[2003/09/04 20:01:37, 5] auth/auth_util.c:make_user_info_map(216) make_user_info_map: Mapping user [BRGS]\[vhs] from workstation [INF08B] [2003/09/04 20:01:37, 4] passdb/secrets.c:secrets_fetch_trust_account_password(255) Using cleartext machine password [2003/09/04 20:01:37, 5] libsmb/namecache.c:namecache_fetch(201) name BRGS#1C found. [2003/09/04 20:01:37, 4] libsmb/namequery.c:get_dc_list(1350) get_dc_list: returning 3 ip addresses in an unordered list [2003/09/04 20:01:37, 4] libsmb/namequery.c:get_dc_list(1351) get_dc_list: 172.16.0.15:0 172.16.0.1:0 172.16.0.16:0 [2003/09/04 20:01:37, 5] libsmb/namecache.c:namecache_status_fetch(308) namecache_status_fetch: no entry for NBT/BRGS#1C.20.172.16.0.15 found. [2003/09/04 20:01:37, 5] libsmb/nmblib.c:send_udp(744) Sending a packet of len 50 to (172.16.0.15) on port 137 [2003/09/04 20:01:37, 5] libsmb/nmblib.c:read_packet(722) Received a packet of len 211 from (172.16.0.15) port 137 [2003/09/04 20:01:37, 4] libsmb/nmblib.c:debug_nmb_packet(106) nmb packet from 172.16.0.15(137) header: id=24975 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=BRGS<1c> rr_type=33 rr_class=1 ttl=0 answers 0 char .KEPLER hex 064B45504C4552202020202020202020 answers 10 char .d.KEPLER hex 0064004B45504C455220202020202020 answers 20 char .d.KEPLER hex 20200364004B45504C45522020202020 answers 30 char d.BRGS hex 20202020206400425247532020202020 answers 40 char ...BRGS hex 20202020202000E40042524753202020 answers 50 char ...BRGS hex 20202020202020201CE4004252475320 answers 60 char ...... hex 202020202020202020201EE400000000 answers 70 char ................ hex 00000000000000000000000000000000 answers 80 char ................ hex 00000000000000000000000000000000 answers 90 char ........... hex 0000000000000000000000 [2003/09/04 20:01:37, 3] libsmb/namequery_dc.c:rpc_dc_name(147) rpc_dc_name: Returning DC KEPLER (172.16.0.15) for domain BRGS [2003/09/04 20:01:37, 3] libsmb/cliconnect.c:cli_start_connection(1301) Connecting to host=KEPLER [2003/09/04 20:01:37, 3] lib/util_sock.c:open_socket_out(690) Connecting to 172.16.0.15 at port 445 [2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) socket option SO_KEEPALIVE = 0 [2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) socket option SO_REUSEADDR = 0 [2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) socket option SO_BROADCAST = 0 [2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) socket option TCP_NODELAY = 1 [2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_LOWDELAY = 0 [2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_THROUGHPUT = 0 [2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDBUF = 16384 [2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVBUF = 87380 [2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDLOWAT = 1 [2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVLOWAT = 1 [2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDTIMEO = 0 [2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVTIMEO = 0 [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=3619 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=63232 (0xF700) smb_vwv[ 8]= 34 (0x22) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=32995 (0x80E3) smb_vwv[11]= 128 (0x80) smb_vwv[12]= 685 (0x2AD) smb_vwv[13]= 3734 (0xE96) smb_vwv[14]=50035 (0xC373) smb_vwv[15]=34817 (0x8801) smb_vwv[16]=15103 (0x3AFF) smb_bcc=58 [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=3619 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=63232 (0xF700) smb_vwv[ 8]= 34 (0x22) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=32995 (0x80E3) smb_vwv[11]= 128 (0x80) smb_vwv[12]= 685 (0x2AD) smb_vwv[13]= 3734 (0xE96) smb_vwv[14]=50035 (0xC373) smb_vwv[15]=34817 (0x8801) smb_vwv[16]=15103 (0x3AFF) smb_bcc=58 [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=100 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=3619 smb_uid=100 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=59 [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=100 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=3619 smb_uid=100 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=59 [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=3 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=4 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=62720 (0xF500) smb_vwv[ 3]= 372 (0x174) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1310) Bind RPC Pipe[74f5]: \PIPE\lsarpc [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:valid_pipe_name(1211) Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg.. [010] 00 00 00 00 .... [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:valid_pipe_name(1214) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr hdr [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 0b [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0048 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000001 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_rb [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0010 max_tsize: 10b8 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0012 max_rsize: 10b8 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0014 assoc_gid: 00000000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0018 num_elements: 00000001 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 001c context_id : 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 001e num_syntaxes: 01 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0020 data : 12345778 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0024 data : 1234 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0026 data : abcd [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0028 data : ef 00 01 23 45 67 89 ab [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0030 version: 00000000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0034 data : 8a885d04 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0038 data : 1ceb [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 003a data : 11c9 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 003c data : 9f e8 08 00 2b 10 48 60 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0044 version: 00000002 [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) rpc_api_pipe: fnum:74f5 [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=5 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29941 (0x74F5) smb_bcc=87 [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) rpc_check_hdr: rdata->data_size = 68 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr rpc_hdr [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 0c [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0044 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000001 [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) rpc_api_pipe: len left: 0 smbtrans read: 68 [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1375) rpc_pipe_bind: rpc_api_pipe returned OK. [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_ba [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0010 max_tsize: 10b8 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0012 max_rsize: 10b8 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0014 assoc_gid: 000053f0 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0018 len: 000c [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 001a str: \PIPE\lsass. [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0028 num_results: 01 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 002c result : 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 002e reason : 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0030 data : 8a885d04 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0034 data : 1ceb [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0036 data : 11c9 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0038 data : 9f e8 08 00 2b 10 48 60 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0040 version: 00000002 [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:check_bind_response(1244) bind_rpc_pipe: server pipe_name found: \PIPE\lsass [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:check_bind_response(1264) bind_rpc_pipe: accepted! [2003/09/04 20:01:38, 5] rpc_parse/parse_lsa.c:init_lsa_sec_qos(147) init_lsa_sec_qos [2003/09/04 20:01:38, 5] rpc_parse/parse_lsa.c:init_q_open_pol(279) init_open_pol: attr:0 da:1 [2003/09/04 20:01:38, 5] rpc_parse/parse_lsa.c:init_lsa_obj_attr(198) init_lsa_obj_attr [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 lsa_io_q_open_pol [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0000 ptr : 00000001 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0004 system_name: 005c [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0008 len : 00000018 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c ptr_root_dir: 00000000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 ptr_obj_name: 00000000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0014 attributes : 00000000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0018 ptr_sec_desc: 00000000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 001c ptr_sec_qos : 00000001 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0020 len : 0000000c [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0024 sec_imp_level : 0002 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0026 sec_ctxt_mode : 01 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0027 effective_only: 00 [2003/09/04 