[2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 88 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x58 [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 49 of length 92 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8832 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 00 00 .\... [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af72460 [2006/06/23 12:38:46, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:46, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:38:46, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1518 Primary group is 40 and contains 13 supplementary groups Group[ 0]: 40 Group[ 1]: 0 Group[ 2]: 14 Group[ 3]: 60 Group[ 4]: 63 Group[ 5]: 80 Group[ 6]: 120 Group[ 7]: 130 Group[ 8]: 160 Group[ 9]: 162 Group[ 10]: 167 Group[ 11]: 170 Group[ 12]: 1025 [2006/06/23 12:38:46, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1518,1518) gid=(0,40) [2006/06/23 12:38:46, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 [2006/06/23 12:38:46, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/23 12:38:46, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/23 12:38:46, 5] smbd/open.c:open_directory(1808) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 [2006/06/23 12:38:46, 5] smbd/files.c:file_new(128) allocated file structure 1856, fnum = 5952 (1 used) [2006/06/23 12:38:46, 10] locking/locking.c:unparse_share_modes(540) unparse_share_modes: del: 0, num: 1 [2006/06/23 12:38:46, 10] locking/locking.c:print_share_mode_table(417) print_share_mode_table: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 7, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:46, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:46, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:46, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:46, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 5952, open name = . [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8832 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=16384 (0x4000) smb_vwv[ 3]= 279 (0x117) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=46040 (0xB3D8) smb_vwv[ 7]= 2238 (0x8BE) smb_vwv[ 8]=50838 (0xC696) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=49107 (0xBFD3) smb_vwv[11]=58224 (0xE370) smb_vwv[12]=50838 (0xC696) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=46040 (0xB3D8) smb_vwv[15]= 2238 (0x8BE) smb_vwv[16]=50838 (0xC696) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=46040 (0xB3D8) smb_vwv[19]= 2238 (0x8BE) smb_vwv[20]=50838 (0xC696) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 72 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x48 [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 50 of length 76 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8896 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 00 00 00 40 17 EE 03 ...@... [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23622) conn 0x552af72460 [2006/06/23 12:38:46, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:46, 3] smbd/trans2.c:call_trans2qfilepathinfo(2799) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2006/06/23 12:38:46, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:38:46, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 7, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:46, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913) call_trans2qfilepathinfo . (fnum = 5952) level=1006 call=7 total_data=0 [2006/06/23 12:38:46, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:46, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:46, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:46, 10] smbd/trans2.c:call_trans2qfilepathinfo(3228) call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2006/06/23 12:38:46, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2006/06/23 12:38:46, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8896 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 00 00 00 00 00 02 00 0A 00 00 FD 00 00 ........ ..... [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 70 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x46 [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 51 of length 74 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8960 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 00 00 00 05 01 ..... [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23622) conn 0x552af72460 [2006/06/23 12:38:46, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:46, 3] smbd/trans2.c:call_trans2qfsinfo(2136) call_trans2qfsinfo: level = 261 [2006/06/23 12:38:46, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2006/06/23 12:38:46, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8960 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 20 (0x14) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 20 (0x14) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=21 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 00 2B 00 00 00 FF 00 00 00 08 00 00 00 4E 00 54 .+...... .....N.T [010] 00 46 00 53 00 .F.S. [2006/06/23 12:38:46, 4] smbd/trans2.c:call_trans2qfsinfo(2465) SMBtrans2 info_level = 261 [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 41 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x29 [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 52 of length 45 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=9024 smt_wct=3 smb_vwv[ 0]= 5952 (0x1740) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBclose (pid 23622) conn 0x552af72460 [2006/06/23 12:38:46, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:46, 3] smbd/reply.c:reply_close(3257) close directory fnum=5952 [2006/06/23 12:38:46, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:38:46, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 7, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:46, 5] smbd/files.c:file_free(450) freed files structure 5952 (0 used) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=9024 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 1438 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x59e [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 53 of length 1442 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=1438 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=9088 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 1438 (0x59E) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1276 (0x4FC) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=1379 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 60 82 04 F8 06 06 2B 06 01 05 05 02 A0 82 04 EC `.....