INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 lp_load: refreshing parameters Initialising global parameters params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" Processing section "[global]" doing parameter workgroup = NETWORX doing parameter netbios name = PUG handle_netbios_name: set global_myname to: PUG doing parameter server string = PUG doing parameter security = SHARE doing parameter encrypt passwords = Yes doing parameter create mask = 0644 doing parameter printing = cups doing parameter message command = /usr/bin/linpopup "%f" "%m" %s; rm %s doing parameter log file = /var/log/samba.log doing parameter unix extensions = yes doing parameter wins server = 192.168.0.2 pm_process() returned Yes lp_servicenumber: couldn't find homes set_server_role: role = ROLE_STANDALONE Attempting to register new charset UCS-2LE Registered charset UCS-2LE Attempting to register new charset UTF8 Registered charset UTF8 Attempting to register new charset ASCII Registered charset ASCII Attempting to register new charset 646 Registered charset 646 Attempting to register new charset ISO-8859-1 Registered charset ISO-8859-1 Attempting to register new charset UCS2-HEX Registered charset UCS2-HEX Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE Substituting charset 'ANSI_X3.4-1968' for LOCALE added interface ip=192.168.0.3 bcast=192.168.0.255 nmask=255.255.255.0 internal_resolve_name: looking up NETWORX#1d Opening cache file at /var/cache/samba/gencache.tdb tdb(unnamed): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied Attempt to open gencache.tdb has failed. resolve_lmhosts: Attempting lmhosts lookup for name NETWORX<0x1d> getlmhostsent: lmhost entry: 127.0.0.1 localhost resolve_hosts: not appropriate for name type <0x1d> name_resolve_bcast: Attempting broadcast lookup for name NETWORX<0x1d> bind succeeded on port 0 socket option SO_KEEPALIVE = 0 socket option SO_REUSEADDR = 1 socket option SO_BROADCAST = 1 Could not test socket option TCP_NODELAY. socket option IPTOS_LOWDELAY = 0 socket option IPTOS_THROUGHPUT = 0 socket option SO_SNDBUF = 108544 socket option SO_RCVBUF = 108544 socket option SO_SNDLOWAT = 1 socket option SO_RCVLOWAT = 1 socket option SO_SNDTIMEO = 0 socket option SO_RCVTIMEO = 0 Sending a packet of len 50 to (192.168.0.255) on port 137 read_udp_socket: lastip 192.168.0.2 lastport 137 read: 62 parse_nmb: packet id = 24414 Received a packet of len 62 from (192.168.0.2) port 137 nmb packet from 192.168.0.2(137) header: id=24414 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=NETWORX<1d> rr_type=32 rr_class=1 ttl=259200 answers 0 char `..... hex 6000C0A80002 Got a positive name query response from 192.168.0.2 ( 192.168.0.2 ) remove_duplicate_addrs2: looking for duplicate address/port pairs Opening cache file at /var/cache/samba/gencache.tdb tdb(unnamed): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied Attempt to open gencache.tdb has failed. internal_resolve_name: returning 1 addresses: 192.168.0.2:0 Connecting to host=192.168.0.2 Connecting to 192.168.0.2 at port 445 socket option SO_KEEPALIVE = 0 socket option SO_REUSEADDR = 0 socket option SO_BROADCAST = 0 socket option TCP_NODELAY = 1 socket option IPTOS_LOWDELAY = 0 socket option IPTOS_THROUGHPUT = 0 socket option SO_SNDBUF = 16384 socket option SO_RCVBUF = 87380 socket option SO_SNDLOWAT = 1 socket option SO_RCVLOWAT = 1 socket option SO_SNDTIMEO = 0 socket option SO_RCVTIMEO = 0 write_socket(3,183) write_socket(3,183) wrote 183 got smb length of 93 size=93 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=5174 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 7 (0x7) smb_vwv[ 1]=12802 (0x3202) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 2048 (0x800) smb_vwv[ 8]= 2 (0x2) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=32995 (0x80E3) smb_vwv[11]=32768 (0x8000) smb_vwv[12]= 6905 (0x1AF9) smb_vwv[13]=32547 (0x7F23) smb_vwv[14]=50254 (0xC44E) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 2303 (0x8FF) smb_bcc=24 [000] 52 E1 BA EC 40 AD 75 14 4E 00 45 00 54 00 57 00 R...@.u. N.E.T.W. [010] 4F 00 52 00 58 00 00 00 O.R.X... size=93 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=5174 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 7 (0x7) smb_vwv[ 1]=12802 (0x3202) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 2048 (0x800) smb_vwv[ 8]= 2 (0x2) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=32995 (0x80E3) smb_vwv[11]=32768 (0x8000) smb_vwv[12]= 6905 (0x1AF9) smb_vwv[13]=32547 (0x7F23) smb_vwv[14]=50254 (0xC44E) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 2303 (0x8FF) smb_bcc=24 [000] 52 E1 BA EC 40 AD 75 14 4E 00 45 00 54 00 57 00 R...