20:01:38, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(186) lsa_io_sec_qos: length c does not match size 8 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0028 des_access: 00000001 [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:create_rpc_request(844) create_rpc_request: opnum: 0x6 data_len: 0x44 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr hdr [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0044 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000002 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_req hdr_req [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 alloc_hint: 00000034 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0014 context_id: 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0016 opnum : 0006 [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) rpc_api_pipe: fnum:74f5 [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=150 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 68 (0x44) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29941 (0x74F5) smb_bcc=83 [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) rpc_check_hdr: rdata->data_size = 48 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr rpc_hdr [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 02 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0030 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000002 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 alloc_hint: 00000018 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0014 context_id: 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0016 cancel_ct : 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0017 reserved : 00 [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) rpc_api_pipe: len left: 0 smbtrans read: 48 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000018 lsa_io_r_open_pol [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0018 data1: 00000000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 001c data2: 00000001 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0020 data3: 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0022 data4: 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0024 data5: 02 7e 57 3f f7 22 00 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_ntstatus(664) 002c status: NT_STATUS_OK [2003/09/04 20:01:38, 5] rpc_parse/parse_lsa.c:init_q_enum_trust_dom(497) init_q_enum_trust_dom [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 lsa_io_q_enum_trust_dom [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0000 data1: 00000000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0004 data2: 00000001 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 data3: 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a data4: 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 000c data5: 02 7e 57 3f f7 22 00 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0014 enum_context : 00000000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0018 preferred_len: 00010000 [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:create_rpc_request(844) create_rpc_request: opnum: 0xd data_len: 0x34 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr hdr [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0034 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000003 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_req hdr_req [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 alloc_hint: 00000024 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0014 context_id: 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0016 opnum : 000d [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) rpc_api_pipe: fnum:74f5 [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=134 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 52 (0x34) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 52 (0x34) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29941 (0x74F5) smb_bcc=67 [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) rpc_check_hdr: rdata->data_size = 40 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr rpc_hdr [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 02 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0028 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000003 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 alloc_hint: 00000010 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0014 context_id: 0000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0016 cancel_ct : 00 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0017 reserved : 00 [2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) rpc_api_pipe: len left: 0 smbtrans read: 40 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) 000018 lsa_io_r_enum_trust_dom [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0018 enum_context : 00000000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 001c num_domains : 00000000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0020 ptr_enum_domains: 00000000 [2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_ntstatus(664) 0024 status: NT_STATUS_NO_MORE_ENTRIES [2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=8 smt_wct=0 smb_bcc=0 [2003/09/04 20:01:38, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(172) no entry for trusted domain BRGS found. [2003/09/04 20:01:38, 5] auth/auth_util.c:make_user_info(132) attempting to make a user_info for vhs (vhs) [2003/09/04 20:01:38, 5] auth/auth_util.c:make_user_info(142) making strings for vhs's user_info struct [2003/09/04 20:01:38, 5] auth/auth_util.c:make_user_info(184) making blobs for vhs's user_info struct [2003/09/04 20:01:38, 3] auth/auth.c:check_ntlm_password(216) check_ntlm_password: Checking password for unmapped user [BRGS]\[vhs]@[INF08B] with the new password interface [2003/09/04 20:01:38, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: mapped user is: [BRGS]\[vhs]@[INF08B] [2003/09/04 20:01:38, 5] lib/util.c:dump_data(1887) [000] E6 36 58 9E 85 9D EF 61 .6X....a [2003/09/04 20:01:38, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2003/09/04 20:01:38, 3] smbd/uid.c:push_conn_ctx(287) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2003/09/04 20:01:38, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/09/04 20:01:38, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2003/09/04 20:01:38, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2003/09/04 20:01:38, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/09/04 20:01:38, 4] passdb/secrets.c:secrets_fetch_trust_account_password(255) Using cleartext machine password [2003/09/04 20:01:38, 4] passdb/secrets.c:secrets_fetch_trust_account_password(255) Using cleartext machine password [2003/09/04 20:01:38, 5] libsmb/namecache.c:namecache_fetch(201) name BRGS#1C found. [2003/09/04 20:01:38, 4] libsmb/namequery.c:get_dc_list(1350) get_dc_list: returning 3 ip addresses in an unordered list [2003/09/04 20:01:38, 4] libsmb/namequery.c:get_dc_list(1351) get_dc_list: 172.16.0.15:0 172.16.0.1:0 172.16.0.16:0 [2003/09/04 20:01:38, 5] libsmb/namecache.c:namecache_status_fetch(308) namecache_status_fetch: no entry for NBT/BRGS#1C.20.172.16.0.15 found. [2003/09/04 20:01:38, 5] libsmb/nmblib.c:send_udp(744) Sending a packet of len 50 to (172.16.0.15) on port 137 [2003/09/04 20:01:38, 5] libsmb/nmblib.c:read_packet(722) Received a packet of len 211 from (172.16.0.15) port 137 [2003/09/04 20:01:38, 4] libsmb/nmblib.c:debug_nmb_packet(106) nmb packet from 172.16.0.15(137) header: id=20307 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=BRGS<1c> rr_type=33 rr_class=1 ttl=0 answers 0 char .KEPLER hex 064B45504C4552202020202020202020 answers 10 char .d.KEPLER hex 0064004B45504C455220202020202020 answers 20 char .d.KEPLER hex 20200364004B45504C45522020202020 answers 30 char d.BRGS hex 20202020206400425247532020202020 answers 40 char ...BRGS hex 20202020202000E40042524753202020 answers 50 char ...BRGS hex 20202020202020201CE4004252475320 answers 60 char ...... hex 202020202020202020201EE400000000 answers 70 char ................ hex 00000000000000000000000000000000 answers 80 char ................ hex 00000000000000000000000000000000 answers 90 char ........... hex 0000000000000000000000 [2003/09/04 20:01:38, 3] libsmb/namequery_dc.c:rpc_dc_name(147) rpc_dc_name: Returning DC KEPLER (172.16.0.15) for domain BRGS [2003/09/04 20:01:38, 3] libsmb/cliconnect.c:cli_start_connection(1301) Connecting to host=KEPLER [2003/09/04 20:01:38, 3] lib/util_sock.c:open_socket_out(690) Connecting to 172.16.0.15 at port 445 [2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) socket option SO_KEEPALIVE = 0 [2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) socket option SO_REUSEADDR = 0 [2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) socket option SO_BROADCAST = 0 [2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) socket option TCP_NODELAY = 1 [2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_LOWDELAY = 0 [2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) socket option IPTOS_THROUGHPUT = 0 [2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDBUF = 16384 [2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVBUF = 87380 [2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDLOWAT = 1 [2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVLOWAT = 1 [2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) socket option SO_SNDTIMEO = 0 [2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) socket option SO_RCVTIMEO = 0 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=3619 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=63744 (0xF900) smb_vwv[ 8]= 34 (0x22) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=32995 (0x80E3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=39747 (0x9B43) smb_vwv[13]= 3734 (0xE96) smb_vwv[14]=50035 (0xC373) smb_vwv[15]=34817 (0x8801) smb_vwv[16]=15103 (0x3AFF) smb_bcc=58 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=3619 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=63744 (0xF900) smb_vwv[ 8]= 34 (0x22) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=32995 (0x80E3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=39747 (0x9B43) smb_vwv[13]= 3734 (0xE96) smb_vwv[14]=50035 (0xC373) smb_vwv[15]=34817 (0x8801) smb_vwv[16]=15103 (0x3AFF) smb_bcc=58 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=100 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=3619 smb_uid=100 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=59 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=100 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=3619 smb_uid=100 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=59 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=3 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=4 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=64000 (0xFA00) smb_vwv[ 3]= 372 (0x174) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1310) Bind RPC Pipe[74fa]: \PIPE\NETLOGON [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:valid_pipe_name(1211) Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4... ...#Eg.. [010] 01 00 00 00 .... [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:valid_pipe_name(1214) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr hdr [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 0b [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0048 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000004 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_rb [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0010 max_tsize: 10b8 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0012 max_rsize: 10b8 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0014 assoc_gid: 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0018 num_elements: 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 001c context_id : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 001e num_syntaxes: 01 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0020 data : 12345678 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0024 data : 1234 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0026 data : abcd [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0028 data : ef 00 01 23 45 67 cf fb [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0030 version: 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0034 data : 8a885d04 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0038 data : 1ceb [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 003a data : 11c9 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 003c data : 9f e8 08 00 2b 10 48 60 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0044 version: 00000002 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) rpc_api_pipe: fnum:74fa [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=5 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29946 (0x74FA) smb_bcc=87 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) rpc_check_hdr: rdata->data_size = 68 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr rpc_hdr [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 0c [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0044 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000004 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) rpc_api_pipe: len left: 0 smbtrans read: 68 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1375) rpc_pipe_bind: rpc_api_pipe returned OK. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_ba [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0010 max_tsize: 10b8 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0012 max_rsize: 10b8 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0014 assoc_gid: 000053f0 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0018 len: 000c [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 001a str: \PIPE\lsass. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0028 num_results: 01 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 002c result : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 002e reason : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0030 data : 8a885d04 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0034 data : 1ceb [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0036 data : 11c9 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0038 data : 9f e8 08 00 2b 10 48 60 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0040 version: 00000002 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:check_bind_response(1244) bind_rpc_pipe: server pipe_name found: \PIPE\lsass [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:check_bind_response(1264) bind_rpc_pipe: accepted! [2003/09/04 20:01:39, 4] rpc_client/cli_netlogon.c:cli_net_req_chal(45) cli_net_req_chal: LSA Request Challenge from SIRIUS to KEPLER: 772574D8DC747ABE [2003/09/04 20:01:39, 5] rpc_parse/parse_net.c:init_q_req_chal(538) init_q_req_chal: 538 [2003/09/04 20:01:39, 5] rpc_parse/parse_net.c:init_q_req_chal(547) init_q_req_chal: 547 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 net_io_q_req_chal [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0000 undoc_buffer: 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0004 uni_max_len: 00000009 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0008 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c uni_str_len: 00000009 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0010 buffer : \.\.K.E.P.L.E.R... [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0024 uni_max_len: 00000007 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0028 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 002c uni_str_len: 00000007 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0030 buffer : S.I.R.I.U.S... [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 003e data: 77 25 74 d8 dc 74 7a be [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:create_rpc_request(844) create_rpc_request: opnum: 0x4 data_len: 0x5e [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr hdr [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 005e [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000005 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_req hdr_req [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 alloc_hint: 0000004e [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0014 context_id: 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0016 opnum : 0004 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) rpc_api_pipe: fnum:74fa [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=176 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 94 (0x5E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 94 (0x5E) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29946 (0x74FA) smb_bcc=109 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=92 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=92 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) rpc_check_hdr: rdata->data_size = 36 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr rpc_hdr [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 02 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0024 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000005 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 alloc_hint: 0000000c [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0014 context_id: 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0016 cancel_ct : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0017 reserved : 00 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) rpc_api_pipe: len left: 0 smbtrans read: 36 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000018 net_io_r_req_chal [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0018 data: d8 65 8f 58 a7 81 cf a7 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_ntstatus(664) 0020 status: NT_STATUS_OK [2003/09/04 20:01:39, 4] libsmb/credentials.c:cred_session_key(59) cred_session_key [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_session_key(61) clnt_chal: 772574D8DC747ABE [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_session_key(62) srv_chal : D8658F58A781CFA7 [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_session_key(63) clnt+srv : 4F8B033183F64966 [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_session_key(64) sess_key : 13782034EDC0EF02 [2003/09/04 20:01:39, 4] libsmb/credentials.c:cred_create(90) cred_create [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(92) sess_key : 13782034EDC0EF02 [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(93) stor_cred: 772574D8DC747ABE [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(94) timestamp: 0 [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(95) timecred : 772574D8DC747ABE [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(96) calc_cred: 3CEDBDFCE446B6B7 [2003/09/04 20:01:39, 4] rpc_client/cli_netlogon.c:cli_net_auth2(102) cli_net_auth2: srv:\\KEPLER acct:SIRIUS$ sc:2 mc: SIRIUS chal 3CEDBDFCE446B6B7 neg: 400701ff [2003/09/04 20:01:39, 5] rpc_parse/parse_net.c:init_q_auth_2(659) init_q_auth_2: 659 [2003/09/04 20:01:39, 5] rpc_parse/parse_misc.c:init_log_info(1283) make_log_info 1283 [2003/09/04 20:01:39, 5] rpc_parse/parse_net.c:init_q_auth_2(665) init_q_auth_2: 665 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 net_io_q_auth_2 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0000 undoc_buffer: 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0004 uni_max_len: 00000009 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0008 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c uni_str_len: 00000009 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0010 buffer : \.