.c [050] 00 72 00 6F 00 73 00 6F 00 66 00 74 00 00 00 .r.o.s.o .f.t... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Microsoft" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inheriting from %u_bombur_%H_Win2K/Application Data [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8951, fnum = 13047 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Microsoft, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x0 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13047 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8952, fnum = 13048 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13048, open name = %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=9475 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=63488 (0xF800) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=31411 (0x7AB3) smb_vwv[ 7]=55760 (0xD9D0) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=31411 (0x7AB3) smb_vwv[11]=55760 (0xD9D0) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 4938 (0x134A) smb_vwv[15]=55761 (0xD9D1) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 4938 (0x134A) smb_vwv[19]=55761 (0xD9D1) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2198 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=9539 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 F8 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Microsoft" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/MICROSOFT] -> [%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Microsoft] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Microsoft (fnum 13048) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:23 2003 modtime: Wed Dec 31 19:00:00 1969 size: 0 dosmode: 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Microsoft : setting dos mode 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Microsoft [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inheriting from %u_bombur_%H_Win2K/Application Data [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Microsoft) returning 040700 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2199 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=9603 smt_wct=3 smb_vwv[ 0]=13048 (0x32F8) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13048 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13048 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=9603 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/10/07 09:49:33, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2003/10/07 09:49:33, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2003/10/07 09:49:33, 5] smbd/uid.c:change_to_root_user(218) change_to_root_user: now uid=(0,0) gid=(0,0) [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 258 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x102 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2200 of length 262 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=258 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=9667 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=44032 (0xAC00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=175 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 49 00 64 00 65 .D.a.t.a .\.I.d.e [050] 00 6E 00 74 00 69 00 74 00 69 00 65 00 73 00 5C .n.t.i.t .i.e.s.\ [060] 00 7B 00 32 00 30 00 35 00 43 00 30 00 30 00 45 .{.2.0.5 .C.0.0.E [070] 00 33 00 2D 00 37 00 43 00 43 00 34 00 2D 00 34 .3.-.7.C .C.4.-.4 [080] 00 43 00 41 00 43 00 2D 00 42 00 44 00 31 00 42 .C.A.C.- .B.D.1.B [090] 00 2D 00 31 00 45 00 31 00 35 00 45 00 34 00 44 .-.1.E.1 .5.E.4.D [0A0] 00 31 00 32 00 34 00 31 00 46 00 7D 00 00 00 .1.2.4.1 .F.}... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (742, 16269) - sec_ctx_stack_ndx = 0 [2003/10/07 09:49:33, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1208164849-443131069-1473614131-2484 contains 8 SIDs SID[ 0]: S-1-5-21-1208164849-443131069-1473614131-2484 SID[ 1]: S-1-5-21-1208164849-443131069-1473614131-33539 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1208164849-443131069-1473614131-1021 SID[ 6]: S-1-5-21-1208164849-443131069-1473614131-1601 SID[ 7]: S-1-5-21-1208164849-443131069-1473614131-1615 [2003/10/07 09:49:33, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 742 Primary group is 16269 and contains 5 supplementary groups Group[ 0]: 16269 Group[ 1]: 16269 Group[ 2]: 10 Group[ 3]: 300 Group[ 4]: 307 [2003/10/07 09:49:33, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(0,742) gid=(0,16269) [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities\{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inheriting from %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8953, fnum = 13049 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x0 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13049 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8954, fnum = 13050 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13050, open name = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=9667 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=64000 (0xFA00) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 4938 (0x134A) smb_vwv[15]=55761 (0xD9D1) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 4938 (0x134A) smb_vwv[19]=55761 (0xD9D1) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2201 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=9731 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 FA 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} (fnum 13050) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Wed Dec 31 19:00:00 1969 size: 0 dosmode: 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} : setting dos mode 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inheriting from %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) returning 040700 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2202 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=9795 smt_wct=3 smb_vwv[ 0]=13050 (0x32FA) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13050 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13050 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=9795 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 258 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x102 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2203 of length 262 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=258 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=9859 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=44032 (0xAC00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=38400 (0x9600) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1536 (0x600) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=175 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 49 00 64 00 65 .D.a.t.a .