+. ........ [010] 30 82 04 E8 A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 BE 04 82 +.....7. ........ [040] 04 BA 60 82 04 B6 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H..... [050] 02 01 00 6E 82 04 A5 30 82 04 A1 A0 03 02 01 05 ...n...0 ........ [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 03 CB 61 82 03 C7 30 82 03 C3 A0 03 02 01 05 A1 ..a...0. ........ [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 03 8A 30 82 03 86 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 03 78 04 82 03 74 5A 8C 40 4C BF 12 C1 ....x... tZ.@L... [0D0] E2 FD E7 8B AA BA EB 6E 4A 36 C6 C3 EE E2 7B AA .......n J6....{. [0E0] C2 18 7E DF A4 C2 2A 02 41 29 6C 70 10 F9 2F 8E ..~...*. A)lp../. [0F0] B0 96 1A 62 1F DC CB D7 5D E4 86 52 AE 08 74 85 ...b.... ]..R..t. [100] 59 69 AC F5 8D 47 89 01 3E 1F BD CA 8D 33 14 97 Yi...G.. >....3.. [110] D2 72 25 0D 09 E6 37 13 B1 E7 B0 22 BE 69 85 E2 .r%...7. ...".i.. [120] 4A 27 F1 FA FF 6D D3 9D 4B 7E 77 16 73 5F 9C 70 J'...m.. K~w.s_.p [130] 71 3B CB 86 2D 16 7C 38 BA 3E EF E0 81 C9 F9 2C q;..-.|8 .>....., [140] 70 7B EE D7 EB 12 52 AC B4 AF 93 FE 90 C8 8D F6 p{....R. ........ [150] B7 0F 96 0E 04 8D A8 95 D7 2C F5 92 24 B0 29 4C ........ .,..$.)L [160] 8D E8 1C 36 AA CF 16 E3 B6 6F 5A 43 E1 72 39 02 ...6.... .oZC.r9. [170] 89 D3 90 5E 8E 82 97 58 9D 83 37 3D CA F4 07 8C ...^...X ..7=.... [180] EE 8E 9E 6E 71 65 72 8C CD 82 72 B1 56 65 43 D5 ...nqer. ..r.VeC. [190] 08 BC F9 97 E8 26 C7 CA 49 38 A7 A0 3A AF 0C E1 .....&.. I8..:... [1A0] 40 73 89 E0 2F F3 A1 A8 84 C8 40 2C 6E D2 D0 1C @s../... ..@,n... [1B0] C0 29 11 D0 F4 81 C9 C7 79 80 0E F6 8C 01 F1 3C .)...... y......< [1C0] ED CC 9C 86 AC 12 F5 0A 6D 0B A8 A1 72 4A 52 9F ........ m...rJR. [1D0] CD 98 C3 F9 BD CC 1A C4 FA F7 0B 88 24 F1 6F 4C ........ ....$.oL [1E0] 52 AA 5F 37 A6 4E ED 9A 1E C0 EF A0 6A 4A 39 12 R._7.N.. ....jJ9. [1F0] 93 DF D6 D7 F3 B0 01 60 A2 E6 2A CC A0 26 55 D8 .......` ..*..&U. [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:38:46, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:46, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:46, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:46, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:46, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:38:46, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:38:46, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:38:46, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 118 [2006/06/23 12:38:46, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:38:46, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:38:46, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:38:46, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1210 [2006/06/23 12:38:46, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:38:46, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:38:46, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:38:46, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:38:46, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:38:46, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:38:46, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:38:46, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:38:46, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:38:46, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:38:46, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:38:46, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=118 smb_mid=9088 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 100 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x64 [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 54 of length 104 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=748 smb_uid=115 smb_mid=9152 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]=16384 (0x4000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 256 (0x100) smb_bcc=17 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [010] 00 . [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af5b3b0 [2006/06/23 12:38:46, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:46, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:38:46, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1518 Primary group is 40 and contains 13 supplementary groups Group[ 0]: 40 Group[ 1]: 0 Group[ 2]: 14 Group[ 3]: 60 Group[ 4]: 63 Group[ 5]: 80 Group[ 6]: 120 Group[ 7]: 130 Group[ 8]: 160 Group[ 9]: 162 Group[ 10]: 167 Group[ 11]: 170 Group[ 12]: 1025 [2006/06/23 12:38:46, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1518,1518) gid=(0,40) [2006/06/23 12:38:46, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /tmp [2006/06/23 12:38:46, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0 [2006/06/23 12:38:46, 4] smbd/nttrans.c:nt_open_pipe(330) nt_open_pipe: Opening pipe \srvsvc. [2006/06/23 12:38:46, 3] smbd/nttrans.c:nt_open_pipe(351) nt_open_pipe: Known pipe srvsvc opening. [2006/06/23 12:38:46, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(180) Open pipe requested srvsvc (pipes_open=0) [2006/06/23 12:38:46, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(285) Create pipe requested srvsvc [2006/06/23 12:38:46, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles: created handle list for pipe srvsvc [2006/06/23 12:38:46, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc [2006/06/23 12:38:46, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(363) Created internal pipe srvsvc (pipes_open=0) [2006/06/23 12:38:46, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263) Opened pipe srvsvc with handle 748b (pipes_open=1) [2006/06/23 12:38:46, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(269) open pipes: name srvsvc pnum=748b [2006/06/23 12:38:46, 5] smbd/nttrans.c:do_ntcreate_pipe_open(400) do_ntcreate_pipe_open: open pipe = \srvsvc [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=748 smb_uid=115 