smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8647 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=176 smb_uid=100 smb_mid=44608 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 1227, fnum = 5323 (1 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 385, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=1) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 6 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 385, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 5323, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=176 smb_uid=100 smb_mid=44608 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=51968 (0xCB00) smb_vwv[ 3]= 276 (0x114) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8648 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=44672 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5323 (0x14CB) smb_vwv[ 3]= 16 (0x10) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 8192 (0x2000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8192 (0x2000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=16 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 16, count = 8192, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 16, count_out = 8192 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 16 8192 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 16 8192 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=16 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 16, size = 8192, returned 117 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5323 max=8192 nread=117 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=176 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=44672 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 117 (0x75) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=117 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 69 66 20 65 78 69 73 74 20 4E 3A 5C 73 74 61 72 if exist N:\star [010] 74 2E 74 78 74 20 67 6F 74 6F 20 32 30 0D 0A 67 t.txt go to 20..g [020] 6F 74 6F 20 31 30 0D 0A 3A 32 30 0D 0A 53 3A 0D oto 10.. :20..S:. [030] 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 5C .cd "\am brasoft\ [040] 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A 3A tafel to taal"..: [050] 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 63 30..star t /w tsc [060] 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 6F hlmenu.e xe..goto [070] 20 31 30 0D 0A 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,180) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,180) wrote 180 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2488 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=448 smb_uid=100 smb_mid=9920 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 525, fnum = 4621 (1 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[4]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 385, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 24. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=1) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 7 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 385, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 4621, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=448 smb_uid=100 smb_mid=9920 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 3328 (0xD00) smb_vwv[ 3]= 274 (0x112) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2489 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=9984 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4621 (0x120D) smb_vwv[ 3]= 16 (0x10) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 8192 (0x2000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8192 (0x2000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=16 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 16, count = 8192, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 16, count_out = 8192 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 24 12 16 8192 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 24 12 16 8192 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=16 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 16, size = 8192, returned 117 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4621 max=8192 nread=117 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=176 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=9984 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 117 (0x75) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=117 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 69 66 20 65 78 69 73 74 20 4E 3A 5C 73 74 61 72 if exist N:\star [010] 74 2E 74 78 74 20 67 6F 74 6F 20 32 30 0D 0A 67 t.txt go to 20..g [020] 6F 74 6F 20 31 30 0D 0A 3A 32 30 0D 0A 53 3A 0D oto 10.. :20..S:. [030] 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 5C .cd "\am brasoft\ [040] 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A 3A tafel to taal"..: [050] 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 63 30..star t /w tsc [060] 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 6F hlmenu.e xe..goto [070] 20 31 30 0D 0A 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,180) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,180) wrote 180 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2490 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=9984 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4621 (0x120D) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8075 (0x1F8B) smb_vwv[ 6]= 8075 (0x1F8B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8075 (0x1F8B) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=8075 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 8075, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 8075 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 24 12 133 8075 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 24 12 133 8075 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=8075 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 8075, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4621 max=8075 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=9984 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14152 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64320 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6151 (0x1807) smb_vwv[ 3]= 61 (0x3D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=61 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 61, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 61, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 61 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 61 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=61 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 61, size = 512, returned 72 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6151 max=512 nread=72 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=131 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64320 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 72 (0x48) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=72 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 53 3A 0D 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F S:..cd " \ambraso [010] 66 74 5C 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 ft\tafel totaal" [020] 0D 0A 3A 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 ..:30..s tart /w [030] 74 73 63 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 tschlmen u.exe..g [040] 6F 74 6F 20 31 30 0D 0A oto 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,135) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,135) wrote 135 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14153 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64320 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6151 (0x1807) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 440 (0x1B8) smb_vwv[ 6]= 440 (0x1B8) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 440 (0x1B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=440 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 440, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 440 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 440 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 440 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=440 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 440, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6151 max=440 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64320 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14154 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64384 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6151 (0x1807) smb_vwv[ 3]= 65 (0x41) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=65 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 65, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 65, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 65 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 65 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=65 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 65, size = 512, returned 68 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6151 max=512 nread=68 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=127 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64384 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 68 (0x44) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=68 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 5C 74 cd "\amb rasoft\t [010] 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A 3A 33 afel tot aal"..:3 [020] 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 63 68 0..start /w tsch [030] 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 6F 20 lmenu.ex e..goto [040] 31 30 0D 0A 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,131) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,131) wrote 131 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14155 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64384 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6151 (0x1807) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 444 (0x1BC) smb_vwv[ 6]= 444 (0x1BC) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 444 (0x1BC) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=444 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 444, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 444 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 444 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 444 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=444 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 444, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6151 max=444 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64384 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 3764 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=2627 smt_wct=3 smb_vwv[ 0]= 4831 (0x12DF) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13021) conn 0x83319b0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=21 fnum=4831 (numopen=2) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 7 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[5]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 385, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 5 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 6 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=1) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 4831 (1 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=2627 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 11609 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1260 smb_uid=100 smb_mid=13697 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13032) conn 0x832ef20 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 1550, fnum = 5646 (1 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=1) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 7 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 5646, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=1260 smb_uid=100 smb_mid=13697 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 278 (0x116) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 72 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x48 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 11610 of length 76 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1260 smb_uid=100 smb_mid=13761 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 0E 16 ED 03 ....... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13032) conn 0x832ef20 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2363) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452) call_trans2qfilepathinfo Ambra.bat (fnum = 5646) level=1005 call=7 total_data=0 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2611) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,88) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,88) wrote 88 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14476 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=488 smb_uid=100 smb_mid=60737 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13028) conn 0x832ee88 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 2143, fnum = 6239 (1 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=1) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 8 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[6]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[7]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 6239, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=488 smb_uid=100 smb_mid=60737 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=24320 (0x5F00) smb_vwv[ 3]= 280 (0x118) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 6241 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=40449 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4694 (0x1256) smb_vwv[ 3]= 56 (0x38) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13042) conn 0x832e9c0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=56 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 56, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 56, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 56 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 56 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=56 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 56, size = 512, returned 77 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4694 max=512 nread=77 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=136 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=40449 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 77 (0x4D) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=77 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 3A 32 30 0D 0A 53 3A 0D 0A 63 64 20 22 5C 61 6D :20..S:. .cd "\am [010] 62 72 61 73 6F 66 74 5C 74 61 66 65 6C 20 74 6F brasoft\ tafel to [020] 74 61 61 6C 22 0D 0A 3A 33 30 0D 0A 73 74 61 72 taal"..: 30..star [030] 74 20 2F 77 20 74 73 63 68 6C 6D 65 6E 75 2E 65 t /w tsc hlmenu.e [040] 78 65 0D 0A 67 6F 74 6F 20 31 30 0D 0A xe..goto 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,140) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,140) wrote 140 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 6242 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=40449 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4694 (0x1256) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 435 (0x1B3) smb_vwv[ 6]= 435 (0x1B3) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 435 (0x1B3) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13042) conn 0x832e9c0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=435 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 435, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 435 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 133 435 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 133 435 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=435 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 435, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4694 max=435 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=40449 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8252 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22592 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5301 (0x14B5) smb_vwv[ 3]= 65 (0x41) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=65 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 65, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 65, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 65 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 65 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=65 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 65, size = 512, returned 68 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5301 max=512 nread=68 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=127 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22592 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 68 (0x44) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=68 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 5C 74 cd "\amb rasoft\t [010] 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A 3A 33 afel tot aal"..:3 [020] 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 63 68 0..start /w tsch [030] 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 6F 20 lmenu.ex e..goto [040] 31 30 0D 0A 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,131) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,131) wrote 131 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8253 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22592 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5301 (0x14B5) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 444 (0x1BC) smb_vwv[ 6]= 444 (0x1BC) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 444 (0x1BC) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=444 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 444, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 444 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 133 444 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 133 444 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=444 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 444, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5301 max=444 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22592 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8254 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22656 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5301 (0x14B5) smb_vwv[ 3]= 95 (0x5F) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=95 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 95, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 95, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 95 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 95 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=95 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 95, size = 