\.I.d.e [050] 00 6E 00 74 00 69 00 74 00 69 00 65 00 73 00 5C .n.t.i.t .i.e.s.\ [060] 00 7B 00 32 00 30 00 35 00 43 00 30 00 30 00 45 .{.2.0.5 .C.0.0.E [070] 00 33 00 2D 00 37 00 43 00 43 00 34 00 2D 00 34 .3.-.7.C .C.4.-.4 [080] 00 43 00 41 00 43 00 2D 00 42 00 44 00 31 00 42 .C.A.C.- .B.D.1.B [090] 00 2D 00 31 00 45 00 31 00 35 00 45 00 34 00 44 .-.1.E.1 .5.E.4.D [0A0] 00 31 00 32 00 34 00 31 00 46 00 7D 00 00 00 .1.2.4.1 .F.}... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities\{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inheriting from %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8955, fnum = 13051 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x1 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52) fd_open: name %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}, flags = 01 mode = 0700, fd = -1. Is a directory [2003/10/07 09:49:33, 3] smbd/open.c:open_file(183) Error opening file %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} (Is a directory) (local_flags=1) (flags=1) [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13051 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8956, fnum = 13052 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13052, open name = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=9859 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=64512 (0xFC00) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 4938 (0x134A) smb_vwv[15]=55761 (0xD9D1) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 4938 (0x134A) smb_vwv[19]=55761 (0xD9D1) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2204 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=9923 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 FC 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 80 62 8A A5 CD ........ ....b... [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} (fnum 13052) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Tue Oct 7 08:22:17 2003 size: 0 dosmode: 0 [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:22:17 2003 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2205 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=9987 smt_wct=3 smb_vwv[ 0]=13052 (0x32FC) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13052 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13052 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=9987 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 258 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x102 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2206 of length 262 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=258 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=10051 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=44032 (0xAC00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=175 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 49 00 64 00 65 .D.a.t.a .\.I.d.e [050] 00 6E 00 74 00 69 00 74 00 69 00 65 00 73 00 5C .n.t.i.t .i.e.s.\ [060] 00 7B 00 32 00 30 00 35 00 43 00 30 00 30 00 45 .{.2.0.5 .C.0.0.E [070] 00 33 00 2D 00 37 00 43 00 43 00 34 00 2D 00 34 .3.-.7.C .C.4.-.4 [080] 00 43 00 41 00 43 00 2D 00 42 00 44 00 31 00 42 .C.A.C.- .B.D.1.B [090] 00 2D 00 31 00 45 00 31 00 35 00 45 00 34 00 44 .-.1.E.1 .5.E.4.D [0A0] 00 31 00 32 00 34 00 31 00 46 00 7D 00 00 00 .1.2.4.1 .F.}... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities\{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inheriting from %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8957, fnum = 13053 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x0 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13053 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8958, fnum = 13054 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13054, open name = %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=10051 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65024 (0xFE00) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 4938 (0x134A) smb_vwv[15]=55761 (0xD9D1) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 4938 (0x134A) smb_vwv[19]=55761 (0xD9D1) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2207 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=10115 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 66 00 FE 32 EC 03 00 00 72 00 00 00 00 00 00 .f..2... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] -> [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} (fnum 13054) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Wed Dec 31 19:00:00 1969 size: 0 dosmode: 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} : setting dos mode 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F} [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inheriting from %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities/{205C00E3-7CC4-4CAC-BD1B-1E15E4D1241F}) returning 040700 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2208 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=10179 smt_wct=3 smb_vwv[ 0]=13054 (0x32FE) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13054 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13054 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=10179 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 180 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xb4 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2209 of length 184 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=180 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=10243 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=24064 (0x5E00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=97 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 49 00 64 00 65 .D.a.t.a .