The Samba-Bugzilla – Attachment 122 Details for
Bug 273
smbd crashes on changing machine trust password
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
log snapshot
log.inf08b (text/plain), 124.98 KB, created by
Dariush Forouher
on 2003-09-04 11:18:55 UTC
(
hide
)
Description:
log snapshot
Filename:
MIME Type:
Creator:
Dariush Forouher
Created:
2003-09-04 11:18:55 UTC
Size:
124.98 KB
patch
obsolete
>[2003/09/04 20:01:37, 5] auth/auth_util.c:make_user_info_map(216) > make_user_info_map: Mapping user [BRGS]\[vhs] from workstation [INF08B] >[2003/09/04 20:01:37, 4] passdb/secrets.c:secrets_fetch_trust_account_password(255) > Using cleartext machine password >[2003/09/04 20:01:37, 5] libsmb/namecache.c:namecache_fetch(201) > name BRGS#1C found. >[2003/09/04 20:01:37, 4] libsmb/namequery.c:get_dc_list(1350) > get_dc_list: returning 3 ip addresses in an unordered list >[2003/09/04 20:01:37, 4] libsmb/namequery.c:get_dc_list(1351) > get_dc_list: 172.16.0.15:0 172.16.0.1:0 172.16.0.16:0 >[2003/09/04 20:01:37, 5] libsmb/namecache.c:namecache_status_fetch(308) > namecache_status_fetch: no entry for NBT/BRGS#1C.20.172.16.0.15 found. >[2003/09/04 20:01:37, 5] libsmb/nmblib.c:send_udp(744) > Sending a packet of len 50 to (172.16.0.15) on port 137 >[2003/09/04 20:01:37, 5] libsmb/nmblib.c:read_packet(722) > Received a packet of len 211 from (172.16.0.15) port 137 >[2003/09/04 20:01:37, 4] libsmb/nmblib.c:debug_nmb_packet(106) > nmb packet from 172.16.0.15(137) header: id=24975 opcode=Query(0) response=Yes > header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes > header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 > answers: nmb_name=BRGS<1c> rr_type=33 rr_class=1 ttl=0 > answers 0 char .KEPLER hex 064B45504C4552202020202020202020 > answers 10 char .d.KEPLER hex 0064004B45504C455220202020202020 > answers 20 char .d.KEPLER hex 20200364004B45504C45522020202020 > answers 30 char d.BRGS hex 20202020206400425247532020202020 > answers 40 char ...BRGS hex 20202020202000E40042524753202020 > answers 50 char ...BRGS hex 20202020202020201CE4004252475320 > answers 60 char ...... hex 202020202020202020201EE400000000 > answers 70 char ................ hex 00000000000000000000000000000000 > answers 80 char ................ hex 00000000000000000000000000000000 > answers 90 char ........... hex 0000000000000000000000 >[2003/09/04 20:01:37, 3] libsmb/namequery_dc.c:rpc_dc_name(147) > rpc_dc_name: Returning DC KEPLER (172.16.0.15) for domain BRGS >[2003/09/04 20:01:37, 3] libsmb/cliconnect.c:cli_start_connection(1301) > Connecting to host=KEPLER >[2003/09/04 20:01:37, 3] lib/util_sock.c:open_socket_out(690) > Connecting to 172.16.0.15 at port 445 >[2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_KEEPALIVE = 0 >[2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_REUSEADDR = 0 >[2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_BROADCAST = 0 >[2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) > socket option TCP_NODELAY = 1 >[2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) > socket option IPTOS_LOWDELAY = 0 >[2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) > socket option IPTOS_THROUGHPUT = 0 >[2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_SNDBUF = 16384 >[2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_RCVBUF = 87380 >[2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_SNDLOWAT = 1 >[2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_RCVLOWAT = 1 >[2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_SNDTIMEO = 0 >[2003/09/04 20:01:37, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_RCVTIMEO = 0 >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=127 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=3619 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 7 (0x7) > smb_vwv[ 1]=12803 (0x3203) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]=63232 (0xF700) > smb_vwv[ 8]= 34 (0x22) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]=32995 (0x80E3) > smb_vwv[11]= 128 (0x80) > smb_vwv[12]= 685 (0x2AD) > smb_vwv[13]= 3734 (0xE96) > smb_vwv[14]=50035 (0xC373) > smb_vwv[15]=34817 (0x8801) > smb_vwv[16]=15103 (0x3AFF) > smb_bcc=58 >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=127 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=3619 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 7 (0x7) > smb_vwv[ 1]=12803 (0x3203) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]=63232 (0xF700) > smb_vwv[ 8]= 34 (0x22) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]=32995 (0x80E3) > smb_vwv[11]= 128 (0x80) > smb_vwv[12]= 685 (0x2AD) > smb_vwv[13]= 3734 (0xE96) > smb_vwv[14]=50035 (0xC373) > smb_vwv[15]=34817 (0x8801) > smb_vwv[16]=15103 (0x3AFF) > smb_bcc=58 >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=100 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=3619 > smb_uid=100 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=59 >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=100 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=3619 > smb_uid=100 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=59 >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=48 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=3 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=7 >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=4 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=62720 (0xF500) > smb_vwv[ 3]= 372 (0x174) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 0 (0x0) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1310) > Bind RPC Pipe[74f5]: \PIPE\lsarpc >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:valid_pipe_name(1211) > Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg.. > [010] 00 00 00 00 .... >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:valid_pipe_name(1214) > Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` > [010] 02 00 00 00 .... >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr hdr >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 0b >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 0048 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000001 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_rb >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0010 max_tsize: 10b8 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0012 max_rsize: 10b8 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0014 assoc_gid: 00000000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0018 num_elements: 00000001 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 001c context_id : 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 001e num_syntaxes: 01 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0020 data : 12345778 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0024 data : 1234 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0026 data : abcd >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0028 data : ef 00 01 23 45 67 89 ab >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0030 version: 00000000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0034 data : 8a885d04 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0038 data : 1ceb >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 003a data : 11c9 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 003c data : 9f e8 08 00 2b 10 48 60 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0044 version: 00000002 >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) > rpc_api_pipe: fnum:74f5 >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=154 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=5 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 72 (0x48) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 72 (0x48) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29941 (0x74F5) > smb_bcc=87 >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) > rpc_check_hdr: rdata->data_size = 68 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr rpc_hdr >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 0c >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 0044 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000001 >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) > rpc_api_pipe: len left: 0 smbtrans read: 68 >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1375) > rpc_pipe_bind: rpc_api_pipe returned OK. >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_ba >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0010 max_tsize: 10b8 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0012 max_rsize: 10b8 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0014 assoc_gid: 000053f0 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0018 len: 000c >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 001a str: \PIPE\lsass. >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0028 num_results: 01 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 002c result : 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 002e reason : 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0030 data : 8a885d04 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0034 data : 1ceb >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0036 data : 11c9 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0038 data : 9f e8 08 00 2b 10 48 60 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0040 version: 00000002 >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:check_bind_response(1244) > bind_rpc_pipe: server pipe_name found: \PIPE\lsass >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:check_bind_response(1264) > bind_rpc_pipe: accepted! >[2003/09/04 20:01:38, 5] rpc_parse/parse_lsa.c:init_lsa_sec_qos(147) > init_lsa_sec_qos >[2003/09/04 20:01:38, 5] rpc_parse/parse_lsa.c:init_q_open_pol(279) > init_open_pol: attr:0 da:1 >[2003/09/04 20:01:38, 5] rpc_parse/parse_lsa.c:init_lsa_obj_attr(198) > init_lsa_obj_attr >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 lsa_io_q_open_pol >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0000 ptr : 00000001 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0004 system_name: 005c >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0008 len : 00000018 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c ptr_root_dir: 