512, returned 38 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5301 max=512 nread=38 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=97 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22656 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 38 (0x26) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=38 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 3A 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 :30..sta rt /w ts [010] 63 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 chlmenu. exe..got [020] 6F 20 31 30 0D 0A o 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,101) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,101) wrote 101 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8255 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22656 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5301 (0x14B5) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 474 (0x1DA) smb_vwv[ 6]= 474 (0x1DA) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 474 (0x1DA) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=474 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 474, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 474 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 133 474 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 133 474 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=474 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 474, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5301 max=474 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22656 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8649 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=44672 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5323 (0x14CB) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8075 (0x1F8B) smb_vwv[ 6]= 8075 (0x1F8B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8075 (0x1F8B) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=8075 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 8075, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 8075 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 8075 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 8075 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=8075 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 8075, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5323 max=8075 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=44672 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8650 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=44736 smt_wct=3 smb_vwv[ 0]= 5323 (0x14CB) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=7 fnum=5323 (numopen=1) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 8 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[3]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 890, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 3 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 7 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=0) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 5323 (0 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=44736 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 102 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x66 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8651 of length 106 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=102 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=176 smb_uid=100 smb_mid=44800 smt_wct=15 smb_vwv[ 0]= 34 (0x22) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 34 (0x22) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=37 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 73 00 74 00 61 00 72 00 74 00 2E 00 74 00 78 .s.t.a.r .t...t.x [020] 00 74 00 00 00 .t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2findfirst(1351) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "start.txt" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210) stat_cache_lookup: lookup failed for name [START.TXT] [2006/06/21 14:19:27, 5] smbd/statcache.c:stat_cache_add(135) stat_cache_add: Added entry (832bf20:sizea) START.TXT -> start.txt [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(170) conversion finished start.txt -> start.txt [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1404) dir=./, mask = start.txt [2006/06/21 14:19:27, 5] smbd/dir.c:dptr_create(371) dptr_create dir=./ [2006/06/21 14:19:27, 3] smbd/dir.c:dptr_create(476) creating new dirptr 256 for path ./, expect_close = 1 [2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1431) dptr_num is 256, wcard = start.txt, attr = 22 [2006/06/21 14:19:27, 8] smbd/trans2.c:call_trans2findfirst(1436) dirpath=<./> dontdescend=<> [2006/06/21 14:19:27, 8] smbd/trans2.c:get_lanman2_dir_entry(869) get_lanman2_dir_entry:readdir on dirptr 0x82bcfe8 now at offset -1 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: ./start.txt [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2006/06/21 14:19:27, 5] smbd/trans2.c:get_lanman2_dir_entry(959) get_lanman2_dir_entry found ./start.txt fname=start.txt [2006/06/21 14:19:27, 10] smbd/trans2.c:get_lanman2_dir_entry(1043) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1482) call_trans2findfirst - (2) closing dptr_num 256 [2006/06/21 14:19:27, 4] smbd/dir.c:dptr_close_internal(220) closing dptr key 256 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 10, data_sent_thistime = 112, useable_space = 131010 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 10, data_to_send = 112, paramsize = 10, datasize = 112 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,184) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,184) wrote 184 [2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1518) SMBtrans2 mask=start.txt directory=./ dirtype=22 numentries=1 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2491 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10048 smt_wct=3 smb_vwv[ 0]= 4621 (0x120D) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=24 fnum=4621 (numopen=1) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 7 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[2]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 257, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 2 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 6 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=0) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 4621 (0 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10048 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14156 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64448 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6151 (0x1807) smb_vwv[ 3]= 95 (0x5F) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=95 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 95, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 95, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 95 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 95 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=95 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 95, size = 512, returned 38 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6151 max=512 nread=38 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=97 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64448 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 38 (0x26) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=38 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 3A 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 :30..sta rt /w ts [010] 63 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 chlmenu. exe..got [020] 6F 20 31 30 0D 0A o 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,101) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,101) wrote 101 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14157 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64448 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6151 (0x1807) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 474 (0x1DA) smb_vwv[ 6]= 474 (0x1DA) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 474 (0x1DA) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=474 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 474, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 474 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 474 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 474 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=474 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 474, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6151 max=474 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64448 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14158 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64512 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6151 (0x1807) smb_vwv[ 3]= 100 (0x64) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=100 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 100, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 100, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 100 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 100 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=100 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 100, size = 512, returned 33 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6151 max=512 nread=33 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=92 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64512 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 33 (0x21) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=33 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 73 74 61 72 74 20 2F 77 20 74 73 63 68 6C 6D 65 start /w tschlme [010] 6E 75 2E 65 78 65 0D 0A 67 6F 74 6F 20 31 30 0D nu.exe.. goto 10. [020] 0A . [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,96) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,96) wrote 96 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14159 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64512 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6151 (0x1807) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 479 (0x1DF) smb_vwv[ 6]= 479 (0x1DF) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 479 (0x1DF) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=479 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 479, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 479 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 479 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 479 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=479 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 479, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6151 max=479 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64512 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 3765 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1748 smb_uid=101 smb_mid=2691 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13021) conn 0x83319b0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 736, fnum = 4832 (2 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=2) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 7 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 386, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 4832, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=1748 smb_uid=101 smb_mid=2691 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=57344 (0xE000) smb_vwv[ 3]= 274 (0x112) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 3766 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=2755 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4832 (0x12E0) smb_vwv[ 3]= 16 (0x10) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 8192 (0x2000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8192 (0x2000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13021) conn 0x83319b0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=16 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 16, count = 8192, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 16, count_out = 8192 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 16 8192 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 16 8192 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=16 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 16, size = 8192, returned 117 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4832 max=8192 nread=117 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=176 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=2755 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 117 (0x75) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=117 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 69 66 20 65 78 69 73 74 20 4E 3A 5C 73 74 61 72 if exist N:\star [010] 74 2E 74 78 74 20 67 6F 74 6F 20 32 30 0D 0A 67 t.txt go to 20..g [020] 6F 74 6F 20 31 30 0D 0A 3A 32 30 0D 0A 53 3A 0D oto 10.. :20..S:. [030] 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 5C .cd "\am brasoft\ [040] 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A 3A tafel to taal"..: [050] 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 63 30..star t /w tsc [060] 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 6F hlmenu.e xe..goto [070] 20 31 30 0D 0A 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,180) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,180) wrote 180 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 3767 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=2755 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4832 (0x12E0) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8075 (0x1F8B) smb_vwv[ 6]= 8075 (0x1F8B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8075 (0x1F8B) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13021) conn 0x83319b0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=8075 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 8075, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 8075 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 8075 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 8075 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=8075 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 8075, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4832 max=8075 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=2755 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 11611 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13825 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5646 (0x160E) smb_vwv[ 3]= 47 (0x2F) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13032) conn 0x832ef20 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=47 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 47, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 47, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 47 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 47 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=47 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 47, size = 512, returned 86 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5646 max=512 nread=86 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=145 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13825 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 86 (0x56) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=86 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 67 6F 74 6F 20 31 30 0D 0A 3A 32 30 0D 0A 53 3A goto 10. .:20..S: [010] 0D 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 ..cd "\a mbrasoft [020] 5C 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A \tafel t otaal".. [030] 3A 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 :30..sta rt /w ts [040] 63 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 chlmenu. exe..got [050] 6F 20 31 30 0D 0A o 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,149) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,149) wrote 149 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 11612 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13825 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5646 (0x160E) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 426 (0x1AA) smb_vwv[ 6]= 426 (0x1AA) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 426 (0x1AA) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13032) conn 0x832ef20 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=426 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 426, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 426 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 426 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 426 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=426 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 426, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5646 max=426 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13825 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14477 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=60801 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6239 (0x185F) smb_vwv[ 3]= 16 (0x10) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 8192 (0x2000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8192 (0x2000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13028) conn 0x832ee88 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=16 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 16, count = 8192, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 16, count_out = 8192 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 16 8192 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 16 8192 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=16 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 16, size = 8192, returned 117 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6239 max=8192 nread=117 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=176 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=60801 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 117 (0x75) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=117 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 69 66 20 65 78 69 73 74 20 4E 3A 5C 73 74 61 72 if exist N:\star [010] 74 2E 74 78 74 20 67 6F 74 6F 20 32 30 0D 0A 67 t.txt go to 20..g [020] 6F 74 6F 20 31 30 0D 0A 3A 32 30 0D 0A 53 3A 0D oto 10.. :20..S:. [030] 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 5C .cd "\am brasoft\ [040] 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A 3A tafel to taal"..: [050] 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 63 30..star t /w tsc [060] 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 6F hlmenu.e xe..goto [070] 20 31 30 0D 0A 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,180) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,180) wrote 180 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14478 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=60801 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6239 (0x185F) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8075 (0x1F8B) smb_vwv[ 6]= 8075 (0x1F8B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8075 (0x1F8B) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13028) conn 0x832ee88 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=8075 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 8075, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 8075 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 8075 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 8075 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=8075 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 8075, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6239 max=8075 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=60801 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 6243 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=40513 smt_wct=3 smb_vwv[ 0]= 4694 (0x1256) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13042) conn 0x832e9c0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=20 fnum=4694 (numopen=1) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 7 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[3]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 302, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 3 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 386, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 6 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=0) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 4694 (0 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=40513 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8256 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22720 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5301 (0x14B5) smb_vwv[ 3]= 100 (0x64) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=100 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 100, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 100, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 100 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 100 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=100 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 100, size = 512, returned 33 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5301 max=512 nread=33 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=92 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22720 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 33 (0x21) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=33 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 73 74 61 72 74 20 2F 77 20 74 73 63 68 6C 6D 65 start /w tschlme [010] 6E 75 2E 65 78 65 0D 0A 67 6F 74 6F 20 31 30 0D nu.exe.. goto 10. [020] 0A . [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,96) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,96) wrote 96 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8257 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22720 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5301 (0x14B5) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 479 (0x1DF) smb_vwv[ 6]= 479 (0x1DF) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 479 (0x1DF) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=479 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 479, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 479 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 133 479 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 133 479 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=479 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 479, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5301 max=479 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22720 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8258 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22784 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5301 (0x14B5) smb_vwv[ 3]= 124 (0x7C) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=124 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 124, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 124, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 124 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 124 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=124 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 124, size = 512, returned 9 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5301 max=512 nread=9 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=68 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22784 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 9 (0x9) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=9 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 67 6F 74 6F 20 31 30 0D 0A goto 10. . [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,72) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,72) wrote 72 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8259 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22784 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5301 (0x14B5) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 503 (0x1F7) smb_vwv[ 6]= 503 (0x1F7) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 503 (0x1F7) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=503 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 503, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 503 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 133 503 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 133 503 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=503 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 503, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5301 max=503 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22784 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8652 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=176 smb_uid=100 smb_mid=44864 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 1228, fnum = 5324 (1 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 386, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=1) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 7 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 386, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 5324, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=176 smb_uid=100 smb_mid=44864 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=52224 (0xCC00) smb_vwv[ 3]= 276 (0x114) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 72 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x48 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8653 of length 76 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=176 smb_uid=100 smb_mid=44928 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 CC 14 ED 03 ....... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2363) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452) call_trans2qfilepathinfo Ambra.bat (fnum = 5324) level=1005 call=7 total_data=0 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2611) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,88) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,88) wrote 88 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 102 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x66 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2492 of length 106 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=102 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=448 smb_uid=100 smb_mid=10112 smt_wct=15 smb_vwv[ 0]= 34 (0x22) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 34 (0x22) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=37 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 73 00 74 00 61 00 72 00 74 00 2E 00 74 00 78 .s.t.a.r .t...t.x [020] 00 74 00 00 00 .t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2findfirst(1351) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "start.txt" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210) stat_cache_lookup: lookup failed for name [START.TXT] [2006/06/21 14:19:27, 5] smbd/statcache.c:stat_cache_add(135) stat_cache_add: Added entry (82e2c50:sizea) START.TXT -> start.txt [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(170) conversion finished start.txt -> start.txt [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1404) dir=./, mask = start.txt [2006/06/21 14:19:27, 5] smbd/dir.c:dptr_create(371) dptr_create dir=./ [2006/06/21 14:19:27, 3] smbd/dir.c:dptr_create(476) creating new dirptr 256 for path ./, expect_close = 1 [2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1431) dptr_num is 256, wcard = start.txt, attr = 22 [2006/06/21 14:19:27, 8] smbd/trans2.c:call_trans2findfirst(1436) dirpath=<./> dontdescend=<> [2006/06/21 14:19:27, 8] smbd/trans2.c:get_lanman2_dir_entry(869) get_lanman2_dir_entry:readdir on dirptr 0x82bde80 now at offset -1 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: ./start.txt [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2006/06/21 14:19:27, 5] smbd/trans2.c:get_lanman2_dir_entry(959) get_lanman2_dir_entry found ./start.txt fname=start.txt [2006/06/21 14:19:27, 10] smbd/trans2.c:get_lanman2_dir_entry(1043) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1482) call_trans2findfirst - (2) closing dptr_num 256 [2006/06/21 14:19:27, 4] smbd/dir.c:dptr_close_internal(220) closing dptr key 256 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 10, data_sent_thistime = 112, useable_space = 131010 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 10, data_to_send = 112, paramsize = 10, datasize = 112 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,184) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,184) wrote 184 [2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1518) SMBtrans2 mask=start.txt directory=./ dirtype=22 numentries=1 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2493 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=448 smb_uid=100 smb_mid=10176 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 526, fnum = 4622 (1 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 386, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 24. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=1) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 8 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 386, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[6]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[7]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 4622, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=448 smb_uid=100 smb_mid=10176 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 274 (0x112) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14160 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64576 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6151 (0x1807) smb_vwv[ 3]= 124 (0x7C) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=124 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 124, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 124, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 124 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 124 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=124 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 124, size = 512, returned 9 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6151 max=512 nread=9 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=68 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64576 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 9 (0x9) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=9 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 67 6F 74 6F 20 31 30 0D 0A goto 10. . [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,72) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,72) wrote 72 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14161 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64576 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6151 (0x1807) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 503 (0x1F7) smb_vwv[ 6]= 503 (0x1F7) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 503 (0x1F7) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=503 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 503, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 503 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 503 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 503 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=503 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 503, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6151 max=503 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64576 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14162 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64640 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6151 (0x1807) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 512, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6151 max=512 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64640 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14163 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64704 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6151 (0x1807) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=0 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 0, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 0, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 0 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 0 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=0 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 0, size = 512, returned 133 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6151 max=512 nread=133 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=192 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64704 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 133 (0x85) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=133 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 40 65 63 68 6F 20 6F 66 66 0D 0A 3A 31 30 0D 0A @echo of f..:10.. [010] 69 66 20 65 78 69 73 74 20 4E 3A 5C 73 74 61 72 if exist N:\star [020] 74 2E 74 78 74 20 67 6F 74 6F 20 32 30 0D 0A 67 t.txt go to 20..g [030] 6F 74 6F 20 31 30 0D 0A 3A 32 30 0D 0A 53 3A 0D oto 10.. :20..S:. [040] 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 5C .cd "\am brasoft\ [050] 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A 3A tafel to taal"..: [060] 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 63 30..star t /w tsc [070] 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 6F hlmenu.e xe..goto [080] 20 31 30 0D 0A 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,196) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,196) wrote 196 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 3768 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=2819 smt_wct=3 smb_vwv[ 0]= 4832 (0x12E0) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13021) conn 0x83319b0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=7 fnum=4832 (numopen=2) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 8 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[2]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 386, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 2 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 7 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=1) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 4832 (1 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=2819 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 11613 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13889 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5646 (0x160E) smb_vwv[ 3]= 56 (0x38) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13032) conn 0x832ef20 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=56 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 56, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 56, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 56 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 56 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=56 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 56, size = 512, returned 77 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5646 max=512 nread=77 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=136 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13889 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 77 (0x4D) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=77 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 3A 32 30 0D 0A 53 3A 0D 0A 63 64 20 22 5C 61 6D :20..S:. .cd "\am [010] 62 72 61 73 6F 66 74 5C 74 61 66 65 6C 20 74 6F brasoft\ tafel to [020] 74 61 61 6C 22 0D 0A 3A 33 30 0D 0A 73 74 61 72 taal"..: 30..star [030] 74 20 2F 77 20 74 73 63 68 6C 6D 65 6E 75 2E 65 t /w tsc hlmenu.e [040] 78 65 0D 0A 67 6F 74 6F 20 31 30 0D 0A xe..goto 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,140) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,140) wrote 140 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 11614 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13889 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5646 (0x160E) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 435 (0x1B3) smb_vwv[ 6]= 435 (0x1B3) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 435 (0x1B3) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13032) conn 0x832ef20 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=435 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 435, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 435 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 435 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 435 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=435 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 435, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5646 max=435 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13889 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14479 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=60865 smt_wct=3 smb_vwv[ 0]= 6239 (0x185F) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13028) conn 0x832ee88 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=7 fnum=6239 (numopen=1) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 7 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1774, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 2 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 6 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=0) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 6239 (0 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=60865 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 76 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x4c [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14480 of length 80 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=488 smb_uid=100 smb_mid=60929 smt_wct=15 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8 (0x8) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=11 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 EC 03 00 00 00 00 00 00 ........ ... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13028) conn 0x832ee88 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2418) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452) call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: . [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning d [2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2586) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2qfilepathinfo(2596) SMB_QFBI - create: Wed Jun 21 14:19:27 2006 access: Wed Jun 21 14:19:27 2006 write: Wed Jun 21 14:19:27 2006 change: Wed Jun 21 14:19:27 2006 mode: 10 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,104) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,104) wrote 104 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 6244 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=2016 smb_uid=100 smb_mid=40577 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13042) conn 0x832e9c0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 599, fnum = 4695 (1 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 20. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=1) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 7 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 4695, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=2016 smb_uid=100 smb_mid=40577 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=22272 (0x5700) smb_vwv[ 3]= 274 (0x112) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 6245 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=40641 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4695 (0x1257) smb_vwv[ 3]= 61 (0x3D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 8192 (0x2000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8192 (0x2000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13042) conn 0x832e9c0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=61 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 61, count = 8192, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 61, count_out = 8192 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 61 8192 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 61 8192 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=61 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 61, size = 8192, returned 72 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4695 max=8192 nread=72 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=131 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=40641 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 72 (0x48) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=72 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 53 3A 0D 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F S:..cd " \ambraso [010] 66 74 5C 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 ft\tafel totaal" [020] 0D 0A 3A 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 ..:30..s tart /w [030] 74 73 63 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 tschlmen u.exe..g [040] 6F 74 6F 20 31 30 0D 0A oto 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,135) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,135) wrote 135 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 6246 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=40641 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4695 (0x1257) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8120 (0x1FB8) smb_vwv[ 6]= 8120 (0x1FB8) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8120 (0x1FB8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13042) conn 0x832e9c0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=8120 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 8120, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 8120 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 133 8120 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 133 8120 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=8120 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 8120, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4695 max=8120 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=40641 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8260 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22848 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5301 (0x14B5) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 133 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 133 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 512, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5301 max=512 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22848 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8261 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22912 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5301 (0x14B5) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=0 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 0, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 0, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 0 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 0 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=0 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 0, size = 512, returned 133 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5301 max=512 nread=133 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=192 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22912 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 133 (0x85) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=133 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 40 65 63 68 6F 20 6F 66 66 0D 0A 3A 31 30 0D 0A @echo of f..:10.. [010] 69 66 20 65 78 69 73 74 20 4E 3A 5C 73 74 61 72 if exist N:\star [020] 74 2E 74 78 74 20 67 6F 74 6F 20 32 30 0D 0A 67 t.txt go to 20..g [030] 6F 74 6F 20 31 30 0D 0A 3A 32 30 0D 0A 53 3A 0D oto 10.. :20..S:. [040] 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 5C .cd "\am brasoft\ [050] 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A 3A tafel to taal"..: [060] 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 63 30..star t /w tsc [070] 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 6F hlmenu.e xe..goto [080] 20 31 30 0D 0A 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,196) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,196) wrote 196 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8262 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22912 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5301 (0x14B5) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 379 (0x17B) smb_vwv[ 6]= 379 (0x17B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 379 (0x17B) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=379 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 379, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 379 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 133 379 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 133 379 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=379 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 379, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5301 max=379 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22912 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8263 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22976 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5301 (0x14B5) smb_vwv[ 3]= 11 (0xB) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=11 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 11, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 11, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 11 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 11 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=11 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 11, size = 512, returned 122 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5301 max=512 nread=122 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=181 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22976 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 122 (0x7A) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=122 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 3A 31 30 0D 0A 69 66 20 65 78 69 73 74 20 4E 3A :10..if exist N: [010] 5C 73 74 61 72 74 2E 74 78 74 20 67 6F 74 6F 20 \start.t xt goto [020] 32 30 0D 0A 67 6F 74 6F 20 31 30 0D 0A 3A 32 30 20..goto 10..:20 [030] 0D 0A 53 3A 0D 0A 63 64 20 22 5C 61 6D 62 72 61 ..S:..cd "\ambra [040] 73 6F 66 74 5C 74 61 66 65 6C 20 74 6F 74 61 61 soft\taf el totaa [050] 6C 22 0D 0A 3A 33 30 0D 0A 73 74 61 72 74 20 2F l"..:30. .start / [060] 77 20 74 73 63 68 6C 6D 65 6E 75 2E 65 78 65 0D w tschlm enu.exe. [070] 0A 67 6F 74 6F 20 31 30 0D 0A .goto 10 .. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,185) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,185) wrote 185 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8264 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22976 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5301 (0x14B5) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 390 (0x186) smb_vwv[ 6]= 390 (0x186) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 390 (0x186) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=390 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 390, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 390 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 133 390 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 133 390 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=390 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 390, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5301 max=390 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=22976 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8265 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=23040 smt_wct=3 smb_vwv[ 0]= 5301 (0x14B5) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=20 fnum=5301 (numopen=1) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 7 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[4]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 864, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 4 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 6 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=0) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 5301 (0 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=23040 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8654 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=44992 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5324 (0x14CC) smb_vwv[ 3]= 47 (0x2F) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=47 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 47, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 47, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 47 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 47 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=47 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 47, size = 512, returned 86 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5324 max=512 nread=86 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=145 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=44992 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 86 (0x56) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=86 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 67 6F 74 6F 20 31 30 0D 0A 3A 32 30 0D 0A 53 3A goto 10. .:20..S: [010] 0D 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 ..cd "\a mbrasoft [020] 5C 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A \tafel t otaal".. [030] 3A 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 :30..sta rt /w ts [040] 63 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 chlmenu. exe..got [050] 6F 20 31 30 0D 0A o 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,149) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,149) wrote 149 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8655 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=44992 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5324 (0x14CC) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 426 (0x1AA) smb_vwv[ 6]= 426 (0x1AA) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 426 (0x1AA) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=426 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 426, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 426 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 426 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 426 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=426 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 426, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5324 max=426 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=44992 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 72 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x48 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2494 of length 76 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=448 smb_uid=100 smb_mid=10240 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 0E 12 ED 03 ....... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2363) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452) call_trans2qfilepathinfo Ambra.bat (fnum = 4622) level=1005 call=7 total_data=0 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2611) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,88) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,88) wrote 88 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2495 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10304 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4622 (0x120E) smb_vwv[ 3]= 47 (0x2F) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=47 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 47, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 47, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 24 12 47 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 24 12 47 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=47 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 47, size = 512, returned 86 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4622 max=512 nread=86 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=145 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10304 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 86 (0x56) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=86 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 67 6F 74 6F 20 31 30 0D 0A 3A 32 30 0D 0A 53 3A goto 10. .:20..S: [010] 0D 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 ..cd "\a mbrasoft [020] 5C 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A \tafel t otaal".. [030] 3A 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 :30..sta rt /w ts [040] 63 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 chlmenu. exe..got [050] 6F 20 31 30 0D 0A o 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,149) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,149) wrote 149 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2496 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10304 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4622 (0x120E) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 426 (0x1AA) smb_vwv[ 6]= 426 (0x1AA) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 426 (0x1AA) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=426 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 426, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 426 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 24 12 133 426 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 24 12 133 426 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=426 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 426, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4622 max=426 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10304 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14164 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64704 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6151 (0x1807) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 379 (0x17B) smb_vwv[ 6]= 379 (0x17B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 379 (0x17B) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=379 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 379, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 379 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 379 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 379 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=379 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 379, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6151 max=379 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64704 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14165 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64768 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6151 (0x1807) smb_vwv[ 3]= 11 (0xB) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=11 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 11, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 11, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 11 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 11 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=11 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 11, size = 512, returned 122 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6151 max=512 nread=122 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=181 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64768 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 122 (0x7A) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=122 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 3A 31 30 0D 0A 69 66 20 65 78 69 73 74 20 4E 3A :10..if exist N: [010] 5C 73 74 61 72 74 2E 74 78 74 20 67 6F 74 6F 20 \start.t xt goto [020] 32 30 0D 0A 67 6F 74 6F 20 31 30 0D 0A 3A 32 30 20..goto 10..:20 [030] 0D 0A 53 3A 0D 0A 63 64 20 22 5C 61 6D 62 72 61 ..S:..cd "\ambra [040] 73 6F 66 74 5C 74 61 66 65 6C 20 74 6F 74 61 61 soft\taf el totaa [050] 6C 22 0D 0A 3A 33 30 0D 0A 73 74 61 72 74 20 2F l"..:30. .start / [060] 77 20 74 73 63 68 6C 6D 65 6E 75 2E 65 78 65 0D w tschlm enu.exe. [070] 0A 67 6F 74 6F 20 31 30 0D 0A .goto 10 .. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,185) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,185) wrote 185 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14166 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64768 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6151 (0x1807) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 390 (0x186) smb_vwv[ 6]= 390 (0x186) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 390 (0x186) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=390 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 390, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 390 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 390 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 390 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=390 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 390, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6151 max=390 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64768 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 102 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x66 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 3769 of length 106 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=102 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1748 smb_uid=101 smb_mid=2883 smt_wct=15 smb_vwv[ 0]= 34 (0x22) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 34 (0x22) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=37 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 73 00 74 00 61 00 72 00 74 00 2E 00 74 00 78 .s.t.a.r .t...t.x [020] 00 74 00 00 00 .t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13021) conn 0x83319b0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2findfirst(1351) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "start.txt" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210) stat_cache_lookup: lookup failed for name [START.TXT] [2006/06/21 14:19:27, 5] smbd/statcache.c:stat_cache_add(135) stat_cache_add: Added entry (82b50e0:sizea) START.TXT -> start.txt [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(170) conversion finished start.txt -> start.txt [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1404) dir=./, mask = start.txt [2006/06/21 14:19:27, 5] smbd/dir.c:dptr_create(371) dptr_create dir=./ [2006/06/21 14:19:27, 3] smbd/dir.c:dptr_create(476) creating new dirptr 256 for path ./, expect_close = 1 [2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1431) dptr_num is 256, wcard = start.txt, attr = 22 [2006/06/21 14:19:27, 8] smbd/trans2.c:call_trans2findfirst(1436) dirpath=<./> dontdescend=<> [2006/06/21 14:19:27, 8] smbd/trans2.c:get_lanman2_dir_entry(869) get_lanman2_dir_entry:readdir on dirptr 0x8339408 now at offset -1 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: ./start.txt [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2006/06/21 14:19:27, 5] smbd/trans2.c:get_lanman2_dir_entry(959) get_lanman2_dir_entry found ./start.txt fname=start.txt [2006/06/21 14:19:27, 10] smbd/trans2.c:get_lanman2_dir_entry(1043) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1482) call_trans2findfirst - (2) closing dptr_num 256 [2006/06/21 14:19:27, 4] smbd/dir.c:dptr_close_internal(220) closing dptr key 256 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 10, data_sent_thistime = 112, useable_space = 131010 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 10, data_to_send = 112, paramsize = 10, datasize = 112 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,184) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,184) wrote 184 [2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1518) SMBtrans2 mask=start.txt directory=./ dirtype=22 numentries=1 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 3770 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1748 smb_uid=101 smb_mid=2947 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] EA 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13021) conn 0x83319b0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 737, fnum = 4833 (2 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=2) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 7 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 4833, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=1748 smb_uid=101 smb_mid=2947 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=57600 (0xE100) smb_vwv[ 3]= 274 (0x112) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 11615 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13953 smt_wct=3 smb_vwv[ 0]= 5646 (0x160E) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13032) conn 0x832ef20 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=7 fnum=5646 (numopen=1) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 7 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[4]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1223, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 4 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 6 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=0) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 5646 (0 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=13953 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 102 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x66 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14481 of length 106 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=102 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=488 smb_uid=100 smb_mid=60993 smt_wct=15 smb_vwv[ 0]= 34 (0x22) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 34 (0x22) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=37 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 73 00 74 00 61 00 72 00 74 00 2E 00 74 00 78 .s.t.a.r .t...t.x [020] 00 74 00 00 00 .t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13028) conn 0x832ee88 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2findfirst(1351) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "start.txt" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210) stat_cache_lookup: lookup failed for name [START.TXT] [2006/06/21 14:19:27, 5] smbd/statcache.c:stat_cache_add(135) stat_cache_add: Added entry (831f6a8:sizea) START.TXT -> start.txt [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(170) conversion finished start.txt -> start.txt [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1404) dir=./, mask = start.txt [2006/06/21 14:19:27, 5] smbd/dir.c:dptr_create(371) dptr_create dir=./ [2006/06/21 14:19:27, 3] smbd/dir.c:dptr_create(476) creating new dirptr 256 for path ./, expect_close = 1 [2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1431) dptr_num is 256, wcard = start.txt, attr = 22 [2006/06/21 14:19:27, 8] smbd/trans2.c:call_trans2findfirst(1436) dirpath=<./> dontdescend=<> [2006/06/21 14:19:27, 8] smbd/trans2.c:get_lanman2_dir_entry(869) get_lanman2_dir_entry:readdir on dirptr 0x82bd568 now at offset -1 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: ./start.txt [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2006/06/21 14:19:27, 5] smbd/trans2.c:get_lanman2_dir_entry(959) get_lanman2_dir_entry found ./start.txt fname=start.txt [2006/06/21 14:19:27, 10] smbd/trans2.c:get_lanman2_dir_entry(1043) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1482) call_trans2findfirst - (2) closing dptr_num 256 [2006/06/21 14:19:27, 4] smbd/dir.c:dptr_close_internal(220) closing dptr key 256 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 10, data_sent_thistime = 112, useable_space = 131010 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 10, data_to_send = 112, paramsize = 10, datasize = 112 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,184) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,184) wrote 184 [2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1518) SMBtrans2 mask=start.txt directory=./ dirtype=22 numentries=1 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14482 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=488 smb_uid=100 smb_mid=61057 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13028) conn 0x832ee88 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 2144, fnum = 6240 (1 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=1) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 7 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 6240, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=488 smb_uid=100 smb_mid=61057 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=24576 (0x6000) smb_vwv[ 3]= 280 (0x118) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 11616 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1260 smb_uid=100 smb_mid=14017 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13032) conn 0x832ef20 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 1551, fnum = 5647 (1 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[4]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=1) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 8 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[6]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[7]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 5647, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=1260 smb_uid=100 smb_mid=14017 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 3840 (0xF00) smb_vwv[ 3]= 278 (0x116) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 11617 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14081 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5647 (0x160F) smb_vwv[ 3]= 61 (0x3D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 8192 (0x2000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8192 (0x2000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13032) conn 0x832ef20 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=61 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 61, count = 8192, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 61, count_out = 8192 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 61 8192 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 61 8192 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=61 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 61, size = 8192, returned 72 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5647 max=8192 nread=72 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=131 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14081 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 72 (0x48) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=72 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 53 3A 0D 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F S:..cd " \ambraso [010] 66 74 5C 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 ft\tafel totaal" [020] 0D 0A 3A 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 ..:30..s tart /w [030] 74 73 63 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 tschlmen u.exe..g [040] 6F 74 6F 20 31 30 0D 0A oto 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,135) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,135) wrote 135 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 11618 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14081 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5647 (0x160F) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8120 (0x1FB8) smb_vwv[ 6]= 8120 (0x1FB8) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8120 (0x1FB8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13032) conn 0x832ef20 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=8120 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 8120, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 8120 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 8120 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 8120 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=8120 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 8120, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5647 max=8120 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14081 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 6247 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=40705 smt_wct=3 smb_vwv[ 0]= 4695 (0x1257) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13042) conn 0x832e9c0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=20 fnum=4695 (numopen=1) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 8 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[3]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 303, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 3 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 7 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=0) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 4695 (0 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=40705 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 126 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x7e [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 6248 of length 130 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=126 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=2016 smb_uid=100 smb_mid=40769 smt_wct=15 smb_vwv[ 0]= 58 (0x3A) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 58 (0x3A) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=61 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 EC 03 00 00 00 00 5C 00 41 00 6D 00 62 ........ .\.A.m.b [010] 00 72 00 61 00 73 00 6F 00 66 00 74 00 5C 00 54 .r.a.s.o .f.t.\.T [020] 00 61 00 66 00 65 00 6C 00 20 00 54 00 6F 00 74 .a.f.e.l . .T.o.t [030] 00 61 00 61 00 6C 00 5C 00 0A 00 00 00 .a.a.l.\ ..... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13042) conn 0x8339450 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 4] smbd/vfs.c:vfs_ChDir(660) vfs_ChDir to /home/data/Software [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2418) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambrasoft/Tafel Totaal/ " [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210) stat_cache_lookup: lookup failed for name [AMBRASOFT/TAFEL TOTAAL/ ] [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRASOFT/TAFEL TOTAAL] -> [Ambrasoft/Tafel Totaal] [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = Ambrasoft/Tafel Totaal/ , dirpath = Ambrasoft/Tafel Totaal, start = [2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled ? [2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component (len 1) ? [2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled ? [2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component (len 1) ? [2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled ? [2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component (len 1) ? [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(324) New file [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2443) call_trans2qfilepathinfo: SMB_VFS_STAT of Ambrasoft/Tafel Totaal/ failed (No such file or directory) [2006/06/21 14:19:27, 10] smbd/trans2.c:set_bad_path_error(2191) set_bad_path_error: err = 2 bad_path = 0 [2006/06/21 14:19:27, 3] smbd/error.c:error_packet(105) error string = No such file or directory [2006/06/21 14:19:27, 3] smbd/error.c:error_packet(129) error packet at smbd/trans2.c(2197) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=2 smb_pid=2016 smb_uid=100 smb_mid=40769 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8266 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=408 smb_uid=100 smb_mid=23104 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 1206, fnum = 5302 (1 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[4]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 20. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=1) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 8 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[6]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[7]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 5302, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=408 smb_uid=100 smb_mid=23104 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=46592 (0xB600) smb_vwv[ 3]= 276 (0x114) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8267 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=23168 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5302 (0x14B6) smb_vwv[ 3]= 16 (0x10) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 8192 (0x2000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8192 (0x2000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=16 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 16, count = 8192, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 16, count_out = 8192 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 16 8192 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 16 8192 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=16 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 16, size = 8192, returned 117 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5302 max=8192 nread=117 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=176 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=23168 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 117 (0x75) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=117 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 69 66 20 65 78 69 73 74 20 4E 3A 5C 73 74 61 72 if exist N:\star [010] 74 2E 74 78 74 20 67 6F 74 6F 20 32 30 0D 0A 67 t.txt go to 20..g [020] 6F 74 6F 20 31 30 0D 0A 3A 32 30 0D 0A 53 3A 0D oto 10.. :20..S:. [030] 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 5C .cd "\am brasoft\ [040] 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A 3A tafel to taal"..: [050] 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 63 30..star t /w tsc [060] 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 6F hlmenu.e xe..goto [070] 20 31 30 0D 0A 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,180) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,180) wrote 180 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8268 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=23168 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5302 (0x14B6) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8075 (0x1F8B) smb_vwv[ 6]= 8075 (0x1F8B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8075 (0x1F8B) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=8075 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 8075, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 8075 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 20 12 133 8075 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 20 12 133 8075 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=8075 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 8075, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5302 max=8075 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=23168 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8656 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=45056 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5324 (0x14CC) smb_vwv[ 3]= 56 (0x38) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=56 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 56, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 56, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 56 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 56 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=56 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 56, size = 512, returned 77 