@.u. N.E.T.W. [010] 4F 00 52 00 58 00 00 00 O.R.X... Serverzone is -7200 write_socket(3,132) write_socket(3,132) wrote 132 got smb length of 94 size=94 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=5174 smb_uid=0 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=53 [000] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [010] 00 62 00 61 00 20 00 33 00 2E 00 30 00 2E 00 32 .b.a. .3 ...0...2 [020] 00 61 00 00 00 4E 00 45 00 54 00 57 00 4F 00 52 .a...N.E .T.W.O.R [030] 00 58 00 00 00 .X... size=94 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=5174 smb_uid=0 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=53 [000] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [010] 00 62 00 61 00 20 00 33 00 2E 00 30 00 2E 00 32 .b.a. .3 ...0...2 [020] 00 61 00 00 00 4E 00 45 00 54 00 57 00 4F 00 52 .a...N.E .T.W.O.R [030] 00 58 00 00 00 .X... write_socket(3,90) write_socket(3,90) wrote 90 got smb length of 48 size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=5174 smb_uid=0 smb_mid=3 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [000] 49 50 43 00 00 00 00 IPC.... cli_init_creds: user guest domain NETWORX name_resolve_bcast: Attempting broadcast lookup for name __MSBROWSE__<0x1> bind succeeded on port 0 socket option SO_KEEPALIVE = 0 socket option SO_REUSEADDR = 1 socket option SO_BROADCAST = 1 Could not test socket option TCP_NODELAY. socket option IPTOS_LOWDELAY = 0 socket option IPTOS_THROUGHPUT = 0 socket option SO_SNDBUF = 108544 socket option SO_RCVBUF = 108544 socket option SO_SNDLOWAT = 1 socket option SO_RCVLOWAT = 1 socket option SO_SNDTIMEO = 0 socket option SO_RCVTIMEO = 0 Sending a packet of len 50 to (192.168.0.255) on port 137 read_udp_socket: lastip 192.168.0.128 lastport 137 read: 62 parse_nmb: packet id = 19348 Received a packet of len 62 from (192.168.0.128) port 137 nmb packet from 192.168.0.128(137) header: id=19348 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=No rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=__MSBROWSE__<01> rr_type=32 rr_class=1 ttl=300000 answers 0 char ...... hex E000C0A80080 Got a positive name query response from 192.168.0.128 ( 192.168.0.128 ) read_udp_socket: lastip 192.168.0.2 lastport 137 read: 62 parse_nmb: packet id = 19348 Received a packet of len 62 from (192.168.0.2) port 137 nmb packet from 192.168.0.2(137) header: id=19348 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=__MSBROWSE__<01> rr_type=32 rr_class=1 ttl=259200 answers 0 char ...... hex E000C0A80002 Got a positive name query response from 192.168.0.2 ( 192.168.0.2 ) name_status_find: looking up *#00 at 192.168.0.128 Opening cache file at /var/cache/samba/gencache.tdb tdb(unnamed): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied Attempt to open gencache.tdb has failed. bind succeeded on port 0 Sending a packet of len 50 to (192.168.0.128) on port 137 read_udp_socket: lastip 192.168.0.128 lastport 137 read: 229 parse_nmb: packet id = 22705 Received a packet of len 229 from (192.168.0.128) port 137 nmb packet from 192.168.0.128(137) header: id=22705 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=*<00> rr_type=33 rr_class=1 ttl=0 answers 0 char .KOOS hex 064B4F4F532020202020202020202020 answers 10 char .D.KOOS hex 0044004B4F4F53202020202020202020 answers 20 char D.BLUE hex 2020204400424C554520202020202020 answers 30 char ...BLUE hex 2020202000C400424C55452020202020 answers 40 char ...BLUE hex 2020202020201EC400424C5545202020 answers 50 char .D...__M hex 20202020202020201D440001025F5F4D answers 60 char SBROWSE__......a hex 5342524F5753455F5F0201C400000461 answers 70 char I............... hex 49E8CC00000000000000000000000000 answers 80 char ................ hex 00000000000000000000000000000000 answers 90 char ........... hex 0000000000000000000000 KOOS#00: flags = 0x44 KOOS#20: flags = 0x44 BLUE#00: flags = 0xc4 BLUE#1e: flags = 0xc4 BLUE#1d: flags = 0x44 __MSBROWSE__#01: flags = 0xc4 Opening cache file at /var/cache/samba/gencache.tdb tdb(unnamed): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied Attempt to open gencache.tdb has failed. name_status_find: name found, name BLUE ip address is 192.168.0.128 internal_resolve_name: looking up BLUE#1d Opening cache file at /var/cache/samba/gencache.tdb tdb(unnamed): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied Attempt to open gencache.tdb has failed. resolve_lmhosts: Attempting lmhosts lookup for name BLUE<0x1d> getlmhostsent: lmhost entry: 127.0.0.1 localhost resolve_hosts: not appropriate for name type <0x1d> name_resolve_bcast: Attempting broadcast lookup for name BLUE<0x1d> bind succeeded on port 0 socket option SO_KEEPALIVE = 0 socket option SO_REUSEADDR = 1 socket option SO_BROADCAST = 1 Could not test socket option TCP_NODELAY. socket option IPTOS_LOWDELAY = 0 socket option IPTOS_THROUGHPUT = 0 socket option SO_SNDBUF = 108544 socket option SO_RCVBUF = 108544 socket option SO_SNDLOWAT = 1 socket option SO_RCVLOWAT = 1 socket option SO_SNDTIMEO = 0 socket option SO_RCVTIMEO = 0 Sending a packet of len 50 to (192.168.0.255) on port 137 read_udp_socket: lastip 192.168.0.128 lastport 137 read: 62 parse_nmb: packet id = 25381 Received a packet of len 62 from (192.168.0.128) port 137 nmb packet from 192.168.0.128(137) header: id=25381 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=No rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=BLUE<1d> rr_type=32 rr_class=1 ttl=300000 answers 0 char `..... hex 6000C0A80080 Got a positive name query response from 192.168.0.128 ( 192.168.0.128 ) remove_duplicate_addrs2: looking for duplicate address/port pairs Opening cache file at /var/cache/samba/gencache.tdb tdb(unnamed): tdb_open_ex: could not open file /var/cache/samba/gencache.tdb: Permission denied Attempt to open gencache.tdb has failed. internal_resolve_name: returning 1 addresses: 192.168.0.128:0 found master browser BLUE, 192.168.0.128 Connecting to host=192.168.0.128 Connecting to 192.168.0.128 at port 445 socket option SO_KEEPALIVE = 0 socket option SO_REUSEADDR = 0 socket option SO_BROADCAST = 0 socket option TCP_NODELAY = 1 socket option IPTOS_LOWDELAY = 0 socket option IPTOS_THROUGHPUT = 0 socket option SO_SNDBUF = 16384 socket option SO_RCVBUF = 87380 socket option SO_SNDLOWAT = 1 socket option SO_RCVLOWAT = 1 socket option SO_SNDTIMEO = 0 socket option SO_RCVTIMEO = 0 write_socket(6,183) write_socket(6,183) wrote 183 got smb length of 85 size=85 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=5174 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 2563 (0xA03) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 17 (0x11) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 227 (0xE3) smb_vwv[11]=39552 (0x9A80) smb_vwv[12]=61649 (0xF0D1) smb_vwv[13]=52009 (0xCB29) smb_vwv[14]=49897 (0xC2E9) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 255 (0xFF) smb_bcc=16 [000] 93 CF AB D5 3C 0A 49 44 AD EB 65 3F C5 7D 60 1C ....<.ID ..e?.}`. size=85 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=5174 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 2563 (0xA03) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 17 (0x11) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 227 (0xE3) smb_vwv[11]=39552 (0x9A80) smb_vwv[12]=61649 (0xF0D1) smb_vwv[13]=52009 (0xCB29) smb_vwv[14]=49897 (0xC2E9) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 255 (0xFF) smb_bcc=16 [000] 93 CF AB D5 3C 0A 49 44 AD EB 65 3F C5 7D 60 1C ....<.ID ..e?.}`. Doing spnego session setup (blob length=16) server didn't supply a full spnego negprot write_socket(6,162) write_socket(6,162) wrote 162 got smb length of 262 size=262 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=5174 smb_uid=2048 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 262 (0x106) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 145 (0x91) smb_bcc=219 [000] A1 81 8E 30 81 8B A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 76 04 74 4E 54 4C .....7.. ..v.tNTL [020] 4D 53 53 50 00 02 00 00 00 08 00 08 00 30 00 00 MSSP.... .....0.. [030] 00 15 02 8A 60 BE 6A C6 7E C4 DC 5D 13 00 00 00 ....`.j. ~..].... [040] 00 00 00 00 00 3C 00 3C 00 38 00 00 00 4B 00 4F .....<.< .8...K.O [050] 00 4F 00 53 00 02 00 08 00 4B 00 4F 00 4F 00 53 .O.S.... .K.O.O.S [060] 00 01 00 08 00 4B 00 4F 00 4F 00 53 00 04 00 08 .....K.O .O.S.... [070] 00 4B 00 4F 00 4F 00 53 00 03 00 08 00 4B 00 4F .K.O.O.S .....K.O [080] 00 4F 00 53 00 06 00 04 00 01 00 00 00 00 00 00 .O.S.... ........ [090] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [0A0] 00 35 00 2E 00 31 00 00 00 57 00 69 00 6E 00 64 .5...1.. .W.i.n.d [0B0] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 [0C0] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n [0D0] 00 61 00 67 00 65 00 72 00 00 00 .a.g.e.r ... size=262 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=5174 smb_uid=2048 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 262 (0x106) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 145 (0x91) smb_bcc=219 [000] A1 81 8E 30 81 8B A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 76 04 74 4E 54 4C .....7.. ..v.tNTL [020] 4D 53 53 50 00 02 00 00 00 08 00 08 00 30 00 00 MSSP.... .....0.. [030] 00 15 02 8A 60 BE 6A C6 7E C4 DC 5D 13 00 00 00 ....`.j. ~..].... [040] 00 00 00 00 00 3C 00 3C 00 38 00 00 00 4B 00 4F .....<.< .8...K.O [050] 00 4F 00 53 00 02 00 08 00 4B 00 4F 00 4F 00 53 .O.S.... .K.O.O.S [060] 00 01 00 08 00 4B 00 4F 00 4F 00 53 00 04 00 08 .....K.O .O.S.... [070] 00 4B 00 4F 00 4F 00 53 00 03 00 08 00 4B 00 4F .K.O.O.S .....K.O [080] 00 4F 00 53 00 06 00 04 00 01 00 00 00 00 00 00 .O.S.... ........ [090] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [0A0] 00 35 00 2E 00 31 00 00 00 57 00 69 00 6E 00 64 .5...1.. .W.i.n.d [0B0] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 [0C0] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n [0D0] 00 61 00 67 00 65 00 72 00 00 00 .a.g.e.r ... Got challenge flags: Got NTLMSSP neg_flags=0x608a0215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_CHAL_TARGET_INFO NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60080215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP challenge set by NTLM2 challenge is: [000] 91 7E DA E3 54 16 DA 76 .~..T..v NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60080215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH write_socket(6,256) write_socket(6,256) wrote 256 got smb length of 126 size=126 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=5174 smb_uid=2048 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 126 (0x7E) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 9 (0x9) smb_bcc=83 [000] A1 07 30 05 A0 03 0A 01 00 57 00 69 00 6E 00 64 ..0..... .W.i.n.d [010] 00 6F 00 77 00 73 00 20 00 35 00 2E 00 31 00 00 .o.w.s. .5...1.. [020] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [030] 00 32 00 30 00 30 00 30 00 20 00 4C 00 41 00 4E .2.0.0.0 . .L.A.N [040] 00 20 00 4D 00 61 00 6E 00 61 00 67 00 65 00 72 . .M.a.n .a.g.e.r [050] 00 00 00 ... size=126 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=5174 smb_uid=2048 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 126 (0x7E) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 9 (0x9) smb_bcc=83 [000] A1 07 30 05 A0 03 0A 01 00 57 00 69 00 6E 00 64 ..0..... .W.i.n.d [010] 00 6F 00 77 00 73 00 20 00 35 00 2E 00 31 00 00 .o.w.s. .5...1.. [020] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [030] 00 32 00 30 00 30 00 30 00 20 00 4C 00 41 00 4E .2.0.0.0 . .L.A.N [040] 00 20 00 4D 00 61 00 6E 00 61 00 67 00 65 00 72 . .M.a.n .a.g.e.r [050] 00 00 00 ... write_socket(6,94) write_socket(6,94) wrote 94 got smb length of 48 size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2048 smb_pid=5174 smb_uid=2048 smb_mid=4 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [000] 49 50 43 00 00 00 00 IPC.... cli_init_creds: user guest domain NETWORX size=121 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=2048 smb_pid=5174 smb_uid=2048 smb_mid=5 smt_wct=14 smb_vwv[ 0]= 31 (0x1F) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]=65535 (0xFFFF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 31 (0x1F) smb_vwv[10]= 90 (0x5A) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 121 (0x79) smb_vwv[13]= 0 (0x0) smb_bcc=58 [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 4C 00 41 .\.P.I.P .E.\.L.A [010] 00 4E 00 4D 00 41 00 4E 00 00 00 68 00 57 72 4C .N.M.A.N ...h.WrL [020] 65 68 44 7A 00 42 31 36 42 42 44 7A 00 01 00 FF ehDz.B16 BBDz.... [030] FF 00 00 00 80 42 4C 55 45 00 .....BLU E. write_socket(6,125) write_socket(6,125) wrote 125 got smb length of 64 size=64 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2048 smb_pid=5174 smb_uid=2048 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 64 (0x40) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=9 [000] 00 02 00 00 00 00 00 00 00 ........ . size=64 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2048 smb_pid=5174 smb_uid=2048 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 64 (0x40) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=9 [000] 00 02 00 00 00 00 00 00 00 ........ .