00000000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0010 ptr_obj_name: 00000000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0014 attributes : 00000000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0018 ptr_sec_desc: 00000000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 001c ptr_sec_qos : 00000001 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0020 len : 0000000c >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0024 sec_imp_level : 0002 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0026 sec_ctxt_mode : 01 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0027 effective_only: 00 >[2003/09/04 20:01:38, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(186) > lsa_io_sec_qos: length c does not match size 8 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0028 des_access: 00000001 >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:create_rpc_request(844) > create_rpc_request: opnum: 0x6 data_len: 0x44 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr hdr >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 0044 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000002 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_req hdr_req >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0010 alloc_hint: 00000034 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0014 context_id: 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0016 opnum : 0006 >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) > rpc_api_pipe: fnum:74f5 >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=150 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=6 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 68 (0x44) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29941 (0x74F5) > smb_bcc=83 >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) > rpc_check_hdr: rdata->data_size = 48 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr rpc_hdr >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 02 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 0030 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000002 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0010 alloc_hint: 00000018 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0014 context_id: 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0016 cancel_ct : 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0017 reserved : 00 >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) > rpc_api_pipe: len left: 0 smbtrans read: 48 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000018 lsa_io_r_open_pol >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0018 data1: 00000000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 001c data2: 00000001 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0020 data3: 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0022 data4: 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0024 data5: 02 7e 57 3f f7 22 00 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_ntstatus(664) > 002c status: NT_STATUS_OK >[2003/09/04 20:01:38, 5] rpc_parse/parse_lsa.c:init_q_enum_trust_dom(497) > init_q_enum_trust_dom >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 lsa_io_q_enum_trust_dom >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0000 data1: 00000000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0004 data2: 00000001 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 data3: 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a data4: 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 000c data5: 02 7e 57 3f f7 22 00 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0014 enum_context : 00000000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0018 preferred_len: 00010000 >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:create_rpc_request(844) > create_rpc_request: opnum: 0xd data_len: 0x34 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr hdr >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 0034 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000003 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_req hdr_req >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0010 alloc_hint: 00000024 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0014 context_id: 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0016 opnum : 000d >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) > rpc_api_pipe: fnum:74f5 >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=134 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=7 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 52 (0x34) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 52 (0x34) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29941 (0x74F5) > smb_bcc=67 >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) > rpc_check_hdr: rdata->data_size = 40 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr rpc_hdr >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 02 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 0028 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000003 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0010 alloc_hint: 00000010 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0014 context_id: 0000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0016 cancel_ct : 00 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0017 reserved : 00 >[2003/09/04 20:01:38, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) > rpc_api_pipe: len left: 0 smbtrans read: 40 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000018 lsa_io_r_enum_trust_dom >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0018 enum_context : 00000000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 001c num_domains : 00000000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0020 ptr_enum_domains: 00000000 >[2003/09/04 20:01:38, 5] rpc_parse/parse_prs.c:prs_ntstatus(664) > 0024 status: NT_STATUS_NO_MORE_ENTRIES >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:38, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=8 > smt_wct=0 > smb_bcc=0 >[2003/09/04 20:01:38, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(172) > no entry for trusted domain BRGS found. >[2003/09/04 20:01:38, 5] auth/auth_util.c:make_user_info(132) > attempting to make a user_info for vhs (vhs) >[2003/09/04 20:01:38, 5] auth/auth_util.c:make_user_info(142) > making strings for vhs's user_info struct >[2003/09/04 20:01:38, 5] auth/auth_util.c:make_user_info(184) > making blobs for vhs's user_info struct >[2003/09/04 20:01:38, 3] auth/auth.c:check_ntlm_password(216) > check_ntlm_password: Checking password for unmapped user [BRGS]\[vhs]@[INF08B] with the new password interface >[2003/09/04 20:01:38, 3] auth/auth.c:check_ntlm_password(219) > check_ntlm_password: mapped user is: [BRGS]\[vhs]@[INF08B] >[2003/09/04 20:01:38, 5] lib/util.c:dump_data(1887) > [000] E6 36 58 9E 85 9D EF 61 .6X....a >[2003/09/04 20:01:38, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2003/09/04 20:01:38, 3] smbd/uid.c:push_conn_ctx(287) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2003/09/04 20:01:38, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2003/09/04 20:01:38, 5] auth/auth_util.c:debug_nt_user_token(486) > NT user token: (NULL) >[2003/09/04 20:01:38, 5] auth/auth_util.c:debug_unix_user_token(505) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2003/09/04 20:01:38, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2003/09/04 20:01:38, 4] passdb/secrets.c:secrets_fetch_trust_account_password(255) > Using cleartext machine password >[2003/09/04 20:01:38, 4] passdb/secrets.c:secrets_fetch_trust_account_password(255) > Using cleartext machine password >[2003/09/04 20:01:38, 5] libsmb/namecache.c:namecache_fetch(201) > name BRGS#1C found. >[2003/09/04 20:01:38, 4] libsmb/namequery.c:get_dc_list(1350) > get_dc_list: returning 3 ip addresses in an unordered list >[2003/09/04 20:01:38, 4] libsmb/namequery.c:get_dc_list(1351) > get_dc_list: 172.16.0.15:0 172.16.0.1:0 172.16.0.16:0 >[2003/09/04 20:01:38, 5] libsmb/namecache.c:namecache_status_fetch(308) > namecache_status_fetch: no entry for NBT/BRGS#1C.20.172.16.0.15 found. >[2003/09/04 20:01:38, 5] libsmb/nmblib.c:send_udp(744) > Sending a packet of len 50 to (172.16.0.15) on port 137 >[2003/09/04 20:01:38, 5] libsmb/nmblib.c:read_packet(722) > Received a packet of len 211 from (172.16.0.15) port 137 >[2003/09/04 20:01:38, 4] libsmb/nmblib.c:debug_nmb_packet(106) > nmb packet from 172.16.0.15(137) header: id=20307 opcode=Query(0) response=Yes > header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes > header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 > answers: nmb_name=BRGS<1c> rr_type=33 rr_class=1 ttl=0 > answers 0 char .KEPLER hex 064B45504C4552202020202020202020 > answers 10 char .d.KEPLER hex 0064004B45504C455220202020202020 > answers 20 char .d.KEPLER hex 20200364004B45504C45522020202020 > answers 30 char d.BRGS hex 20202020206400425247532020202020 > answers 40 char ...BRGS hex 20202020202000E40042524753202020 > answers 50 char ...BRGS hex 20202020202020201CE4004252475320 > answers 60 char ...... hex 202020202020202020201EE400000000 > answers 70 char ................ hex 00000000000000000000000000000000 > answers 80 char ................ hex 00000000000000000000000000000000 > answers 90 char ........... hex 0000000000000000000000 >[2003/09/04 20:01:38, 3] libsmb/namequery_dc.c:rpc_dc_name(147) > rpc_dc_name: Returning DC KEPLER (172.16.0.15) for domain BRGS >[2003/09/04 20:01:38, 3] libsmb/cliconnect.c:cli_start_connection(1301) > Connecting to host=KEPLER >[2003/09/04 20:01:38, 3] lib/util_sock.c:open_socket_out(690) > Connecting to 172.16.0.15 at port 445 >[2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_KEEPALIVE = 0 >[2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_REUSEADDR = 0 >[2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_BROADCAST = 0 >[2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) > socket option TCP_NODELAY = 1 >[2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) > socket option IPTOS_LOWDELAY = 0 >[2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) > socket option IPTOS_THROUGHPUT = 0 >[2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_SNDBUF = 16384 >[2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_RCVBUF = 87380 >[2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_SNDLOWAT = 1 >[2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_RCVLOWAT = 1 >[2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_SNDTIMEO = 0 >[2003/09/04 20:01:38, 5] lib/util_sock.c:print_socket_options(105) > socket option SO_RCVTIMEO = 0 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=127 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=3619 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 7 (0x7) > smb_vwv[ 1]=12803 (0x3203) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]=63744 (0xF900) > smb_vwv[ 8]= 34 (0x22) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]=32995 (0x80E3) > smb_vwv[11]=32896 (0x8080) > smb_vwv[12]=39747 (0x9B43) > smb_vwv[13]= 3734 (0xE96) > smb_vwv[14]=50035 (0xC373) > smb_vwv[15]=34817 (0x8801) > smb_vwv[16]=15103 (0x3AFF) > smb_bcc=58 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=127 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=3619 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 7 (0x7) > smb_vwv[ 1]=12803 (0x3203) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]=63744 (0xF900) > smb_vwv[ 8]= 34 (0x22) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]=32995 (0x80E3) > smb_vwv[11]=32896 (0x8080) > smb_vwv[12]=39747 (0x9B43) > smb_vwv[13]= 3734 (0xE96) > smb_vwv[14]=50035 (0xC373) > smb_vwv[15]=34817 (0x8801) > smb_vwv[16]=15103 (0x3AFF) > smb_bcc=58 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=100 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=3619 > smb_uid=100 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=59 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=100 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=3619 > smb_uid=100 > smb_mid=2 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=59 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=48 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=3 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=7 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=4 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=64000 (0xFA00) > smb_vwv[ 3]= 372 (0x174) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 0 (0x0) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1310) > Bind RPC Pipe[74fa]: \PIPE\NETLOGON >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:valid_pipe_name(1211) > Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4... ...#Eg.. > [010] 01 00 00 00 .... >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:valid_pipe_name(1214) > Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` > [010] 02 00 00 00 .... >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr hdr >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 0b >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 0048 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000004 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_rb >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0010 max_tsize: 10b8 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0012 max_rsize: 10b8 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0014 assoc_gid: 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0018 num_elements: 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 001c context_id : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 001e num_syntaxes: 01 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0020 data : 12345678 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0024 data : 1234 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0026 data : abcd >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0028 data : ef 00 01 23 45 67 cf fb >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0030 version: 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0034 data : 8a885d04 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0038 data : 1ceb >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 003a data : 11c9 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 003c data : 9f e8 08 00 2b 10 48 60 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0044 version: 00000002 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) > rpc_api_pipe: fnum:74fa >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=154 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=5 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 72 (0x48) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 72 (0x48) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29946 (0x74FA) > smb_bcc=87 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) > rpc_check_hdr: rdata->data_size = 68 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr rpc_hdr >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 0c >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 0044 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000004 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) > rpc_api_pipe: len left: 0 smbtrans read: 68 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1375) > rpc_pipe_bind: rpc_api_pipe returned OK. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_ba >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0010 max_tsize: 10b8 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0012 max_rsize: 10b8 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0014 assoc_gid: 000053f0 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0018 len: 000c >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 001a str: \PIPE\lsass. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0028 num_results: 01 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 002c result : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 002e reason : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0030 data : 8a885d04 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0034 data : 1ceb >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0036 data : 11c9 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0038 data : 9f e8 08 00 2b 10 48 60 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0040 version: 00000002 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:check_bind_response(1244) > bind_rpc_pipe: server pipe_name found: \PIPE\lsass >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:check_bind_response(1264) > bind_rpc_pipe: accepted! >[2003/09/04 20:01:39, 4] rpc_client/cli_netlogon.c:cli_net_req_chal(45) > cli_net_req_chal: LSA Request Challenge from SIRIUS to KEPLER: 772574D8DC747ABE >[2003/09/04 20:01:39, 5] rpc_parse/parse_net.c:init_q_req_chal(538) > init_q_req_chal: 538 >[2003/09/04 20:01:39, 5] rpc_parse/parse_net.c:init_q_req_chal(547) > init_q_req_chal: 547 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 net_io_q_req_chal >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0000 undoc_buffer: 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0004 uni_max_len: 00000009 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0008 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c uni_str_len: 00000009 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 0010 buffer : \.\.K.E.P.L.E.R... >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0024 uni_max_len: 00000007 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0028 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 002c uni_str_len: 00000007 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 0030 buffer : S.I.R.I.U.S... >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 003e data: 77 25 74 d8 dc 74 7a be >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:create_rpc_request(844) > create_rpc_request: opnum: 0x4 data_len: 0x5e >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr hdr >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 005e >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000005 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_req hdr_req >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0010 alloc_hint: 0000004e >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0014 context_id: 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0016 opnum : 0004 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) > rpc_api_pipe: fnum:74fa >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=176 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=6 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 94 (0x5E) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 94 (0x5E) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29946 (0x74FA) > smb_bcc=109 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=92 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=37 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=92 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 36 (0x24) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=37 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) > rpc_check_hdr: rdata->data_size = 36 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr rpc_hdr >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 02 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 0024 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000005 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0010 alloc_hint: 0000000c >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0014 context_id: 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0016 cancel_ct : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0017 reserved : 00 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) > rpc_api_pipe: len left: 0 smbtrans read: 36 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000018 net_io_r_req_chal >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0018 data: d8 65 8f 58 a7 81 cf a7 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_ntstatus(664) > 0020 status: NT_STATUS_OK >[2003/09/04 20:01:39, 4] libsmb/credentials.c:cred_session_key(59) > cred_session_key >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_session_key(61) > clnt_chal: 772574D8DC747ABE >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_session_key(62) > srv_chal : D8658F58A781CFA7 >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_session_key(63) > clnt+srv : 4F8B033183F64966 >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_session_key(64) > sess_key : 13782034EDC0EF02 >[2003/09/04 20:01:39, 4] libsmb/credentials.c:cred_create(90) > cred_create >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(92) > sess_key : 13782034EDC0EF02 >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(93) > stor_cred: 772574D8DC747ABE >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(94) > timestamp: 0 >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(95) > timecred : 772574D8DC747ABE >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(96) > calc_cred: 3CEDBDFCE446B6B7 >[2003/09/04 20:01:39, 4] rpc_client/cli_netlogon.c:cli_net_auth2(102) > cli_net_auth2: srv:\\KEPLER acct:SIRIUS$ sc:2 mc: SIRIUS chal 3CEDBDFCE446B6B7 neg: 400701ff >[2003/09/04 20:01:39, 5] rpc_parse/parse_net.c:init_q_auth_2(659) > init_q_auth_2: 659 >[2003/09/04 20:01:39, 5] rpc_parse/parse_misc.c:init_log_info(1283) > make_log_info 1283 >[2003/09/04 20:01:39, 5] rpc_parse/parse_net.c:init_q_auth_2(665) > init_q_auth_2: 665 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 net_io_q_auth_2 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0000 undoc_buffer: 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0004 uni_max_len: 00000009 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0008 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c uni_str_len: 00000009 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 0010 buffer : \.