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5324 max=512 nread=77 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=136 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=45056 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 77 (0x4D) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=77 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 3A 32 30 0D 0A 53 3A 0D 0A 63 64 20 22 5C 61 6D :20..S:. .cd "\am [010] 62 72 61 73 6F 66 74 5C 74 61 66 65 6C 20 74 6F brasoft\ tafel to [020] 74 61 61 6C 22 0D 0A 3A 33 30 0D 0A 73 74 61 72 taal"..: 30..star [030] 74 20 2F 77 20 74 73 63 68 6C 6D 65 6E 75 2E 65 t /w tsc hlmenu.e [040] 78 65 0D 0A 67 6F 74 6F 20 31 30 0D 0A xe..goto 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,140) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,140) wrote 140 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8657 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=45056 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5324 (0x14CC) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 435 (0x1B3) smb_vwv[ 6]= 435 (0x1B3) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 435 (0x1B3) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=435 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 435, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 435 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 435 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 435 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=435 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 435, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5324 max=435 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=45056 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2497 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10368 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4622 (0x120E) smb_vwv[ 3]= 56 (0x38) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=56 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 56, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 56, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 24 12 56 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 24 12 56 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=56 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 56, size = 512, returned 77 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4622 max=512 nread=77 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=136 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10368 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 77 (0x4D) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=77 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 3A 32 30 0D 0A 53 3A 0D 0A 63 64 20 22 5C 61 6D :20..S:. .cd "\am [010] 62 72 61 73 6F 66 74 5C 74 61 66 65 6C 20 74 6F brasoft\ tafel to [020] 74 61 61 6C 22 0D 0A 3A 33 30 0D 0A 73 74 61 72 taal"..: 30..star [030] 74 20 2F 77 20 74 73 63 68 6C 6D 65 6E 75 2E 65 t /w tsc hlmenu.e [040] 78 65 0D 0A 67 6F 74 6F 20 31 30 0D 0A xe..goto 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,140) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,140) wrote 140 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2498 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10368 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4622 (0x120E) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 435 (0x1B3) smb_vwv[ 6]= 435 (0x1B3) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 435 (0x1B3) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8658 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=45120 smt_wct=3 smb_vwv[ 0]= 5324 (0x14CC) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=7 fnum=5324 (numopen=1) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 8 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[5]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 891, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 5 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[6]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 7 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=0) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 5324 (0 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=45120 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=435 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 435, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 435 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 24 12 133 435 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 24 12 133 435 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=435 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 435, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4622 max=435 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10368 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2499 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10432 smt_wct=3 smb_vwv[ 0]= 4622 (0x120E) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=24 fnum=4622 (numopen=1) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 7 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[4]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 258, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 4 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 6 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=0) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 4622 (0 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10432 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14167 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64832 smt_wct=3 smb_vwv[ 0]= 6151 (0x1807) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=7 fnum=6151 (numopen=1) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 6 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[4]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1683, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 4 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 5 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=0) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 6151 (0 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64832 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 72 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x48 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 3771 of length 76 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1748 smb_uid=101 smb_mid=3011 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 E1 12 ED 03 ....... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13021) conn 0x83319b0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2363) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452) call_trans2qfilepathinfo Ambra.bat (fnum = 4833) level=1005 call=7 total_data=0 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2611) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,88) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,88) wrote 88 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 3772 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=3075 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4833 (0x12E1) smb_vwv[ 3]= 47 (0x2F) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13021) conn 0x83319b0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=47 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 47, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 47, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 47 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 47 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=47 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 47, size = 512, returned 86 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4833 max=512 nread=86 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=145 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=3075 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 86 (0x56) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=86 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 67 6F 74 6F 20 31 30 0D 0A 3A 32 30 0D 0A 53 3A goto 10. .:20..S: [010] 0D 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 ..cd "\a mbrasoft [020] 5C 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A \tafel t otaal".. [030] 3A 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 :30..sta rt /w ts [040] 63 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 chlmenu. exe..got [050] 6F 20 31 30 0D 0A o 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,149) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,149) wrote 149 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 3773 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=3075 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4833 (0x12E1) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 426 (0x1AA) smb_vwv[ 6]= 426 (0x1AA) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 426 (0x1AA) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13021) conn 0x83319b0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=426 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 426, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 426 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 426 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 426 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=426 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 426, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4833 max=426 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=3075 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14168 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1824 smb_uid=100 smb_mid=64896 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 2056, fnum = 6152 (1 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=1) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 6 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 6152, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=1824 smb_uid=100 smb_mid=64896 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2048 (0x800) smb_vwv[ 3]= 280 (0x118) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14169 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64960 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6152 (0x1808) smb_vwv[ 3]= 16 (0x10) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 8192 (0x2000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8192 (0x2000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=16 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 16, count = 8192, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 16, count_out = 8192 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 16 8192 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 16 8192 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=16 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 16, size = 8192, returned 117 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6152 max=8192 nread=117 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=176 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64960 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 117 (0x75) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=117 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 69 66 20 65 78 69 73 74 20 4E 3A 5C 73 74 61 72 if exist N:\star [010] 74 2E 74 78 74 20 67 6F 74 6F 20 32 30 0D 0A 67 t.txt go to 20..g [020] 6F 74 6F 20 31 30 0D 0A 3A 32 30 0D 0A 53 3A 0D oto 10.. :20..S:. [030] 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 5C .cd "\am brasoft\ [040] 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A 3A tafel to taal"..: [050] 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 63 30..star t /w tsc [060] 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 6F hlmenu.e xe..goto [070] 20 31 30 0D 0A 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,180) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,180) wrote 180 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14170 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64960 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6152 (0x1808) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8075 (0x1F8B) smb_vwv[ 6]= 8075 (0x1F8B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8075 (0x1F8B) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=8075 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 8075, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 8075 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 8075 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 8075 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=8075 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 8075, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6152 max=8075 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=64960 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 72 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x48 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14483 of length 76 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=488 smb_uid=100 smb_mid=61121 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 60 18 ED 03 ...`... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13028) conn 0x832ee88 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2363) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452) call_trans2qfilepathinfo Ambra.bat (fnum = 6240) level=1005 call=7 total_data=0 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2611) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,88) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,88) wrote 88 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14484 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=61185 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6240 (0x1860) smb_vwv[ 3]= 47 (0x2F) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13028) conn 0x832ee88 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=47 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 47, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 47, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 47 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 47 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=47 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 47, size = 512, returned 86 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6240 max=512 nread=86 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=145 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=61185 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 86 (0x56) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=86 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 67 6F 74 6F 20 31 30 0D 0A 3A 32 30 0D 0A 53 3A goto 10. .:20..S: [010] 0D 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 ..cd "\a mbrasoft [020] 5C 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A \tafel t otaal".. [030] 3A 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 :30..sta rt /w ts [040] 63 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 chlmenu. exe..got [050] 6F 20 31 30 0D 0A o 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,149) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,149) wrote 149 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14485 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=61185 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6240 (0x1860) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 426 (0x1AA) smb_vwv[ 6]= 426 (0x1AA) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 426 (0x1AA) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13028) conn 0x832ee88 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=426 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 426, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 426 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 426 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 426 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=426 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 426, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6240 max=426 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=61185 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 11619 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14145 smt_wct=3 smb_vwv[ 0]= 5647 (0x160F) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13032) conn 0x832ef20 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=7 fnum=5647 (numopen=1) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 6 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[2]: pid = 13032, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1224, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 2 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 5 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=0) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 5647 (0 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=14145 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 126 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x7e [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 11620 of length 130 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=126 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1260 smb_uid=100 smb_mid=14209 smt_wct=15 smb_vwv[ 0]= 58 (0x3A) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 58 (0x3A) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=61 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 EC 03 00 00 00 00 5C 00 41 00 6D 00 62 ........ .\.A.m.b [010] 00 72 00 61 00 73 00 6F 00 66 00 74 00 5C 00 54 .r.a.s.o .f.t.\.T [020] 00 61 00 66 00 65 00 6C 00 20 00 54 00 6F 00 74 .a.f.e.l . .T.o.t [030] 00 61 00 61 00 6C 00 5C 00 0A 00 00 00 .a.a.l.\ ..... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13032) conn 0x83393b8 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 4] smbd/vfs.c:vfs_ChDir(660) vfs_ChDir to /home/data/Software [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2418) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambrasoft/Tafel Totaal/ " [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210) stat_cache_lookup: lookup failed for name [AMBRASOFT/TAFEL TOTAAL/ ] [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRASOFT/TAFEL TOTAAL] -> [Ambrasoft/Tafel Totaal] [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = Ambrasoft/Tafel Totaal/ , dirpath = Ambrasoft/Tafel Totaal, start = [2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled ? [2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component (len 1) ? [2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled ? [2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component (len 1) ? [2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled ? [2006/06/21 14:19:27, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component (len 1) ? [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(324) New file [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2443) call_trans2qfilepathinfo: SMB_VFS_STAT of Ambrasoft/Tafel Totaal/ failed (No such file or directory) [2006/06/21 14:19:27, 10] smbd/trans2.c:set_bad_path_error(2191) set_bad_path_error: err = 2 bad_path = 0 [2006/06/21 14:19:27, 3] smbd/error.c:error_packet(105) error string = No such file or directory [2006/06/21 14:19:27, 3] smbd/error.c:error_packet(129) error packet at smbd/trans2.c(2197) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=2 smb_pid=1260 smb_uid=100 smb_mid=14209 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 76 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x4c [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 6249 of length 80 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=2016 smb_uid=100 smb_mid=40833 smt_wct=15 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8 (0x8) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=11 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 EC 03 00 00 00 00 00 00 ........ ... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13042) conn 0x8339450 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2418) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452) call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: . [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning d [2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2586) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2qfilepathinfo(2596) SMB_QFBI - create: Sat Jun 17 16:10:26 2006 access: Wed Jun 21 14:18:32 2006 write: Sat Jun 17 16:10:26 2006 change: Sat Jun 17 16:10:26 2006 mode: 10 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,104) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,104) wrote 104 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 70 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x46 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 6250 of length 74 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=2016 smb_uid=100 smb_mid=40897 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 02 01 ..... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13042) conn 0x8339450 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfsinfo(1775) call_trans2qfsinfo: level = 258 [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2qfsinfo(1881) call_trans2qfsinfo : SMB_QUERY_FS_VOLUME_INFO namelen = 8, vol=Software serv=Software [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 0, data_sent_thistime = 34, useable_space = 131012 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 0, data_to_send = 34, paramsize = 0, datasize = 34 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,94) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,94) wrote 94 [2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2qfsinfo(2065) SMBtrans2 info_level = 258 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8269 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=23232 smt_wct=3 smb_vwv[ 0]= 5302 (0x14B6) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=20 fnum=5302 (numopen=1) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 5 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[1]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 865, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 1 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 4 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=0) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 5302 (0 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=23232 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 102 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x66 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8270 of length 106 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=102 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=408 smb_uid=100 smb_mid=23296 smt_wct=15 smb_vwv[ 0]= 34 (0x22) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 34 (0x22) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=37 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 73 00 74 00 61 00 72 00 74 00 2E 00 74 00 78 .s.t.a.r .t...t.x [020] 00 74 00 00 00 .t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13036) conn 0x832ef00 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2findfirst(1351) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "start.txt" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210) stat_cache_lookup: lookup failed for name [START.TXT] [2006/06/21 14:19:27, 5] smbd/statcache.c:stat_cache_add(135) stat_cache_add: Added entry (831f2a8:sizea) START.TXT -> start.txt [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(170) conversion finished start.txt -> start.txt [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1404) dir=./, mask = start.txt [2006/06/21 14:19:27, 5] smbd/dir.c:dptr_create(371) dptr_create dir=./ [2006/06/21 14:19:27, 3] smbd/dir.c:dptr_create(476) creating new dirptr 256 for path ./, expect_close = 1 [2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1431) dptr_num is 256, wcard = start.txt, attr = 22 [2006/06/21 14:19:27, 8] smbd/trans2.c:call_trans2findfirst(1436) dirpath=<./> dontdescend=<> [2006/06/21 14:19:27, 8] smbd/trans2.c:get_lanman2_dir_entry(869) get_lanman2_dir_entry:readdir on dirptr 0x83201b0 now at offset -1 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: ./start.txt [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2006/06/21 14:19:27, 5] smbd/trans2.c:get_lanman2_dir_entry(959) get_lanman2_dir_entry found ./start.txt fname=start.txt [2006/06/21 14:19:27, 10] smbd/trans2.c:get_lanman2_dir_entry(1043) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1482) call_trans2findfirst - (2) closing dptr_num 256 [2006/06/21 14:19:27, 4] smbd/dir.c:dptr_close_internal(220) closing dptr key 256 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 10, data_sent_thistime = 112, useable_space = 131010 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 10, data_to_send = 112, paramsize = 10, datasize = 112 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,184) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,184) wrote 184 [2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1518) SMBtrans2 mask=start.txt directory=./ dirtype=22 numentries=1 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8659 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=176 smb_uid=100 smb_mid=45184 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 1229, fnum = 5325 (1 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=1) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 5 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 5325, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=176 smb_uid=100 smb_mid=45184 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=52480 (0xCD00) smb_vwv[ 3]= 276 (0x114) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8660 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=45248 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5325 (0x14CD) smb_vwv[ 3]= 61 (0x3D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 8192 (0x2000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8192 (0x2000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=61 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 61, count = 8192, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 61, count_out = 8192 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 61 8192 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 61 8192 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=61 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 61, size = 8192, returned 72 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5325 max=8192 nread=72 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=131 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=45248 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 72 (0x48) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=72 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 53 3A 0D 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F S:..cd " \ambraso [010] 66 74 5C 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 ft\tafel totaal" [020] 0D 0A 3A 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 ..:30..s tart /w [030] 74 73 63 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 tschlmen u.exe..g [040] 6F 74 6F 20 31 30 0D 0A oto 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,135) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,135) wrote 135 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8661 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=45248 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5325 (0x14CD) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8120 (0x1FB8) smb_vwv[ 6]= 8120 (0x1FB8) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8120 (0x1FB8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=8120 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 8120, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 8120 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 8120 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 8120 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=8120 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 8120, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=5325 max=8120 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=45248 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2500 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=448 smb_uid=100 smb_mid=10496 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 527, fnum = 4623 (1 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 24. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=1) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 6 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[5]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 4623, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=448 smb_uid=100 smb_mid=10496 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 3840 (0xF00) smb_vwv[ 3]= 274 (0x112) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2501 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10560 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4623 (0x120F) smb_vwv[ 3]= 61 (0x3D) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8192 (0x2000) smb_vwv[ 6]= 8192 (0x2000) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8192 (0x2000) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=61 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 61, count = 8192, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 61, count_out = 8192 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 24 12 61 8192 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 24 12 61 8192 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=61 len=8192 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 61, size = 8192, returned 72 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4623 max=8192 nread=72 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=131 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10560 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 72 (0x48) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=72 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 53 3A 0D 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F S:..cd " \ambraso [010] 66 74 5C 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 ft\tafel totaal" [020] 0D 0A 3A 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 ..:30..s tart /w [030] 74 73 63 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 tschlmen u.exe..g [040] 6F 74 6F 20 31 30 0D 0A oto 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,135) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,135) wrote 135 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2502 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10560 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4623 (0x120F) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 8120 (0x1FB8) smb_vwv[ 6]= 8120 (0x1FB8) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8120 (0x1FB8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=8120 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 8120, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 8120 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 24 12 133 8120 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 24 12 133 8120 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=8120 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 8120, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4623 max=8120 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10560 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 3774 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=3139 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4833 (0x12E1) smb_vwv[ 3]= 56 (0x38) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13021) conn 0x83319b0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=56 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 56, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 56, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 56 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 56 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=56 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 56, size = 512, returned 77 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4833 max=512 nread=77 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=136 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=3139 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 77 (0x4D) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=77 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 3A 32 30 0D 0A 53 3A 0D 0A 63 64 20 22 5C 61 6D :20..S:. .cd "\am [010] 62 72 61 73 6F 66 74 5C 74 61 66 65 6C 20 74 6F brasoft\ tafel to [020] 74 61 61 6C 22 0D 0A 3A 33 30 0D 0A 73 74 61 72 taal"..: 30..star [030] 74 20 2F 77 20 74 73 63 68 6C 6D 65 6E 75 2E 65 t /w tsc hlmenu.e [040] 78 65 0D 0A 67 6F 74 6F 20 31 30 0D 0A xe..goto 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,140) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,140) wrote 140 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 3775 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=3139 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4833 (0x12E1) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 435 (0x1B3) smb_vwv[ 6]= 435 (0x1B3) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 435 (0x1B3) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13021) conn 0x83319b0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=435 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 435, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 435 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 435 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 435 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=435 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 435, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=4833 max=435 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=3139 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 3776 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=3203 smt_wct=3 smb_vwv[ 0]= 4833 (0x12E1) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13021) conn 0x83319b0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=7 fnum=4833 (numopen=2) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 6 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[4]: pid = 13021, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 387, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 4 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 5 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=1) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 4833 (1 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=3203 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14171 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=65024 smt_wct=3 smb_vwv[ 0]= 6152 (0x1808) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=7 fnum=6152 (numopen=1) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 5 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[2]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1684, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 2 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 4 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=0) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 6152 (0 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=65024 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14486 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=61249 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6240 (0x1860) smb_vwv[ 3]= 56 (0x38) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 102 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x66 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14172 of length 106 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=102 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1824 smb_uid=100 smb_mid=65088 smt_wct=15 smb_vwv[ 0]= 34 (0x22) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 34 (0x22) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=37 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 73 00 74 00 61 00 72 00 74 00 2E 00 74 00 78 .s.t.a.r .t...t.x [020] 00 74 00 00 00 .t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2findfirst(1351) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "start.txt" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(210) stat_cache_lookup: lookup failed for name [START.TXT] [2006/06/21 14:19:27, 5] smbd/statcache.c:stat_cache_add(135) stat_cache_add: Added entry (82b5558:sizea) START.TXT -> start.txt [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(170) conversion finished start.txt -> start.txt [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1404) dir=./, mask = start.txt [2006/06/21 14:19:27, 5] smbd/dir.c:dptr_create(371) dptr_create dir=./ [2006/06/21 14:19:27, 3] smbd/dir.c:dptr_create(476) creating new dirptr 256 for path ./, expect_close = 1 [2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1431) dptr_num is 256, wcard = start.txt, attr = 22 [2006/06/21 14:19:27, 8] smbd/trans2.c:call_trans2findfirst(1436) dirpath=<./> dontdescend=<> [2006/06/21 14:19:27, 8] smbd/trans2.c:get_lanman2_dir_entry(869) get_lanman2_dir_entry:readdir on dirptr 0x82bde80 now at offset -1 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: ./start.txt [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2006/06/21 14:19:27, 5] smbd/trans2.c:get_lanman2_dir_entry(959) get_lanman2_dir_entry found ./start.txt fname=start.txt [2006/06/21 14:19:27, 10] smbd/trans2.c:get_lanman2_dir_entry(1043) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2findfirst(1482) call_trans2findfirst - (2) closing dptr_num 256 [2006/06/21 14:19:27, 4] smbd/dir.c:dptr_close_internal(220) closing dptr key 256 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 10, data_sent_thistime = 112, useable_space = 131010 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 