\.K.E.P.L.E.R... [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0024 uni_max_len: 00000008 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0028 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 002c uni_str_len: 00000008 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0030 buffer : S.I.R.I.U.S.$... [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0040 sec_chan: 0002 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0044 uni_max_len: 00000007 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0048 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 004c uni_str_len: 00000007 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0050 buffer : S.I.R.I.U.S... [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 005e data: 3c ed bd fc e4 46 b6 b7 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0068 neg_flags: 400701ff [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:create_rpc_request(844) create_rpc_request: opnum: 0xf data_len: 0x84 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr hdr [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0084 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000006 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_req hdr_req [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 alloc_hint: 00000074 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0014 context_id: 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0016 opnum : 000f [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) rpc_api_pipe: fnum:74fa [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=214 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 132 (0x84) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 132 (0x84) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29946 (0x74FA) smb_bcc=147 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) rpc_check_hdr: rdata->data_size = 40 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr rpc_hdr [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 02 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0028 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000006 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 alloc_hint: 00000010 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0014 context_id: 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0016 cancel_ct : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0017 reserved : 00 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) rpc_api_pipe: len left: 0 smbtrans read: 40 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000018 net_io_r_auth_2 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0018 data: b7 26 5c 75 d3 cc 95 7d [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0020 neg_flags: 400001ff [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_ntstatus(664) 0024 status: NT_STATUS_OK [2003/09/04 20:01:39, 4] libsmb/credentials.c:cred_create(90) cred_create [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(92) sess_key : 13782034EDC0EF02 [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(93) stor_cred: D8658F58A781CFA7 [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(94) timestamp: 0 [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(95) timecred : D8658F58A781CFA7 [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(96) calc_cred: B7265C75D3CC957D [2003/09/04 20:01:39, 4] libsmb/credentials.c:cred_assert(121) cred_assert [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_assert(123) challenge : B7265C75D3CC957D [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_assert(124) calculated: B7265C75D3CC957D [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_assert(128) credentials check ok [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=8 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=64256 (0xFB00) smb_vwv[ 3]= 372 (0x174) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1310) Bind RPC Pipe[74fb]: \PIPE\NETLOGON [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:valid_pipe_name(1211) Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4... ...#Eg.. [010] 01 00 00 00 .... [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:valid_pipe_name(1214) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr_auth hdr_auth [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 auth_type : 44 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 auth_level : 06 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 padding : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 reserved : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0004 auth_context : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000008 smb_io_rpc_auth_netsec_neg netsec_neg [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0008 type1: 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c type2: 00000003 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr hdr [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 0b [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0064 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0014 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000007 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_rb [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0010 max_tsize: 10b8 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0012 max_rsize: 10b8 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0014 assoc_gid: 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0018 num_elements: 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 001c context_id : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 001e num_syntaxes: 01 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0020 data : 12345678 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0024 data : 1234 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0026 data : abcd [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0028 data : ef 00 01 23 45 67 cf fb [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0030 version: 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0034 data : 8a885d04 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0038 data : 1ceb [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 003a data : 11c9 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 003c data : 9f e8 08 00 2b 10 48 60 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0044 version: 00000002 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) rpc_api_pipe: fnum:74fb [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=182 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=9 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 100 (0x64) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29947 (0x74FB) smb_bcc=115 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=144 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=9 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 88 (0x58) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 88 (0x58) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=89 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=144 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=9 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 88 (0x58) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 88 (0x58) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=89 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) rpc_check_hdr: rdata->data_size = 88 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr rpc_hdr [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 0c [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0058 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 000c [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000007 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) rpc_api_pipe: len left: 0 smbtrans read: 88 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(210) rpc_auth_pipe: pkt_type: 12 len: 88 auth_len: 12 NTLMSSP No schannel Yes sign Yes seal Yes [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr_auth auth_hdr [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 auth_type : 44 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 auth_level : 06 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 padding : 08 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 reserved : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0004 auth_context : 00000001 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1375) rpc_pipe_bind: rpc_api_pipe returned OK. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_ba [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0010 max_tsize: 10b8 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0012 max_rsize: 10b8 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0014 assoc_gid: 000053f0 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0018 len: 000c [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 001a str: \PIPE\lsass. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0028 num_results: 01 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 002c result : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 002e reason : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0030 data : 8a885d04 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0034 data : 1ceb [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0036 data : 11c9 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0038 data : 9f e8 08 00 2b 10 48 60 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0040 version: 00000002 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:check_bind_response(1244) bind_rpc_pipe: server pipe_name found: \PIPE\lsass [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:check_bind_response(1264) bind_rpc_pipe: accepted! [2003/09/04 20:01:39, 4] libsmb/credentials.c:cred_create(90) cred_create [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(92) sess_key : 13782034EDC0EF02 [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(93) stor_cred: 3CEDBDFCE446B6B7 [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(94) timestamp: 3f577e03 [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(95) timecred : 3F6B153CE446B6B7 [2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(96) calc_cred: 04D1CA5B106073A5 [2003/09/04 20:01:39, 5] rpc_parse/parse_net.c:init_id_info2(1050) init_id_info2: 1050 [2003/09/04 20:01:39, 5] rpc_parse/parse_misc.c:init_logon_id(1462) make_logon_id: 1462 [2003/09/04 20:01:39, 5] rpc_parse/parse_net.c:init_sam_info(1157) init_sam_info: 1157 [2003/09/04 20:01:39, 5] rpc_parse/parse_misc.c:init_clnt_info2(1377) make_clnt_info: 1377 [2003/09/04 20:01:39, 5] rpc_parse/parse_misc.c:init_clnt_srv(1222) init_clnt_srv: 1222 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 net_io_q_sam_logon [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0000 undoc_buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0004 uni_max_len: 00000009 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0008 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c uni_str_len: 00000009 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0010 buffer : \.\.K.E.P.L.E.R... [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0024 undoc_buffer2: 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0028 uni_max_len: 00000007 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 002c undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0030 uni_str_len: 00000007 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0034 buffer : S.I.R.I.U.S... [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0044 ptr_cred: 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0048 data: 04 d1 ca 5b 10 60 73 a5 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0050 time: 3f577e03 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0054 ptr_rtn_cred : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0058 data: 00 00 00 00 00 00 00 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0060 time: 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0064 logon_level : 0002 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0066 switch_value : 0002 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0068 ptr_id_info2: 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 006c uni_str_len: 0008 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 006e uni_max_len: 0008 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0070 buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0074 param_ctrl: 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0078 low : 0000dead [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 007c high: 0000beef [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0080 uni_str_len: 0006 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0082 uni_max_len: 0006 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0084 buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0088 uni_str_len: 0010 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 008a uni_max_len: 0010 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 008c buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0090 lm_chal: e6 36 58 9e 85 9d ef 61 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0098 str_str_len: 0018 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 009a str_max_len: 0018 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 009c buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 00a0 str_str_len: 0018 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 00a2 str_max_len: 0018 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00a4 buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00a8 uni_max_len: 00000004 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00ac undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00b0 uni_str_len: 00000004 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 00b4 buffer : B.R.G.S. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00bc uni_max_len: 00000003 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00c0 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00c4 uni_str_len: 00000003 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 00c8 buffer : v.h.s. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00d0 uni_max_len: 00000008 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00d4 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00d8 uni_str_len: 00000008 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 00dc buffer : \.\.I.N.F.0.8.B. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00ec str_max_len: 00000018 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00f0 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00f4 str_str_len: 00000018 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_string2(960) 00f8 buffer : U... z....+..H..Z....R.Y [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0110 str_max_len: 00000018 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0114 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0118 str_str_len: 00000018 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_string2(960) 011c buffer : d....i....oS..'....`.... [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0134 validation_level: 0003 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000138 smb_io_rpc_hdr_auth hdr_auth [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0138 auth_type : 44 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0139 auth_level : 06 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 013a padding : 02 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 013b reserved : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 013c auth_context : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000140 smb_io_rpc_auth_netsec_chk [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0140 sig : 77 00 7a 00 ff ff 00 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0148 seq_num: fa 3a 47 af 44 a6 a1 fd [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0150 packet_digest: 5a ae 98 1f 55 31 27 fb [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0158 data8: 49 2a 89 90 c2 29 40 13 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:create_rpc_request(844) create_rpc_request: opnum: 0x2 data_len: 0x178 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr hdr [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0178 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0020 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000008 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_req hdr_req [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 alloc_hint: 00000140 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0014 context_id: 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0016 opnum : 0002 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) rpc_api_pipe: fnum:74fb [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=458 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=10 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 376 (0x178) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 376 (0x178) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29947 (0x74FB) smb_bcc=391 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=732 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=10 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 676 (0x2A4) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 676 (0x2A4) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=677 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=732 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=10 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 676 (0x2A4) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 676 (0x2A4) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=677 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) rpc_check_hdr: rdata->data_size = 676 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr rpc_hdr [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 02 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 02a4 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0020 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 00000008 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 