\.K.E.P.L.E.R... >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0024 uni_max_len: 00000008 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0028 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 002c uni_str_len: 00000008 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 0030 buffer : S.I.R.I.U.S.$... >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0040 sec_chan: 0002 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0044 uni_max_len: 00000007 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0048 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 004c uni_str_len: 00000007 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 0050 buffer : S.I.R.I.U.S... >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 005e data: 3c ed bd fc e4 46 b6 b7 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0068 neg_flags: 400701ff >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:create_rpc_request(844) > create_rpc_request: opnum: 0xf data_len: 0x84 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr hdr >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 0084 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000006 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_req hdr_req >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0010 alloc_hint: 00000074 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0014 context_id: 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0016 opnum : 000f >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) > rpc_api_pipe: fnum:74fa >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=214 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=7 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 132 (0x84) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 132 (0x84) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29946 (0x74FA) > smb_bcc=147 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=96 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=41 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) > rpc_check_hdr: rdata->data_size = 40 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr rpc_hdr >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 02 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 0028 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000006 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0010 alloc_hint: 00000010 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0014 context_id: 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0016 cancel_ct : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0017 reserved : 00 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) > rpc_api_pipe: len left: 0 smbtrans read: 40 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000018 net_io_r_auth_2 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0018 data: b7 26 5c 75 d3 cc 95 7d >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0020 neg_flags: 400001ff >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_ntstatus(664) > 0024 status: NT_STATUS_OK >[2003/09/04 20:01:39, 4] libsmb/credentials.c:cred_create(90) > cred_create >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(92) > sess_key : 13782034EDC0EF02 >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(93) > stor_cred: D8658F58A781CFA7 >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(94) > timestamp: 0 >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(95) > timecred : D8658F58A781CFA7 >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(96) > calc_cred: B7265C75D3CC957D >[2003/09/04 20:01:39, 4] libsmb/credentials.c:cred_assert(121) > cred_assert >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_assert(123) > challenge : B7265C75D3CC957D >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_assert(124) > calculated: B7265C75D3CC957D >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_assert(128) > credentials check ok >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=8 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]=64256 (0xFB00) > smb_vwv[ 3]= 372 (0x174) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 0 (0x0) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1310) > Bind RPC Pipe[74fb]: \PIPE\NETLOGON >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:valid_pipe_name(1211) > Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4... ...#Eg.. > [010] 01 00 00 00 .... >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:valid_pipe_name(1214) > Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` > [010] 02 00 00 00 .... >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr_auth hdr_auth >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 auth_type : 44 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 auth_level : 06 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 padding : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 reserved : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0004 auth_context : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000008 smb_io_rpc_auth_netsec_neg netsec_neg >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0008 type1: 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c type2: 00000003 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr hdr >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 0b >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 0064 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 0014 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000007 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_rb >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0010 max_tsize: 10b8 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0012 max_rsize: 10b8 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0014 assoc_gid: 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0018 num_elements: 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 001c context_id : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 001e num_syntaxes: 01 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0020 data : 12345678 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0024 data : 1234 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0026 data : abcd >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0028 data : ef 00 01 23 45 67 cf fb >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0030 version: 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0034 data : 8a885d04 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0038 data : 1ceb >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 003a data : 11c9 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 003c data : 9f e8 08 00 2b 10 48 60 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0044 version: 00000002 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) > rpc_api_pipe: fnum:74fb >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=182 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=9 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 100 (0x64) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 100 (0x64) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29947 (0x74FB) > smb_bcc=115 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=144 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=9 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 88 (0x58) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 88 (0x58) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=89 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=144 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=9 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 88 (0x58) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 88 (0x58) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=89 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) > rpc_check_hdr: rdata->data_size = 88 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr rpc_hdr >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 0c >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 0058 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 000c >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000007 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) > rpc_api_pipe: len left: 0 smbtrans read: 88 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(210) > rpc_auth_pipe: pkt_type: 12 len: 88 auth_len: 12 NTLMSSP No schannel Yes sign Yes seal Yes >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr_auth auth_hdr >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 auth_type : 44 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 auth_level : 06 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 padding : 08 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 reserved : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0004 auth_context : 00000001 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1375) > rpc_pipe_bind: rpc_api_pipe returned OK. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_ba >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0010 max_tsize: 10b8 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0012 max_rsize: 10b8 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0014 assoc_gid: 000053f0 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0018 len: 000c >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 001a str: \PIPE\lsass. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0028 num_results: 01 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 002c result : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 002e reason : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0030 data : 8a885d04 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0034 data : 1ceb >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0036 data : 11c9 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0038 data : 9f e8 08 00 2b 10 48 60 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0040 version: 00000002 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:check_bind_response(1244) > bind_rpc_pipe: server pipe_name found: \PIPE\lsass >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:check_bind_response(1264) > bind_rpc_pipe: accepted! >[2003/09/04 20:01:39, 4] libsmb/credentials.c:cred_create(90) > cred_create >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(92) > sess_key : 13782034EDC0EF02 >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(93) > stor_cred: 3CEDBDFCE446B6B7 >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(94) > timestamp: 3f577e03 >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(95) > timecred : 3F6B153CE446B6B7 >[2003/09/04 20:01:39, 5] libsmb/credentials.c:cred_create(96) > calc_cred: 04D1CA5B106073A5 >[2003/09/04 20:01:39, 5] rpc_parse/parse_net.c:init_id_info2(1050) > init_id_info2: 1050 >[2003/09/04 20:01:39, 5] rpc_parse/parse_misc.c:init_logon_id(1462) > make_logon_id: 1462 >[2003/09/04 20:01:39, 5] rpc_parse/parse_net.c:init_sam_info(1157) > init_sam_info: 1157 >[2003/09/04 20:01:39, 5] rpc_parse/parse_misc.c:init_clnt_info2(1377) > make_clnt_info: 1377 >[2003/09/04 20:01:39, 5] rpc_parse/parse_misc.c:init_clnt_srv(1222) > init_clnt_srv: 1222 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 net_io_q_sam_logon >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0000 undoc_buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0004 uni_max_len: 00000009 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0008 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c uni_str_len: 00000009 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 0010 buffer : \.\.K.E.P.L.E.R... >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0024 undoc_buffer2: 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0028 uni_max_len: 00000007 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 002c undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0030 uni_str_len: 00000007 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 0034 buffer : S.I.R.I.U.S... >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0044 ptr_cred: 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0048 data: 04 d1 ca 5b 10 60 73 a5 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0050 time: 3f577e03 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0054 ptr_rtn_cred : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0058 data: 00 00 00 00 00 00 00 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0060 time: 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0064 logon_level : 0002 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0066 switch_value : 0002 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0068 ptr_id_info2: 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 006c uni_str_len: 0008 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 006e uni_max_len: 0008 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0070 buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0074 param_ctrl: 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0078 low : 0000dead >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 007c high: 0000beef >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0080 uni_str_len: 0006 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0082 uni_max_len: 0006 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0084 buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0088 uni_str_len: 0010 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 008a uni_max_len: 0010 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 008c buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0090 lm_chal: e6 36 58 9e 85 9d ef 61 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0098 str_str_len: 0018 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 009a str_max_len: 0018 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 009c buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 00a0 str_str_len: 0018 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 00a2 str_max_len: 0018 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00a4 buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00a8 uni_max_len: 00000004 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00ac undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00b0 uni_str_len: 00000004 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 00b4 buffer : B.R.G.S. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00bc uni_max_len: 00000003 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00c0 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00c4 uni_str_len: 00000003 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 00c8 buffer : v.h.s. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00d0 uni_max_len: 00000008 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00d4 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00d8 uni_str_len: 00000008 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 00dc buffer : \.\.I.N.F.0.8.B. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00ec str_max_len: 00000018 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00f0 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00f4 str_str_len: 00000018 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_string2(960) > 00f8 buffer : U... z....+..H..Z....R.Y >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0110 str_max_len: 00000018 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0114 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0118 str_str_len: 00000018 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_string2(960) > 011c buffer : d....i....oS..'....`.... >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0134 validation_level: 0003 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000138 smb_io_rpc_hdr_auth hdr_auth >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0138 auth_type : 44 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0139 auth_level : 06 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 013a padding : 02 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 013b reserved : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 013c auth_context : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000140 smb_io_rpc_auth_netsec_chk >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0140 sig : 77 00 7a 00 ff ff 00 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0148 seq_num: fa 3a 47 af 44 a6 a1 fd >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0150 packet_digest: 5a ae 98 1f 55 31 27 fb >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0158 data8: 49 2a 89 90 c2 29 40 13 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:create_rpc_request(844) > create_rpc_request: opnum: 0x2 data_len: 0x178 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr hdr >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 0178 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 0020 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000008 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_req hdr_req >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0010 alloc_hint: 00000140 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0014 context_id: 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0016 opnum : 0002 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) > rpc_api_pipe: fnum:74fb >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=458 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=10 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 376 (0x178) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 376 (0x178) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=29947 (0x74FB) > smb_bcc=391 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=732 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=10 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 676 (0x2A4) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 676 (0x2A4) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=677 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=732 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=10 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 676 (0x2A4) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 676 (0x2A4) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=677 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) > rpc_check_hdr: rdata->data_size = 676 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr rpc_hdr >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 major : 05 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 minor : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 pkt_type : 02 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 flags : 03 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0004 pack_type0: 10 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0005 pack_type1: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0006 pack_type2: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0007 pack_type3: 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0008 frag_len : 02a4 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 000a auth_len : 0020 