\.I.d.e [050] 00 6E 00 74 00 69 00 74 00 69 00 65 00 73 00 00 .n.t.i.t .i.e.s.. [060] 00 . [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inheriting from %u_bombur_%H_Win2K/Application Data [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8959, fnum = 13055 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x0 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13055 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8960, fnum = 13056 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13056, open name = %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=10243 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 307 (0x133) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 4938 (0x134A) smb_vwv[15]=55761 (0xD9D1) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 4938 (0x134A) smb_vwv[19]=55761 (0xD9D1) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2210 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=10307 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 69 00 00 33 EC 03 00 00 72 00 00 00 00 00 00 .i..3... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities (fnum 13056) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Wed Dec 31 19:00:00 1969 size: 0 dosmode: 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Identities : setting dos mode 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inheriting from %u_bombur_%H_Win2K/Application Data [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) returning 040700 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2211 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=10371 smt_wct=3 smb_vwv[ 0]=13056 (0x3300) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13056 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13056 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=10371 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 180 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xb4 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2212 of length 184 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=180 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=10435 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=24064 (0x5E00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=38400 (0x9600) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1536 (0x600) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=97 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 49 00 64 00 65 .D.a.t.a .\.I.d.e [050] 00 6E 00 74 00 69 00 74 00 69 00 65 00 73 00 00 .n.t.i.t .i.e.s.. [060] 00 . [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x16, desired_access = 0x20196 file_attributes = 0x80, share_access = 0x6, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8001 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x20196, share access 0x6, file attributes 0x80 to open_mode 0x8031 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inheriting from %u_bombur_%H_Win2K/Application Data [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8961, fnum = 13057 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities, share_mode = 8031, ofun = 1, mode = 700, oplock request = 3 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x1 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 10] smbd/open.c:fd_open(52) fd_open: name %u_bombur_%H_Win2K/Application Data/Identities, flags = 01 mode = 0700, fd = -1. Is a directory [2003/10/07 09:49:33, 3] smbd/open.c:open_file(183) Error opening file %u_bombur_%H_Win2K/Application Data/Identities (Is a directory) (local_flags=1) (flags=1) [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13057 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8962, fnum = 13058 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13058, open name = %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=10435 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 307 (0x133) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 4938 (0x134A) smb_vwv[15]=55761 (0xD9D1) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 4938 (0x134A) smb_vwv[19]=55761 (0xD9D1) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2213 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=10499 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 69 00 02 33 EC 03 00 00 72 00 00 00 00 00 00 .i..3... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 80 62 8A A5 CD ........ ....b... [020] 8C C3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities (fnum 13058) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Tue Oct 7 08:22:17 2003 size: 0 dosmode: 0 [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3072) call_trans2setfilepathinfo: setting pending modtime to Tue Oct 7 08:22:17 2003 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2214 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=10563 smt_wct=3 smb_vwv[ 0]=13058 (0x3302) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13058 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13058 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=10563 smt_wct=0 smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,39) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,39) wrote 39 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 180 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0xb4 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2215 of length 184 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=180 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=10627 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=24064 (0x5E00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 4097 (0x1001) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=97 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 5C 00 25 00 75 00 5F 00 62 00 6F 00 6D 00 62 .\.%.u._ .b.o.m.b [010] 00 75 00 72 00 5F 00 25 00 48 00 5F 00 57 00 69 .u.r._.% .H._.W.i [020] 00 6E 00 32 00 4B 00 5C 00 41 00 70 00 70 00 6C .n.2.K.