alloc_hint: 00000264 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0014 context_id: 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0016 cancel_ct : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0017 reserved : 00 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) rpc_api_pipe: len left: 0 smbtrans read: 676 [2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(210) rpc_auth_pipe: pkt_type: 2 len: 676 auth_len: 32 NTLMSSP No schannel Yes sign Yes seal Yes [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr_auth auth_hdr [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 auth_type : 44 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 auth_level : 06 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 padding : 08 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 reserved : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0004 auth_context : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0008 sig : 77 00 7a 00 ff ff 00 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0010 seq_num: a7 9e ec cc 83 d2 c4 69 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0018 packet_digest: e9 8c 7b 51 ce 78 46 85 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0020 data8: 40 14 e8 e1 33 5a 04 a1 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000018 net_io_r_sam_logon [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0018 buffer_creds: 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 001c data: 03 8b 6c c8 be 77 6c 1d [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0024 time: 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0028 switch_value: 0003 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 002c ptr_user_info : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0030 low : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0034 high: 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0038 low : ffffffff [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 003c high: 7fffffff [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0040 low : ffffffff [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0044 high: 7fffffff [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0048 low : cd931d00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 004c high: 01c37187 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0050 low : 43b7c800 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0054 high: 01d5c01d [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0058 low : 3e29b500 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 005c high: 01c3fef1 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0060 uni_str_len: 0006 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0062 uni_max_len: 0006 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0064 buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0068 uni_str_len: 0016 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 006a uni_max_len: 0016 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 006c buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0070 uni_str_len: 005a [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0072 uni_max_len: 005a [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0074 buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0078 uni_str_len: 0032 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 007a uni_max_len: 0032 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 007c buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0080 uni_str_len: 0018 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0082 uni_max_len: 0018 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0084 buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0088 uni_str_len: 0004 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 008a uni_max_len: 0004 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 008c buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0090 logon_count : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0092 bad_pw_count : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0094 user_rid : 00006df2 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0098 group_rid : 00000bcf [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 009c num_groups : 00000003 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00a0 buffer_groups : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00a4 user_flgs : 00000020 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 00a8 user_sess_key: 99 43 c4 3e 0a 4e a6 ba c5 56 dc 1e 60 50 fc 5f [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 00b8 uni_str_len: 000c [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 00ba uni_max_len: 000c [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00bc buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 00c0 uni_str_len: 0008 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 00c2 uni_max_len: 0008 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00c4 buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00c8 buffer_dom_id : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 00cc padding : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00f4 num_other_sids: 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00f8 buffer_other_sids: 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00fc uni_max_len: 00000003 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0100 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0104 uni_str_len: 00000003 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0108 buffer : v.h.s. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0110 uni_max_len: 0000000b [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0114 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0118 uni_str_len: 0000000b [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 011c buffer : K.V.H.S.-.U.s.e.r. .1. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0134 uni_max_len: 0000002d [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0138 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 013c uni_str_len: 0000002d [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0140 buffer : t.e.m.p.s.c.r.i.p.t.s.\.v.h.s.-.1.7.2...1.6...0...1.2.-.8.9.5.3.-.n.e.t.l.o.g.o.n...b.a.t. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 019c uni_max_len: 00000019 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01a0 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01a4 uni_str_len: 00000019 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 01a8 buffer : \.\.c.a.s.s.i.o.p.e.i.a.\.p.r.o.f.i.l.e.s.\.v.h.s. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01dc uni_max_len: 0000000c [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01e0 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01e4 uni_str_len: 0000000c [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 01e8 buffer : \.\.s.i.r.i.u.s.\.v.h.s. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0200 uni_max_len: 00000002 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0204 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0208 uni_str_len: 00000002 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 020c buffer : h.:. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0210 num_groups2 : 00000003 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0214 g_rid: 00000bcf [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0218 attr : 00000007 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 021c g_rid: 00000be9 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0220 attr : 00000007 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0224 g_rid: 00000201 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0228 attr : 00000007 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 022c uni_max_len: 00000006 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0230 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0234 uni_str_len: 00000006 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0238 buffer : K.E.P.L.E.R. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0244 uni_max_len: 00000004 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0248 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 024c uni_str_len: 00000004 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0250 buffer : B.R.G.S. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0258 num_auths: 00000004 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 025c sid_rev_num: 01 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 025d num_auths : 04 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 025e id_auth[0] : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 025f id_auth[1] : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0260 id_auth[2] : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0261 id_auth[3] : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0262 id_auth[4] : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0263 id_auth[5] : 05 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32s(861) 0264 sub_auths : 00000015 c10abe02 2f16ac30 5137a1ee [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0274 auth_resp : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_ntstatus(664) 0278 status : NT_STATUS_OK [2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam(288) Finding user BRGS\vhs [2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is brgs\vhs [2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(230) Trying _Get_Pwnam(), username as given is BRGS\vhs [2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(239) Trying _Get_Pwnam(), username as uppercase is BRGS\VHS [2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(247) Checking combinations of 0 uppercase letters in brgs\vhs [2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals didn't find user [BRGS\vhs]! [2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam(288) Finding user vhs [2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is vhs [2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [vhs]! [2003/09/04 20:01:39, 4] lib/substitute.c:automount_server(318) Home server: sirius [2003/09/04 20:01:39, 4] lib/substitute.c:automount_server(318) Home server: sirius [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2003/09/04 20:01:39, 3] smbd/uid.c:push_conn_ctx(287) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 1573 Primary group is 1011 and contains 4 supplementary groups Group[ 0]: 1011 Group[ 1]: 1011 Group[ 2]: 1024 Group[ 3]: 1022 [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2003/09/04 20:01:39, 3] smbd/uid.c:push_conn_ctx(287) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/09/04 20:01:39, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) fetch sid from gid cache 1011 -> S-1-5-21-2761192381-945399086-3711840165-3023 [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2003/09/04 20:01:39, 3] smbd/uid.c:push_conn_ctx(287) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2003/09/04 20:01:39, 3] smbd/uid.c:push_conn_ctx(287) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0000 timestamp: 3f577e03 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) 000004 net_io_user_info3 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0004 ptr_user_info : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0008 low : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c high: 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 low : ffffffff [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0014 high: 7fffffff [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0018 low : ffffffff [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 001c high: 7fffffff [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0020 low : cd931d00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0024 high: 01c37187 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0028 low : 43b7c800 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 002c high: 01d5c01d [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0030 low : 3e29b500 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0034 high: 01c3fef1 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0038 uni_str_len: 0006 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 003a uni_max_len: 0006 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 003c buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0040 uni_str_len: 0016 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0042 uni_max_len: 0016 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0044 buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0048 uni_str_len: 005a [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 004a uni_max_len: 005a [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 004c buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0050 uni_str_len: 0032 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0052 uni_max_len: 0032 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0054 buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0058 uni_str_len: 0018 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 005a uni_max_len: 0018 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 005c buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0060 uni_str_len: 0004 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0062 uni_max_len: 0004 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0064 buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0068 logon_count : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 006a bad_pw_count : 0000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 006c user_rid : 00006df2 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0070 group_rid : 00000bcf [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0074 num_groups : 00000003 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0078 buffer_groups : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 007c user_flgs : 00000020 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0080 user_sess_key: 4f b6 76 22 8e bb 16 63 d5 1b 41 f9 9e 63 11 a3 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0090 uni_str_len: 000c [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0092 uni_max_len: 000c [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0094 buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0098 uni_str_len: 0008 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) 009a uni_max_len: 0008 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 009c buffer : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00a0 buffer_dom_id : 00000001 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 00a4 padding : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00cc num_other_sids: 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00d0 buffer_other_sids: 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00d4 uni_max_len: 00000003 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00d8 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00dc uni_str_len: 00000003 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 00e0 buffer : v.h.s. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00e8 uni_max_len: 0000000b [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00ec undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 00f0 uni_str_len: 0000000b [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 00f4 buffer : K.V.H.S.-.U.s.e.r. .1. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 010c uni_max_len: 0000002d [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0110 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0114 uni_str_len: 0000002d [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0118 buffer : t.e.m.p.s.c.r.i.p.t.s.\.v.h.s.-.1.7.2...1.6...0...1.2.-.8.9.5.3.-.n.e.t.l.o.g.o.n...b.a.t. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0174 uni_max_len: 00000019 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0178 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 017c uni_str_len: 00000019 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0180 buffer : \.\.c.a.s.s.i.o.p.e.i.a.\.p.r.o.f.i.l.e.s.\.v.h.s. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01b4 uni_max_len: 0000000c [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01b8 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01bc uni_str_len: 0000000c [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 01c0 buffer : \.\.s.i.r.i.u.s.\.v.h.s. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01d8 uni_max_len: 00000002 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01dc undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01e0 uni_str_len: 00000002 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 01e4 buffer : h.:. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01e8 num_groups2 : 00000003 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01ec g_rid: 00000bcf [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01f0 attr : 00000007 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01f4 g_rid: 00000be9 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01f8 attr : 00000007 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 01fc g_rid: 00000201 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0200 attr : 00000007 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0204 uni_max_len: 00000006 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0208 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 020c uni_str_len: 00000006 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0210 buffer : K.E.P.L.E.R. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 021c uni_max_len: 00000004 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0220 undoc : 00000000 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0224 uni_str_len: 00000004 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0228 buffer : B.R.G.S. [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0230 num_auths: 00000004 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0234 sid_rev_num: 01 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0235 num_auths : 04 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0236 id_auth[0] : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0237 id_auth[1] : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0238 id_auth[2] : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0239 id_auth[3] : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 023a id_auth[4] : 00 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) 023b id_auth[5] : 05 [2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32s(861) 023c sub_auths : 00000015 c10abe02 2f16ac30 5137a1ee [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=11 smt_wct=0 smb_bcc=0 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=3619 smb_uid=100 smb_mid=12 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=202 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3619 smb_uid=100 smb_mid=13 smt_wct=0 smb_bcc=0 [2003/09/04 20:01:39, 