10, data_to_send = 112, paramsize = 10, datasize = 112 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,184) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,184) wrote 184 [2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2findfirst(1518) SMBtrans2 mask=start.txt directory=./ dirtype=22 numentries=1 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14173 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1824 smb_uid=100 smb_mid=65152 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13028) conn 0x832ee88 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=56 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 56, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 56, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 56 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 56 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=56 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 56, size = 512, returned 77 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6240 max=512 nread=77 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=136 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=61249 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 77 (0x4D) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=77 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 3A 32 30 0D 0A 53 3A 0D 0A 63 64 20 22 5C 61 6D :20..S:. .cd "\am [010] 62 72 61 73 6F 66 74 5C 74 61 66 65 6C 20 74 6F brasoft\ tafel to [020] 74 61 61 6C 22 0D 0A 3A 33 30 0D 0A 73 74 61 72 taal"..: 30..star [030] 74 20 2F 77 20 74 73 63 68 6C 6D 65 6E 75 2E 65 t /w tsc hlmenu.e [040] 78 65 0D 0A 67 6F 74 6F 20 31 30 0D 0A xe..goto 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,140) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,140) wrote 140 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14487 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=61249 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6240 (0x1860) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 435 (0x1B3) smb_vwv[ 6]= 435 (0x1B3) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 435 (0x1B3) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13028) conn 0x832ee88 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=435 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 435, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 435 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 435 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 435 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=435 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 435, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6240 max=435 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=61249 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14488 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=61313 smt_wct=3 smb_vwv[ 0]= 6240 (0x1860) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13028) conn 0x832ee88 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=7 fnum=6240 (numopen=1) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 4 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[2]: pid = 13028, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1775, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 2 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 3 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=0) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 6240 (0 used) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=61313 smt_wct=0 smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,39) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,39) wrote 39 unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 2057, fnum = 6153 (1 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 7. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=1) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 4 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1685, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 6153, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=1824 smb_uid=100 smb_mid=65152 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2304 (0x900) smb_vwv[ 3]= 280 (0x118) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 72 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x48 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14174 of length 76 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1824 smb_uid=100 smb_mid=65216 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 09 18 ED 03 ....... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2363) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452) call_trans2qfilepathinfo Ambra.bat (fnum = 6153) level=1005 call=7 total_data=0 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2611) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,88) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,88) wrote 88 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14175 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=65280 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6153 (0x1809) smb_vwv[ 3]= 47 (0x2F) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=47 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 47, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 47, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 47 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 47 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=47 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 47, size = 512, returned 86 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6153 max=512 nread=86 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=145 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=65280 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 86 (0x56) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=86 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 67 6F 74 6F 20 31 30 0D 0A 3A 32 30 0D 0A 53 3A goto 10. .:20..S: [010] 0D 0A 63 64 20 22 5C 61 6D 62 72 61 73 6F 66 74 ..cd "\a mbrasoft [020] 5C 74 61 66 65 6C 20 74 6F 74 61 61 6C 22 0D 0A \tafel t otaal".. [030] 3A 33 30 0D 0A 73 74 61 72 74 20 2F 77 20 74 73 :30..sta rt /w ts [040] 63 68 6C 6D 65 6E 75 2E 65 78 65 0D 0A 67 6F 74 chlmenu. exe..got [050] 6F 20 31 30 0D 0A o 10.. [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,149) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,149) wrote 149 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14176 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=65280 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6153 (0x1809) smb_vwv[ 3]= 133 (0x85) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 426 (0x1AA) smb_vwv[ 6]= 426 (0x1AA) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 426 (0x1AA) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=133 len=426 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 133, count = 426, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 133, count_out = 426 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 133 426 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 133 426 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) is_locked: posix start=133 len=426 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] smbd/fileio.c:read_file(101) read_file (Ambra.bat): pos = 133, size = 426, returned 0 [2006/06/21 14:19:27, 3] smbd/reply.c:send_file_readX(2257) send_file_readX fnum=6153 max=426 nread=0 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=65280 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,63) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,63) wrote 63 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 76 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x4c [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 11621 of length 80 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1260 smb_uid=100 smb_mid=14273 smt_wct=15 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8 (0x8) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=11 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 EC 03 00 00 00 00 00 00 ........ ... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13032) conn 0x83393b8 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2418) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfilepathinfo(2452) call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: . [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning d [2006/06/21 14:19:27, 10] smbd/trans2.c:call_trans2qfilepathinfo(2586) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2qfilepathinfo(2596) SMB_QFBI - create: Sat Jun 17 16:10:26 2006 access: Wed Jun 21 14:18:32 2006 write: Sat Jun 17 16:10:26 2006 change: Sat Jun 17 16:10:26 2006 mode: 10 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,104) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,104) wrote 104 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 70 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x46 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 11622 of length 74 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1260 smb_uid=100 smb_mid=14337 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 00 00 02 01 ..... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 13032) conn 0x83393b8 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/trans2.c:call_trans2qfsinfo(1775) call_trans2qfsinfo: level = 258 [2006/06/21 14:19:27, 5] smbd/trans2.c:call_trans2qfsinfo(1881) call_trans2qfsinfo : SMB_QUERY_FS_VOLUME_INFO namelen = 8, vol=Software serv=Software [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(556) t2_rep: params_sent_thistime = 0, data_sent_thistime = 34, useable_space = 131012 [2006/06/21 14:19:27, 9] smbd/trans2.c:send_trans2_replies(558) t2_rep: params_to_send = 0, data_to_send = 34, paramsize = 0, datasize = 34 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,94) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,94) wrote 94 [2006/06/21 14:19:27, 4] smbd/trans2.c:call_trans2qfsinfo(2065) SMBtrans2 info_level = 258 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 6251 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=2016 smb_uid=100 smb_mid=40961 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13042) conn 0x832e9c0 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 4] smbd/vfs.c:vfs_ChDir(660) vfs_ChDir to /home/data/Datamap/andoburg [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2006/06/21 14:19:27, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "Ambra.bat" [2006/06/21 14:19:27, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [AMBRA.BAT] -> [Ambra.bat] [2006/06/21 14:19:27, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Ambra.bat) returning 0744 [2006/06/21 14:19:27, 5] smbd/files.c:file_new(129) allocated file structure 600, fnum = 4696 (1 used) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1047) open_file_shared: fname = Ambra.bat, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 744, oplock request = 3 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[0]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1685, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[1]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[2]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:get_share_modes(480) get_share_modes: share_mode_entry[3]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 4] smbd/open.c:open_file_shared1(1251) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2006/06/21 14:19:27, 10] smbd/open.c:fd_open(50) fd_open: name Ambra.bat, flags = 00 mode = 0744, fd = 20. [2006/06/21 14:19:27, 2] smbd/open.c:open_file(245) andoburg opened file Ambra.bat read=Yes write=No (numopen=1) [2006/06/21 14:19:27, 10] smbd/open.c:open_file_shared1(1380) open_file_shared : share_mode = 40 [2006/06/21 14:19:27, 10] locking/locking.c:set_share_mode(723) set_share_mode: adding entry for file Ambra.bat. new num_share_modes = 5 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 304, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1685, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13031, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 892, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[4]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(283) dos_mode: Ambra.bat [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning a [2006/06/21 14:19:27, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning a [2006/06/21 14:19:27, 5] smbd/nttrans.c:reply_ntcreate_and_X(1024) reply_ntcreate_and_X: fnum = 4696, open name = Ambra.bat [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=2016 smb_uid=100 smb_mid=40961 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=22528 (0x5800) smb_vwv[ 3]= 274 (0x112) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15982 (0x3E6E) smb_vwv[ 7]= 6618 (0x19DA) smb_vwv[ 8]=50834 (0xC692) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]=22385 (0x5771) smb_vwv[11]=11504 (0x2CF0) smb_vwv[12]=50837 (0xC695) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15982 (0x3E6E) smb_vwv[15]= 6618 (0x19DA) smb_vwv[16]=50834 (0xC692) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15982 (0x3E6E) smb_vwv[19]= 6618 (0x19DA) smb_vwv[20]=50834 (0xC692) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=34048 (0x8500) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(449) write_socket(27,107) [2006/06/21 14:19:27, 6] lib/util_sock.c:write_socket(452) write_socket(27,107) wrote 107 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 6252 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8271 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 8662 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=45312 smt_wct=3 smb_vwv[ 0]= 5325 (0x14CD) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13031) conn 0x832f030 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 2503 of length 45 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=10624 smt_wct=3 smb_vwv[ 0]= 4623 (0x120F) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 13040) conn 0x832f130 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 3] smbd/reply.c:reply_close(2887) close fd=24 fnum=4623 (numopen=1) [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(609) del_share_entry: num_share_modes = 5 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(614) del_share_entry: deleted share_mode_entry[3]: pid = 13040, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 259, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(624) del_share_entry: deleting entry 3 [2006/06/21 14:19:27, 10] locking/locking.c:del_share_entry(646) del_share_entry: Remaining table. [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[0]: pid = 13036, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 866, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[1]: pid = 13042, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 304, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[2]: pid = 13025, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 1685, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] locking/locking.c:print_share_mode_table(432) print_share_mode_table: share_mode_entry[3]: pid = 13041, share_mode = 0x40, desired_access = 0x20089, port = 0x0, type= 0x0, file_id = 105, dev = 0x802, inode = 3129358 [2006/06/21 14:19:27, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 4 for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:posix_locking_close_file(1240) posix_locking_close_file: file Ambra.bat has no outstanding locks. [2006/06/21 14:19:27, 2] smbd/close.c:close_normal_file(272) andoburg closed file Ambra.bat (numopen=0) [2006/06/21 14:19:27, 5] smbd/files.c:file_free(439) freed files structure 4623 (0 used) [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 3777 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1748 smb_uid=101 smb_mid=3267 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14489 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=488 smb_uid=100 smb_mid=61377 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13028) conn 0x832ee88 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2006/06/21 14:19:27, 10] smbd/nttrans.c:map_create_disposition(341) [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 14177 of length 63 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=65344 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6153 (0x1809) smb_vwv[ 3]= 56 (0x38) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 512 (0x200) smb_vwv[ 6]= 512 (0x200) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 512 (0x200) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 13025) conn 0x832f110 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 1002 and contains 3 supplementary groups Group[ 0]: 1002 Group[ 1]: 0 Group[ 2]: 10001 [2006/06/21 14:19:27, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,0) gid=(0,1002) [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(101) is_locked: brl start=56 len=512 unlocked for file Ambra.bat [2006/06/21 14:19:27, 10] locking/posix.c:is_posix_locked(697) is_posix_locked: File Ambra.bat, offset = 56, count = 512, type = READ [2006/06/21 14:19:27, 10] locking/posix.c:posix_lock_in_range(633) posix_lock_in_range: offset_out = 56, count_out = 512 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(650) posix_fcntl_lock 7 12 56 512 0 [2006/06/21 14:19:27, 8] lib/util.c:fcntl_lock(1759) fcntl_lock 7 12 56 512 0 [2006/06/21 14:19:27, 8] locking/posix.c:posix_fcntl_lock(680) posix_fcntl_lock: Lock call failed [2006/06/21 14:19:27, 10] locking/locking.c:is_locked(113) [2006/06/21 14:19:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2006/06/21 14:19:27, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x6a [2006/06/21 14:19:27, 3] smbd/process.c:process_smb(1091) Transaction 11623 of length 110 [2006/06/21 14:19:27, 5] lib/util.c:show_msg(464) [2006/06/21 14:19:27, 5] lib/util.c:show_msg(474) size=106 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1260 smb_uid=100 smb_mid=14401 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 5120 (0x1400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=23 [2006/06/21 14:19:27, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 41 00 6D 00 62 00 72 00 61 00 2E 00 62 .\.A.m.b .r.a...b [010] 00 61 00 74 00 00 00 .a.t... [2006/06/21 14:19:27, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 13032) conn 0x832ef20 [2006/06/21 14:19:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 1002) - sec_ctx_stack_ndx = 0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-2969752157-892696647-4271518216-3002 contains 8 SIDs SID[ 0]: S-1-5-21-2969752157-892696647-4271518216-3002 SID[ 1]: S-1-5-21-2969752157-892696647-4271518216-3003 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2969752157-892696647-4271518216-3005 SID[ 6]: S-1-5-21-2969752157-892696647-4271518216-1001 SID[ 7]: S-1-5-21-2969752157-892696647-4271518216-512 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/21 14:19:27, 5] auth/auth_util.c:debug_unix_user_token(506)