\ .A.p.p.l [030] 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 20 .i.c.a.t .i.o.n. [040] 00 44 00 61 00 74 00 61 00 5C 00 49 00 64 00 65 .D.a.t.a .\.I.d.e [050] 00 6E 00 74 00 69 00 74 00 69 00 65 00 73 00 00 .n.t.i.t .i.e.s.. [060] 00 . [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 10] smbd/nttrans.c:reply_ntcreate_and_X(597) reply_ntcreateX: flags = 0x10, desired_access = 0x100100 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_create_disposition(343) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(424) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2003/10/07 09:49:33, 10] smbd/nttrans.c:map_share_mode(469) map_share_mode: Mapped desired access 0x100100, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\%u_bombur_%H_Win2K\Application Data\Identities" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inheriting from %u_bombur_%H_Win2K/Application Data [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) returning 0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8963, fnum = 13059 (1 used) [2003/10/07 09:49:33, 10] smbd/open.c:open_file_shared1(848) open_file_shared: fname = %u_bombur_%H_Win2K/Application Data/Identities, share_mode = 8040, ofun = 1, mode = 700, oplock request = 0 [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 4] smbd/open.c:open_file_shared1(1014) calling open_file with flags=0x0 flags2=0x0 mode=0700 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13059 (0 used) [2003/10/07 09:49:33, 5] smbd/files.c:file_new(122) allocated file structure 8964, fnum = 13060 (1 used) [2003/10/07 09:49:33, 5] smbd/open.c:open_directory(1355) open_directory: opening directory %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 5] smbd/nttrans.c:reply_ntcreate_and_X(953) reply_ntcreate_and_X: fnum = 13060, open name = %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=10627 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1024 (0x400) smb_vwv[ 3]= 307 (0x133) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4938 (0x134A) smb_vwv[ 7]=55761 (0xD9D1) smb_vwv[ 8]=50060 (0xC38C) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]= 4938 (0x134A) smb_vwv[11]=55761 (0xD9D1) smb_vwv[12]=50060 (0xC38C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 4938 (0x134A) smb_vwv[15]=55761 (0xD9D1) smb_vwv[16]=50060 (0xC38C) smb_vwv[17]= 1 (0x1) smb_vwv[18]= 4938 (0x134A) smb_vwv[19]=55761 (0xD9D1) smb_vwv[20]=50060 (0xC38C) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 0 (0x0) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,107) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,107) wrote 107 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 116 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x74 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2216 of length 120 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=116 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=212 smb_uid=102 smb_mid=10691 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 40 (0x28) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=51 [2003/10/07 09:49:33, 10] lib/util.c:dump_data(1825) [000] 00 69 00 04 33 EC 03 00 00 72 00 00 00 00 00 00 .i..3... .r...... [010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 ........ ........ [030] 00 00 00 ... [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "%u_bombur_%H_Win2K/Application Data/Identities" [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 10] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [%U_BOMBUR_%H_WIN2K/APPLICATION DATA/IDENTITIES] -> [%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 3] lib/util.c:unix_clean_name(580) unix_clean_name [%u_bombur_%H_Win2K/Application Data/Identities] [2003/10/07 09:49:33, 3] smbd/trans2.c:call_trans2setfilepathinfo(2551) call_trans2setfilepathinfo(8) %u_bombur_%H_Win2K/Application Data/Identities (fnum 13060) info_level=1004 totdata=40 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 6] smbd/trans2.c:call_trans2setfilepathinfo(3031) actime: Tue Oct 7 09:49:24 2003 modtime: Wed Dec 31 19:00:00 1969 size: 0 dosmode: 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 10] smbd/trans2.c:call_trans2setfilepathinfo(3088) call_trans2setfilepathinfo: file %u_bombur_%H_Win2K/Application Data/Identities : setting dos mode 90 [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(122) dos_mode: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1473) is_in_path: %u_bombur_%H_Win2K/Application Data/Identities [2003/10/07 09:49:33, 8] lib/util.c:is_in_path(1477) is_in_path: no name list. [2003/10/07 09:49:33, 8] smbd/dosmode.c:dos_mode(168) dos_mode returning d [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(58) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inheriting from %u_bombur_%H_Win2K/Application Data [2003/10/07 09:49:33, 2] smbd/dosmode.c:unix_mode(66) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) inherit mode 40700 [2003/10/07 09:49:33, 3] smbd/dosmode.c:unix_mode(110) unix_mode(%u_bombur_%H_Win2K/Application Data/Identities) returning 040700 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(178) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 131012 [2003/10/07 09:49:33, 9] smbd/trans2.c:send_trans2_replies(180) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(407) write_socket(19,62) [2003/10/07 09:49:33, 6] lib/util_sock.c:write_socket(410) write_socket(19,62) wrote 62 [2003/10/07 09:49:33, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 41 [2003/10/07 09:49:33, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2003/10/07 09:49:33, 3] smbd/process.c:process_smb(890) Transaction 2217 of length 45 [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=10755 smt_wct=3 smb_vwv[ 0]=13060 (0x3304) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2003/10/07 09:49:33, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 28556) [2003/10/07 09:49:33, 4] smbd/uid.c:change_to_user(122) change_to_user: Skipping user change - already user [2003/10/07 09:49:33, 3] smbd/reply.c:reply_close(2449) close directory fnum=13060 [2003/10/07 09:49:33, 5] smbd/files.c:file_free(385) freed files structure 13060 (0 used) [2003/10/07 09:49:33, 5] lib/util.c:show_msg(456)