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c call_id : 00000008 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0010 alloc_hint: 00000264 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0014 context_id: 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0016 cancel_ct : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0017 reserved : 00 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) > rpc_api_pipe: len left: 0 smbtrans read: 676 >[2003/09/04 20:01:39, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(210) > rpc_auth_pipe: pkt_type: 2 len: 676 auth_len: 32 NTLMSSP No schannel Yes sign Yes seal Yes >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000000 smb_io_rpc_hdr_auth auth_hdr >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0000 auth_type : 44 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0001 auth_level : 06 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0002 padding : 08 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0003 reserved : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0004 auth_context : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0008 sig : 77 00 7a 00 ff ff 00 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0010 seq_num: a7 9e ec cc 83 d2 c4 69 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0018 packet_digest: e9 8c 7b 51 ce 78 46 85 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0020 data8: 40 14 e8 e1 33 5a 04 a1 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000018 net_io_r_sam_logon >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0018 buffer_creds: 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 001c data: 03 8b 6c c8 be 77 6c 1d >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0024 time: 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0028 switch_value: 0003 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 002c ptr_user_info : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0030 low : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0034 high: 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0038 low : ffffffff >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 003c high: 7fffffff >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0040 low : ffffffff >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0044 high: 7fffffff >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0048 low : cd931d00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 004c high: 01c37187 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0050 low : 43b7c800 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0054 high: 01d5c01d >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0058 low : 3e29b500 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 005c high: 01c3fef1 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0060 uni_str_len: 0006 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0062 uni_max_len: 0006 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0064 buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0068 uni_str_len: 0016 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 006a uni_max_len: 0016 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 006c buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0070 uni_str_len: 005a >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0072 uni_max_len: 005a >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0074 buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0078 uni_str_len: 0032 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 007a uni_max_len: 0032 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 007c buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0080 uni_str_len: 0018 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0082 uni_max_len: 0018 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0084 buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0088 uni_str_len: 0004 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 008a uni_max_len: 0004 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 008c buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0090 logon_count : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0092 bad_pw_count : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0094 user_rid : 00006df2 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0098 group_rid : 00000bcf >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 009c num_groups : 00000003 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00a0 buffer_groups : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00a4 user_flgs : 00000020 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 00a8 user_sess_key: 99 43 c4 3e 0a 4e a6 ba c5 56 dc 1e 60 50 fc 5f >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 00b8 uni_str_len: 000c >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 00ba uni_max_len: 000c >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00bc buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 00c0 uni_str_len: 0008 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 00c2 uni_max_len: 0008 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00c4 buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00c8 buffer_dom_id : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 00cc padding : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00f4 num_other_sids: 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00f8 buffer_other_sids: 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00fc uni_max_len: 00000003 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0100 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0104 uni_str_len: 00000003 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 0108 buffer : v.h.s. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0110 uni_max_len: 0000000b >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0114 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0118 uni_str_len: 0000000b >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 011c buffer : K.V.H.S.-.U.s.e.r. .1. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0134 uni_max_len: 0000002d >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0138 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 013c uni_str_len: 0000002d >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 0140 buffer : t.e.m.p.s.c.r.i.p.t.s.\.v.h.s.-.1.7.2...1.6...0...1.2.-.8.9.5.3.-.n.e.t.l.o.g.o.n...b.a.t. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 019c uni_max_len: 00000019 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01a0 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01a4 uni_str_len: 00000019 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 01a8 buffer : \.\.c.a.s.s.i.o.p.e.i.a.\.p.r.o.f.i.l.e.s.\.v.h.s. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01dc uni_max_len: 0000000c >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01e0 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01e4 uni_str_len: 0000000c >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 01e8 buffer : \.\.s.i.r.i.u.s.\.v.h.s. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0200 uni_max_len: 00000002 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0204 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0208 uni_str_len: 00000002 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 020c buffer : h.:. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0210 num_groups2 : 00000003 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0214 g_rid: 00000bcf >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0218 attr : 00000007 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 021c g_rid: 00000be9 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0220 attr : 00000007 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0224 g_rid: 00000201 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0228 attr : 00000007 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 022c uni_max_len: 00000006 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0230 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0234 uni_str_len: 00000006 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 0238 buffer : K.E.P.L.E.R. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0244 uni_max_len: 00000004 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0248 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 024c uni_str_len: 00000004 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 0250 buffer : B.R.G.S. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0258 num_auths: 00000004 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 025c sid_rev_num: 01 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 025d num_auths : 04 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 025e id_auth[0] : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 025f id_auth[1] : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0260 id_auth[2] : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0261 id_auth[3] : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0262 id_auth[4] : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0263 id_auth[5] : 05 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32s(861) > 0264 sub_auths : 00000015 c10abe02 2f16ac30 5137a1ee >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0274 auth_resp : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_ntstatus(664) > 0278 status : NT_STATUS_OK >[2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam(288) > Finding user BRGS\vhs >[2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(223) > Trying _Get_Pwnam(), username as lowercase is brgs\vhs >[2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(230) > Trying _Get_Pwnam(), username as given is BRGS\vhs >[2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(239) > Trying _Get_Pwnam(), username as uppercase is BRGS\VHS >[2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(247) > Checking combinations of 0 uppercase letters in brgs\vhs >[2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(251) > Get_Pwnam_internals didn't find user [BRGS\vhs]! >[2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam(288) > Finding user vhs >[2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(223) > Trying _Get_Pwnam(), username as