smb_mid=9152 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=35584 (0x8B00) smb_vwv[ 3]= 372 (0x174) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 136 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x88 [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 55 of length 140 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=136 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=115 smb_mid=9216 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29835 (0x748B) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 72 (0x48) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 72 (0x48) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=73 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... [010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ [020] 00 C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 ..O2Kp.. ..xZG.n. [030] 88 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........ [040] 00 2B 10 48 60 02 00 00 00 .+.H`... . [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBwriteX (pid 23622) conn 0x552af5b3b0 [2006/06/23 12:38:46, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:46, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=748b [2006/06/23 12:38:46, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name srvsvc pnum=748b (pipes_open=1) [2006/06/23 12:38:46, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) write_to_pipe: 748b name: srvsvc open: Yes len: 72 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 72 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 16 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 56 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0b [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0048 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000001 [2006/06/23 12:38:46, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(479) unmarshall_rpc_header: using little-endian RPC [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) unmarshall_rpc_header: type = 11, flags = 3 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 0 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 56 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) process_complete_pdu: processing packet type 11 [2006/06/23 12:38:46, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1495) api_pipe_bind_req: decode request. 1495 [2006/06/23 12:38:46, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1506) api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_rb [2006/06/23 12:38:46, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_bba [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0000 max_tsize: 10b8 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0002 max_rsize: 10b8 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 assoc_gid: 00000000 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0008 num_contexts: 01 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000c context_id : 0000 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 000e num_transfer_syntaxes: 01 [2006/06/23 12:38:46, 6] rpc_parse/parse_prs.c:prs_debug(84) 00000f smb_io_rpc_iface [2006/06/23 12:38:46, 7] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_uuid uuid [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 data : 4b324fc8 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 data : 1670 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 data : 01d3 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0018 data : 12 78 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 001a data : 5a 47 bf 6e e1 88 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 version: 00000003 [2006/06/23 12:38:46, 6] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_rpc_iface [2006/06/23 12:38:46, 7] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_uuid uuid [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 data : 8a885d04 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0028 data : 1ceb [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002a data : 11c9 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 002c data : 9f e8 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 002e data : 08 00 2b 10 48 60 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 version: 00000002 [2006/06/23 12:38:46, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1548) api_pipe_bind_req: make response. 1548 [2006/06/23 12:38:46, 3] rpc_server/srv_pipe.c:check_bind_req(959) check_bind_req for \PIPE\srvsvc [2006/06/23 12:38:46, 10] rpc_server/srv_pipe.c:check_bind_req(964) checking \PIPE\lsarpc [2006/06/23 12:38:46, 10] rpc_server/srv_pipe.c:check_bind_req(964) checking \PIPE\lsarpc [2006/06/23 12:38:46, 10] rpc_server/srv_pipe.c:check_bind_req(964) checking \PIPE\samr [2006/06/23 12:38:46, 10] rpc_server/srv_pipe.c:check_bind_req(964) checking \PIPE\NETLOGON [2006/06/23 12:38:46, 10] rpc_server/srv_pipe.c:check_bind_req(964) checking \PIPE\srvsvc [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_ba [2006/06/23 12:38:46, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_bba [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0000 max_tsize: 10b8 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0002 max_rsize: 10b8 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 assoc_gid: 000053f0 [2006/06/23 12:38:46, 6] rpc_parse/parse_prs.c:prs_debug(84) 000008 smb_io_rpc_addr_str [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 len: 000d [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 000a str: \PIPE\ntsvcs. [2006/06/23 12:38:46, 6] rpc_parse/parse_prs.c:prs_debug(84) 000017 smb_io_rpc_results [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0018 num_results: 01 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 001c result : 0000 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 001e reason : 0000 [2006/06/23 12:38:46, 6] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_rpc_iface [2006/06/23 12:38:46, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_uuid uuid [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 data : 8a885d04 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0024 data : 1ceb [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0026 data : 11c9 