3] auth/auth.c:check_ntlm_password(265) check_ntlm_password: winbind authentication for user [vhs] succeeded [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2003/09/04 20:01:39, 3] smbd/uid.c:push_conn_ctx(287) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/09/04 20:01:39, 5] auth/auth.c:check_ntlm_password(289) check_ntlm_password: PAM Account for user [vhs] succeeded [2003/09/04 20:01:39, 2] auth/auth.c:check_ntlm_password(302) check_ntlm_password: authentication for user [vhs] -> [vhs] -> [vhs] succeeded [2003/09/04 20:01:39, 5] auth/auth_util.c:free_user_info(1185) attempting to free (and zero) a user_info structure [2003/09/04 20:01:39, 3] smbd/password.c:register_vuid(204) User name: vhs Real name: KVHS-User 1 [2003/09/04 20:01:39, 3] smbd/password.c:register_vuid(222) UNIX uid 1573 is UNIX user vhs, and will be vuid 100 [2003/09/04 20:01:39, 2] smbd/utmp.c:sys_utmp_update(419) utmp_update: uname:/var/run/utmp wname:/var/log/wtmp [2003/09/04 20:01:39, 3] smbd/password.c:register_vuid(238) Adding/updating homes service for user 'vhs' using home directory: '/home/gaeste/vhs' [2003/09/04 20:01:39, 3] param/loadparm.c:lp_add_home(2319) adding home's share [vhs] for user 'vhs' at '/home/gaeste/vhs' [2003/09/04 20:01:39, 3] smbd/process.c:process_smb(890) Transaction 3 of length 80 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=76 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=27072 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 76 (0x4C) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=33 [2003/09/04 20:01:39, 3] smbd/process.c:switch_message(685) switch message SMBtconX (pid 3619) [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2003/09/04 20:01:39, 5] smbd/uid.c:change_to_root_user(218) change_to_root_user: now uid=(0,0) gid=(0,0) [2003/09/04 20:01:39, 4] smbd/reply.c:reply_tcon_and_X(266) Client requested device type [?????] for share [VHS] [2003/09/04 20:01:39, 5] smbd/service.c:make_connection(824) making a connection to 'homes' service [VHS] created at session setup time [2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam(288) Finding user vhs [2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is vhs [2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [vhs]! [2003/09/04 20:01:39, 3] smbd/service.c:make_connection_snum(536) Connect path is '/home/gaeste/vhs' for service [vhs] [2003/09/04 20:01:39, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for vhs [2003/09/04 20:01:39, 3] lib/util_seaccess.c:se_access_check(267) [2003/09/04 20:01:39, 3] lib/util_seaccess.c:se_access_check(268) se_access_check: user sid is S-1-5-21-3238706690-790015024-1362600430-28146 se_access_check: also S-1-5-21-3238706690-790015024-1362600430-3023 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-3238706690-790015024-1362600430-3049 se_access_check: also S-1-5-21-3238706690-790015024-1362600430-513 [2003/09/04 20:01:39, 5] lib/util_seaccess.c:se_access_check(325) se_access_check: access (2) granted. [2003/09/04 20:01:39, 3] smbd/vfs.c:vfs_init_default(201) Initialising default vfs hooks [2003/09/04 20:01:39, 5] smbd/connection.c:claim_connection(170) claiming vhs 0 [2003/09/04 20:01:39, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for vhs [2003/09/04 20:01:39, 3] lib/util_seaccess.c:se_access_check(267) [2003/09/04 20:01:39, 3] lib/util_seaccess.c:se_access_check(268) se_access_check: user sid is S-1-5-21-3238706690-790015024-1362600430-28146 se_access_check: also S-1-5-21-3238706690-790015024-1362600430-3023 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-3238706690-790015024-1362600430-3049 se_access_check: also S-1-5-21-3238706690-790015024-1362600430-513 [2003/09/04 20:01:39, 5] lib/util_seaccess.c:se_access_check(325) se_access_check: access (2) granted. [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1573, 1011) - sec_ctx_stack_ndx = 0 [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-3238706690-790015024-1362600430-28146 contains 7 SIDs SID[ 0]: S-1-5-21-3238706690-790015024-1362600430-28146 SID[ 1]: S-1-5-21-3238706690-790015024-1362600430-3023 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-3238706690-790015024-1362600430-3049 SID[ 6]: S-1-5-21-3238706690-790015024-1362600430-513 [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 1573 Primary group is 1011 and contains 4 supplementary groups Group[ 0]: 1011 Group[ 1]: 1011 Group[ 2]: 1024 Group[ 3]: 1022 [2003/09/04 20:01:39, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(0,1573) gid=(0,1011) [2003/09/04 20:01:39, 1] smbd/service.c:make_connection_snum(692) inf08b (172.16.2.8) connect to service vhs initially as user vhs (uid=1573, gid=1011) (pid 3619) [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2003/09/04 20:01:39, 5] smbd/uid.c:change_to_root_user(218) change_to_root_user: now uid=(0,0) gid=(0,0) [2003/09/04 20:01:39, 3] smbd/reply.c:reply_tcon_and_X(314) tconX service=VHS [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=54 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=27072 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=13 [2003/09/04 20:01:39, 3] smbd/process.c:process_smb(890) Transaction 4 of length 106 [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=102 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1040 smb_uid=100 smb_mid=27136 smt_wct=15 smb_vwv[ 0]= 34 (0x22) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 34 (0x22) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=37 [2003/09/04 20:01:39, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 3619) [2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1573, 1011) - sec_ctx_stack_ndx = 0 [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-3238706690-790015024-1362600430-28146 contains 7 SIDs SID[ 0]: S-1-5-21-3238706690-790015024-1362600430-28146 SID[ 1]: S-1-5-21-3238706690-790015024-1362600430-3023 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-3238706690-790015024-1362600430-3049 SID[ 6]: S-1-5-21-3238706690-790015024-1362600430-513 [2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 1573 Primary group is 1011 and contains 4 supplementary groups Group[ 0]: 1011 Group[ 1]: 1011 Group[ 2]: 1024 Group[ 3]: 1022 [2003/09/04 20:01:39, 5] smbd/uid.c:change_to_user(203) change_to_user uid=(0,1573) gid=(0,1011) [2003/09/04 20:01:39, 4] smbd/vfs.c:vfs_ChDir(611) vfs_ChDir to /home/gaeste/vhs [2003/09/04 20:01:39, 3] smbd/trans2.c:call_trans2qfilepathinfo(1901) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2003/09/04 20:01:39, 5] smbd/filename.c:unix_convert(114) unix_convert called on file "\WINSPOOL.DRV" [2003/09/04 20:01:39, 3] lib/util.c:unix_clean_name(580) unix_clean_name [/WINSPOOL.DRV] [2003/09/04 20:01:39, 5] smbd/filename.c:unix_convert(188) unix_convert begin: name = WINSPOOL.DRV, dirpath = , start = WINSPOOL.DRV [2003/09/04 20:01:39, 5] smbd/filename.c:unix_convert(323) New file WINSPOOL.DRV [2003/09/04 20:01:39, 3] lib/util.c:unix_clean_name(580) unix_clean_name [WINSPOOL.DRV] [2003/09/04 20:01:39, 3] smbd/trans2.c:call_trans2qfilepathinfo(1920) call_trans2qfilepathinfo: SMB_VFS_STAT of WINSPOOL.DRV failed (No such file or directory) [2003/09/04 20:01:39, 3] smbd/error.c:error_packet(94) error string = No such file or directory [2003/09/04 20:01:39, 3] smbd/error.c:error_packet(113) error packet at smbd/trans2.c(1794) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) [2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=1040 smb_uid=100 smb_mid=27136 smt_wct=0 smb_bcc=0 [2003/09/04 20:02:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/09/04 20:02:39, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2003/09/04 20:02:39, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2003/09/04 20:02:39, 5] smbd/uid.c:change_to_root_user(218) change_to_root_user: now uid=(0,0) gid=(0,0) [2003/09/04 20:02:39, 4] passdb/secrets.c:secrets_fetch_trust_account_password(255) Using cleartext machine password [2003/09/04 20:02:39, 5] smbd/change_trust_pw.c:change_trust_account_password(39) change_trust_account_password: Attempting to change trust account password in domain BRGS.... [2003/09/04 20:02:39, 5] libsmb/namecache.c:namecache_fetch(201) name BRGS#1B found. [2003/09/04 20:02:39, 5] libsmb/namecache.c:namecache_status_fetch(314) namecache_status_fetch: key NBT/BRGS#1B.20.172.16.0.1 -> ALDEBARAN [2003/09/04 20:02:39, 0] lib/fault.c:fault_report(36) =============================================================== [2003/09/04 20:02:39, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 3619 (CVS 3.0.0rc3) Please read the appendix Bugs of the Samba HOWTO collection [2003/09/04 20:02:39, 0] lib/fault.c:fault_report(39) =============================================================== [2003/09/04 20:02:39, 0] lib/util.c:smb_panic(1462) PANIC: internal error [2003/09/04 20:02:39, 0] lib/util.c:smb_panic(1469) BACKTRACE: 13 stack frames: #0 /usr/sbin/smbd(smb_panic+0x16b) [0x8180eb3] #1 /usr/sbin/smbd [0x8171e83] #2 /usr/sbin/smbd [0x8171ed5] #3 /lib/libc.so.6 [0x400de6b8] #4 /usr/sbin/smbd(make_nmb_name+0x2b) [0x80e1aa3] #5 /usr/sbin/smbd(cli_start_connection+0x75) [0x80c5275] #6 /usr/sbin/smbd(cli_full_connection+0x4b) [0x80c55d3] #7 /usr/sbin/smbd(change_trust_account_password+0x146) [0x80bd226] #8 /usr/sbin/smbd [0x80b8934] #9 /usr/sbin/smbd(smbd_process+0x152) [0x80b8af2] #10 /usr/sbin/smbd(main+0x69b) [0x81cecaf] #11 /lib/libc.so.6(__libc_start_main+0xbb) [0x400ce14f] #12 /usr/sbin/smbd(yp_get_default_domain+0x89) [0x8075101]