lowercase is vhs >[2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(251) > Get_Pwnam_internals did find user [vhs]! >[2003/09/04 20:01:39, 4] lib/substitute.c:automount_server(318) > Home server: sirius >[2003/09/04 20:01:39, 4] lib/substitute.c:automount_server(318) > Home server: sirius >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2003/09/04 20:01:39, 3] smbd/uid.c:push_conn_ctx(287) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(486) > NT user token: (NULL) >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) > UNIX token of user 1573 > Primary group is 1011 and contains 4 supplementary groups > Group[ 0]: 1011 > Group[ 1]: 1011 > Group[ 2]: 1024 > Group[ 3]: 1022 >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2003/09/04 20:01:39, 3] smbd/uid.c:push_conn_ctx(287) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(486) > NT user token: (NULL) >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2003/09/04 20:01:39, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(235) > fetch sid from gid cache 1011 -> S-1-5-21-2761192381-945399086-3711840165-3023 >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2003/09/04 20:01:39, 3] smbd/uid.c:push_conn_ctx(287) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(486) > NT user token: (NULL) >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2003/09/04 20:01:39, 3] smbd/uid.c:push_conn_ctx(287) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(486) > NT user token: (NULL) >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0000 timestamp: 3f577e03 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_debug(81) > 000004 net_io_user_info3 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0004 ptr_user_info : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0008 low : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 000c high: 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0010 low : ffffffff >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0014 high: 7fffffff >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0018 low : ffffffff >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 001c high: 7fffffff >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0020 low : cd931d00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0024 high: 01c37187 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0028 low : 43b7c800 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 002c high: 01d5c01d >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0030 low : 3e29b500 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0034 high: 01c3fef1 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0038 uni_str_len: 0006 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 003a uni_max_len: 0006 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 003c buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0040 uni_str_len: 0016 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0042 uni_max_len: 0016 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0044 buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0048 uni_str_len: 005a >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 004a uni_max_len: 005a >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 004c buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0050 uni_str_len: 0032 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0052 uni_max_len: 0032 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0054 buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0058 uni_str_len: 0018 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 005a uni_max_len: 0018 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 005c buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0060 uni_str_len: 0004 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0062 uni_max_len: 0004 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0064 buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0068 logon_count : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 006a bad_pw_count : 0000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 006c user_rid : 00006df2 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0070 group_rid : 00000bcf >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0074 num_groups : 00000003 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0078 buffer_groups : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 007c user_flgs : 00000020 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 0080 user_sess_key: 4f b6 76 22 8e bb 16 63 d5 1b 41 f9 9e 63 11 a3 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0090 uni_str_len: 000c >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0092 uni_max_len: 000c >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0094 buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 0098 uni_str_len: 0008 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint16(605) > 009a uni_max_len: 0008 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 009c buffer : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00a0 buffer_dom_id : 00000001 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721) > 00a4 padding : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00cc num_other_sids: 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00d0 buffer_other_sids: 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00d4 uni_max_len: 00000003 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00d8 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00dc uni_str_len: 00000003 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 00e0 buffer : v.h.s. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00e8 uni_max_len: 0000000b >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00ec undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 00f0 uni_str_len: 0000000b >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 00f4 buffer : K.V.H.S.-.U.s.e.r. .1. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 010c uni_max_len: 0000002d >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0110 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0114 uni_str_len: 0000002d >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 0118 buffer : t.e.m.p.s.c.r.i.p.t.s.\.v.h.s.-.1.7.2...1.6...0...1.2.-.8.9.5.3.-.n.e.t.l.o.g.o.n...b.a.t. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0174 uni_max_len: 00000019 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0178 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 017c uni_str_len: 00000019 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 0180 buffer : \.\.c.a.s.s.i.o.p.e.i.a.\.p.r.o.f.i.l.e.s.\.v.h.s. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01b4 uni_max_len: 0000000c >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01b8 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01bc uni_str_len: 0000000c >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 01c0 buffer : \.\.s.i.r.i.u.s.\.v.h.s. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01d8 uni_max_len: 00000002 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01dc undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01e0 uni_str_len: 00000002 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 01e4 buffer : h.:. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01e8 num_groups2 : 00000003 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01ec g_rid: 00000bcf >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01f0 attr : 00000007 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01f4 g_rid: 00000be9 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01f8 attr : 00000007 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 01fc g_rid: 00000201 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0200 attr : 00000007 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0204 uni_max_len: 00000006 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0208 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 020c uni_str_len: 00000006 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 0210 buffer : K.E.P.L.E.R. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 021c uni_max_len: 00000004 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0220 undoc : 00000000 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0224 uni_str_len: 00000004 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) > 0228 buffer : B.R.G.S. >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32(634) > 0230 num_auths: 00000004 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0234 sid_rev_num: 01 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0235 num_auths : 04 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0236 id_auth[0] : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0237 id_auth[1] : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0238 id_auth[2] : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 0239 id_auth[3] : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 023a id_auth[4] : 00 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint8(576) > 023b id_auth[5] : 05 >[2003/09/04 20:01:39, 5] rpc_parse/parse_prs.c:prs_uint32s(861) > 023c sub_auths : 00000015 c10abe02 2f16ac30 5137a1ee >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=11 > smt_wct=0 > smb_bcc=0 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=39 > smb_com=0x74 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=3619 > smb_uid=100 > smb_mid=12 > smt_wct=2 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_bcc=0 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x4 > smb_rcls=202 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=3619 > smb_uid=100 > smb_mid=13 > smt_wct=0 > smb_bcc=0 >[2003/09/04 20:01:39, 3] auth/auth.c:check_ntlm_password(265) > check_ntlm_password: winbind authentication for user [vhs] succeeded >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:push_sec_ctx(256) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2003/09/04 20:01:39, 3] smbd/uid.c:push_conn_ctx(287) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(486) > NT user token: (NULL) >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:pop_sec_ctx(386) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2003/09/04 20:01:39, 5] auth/auth.c:check_ntlm_password(289) > check_ntlm_password: PAM Account