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0028 data : 9f e8 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 002a data : 08 00 2b 10 48 60 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 version: 00000002 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0044 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000001 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 56 [2006/06/23 12:38:46, 3] smbd/pipes.c:reply_pipe_write_and_X(207) writeX-IPC pnum=748b nwritten=72 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=115 smb_mid=9216 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 72 (0x48) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 59 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x3b [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 56 of length 63 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=115 smb_mid=9280 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29835 (0x748B) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBreadX (pid 23622) conn 0x552af5b3b0 [2006/06/23 12:38:46, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:46, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=748b [2006/06/23 12:38:46, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name srvsvc pnum=748b (pipes_open=1) [2006/06/23 12:38:46, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) read_from_pipe: 748b name: srvsvc len: 1024 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1051) read_from_pipe: srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2006/06/23 12:38:46, 3] smbd/pipes.c:reply_pipe_read_and_X(252) readX-IPC pnum=748b min=1024 max=1024 nread=68 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=127 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=115 smb_mid=9280 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 68 (0x44) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=68 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 00 ........ D....... [010] B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 5C .....S.. ..\PIPE\ [020] 6E 74 73 76 63 73 00 00 01 00 00 00 00 00 00 00 ntsvcs.. ........ [030] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [040] 02 00 00 00 .... [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 168 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0xa8 [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 57 of length 172 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=168 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=748 smb_uid=115 smb_mid=9344 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 84 (0x54) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 84 (0x54) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29835 (0x748B) smb_bcc=101 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [010] 00 05 00 00 03 10 00 00 00 54 00 00 00 01 00 00 ........ .T...... [020] 00 3C 00 00 00 00 00 10 00 80 DD B8 03 09 00 00 .<...... ........ [030] 00 00 00 00 00 09 00 00 00 5C 00 5C 00 69 00 62 ........ .\.\.i.b [040] 00 72 00 69 00 78 00 32 00 00 00 C9 11 04 00 00 .r.i.x.2 ........ [050] 00 00 00 00 00 04 00 00 00 64 00 66 00 73 00 00 ........ .d.f.s.. [060] 00 01 00 00 00 ..... [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBtrans (pid 23622) conn 0x552af5b3b0 [2006/06/23 12:38:46, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:46, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=84 params=0 setup=2 [2006/06/23 12:38:46, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2006/06/23 12:38:46, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2006/06/23 12:38:46, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2006/06/23 12:38:46, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=748b [2006/06/23 12:38:46, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name srvsvc pnum=748b (pipes_open=1) [2006/06/23 12:38:46, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "srvsvc" (pnum 748b) [2006/06/23 12:38:46, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x552af93c20 max_trans_reply: 1024 [2006/06/23 12:38:46, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) write_to_pipe: 748b name: srvsvc open: Yes len: 84 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 84 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 84 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) fill_rpc_header: data_to_copy = 84, len_needed_to_complete_hdr = 16, receive_len = 0 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 16 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 68 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 68 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0054 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000001 [2006/06/23 12:38:46, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(479) unmarshall_rpc_header: using little-endian RPC [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) unmarshall_rpc_header: type = 0, flags = 3 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 0 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 68 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 68, incoming data = 68 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) process_complete_pdu: processing packet type 0 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_req req [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 alloc_hint: 0000003c [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0004 context_id: 0000 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0006 opnum : 0010 [2006/06/23 12:38:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 77 [2006/06/23 12:38:46, 5] rpc_server/srv_pipe.c:api_pipe_request(2195) Requested \PIPE\srvsvc [2006/06/23 12:38:46, 4] rpc_server/srv_pipe.c:api_rpcTNP(2230) api_rpcTNP: srvsvc op 0x10 - api_rpcTNP: rpc command: SRV_NET_SHARE_GET_INFO [2006/06/23 12:38:46, 6] rpc_server/srv_pipe.c:api_rpcTNP(2256) api_rpc_cmds[8].fn == 0x552abc10d9 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 srv_io_q_net_share_get_info [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 ptr_srv_name: 03b8dd80 [2006/06/23 12:38:46, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 uni_max_len: 00000009 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset : 00000000 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c uni_str_len: 00000009 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0010 buffer : \.\.i.b.r.i.x.2... [2006/06/23 12:38:46, 6] rpc_parse/parse_prs.c:prs_debug(84) 000022 smb_io_unistr2 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 uni_max_len: 00000004 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 offset : 00000000 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 002c uni_str_len: 00000004 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0030 buffer : d.f.s... [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0038 info_level: 00000001 [2006/06/23 12:38:46, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1491) _srv_net_share_get_info: 1491 [2006/06/23 12:38:46, 5] rpc_server/srv_srvsvc_nt.c:init_srv_r_net_share_get_info(774) init_srv_r_net_share_get_info: 774 [2006/06/23 12:38:46, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142) init_srv_share_info1: dfs 0 DFS root [2006/06/23 12:38:46, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) init_srv_share_info1_str [2006/06/23 12:38:46, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1497) _srv_net_share_get_info: 1497 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 srv_io_r_net_share_get_info [2006/06/23 12:38:46, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 srv_io_srv_share_info info [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 switch_value : 00000001 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 ptr_share_ctr: 00000001 [2006/06/23 12:38:46, 7] rpc_parse/parse_prs.c:prs_debug(84) 000008 srv_io_share_info1 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 ptr_netname: 00000001 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c type : 00000000 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 ptr_remark : 00000001 [2006/06/23 12:38:46, 7] rpc_parse/parse_prs.c:prs_debug(84) 000014 srv_io_share_info1_str [2006/06/23 12:38:46, 8] rpc_parse/parse_prs.c:prs_debug(84) 000014 smb_io_unistr2 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 uni_max_len: 00000004 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 offset : 00000000 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c uni_str_len: 00000004 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0020 buffer : d.f.s... [2006/06/23 12:38:46, 8] rpc_parse/parse_prs.c:prs_debug(84) 000028 smb_io_unistr2 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 uni_max_len: 00000009 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 002c offset : 00000000 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 uni_str_len: 00000009 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0034 buffer : D.F.S. .r.o.o.t... [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_werror(792) 0048 status: WERR_OK [2006/06/23 12:38:46, 5] rpc_server/srv_pipe.c:api_rpcTNP(2277) api_rpcTNP: called srvsvc successfully [2006/06/23 12:38:46, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 52 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 68 [2006/06/23 12:38:46, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) read_from_pipe: 748b name: srvsvc len: 1024 [2006/06/23 12:38:46, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1065) read_from_pipe: srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 76. [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0064 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000001 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp resp [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 0000004c [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/06/23 12:38:46, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/06/23 12:38:46, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..100] [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=156 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=748 smb_uid=115 smb_mid=9344 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=101 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 00 05 00 02 03 10 00 00 00 64 00 00 00 01 00 00 ........ .d...... [010] 00 4C 00 00 00 00 00 00 00 01 00 00 00 01 00 00 .L...... ........ [020] 00 01 00 00 00 00 00 00 00 01 00 00 00 04 00 00 ........ ........ [030] 00 00 00 00 00 04 00 00 00 64 00 66 00 73 00 00 ........ .d.f.s.. [040] 00 09 00 00 00 00 00 00 00 09 00 00 00 44 00 46 ........ .....D.F [050] 00 53 00 20 00 72 00 6F 00 6F 00 74 00 00 00 00 .S. .r.o .o.t.... [060] 00 00 00 00 00 ..... [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 41 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x29 [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 58 of length 45 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=115 smb_mid=9408 smt_wct=3 smb_vwv[ 0]=29835 (0x748B) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBclose (pid 23622) conn 0x552af5b3b0 [2006/06/23 12:38:46, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:46, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=748b [2006/06/23 12:38:46, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name srvsvc pnum=748b (pipes_open=1) [2006/06/23 12:38:46, 5] smbd/pipes.c:reply_pipe_close(272) reply_pipe_close: pnum:748b [2006/06/23 12:38:46, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) close_policy_by_pipe: deleted handle list for pipe srvsvc [2006/06/23 12:38:46, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1166) closed pipe name srvsvc pnum=748b (pipes_open=0) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=115 smb_mid=9408 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 88 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x58 [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 59 of length 92 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=9472 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 00 00 .