for user [vhs] succeeded >[2003/09/04 20:01:39, 2] auth/auth.c:check_ntlm_password(302) > check_ntlm_password: authentication for user [vhs] -> [vhs] -> [vhs] succeeded >[2003/09/04 20:01:39, 5] auth/auth_util.c:free_user_info(1185) > attempting to free (and zero) a user_info structure >[2003/09/04 20:01:39, 3] smbd/password.c:register_vuid(204) > User name: vhs Real name: KVHS-User 1 >[2003/09/04 20:01:39, 3] smbd/password.c:register_vuid(222) > UNIX uid 1573 is UNIX user vhs, and will be vuid 100 >[2003/09/04 20:01:39, 2] smbd/utmp.c:sys_utmp_update(419) > utmp_update: uname:/var/run/utmp wname:/var/log/wtmp >[2003/09/04 20:01:39, 3] smbd/password.c:register_vuid(238) > Adding/updating homes service for user 'vhs' using home directory: '/home/gaeste/vhs' >[2003/09/04 20:01:39, 3] param/loadparm.c:lp_add_home(2319) > adding home's share [vhs] for user 'vhs' at '/home/gaeste/vhs' >[2003/09/04 20:01:39, 3] smbd/process.c:process_smb(890) > Transaction 3 of length 80 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=76 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=100 > smb_mid=27072 > smt_wct=4 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 76 (0x4C) > smb_vwv[ 2]= 8 (0x8) > smb_vwv[ 3]= 1 (0x1) > smb_bcc=33 >[2003/09/04 20:01:39, 3] smbd/process.c:switch_message(685) > switch message SMBtconX (pid 3619) >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(486) > NT user token: (NULL) >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2003/09/04 20:01:39, 5] smbd/uid.c:change_to_root_user(218) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2003/09/04 20:01:39, 4] smbd/reply.c:reply_tcon_and_X(266) > Client requested device type [?????] for share [VHS] >[2003/09/04 20:01:39, 5] smbd/service.c:make_connection(824) > making a connection to 'homes' service [VHS] created at session setup time >[2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam(288) > Finding user vhs >[2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(223) > Trying _Get_Pwnam(), username as lowercase is vhs >[2003/09/04 20:01:39, 5] lib/username.c:Get_Pwnam_internals(251) > Get_Pwnam_internals did find user [vhs]! >[2003/09/04 20:01:39, 3] smbd/service.c:make_connection_snum(536) > Connect path is '/home/gaeste/vhs' for service [vhs] >[2003/09/04 20:01:39, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) > get_share_security: using default secdesc for vhs >[2003/09/04 20:01:39, 3] lib/util_seaccess.c:se_access_check(267) >[2003/09/04 20:01:39, 3] lib/util_seaccess.c:se_access_check(268) > se_access_check: user sid is S-1-5-21-3238706690-790015024-1362600430-28146 > se_access_check: also S-1-5-21-3238706690-790015024-1362600430-3023 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-21-3238706690-790015024-1362600430-3049 > se_access_check: also S-1-5-21-3238706690-790015024-1362600430-513 >[2003/09/04 20:01:39, 5] lib/util_seaccess.c:se_access_check(325) > se_access_check: access (2) granted. >[2003/09/04 20:01:39, 3] smbd/vfs.c:vfs_init_default(201) > Initialising default vfs hooks >[2003/09/04 20:01:39, 5] smbd/connection.c:claim_connection(170) > claiming vhs 0 >[2003/09/04 20:01:39, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) > get_share_security: using default secdesc for vhs >[2003/09/04 20:01:39, 3] lib/util_seaccess.c:se_access_check(267) >[2003/09/04 20:01:39, 3] lib/util_seaccess.c:se_access_check(268) > se_access_check: user sid is S-1-5-21-3238706690-790015024-1362600430-28146 > se_access_check: also S-1-5-21-3238706690-790015024-1362600430-3023 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-21-3238706690-790015024-1362600430-3049 > se_access_check: also S-1-5-21-3238706690-790015024-1362600430-513 >[2003/09/04 20:01:39, 5] lib/util_seaccess.c:se_access_check(325) > se_access_check: access (2) granted. >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (1573, 1011) - sec_ctx_stack_ndx = 0 >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(491) > NT user token of user S-1-5-21-3238706690-790015024-1362600430-28146 > contains 7 SIDs > SID[ 0]: S-1-5-21-3238706690-790015024-1362600430-28146 > SID[ 1]: S-1-5-21-3238706690-790015024-1362600430-3023 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-3238706690-790015024-1362600430-3049 > SID[ 6]: S-1-5-21-3238706690-790015024-1362600430-513 >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) > UNIX token of user 1573 > Primary group is 1011 and contains 4 supplementary groups > Group[ 0]: 1011 > Group[ 1]: 1011 > Group[ 2]: 1024 > Group[ 3]: 1022 >[2003/09/04 20:01:39, 5] smbd/uid.c:change_to_user(203) > change_to_user uid=(0,1573) gid=(0,1011) >[2003/09/04 20:01:39, 1] smbd/service.c:make_connection_snum(692) > inf08b (172.16.2.8) connect to service vhs initially as user vhs (uid=1573, gid=1011) (pid 3619) >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(486) > NT user token: (NULL) >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2003/09/04 20:01:39, 5] smbd/uid.c:change_to_root_user(218) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2003/09/04 20:01:39, 3] smbd/reply.c:reply_tcon_and_X(314) > tconX service=VHS >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=54 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=65279 > smb_uid=100 > smb_mid=27072 > smt_wct=3 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 1 (0x1) > smb_bcc=13 >[2003/09/04 20:01:39, 3] smbd/process.c:process_smb(890) > Transaction 4 of length 106 >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=102 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=1040 > smb_uid=100 > smb_mid=27136 > smt_wct=15 > smb_vwv[ 0]= 34 (0x22) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 34 (0x22) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=37 >[2003/09/04 20:01:39, 3] smbd/process.c:switch_message(685) > switch message SMBtrans2 (pid 3619) >[2003/09/04 20:01:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (1573, 1011) - sec_ctx_stack_ndx = 0 >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_nt_user_token(491) > NT user token of user S-1-5-21-3238706690-790015024-1362600430-28146 > contains 7 SIDs > SID[ 0]: S-1-5-21-3238706690-790015024-1362600430-28146 > SID[ 1]: S-1-5-21-3238706690-790015024-1362600430-3023 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > SID[ 5]: S-1-5-21-3238706690-790015024-1362600430-3049 > SID[ 6]: S-1-5-21-3238706690-790015024-1362600430-513 >[2003/09/04 20:01:39, 5] auth/auth_util.c:debug_unix_user_token(505) > UNIX token of user 1573 > Primary group is 1011 and contains 4 supplementary groups > Group[ 0]: 1011 > Group[ 1]: 1011 > Group[ 2]: 1024 > Group[ 3]: 1022 >[2003/09/04 20:01:39, 5] smbd/uid.c:change_to_user(203) > change_to_user uid=(0,1573) gid=(0,1011) >[2003/09/04 20:01:39, 4] smbd/vfs.c:vfs_ChDir(611) > vfs_ChDir to /home/gaeste/vhs >[2003/09/04 20:01:39, 3] smbd/trans2.c:call_trans2qfilepathinfo(1901) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 >[2003/09/04 20:01:39, 5] smbd/filename.c:unix_convert(114) > unix_convert called on file "\WINSPOOL.DRV" >[2003/09/04 20:01:39, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [/WINSPOOL.DRV] >[2003/09/04 20:01:39, 5] smbd/filename.c:unix_convert(188) > unix_convert begin: name = WINSPOOL.DRV, dirpath = , start = WINSPOOL.DRV >[2003/09/04 20:01:39, 5] smbd/filename.c:unix_convert(323) > New file WINSPOOL.DRV >[2003/09/04 20:01:39, 3] lib/util.c:unix_clean_name(580) > unix_clean_name [WINSPOOL.DRV] >[2003/09/04 20:01:39, 3] smbd/trans2.c:call_trans2qfilepathinfo(1920) > call_trans2qfilepathinfo: SMB_VFS_STAT of WINSPOOL.DRV failed (No such file or directory) >[2003/09/04 20:01:39, 3] smbd/error.c:error_packet(94) > error string = No such file or directory >[2003/09/04 20:01:39, 3] smbd/error.c:error_packet(113) > error packet at smbd/trans2.c(1794) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(456) >[2003/09/04 20:01:39, 5] lib/util.c:show_msg(466) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=51265 > smb_tid=1 > smb_pid=1040 > smb_uid=100 > smb_mid=27136 > smt_wct=0 > smb_bcc=0 >[2003/09/04 20:02:39, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2003/09/04 20:02:39, 5] auth/auth_util.c:debug_nt_user_token(486) > NT user token: (NULL) >[2003/09/04 20:02:39, 5] auth/auth_util.c:debug_unix_user_token(505) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2003/09/04 20:02:39, 5] smbd/uid.c:change_to_root_user(218) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2003/09/04 20:02:39, 4] passdb/secrets.c:secrets_fetch_trust_account_password(255) > Using cleartext machine password >[2003/09/04 20:02:39, 5] smbd/change_trust_pw.c:change_trust_account_password(39) > change_trust_account_password: Attempting to change trust account password in domain BRGS.... >[2003/09/04 20:02:39, 5] libsmb/namecache.c:namecache_fetch(201) > name BRGS#1B found. >[2003/09/04 20:02:39, 5] libsmb/namecache.c:namecache_status_fetch(314) > namecache_status_fetch: key NBT/BRGS#1B.20.172.16.0.1 -> ALDEBARAN >[2003/09/04 20:02:39, 0] lib/fault.c:fault_report(36) > =============================================================== >[2003/09/04 20:02:39, 0] lib/fault.c:fault_report(37) > INTERNAL ERROR: Signal 11 in pid 3619 (CVS 3.0.0rc3) > Please read the appendix Bugs of the Samba HOWTO collection >[2003/09/04 20:02:39, 0] lib/fault.c:fault_report(39) > =============================================================== >[2003/09/04 20:02:39, 0] lib/util.c:smb_panic(1462) > PANIC: internal error >[2003/09/04 20:02:39, 0] lib/util.c:smb_panic(1469) > BACKTRACE: 13 stack frames: > #0 /usr/sbin/smbd(smb_panic+0x16b) [0x8180eb3] > #1 /usr/sbin/smbd [0x8171e83] > #2 /usr/sbin/smbd [0x8171ed5] > #3 /lib/libc.so.6 [0x400de6b8] > #4 /usr/sbin/smbd(make_nmb_name+0x2b) [0x80e1aa3] > #5 /usr/sbin/smbd(cli_start_connection+0x75) [0x80c5275] > #6 /usr/sbin/smbd(cli_full_connection+0x4b) [0x80c55d3] > #7 /usr/sbin/smbd(change_trust_account_password+0x146) [0x80bd226] > #8 /usr/sbin/smbd [0x80b8934] > #9 /usr/sbin/smbd(smbd_process+0x152) [0x80b8af2] > #10 /usr/sbin/smbd(main+0x69b) [0x81cecaf] > #11 /lib/libc.so.6(__libc_start_main+0xbb) [0x400ce14f] > #12 /usr/sbin/smbd(yp_get_default_domain+0x89) [0x8075101]
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 273
: 122 |
125
|
132