\... [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af72460 [2006/06/23 12:38:46, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:46, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:38:46, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1518 Primary group is 40 and contains 13 supplementary groups Group[ 0]: 40 Group[ 1]: 0 Group[ 2]: 14 Group[ 3]: 60 Group[ 4]: 63 Group[ 5]: 80 Group[ 6]: 120 Group[ 7]: 130 Group[ 8]: 160 Group[ 9]: 162 Group[ 10]: 167 Group[ 11]: 170 Group[ 12]: 1025 [2006/06/23 12:38:46, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1518,1518) gid=(0,40) [2006/06/23 12:38:46, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /export/dfsroot [2006/06/23 12:38:46, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 [2006/06/23 12:38:46, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/23 12:38:46, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/23 12:38:46, 5] smbd/open.c:open_directory(1808) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 [2006/06/23 12:38:46, 5] smbd/files.c:file_new(128) allocated file structure 1857, fnum = 5953 (1 used) [2006/06/23 12:38:46, 10] locking/locking.c:unparse_share_modes(540) unparse_share_modes: del: 0, num: 1 [2006/06/23 12:38:46, 10] locking/locking.c:print_share_mode_table(417) print_share_mode_table: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 8, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:46, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:46, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:46, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:46, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 5953, open name = . [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=9472 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=16640 (0x4100) smb_vwv[ 3]= 279 (0x117) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=46040 (0xB3D8) smb_vwv[ 7]= 2238 (0x8BE) smb_vwv[ 8]=50838 (0xC696) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=49107 (0xBFD3) smb_vwv[11]=58224 (0xE370) smb_vwv[12]=50838 (0xC696) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=46040 (0xB3D8) smb_vwv[15]= 2238 (0x8BE) smb_vwv[16]=50838 (0xC696) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=46040 (0xB3D8) smb_vwv[19]= 2238 (0x8BE) smb_vwv[20]=50838 (0xC696) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 72 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x48 [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 60 of length 76 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=9536 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 00 00 00 41 17 EE 03 ...A... [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23622) conn 0x552af72460 [2006/06/23 12:38:46, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:46, 3] smbd/trans2.c:call_trans2qfilepathinfo(2799) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2006/06/23 12:38:46, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:38:46, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 8, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:46, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913) call_trans2qfilepathinfo . (fnum = 5953) level=1006 call=7 total_data=0 [2006/06/23 12:38:46, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:38:46, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:46, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:38:46, 10] smbd/trans2.c:call_trans2qfilepathinfo(3228) call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2006/06/23 12:38:46, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2006/06/23 12:38:46, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=9536 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 00 00 00 00 00 02 00 0A 00 00 FD 00 00 ........ ..... [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 102 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x66 [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 61 of length 106 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=102 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=9600 smt_wct=15 smb_vwv[ 0]= 34 (0x22) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 34 (0x22) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=37 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 00 00 00 16 00 56 05 16 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 53 00 43 00 52 00 41 00 54 00 43 00 48 00 22 .S.C.R.A .T.C.H." [020] 00 2A 00 00 00 .*... [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23622) conn 0x552af72460 [2006/06/23 12:38:46, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:46, 3] smbd/trans2.c:call_trans2findfirst(1632) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2006/06/23 12:38:46, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "SCRATCH"*" [2006/06/23 12:38:46, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [SCRATCH"*] [2006/06/23 12:38:46, 5] smbd/filename.c:unix_convert(185) unix_convert begin: name = SCRATCH"*, dirpath = , start = SCRATCH"* [2006/06/23 12:38:46, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled SCRATCH"* ? [2006/06/23 12:38:46, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component SCRATCH"* (len 9) ? [2006/06/23 12:38:46, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled SCRATCH"* ? [2006/06/23 12:38:46, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component SCRATCH"* (len 9) ? [2006/06/23 12:38:46, 5] smbd/filename.c:unix_convert(335) New file SCRATCH"* [2006/06/23 12:38:46, 5] smbd/trans2.c:call_trans2findfirst(1688) dir=./, mask = SCRATCH"* [2006/06/23 12:38:46, 5] smbd/dir.c:dptr_create(391) dptr_create dir=./ [2006/06/23 12:38:46, 3] smbd/dir.c:dptr_create(511) creating new dirptr 256 for path ./, expect_close = 1 [2006/06/23 12:38:46, 4] smbd/trans2.c:call_trans2findfirst(1745) dptr_num is 256, wcard = SCRATCH"*, attr = 22 [2006/06/23 12:38:46, 8] smbd/trans2.c:call_trans2findfirst(1750) dirpath=<./> dontdescend=<> [2006/06/23 12:38:46, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af5fd90 now at offset 0 [2006/06/23 12:38:46, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af5fd90 now at offset 2147483648 [2006/06/23 12:38:46, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af5fd90 now at offset 771496934 [2006/06/23 12:38:46, 5] smbd/msdfs.c:is_msdfs_link(281) is_msdfs_link: ./scratch -> msdfs:netvenus.tigr.org\scratch [2006/06/23 12:38:46, 5] smbd/trans2.c:get_lanman2_dir_entry(1131) get_lanman2_dir_entry: Masquerading msdfs link ./scratch as a directory [2006/06/23 12:38:46, 8] smbd/dosmode.c:dos_mode(300) dos_mode: ./scratch [2006/06/23 12:38:46, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:38:46, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d[sparse] [2006/06/23 12:38:46, 5] smbd/trans2.c:get_lanman2_dir_entry(1169) get_lanman2_dir_entry found ./scratch fname=scratch [2006/06/23 12:38:46, 10] smbd/trans2.c:get_lanman2_dir_entry(1310) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2006/06/23 12:38:46, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af5fd90 now at offset 1671277131 [2006/06/23 12:38:46, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af5fd90 now at offset 2147483647 [2006/06/23 12:38:46, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af5fd90 now at offset -1 [2006/06/23 12:38:46, 5] smbd/trans2.c:call_trans2findfirst(1798) call_trans2findfirst - (2) closing dptr_num 256 [2006/06/23 12:38:46, 4] smbd/dir.c:dptr_close_internal(238) closing dptr key 256 [2006/06/23 12:38:46, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010 [2006/06/23 12:38:46, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=176 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=9600 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 108 (0x6C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 108 (0x6C) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=121 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 6C 00 00 ........ .....l.. [010] 00 00 00 00 00 80 7F 4F BC 04 96 C6 01 00 EF 0D .......O ........ [020] 7F E3 96 C6 01 80 7F 4F BC 04 96 C6 01 80 7F 4F .......O .......O [030] BC 04 96 C6 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 10 02 00 00 0E 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 73 00 63 00 72 ........ ...s.c.r [070] 00 61 00 74 00 63 00 68 00 .a.t.c.h . [2006/06/23 12:38:46, 4] smbd/trans2.c:call_trans2findfirst(1834) SMBtrans2 mask=SCRATCH"* directory=./ dirtype=22 numentries=1 [2006/06/23 12:38:46, 10] smbd/mangle_hash2.c:name_map(617) name_map: SCRATCH"* -> 09E18AF1 -> S2QP5O~1 (cache=1) [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 41 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x29 [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 62 of length 45 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=9664 smt_wct=3 smb_vwv[ 0]= 5953 (0x1741) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBclose (pid 23622) conn 0x552af72460 [2006/06/23 12:38:46, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:46, 3] smbd/reply.c:reply_close(3257) close directory fnum=5953 [2006/06/23 12:38:46, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:38:46, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 8, dev = 0xfd00, inode = 655362 [2006/06/23 12:38:46, 5] smbd/files.c:file_free(450) freed files structure 5953 (0 used) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=9664 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 102 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x66 [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 63 of length 106 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=9728 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=19 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 73 00 63 00 72 00 61 00 74 00 63 00 68 .\.s.c.r .a.t.c.h [010] 00 00 00 ... [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af72460 [2006/06/23 12:38:46, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:38:46, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 [2006/06/23 12:38:46, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "scratch" [2006/06/23 12:38:46, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [SCRATCH] -> [scratch] [2006/06/23 12:38:46, 5] smbd/filename.c:unix_convert(185) unix_convert begin: name = scratch, dirpath = , start = scratch [2006/06/23 12:38:46, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:38:46, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:38:46, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:38:46, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:38:46, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:38:46, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:38:46, 5] smbd/filename.c:unix_convert(400) conversion finished scratch -> scratch [2006/06/23 12:38:46, 5] smbd/open.c:open_directory(1808) open_directory: opening directory scratch, access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 [2006/06/23 12:38:46, 5] smbd/open.c:open_directory(1823) open_directory: FILE_OPEN requested for directory scratch and it doesn't exist. [2006/06/23 12:38:46, 10] smbd/trans2.c:set_bad_path_error(2623) set_bad_path_error: err = 2 bad_path = 0 [2006/06/23 12:38:46, 3] smbd/error.c:error_packet(146) error packet at smbd/trans2.c(2629) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=9728 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 1438 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x59e [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 64 of length 1442 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=1438 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=9792 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 1438 (0x59E) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1276 (0x4FC) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=1379 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 60 82 04 F8 06 06 2B 06 01 05 05 02 A0 82 04 EC `.....+. ........ [010] 30 82 04 E8 A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 BE 04 82 +.....7. ........ [040] 04 BA 60 82 04 B6 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H..... [050] 02 01 00 6E 82 04 A5 30 82 04 A1 A0 03 02 01 05 ...n...0 ........ [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 03 CB 61 82 03 C7 30 82 03 C3 A0 03 02 01 05 A1 ..a...0. ........ [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 03 8A 30 82 03 86 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 03 78 04 82 03 74 5A 8C 40 4C BF 12 C1 ....x... tZ.@L... [0D0] E2 FD E7 8B AA BA EB 6E 4A 36 C6 C3 EE E2 7B AA .......n J6....{. [0E0] C2 18 7E DF A4 C2 2A 02 41 29 6C 70 10 F9 2F 8E ..~...*. A)lp../. [0F0] B0 96 1A 62 1F DC CB D7 5D E4 86 52 AE 08 74 85 ...b.... ]..R..t. [100] 59 69 AC F5 8D 47 89 01 3E 1F BD CA 8D 33 14 97 Yi...G.. >....3.. [110] D2 72 25 0D 09 E6 37 13 B1 E7 B0 22 BE 69 85 E2 .r%...7. ...".i.. [120] 4A 27 F1 FA FF 6D D3 9D 4B 7E 77 16 73 5F 9C 70 J'...m.. K~w.s_.p [130] 71 3B CB 86 2D 16 7C 38 BA 3E EF E0 81 C9 F9 2C q;..-.|8 .>....., [140] 70 7B EE D7 EB 12 52 AC B4 AF 93 FE 90 C8 8D F6 p{....R. ........ [150] B7 0F 96 0E 04 8D A8 95 D7 2C F5 92 24 B0 29 4C ........ .,..$.)L [160] 8D E8 1C 36 AA CF 16 E3 B6 6F 5A 43 E1 72 39 02 ...6.... .oZC.r9. [170] 89 D3 90 5E 8E 82 97 58 9D 83 37 3D CA F4 07 8C ...^...X ..7=.... [180] EE 8E 9E 6E 71 65 72 8C CD 82 72 B1 56 65 43 D5 ...nqer. ..r.VeC. [190] 08 BC F9 97 E8 26 C7 CA 49 38 A7 A0 3A AF 0C E1 .....&.. I8..:... [1A0] 40 73 89 E0 2F F3 A1 A8 84 C8 40 2C 6E D2 D0 1C @s../... ..@,n... [1B0] C0 29 11 D0 F4 81 C9 C7 79 80 0E F6 8C 01 F1 3C .)...... y......< [1C0] ED CC 9C 86 AC 12 F5 0A 6D 0B A8 A1 72 4A 52 9F ........ m...rJR. [1D0] CD 98 C3 F9 BD CC 1A C4 FA F7 0B 88 24 F1 6F 4C ........ ....$.oL [1E0] 52 AA 5F 37 A6 4E ED 9A 1E C0 EF A0 6A 4A 39 12 R._7.N.. ....jJ9. [1F0] 93 DF D6 D7 F3 B0 01 60 A2 E6 2A CC A0 26 55 D8 .......` ..*..&U. [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:38:46, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:46, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:38:46, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:38:46, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:38:46, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:38:46, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:38:46, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:38:46, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 119 [2006/06/23 12:38:46, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:38:46, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:38:46, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:38:46, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1210 [2006/06/23 12:38:46, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:38:46, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:38:46, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:38:46, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:38:46, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:38:46, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:38:46, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:38:46, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:38:46, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:38:46, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:38:46, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:38:46, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=119 smb_mid=9792 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 102 [2006/06/23 12:38:46, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x66 [2006/06/23 12:38:46, 3] smbd/process.c:process_smb(1194) Transaction 65 of length 106 [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=9856 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=19 [2006/06/23 12:38:46, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 73 00 63 00 72 00 61 00 74 00 63 00 68 .\.s.c.r .a.t.c.h [010] 00 00 00 ... [2006/06/23 12:38:46, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af72460 [2006/06/23 12:38:46, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 [2006/06/23 12:38:46, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:38:46, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1518 Primary group is 40 and contains 13 supplementary groups Group[ 0]: 40 Group[ 1]: 0 Group[ 2]: 14 Group[ 3]: 60 Group[ 4]: 63 Group[ 5]: 80 Group[ 6]: 120 Group[ 7]: 130 Group[ 8]: 160 Group[ 9]: 162 Group[ 10]: 167 Group[ 11]: 170 Group[ 12]: 1025 [2006/06/23 12:38:46, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1518,1518) gid=(0,40) [2006/06/23 12:38:46, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 [2006/06/23 12:38:46, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "scratch" [2006/06/23 12:38:46, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [SCRATCH] -> [scratch] [2006/06/23 12:38:46, 5] smbd/filename.c:unix_convert(185) unix_convert begin: name = scratch, dirpath = , start = scratch [2006/06/23 12:38:46, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:38:46, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:38:46, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:38:46, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:38:46, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:38:46, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:38:46, 5] smbd/filename.c:unix_convert(400) conversion finished scratch -> scratch [2006/06/23 12:38:46, 5] smbd/open.c:open_directory(1808) open_directory: opening directory scratch, access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 [2006/06/23 12:38:46, 5] smbd/open.c:open_directory(1823) open_directory: FILE_OPEN requested for directory scratch and it doesn't exist. [2006/06/23 12:38:46, 10] smbd/trans2.c:set_bad_path_error(2623) set_bad_path_error: err = 2 bad_path = 0 [2006/06/23 12:38:46, 3] smbd/error.c:error_packet(146) error packet at smbd/trans2.c(2629) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2006/06/23 12:38:46, 5] lib/util.c:show_msg(454) [2006/06/23 12:38:46, 5] lib/util.c:show_msg(464) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=9856 smt_wct=0 smb_bcc=0 [2006/06/23 12:38:46, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:38:46, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:38:46, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:38:46, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080716) - last(1151080612) < 900 [2006/06/23 12:38:46, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) dump_workgroups() dump workgroup on subnet 172.17.49.12: netmask= 255.255.255.0: TIGR(1) current master browser = UNKNOWN IBRIX2 40809b03 (ibrix2) [2006/06/23 12:38:46, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) dump_workgroups() dump workgroup on subnet UNICAST_SUBNET: netmask= 0.0.0.0: TIGR(1) current master browser = UNKNOWN IBRIX2 40809b03 (ibrix2) [2006/06/23 12:38:46, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:38:46, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found.